From 4105fc9bcaa770f757fb13eef3995919eb135c44 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:17:20 +0100 Subject: [PATCH 01/28] docs(DT64-0): versioned DTO predicate adapter charter and staged gates --- ...-dt64-holographic-predicate-capstone-v1.md | 94 +++++++++++++++++++ 1 file changed, 94 insertions(+) create mode 100644 .claude/plans/d-dt64-holographic-predicate-capstone-v1.md diff --git a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md new file mode 100644 index 000000000..3e5e8b2cc --- /dev/null +++ b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md @@ -0,0 +1,94 @@ +# D-DT64-0: Versioned DTO Predicate Adapter, 64-slot registry and holographic relational access + +**Date:** 2026-10-26. **Status:** DESIGN / docs only. **Decision:** user requests detailed staged PR plans, mappings, falsifiers and EXO-50/.claude coordination. **NOT a production ABI approval.** +**Owner:** DT64 predicate mapping and evidence contract; coordinate existing source owners via EXO-50 before any code. +**References:** [D-QR-CAP / EXO-121](https://linear.app/exo-red/issue/EXO-121), [D-QR-IAM / EXO-123](https://linear.app/exo-red/issue/EXO-123), [D-QR-SAP / EXO-122](https://linear.app/exo-red/issue/EXO-122), [D-QSP / EXO-126](https://linear.app/exo-red/issue/EXO-126), [D-DRMC / EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-46](https://linear.app/exo-red/issue/EXO-46), [EXO-148](https://linear.app/exo-red/issue/EXO-148), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152), [EXO-50](https://linear.app/exo-red/issue/EXO-50); [#1792](https://github.com/AdaWorldAPI/lance-graph/pull/1792). + +## Thesis and precise terminology + +DT64 = **DTO Tensor 64**, a versioned *semantic adapter plate*: register up to 64 separately typed Boolean predicate mappings in a stable ordered catalogue. Source DTOs from IAM/AD/Entra/Exchange, Odoo and SAP bind into witnessed canonical identities, typed predicates and borrowed lanes. Quack / relalg / R2IL / mask-risc / ndarray operate over admitted native data. DT64 is **not** a replacement database, copied global entity table, new executor, or inference from similar field names. + +The proposed `R_v[s,p,o]` is a Boolean relation **only after** source+owner identity, coordinate map, codebook generation, presence, permission and frame consistency are proven. Predicate `p` is a typed semantics tag, not an Odoo field number, ClassId, palette index, thought slot, or universal property-id assertion. The 64-slot registry is a *logical* bound for a pilot, with 0..63 stable ordinals by version; it does **not** itself decide DR64³ axis semantics (NFR-OP-2 open). Per-predicate domain/range and ordering are witnessed; numerically equal local ordinals do not imply identical entities. Inversion is an operation with direction/type, not silent graph edge reversal. + +`ClassView::FieldMask` means structural **field presence** (contract/src/class_view.rs). Never repurpose its bits as graph predicate truth. Predicate truth requires its own relation(s), separate existence/known-ness/authorization. Metadata remains above SoA. `contract/src/property.rs::PropertySpec` is an AriGraph SPO property classification, not an existing 64-slot DT64 registry. + +## Logical capacity and materialization + +64 subjects × 64 targets × 64 predicates = 262,144 Boolean cells = 32 KiB if dense 1 bit/cell. One 64×64 predicate tile = 512 B; DR256² = 8 KiB; DR256³ dense = 2 MiB. These exclude masks for knownness, validity, provenance, evidence, codebooks, indexes, relations and witnesses. DR64³ physical dense/sparse/tiled realization remains unratified; never eagerly allocate a cube to answer an 8- or 23-field question. NFR-OP-2 decides what the third axis is. Gate DR view shape against [d-dr3-holo-onnx-s3a-s3c-v1.md](d-dr3-holo-onnx-s3a-s3c-v1.md) and its supersession by D-NFC. + +## Architectural flow + +``` +AD/Entra/Exchange Odoo SAP CATS / business + | | | + source DTOs and immutable snapshots, each with its OWN source + version identity + \______________|_____________________/ + v + cold DTO admission -> ClassView field presence -> typed source field/relationship resolver + v + DT64 Predicate Registry (versioned descriptor, 64 slots, owner + domain/range + evidence) + v + legal global-identity ↔ local-focus binding (EXO-46 admission; no value-steered gather) + v + borrowed mask/lanes / DR64² or DR256² when justified / logical DR³ projection + v + Quack + relalg + R2IL + mask-risc + ndarray -> Count/Exists/Keep/verified relations + | + projected directed SPO, uncertainty and negative provenance NEVER erased + v + optional: edge×edge composition; Thought-Git hypothesis/time; ONNX numeric leaf +``` + +### Integrity axes, never collapsed +- **Frame:** (source-id, dataset/table/snapshot version, schema and binding generation, immutable source/owner seal). A QueryReference is a temporal policy, not a physical checkout (#1792). +- **Focus:** witnessed global→local coordinate mapping, generation, window, typed domain/range. No value-derived cross-table positional gather outside a separately admitted prepare membrane (EXO-46). +- **Scope:** tenant, authorization policy, actor, source permissions; predicate visibility can differ from presence and truth. +- **Predicate interpretation:** 64-entry catalogue identity/version, signature/arity, derived versus observed, operator/semiring semantics; codebook-generation gate. +- **Epistemic observation:** TRUE / FALSE-with-complete-authority / UNKNOWN / NOT-OBSERVED / REFUSED, plus duplicate/bag multiplicity where applicable. Neither null nor absence is false. +- **Time:** valid time, observation time, source revision, persistence/landing and thought-hypothesis time remain different. +- **Law vs data:** D-DRMC compiled recipe reusable under fresh witnessed operands; detached Keep masks are not reusable by cycle stamp alone (#1792). + +## Six independent documentation draft PRs (separate branches from main, no hidden stacked commits) + +| Gate | Stage | Detailed deliverable | Exit criterion | Hard dependency | +|---|---|---|---|---| +| DT64-0 | This charter & board | scope, precedence, references, 64-slot logical hypothesis, non-goals | source-grounded docs | none | +| DT64-1 | Catalogue and source crosswalk | 64 registered candidate predicates with source DTO fields, types, authority, knownness and negative fixtures | 64 fully classified slots, core 8 exact oracle candidates | DT64-0 review | +| DT64-2 | Source DTO admission | AD/Entra/Exchange + Odoo + SAP identity reconciliation, role/mailbox/license/cross-tenant contrasts | cross-source fixtures fail closed, no writes | DT64-1 | +| DT64-3 | Relational inversion and DR focus | directed SPO projections, Boolean 64×64, conditional 64³, OR-AND vs bag, borrowed lanes, cost | scalar/Cypher or existing dir-sim/Quack parity, negative controls bind | DT64-2; EXO-46 for production | +| DT64-4 | Edge×edge / Thought-Git × time × hypothesis | versioned dependency derivations, replay receipts, evidence/conflicts, proper temporal guards | replay determinism, retract one support, no implicit truth promotion | DT64-3; EXO-148 unblocked for durability | +| DT64-5 | ONNX / deterministic DTO behavior | compile typed predicates and arithmetic into native method bindings; ONNX as external leaf, no new runtime | explicit exact/approx verdict, no false method equivalence, differential oracle | DT64-3; EXO-152 | + +**Documentation PR creation is not stage implementation or authorization.** Implementation after a separately accepted falsifier gate, with each stage rebased on merged main. + +## Primary open decisions (named owners, no manufactured closure) + +1. **DT64-OP-1:** Does 64 designate predicate catalogue ceiling, per-tenant registry, per-focus availability, or a versioned palette? Proposed: versioned registry, stable order; operator to ratify. *Owner*: DT64/ontology. +2. **DT64-OP-2:** Are third-axis cells predicate ordinals, relation ordinals, or property palette planes? This is already NFR-OP-2; do not preempt. *Owner*: DR physical ABI. +3. **DT64-OP-3:** Cross-system identity reconciliation: proven source key joins only, no email/UPN/PERNR equality assumption; define opaque signed mapping witness and collision protocol. *Owner*: IAM / Odoo / SAP source adapters. +4. **DT64-OP-4:** Negative authority, permission-scope and completeness witnesses for FALSE versus UNKNOWN. *Owner*: auth/identity. +5. **DT64-OP-5:** Escaped Keep and cross-source snapshot consistency (#1792): not resolved by a MailboxSoA cycle/gen counter; mutable public fields. *Owner*: source/mailbox and physical Lance owner. +6. **DT64-OP-6:** Direct field mask vs 512 B relation tile vs 32 KiB cube; measure full prepare+hot+terminal cost, no forced materialization. *Owner*: D-QR/D-DRF. +7. **DT64-OP-7:** ThoughtCommitId/DurableRef still absent (EXO-148). No assertion of replay/persisted identity without that authority. +8. **DT64-OP-8:** Odoo model extraction completeness and ACL, SAP CATS source ≠ generic SAP IAM; never invent a native SAP entitlement DTO without a source anchor. +9. **DT64-OP-9:** Exactly what makes local relational access 'holographic': demonstrate lossless directional reconstruction from sufficiently witnessed local projection, characterize incomplete focus; no claim of physical optical holography or general compressed recovery. +10. **DT64-OP-10:** ONNX/time series numerics vs exact Boolean relations, NULL, signedness, codebook validity and quantization; law admission separate from data provenance (EXO-152). + +## Global kill tests +- Identical local index, different globally identified principal: refuse. +- Unread group/tenant scope versus explicit negative: UNKNOWN not FALSE. +- Direct vs nested group, security versus distribution: not a single indiscriminate MEMBER_OF closure. +- Cloud mailbox: match/ambiguous/awaiting backsync not coerced to HAS_MAILBOX TRUE. +- Odoo `res.users` vs `hr.employee` via unverified partner/email: refuse. +- SAP client+PERNR vs AD GUID coincidentally equal integers: refuse. +- Two supporting role chains: retract one and effective role remains TRUE. +- Same recipe, changed source, changed codebook, changed scope, same revision number from another source: refuse detached intermediate. +- 64×64×64 tiny synthetic projection whose directed inverse swaps Subject and Object must not pass. +- 8 properties, 23 fields: direct mask beats cube overhead; KEEP_DIRECT, not forced DR³. +- ONNX/MLIR changes dtype/axis/rounding or output semantics: separate method identity or REFUSE. + +## Evidence and non-goals + +Existing: IAM `dir-rmap-probe/tests/classview_dr.rs` compiled role closure and speed (lab), SAP `lance-graph-sap/src/{schema,bind,edge}.rs` 23 fields and ordered hash/BAPI, Odoo extracted blueprint corpus, DR logic/Quack lab, #1792 borrow-vs-escaped refusal. Missing: DT64 registry implementation, Odoo method fold, SAP↔IAM↔Odoo trusted identity join, general DR³ physical layout, cross-frame binding store, cross-source snapshot attestation and proof checker. + +No live SAP/Odoo/AD/Entra connectivity, provisioning, license changes, account mutation, BAPI writes, rollout, authorization shortcut, runtime graph engine, ONNX interpreter, new FrameStore, or automatic claim that every DT64 bit is a fact. From b19d64564554a4ebd53dd3a25a3ffb275a3d02e5 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:27:46 +0100 Subject: [PATCH 02/28] docs(board): DT64 programme receipt and staged draft PR references --- .../2026-10-26-dt64-holographic-interface.md | 45 +++++++++++++++++++ 1 file changed, 45 insertions(+) create mode 100644 .claude/board/entries/2026-10-26-dt64-holographic-interface.md diff --git a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md new file mode 100644 index 000000000..a8ec79757 --- /dev/null +++ b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md @@ -0,0 +1,45 @@ +# D-DT64-0 — DT64 64-slot versioned predicate adapter, inverted DR projections and staged PRs + +**Date:** 2026-10-26. **Status:** DOCS / DRAFT, no production adapter, schema ABI, method, test or runtime implementation. **Source:** `../plans/d-dt64-holographic-predicate-capstone-v1.md`. + +**User request:** detailed technical mapping of IAM, Entra/Exchange, Odoo and SAP DTOs into a proposed 64-predicate DT64 semantic interface; directed/holographic DR access, edge×edge, Thought-Git hypothesis/time, ONNX numeric lowerings; stage documentation PRs; link the open contracts in EXO-50. + +## Draft sequence with exact GitHub receipts + +| stage | PR | deliverable and status | +|---|---|---| +| DT64-0 | capstone draft, this branch | charter, dependency and question register, .claude board integration; docs only | +| DT64-1 | [#1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794) | 64 typed predicate catalogue including 8 IAM/ODoo/SAP scenarios; docs only | +| DT64-2 | [#1795](https://github.com/AdaWorldAPI/lance-graph/pull/1795) | source snapshots, identity namespace & join witnesses, IAM/Odoo/SAP mapping and negative test specs; docs only | +| DT64-3 | [#1796](https://github.com/AdaWorldAPI/lance-graph/pull/1796) | three directed SPO query orientations, K3/Bag/Distinct, DR focus and falsifier ladder; docs only | +| DT64-4 | [#1797](https://github.com/AdaWorldAPI/lance-graph/pull/1797) | edge dependency, Thought-Git hypothesis/time, replay receipts and retractions; docs only | +| DT64-5 | [#1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798) | native behavioral recipes, Odoo/SAP/IAM computations, numerical time series and ONNX leaf semantics; docs only | + +**All plans on independent branches from main** (NOT implementation). Merge/admission order is logical, but each PR must be re-reviewed and rebased after predecessors; no hidden stacked commits. No tests claimed run. PRs from other sessions are not modified. + +## Key source evidence already present + +- IAM: `dir-sim` direct/nested group and `actors.rs` effective-role evidence, `cloud.rs` EXO mailbox match/awaiting/mismatch states. Effective role `ClassView × DR` lab in [2026-10-21-classview-dr-iam.md](2026-10-21-classview-dr-iam.md), ~13–19 ns once per class resolved (lab). +- SAP: `lance-graph-sap` has 23 stable CATS fields, 16 HASH and 8 BAPI ordinal profiles; direct mask preferred for a 23-field projection (EXO-122 / D-QR-SAP). +- Odoo: curated blueprint [odoo-blueprint-inventory-v1](../../knowledge/odoo-blueprint-inventory-v1.md), `L14-HR-BASE` extracts employee/user/partner/company/manager and hr.version rules; live adapter and method execution not proven. +- Quack: current borrowed lanes and mask-risc native ops; #1792 attests borrow-scope but forbids assuming a detached `Keep` has a valid witness. +- DR: existing DR64²/DR256² Boolean registered relations; physical DR³ axis NFR-OP-2 still open, no magical zero-copy global cube. + +## Unclosed receipts and coordination owners + +| open | owner / authority | implication | +|---|---|---| +| 64 predicate ordinal/semantics registry | DT64/ontology, proposed | FieldMask presence is not predicate truth | +| NFR-OP-2 third DR axis | DR physical owner | 64×64×64 is logical capacity, not ABI | +| EXO-46 focus preparation | D-RMAP | cross-table identity joins never by numeric ordinal alone | +| #1792 escaped-mask/source snapshot | mailbox/source and Lance reader | recompute/refuse until attestation | +| License SKU/service-plan DTO | Entra/identity source owner | cannot infer license from EXO mailbox | +| Odoo `res.users`/SAP PERNR/AD GUID joins | source adapter owners | no UPN/email or integer equality claim | +| EXO-148 DurableRef/ThoughtCommitId | D-RST / D-TGB | no durable Thought-Git replay claims | +| EXO-152 native methods/ONNX | D-NAM owner | no new tensor runtime, versioned method receipts | +| source explicit negative/ACL completeness | auth/data authority | missing != FALSE and no scope widening | +| "holographic" reconstruction test | D-HOLO/DR | invert access without claiming compressed global recovery | + +**Falsifier principle:** an independent scalar oracle plus disable control must bind before any correctness or speed claim. Costed: cold identity mapping, focus seal, masks/index bytes, hot folding, output, witness. If direct/CSR wins a narrow mapping, KEEP_DIRECT. Separate Boolean relationships, numerical model output, and unverifiable hypotheses. + +**Handoff:** [EXO-50](https://linear.app/exo-red/issue/EXO-50/agent-message-bus-gpt-xgrok-ccsession-id) append-only message once links and PR0 receipt exist. [EXO-121](https://linear.app/exo-red/issue/EXO-121), [EXO-122](https://linear.app/exo-red/issue/EXO-122), [EXO-123](https://linear.app/exo-red/issue/EXO-123), [EXO-126](https://linear.app/exo-red/issue/EXO-126), [EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152). From 3b37ff306a97893aa22d5d76bd686f242ad270c0 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:28:31 +0100 Subject: [PATCH 03/28] docs(board): register DT64 staged drafts and unresolved gates --- .claude/board/STATUS_BOARD.md | 15 +++++++++++++++ 1 file changed, 15 insertions(+) diff --git a/.claude/board/STATUS_BOARD.md b/.claude/board/STATUS_BOARD.md index a0b609947..5eaac489c 100644 --- a/.claude/board/STATUS_BOARD.md +++ b/.claude/board/STATUS_BOARD.md @@ -1,3 +1,18 @@ +## D-DT64 — DTO Tensor 64: versioned semantic predicate adapter and DR projections (2026-10-26) + +**Status:** PLAN / DOCS ONLY, six independent draft PRs, no source ingestion, no new 64-slot ABI, no runtime or tests run. [Charter](../plans/d-dt64-holographic-predicate-capstone-v1.md); [board entry](entries/2026-10-26-dt64-holographic-interface.md). [EXO-50](https://linear.app/exo-red/issue/EXO-50) is the append-only handoff, not a production approval. + +| Stage | Plan / draft | Gate | +|---|---|---| +| DT64-0 | charter / THIS PR | protect ClassView presence vs predicate truth; NFR-OP-2 open | +| DT64-1 | [#1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794) | 64 typed candidate mappings, sourced/candidate/blocked differentiated | +| DT64-2 | [#1795](https://github.com/AdaWorldAPI/lance-graph/pull/1795) | IAM/Odoo/SAP/Exchange cross-system identity joins require source attestations; licence source absent | +| DT64-3 | [#1796](https://github.com/AdaWorldAPI/lance-graph/pull/1796) | forward/inverse/predicate SPO projection parity and K3/Bag falsifiers; no mandated DR³ physical cube | +| DT64-4 | [#1797](https://github.com/AdaWorldAPI/lance-graph/pull/1797) | dependency support and hypothesis/time receipts; EXO-148 missing durable IDs | +| DT64-5 | [#1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798) | D-NAM/EXO-152 native method route, ONNX as leaf, computed result ≠ source fact | + +**Hard blockers:** [EXO-46](https://linear.app/exo-red/issue/EXO-46) production focus admission, [#1792](https://github.com/AdaWorldAPI/lance-graph/pull/1792) escaped-Keep authority and physical snapshot, NFR-OP-2 axis selection, source-specific negative observation/ACL, EXO-148, missing Entra license and Odoo method source verification. Direct bitmask first; no claimed holographic global reconstruction until independent oracle. + ## D-TFLP — TFLite models on the native polyfill: int8 codes as Palette256 (2026-10-25) **Status: PROPOSAL, DOCS ONLY.** Plan: [d-tflp-tflite-palette-polyfill-capstone-v1.md](../plans/d-tflp-tflite-palette-polyfill-capstone-v1.md). Ledger: [2026-10-25-d-tflp-0-tflite-palette-polyfill.md](entries/2026-10-25-d-tflp-0-tflite-palette-polyfill.md). Specializes D-NAM-2 (#1780) and D-NAM-PZL (#1784); no executor, tensor IR or `Rel` variant. From c20cb8867f28c114ecc995f4fd6055595a1e1c74 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:28:34 +0100 Subject: [PATCH 04/28] docs(board): register DT64 staged drafts and unresolved gates --- .claude/board/INTEGRATION_PLANS.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/.claude/board/INTEGRATION_PLANS.md b/.claude/board/INTEGRATION_PLANS.md index 9713b6260..f90103c07 100644 --- a/.claude/board/INTEGRATION_PLANS.md +++ b/.claude/board/INTEGRATION_PLANS.md @@ -1,3 +1,9 @@ +## 2026-10-26 — D-DT64 64-slot versioned DTO adapter / holographic relational projections → `.claude/plans/d-dt64-holographic-predicate-capstone-v1.md` + +**Status:** DESIGN ONLY, six draft docs PRs. **Board:** [D-DT64-0](entries/2026-10-26-dt64-holographic-interface.md) and [STATUS_BOARD](STATUS_BOARD.md). **Stages:** [DT64-1 #1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794) predicate/source catalogue, [DT64-2 #1795](https://github.com/AdaWorldAPI/lance-graph/pull/1795) IAM/Odoo/SAP/EXO DTO authority, [DT64-3 #1796](https://github.com/AdaWorldAPI/lance-graph/pull/1796) directed DR projections, [DT64-4 #1797](https://github.com/AdaWorldAPI/lance-graph/pull/1797) edge×edge and Thought-Git temporal hypotheses, [DT64-5 #1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798) native method/ONNX/time series. [EXO-50](https://linear.app/exo-red/issue/EXO-50) is append-only handoff; all these are independent docs-only branches and **NOT** production PRs or measured probes. + +DT64 64 entries = versioned *typed predicate* registry hypothesis, not ClassView field mask, not physically decided DR³ third axis. Source-mapped IAM groups/mailbox/license (license source not present), Odoo employee/user/partner/company, SAP CATS 23/16/8 ordered fields; unknown vs false vs revoked; frame/focus/scope/predicate catalogue and source identity all need witnesses. Borrow-only Quack safe; escaped masks and physical Lance cross-source snapshots remain unadmitted (#1792). Logical DR64³ 32 KiB bit plane excludes provenance/masks, with exact direct bitmask or CSR alternatives. No auto permissions/provisioning or model writes. **Owner precedents:** EXO-121/122/123, EXO-126/127/151/152, EXO-46 and EXO-148. + ## 2026-10-26 — D-DR256-WHERE population-masked reads, thought amortization, DuckDB harvest → `.claude/plans/dr256-where-capstone-v1.md` **Status:** P0 census DONE, P1 lab DONE (reported, not gated); P2–P5 PROPOSED, NOT AUTHORIZED. **Board entry:** [D-DR256-WHERE](entries/2026-10-26-dr256-where-capstone.md). Smallest gap: exact occupancy over a `Keep` mask; multi-property gain is dead-block skipping, measured at ndarray level only. No runtime, ABI, planner, writer or WAL change; the scatter survival condition stays in force. From 6d155e11c26c5d78e4124cfcd960103099b421ac Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:28:54 +0100 Subject: [PATCH 05/28] docs(board): regenerate DT64 entry index with preserved findings --- .claude/board/entries/README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.claude/board/entries/README.md b/.claude/board/entries/README.md index f8029be9c..bf9e10502 100644 --- a/.claude/board/entries/README.md +++ b/.claude/board/entries/README.md @@ -25,10 +25,11 @@ index row, (3) no duplicate entry id. Checks 1 and 2 are deliberately opposite directions; the stranding this convention prevents shows up in exactly one of them, never both. -482 entries, 2026-08-06 .. 2026-10-26. +483 entries, 2026-08-06 .. 2026-10-26. | date | entry id | finding | file | |---|---|---|---| +| 2026-10-26 | `D-DT64-0` | | [2026-10-26-dt64-holographic-interface.md](2026-10-26-dt64-holographic-interface.md) | | 2026-10-26 | `D-DR64C-A` | | [2026-10-26-dr64-cubed-amendment.md](2026-10-26-dr64-cubed-amendment.md) | | 2026-10-26 | `D-DR256-WHERE` | | [2026-10-26-dr256-where-capstone.md](2026-10-26-dr256-where-capstone.md) | | 2026-10-26 | `D-DR256-OD` | | [2026-10-26-dr256-on-demand-l1.md](2026-10-26-dr256-on-demand-l1.md) | From 181b646027ab13d0332757b0985b6d712d0d9f27 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:28:57 +0100 Subject: [PATCH 06/28] docs(board): correct DT64 relative plan reference --- .claude/board/entries/2026-10-26-dt64-holographic-interface.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md index a8ec79757..ac41a00d0 100644 --- a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md +++ b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md @@ -1,6 +1,6 @@ # D-DT64-0 — DT64 64-slot versioned predicate adapter, inverted DR projections and staged PRs -**Date:** 2026-10-26. **Status:** DOCS / DRAFT, no production adapter, schema ABI, method, test or runtime implementation. **Source:** `../plans/d-dt64-holographic-predicate-capstone-v1.md`. +**Date:** 2026-10-26. **Status:** DOCS / DRAFT, no production adapter, schema ABI, method, test or runtime implementation. **Source:** `../../plans/d-dt64-holographic-predicate-capstone-v1.md`. **User request:** detailed technical mapping of IAM, Entra/Exchange, Odoo and SAP DTOs into a proposed 64-predicate DT64 semantic interface; directed/holographic DR access, edge×edge, Thought-Git hypothesis/time, ONNX numeric lowerings; stage documentation PRs; link the open contracts in EXO-50. From 918ef2881823a3a4cbfe36264bf12553f059c06b Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:32:39 +0100 Subject: [PATCH 07/28] docs(DT64-0): add source-first CC handoff and independent falsifier gates --- ...d-dt64-source-first-claude-code-handoff.md | 39 +++++++++++++++++++ 1 file changed, 39 insertions(+) create mode 100644 .claude/prompts/d-dt64-source-first-claude-code-handoff.md diff --git a/.claude/prompts/d-dt64-source-first-claude-code-handoff.md b/.claude/prompts/d-dt64-source-first-claude-code-handoff.md new file mode 100644 index 000000000..0e0f6f049 --- /dev/null +++ b/.claude/prompts/d-dt64-source-first-claude-code-handoff.md @@ -0,0 +1,39 @@ +# CC handoff — DT64: versioned DTO semantics, relational projection and staged labs + +**Operator scope:** Design the 64-slot DT64 (DTO Tensor 64) adapter and staged PR map. Six docs-only independent draft PRs were created; **do not assume implementation authorized**. + +## Read in this order +1. [#1799](https://github.com/AdaWorldAPI/lance-graph/pull/1799) `.claude/plans/d-dt64-holographic-predicate-capstone-v1.md` and board entry. +2. [#1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794) 64-entry candidate catalogue, classified observed/derived/meta/proposed; no implicit source truth. +3. [#1795](https://github.com/AdaWorldAPI/lance-graph/pull/1795) AD/Entra/Exchange, Odoo and SAP source DTO binding receipts. +4. [#1796](https://github.com/AdaWorldAPI/lance-graph/pull/1796) direct/inverse/SPO predicate query geometry, K3/Bag/Boolean oracles, focus cost. +5. [#1797](https://github.com/AdaWorldAPI/lance-graph/pull/1797) edge×edge support, Thought-Git hypotheses and valid/observed time. +6. [#1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798) native mathematical lowering and ONNX/TFLite leaf / time series. +7. Existing governing docs: `crates/lance-graph-contract/src/class_view.rs` FieldMask presence only, `dir-sim/{ad,actors,cloud,groups}.rs`, `lance-graph-sap/{schema,bind,edge}.rs`, Odoo L14/L12, D-DR3 supersession D-NFC, D-QSP/EXO-126, D-DRMC/EXO-127, #1792 Part E borrowed vs escaped reuse, EXO-46 counted global→focus gate, EXO-148 durable IDs. + +## Task now + +Review six plans for contradictions with **current** source, record each corrected anchor and its owner, then propose the smallest independent fixture based on eight *actually sourced* predicates: direct membership, security group, mail-enabled group, group role grant, effective role, remote mailbox, cloud mailbox, and SAP CATS employee assignment. **Do not** claim license assignment without Entra source DTO or equivalence of SAP PERNR to AD GUID/Odoo employee. + +The lab plan should specify: +- original typed source rows and independent scalar output for `(s,p)->o`, `(p,o)->s`, `(s,o)->p`; +- sealed dataset/source and borrowed input lifetime; +- explicit present/NULL/unread/negative/permission-distinct outcomes; +- complete typed global identity ↔ local focus witness, never equal-number join; +- reversible query access versus claimed holographic information distribution; +- per-arm total cold/prepare/bind/fold/output/provenance cost; +- adversarial cases and independently binding disable controls. + +Return source evidence, falsifier list, blockers, and a D-ide stage decision: ADOPT / KEEP_DIRECT / DEFER / REJECT. A measured 64×64 direct mask may be the right outcome, even if the conceptual 64³ cube is elegant. + +## Decisions not delegated to CC + +NFR-OP-2 physical third axis; whether the predicate registry has 64 immutable public ABI slots; EXO-46 production global→focus admission; whether to encapsulate MailboxSoA public fields or publish source epochs (#1792); source-negative authority and identity crosswalk trust; live SAP/Odoo/AD access; Thought-Git durable `DurableRef`/`ThoughtCommitId` (EXO-148); operator authorization for all production changes. Treat guesses as OPEN, never as decisions. + +No new runtime, interpreter, planner, relalg variant, implicit proof checker, wrapper cache, source writes, auth bypass, licence assignment or LLM guessed metadata. Reuse existing owners and oracles. + +## Coordination + +Read [EXO-50](https://linear.app/exo-red/issue/EXO-50) inbox messages before implementation; post **new** comment using mandatory message envelope and full actual CC session ID. Reference PRs by exact number and stage. Do not edit another agent's message; do not claim the inbox comment is approval. + +Done means plans have an accurate status/evidence matrix, no cross-repo source claims have drifted, and all independently measurable risks have a falsifier. Nothing ships until code PRs are separately approved, tested and merged. From 047df1579c8f44158fbd705e082e1a66ad37c69a Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:32:59 +0100 Subject: [PATCH 08/28] docs(board): link DT64 CC source-first handoff --- .claude/board/entries/2026-10-26-dt64-holographic-interface.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md index ac41a00d0..67b317da4 100644 --- a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md +++ b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md @@ -42,4 +42,4 @@ **Falsifier principle:** an independent scalar oracle plus disable control must bind before any correctness or speed claim. Costed: cold identity mapping, focus seal, masks/index bytes, hot folding, output, witness. If direct/CSR wins a narrow mapping, KEEP_DIRECT. Separate Boolean relationships, numerical model output, and unverifiable hypotheses. -**Handoff:** [EXO-50](https://linear.app/exo-red/issue/EXO-50/agent-message-bus-gpt-xgrok-ccsession-id) append-only message once links and PR0 receipt exist. [EXO-121](https://linear.app/exo-red/issue/EXO-121), [EXO-122](https://linear.app/exo-red/issue/EXO-122), [EXO-123](https://linear.app/exo-red/issue/EXO-123), [EXO-126](https://linear.app/exo-red/issue/EXO-126), [EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152). +**Agent handoff:** [Source-first CC brief](../../prompts/d-dt64-source-first-claude-code-handoff.md) (read-only first; no code authorization).