Complete source 6 engineering workflows and preserve release validation evidence

harness/history/2026-09-06-ledgers-before-consolidation/README.md

@@ -0,0 +1,12 @@
+# Ledger history preserved before consolidation
+
+`STATE.md` and `TASK_LEDGER.md` are byte-for-byte copies of the complete ledgers
+immediately before the 2026-09-06 evening consolidation. Copy hashes were compared
+with both originals before replacement. They preserve all historical requirements,
+decisions, platform/branch evidence, old process state and superseded open work.
+
+These files are archival, not current instructions or status. Their original
+relative evidence paths are relative to `harness/`, not this archive directory;
+historical absolute paths may refer to the previous machine. Read the current
+[Progress Ledger](../../STATE.md) and [Task Ledger](../../TASK_LEDGER.md) first.
+Current reports take precedence over historical pending/passed claims.

harness/history/2026-09-06-ledgers-before-consolidation/STATE.md

@@ -0,0 +1,207 @@
+# Current release checkpoint — 2026-09-06 19:44 PDT
+
+Goal remains active and incomplete. Native artifact MOVE and CREATE now pass complete source Save/one Undo/Save/one Redo/Save oracles plus controlled-stop exact draft recovery. Creation retained its reserved UUID and excluded row with eight decisions; all six saves across both cases succeeded first attempt. See release-artifacts-native-20260906.md. Current native process2540/window949683068 uses unchanged AB6ECD62 GUI and is clean on the creation result. Native deletion remains pending. Earlier process10192 and artifact-pending statements below are historical.
+
+Actual Linux Rust1.90.0 core-lib suite passed38/38 on Ubuntu24.04.4 QEMU; cold compile19m15s, tests14.15s, log .local/linux-qa/runtime/linux-rust190-core-lib.log. This precedes the new Linux renameat2 no-replace delta. State_contract owns one-job heavy compilation for four focused delta tests, complete library rerun and explicit strace failure injections. Windows Cargo is paused to protect host memory; an attempted semantic regression run was interrupted, not passed (.local/semantic-conflict-diagnostics-regressions.log). WSL remains unavailable; no host restart or settings changes.
+
+Three conflict wording tests passed before the latest reserved-label changes. Additional row-aware reserved headings/reference labels and same-slot conflict diagnostics are formatted/frozen but require tests, strict Clippy, rebuild and native verification. Behavior reviewer owns those production edits; state_representation independently found the residual conflict path and re-reviews the correction. Prior984 passing/one ignored accounting is unchanged here; do not add duplicate platform tests or unrun additions as new passes.
+
+Next: complete remaining native workflows, then resume Windows semantic checks/build when Linux resource lease permits; Linux publication failure tests and full application build/runtime remain gates. Update packages and fresh independent end-state review before completion.
+
+Historical checkpoints below retain prior evidence; this head supersedes current-status claims.
+# Current release verification — 2026-09-06, evening continuation
+
+The authoritative objective remains attachment10b0f701-1743-4de7-9ee1-225920e19649/goal-objective.md. Full OA/SA Windows/Linux graphical/source/REST release remains incomplete. Branch codex/release1-continuation includes integrated c091f80 and local checkpoint2b2d2bc; later source6 work is uncommitted. Prior branch accounting remains in release-branch-integration-20260906.md.
+
+Latest tests: full desktop518/518 passed (.local/source6-artifact-inspector-desktop-tests2.log); corrected artifact6/6 passed (.local/source6-artifacts-final-tests2.log); strict all-target Clippy passed (.local/source6-artifacts-final-clippy3.log). Four additional independent artifact recovery falsifiers passed (.local/artifact-recovery-falsifier-tests2.log), and two core artifact absence oracles passed. Combined earlier full workspace and complete affected reruns now account for984 passing/one existing ignored benchmark, not one uninterrupted green full-workspace run. OpenAPI39fixtures/197schemas and HTTP48 passed. Source5 focused13 passed. Latest GUI/server build passed (.local/source6-artifacts-native-build.log), predating test-only falsifiers and subsequent diagnostic work.
+
+Latest native GUI is .local/native-qa/bin-source6-artifacts/arcadia-studio.exe, SHA256 AB6ECD62DB02FF3D81E2421EE1DDC926AEF72C65784DD288EAFA281836EC0597. Includes artifact lifecycle and diagram-inspector correction. Root alone operates the app; isolated appdata/system-only PATH. After a controlled stop of9060, restarted process10192 is awaiting Home Recover for an artifact move with invalid Owner '-' and separate revision Some(empty)/fragment None drafts. Checkpoint69352f76-e6ca-4e09-aaa7-7b4d94c5dccc copied .local/native-qa/artifacts-move-before-crash.json. Artifact native not yet complete.
+
+Verified native advances: source5 checkpoint exact old raw/baseline/include/path retention, manual draft repair and exact two-file Save (release-source5-native-recovery-20260906.md). Child/Incident two-row forced-stop recovery plus exact Apply/Save/one Undo/Save/one Redo/Save all passed, every save first attempt and recovery retired (release-attachments-native-20260906.md). Dense original10/copy9 views persisted across restart; independent exact model oracle passed. Additional coverage/context intersections, empty selections and Names-and-items preview/apply/Undo were observed; all40 label baseline/minimum-size evidence remains scoped. Latest view switch now follows original/copy inspector correctly; pending copy name applies before switch and one Undo returns clean baseline.
+
+Artifact owner move, independent optional values and invalid raw owner all preview correctly at1440x900 and1100x700. Keep Presence versus Owner move blocks Apply; clearing it restores valid preview. Diagnostic is too technical and same-row conflict wording is being corrected by behavior_review. Native creation/deletion/move final exact oracles remain pending. Preserved generators/fixtures are under harness/fixtures/release1-native/artifacts.
+
+Linux: WSL still has no working distro; earlier import failed HCS service unavailable with host reboot pending. Headless QEMU Ubuntu guest successfully booted, repaired interrupted package setup, installed GCC13.3/pkg-config and official Rust/cargo1.90; actual Rust hello compile+filesystem roundtrip passed. One-job core-lib build runs in hashed source snapshot; no Linux app build/native acceptance claim. Guest ext4 probe confirmed ordinary rename replaces empty target while renameat2 NOREPLACE preserves it; a bounded Linux publication correction is now assigned. See release-linux-validation-options.md. Host settings/restart untouched.
