Refactor A99 semantic control plane toward closed-loop vNext

.gitattributes

@@ -1,3 +1,18 @@
+# Freeze artifacts are written by tests and read back by tests, so what checkout puts in the
+# working tree must be exactly what a regeneration writes. Left to core.autocrlf, checkout produced
+# CRLF on Windows while the writer produced LF; Git then reported the file modified to avoid
+# overwriting local work, and `git checkout` and `git bisect` aborted on a clean green run. The
+# content was never in question - `git diff` was empty - so pinning the checkout is the fix, not
+# changing what the artifacts say.
+# Kept to the directories a test regenerates. A wider rule reaches artifacts whose recorded hash
+# was taken over a checkout rather than over the committed bytes, and changing what checkout
+# produces would silently redefine whether those still verify - a separate question, not this one.
+/eval/a99-closed-loop/pdf-canary-072/** text eol=lf
+/eval/a99-closed-loop/docx-i8-doc0256/** text eol=lf
+/eval/a99-closed-loop/semantic-conflict-frozen-replay/** text eol=lf
+/eval/verification/** text eol=lf
+/eval/a99-closed-loop/pdf-gold-doc0252/** text eol=lf
+
 # These benchmark artifacts are bound by raw SHA-256 in N12/N14. Keep their Git blobs byte-identical
 # in every checkout; their .json extension does not grant Git permission to rewrite line endings.
 /eval/benchmark-n0/silver-labels/*.json -text

.github/workflows/deterministic.yml

@@ -0,0 +1,57 @@
+name: deterministic-contract
+
+on:
+  push:
+    branches:
+      - main
+      - refactor/a99-semantic-control-plane-vnext
+  pull_request:
+
+permissions:
+  contents: read
+
+env:
+  DOTNET_CLI_TELEMETRY_OPTOUT: '1'
+  DOTNET_NOLOGO: 'true'
+  A99_FREEZE_UPDATE: '0'
+  OPENROUTER_API_KEY: ''
+  SGLANG_API_KEY: ''
+  LMSTUDIO_API_KEY: ''
+
+jobs:
+  deterministic:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+
+      - name: Setup .NET
+        uses: actions/setup-dotnet@v4
+        with:
+          dotnet-version: 9.0.x
+
+      - name: Restore
+        run: dotnet restore
+
+      - name: Build Release
+        run: dotnet build -c Release --no-restore
+
+      - name: Focused authority and experiment contracts
+        run: >-
+          dotnet test tests/DocxHeaderExtractor.Tests/DocxHeaderExtractor.Tests.csproj
+          -c Release --no-build
+          --filter
+          "FullyQualifiedName~PdfExperimentManifestTests|FullyQualifiedName~PdfGoldAuthorityTests|FullyQualifiedName~PdfGoldEvaluatorTests|FullyQualifiedName~PdfGoldOccurrenceAuthorityTests|FullyQualifiedName~PdfGoldReviewDecisionAuthorityTests|FullyQualifiedName~PdfGoldReviewPackTests|FullyQualifiedName~P4ReachabilityCleanupTests"
+
+      - name: Full deterministic Release suite
+        run: dotnet test -c Release --no-build
+
+      - name: Generated-artifact cleanliness
+        shell: bash
+        run: |
+          git diff --check
+          if [ -n "$(git status --porcelain)" ]; then
+            echo 'Working tree changed during deterministic CI; frozen artifacts must not be regenerated.'
+            git status --short
+            exit 1
+          fi

.gitignore

@@ -58,3 +58,8 @@ bench/09-dien-mat-di.key
 # Bản kết xuất outline — sinh lại được bằng `dhx extract`, không đưa vào repo
 outline_out/
 outline_llm/
+
+# Cấu hình agent cục bộ. Nó thuộc về máy đang làm việc, không thuộc về mã nguồn:
+# skills và worktrees khác nhau giữa các máy, và worktrees còn chứa bản sao repo.
+.claude/
+.agents/

Directory.Packages.props

@@ -12,9 +12,7 @@
     <PackageVersion Include="Microsoft.AspNetCore.Mvc.Testing" Version="9.0.8" />
     <PackageVersion Include="Microsoft.NET.Test.Sdk" Version="17.12.0" />
     <PackageVersion Include="Microsoft.Extensions.Hosting" Version="9.0.6" />
-    <PackageVersion Include="System.Text.Json" Version="10.0.4" />
     <PackageVersion Include="ModelContextProtocol" Version="1.4.1" />
-    <PackageVersion Include="PDFtoImage" Version="5.4.0" />
     <PackageVersion Include="PdfPig" Version="0.1.15" />
     <PackageVersion Include="coverlet.collector" Version="6.0.2" />
     <PackageVersion Include="xunit" Version="2.9.2" />