\n\n**Handoff:** [EXO-50](https://linear.app/exo-red/issue/EXO-50/agent-message-bus-gpt-xgrok-ccsession-id) append-only message once links and PR0 receipt exist. [EXO-121](https://linear.app/exo-red/issue/EXO-121), [EXO-122](https://linear.app/exo-red/issue/EXO-122), [EXO-123](https://linear.app/exo-red/issue/EXO-123), [EXO-126](https://linear.app/exo-red/issue/EXO-126), [EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152). From 3b2d67a8779d9d1a87e722d31926771a782233f9 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:33:01 +0100 Subject: [PATCH 09/28] docs(DT64-0): link source-first agent handoff --- .claude/plans/d-dt64-holographic-predicate-capstone-v1.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md index 3e5e8b2cc..9221f6a89 100644 --- a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md +++ b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md @@ -92,3 +92,7 @@ AD/Entra/Exchange Odoo SAP CATS / business Existing: IAM `dir-rmap-probe/tests/classview_dr.rs` compiled role closure and speed (lab), SAP `lance-graph-sap/src/{schema,bind,edge}.rs` 23 fields and ordered hash/BAPI, Odoo extracted blueprint corpus, DR logic/Quack lab, #1792 borrow-vs-escaped refusal. Missing: DT64 registry implementation, Odoo method fold, SAP↔IAM↔Odoo trusted identity join, general DR³ physical layout, cross-frame binding store, cross-source snapshot attestation and proof checker. No live SAP/Odoo/AD/Entra connectivity, provisioning, license changes, account mutation, BAPI writes, rollout, authorization shortcut, runtime graph engine, ONNX interpreter, new FrameStore, or automatic claim that every DT64 bit is a fact. + +## Agent handoff + +Source-first review and proposed falsifier protocol: [d-dt64-source-first-claude-code-handoff.md](../prompts/d-dt64-source-first-claude-code-handoff.md). No implementation or production authorization is conferred by this prompt. From 55ba90e4f166a9cd70610b54096a2886bb87d041 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:51:42 +0100 Subject: [PATCH 10/28] docs(DT64-0): reconcile capstone receipt and EXO-50 handoff text --- .../board/entries/2026-10-26-dt64-holographic-interface.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md index 67b317da4..f21d730b0 100644 --- a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md +++ b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md @@ -8,7 +8,7 @@ | stage | PR | deliverable and status | |---|---|---| -| DT64-0 | capstone draft, this branch | charter, dependency and question register, .claude board integration; docs only | +| DT64-0 | [#1799](https://github.com/AdaWorldAPI/lance-graph/pull/1799), this branch | charter, dependency and question register, .claude board integration; docs only | | DT64-1 | [#1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794) | 64 typed predicate catalogue including 8 IAM/ODoo/SAP scenarios; docs only | | DT64-2 | [#1795](https://github.com/AdaWorldAPI/lance-graph/pull/1795) | source snapshots, identity namespace & join witnesses, IAM/Odoo/SAP mapping and negative test specs; docs only | | DT64-3 | [#1796](https://github.com/AdaWorldAPI/lance-graph/pull/1796) | three directed SPO query orientations, K3/Bag/Distinct, DR focus and falsifier ladder; docs only | @@ -42,4 +42,6 @@ **Falsifier principle:** an independent scalar oracle plus disable control must bind before any correctness or speed claim. Costed: cold identity mapping, focus seal, masks/index bytes, hot folding, output, witness. If direct/CSR wins a narrow mapping, KEEP_DIRECT. Separate Boolean relationships, numerical model output, and unverifiable hypotheses. -**Agent handoff:** [Source-first CC brief](../../prompts/d-dt64-source-first-claude-code-handoff.md) (read-only first; no code authorization).\n\n**Handoff:** [EXO-50](https://linear.app/exo-red/issue/EXO-50/agent-message-bus-gpt-xgrok-ccsession-id) append-only message once links and PR0 receipt exist. [EXO-121](https://linear.app/exo-red/issue/EXO-121), [EXO-122](https://linear.app/exo-red/issue/EXO-122), [EXO-123](https://linear.app/exo-red/issue/EXO-123), [EXO-126](https://linear.app/exo-red/issue/EXO-126), [EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152). +**Agent handoff:** [Source-first CC brief](../../prompts/d-dt64-source-first-claude-code-handoff.md) (read-only first; no code authorization). + +**Handoff:** [EXO-50](https://linear.app/exo-red/issue/EXO-50/agent-message-bus-gpt-xgrok-ccsession-id) append-only [coordination message](https://linear.app/exo-red/issue/EXO-50) posted as `GPT:gpt-ada-01/D-DT64-1799-20261026` with all six PR receipts; acknowledgement requested. [EXO-121](https://linear.app/exo-red/issue/EXO-121), [EXO-122](https://linear.app/exo-red/issue/EXO-122), [EXO-123](https://linear.app/exo-red/issue/EXO-123), [EXO-126](https://linear.app/exo-red/issue/EXO-126), [EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152). From 75ff0067abecef0d45d90440e96536cb0abc30eb Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 20:58:36 +0100 Subject: [PATCH 11/28] docs(DT64-Q0): coordinate source-attested borrowed binding seam with Quack --- ...-dt64-q0-borrowed-quack-binding-seam-v1.md | 115 ++++++++++++++++++ 1 file changed, 115 insertions(+) create mode 100644 .claude/plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md diff --git a/.claude/plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md b/.claude/plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md new file mode 100644 index 000000000..d60dbbf43 --- /dev/null +++ b/.claude/plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md @@ -0,0 +1,115 @@ +# D-DT64-Q0: Source-attested semantic binding → borrowed Quack execution + +**2026-10-26. Status:** INTER-SESSION ARCHITECTURE COORDINATION / DOCS ONLY. **Authority:** DT64-0 [#1799](https://github.com/AdaWorldAPI/lance-graph/pull/1799), DT64-1..5 [#1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794)–[#1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798), Quack/DR #1792 Part E. **Not:** a Claude Code instruction, a new production ABI, new solver, new runtime, an approved implementation or a merge decision. + +## One-sentence contract + +**DT64 attests *what* a DTO field or source relationship means, who owns it, which source snapshot and authorized focus it belongs to, and which borrowed native operands are currently valid. Quack / RelAlg / R2IL / mask-risc execute the *admitted algebra*. ndarray executes numerical kernels. D-NAM owns numerical method admission and prepared certificates.** + +The binding is an *interface seam*, not a second copy of business data and not the persistent Binding Store generalized in old plans. Do not invent a FrameStore, tensor physical allocation, predicate evaluator, Odoo executor, ONNX interpreter or new RelAlg AST. + +## First common interface, decomposed to avoid fake ownership + +This is **contract vocabulary**, not a proposed Rust public struct. Each identity and policy term must point to an existing truthful owner or an explicitly OPEN integration gap. Most values are checked cold at bind/prepare, not in the SIMD hot path. + +| Component | Source of authority / owner | First proof or refusal | +|---|---|---| +| typed source-object identity | actual namespace+tenant/client+opaque stable source key | two SAP clients both PERNR 42 never alias; AD GUID != Odoo integer | +| typed predicate identity | DT64 catalogue id/version/slot, domain/range/direction | slot != ClassView FieldMask, DR coordinate or Palette256 code | +| source schema and catalogue versions | source schema digest/field ordinal plus separately versioned DT64 descriptor | moved field ordinal, changed meaning or catalogue generation refuses | +| source owner and physical snapshot | owning source/reader; explicit opened physical version where persistence crosses boundary | `QueryReference::at` is a temporal horizon, not a dataset checkout (#1792) | +| global↔local coordinate witness | D-RMAP/EXO-46 source-attested preparation membrane; typed identity | equal local ordinal from other source refuses | +| codebook generation | real owner of local ordinal/codebook if relevant, NOT numeric equality | changed codebook refuses; D-NFR S15 still OPEN | +| permission / completeness scope | source ACL/policy/tenant, observation authority | unread or forbidden differs from explicit false; group-role policy completeness | +| borrowed input lanes | original immutable `&source` and existing `LaneRef` / `Planes<'_>` / strided views | no source mutation while borrowed; no hidden `to_vec` data replica | +| separately reusable compiled recipe | Quack/R2IL/D-DRMC prepared law bound to typed schema and supported math semantics | recipe reusable on a NEW valid source binding; old detached mask is not | +| result demand and validity | Quack `Count/Exists/Keep`, typed output, receipt and freshness | `Keep` cannot escape and be reused without complete dependency witness | + +**Implementation rule:** Do not silently "fill" missing source attestations with a caller-supplied generation, sample fixtures, `mailbox_owner() == 0`, or the apparently matching codebook integer. The source provides authoritative snapshot/owner identity; DT64 records and validates bindings without becoming the issuer of physical data identity. + +**Borrow scope:** For an in-process owner with ordinary safe Rust `&self` borrowed lanes and no mutating interior alias, a Quack kernel running while those borrows remain live needs **no redundant per-operation mutation check**. Preserve all input borrows and their source bind identities until the result's immediate consumption; a borrow does not prove external authorization or cross-source snapshot consistency. After the borrow ends, a detached `Vec` `Keep` is only a stale candidate, not an attested intermediate. #1792 falsifies reuse: stale R mask 1,032 selected rows vs fresh R mask 31 after changing a predicate property. Until dependency provenance is complete, recompute under fresh borrow or REFUSE. A compiled *recipe* can be retained; it is not a source-data cache. + +## First executable proof, not a new execution engine + +One read-only source-shaped fixture with **eight sourced predicates**, named independently of the 64-slot proposed registry: + +1. `MEMBER_OF_DIRECT` (AD member or dir-sim membership) +2. `SECURITY_GROUP` (SID-based, dir-sim group property) +3. `MAIL_ENABLED_GROUP` (SMTP-address group property) +4. `GROUP_GRANTS_ROLE` (dir-sim GroupRoles, witnessed grant policy) +5. `EFFECTIVE_ROLE` (dir-sim actors::role_evidence; multiple chain support) +6. `HAS_REMOTE_MAILBOX` (dir-sim recipient type) +7. `HAS_EXO_MAILBOX` (CloudMailboxes unique linked read, NOT licence) +8. `CATS_ENTRY_EMPLOYEE` (SAP CATS FIELDS[5] employee_number, namespaced SAP client/PERNR, NOT automatic AD GUID join) + +First executable slice may include the IAM/Exchange subset and the SAP field as **two independently borrowed, source-scoped views**; it does not assume a real AD↔SAP identity relation. Odoo mapping is planned DT64-2 but not a prerequisite to this minimal algebra proof. All fixtures synthetic/source-shaped, with independently authored original-source scalar oracle and no live account modifications. + +### Phase Q0. Source and lane census, read-only + +Inspect `contract::class_view::FieldMask`, `MailboxSoaView`/`SoaEnvelope` and #1792 E.1–E.9; existing `Quack` `LaneRef`, `Planes<'_>` and demand terminals; dir-sim `ad.rs`, `groups.rs`, `actors.rs`, `cloud.rs`; SAP `schema.rs` and `bind.rs`. Verify which *current* U32/U64/strided lanes can be borrowed and which u16/f32 carriers need an explicitly accounted temporary copy or a separately approved type addition. No invented zero-copy assertion. + +### Phase Q1. Semantic descriptor and binding acceptance + +Build a **lab-only** typed mapping table using source-owned identity, schema/catalogue, permission and source snapshot. Distinguish field **presence**, relation **knownness/validity**, actual **truth** and authorization. Cold-bind a Quack program to the admissible borrowed operands. No new hot-path dispatch, no general-purpose persistent data store, no custom predicate evaluator. If external sources do not expose a pinning contract, mark the fixture as lab owner-borrowed, not production attested. + +### Phase Q2. Three directed query orientations + +Compare the original source semantics, a separately implemented scalar typed-triple oracle, and existing Quack/relalg algebra: +- `(subject, predicate) → objects` +- `(predicate, object) → subjects` +- `(subject, object) → predicates` + +Do not generate the inverse `(object, predicate, subject)` as a new fact. Keep per-predicate typed domain/range and distinguish `direct` versus `derived` group closure. Unknown/permission-denied is not Boolean false. + +### Phase Q3. Optional DR64² economics + +Where repeated queries genuinely need 64×64 source-target relations under one witnessed focus, compare direct borrowed lane + Quack against 512 B DR64² single-predicate bit tile, and baseline CSR/direct walk. Account **prepare + identity map + tile + source read/prefetch + query + output + provenance**. The DR64³ 32 KiB logical cube is **not** a prerequisite or an implementation authorization; NFR-OP-2 remains OPEN. Choose KEEP_DIRECT if construction cost dominates. + +### Phase Q4. Mandatory negative controls and receipts + +| Falsifier | Required result | +|---|---| +| P2 property mutation, old `Keep` retained: 1,032 vs 31 | fresh bind recomputes or explicit REFUSE, NEVER silently stale | +| same source stamp, distinct source identity | refuse foreign alias | +| same ordinal, different codebook generation | refuse or rebuild | +| scope or ACL changed | no unauthorized data leak or old negative reuse | +| direct group vs nested, security SID vs mail-enabled | typed predicates differ | +| role grant with two independent support paths | removing one still yields role | +| EXO cloud identity ambiguous / AwaitingBacksync | no unjustified mailbox "confirmed" | +| missing licence assignment DTO | REFUSE, not inference from mailbox | +| SAP PERNR same digits as Odoo id or AD surrogate | no cross-system join absent identity witness | +| missing field versus known complete negative | UNKNOWN/NOT-OBSERVED vs FALSE | +| swapped `ClassView FieldMask` and DT64 predicate slot | reject type/semantics | +| forward versus reversed triple | oracle discrepancy must bind | +| source snapshot and `QueryReference::at` only | refuse falsely pinned physical reader | + +For each, record independent oracle, actual changed outcome, and **one disable/mutation that reliably makes the test red**. Record inert controls as NOT BINDING. No recorded test result until executed. No claim that a proof capsule can self-certify. + +## Boundaries and stage ownership + +| Artifact or behavior | Owner | +|---|---| +| 64 semantic slot descriptor/cold DTO normalization | DT64-1 / #1794 | +| source identity/read/ACL/completeness/snapshot | DT64-2 / #1795 and owning systems | +| directed algebra, optional DR64² physical view | Quack/relalg owners + DT64-3 / #1796 | +| time, edge dependencies and hypothesis history | existing Thought-Git owner, DT64-4 / #1797 only later | +| numerical method, calibration, fingerprint and certificate | D-NAM/EXO-152, ndarray and numerical audits; DT64-5 / #1798 **consumer only** | +| ordinary compile-time borrow guarantee and stale escaped mask evidence | #1755 and #1792 | +| preparatory global↔local identity admission | EXO-46, open for production | +| actual DR³ third-axis ABI | NFR-OP-2, open | +| durable Thought-Git IDs and authenticated replays | EXO-148, open | + +Numerical method handles may reference **code-space identity, SourceParity vs CertifiedMath, calibration, prepared numerical certificate and source-specific implementation fingerprint**. The 64 DT64 predicate slots do not encode these quantities, and DT64 must never certify TFLM or ONNX correctness. + +## First landing acceptance decision + +**Only a lab/probe proposal**, not code authorization: +- precise current source and lane census; one minimal binding seam identified or explicitly blocked; +- eight candidate predicates grounded; actually admitted subset stated (no false claims for an incomplete source); +- same borrowed input data evaluated through direct source, independent scalar oracle, existing Quack; optional DR64² measured; +- forward/inverse/predicate projections with exact typed and negative controls; +- stale `Keep` 1,032-vs-31 refusal/recompute; +- prepare cost measured; no prohibited hot-path allocation or new runtime. +- conclusion ADOPT / KEEP_DIRECT / DEFER / REJECT backed by measured gate and source receipts. + +**Coordinated governing statement:** DT64 describes what is bound. Quack executes the admitted algebra. A separately prepared numerical certificate determines whether an implementation satisfies an explicitly chosen numeric contract. From 00c5baed22134b9052253527264d5d03956020ca Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:00:07 +0100 Subject: [PATCH 12/28] docs(DT64-QB): narrow DT64/Quack source-attested borrowed binding contract and 8-predicate gates --- .../d-dt64-quack-borrowed-binding-seam-v1.md | 156 ++++++++++++++++++ 1 file changed, 156 insertions(+) create mode 100644 .claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md diff --git a/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md b/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md new file mode 100644 index 000000000..d8bd61b8f --- /dev/null +++ b/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md @@ -0,0 +1,156 @@ +# D-DT64-QB-0 — DT64 ↔ Quack minimal source-attested borrowed binding + +**Date:** 2026-10-26. **Status:** COORDINATION CORRECTION / DESIGN ONLY, not an implemented ABI or approved code PR. **Owner split:** DT64 = semantic source adapter; Quack/RelAlg/R2IL/mask-risc = deterministic relational execution; ndarray = native math kernels; D-NAM/EXO-152 = prepared numerical method admission. **References:** DT64-0 [#1799](https://github.com/AdaWorldAPI/lance-graph/pull/1799), [#1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794)–[#1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798), [#1792](https://github.com/AdaWorldAPI/lance-graph/pull/1792) (MERGED ownership audit), EXO-46, EXO-121/122/123, EXO-126/127/151/152. + +## 0. Coordinate architectures by ownership, not machinery + +**DT64 describes WHAT is bound, Quack computes WHAT the admitted algebra demands.** DT64 never executes an `IsAdmin` predicate, interprets SQL, evaluates ONNX, calls `action_confirm`, creates a business write transaction, or allocates a mandatory DR64³ cube. A *predicate mapping* describes business meaning + source origin + type + allowed read; a compiled recipe is an independently reusable executable law. Their lifecycle and owners differ. + +Canonical data remains under original source/SoA owner. The proposed DT64 binding store is a versioned **semantic registry/descriptor+binding adapter**, not a data replica, persistent mutable FrameStore, separately materialized universal graph, or runtime engine. + +This document *narrows* the DT64-0..5 roadmap: a minimal DT64-to-Quack borrowed **adapter lab** is the first executable candidate. All later edge×edge, Thought-Git, time series and ONNX proposals remain downstream and gated. No new runtime or physical tensor is a prerequisite. + +### Non-interchangeable identities + +| Identity | Owner / meaning | Never conflate with | +|---|---|---| +| `PredicateRef(catalogue/version/slot)` | DT64 semantic relationship/method signature | `ClassView::FieldMask` presence bit | +| `FieldRef` | ClassView schema field position/presence | Boolean truth or permission | +| `GlobalKey(source namespace, kind, key)` | original DTO object | coincident local `u16` ordinal | +| `CoordinateWitness(focus, map)` | admitted global→local focus | DR physical row, palette code | +| `PhysicalSelection/DR tile` | optional Quack/DR execution carrier | versioned business relationship source | +| `Palette256/Codec8 numerical code` | ndarray/D-NAM numerical implementation | any of 64 DT64 predicate slots | +| `PreparedRecipeRef` | compiled reusable native law | detached Keep or source snapshot | +| `SourceSnapshotRef` | source owner’s actual immutable version | `QueryReference::at` reading horizon | +| `ScopeWitness` | separately validated actor/resource permission | field presence / successful identity join | + +## 1. One source-attested semantic binding, no proposed production ABI yet + +Conceptual **cold** record, preferably a view over existing authoritative types: + +```text +SemanticBinding<'source> [PROPOSED DOCUMENT SHAPE ONLY] { + source_object: (namespace, source_kind, opaque_stable_key), + predicate: (catalogue_id, catalogue_version, slot, + typed_domain, typed_range, arity, direction, + source_field_or_relationship_anchor), + schema: (source_schema_id, schema_digest, binding_revision), + source: (owner_identity, actual_physical_snapshot_ref, + observed_at, valid_time_if_known), + coordinate: (source_global_to_local_witness, focus_generation, row_order), + codebook: optional (identity, generation, validity_contract), + policy: (tenant/resource_scope, actor/authorization_witness, + completeness_and_negative_observation_witness), + input: borrowed typed source-lane references<'source>, + recipe: separately compiled/verified native recipe identifier, +} +``` + +This is an **obligation checklist**, not permission to add a duplicate struct to the contract. Seek existing `ClassView`, `MailboxSoaView`, `SoaEnvelope`, Quack `Col`/`Query`, mask-risc `LaneRef`, D-DRMC recipe and D-RMAP focus witness shapes first; name which precise fields are absent. If no source owner/physical snapshot witness exists, keep it OPEN and refuse escaped use. Do not invent an owner from a numeric cycle. + +At runtime inside a live immutable source borrow, Quack executes direct borrowed lanes with **no extra per-op ownership check**; outer preparation validates source/type/scope/coordinates. If an input must be decoded or widened, charge copy/calibration and label it non-zero-copy. Existing Quack lane types may not accept `u16` class IDs or `f32` energy directly. Use already-supported U32/U64 and typed masks for first fixture; do not build new LaneRef variants as a prerequisite. + +**Borrow guarantees data immutability, not permission.** ACL/scope is checked independently by source authority, especially on multi-source bindings. + +## 2. First exactly eight test predicates and data oracles + +These are **catalogue candidates with confirmed or laboratory source surfaces**, not a claim that all are shipped DT64 mappings. Catalogue slot numbers are from the DT64-1 *proposed* fixed grouping and remain provisional; not an ABI. + +| slot (proposed) | predicate | type | source anchor / independent oracle | critical refusal | +|---:|---|---|---|---| +| 08 | `MEMBER_OF_DIRECT` | principal/group → group | `dir-sim/ad.rs` `member`, direct `View`; no transitive substitution | foreign group key, unread membership | +| 11 | `SECURITY_GROUP` | unary group classification | `dir-sim/groups.rs::SecurityEnabled`, SID semantics | mail-enabled SMTP ≠ security SID | +| 12 | `MAIL_ENABLED_GROUP` | unary group classification | `dir-sim/groups.rs::MailEnabled`, primary SMTP semantics | security SID ≠ mail enabled | +| 13 | `GROUP_GRANTS_ROLE` | group → declared role | `dir-sim/actors.rs::GroupRoles`, versioned policy | missing policy/unread role list | +| 14 | `EFFECTIVE_ROLE` | principal → role (derived) | `dir-sim/actors.rs::role_evidence`, pre-existing compiled fold | nested security support, role scope, double-support | +| 17 | `HAS_REMOTE_MAILBOX` | unary AD-recipient kind | `dir-sim/cloud.rs::Recipient::RemoteMailbox` | remote recipient ≠ created EXO mailbox | +| 18 | `HAS_EXO_MAILBOX` | principal → cloud mailbox **only where unique and witnessed** | `dir-sim/cloud.rs::CloudMailboxes`, explicit cloud/exchange identifiers | CloudUnread, two targets, mismatch / backsync | +| 32 | `CATS_ENTRY_EMPLOYEE` | CATS entry → SAP scoped employee key | `lance-graph-sap/src/schema.rs` ordinal 5, `bind.rs` source data | same numeric PERNR ≠ AD/Odoo identity | + +**All 8 participate in semantic binding; only binary relations participate in the three SPO orientations.** Unary classifiers are unary WHERE/mask filters, not fictitious entity→Boolean-object edges. To exercise `(s,p)→o`, `(p,o)→s`, `(s,o)→p`, use witnessed binary relations 08, 13, 14, 18, 32, subject to defined endpoint types and complete focus. An inverse *query* returns subjects; it must never assert a reverse business fact. + +No licence assignment test is allowed to pass without a separate real Entra SKU/service plan DTO authority. Do not infer licence from mailbox. + +### Lab fixture: source-shaped but independently authored + +- IAM: 64 principals, 12 groups including a nested diamond, one security group with no SMTP and one distribution group with no SID. Read source policy and roles, include an unread group and explicit complete-negative subdomain. +- Exchange: four cloud mailbox observations, one matched, one CloudUnread, one AwaitingBacksync and one ambiguous foreign link. Preserve mailbox GUID and ExternalDirectoryObjectId meanings; no fake automatic licence proof. +- SAP: eight CATS entries from two client namespaces; identical PERNR in both, optional null project/customer values; compare to existing `CatsBatch` field extraction, not a synthetically asserted AD identity join. +- Scope: two tenants, separate source owners and versions; one read denied under otherwise equal data. +- Prep: witnessed typed focus; no guessed cross-system identity. Odoo remains documented candidate for a *later* source integration, outside first binary fixture. + +### Differential oracles + +A: independent scalar source DTO traversal/classification, source semantics manually asserted from fixture. +B: Quack+mask-risc through live immutable source borrow and prepared recipe. +C: optional DR64² Boolean relation tile over the same witnessed focus, only when it pays; compare parity and costs. +D: optionally existing direct `dir-sim` and `lance-graph-sap` behavior as an additional cross-check, not as the sole independent oracle. + +Run directionally correct `Count/Exists/Keep` with output only at named terminal. Record source snapshots, schema, focus, scope, completeness and predicate catalogue at bind time. Avoid tuples in hot fold. The first proof requires **no DR64³**, no field-mask reinterpretation and no ONNX. + +## 3. #1792: two different reuse lifetimes and mandatory falsifier + +### Borrow lifetime (admitted execution) +`&Owner` → typed borrowed lanes → prepared Quack `Program`/mask-risc → answer. Mutating the same owner during live borrow must be rejected by safe Rust, as demonstrated by #1755. Per-operation generation checks duplicating a borrow invariant are unnecessary. + +### Escaped result lifetime (blocked until source-attested dependency) +`Keep` or compiled data-derived selection becomes owned and survives the `&Owner` borrow. Its recipe hash is **not** a source/witness. Owner mailbox cycle and `last_write_cycle` are insufficient: #1792 Part E demonstrated public setters/fields, reset+same-cycle ABA and same numerical stamps from different mailboxes. `QueryReference::at` is a temporal horizon, not proof of one Lance `checkout_version`. + +**Required adversary:** reproduce/reference the P2 1,032 versus 31 stale `R` selection under changed predicate source values; reusing detached selection must RECOMPUTE/REFUSE, not silently return previous `Keep`. A compiled mathematical recipe may be reused on fresh, independently valid borrowed lanes after rebind. + +Never solve this by introducing a new FrameStore, invented generation in Quack or cheap hash assumed to represent source authority. A future escaped cache requires separate complete source/owner/snapshot/dependency/focus/codebook/scope witnesses and mutation-path encapsulation; that arc stays OPEN. + +## 4. Acceptance and refusal matrix + +| Falsifier | Expected | +|---|---| +| all eight source predicates with independent oracle, labels respected | equal where admitted | +| unary classification presented as binary fact | type refusal | +| identity collision `same local index, different source` | refuse | +| SAP client A vs B equal PERNR | distinct | +| mail-only group treated as permission-bearing | refuse/not granted | +| group role grant unread vs explicit complete no-grant | UNKNOWN vs FALSE | +| role supported by two nested SID paths, remove one | remains TRUE | +| remote mailbox with unread or backsync incomplete | no claim of proven EXO mailbox | +| missing authoritative SKU source | LICENSE_ASSIGNED not admitted | +| scope denied after otherwise same bindings | refuse (not FALSE) | +| absent field, explicit NULL, unread, explicit false | distinct | +| QueryReference horizon same, physical dataset differs | no cross-source snapshot identity | +| predicate catalogue version or codebook changes | refuse stale semantic binding | +| source owner mutation during live borrow | compile-fail | +| change source after borrow; old `Keep` 1032, fresh 31 | never silently reuse old | +| transposed query invents reverse edge | refuse | +| 8 predicates vs global dense 64³ | direct baseline; cube not required | +| same compiled law rebound to fresh admitted source | correct fresh answer, reusable recipe | + +Each laboratory falsifier has an explicit independent expected answer and a negative/disable mutation that demonstrably changes the outcome. Tests not yet run are **PLANNED**. + +## 5. Exact staged engineering path, distinct from six docs-only PRs + +**QB-S0: Census and mapping receipt** (current documentation). Confirm real concrete source and lane APIs, compile-time borrow constraints, schema and scope gaps; PR #1792 and D-QSP contracts, no new struct. + +**QB-S1: Borrow-scoped thin adapter lab** (future, requires operator approval): one source-shaped fixture, 8 predicates mapped to existing typed Quack/RelAlg lanes. Gate with source/independent oracle and type/refusal tests. No general Registry API or cross-system production binding. + +**QB-S2: Directional projections** (future): forward/inverse/predicate query over binary predicates; unary stay WHERE; optional DR64² compared against direct lanes at full cold+hot+terminal cost; preserve K3/Bag and source focus. + +**QB-S3: Safe recipe rebinding** (future): same compiled recipe, two different valid source reads. Refuse/recompute escaped old `Keep`; compare to 1,032/31 falsifier and independent oracle. No complete detached cache in this stage. + +**QB-S4: Explicit ADOPT/KEEP_DIRECT/DEFER verdict** after cost/source oracle and witness review. Production escaped reuse, cross-source consistency, DR³ and actual connectors need separate source-owner decision. No code authorization from this design note. + +## 6. Numerical separation for future + +D-NAM/EXO-152 owns typed external numeric-method mapping. ndarrays own native kernels. SourceParity versus CertifiedMath, numerical `Codec8`/Palette256 i8/u8 code-space and −128 semantics, original weights/scales/zero-points, calibration/version fingerprints and prepared numerical certificates are **referenced**, never absorbed into a DT64 predicate descriptor or 64-slot table. ONNX/TFLite are leaf-lowering vocabularies. A model prediction is a computed result, never an observed IAM permission or mailbox fact. + +## 7. Coordination and outstanding contracts + +- **DT64 catalogue**: candidate 64 semantic slots, not approved ABI; source owner reviews in #1794. +- **#1792 MERGED**: borrow lifetime established; escaped `Keep` and physical source snapshot attestation **OPEN**. +- **EXO-46**: global→local production preparation admission unresolved. +- **NFR-OP-2**: DR³ third physical axis unresolved, *not on critical path QB-S1*. +- **EXO-148**: durable Thought-Git types absent; *not on critical path QB-S1*. +- **EXO-152**: D-NAM numerical methods are separate, *not on critical path QB-S1*. +- **Entra licences**: no source-supported SKU/admission in current dir-sim; never inferred. +- **Odoo**: source-extracted DTOs exist; a native Odoo method bind proof remains later. +- **Access**: nominal mailbox owner `mailbox_owner` and `cast_on_behalf` do not themselves authorize queries. + +**Exit for this coordination correction:** owners agree the shared interface is a source-attested borrowed semantic binding plus independent compiled recipe reference; one typed eight-predicate lab is the first requested executable proof, not 64 runtime adapters or a physical tensor. From fb8e570db57fa7aff757c6b37ea748eadb87a274 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:00:18 +0100 Subject: [PATCH 13/28] docs(DT64-Q0): align capstone and board on borrowed Quack seam --- .../plans/d-dt64-holographic-predicate-capstone-v1.