New file tools/queue_claim_check.py (525 lines / 21,826 B / sha256 b5cffeb516f1ce15a24ceb2ede1ef2db7e4a26fad6442809109a3baae8464721).
The convention at WORK-QUEUE.md:8020 requires a claim check every tick; the only instrument performing it lived in host-local scratch with six generations and five logged defects. This is the same check, kept, with --selftest -> 10 fixtures, 10 passed, 0 failed, encoding every logged defect.
Independent reproduction at HEAD: 15 opening records / 12 closed / 3 open, same lines, items and states as recoveries/queue-hygiene-census.md section 4; hand-read validation 11/11. Closure-line picks differ on two rows (Q33 :4484 vs :4505, Q50 :6996 vs :7089 -- first closure at/after the opening vs the pipe's VERIFIED line); no state moves. 72 anchored closures vs the census's 80, a stated rule difference.
Census 6(a) reproduced: git cat-file -t e4967da9 -> fatal: Not a valid object name (rc 128); the handle is sha256sum of /root/crucible/q51/helm-selftest-q51.py = e4967da9bdc45378... Census 6(b): the literal 'Status: open and unclaimed' appears 10 times at HEAD; 3 in record position, all 3 stale.
Three defects of the instrument found before it shipped and logged in the check-in; each is now a fixture.
Nothing deployed, no another-party file edited, no secret printed.
Run 36. The unit is the residual Run 35's own record named and left open: the
page's "live body sha256" line is a present-tense label on the frozen pin
f27326e8 (pinned 2026-10-08T16:58:07.100Z) while the live body reads
c34ae2c2 (200 / 217,163 B), and no gate read it. The obvious predicate
(("live body sha256" not in text) or ("as of " in text)) is strictly weaker
than G10 and was falsified before it shipped (q65/probe_r36.py ->
out/R36-PROBE.json); the distinguishing cell is real -- the G11 renderer
306d4bee, the lane's current adoption payload, at the stale clock emits
11819 B / 951a8a7645fe on which G10, G12 and G13 row 1 all PASS while its
hash line is unqualified. Fix: the hash line's own div carries
"as of OBS . AGE ago . not re-checked since" (renderer a70998c8592a03cd,
22930 B); gate helm-selftest-q65.py 190330 B / 3619 lines / 145 check(
registrations / 833d08275977054a on 6a887f42 at five asserted anchors
(+7578 B / +155 lines / +3 registrations). Matrix (run_matrix_r36.py ->
out/R36-GATE.json, prediction stated before the run): shipped rc 1 / 192/3
(G10 deployed-page, G13 row 2 live, G14 row 1), byte-identical on rerun
after sandbox normalisation (07c1c58d, residual 0); twinI (g14-stale) rc 0 /
195/0 ALL GATES PASS; twinJ (g11-stale, the adoption payload) rc 1 / 194/1,
G14 row 1 only; control-g (q64 base, twinJ repoints) rc 0 / 192/0 -- the
hole measured: the adoption payload passes every gate the lane has today.
twinK's miss is a finding: predicted rc 0 / 195/0, measured rc 1 / 194/1
(G13 row 2) -- a fresh clock on the frozen manifest_match is still caught,
so the renderer alone does not make the page passable and re-collect ->
re-render -> deploy is load-bearing. Also fixed in the same build: the
Q31/G8 --deploy leg's mkdtemp was never removed (+1 leaked
/tmp/q31-g8-deploy-* per gate run, 474 on /tmp at the final census); the
cleanup lands after the two G8 checks that read it (the first form, in the
finally, turned both rows red -- measured shipped 190/5, twinI 193/2), and
post-fix delta is 0 on all five q65 legs while control-g still leaks.
Live state delta 0 across all seven legs (page 9865 B / 427b7b54c69b18d2,
snapshot 14039 B / aa842b0fd88037f8, pin 120 B / 5b6d70716153c3f4);
deployed bin untouched, grep -c HELM_COLLECTOR = 0 so Q40 stands and none
of Q31-G14 is in production; disk 41 G free of 154. Adoption, five files in
one order: renderer a70998c8 -> collector 4e45021d + gate 833d0827 ->
re-collect -> re-render -> deploy; acceptance rc 0 / 195 / 0 ALL GATES PASS
(twinI's shape), demonstrated a third time. Reply 60's correction
discharged: pin_stackchain is helm-collect.py:664, not 647-662. Nothing
deployed, no another-party file edited, decisions/ and inbox/ untouched,
no secret printed. No item closed, none opened. Merlin <merlin@agents.invalid>.
false red no row could see
Run 34 closed G13 with one stated open limit -- "Row 1 is green on all six
cells today, so it has never fired ... not a demonstrated catch" -- and Run 35
discharges it, finding the second limit: the pill's truth was checked in one
direction only. Ground truth measured this run: live body (the snapshot's own
URL) HTTP 200 / 217,163 B / c34ae2c245117ca7 against a held pin of
f27326e8b13d1dec (120 B / 5b6d7071), so pin_matches_live_now is false; the
snapshot's live_body_sha256 equals the pin and its observed_at is
2026-10-08T17:12:59.458Z, so the page's line "live body sha256
f27326e8b13d1dec..." is a present-tense claim of a six-day-old frozen value --
the pill's defect class, one line below it, read by no gate.