DocxHeaderExtractor.sln

@@ -25,8 +25,6 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DocxHeaderExtractor.AgentHa
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DocxHeaderExtractor.Mcp", "src\DocxHeaderExtractor.Mcp\DocxHeaderExtractor.Mcp.csproj", "{B7F46DC4-47C1-4D39-BBE6-94CD88FDC458}"
 EndProject
-Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "DocxHeaderExtractor.Eval", "src\DocxHeaderExtractor.Eval\DocxHeaderExtractor.Eval.csproj", "{882AF564-213C-4E0C-BFB5-7502927C2B57}"
-EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		Debug|Any CPU = Debug|Any CPU
@@ -44,35 +42,35 @@ Global
 		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Debug|x86.ActiveCfg = Debug|Any CPU
 		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Debug|x86.Build.0 = Debug|Any CPU
 		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Release|Any CPU.ActiveCfg = Release|Any CPU
-	{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Release|Any CPU.Build.0 = Release|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|Any CPU.Build.0 = Debug|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x64.ActiveCfg = Debug|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x64.Build.0 = Debug|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x86.ActiveCfg = Debug|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x86.Build.0 = Debug|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Release|Any CPU.ActiveCfg = Release|Any CPU
-	{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Release|Any CPU.Build.0 = Release|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|Any CPU.Build.0 = Debug|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x64.ActiveCfg = Debug|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x64.Build.0 = Debug|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x86.ActiveCfg = Debug|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x86.Build.0 = Debug|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Release|Any CPU.ActiveCfg = Release|Any CPU
-	{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Release|Any CPU.Build.0 = Release|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|Any CPU.Build.0 = Debug|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x64.ActiveCfg = Debug|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x64.Build.0 = Debug|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x86.ActiveCfg = Debug|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x86.Build.0 = Debug|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Release|Any CPU.ActiveCfg = Release|Any CPU
-	{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Release|Any CPU.Build.0 = Release|Any CPU
+		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Release|Any CPU.Build.0 = Release|Any CPU
 		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Release|x64.ActiveCfg = Release|Any CPU
 		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Release|x64.Build.0 = Release|Any CPU
 		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Release|x86.ActiveCfg = Release|Any CPU
 		{C2C51F69-0DF0-4A12-B977-65E59E42CD1E}.Release|x86.Build.0 = Release|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x64.Build.0 = Debug|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Debug|x86.Build.0 = Debug|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{8DF36816-EBE2-449A-9C3F-4F68A12E3C0C}.Release|Any CPU.Build.0 = Release|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x64.Build.0 = Debug|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Debug|x86.Build.0 = Debug|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{FBFF8A16-B8C9-4780-9969-48B155F9867E}.Release|Any CPU.Build.0 = Release|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x64.ActiveCfg = Debug|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x64.Build.0 = Debug|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x86.ActiveCfg = Debug|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Debug|x86.Build.0 = Debug|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{E6A53B9A-3F1D-4BE7-8B3A-6DF3DD9F0B8C}.Release|Any CPU.Build.0 = Release|Any CPU
 		{F0D26F66-8B36-4B7F-A9EC-15DACC01E4B3}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
 		{F0D26F66-8B36-4B7F-A9EC-15DACC01E4B3}.Debug|Any CPU.Build.0 = Debug|Any CPU
 		{F0D26F66-8B36-4B7F-A9EC-15DACC01E4B3}.Debug|x64.ActiveCfg = Debug|Any CPU
@@ -133,18 +131,6 @@ Global
 		{B7F46DC4-47C1-4D39-BBE6-94CD88FDC458}.Release|x64.Build.0 = Release|Any CPU
 		{B7F46DC4-47C1-4D39-BBE6-94CD88FDC458}.Release|x86.ActiveCfg = Release|Any CPU
 		{B7F46DC4-47C1-4D39-BBE6-94CD88FDC458}.Release|x86.Build.0 = Release|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Debug|Any CPU.Build.0 = Debug|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Debug|x64.ActiveCfg = Debug|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Debug|x64.Build.0 = Debug|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Debug|x86.ActiveCfg = Debug|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Debug|x86.Build.0 = Debug|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Release|Any CPU.ActiveCfg = Release|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Release|Any CPU.Build.0 = Release|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Release|x64.ActiveCfg = Release|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Release|x64.Build.0 = Release|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Release|x86.ActiveCfg = Release|Any CPU
-		{882AF564-213C-4E0C-BFB5-7502927C2B57}.Release|x86.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
@@ -159,6 +145,5 @@ Global
 		{E9F952F6-DEF5-4334-A5DC-2F6B8422B439} = {827E0CD3-B72D-47B6-A68D-7590B98EB39B}
 		{A5E1C905-C724-4E64-A17B-506455AE2697} = {827E0CD3-B72D-47B6-A68D-7590B98EB39B}
 		{B7F46DC4-47C1-4D39-BBE6-94CD88FDC458} = {827E0CD3-B72D-47B6-A68D-7590B98EB39B}
-		{882AF564-213C-4E0C-BFB5-7502927C2B57} = {827E0CD3-B72D-47B6-A68D-7590B98EB39B}
 	EndGlobalSection
 EndGlobal

artifacts/identity-benchmark/v4/projected-requests/request-manifest.json

@@ -2,7 +2,8 @@
   "artifactKind": "a99_identity_benchmark_v4f_c_request_manifest",
   "schemaVersion": "a99-v4f-c-request-manifest-v1",
   "requestCount": 7702,
-  "packetManifestSha256": "139009ce0b3a0a9d146f770b589841e4bafe35dc6dc14071f4ada0f26397f81a",
+  "artifactHashCanonicalization": "utf8-lf-v1",
+  "packetManifestSha256": "eb36029435c3b8609647e04414c68b219caea32ba1f3c74f22362771c1570d12",
   "packetManifestConsumedAsFrozen": true,
   "packetBodiesPersisted": false,
   "exactBytesPersisted": false,