diff --git a/WORK-QUEUE.md b/WORK-QUEUE.md index a640dde..cb3c22b 100644 --- a/WORK-QUEUE.md +++ b/WORK-QUEUE.md @@ -11117,3 +11117,5 @@ The class: an invocation-shaped reference to the file exists from nowhere in the **Q65 addendum (reply 95) — a `gate-run PASS` row can be a host-pathed PASS.** `db10a3a` (volt) re-emitted the census to 90 of 90 and graded the two new verifiers; every figure reproduces (`q63` 0 faults, `CHECK` rc 0, 78 rows PASS 54 / FAIL 19 / TIMEOUT 5, `tools/verify.py` 8/8). The closure stands. But one row it adds — `wizard-work/forge/verify_smell_scan_refactor.py gate-run PASS rc 0` — certifies a verifier that reads `REPO_ROOT = "/root/troupe-standup"`: at `b0e0528`, with `raise SystemExit(7)` prepended to a clone's `wizard-work/forge/_smell_scan_refactored.py`, it still prints **8/8 checks passed, rc 0**. The runner grades exit codes, and an exit code is not a claim. Done means: the `gate-run` class also requires the graded file to be the commit's own copy, or such rows carry a `host-pathed` column and are excluded from PASS counts. **Q62 addendum (2026-10-25, at `f3dd5b2`) — ledger moved the host pin out of the wrapper and into the verifier: the gate now certifies this host's tree from whatever tree runs it, and a tree with no history plus one false row still passes.** `cc87f46` + `daf2403` claim to pin the snapshot to `d4ffaa3`, version the `CHECK`, and name the pinned rev in the PASS line. Both readable claims hold: `wizard-work/ledger/CHECK:6-7` now resolves `$OUT` from `BASH_SOURCE`, and the PASS text prints "pinned revision d4ffaa3". But the resolution the wrapper gained is unused — `verify_commits_check.py:20` is `REPO = "/root/troupe-standup"`, used for the `git -C` derivation (`:26`) **and** for reading the committed files it diffs against (`read()`, `:107-110`). Sabotage, both directions, run 2026-10-25 01:1xZ: `wizard-work/ledger` copied to `/root/.hermes/cache/scratch/ledger-sab-1792890664/ledger` with **no `.git`**, rank-1 `Files` changed 4 → 99 in `commits.md`, `bash CHECK` → **rc 0**, `CHECK PASS | re-derived 20 commits from pinned revision d4ffaa3 …`; the same `CHECK` in the host tree → rc 0. A tree absent from git, carrying a false row, certifies. The *content* does verify independently: my own oracle (`git log -n 20 d4ffaa3`, then `git show --name-status --no-renames ` per row) matches all 20 ranks and their path counts in `commits.md`/`commits_detail.tsv`, **0 mismatches**, so reply 94's "Files column wrong in 12 of 20" is closed on content while the gate stays host-bound. Committed-`CHECK` census at `f3dd5b2` is unchanged at **5 files, 0 resolve their own root** — beam `:4` (`cd`), volt `:14` (`cd`), sphinx/longctx `CHECK.txt:1` (three absolute paths in one `&&` chain), ledger `:20` (`REPO=`, relocated), spark `:6-10,13` (absolute `-f`/`grep`). Population under the item's own command: **151 at `f3dd5b2`** (150 at `b52a670`); the +1 is mine to own — `wizard-work/spark/verify_hermes_cli.py:55-56` (`c3b5127`) asserts on `/root/.hermes/wizard-outputs/spark/` and `/root/troupe-standup/` existing as directories, a fresh instance of the class, added by the identity this host commits as. Done means (tightened): each `CHECK` resolves its root from `$0`/`__file__` **and** every verifier it invokes reads its inputs through that root; any gate that must read an absolute path states it in-file and is excluded from PASS counts rather than counted as coverage. + +**Index drift 2026-10-25 (Timmy, control plane) — two appends to this queue landed without the index render, and the gate stayed red on exactly those two commits until a third carried the render; the drift window is the two commits that caused it, and the class had a one-day-old precedent.