+
+Next gates: finish artifact recovery/history native; verify clearer diagnostics; CM drawing/transition and remaining selective/ordered/scenario/hosted cases; latest full checks, optimized/MSRV packages; Linux application verification and fresh cross-disciplinary end-state review. Meaningful progress continues; no test count or checkpoint completes the goal.
+
+Historical checkpoints below are retained; this head takes precedence for current state.
+# Current release verification — 2026-09-06
+
+The authoritative objective remains `C:\Users\User\.codex\attachments\10b0f701-1743-4de7-9ee1-225920e19649\goal-objective.md`. The full OA/SA Windows/Linux graphical/source/REST release goal is incomplete. Current branch is `codex/release1-continuation`; the integrated baseline and historical branch accounting below remain applicable.
+
+Latest automated evidence: the full current desktop suite passes **506 tests** (`.local/source6-desktop-attachments-recovery-all.log`, 97.98 s). Combined baseline and complete affected-suite reruns account for **966 passing tests and one existing ignored benchmark**; this is not a claim of one uninterrupted green full-workspace run. The prior full workspace had 938 passes and three compatibility-expectation failures; corrected release_ports (13), source_project (33) and HTTP (48) suites passed, giving 943, followed by the desktop increase from 483 to 506. HTTP 48 is included, not additive. Source-6 OpenAPI validation passes 39 fixtures / 197 component schemas. Logs: `.local/source6-workspace-tests.log`, `.local/source6-compatibility-rerun.log`, `.local/source6-http-all.log`, `.local/source6-openapi-final-check.log`. The latest root-owned strict Clippy log `.local/source6-final-clippy.log` currently reports `collapsible_if` at `semantic_review/row.rs:197`; correction/rerun and the final rebuilt binaries are pending. No agent should run Cargo concurrently with root's checks.
+
+Current native app is root-operated process **10236**, source-6 GUI SHA256 `5D0734D9BD6A87CCCA8FFC8C007962AEAC573ACB82E2974211FA857E93C18A72`, staged under `.local/native-qa/bin-source6` with isolated appdata, system-only PATH and adjacent libunwind.dll. It **predates Child/Incident attachment controls, source-5 checkpoint upgrade, the live-trace label correction and visible-line counts**. Passing current source tests do not update this executable.
+
+Source-6 native combined review passed retained invalid/excluded row editing, forced-stop checkpoint recovery, repaired two-source Apply and exact Save/Undo/Redo source oracles. Checkpoint `c33eb911-7792-4f95-ad6f-f0676a733d21` is preserved in `.local/native-qa/batch-before-crash.json`. Accepted/Redo SHA256: `D3315BBA762395205AE761E6E64029E8B4070C15A1299C6114075581DB7B0974`; Undo/pristine SHA256: `5E1F433E04621424EDAC43E53411624059E873F88DD531BFDB39093953485ED7`. All three saves succeeded first attempt, checkpoints retired and stderr was empty. This closes those observed batch/save cases, not every save contention scenario. Exact evidence is in `release-current-native-verification.md`.
+
+Dense native baseline is partly verified by root: at 1440×900, Fit 89% displayed all 40 labels readably without overlap; actual exchange identities 01/10/20/40 were inspected. The Commands category displayed ten lines, and one Undo restored All. At 1100×700, Fit 52% is a tiny overview; 99% working zoom plus blank-canvas pan allowed all four named exchanges/aliases to be selected without model mutation. These observations do not require presentation grouping. Dense Save/reopen, duplicate, explicit hides, labels and remaining selector cases are still pending. Automated fixture reports 151 coincident path pairs; separate label hits provided native access, so path coincidence alone is not a usability failure.
+
+Current additions: source-6 Communication means and explicit transition endpoints; saved Work/Participant categories and view selectors; atomic batch semantic review; presentation duplication; Child/Incident existing-record review and functional-port boundary tests; narrowly admitted source-5 checkpoint recovery. The 18-topic guide and README/scope now describe implemented behavior separately from pending acceptance. Visible counts now use the omission panel's existing candidate/filter/availability pass, with explicit Hide-count wording; no native count check is claimed. Independent source-5 review found no new material defect and is preserved in `release-source5-checkpoint-independent-review-20260906.md` (13 focused tests inspected; exact admission, raw baselines, fingerprints and cleared impact approvals). Native old-checkpoint upgrade remains pending. The Windows journal review remains in `release-journal-publication-review-20260906.md`.
+
+Next release gates: strict final-tree checks and rebuild; latest attachment/source-5/trace-label/count native checks; remaining CM drawing/transition and selective-view lifecycle cases; remaining ordered/scenario/fragment, artifact lifecycle and hosted variants; optimized/MSRV packages and final independent review. Linux application build/native acceptance remains required; WSL Ubuntu import previously failed with VM service unavailable and Windows reboot pending. Root owns native input and shared Cargo. No further host feature changes or repeated imports are authorized by this status update.
+
+The following sections retain historical checkpoints. This current head takes precedence for process state, verification totals and outstanding work.
+# Current source6 integration and recovery checkpoint — 2026-09-06
+
+Latest verification: full workspace run completed with 938 passing tests, three compatibility expectation failures and one existing ignored benchmark. All 483 desktop tests passed. The three failures were corrected without changing historical inputs or production behavior: explicit participant choices for the new reverse Boundary→CommunicationMean transition, and current schema targets for migration. Subsequent complete release_ports (13), source_project (33), and HTTP (48, including two new source6 success/restart cases) suites pass. Together the current test coverage is 943 passing tests and one ignored benchmark. Logs: .local/source6-workspace-tests.log, .local/source6-compatibility-rerun.log, .local/source6-http-all.log. Strict Clippy and new GUI/server builds remain pending. Normal Cargo execution of the dense-view example also passed (.local/source6-dense-example.log). Native process8908 closed cleanly after observing All changes saved; no new GUI running yet. Independent Windows journal review found no additional material defect; release-journal-publication-review-20260906.md records the bounded evidence. Agent is correcting outdated guide wording before the new build.