Finding 1 -- row 1's catch is real, and it is the middle of the lane's own
adoption sequence: helm-collect.py:647-662 (pin_stackchain) writes the held pin
from the live body and exits without rendering, so re-pin -> page not yet
re-rendered is reachable by the collector's own --pin. twinE (only _g13_pin
repointed at the live body's hash): row 1 FAIL, row 2 PASS -- 190/2 with the
failing G13 row moved from row 2 to row 1.
Finding 2 -- the hole between the two rows: row 2's predicate passes whenever
the green pill is absent, so a "drift" claim is unverifiable by construction.
The falsered cell under the shipped gate: control-g rc 0 / 191 passed / 0
failed / ALL GATES PASS. A false drift sails through the gate that exists to
check the pill's truth.
The fix -- G13 row 3: a red pill must also be confirmed by a fresh fetch (the
live body must not match the pin). Offline, measured with a dead proxy: rc 1,
191/1, sole failure row 3, fetch_error=URLError(ConnectionRefusedError(111,...)).
The three rows are transitively closed for the pill's class -- page-published
vs pin and pin vs live covers page vs live -- so no fourth row is owed.
Gate: base 94f9b362 (180,772 B / 3,432 lines / 141 registrations) -> shipped
helm-selftest-q64.py 182,752 B / 3,464 lines / 142 registrations /
6a887f42754a8d96a2e28e7f24df072a75c0820776a25a650bf414274ada990d
(+1,980 B / +32 lines / +1 registration), four asserted anchors, four twins and
one control each one to four asserted lines different. Matrix, prediction
stated before the run: shipped rc 1 / 190/2 (G10 deployed-page, G13 row 2 live)
twice, byte-identical after normalisation; twinE 190/2; twinF rc 0 / 192/0 /
ALL GATES PASS -- the honest remediated end state, and the SECOND configuration
this gate has ever passed (twinC was the first); twinG 191/1, row 3 only;
twinH 192/0, a true drift claim is not refused; control-g 191/0, the hole. The
twinG/control-g pair isolates row 3 and nothing else.
Live delta 0 across all seven legs (bytes + sha256 + mtime_ns): page 9,865 B /
427b7b54c69b18d2, snapshot 14,039 B / aa842b0fd88037f8, held pin 120 B /
5b6d70716153c3f4; deployed bin untouched and grep -c HELM_COLLECTOR = 0 so Q40
stands; sandboxes 0/0/0; disk 41 G free of 154. Adoption is four files in one
order: renderer 306d4bee -> collector 4e45021d + gate 6a887f42 -> re-collect ->
re-render -> deploy, acceptance criterion rc 0 / 192 / 0 / ALL GATES PASS
(twinF's shape, demonstrated twice), with the re-collect load-bearing twice:
G13's live row stays red until a collect recomputes manifest_match, and
Finding 1 shows the re-pin inside a collect can leave the page and the pin
disagreeing until the re-render lands.
Four defects of mine logged first in the record's section 8: my twinE
prediction named two failures while printing 189/3 (the row-level prediction
was met exactly); the first cell set left observed_at at the 2026-10-08 stamp
so twinF was the stale cell and came back red on G12; the runner's first run
died on its own set-in-JSON bug before writing the artifact; and the runner's
docstring still carries the original prediction, because a prediction edited
after the run is not a prediction. Nothing deployed, no another-party file
edited, decisions/ and inbox/ untouched, no secret printed. No queue item
closed, none opened. Merlin <merlin@agents.invalid>.
the landing deltas appended after the push -- all three rows HTTP 200 and
byte-identical on three sides (served = disk = git cat-file) at revision
420c826382, read_at 2026-10-15T03:54:25+00:00,
artifact out/R34-READBACK.json (host-local, E13); numstat
07fdaf9c..420c826 = 118/0 + 96/0 + 262/0 = 476 insertions, 0 deletions
(append-only asserted by the commit script, so no line citation shifts);
provenance recounted 107 merlin-authored commits; live state delta 0 on
page/snapshot/pin, deployed bin untouched, grep -c HELM_COLLECTOR = 0 so Q40
stands and nothing is in production. Append-only family -- no figure, digest or
verdict moves. Nothing deployed, no another-party file edited, no secret
printed. Merlin <merlin@agents.invalid>.
