Sync agent instructions from main

.gitattributes

@@ -31,8 +31,50 @@ crates/oa-desktop/src/recovery/fixtures/*.json -text
 harness/fixtures/source7-native/** -text
 harness/fixtures/basic-editing/** -text
 harness/behavior-creation-contract.rs -text whitespace=cr-at-eol
+harness/experiments/source-cli-independent-20260911/** -text whitespace=cr-at-eol
+harness/experiments/authoring-prerelease-20260911/** -text whitespace=cr-at-eol
+harness/experiments/cli-packaging-20260911/** -text whitespace=cr-at-eol
+harness/experiments/cli-prerelease-20260911/** -text whitespace=cr-at-eol
+harness/experiments/contextual-source-20260911/** -text whitespace=cr-at-eol
+harness/experiments/contextual-source-native-20260911/** -text whitespace=cr-at-eol
+harness/experiments/contextual-source-reopen-20260911/** -text whitespace=cr-at-eol
+harness/experiments/contextual-source-native-20260911/**/*.arcadia whitespace=-blank-at-eol,-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-layout-reboot-20260911/** -text whitespace=cr-at-eol
+harness/experiments/contextual-source-layout-reboot-20260911/run-gates2.ps1 whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-20260911/**/*.log whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/scenario-native-local-20260911/** -text whitespace=cr-at-eol
+harness/experiments/scenario-native-local-20260911/**/*.log whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/scenario-native-local-20260911/**/*.arcadia whitespace=-blank-at-eol,cr-at-eol
+harness/fixtures/staged-source-authoring/** -text whitespace=cr-at-eol
+harness/staged-source-authoring-contract.rs -text whitespace=cr-at-eol
 
 # Preserve checksum-bound font notices verbatim through Git round trips.
+harness/experiments/wsl-capacity-20260911/** -text whitespace=cr-at-eol
+harness/experiments/wsl-postboot-9e8r6t-20260911/** -text whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-layout-postboot-20260911/** -text whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-layout-verified-20260911/** -text whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-layout-full-20260911/** -text whitespace=-blank-at-eof,cr-at-eol
 scripts/windows-notices/GNOME-Cantarell-61362600e104-COPYING -text
 scripts/windows-notices/Fira-OFL.txt -text
 scripts/windows-notices/FiraSans-Regular-NOTICE.txt -text
+harness/experiments/contextual-source-recovery-20260911/** -text whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-machine-v2-20260911/** -text whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-lifeline-v2-20260911/** -text whitespace=-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-lifeline-v2-20260911/**/*.arcadia whitespace=-blank-at-eol,-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-machine-v2-20260911/**/*.arcadia whitespace=-blank-at-eol,-blank-at-eof,cr-at-eol
+harness/experiments/contextual-source-reopen-20260911/launch-method.ps1 whitespace=-blank-at-eof,cr-at-eol
+# Raw compact.exe output includes CR-CR-LF and incidental trailing spaces.
+harness/experiments/wsl-capacity-20260911/*.log -whitespace
+
+# Preserve exact frozen GUI5657 contextual milestone input bytes.
+crates/oa-desktop/src/behavior/creation.rs -text
+crates/oa-desktop/src/behavior/scenario/workspace.rs -text
+crates/oa-desktop/src/behavior/topology/contextual.rs -text
+crates/oa-desktop/src/guide.rs -text
+crates/oa-desktop/src/semantic_review/artifacts_view.rs -text
+crates/oa-desktop/src/semantic_review/attachments_view.rs -text
+crates/oa-desktop/src/semantic_review/keyed_rows.rs -text
+crates/oa-desktop/src/semantic_review/keyed_tests.rs -text
+crates/oa-desktop/src/semantic_review/keyed.rs -text
+crates/oa-desktop/src/semantic_review/ordered.rs -text
+docs/openapi.json -text

AGENTS.md

@@ -1,13 +1,73 @@
-## Cooperation through Gitea MCP
+# Agent working agreement
 
-Use Gitea MCP to coordinate with other agents working on this project.
+## Working method
 
-- Before starting or resuming work, read relevant issues, comments, pull requests, and project Wiki pages to understand current progress and decisions.
+- Follow `PROJECT_GOAL.md` and the user's current instructions. Work autonomously within scope. Resolve discoverable questions yourself; record, test, and revise reversible assumptions. Ask only when a consequential decision needs information or authorization not already available. Continue independent useful work while blocked elsewhere.
-- Use issues and comments to communicate plans, identify who is handling work, ask questions, report blockers, and leave handoffs. Check existing work before creating duplicates.
+- Map unfamiliar domains through primary sources, comparable systems, and real user workflows. Identify underlying needs, valuable concepts, and avoidable friction; evaluate improvements rather than merely reproducing features. Synthesize findings into decisions or experiments, and stop research when another action offers greater value.
-- Identify yourself consistently in messages. Do not assume another agent has read a message or is currently running.
+- Make specifications precise enough for compatible independent implementations: definitions, relationships, invariants, valid/invalid examples, and lifecycle or transformation rules where relevant. Trace important requirements and decisions to implementation and verification. Resolve specification ambiguity at its source when implementation exposes it.
-- Respect work already in progress. Coordinate overlapping changes and preserve other agents' edits.
+- For consequential uncertain choices, compare materially different candidates against explicit user-derived criteria. Ask independent critics to challenge assumptions and attempt to falsify proposals; refine or replace candidates as evidence warrants. Record the choice, evidence, tradeoffs, rejected approaches, and reasons to revisit it. Use proportionate effort for reversible local choices.
-- Create and update the common project Wiki with shared knowledge, architecture, setup instructions, and decisions that will help future work. Keep it accurate as the project changes.
+- Plan milestones that resolve uncertainty or deliver useful capability, with explicit dependencies. Test foundational assumptions before substantial downstream work. At checkpoints, assess progress toward the actual objective and replan when evidence invalidates the strategy or progress stalls.
-- Record meaningful progress and results in Gitea so another agent can continue without access to your conversation. Include relevant commits, validation results, and next steps.
+- Define observable success and suitable evaluators before repeated improvement: invariants, examples, round trips, transformations, performance checks, realistic user tasks, or explicit review rubrics. Ensure the evaluator measures the intended outcome. For experiments, record the question, expectations, method, result, and implications; isolate exploratory prototypes from production architecture.
-- Keep coordination concise and useful. Use the available MCP tools, and report access failures honestly.
+- Build and run meaningful changes, exercise actual behavior, and inspect useful logs. Investigate crashes, serious warnings, corrupted state, and interaction defects. For GUI work, use Computer Use or equivalent tools to inspect realistic workflows, cognitive load, editing/selection, navigation, feedback, recovery, loading/empty/failure states, accessibility, layout, focus/disabled states, and responsiveness.
+- Match independent reviews to the artifact and risks. For languages or formats, include ambiguity, round trips, human/AI editability, and version-control behavior where relevant. Verify findings, fix the appropriate conceptual, specification, architectural, implementation, or interaction layer, and recheck affected dependents. Reuse valid evidence; repeat checks for concrete risks, changes, findings, or required gates. Compilation, screenshots, and worker reports alone do not establish correctness or usability.
+- Favor the simplest maintainable design satisfying known requirements and justified extensibility. Avoid speculative abstraction, unrelated refactoring, and repeating approaches already invalidated by evidence.
 
-Work autonomously within the user's requested scope and follow the project's existing conventions.
+## User input
+
+All content between `BEGIN USER-OWNED APPLICATION SPECIFICATION` and `END USER-OWNED APPLICATION SPECIFICATION` in `PROJECT_GOAL.md` belongs to the user. Its headings and structure are unrestricted. Preserve it exactly unless the user explicitly requests an edit; cleanup and task completion are not permission to rewrite it.
+
+Derive specifications, plans, and acceptance checks elsewhere, linking to their source. Distinguish user requirements, verified facts, assumptions, open questions, candidate approaches, and accepted decisions. Interpretations must not silently replace the user's intent. When input changes, reconcile affected work. Check current evidence before reopening a reported problem merely because its original description remains in the input.
+
+## Shared records
+
+Keep one authoritative home for each kind of information. Use links and brief scoped summaries elsewhere; update only what materially changed. Local planning tools and scratch notes need no routine synchronization.
+
+| Information | Authoritative home |
+| --- | --- |
+| Live plans, priorities, dependencies, ownership, status, blockers, and handoffs | Gitea issues/milestones; linked PRs hold change review and validation. |
+| Specifications, architecture, interfaces, and build/run documentation | Established version-controlled project documents. |
+| Durable decisions and reusable evidence | `harness/DECISIONS.md` and relevant topic notes, or existing equivalents. |
+| Navigation and integrated-state checkpoint | `harness/STATE.md`: links, verified code commit/release, capabilities, and material limitations. No live task ledger. |
+| Shared entrypoint | Gitea Wiki: overview and links, without duplicating versioned documentation. |
+| Published deliverables | Gitea releases, tied to source commits and verification. |
+
+Use Gitea for live coordination and the relevant code version for implementation facts. Required behavior comes from the user and supporting specifications; observed behavior and issue closure do not redefine requirements.
+
+## Coordination and integration
+
+All independent agents coordinating through Gitea run on completely separate machines, each with its own clone, filesystem, tools, processes, and runtime. Gitea and pushed Git history are the shared communication and delivery channels. Local files (including `harness`), unpushed commits, worktrees, test results, and localhost services are not accessible to peers. Matching branch names or paths do not imply synchronized contents.
+
+1. On starting or resuming, including after compaction, inspect the working branch, local changes, applicable instructions, relevant shared records, and existing implementation. Recover context from authoritative records. Check for newer shared instructions on the actual remote default branch without overwriting local work. Read what is relevant; avoid repeated full-history scans and constant polling.
+2. Search before creating tasks. Claim a meaningful outcome in its Gitea issue with a stable session identity, scope, remote repository/branch, and acceptance criteria. Keep small steps within that task. Recheck after claiming; comments are not atomic locks. Respect existing ownership and resolve overlapping claims before overlapping work.
+3. Independent sessions are peers. Each owns its contribution and delegated work on its own machine. Record one integration/release owner when a milestone needs shared coordination. Use distinct remote work branches, partition files/interfaces, and coordinate changes to shared specifications and documents. Worktrees provide local isolation only; they do not share work between machines.
+4. At meaningful checkpoints or handoffs, record changed results, commit/PR links, verification commands and environment, blockers, and next actions. Identify the tested code version and label uncommitted or unpublished work as local-only. Before asking peers to consume results, push the required code and versioned documentation, including relevant `harness` updates; publish other required artifacts in Gitea and link them. Use repository-relative paths with commit references, reproducible commands, and necessary environment details; local paths and localhost URLs alone are not handoffs. Do not assume another agent is running or has read a message; silence alone does not establish abandonment. Record evidence and preserve existing work when reassigning a task.
+5. Follow project review and merge conventions. Fetch the relevant remote branches and inspect the identified commits before reviewing or integrating another machine's work. Resolve conflicts while preserving others' edits, and verify the combined result locally; report material environment differences. Local instruction-file edits reach peers only after publication and retrieval. Do not overwrite others' work or force-push shared history to resolve coordination problems.
+6. Close work when its acceptance criteria are met and the result is integrated or delivered as appropriate. Mark duplicates and superseded tasks explicitly with replacement links. Then choose further useful unowned work while the requested objective remains incomplete.
+
+Use Gitea MCP for shared coordination. If unavailable, report the failure, buffer necessary handoff information locally, and continue already-owned or clearly non-overlapping work. Reconcile with current Gitea state when access returns; do not claim an ownership update, review, or publication succeeded without confirmation.
+
+## Delegation and reasoning
+
+Use GPT-6 Astra exclusively. Gitea peers are independent remote sessions, not subagents controlled by this session. Spawned subagents use the execution environment actually provided by the agent tools; do not assume they share files, and publish their results before Gitea peers need them. Delegate bounded independent research, design, implementation, or review when it improves progress, judgment, or preserves the parent's context. Give subagents the relevant context, ownership boundaries, result format, and evidence requirements. Use fresh critics when practical. The parent owns synthesis and integration and normally consolidates results into Gitea. Choose concurrency according to useful independent work and available resources, including other sessions; there is no agent-count quota.
+
+Optimize reasoning effort for verified outcomes per cost, including review, retries, and repair:
+
+- Main agent: default to high for planning, synthesis, integration, and acceptance decisions; medium for dispatching a settled plan and routine coordination.
+- Subagents: default to medium for bounded implementation and targeted research; low for straightforward retrieval, mechanical edits, and running established checks; high for complex debugging, correctness review, adversarial analysis, or ambiguous design.
+- Use extra-high selectively for difficult foundational semantic, methodological, formal, or cross-domain decisions. Reserve max for exceptional unresolved problems where additional reasoning is likely to justify its cost. Retain higher settings when evidence supports their value.
+
+Allocate by task difficulty and consequences, not role or length alone. Start higher when a clearly difficult decision has expensive downstream consequences. Escalate for concrete reasoning difficulties; resolve missing evidence or unclear requirements at their source. Set subagent effort explicitly through supported controls to avoid unintended inheritance. Do not claim an unapplied change or alter global configuration merely to enforce these preferences.
+
+## Memory and maintenance
+
+Preserve concise records of decisions and rationale, useful experiments, failed approaches, validation evidence, and remaining work. Link substantial evidence rather than copying logs into indexes. Update the integrated checkpoint after meaningful integration; mark branch-specific evidence as such.
+
+Consolidate duplicates, repair stale guidance, and remove obsolete temporary files alongside useful project work. Before removing material, check references, active ownership, and ongoing use; preserve unique knowledge and update affected links. Prefer closing, superseding, or archiving history over deletion. User input is excluded from autonomous cleanup.
+
+If legacy local task ledgers or plans duplicate Gitea, migrate their live content once into existing or appropriately scoped issues, preserve useful decisions/evidence, and mark the old records superseded. Record the migration so later sessions do not repeat it. Do not create empty documents or maintain records for ceremony.
+
+## Delivery
+
+Publish versioned Gitea releases at meaningful working milestones; mark unfinished versions as prereleases. Check existing releases/tags and coordinate one owner and version before publishing. Build from an identified integrated commit and verify the packaged result and launch steps.
+
+Include runnable builds or appropriate artifacts, concise release notes, build/run/deployment instructions as applicable, known limitations, tested platforms, and verification evidence. Confirm publication and artifact availability. Use existing authorized API access or project tooling when MCP lacks a needed release/upload operation. Do not silently replace published versions with different contents.

Cargo.lock

@@ -2139,6 +2139,15 @@ dependencies = [
  "syn 2.0.119",
 ]
 
+[[package]]
+name = "oa-cli"
+version = "0.2.0"
+dependencies = [
+ "oa-core",
+ "serde",
+ "serde_json",
+]
+
 [[package]]
 name = "oa-core"
 version = "0.2.0"

Cargo.toml

@@ -1,5 +1,5 @@
 [workspace]
-members = ["crates/oa-core", "crates/oa-desktop", "crates/oa-server"]
+members = ["crates/oa-core", "crates/oa-desktop", "crates/oa-server", "crates/oa-cli"]
 resolver = "2"
 
 [workspace.package]

PROJECT_GOAL.md

@@ -1,612 +1,45 @@
-You are the principal investigator, chief systems engineer, product architect, and engineering orchestrator responsible for taking this project from its current state to a coherent, validated, working release.
+# Project goal
 
-Your responsibility is not merely to write software. Your responsibility is to solve the underlying problem end-to-end.
+## Objective
 
-The project may involve research, domain understanding, methodology design, semantics, formal specification, product design, UX, architecture, experimentation, implementation, testing, documentation, and integration. Treat all of these as first-class work when they contribute to the objective.
+Take the existing project to the complete, coherent, usable, and verified outcome defined by the user input below. Solve the underlying problem end-to-end, preserving useful work already completed.
 
-Software is one means of realizing and testing the solution, not automatically the primary unit of progress.
+Treat domain understanding, research, methodology, semantics, specification, product design, UX, architecture, experimentation, implementation, and validation as first-class work. Choose what most advances the objective rather than following a predetermined development sequence.
 
-## Primary objective
+Follow `AGENTS.md` for execution, coordination, record ownership, and delivery. Continue until the completion criteria are met; plans, prototypes, successful builds, and individual milestones are intermediate results. Do not silently weaken requirements or completion standards to finish sooner.
-
-Deliver the product described by the repository, specification, requirements, references, current implementation, and my instructions.
-
-Persist until the intended outcome is genuinely achieved.
-
-Do not stop at:
-
-- research,
-- planning,
-- a plausible conceptual design,
-- scaffolding,
-- a compiling implementation,
-- a happy-path prototype,
-- or an apparently polished UI.
-
-The final result must be conceptually coherent, technically sound, usable, implemented, and verified end-to-end.
-
-Bias toward action and completion.
-
-Resolve discoverable questions yourself through:
-
-- repository exploration,
-- web and literature research,
-- primary documentation,
-- inspection of comparable products,
-- experiments and prototypes,
-- implementation,
-- runtime observation,
-- Computer Use,
-- automated evaluation,
-- and independent agent review.
-
-Ask me only when a consequential decision depends on information that cannot reasonably be discovered, inferred, experimented with, or treated as a reversible assumption.
-
-If an unresolved question does not block independent work, continue working.
-
-For reversible choices, make a reasonable assumption, record it, test its consequences, and revise it if evidence contradicts it.
-
-## Operating model
-
-Use an adaptive orchestrator-worker workflow.
-
-Do not force the project through a predetermined software-development sequence.
-
-At any given time determine what type of work most reduces uncertainty or advances the final objective:
-
-- research,
-- problem decomposition,
-- requirements analysis,
-- domain modeling,
-- hypothesis generation,
-- alternative design exploration,
-- formalization,
-- UX investigation,
-- experimentation,
-- prototyping,
-- architecture,
-- implementation,
-- testing,
-- runtime observation,
-- or review.
-
-Choose the next action based on the state of the whole project rather than simply taking the next coding task.
-
-## Task Ledger
-
-Maintain a concise durable Task Ledger in `harness/TASK_LEDGER.md`, unless an equivalent artifact already exists.
-
-It should distinguish:
-
-### Goal and success criteria
-
-What outcome must ultimately exist.
-
-### Verified facts
-
-Facts established from authoritative sources, repository evidence, experiments, or direct observation.
-
-### Given facts
-
-Requirements or constraints explicitly supplied by me.
-
-### Assumptions
-
-Things currently treated as true but not yet verified.
-
-### Open questions
-
-Important unknowns.
-
-### Candidate hypotheses / designs
-
-Competing explanations or approaches that remain plausible.
-
-### Decisions
-
-Choices that have been made, together with their rationale and supporting evidence.
-
-### Current strategy
-
-The current high-level route toward the goal.
-
-Do not silently convert an assumption into a fact.
-
-Do not silently convert the first plausible idea into a decision.
-
-Update the Task Ledger when important knowledge changes.
-
-## Progress Ledger
-
-Maintain `harness/STATE.md` as the Progress Ledger.
-
-At meaningful checkpoints record:
-
-- current objective,
-- completed work,
-- evidence obtained,
-- unresolved issues,
-- active experiments or implementations,
-- what remains,
-- whether meaningful progress is being made,
-- and the highest-value next actions.
-
-Periodically ask:
-
-1. Are we measurably closer to the actual end goal?
-2. Are we solving the right problem?
-3. Are we repeating an approach that is not working?
-4. Has new evidence invalidated part of the plan?
-5. Are important unknowns being hidden underneath implementation work?
-6. Would research, experimentation, redesign, or implementation produce the highest information gain now?
-
-If progress has stalled or the plan rests on invalid assumptions, replan instead of repeatedly patching the current approach.
-
-## Durable decisions and evidence
-
-Maintain `harness/DECISIONS.md` for important long-lived decisions.
-
-For consequential decisions capture:
-
-- the problem,
-- viable alternatives,
-- relevant evidence,
-- important tradeoffs,
-- selected approach,
-- why it was selected,
-- and what evidence would justify revisiting it.
-
-Maintain research / evidence notes when substantial external investigation is performed. Prefer primary and authoritative sources.
-
-Do not create documentation merely for ceremony. These artifacts exist to preserve reasoning across long runs and fresh agent contexts.
-
-## Multi-agent orchestration
-
-Explicitly delegate work whenever independent parallel effort can reduce elapsed time, increase breadth, produce independent criticism, or protect the root agent's context.
-
-Normally use approximately 3–5 concurrent subagents for substantial parallel work.
-
-Do not spawn agents merely to satisfy a role list.
-
-Create roles dynamically according to the problem.
-
-Possible roles include:
-
-- domain researcher,
-- literature / standards researcher,
-- comparable-product investigator,
-- user-workflow analyst,
-- requirements analyst,
-- systems / semantics architect,
-- formalization or language-design specialist,
-- UX / interaction designer,
-- alternative-solution generator,
-- adversarial critic,
-- experimental investigator,
-- software architect,
-- implementation worker,
-- runtime / Computer Use evaluator,
-- correctness reviewer,
-- integration reviewer.
-
-Give every subagent:
-
-- one bounded question or responsibility,
-- relevant context,
-- clear boundaries,
-- evidence expectations,
-- and an explicit output format.
-
-Independent agents should explore genuinely different questions or approaches rather than duplicating one another.
-
-Use fresh agents for independent criticism when practical.
-
-Do not let several agents concurrently edit the same files. Partition implementation ownership or use isolated worktrees.
-
-The root orchestrator owns synthesis, decisions, integration, and final responsibility.
-
-## Research loop: start broad, then narrow
-
-For important areas where the solution is not yet known:
-
-1. Map the problem space before committing to a solution.
-2. Delegate independent research tracks in parallel.
-3. Prefer authoritative and primary sources.
-4. Study relevant existing systems, standards, methods, research, and user experience.
-5. Separate observations from interpretations.
-6. Synthesize findings and identify contradictions, gaps, and unanswered questions.
-7. Decide whether another focused research wave is justified.
-8. Stop researching when additional information has low expected value relative to designing or testing a solution.
-
-Research should lead to decisions, hypotheses, requirements, experiments, or implementation—not accumulate indefinitely.
-
-## Candidate-generation and idea-tournament loop
-
-For consequential, uncertain, difficult-to-reverse design problems, do not accept the first reasonable solution.
-
-Use an idea-tournament process.
-
-### Generate
-
-Produce several materially different candidate solutions or hypotheses.
-
-Aim for diversity rather than cosmetic variations of one idea.
-
-### Explore
-
-Where useful, assign independent agents to develop promising candidates in greater depth.
-
-### Reflect
-
-Have independent critics examine candidates for:
-
-- correctness,
-- hidden assumptions,
-- internal consistency,
-- usability,
-- conceptual simplicity,
-- extensibility,
-- failure modes,
-- edge cases,
-- compatibility with project goals,
-- and evidence.
-
-Critics should actively attempt to falsify proposals rather than merely improve them.
-
-### Rank
-
-Compare candidates against explicit criteria derived from the actual project goals.
-
-Prefer pairwise comparison or an explicit decision matrix when the decision is sufficiently important.
-
-Do not rank based on eloquence.
-
-### Evolve
-
-Improve the strongest candidates.
-
-Combine complementary ideas when a hybrid is genuinely better.
-
-Introduce a new candidate if criticism reveals that the existing candidate set shares the same flawed assumption.
-
-### Decide
-
-Select an approach only when enough evidence exists to justify convergence.
-
-Record the decision and why alternatives lost.
-
-Do not run a heavyweight idea tournament for trivial, local, or easily reversible decisions.
-
-## Experiment-first behavior
-
-When an important assumption can be tested cheaply, test it instead of debating it indefinitely.
-
-Create focused experiments, prototypes, mockups, benchmarks, sample models, formal examples, interaction trials, or throwaway implementations to reduce uncertainty.
-
-An experiment should state:
-
-- question,
-- competing expectations,
-- method,
-- observable result,
-- conclusion,
-- and implications.
-
-Do not confuse a prototype used to answer a question with production architecture.
-
-Delete or isolate experimental code when it should not become part of the final product.
-
-## Evaluator-driven improvement
-
-Whenever practical, convert subjective progress into explicit evaluation.
-
-Before optimizing a solution, determine how quality can be measured.
-
-Possible evaluators include:
-
-- formal invariants,
-- consistency checks,
-- parsers / validators,
-- reference examples,
-- round-trip tests,
-- transformation tests,
-- compatibility tests,
-- usability scenarios,
-- task-completion tests,
-- latency / performance measurements,
-- automated tests,
-- visual comparison,
-- LLM judges with explicit rubrics,
-- and independent human-like review using Computer Use.
-
-For important artifacts define evaluation criteria before repeatedly modifying them.
-
-Generate or modify candidates, evaluate them, diagnose deficiencies, and retain improvements.
-
-Do not optimize against an evaluator that is a poor proxy for the real objective.
-
-## Requirements and specification
-
-Treat requirements and specifications as living engineering artifacts, not immutable text and not merely documentation written after implementation.
-
-When the project involves new semantics, methods, languages, protocols, information models, or user workflows, these are primary product artifacts.
-
-Make them precise enough that independent implementations could reach compatible behavior.
-
-Important concepts should have:
-
-- unambiguous definitions,
-- scope,
-- relationships,
-- invariants,
-- valid and invalid examples,
-- lifecycle / transformation rules where relevant,
-- edge cases,
-- and externally observable behavior.
-
-Maintain traceability from important requirements and semantic decisions to their realization and verification where practical.
-
-When implementation exposes ambiguity or contradiction in the specification, resolve the underlying specification problem rather than merely encoding arbitrary behavior.
-
-## Product and user-centered reasoning
-
-Continuously reason from the target user's actual work rather than from implementation convenience.
-
-Identify important user goals, workflows, decisions, information needs, failure modes, and repetitive tasks.
-
-When studying an existing product:
-
-Do not merely clone features.
-
-For each important capability determine:
-
-1. What underlying user need does it satisfy?
-2. What underlying domain concept does it represent?
-3. What is powerful about the existing solution?
-4. What causes friction or confusion?
-5. Which limitations are accidental implementation / history artifacts?
-6. What alternative interaction or semantic model could satisfy the need better?
-7. How can the improvement be evaluated?
-
-Preserve valuable domain knowledge without preserving legacy UX unnecessarily.
-
-## Planning
-
-Maintain a living execution plan in `harness/PLAN.md` unless an equivalent already exists.
-
-The plan may contain research, specification, experimentation, design, implementation, integration, and evaluation milestones.
-
-Prefer milestones that resolve important uncertainty or create observable useful capability.
-
-Do not structure the entire plan around software modules unless that genuinely matches the problem.
-
-Identify dependencies between conceptual decisions and implementation work.
-
-Do not implement large amounts of downstream functionality on top of uncertain foundational assumptions without first testing those assumptions.
-
-Revise the plan when evidence demands it.
-
-## Engineering execution
-
-When software implementation is the appropriate next action, act as a strong end-to-end engineering team.
-
-Prefer the simplest architecture that cleanly satisfies known requirements.
-
-Design for long-term maintainability and extensibility where those qualities are genuinely required, while avoiding speculative abstraction.
-
-Reuse appropriate existing conventions.
-
-Keep responsibilities and interfaces explicit.
-
-Fix root causes rather than accumulating workarounds.
-
-Avoid unrelated refactoring.
-
-Delete obsolete scaffolding and abandoned approaches.
-
-Treat warnings, crashes, serious runtime errors, corrupted state, and obvious interaction defects as evidence requiring investigation.
-
-For an implementation milestone:
-
-1. Define expected observable behavior.
-2. Inspect relevant architecture and constraints.
-3. Implement the smallest coherent solution.
-4. Build it.
-5. Run it.
-6. Exercise real behavior.
-7. Collect evidence.
-8. Diagnose failures.
-9. Fix root causes.
-10. Run proportionate automated verification.
-11. Perform real runtime / UI verification when user-facing behavior changed.
-12. Update durable state.
-13. Continue.
-
-Do not declare functionality complete from code inspection alone.
-
-## GUI and Computer Use
-
-For GUI applications, visual behavior and interaction quality are part of correctness.
-
-Use Computer Use and other available debugging capabilities against the actual running application.
-
-After meaningful UI changes:
-
-- launch the real application,
-- exercise realistic workflows,
-- enter representative data,
-- inspect resulting states,
-- resize or navigate where relevant,
-- capture and inspect visual results,
-- inspect logs / console / network information when useful,
-- identify problems,
-- fix them,
-- relaunch,
-- and verify the fix.
-
-Actively examine:
-
-- information hierarchy,
-- workflow discoverability,
-- cognitive load,
-- unnecessary mode switching,
-- consistency,
-- navigation,
-- interaction feedback,
-- selection behavior,
-- error recovery,
-- loading / empty / failure states,
-- accessibility,
-- clipping,
-- overlap,
-- alignment,
-- spacing,
-- typography,
-- sizing,
-- responsiveness,
-- focus states,
-- disabled states,
-- and unfinished-looking UI.
-
-Do not equate technical functionality with usability.
-
-## Independent review
-
-Use independent reviewers throughout the project, but select reviewers according to the artifact being evaluated.
-
-A conceptual or semantic design may need:
-
-- domain review,
-- consistency review,
-- adversarial / falsification review,
-- simplicity review,
-- and user-workflow review.
-
-A language may need:
-
-- ambiguity review,
-- grammar / round-trip review,
-- human-editability review,
-- AI-editability review,
-- and version-control review.
-
-An implementation may need:
-
-- correctness review,
-- architecture review,
-- requirements review,
-- runtime QA,
-- and UI / UX review.
-
-A final release should receive a cross-disciplinary review rather than only a code review.
-
-Require concrete findings and evidence.
-
-For material findings:
-
-1. verify the finding,
-2. determine whether the problem is conceptual, specification-level, architectural, implementation-level, or interaction-level,
-3. fix it at the correct layer,
-4. reevaluate affected downstream artifacts,
-5. verify again.
-
-## End-state evaluation
-
-Evaluate outcomes rather than demanding one predetermined path.
-
-At meaningful checkpoints ask whether the resulting state satisfies the actual objective.
-
-Before final completion, run a fresh independent end-state review covering at least:
-
-1. Requirements completeness.
-2. Domain / semantic coherence.
-3. Internal consistency and edge cases.
-4. Target-user workflows and usability.
-5. Architecture and long-term maintainability.
-6. Implementation correctness and regression risk.
-7. Actual runtime behavior.
-8. Documentation / specification adequacy.
-9. Remaining assumptions, unknowns, and risks.
-
-Resolve blocking and high-impact findings before declaring completion.
 
 ## Completion criteria
 
-Do not weaken completion criteria merely because substantial time or context has been consumed.
+Apply these criteria to the scope requested by the user:
 
-The project is complete only when all applicable conditions are satisfied:
+- Required capabilities address the intended problem and support realistic user workflows.
+- Important concepts, semantics, and interfaces are precise and consistent; specifications agree with implemented behavior.
+- Consequential decisions have evidence and rationale. Major assumptions have been validated, explicitly accepted, or isolated without compromising required behavior.
+- The result builds, runs, and operates on the required platforms. Relevant tests and evaluators pass; integrations, edge cases, and failure states have been exercised against the actual result.
+- User-facing behavior and usability have been exercised directly, using representative data and workflows.
+- A fresh independent review covers requirements, domain/semantic consistency, usability, architecture, correctness, regressions, runtime behavior, documentation, and remaining risks. Valid material findings are addressed, blocking and high-impact issues resolved, and affected behavior reverified; no known blocker or high-severity defect remains.
+- Deliverables are maintainable, appropriately extensible, documented, and published as required by `AGENTS.md`. Obsolete scaffolding is removed; documentation and shared state accurately describe the result. Another engineer or agent can reproduce the verification and continue the work.
 
-- The intended user problem is coherently addressed.
+If required work or verification is blocked, record the specific gap and continue independent useful work without claiming completion.
-- Important domain concepts and semantics are explicit and internally consistent.
-- Important design decisions are supported by evidence rather than accidental first choices.
-- Major unresolved assumptions have either been validated, explicitly accepted, or isolated.
-- Required specifications accurately describe implemented behavior.
-- Primary user workflows are implemented.
-- The application builds and launches reliably.
-- Real workflows have been exercised on the running application.
-- Important edge / failure / empty / loading states behave sensibly.
-- Relevant automated evaluators and tests pass.
-- UI/interaction quality has been inspected on the actual application.
-- No known blocker or high-severity defects remain.
-- Independent cross-disciplinary review has been completed.
-- Valid material findings have been addressed and reverified.
-- Architecture is understandable and appropriately extensible.
-- Temporary and obsolete scaffolding has been removed.
-- Durable project state reflects reality.
-- Another competent engineer or agent could understand, build, run, evaluate, and continue the project from the repository.
-
-If context becomes large, reload the durable ledgers and authoritative project artifacts rather than reconstructing history from conversational memory.
 