+
+Goal remains full first-release OA/SA, Windows/Linux, graphical/source/REST parity and native acceptance. Active branch codex/release1-continuation from integratedc091f80; checkpoint2b2d2bc is committed locally, not pushed. Large later source6 continuation is uncommitted. Prior branches accounted for in release-branch-integration-20260906.md; do not restore superseded investigation stash. Authoritative user objective attachment10b0f701-1743-4de7-9ee1-225920e19649/goal-objective.md.
+
+Current verification: first new full desktop run459pass/19semantic failures; root causes corrected. Focused82/82semantic tests now pass (.local/source6-semantic-rerun.log); app-level view-copy5/5pass (.local/source6-view-copy-app-tests.log). CM9 and source6view8pass. Latest core run39lib (including viewoptions9 and journal/race tests), Boundaryscenario3, attachmentoracle4, external sourcefiles8 allpass (.local/source6-core-recovery-tests.log). OpenAPI/schema6 closed39fixtures/197schemas pass (.local/source6-openapi-capacity-validation.log); new actualHTTP capacity tests await fullrun. None of this is new native acceptance.
+
+Root currently owns shared Windows Cargo: full workspace --no-fail-fast tests session89232, log .local/source6-workspace-tests.log. All existing production source frozen until run/build completed. Agents may add isolated unwired new tests/modules. Environment .local/toolchain/env.ps1, portable Rust1.98.1 gnullvm/LLVM-MinGW. Prior checkpoint869tests+strictClippy+cleanbuild do not validate new work. Need full new workspace/Clippy and GUI/server rebuild after fixes.
+
+Source implementation: CommunicationMean participant exchanges + explicit SA per-exchange port decisions; reverse scenario resolver including unoriented Boundary with actual lifeline/port contract and correlated Reply semantics; deliberate source/schema6 frozen1–5 admission; ExchangeCategory Work/Participant families and saved view options with explicit empty selections; cross-layer Traceability exception; shared semantic ViewIndex cached per accepted Document revision; graphical saved-view/category controls with paged searchable reference choices; atomic multi-row semantic review and recoveryv2/history pair restoration; 18-topic guide. View duplication now uses existing CreateDiagram with new view/placement identities, exact shared semantic refs/routes/options, correct state-workspace routing and stale-ID preflight. Source6 REST limits now include200 explicit communication endpoint decisions, including apply.
+
+Native process8908/window853042 runs .local/native-qa/bin-reference-padding/arcadia-studio.exe SHA256D402F9B09A454B7AB1239DAB9102E6E20107BCC38AFA29740B1837592E98A04E, isolatedappdata/system-onlyPATH. It precedes ALL new source6/batch/category/guide/retry changes. Current window maximized2245×1232, Traceability, saved ordered-reverse-result.arcadia, no modal/recoveryJSON. Root alone uses ComputerUse. Main ordered review crashrecovery and reverse ordered Apply/Save/Undo/Save/Redo/Save match exactsourceoracles. Referencepair gutterpasses1440×900/1100×700; othergutterfixesawaitnewbinary. Full native evidence/hashfiles in release-current-native-verification.md.
+
+Native reverse SaveAs and Undo Save each initially failed before journal publication, preserving model/disk, and succeeded retry. Independent publiccore reproduced18/20saves error5; slashhypothesis falsified. Fix: Windows no-replace MoveFileExW flags0 with390ms bounded5/32/33retry; journalv2 durable write-started marker avoids rolling back another completed writer when this save wrote nothing, v1recoveryretained. Allnewfalsifiers pass; post-fix30/30publicsavespass noouterretry/nojournals (.local/source-save-fixed-30-probe.log). Independent fresh review requested; footerfullerrortooltip sourceonly.
+
+Fixtures ready: .local/native-fixtures/semantic-batch* exact two-source120..150 range oracle, steps/hashmanifest; dense-40/dense-40.arcadia/json/oracle produced by tracked coreexample via directrustc. Dense semantics11matricespass;40routes12ms,0labeloverlaps but151coincidentpathpairs. Native readability/identityaccess still pending, so no blanketpass or groupingdecision. DirectCargoexample run stillpending afteronefixedparse-error conversion. Future grouping must remain explicitpresentation withactualmemberidentities ifnativegatefails.
+
+Owners: state_contract existingoa-core/source6language +sourcefilesrecovery +newHTTPsource6test; state_representation semantic_review subtree/data_fields testbridge, nowmaydraftunwiredChild/Incidentmoduleonly; behavior_review newview_options/formsview_fields/view_copy +appcopy/capacitytests andindependentjournalreview; roototherdesktop/serverintegration/ledgers/native. Coreattachment4-testoraclepassed; graphicalChild/Incident/Artifactlifecycle stillrequired, notimplemented. Source6guide content should be reviewed for newCM/viewfeatures aftercompilednativefoundation.
+
+Next: finish fullworkspace diagnostics, boundedfixes, Clippy andnewGUI/serverbuild; operatereal source6communication, savedcategory/context/hide/labels/duplicate, batchrecovery/history andguide atminimum/defaultsizes; actualHTTPsource6success/restart parity; densereadabilitygate; remainingorderedscenario/branch/fragmentvariants. Then completeattachment/artifactergonomics, optimized/MSRVpackages andfreshend-statereview. WSLUbuntuimportfailedHCS_E_SERVICE_NOT_AVAILABLE withVMPpendingWindowsreboot; userrestartreplypending, no repeatedhostchanges/imports. Linuxapplicationbuild/nativeacceptance remainsrequired. Meaningfulprogresscontinues; no releasecompletionclaimed.
+
+The following sections retain historical evidence; current process and verification status above takes precedence.
+
+# Current continuation — 2026-09-06
+
+The full first-release goal remains active. User requested that completed Git branches be accounted for: current branch codex/release1-continuation starts from integrated c091f80; the branch audit proves meaningful side-branch work is included or patch-equivalent. No stale stash is restored.
+
+Current Windows evidence: 869 workspace tests pass with one existing ignored benchmark (.local/current-integrated-tests-corrected.log). Strict all-target Clippy and clean GUI/server builds pass (.local/current-integrated-clippy.log, .local/current-integrated-build-clean.log). Two equivalent guard rewrites and a test-only helper annotation closed Clippy findings after the passing test run. Shared Windows Cargo target is idle. Portable Rust1.90 GNU host plus gnullvm target is prepared; MSRV compilation is still pending.