fresh cell, and no gate asked whether the pill was true
Two findings, measured on six reachable cells of the pill x qualifier pair
(q63/make_cells.py -> R34-CELLS.json), five of them real renders of the real
renderers on the real snapshot and one constructed and labelled as such:
1. G10's predicate (helm-selftest-q62.py:2782) demands both "not re-checked
since" and "as of ", but helm-render-plain.py:329 appends the disclaimer only
when site_fresh != "FRESH" -- so the honest fresh generation is refused and
the end state of G10's own prescribed remedy (re-collect -> re-render ->
deploy) is red exactly like today's unfixed page. A red that cannot tell a
fixed page from a broken one is not a remediation signal. The pair is the
evidence: base gate with the fresh cell as its subject 187/1 with G10's row
FAIL (control-q62-freshcell.py, c05dd15f), new gate on the same body same
repoint 190/1 with G10's row PASS (twinD, ef9980cc). The fix splits the
predicate into its two halves and reads freshness from the age the page's
own qualifier states, against the collector's own 3600 s threshold.
2. No gate asked whether the pill was TRUE, and G11 does not close it: the
fresh cells carry an unqualified green "match" beside a fresh-looking clock
from BOTH the production renderer and the G11-patched one, while a fresh
fetch of the snapshot's own URL returns HTTP 200 / 217,163 B /
c34ae2c245117ca7 against a held pin of f27326e8b13d1dec -- so
pin_matches_live_now is false. G13 is the guard: offline, the pill's colour
must agree with the held pin against the live-body hash the page publishes;
live, a fresh fetch must confirm an unqualified green pill (red today, and
that red is the finding); plus a read-only row. Row 2 subsumes G12 on one
cell and adds three G12 cannot see -- stated in the record, not left for a
reader to find.
Gate: base 4b18329c (171,979 B / 3,256 lines / 138 registrations) -> shipped
helm-selftest-q63.py 180,772 B / 3,432 lines / 141 registrations /
94f9b3625e5791a724afe479315f5a49d3244c5e183cad8001ec6185e1c3f240
(+8,793 B / +176 lines / +3 registrations); four twins and one control each one
to three asserted lines different. Subject 4e45021d80395d3f / 29,954 B
throughout. Matrix, prediction stated before the run and met exactly: shipped
189/2 twice, twinA 188/3, twinB 190/1, twinD 190/1, control 187/1, and twinC
rc 0 / 191/0 / ALL GATES PASS -- the honest remediated state, the only
configuration this gate has ever been able to pass, which gives the remediation
an acceptance criterion it did not have before.
Live delta 0 across all seven legs: page 9,865 B / 427b7b54c69b18d2, snapshot
14,039 B / aa842b0fd88037f8, held pin 120 B / 5b6d70716153c3f4; deployed bin
untouched and grep -c HELM_COLLECTOR = 0 so Q40 stands; sandboxes 0/0; disk
41 G free of 154. Nothing deployed, no another-party file edited, decisions/
and inbox/ untouched, no secret printed. Adoption is now four files in one
order: renderer 306d4bee -> collector 4e45021d + gate 94f9b362 -> re-collect ->
re-render -> deploy, with the re-collect load-bearing because G13's live row
stays red until a collect recomputes manifest_match against the live body.
Four defects of mine logged first in the record's section 8: the first probe
fetched the portfolio instead of the pin's subject; the first normaliser missed
this host's TMPDIR-based mkdtemp; the first G13 block referenced four names it
had not imported; and twinC's third repoint silently did not apply until an
assertion caught it. No queue item opened. Merlin <merlin@agents.invalid>.
grep 'held copy' over the shipped gate 125754b270bf (161122 B / 3053 L / 135
regs) returns three hits (:2841 G10's negative literal, :2882 a comment, :2893
G11's constant) and NONE is read off the deployed path, so G11's pill rule was
guarded on scratch renders only. New gate helm-selftest-q62.py 171979 B / 3256 L
/ 138 regs / sha256 4b18329c7437bec4c5c05be86ddd8376a7396eda9c97739410b1ab5952e4d270
on that base, twin 0fc58aabfb8d9345 differing on exactly one asserted line
(3073, _g12_deployed repointed at the production renderer's own stale output).
My first predicate was falsified by measurement before it shipped: the obvious
rule ("held copy" present implies "as of" present) is REDUNDANT with G10, since
G12-fail implies "as of" absent and G10-fail is "not re-checked since absent OR
as of absent", so every body it refused G10 already refused. Corrected rule is a
complement, not a duplicate: G10 owns the MISSING clock (today's page, G10 red,
G12 correctly green); G12 owns the INCOHERENT pair (green pill AND a staleness
disclaimer, which G10 passes because both its strings are present).
The discriminator runs on an artifact production would deploy, not a string I
built: helm-render-plain.py is byte-identical to /root/.helm/bin/helm-render.py
(21766 B / 5c67473d89283c3d) and at --as-of 2026-10-14T16:00:00.000Z emits
11806 B / 3f48643d8e7bac77 carrying the green pill, "as of" x1 and
"not re-checked since" x1 -- G10 passes it, G12 refuses it.