 ## Final handoff
 
-Only when the completion criteria are satisfied, provide a concise handoff covering:
+Link the delivered result and summarize capabilities, discoveries, architecture and decisions, relevant rejected approaches, verification and independent review, remaining limitations, and exact build/run/deployment/verification instructions. Refer to authoritative records instead of repeating the project history.
 
-- what now exists,
+## USER-OWNED APPLICATION SPECIFICATION
-- major discoveries,
-- important conceptual / semantic decisions,
-- important rejected alternatives,
-- architecture,
-- major implementation work,
-- experiments and evaluations performed,
-- real workflows exercised,
-- independent reviews performed,
-- remaining non-blocking limitations or uncertainties,
-- and exact build / run / verification instructions.
 
-Do not provide routine narration merely for the sake of narration.
+The block below accepts all project-specific requirements, context, priorities, and feedback, with any headings or organization the user chooses.
-
-Spend effort on solving, testing, evaluating, integrating, and improving the project.
-
-## Model and reasoning allocation
-
-The root orchestrator should use the highest available reasoning effort because its primary responsibility is high-leverage synthesis, planning, conceptual decisions, integration, and deciding what work should happen next.
-
-Do not automatically use maximum reasoning for every delegated task.
-
-Allocate reasoning effort according to the task:
-
-- Use maximum reasoning for foundational semantic, methodological, formalization, metamodel, language-design, cross-domain synthesis, and other consequential hard-to-reverse decisions.
-- Use extra-high reasoning for difficult architecture, UX / workflow design, alternative-solution evaluation, adversarial conceptual review, and unusually difficult implementation problems.
-- Use high reasoning for normal implementation, correctness review, targeted research, Computer Use evaluation, debugging, and complex but bounded analysis.
-- Use medium reasoning for code mapping, repository exploration, mechanical implementation, builds, routine tests, log inspection, and other well-defined work.
-- Use lower effort only for genuinely trivial mechanical tasks.
-
-Prefer spending additional reasoning on upstream decisions whose consequences propagate through many downstream artifacts.
-
-Do not spend maximum reasoning merely because a task is long. Distinguish computational volume from conceptual difficulty.
-
-When spawning a subagent, explicitly choose an appropriate reasoning effort when the interface permits it rather than blindly inheriting the root agent's effort.
-
-Use GPT-6 Astra model exclusively.
 
+<!-- BEGIN USER-OWNED APPLICATION SPECIFICATION -->
 ## Application specification
 
 ### General description
 
 Create a modern clone of ARCADIA Capella using Rust Iced framework. It should be cross platform (supporting Windows and Linux at least). Use Rust exclusively (wherever possible & practical).
 
-Focus on making the application modern, extensible, intuitive and easy to use. When writing code and making software architecture decisions focus on long term maintainability, extensibility while making the project friendly for active development
+Focus on making the application modern, extensible, intuitive and easy to use. When writing code and making software architecture decisions focus on long term maintainability, extensibility while making the project friendly for active development 
 
-Try to address all known problems / downsides of the original ARCADIA Capella software.
+Try to address all known problems / downsides of the original ARCADIA Capella software. 
 
 Version 1 MVP in the form of working Operational Analysis layer is done.
 Version 2 MVP in the form of working Operation Analysis + System Analysis is done.
@@ -619,33 +52,32 @@ Keep in mind that the target audience for the application are system engineers.
 
 The application should be a general systems modeling tool, like ARCADIA Capella or SysML v2
 
-You should implement most of the ARCADIA semantics, while adressing original ARCADIA Capella problems / downsides
+You should implement most of the ARCADIA semantics, while adressing original ARCADIA Capella problems / downsides 
 
 The original ARCADIA Capella UI is very bloated, clunky, unintuitive and hard to use. In addition, it lacks a number of quality of life features. You should at all cost avoid making the same mistakes as the developers of the original ARCADIA Capella
 
 You should explore the functionality & UI of the original ARCADIA Capella to take the most useful and powerful ideas from it. While making them modern, easy to use and understand
-Original ARCADIA Capella uses "nested" elements (visually nested) to signify various relationships, such as "Containment relationship" or "Deployment relationship". Instead of using visually noisy arrows / graph edges. I pretty much like this approach and want to see something similar to it in this application
+Original ARCADIA Capella uses "nested" elements (visually nested) to signify various relationships, such as "Containment relationship" or "Deployment relationship". Instead of using visually noisy arrows / graph edges. I pretty much like this approach and want to see something similar to it in this application 
 
 To explore the original ARCADIA Capella UI & semantics you may use web resources / web search / official and community docs. Or open the original ARCADIA Capella installed on this desktop machine for exploration
 
 Your second, parallel, goal is to create a textual representation for ARCADIA, similar to SysML v2. So a user can either edit a system model using UI (graphical representation) or text. Both graphical and textual representations should be fully equivalent and have full parity. You may take inspiration from SysML v2. Both graphical and textual representations should have one overarching, concrete, unambiguous spec in reST format, similar to SysML v2 strictness
-The application should support both forms of editing
+The application should support both forms of editing 
-The textual representation should be easily editable and understandble for both humans and AI
+The textual representation should be easily editable and understandble for both humans and AI 
-The textual representation should be easily handled by version control tools such as Git
+The textual representation should be easily handled by version control tools such as Git 
 The underlying semantics of the textual / graphical representation should support traceability of various development artifacts (for example - code, CAD files, electrical schematics, Docx files and anything in between)
 The textual representation editor should have syntax highlighting and linting
 
-The project should also have a backend server / service that you can deploy. The backend server purpose is to give programmatic access to stored system models. So, there also should be a clear REST API for querying, editing and working with models. The purpose of the REST API is to allow automation, scripting and AI-driven workflows
+The project should also have a backend server / service that you can deploy. The backend server purpose is to give programmatic access to stored system models. So, there also should be a clear REST API for querying, editing and working with models. The purpose of the REST API is to allow automation, scripting and AI-driven workflows 
-An example could be - writing custom plugins for various domain specific software (version control software, CAD software etc...) to establish traceability between development artifacts and a system model
+An example could be - writing custom plugins for various domain specific software (version control software, CAD software etc...) to establish traceability between development artifacts and a system model 
 
 The desktop application should contain built-in guide / help / tutorial with clear and concise info on modeling concepts, underlying semantics, common modeling scenarios and application features / how to use the app. It should be easy to navigate and explore
 
-@Computer
+@Computer 
 
 ### Semantic model / metamodel
 
 Requirements:
-
 - Textual notation.
 - Graphical notation.
 - Constraints and calculations.
@@ -658,7 +90,6 @@ Requirements:
 #### Textual notation
 
 Requirements:
-
 - Should not have visual noise and clutter.
 - Should have means to reduce cognitive load when developing system models.
 - Should be easily editable by humans. And AI agents.
@@ -672,8 +103,9 @@ Long, homogeneous lists in the UI that require user to scroll far or search for
 
 ## Active issues / current guidance
 
-Right now, the behavior & scenarios UI is hard to use. It contains static / uneditable diagrams, which is highly dubious. In addition, user workflow with the behavior & scenarios UI differ significantly from the other UIs - you can't edit diagrams and instead suppose to click on menus for model development
+Right now, the behavior & scenarios UI is hard to use. It contains static / uneditable diagrams, which is highly dubious. In addition, user workflow with the behavior & scenarios UI differ significantly from the other UIs - you can't edit diagrams and instead suppose to click on menus for model development 
 
----
+--- 
 
-The current project state is nowhere near the usability of the original ARCADIA Capella (despite its downfalls) or its functionality / semantics. You should focus on that by studying original ARCADIA Capella very closely and implementing its features in a modern, ergonomic and easy to use way
+The current project state is nowhere near the usability of the original ARCADIA Capella (despite its downfalls) or its functionality / semantics. You should focus on that by studying original ARCADIA Capella very closely and implementing its features in a modern, ergonomic and easy to use way
+<!-- END USER-OWNED APPLICATION SPECIFICATION -->

README.md

@@ -18,7 +18,7 @@ From the repository root:
 cargo run --locked -p oa-desktop --bin arcadia-studio
 ```
 
-Build both desktop and server release executables:
+Build the desktop, server and source CLI release executables:
 
 ```sh
 cargo build --release --workspace --locked
@@ -51,6 +51,21 @@ The earlier V2 package record describes `dist/ArcadiaStudio-Windows.zip` and `di
 
 The current [Windows packaging instructions](docs/windows-packaging.md) stage both executables, verify their runtime DLL dependencies, and produce an archive with checksums and provenance. Native acceptance fixtures and independent expected results are retained in [the release fixture directory](harness/fixtures/release1-native/README.md).
 
+## Work with source files from the command line
+
+The `arcadia` CLI checks an explicit `.arcadia` entry file and its includes without
+starting the desktop or server:
+
+```sh
+cargo run --locked -p oa-cli --bin arcadia -- check examples/text-first/project.arcadia
+```
+
+`stabilize ROOT` previews the identities needed for persistent editing;
+`rename-alias ROOT OLD NEW` previews an alias change and its references. Add
+`--write` to save that invocation's candidate, or `--json` for structured
+diagnostics and changed-file text/diffs. Preview leaves files untouched.
+See [source CLI commands](docs/source-cli.md) for examples and exit codes.
+
 ## Model operational needs and system responsibilities
 
 The desktop starts at **Home**, where you can create a model, open a local project, continue recent files or recover retained work. Missing recent files stay visible with **Locate**; **Remove** only forgets their history entry. Choose **Explore rescue example** for a model combining people, an organization, a System of Interest, information and physical exchange items, normal/degraded behavior and code/CAD evidence.

crates/oa-cli/Cargo.toml

@@ -0,0 +1,15 @@
+[package]
+name = "oa-cli"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+rust-version.workspace = true
+
+[[bin]]
+name = "arcadia"
+path = "src/main.rs"
+
+[dependencies]
+oa-core = { path = "../oa-core" }
+serde.workspace = true
+serde_json.workspace = true

crates/oa-cli/src/lib.rs

@@ -0,0 +1,451 @@
+//! Source-only authoring. Preparation captures bytes; only core owns disk writes.
+use oa_core::{
+    Command, language,
+    persistence::MigrationReport,
+    prepare_command,
+    source_files::{self, DiskProject, SourceFileError},
+    source_project::{self, CompiledSourceProject, ProjectLimits, SourceDiagnostic},
+    validation::Severity,
+};
+use serde::Serialize;
+use std::path::{Path, PathBuf};
+
+pub const LIMITS: ProjectLimits = ProjectLimits {
+    max_files: 256,
+    max_include_depth: 32,
+    max_include_edges: 1024,
+    model: language::ParseLimits {
+        max_source_bytes: 64 * 1024 * 1024,
+        max_graph_objects: 100_000,
+        max_records: 250_000,
+        max_step_references: 500_000,
+    },
+};
+
+#[derive(Debug, Clone)]
+pub enum Operation {
+    Check,
+    Stabilize,
+    RenameAlias { old: String, new: String },
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct Location {
+    pub path: String,
+    /// Half-open UTF-8 byte offsets. Line/column are one-based Unicode scalars.
+    pub start: usize,
+    pub end: usize,
+    pub line: Option<usize>,
+    pub column: Option<usize>,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct Diagnostic {
+    pub severity: String,
+    pub code: String,
+    pub message: String,
+    pub coordinate_space: String,
+    pub location: Option<Location>,
+    pub related: Vec<Location>,
+    pub object_id: Option<String>,
+    pub field: Option<String>,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct Change {
+    pub path: String,
+    /// Exact captured and proposed UTF-8 text, including line endings.
+    pub before: String,
+    pub after: String,
+    pub diff: String,
+}
+
+#[derive(Debug, Clone, Serialize)]
+pub struct Report {
+    pub format_version: u32,
+    pub entry: String,
+    pub operation: String,
+    pub status: String,
+    pub exit_code: u8,
+    /// True only after a successful changed save. False on failure does not
+    /// promise rollback: consult the specific error/recovery outcome.
+    pub written: bool,
+    pub diagnostics: Vec<Diagnostic>,
+    pub changes: Vec<Change>,
+    pub identities_to_stabilize: usize,
+    pub migration: Option<MigrationReport>,
+    pub notes: Vec<String>,
+}
+
+impl Report {
+    pub fn failure(
+        entry: &Path,
+        operation: &str,
+        exit_code: u8,
+        code: &str,
+        message: String,
+    ) -> Self {
+        let mut report = Self::empty(entry, operation);
+        report.fail(exit_code, code, message);
+        report
+    }
+
+    fn empty(entry: &Path, operation: &str) -> Self {
+        Self {
+            format_version: 1,
+            entry: entry.to_string_lossy().into_owned(),
+            operation: operation.into(),
+            status: "checked".into(),
+            exit_code: 0,
+            written: false,
+            diagnostics: vec![],
+            changes: vec![],
+            identities_to_stabilize: 0,
+            migration: None,
+            notes: vec![],
+        }
+    }
+
+    fn fail(&mut self, exit_code: u8, code: &str, message: String) {
+        self.status = "rejected".into();
+        self.exit_code = exit_code;
+        self.diagnostics.push(Diagnostic {
+            severity: "error".into(),
+            code: code.into(),
+            message,
+            coordinate_space: "operation".into(),
+            location: None,
+            related: vec![],
+            object_id: None,
+            field: None,
+        });
+    }
+}
+
+fn located(issue: SourceDiagnostic, space: &str) -> Diagnostic {
+    let d = issue.diagnostic;
+    Diagnostic {
+        severity: match d.severity {
+            Severity::Error => "error",
+            Severity::Warning => "warning",
+        }
+        .into(),
+        code: d.code,
+        message: d.message,
+        coordinate_space: space.into(),
+        location: Some(Location {
+            path: issue.path,
+            start: d.span.start,
+            end: d.span.end,
+            line: Some(d.line),
+            column: Some(d.column),
+        }),
+        related: issue
+            .related
+            .into_iter()
+            .map(|at| Location {
+                path: at.path,
+                start: at.span.start,
+                end: at.span.end,
+                line: None,
+                column: None,
+            })
+            .collect(),
+        object_id: d.object_id.map(|id| id.to_string()),
+        field: d.field,
+    }
+}
+
+fn disk_error(report: &mut Report, error: SourceFileError) {
+    let code = match &error {
+        SourceFileError::Conflict(_) => "external_change",
+        SourceFileError::RecoveryRequired(_) => "recovery_required",
+        SourceFileError::RecoveryFailed { .. } => "recovery_failed",
+        SourceFileError::Path(_) => "unsafe_path",
+        SourceFileError::Limit(_) => "source_limit",
+        SourceFileError::UnknownExpectation(_) => "unknown_disk_expectation",
+        SourceFileError::Invalid(_) => "invalid_save_candidate",
+        SourceFileError::Io { .. } => "io_error",
+    };
+    report.fail(3, code, error.to_string());
+}
+
+/// A candidate owns its original expectations and is consumed by saving.
+/// Callers cannot replace its source/model/expectations after preparation.
+pub struct Prepared {
+    report: Report,
+    snapshot: DiskProject,
+    compiled: CompiledSourceProject,
+    mutable: bool,
+}
+
+impl Prepared {
+    pub fn report(&self) -> &Report {
+        &self.report
+    }
+
+    pub fn into_report(self) -> Report {
+        self.report
+    }
+
+    pub fn write(mut self) -> Report {
+        if !self.mutable {
+            self.report
+                .fail(2, "usage", "check/lint does not accept --write".into());
+            return self.report;
+        }
+        match source_files::save_project(&self.snapshot, &self.compiled, LIMITS) {
+            Ok(_) => {
+                self.report.written = !self.report.changes.is_empty();
+                self.report.status = if self.report.written {
+                    "written"
+                } else {
+                    "unchanged"
+                }
+                .into();
+            }
+            Err(error) => disk_error(&mut self.report, error),
+        }
+        self.report
+    }
+}
+
+pub fn prepare(entry: &Path, operation: Operation) -> Result<Prepared, Box<Report>> {
+    let name = match operation {
+        Operation::Check => "check",
+        Operation::Stabilize => "stabilize",
+        Operation::RenameAlias { .. } => "rename-alias",
+    };
+    let mut report = Report::empty(entry, name);
+    let snapshot = source_files::load_project(entry, LIMITS).map_err(|error| {
+        disk_error(&mut report, error);
+        Box::new(report.clone())
+    })?;
+    let raw = snapshot.reachable_bundle();
+    // The loader may include warnings from stabilized compilation. Only its
+    // discovery/IO diagnostics are authoritative on the original bytes.
+    let mut diagnostics: Vec<_> = snapshot
+        .diagnostics
+        .iter()
+        .filter(|d| {
+            matches!(
+                d.diagnostic.code.as_str(),
+                "pending_save"
+                    | "source_encoding"
+                    | "source_limit"
+                    | "invalid_path"
+                    | "missing_include"
+                    | "project_limit"
+            )
+        })
+        .cloned()
+        .collect();
+    for diagnostic in source_project::lint_bundle(&raw, LIMITS) {
+        if !diagnostics.contains(&diagnostic) {
+            diagnostics.push(diagnostic);
+        }
+    }
+    let disk_refusal = snapshot.diagnostics.iter().any(|d| {
+        matches!(
+            d.diagnostic.code.as_str(),
+            "pending_save" | "missing_include" | "invalid_path"
+        )
+    });
+    let invalid = diagnostics
+        .iter()
+        .any(|d| d.diagnostic.severity == Severity::Error);
+    report.diagnostics = diagnostics
+        .into_iter()
+        .map(|d| located(d, "input"))
+        .collect();
+    if invalid {
+        // Do not run declaration analysis or any updater on invalid raw text.
+        // Failed lint may also have allocated provisional object identities.
+        for diagnostic in &mut report.diagnostics {
+            diagnostic.object_id = None;
+        }
+        report.status = "invalid".into();
+        report.exit_code = if disk_refusal { 3 } else { 1 };
+        return Err(Box::new(report));
+    }
+    let explicit_ids: std::collections::BTreeSet<_> = raw
+        .files
+        .values()
+        .flat_map(|text| language::analyze(text).declarations)
+        .filter_map(|d| d.id.map(|id| id.to_string()))
+        .collect();
+    for diagnostic in &mut report.diagnostics {
+        if diagnostic
+            .object_id
+            .as_ref()
+            .is_some_and(|id| !explicit_ids.contains(id))
+        {
+            diagnostic.object_id = None;
+        }
+    }
+    let mut compiled = source_project::compile_bundle(&raw, LIMITS).map_err(|diagnostics| {
+        report.status = "invalid".into();
+        report.exit_code = 1;
+        report
+            .diagnostics
+            .extend(diagnostics.into_iter().map(|d| located(d, "candidate")));
+        Box::new(report.clone())
+    })?;
+    report.identities_to_stabilize = raw
+        .files
+        .values()
+        .map(|text| {
+            language::analyze(text)
+                .declarations
+                .into_iter()
+                .filter(|d| d.id.is_none())
+                .count()
+        })
+        .sum();
+    report.migration = compiled.decoded.migration.clone();
+    let mutable = !matches!(operation, Operation::Check);
+    if let Operation::RenameAlias { old, new } = operation {
+        let project = &compiled.decoded.project;
+        let Some((id, _)) = project
+            .identities()
+            .into_iter()
+            .find(|(_, alias)| *alias == old)
+        else {
+            report.fail(
+                1,
+                "unknown_alias",
+                format!("No declaration has alias '{old}'."),
+            );
+            return Err(Box::new(report));
+        };
+        let command = prepare_command(project, &Command::SetAlias(id, new)).map_err(|error| {
+            report.fail(1, "semantic_command_rejected", error.to_string());
+            Box::new(report.clone())
+        })?;
+        compiled = source_project::update_bundle_with_identity_map(
+            &compiled,
+            &command.project,
+            &command.identity_map,
+            LIMITS,
+        )
+        .map_err(|diagnostics| {
+            report.status = "invalid".into();
+            report.exit_code = 1;
+            report
+                .diagnostics
+                .extend(diagnostics.into_iter().map(|d| located(d, "candidate")));
+            Box::new(report.clone())
+        })?;
+    }
+    if mutable {
+        for (path, after) in &compiled.bundle.files {
+            let before = raw.files.get(path).cloned().unwrap_or_default();
+            if &before != after {
+                report.changes.push(Change {
+                    path: path.clone(),
+                    diff: unified_diff(path, &before, after),
+                    before,
+                    after: after.clone(),
+                });
+            }
+        }
+        report.status = "preview".into();
+        report.notes.push("This invocation's complete proposed changed-file texts and diffs are reported. Without --write nothing is saved; a later invocation may allocate different missing UUIDs. This is not a saved plan or a digest of unchanged dependencies.".into());
+    }
+    report.notes.push("Diagnostic object IDs are omitted for declarations without authored IDs; lint's temporary identities are not the candidate's identities.".into());
+    report.notes.push("Disk writes use the core journal/conflict checks. This is not cross-process atomic visibility or a power-loss durability guarantee; pending saves are never implicitly recovered. A failed write may require explicit journal recovery.".into());
+    Ok(Prepared {
+        report,
+        snapshot,
+        compiled,
+        mutable,
+    })
+}
+
+/// One bounded hunk per file: common prefix/suffix plus three context lines.
+/// Linear in input size; no quadratic LCS allocation for large modules.
+fn unified_diff(path: &str, before: &str, after: &str) -> String {
+    let a: Vec<_> = before.split_inclusive('\n').collect();
+    let b: Vec<_> = after.split_inclusive('\n').collect();
+    let prefix = a.iter().zip(&b).take_while(|(a, b)| a == b).count();
+    let suffix = a[prefix..]
+        .iter()
+        .rev()
+        .zip(b[prefix..].iter().rev())
+        .take_while(|(a, b)| a == b)
+        .count();
+    let start = prefix.saturating_sub(3);
+    let a_end = (a.len() - suffix + 3).min(a.len());
+    let b_end = (b.len() - suffix + 3).min(b.len());
+    let a_start = if a_end == start { start } else { start + 1 };
+    let b_start = if b_end == start { start } else { start + 1 };
+    let mut out = format!(
+        "--- a/{path}\n+++ b/{path}\n@@ -{a_start},{} +{b_start},{} @@\n",
+        a_end - start,
+        b_end - start
+    );
+    let mut emit = |prefix: char, line: &str| {
+        out.push(prefix);
+        out.push_str(line);
+        if !line.ends_with('\n') {
+            out.push_str("\n\\ No newline at end of file\n");
+        }
+    };
+    for line in &a[start..prefix] {
+        emit(' ', line);
+    }
+    for line in &a[prefix..a.len() - suffix] {
+        emit('-', line);
+    }
+    for line in &b[prefix..b.len() - suffix] {
+        emit('+', line);
+    }
+    for line in &a[a.len() - suffix..a_end] {
+        emit(' ', line);
+    }
+    out
+}
+
+pub struct Arguments {
+    pub entry: PathBuf,
+    pub operation: Operation,
+    pub write: bool,
+    pub json: bool,
+}
+
+pub const HELP: &str = "arcadia check ROOT [--json]\narcadia lint ROOT [--json]\narcadia stabilize ROOT [--write] [--json]\narcadia rename-alias ROOT OLD NEW [--write] [--json]\n\nROOT is an explicit .arcadia entry file; includes resolve relative to it.\nMutation commands preview by default. --write applies this invocation's candidate.\nMissing UUIDs in a preview are provisional until written. No canonical formatting.\nExit: 0 valid/success (engineering warnings allowed), 1 invalid source or semantic\ncommand rejection, 2 usage, 3 disk/path/conflict/pending-journal/output failure.\nNo implicit journal recovery. Limits: 64 MiB, 256 files, include depth32/edges1024,\n100000 graph objects, 250000 records, 500000 ordered references.\n";
+
+pub fn arguments(args: &[std::ffi::OsString]) -> Result<Arguments, String> {
+    let mut positional = Vec::new();
+    let (mut write, mut json) = (false, false);
+    for arg in args {
+        if arg == "--write" && !write {
+            write = true;
+        } else if arg == "--json" && !json {
+            json = true;
+        } else if arg.to_string_lossy().starts_with('-') {
+            return Err(format!(
+                "Unknown or repeated option: {}",
+                arg.to_string_lossy()
+            ));
+        } else {
+            positional.push(arg);
+        }
+    }
+    let command = positional.first().and_then(|s| s.to_str()).unwrap_or("");
+    let operation = match (command, positional.len()) {
+        ("check" | "lint", 2) if !write => Operation::Check,
+        ("stabilize", 2) => Operation::Stabilize,
+        ("rename-alias", 4) => Operation::RenameAlias {
+            old: positional[2].to_str().ok_or("Alias must be UTF-8")?.into(),
+            new: positional[3].to_str().ok_or("Alias must be UTF-8")?.into(),
+        },
+        _ => return Err(HELP.into()),
+    };
+    Ok(Arguments {
+        entry: PathBuf::from(positional[1]),
+        operation,
+        write,
+        json,
+    })
+}

crates/oa-cli/src/main.rs

@@ -0,0 +1,102 @@
+use oa_cli::{Report, arguments, prepare};
+use std::{
+    io::{self, Write},
+    path::Path,
+    process::ExitCode,
+};
+
+fn human_report(report: &Report, show_diff: bool) -> io::Result<()> {
+    let mut err = io::stderr().lock();
+    for d in &report.diagnostics {
+        let at = d
+            .location
+            .as_ref()
+            .map(|l| {
+                format!(
+                    "{}:{}:{}",
+                    l.path,
+                    l.line.unwrap_or(0),
+                    l.column.unwrap_or(0)
+                )
+            })
+            .unwrap_or_else(|| report.entry.clone());
+        writeln!(
+            err,
+            "{at}: {}[{}] ({}): {}",
+            d.severity, d.code, d.coordinate_space, d.message
+        )?;
+    }
+    writeln!(
+        err,
+        "{}: {} file changes; {} identities to stabilize",
+        report.status,
+        report.changes.len(),
+        report.identities_to_stabilize
+    )?;
+    if let Some(migration) = &report.migration {
+        writeln!(
+            err,
+            "Source migration: schema {} → {} (separate from identity stabilization)",
+            migration.from_schema, migration.to_schema
+        )?;
+    }
+    for note in &report.notes {
+        writeln!(err, "{note}")?;
+    }
+    if show_diff {
+        let mut out = io::stdout().lock();
+        for change in &report.changes {
+            write!(out, "{}", change.diff)?;
+        }
+        out.flush()?;
+    }
+    err.flush()
+}
+
+fn run() -> io::Result<u8> {
+    let args: Vec<_> = std::env::args_os().skip(1).collect();
+    if args.len() == 1 && (args[0] == "--help" || args[0] == "-h") {
+        io::stdout().write_all(oa_cli::HELP.as_bytes())?;
+        return Ok(0);
+    }
+    if args.len() == 1 && args[0] == "--version" {
+        writeln!(io::stdout(), "arcadia {}", env!("CARGO_PKG_VERSION"))?;
+        return Ok(0);
+    }
+    let json = args.iter().any(|a| a == "--json");
+    let mut displayed = false;
+    let report = match arguments(&args) {
+        Err(error) => Report::failure(Path::new(""), "usage", 2, "usage", error),
+        Ok(args) => match prepare(&args.entry, args.operation) {
+            Err(report) => *report,
+            Ok(prepared) => {
+                if args.write {
+                    if !args.json {
+                        human_report(prepared.report(), true)?;
+                        displayed = true;
+                    }
+                    prepared.write()
+                } else {
+                    prepared.into_report()
+                }
+            }
+        },
+    };
+    if json {
+        serde_json::to_writer_pretty(io::stdout().lock(), &report)?;
+        writeln!(io::stdout())?;
+    } else {
+        human_report(&report, !displayed)?;
+    }
+    Ok(report.exit_code)
+}
+
+fn main() -> ExitCode {
+    match run() {
+        Ok(code) => ExitCode::from(code),
+        Err(error) => {
+            let _ = writeln!(io::stderr(), "Output failed: {error}");
+            ExitCode::from(3)
+        }
+    }
+}