+
+Native process10896 is running from .local/native-qa/bin-20260906-corrected with isolated appdata and system-only PATH. Binary660BECC8DB96B218D12805B39661B46C9F48DF4F8F07CB3B7D42C1F803BE089F includes all behavior/Home/save/layout fixes; the later clean build differs only in the stated lint/test-helper changes. Computer Use was stopped with Escape, then explicitly reauthorized by the user's @Computer message. The unfinished timed-transition checkpoint recovered exactly, including invalid empty expression. Repair30s created one Event and changed its Internal transition atomically. Save-as to state-recovered-renamed.arcadia, one Undo, Save, Redo, Save passed: Undo entry exactly pristine; Redo entry exactly accepted; checkpoints retired. Home Continue editing returns to the same Behavior state view. Minimum1100x700 navigation shows all9pages and guide Clear is no longer clipped. Root is currently on the guide; ordered and reference-pair layout native checks remain.
+
+REST: the staged server passed25 captured requests, twice from isolated stores, with exact five coverage warnings across source/JSON/current validation, atomic422 rejection, repaired persistence after forced restart and warning restoration by explicit replacement. Reproducible probe/fixture is tracked in harness/fixtures/rest-coverage. This is Windows service evidence, not Linux acceptance.
+
+Packaging: scripts stage selected dependency/runtime notices and verify source copies and every ZIP entry. QA b has528files including485licensefiles; ZIP SHA256237b30ee0c704efad89ed5c371d2c965f9e7d11ea318c97ba16ee34282456f73. Iced Icons uses its declared distributed MIT plus preserved font copyright metadata and candid provenance limits; no contrary license was established. See release-windows-package-review.md for exact clean-build hashes. Earlier QA package native clean-PATH Home/example/help/close passed; final QA b native acceptance remains.
+
+Linux: the QEMU pilot achieved actual Ubuntu SSH/cloud-init/filesystem/DNS validation with no failed units. Guest-only startup timeouts were adapted for slow emulation; no application build ran. User then installed WSL and authorized creating a distro. Our QEMU processes are stopped. WSL2 Ubuntu24.04 import failed HCS_E_SERVICE_NOT_AVAILABLE; VMP is enabled but Windows reports a pending reboot, with vmcompute/hns absent. User was asked to restart when convenient. No existing distro was touched and no Windows features/settings were changed by the agent. Verified official image and exact isolated retry command are in release-linux-validation-options.md. Recheck after restart before concluding nested virtualization is unavailable.
+
+Required next work: ordered/keyed/native view checks and source-oracle capture; checkpoint verified work in Git; implement first-class OA CommunicationMean plus deliberate source6 admission, saved selective/category/context views, remaining attached-child/incident/artifact/multi-source review GUI, full engineering guide, MSRV/optimized packages and fresh Windows/Linux end-state acceptance. Selective-view candidate and independent critique now define family-specific category sets, global versus selected-context coverage, preserved port geometry and a dense40-edge readability gate. Nothing here narrows the original goal or marks the release complete.
+
+The material below records earlier checkpoints. This current section takes precedence for process state, tool ownership and current evidence.
+Authoritative objective: attachment `10b0f701-1743-4de7-9ee1-225920e19649/goal-objective.md`, read in full. User requested accounting for other Git branches. Current working branch is `codex/release1-continuation` from integrated `c091f80`; all meaningful side-branch production work is present or patch-equivalent. See release-branch-integration-20260906.md. Original checkout `ea2e8e9` was stale; the duplicate investigation is stashed and superseded.
+
+Historical paths/windows/builds below are evidence from the previous environment, not current active processes. This machine has no D:/CodexBuilds or installed WSL. The first release is incomplete.
+
+Current implementation: Home/recents, semantic Annotation/Binding review, private accepted-source/raw-draft checkpoints including workflow recovery, and typed StateAction detail rows. Independent reviews found and closed checkpoint late-write/discard races, candidate-parent picker context and literal-UUID expression rendering defects. Native acceptance is still required.
+
+Current toolchain: user-local Rust 1.98.1 `stable-x86_64-pc-windows-gnullvm` plus official LLVM-MinGW 20260826 UCRT under ignored `.local/toolchain`; dot-source `.local/toolchain/env.ps1`. GNU test executables with installer-like filenames initially failed Windows error 740. Shared build scripts now embed an explicit `asInvoker` manifest in GNU/gnullvm binaries and tests, without changing system security or requiring elevation.
+
+Fresh workspace tests pass **840 tests** with one existing benchmark ignored; `.local/current-workspace-tests-final.log`. Strict all-target workspace Clippy passed in `.local/current-clippy.log`. Initial keyed fixture, core row-order and state test failures are fixed; a hosted timeout test's invalid admission-timing assumption is also corrected. Independent review fixed write/restore checkpoint workspace limits before a prior valid checkpoint can be replaced.
+
+Current native Windows evidence is in `release-current-native-verification.md`: empty Home/default/minimum layout, example, rejected raw source crash/recover, exact21-file Save as, recovery retirement, Recents reopen, rejected raw UUID crash/recover and guarded Save & continue passed. All three typed StateAction rows select the correct relation/phase/target in Behavior. Native found a saved-state-view entry bug: Architecture uses a generic renderer and wrong tools. Routing fix passed435 desktop tests and GUI/server build. Updated native process796 is running; invalid Binding crash recovery, exact repaired Save and one-step Undo/Redo passed. Annotation workflow recovered and saved exactly against the oracle; native found Save-as basename rename adds an unwanted Undo step and can clear Redo. A bounded history-preserving correction is being implemented.
+
+Root controls native input. Semantic worker currently owns shared Cargo for ordered-review focused tests; coverage diagnostics follow. Save-as history worker must coordinate build access. All native trial data lives under ignored `.local/native-qa`, with app metadata redirected away from the user's real recents. Current uncommitted continuation still needs native semantic/binding/history and behavior/workflow acceptance, fresh routing checks and a milestone commit. It is not a complete release.