Prediction stated before the run and met exactly: shipped rc 1, 187 passed /
1 failed (sole failure G10's deployed-page row), twice at 16212 B each; twin
rc 1, 186 passed / 2 failed at 16583 B, adding G12 row 1. live_moved {} and
sandboxes [] on all three legs. Byte-stability measured: G12 rows identical
across both shipped runs, stdout identical after sandbox normalisation with
residual 0, normalised sha256 7a080e1616fb20e3.
Two defects of mine logged first: the first predicate's redundancy (measured
before shipping), and the runner's stdout normaliser matching (helm-legs-|
/tmp/tmp) while this host's TMPDIR is /root/.hermes/profiles/merlin/cache/
scratch, so it reported residual 2 with no characterisation -- the two lines
printed, the pattern corrected, the run re-run; no G12 row depended on it.
Live state delta 0 on bytes+sha256+mtime_ns across every leg: page 9865 B /
427b7b54c69b18d2, snapshot 14039 B / aa842b0fd88037f8, held pin 120 B /
5b6d70716153c3f4. Deployed /root/.helm/bin/ untouched (five digests re-read
plus __pycache__), grep -c HELM_COLLECTOR = 0 so Q40 stands and none of
Q31-Q62 is in production. Sandboxes 0. Repo main at 07fdaf9c8c, worktree
clean, remote identical; 102 merlin-authored commits before this push. Disk
41 G avail of 154.
Nothing deployed, no another-party file edited, decisions/ and inbox/
untouched, no secret printed. No item closed, none opened -- the Helm
executable set was empty at the start of the run by both this lane's and the
pipe's measurement, so the unit taken was the one defect the lane had measured
and labelled but never fixed. Append-only family, 0 deletions. Merlin
<merlin@agents.invalid>.
(<this commit's clock>, <this commit>) filled with the measured read clock
2026-10-14T20:53:48+00:00 and revision 7bcd373. Append-only family -- no
figure, digest or verdict moves. Merlin <merlin@agents.invalid>.
(renderer 306d4bee / collector 4e45021d / gate 125754b270bf) match their
stated figures as a bundle, stage byte-identically, the gate is 184/1 on the
staged collector (the one failure being G10's deployed-page row), the
re-render payload carries both missing markers, and live state is delta 0
around all of it. Record recoveries/helm-adoption-sequence-readiness.md,
queue block, check-in Run 31. Nothing deployed, no another-party file edited,
decisions/ and inbox/ untouched, no secret printed. Merlin <merlin@agents.invalid>.
Both loci that cited out/R29-MEASURE.json are fixed -- the record's own :25 (the primary) and the candidate renderer's comment -- while the artifact sits at /root/crucible/q59/R29-MEASURE.json (5382 B / d6f142c0e7a7acca). One comment line, anchor unique, compile() before the write, the reply-55-verified pre-image preserved byte-exact at q59/helm-render-g11-pre30.py; post-fix renderer 22731 B / 306d4befee7c9874 / 512 lines, -4 B. Comment-only proved by the emitted bytes: fixed stale render 11819 B / 951a8a7645fe7ef4 byte-identical to Run 29's check-stale.html, fixed fresh 11624 B / 1eec213e9e363d36 identical to check-fresh.html and to the plain renderer at the same clock, plain stale control 11806 B / 3f48643d8e7bac77 -- so the pill's +13 B one-span difference is unchanged and the G11 gate's rows 1-3 stand by byte identity (the 161 KB gate was not re-run; the inference is labelled). Live delta 0 on bytes/sha256/mtime_ns for all four live objects across all four invocations; sandboxes 0; HELM_COLLECTOR still 0, so Q40 stands and nothing is in production. Adoption object superseded: renderer 306d4bee (22731 B) before the cp of collector 4e45021d + gate 125754b270bf. Reply 54's three corrections re-measured and upheld (496/512 by wc -l; twin line 2889; match_qualifier :327-330). Nothing deployed, no another-party file edited, decisions/ and inbox/ untouched, no secret printed.
commit path -- all three rows HTTP 200, served = disk = git at e1fbb14
(record 14,839 B / d4e2e0d15e928959, queue 1,094,415 B / b9b85f86d6e3ea8d,
this file 79,851 B / fc806a4dbad215d9 at e1fbb14 before this append).
Landing deltas from git: 71/0 + 154/0 + 252/0 = 477 insertions, 0 deletions.
Authored with the lane's identity; 93 merlin-authored commits before the push.
No another-party file edited, no secret printed.
The held pin f27326e8b13d1dec (pinned 2026-10-08T16:58:07.100Z) no longer
matches the live body (200 / 217,163 B / c34ae2c245117ca7), yet the
renderer's pill reads the frozen manifest_match field and prints a green
'match' beside 'not re-checked since' in a page whose own verdict pill
reads '0 green / 6 not green'. One renderer edit conditions the pill on
the reading's freshness (stale -> amber 'match (unverified)'; the fresh
branch is byte-identical), and gate G11 adds four checks on Q45S10+G10:
161,122 B / 3,053 lines / 135 registrations. Prediction stated before the
run and met: shipped 184/1 (G10's deployed-page row), twin 183/2.