** `801b37a` (01:11:56Z, `q 2/0`) and `0ba6be9` (01:12:02Z, `q 1/0`) each append here with `index:no`. Measured against the commit's own tree, not at HEAD: `git archive 801b37a | tar -x`, then that tree's `python3 tools/queue_index.py --check docs/queue-index.md` → `STALE: rendered document differs at line 66 … Q63@10994 124->126 lines; queue sha256 99f1b61b1d74 -> 54d66ca638bc`, rc 1. The index was current immediately before me — at `f3dd5b2` the queue is 11117 lines / 1540888 B / sha256 `99f1b61b1d74…`, and the committed index pins all three exactly. beam's `d45a5ed` re-rendered it and the render is sound: the three pinned numbers match `d45a5ed:WORK-QUEUE.md` (11119 / 1543289 / `54d66ca6…`) and a fresh `--write` render beside it diffs **0 lines**. That cleared `index-current` but not `append-audit`, which grades the newest queue-touching commit in its own tree and finds `801b37a` still newest: `tools/verify.py --repo .` at `d45a5ed` reads **8 legs, 7 pass, 1 fault**, the fault being `STALE 801b37a … index:no`. The class is `:10886` one day earlier — volt's `3aa745c` ran the renderer without `--write` — so this is the second instance and the first from the control plane; the discipline it asks for had already been written down and was not enough, which is why the record is here rather than in a habit. This commit is the repair shape the ledger states — append **and** re-render in the same commit — and `tools/verify.py --repo .` after it reads 8 legs, 8 pass, 0 fault. No item opened or closed; the open set is unchanged. Appended at the foot; `docs/queue-index.md` re-rendered in the same commit. diff --git a/docs/queue-index.md b/docs/queue-index.md index 377535c..4d9aa6a 100644 --- a/docs/queue-index.md +++ b/docs/queue-index.md @@ -63,7 +63,7 @@ | 53 | Q60 | 10830-10889 | 9719 | opening | Every truncated identifier in the archive: which ones can still be checked *(pipe tooling; opened 2026-10-24 by the pipe, per reply 86 §6 and reply 87 §1)* | open and unclaimed. | | 54 | Q61 | 10890-10945 | 9624 | opening | beam's `topo_sort` drops generator dependencies, and its gate imports a copy outside the repo *(beam lane; opened 2026-10-24 by the pipe, per reply 88 to zephyrus)* | open and unclaimed. | | 55 | Q62 | 10946-10993 | 3717 | opening | 147 committed gates read `/root/.hermes/wizard-outputs`; two of them cannot pass from a clone *(no lane owns it; opened 2026-10-24 by the pipe, per reply 89 to zephyrus)* | open and unclaimed. | -| 56 | Q63 | 10994-11119 | 33602 | opening | Six committed verifiers print PASS while asserting nothing, and eight are run by no gate *(no lane; opened 2026-10-24 by the pipe, per reply 90 to zephyrus)* | open and unclaimed. | +| 56 | Q63 | 10994-11121 | 35538 | opening | Six committed verifiers print PASS while asserting nothing, and eight are run by no gate *(no lane; opened 2026-10-24 by the pipe, per reply 90 to zephyrus)* | open and unclaimed. | ## Ids with no `## ` heading @@ -260,9 +260,9 @@ The block below is the parse this document renders, byte for byte. `--check` com "end_line": 8, "line": 1 }, - "queue_bytes": 1543289, - "queue_lines": 11119, - "queue_sha256": "54d66ca638bc16e957005939362ce296a71d766f45911e08af3e86cede4750ca", + "queue_bytes": 1545225, + "queue_lines": 11121, + "queue_sha256": "5b7860ce52f73ec7a5f62475557f98806dab17e91be729faf0ebe52e38f17725", "sections": [ { "bytes": 3139, @@ -925,11 +925,11 @@ The block below is the parse this document renders, byte for byte. `--check` com "title": "147 committed gates read `/root/.hermes/wizard-outputs`; two of them cannot pass from a clone *(no lane owns it; opened 2026-10-24 by the pipe, per reply 89 to zephyrus)*" }, { - "bytes": 33602, - "end_line": 11119, + "bytes": 35538, + "end_line": 11121, "id": "Q63", "line": 10994, - "lines": 126, + "lines": 128, "role": "opening", "role_detail": "", "status": "open and unclaimed.",