+
+The current coverage audit is `release-current-coverage-20260906.md`. Independent OA design/critique agrees that ordinary participant communication needs a first-class CommunicationMean instead of broadening SA port-bound BoundaryExchange. Other remaining release work includes saved selective/coverage views, completeness diagnostics, ordered/attachment/artifact/multi-source review controls and final platform/package gates. These are required unfinished work, not exclusions.
+
+---
+# Current release state — 2026-09-06
+
+The first-release goal remains active and incomplete. Authoritative objective:
+attachment10134df9-bea2-4c02-a820-67b53d6b86f7/goal-objective.md. PLAN/TASK_LEDGER
+retain complete OA/SA, graphical/source/includes/REST parity and release acceptance.
+
+## Ownership and integrated state
+
+- Main C:/Users/sorok/OneDrive/Documents/ChatGPT/Capella 2 is the continuation
+  pointer, codex/release1-engineering,4fa9591; production work is in DATA below.
+- DATA D:/CodexBuilds/Capella2-data-integration, codex/data-contract-integration,
+  production14b8e18. Root owns index and Capella2-data-target (idle).
+- Linux D:/CodexBuilds/Capella2-data-linux-review, codex/data-linux-review,
+  equivalent9c61d0d. Root owns index and data-linux-target (idle).
+- SEM D:/CodexBuilds/Capella2-semantic-review, codex/semantic-review,6fb01ae.
+  semantic_gui_design owns slice2 Annotation/Binding GUI, index and
+  semantic-desktop-target. Slice1 exact reset/unordered Member/Literal is integrated
+  and independently reviewed; ordered/attachment/artifact/multi-source work remains.
+- HOST D:/CodexBuilds/Capella2-hosted-desktop, codex/hosted-desktop,e807086.
+  semantic_integration owns Home/start/recents, index and scenario-target. Child
+  owns new Home tests; no overlap with root or SEM. Recovery is not implemented.
+- Root is sole native operator. Agents may not issue native input.
+
+## Verified integration
+
+R6 data contracts, direct scenario/process gestures, source5 core/REST and scalar/
+constructor GUI are integrated. Full Windows767/Linux770 workspace tests passed
+at DATA28ebbbb/Linux04210b3, one intentional benchmark ignore each; strict checks
+and optimized desktop/server builds passed. Live REST184 schemas/19 typed values/
+9 malformed rejections passed. See scoped ledgers for limits.
+
+Newest DATA14b8e18/Linux9c61d0d:392 desktop tests each, strict all-target desktop
+Clippy, workspace fmt and release builds pass. Sessions24877/10919 closed0.
+Logs integrated-review-{test,clippy,build}.log in Windows data-target and Linux
+checkout target. Initial Windows log redirect failed before Cargo (nonexistent
+checkout target); rerun used the existing dedicated target and passed.
+
+Independent reviews closed constructorc149f2f (299 tests), reset/unordered6fb01ae
+(311 tests), invalid-local-source destinationb04c4b3 and catalog12e3020/e807086.
+Catalog review found and corrected false empty filtered results when Check observes
+a changed head outside displayed rows; unchanged-head/cross-service controls pass.
+Constructor and keyed core changes43370de/8a75294 have independent probes and359
+core tests passing. Full graphical parity is not yet established.
+
+## Native state and evidence
+
+Windows hosted6fcc238 trial71940 closed0/empty stderr. Default/minimum publish,
+graph/text Save, invalid source retention, artifact API Check/review/Reload/Undo,
+stale ETag conflict/local retention, offline/retry, exact three-file local Save As
+and catalog Open passed. Isolated loopback serverPID20984 remains at127.0.0.1:8787,
+resource d28b2fc9-fbbd-456b-8ba8-a1195d1c8f33 revision6. Evidence/store is
+C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906.
+
+Invalid local repair source used to retain hosted destination and overwrite that
+resource after repair. Fix is integrated/reviewed; actual fixed native flow remains
+pending. Catalog freshness is likewise integrated/reviewed, native check pending.
+
+Current Windows constructor trial84997/window4327540 uses frozen cf04ff1 at
+ui-constructors-windows-cf04ff1, SHA86C86A0A4E9E7BDEB5BBB64F6787AA5D3A8715D109979A57D056AEB686538E38.
+At1100x700, fixture01 Data reviewed Take, exact source/history, Undo/Redo and Save
+passed; parsedProject matched independently core-generated expected. Candidate
+Real retained raw '-' across Integer/Real changes, blocked incompatible Boolean
+default, accepted repaired -1.5..100/default3.5, applied as one Undo/Redo and saved.
+Current accepted file is fixtures/01-data-switch.arcadia with Real candidate;
+native property values/history and disk comments/unitcm confirmed. Independent
+candidate exactProject comparison is pending. No modal currently open.
+
+Remaining five pristine constructor fixtures and expected outputs are in
+C:/Users/sorok/AppData/Local/Temp/capella2-constructor-native-20260906. Do not rerun
+the UUID-generating fixture generator. Copy originals before editing.
+
+New frozen accepted builds (native pending) under Capella2-release1-01a06e2e:
+ui-integrated-review-windows-14b8e18 and ui-integrated-review-linux-9c61d0d.
+Manifests contain hashes. Earlier scalar native accepted; process camera/owner
+accepted, compact pending form fixf08507a needs native recheck. See native ledgers.
+
+Linux uses Ubuntu-24.04, Rust1.98.1 PATH/home/sorokinoleg/.cache/arcadia/rust/bin,
+--config target/linux-cargo.toml and dedicated target. Wayland works with
+WGPU_BACKEND=vulkan and VK_DRIVER_FILES=/usr/share/vulkan/icd.d/lvp_icd.x86_64.json.
+Optional X11 missing libxkbcommon-x11-0; user has sudo apt-get install command.
+Do not bypass authentication. Windows/Wayland/REST are unblocked.
+
+## Exact next actions
+
+1. Complete native constructor fixtures and compact process pane acceptance.
+2. Operate corrected invalid-local-open and stale catalog on newest Windows build;
+   complete Linux hosted/semantic native acceptance.
+3. Independently review/integrate SEM Annotation/Binding and HOST Home/recents,
+   then ordered/attachment/artifact/multi-source GUI and recoverable checkpoints.