Live delta 0 on bytes/sha256/mtime_ns/ctime_ns across all four objects;
sandboxes 0/0; HELM_COLLECTOR still 0, so nothing is in production.
Nothing deployed, no another-party file edited, no secret printed.
Readback by /root/crucible/q58/readback_r28.py, artifact out/R28-READBACK.json,
read_at 2026-10-14T13:28:12Z, revision 7af50b5, head_at_read 7af50b5, author
Merlin <merlin@agents.invalid>. All three rows HTTP 200, served = disk =
git cat-file -p 7af50b5:<path>:
recoveries/helm-deployed-page-generation.md 9,953 B bdd5fa1c03586c28...
WORK-QUEUE.md 1,067,607 B a78cc8dff36908a5...
checkins/2026-10-14-merlin.md 65,984 B 0af2ecd2aaaee0f0...
The landing delta is measured from git, not from the append script:
git diff --numstat 7af50b5^ 7af50b5 = 72/0 on the queue, 124/0 on the check-in,
149/0 on the record = 345 insertions, 0 deletions. The queue's byte delta is
1,062,291 -> 1,067,607 B = +5,316 against a block of 5,322 B; the 6-byte
difference is the block's leading newline-dash-dash-dash separator aligning with
the separator the parent already carried, which is also why git counts 72 added
lines rather than the block's own 74. Reconstruction verified byte-exact:
parent[:1060132] + block + parent[1060138:] == rev is True, so the pipe's
"Erratum, mine: the 13:09Z tick" block is intact and keeps its own separator. No
another-party content was clobbered.
ONE DEFECT OF MINE, logged in the check-in's landing block rather than smoothed:
the append script's printed before figure for the queue was 1,060,143 B against a
shared prefix of 1,060,132 B -- 11 bytes stale, because sha(QUEUE) and the later
QUEUE.read_bytes() are two separate reads and the pipe was writing the file
between them (its erratum is stamped 2026-10-14T13:26:06Z, after my 13:25:50Z
append and before my 13:27:05Z commit). The file content is correct and every
assertion that mattered was on bytes read once and written once; only the printed
diagnostic is stale. The git figures are the authoritative ones, and the check-in
was unaffected -- parent is a prefix of rev: True, residual 0 B, 124 lines =
numstat 124/0 -- because the pipe does not write my check-in. This is the
concurrent-writer form of Run 24's logged defect, not its unit form: the units
were bytes throughout.
Live state at the landing, unchanged: deployed page 9,865 B /
427b7b54c69b18d270288910fc810732463129f48ec4bdd7dbc75cdb22997ce4 / mtime_ns
1791709034017837233; snapshot 14,039 B / aa842b0fd880... / mtime_ns
1791479579475780303; held pin 120 B / 5b6d70716153c3f4... / mtime_ns
1791478687099553071. Deployed /root/.helm/bin/ untouched (ee0b36a82f23... /
5c67473d8928... / 7ed1bca8f9da... / 12570786ba70... / 738699986778...),
grep -c HELM_COLLECTOR = 0, so Q40 stands and G10 is not in production. Sandboxes
0/0 both ways. Disk 45 G avail of 154.
Append-only, trailing newline asserted on the written file: check-in 65,984 ->
69,697 B (+3,713, sha256 d1d616878ecbd269...). No another-party file edited,
decisions/ and inbox/ untouched, no secret printed.
The Helm's pinned site now reads HTTP 200 / 217,163 B / sha256 c34ae2c245117ca7...
while the held pin is f27326e8b13d1dec... pinned 2026-10-08T16:58:07.100Z, so
pin_matches_live_now is false. The deployed page /var/www/alexander-whitestone/helm/index.html
is 9,865 B / sha256 427b7b54c69b18d270288910fc810732463129f48ec4bdd7dbc75cdb22997ce4 / mtime
2026-10-11T08:57:14.017Z and renders a green "match" with no "as of" and no "not re-checked
since". The renderer carrying that fix is mtime 2026-10-11T11:12:43.756Z, 8,129.7 s later, and
the real snapshot through it (--out scratch --as-of 2026-10-14T00:00:00.000Z, rc 0) renders
11,798 B / sha256 f32191223931e74b... carrying "as of 2026-10-08T17:12:59.458Z . 5d 6h 47m ago
. not re-checked since". The fix exists, works, and was never deployed.
Why the self-test was green: helm-selftest.py:420-421 runs the qualifier check on a synthetic
fixture at a pinned clock (hr.SNAPSHOT = fp), and :422-425's "build_page() writes nothing"
only proves build_page did not overwrite production. Neither reads the deployed artifact --
the Q34/Q40 law in a new place: a gate that tests the producer cannot vouch for the artifact
in the document root.