crates/oa-cli/tests/source_cli.rs

@@ -0,0 +1,425 @@
+use oa_cli::{LIMITS, Operation, Prepared, prepare};
+use oa_core::{Id, Project, source_files, source_project};
+use serde_json::Value;
+use std::{
+    collections::BTreeMap,
+    fs,
+    path::{Path, PathBuf},
+    process::Command,
+};
+
+struct Fixture(PathBuf);
+impl Fixture {
+    fn new() -> Self {
+        let path = std::env::temp_dir().join(format!("arcadia-cli-test-{}", Id::new_v4()));
+        fs::create_dir(&path).unwrap();
+        Self(path)
+    }
+    fn put(&self, name: &str, text: &str) {
+        let path = self.0.join(name);
+        fs::create_dir_all(path.parent().unwrap()).unwrap();
+        fs::write(path, text).unwrap();
+    }
+    fn entry(&self) -> PathBuf {
+        self.0.join("project.arcadia")
+    }
+    fn read(&self, name: &str) -> String {
+        fs::read_to_string(self.0.join(name)).unwrap()
+    }
+    fn prepare(&self, op: Operation) -> Prepared {
+        prepare(&self.entry(), op).unwrap_or_else(|report| panic!("{report:#?}"))
+    }
+    fn model(&self) -> Project {
+        let disk = source_files::load_project(&self.entry(), LIMITS).unwrap();
+        source_project::compile_bundle(&disk.reachable_bundle(), LIMITS)
+            .unwrap()
+            .decoded
+            .project
+    }
+    fn cli(&self, args: &[&str]) -> (i32, Value) {
+        let mut command = Command::new(env!("CARGO_BIN_EXE_arcadia"));
+        command
+            .arg(args[0])
+            .arg(self.entry())
+            .args(&args[1..])
+            .arg("--json");
+        let output = command.output().unwrap();
+        assert!(
+            output.stderr.is_empty(),
+            "{}",
+            String::from_utf8_lossy(&output.stderr)
+        );
+        (
+            output.status.code().unwrap(),
+            serde_json::from_slice(&output.stdout).unwrap(),
+        )
+    }
+}
+impl Drop for Fixture {
+    fn drop(&mut self) {
+        let _ = fs::remove_dir_all(&self.0);
+    }
+}
+
+const SIMPLE: &str = "// 雨: authored defaults stay omitted\r\narcadia 7;\r\nproject rescue \"Rescue\" {\r\n    oa_entity team \"Team\" {}\r\n}\r\n";
+
+#[test]
+fn complete_alarm_example_preview_then_write_and_fixed_point() {
+    let fixture = Fixture::new();
+    let source = include_str!(
+        "../../../harness/experiments/textual-authoring-20260911/alarm-response.arcadia"
+    );
+    fixture.put("project.arcadia", source);
+    let (code, check) = fixture.cli(&["check"]);
+    assert_eq!(code, 0);
+    assert_eq!(check["diagnostics"], serde_json::json!([]));
+    let (code, preview) = fixture.cli(&["stabilize"]);
+    assert_eq!(code, 0);
+    assert_eq!(preview["identities_to_stabilize"], 40);
+    assert_eq!(preview["status"], "preview");
+    assert_eq!(fixture.read("project.arcadia"), source);
+    assert!(
+        preview["changes"][0]["diff"]
+            .as_str()
+            .unwrap()
+            .contains("+project alarm_response")
+    );
+    let (code, written) = fixture.cli(&["stabilize", "--write"]);
+    assert_eq!(code, 0);
+    let saved = fixture.read("project.arcadia");
+    assert_eq!(written["changes"][0]["after"], saved);
+    let project = fixture.model();
+    assert_eq!(project.identities().len(), 40);
+    let mut stripped = saved.clone();
+    for (id, _) in project.identities() {
+        stripped = stripped.replace(&format!(" id \"{id}\""), "");
+    }
+    assert_eq!(stripped, source, "only identity clauses may be inserted");
+    let (code, again) = fixture.cli(&["stabilize", "--write"]);
+    assert_eq!(code, 0);
+    assert_eq!(again["changes"], serde_json::json!([]));
+    assert_eq!(again["status"], "unchanged");
+    assert_eq!(fixture.model(), project);
+    assert_eq!(fixture.read("project.arcadia"), saved);
+}
+
+#[test]
+fn captured_candidate_exact_write_preserves_crlf_comments_and_noop_metadata() {
+    let fixture = Fixture::new();
+    fixture.put("project.arcadia", SIMPLE);
+    let candidate = fixture.prepare(Operation::Stabilize);
+    let expected = candidate.report().changes[0].after.clone();
+    assert_eq!(candidate.report().identities_to_stabilize, 2);
+    assert_eq!(fixture.read("project.arcadia"), SIMPLE);
+    assert_eq!(candidate.write().exit_code, 0);
+    assert_eq!(fixture.read("project.arcadia"), expected);
+    assert!(expected.contains("// 雨: authored defaults stay omitted\r\n"));
+    assert!(!expected.contains("description"));
+    let metadata = fs::metadata(fixture.entry()).unwrap().modified().unwrap();
+    let report = fixture.prepare(Operation::Stabilize).write();
+    assert_eq!(report.status, "unchanged");
+    assert!(!report.written);
+    assert_eq!(
+        fs::metadata(fixture.entry()).unwrap().modified().unwrap(),
+        metadata
+    );
+    assert_eq!(fs::read_dir(&fixture.0).unwrap().count(), 1);
+}
+
+#[test]
+fn alias_rename_across_modules_changes_only_live_tokens_and_retains_all_identity() {
+    let fixture = Fixture::new();
+    fixture.put("project.arcadia", "arcadia 7; project rescue \"Rescue\" { include \"participants.arcadia\"; include \"work.arcadia\"; }\n");
+    fixture.put(
+        "participants.arcadia",
+        "// @team is quoted documentation\noa_entity team \"Team @team\" {}\n",
+    );
+    fixture.put("work.arcadia", "oa_activity assess \"Assess\" {}\noa_activity report \"Report\" {}\nallocation assigned \"Assigned\" { source @team; target @assess; }\ninteraction transfer \"Transfer\" { source @assess; target @report; }\n");
+    assert_eq!(fixture.prepare(Operation::Stabilize).write().exit_code, 0);
+    let before = fixture.model();
+    let original: BTreeMap<_, _> = ["project.arcadia", "participants.arcadia", "work.arcadia"]
+        .into_iter()
+        .map(|p| (p, fixture.read(p)))
+        .collect();
+    let team = before
+        .identities()
+        .into_iter()
+        .find(|(_, alias)| *alias == "team")
+        .unwrap()
+        .0;
+    let candidate = fixture.prepare(Operation::RenameAlias {
+        old: "team".into(),
+        new: "rescue_team".into(),
+    });
+    assert_eq!(candidate.report().changes.len(), 2);
+    assert_eq!(fixture.model(), before, "preview cannot mutate");
+    assert_eq!(candidate.write().exit_code, 0);
+    let mut expected = before;
+    expected.elements.get_mut(&team).unwrap().alias = "rescue_team".into();
+    assert_eq!(fixture.model(), expected);
+    assert_eq!(fixture.read("project.arcadia"), original["project.arcadia"]);
+    assert_eq!(
+        fixture.read("participants.arcadia"),
+        original["participants.arcadia"].replacen("oa_entity team ", "oa_entity rescue_team ", 1)
+    );
+    assert_eq!(
+        fixture.read("work.arcadia"),
+        original["work.arcadia"].replace("source @team;", "source @rescue_team;")
+    );
+}
+
+#[test]
+fn invalid_unicode_raw_edit_is_located_and_never_stabilized_or_written() {
+    let fixture = Fixture::new();
+    let raw = "arcadia 7; project p \"雨\" {\n oa_activity a \"A\" {}\n allocation alloc \"Alloc\" { source @missing; target @a; }\n}\n";
+    fixture.put("project.arcadia", raw);
+    for command in [
+        vec!["check"],
+        vec!["stabilize", "--write"],
+        vec!["rename-alias", "a", "b", "--write"],
+    ] {
+        let (code, report) = fixture.cli(&command);
+        assert_eq!(code, 1);
+        assert_eq!(fixture.read("project.arcadia"), raw);
+        let diagnostics = report["diagnostics"].as_array().unwrap();
+        assert!(!diagnostics.is_empty());
+        for d in diagnostics {
+            assert_eq!(d["coordinate_space"], "input");
+            let at = &d["location"];
+            let start = at["start"].as_u64().unwrap() as usize;
+            assert!(raw.is_char_boundary(start));
+            assert_eq!(
+                at["line"].as_u64().unwrap() as usize,
+                raw[..start].bytes().filter(|b| *b == b'\n').count() + 1
+            );
+            let line = raw[..start]
+                .rsplit_once('\n')
+                .map_or(&raw[..start], |(_, tail)| tail);
+            assert_eq!(
+                at["column"].as_u64().unwrap() as usize,
+                line.chars().count() + 1
+            );
+        }
+    }
+}
+
+#[test]
+fn missing_id_warning_uses_raw_location_and_never_exposes_ephemeral_lint_id() {
+    let fixture = Fixture::new();
+    let raw = "arcadia 7;\nproject p \"雨\" {\n    oa_activity work \"Work\" {}\n}\n";
+    fixture.put("project.arcadia", raw);
+    let (code, result) = fixture.cli(&["lint"]);
+    assert_eq!(code, 0, "engineering warnings do not reject admission");
+    let warning = result["diagnostics"]
+        .as_array()
+        .unwrap()
+        .iter()
+        .find(|d| d["code"] == "work_without_behavior_context")
+        .unwrap();
+    assert_eq!(warning["severity"], "warning");
+    assert_eq!(
+        warning["location"]["start"],
+        raw.find("oa_activity").unwrap()
+    );
+    assert_eq!(warning["location"]["line"], 3);
+    assert_eq!(warning["location"]["column"], 5);
+    assert!(warning["object_id"].is_null());
+    assert_eq!(fixture.read("project.arcadia"), raw);
+}
+
+#[test]
+fn captured_dependency_change_refuses_all_writes_even_on_noop() {
+    let fixture = Fixture::new();
+    fixture.put("project.arcadia", SIMPLE);
+    let pending = fixture.prepare(Operation::Stabilize);
+    let external = format!("{SIMPLE}// editor changed this\n");
+    fixture.put("project.arcadia", &external);
+    let result = pending.write();
+    assert_eq!(result.exit_code, 3);
+    assert_eq!(result.diagnostics.last().unwrap().code, "external_change");
+    assert_eq!(fixture.read("project.arcadia"), external);
+    assert_eq!(fixture.prepare(Operation::Stabilize).write().exit_code, 0);
+    let noop = fixture.prepare(Operation::Stabilize);
+    assert!(noop.report().changes.is_empty());
+    let latest = format!("{}// another edit\n", fixture.read("project.arcadia"));
+    fixture.put("project.arcadia", &latest);
+    assert_eq!(noop.write().exit_code, 3);
+    assert_eq!(fixture.read("project.arcadia"), latest);
+}
+
+#[test]
+fn pending_journal_refuses_read_preview_and_write_without_recovery() {
+    let fixture = Fixture::new();
+    fixture.put("project.arcadia", SIMPLE);
+    assert_eq!(fixture.prepare(Operation::Stabilize).write().exit_code, 0);
+    let noop = fixture.prepare(Operation::Stabilize);
+    let source = fixture.read("project.arcadia");
+    // An opaque incomplete journal must never be interpreted/recovered by CLI.
+    let journal = fixture.0.join(".arcadia-save-project.arcadia.journal");
+    fs::create_dir(&journal).unwrap();
+    fs::write(journal.join("sentinel"), b"retain").unwrap();
+    for op in [Operation::Check, Operation::Stabilize] {
+        let report = prepare(&fixture.entry(), op).err().unwrap();
+        assert_eq!(report.exit_code, 3);
+        assert!(report.diagnostics.iter().any(|d| d.code == "pending_save"));
+    }
+    assert_eq!(
+        noop.write().exit_code,
+        3,
+        "saver must recheck after preview"
+    );
+    assert_eq!(fixture.read("project.arcadia"), source);
+    assert_eq!(fs::read(journal.join("sentinel")).unwrap(), b"retain");
+}
+
+#[test]
+fn rejected_alias_and_same_alias_preserve_source() {
+    let fixture = Fixture::new();
+    fixture.put("project.arcadia", SIMPLE);
+    assert_eq!(fixture.prepare(Operation::Stabilize).write().exit_code, 0);
+    let source = fixture.read("project.arcadia");
+    for (old, new) in [
+        ("team", "rescue"),
+        ("team", "invalid alias"),
+        ("absent", "valid"),
+    ] {
+        let (code, result) = fixture.cli(&["rename-alias", old, new, "--write"]);
+        assert_eq!(code, 1);
+        assert_eq!(result["status"], "rejected");
+        assert_eq!(fixture.read("project.arcadia"), source);
+    }
+    let (code, result) = fixture.cli(&["rename-alias", "team", "team", "--write"]);
+    assert_eq!(code, 0);
+    assert_eq!(result["status"], "unchanged");
+    assert_eq!(fixture.read("project.arcadia"), source);
+}
+
+#[test]
+fn rename_shows_missing_identity_and_separate_source_migration() {
+    let fixture = Fixture::new();
+    let old = "// retain\narcadia 5; project p \"P\" { oa_entity team \"Team\" {} }\n";
+    fixture.put("project.arcadia", old);
+    let candidate = fixture.prepare(Operation::RenameAlias {
+        old: "team".into(),
+        new: "crew".into(),
+    });
+    let report = candidate.report();
+    assert_eq!(report.identities_to_stabilize, 2);
+    assert_eq!(report.migration.as_ref().unwrap().from_schema, 5);
+    assert_eq!(report.migration.as_ref().unwrap().to_schema, 7);
+    assert!(report.changes[0].diff.contains("-arcadia 5;"));
+    assert!(report.changes[0].diff.contains("+arcadia 7;"));
+    assert!(report.changes[0].after.contains("oa_entity crew"));
+    assert_eq!(fixture.read("project.arcadia"), old);
+    assert_eq!(candidate.write().exit_code, 0);
+}
+
+#[test]
+fn entry_is_explicit_and_machine_readable_usage_errors_do_not_write() {
+    let fixture = Fixture::new();
+    fixture.put("project.arcadia", SIMPLE);
+    let output = Command::new(env!("CARGO_BIN_EXE_arcadia"))
+        .current_dir(&fixture.0)
+        .args(["check", "--json"])
+        .output()
+        .unwrap();
+    assert_eq!(output.status.code(), Some(2));
+    let error: Value = serde_json::from_slice(&output.stdout).unwrap();
+    assert_eq!(error["diagnostics"][0]["code"], "usage");
+    assert_eq!(fixture.read("project.arcadia"), SIMPLE);
+    let (code, _) = fixture.cli(&["check", "--write"]);
+    assert_eq!(code, 2);
+    assert!(Path::new(env!("CARGO_BIN_EXE_arcadia")).is_file());
+}
+
+#[test]
+fn loader_encoding_missing_dependency_and_invalid_old_source_keep_original_bytes() {
+    let fixture = Fixture::new();
+    let entry = "arcadia 7; project p \"P\" { include \"part.arcadia\"; }";
+    fixture.put("project.arcadia", entry);
+    let (code, report) = fixture.cli(&["stabilize", "--write"]);
+    assert_eq!(code, 3, "a disk dependency could not be read");
+    assert!(
+        report["diagnostics"]
+            .as_array()
+            .unwrap()
+            .iter()
+            .any(|d| d["code"] == "missing_include")
+    );
+    fs::write(fixture.0.join("part.arcadia"), [0xff, 0xfe]).unwrap();
+    let (code, report) = fixture.cli(&["stabilize", "--write"]);
+    assert_eq!(code, 1, "invalid encoding is invalid raw source");
+    assert!(
+        report["diagnostics"]
+            .as_array()
+            .unwrap()
+            .iter()
+            .any(|d| d["code"] == "source_encoding")
+    );
+    assert_eq!(fixture.read("project.arcadia"), entry);
+    assert_eq!(
+        fs::read(fixture.0.join("part.arcadia")).unwrap(),
+        [0xff, 0xfe]
+    );
+    for raw in [
+        "arcadia 5; project p \"P\" { oa_entity a \"A\" { ??? } }",
+        "arcadia 2; project p \"P\" {}",
+    ] {
+        fixture.put("project.arcadia", raw);
+        let (code, _) = fixture.cli(&["stabilize", "--write"]);
+        assert_eq!(code, 1);
+        assert_eq!(fixture.read("project.arcadia"), raw);
+    }
+}
+
+#[test]
+fn non_element_alias_detached_file_and_unchanged_dependency_conflict() {
+    let fixture = Fixture::new();
+    fixture.put("project.arcadia", "arcadia 7; project p \"P\" { include \"part.arcadia\"; oa_activity a \"A\" {} allocation responsible \"Responsible\" { source @ // keep edge comment\nteam; target @a; } }");
+    fixture.put("part.arcadia", "oa_entity team \"Team\" {}");
+    fixture.put(
+        "detached.arcadia",
+        "invalid detached draft must stay exact 雨",
+    );
+    assert_eq!(fixture.prepare(Operation::Stabilize).write().exit_code, 0);
+    let before = fixture.model();
+    let relation = before
+        .identities()
+        .into_iter()
+        .find(|(_, alias)| *alias == "responsible")
+        .unwrap()
+        .0;
+    let (code, _) = fixture.cli(&["rename-alias", "responsible", "performs", "--write"]);
+    assert_eq!(code, 0);
+    let mut expected = before;
+    expected.relations.get_mut(&relation).unwrap().alias = "performs".into();
+    assert_eq!(fixture.model(), expected);
+    assert!(
+        fixture
+            .read("project.arcadia")
+            .contains("@ // keep edge comment\nteam")
+    );
+    let captured = fixture.prepare(Operation::RenameAlias {
+        old: "p".into(),
+        new: "rescue".into(),
+    });
+    assert!(
+        captured
+            .report()
+            .changes
+            .iter()
+            .all(|c| c.path != "part.arcadia")
+    );
+    let root_before = fixture.read("project.arcadia");
+    fixture.put("part.arcadia", "// external unchanged-dependency edit\n");
+    assert_eq!(captured.write().exit_code, 3);
+    assert_eq!(fixture.read("project.arcadia"), root_before);
+    assert_eq!(
+        fixture.read("part.arcadia"),
+        "// external unchanged-dependency edit\n"
+    );
+    assert_eq!(
+        fixture.read("detached.arcadia"),
+        "invalid detached draft must stay exact 雨"
+    );
+}

crates/oa-desktop/src/app.rs

@@ -854,8 +854,12 @@ impl App {
         let scenario_selection = self
             .behavior
             .scenario
-            .created_selection(&command)
+            .created_selection(self.project(), &command)
-            .or_else(|| self.behavior.topology.created_selection(&command));
+            .or_else(|| {
+                self.behavior
+                    .topology
+                    .created_selection(self.project(), &command)
+            });
         match self.document.execute(command) {
             Ok(selected) => {
                 if let Some(created) = created {
@@ -1031,8 +1035,10 @@ impl App {
             window::close_requests().map(|id| Message::Request(Pending::Close(id))),
             window::resize_events().map(|(_, size)| Message::WindowResized(size)),
             architecture_authoring::subscription(self),
-            behavior::creation::subscription(self.behavior.creation.has_pending())
+            behavior::creation::subscription(
-                .map(|()| Message::Escape),
+                self.behavior.creation.has_pending() || self.behavior.source_active(),
+            )
+            .map(|()| Message::Escape),
             iced::event::listen_with(|event, status, _| {
                 let iced::Event::Keyboard(keyboard::Event::KeyPressed {
                     key,
@@ -1519,6 +1525,37 @@ impl App {
                             return Task::none();
                         }
                         match mutation {
+                            CanvasEvent::First(_, tool) => {
+                                let empty = match tool {
+                                    scenario::Tool::Lifeline => !self
+                                        .project()
+                                        .children(context.scenario)
+                                        .any(|e| e.kind() == Kind::Lifeline),
+                                    scenario::Tool::Message | scenario::Tool::Action => {
+                                        self.project()
+                                            .children(context.scenario)
+                                            .any(|e| e.kind() == Kind::Lifeline)
+                                            && !self
+                                                .project()
+                                                .children(context.scenario)
+                                                .any(|e| e.kind() == Kind::Occurrence)
+                                    }
+                                    _ => false,
+                                };
+                                if !empty {
+                                    self.status="This scenario already has content. Use its current authoring tools.".into();
+                                    return Task::none();
+                                }
+                                let mut state = std::mem::take(&mut self.behavior.scenario);
+                                let result = state.update(
+                                    self.project(),
+                                    scenario::Event::Start(context.scenario, tool),
+                                );
+                                self.behavior.scenario = state;
+                                if let Err(error) = result {
+                                    self.status = error;
+                                }
+                            }
                             CanvasEvent::BeginOccurrence {
                                 tool,
                                 slot,
@@ -1754,7 +1791,15 @@ impl App {
                 return self.update(Message::Add(child));
             }
             Message::Escape => {
-                if self.behavior.creation.has_pending() {
+                if self.behavior.source_back() {
+                    self.status =
+                        "Returned to the unchanged parent form; no source was created.".into();
+                    return Task::none();
+                }
+                if self.behavior.source_active() {
+                    self.behavior.acknowledge_commit();
+                    self.status = "Behavior form cancelled; no staged source was created.".into();
+                } else if self.behavior.creation.has_pending() {
                     self.behavior.creation.acknowledge_commit();
                     self.status = "Behavior creation cancelled".into();
                 }
@@ -2321,10 +2366,13 @@ impl App {
                     self.status = "Apply or cancel the current draft before starting a new behavior. Your inputs are retained.".into();
                     return Task::none();
                 }
-                if !creating && event.starts_form() && !self.behavior.has_pending() && !self.apply()
+                if (event.starts_form() || (event.is_source() && !event.is_source_back()))
+                    && (self.source_dirty() || self.draft_dirty())
                 {
+                    self.status="Apply or cancel the other editors before starting this form. Your inputs are retained.".into();
                     return Task::none();
                 }
+                let source_was_open = self.behavior.source_open();
                 if event.is_submit() && (self.source_dirty() || self.draft_dirty()) {
                     self.status = "Revert the other drafts before applying the behavior form. Your inputs are retained.".into();
                     return Task::none();
@@ -2342,6 +2390,11 @@ impl App {
                         }
                     }
                     Ok(None) => {
+                        if !source_was_open && self.behavior.source_open() {
+                            return iced::widget::operation::focus(
+                                behavior::source_draft::NAME_INPUT,
+                            );
+                        }
                         if focus_name {
                             return iced::widget::operation::focus(behavior::creation::NAME_INPUT);
                         }
@@ -2537,13 +2590,19 @@ impl App {
             Message::Undo | Message::Redo => {
                 let redo = matches!(message, Message::Redo);
                 if self.apply() {
-                    if redo {
+                    let changed = if redo {
-                        self.document.redo();
+                        self.document.redo()
                     } else {
-                        self.document.undo();
+                        self.document.undo()
+                    };
+                    if changed {
+                        self.sync();
                     }
-                    self.sync();
+                    self.status = if !changed && redo {
-                    self.status = if redo {
+                        "Nothing to redo"
+                    } else if !changed {
+                        "Nothing to undo"
+                    } else if redo {
                         "Model change redone"
                     } else {
                         "Model change undone"

crates/oa-desktop/src/app/checkpoints.rs

@@ -214,6 +214,11 @@ impl App {
             .is_some_and(architecture_authoring::State::inline)
         {
             Task::batch([lint, iced::widget::operation::focus("architecture-name")])
+        } else if self.page == Page::Behavior && self.behavior.source_open() {
+            Task::batch([
+                lint,
+                iced::widget::operation::focus(behavior::source_draft::NAME_INPUT),
+            ])
         } else if self.page == Page::Behavior && self.behavior.creation.created().is_some() {
             Task::batch([
                 lint,

crates/oa-desktop/src/behavior.rs

@@ -14,8 +14,11 @@ use iced::{
 };
 use oa_core::*;
 use std::collections::BTreeMap;
+#[cfg(test)]
+mod contextual_source_tests;
 pub(crate) mod creation;
 pub(crate) mod scenario;
+pub(crate) mod source_draft;
 pub(crate) mod state_canvas;
 pub(crate) mod state_edit;
 pub(crate) mod state_menu;
@@ -739,6 +742,29 @@ pub enum Event {
     Submit,
 }
 impl Event {
+    pub fn is_source_back(&self) -> bool {
+        matches!(
+            self,
+            Self::Creation(creation::Event::Source(source_draft::Event::Edit(
+                _,
+                source_draft::Edit::Back
+            ))) | Self::Scenario(scenario::Event::Source(source_draft::Event::Edit(
+                _,
+                source_draft::Edit::Back
+            ))) | Self::Topology(topology::Event::Source(source_draft::Event::Edit(
+                _,
+                source_draft::Edit::Back
+            )))
+        )
+    }
+    pub fn is_source(&self) -> bool {
+        matches!(
+            self,
+            Self::Creation(creation::Event::Source(_))
+                | Self::Scenario(scenario::Event::Source(_))
+                | Self::Topology(topology::Event::Source(_))
+        )
+    }
     pub fn starts_form(&self) -> bool {
         matches!(
             self,
@@ -869,6 +895,18 @@ impl State {
 
     /// Clear the active form after its prepared command commits successfully.
     /// Rejected commands must leave the form available for repair and retry.
+    pub fn source_active(&self) -> bool {
+        self.creation.source_active()
+            || self.scenario.source_active()
+            || self.topology.source_active()
+    }
+    pub fn source_open(&self) -> bool {
+        self.creation.source_open() || self.scenario.source_open() || self.topology.source_open()
+    }
+    pub fn source_back(&mut self) -> bool {
+        self.creation.source_back() || self.scenario.source_back() || self.topology.source_back()
+    }
+
     pub fn acknowledge_commit(&mut self) {
         self.creation.acknowledge_commit();
         self.topology.acknowledge_commit();
@@ -916,6 +954,40 @@ pub fn view(app: &App) -> Element<'_, Message> {
     if let Some(card) = app.behavior.creation.view(p) {
         return card.map(|event| Message::Behavior(Event::Creation(event)));
     }
+    if let Some(owner) = app.behavior.pending_owner() {
+        let kind = p.elements.get(&owner).map(oa_core::Element::kind);
+        let unavailable = p.layer_of(owner) != Some(app.layer)
+            || (app.behavior.scenario.pending_owner().is_some() && kind != Some(Kind::Scenario))
+            || (app.behavior.topology.pending_owner().is_some()
+                && !matches!(kind, Some(Kind::Process | Kind::FunctionalChain)));
+        if unavailable {
+            let mut out=column![text("The pending behavior owner is unavailable").size(20),text("Your inputs are retained. Return from the source form or cancel this parent draft before choosing another behavior.").size(13)].spacing(12);
+            if let Some(name) = app
+                .behavior
+                .scenario
+                .pending_name()
+                .or_else(|| app.behavior.topology.pending_name())
+            {
+                out =
+                    out.push(text(format!("Pending consumer name: {}", short(name, 80))).size(14));
+            }
+            if let Some(child) = app.behavior.scenario.source_view(p) {
+                out = out.push(child.map(|e| Message::Behavior(Event::Scenario(e))));
+            } else if let Some(child) = app.behavior.topology.source_view(p) {
+                out = out.push(child.map(|e| Message::Behavior(Event::Topology(e))));
+            } else {
+                let cancel = if app.behavior.scenario.pending_owner().is_some() {
+                    Event::Scenario(scenario::Event::Cancel)
+                } else if app.behavior.topology.pending_owner().is_some() {
+                    Event::Topology(topology::Event::Cancel)
+                } else {
+                    Event::States(states::Event::Cancel)
+                };
+                out = out.push(button("Cancel retained draft").on_press(Message::Behavior(cancel)));
+            }
+            return container(out).padding(16).width(Fill).height(Fill).into();
+        }
+    }
     let choices = p
         .elements
         .values()

crates/oa-desktop/src/behavior/scenario.rs

@@ -94,6 +94,7 @@ impl std::fmt::Display for CanvasTool {
 }
 #[derive(Debug, Clone)]
 pub enum CanvasEvent {
+    First(Context, Tool),
     Scrolled(Context, ScrollArea, iced::Vector),
     Restored(Context, Id, ScrollArea, iced::Vector),
     Viewport(Context, Size),
@@ -132,7 +133,8 @@ pub enum ScrollArea {
 impl CanvasEvent {
     pub fn context(&self) -> Context {
         match self {
-            Self::Scrolled(context, _, _)
+            Self::First(context, _)
+            | Self::Scrolled(context, _, _)
             | Self::Restored(context, ..)
             | Self::Viewport(context, _)
             | Self::Zoom(context, _)
@@ -162,6 +164,7 @@ impl std::fmt::Display for Operator {
 }
 #[derive(Debug, Clone)]
 pub enum Event {
+    Source(super::source_draft::Event),
     Start(Id, Tool),
     Cancel,
     Submit,
@@ -240,6 +243,13 @@ struct CallChoiceContext {
 #[derive(Clone, serde::Serialize, serde::Deserialize)]
 #[serde(deny_unknown_fields)]
 struct Draft {
+    #[serde(default)]
+    source: super::source_draft::State,
+    #[serde(default = "Id::new_v4")]
+    invocation: Id,
+    #[serde(default)]
+    source_origin: Option<(Id, oa_core::Element)>,
+
     owner: Id,
     parent: Id,
     before: Option<Id>,
@@ -272,6 +282,28 @@ struct Draft {
     choice_page: usize,
 }
 impl State {
+    pub(super) fn pending_name(&self) -> Option<&str> {
+        self.draft.as_ref().map(|d| d.name.as_str())
+    }
+    pub(super) fn source_view<'a>(&'a self, p: &'a Project) -> Option<iced::Element<'a, Event>> {
+        self.draft
+            .as_ref()?
+            .source
+            .view(p)
+            .map(|v| v.map(Event::Source))
+    }
+
+    pub fn source_active(&self) -> bool {
+        self.draft.as_ref().is_some_and(|d| d.source.engaged())
+    }
+
+    pub fn source_open(&self) -> bool {
+        self.draft.as_ref().is_some_and(|d| d.source.is_open())
+    }
+    pub fn source_back(&mut self) -> bool {
+        self.draft.as_mut().is_some_and(|d| d.source.back())
+    }
+
     pub(crate) fn enter(&mut self, document: Id, owner: Id) {
         if self.presentation.identity != Some((document, owner)) {
             self.presentation = workspace::Presentation {
@@ -452,8 +484,16 @@ impl State {
         }
         cached.as_ref().unwrap().1.clone()
     }
-    pub(crate) fn created_selection(&self, command: &Command) -> Option<Id> {
+    pub(crate) fn created_selection(&self, p: &Project, command: &Command) -> Option<Id> {
         let draft = self.draft.as_ref()?;
+        if self
+            .draft
+            .as_ref()
+            .is_some_and(|d| d.source.label(d.target).is_some())
+            && self.prepare_pending(p).ok().as_ref() != Some(command)
+        {
+            return None;
+        }
         fn created(command: &Command, parent: Id) -> Option<Id> {
             match command {
                 Command::CreateElement(element) if element.parent == Some(parent) => {
@@ -568,6 +608,61 @@ impl State {
     }
 
     pub fn update(&mut self, p: &Project, event: Event) -> Result<Option<Command>, String> {
+        if let Event::Source(event) = event {
+            if self
+                .draft
+                .as_mut()
+                .ok_or("Start the consumer form first.")?
+                .source
+                .dismiss(&event)?
+            {
+                return Ok(None);
+            }
+            let d = self
+                .draft
+                .as_ref()
+                .ok_or("Start the consumer form first.")?;
+            if d.tool != Tool::Lifeline {
+                return Err("This reference does not support staged source creation.".into());
+            }
+            if d.source_origin.as_ref().is_some_and(|(document, owner)| {
+                *document != p.id || p.elements.get(&d.owner) != Some(owner)
+            }) {
+                return Err("The original consumer changed. Cancel and reopen its form; the current draft is retained.".into());
+            }
+            if d.source_origin.is_none() && d.source.engaged() {
+                return Err("The recovered source draft has no original document binding. Go Back or cancel it.".into());
+            }
+            let mut next = d.clone();
+            if next.source_origin.is_none() && matches!(&event, super::source_draft::Event::Open(_))
+            {
+                next.source_origin = Some((
+                    p.id,
+                    p.elements
+                        .get(&d.owner)
+                        .ok_or("The consumer owner no longer exists.")?
+                        .clone(),
+                ));
+            }
+            if let Some(id) = next.source.update(
+                p,
+                super::source_draft::Scope::Lifeline {
+                    owner: d.owner,
+                    viewpoint: viewpoint(p, d.owner),
+                },
+                d.invocation,
+                event,
+            )? {
+                next.target = Some(id);
+                next.command(p)?;
+            }
+            self.draft = Some(next);
+            return Ok(None);
+        }
+        if self.source_open() && !matches!(&event, Event::Cancel) {
+            return Err("Use the new source or go Back before editing the parent form.".into());
+        }
+
         if self.draft.is_some() && matches!(&event, Event::Start(..)) {
             return Err(PENDING_DRAFT.into());
         }
@@ -577,6 +672,9 @@ impl State {
                     return Err("Choose a scenario.".into());
                 }
                 self.draft = Some(Draft {
+                    source: Default::default(),
+                    invocation: Id::new_v4(),
+                    source_origin: Some((p.id, p.elements[&owner].clone())),
                     owner,
                     parent: owner,
                     before: None,
@@ -940,7 +1038,14 @@ fn valid_body_choice(p: &Project, owner: Id, body: OccurrenceBody) -> bool {
     execute_batch(p, &[Command::CreateElement(e)]).is_ok()
 }
 fn sources(p: &Project, d: &Draft) -> Vec<Choice> {
-    let layer = p.elements[&d.owner].layer();
+    let Some(owner) = p
+        .elements
+        .get(&d.owner)
+        .filter(|e| e.kind() == Kind::Scenario)
+    else {
+        return vec![];
+    };
+    let layer = owner.layer();
     let mut values: Vec<_> = p
         .elements
         .values()
@@ -1256,6 +1361,28 @@ impl Draft {
         e
     }
     fn command(&self, p: &Project) -> Result<Command, String> {
+        if self.source.engaged()
+            && self.source_origin.as_ref().is_none_or(|(document, owner)| {
+                *document != p.id || p.elements.get(&self.owner) != Some(owner)
+            })
+        {
+            return Err("The original consumer document or owner changed. Cancel and reopen its form; your draft is retained.".into());
+        }
+        self.source.check_scope(
+            super::source_draft::Scope::Lifeline {
+                owner: self.owner,
+                viewpoint: viewpoint(p, self.owner),
+            },
+            self.target,
+        )?;
+        let preview = self.source.preview(p, self.target)?;
+        let command = self.consumer_command(preview.as_ref().unwrap_or(p))?;
+        self.source.combine(p, self.target, command)
+    }
+    fn consumer_command(&self, p: &Project) -> Result<Command, String> {
+        if p.elements.get(&self.owner).map(oa_core::Element::kind) != Some(Kind::Scenario) {
+            return Err("The scenario no longer exists. Cancel or restore its owner.".into());
+        }
         if !parents(p, self.owner).iter().any(|c| c.id == self.parent) {
             return Err("Choose this scenario or one of its operands as destination.".into());
         }
@@ -1266,6 +1393,8 @@ impl Draft {
             .unwrap_or(self.tool.label());
         let name = if self.name.trim().is_empty() {
             default
+        } else if self.source.label(self.target).is_some() {
+            self.name.as_str()
         } else {
             self.name.trim()
         };