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md index 9221f6a89..ca6d76a20 100644 --- a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md +++ b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md @@ -4,6 +4,16 @@ **Owner:** DT64 predicate mapping and evidence contract; coordinate existing source owners via EXO-50 before any code. **References:** [D-QR-CAP / EXO-121](https://linear.app/exo-red/issue/EXO-121), [D-QR-IAM / EXO-123](https://linear.app/exo-red/issue/EXO-123), [D-QR-SAP / EXO-122](https://linear.app/exo-red/issue/EXO-122), [D-QSP / EXO-126](https://linear.app/exo-red/issue/EXO-126), [D-DRMC / EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-46](https://linear.app/exo-red/issue/EXO-46), [EXO-148](https://linear.app/exo-red/issue/EXO-148), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152), [EXO-50](https://linear.app/exo-red/issue/EXO-50); [#1792](https://github.com/AdaWorldAPI/lance-graph/pull/1792). +## Coordination lock: first common DT64 ↔ Quack seam + +[**D-DT64-Q0 borrowed binding seam**](d-dt64-q0-borrowed-quack-binding-seam-v1.md) records the 2026-10-26 cross-session architecture agreement and supersedes any broader reading of the first executable stage in this charter. It is **coordination, not a new CC instruction**. One source-attested semantic binding contains typed source-object/predicate IDs, schema/catalogue version, source owner and actual pinned snapshot, focus witness, optional codebook generation, permission/completeness scope, **borrowed native input lanes** and a link to an independently reusable compiled recipe. This plan introduces **no production Rust struct/ABI**. + +- **DT64 owns semantics and binding**, not evaluation, method execution, ONNX, or a physical tensor. +- **Quack/RelAlg/R2IL/mask-risc own relational execution**, ndarray numerical kernels; **D-NAM/EXO-152 owns prepared numerical method identity/certificates**. SourceParity, CertifiedMath, calibration and implementation fingerprint do not inhabit DT64 predicate bits. +- **First landing is narrow:** eight sourced IAM/Exchange/SAP predicate candidates, owner-borrowed algebra, directed (s,p)→o / (p,o)→s / (s,o)→p access, independent scalar oracle and optional measured DR64². Odoo remains an explicitly documented later source-mapping extension, not a forced prerequisite for the first exact fixture. +- **#1792's 1,032 vs 31 stale Keep** falsifier remains mandatory. The compiled recipe may outlive a borrow; a detached Keep cannot be reused across source changes without a complete dependency witness, so recompute/refuse. +- **No DR64³ construction, new runtime, generalized replica or production writes** follow from the Q0 seam. + ## Thesis and precise terminology DT64 = **DTO Tensor 64**, a versioned *semantic adapter plate*: register up to 64 separately typed Boolean predicate mappings in a stable ordered catalogue. Source DTOs from IAM/AD/Entra/Exchange, Odoo and SAP bind into witnessed canonical identities, typed predicates and borrowed lanes. Quack / relalg / R2IL / mask-risc / ndarray operate over admitted native data. DT64 is **not** a replacement database, copied global entity table, new executor, or inference from similar field names. From f59b00f7bb7837d3fe1420d1ac0f638dd9097991 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:00:21 +0100 Subject: [PATCH 14/28] docs(DT64-Q0): align capstone and board on borrowed Quack seam --- .../board/entries/2026-10-26-dt64-holographic-interface.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md index f21d730b0..8b8017067 100644 --- a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md +++ b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md @@ -4,6 +4,10 @@ **User request:** detailed technical mapping of IAM, Entra/Exchange, Odoo and SAP DTOs into a proposed 64-predicate DT64 semantic interface; directed/holographic DR access, edge×edge, Thought-Git hypothesis/time, ONNX numeric lowerings; stage documentation PRs; link the open contracts in EXO-50. +## Cross-session Q0 coordination, same six-PR architecture + +[Borrowed DT64 → Quack binding seam](../../plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md) added on #1799, DOCS ONLY. A source-attested binding consists of typed source/predicate identity, schema+catalogue version, actual owner/source snapshot, global/local witness, relevant codebook generation, scope/completeness, `&source`-borrowed input lanes, and separate reusable Quack recipe. DT64 does not execute; Quack/relalg/R2IL/mask-risc do; ndarray does numeric kernels; D-NAM/EXO-152 owns prepared numerical certificates and explicit SourceParity vs CertifiedMath. **Eight grounded IAM/Exchange/SAP predicates** are the first minimal lab fixture; Odoo cross-system join is not implied. The #1792 1,032-vs-31 changed-property stale-mask counterexample is required. Optional DR64² only after cost proof; no DR64³ runtime. Q0 is a coordination amendment under DT64-0, **not** an additional implementation stage or a CC instruction. + ## Draft sequence with exact GitHub receipts | stage | PR | deliverable and status | From 622cc142db5fe4e4677978cb37ac1f2666b59ada Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:00:26 +0100 Subject: [PATCH 15/28] docs(DT64-Q0): align capstone and board on borrowed Quack seam --- .claude/board/STATUS_BOARD.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.claude/board/STATUS_BOARD.md b/.claude/board/STATUS_BOARD.md index 5eaac489c..b547867ec 100644 --- a/.claude/board/STATUS_BOARD.md +++ b/.claude/board/STATUS_BOARD.md @@ -11,6 +11,8 @@ | DT64-4 | [#1797](https://github.com/AdaWorldAPI/lance-graph/pull/1797) | dependency support and hypothesis/time receipts; EXO-148 missing durable IDs | | DT64-5 | [#1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798) | D-NAM/EXO-152 native method route, ONNX as leaf, computed result ≠ source fact | +**Shared Q0 execution seam (docs only, #1799):** [DT64 → borrowed Quack](../plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md). One attested semantic binding, source-owner immutable borrow, separate compiled recipe. First fixture: eight IAM/Exchange/SAP predicates, scalar/direct/Quack and optional DR64² comparison, three directed queries, mandatory #1792 1,032-vs-31 stale Keep refusal/recompute. No invented runtime, 64³ allocation, new execution authority or numerical method code. D-NAM/EXO-152 owns SourceParity/CertifiedMath certificates; DT64 only references handles. No tests yet. + **Hard blockers:** [EXO-46](https://linear.app/exo-red/issue/EXO-46) production focus admission, [#1792](https://github.com/AdaWorldAPI/lance-graph/pull/1792) escaped-Keep authority and physical snapshot, NFR-OP-2 axis selection, source-specific negative observation/ACL, EXO-148, missing Entra license and Odoo method source verification. Direct bitmask first; no claimed holographic global reconstruction until independent oracle. ## D-TFLP — TFLite models on the native polyfill: int8 codes as Palette256 (2026-10-25) From 8d402d9f52c51e955588fc5194607867dacb842a Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:00:30 +0100 Subject: [PATCH 16/28] docs(DT64-Q0): align capstone and board on borrowed Quack seam --- .claude/board/INTEGRATION_PLANS.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.claude/board/INTEGRATION_PLANS.md b/.claude/board/INTEGRATION_PLANS.md index f90103c07..e5934f542 100644 --- a/.claude/board/INTEGRATION_PLANS.md +++ b/.claude/board/INTEGRATION_PLANS.md @@ -2,6 +2,8 @@ **Status:** DESIGN ONLY, six draft docs PRs. **Board:** [D-DT64-0](entries/2026-10-26-dt64-holographic-interface.md) and [STATUS_BOARD](STATUS_BOARD.md). **Stages:** [DT64-1 #1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794) predicate/source catalogue, [DT64-2 #1795](https://github.com/AdaWorldAPI/lance-graph/pull/1795) IAM/Odoo/SAP/EXO DTO authority, [DT64-3 #1796](https://github.com/AdaWorldAPI/lance-graph/pull/1796) directed DR projections, [DT64-4 #1797](https://github.com/AdaWorldAPI/lance-graph/pull/1797) edge×edge and Thought-Git temporal hypotheses, [DT64-5 #1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798) native method/ONNX/time series. [EXO-50](https://linear.app/exo-red/issue/EXO-50) is append-only handoff; all these are independent docs-only branches and **NOT** production PRs or measured probes. +**Q0 cross-session binding lock (docs only):** [source-attested borrowed DT64↔Quack interface](../plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md) in #1799. Eight real IAM/Exchange/SAP predicate candidates first, exact typed source/scoped identities, physically attested snapshot, borrowed lanes and reusable *recipe*, not reusable stale Keep. Directed (s,p)→o / (p,o)→s / (s,o)→p answers against original source and independent oracle; DR64² optional costed arm. #1792's 1,032-vs-31 stale selection is binding refusal control; numerical contracts remain D-NAM/EXO-152+ndarray. No new stage, runtime, ONNX authority, physical DR64³ or live write. + DT64 64 entries = versioned *typed predicate* registry hypothesis, not ClassView field mask, not physically decided DR³ third axis. Source-mapped IAM groups/mailbox/license (license source not present), Odoo employee/user/partner/company, SAP CATS 23/16/8 ordered fields; unknown vs false vs revoked; frame/focus/scope/predicate catalogue and source identity all need witnesses. Borrow-only Quack safe; escaped masks and physical Lance cross-source snapshots remain unadmitted (#1792). Logical DR64³ 32 KiB bit plane excludes provenance/masks, with exact direct bitmask or CSR alternatives. No auto permissions/provisioning or model writes. **Owner precedents:** EXO-121/122/123, EXO-126/127/151/152, EXO-46 and EXO-148. ## 2026-10-26 — D-DR256-WHERE population-masked reads, thought amortization, DuckDB harvest → `.claude/plans/dr256-where-capstone-v1.md` From 153a5c76f9f9e5fcd724ff22b3a6fe72c56d0f86 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:00:49 +0100 Subject: [PATCH 17/28] docs(DT64-0): prioritize owner-attested borrowed Quack binding before optional tensors --- .../d-dt64-holographic-predicate-capstone-v1.md | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md index ca6d76a20..aa60965a9 100644 --- a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md +++ b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md @@ -106,3 +106,16 @@ No live SAP/Odoo/AD/Entra connectivity, provisioning, license changes, account m ## Agent handoff Source-first review and proposed falsifier protocol: [d-dt64-source-first-claude-code-handoff.md](../prompts/d-dt64-source-first-claude-code-handoff.md). No implementation or production authorization is conferred by this prompt. + + +## DT64-QB coordination precedence: narrow source-attested borrowed binding (2026-10-26) + +**Controlling first executable seam:** [D-DT64-QB-0](d-dt64-quack-borrowed-binding-seam-v1.md). This section narrows the six broad docs-only stages above: DT64 is a *versioned semantic binding-store adapter*, not a new executor, method evaluator, numerical certificate owner, source data replica or mandatory physical tensor. Quack/RelAlg/R2IL/mask-risc execute deterministic relational operations; ndarray executes native numerical kernels; D-NAM/EXO-152 owns admitted numerical methods and SourceParity/CertifiedMath certificates. DT64 references those methods, never implements their execution or embeds Palette256 numeric codes into 64 semantic predicate slots. + +**One conceptual source-attested binding:** typed source-object and predicate ID; source schema and DT64 catalogue version; owner + actual immutable physical snapshot; typed global/local coordinate witness; codebook generation if present; independent permission and read-completeness scope; borrowed input lanes with source lifetime; reference to separately reusable compiled mathematical recipe. ClassView field-presence masks, local DR ordinals, semantic predicate slots and numerical Palette256 codes remain separate. Nominal mailbox owner is provenance, not ACL. `QueryReference::at` horizon is not a physical dataset checkout. + +**First executable proof, only if separately authorized:** eight source-grounded IAM/Exchange/SAP predicates, catalogue candidates 08 direct membership, 11 security group, 12 mail-enabled group, 13 group-role grant, 14 effective role, 17 remote-mailbox recipient, 18 confirmed cloud mailbox and 32 CATS entry→scoped PERNR. Preserve unary classifications as unary; test directional `(s,p)→o`, `(p,o)→s`, `(s,o)→p` on binary predicates only. One source-shaped synthetic fixture, one independently authored scalar oracle, one live immutable borrowed Quack evaluation, optional *cost-justified* DR64² Boolean relation view. No license truth without real Entra source. No fabricated Odoo/AD/SAP principal equivalence. + +**#1792 source-boundary gate:** now MERGED, but does not provide escaped-selection attestation. In-borrow Quack runs without redundant mutation checks; reusable recipe can be rebound against fresh source; detached `Keep` cannot reuse by caller cycle or recipe hash. The 1,032-old / 31-fresh predicate selection counterexample must refuse/recompute on source mutation. Source public fields, reset+same-cycle ABA and distinct owners with equal stamps make a lone generation/cycle insufficient. Physical source snapshot and complete mutation witness remain OPEN. + +**Dependency correction:** NFR-OP-2 DR³ physical third axis, EXO-148 durable Thought-Git ID types, Odoo method, ONNX/TFLite leaf, numerical code-space and physical 64³ cube are **not blockers for the first eight-binding Quack lab**. Retain them as independently gated successors. No production implementation, ABI change, cache, writer/WAL, connector access or merge is authorized by this amendment. Coordination uses EXO-50 append-only comments, not shared mutable messages. From b89659f0daede624f657983b2c0993f4eb1d8d2c Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:01:42 +0100 Subject: [PATCH 18/28] docs(DT64-QB): reconcile Quack borrowed-binding minimal handoff --- .../prompts/d-dt64-source-first-claude-code-handoff.