The fix is gate G10, four checks, on Q45S10's c56230e5a075... (147,151 / 2,798 / 127):
helm-selftest-q58.py 153,469 B / sha256 3b98b62fa5c7ea626091f6d0f63566de79818ae414bcffe323dd1ddd53956158
/ 2,916 lines / 131 check(" registrations. Shipped (reads the live page): rc 1, 180 passed /
1 failed, stdout 15,055 B / e8304379529c4c83..., the one FAIL being "the deployed page carries
the manifest qualifier". Twin (the same gate with _g10_deployed repointed at a scratch
current-generation render, ast-asserted): rc 0, 181 passed / 0 failed, ALL GATES PASS, stdout
14,824 B / fe8c8c72825962d9.... Prediction stated before the run and met exactly -- a red row
that cannot go green would prove nothing.
Live state delta 0 across all four invocations on bytes + sha256 + mtime_ns: page 9,865 B /
427b7b54c69b18d2... / 1791709034017837233; snapshot 14,039 B / aa842b0fd880... /
1791479579475780303; held pin 120 B / 5b6d7071... / 1791478687099553071. Sandboxes 0/0 both
ways (shallow glob and recursive rglob). No --deploy anywhere in the G10 block. Deployed bin
unchanged, five digests re-read, grep -c HELM_COLLECTOR = 0 so Q40 stands and G10 is not in
production.
Two shipped runs are both 180/1 at 15,055 B while byte_stable_stdout reads false; the
difference is mkdtemp suffixes in the sandbox path the gate prints. The four G10 rows are
byte-identical across both runs, and normalising the four path patterns gives stdout sha256
1958d8212fa60e44... on both with residual differing lines 0.
Six defects of mine are logged first in the record: two claims in one cell (the first G10
check 3 asserted both the predicate's soundness and the finding, which would have made the
twin 180/1 and hidden the discriminator); a report filter written from memory
(startswith("PASS") never matches the two-space rendering -- the lane's own logged class
reproduced on a fresh artifact); a live-path assertion that fired on G5's read-only check and
then on G10's own comment; byte_stable_stdout: false reported as found with the cause
measured; ast.unparse's single quotes; and pathlib.Path in a gate that imports
from pathlib import Path.
No queue item was opened: the Helm executable set was empty at the start of the run (Q49's
"Status: open and unclaimed" at :6847 is stale -- this file's own hygiene ledger at :8026
records Q49 CLOSED), so the unit taken was the one defect the lane had measured and labelled
but never fixed. Owed to Alexander, both decisions rather than tasks: re-render and re-deploy
the Helm page, and the section-4 adoption cp of collector 4e45021d... + gate 3b98b62fa5c7ea62....
Append-only, prefix asserted on bytes before each write, trailing newline asserted on the
written files: queue 1,060,143 -> 1,065,465 B (+5,322, sha256 9f0a02b429eb7ed5...), check-in
58,536 -> 65,984 B (+7,448, sha256 0af2ecd2aaaee0f0...), record 9,953 B / sha256
bdd5fa1c03586c28.... No another-party file edited, decisions/ and inbox/ untouched, no secret
printed.
Deliverable recoveries/helm-pwdir-channel-refusal.md (14,808 B / sha256
d4c381f713e9fe95beefbd14a93220ab4049625f280c116e656419f3e11b7b89) plus the queue block at the foot
of WORK-QUEUE.md (+5,419 B / 63 lines, 951,756 B / d8f54086edbcbbc96e39533d7b6dcf0e9effff108b596ed18685b03d1045e1db)
and checkins/2026-10-14-merlin.md (Run 22). Scratch tree /root/crucible/q55/; nothing deployed, no cp
into /root/.helm/bin/, decisions/ and inbox/ untouched, no another-party file edited, no secret printed.
The class, measured on the shipped Q52 gate before the change: a subject whose root is composed from
the user database (ROOT = Path(pwd.getpwuid(os.getuid()).pw_dir) / ".helm") resolves the live root
under a scratch HOME (rc 0, both fixtures), passes the Q52 home-channel check (the check asserts the
legs' HOME is redirected; pwd.getpwuid never reads HOME), and writes the LIVE held pin through the
gate's own --q52-witness flag (5b6d7071... -> fdd45f74..., restored byte-exact by the guard). A foot
check reports after the legs; only a precondition refuses before them.
The fix: gate cd43284ff009d1cceb3aaa6a65b701d1076eaf801e32b705672601b4122b746a (143,385 B / 2,735
lines / 126 registrations -- unchanged; +3,020 B / +58 lines on the Q52 gate 78b290ec...) -- a
precondition after Q46's parse guard, before the Q39 sandbox, the admission probe and any leg: a
subject whose AST reads the pwd module is refused (exit 2, dated, naming every pwd site with its
line). Disarmed twin 8adad99bdc872ecd09ddea88ae55b5fc55a3886571ffaa5f49a053b52430586d.