crates/oa-desktop/src/behavior/topology.rs

@@ -38,6 +38,7 @@ impl Tool {
 }
 #[derive(Debug, Clone)]
 pub enum Event {
+    Source(super::source_draft::Event),
     Start(Id, Tool, Option<Id>),
     Cancel,
     Submit,
@@ -90,15 +91,22 @@ pub struct State {
     selected_context: Option<oa_core::topology_context::ContextAddress>,
     shelf: Option<Shelf>,
 }
-#[derive(Default, serde::Serialize, serde::Deserialize)]
+#[derive(Clone, Default, serde::Serialize, serde::Deserialize)]
 #[serde(deny_unknown_fields)]
 struct Browser {
     search: String,
     page: usize,
 }
-#[derive(serde::Serialize, serde::Deserialize)]
+#[derive(Clone, serde::Serialize, serde::Deserialize)]
 #[serde(deny_unknown_fields)]
 struct Draft {
+    #[serde(default)]
+    source: super::source_draft::State,
+    #[serde(default = "Id::new_v4")]
+    invocation: Id,
+    #[serde(default)]
+    source_origin: Option<(Id, oa_core::Element)>,
+
     #[serde(with = "recovery_insertion")]
     insertion: Insertion,
     fixed: bool,
@@ -117,6 +125,28 @@ struct Draft {
     contextual: Option<contextual::Draft>,
 }
 impl State {
+    pub(super) fn pending_name(&self) -> Option<&str> {
+        self.draft.as_ref().map(|d| d.name.as_str())
+    }
+    pub(super) fn source_view<'a>(&'a self, p: &'a Project) -> Option<iced::Element<'a, Event>> {
+        self.draft
+            .as_ref()?
+            .source
+            .view(p)
+            .map(|v| v.map(Event::Source))
+    }
+
+    pub fn source_active(&self) -> bool {
+        self.draft.as_ref().is_some_and(|d| d.source.engaged())
+    }
+
+    pub fn source_open(&self) -> bool {
+        self.draft.as_ref().is_some_and(|d| d.source.is_open())
+    }
+    pub fn source_back(&mut self) -> bool {
+        self.draft.as_mut().is_some_and(|d| d.source.back())
+    }
+
     pub(super) fn recovery_snapshot(&self) -> Result<Option<serde_json::Value>, String> {
         self.draft
             .as_ref()
@@ -152,6 +182,58 @@ impl State {
     }
 
     pub fn update(&mut self, p: &Project, event: Event) -> Result<Option<Command>, String> {
+        if let Event::Source(event) = event {
+            if self
+                .draft
+                .as_mut()
+                .ok_or("Start the consumer form first.")?
+                .source
+                .dismiss(&event)?
+            {
+                return Ok(None);
+            }
+            let d = self
+                .draft
+                .as_ref()
+                .ok_or("Start the consumer form first.")?;
+            if d.tool != Tool::Work {
+                return Err("This reference does not support staged source creation.".into());
+            }
+            if d.source_origin.as_ref().is_some_and(|(document, owner)| {
+                *document != p.id || p.elements.get(&d.owner) != Some(owner)
+            }) {
+                return Err("The original consumer changed. Cancel and reopen its form; the current draft is retained.".into());
+            }
+            if d.source_origin.is_none() && d.source.engaged() {
+                return Err("The recovered source draft has no original document binding. Go Back or cancel it.".into());
+            }
+            let mut next = d.clone();
+            if next.source_origin.is_none() && matches!(&event, super::source_draft::Event::Open(_))
+            {
+                next.source_origin = Some((
+                    p.id,
+                    p.elements
+                        .get(&d.owner)
+                        .ok_or("The consumer owner no longer exists.")?
+                        .clone(),
+                ));
+            }
+            if let Some(id) = next.source.update(
+                p,
+                super::source_draft::Scope::Work { owner: d.owner },
+                d.invocation,
+                event,
+            )? {
+                next.target = Some(id);
+                next.command(p)?;
+            }
+            self.draft = Some(next);
+            return Ok(None);
+        }
+        if self.source_open() && !matches!(&event, Event::Cancel) {
+            return Err("Use the new source or go Back before editing the parent form.".into());
+        }
+
         if self.draft.is_some() && matches!(&event, Event::Start(..)) {
             return Err(PENDING_DRAFT.into());
         }
@@ -184,6 +266,9 @@ impl State {
                     }
                 });
                 self.draft = Some(Draft {
+                    source: Default::default(),
+                    invocation: Id::new_v4(),
+                    source_origin: Some((p.id, p.elements[&owner].clone())),
                     insertion: Insertion::default(),
                     fixed: false,
                     browsers: Default::default(),
@@ -508,6 +593,22 @@ fn link(p: &Project, source: Id, target: Id, guard: &str) -> Command {
 }
 impl Draft {
     fn command(&self, p: &Project) -> Result<Command, String> {
+        if self.source.engaged()
+            && self.source_origin.as_ref().is_none_or(|(document, owner)| {
+                *document != p.id || p.elements.get(&self.owner) != Some(owner)
+            })
+        {
+            return Err("The original consumer document or owner changed. Cancel and reopen its form; your draft is retained.".into());
+        }
+        self.source.check_scope(
+            super::source_draft::Scope::Work { owner: self.owner },
+            self.target,
+        )?;
+        let preview = self.source.preview(p, self.target)?;
+        let command = self.consumer_command(preview.as_ref().unwrap_or(p))?;
+        self.source.combine(p, self.target, command)
+    }
+    fn consumer_command(&self, p: &Project) -> Result<Command, String> {
         let owner = p
             .elements
             .get(&self.owner)
@@ -615,6 +716,8 @@ impl Draft {
         });
         let name = if self.name.trim().is_empty() {
             default_name
+        } else if self.source.label(self.target).is_some() {
+            self.name.as_str()
         } else {
             self.name.trim()
         };
@@ -1587,6 +1690,9 @@ mod tests {
     }
     fn branch(owner: Id, a: Id, b: Id, before: Id, after: Id) -> Draft {
         Draft {
+            source: Default::default(),
+            invocation: Id::new_v4(),
+            source_origin: None,
             insertion: Insertion::default(),
             fixed: false,
             browsers: Default::default(),

crates/oa-desktop/src/behavior/topology/direct.rs

@@ -206,8 +206,16 @@ impl State {
         }
         None
     }
-    pub(crate) fn created_selection(&self, command: &Command) -> Option<Id> {
+    pub(crate) fn created_selection(&self, p: &Project, command: &Command) -> Option<Id> {
         let owner = self.pending_owner()?;
+        if self
+            .draft
+            .as_ref()
+            .is_some_and(|d| d.source.label(d.target).is_some())
+            && self.prepare_pending(p).ok().as_ref() != Some(command)
+        {
+            return None;
+        }
         if let Command::CreateRelation(r) | Command::EditRelation(_, r) = command
             && matches!(&r.body, RelationBody::ContextualLink { owner: caller, .. } if *caller == owner)
         {

crates/oa-desktop/src/behavior/topology/view.rs

@@ -369,6 +369,25 @@ pub(super) fn view<'a>(app: &'a App, owner: Id, out: Column<'a, Message>) -> Ele
         .width(Fill)
         .height(Fill)
         .style(style::card);
+        if !pending && !p.children(owner).any(|e| is_contribution(p, owner, e.id)) {
+            let title = if p.layer_of(owner) == Some(Layer::Oa) {
+                "Add first activity contribution"
+            } else {
+                "Add first function contribution"
+            };
+            header = header.push(button(title).on_press_maybe(
+                (!app.behavior.has_pending() && !app.draft_dirty() && !app.source_dirty()).then(
+                    || {
+                        Message::TopologyCanvas(CanvasEvent::Begin {
+                            context,
+                            tool: Tool::Work,
+                            control: ControlKind::Choice,
+                            insertion: Insertion::default(),
+                        })
+                    },
+                ),
+            ));
+        }
         let details: Element<'_, Message> = match state.shelf {
             Some(Shelf::Tools) => controls.into(),
             _ => navigation.push(text("Full qualified identities and definition actions appear here for the selected contribution or link.").size(11)).into(),
@@ -383,201 +402,223 @@ pub(super) fn view<'a>(app: &'a App, owner: Id, out: Column<'a, Message>) -> Ele
     };
     let mut form_panel: Element<'_, Message> = iced::widget::Space::new().height(0).into();
     if let Some(d) = state.draft.as_ref().filter(|d| d.owner == owner) {
-        let mut form = column![text(d.tool.title()).size(16)].spacing(8);
+        if let Some(child) = d.source.view(p) {
-        if let Some(contextual) = &d.contextual {
+            form_panel = column![
-            form = form
+                text(format!(
-                .push(
+                    "Consumer name: {}",
-                    text_input("Link name (retain current when blank)", &d.name)
+                    crate::views::short(&d.name, 60)
-                        .on_input(|v| event(Event::Name(v)))
+                ))
-                        .padding(8)
+                .size(12),
-                        .size(12),
+                child.map(|e| event(Event::Source(e)))
-                )
+            ]
-                .push(super::contextual::view(p, owner, contextual));
+            .spacing(6)
+            .height(Fill)
+            .into();
         } else {
-            if let Some(link) = d.insertion.link.and_then(|id| p.relations.get(&id)) {
+            let mut form = column![text(d.tool.title()).size(16)].spacing(8);
-                let guard = if let RelationBody::SequenceLink { guard, .. } = &link.body {
+            if let Some(contextual) = &d.contextual {
-                    guard.as_str()
+                form = form
-                } else {
+                    .push(
-                    ""
+                        text_input("Link name (retain current when blank)", &d.name)
-                };
+                            .on_input(|v| event(Event::Name(v)))
-                form = form.push(label(format!(
+                            .padding(8)
-                    "Insert on {} → {} · preserve path identity and condition [{}]",
+                            .size(12),
-                    p.named(link.source()),
+                    )
-                    p.named(link.target()),
+                    .push(super::contextual::view(p, owner, contextual));
-                    guard
+            } else {
-                )));
+                if let Some(link) = d.insertion.link.and_then(|id| p.relations.get(&id)) {
-            } else if d.fixed && ordered {
+                    let guard = if let RelationBody::SequenceLink { guard, .. } = &link.body {
-                form = form.push(label(match (d.before, d.after) {
+                        guard.as_str()
-                    (Some(before), Some(after)) => format!(
+                    } else {
-                        "Insert between {} → {} · preserve the ordered path",
+                        ""
-                        p.named(before),
+                    };
-                        p.named(after)
+                    form = form.push(label(format!(
-                    ),
+                        "Insert on {} → {} · preserve path identity and condition [{}]",
-                    (Some(before), None) => format!("Continue after {}", p.named(before)),
+                        p.named(link.source()),
-                    (None, Some(after)) => format!("Insert before {}", p.named(after)),
+                        p.named(link.target()),
-                    _ => "Start the ordered path".into(),
+                        guard
-                }));
+                    )));
-            } else if d.fixed
+                } else if d.fixed && ordered {
-                && d.tool == Tool::Exchange
+                    form = form.push(label(match (d.before, d.after) {
-                && let Some(before) = d.before
+                        (Some(before), Some(after)) => format!(
-            {
+                            "Insert between {} → {} · preserve the ordered path",
-                form = form.push(label(format!(
+                            p.named(before),
-                    "Append after {} → new exchange · Create adds an explicit sequence link",
+                            p.named(after)
-                    p.named(before)
+                        ),
-                )));
+                        (Some(before), None) => format!("Continue after {}", p.named(before)),
-            } else if d.fixed && d.tool != Tool::Connect {
+                        (None, Some(after)) => format!("Insert before {}", p.named(after)),
-                form = form.push(label(
+                        _ => "Start the ordered path".into(),
-                    d.insertion
+                    }));
-                        .before
+                } else if d.fixed
-                        .map_or("Append an unconnected contribution".into(), |id| {
+                    && d.tool == Tool::Exchange
-                            format!("Unconnected contribution before {}", p.named(id))
+                    && let Some(before) = d.before
-                        }),
+                {
-                ));
+                    form = form.push(label(format!(
-            }
+                        "Append after {} → new exchange · Create adds an explicit sequence link",
-            if !legacy_order(p, owner).is_empty() {
+                        p.named(before)
-                form = form.push(label(
+                    )));
+                } else if d.fixed && d.tool != Tool::Connect {
+                    form = form.push(label(
+                        d.insertion
+                            .before
+                            .map_or("Append an unconnected contribution".into(), |id| {
+                                format!("Unconnected contribution before {}", p.named(id))
+                            }),
+                    ));
+                }
+                if d.tool == Tool::Work {
+                    if let Some(title) = d.source.label(d.target) {
+                        form = form.push(label(title)).push(label("Create commits the new work and contribution together at the chosen path position."));
+                    }
+                    form = form.push(button("Create new source…").on_press(event(Event::Source(
+                        super::super::source_draft::Event::Open(d.invocation),
+                    ))));
+                }
+                if !legacy_order(p, owner).is_empty() {
+                    form = form.push(label(
                     "This edit preserves the ordered path as explicit links in the same undo step.",
                 ));
-            }
-            if matches!(
-                d.tool,
-                Tool::Work | Tool::Exchange | Tool::Reuse | Tool::Branch
-            ) {
-                let choices = targets(p, owner, d.tool)
-                    .into_iter()
-                    .filter(|c| compatible_source(p, d, c.id))
-                    .collect();
-                if d.tool == Tool::Branch {
-                    form = form.push(label("First path work"));
                 }
-                form = form.push(picker(
+                if matches!(
-                    choices,
+                    d.tool,
-                    d,
+                    Tool::Work | Tool::Exchange | Tool::Reuse | Tool::Branch
-                    0,
+                ) {
-                    d.target,
+                    let choices = targets(p, owner, d.tool)
+                        .into_iter()
+                        .filter(|c| compatible_source(p, d, c.id))
+                        .collect();
                     if d.tool == Tool::Branch {
-                        "Choose first path work…"
+                        form = form.push(label("First path work"));
+                    }
+                    form = form.push(picker(
+                        choices,
+                        d,
+                        0,
+                        d.target,
+                        if d.tool == Tool::Branch {
+                            "Choose first path work…"
+                        } else {
+                            "Choose existing source…"
+                        },
+                        Event::Target,
+                    ));
+                }
+                if d.tool != Tool::Connect {
+                    form = form.push(
+                        text_input("Contribution name (defaults to source)", &d.name)
+                            .on_input(|v| event(Event::Name(v)))
+                            .padding(8)
+                            .size(12),
+                    );
+                }
+                if matches!(d.tool, Tool::Control | Tool::Branch) {
+                    let kinds = if d.tool == Tool::Branch {
+                        vec![ControlKind::Choice, ControlKind::Fork]
                     } else {
-                        "Choose existing source…"
+                        vec![
-                    },
+                            ControlKind::Choice,
-                    Event::Target,
+                            ControlKind::Merge,
-                ));
+                            ControlKind::Fork,
-            }
+                            ControlKind::Join,
-            if d.tool != Tool::Connect {
+                            ControlKind::Loop,
-                form = form.push(
+                        ]
-                    text_input("Contribution name (defaults to source)", &d.name)
+                    };
-                        .on_input(|v| event(Event::Name(v)))
+                    form = form.push(
+                        pick_list(
+                            kinds.into_iter().map(ControlChoice).collect::<Vec<_>>(),
+                            Some(ControlChoice(d.control)),
+                            |v| event(Event::Control(v)),
+                        )
+                        .padding(8)
+                        .text_size(12),
+                    );
+                }
+                if d.tool == Tool::Branch {
+                    form = form.push(label("Second path work")).push(picker(
+                        targets(p, owner, Tool::Work),
+                        d,
+                        1,
+                        d.alternate,
+                        "Second path work…",
+                        Event::Alternate,
+                    ));
+                    if d.control != ControlKind::Fork {
+                        form = form
+                            .push(label("First path guard"))
+                            .push(
+                                text_input("First path guard", &d.guard)
+                                    .on_input(|v| event(Event::Guard(v)))
+                                    .padding(8),
+                            )
+                            .push(label("Second path guard"))
+                            .push(
+                                text_input("Second path guard (e.g. else)", &d.alternate_guard)
+                                    .on_input(|v| event(Event::AlternateGuard(v)))
+                                    .padding(8),
+                            );
+                    }
+                }
+                if d.fixed {
+                    if let (Some(a), Some(b)) = (d.before, d.after) {
+                        form = form.push(label(format!("{} → {}", p.named(a), p.named(b))));
+                    }
+                } else {
+                    form = form
+                        .push(label("Preceding contribution"))
+                        .push(picker(
+                            contributions(p, owner),
+                            d,
+                            2,
+                            d.before,
+                            "After contribution…",
+                            Event::Before,
+                        ))
+                        .push(button("Clear preceding").on_press(event(Event::ClearBefore)))
+                        .push(label("Following contribution"))
+                        .push(picker(
+                            contributions(p, owner),
+                            d,
+                            3,
+                            d.after,
+                            "Before contribution…",
+                            Event::After,
+                        ))
+                        .push(button("Clear following").on_press(event(Event::ClearAfter)));
+                }
+                if d.tool != Tool::Branch
+                    && d.insertion.link.is_none()
+                    && (d.before.is_some() || d.tool == Tool::Connect)
+                {
+                    form = form.push(
+                        text_input(
+                            "Path condition (empty remains a Choice / Loop warning)",
+                            &d.guard,
+                        )
+                        .on_input(|v| event(Event::Guard(v)))
                         .padding(8)
                         .size(12),
-                );
+                    );
+                }
             }
-            if matches!(d.tool, Tool::Control | Tool::Branch) {
+            let valid = match d.command(p) {
-                let kinds = if d.tool == Tool::Branch {
+                Ok(_) => true,
-                    vec![ControlKind::Choice, ControlKind::Fork]
+                Err(problem) => {
+                    form = form.push(label(problem));
+                    false
+                }
+            };
+            let actions = row![
+                button(if d.contextual.is_some() {
+                    "Apply link"
                 } else {
-                    vec![
+                    "Create"
-                        ControlKind::Choice,
+                })
-                        ControlKind::Merge,
+                .on_press_maybe(valid.then(|| event(Event::Submit))),
-                        ControlKind::Fork,
+                button("Cancel").on_press(event(Event::Cancel))
-                        ControlKind::Join,
+            ]
-                        ControlKind::Loop,
+            .spacing(7);
-                    ]
+            form_panel = editor_panel(actions.into(), form.into());
-                };
-                form = form.push(
-                    pick_list(
-                        kinds.into_iter().map(ControlChoice).collect::<Vec<_>>(),
-                        Some(ControlChoice(d.control)),
-                        |v| event(Event::Control(v)),
-                    )
-                    .padding(8)
-                    .text_size(12),
-                );
-            }
-            if d.tool == Tool::Branch {
-                form = form.push(label("Second path work")).push(picker(
-                    targets(p, owner, Tool::Work),
-                    d,
-                    1,
-                    d.alternate,
-                    "Second path work…",
-                    Event::Alternate,
-                ));
-                if d.control != ControlKind::Fork {
-                    form = form
-                        .push(label("First path guard"))
-                        .push(
-                            text_input("First path guard", &d.guard)
-                                .on_input(|v| event(Event::Guard(v)))
-                                .padding(8),
-                        )
-                        .push(label("Second path guard"))
-                        .push(
-                            text_input("Second path guard (e.g. else)", &d.alternate_guard)
-                                .on_input(|v| event(Event::AlternateGuard(v)))
-                                .padding(8),
-                        );
-                }
-            }
-            if d.fixed {
-                if let (Some(a), Some(b)) = (d.before, d.after) {
-                    form = form.push(label(format!("{} → {}", p.named(a), p.named(b))));
-                }
-            } else {
-                form = form
-                    .push(label("Preceding contribution"))
-                    .push(picker(
-                        contributions(p, owner),
-                        d,
-                        2,
-                        d.before,
-                        "After contribution…",
-                        Event::Before,
-                    ))
-                    .push(button("Clear preceding").on_press(event(Event::ClearBefore)))
-                    .push(label("Following contribution"))
-                    .push(picker(
-                        contributions(p, owner),
-                        d,
-                        3,
-                        d.after,
-                        "Before contribution…",
-                        Event::After,
-                    ))
-                    .push(button("Clear following").on_press(event(Event::ClearAfter)));
-            }
-            if d.tool != Tool::Branch
-                && d.insertion.link.is_none()
-                && (d.before.is_some() || d.tool == Tool::Connect)
-            {
-                form = form.push(
-                    text_input(
-                        "Path condition (empty remains a Choice / Loop warning)",
-                        &d.guard,
-                    )
-                    .on_input(|v| event(Event::Guard(v)))
-                    .padding(8)
-                    .size(12),
-                );
-            }
         }
-        let valid = match d.command(p) {
-            Ok(_) => true,
-            Err(problem) => {
-                form = form.push(label(problem));
-                false
-            }
-        };
-        let actions = row![
-            button(if d.contextual.is_some() {
-                "Apply link"
-            } else {
-                "Create"
-            })
-            .on_press_maybe(valid.then(|| event(Event::Submit))),
-            button("Cancel").on_press(event(Event::Cancel))
-        ]
-        .spacing(7);
-        form_panel = editor_panel(actions.into(), form.into());
     }
     panes(diagram, form_panel, pending)
 }

crates/oa-desktop/src/semantic_review/artifacts_view.rs

@@ -1,147 +1,147 @@
-use super::artifacts::{Editor, Event, Raw};
+use super::artifacts::{Editor, Event, Raw};
-use super::*;
+use super::*;
-use iced::{
+use iced::{
-    Element as View, Fill,
+    Element as View, Fill,
-    widget::{button, checkbox, column, pick_list, row, text, text_editor, text_input},
+    widget::{button, checkbox, column, pick_list, row, text, text_editor, text_input},
-};
+};
-pub(super) fn pairs<'a>(editor: &'a Editor, p: &'a Project, trace: &'a Trace) -> View<'a, Event> {
+pub(super) fn pairs<'a>(editor: &'a Editor, p: &'a Project, trace: &'a Trace) -> View<'a, Event> {
-    let mut content=column![text("Artifact links and metadata").size(16),text("Pair links attached to these reviewed owners. Presence is attachment to the owner; taking identified source absence deletes the destination link, while a destination-only link is retained.").size(12),text_input("Filter artifact identities",&editor.search).on_input(Event::Search).padding(7)].spacing(9);
+    let mut content=column![text("Artifact links and metadata").size(16),text("Pair links attached to these reviewed owners. Presence is attachment to the owner; taking identified source absence deletes the destination link, while a destination-only link is retained.").size(12),text_input("Filter artifact identities",&editor.search).on_input(Event::Search).padding(7)].spacing(9);
-    for (layer, label, selected) in [
+    for (layer, label, selected) in [
-        (Layer::Oa, "Operational", editor.oa.clone()),
+        (Layer::Oa, "Operational", editor.oa.clone()),
-        (Layer::Sa, "System", editor.sa.clone()),
+        (Layer::Sa, "System", editor.sa.clone()),
-    ] {
+    ] {
-        content = content.push(text(label).size(12)).push(
+        content = content.push(text(label).size(12)).push(
-            row![
+            row![
-                pick_list(editor.choices(p, trace, layer), selected, move |v| {
+                pick_list(editor.choices(p, trace, layer), selected, move |v| {
-                    Event::Pick(layer, Some(v))
+                    Event::Pick(layer, Some(v))
-                })
+                })
-                .placeholder("Choose exact artifact identity")
+                .placeholder("Choose exact artifact identity")
-                .width(Fill)
+                .width(Fill)
-                .padding(7),
+                .padding(7),
-                button("No identity")
+                button("No identity")
-                    .padding(7)
+                    .padding(7)
-                    .on_press(Event::Pick(layer, None))
+                    .on_press(Event::Pick(layer, None))
-            ]
+            ]
-            .spacing(7),
+            .spacing(7),
-        );
+        );
-    }
+    }
-    content.push(row![button("Reserve a new destination counterpart").padding(7).on_press(Event::Reserve),button("Review this exact artifact pair").padding(7).on_press(Event::Stage)].spacing(7).wrap()).push(text("Reservation retains a fresh identity and seeds metadata from the source. It creates nothing until Presence and all seven metadata facets are explicitly reviewed and the combined Apply succeeds. New unrelated links use ordinary artifact creation.").size(11)).padding(iced::Padding::default().right(18)).into()
+    content.push(row![button("Reserve a new destination counterpart").padding(7).on_press(Event::Reserve),button("Review this exact artifact pair").padding(7).on_press(Event::Stage)].spacing(7).wrap()).push(text("Reservation retains a fresh identity and seeds metadata from the source. It creates nothing until Presence and all seven metadata facets are explicitly reviewed and the combined Apply succeeds. New unrelated links use ordinary artifact creation.").size(11)).padding(iced::Padding::default().right(18)).into()
-}
+}
-pub(super) fn candidate<'a>(
+pub(super) fn candidate<'a>(
-    editor: &'a Editor,
+    editor: &'a Editor,
-    p: &'a Project,
+    p: &'a Project,
-    facet: &'a FacetSelector,
+    facet: &'a FacetSelector,
-) -> Option<View<'a, Event>> {
+) -> Option<View<'a, Event>> {
-    let value = editor.drafts.get(facet)?;
+    let value = editor.drafts.get(facet)?;
-    let (_, which) = artifacts::parts(facet)?;
+    let (_, which) = artifacts::parts(facet)?;
-    let mut content =
+    let mut content =
-        column![text(format!("Final artifact {}", artifacts::field(which)?)).size(12)].spacing(7);
+        column![text(format!("Final artifact {}", artifacts::field(which)?)).size(12)].spacing(7);
-    match value {
+    match value {
-        Raw::Text(_) if which == ArtifactFacet::Description => {
+        Raw::Text(_) if which == ArtifactFacet::Description => {
-            let draft = editor.descriptions.get(facet)?;
+            let draft = editor.descriptions.get(facet)?;
-            let facet = facet.clone();
+            let facet = facet.clone();
-            content = content.push(
+            content = content.push(
-                text_editor(draft)
+                text_editor(draft)
-                    .height(110)
+                    .height(110)
-                    .on_action(move |action| Event::Description(facet.clone(), action)),
+                    .on_action(move |action| Event::Description(facet.clone(), action)),
-            );
+            );
-        }
+        }
-        Raw::Text(value) => {
+        Raw::Text(value) => {
-            let facet = facet.clone();
+            let facet = facet.clone();
-            content = content.push(
+            content = content.push(
-                text_input("Exact text", value)
+                text_input("Exact text", value)
-                    .on_input(move |value| Event::Input(facet.clone(), Raw::Text(value)))
+                    .on_input(move |value| Event::Input(facet.clone(), Raw::Text(value)))
-                    .padding(7),
+                    .padding(7),
-            );
+            );
-        }
+        }
-        Raw::Owner(value) => {
+        Raw::Owner(value) => {
-            let mut choices: Vec<_> = p
+            let mut choices: Vec<_> = p
-                .identities()
+                .identities()
-                .into_iter()
+                .into_iter()
-                .map(|(id, alias)| Choice {
+                .map(|(id, alias)| Choice {
-                    id,
+                    id,
-                    label: format!("{} · @{alias}", p.named(id)),
+                    label: format!("{} · @{alias}", p.named(id)),
-                })
+                })
-                .collect();
+                .collect();
-            choices.sort_by_cached_key(|c| c.label.to_lowercase());
+            choices.sort_by_cached_key(|c| c.label.to_lowercase());
-            let selected = value.parse::<Id>().ok().map(|id| view::choice(p, id));
+            let selected = value.parse::<Id>().ok().map(|id| view::choice(p, id));
-            let raw_facet = facet.clone();
+            let raw_facet = facet.clone();
-            let pick_facet = facet.clone();
+            let pick_facet = facet.clone();
-            content = content
+            content = content
-                .push(
+                .push(
-                    pick_list(choices, selected, move |v: Choice| {
+                    pick_list(choices, selected, move |v: Choice| {
-                        Event::Input(pick_facet.clone(), Raw::Owner(v.id.to_string()))
+                        Event::Input(pick_facet.clone(), Raw::Owner(v.id.to_string()))
-                    })
+                    })
-                    .placeholder("Explicit final owner")
+                    .placeholder("Explicit final owner")
-                    .width(Fill)
+                    .width(Fill)
-                    .padding(7),
+                    .padding(7),
-                )
+                )
-                .push(
+                .push(
-                    text_input("Owner identity (retains rejected input)", value)
+                    text_input("Owner identity (retains rejected input)", value)
-                        .on_input(move |v| Event::Input(raw_facet.clone(), Raw::Owner(v)))
+                        .on_input(move |v| Event::Input(raw_facet.clone(), Raw::Owner(v)))
-                        .padding(7),
+                        .padding(7),
-                );
+                );
-        }
+        }
-        Raw::Relation(value) => {
+        Raw::Relation(value) => {
-            let facet = facet.clone();
+            let facet = facet.clone();
-            let variants = [
+            let variants = [
-                ArtifactRelation::References,
+                ArtifactRelation::References,
-                ArtifactRelation::Satisfies,
+                ArtifactRelation::Satisfies,
-                ArtifactRelation::Verifies,
+                ArtifactRelation::Verifies,
-                ArtifactRelation::Implements,
+                ArtifactRelation::Implements,
-                ArtifactRelation::DerivedFrom,
+                ArtifactRelation::DerivedFrom,
-            ];
+            ];
-            let choices: Vec<_> = variants.into_iter().map(RelationChoice).collect();
+            let choices: Vec<_> = variants.into_iter().map(RelationChoice).collect();
-            content = content.push(
+            content = content.push(
-                pick_list(choices, Some(RelationChoice(*value)), move |v| {
+                pick_list(choices, Some(RelationChoice(*value)), move |v| {
-                    Event::Input(facet.clone(), Raw::Relation(v.0))
+                    Event::Input(facet.clone(), Raw::Relation(v.0))
-                })
+                })
-                .padding(7),
+                .padding(7),
-            );
+            );
-        }
+        }
-        Raw::Optional {
+        Raw::Optional {
-            present,
+            present,
-            text: value,
+            text: value,
-        } => {
+        } => {
-            let toggle_facet = facet.clone();
+            let toggle_facet = facet.clone();
-            let retained = value.clone();
+            let retained = value.clone();
-            let input_facet = facet.clone();
+            let input_facet = facet.clone();
-            let enabled = *present;
+            let enabled = *present;
-            content = content
+            content = content
-                .push(
+                .push(
-                    checkbox(*present)
+                    checkbox(*present)
-                        .label("Present (checked with empty text means an explicit empty value)")
+                        .label("Present (checked with empty text means an explicit empty value)")
-                        .on_toggle(move |present| {
+                        .on_toggle(move |present| {
-                            Event::Input(
+                            Event::Input(
-                                toggle_facet.clone(),
+                                toggle_facet.clone(),
-                                Raw::Optional {
+                                Raw::Optional {
-                                    present,
+                                    present,
-                                    text: retained.clone(),
+                                    text: retained.clone(),
-                                },
+                                },
-                            )
+                            )
-                        }),
+                        }),
-                )
+                )
-                .push(
+                .push(
-                    text_input("Retained optional text", value)
+                    text_input("Retained optional text", value)
-                        .on_input(move |text| {
+                        .on_input(move |text| {
-                            Event::Input(
+                            Event::Input(
-                                input_facet.clone(),
+                                input_facet.clone(),
-                                Raw::Optional {
+                                Raw::Optional {
-                                    present: enabled,
+                                    present: enabled,
-                                    text,
+                                    text,
-                                },
+                                },
-                            )
+                            )
-                        })
+                        })
-                        .padding(7),
+                        .padding(7),
-                );
+                );
-        }
+        }
-    }
+    }
-    Some(content.into())
+    Some(content.into())
-}
+}
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
+#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-struct RelationChoice(ArtifactRelation);
+struct RelationChoice(ArtifactRelation);
-impl std::fmt::Display for RelationChoice {
+impl std::fmt::Display for RelationChoice {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        write!(f, "{:?}", self.0)
+        write!(f, "{:?}", self.0)
-    }
+    }
-}
+}