+4. Finish advanced OA/process/scenario, help/coverage and fresh final reviews;
+   full platforms/MSRV/docs/package verification. No release handoff yet.
+
+Build: cargo test --locked --offline --workspace;
+cargo clippy --locked --offline --workspace --all-targets -- -D warnings;
+cargo build --locked --offline --release -p oa-desktop -p oa-server.
+Dedicated targets only. No remote push, usage reset or broad target deletion.
+
+## Latest integration evidence (after the active-section snapshot)
+
+Desktop test executable built. Full desktop run:459pass/19semantic failures (.local/source6-desktop-tests.log). Constructors' all-NotApplicable retired-slot handling, first-equal Candidate payload preservation, exact-source test fixture, stale wording and one approved stale/reset expectation were corrected by semantic owner. Focused82semantic tests currently running root63955 (.local/source6-semantic-rerun.log). Five app-level duplication tests now wired; missing-view preflight before Apply fixed an independently found unrelated-draft commit. Copy helper3, selective forms2, cache invalidation, CM GUI and SVG tests all passed in459; new app-level copy tests not run yet.
+
+Core focused:CM9 and source6/view8 pass (.local/source6-core-focused2.log). Boundary scenario2/3pass; missing explicit Name KeepTarget fixture decisions corrected. Attachment oracle4failed invalid Boolean-vs-Record association fixture; now corrected, rerun pending. OpenAPI/schema6 generator validation37fixtures/197schemas passes (.local/source6-openapi-validation.log); actual HTTP new contracts pending. Dense generator compile error corrected; not executed yet.
+
+Native reverse ordered Apply/Save/Undo/Save/Redo/Save matches exact source oracles. Two Save attempts failed with transient Windows journal-publication access denied; each retry succeeded without reauthoring/model loss. Core independently reproduced18/20; bounded390ms Windows publication retry with3tests nowsource-only. Root fullerrorfooter tooltip source-only. Detailed native hashes in release-current-native-verification.md. Current process8908/window853042 maximized, saved ordered-reverse-result.arcadia, no modal or recovery checkpoints. Oldbinarystillprecedesallnewwork. RootownsCargo; existingcore/source6productionfrozen duringfocuseddesktoprun. Next run correctedcorefixtures, journalretrytests/30saveprobe, densefixture, appcopytests, fullworkspace and rebuiltnativeacceptance. Goal remains incomplete.

harness/history/2026-09-06-ledgers-before-consolidation/TASK_LEDGER.md

@@ -0,0 +1,192 @@
+# Current task facts — 2026-09-06 19:44 PDT
+
+Verified: artifact MOVE and CREATE native exact Save/Undo/Redo plus raw/excluded-reserved recovery pass; current root-operated process2540 is clean. Linux Rust1.90 core-lib38/38 passed before Linux publication delta. Evidence and scope are in current STATE.md and release-artifacts-native-20260906.md.
+
+Open: native deletion/CM/remaining scenario and hosted cases, reserved-label correction acceptance, latest complete checks and optimized packages, Linux journal delta/full application/runtime, fresh independent end-state review. Windows semantic regression was deliberately interrupted for host memory; it is incomplete. Linux worker retains heavy compile lease.
+
+Decision/strategy: preserve exact oracle comparisons and explicit draft decisions; row-aware labels must distinguish reservations from deleted records. Continue authorized engineer workflows while platform verification proceeds. Goal and original requirements remain unchanged and incomplete.
+
+Historical ledger below retains prior rationale; current head supersedes old status.
+# Task Ledger — current facts, 2026-09-06 evening
+
+Goal and given requirements remain full first-release OA/SA, equivalent graphical/source/REST, Windows/Linux native usability, strict reST and independent acceptance. Authoritative objective attachment10b0f701-1743-4de7-9ee1-225920e19649 remains active and incomplete; branch integration is preserved.
+
+Verified facts: desktop518 full plus four recovery falsifiers passed; combined baseline/component accounting984 passing and one ignored (not uninterrupted full-workspace green). Strict all-target Clippy and rebuilt GUI/server passed before later diagnostic changes. Source5 recovery and Child/Incident forced-stop/recovery/exact Save/Undo/Redo native pass. Dense view copy/hide persistence and independent exact model oracle pass; view-inspector switching fix observed. See current STATE.md and specific native reports for exact limits.
+
+Current strategy: complete artifact native recovery and exact history; improve conflict explanations using actual facet/owner names; close remaining engineer workflows, then final checks/package/Linux acceptance and fresh independent review. Native process10192 awaits artifact Home Recover; root owns all native input. Implementation agents own only assigned files. Avoid concurrent Windows Cargo builds.
+
+Open questions/assumptions: Linux full application build/runtime remains unverified. QEMU guest toolchain and hello are verified, core-lib build is active; WSL remains unavailable pending host reboot. A measured Linux empty-target journal publication race requires a no-replace correction. Artifact native creation/deletion/move, CM transition controls and remaining scenario/hosted variants still need actual execution. Passing unit tests are not substitutes for these workflows.
+
+Decision: preserve raw invalid/rejected drafts through recovery, use exact identities and explicit candidate decisions, and apply model/source/history atomically. Native evidence supports child/incident and batch cases; artifact case is in progress. Do not silently broaden scoped evidence or weaken release completion.
+
+Historical ledger below remains for prior rationale and evidence; this head and current STATE.md take precedence.
+# Task Ledger — current release head, 2026-09-06
+
+Authoritative objective: `C:\Users\User\.codex\attachments\10b0f701-1743-4de7-9ee1-225920e19649\goal-objective.md`. Goal remains incomplete: full OA/SA engineer workflows and graphical/source/REST parity, Windows/Linux native acceptance, reproducible packaging and independent final review. Earlier objective IDs and status statements below are historical; this current head and STATE.md take precedence.
+
+## Current verified facts
+
+- Current desktop suite: **506 passed** in `.local/source6-desktop-attachments-recovery-all.log`. Combined baseline and complete corrected component-suite coverage: **966 passing / one existing ignored benchmark**, including HTTP 48; not one uninterrupted full-workspace green run. OpenAPI: 39 source-6 fixtures, 197 schemas. STATE.md records the accounting and exact logs.