25 guarded cells: armed x pwr/pwr-witness/pwn rc 2 refusal (stdout 0 B, live delta {}); disarmed x
pwr-witness reproduces the escape (live pin 5b6d7071... -> ced810a9..., restored byte-exact);
disarmed x pwr 175/1 with Q52 PASS and Q45 FAIL (the shipped behaviour); green pair x5 176/0 at
14,044 B; regressions 11/11. Covered shapes are not over-refused: the witness pin lands inside the
sandbox, and the covered fixtures fail Q43 identically under the shipped gate (measured side by side).
Live delta 0 on bytes/sha256/mtime across all 25 cells (snapshot aa842b0f... / 14,039, pin
5b6d7071... / 120); ctime moved on the pin across the deliberately-live witness cells (guard restores)
-- disclosed. Sandboxes: q55 tree 0/0; the E14 leak re-measured at 26 across /root/crucible and all
26 removed (842,401 B reclaimed) with the q55 __pycache__. Deployed /root/.helm/bin/ untouched,
HELM_COLLECTOR count 0 -- Q40 stands. Disk 45 G avail of 154.
Adoption, Alexander's: the s4 cp is collector 4e45021d... + gate cd43284ff009..., superseding
78b290ec... / e4967da9... / a951dbe8.... Five defects of mine are logged first in the deliverable
(part 1's void d/e rows, its prefix-vs-full restored comparison, its broken Q45 filter, my assumed
d/e expectation, and the gate's first-written Q55 label). No new item opened -- the Helm lane's
executable set is empty; the next unit is a decision, not a task.
The fill for Run 21 (content at 258e3ad). Read back over the anonymous raw path at
revision 258e3ad by /root/crucible/q54/readback_q54.py (artifact out/Q54-READBACK.txt,
398 B, mtime 2026-10-13 23:04:19.489552154Z, host-local): record 200 / 34,311 /
4ba00ce427b85079adedf34524c8334a92e949b205efcc682c8cdd47a99a1cd7, queue 200 / 935,526 /
c5316986a532ce2ba4c479e89b0a4839c7bcd6e6c613d859511616b9fb7323e0, check-in 200 / 94,099 /
1da711a046950f73979bfaa52fe04479c76cbd573ba1421c937d3f53dd8d4ba7 -- all three
served = disk = git, all newline-terminated, ALL ROWS EQUAL.
Clock correction, appended not edited in place: the Run-21 blocks cite "~21:2xZ",
which no instrument supports. The Run-21 content commit 258e3ad was made at
2026-10-13T23:03:50Z (git log -1 --format=%cI) and the readback artifact at
23:04:19.489552154Z. The cite was assumed from reply 42's 21:07Z timestamp rather than
measured -- the same defect class as reply 42 section 1, reproduced by this run's own
Screen line and corrected here.
Live and deployed unchanged across the whole run: snapshot 14,039 B / aa842b0fd880 /
mtime_ns 1791479579475780303; held pin 120 B / 5b6d70716153 / mtime_ns
1791478687099553071; deployed bin ee0b36a8 / 5c67473d / 7ed1bca8 / 12570786 / 73869998
with grep -c HELM_COLLECTOR = 0 on the gate (Q40 stands, nothing of Q31-Q45s9 in
production); disk 45 G avail of 154; worktree clean.
Read-only run: no gate invocation, no live write, no deployment, no edit to another
party's file, decisions/ and inbox/ untouched, no secret printed.
The three sentences replies/2026-10-13-to-merlin-42.md (1b16385) returned against
Run 20's closing note, each re-measured from git with a non-stripping reader
(measure2.py) and cross-checked with sha256sum:
1. Both readback clocks were wrong: readback.py ran at 20:45:43.513552892Z (not
~21:0xZ) and readback_final.py at 20:52:18.142200548Z (not ~21:2xZ); cfae76a
was committed 20:51:49Z, 29.1 s before readback_final.py existed, so the
closing note cites a readback that postdates its commit. The note's table is
sound (cf07003 digests); the clock sentences and the readback description are
the defect.
2. Row 3's equality: the per-revision census shows record and queue byte-identical
across cf07003->cfae76a (34,311 / 4ba00ce4, 927,009 / 7754184c, both 0x0a);
the check-in is 83,854 / 4306bc50 at cf07003 and 85,869 / a1f3ad72 at cfae76a,
which is what disk and branch/main serve. The table row is right; the sentence
above it needs the per-row revision.
3. Three of three, confirmed: at 7673477 all three files end 0x29 (31,219 /
925,786 / 82,262); dc3c2f7 terminated queue+check-in, cf07003 the record
(+22/-1 on the record alone), cfae76a the check-in's closing note (+33).
4. The queue close block's undated 927,009 is cf07003's reading; the queue at HEAD
1b16385 is 933,092 / 114d937e.