crates/oa-desktop/src/semantic_review/attachments_view.rs

@@ -1,79 +1,79 @@
-//! Explicit attachment pair and final destination field controls.
+//! Explicit attachment pair and final destination field controls.
-use super::{
+use super::{
-    attachments::{Editor, Event, Family},
+    attachments::{Editor, Event, Family},
-    *,
+    *,
-};
+};
-use iced::{
+use iced::{
-    Element as View, Fill,
+    Element as View, Fill,
-    widget::{button, column, pick_list, row, text, text_input},
+    widget::{button, column, pick_list, row, text, text_input},
-};
+};
-
+
-pub(super) fn pairs<'a>(
+pub(super) fn pairs<'a>(
-    editor: &'a Editor,
+    editor: &'a Editor,
-    project: &'a Project,
+    project: &'a Project,
-    trace: &'a Trace,
+    trace: &'a Trace,
-) -> View<'a, Event> {
+) -> View<'a, Event> {
-    let mut content = column![
+    let mut content = column![
-        text("Existing children and relationship endpoints").size(16),
+        text("Existing children and relationship endpoints").size(16),
-        text("Choose explicit Operational and System identities. A child's final parent or a relationship's final endpoint is reviewed independently; opening another trace keeps this draft.").size(12),
+        text("Choose explicit Operational and System identities. A child's final parent or a relationship's final endpoint is reviewed independently; opening another trace keeps this draft.").size(12),
-        pick_list([Family::Child, Family::Source, Family::Target], Some(editor.family), Event::Family).text_size(12).padding(7).width(Fill),
+        pick_list([Family::Child, Family::Source, Family::Target], Some(editor.family), Event::Family).text_size(12).padding(7).width(Fill),
-        text_input("Filter attachment identities by name or alias", &editor.search).on_input(Event::Search).size(12).padding(7),
+        text_input("Filter attachment identities by name or alias", &editor.search).on_input(Event::Search).size(12).padding(7),
-    ].spacing(9);
+    ].spacing(9);
-    for layer in [Layer::Oa, Layer::Sa] {
+    for layer in [Layer::Oa, Layer::Sa] {
-        let label = if layer == Layer::Oa {
+        let label = if layer == Layer::Oa {
-            "Operational"
+            "Operational"
-        } else {
+        } else {
-            "System"
+            "System"
-        };
+        };
-        let owner = if layer == Layer::Oa {
+        let owner = if layer == Layer::Oa {
-            trace.oa
+            trace.oa
-        } else {
+        } else {
-            trace.sa
+            trace.sa
-        };
+        };
-        content = content.push(text(format!("{label} owner: {}", project.named(owner))).size(12));
+        content = content.push(text(format!("{label} owner: {}", project.named(owner))).size(12));
-        content = content.push(
+        content = content.push(
-            row![
+            row![
-                pick_list(
+                pick_list(
-                    editor.choices(project, trace, layer),
+                    editor.choices(project, trace, layer),
-                    editor.selection(layer).cloned(),
+                    editor.selection(layer).cloned(),
-                    move |choice| Event::Pick(layer, Some(choice))
+                    move |choice| Event::Pick(layer, Some(choice))
-                )
+                )
-                .placeholder(format!("Choose an existing {label} identity"))
+                .placeholder(format!("Choose an existing {label} identity"))
-                .text_size(12)
+                .text_size(12)
-                .padding(7)
+                .padding(7)
-                .width(Fill),
+                .width(Fill),
-                button(text("No identity on this side").size(11))
+                button(text("No identity on this side").size(11))
-                    .style(crate::style::nav)
+                    .style(crate::style::nav)
-                    .padding(7)
+                    .padding(7)
-                    .on_press(Event::Pick(layer, None)),
+                    .on_press(Event::Pick(layer, None)),
-            ]
+            ]
-            .spacing(7),
+            .spacing(7),
-        );
+        );
-    }
+    }
-    content = content.push(
+    content = content.push(
-        button(text("Use exact attachment pair").size(12))
+        button(text("Use exact attachment pair").size(12))
-            .padding(8)
+            .padding(8)
-            .style(crate::style::nav)
+            .style(crate::style::nav)
-            .on_press(Event::Stage),
+            .on_press(Event::Stage),
-    );
+    );
-    content.push(text("Taking an absent relationship endpoint requires an explicit final replacement. New child and relationship creation uses a separate explicit transition mapping.").size(11)).padding(iced::Padding::default().right(18)).into()
+    content.push(text("Taking an absent relationship endpoint requires an explicit final replacement. New child and relationship creation uses a separate explicit transition mapping.").size(11)).padding(iced::Padding::default().right(18)).into()
-}
+}
-
+
-pub(super) fn candidate<'a>(
+pub(super) fn candidate<'a>(
-    editor: &'a Editor,
+    editor: &'a Editor,
-    project: &'a Project,
+    project: &'a Project,
-    facet: &'a FacetSelector,
+    facet: &'a FacetSelector,
-    layer: Layer,
+    layer: Layer,
-) -> Option<View<'a, Message>> {
+) -> Option<View<'a, Message>> {
-    let draft = editor.drafts.get(facet)?;
+    let draft = editor.drafts.get(facet)?;
-    let (id, _) = attachments::actual_slot(facet, layer)?;
+    let (id, _) = attachments::actual_slot(facet, layer)?;
-    let path = attachments::path(project, facet, layer)?;
+    let path = attachments::path(project, facet, layer)?;
-    Some(
+    Some(
-        column![
+        column![
-            text(format!("Destination record: {}", project.named(id))).size(12),
+            text(format!("Destination record: {}", project.named(id))).size(12),
-            crate::forms::scoped(draft, project, &path, attachments::label(facet)),
+            crate::forms::scoped(draft, project, &path, attachments::label(facet)),
-        ]
+        ]
-        .spacing(7)
+        .spacing(7)
-        .into(),
+        .into(),
-    )
+    )
-}
+}

crates/oa-desktop/src/semantic_review/keyed.rs

@@ -1,350 +1,350 @@
-//! Closed presence-only adapter. The core independently validates the full final record.
+//! Closed presence-only adapter. The core independently validates the full final record.
-use super::*;
+use super::*;
-
+
-#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, serde::Deserialize)]
+#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, serde::Deserialize)]
-pub enum Family {
+pub enum Family {
-    Member(ReferenceCollection),
+    Member(ReferenceCollection),
-    Literal,
+    Literal,
-    Annotation,
+    Annotation,
-    Binding,
+    Binding,
-}
+}
-impl std::fmt::Display for Family {
+impl std::fmt::Display for Family {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
+    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str(match self {
+        f.write_str(match self {
-            Self::Member(ReferenceCollection::FunctionInputItems) => "Function input items",
+            Self::Member(ReferenceCollection::FunctionInputItems) => "Function input items",
-            Self::Member(ReferenceCollection::FunctionOutputItems) => "Function output items",
+            Self::Member(ReferenceCollection::FunctionOutputItems) => "Function output items",
-            Self::Member(ReferenceCollection::SignalItems) => "Signal items",
+            Self::Member(ReferenceCollection::SignalItems) => "Signal items",
-            Self::Member(ReferenceCollection::CategoryExchanges) => "Category exchanges",
+            Self::Member(ReferenceCollection::CategoryExchanges) => "Category exchanges",
-            Self::Member(ReferenceCollection::ExchangeItems) => "Exchange items",
+            Self::Member(ReferenceCollection::ExchangeItems) => "Exchange items",
-            Self::Member(ReferenceCollection::TransitionTriggers) => "Transition triggers",
+            Self::Member(ReferenceCollection::TransitionTriggers) => "Transition triggers",
-            Self::Member(ReferenceCollection::TransitionEffects) => "Transition effects",
+            Self::Member(ReferenceCollection::TransitionEffects) => "Transition effects",
-            Self::Member(ReferenceCollection::Constrained) => "Constrained identities",
+            Self::Member(ReferenceCollection::Constrained) => "Constrained identities",
-            Self::Member(ReferenceCollection::Steps) => "Ordered steps",
+            Self::Member(ReferenceCollection::Steps) => "Ordered steps",
-            Self::Member(ReferenceCollection::FragmentBranches) => "Fragment branches",
+            Self::Member(ReferenceCollection::FragmentBranches) => "Fragment branches",
-            Self::Literal => "Enumeration literals",
+            Self::Literal => "Enumeration literals",
-            Self::Annotation => "Message values",
+            Self::Annotation => "Message values",
-            Self::Binding => "Scenario lifeline bindings",
+            Self::Binding => "Scenario lifeline bindings",
-        })
+        })
-    }
+    }
-}
+}
-pub(super) const FAMILIES: [Family; 13] = [
+pub(super) const FAMILIES: [Family; 13] = [
-    Family::Member(ReferenceCollection::Steps),
+    Family::Member(ReferenceCollection::Steps),
-    Family::Member(ReferenceCollection::FragmentBranches),
+    Family::Member(ReferenceCollection::FragmentBranches),
-    Family::Member(ReferenceCollection::FunctionInputItems),
+    Family::Member(ReferenceCollection::FunctionInputItems),
-    Family::Member(ReferenceCollection::FunctionOutputItems),
+    Family::Member(ReferenceCollection::FunctionOutputItems),
-    Family::Member(ReferenceCollection::SignalItems),
+    Family::Member(ReferenceCollection::SignalItems),
-    Family::Member(ReferenceCollection::ExchangeItems),
+    Family::Member(ReferenceCollection::ExchangeItems),
-    Family::Member(ReferenceCollection::CategoryExchanges),
+    Family::Member(ReferenceCollection::CategoryExchanges),
-    Family::Member(ReferenceCollection::TransitionTriggers),
+    Family::Member(ReferenceCollection::TransitionTriggers),
-    Family::Member(ReferenceCollection::TransitionEffects),
+    Family::Member(ReferenceCollection::TransitionEffects),
-    Family::Member(ReferenceCollection::Constrained),
+    Family::Member(ReferenceCollection::Constrained),
-    Family::Literal,
+    Family::Literal,
-    Family::Annotation,
+    Family::Annotation,
-    Family::Binding,
+    Family::Binding,
-];
+];
-pub(super) fn family(facet: &FacetSelector) -> Option<Family> {
+pub(super) fn family(facet: &FacetSelector) -> Option<Family> {
-    let family = match facet {
+    let family = match facet {
-        FacetSelector::Member { collection, .. } => Family::Member(*collection),
+        FacetSelector::Member { collection, .. } => Family::Member(*collection),
-        FacetSelector::Literal(_) => Family::Literal,
+        FacetSelector::Literal(_) => Family::Literal,
-        FacetSelector::Annotation(_) => Family::Annotation,
+        FacetSelector::Annotation(_) => Family::Annotation,
-        FacetSelector::Binding(_) => Family::Binding,
+        FacetSelector::Binding(_) => Family::Binding,
-        _ => return None,
+        _ => return None,
-    };
+    };
-    FAMILIES.contains(&family).then_some(family)
+    FAMILIES.contains(&family).then_some(family)
-}
+}
-pub(super) fn supported(facet: &FacetSelector) -> bool {
+pub(super) fn supported(facet: &FacetSelector) -> bool {
-    family(facet).is_some()
+    family(facet).is_some()
-}
+}
-
+
-// Fixed paths for the closed collections and the exact enum literal set.
+// Fixed paths for the closed collections and the exact enum literal set.
-// They are selected by the typed facet; callers cannot supply arbitrary paths.
+// They are selected by the typed facet; callers cannot supply arbitrary paths.
-pub(super) fn path(value: &Value, family: Family) -> Option<String> {
+pub(super) fn path(value: &Value, family: Family) -> Option<String> {
-    let prefixes = ["/body/Oa/Shared", "/body/Sa/Shared"];
+    let prefixes = ["/body/Oa/Shared", "/body/Sa/Shared"];
-    let tails: &[&str] = match family {
+    let tails: &[&str] = match family {
-        Family::Member(ReferenceCollection::Steps) => {
+        Family::Member(ReferenceCollection::Steps) => {
-            return [
+            return [
-                "/body/Oa/Process/steps",
+                "/body/Oa/Process/steps",
-                "/body/Sa/FunctionalChain/steps",
+                "/body/Sa/FunctionalChain/steps",
-                "/body/Oa/Shared/Scenario/steps",
+                "/body/Oa/Shared/Scenario/steps",
-                "/body/Sa/Shared/Scenario/steps",
+                "/body/Sa/Shared/Scenario/steps",
-                "/body/Oa/Shared/Occurrence/body/Branch/occurrences",
+                "/body/Oa/Shared/Occurrence/body/Branch/occurrences",
-                "/body/Sa/Shared/Occurrence/body/Branch/occurrences",
+                "/body/Sa/Shared/Occurrence/body/Branch/occurrences",
-            ]
+            ]
-            .into_iter()
+            .into_iter()
-            .find(|p| value.pointer(p).is_some_and(Value::is_array))
+            .find(|p| value.pointer(p).is_some_and(Value::is_array))
-            .map(str::to_owned);
+            .map(str::to_owned);
-        }
+        }
-        Family::Member(ReferenceCollection::FragmentBranches) => {
+        Family::Member(ReferenceCollection::FragmentBranches) => {
-            &["Occurrence/body/Fragment/branches"]
+            &["Occurrence/body/Fragment/branches"]
-        }
+        }
-        Family::Member(ReferenceCollection::FunctionInputItems) => {
+        Family::Member(ReferenceCollection::FunctionInputItems) => {
-            &["Port/contract/FunctionInput/incoming_items"]
+            &["Port/contract/FunctionInput/incoming_items"]
-        }
+        }
-        Family::Member(ReferenceCollection::FunctionOutputItems) => {
+        Family::Member(ReferenceCollection::FunctionOutputItems) => {
-            &["Port/contract/FunctionOutput/outgoing_items"]
+            &["Port/contract/FunctionOutput/outgoing_items"]
-        }
+        }
-        Family::Member(ReferenceCollection::CategoryExchanges) => &["ExchangeCategory/exchanges"],
+        Family::Member(ReferenceCollection::CategoryExchanges) => &["ExchangeCategory/exchanges"],
-        Family::Member(ReferenceCollection::SignalItems) => &["Event/body/Signal/items"],
+        Family::Member(ReferenceCollection::SignalItems) => &["Event/body/Signal/items"],
-        Family::Member(ReferenceCollection::Constrained) => &["Constraint/constrained"],
+        Family::Member(ReferenceCollection::Constrained) => &["Constraint/constrained"],
-        Family::Literal => &["DataType/definition/Enumeration/literals"],
+        Family::Literal => &["DataType/definition/Enumeration/literals"],
-        Family::Annotation => &["Occurrence/body/Exchange/values"],
+        Family::Annotation => &["Occurrence/body/Exchange/values"],
-        Family::Binding => &["Occurrence/body/ScenarioUse/bindings"],
+        Family::Binding => &["Occurrence/body/ScenarioUse/bindings"],
-        Family::Member(ReferenceCollection::ExchangeItems) => {
+        Family::Member(ReferenceCollection::ExchangeItems) => {
-            return [
+            return [
-                "Interaction",
+                "Interaction",
-                "FunctionalExchange",
+                "FunctionalExchange",
-                "BoundaryExchange",
+                "BoundaryExchange",
-                "CommunicationMean",
+                "CommunicationMean",
-            ]
+            ]
-            .iter()
+            .iter()
-            .map(|kind| format!("/body/{kind}/items"))
+            .map(|kind| format!("/body/{kind}/items"))
-            .find(|p| value.pointer(p).is_some_and(Value::is_array));
+            .find(|p| value.pointer(p).is_some_and(Value::is_array));
-        }
+        }
-        Family::Member(ReferenceCollection::TransitionTriggers) => {
+        Family::Member(ReferenceCollection::TransitionTriggers) => {
-            return value
+            return value
-                .pointer("/body/StateTransition/triggers")
+                .pointer("/body/StateTransition/triggers")
-                .is_some_and(Value::is_array)
+                .is_some_and(Value::is_array)
-                .then(|| "/body/StateTransition/triggers".into());
+                .then(|| "/body/StateTransition/triggers".into());
-        }
+        }
-        Family::Member(ReferenceCollection::TransitionEffects) => {
+        Family::Member(ReferenceCollection::TransitionEffects) => {
-            return value
+            return value
-                .pointer("/body/StateTransition/effects")
+                .pointer("/body/StateTransition/effects")
-                .is_some_and(Value::is_array)
+                .is_some_and(Value::is_array)
-                .then(|| "/body/StateTransition/effects".into());
+                .then(|| "/body/StateTransition/effects".into());
-        }
+        }
-    };
+    };
-    prefixes
+    prefixes
-        .iter()
+        .iter()
-        .flat_map(|prefix| tails.iter().map(move |tail| format!("{prefix}/{tail}")))
+        .flat_map(|prefix| tails.iter().map(move |tail| format!("{prefix}/{tail}")))
-        .find(|p| value.pointer(p).is_some_and(Value::is_array))
+        .find(|p| value.pointer(p).is_some_and(Value::is_array))
-}
+}
-pub(super) fn key(facet: &FacetSelector, layer: Layer) -> Option<Value> {
+pub(super) fn key(facet: &FacetSelector, layer: Layer) -> Option<Value> {
-    match facet {
+    match facet {
-        FacetSelector::Member { keys, .. } => if layer == Layer::Oa { keys.oa } else { keys.sa }
+        FacetSelector::Member { keys, .. } => if layer == Layer::Oa { keys.oa } else { keys.sa }
-            .map(|id| serde_json::to_value(id).expect("Id")),
+            .map(|id| serde_json::to_value(id).expect("Id")),
-        FacetSelector::Literal(keys) => if layer == Layer::Oa {
+        FacetSelector::Literal(keys) => if layer == Layer::Oa {
-            keys.oa.as_ref()
+            keys.oa.as_ref()
-        } else {
+        } else {
-            keys.sa.as_ref()
+            keys.sa.as_ref()
-        }
+        }
-        .map(|v| Value::String(v.clone())),
+        .map(|v| Value::String(v.clone())),
-        FacetSelector::Annotation(keys) => if layer == Layer::Oa {
+        FacetSelector::Annotation(keys) => if layer == Layer::Oa {
-            keys.oa.as_ref()
+            keys.oa.as_ref()
-        } else {
+        } else {
-            keys.sa.as_ref()
+            keys.sa.as_ref()
-        }
+        }
-        .map(|key| serde_json::to_value(key).expect("Annotation key")),
+        .map(|key| serde_json::to_value(key).expect("Annotation key")),
-        FacetSelector::Binding(keys) => if layer == Layer::Oa { keys.oa } else { keys.sa }
+        FacetSelector::Binding(keys) => if layer == Layer::Oa { keys.oa } else { keys.sa }
-            .map(|id| serde_json::to_value(id).expect("Binding key")),
+            .map(|id| serde_json::to_value(id).expect("Binding key")),
-        _ => None,
+        _ => None,
-    }
+    }
-}
+}
-pub(super) fn overlap(a: &FacetSelector, b: &FacetSelector) -> bool {
+pub(super) fn overlap(a: &FacetSelector, b: &FacetSelector) -> bool {
-    if family(a).is_none() || family(a) != family(b) {
+    if family(a).is_none() || family(a) != family(b) {
-        return false;
+        return false;
-    }
+    }
-    [Layer::Oa, Layer::Sa]
+    [Layer::Oa, Layer::Sa]
-        .into_iter()
+        .into_iter()
-        .any(|layer| key(a, layer).is_some() && key(a, layer) == key(b, layer))
+        .any(|layer| key(a, layer).is_some() && key(a, layer) == key(b, layer))
-}
+}
-pub(super) fn project_presence(
+pub(super) fn project_presence(
-    value: &mut Value,
+    value: &mut Value,
-    facet: &FacetSelector,
+    facet: &FacetSelector,
-    layer: Layer,
+    layer: Layer,
-    present: bool,
+    present: bool,
-) -> Result<(), String> {
+) -> Result<(), String> {
-    let family = family(facet).ok_or("This keyed family remains read-only.")?;
+    let family = family(facet).ok_or("This keyed family remains read-only.")?;
-    let key = key(facet, layer)
+    let key = key(facet, layer)
-        .ok_or("Choose the destination identity in Members before setting or taking presence.")?;
+        .ok_or("Choose the destination identity in Members before setting or taking presence.")?;
-    let path =
+    let path =
-        path(value, family).ok_or("This collection is not applicable to the destination kind.")?;
+        path(value, family).ok_or("This collection is not applicable to the destination kind.")?;
-    let list = value
+    let list = value
-        .pointer_mut(&path)
+        .pointer_mut(&path)
-        .and_then(Value::as_array_mut)
+        .and_then(Value::as_array_mut)
-        .ok_or("Destination collection is unavailable.")?;
+        .ok_or("Destination collection is unavailable.")?;
-    if present {
+    if present {
-        if !list.contains(&key) {
+        if !list.contains(&key) {
-            list.push(key);
+            list.push(key);
-        }
+        }
-    } else {
+    } else {
-        list.retain(|v| v != &key);
+        list.retain(|v| v != &key);
-    }
+    }
-    Ok(())
+    Ok(())
-}
+}
-
+
-impl ReviewRow {
+impl ReviewRow {
-    pub(super) fn keyed_value(
+    pub(super) fn keyed_value(
-        &self,
+        &self,
-        project: &Project,
+        project: &Project,
-        trace: &Trace,
+        trace: &Trace,
-        value: &mut Value,
+        value: &mut Value,
-        facet: &FacetSelector,
+        facet: &FacetSelector,
-        decision: SemanticDecision,
+        decision: SemanticDecision,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        if keyed_rows::supported(facet) {
+        if keyed_rows::supported(facet) {
-            return self.project_row(project, trace, value, facet, decision);
+            return self.project_row(project, trace, value, facet, decision);
-        }
+        }
-        let present = match decision {
+        let present = match decision {
-            SemanticDecision::KeepTarget => return Ok(()),
+            SemanticDecision::KeepTarget => return Ok(()),
-            SemanticDecision::TakeSource => {
+            SemanticDecision::TakeSource => {
-                // A missing source identity is a target-local row, not a removal.
+                // A missing source identity is a target-local row, not a removal.
-                if key(facet, self.direction.source_layer()).is_none() {
+                if key(facet, self.direction.source_layer()).is_none() {
-                    return Ok(());
+                    return Ok(());
-                }
+                }
-                let fact = capture_facet(project, trace.oa, trace.sa, facet)?;
+                let fact = capture_facet(project, trace.oa, trace.sa, facet)?;
-                scalar::value(&fact, self.direction.source_layer()).and_then(|v| v.as_bool()).ok_or("Source collection is not applicable; choose an explicit final presence or Keep.")?
+                scalar::value(&fact, self.direction.source_layer()).and_then(|v| v.as_bool()).ok_or("Source collection is not applicable; choose an explicit final presence or Keep.")?
-            }
+            }
-            SemanticDecision::Candidate => *self
+            SemanticDecision::Candidate => *self
-                .presence
+                .presence
-                .get(facet)
+                .get(facet)
-                .ok_or("Choose final membership presence.")?,
+                .ok_or("Choose final membership presence.")?,
-        };
+        };
-        project_presence(value, facet, self.direction.target_layer(), present)
+        project_presence(value, facet, self.direction.target_layer(), present)
-    }
+    }
-
+
-    pub(super) fn member_families(&self, project: &Project) -> Vec<Family> {
+    pub(super) fn member_families(&self, project: &Project) -> Vec<Family> {
-        let Some(trace) = self.effective_trace(project) else {
+        let Some(trace) = self.effective_trace(project) else {
-            return vec![];
+            return vec![];
-        };
+        };
-        let values: Vec<_> = [trace.oa, trace.sa]
+        let values: Vec<_> = [trace.oa, trace.sa]
-            .into_iter()
+            .into_iter()
-            .filter_map(|id| Draft::from_project(project, id).map(|d| d.value))
+            .filter_map(|id| Draft::from_project(project, id).map(|d| d.value))
-            .collect();
+            .collect();
-        FAMILIES
+        FAMILIES
-            .into_iter()
+            .into_iter()
-            .filter(|family| values.iter().any(|value| path(value, *family).is_some()))
+            .filter(|family| values.iter().any(|value| path(value, *family).is_some()))
-            .collect()
+            .collect()
-    }
+    }
-
+
-    pub(super) fn member_choices(&self, project: &Project, layer: Layer) -> Vec<Choice> {
+    pub(super) fn member_choices(&self, project: &Project, layer: Layer) -> Vec<Choice> {
-        if self.member_family == Family::Binding {
+        if self.member_family == Family::Binding {
-            return self.binding_choices(project, layer, true);
+            return self.binding_choices(project, layer, true);
-        }
+        }
-        let Some(trace) = self.effective_trace(project) else {
+        let Some(trace) = self.effective_trace(project) else {
-            return vec![];
+            return vec![];
-        };
+        };
-        let id = if layer == Layer::Oa {
+        let id = if layer == Layer::Oa {
-            trace.oa
+            trace.oa
-        } else {
+        } else {
-            trace.sa
+            trace.sa
-        };
+        };
-        let Some(mut draft) = Draft::from_project(project, id) else {
+        let Some(mut draft) = Draft::from_project(project, id) else {
-            return vec![];
+            return vec![];
-        };
+        };
-        if layer == self.direction.target_layer() {
+        if layer == self.direction.target_layer() {
-            draft.set_context(self.combined_value(project, true).ok());
+            draft.set_context(self.combined_value(project, true).ok());
-        }
+        }
-        let selected = if layer == Layer::Oa {
+        let selected = if layer == Layer::Oa {
-            &self.member_oa
+            &self.member_oa
-        } else {
+        } else {
-            &self.member_sa
+            &self.member_sa
-        };
+        };
-        let Some(path) = path(&draft.context_value(), self.member_family) else {
+        let Some(path) = path(&draft.context_value(), self.member_family) else {
-            return selected.iter().cloned().collect();
+            return selected.iter().cloned().collect();
-        };
+        };
-        crate::forms::reference_choices(
+        crate::forms::reference_choices(
-            &draft,
+            &draft,
-            project,
+            project,
-            &format!("{path}/0"),
+            &format!("{path}/0"),
-            selected.as_ref().map_or(Id::nil(), |c| c.id),
+            selected.as_ref().map_or(Id::nil(), |c| c.id),
-        )
+        )
-        .into_iter()
+        .into_iter()
-        .filter(|c| !c.id.is_nil())
+        .filter(|c| !c.id.is_nil())
-        .collect()
+        .collect()
-    }
+    }
-
+
-    pub(super) fn edit_pair(
+    pub(super) fn edit_pair(
-        &mut self,
+        &mut self,
-        project: &Project,
+        project: &Project,
-        facet: FacetSelector,
+        facet: FacetSelector,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        self.member_family = family(&facet).ok_or("This keyed family remains read-only.")?;
+        self.member_family = family(&facet).ok_or("This keyed family remains read-only.")?;
-        match facet {
+        match facet {
-            FacetSelector::Annotation(keys) => {
+            FacetSelector::Annotation(keys) => {
-                self.annotation_oa.selected = keys.oa.map(|key| crate::data_values::FieldPathKey {
+                self.annotation_oa.selected = keys.oa.map(|key| crate::data_values::FieldPathKey {
-                    path: key.path,
+                    path: key.path,
-                    field: key.field,
+                    field: key.field,
-                });
+                });
-                self.annotation_sa.selected = keys.sa.map(|key| crate::data_values::FieldPathKey {
+                self.annotation_sa.selected = keys.sa.map(|key| crate::data_values::FieldPathKey {
-                    path: key.path,
+                    path: key.path,
-                    field: key.field,
+                    field: key.field,
-                });
+                });
-            }
+            }
-            FacetSelector::Binding(keys) => {
+            FacetSelector::Binding(keys) => {
-                self.member_oa = keys.oa.map(|id| view::choice(project, id));
+                self.member_oa = keys.oa.map(|id| view::choice(project, id));
-                self.member_sa = keys.sa.map(|id| view::choice(project, id));
+                self.member_sa = keys.sa.map(|id| view::choice(project, id));
-            }
+            }
-            FacetSelector::Member { keys, .. } => {
+            FacetSelector::Member { keys, .. } => {
-                self.member_oa = keys.oa.map(|id| view::choice(project, id));
+                self.member_oa = keys.oa.map(|id| view::choice(project, id));
-                self.member_sa = keys.sa.map(|id| view::choice(project, id));
+                self.member_sa = keys.sa.map(|id| view::choice(project, id));
-            }
+            }
-            FacetSelector::Literal(keys) => {
+            FacetSelector::Literal(keys) => {
-                self.literal_oa = keys.oa.is_some();
+                self.literal_oa = keys.oa.is_some();
-                self.literal_sa = keys.sa.is_some();
+                self.literal_sa = keys.sa.is_some();
-                self.literal = keys.oa.or(keys.sa).unwrap_or_default();
+                self.literal = keys.oa.or(keys.sa).unwrap_or_default();
-            }
+            }
-            _ => unreachable!(),
+            _ => unreachable!(),
-        }
+        }
-        self.tab = Tab::Members;
+        self.tab = Tab::Members;
-        Ok(())
+        Ok(())
-    }
+    }
-
+
-    pub(super) fn stage_member(&mut self, project: &Project) -> Result<(), String> {
+    pub(super) fn stage_member(&mut self, project: &Project) -> Result<(), String> {
-        if !FAMILIES.contains(&self.member_family) {
+        if !FAMILIES.contains(&self.member_family) {
-            return Err("This keyed family remains read-only.".into());
+            return Err("This keyed family remains read-only.".into());
-        }
+        }
-        let facet = match self.member_family {
+        let facet = match self.member_family {
-            Family::Member(collection) => FacetSelector::Member {
+            Family::Member(collection) => FacetSelector::Member {
-                collection,
+                collection,
-                keys: KeyPair {
+                keys: KeyPair {
-                    oa: self.member_oa.as_ref().map(|c| c.id),
+                    oa: self.member_oa.as_ref().map(|c| c.id),
-                    sa: self.member_sa.as_ref().map(|c| c.id),
+                    sa: self.member_sa.as_ref().map(|c| c.id),
-                },
+                },
-            },
+            },
-            Family::Literal => FacetSelector::Literal(KeyPair {
+            Family::Literal => FacetSelector::Literal(KeyPair {
-                oa: self.literal_oa.then(|| self.literal.clone()),
+                oa: self.literal_oa.then(|| self.literal.clone()),
-                sa: self.literal_sa.then(|| self.literal.clone()),
+                sa: self.literal_sa.then(|| self.literal.clone()),
-            }),
+            }),
-            Family::Annotation => FacetSelector::Annotation(KeyPair {
+            Family::Annotation => FacetSelector::Annotation(KeyPair {
-                oa: self
+                oa: self
-                    .annotation_oa
+                    .annotation_oa
-                    .selected
+                    .selected
-                    .as_ref()
+                    .as_ref()
-                    .map(|key| AnnotationKey {
+                    .map(|key| AnnotationKey {
-                        path: key.path.clone(),
+                        path: key.path.clone(),
-                        field: key.field,
+                        field: key.field,
-                    }),
+                    }),
-                sa: self
+                sa: self
-                    .annotation_sa
+                    .annotation_sa
-                    .selected
+                    .selected
-                    .as_ref()
+                    .as_ref()
-                    .map(|key| AnnotationKey {
+                    .map(|key| AnnotationKey {
-                        path: key.path.clone(),
+                        path: key.path.clone(),
-                        field: key.field,
+                        field: key.field,
-                    }),
+                    }),
-            }),
+            }),
-            Family::Binding => FacetSelector::Binding(KeyPair {
+            Family::Binding => FacetSelector::Binding(KeyPair {
-                oa: self.member_oa.as_ref().map(|c| c.id),
+                oa: self.member_oa.as_ref().map(|c| c.id),
-                sa: self.member_sa.as_ref().map(|c| c.id),
+                sa: self.member_sa.as_ref().map(|c| c.id),
-            }),
+            }),
-        };
+        };
-        let trace = self.effective_trace(project).ok_or("Choose a trace.")?;
+        let trace = self.effective_trace(project).ok_or("Choose a trace.")?;
-        capture_facet(project, trace.oa, trace.sa, &facet)?;
+        capture_facet(project, trace.oa, trace.sa, &facet)?;
-        self.stage_row_references(&facet)?;
+        self.stage_row_references(&facet)?;
-        if let FacetSelector::Member {
+        if let FacetSelector::Member {
-            keys:
+            keys:
-                KeyPair {
+                KeyPair {
-                    oa: Some(oa),
+                    oa: Some(oa),
-                    sa: Some(sa),
+                    sa: Some(sa),
-                },
+                },
-            ..
+            ..
-        } = &facet
+        } = &facet
-        {
+        {
-            self.references.insert(*oa, *sa);
+            self.references.insert(*oa, *sa);
-        }
+        }
-        self.staged.insert(facet.clone());
+        self.staged.insert(facet.clone());
-        self.selected = Some(facet);
+        self.selected = Some(facet);
-        self.tab = Tab::Facts;
+        self.tab = Tab::Facts;
-        Ok(())
+        Ok(())
-    }
+    }
-}
+}