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.claude/prompts/d-dt64-source-first-claude-code-handoff.md b/.claude/prompts/d-dt64-source-first-claude-code-handoff.md index 0e0f6f049..07ed1fb07 100644 --- a/.claude/prompts/d-dt64-source-first-claude-code-handoff.md +++ b/.claude/prompts/d-dt64-source-first-claude-code-handoff.md @@ -37,3 +37,12 @@ No new runtime, interpreter, planner, relalg variant, implicit proof checker, wr Read [EXO-50](https://linear.app/exo-red/issue/EXO-50) inbox messages before implementation; post **new** comment using mandatory message envelope and full actual CC session ID. Reference PRs by exact number and stage. Do not edit another agent's message; do not claim the inbox comment is approval. Done means plans have an accurate status/evidence matrix, no cross-repo source claims have drifted, and all independently measurable risks have a falsifier. Nothing ships until code PRs are separately approved, tested and merged. + + +## Cross-session Quack handoff: narrower first gate (2026-10-26) + +**Read first:** `.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md`. This is the controlling description for the FIRST executable lab. DT64 must supply semantic source object/predicate identity, schema+catalogue versions, source owner/physical snapshot identity, global/local coordinate witness, codebook generation as applicable, permission+completeness scope, a live borrowed lane and independently reusable compiled recipe reference. Quack/RelAlg/R2IL/mask-risc execute; ndarray numerical kernels and D-NAM method certificates remain separate. No mandatory tensor/DR³ or new runtime. + +Use catalogue slots **08,11,12,13,14,17,18,32** as candidate eight-predicate fixtures, with sourced dir-sim and SAP references; **11,12,17 are unary classifications**, not fabricated object edges. Three SPO query orientations are tested on genuinely binary relations only. Independent scalar source oracle plus existing dir-sim/SAP tests, distinct UNKNOWN/NULL/FALSE/DENIED, and full bind+prepare+fold+output cost. The P2 **1,032-old vs 31-fresh** stale- Keep counterexample and same-cycle/reset/public-field mutations from #1792 must prevent escaped reuse. Borrowed recipes may outlive source *as recipes*, not as cached masks. No production adapter implementation without a separate operator decision. + +**Post-merge status correction:** #1792 merged to main; its source owner escaped-result authority remains OPEN. Local ClassView FieldMask bit, 64 semantic predicate slot, DR coordinate and Palette256 code are different domains. Stage DT64-QB-S0 census → S1 borrowed-binding lab → S2 directional algebra and optional DR64² cost test → S3 recipe rebind/stale Keep refusal → S4 adoption decision. Do not gate this proof on the proposed Thought-Git or ONNX work. From 10fb02e53b3a855871c1c0f355e1a591c799de3a Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:01:45 +0100 Subject: [PATCH 19/28] docs(DT64-QB): reconcile Quack borrowed-binding minimal handoff --- .../entries/2026-10-26-dt64-holographic-interface.md | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md index 8b8017067..840a73cc2 100644 --- a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md +++ b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md @@ -49,3 +49,12 @@ **Agent handoff:** [Source-first CC brief](../../prompts/d-dt64-source-first-claude-code-handoff.md) (read-only first; no code authorization). **Handoff:** [EXO-50](https://linear.app/exo-red/issue/EXO-50/agent-message-bus-gpt-xgrok-ccsession-id) append-only [coordination message](https://linear.app/exo-red/issue/EXO-50) posted as `GPT:gpt-ada-01/D-DT64-1799-20261026` with all six PR receipts; acknowledgement requested. [EXO-121](https://linear.app/exo-red/issue/EXO-121), [EXO-122](https://linear.app/exo-red/issue/EXO-122), [EXO-123](https://linear.app/exo-red/issue/EXO-123), [EXO-126](https://linear.app/exo-red/issue/EXO-126), [EXO-127](https://linear.app/exo-red/issue/EXO-127), [EXO-151](https://linear.app/exo-red/issue/EXO-151), [EXO-152](https://linear.app/exo-red/issue/EXO-152). + + +## DT64-QB — parallel Quack/algebra coordination correction + +**Source:** [D-DT64-QB-0](../../plans/d-dt64-quack-borrowed-binding-seam-v1.md). This is the first execution contract, **NOT** a new runtime or authorized implementation. DT64 = semantic binding-store adapter; Quack/RelAlg/R2IL/mask-risc = relational evaluation; ndarray = native numerics; D-NAM/EXO-152 = prepared numerical-method semantics and certificates. The eight IAM/Exchange/SAP candidate predicates are catalogue slots **08, 11, 12, 13, 14, 17, 18, 32**. Unary group/mailbox classifications do not acquire invented inverse edges; directional projections apply to typed binary predicates only. + +**Admission:** typed source object + predicate; schema/catalogue revisions; owner + ACTUAL physical source snapshot; sealed global/local focus; optional codebook generation; permission and completeness authority; live borrowed lanes; independently reusable compiled recipe identity. `ClassView FieldMask`, DR coordinate, predicate slot and Palette256 numeric code remain distinct. Borrow-scoped run needs no redundant ownership guard; detached Keep requires source-attested dependency or recomputation/refusal; #1792 old 1,032 vs fresh 31 remains falsifier. #1792 itself is MERGED, but source attestation and escaped reuse remain OPEN. + +**First independently authorized candidate:** S0 source census, then S1 eight-predicate borrowed adapter against independent scalar oracle, S2 directed SPO views and optional DR64² comparative route, S3 recipe rebind and stale Keep refusal. No DR³ mandatory, no source data replication, no ONNX, no writes. Later DT64-4/5 are independent research successors, not blockers. This correction changes no code/test claims. From 8b7d3163665fc01f06eadadcb0dec046fea9cd83 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:01:49 +0100 Subject: [PATCH 20/28] docs(DT64-QB): reconcile Quack borrowed-binding minimal handoff --- .claude/board/STATUS_BOARD.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.claude/board/STATUS_BOARD.md b/.claude/board/STATUS_BOARD.md index b547867ec..112d8d7d3 100644 --- a/.claude/board/STATUS_BOARD.md +++ b/.claude/board/STATUS_BOARD.md @@ -3134,3 +3134,8 @@ Plan path: `.claude/plans/polyglot-container-query-membrane-v1.md`. Research gro | D-HXP-6 | W4 — the flow channel: promotion yield vs challenge/skill (`mul::FlowState`, `#[repr(u8)]`, D-CSV-13b) | Queued | PASS yield peaks in the middle escape bucket (0 % / ~50 % / 85 % = Boredom / Flow / Anxiety). Two-sided kills: yield monotone in escape → the flow model is wrong; yield flat → `FlowState` carries no information here and must not be cited as a mechanism | | D-HXP-7 | **EWA concentration gate** — replaces the struck W0 signal gate (§10). `ewa_sandwich` + `pillar_5plus_bound`, zero-dep in the contract | Queued | PASS PSD ≥ 0.999 AND measured CV ≤ 1.75 × bound at **n ≥ 10** (bound 0.7483 at n=5 → 0.5715 at n=12). **KILL** CV exceeds slack at n ≤ 5. BETWEEN: the largest holding `n` becomes W3's measured path budget. **Anti-vacuity mandatory** — the unstructured fixture must FAIL at low n, else this gate is struck like its predecessor. Disable: plain additive accumulation must go red at n ≥ 10 | | D-HXP-8 | **Board games as the Raumgewinn falsifier** (operator, 2026-09-15: *"tiktaktoe gobbang, go … falsifiable"*) — cells as units, the six rails as neighbours (Hex exact; Go 4 of 6; tic-tac-toe / Gobang 8 directions), positions evaluated by HDR popcount stacking through `TierFloors::stack_early_exit`, winner by `head2head::SupportSpread`; plan §12 | In progress — arm 1 (tic-tac-toe) RUN 2026-09-15: **F0 DEGENERATE**, not a KILL (every cell's rails reach all 8 others → the full stack is the board census, distinct values `1.000`; F1 tie-aware `0.5797` = baseline is the census signature). F0 fixture-validity gate added (plan §12a); next readable arm: Gobang 15×15 / Go 9×9 / Hex ≥ 7×7 (board diameter > 2 × deepest ring; Hex 5×5 fails). Meter note: signed tiers break the early exit (10.13 %), `TECH_DEBT` 2026-09-15 | F1 agreement with the solved value (tic-tac-toe: top move value-preserving ≥ 95 % of 765 positions, shuffled-rail null for chance; Go end positions: stacked territory == flood-fill scoring, an equality); F2 early exit changes NO verdict and exposes fewer tiers (fraction measured); **F3 mandatory degree-1 ablation must DROP F1** — flat = the task did not exercise the six (E-Q8) and the probe proves nothing. KILL: F1 at chance on tic-tac-toe, or F3 flat | + + +### DT64-QB cross-session first seam (2026-10-26) + +**Coordination result, DOCS ONLY:** [borrowed Quack binding design](../plans/d-dt64-quack-borrowed-binding-seam-v1.md) narrows DT64-0..5: first read-only, source-attested binding with original DTO identity, schema/catalogue version, actual owner + physical snapshot, local-focus/codebook witnesses, permission/completeness, borrowed input lanes and *separate reusable compiled recipe*. DT64 does not evaluate business predicates or native numerics; Quack/RelAlg/R2IL/mask-risc execute; ndarray does numeric kernels; D-NAM/EXO-152 owns numeric method certificates. Not one of ClassView FieldMask, DR address, 64 predicate slots or Palette256 numeric code is interchangeable. **Eight candidates** = catalogue 08/11/12/13/14/17/18/32 from dir-sim/Exchange/SAP (unary kept unary); compare scalar oracle ↔ Quack ↔ optional DR64². #1792 **MERGED** proves in-borrow stability and falsifies escaped Keep (1,032 old vs 31 fresh); complete mutation/source-snapshot reuse witness still **OPEN**. No code, physical DR³, runtime, source write or permission admission. From e0295e460a951bddb614f0af268755f371952de2 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:01:53 +0100 Subject: [PATCH 21/28] docs(DT64-QB): reconcile Quack borrowed-binding minimal handoff --- .claude/board/INTEGRATION_PLANS.md | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.claude/board/INTEGRATION_PLANS.md b/.claude/board/INTEGRATION_PLANS.md index e5934f542..b9aae21ee 100644 --- a/.claude/board/INTEGRATION_PLANS.md +++ b/.claude/board/INTEGRATION_PLANS.md @@ -4149,3 +4149,8 @@ Phase 1 fix the lance-phase2 build (`MedcareOntology::default()` calls broken no ### Scope Consolidates the 4 consumer-integration plans into a P0/P1/P2-prioritised POC roadmap. **First POC slice = woa-rs PR-5 (XRechnung visible reward)** — the moment 6 months of lance-graph substrate work produces its first customer-deliverable artefact (EN16931-conformant ZUGFeRD/Factur-X invoice via `hydrate_zugferd` + `SchematronHydrator` + `XsdHydrator`). Maps 1:1 to "First Foundry-style projection: fibo:Transaction" Phase 9 from `erp_foundry_hhtl_ontology_distillation.md`. P0 effort ~7-8 days. P1 closes parity dashboard + RLS-via-codegen-bucket + MedCare/SMB cross-consumer harvest. P2 = opt-in Cypher/similarity/MongoDB alt cold path. No new D-ids; this plan re-indexes existing D-UB-/D-WLG-/D-LGMC-/D-LGSMB- IDs by priority. + + +### DT64-QB joint execution seam (coordination amendment, 2026-10-26) + +[DT64 ↔ Quack source-attested borrowed binding](../plans/d-dt64-quack-borrowed-binding-seam-v1.md) is the smallest first possible lab after separate approval: 8 IAM/Exchange/SAP source-grounded predicate candidates, authoritative source+snapshot/schema/catalogue/permission/focus/knownness descriptors, borrowed input lanes into existing Quack→RelAlg→R2IL→mask-risc/ndarray, independent scalar oracles and typed refusal. Source data, permissions and business behavior remain external; prepared native recipe reusable under fresh validated bindings, escaped Keep blocked unless recomputed/refused (#1792 old 1,032 / fresh 31). Three directional SPO query orientations only on actual binary relations, not unary group/mailbox classifiers. Optional DR64² costed against direct. Physical DR³, Thought-Git durability/EXO-148 and numerical ONNX/D-NAM EXO-152 are downstream, not prerequisites. STATUS_BOARD and EXO-50 carry handoff only; no production implementation authorized. From efffedd26f0b525d9b68f02184fdf03621b01b07 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:03:16 +0100 Subject: [PATCH 22/28] docs(DT64-QB): distinguish resident owner borrow from persisted physical checkout --- .claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md b/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md index d8bd61b8f..76136188f 100644 --- a/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md +++ b/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md @@ -35,7 +35,8 @@ SemanticBinding<'source> [PROPOSED DOCUMENT SHAPE ONLY] { typed_domain, typed_range, arity, direction, source_field_or_relationship_anchor), schema: (source_schema_id, schema_digest, binding_revision), - source: (owner_identity, actual_physical_snapshot_ref, + source: (owner_identity, owner_borrowed_snapshot_identity, + physical_dataset_checkout_if_persisted, observed_at, valid_time_if_known), coordinate: (source_global_to_local_witness, focus_generation, row_order), codebook: optional (identity, generation, validity_contract), @@ -46,7 +47,7 @@ SemanticBinding<'source> [PROPOSED DOCUMENT SHAPE ONLY] { } ``` -This is an **obligation checklist**, not permission to add a duplicate struct to the contract. Seek existing `ClassView`, `MailboxSoaView`, `SoaEnvelope`, Quack `Col`/`Query`, mask-risc `LaneRef`, D-DRMC recipe and D-RMAP focus witness shapes first; name which precise fields are absent. If no source owner/physical snapshot witness exists, keep it OPEN and refuse escaped use. Do not invent an owner from a numeric cycle. +This is an **obligation checklist**, not permission to add a duplicate struct to the contract. Seek existing `ClassView`, `MailboxSoaView`, `SoaEnvelope`, Quack `Col`/`Query`, mask-risc `LaneRef`, D-DRMC recipe and D-RMAP focus witness shapes first; name which precise fields are absent. For a resident in-process immutable owner borrow, the *actual source snapshot* is the owner-backed borrowed read window; no fictitious Lance checkout is required inside that lifetime. For a persisted Lance read, attest the specific dataset and physical checkout separately from the QueryReference horizon. If the required owner/snapshot witness does not exist, keep it OPEN and refuse escaped use. Do not invent an owner from a numeric cycle. At runtime inside a live immutable source borrow, Quack executes direct borrowed lanes with **no extra per-op ownership check**; outer preparation validates source/type/scope/coordinates. If an input must be decoded or widened, charge copy/calibration and label it non-zero-copy. Existing Quack lane types may not accept `u16` class IDs or `f32` energy directly. Use already-supported U32/U64 and typed masks for first fixture; do not build new LaneRef variants as a prerequisite. From 8139b13105042029bb49f6c7b5c75f2694ab2e7d Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:05:18 +0100 Subject: [PATCH 23/28] docs(DT64-QB): defer to parallel Quack Q0 authority, retain typed-slot clarifications --- .../d-dt64-quack-borrowed-binding-seam-v1.md | 158 +----------------- 1 file changed, 8 insertions(+), 150 deletions(-) diff --git a/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md b/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md index 76136188f..b6585761f 100644 --- a/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md +++ b/.