Own defect logged first: the take-1 instrument (measure_r42.py) .strip()ed its
captures, so its digests were computed over stripped content; measure2.py is the
authority and the record is sound.
Queue hygiene appended: four "open and unclaimed" status lines name closed items
(Q21, the Q13 fix pack, Q49, Q51); the DONE blocks below them govern.
Read-only run: no gate invocation, no live write, no deployment, no edit to
another party's file, decisions/ and inbox/ untouched, no secret printed.
Live and deployed unchanged: snapshot aa842b0f / 14,039, pin 5b6d7071 / 120,
HELM_COLLECTOR 0 in every deployed file, disk 45 G of 154.
Names the three commits that carry this unit (7673477 corrections +307/-0, dc3c2f7
landing evidence and E17 +76/-2, cf07003 E18 +22/-1) and the final readback at
cf07003: all three rows HTTP 200 and served = disk = git cat-file -p cf07003:<path>,
each newline-terminated -- record 34,311 B / 4ba00ce427b85079..., queue 927,009 B /
7754184c5368..., check-in 83,854 B / 4306bc5035ed... The record's digest is the same
value E18 carries, so the two rows agree rather than one chasing the other; the check-in's
own row is dated at cf07003, the revision before this append, and is not restated.
out/ artifacts (Q53-MEASUREMENTS.json, Q53-READBACK.txt, Q53-READBACK-FINAL.txt) are
host-local and not forge-verifiable -- 0 paths under out/ in the tree, raw path 404 --
E13's rule applied to this run's own artifacts.
Nothing deployed, no cp into /root/.helm/bin/, decisions/ and inbox/ untouched, no
another-party file edited, no secret printed. Live state delta 0 across every measurement:
snapshot 14,039 B / aa842b0fd88037f8... / mtime_ns 1791479579475780303 / ctime_ns
1791907371554631194; held pin 120 B / 5b6d70716153c3f4... / mtime_ns
1791478687099553071 / ctime_ns 1791907371554631194. Deployed bin untouched
(ee0b36a82f23, 5c67473d8928, 7ed1bca8f9da, 12570786ba70, 738699986778), HELM_COLLECTOR
count 0 -- Q40 stands, so none of Q31-Q45s9 is in production. df -h / -> 46 G avail of
154, 71 % used. Sandbox census in the q53 tree 0; E14 records the 26 elsewhere under
/root/crucible.
Landing evidence for Run 20, read back over the anonymous raw path at ~21:0xZ,
instrument /root/crucible/q53/readback.py. All three rows HTTP 200, served = disk =
git cat-file -p 7673477:<path>:
recoveries/helm-home-channel-guard.md 31,219 B / 0f8b7f1617a67f5e8308e85b837e3256d74949080750dbabacc0f09f106464fa
WORK-QUEUE.md 925,786 B / 78feb8441d8f01183c5f57c7248366400d7f5d5720bf3b8a10d12c37b73a2c11
checkins/2026-10-13-merlin.md 82,262 B / 9db0834471415e3a6a4d1844910a8f21d3a558305b9a69ea08785b8ec0bcda94
The check-in row is that file at 7673477, before this append -- a file cannot cite its
own post-append digest, so the row is dated rather than chased. out/Q53-MEASUREMENTS.json
and out/Q53-READBACK.txt are host-local and not forge-verifiable: 0 paths under out/ in
the tree at 7673477, raw path 404 -- E13's own rule applied to this run's artifacts.
E17, found on my own tool before this commit: q53/append.py's append_last() wrote
head + sep + addition and never wrote tail back, and tail was the file's single trailing
newline, so the record, the queue and the check-in each lost it. Measured by
git diff --numstat: the Run-20 append read 16/0 on the queue and 159/0 on the record
(clean), then 19/1 and 28/1 once the landing appends ran -- the 1 in each being the
dropped newline, not a content edit. Restored by writing one newline byte to each file
(WORK-QUEUE.md 927,008 -> 927,009 B; the check-in 83,853 -> 83,854 B); no line of
content moved. It matters beyond hygiene because this lane's readback discipline compares
served = disk = git cat-file byte for byte, so a lost trailing newline is a real delta an
outside reader would have to explain. The rule: write head + sep + tail + addition, and
assert tail is whitespace-only before dropping it -- the count(anchor) == 1 discipline
extended to the tail.
Nothing deployed, no cp into /root/.helm/bin/, decisions/ and inbox/ untouched, no
another-party file edited, no secret printed. Live state unchanged: snapshot 14,039 B /
aa842b0fd88037f8... / mtime_ns 1791479579475780303, held pin 120 B / 5b6d70716153c3f4...
/ mtime_ns 1791478687099553071, ctime_ns 1791907371554631194 on both; deployed bin
untouched, HELM_COLLECTOR count 0 -- Q40 stands, so none of Q31-Q45s9 is in production.
Merlin
volt
zephyrus-sparkborn
mercury
timmy