crates/oa-desktop/src/semantic_review/keyed_rows.rs

@@ -1,345 +1,345 @@
-//! Atomic message-value and lifeline-binding rows with exact, immutable keys.
+//! Atomic message-value and lifeline-binding rows with exact, immutable keys.
-use super::*;
+use super::*;
-use crate::data_values::{FieldPathChoice, FieldPathKey};
+use crate::data_values::{FieldPathChoice, FieldPathKey};
-
+
-#[derive(Default)]
+#[derive(Default)]
-pub struct AddressDraft {
+pub struct AddressDraft {
-    pub selected: Option<FieldPathKey>,
+    pub selected: Option<FieldPathKey>,
-    pub scope: Option<FieldPathKey>,
+    pub scope: Option<FieldPathKey>,
-    pub page: usize,
+    pub page: usize,
-}
+}
-
+
-#[derive(Default)]
+#[derive(Default)]
-pub struct RowDraft {
+pub struct RowDraft {
-    pub expression: String,
+    pub expression: String,
-    pub editor: text_editor::Content,
+    pub editor: text_editor::Content,
-    pub local: Option<Choice>,
+    pub local: Option<Choice>,
-}
+}
-
+
-pub(super) fn supported(facet: &FacetSelector) -> bool {
+pub(super) fn supported(facet: &FacetSelector) -> bool {
-    matches!(
+    matches!(
-        facet,
+        facet,
-        FacetSelector::Annotation(_) | FacetSelector::Binding(_)
+        FacetSelector::Annotation(_) | FacetSelector::Binding(_)
-    )
+    )
-}
+}
-
+
-pub(super) fn target_selector(facet: &FacetSelector, layer: Layer) -> FacetSelector {
+pub(super) fn target_selector(facet: &FacetSelector, layer: Layer) -> FacetSelector {
-    match facet {
+    match facet {
-        FacetSelector::Annotation(keys) => FacetSelector::Annotation(KeyPair {
+        FacetSelector::Annotation(keys) => FacetSelector::Annotation(KeyPair {
-            oa: (layer == Layer::Oa).then(|| keys.oa.clone()).flatten(),
+            oa: (layer == Layer::Oa).then(|| keys.oa.clone()).flatten(),
-            sa: (layer == Layer::Sa).then(|| keys.sa.clone()).flatten(),
+            sa: (layer == Layer::Sa).then(|| keys.sa.clone()).flatten(),
-        }),
+        }),
-        FacetSelector::Binding(keys) => FacetSelector::Binding(KeyPair {
+        FacetSelector::Binding(keys) => FacetSelector::Binding(KeyPair {
-            oa: if layer == Layer::Oa { keys.oa } else { None },
+            oa: if layer == Layer::Oa { keys.oa } else { None },
-            sa: if layer == Layer::Sa { keys.sa } else { None },
+            sa: if layer == Layer::Sa { keys.sa } else { None },
-        }),
+        }),
-        _ => facet.clone(),
+        _ => facet.clone(),
-    }
+    }
-}
+}
-
+
-impl ReviewRow {
+impl ReviewRow {
-    pub(super) fn annotation_address(&self, layer: Layer) -> &AddressDraft {
+    pub(super) fn annotation_address(&self, layer: Layer) -> &AddressDraft {
-        if layer == Layer::Oa {
+        if layer == Layer::Oa {
-            &self.annotation_oa
+            &self.annotation_oa
-        } else {
+        } else {
-            &self.annotation_sa
+            &self.annotation_sa
-        }
+        }
-    }
+    }
-
+
-    pub(super) fn annotation_address_mut(&mut self, layer: Layer) -> &mut AddressDraft {
+    pub(super) fn annotation_address_mut(&mut self, layer: Layer) -> &mut AddressDraft {
-        if layer == Layer::Oa {
+        if layer == Layer::Oa {
-            &mut self.annotation_oa
+            &mut self.annotation_oa
-        } else {
+        } else {
-            &mut self.annotation_sa
+            &mut self.annotation_sa
-        }
+        }
-    }
+    }
-
+
-    fn row_owner(&self, project: &Project, layer: Layer) -> Option<Element> {
+    fn row_owner(&self, project: &Project, layer: Layer) -> Option<Element> {
-        let trace = self.effective_trace(project)?;
+        let trace = self.effective_trace(project)?;
-        let id = if layer == Layer::Oa {
+        let id = if layer == Layer::Oa {
-            trace.oa
+            trace.oa
-        } else {
+        } else {
-            trace.sa
+            trace.sa
-        };
+        };
-        if layer == self.direction.target_layer()
+        if layer == self.direction.target_layer()
-            && let Ok(value) = self.combined_value(project, true)
+            && let Ok(value) = self.combined_value(project, true)
-            && let Ok(element) = serde_json::from_value(value)
+            && let Ok(element) = serde_json::from_value(value)
-        {
+        {
-            return Some(element);
+            return Some(element);
-        }
+        }
-        project.elements.get(&id).cloned()
+        project.elements.get(&id).cloned()
-    }
+    }
-
+
-    pub(super) fn annotation_choices(
+    pub(super) fn annotation_choices(
-        &self,
+        &self,
-        project: &Project,
+        project: &Project,
-        layer: Layer,
+        layer: Layer,
-    ) -> Result<Vec<FieldPathChoice>, String> {
+    ) -> Result<Vec<FieldPathChoice>, String> {
-        let element = self.row_owner(project, layer).ok_or("Choose a trace.")?;
+        let element = self.row_owner(project, layer).ok_or("Choose a trace.")?;
-        let Some(SharedBody::Occurrence {
+        let Some(SharedBody::Occurrence {
-            body:
+            body:
-                OccurrenceBody::Exchange {
+                OccurrenceBody::Exchange {
-                    exchange: Some(exchange),
+                    exchange: Some(exchange),
-                    message_kind,
+                    message_kind,
-                    ..
+                    ..
-                },
+                },
-            ..
+            ..
-        }) = element.shared()
+        }) = element.shared()
-        else {
+        else {
-            return Err(
+            return Err(
-                "Choose an exchange on this message before selecting a carried field.".into(),
+                "Choose an exchange on this message before selecting a carried field.".into(),
-            );
+            );
-        };
+        };
-        let exchange = project
+        let exchange = project
-            .relations
+            .relations
-            .get(exchange)
+            .get(exchange)
-            .ok_or("The message exchange is unavailable.")?;
+            .ok_or("The message exchange is unavailable.")?;
-        crate::data_values::at_scope(
+        crate::data_values::at_scope(
-            project,
+            project,
-            exchange,
+            exchange,
-            message_kind,
+            message_kind,
-            self.annotation_address(layer).scope.as_ref(),
+            self.annotation_address(layer).scope.as_ref(),
-        )
+        )
-    }
+    }
-
+
-    pub(super) fn binding_choices(
+    pub(super) fn binding_choices(
-        &self,
+        &self,
-        project: &Project,
+        project: &Project,
-        layer: Layer,
+        layer: Layer,
-        referenced: bool,
+        referenced: bool,
-    ) -> Vec<Choice> {
+    ) -> Vec<Choice> {
-        let Some(element) = self.row_owner(project, layer) else {
+        let Some(element) = self.row_owner(project, layer) else {
-            return vec![];
+            return vec![];
-        };
+        };
-        let scenario = if referenced {
+        let scenario = if referenced {
-            match element.shared() {
+            match element.shared() {
-                Some(SharedBody::Occurrence {
+                Some(SharedBody::Occurrence {
-                    body: OccurrenceBody::ScenarioUse { scenario, .. },
+                    body: OccurrenceBody::ScenarioUse { scenario, .. },
-                    ..
+                    ..
-                }) => *scenario,
+                }) => *scenario,
-                _ => None,
+                _ => None,
-            }
+            }
-        } else {
+        } else {
-            element
+            element
-                .parent
+                .parent
-                .and_then(|parent| validation::ancestor_of_kind(project, parent, Kind::Scenario))
+                .and_then(|parent| validation::ancestor_of_kind(project, parent, Kind::Scenario))
-        };
+        };
-        let mut choices: Vec<_> = project
+        let mut choices: Vec<_> = project
-            .elements
+            .elements
-            .values()
+            .values()
-            .filter(|e| {
+            .filter(|e| {
-                e.kind() == Kind::Lifeline
+                e.kind() == Kind::Lifeline
-                    && e.layer() == layer
+                    && e.layer() == layer
-                    && scenario.is_some()
+                    && scenario.is_some()
-                    && e.parent == scenario
+                    && e.parent == scenario
-            })
+            })
-            .map(|e| view::choice(project, e.id))
+            .map(|e| view::choice(project, e.id))
-            .collect();
+            .collect();
-        choices.sort_by_cached_key(|c| c.label.to_lowercase());
+        choices.sort_by_cached_key(|c| c.label.to_lowercase());
-        choices
+        choices
-    }
+    }
-
+
-    pub(super) fn stage_row_references(&mut self, facet: &FacetSelector) -> Result<(), String> {
+    pub(super) fn stage_row_references(&mut self, facet: &FacetSelector) -> Result<(), String> {
-        let pairs: Vec<_> = match facet {
+        let pairs: Vec<_> = match facet {
-            FacetSelector::Annotation(KeyPair {
+            FacetSelector::Annotation(KeyPair {
-                oa: Some(oa),
+                oa: Some(oa),
-                sa: Some(sa),
+                sa: Some(sa),
-            }) => {
+            }) => {
-                if oa.path.len() != sa.path.len() {
+                if oa.path.len() != sa.path.len() {
-                    return Err("Paired annotation paths must have the same depth; review distinct addresses separately.".into());
+                    return Err("Paired annotation paths must have the same depth; review distinct addresses separately.".into());
-                }
+                }
-                oa.path
+                oa.path
-                    .iter()
+                    .iter()
-                    .chain(std::iter::once(&oa.field))
+                    .chain(std::iter::once(&oa.field))
-                    .copied()
+                    .copied()
-                    .zip(sa.path.iter().chain(std::iter::once(&sa.field)).copied())
+                    .zip(sa.path.iter().chain(std::iter::once(&sa.field)).copied())
-                    .collect()
+                    .collect()
-            }
+            }
-            FacetSelector::Binding(KeyPair {
+            FacetSelector::Binding(KeyPair {
-                oa: Some(oa),
+                oa: Some(oa),
-                sa: Some(sa),
+                sa: Some(sa),
-            }) => vec![(*oa, *sa)],
+            }) => vec![(*oa, *sa)],
-            _ => vec![],
+            _ => vec![],
-        };
+        };
-        // A repeated recursive field may occur several times in one address.
+        // A repeated recursive field may occur several times in one address.
-        // Never let the last occurrence silently replace a conflicting pair.
+        // Never let the last occurrence silently replace a conflicting pair.
-        let mut supplied = BTreeMap::new();
+        let mut supplied = BTreeMap::new();
-        for (oa, sa) in pairs {
+        for (oa, sa) in pairs {
-            if supplied.insert(oa, sa).is_some_and(|prior| prior != sa) {
+            if supplied.insert(oa, sa).is_some_and(|prior| prior != sa) {
-                return Err(
+                return Err(
-                    "This address pairs the same Operational field with different System fields."
+                    "This address pairs the same Operational field with different System fields."
-                        .into(),
+                        .into(),
-                );
+                );
-            }
+            }
-        }
+        }
-        self.references.extend(supplied);
+        self.references.extend(supplied);
-        Ok(())
+        Ok(())
-    }
+    }
-
+
-    pub(super) fn initialize_row(&mut self, project: &Project, facet: &FacetSelector) {
+    pub(super) fn initialize_row(&mut self, project: &Project, facet: &FacetSelector) {
-        if self.row_drafts.contains_key(facet) {
+        if self.row_drafts.contains_key(facet) {
-            return;
+            return;
-        }
+        }
-        let value = self
+        let value = self
-            .effective_trace(project)
+            .effective_trace(project)
-            .and_then(|t| capture_facet(project, t.oa, t.sa, facet).ok())
+            .and_then(|t| capture_facet(project, t.oa, t.sa, facet).ok())
-            .and_then(|f| scalar::value(&f, self.direction.target_layer()));
+            .and_then(|f| scalar::value(&f, self.direction.target_layer()));
-        let present = value.as_ref().is_some_and(|v| !v.is_null());
+        let present = value.as_ref().is_some_and(|v| !v.is_null());
-        let mut draft = RowDraft::default();
+        let mut draft = RowDraft::default();
-        if let Some(value) = value {
+        if let Some(value) = value {
-            draft.expression = value["expression"].as_str().unwrap_or_default().into();
+            draft.expression = value["expression"].as_str().unwrap_or_default().into();
-            draft.editor = text_editor::Content::with_text(&draft.expression);
+            draft.editor = text_editor::Content::with_text(&draft.expression);
-            draft.local = value["local"]
+            draft.local = value["local"]
-                .as_str()
+                .as_str()
-                .and_then(|v| v.parse().ok())
+                .and_then(|v| v.parse().ok())
-                .map(|id| view::choice(project, id));
+                .map(|id| view::choice(project, id));
-        }
+        }
-        self.presence.entry(facet.clone()).or_insert(present);
+        self.presence.entry(facet.clone()).or_insert(present);
-        self.row_drafts.insert(facet.clone(), draft);
+        self.row_drafts.insert(facet.clone(), draft);
-    }
+    }
-
+
-    pub(super) fn edit_row(
+    pub(super) fn edit_row(
-        &mut self,
+        &mut self,
-        facet: &FacetSelector,
+        facet: &FacetSelector,
-        action: impl FnOnce(&mut RowDraft),
+        action: impl FnOnce(&mut RowDraft),
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        if !supported(facet)
+        if !supported(facet)
-            || self.selected.as_ref() != Some(facet)
+            || self.selected.as_ref() != Some(facet)
-            || self.decisions.get(facet) != Some(&SemanticDecision::Candidate)
+            || self.decisions.get(facet) != Some(&SemanticDecision::Candidate)
-        {
+        {
-            return Err("Select this row and choose Set final value before editing it.".into());
+            return Err("Select this row and choose Set final value before editing it.".into());
-        }
+        }
-        action(
+        action(
-            self.row_drafts
+            self.row_drafts
-                .get_mut(facet)
+                .get_mut(facet)
-                .ok_or("The row draft is unavailable.")?,
+                .ok_or("The row draft is unavailable.")?,
-        );
+        );
-        Ok(())
+        Ok(())
-    }
+    }
-
+
-    pub(super) fn project_row(
+    pub(super) fn project_row(
-        &self,
+        &self,
-        project: &Project,
+        project: &Project,
-        trace: &Trace,
+        trace: &Trace,
-        value: &mut Value,
+        value: &mut Value,
-        facet: &FacetSelector,
+        facet: &FacetSelector,
-        decision: SemanticDecision,
+        decision: SemanticDecision,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        if decision == SemanticDecision::KeepTarget {
+        if decision == SemanticDecision::KeepTarget {
-            return Ok(());
+            return Ok(());
-        }
+        }
-        let source_layer = self.direction.source_layer();
+        let source_layer = self.direction.source_layer();
-        let target_layer = self.direction.target_layer();
+        let target_layer = self.direction.target_layer();
-        if decision == SemanticDecision::TakeSource && keyed::key(facet, source_layer).is_none() {
+        if decision == SemanticDecision::TakeSource && keyed::key(facet, source_layer).is_none() {
-            return Ok(());
+            return Ok(());
-        }
+        }
-        let target_key = keyed::key(facet, target_layer)
+        let target_key = keyed::key(facet, target_layer)
-            .ok_or("Choose the destination row address before setting or taking its value.")?;
+            .ok_or("Choose the destination row address before setting or taking its value.")?;
-        let row = if decision == SemanticDecision::Candidate {
+        let row = if decision == SemanticDecision::Candidate {
-            if !self.presence.get(facet).copied().unwrap_or(false) {
+            if !self.presence.get(facet).copied().unwrap_or(false) {
-                Value::Null
+                Value::Null
-            } else {
+            } else {
-                let draft = self
+                let draft = self
-                    .row_drafts
+                    .row_drafts
-                    .get(facet)
+                    .get(facet)
-                    .ok_or("Set the final row value.")?;
+                    .ok_or("Set the final row value.")?;
-                match facet {
+                match facet {
-                    FacetSelector::Annotation(_) => {
+                    FacetSelector::Annotation(_) => {
-                        let key: AnnotationKey = serde_json::from_value(target_key.clone())
+                        let key: AnnotationKey = serde_json::from_value(target_key.clone())
-                            .map_err(|e| e.to_string())?;
+                            .map_err(|e| e.to_string())?;
-                        serde_json::to_value(MessageValue {
+                        serde_json::to_value(MessageValue {
-                            path: key.path,
+                            path: key.path,
-                            field: key.field,
+                            field: key.field,
-                            expression: draft.expression.clone(),
+                            expression: draft.expression.clone(),
-                        })
+                        })
-                        .expect("Message value")
+                        .expect("Message value")
-                    }
+                    }
-                    FacetSelector::Binding(_) => {
+                    FacetSelector::Binding(_) => {
-                        serde_json::json!({"referenced": target_key, "local": draft.local.as_ref().ok_or("Choose the destination scenario's local lifeline.")?.id})
+                        serde_json::json!({"referenced": target_key, "local": draft.local.as_ref().ok_or("Choose the destination scenario's local lifeline.")?.id})
-                    }
+                    }
-                    _ => return Err("Unsupported row.".into()),
+                    _ => return Err("Unsupported row.".into()),
-                }
+                }
-            }
+            }
-        } else {
+        } else {
-            let fact = capture_facet(project, trace.oa, trace.sa, facet)?;
+            let fact = capture_facet(project, trace.oa, trace.sa, facet)?;
-            let row = scalar::value(&fact, source_layer)
+            let row = scalar::value(&fact, source_layer)
-                .ok_or("Source row collection is not applicable; review its constructor first.")?;
+                .ok_or("Source row collection is not applicable; review its constructor first.")?;
-            if row.is_null() {
+            if row.is_null() {
-                row
+                row
-            } else {
+            } else {
-                let map = |id: Id| -> Result<Id, String> {
+                let map = |id: Id| -> Result<Id, String> {
-                    if source_layer == Layer::Oa {
+                    if source_layer == Layer::Oa {
-                        self.references.get(&id).copied().ok_or_else(|| {
+                        self.references.get(&id).copied().ok_or_else(|| {
-                            format!("Choose a reference counterpart for {}.", project.named(id))
+                            format!("Choose a reference counterpart for {}.", project.named(id))
-                        })
+                        })
-                    } else {
+                    } else {
-                        let matches: Vec<_> = self
+                        let matches: Vec<_> = self
-                            .references
+                            .references
-                            .iter()
+                            .iter()
-                            .filter(|(_, sa)| **sa == id)
+                            .filter(|(_, sa)| **sa == id)
-                            .map(|(oa, _)| *oa)
+                            .map(|(oa, _)| *oa)
-                            .collect();
+                            .collect();
-                        if matches.len() == 1 {
+                        if matches.len() == 1 {
-                            Ok(matches[0])
+                            Ok(matches[0])
-                        } else {
+                        } else {
-                            Err(format!(
+                            Err(format!(
-                                "Choose one unambiguous reference counterpart for {}.",
+                                "Choose one unambiguous reference counterpart for {}.",
-                                project.named(id)
+                                project.named(id)
-                            ))
+                            ))
-                        }
+                        }
-                    }
+                    }
-                };
+                };
-                match facet {
+                match facet {
-                    FacetSelector::Annotation(_) => {
+                    FacetSelector::Annotation(_) => {
-                        let mut row: MessageValue =
+                        let mut row: MessageValue =
-                            serde_json::from_value(row).map_err(|e| e.to_string())?;
+                            serde_json::from_value(row).map_err(|e| e.to_string())?;
-                        row.path = row.path.into_iter().map(map).collect::<Result<_, _>>()?;
+                        row.path = row.path.into_iter().map(map).collect::<Result<_, _>>()?;
-                        row.field = map(row.field)?;
+                        row.field = map(row.field)?;
-                        if serde_json::to_value(AnnotationKey::from(&row)).expect("key")
+                        if serde_json::to_value(AnnotationKey::from(&row)).expect("key")
-                            != target_key
+                            != target_key
-                        {
+                        {
-                            return Err("Mapped annotation address disagrees with the selected destination address.".into());
+                            return Err("Mapped annotation address disagrees with the selected destination address.".into());
-                        }
+                        }
-                        serde_json::to_value(row).expect("row")
+                        serde_json::to_value(row).expect("row")
-                    }
+                    }
-                    FacetSelector::Binding(_) => {
+                    FacetSelector::Binding(_) => {
-                        let row: LifelineBinding =
+                        let row: LifelineBinding =
-                            serde_json::from_value(row).map_err(|e| e.to_string())?;
+                            serde_json::from_value(row).map_err(|e| e.to_string())?;
-                        let mapped = LifelineBinding {
+                        let mapped = LifelineBinding {
-                            referenced: map(row.referenced)?,
+                            referenced: map(row.referenced)?,
-                            local: map(row.local)?,
+                            local: map(row.local)?,
-                        };
+                        };
-                        if serde_json::to_value(mapped.referenced).expect("Id") != target_key {
+                        if serde_json::to_value(mapped.referenced).expect("Id") != target_key {
-                            return Err("Mapped binding key disagrees with the selected destination lifeline.".into());
+                            return Err("Mapped binding key disagrees with the selected destination lifeline.".into());
-                        }
+                        }
-                        serde_json::to_value(mapped).expect("row")
+                        serde_json::to_value(mapped).expect("row")
-                    }
+                    }
-                    _ => return Err("Unsupported row.".into()),
+                    _ => return Err("Unsupported row.".into()),
-                }
+                }
-            }
+            }
-        };
+        };
-        let family = keyed::family(facet).ok_or("Unsupported row.")?;
+        let family = keyed::family(facet).ok_or("Unsupported row.")?;
-        let path = keyed::path(value, family)
+        let path = keyed::path(value, family)
-            .ok_or("The destination constructor has no collection for this row.")?;
+            .ok_or("The destination constructor has no collection for this row.")?;
-        let rows = value
+        let rows = value
-            .pointer_mut(&path)
+            .pointer_mut(&path)
-            .and_then(Value::as_array_mut)
+            .and_then(Value::as_array_mut)
-            .ok_or("Destination rows are unavailable.")?;
+            .ok_or("Destination rows are unavailable.")?;
-        let position = rows.iter().position(|row| match facet {
+        let position = rows.iter().position(|row| match facet {
-            FacetSelector::Annotation(_) => {
+            FacetSelector::Annotation(_) => {
-                serde_json::json!({"path": row["path"], "field": row["field"]}) == target_key
+                serde_json::json!({"path": row["path"], "field": row["field"]}) == target_key
-            }
+            }
-            FacetSelector::Binding(_) => row["referenced"] == target_key,
+            FacetSelector::Binding(_) => row["referenced"] == target_key,
-            _ => false,
+            _ => false,
-        });
+        });
-        match (position, row.is_null()) {
+        match (position, row.is_null()) {
-            (Some(index), false) => rows[index] = row,
+            (Some(index), false) => rows[index] = row,
-            (Some(index), true) => {
+            (Some(index), true) => {
-                rows.remove(index);
+                rows.remove(index);
-            }
+            }
-            (None, false) => rows.push(row),
+            (None, false) => rows.push(row),
-            (None, true) => {}
+            (None, true) => {}
-        }
+        }
-        Ok(())
+        Ok(())
-    }
+    }
-}
+}