+- Source-6 native batch: included Minimum5 and excluded invalid Maximum `-` survived a forced-stop checkpoint and Home Recover. Repair to Minimum120/Maximum150 applied once. Save/Redo exactly match SHA256 `D3315BBA762395205AE761E6E64029E8B4070C15A1299C6114075581DB7B0974`; one Undo/Save exactly matches `5E1F433E04621424EDAC43E53411624059E873F88DD531BFDB39093953485ED7`. All three saves succeeded first attempt, with retired checkpoints and empty stderr. See `release-current-native-verification.md`.
+- Dense partial native result: 1440×900 Fit89% shows all forty labels readably, identities01/10/20/40 confirmed; Commands filter10 and one Undo→All pass. At1100×700 Fit52% is an overview, while99% plus pan provides readable access to all four names/aliases without a model edit. No grouping requirement follows from these observations; dense persistence, duplication, hides and remaining filter/label cases remain pending.
+- Independent source-5 checkpoint review found no new material defect in exact token-only migration, raw baseline preservation, historical fingerprint binding, replan/approval reset, bounds or restore-before-reset handling. Evidence: `release-source5-checkpoint-independent-review-20260906.md`; 13 focused tests inspected. Native upgrade is not yet verified.
+
+## Current boundaries and next actions
+
+Root's native process10236 runs source-6 binary SHA256 `5D0734D9BD6A87CCCA8FFC8C007962AEAC573ACB82E2974211FA857E93C18A72`; it predates attachment controls, source-5 checkpoint recovery, the trace-label correction and visible counts. Root owns native input and shared Cargo. `.local/source6-final-clippy.log` currently reports one collapsible-if finding in semantic_review/row.rs; correction/rerun and final rebuilt binaries remain pending.
+
+Communication means, selective views, duplication and batch review are implemented. Existing-record Child/Incident review now has automated evidence; its native acceptance and remaining Artifact/lifecycle ergonomics are still required. Finish new-binary recovery/attachment/count checks and remaining CM/selective/ordered/hosted cases, then optimized/MSRV builds, packages/checksums and full independent end-state review. Linux application build/native acceptance is still required; WSL VM service remains blocked pending the previously requested host reboot. No checkpoint or test count completes the user goal.
+
+## Historical ledger retained below
+# Task Ledger — first release
+
+Authoritative objective: attachment10134df9-bea2-4c02-a820-67b53d6b86f7/
+goal-objective.md, read fully2026-09-06. STATE.md records execution; PLAN.md retains
+scope; DECISIONS.md and linked contracts preserve rationale.
+
+## Goal and success criteria
+
+System engineers develop and iteratively reconcile OA/SA models through equivalent
+graphical, textual and REST workflows. Rust/Iced Windows/Linux, strict reST,
+traceability, navigable offline guidance and reproducible deployment. Acceptance
+requires native workflows, semantic evaluators and fresh independent review.
+
+## Given facts
+
+- User prioritizes Capella domain fidelity, hierarchy, typed ports and intuitive
+  transitions in both directions, without its clutter and navigation friction.
+- Direct exchange drawing must avoid large endpoint dropdowns; ports must move
+  between sides; contextual menus should replace persistent action clutter.
+- Modular source must be practical for humans/AI and Git. Text/graph/API parity is
+  required. Behavior canvases must support editing and preserve drag selection.
+- Git/worktrees are authorized. Remote publication is not requested.
+
+## Verified facts
+
+- Original Capella SAB creates FE function input/output endpoints; component ports
+  are separately Standard/Flow with explicit allocation. Native observations are in
+  release-capella-workflow-benchmark.md; adopted contracts preserve that distinction.
+- Explorer/port discovery, editable routing, nested modular source and coupled REST
+  bundles have scoped Windows/Linux acceptance. Evidence links are in STATE.md.
+- Direct palette connections, four-side port anchors, context menus and source
+  folders passed real Windows/Linux operation. Passive stacked Canvas fixes native
+  tooltip overprint; separate Frames did not. See release-port-drawing.md.
+- Persisted state editing now passes Windows/Linux native and independent review:
+  creation, movement, direct transitions, typed forms, reconnection, fold/reopen.
+  See release-state-editing.md. Scenario/process canvases still need direct editing.
+- Ordinary Document commands atomically synchronize source/model; failed writes
+  retain drafts. Source comments require occurrence/provenance-aware edits, not
+  whole-model equality or flat reformatting. Independent counterexamples were fixed.
+- Accepted-main R3 existing-target reconciliation remains name/description only;
+  isolated typed core/source/API are implemented, with desktop integration active. R6 data shape
+  expansion is active implementation, not accepted functionality.
+- R6 ab661f2 full suites passed Windows607/Linux610; f5467e5 desktop263 and
+  strict Clippy/release passed on both platforms. Native Windows data editing,
+  typed defaults, allocations, recursive qualified Call/Reply values, history and
+  saved reopening passed. Source3 migration now preserves comments and nesting.
+  Native found flat property browsing still ambiguous; one-record browsing with
+  bounded pages passes264 desktop tests/Clippy/release on both platforms and native
+  Windows compact/normal browsing, expression retention and saved reopen.
+  Linux native R6 acceptance remains outstanding.
+
+## Assumptions and open questions
+
+- Nested aggregate files reduce cognitive load; any additional port/exchange/step
+  shorthand must justify grammar complexity through real authoring tasks.
+- State placements proved viable without a second geometry system. Scenario/chain
+  gestures still need their own occurrence/order semantics and task verification.
+- Routing offers a usable initial path plus manual pins; arbitrary dense diagrams
+  are not guaranteed crossing-free. Measured dense full solve119ms remains a limit.
+- R3 selected design C uses finite self-tagged typed facets, separate membership
+  and order acknowledgements, and transient constructor groups. Source5 historical
+  references are implemented in the isolated semantic checkout. Independent review
+  found narrow-acknowledgement/canonical-agreement/rollup defects; the worker has
+  added regressions and fixes. Full catalog, GUI/API/spec and acceptance remain.
+
+## Decisions and current strategy
+
+Preserve one typed core and validated command boundary. Retain current typed ports;
+R6 uses schema/source4 with explicit1/2/3 migration and no intermediate public4
+shape. Freeze payload, defaults, inheritance, associations and identified interface
+allocations together. Preserve lexical includes/comments during migration.