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md @@ -1,157 +1,15 @@ -# D-DT64-QB-0 — DT64 ↔ Quack minimal source-attested borrowed binding +# D-DT64-QB: Compatibility pointer and typed-predicate clarifications -**Date:** 2026-10-26. **Status:** COORDINATION CORRECTION / DESIGN ONLY, not an implemented ABI or approved code PR. **Owner split:** DT64 = semantic source adapter; Quack/RelAlg/R2IL/mask-risc = deterministic relational execution; ndarray = native math kernels; D-NAM/EXO-152 = prepared numerical method admission. **References:** DT64-0 [#1799](https://github.com/AdaWorldAPI/lance-graph/pull/1799), [#1794](https://github.com/AdaWorldAPI/lance-graph/pull/1794)–[#1798](https://github.com/AdaWorldAPI/lance-graph/pull/1798), [#1792](https://github.com/AdaWorldAPI/lance-graph/pull/1792) (MERGED ownership audit), EXO-46, EXO-121/122/123, EXO-126/127/151/152. +**Status:** NON-AUTHORITATIVE ADDENDUM / docs only, 2026-10-26. -## 0. Coordinate architectures by ownership, not machinery +**Controlling source:** [D-DT64-Q0: source-attested binding → borrowed Quack execution](d-dt64-q0-borrowed-quack-binding-seam-v1.md). This pointer remains for previously posted EXO-50 and PR review links. Do not maintain a competing source-binding contract here. Changes to the common interface belong in the Q0 document. -**DT64 describes WHAT is bound, Quack computes WHAT the admitted algebra demands.** DT64 never executes an `IsAdmin` predicate, interprets SQL, evaluates ONNX, calls `action_confirm`, creates a business write transaction, or allocates a mandatory DR64³ cube. A *predicate mapping* describes business meaning + source origin + type + allowed read; a compiled recipe is an independently reusable executable law. Their lifecycle and owners differ. +## Clarifications for the eight first-lab catalogue candidates -Canonical data remains under original source/SoA owner. The proposed DT64 binding store is a versioned **semantic registry/descriptor+binding adapter**, not a data replica, persistent mutable FrameStore, separately materialized universal graph, or runtime engine. +The proposed DT64-1 slot labels are: 08 `MEMBER_OF_DIRECT`, 11 `SECURITY_GROUP`, 12 `MAIL_ENABLED_GROUP`, 13 `GROUP_GRANTS_ROLE`, 14 `EFFECTIVE_ROLE`, 17 `HAS_REMOTE_MAILBOX`, 18 `HAS_EXO_MAILBOX`, 32 `CATS_ENTRY_EMPLOYEE`. Numbers are NOT ratified production ABI. -This document *narrows* the DT64-0..5 roadmap: a minimal DT64-to-Quack borrowed **adapter lab** is the first executable candidate. All later edge×edge, Thought-Git, time series and ONNX proposals remain downstream and gated. No new runtime or physical tensor is a prerequisite. +Slots **11, 12 and 17 are unary classifications**, and must remain unary WHERE/filter predicates. Never manufacture a source→Boolean-object edge for their sake. Three directional `(s,p)→o`, `(p,o)→s`, `(s,o)→p` projections apply to **admitted typed binary relations**, not untyped arbitrary slots. -### Non-interchangeable identities +The owner-backed immutable in-memory borrow establishes the read window for a resident source; it does NOT imply a specific Lance dataset checkout. A persisted source requires an actual pinned physical reader separately from temporal `QueryReference::at`, and permission/coverage witnesses remain independent of both. -| Identity | Owner / meaning | Never conflate with | -|---|---|---| -| `PredicateRef(catalogue/version/slot)` | DT64 semantic relationship/method signature | `ClassView::FieldMask` presence bit | -| `FieldRef` | ClassView schema field position/presence | Boolean truth or permission | -| `GlobalKey(source namespace, kind, key)` | original DTO object | coincident local `u16` ordinal | -| `CoordinateWitness(focus, map)` | admitted global→local focus | DR physical row, palette code | -| `PhysicalSelection/DR tile` | optional Quack/DR execution carrier | versioned business relationship source | -| `Palette256/Codec8 numerical code` | ndarray/D-NAM numerical implementation | any of 64 DT64 predicate slots | -| `PreparedRecipeRef` | compiled reusable native law | detached Keep or source snapshot | -| `SourceSnapshotRef` | source owner’s actual immutable version | `QueryReference::at` reading horizon | -| `ScopeWitness` | separately validated actor/resource permission | field presence / successful identity join | - -## 1. One source-attested semantic binding, no proposed production ABI yet - -Conceptual **cold** record, preferably a view over existing authoritative types: - -```text -SemanticBinding<'source> [PROPOSED DOCUMENT SHAPE ONLY] { - source_object: (namespace, source_kind, opaque_stable_key), - predicate: (catalogue_id, catalogue_version, slot, - typed_domain, typed_range, arity, direction, - source_field_or_relationship_anchor), - schema: (source_schema_id, schema_digest, binding_revision), - source: (owner_identity, owner_borrowed_snapshot_identity, - physical_dataset_checkout_if_persisted, - observed_at, valid_time_if_known), - coordinate: (source_global_to_local_witness, focus_generation, row_order), - codebook: optional (identity, generation, validity_contract), - policy: (tenant/resource_scope, actor/authorization_witness, - completeness_and_negative_observation_witness), - input: borrowed typed source-lane references<'source>, - recipe: separately compiled/verified native recipe identifier, -} -``` - -This is an **obligation checklist**, not permission to add a duplicate struct to the contract. Seek existing `ClassView`, `MailboxSoaView`, `SoaEnvelope`, Quack `Col`/`Query`, mask-risc `LaneRef`, D-DRMC recipe and D-RMAP focus witness shapes first; name which precise fields are absent. For a resident in-process immutable owner borrow, the *actual source snapshot* is the owner-backed borrowed read window; no fictitious Lance checkout is required inside that lifetime. For a persisted Lance read, attest the specific dataset and physical checkout separately from the QueryReference horizon. If the required owner/snapshot witness does not exist, keep it OPEN and refuse escaped use. Do not invent an owner from a numeric cycle. - -At runtime inside a live immutable source borrow, Quack executes direct borrowed lanes with **no extra per-op ownership check**; outer preparation validates source/type/scope/coordinates. If an input must be decoded or widened, charge copy/calibration and label it non-zero-copy. Existing Quack lane types may not accept `u16` class IDs or `f32` energy directly. Use already-supported U32/U64 and typed masks for first fixture; do not build new LaneRef variants as a prerequisite. - -**Borrow guarantees data immutability, not permission.** ACL/scope is checked independently by source authority, especially on multi-source bindings. - -## 2. First exactly eight test predicates and data oracles - -These are **catalogue candidates with confirmed or laboratory source surfaces**, not a claim that all are shipped DT64 mappings. Catalogue slot numbers are from the DT64-1 *proposed* fixed grouping and remain provisional; not an ABI. - -| slot (proposed) | predicate | type | source anchor / independent oracle | critical refusal | -|---:|---|---|---|---| -| 08 | `MEMBER_OF_DIRECT` | principal/group → group | `dir-sim/ad.rs` `member`, direct `View`; no transitive substitution | foreign group key, unread membership | -| 11 | `SECURITY_GROUP` | unary group classification | `dir-sim/groups.rs::SecurityEnabled`, SID semantics | mail-enabled SMTP ≠ security SID | -| 12 | `MAIL_ENABLED_GROUP` | unary group classification | `dir-sim/groups.rs::MailEnabled`, primary SMTP semantics | security SID ≠ mail enabled | -| 13 | `GROUP_GRANTS_ROLE` | group → declared role | `dir-sim/actors.rs::GroupRoles`, versioned policy | missing policy/unread role list | -| 14 | `EFFECTIVE_ROLE` | principal → role (derived) | `dir-sim/actors.rs::role_evidence`, pre-existing compiled fold | nested security support, role scope, double-support | -| 17 | `HAS_REMOTE_MAILBOX` | unary AD-recipient kind | `dir-sim/cloud.rs::Recipient::RemoteMailbox` | remote recipient ≠ created EXO mailbox | -| 18 | `HAS_EXO_MAILBOX` | principal → cloud mailbox **only where unique and witnessed** | `dir-sim/cloud.rs::CloudMailboxes`, explicit cloud/exchange identifiers | CloudUnread, two targets, mismatch / backsync | -| 32 | `CATS_ENTRY_EMPLOYEE` | CATS entry → SAP scoped employee key | `lance-graph-sap/src/schema.rs` ordinal 5, `bind.rs` source data | same numeric PERNR ≠ AD/Odoo identity | - -**All 8 participate in semantic binding; only binary relations participate in the three SPO orientations.** Unary classifiers are unary WHERE/mask filters, not fictitious entity→Boolean-object edges. To exercise `(s,p)→o`, `(p,o)→s`, `(s,o)→p`, use witnessed binary relations 08, 13, 14, 18, 32, subject to defined endpoint types and complete focus. An inverse *query* returns subjects; it must never assert a reverse business fact. - -No licence assignment test is allowed to pass without a separate real Entra SKU/service plan DTO authority. Do not infer licence from mailbox. - -### Lab fixture: source-shaped but independently authored - -- IAM: 64 principals, 12 groups including a nested diamond, one security group with no SMTP and one distribution group with no SID. Read source policy and roles, include an unread group and explicit complete-negative subdomain. -- Exchange: four cloud mailbox observations, one matched, one CloudUnread, one AwaitingBacksync and one ambiguous foreign link. Preserve mailbox GUID and ExternalDirectoryObjectId meanings; no fake automatic licence proof. -- SAP: eight CATS entries from two client namespaces; identical PERNR in both, optional null project/customer values; compare to existing `CatsBatch` field extraction, not a synthetically asserted AD identity join. -- Scope: two tenants, separate source owners and versions; one read denied under otherwise equal data. -- Prep: witnessed typed focus; no guessed cross-system identity. Odoo remains documented candidate for a *later* source integration, outside first binary fixture. - -### Differential oracles - -A: independent scalar source DTO traversal/classification, source semantics manually asserted from fixture. -B: Quack+mask-risc through live immutable source borrow and prepared recipe. -C: optional DR64² Boolean relation tile over the same witnessed focus, only when it pays; compare parity and costs. -D: optionally existing direct `dir-sim` and `lance-graph-sap` behavior as an additional cross-check, not as the sole independent oracle. - -Run directionally correct `Count/Exists/Keep` with output only at named terminal. Record source snapshots, schema, focus, scope, completeness and predicate catalogue at bind time. Avoid tuples in hot fold. The first proof requires **no DR64³**, no field-mask reinterpretation and no ONNX. - -## 3. #1792: two different reuse lifetimes and mandatory falsifier - -### Borrow lifetime (admitted execution) -`&Owner` → typed borrowed lanes → prepared Quack `Program`/mask-risc → answer. Mutating the same owner during live borrow must be rejected by safe Rust, as demonstrated by #1755. Per-operation generation checks duplicating a borrow invariant are unnecessary. - -### Escaped result lifetime (blocked until source-attested dependency) -`Keep` or compiled data-derived selection becomes owned and survives the `&Owner` borrow. Its recipe hash is **not** a source/witness. Owner mailbox cycle and `last_write_cycle` are insufficient: #1792 Part E demonstrated public setters/fields, reset+same-cycle ABA and same numerical stamps from different mailboxes. `QueryReference::at` is a temporal horizon, not proof of one Lance `checkout_version`. - -**Required adversary:** reproduce/reference the P2 1,032 versus 31 stale `R` selection under changed predicate source values; reusing detached selection must RECOMPUTE/REFUSE, not silently return previous `Keep`. A compiled mathematical recipe may be reused on fresh, independently valid borrowed lanes after rebind. - -Never solve this by introducing a new FrameStore, invented generation in Quack or cheap hash assumed to represent source authority. A future escaped cache requires separate complete source/owner/snapshot/dependency/focus/codebook/scope witnesses and mutation-path encapsulation; that arc stays OPEN. - -## 4. Acceptance and refusal matrix - -| Falsifier | Expected | -|---|---| -| all eight source predicates with independent oracle, labels respected | equal where admitted | -| unary classification presented as binary fact | type refusal | -| identity collision `same local index, different source` | refuse | -| SAP client A vs B equal PERNR | distinct | -| mail-only group treated as permission-bearing | refuse/not granted | -| group role grant unread vs explicit complete no-grant | UNKNOWN vs FALSE | -| role supported by two nested SID paths, remove one | remains TRUE | -| remote mailbox with unread or backsync incomplete | no claim of proven EXO mailbox | -| missing authoritative SKU source | LICENSE_ASSIGNED not admitted | -| scope denied after otherwise same bindings | refuse (not FALSE) | -| absent field, explicit NULL, unread, explicit false | distinct | -| QueryReference horizon same, physical dataset differs | no cross-source snapshot identity | -| predicate catalogue version or codebook changes | refuse stale semantic binding | -| source owner mutation during live borrow | compile-fail | -| change source after borrow; old `Keep` 1032, fresh 31 | never silently reuse old | -| transposed query invents reverse edge | refuse | -| 8 predicates vs global dense 64³ | direct baseline; cube not required | -| same compiled law rebound to fresh admitted source | correct fresh answer, reusable recipe | - -Each laboratory falsifier has an explicit independent expected answer and a negative/disable mutation that demonstrably changes the outcome. Tests not yet run are **PLANNED**. - -## 5. Exact staged engineering path, distinct from six docs-only PRs - -**QB-S0: Census and mapping receipt** (current documentation). Confirm real concrete source and lane APIs, compile-time borrow constraints, schema and scope gaps; PR #1792 and D-QSP contracts, no new struct. - -**QB-S1: Borrow-scoped thin adapter lab** (future, requires operator approval): one source-shaped fixture, 8 predicates mapped to existing typed Quack/RelAlg lanes. Gate with source/independent oracle and type/refusal tests. No general Registry API or cross-system production binding. - -**QB-S2: Directional projections** (future): forward/inverse/predicate query over binary predicates; unary stay WHERE; optional DR64² compared against direct lanes at full cold+hot+terminal cost; preserve K3/Bag and source focus. - -**QB-S3: Safe recipe