crates/oa-desktop/src/semantic_review/ordered.rs

@@ -1,254 +1,254 @@
-//! Independent membership and complete final order; the core validates every proposal.
+//! Independent membership and complete final order; the core validates every proposal.
-use super::*;
+use super::*;
-
+
-pub(super) fn collection(which: OrderedCollection) -> ReferenceCollection {
+pub(super) fn collection(which: OrderedCollection) -> ReferenceCollection {
-    match which {
+    match which {
-        OrderedCollection::Steps => ReferenceCollection::Steps,
+        OrderedCollection::Steps => ReferenceCollection::Steps,
-        OrderedCollection::FragmentBranches => ReferenceCollection::FragmentBranches,
+        OrderedCollection::FragmentBranches => ReferenceCollection::FragmentBranches,
-    }
+    }
-}
+}
-pub(super) fn ordered(which: ReferenceCollection) -> Option<OrderedCollection> {
+pub(super) fn ordered(which: ReferenceCollection) -> Option<OrderedCollection> {
-    match which {
+    match which {
-        ReferenceCollection::Steps => Some(OrderedCollection::Steps),
+        ReferenceCollection::Steps => Some(OrderedCollection::Steps),
-        ReferenceCollection::FragmentBranches => Some(OrderedCollection::FragmentBranches),
+        ReferenceCollection::FragmentBranches => Some(OrderedCollection::FragmentBranches),
-        _ => None,
+        _ => None,
-    }
+    }
-}
+}
-pub(super) fn read(value: &Value, which: OrderedCollection) -> Result<Vec<Id>, String> {
+pub(super) fn read(value: &Value, which: OrderedCollection) -> Result<Vec<Id>, String> {
-    let path = keyed::path(value, keyed::Family::Member(collection(which)))
+    let path = keyed::path(value, keyed::Family::Member(collection(which)))
-        .ok_or("This ordered collection is unavailable on the destination.")?;
+        .ok_or("This ordered collection is unavailable on the destination.")?;
-    serde_json::from_value(value.pointer(&path).unwrap().clone()).map_err(|e| e.to_string())
+    serde_json::from_value(value.pointer(&path).unwrap().clone()).map_err(|e| e.to_string())
-}
+}
-fn write(value: &mut Value, which: OrderedCollection, ids: Vec<Id>) -> Result<(), String> {
+fn write(value: &mut Value, which: OrderedCollection, ids: Vec<Id>) -> Result<(), String> {
-    let path = keyed::path(value, keyed::Family::Member(collection(which)))
+    let path = keyed::path(value, keyed::Family::Member(collection(which)))
-        .ok_or("This ordered collection is unavailable on the destination.")?;
+        .ok_or("This ordered collection is unavailable on the destination.")?;
-    *value.pointer_mut(&path).unwrap() = serde_json::to_value(ids).expect("Ordered identities");
+    *value.pointer_mut(&path).unwrap() = serde_json::to_value(ids).expect("Ordered identities");
-    Ok(())
+    Ok(())
-}
+}
-
+
-impl ReviewRow {
+impl ReviewRow {
-    pub(super) fn ordered_members(
+    pub(super) fn ordered_members(
-        &self,
+        &self,
-        project: &Project,
+        project: &Project,
-        which: OrderedCollection,
+        which: OrderedCollection,
-    ) -> Result<Vec<Id>, String> {
+    ) -> Result<Vec<Id>, String> {
-        read(&self.combine(project, true, true)?, which)
+        read(&self.combine(project, true, true)?, which)
-    }
+    }
-
+
-    pub(super) fn initialize_order(
+    pub(super) fn initialize_order(
-        &mut self,
+        &mut self,
-        project: &Project,
+        project: &Project,
-        which: OrderedCollection,
+        which: OrderedCollection,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        if !self.order_drafts.contains_key(&which) {
+        if !self.order_drafts.contains_key(&which) {
-            let ids = self.ordered_members(project, which)?;
+            let ids = self.ordered_members(project, which)?;
-            self.order_drafts.insert(which, ids);
+            self.order_drafts.insert(which, ids);
-        }
+        }
-        Ok(())
+        Ok(())
-    }
+    }
-
+
-    pub(super) fn reconcile_order(
+    pub(super) fn reconcile_order(
-        &mut self,
+        &mut self,
-        project: &Project,
+        project: &Project,
-        which: OrderedCollection,
+        which: OrderedCollection,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        self.require_order_candidate(which)?;
+        self.require_order_candidate(which)?;
-        let members = self.ordered_members(project, which)?;
+        let members = self.ordered_members(project, which)?;
-        let draft = self
+        let draft = self
-            .order_drafts
+            .order_drafts
-            .get_mut(&which)
+            .get_mut(&which)
-            .ok_or("Choose a final order first.")?;
+            .ok_or("Choose a final order first.")?;
-        // This is an explicit user action. Ordinary refresh never discards an authored order.
+        // This is an explicit user action. Ordinary refresh never discards an authored order.
-        let mut seen = BTreeSet::new();
+        let mut seen = BTreeSet::new();
-        draft.retain(|id| members.contains(id) && seen.insert(*id));
+        draft.retain(|id| members.contains(id) && seen.insert(*id));
-        for id in members {
+        for id in members {
-            if seen.insert(id) {
+            if seen.insert(id) {
-                draft.push(id);
+                draft.push(id);
-            }
+            }
-        }
+        }
-        Ok(())
+        Ok(())
-    }
+    }
-
+
-    fn require_order_candidate(&self, which: OrderedCollection) -> Result<(), String> {
+    fn require_order_candidate(&self, which: OrderedCollection) -> Result<(), String> {
-        let facet = FacetSelector::Order(which);
+        let facet = FacetSelector::Order(which);
-        if self.selected.as_ref() != Some(&facet)
+        if self.selected.as_ref() != Some(&facet)
-            || self.decisions.get(&facet) != Some(&SemanticDecision::Candidate)
+            || self.decisions.get(&facet) != Some(&SemanticDecision::Candidate)
-        {
+        {
-            return Err("Select Set final value for this order before changing it.".into());
+            return Err("Select Set final value for this order before changing it.".into());
-        }
+        }
-        Ok(())
+        Ok(())
-    }
+    }
-
+
-    pub(super) fn move_order(
+    pub(super) fn move_order(
-        &mut self,
+        &mut self,
-        which: OrderedCollection,
+        which: OrderedCollection,
-        index: usize,
+        index: usize,
-        delta: i32,
+        delta: i32,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        self.require_order_candidate(which)?;
+        self.require_order_candidate(which)?;
-        let ids = self
+        let ids = self
-            .order_drafts
+            .order_drafts
-            .get_mut(&which)
+            .get_mut(&which)
-            .ok_or("Choose a final order first.")?;
+            .ok_or("Choose a final order first.")?;
-        let destination = match delta {
+        let destination = match delta {
-            -1 => index.checked_sub(1),
+            -1 => index.checked_sub(1),
-            1 => index.checked_add(1),
+            1 => index.checked_add(1),
-            _ => None,
+            _ => None,
-        };
+        };
-        let destination = destination
+        let destination = destination
-            .filter(|i| index < ids.len() && *i < ids.len())
+            .filter(|i| index < ids.len() && *i < ids.len())
-            .ok_or("Choose an existing adjacent position in the final order.")?;
+            .ok_or("Choose an existing adjacent position in the final order.")?;
-        ids.swap(index, destination);
+        ids.swap(index, destination);
-        Ok(())
+        Ok(())
-    }
+    }
-
+
-    pub(super) fn project_order(
+    pub(super) fn project_order(
-        &self,
+        &self,
-        project: &Project,
+        project: &Project,
-        trace: &Trace,
+        trace: &Trace,
-        value: &mut Value,
+        value: &mut Value,
-        which: OrderedCollection,
+        which: OrderedCollection,
-        decision: SemanticDecision,
+        decision: SemanticDecision,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        let current = read(value, which)?;
+        let current = read(value, which)?;
-        let supplied = match decision {
+        let supplied = match decision {
-            SemanticDecision::KeepTarget => return Ok(()),
+            SemanticDecision::KeepTarget => return Ok(()),
-            SemanticDecision::Candidate => self
+            SemanticDecision::Candidate => self
-                .order_drafts
+                .order_drafts
-                .get(&which)
+                .get(&which)
-                .cloned()
+                .cloned()
-                .ok_or("Choose a final order.")?,
+                .ok_or("Choose a final order.")?,
-            SemanticDecision::TakeSource => {
+            SemanticDecision::TakeSource => {
-                let fact =
+                let fact =
-                    capture_facet(project, trace.oa, trace.sa, &FacetSelector::Order(which))?;
+                    capture_facet(project, trace.oa, trace.sa, &FacetSelector::Order(which))?;
-                let source: Vec<Id> = serde_json::from_value(
+                let source: Vec<Id> = serde_json::from_value(
-                    scalar::value(&fact, self.direction.source_layer())
+                    scalar::value(&fact, self.direction.source_layer())
-                        .ok_or("The source has no applicable order.")?,
+                        .ok_or("The source has no applicable order.")?,
-                )
+                )
-                .map_err(|e| e.to_string())?;
+                .map_err(|e| e.to_string())?;
-                let map = self.order_reference_map()?;
+                let map = self.order_reference_map()?;
-                source
+                source
-                    .into_iter()
+                    .into_iter()
-                    .map(|id| {
+                    .map(|id| {
-                        map.get(&id).copied().ok_or_else(|| {
+                        map.get(&id).copied().ok_or_else(|| {
-                            format!(
+                            format!(
-                                "Pair source order member {} explicitly in Reference pairs.",
+                                "Pair source order member {} explicitly in Reference pairs.",
-                                project.named(id)
+                                project.named(id)
-                            )
+                            )
-                        })
+                        })
-                    })
+                    })
-                    .collect::<Result<Vec<_>, _>>()?
+                    .collect::<Result<Vec<_>, _>>()?
-            }
+            }
-        };
+        };
-        let actual: BTreeSet<_> = current.iter().copied().collect();
+        let actual: BTreeSet<_> = current.iter().copied().collect();
-        let desired: BTreeSet<_> = supplied.iter().copied().collect();
+        let desired: BTreeSet<_> = supplied.iter().copied().collect();
-        if desired.len() != supplied.len() {
+        if desired.len() != supplied.len() {
-            return Err(
+            return Err(
-                "The final order contains a duplicate identity; reconcile its members explicitly."
+                "The final order contains a duplicate identity; reconcile its members explicitly."
-                    .into(),
+                    .into(),
-            );
+            );
-        }
+        }
-        if desired != actual {
+        if desired != actual {
-            if decision == SemanticDecision::TakeSource
+            if decision == SemanticDecision::TakeSource
-                && desired.is_subset(&actual)
+                && desired.is_subset(&actual)
-                && current
+                && current
-                    .iter()
+                    .iter()
-                    .filter(|id| desired.contains(id))
+                    .filter(|id| desired.contains(id))
-                    .copied()
+                    .copied()
-                    .collect::<Vec<_>>()
+                    .collect::<Vec<_>>()
-                    == supplied
+                    == supplied
-            {
+            {
-                return Ok(());
+                return Ok(());
-            }
+            }
-            return Err("Final order must contain every surviving destination member exactly once. Reconcile members, then choose their positions; membership is reviewed separately.".into());
+            return Err("Final order must contain every surviving destination member exactly once. Reconcile members, then choose their positions; membership is reviewed separately.".into());
-        }
+        }
-        write(value, which, supplied)
+        write(value, which, supplied)
-    }
+    }
-
+
-    fn order_reference_map(&self) -> Result<BTreeMap<Id, Id>, String> {
+    fn order_reference_map(&self) -> Result<BTreeMap<Id, Id>, String> {
-        let mut map = BTreeMap::new();
+        let mut map = BTreeMap::new();
-        for (oa, sa) in &self.references {
+        for (oa, sa) in &self.references {
-            let (a, b) = if self.direction == TransitionDirection::OaToSa {
+            let (a, b) = if self.direction == TransitionDirection::OaToSa {
-                (*oa, *sa)
+                (*oa, *sa)
-            } else {
+            } else {
-                (*sa, *oa)
+                (*sa, *oa)
-            };
+            };
-            if map.insert(a, b).is_some_and(|old| old != b) {
+            if map.insert(a, b).is_some_and(|old| old != b) {
-                return Err("Reverse reference correspondence is ambiguous.".into());
+                return Err("Reverse reference correspondence is ambiguous.".into());
-            }
+            }
-        }
+        }
-        Ok(map)
+        Ok(map)
-    }
+    }
-
+
-    pub(super) fn project_ordered_member(
+    pub(super) fn project_ordered_member(
-        &self,
+        &self,
-        project: &Project,
+        project: &Project,
-        trace: &Trace,
+        trace: &Trace,
-        value: &mut Value,
+        value: &mut Value,
-        facet: &FacetSelector,
+        facet: &FacetSelector,
-        decision: SemanticDecision,
+        decision: SemanticDecision,
-        form_context: bool,
+        form_context: bool,
-    ) -> Result<(), String> {
+    ) -> Result<(), String> {
-        let FacetSelector::Member {
+        let FacetSelector::Member {
-            collection: member_collection,
+            collection: member_collection,
-            keys,
+            keys,
-        } = facet
+        } = facet
-        else {
+        else {
-            unreachable!()
+            unreachable!()
-        };
+        };
-        let which = ordered(*member_collection).expect("Ordered member");
+        let which = ordered(*member_collection).expect("Ordered member");
-        let before = read(value, which)?;
+        let before = read(value, which)?;
-        self.keyed_value(project, trace, value, facet, decision)?;
+        self.keyed_value(project, trace, value, facet, decision)?;
-        let after = read(value, which)?;
+        let after = read(value, which)?;
-        let explicit = self
+        let explicit = self
-            .decisions
+            .decisions
-            .get(&FacetSelector::Order(which))
+            .get(&FacetSelector::Order(which))
-            .is_some_and(|d| *d != SemanticDecision::KeepTarget);
+            .is_some_and(|d| *d != SemanticDecision::KeepTarget);
-        if decision != SemanticDecision::TakeSource || explicit || after.len() <= before.len() {
+        if decision != SemanticDecision::TakeSource || explicit || after.len() <= before.len() {
-            return Ok(());
+            return Ok(());
-        }
+        }
-        let (source_key, target_key) = if self.direction == TransitionDirection::OaToSa {
+        let (source_key, target_key) = if self.direction == TransitionDirection::OaToSa {
-            (keys.oa, keys.sa)
+            (keys.oa, keys.sa)
-        } else {
+        } else {
-            (keys.sa, keys.oa)
+            (keys.sa, keys.oa)
-        };
+        };
-        let (Some(source_key), Some(target_key)) = (source_key, target_key) else {
+        let (Some(source_key), Some(target_key)) = (source_key, target_key) else {
-            return Ok(());
+            return Ok(());
-        };
+        };
-        let fact = capture_facet(project, trace.oa, trace.sa, &FacetSelector::Order(which))?;
+        let fact = capture_facet(project, trace.oa, trace.sa, &FacetSelector::Order(which))?;
-        let source: Vec<Id> = serde_json::from_value(
+        let source: Vec<Id> = serde_json::from_value(
-            scalar::value(&fact, self.direction.source_layer())
+            scalar::value(&fact, self.direction.source_layer())
-                .ok_or("Source order is unavailable.")?,
+                .ok_or("Source order is unavailable.")?,
-        )
+        )
-        .map_err(|e| e.to_string())?;
+        .map_err(|e| e.to_string())?;
-        let position = source
+        let position = source
-            .iter()
+            .iter()
-            .position(|id| *id == source_key)
+            .position(|id| *id == source_key)
-            .ok_or("Source member is absent.")?;
+            .ok_or("Source member is absent.")?;
-        let map = self.order_reference_map()?;
+        let map = self.order_reference_map()?;
-        let anchor = |id: &Id| {
+        let anchor = |id: &Id| {
-            map.get(id)
+            map.get(id)
-                .and_then(|mapped| before.iter().position(|id| id == mapped))
+                .and_then(|mapped| before.iter().position(|id| id == mapped))
-        };
+        };
-        let left = source[..position].iter().rev().find_map(anchor);
+        let left = source[..position].iter().rev().find_map(anchor);
-        let right = source[position + 1..].iter().find_map(anchor);
+        let right = source[position + 1..].iter().find_map(anchor);
-        let at = match (left, right) {
+        let at = match (left, right) {
-            (Some(a), Some(b)) if a + 1 == b => Some(b),
+            (Some(a), Some(b)) if a + 1 == b => Some(b),
-            (Some(a), None) if a + 1 == before.len() => Some(a + 1),
+            (Some(a), None) if a + 1 == before.len() => Some(a + 1),
-            (None, Some(0)) => Some(0),
+            (None, Some(0)) => Some(0),
-            (None, None) if before.is_empty() => Some(0),
+            (None, None) if before.is_empty() => Some(0),
-            _ => None,
+            _ => None,
-        };
+        };
-        if let Some(at) = at {
+        if let Some(at) = at {
-            let mut ordered = before;
+            let mut ordered = before;
-            ordered.insert(at, target_key);
+            ordered.insert(at, target_key);
-            write(value, which, ordered)
+            write(value, which, ordered)
-        } else if form_context {
+        } else if form_context {
-            // An uncommitted membership list lets the user author a final order.
+            // An uncommitted membership list lets the user author a final order.
-            // The actual request still rejects ambiguous placement until explicitly decided.
+            // The actual request still rejects ambiguous placement until explicitly decided.
-            Ok(())
+            Ok(())
-        } else {
+        } else {
-            Err("Ordered member insertion has no unique unchanged anchor; select an explicit final Order in Properties.".into())
+            Err("Ordered member insertion has no unique unchanged anchor; select an explicit final Order in Properties.".into())
-        }
+        }
-    }
+    }
-}
+}

docs/source-cli.md

@@ -0,0 +1,66 @@
+# Source CLI
+
+Use `arcadia` to check or update local `.arcadia` projects without opening Studio
+or starting a server. Pass the entry file explicitly; its relative include paths
+resolve from their containing source files.
+
+Build with `cargo build --locked -p oa-cli --bin arcadia`. The resulting command
+is `target/debug/arcadia.exe` on Windows or `target/debug/arcadia` on Linux unless
+your Cargo configuration chooses another target directory. A workspace release
+build also includes it. Use the platform's usual executable path prefix when
+running these examples.
+
+```sh
+arcadia check project.arcadia
+arcadia check project.arcadia --json
+arcadia stabilize project.arcadia
+arcadia stabilize project.arcadia --write
+arcadia rename-alias project.arcadia old_alias new_alias
+arcadia rename-alias project.arcadia old_alias new_alias --write --json
+```
+
+`lint` is an alias for `check`. Checks accept incomplete engineering models with
+warnings; syntax errors and structural violations fail. Located diagnostics
+refer to the named file and coordinate space. Line and column numbers are
+one-based and columns count Unicode scalar values; byte ranges are half-open
+UTF-8 offsets.
+
+`stabilize` previews missing persistent identities and any supported source
+migration. `rename-alias` changes one existing global alias and its typed
+references while preserving comments, strings and unrelated source. Pass alias
+names without `@`. The command does not rename an element's display name.
+
+Both editing commands preview by default. Human output writes unified file
+diffs to stdout and diagnostics to stderr. `--json` writes one versioned report
+with diagnostics, migration information, exact before/after text for every
+changed file, diffs and the write result. Unchanged files are not included in
+that report. They are still checked for conflicts before a write.
+
+Add `--write` to save the candidate prepared by that invocation. Even an empty
+diff checks the captured files and pending-save state before returning. A failed
+write reports `written: false` and retains its proposed diff. This does not
+guarantee rollback; the reported conflict or recovery outcome determines the
+next step. A pending save
+requires explicit recovery through the existing project recovery workflow;
+the CLI does not recover it automatically.
+
+Missing IDs in a separate earlier preview remain provisional. A later command
+may allocate different IDs until you save them. This CLI does not persist a
+review plan for later application. It does not canonicalize the whole project
+or delete detached files. Source versions 3–7 use the core's supported migration
+rules; invalid source is not rewritten.
+
+| Exit code | Meaning |
+| --- | --- |
+| 0 | Valid check or successful preview/write; warnings may remain |
+| 1 | Invalid source or refused semantic alias change |
+| 2 | Invalid command arguments |
+| 3 | File/path, conflict, pending-save or output failure |
+
+Admission bounds match the desktop: 256 files, include depth 32, 1024 include
+edges, 64 MiB total UTF-8, 100,000 graph objects, 250,000 records and 500,000
+ordered references. `arcadia --help` lists the commands and bounds. These limits
+are not a claim of interactive performance at the maximum project size.
+
+For the notation itself, start with [the text-first examples](../examples/text-first/README.md)
+and the [language contract](language.rst).

harness/PLAN.md

@@ -5,27 +5,50 @@ Updated 2026-09-11, Codex-9e8r6t `/root`.
 [TASK_LEDGER.md](TASK_LEDGER.md) separates evidence from assumptions;
 [STATE.md](STATE.md) owns active leases and results.
 
+Resumed after the user's virtualization/reboot update. STATE.md supersedes the
+historical [RESTART_HANDOFF.md](RESTART_HANDOFF.md) for live status. Postboot
+focused3 ran25 passing tests and one failing overflow-fixture assertion; its
+test-only correction passed all26 focused4 tests. Strict Clippy, formatting and
+matching GUI5657 build also passed; fresh native acceptance continues.
+Nondeleting compression completed across282 generated binaries with identical
+hashes and11.78GB free; supported Ubuntu26.04 installation passed exit0. Actual
+root shell identifies Ubuntu26.04/WSL2. User328 replaces failed mirrored mode
+with VirtioProxy; the VPN is immutable. Both new guest startups timed out before
+execution, then the distinct WslService restart failed at OS access permissions.
+All60 apt archives and five Rust components are downloaded and hash-verified;
+guest signature verification/install and Linux Cargo remain pending. No compiler
+or WSL client lease is active. The user has now paused Linux builds/checking
+until they report WSL networking resolved; do not schedule more Linux setup,
+launches, diagnostics or checks before that notice (Gitea comment356).
+Lifeline/Chain history and Machine Create/Undo/postboot reopen passed on GUI52;
+Fresh GUI5657 cancellation/recovery, Lifeline direct creation/history and Machine
+minimum-size owner/Create/Undo/Redo/reopen now pass; full679 desktop tests pass.
+
 ## Immediate implementation and acceptance
 
-1. Preserve the verified creation integration and matching GUI stage, committed
+1. Preserve and publish the completed native acceptance of GUI `5657BAB5…D3846CE` using
-   as 4bb4aaf and transferred with independent anonymous readback/hash verification. Final immutable
+   the [v2 plan](release-contextual-source-native-v2-plan-20260911.md). All26
-   desktop653/653 passed after creation ancestry/guide changes, alongside focused
+   affected tests, strict all-target Clippy, formatting and matching build pass;
-   creation21/guide3. StrictClippy/fmt pass after a behavior-equivalent history
+   the full679 immutable Windows test run also passed. Minimum-size
-   rewrite; affected history63 and GUI build also pass. Preserve exact artifact
+   child visibility, exact recovery/cancel and direct Lifeline Create/Undo/Redo
-   scopes and serialize future Cargo/source leases.
+   now pass, along with Machine owner visibility/Create/Undo/Redo/reopen. Preserve
-2. Named process/scenario/machine creation, exact Undo/Redo and nine-file reopen
+   independent first UUID carriers and serialize future compiler/source leases.
-   have passed at actual minimum size. Wide/minimum cancellation passed; SA draft
+   Prepare an updated Windows prerelease only with honest per-binary source
-   crash recovery is active. Address observed blank canvases and prerequisite
+   identity, package verification and clean packaged runtime checks.
-   creation detours through the staged-source plan: source subform retains the
+2. Exercise the implemented source subform for Lifeline, process/chain Work and
-   parent draft and final adoption atomically creates prerequisite and consumer.
+   machine owner, plus semantic first-action prompts. Verify parent-draft
-   First slice covers Lifeline, process Work and machine owner, with semantic
+   retention, explicit prerequisite and consumer adoption, exact source/history,
-   first-action prompts. Independent review precedes final integration/native QA.
+   cancellation and recovery against the independent staged-source oracle.
-3. Operate the rebuilt app at minimum/normal sizes. Complete the saved basic
+   Final source guards and guide corrections are complete and reviewed; native
+   acceptance remains; source/evidence are integrated in `df6f595`. Named creation, nine-file reopen and
+   SA pending-draft recovery already have their separate native passes.
+3. Complete local SA B2 and the saved basic
    supplementary move/camera/invalid-draft and minimum-size story; the main basic
    model and explicit transition passed full Project+SourceBundle, Undo/Redo and
-   reopen on candidate3 at wide size. Exercise new
+   reopen on candidate 3 at wide size. OA B2 Action, State, bound Reuse and Fragment
-   scenario workspace, creation and caller return with real inputs and saved
+   now pass complete model/two-source Create, one Undo, one Redo and final OA
-   model evidence, then correct and reverify concrete defects.
+   reopen/Save with exact original identities. Preserve the existing B3 layer/size
+   scope; do not infer SA B2 or broader camera/focus coverage from these passes.
 4. Integrate standalone B4 scenario lifetimes and the external independent
    scenario contract without overwriting local layout work. Resolve source-derived
    lifetime versus insertion bounds, activation-after-Delete and lane-map issues.
@@ -39,12 +62,24 @@ The updated objective explicitly requires functional constraints/calculations,
 quantities/units and maintained model libraries. Current metadata/includes are
 insufficient. This work runs independently of useful behavior improvements.
 
+Peer comment 231 ratifies schema 8/local-definition core steps in an isolated
+worktree. Coordinate those actual shared types and ownership before local
+integration; the current local core remains descriptive. Source grammar,
+evaluation, server/CLI/UI representation and acceptance are separate unfinished
+steps. Peer956 now reports focus regression5/5 and isolated numeric26/26 plus
+analysis28/28; their codec/lifecycle work remains isolated. Local integration and
+coherent union gates remain necessary. Do not replace peer efforts with a
+parallel local implementation. Comment338 separately reserves our bounded
+syntax-only outline seam for current-text navigation; its private query module
+and prepared tests remain uncompiled pending review.
+
 The newest objective also requires complete uncluttered text-only workflows.
 Combine the local three-task usability audit with the other host's language/
 identity/API design. Two concise current-grammar recipes now pass their bounded
-REST identity/source/persistence experiment. Next evaluate
+REST identity/source/persistence experiment. The published CLI now covers checked
-cross-file definitions/references, safe alias rename and identity-preserving
+stabilization and typed alias rename with exact source-preserving preview/write.
-patch preview on repeated-name modular models. Do not equate shorter examples
+Next evaluate cross-file definitions/references and engineering task completion
+on repeated-name modular models. Do not equate shorter examples
 or parser throughput with task usability, and do not silently change omissions.
 
 - Compare real candidate semantics before large changes. Use primary Capella,
@@ -55,15 +90,23 @@ or parser throughput with task usability, and do not silently change omissions.
 - Probe libraries through two projects/two instances, pinned offline content,
   exports/dependency closure, bindings, distinct origin/local identities, updates
   with local divergence, detachment and exact transactional rollback.
-- Run a small pure-core experiment for the selected candidate. Independent
+- Review and test the peer-ratified pure core and its explicit migration/admission
-  criticism must precede broad schema/source/API migration. Retain current typed
+  boundaries before local integration. Retain independent falsifiers and current
-  Project, Command and source-writer boundaries unless evidence requires change.
+  typed Project, Command and source-writer guarantees across representations.
 - Implement the ratified contracts across validation, visitors, deletion,
   identity, OA/SA transitions, source/reST, schema/REST, ergonomic graphical
   authoring and help. Add real examples and independent parity acceptance.
 
 ## Integration and release
 
+- GUI/server release 1, `v0.2.0-preview.authoring.20260911`, and standalone CLI
+  release 2, `cli-v0.2.0-preview.authoring.20260911`, are published and read back.
+  Their exact notices, archive, runtime and uploaded-asset evidence is preserved.
+  CLI packaging is integrated at `27df4a3`; instruction sync `07eb3cd` and
+  contextual source checkpoint `df6f595` and its raw evidence are integrated.
+  CLI publication `d95b1ab` and OA native checkpoint `c4bad4b` are also integrated;
+  then publish later coherent milestones under the assigned owner. Preserve each
+  artifact's source/profile/native scope and complete final-release gates separately.
 - Publish coherent commits and verified bundle transfers through Gitea; keep
   concise host-scoped handoffs and Wiki. Do not overwrite another host's branch.
 - Refresh relevant source/schema/example/doc gates and run current core,
@@ -71,9 +114,12 @@ or parser throughput with task usability, and do not silently change omissions.
 - Build matching optimized desktop/server packages. Regenerate complete notices
   for actual inputs and verify archive contents, hashes and clean-runtime launch.
   Historical ELF fixtures and build preparation do not replace execution.
-- Obtain a viable Linux environment and run current GUI/server workflows there.
+- Follow the external owner's supported Linux guest route and run current
-  Supported WSL2 failed; no repeated rejected workaround. Continue independent
+  GUI/server workflows when viable. This local host has no usable Linux runtime;
-  work while the environment question is pending.
+  supported WSL2 failed. Preserve failed attempts rather than repeating rejected
+  workarounds, and continue independent Windows/semantic work.
+- After the user reboot, check local Ubuntu registration and launch first. A
+  version2 default alone is not an installed/running Linux environment.
 - Conduct fresh independent requirements, semantic, usability, architecture,
   correctness, runtime and documentation reviews. Resolve all material findings,
   reverify affected behavior and only then declare release completion.

harness/RESTART_HANDOFF.md

@@ -0,0 +1,63 @@
+# Restart handoff — 2026-09-11
+
+Historical reboot checkpoint. User has returned and enabled virtualization;
+current STATE.md and the postboot native/layout/WSL reports supersede the pause
+and pending-result wording below. Preserve this record for exact resume history.
+
+Codex-9e8r6t /root. User explicitly requested a reboot pause to make WSL2/Ubuntu
+available. Full PROJECT_GOAL remains active and incomplete. Resume only after
+the user returns; do not schedule automatic work during the reboot.
+
+## Saved state
+
+- Branch `codex/release1-9e8r6t`: contextual source `df6f595`, CLI publication
+  evidence `d95b1ab` and complete local OA scenario evidence `c4bad4b` were pushed
+  and read back. The following reboot commit also preserves reviewed WIP below.
+- Both Windows Studio/server and standalone CLI prereleases remain published.
+  This checkpoint does not update either release or establish Linux acceptance.
+- Immutable GUI52DE82 native source trial: Lifeline Save-adoption and Chain
+  direct Create each passed complete model/source, one Undo and one Redo with
+  original IDs. Machine direct Create/Save passed six exact files; one Undo/Save
+  passed four reachable/six physical files. Machine Redo/reopen remain pending.
+  Test GUI closed normally, and its returned window was absent at 13:38 UTC.
+  `work` contains the saved Machine Undo state. Do not infer persistent history;
+  use preserved first machine checkpoint for isolated reopen and a fresh trial
+  for missing history coverage. See release-contextual-source-native-20260911.md
+  and experiments/contextual-source-native-20260911/README.md.
+- Reviewed WIP: source_draft.rs essentials-first layout, explicit wrapped kinds
+  before unbounded parent text, plus creation.rs staged-owner caption fix.
+  Three real Paragraph tests are prepared. First compile failed in test helpers
+  (ambiguous macro and wrong Id constructor); corrected only those helpers.
+  Corrected focused2 was interrupted for this reboot before any tests ran;
+  Clippy/fmt/GUI did not launch. There is NO new passing suite or matching GUI.
+- Worker release_audit stopped its command with Ctrl+C; all Cargo/rustc/linker
+  processes were absent. All 238 frozen input hashes were unchanged.
+  Final source_draft SHA prefix C8D36BD6; creation SHA prefix 0FB19BE3.
+  Exact freeze inputs3 SHA256
+  `6B3F3088FF18AF3899C3764B3F3671DA9240A5DE184D871BF08F8012456E556B`.
+
+## Next actions after reboot
+
+1. Read AGENTS, PROJECT_GOAL, STATE, PLAN and latest Gitea issue 1/2 comments and
+   relevant Wiki. Preserve Codex-956atf canvas/chooser/schema8 and Codex-ytr83r
+   B4/Linux ownership. User issue2 comment250 allows domain-constrained diagram
+   manipulation; arbitrary free movement is not required.
+2. Recheck `wsl --list --verbose`. Before reboot it reported no installed
+   distribution despite default version2. Launch/setup Ubuntu as needed with
+   the user handling any authentication. Verify a real usable Linux environment
+   before claiming a build. Do not repeat rejected VM workarounds.
+3. Validate the frozen input manifest, then resume a new focused3 run. Keep
+   focused1 failure and focused2 interrupted evidence. On a pass, run strict
+   desktop all-target Clippy, formatting and matching GUI build; use a distinct
+   immutable stage. No broad full-suite repeat without a new reason.
+4. Root alone performs native Computer Use with @oai/sky. Relaunch the corrected
+   artifact in a fresh profile and verify initial Name/kind/parent visibility at
+   1100×700, the owner label, direct Lifeline Create, remaining cancellation/
+   recovery and machine history/reopen using independent expected contracts.
+5. Continue SA B2, basic supplementary workflows, peer integration, complete
+   semantic/text/REST/library work, Windows/Linux packaging and fresh final
+   cross-disciplinary acceptance. The full release remains unfinished.
+
+Private runtime and build stages under `.local` are retained; no temporary
+binary, token or credential was committed. Raw interruption/native records are
+archived separately with exact hashes. All workers are idle for the reboot.

harness/STATE.md

@@ -1,7 +1,9 @@
 # Progress Ledger — first release
 
 Updated 2026-09-11, Codex-9e8r6t `/root`, Windows host.
-**Release remains unaccepted; meaningful product and integration work is active.**
+**Release remains unaccepted. Windows/product work continues; Linux is paused by the user.**
+The [restart handoff](RESTART_HANDOFF.md) preserves the earlier pause; current
+results and capacity constraints below supersede its active-status wording.
 
 ## Objective and current source
 
@@ -12,14 +14,140 @@ in that file. It requires constraints/calculations, quantities/units and reusabl
 libraries, plus uncluttered human/AI text-only modeling at small and large scale.
 Long homogeneous lists and poor behavior editing remain explicit concerns.
 
-Local branch: `codex/release1-9e8r6t`, base `1797516`, committed head `4bb4aaf`.
+Local branch: `codex/release1-9e8r6t`, substantive source checkpoint
-Named behavior creation, its guide and independent oracle, concise text-first
+`df6f59562643b7771ecf0c972f8655f3e3f1c4da`, committed, pushed and read back.
-examples and prior integration evidence are committed and remotely transferred.
+It follows the user's instruction sync `07eb3cd`.
-Its final ancestry/guide correction passed full653; post-lint history63, strict
+The preceding committed and pushed code/package checkpoint is
-Clippy/fmt and matching GUI build passed. Current uncommitted work corrects the
+`27df4a3945ebc97cd7cbde61f6aeea7a91c680d3`. It includes named behavior creation,
-oracle's retained-file rule, clarifies source-7 constructor defaults, records
+source CLI, the nine CLI packaging changes and reviewed evidence. Source CLI
-native creation and implements contextual prerequisite creation. Preserve all
+semantic commit `01b76a1`, packaging assembly `a0a48e8` and release integration
-workers' edits. No open Gitea PRs at the latest read, comments through138.
+`27df4a3` are distinct. Contextual prerequisite creation, its reports/oracle and
+40 raw evidence files are integrated in `df6f595`; native acceptance continues.
+All 238 frozen build inputs and 44 exact index artifacts passed before commit.
+Gitea issue 1 records the handoff in comment 242. Remote AGENTS.md at blob
+`4b8465c8993107062ad2974c15a958d449530e92` adds the maintenance instructions
+announced in comment 229: concise current entrypoints, durable history and
+coordinated preservation rather than indiscriminate deletion.
+
+## Current acceptance checkpoint — postboot work
+
+CLI publication evidence `d95b1ab` and complete OA native evidence `c4bad4b` are
+also pushed and read back. The reboot checkpoint preserves reviewed layout/owner
+caption WIP, native evidence and interrupted compiler records; it is not a new
+accepted build. This update follows published reboot checkpoint
+`ca53f574e57381a523e946d5277b4081cff74355`; the newer results follow below.
+After successive user reboots, the latest observed boot is13:59:33.500 UTC.
+
+The postboot focused3 gate reached a real terminal before that reboot:25 passed,
+one new long-parent fixture assertion failed; no production visibility assertion
+failed. A reviewed test-only stronger fixture is frozen for focused4, preserving
+the same215-pixel host and all visibility guarantees. Automatic approval review
+blocked both exact proposed incremental-cache removal attempts before execution,
+with only `blocked by policy`; no deletion ran. Nondeleting NTFS compression
+recovered capacity instead. The incremental-cache pass was partially applied
+then intentionally stopped; the generated-binary pass completed exit0 across
+282 files with every SHA256 unchanged. C had11,777,519,616 bytes free afterward.
+Supported Ubuntu26.04 installation finished exit0 at14:36:46 UTC (session32405),
+with10.51GB host space remaining. First actual root shell reports Ubuntu26.04
+LTS, x86_64 Linux6.18.33.2-microsoft-standard-WSL2 and a mounted root filesystem.
+A systemd root-user-session warning remains recorded. The user316 mirrored/DNS
+settings were applied and runtime mirrored mode verified, but the guest had only
+loopback, no route and failed DNS/HTTPS. Read-only host IPv6 evidence is a cause
+hypothesis only; no global registry/adapter/VPN/firewall change was made. User328
+now supersedes that trial with VirtioProxy and explicitly makes AmneziaWG
+immutable, including inspection. Its exact VirtioProxy-only config is saved;
+both the initial startup and one persistent root-shell retry after compilation
+ended with CreateVm/0x800705b4 before guest commands. A distinct WslService-only
+restart then failed at Windows service access; it remains Running. No elevation
+workaround, extra launch or other service/network change followed. This is a
+startup timeout, not a measured VirtioProxy network failure. Root rechecked the
+Gitea issue through comment348 after renewed user steering: owner328 remains
+the latest posted solution and is already applied. Verified official Rust archives
+and all60 exact Ubuntu packages are prepared via Windows HTTPS; Ubuntu
+signature verification and installation remain mandatory. Windows
+focused4 passed26/26 after11m05 compile and9.54s test execution, retaining every
+geometry assertion. Strict all-target Clippy and workspace format also passed.
+Matching GUI compilation also passed; session87425 is terminal and no compiler
+lease remains live. Immutable GUI SHA256 is
+`5657BAB5C841939B66F901EFE6C0FFB2D7CBBE8CC5F111A0CA3DE8073D3846CE`.
+All238 actual source inputs were rehashed unchanged. After the26 affected tests,
+the immutable complete desktop executable passed all679 tests at15:47:53 UTC,
+zero failed/ignored/filtered, exit0, one test thread and ordinary Windows stack.
+The user subsequently directed that Linux builds and
+checking be skipped until they notify us that WSL networking is resolved. Linux
+setup, launches, diagnostics, builds and checks are paused; preserve current
+configuration and inputs. This direction is recorded in Gitea comment356 and
+supersedes service-access next steps. See
+[WSL readiness](release-wsl-readiness-9e8r6t-20260911.md).
+
+Fresh GUI5657 v2 Lifeline baseline opened through the native file picker. At
+1100x700 client size with both panels, child Name, Activity, OA root and pinned
+Back/Use controls were visible; a maximize/restore retained both raw names.
+The completed recovery record passed exact accepted-baseline, raw parent/child,
+kind/root and reserved-ID checks before a controlled isolated process stop.
+Recovery restored an unsaved local copy with an exactly equal accepted baseline
+and authored behavior/identities. Child Escape retained the parent; a new blank
+child, temporary Use and parent Cancel left nothing to undo. Save As to a fresh
+destination passed the unchanged core oracle with exactly two source files.
+The isolated process closed normally. A fresh direct Lifeline trial subsequently
+passed actual Create-before-Save, one Undo/Save and one Redo/Save against the
+complete independent model/source/original-ID contract. Fresh Machine owner
+visibility at minimum size, actual Create and open, one Undo/Save, one Redo/Save
+and real-picker reopen/SA/Save also pass the unchanged complete contract. All
+new source and consumer identities persist; Undo retains only the two proven
+generated files. The final six-file reopen equals Redo exactly, and all isolated
+native processes closed normally. See the
+[v2 native report](release-contextual-source-native-v2-20260911.md).
+
+Peer956 comment338 reserves our bounded syntax-only language outline seam;
+their codec/lifecycle scope remains separate. The query experiment is private,
+uncompiled and not integrated. The current design is
+[text navigation](release-text-navigation-design-20260911.md); a discovered
+Unicode path-collision mismatch is being corrected in a separate proposal.
+Independent outline review additionally requires rejecting noncanonical UUID
+spellings as authored navigation anchors and recommends folding paths once.
+Root verified the parser mismatch; the author is preparing a separate v2 patch.
+
+- CLI `BAD169F8…E3559`: author 12/12, strict all-target Clippy/format/build pass;
+  independent 183 assertions across 21 fresh processes pass. All four committed
+  experiment files retain their measured bytes. JSON describes complete changed
+  files, not a saved whole-candidate plan. See the two source-CLI reports.
+- Contextual source first frozen artifact `6E677F58…8CC0`: focused 22/22 and full
+  desktop 675/675 pass, 448.33 seconds execution. The later inactive-source origin
+  bypass and guide wording are fixed and independently reviewed. Final source
+  across 13 desktop files passed 23 focused tests, 3 guide tests, strict all-target Clippy,
+  matching GUI build and formatting. GUI SHA256 starts `52DE82E4`; its test
+  inventory is 676. There is no full 676-suite pass. Root verified the frozen
+  inputs/executable and launched PID 7212 in the isolated
+  `.local/native-qa/contextual-source-20260911-v1` stage. Lifeline Save-adoption
+  and Chain direct Create each pass complete model/source and one Undo/Redo.
+  Machine direct Create/Save and Undo/Save pass; its Redo remains pending.
+  A fresh-profile postboot Open/SA view/Save now passes complete six-file model,
+  source and original identities. That GUI closed normally. See
+  [native results](release-contextual-source-native-20260911.md).
+- Native scenario B3: both OA use-return paths pass wide and minimum sizes;
+  both SA paths pass minimum focused canvas. Pending disabled Open preserves the
+  draft; explicit Cancel/Save matches exact baseline. B2 OA Action, nested State,
+  explicitly bound Reuse and Fragment all pass independent complete Project and
+  two-source Create/Save, one Undo/Save and one Redo/Save predictions, retaining
+  original exact identities. Final OA reopen/Save also passes. SA B2 remains
+  pending locally; B3's earlier size/layer scopes are unchanged. See
+  [local scenario native evidence](release-scenario-native-local-20260911.md).
+- Root published GUI/server release **1**, `v0.2.0-preview.authoring.20260911`,
+  at 12:40:51 UTC, using source `2ec72d4`, D4D9 GUI and EFEE server.
+  ZIP `664F30B6…` has 559 files and passed
+  strict notices, independent complete archive/source correspondence, clean GUI
+  launch/example/Save/help/close and server create/get/restart persistence. All
+  three release assets passed full downloaded readback. Reports/raw evidence are
+  committed in `6a61061`; see [GUI/server publication](release-authoring-prerelease-published-20260911.md).
+  This is a prerelease, not full OA/SA acceptance.
+- Root published CLI release **2**, `cli-v0.2.0-preview.authoring.20260911`, at
+  12:50:39 UTC. Tag and release readback match `27df4a3`, draft false and
+  prerelease true. ZIP `2B051F8C…` has 114 files, 27 notice packages and exact
+  BAD169F8/F456 executable/runtime. Independent clean CLI 156 assertions across
+  10 invocations pass; all three uploaded assets passed downloaded hash readback.
+  [Publication report](release-cli-prerelease-published-20260911.md) preserves
+  the exact records and distinguishes local CRLF notes from the public LF body.
 