+
+Finish and independently verify R6, then semantic R3 reconciliation and direct
+scenario/process gestures. Complete lifecycle/recovery, hosted editing, guidance
+and fresh cross-disciplinary Windows/Linux acceptance. No subsystem checkpoint
+completes the first release. Current work is making measured implementation,
+review and runtime progress. User reauthorized Computer Use. Root resumed combined Windows scenario tests;
+middle insertion, history, save, reorder and scroll/Escape cancellation passed.
+Three native UI findings are being refined; Linux acceptance remains pending.
+
+
+Latest verified facts: integrated60d162c passes306 desktop tests/strict Clippy/build
+on Windows and Linux. Windows ALT/pinned-actions/viewport retention native passed;
+Linux native is active. RESTd130013 passed48 server tests plus served/local schema
+validation and independent review after direct user confirmation resolved approval.
+New constructor-acknowledgment reachability defect was independently reproduced;
+narrow core fix and separate scalar GUI implementation are active in SEM. These
+are current unresolved work, not accepted release limitations. See current STATE.
+
+## Current evidence superseding earlier in-progress notes — 2026-09-06
+
+Semantic source5/core/REST and scalar GUI are integrated at d114a5d. Full Windows718/
+Linux721 tests, strict Clippy, optimized builds and live semantic REST contracts pass.
+The equal initial discriminator acknowledgment defect is fixed and independently
+closed. Three scalar GUI P2 fixes5a51a75 are under fresh recheck/integration; structured
+authoring remains required. Basic Linux R6, middle scenario and guarded chain insertion
+have actual native evidence in their ledgers; advanced and compact cases remain.
+X11 lacks libxkbcommon-x11-0, installation requires user's sudo password. User has
+the exact fix command; Windows/Wayland progress is independent. This environment
+issue is not evidence of a semantic defect or reason to mark the release blocked.
+
+2026-09-06: DATA67ed8e0/Linux43dd566 integrates bounded MessageKind/TimerExpression
+review.335 desktop tests and strict checks/build pass per platform; independent22
+module tests+288 differential cases close no findings. Windows native scalar now
+includes named mapping/default, historical identities, reopen and reverse Undo;
+trial closed0/empty stderr. Exact scope and pending native cases:
+release-semantic-native.md. Hosted desktop implementation is isolated in
+Capella2-hosted-desktop; all release completion claims remain pending.
+
+## Hosted/native and constructor checkpoint — 2026-09-06
+
+Verified: optional hosted desktop is integrated; native publish, exact authored
+bundle preservation, graphical/text Save, invalid-source rejection, API artifact
+review/reload/Undo/Redo and competing-revision local retention passed on Windows.
+Minimum hosted dialog controls remain reachable. Offline/reopen/local Save As and
+Linux native hosted acceptance continue. No external server was deployed.
+
+Independent core review closed43370de/8a75294 with31 semantic tests, optional
+Binding/Annotation both-direction probes,3 reverse Port boundary and13 port
+regressions. Full owner core suite359 passes. Semantics preserve target-local keyed
+members without resurrecting source removals, mandatory reset and OA Legacy rules.
+Remaining constructor GUIc149f2f passes299 SEM tests; fresh review is active.
+
+Native process camera/owner fix acceptance passed. New compact form finding was
+fixed and passed real Iced layout+360 desktop tests; native fix acceptance pending.
+Strategy remains measured release completion, not treating these slices as full
+source/UI/API parity. Keyed/order/reset, artifacts/multi-source, remaining advanced
+native cases, Home/recovery/help/coverage and final acceptance are still required.
+
+## Reviewed corrections and native Data evidence — 2026-09-06
+
+Verified: constructorc149f2f/reset-unordered6fb01ae and hostedb04c4b3/cataloge807086
+are independently reviewed/integrated. Both platforms pass392 desktop tests and
+strict gates. Native Data Take matched the whole core-generated Project/history;
+Candidate raw invalid/type mismatch/repair/compact Apply/Undo/Redo/Save passed.
+Candidate exactProject and remaining constructors/Linux native are still pending.
+Strategy: finish structured parity while Home/recents progresses independently;
+recovery, ordered/attachments/artifacts/multi-source and final acceptance remain.
+
+
+## 2026-09-06 branch reconciliation
+Verified integrated baseline c091f80 contains direct state/scenario/process editing, data contracts, schema 5 semantic review and hosted editing. Current branch codex/release1-continuation adopts it; independent ancestry/patch/tree audits found no required production transplant. Historical environment is absent here. Current user objective is attachment 10b0f701-1743-4de7-9ee1-225920e19649/goal-objective.md. See release-branch-integration-20260906.md for evidence and ownership. Assumption: portable user-local GNU tooling can verify Windows without system installation; being tested, not yet established.
+
+## Current source6 integration — 2026-09-06
+
+Verified facts: portable user-local GNU/LLVM Windows build and native app work without a system toolchain installation; checkpoint2b2d2bc has869passing workspace tests, strict Clippy and clean builds. Exact-source native ordered review and independent timed multi-file recovery oracles pass. The side-branch audit establishes current integrated ancestry. These results do not validate later uncommitted source6 work.
+
+Given facts: user installed WSL and permits an isolated Linux distro. WSL import currently fails because its VM service is unavailable with a pending Windows reboot. User restart reply is pending; Linux application acceptance remains required.
+
+Current design: participant CommunicationMean, deliberately frozen old1–5 admission and source6 additions; saved view category/context/coverage/edge/label selectors; explicit both-layer Traceability exception; exact atomic multi-row semantic review and recoverable raw drafts. Decisions and rationale are in DECISIONS.md. Existing source changes are undergoing integration, not claimed as accepted features.
+
+Open questions/evaluators: dense forty-exchange readability and access to every actual relation; remaining child/incident/artifact review ergonomics; complete source/REST/OpenAPI parity; source6 native lifecycle at minimum/default sizes; optimized/MSRV/Windows/Linux end-state acceptance. Presentation duplication is a bounded next step using existing CreateDiagram, preserving semantic identities. Current strategy is compile/test decisive cases before expanding UI work, then real native evaluation and independent review.