rebinding** (future): same compiled recipe, two different valid source reads. Refuse/recompute escaped old `Keep`; compare to 1,032/31 falsifier and independent oracle. No complete detached cache in this stage. - -**QB-S4: Explicit ADOPT/KEEP_DIRECT/DEFER verdict** after cost/source oracle and witness review. Production escaped reuse, cross-source consistency, DR³ and actual connectors need separate source-owner decision. No code authorization from this design note. - -## 6. Numerical separation for future - -D-NAM/EXO-152 owns typed external numeric-method mapping. ndarrays own native kernels. SourceParity versus CertifiedMath, numerical `Codec8`/Palette256 i8/u8 code-space and −128 semantics, original weights/scales/zero-points, calibration/version fingerprints and prepared numerical certificates are **referenced**, never absorbed into a DT64 predicate descriptor or 64-slot table. ONNX/TFLite are leaf-lowering vocabularies. A model prediction is a computed result, never an observed IAM permission or mailbox fact. - -## 7. Coordination and outstanding contracts - -- **DT64 catalogue**: candidate 64 semantic slots, not approved ABI; source owner reviews in #1794. -- **#1792 MERGED**: borrow lifetime established; escaped `Keep` and physical source snapshot attestation **OPEN**. -- **EXO-46**: global→local production preparation admission unresolved. -- **NFR-OP-2**: DR³ third physical axis unresolved, *not on critical path QB-S1*. -- **EXO-148**: durable Thought-Git types absent; *not on critical path QB-S1*. -- **EXO-152**: D-NAM numerical methods are separate, *not on critical path QB-S1*. -- **Entra licences**: no source-supported SKU/admission in current dir-sim; never inferred. -- **Odoo**: source-extracted DTOs exist; a native Odoo method bind proof remains later. -- **Access**: nominal mailbox owner `mailbox_owner` and `cast_on_behalf` do not themselves authorize queries. - -**Exit for this coordination correction:** owners agree the shared interface is a source-attested borrowed semantic binding plus independent compiled recipe reference; one typed eight-predicate lab is the first requested executable proof, not 64 runtime adapters or a physical tensor. +No code or runtime change is authorized by this note. For source and test gates see the authoritative Q0 document. From c235ab1d9125d7ad7216c07cdefffe0bb05d196b Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:05:33 +0100 Subject: [PATCH 24/28] docs(DT64): align all board and handoff pointers to shared Quack Q0 authority --- .claude/plans/d-dt64-holographic-predicate-capstone-v1.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md index aa60965a9..00a545d48 100644 --- a/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md +++ b/.claude/plans/d-dt64-holographic-predicate-capstone-v1.md @@ -110,7 +110,7 @@ Source-first review and proposed falsifier protocol: [d-dt64-source-first-claude ## DT64-QB coordination precedence: narrow source-attested borrowed binding (2026-10-26) -**Controlling first executable seam:** [D-DT64-QB-0](d-dt64-quack-borrowed-binding-seam-v1.md). This section narrows the six broad docs-only stages above: DT64 is a *versioned semantic binding-store adapter*, not a new executor, method evaluator, numerical certificate owner, source data replica or mandatory physical tensor. Quack/RelAlg/R2IL/mask-risc execute deterministic relational operations; ndarray executes native numerical kernels; D-NAM/EXO-152 owns admitted numerical methods and SourceParity/CertifiedMath certificates. DT64 references those methods, never implements their execution or embeds Palette256 numeric codes into 64 semantic predicate slots. +**Controlling first executable seam:** [D-DT64-QB-0](d-dt64-q0-borrowed-quack-binding-seam-v1.md). This section narrows the six broad docs-only stages above: DT64 is a *versioned semantic binding-store adapter*, not a new executor, method evaluator, numerical certificate owner, source data replica or mandatory physical tensor. Quack/RelAlg/R2IL/mask-risc execute deterministic relational operations; ndarray executes native numerical kernels; D-NAM/EXO-152 owns admitted numerical methods and SourceParity/CertifiedMath certificates. DT64 references those methods, never implements their execution or embeds Palette256 numeric codes into 64 semantic predicate slots. **One conceptual source-attested binding:** typed source-object and predicate ID; source schema and DT64 catalogue version; owner + actual immutable physical snapshot; typed global/local coordinate witness; codebook generation if present; independent permission and read-completeness scope; borrowed input lanes with source lifetime; reference to separately reusable compiled mathematical recipe. ClassView field-presence masks, local DR ordinals, semantic predicate slots and numerical Palette256 codes remain separate. Nominal mailbox owner is provenance, not ACL. `QueryReference::at` horizon is not a physical dataset checkout. From 5526d719b8cab24b05a1a1a14b82fc0879ffc3b7 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:05:37 +0100 Subject: [PATCH 25/28] docs(DT64): align all board and handoff pointers to shared Quack Q0 authority --- .claude/prompts/d-dt64-source-first-claude-code-handoff.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude/prompts/d-dt64-source-first-claude-code-handoff.md b/.claude/prompts/d-dt64-source-first-claude-code-handoff.md index 07ed1fb07..16cc52f77 100644 --- a/.claude/prompts/d-dt64-source-first-claude-code-handoff.md +++ b/.claude/prompts/d-dt64-source-first-claude-code-handoff.md @@ -41,7 +41,7 @@ Done means plans have an accurate status/evidence matrix, no cross-repo source c ## Cross-session Quack handoff: narrower first gate (2026-10-26) -**Read first:** `.claude/plans/d-dt64-quack-borrowed-binding-seam-v1.md`. This is the controlling description for the FIRST executable lab. DT64 must supply semantic source object/predicate identity, schema+catalogue versions, source owner/physical snapshot identity, global/local coordinate witness, codebook generation as applicable, permission+completeness scope, a live borrowed lane and independently reusable compiled recipe reference. Quack/RelAlg/R2IL/mask-risc execute; ndarray numerical kernels and D-NAM method certificates remain separate. No mandatory tensor/DR³ or new runtime. +**Read first:** `.claude/plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md`. This is the controlling description for the FIRST executable lab. DT64 must supply semantic source object/predicate identity, schema+catalogue versions, source owner/physical snapshot identity, global/local coordinate witness, codebook generation as applicable, permission+completeness scope, a live borrowed lane and independently reusable compiled recipe reference. Quack/RelAlg/R2IL/mask-risc execute; ndarray numerical kernels and D-NAM method certificates remain separate. No mandatory tensor/DR³ or new runtime. Use catalogue slots **08,11,12,13,14,17,18,32** as candidate eight-predicate fixtures, with sourced dir-sim and SAP references; **11,12,17 are unary classifications**, not fabricated object edges. Three SPO query orientations are tested on genuinely binary relations only. Independent scalar source oracle plus existing dir-sim/SAP tests, distinct UNKNOWN/NULL/FALSE/DENIED, and full bind+prepare+fold+output cost. The P2 **1,032-old vs 31-fresh** stale- Keep counterexample and same-cycle/reset/public-field mutations from #1792 must prevent escaped reuse. Borrowed recipes may outlive source *as recipes*, not as cached masks. No production adapter implementation without a separate operator decision. From 2ac386399b1fe53b1ef3a2a3a0e486c0a84f152b Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:05:40 +0100 Subject: [PATCH 26/28] docs(DT64): align all board and handoff pointers to shared Quack Q0 authority --- .claude/board/entries/2026-10-26-dt64-holographic-interface.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md index 840a73cc2..10e223540 100644 --- a/.claude/board/entries/2026-10-26-dt64-holographic-interface.md +++ b/.claude/board/entries/2026-10-26-dt64-holographic-interface.md @@ -53,7 +53,7 @@ ## DT64-QB — parallel Quack/algebra coordination correction -**Source:** [D-DT64-QB-0](../../plans/d-dt64-quack-borrowed-binding-seam-v1.md). This is the first execution contract, **NOT** a new runtime or authorized implementation. DT64 = semantic binding-store adapter; Quack/RelAlg/R2IL/mask-risc = relational evaluation; ndarray = native numerics; D-NAM/EXO-152 = prepared numerical-method semantics and certificates. The eight IAM/Exchange/SAP candidate predicates are catalogue slots **08, 11, 12, 13, 14, 17, 18, 32**. Unary group/mailbox classifications do not acquire invented inverse edges; directional projections apply to typed binary predicates only. +**Source:** [D-DT64-QB-0](../../plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md). This is the first execution contract, **NOT** a new runtime or authorized implementation. DT64 = semantic binding-store adapter; Quack/RelAlg/R2IL/mask-risc = relational evaluation; ndarray = native numerics; D-NAM/EXO-152 = prepared numerical-method semantics and certificates. The eight IAM/Exchange/SAP candidate predicates are catalogue slots **08, 11, 12, 13, 14, 17, 18, 32**. Unary group/mailbox classifications do not acquire invented inverse edges; directional projections apply to typed binary predicates only. **Admission:** typed source object + predicate; schema/catalogue revisions; owner + ACTUAL physical source snapshot; sealed global/local focus; optional codebook generation; permission and completeness authority; live borrowed lanes; independently reusable compiled recipe identity. `ClassView FieldMask`, DR coordinate, predicate slot and Palette256 numeric code remain distinct. Borrow-scoped run needs no redundant ownership guard; detached Keep requires source-attested dependency or recomputation/refusal; #1792 old 1,032 vs fresh 31 remains falsifier. #1792 itself is MERGED, but source attestation and escaped reuse remain OPEN. From b89acccd448d4904fd916c62e64b6fd982beae05 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:05:45 +0100 Subject: [PATCH 27/28] docs(DT64): align all board and handoff pointers to shared Quack Q0 authority --- .claude/board/STATUS_BOARD.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude/board/STATUS_BOARD.md b/.claude/board/STATUS_BOARD.md index 112d8d7d3..730737e3d 100644 --- a/.claude/board/STATUS_BOARD.md +++ b/.claude/board/STATUS_BOARD.md @@ -3138,4 +3138,4 @@ Plan path: `.claude/plans/polyglot-container-query-membrane-v1.md`. Research gro ### DT64-QB cross-session first seam (2026-10-26) -**Coordination result, DOCS ONLY:** [borrowed Quack binding design](../plans/d-dt64-quack-borrowed-binding-seam-v1.md) narrows DT64-0..5: first read-only, source-attested binding with original DTO identity, schema/catalogue version, actual owner + physical snapshot, local-focus/codebook witnesses, permission/completeness, borrowed input lanes and *separate reusable compiled recipe*. DT64 does not evaluate business predicates or native numerics; Quack/RelAlg/R2IL/mask-risc execute; ndarray does numeric kernels; D-NAM/EXO-152 owns numeric method certificates. Not one of ClassView FieldMask, DR address, 64 predicate slots or Palette256 numeric code is interchangeable. **Eight candidates** = catalogue 08/11/12/13/14/17/18/32 from dir-sim/Exchange/SAP (unary kept unary); compare scalar oracle ↔ Quack ↔ optional DR64². #1792 **MERGED** proves in-borrow stability and falsifies escaped Keep (1,032 old vs 31 fresh); complete mutation/source-snapshot reuse witness still **OPEN**. No code, physical DR³, runtime, source write or permission admission. +**Coordination result, DOCS ONLY:** [borrowed Quack binding design](../plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md) narrows DT64-0..5: first read-only, source-attested binding with original DTO identity, schema/catalogue version, actual owner + physical snapshot, local-focus/codebook witnesses, permission/completeness, borrowed input lanes and *separate reusable compiled recipe*. DT64 does not evaluate business predicates or native numerics; Quack/RelAlg/R2IL/mask-risc execute; ndarray does numeric kernels; D-NAM/EXO-152 owns numeric method certificates. Not one of ClassView FieldMask, DR address, 64 predicate slots or Palette256 numeric code is interchangeable. **Eight candidates** = catalogue 08/11/12/13/14/17/18/32 from dir-sim/Exchange/SAP (unary kept unary); compare scalar oracle ↔ Quack ↔ optional DR64². #1792 **MERGED** proves in-borrow stability and falsifies escaped Keep (1,032 old vs 31 fresh); complete mutation/source-snapshot reuse witness still **OPEN**. No code, physical DR³, runtime, source write or permission admission. From 6c769223ebe3a6563e9579c4afcc398c6aa7a973 Mon Sep 17 00:00:00 2001 From: AdaWorldAPI Date: Mon, 26 Oct 2026 21:05:50 +0100 Subject: [PATCH 28/28] docs(DT64): align all board and handoff pointers to shared Quack Q0 authority --- .claude/board/INTEGRATION_PLANS.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.claude/board/INTEGRATION_PLANS.md b/.claude/board/INTEGRATION_PLANS.md index b9aae21ee..30543ccea 100644 --- a/.claude/board/INTEGRATION_PLANS.md +++ b/.claude/board/INTEGRATION_PLANS.md @@ -4153,4 +4153,4 @@ Consolidates the 4 consumer-integration plans into a P0/P1/P2-prioritised POC ro ### DT64-QB joint execution seam (coordination amendment, 2026-10-26) -[DT64 ↔ Quack source-attested borrowed binding](../plans/d-dt64-quack-borrowed-binding-seam-v1.md) is the smallest first possible lab after separate approval: 8 IAM/Exchange/SAP source-grounded predicate candidates, authoritative source+snapshot/schema/catalogue/permission/focus/knownness descriptors, borrowed input lanes into existing Quack→RelAlg→R2IL→mask-risc/ndarray, independent scalar oracles and typed refusal. Source data, permissions and business behavior remain external; prepared native recipe reusable under fresh validated bindings, escaped Keep blocked unless recomputed/refused (#1792 old 1,032 / fresh 31). Three directional SPO query orientations only on actual binary relations, not unary group/mailbox classifiers. Optional DR64² costed against direct. Physical DR³, Thought-Git durability/EXO-148 and numerical ONNX/D-NAM EXO-152 are downstream, not prerequisites. STATUS_BOARD and EXO-50 carry handoff only; no production implementation authorized. +[DT64 ↔ Quack source-attested borrowed binding](../plans/d-dt64-q0-borrowed-quack-binding-seam-v1.md) is the smallest first possible lab after separate approval: 8 IAM/Exchange/SAP source-grounded predicate candidates, authoritative source+snapshot/schema/catalogue/permission/focus/knownness descriptors, borrowed input lanes into existing Quack→RelAlg→R2IL→mask-risc/ndarray, independent scalar oracles and typed refusal. Source data, permissions and business behavior remain external; prepared native recipe reusable under fresh validated bindings, escaped Keep blocked unless recomputed/refused (#1792 old 1,032 / fresh 31). Three directional SPO query orientations only on actual binary relations, not unary group/mailbox classifiers. Optional DR64² costed against direct. Physical DR³, Thought-Git durability/EXO-148 and numerical ONNX/D-NAM EXO-152 are downstream, not prerequisites. STATUS_BOARD and EXO-50 carry handoff only; no production implementation authorized.