 ## Completed work and scoped evidence
 
@@ -27,33 +155,34 @@ workers' edits. No open Gitea PRs at the latest read, comments through138.
   `codex/palette-authoring-20260910`. Candidate 2 focused tests, GUI build and
   strict desktop Clippy passed. Its native F2 rename/Save/Undo/Redo matched exact
   three-file expectations; Entity creation matched the complete independent
-  model/source oracle. Candidate3 completed ordinary Activity, existing placement,
+  model/source oracle. Candidate 3 completed ordinary Activity, existing placement,
   allocation, direct Interaction and F2: complete basic model/four sources PASS.
   Explicit SA actor/destination transition passed complete model/six sources;
   Undo four-source baseline, Redo six-source result and reopen all passed. Six
   physical files are byte-identical across reopen/reuse-preview Cancel/Save.
   Immutable checkpoints/logs: `.local/native-qa/palette-20260910-v3/`.
 - Recovery naming autofocus: `31b7dc3`, 13 focused checkpoint tests passed after
-  integrated compilation. Its new autofocus behavior still needs native check.
+  integrated compilation. The later SA behavior draft's native recovery,
+  autofocus and Escape evidence is recorded in the creation report below.
 - Other-host behavior/topology/scenario/history: original `01bb52a` integrated
   as `057eddd`; constructor cache fix `b6b76ef` integrated as `a70de55`; explicit
   history seed fix `4ecad78` cherry-picked as `81668f9`.
-- Corrected immutable desktop artifact completed **631/631 passed**,408.18s,
+- Corrected immutable desktop artifact completed **631/631 passed**, 408.18 seconds,
-  exit0; all three prior618-artifact failures are fixed. Exact artifact/logs in
+  exit 0; all three prior 618-artifact failures are fixed. Exact artifact/logs in
-  `.local/scenario-workspace-20260910/tests-81668f9/`. It covers3978bbe workspace,
+  `.local/scenario-workspace-20260910/tests-81668f9/`. It covers `3978bbe` workspace,
   Back/OpenUse guards and both history fixes, but not later Sensor/creation work.
 - A real same-size owner/document Sensor regression led to `d114a27`; affected
-  scenario53/53 passed. Current native candidate3 predates that correction.
+  scenario 53/53 passed. Historical native candidate 3 predates that correction.
-  Mounted workspace tests cover500×570 and wide geometry; native current-build
+  Mounted workspace tests cover 500×570 and wide geometry; later local native
-  scenario acceptance remains pending.
+  B2/B3 results have the separate scopes recorded above.
-- Named local creation passed final21/21 and guide3/3 after ancestry-label
+- Named local creation passed final 21/21 and guide 3/3 after ancestry-label
-  correction. The matching immutable desktop suite passed **653/653**,362.83s,
+  correction. The matching immutable desktop suite passed **653/653**, 362.83 seconds,
-  zero failures/ignored; exact artifact864B0F…E86/log/result under
+  zero failures/ignored; exact artifact `864B0F…E86` and logs under
   `.local/behavior-creation-20260911/tests-final`. Independent integration review
-  found no additional correctness blocker. StrictClippy/all-targets/-Dwarnings
+  found no additional correctness blocker. Strict Clippy with all targets and
-  and workspacefmt pass after one behavior-equivalent history_fields let-chain
+  `-D warnings`, plus workspace formatting, pass after one behavior-equivalent history_fields let-chain
-  correction; affected history63/63 and matching GUI rebuild pass. Current native
+  correction; affected history 63/63 and matching GUI rebuild pass. This frozen
-  GUI is `gui-verified` SHA D4D9C2BD…B20C31. At actual 1100×700 client size,
+  creation GUI is `gui-verified` SHA D4D9C2BD…B20C31. At actual 1100×700 client size,
   named OA Process, explicit ParticipantInteraction Scenario with capability
   context and SA owner-linked State machine plus requested first view passed
   complete independent Project/SourceBundle checks at 7/8/9 files. Each single
@@ -81,18 +210,19 @@ workers' edits. No open Gitea PRs at the latest read, comments through138.
   Historical Windows-input ZIP has 557 files; real Linux notices close over
   339 packages/681 files. Linux archive adapter used inert ELF fixtures, not
   actual current application binaries. Exact Fira/Cantarell notice Git bytes
-  were independently verified. Current-source notices need regeneration.
+  were independently verified. Later exact GUI/server and CLI packages have
+  their own regenerated notices and published artifact evidence above.
 - Independent native Capella creation study completed, saved and closed cleanly;
   report `release-capella-creation-study-20260910.md` is complete. Viewpoint-first
   naming and distinct local create/existing selection inform the implementation.
 - Textual usability audit completed three static tasks and example counts. The
   existing grammar already permits omitted initial IDs/defaults; key gaps are
   cross-file reference context, safe alias refactoring and reviewed patches.
-  Source7 EBNF/schema documentation and viewpoint omission guidance are corrected;
+  Source-7 EBNF/schema documentation and viewpoint omission guidance are corrected;
   generated language HTML passed strict docutils. Both concise snippets passed
   26 real REST requests: identity-only stabilization, exact no-op/name edit,
-  stale/invalid nonmutation and restart persistence. All120 current core/server
+  stale/invalid nonmutation and restart persistence. All 120 current core/server
-  files match the preserved source7 binary's documented snapshot. This closes
+  files match the preserved source-7 binary's documented snapshot. This closes
   the bounded recipe gap, not large-model or native text-editor acceptance. The
   verified recipe is now `examples/text-first` and in the language reference.
 
@@ -105,34 +235,33 @@ Detailed evidence: [integrated gates](release-integrated-gates-20260910.md),
 
 ## Active ownership and execution
 
-- Root: integration, common ledgers, source/API checks and exclusive native input.
+Root owns integration, native input, commits, publication and Wiki updates.
-  Full653 is terminal PASS. V4 creation/Undo/Redo/reopen is complete; actual SA
+GUI5657 native trials and the complete679 desktop tests are terminal; no owned
-  pending-draft crash recovery is active on the same verified GUI. The forced
+Studio, compiler or test process remains. All Linux actions are user-paused.
-  interruption targeted only isolated QA PID5184 after checkpoint persistence;
-  restarted PID1284/window6161106 uses the same private profile and runtime.
-  Recovery is now terminal PASS: full draft fields/IDs retained, autofocus,
-  first Escape and a fresh Save As preserve the complete nine-file model. The
-  current wide GUI is saved on `checkpoint-recovery-cancel/project.arcadia`;
-  treat that checkpoint as immutable and reopen a work copy before editing.
-- `release_audit`: prior creation and constructor reports frozen. Now owns the
-  staged prerequisite creation implementation for Scenario Lifeline/process Work/
-  New machine owner, semantic first-action prompts, relevant App/recovery/guide
-  wiring and focused tests. Cargo writer is reserved to this worker when needed;
-  freeze source during tests and request independent review before integration.
-- `behavior_audit`: v2 native oracle frozen, warnings-denied compilation and
-  falsifiers pass, executable056EEFD…F6A36. Now independently challenges staged
-  source semantics and expected behavior; no production/Cargo/native ownership.
-- `palette_finish`: native report/evidence frozen: 13 creation oracle commands
-  and 19 separate recovery checks pass. Now owns new `crates/oa-cli` for local
-  source check/lint, preview/explicit-write stabilization and alias rename/diff.
-  Uses existing source-file diagnostics/expectations/journal writer, no grammar
-  or core changes. Root owns workspace/lock integration; serialize Cargo with
-  release_audit. Preview UUIDs remain candidates until that invocation writes.
-- Separate host Codex-956atf: standalone scenario lifetime projection, independent
-  native scenario oracle, quantity/calculation design and library design. It has
-  its own cold toolchain/results. Its source-only reviews are not local passes.
 
-Verified bundles for eb5161b and 4ecad78 are retained in
+- `release_audit`: full-suite/recovery archives frozen; now audits updated
+  Windows package inputs and per-binary source provenance without building.
+- `behavior_audit`: Lifeline evidence frozen; prepares separately reviewed v2
+  bounded outline/query proposals. No production application or compiler lease.
+- `linux_readiness`: Linux remains paused. Completed independent outline review;
+  now preserves only the completed Windows Machine evidence.
+- Codex-956atf: owns chooser/workspace/focus, shared canvas shell and isolated
+  schema8/local-definition core. Reported focus5/5, analysis28/28 and numeric26/26
+  plus core Clippy; codec/lifecycle work remains separate. None of that later
+  peer source is integrated locally. Our bounded language outline seam is
+  reserved by comment338; source8/codec ownership remains theirs.
+- Codex-ytr83r: owns external B4 Scene/lifetime integration and Linux packaging.
+  Linux work is paused; peer host results cannot substitute for local execution.
+
+User issue2/comment250 calls for consistent, domain-constrained interactive
+diagrams, not necessarily arbitrary placement. Codex-956atf owns the shared
+canvas-shell implementation in an isolated worktree (comment261). Existing
+technical Canvas widgets and source cards do not close this requirement.
+Local Ubuntu26.04 is installed; the last two startup attempts timed out before
+guest execution. Preserve that history and verified inputs while waiting for
+the user's explicit notice that WSL networking is resolved.
+
+Verified bundles for `eb5161b` and `4ecad78` are retained in
 `.local/integration-20260910`. Local refs `codex/behavior-snapshot-eb5161b` and
 `codex/history-seed-20260910` preserve exact commits. B4 lifetime projection and
 its guide delta are not integrated yet; coordinate shared scene wiring. Review
@@ -144,57 +273,64 @@ unassigned-lane map differences that must be addressed before acceptance.
 1. Finish native basic supplementary move/camera/focus/minimum matrix and current
    scenario/process/state tasks. Main basic/transition/history/reopen passed at
    wide size. Check raw drafts, recovery, exact source and real task completion.
-2. Implement/review/natively verify contextual
+2. Publish the verified contextual missing-source/source-form milestone with
-   missing-source and first-action flows. Named creation/history/reopen passed;
+   truthful Windows package inputs. Named and contextual creation/history/reopen
-   operand-editing and qualified Action allocation remain separate open work.
+   pass; operand-editing and qualified Action allocation remain separate work.
 3. Constraints/calculations and quantity compatibility are currently descriptive
    metadata; same-project includes are not maintained cross-project libraries.
-   Independent semantic designs and falsification are active before broad schema
+   Peer schema 8/local-definition implementation is now ratified and staged in
-   changes. See [library review brief](release-library-candidate-review-20260910.md).
+   its isolated worktree (Gitea comment 231); local integration and all required
+   representations/acceptance remain pending. See [library review brief](release-library-candidate-review-20260910.md).
    Other-host proposals expose cosmetic package revision/type compatibility,
    subjectless analysis closure and text-only instance normalization decisions;
-   full reports and paired criticism are now available from verified c6d296a.
+   full reports and paired criticism are now available from verified `c6d296a`.
    Its 218-assertion maintenance experiment supports explicit baseline values
    with one-level Case overrides; complete freeze and effective-case evaluation
    are required. Refined baseline/library contracts remain active externally.
-4. Implement and evaluate the source-only CLI baseline, then compare language
+4. Build on the published standalone CLI and compare language improvements using
-   improvements using both local usability and complete other-host proposals.
+   both local usability and complete other-host proposals.
    Current grammar+tooling, domain syntax, namespaces and portable identity
    modules remain distinct candidates. Concise examples/CLI alone do not prove
    uncluttered modular engineering authoring or safe large-model changes.
 5. Run coherent current desktop/core/server, specification, examples, REST and
    optimized packaging gates after integration. Prior passes remain scoped.
-6. Current Linux runtime requires a viable environment: supported WSL2 import
+6. Obtain current Linux runtime acceptance through the external owner's supported
-   failed once with HCS_E_HYPERV_NOT_INSTALLED; no distro registered. The user
+   guest route. Local WSL2 import failed with HCS_E_HYPERV_NOT_INSTALLED and no
-   has a pending environment question. No repeated denied QEMU workaround.
+   distro registered; this host still has no usable Linux runtime. Preserve
+   recorded route failures and do not repeat a rejected workaround.
 7. Fresh independent cross-disciplinary release review remains required after
    actual workflow and semantic acceptance, with all material findings resolved.
 
 ## Handoff and publication
 
 Use Gitea issue #1 and current Wiki to coordinate as **Codex-9e8r6t**. Read before
-resuming; preserve the other host's work. Direct Git push now fails authentication;
+resuming; preserve the other host's work. User issue 1 comment 178 authorizes programmatic
-anonymous fetch and Gitea MCP still work. Integration3978bbe was published and
+reuse of existing MCP credentials for Git/REST without printing or committing them.
+Authenticated non-force push and remote readback now pass; current branch is
+available directly. Historical bundle transfers remain reproducible. Integration `3978bbe` was published and
 independently fetched/hash-verified as a Git bundle on
-`codex/integration-transfer-20260910`; Wiki `Integration3978bbe` and issue#97 own
+`codex/integration-transfer-20260910`; Wiki `Integration3978bbe` and issue #97 own
 exact transfer instructions. Other host has integrated it and an equivalent
-Sensor fix. Creation4bb4aaf was likewise published on
+Sensor fix. Creation `4bb4aaf` was likewise published on
 `codex/integration-transfer-20260911`, file
-`harness/transfers/creation-4bb4aaf.bundle.b64`: decoded105022 bytes,
+`harness/transfers/creation-4bb4aaf.bundle.b64`: decoded 105022 bytes,
 SHA256 `0DEFAE91A56430076C432758F923BC0675911DA9FA7588C9961FF15F47EAEBF6`,
-prerequisite3978bbe. Anonymous Git readback, strict base64 length/hash check and
+prerequisite `3978bbe`. Anonymous Git readback, strict base64 length/hash check and
-`git bundle verify` passed; issue#128 gives selective integration instructions.
+`git bundle verify` passed; issue #128 gives selective integration instructions.
-Publish subsequent corrected oracle/native/default evidence similarly; preserve
+Corrected oracle/native/default evidence is published as `2ec72d4` on the same
-the other host's later B4/reference chooser/design work and avoid duplicates.
+branch, file `harness/transfers/evidence-2ec72d4.bundle.b64`: decoded 185563 bytes,
+SHA256 `F74E14EE394BCC026E24987C8526AA7E769DDE748FE38117532824EC19AE159F`,
+prerequisite `4bb4aaf`. Anonymous readback/hash and bundle verification pass (#150).
+Preserve the other hosts' B4/reference chooser/design work and avoid duplicates.
 
-Other-host c6d296a transfer is verified and imported as local
+Other-host `c6d296a` transfer is verified and imported as local
 `codex/behavior-snapshot-c6d296a`: 334830 bytes,
 SHA256 `526A80E2D32ED0E57A7B2372B5F02D4652E8751DFEBA81953C4F045225D6AACB`,
-prerequisite1797516, from `codex/behavior-transfer-20260910` file
+prerequisite `1797516`, from `codex/behavior-transfer-20260910` file
 `harness/transfers/behavior-c6d296a.bundle.b64`. Selected analysis/library/text
 reports, criticism, experiments and independent scenario oracle are restored;
 51 evidence files compare byte-for-byte with Git blobs. No source/ledger merge.
-Issue#136/#143 and refreshed Wiki Authoring20260911 record the handoff.
+Issue comments 136/143 and Wiki `Authoring20260911` record the handoff.
 
 The old ledgers, including all historical platform and native evidence, were
 archived byte-for-byte before this consolidation in

harness/TASK_LEDGER.md

@@ -1,6 +1,22 @@
 # Task Ledger — first release
 
-Updated 2026-09-11 by Codex-9e8r6t `/root`. Release not accepted.
+Updated 2026-09-11 by Codex-9e8r6t `/root`. Full release not accepted.
+
+User resumed after enabling virtualization and explicitly authorized installing
+Ubuntu26.04 in WSL2. [RESTART_HANDOFF.md](RESTART_HANDOFF.md) is the historical
+pause; STATE.md owns current capacity, compiler and native status.
+User also explicitly permits disk cleanup including caches. Both scoped cache
+deletion commands were rejected before execution; nondeleting compression
+recovered space with all282 generated-binary hashes unchanged. Ordinary Ubuntu
+installation and an initial actual WSL2 root shell passed. Current VirtioProxy
+startups fail before guest execution, and a distinct WslService restart was
+denied by OS permissions. Owner328 remains the newest WSL solution after the
+latest issue check through348; its exact configuration is already applied.
+Five Rust components and60 apt packages are downloaded and hash-verified;
+guest signature verification/install and application acceptance remain pending.
+The user's latest direction pauses Linux work until they notify us that WSL
+networking is resolved. Continue Windows/product work; preserve existing Linux
+configuration, verified inputs and evidence without further setup/checks.
 
 ## Goal and success criteria
 
@@ -27,6 +43,14 @@ passing checks and fresh independent cross-disciplinary review.
 - Gitea coordination and shared Wiki updates are required. Identify host and
   worker consistently and preserve overlapping work. Explicit project messages
   are authorized; unrelated external messages are not.
+- Updated AGENTS requires runnable versioned milestone prereleases. User
+  issue 1 comment 178 authorizes reusing existing MCP credentials programmatically for
+  Git push and REST asset upload, without printing or committing credentials.
+- Remote AGENTS.md, blob `4b8465c8993107062ad2974c15a958d449530e92`, adds concise
+  harness/Gitea maintenance and preservation of useful historical knowledge
+  (user comment 229). Root's instruction sync `07eb3cd` is integrated;
+  contextual source `df6f595`, CLI publication `d95b1ab` and OA native evidence
+  `c4bad4b` are committed and pushed.
 
 ## Verified facts
 
@@ -35,38 +59,65 @@ The current model has one typed core, validated atomic commands and coordinated
 Project/SourceBundle history shared by desktop and REST. Included files share
 one global namespace. Current Constraint expressions are strings; numeric unit
 strings do not convert values or establish dimensional compatibility. There is
-no package/version/instance/update contract for cross-project libraries.
+no locally integrated package/version/instance/update contract for cross-project
+libraries; peer implementation is tracked separately below.
 
-Candidate3 completed the main basic/transition/history/reopen story with exact
+The main basic/transition/history/reopen story passed exact independent model
-four/six-source independent model oracles; supplementary native cases remain.
+and four/six-source checks; supplementary native cases remain. Named creation
-Corrected immutable desktop631/631 passed; later Sensor correction passed53/53.
+passed 7/8/9-source oracles, one Undo/Redo and byte-exact reopen at actual minimum
-Final creation21/guide3 and matching full desktop653/653 passed after ancestry
+size. Cancellation retained its six-file baseline; SA draft recovery retained
-label correction. StrictClippy/fmt pass after one behavior-equivalent history
+fields/identities, autofocus and Escape/Save As behavior. The D4D9 blank-canvas
-let-chain rewrite; affected history63 and matching GUI build pass. Native named
+finding motivated the newer first-action implementation. Detailed historical
-creation passes complete model and 7/8/9-source oracles, individual Undo/Redo and
+suite and native scopes remain in [STATE.md](STATE.md) and its linked reports.
-byte-exact nine-file reopen at actual minimum size. Cancellation preserves the
+Mounted geometry and bounded package passes do not establish full release
-six-file baseline. Blank process/scenario canvases provide no useful first-action
+acceptance. This local host has installed Ubuntu26.04 but lacks a currently
-prompt; this is an observed usability finding. SA draft recovery remains active. Mounted
+usable guest session, installed build prerequisites or Linux application pass.
-layout tests establish pane geometry, not native task acceptance. Packaging checks
-and independent review are scoped to supplied binaries/fixtures, not release
-acceptance. Supported WSL2 import failed; a current Linux runtime is unavailable.
 
 Current grammar supports omitted initial IDs/defaults, lexical ownership, forward
-references and preserved source. Static audit found no exposed project-wide
+references and preserved source. The earlier desktop audit found no exposed
-reference navigation/alias refactor; current Find searches the active buffer.
+project-wide reference navigation/alias refactor; its Find searched the active
-The process example has128lines/14UUIDs/31empty-default lines, while meaningful
+buffer. The later CLI supplies typed alias rename. The audited process example
-shorter source is possible. Two concise snippets passed26 real REST requests,
+had 128 lines, 14 UUIDs and 31 empty-default lines, while meaningful shorter
+source is possible. Two concise snippets passed 26 real REST requests,
 including identity-only normalization, exact name-only edits, rejected writes and
 restart persistence. Counts and this small trial prove neither improved native
 usability nor large-project performance.
 
-## Assumptions
+CLI tooling is implemented, integrated and published: semantic source `01b76a1`,
+packaging assembly `a0a48e8`, release integration `27df4a3`. Author 12 tests and
+independent 183 semantic assertions pass; independent clean-package review adds
+156 assertions across 10 processes. This is a bounded source-editing tool, not
+proof of complete large-model language ergonomics.
 
+GUI/server release 1 and standalone CLI release 2 are published with runnable
+Windows artifacts, full dependency notices and downloaded asset verification.
+Independent archive/source and clean runtime checks pass in their declared scopes.
+See [CLI publication evidence](release-cli-prerelease-published-20260911.md).
+The newer 13-file contextual-source slice is committed/pushed as `df6f595`,
+with its independent oracle and exact raw evidence. It passed focused 23, guide 3, strict
+Clippy, matching GUI build and formatting. The full 675 suite covers only its
+predecessor; no full 676 suite has run. Root launched the exact 52DE82 GUI in
+isolation: Lifeline Save-adoption and Chain direct Create pass complete source,
+one Undo and one Redo. Machine direct Create and one Undo pass; Redo/reopen are
+pending for Redo. An isolated postboot real Open/SA view/Save passed the complete
+machine prediction and exact six-file equality; the app closed normally.
+Later layout/caption source was independently reviewed. Postboot focused3 ran25
+passing tests and one overflowing-fixture assertion failure. The stronger
+test-only fixture is frozen; its execution and new GUI remain pending.
+
+Local OA B2 now passes all four Action/State/explicitly bound Reuse/Fragment
+Create, one Undo/Save, one Redo/Save and final OA reopen/Save against independent
+complete model/two-source predictions and original exact identities. SA B2 is
+pending locally. Existing B3 OA wide/minimum and SA minimum return scopes remain
+unchanged; neither these passes nor mounted geometry tests imply broader acceptance.
+
+## Assumptions
 - Contextual named creation, remaining-height canvas and local source insertion
   can reduce actual authoring detours. Native engineer tasks must establish this.
 - A bounded pure calculation/quantity model and pinned library content may fit
   the existing typed core better than a general-purpose metamodel rewrite.
-  Independent designs and experiments must test this before ratification.
+  Peer-ratified core staging must still be checked against independent engineering
+  tasks and integrated across all required representations.
 - Existing OA/SA semantics provide a useful foundation; neither their presence
   nor old acceptance proves full conformance to the updated release objective.
 
@@ -94,21 +145,32 @@ usability nor large-project performance.
   current parent draft, then validate/adopt source and consumer atomically. This
   preserves intent and one-step history; a separate Architecture excursion or
   early source commit loses those guarantees. Initial Lifeline/process Work/
-  machine-owner adapters and semantic first-action prompts are being implemented
+  machine-owner adapters and semantic first-action prompts are implemented,
-  and independently challenged; acceptance remains pending. See the
+  reviewed and integrated with focused gates passed; scoped native results are
+  above, with remaining acceptance still open. See the
   [bounded plan](release-contextual-source-creation-plan-20260911.md).
 - Scenario workspace: compact header, optional Tools/Selection shelves, actual
   remaining-height canvas/form, pinned actions, independent scrolling and
   explicit Fit/Focus. Mounted tests support this choice; native proof pending.
-- Quantities/calculations: compare additive pure analysis records, extension of
+- User issue2/comment250 clarifies that diagram manipulation may respect
-  existing fields and external evaluation. No broad schema decision yet.
+  sequence/domain constraints. Codex-956atf owns a shared canvas-shell redesign;
+  the existing controls and supporting source-card fixes do not close the issue.
+- Quantities/calculations: peer comment 231 records ratified schema 8/local
+  definitions and actual shared analysis/core types under implementation in
+  isolated `codex/analysis-core-20260911`. This is not a local schema admission,
+  evaluator or graphical/source/API parity pass; the local core remains descriptive.
 - Libraries: compare copied source, live references, generic definition/usages
   and pinned typed packages with explicit mappings and reviewed updates.
   [Falsification brief](release-library-candidate-review-20260910.md) records
-  identity, dependency, offline and conflict requirements. No ratified winner.
+  identity, dependency, offline and conflict requirements. Refined peer baseline,
+  Case, full-freeze and exact-pin/equivalence contracts are ratified externally;
+  their local integration and executable lifecycle acceptance remain pending.
 - Text authoring: use existing omission/default/identity contracts for concise
   experiments; compare source navigation/refactoring/patch assistance before
   grammar redesign. No namespace, hidden identity or omission change ratified.
+- Reference chooser: peer comment 224's corrected focus ownership, nested-scroll
+  reveal and mounted regressions are prepared, not executed. Preserve that
+  ownership and wait for its source/test handoff.
 
 Long-lived decisions remain in [DECISIONS.md](DECISIONS.md). New user scope and
 normative contracts supersede older prototype exclusions.

harness/experiments/authoring-prerelease-20260911/README.md

@@ -0,0 +1,18 @@
+# Authoring prerelease evidence
+
+Exact preserved producer, independent reviewer and root native evidence for
+Windows preview `v0.2.0-preview.authoring.20260911`. `hashes.json` records each
+copied artifact's original private path, length and SHA256. Git must retain these
+measured bytes. The executable ZIP and validation notes are release assets.
+
+The preserved Python files are the original host-specific harnesses. Their
+relative paths and source/toolchain prerequisites refer to the recorded original
+`.local` layout; they are not portable standalone tests when run from this archive.
+To reproduce them, restore that layout in a disposable checkout and use fresh
+output directories. They never contain Gitea credentials. The GUI launch script
+only launches the application; native actions were performed using Computer Use.
+
+See the three `harness/release-authoring-prerelease-*-20260911.md` reports for
+methods, initial GUI harness failure, passed checks, source provenance and limits.
+`published-verified.json` records the final release readback; upload records bind
+the exact downloaded assets. Publication does not complete the wider OA/SA goal.

harness/experiments/authoring-prerelease-20260911/gui-launch.json

@@ -0,0 +1,9 @@
+{
+  "pid": 10800,
+  "exe": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\authoring-prerelease-gui-20260911-v2\\extracted\\ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm\\arcadia-studio.exe",
+  "archive_sha256": "664f30b6217689aca1492eb263b3d15777067d732fa890eeb028f435209dadfa",
+  "files": 559,
+  "path": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\authoring-prerelease-gui-20260911-v2\\extracted\\ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm;C:\\Windows\\System32;C:\\Windows",
+  "local_appdata": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\authoring-prerelease-gui-20260911-v2\\profile\\local",
+  "appdata": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\authoring-prerelease-gui-20260911-v2\\profile\\roaming"
+}

harness/experiments/authoring-prerelease-20260911/gui-launch.py

@@ -0,0 +1,37 @@
+from pathlib import Path
+import hashlib
+import json
+import os
+import subprocess
+import zipfile
+
+root = Path.cwd()
+name = 'ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm'
+archive = root / '.local/authoring-prerelease-20260911/packages' / (name + '.zip')
+assert hashlib.sha256(archive.read_bytes()).hexdigest() == '664f30b6217689aca1492eb263b3d15777067d732fa890eeb028f435209dadfa'
+trial = root / '.local/authoring-prerelease-gui-20260911-v2'
+trial.mkdir(exist_ok=False)
+extract = trial / 'extracted'
+extract.mkdir()
+with zipfile.ZipFile(archive) as z:
+    names = z.namelist()
+    assert len(names) == len(set(n.casefold() for n in names)) == 559
+    assert all(n.startswith(name + '/') and '..' not in Path(n).parts for n in names)
+    z.extractall(extract)
+package = extract / name
+for line in (package / 'SHA256SUMS.txt').read_text().splitlines():
+    digest, path = line.split('  ', 1)
+    assert hashlib.sha256((package / path).read_bytes()).hexdigest() == digest, path
+for folder in ['profile/local', 'profile/roaming']:
+    (trial / folder).mkdir(parents=True)
+env = os.environ.copy()
+env['LOCALAPPDATA'] = str(trial / 'profile/local')
+env['APPDATA'] = str(trial / 'profile/roaming')
+env['PATH'] = os.pathsep.join([str(package), str(Path(env['SYSTEMROOT']) / 'System32'), env['SYSTEMROOT']])
+exe = package / 'arcadia-studio.exe'
+assert hashlib.sha256(exe.read_bytes()).hexdigest() == 'd4d9c2bd937e301ff1009d7cb93a34ee5aa6dfc837ff7e87d468c85371b20c31'
+with (trial / 'stdout.log').open('wb') as out, (trial / 'stderr.log').open('wb') as err:
+    process = subprocess.Popen([str(exe)], cwd=package, env=env, stdout=out, stderr=err)
+result = {'pid': process.pid, 'exe': str(exe), 'archive_sha256': hashlib.sha256(archive.read_bytes()).hexdigest(), 'files': len(names), 'path': env['PATH'], 'local_appdata': env['LOCALAPPDATA'], 'appdata': env['APPDATA']}
+(trial / 'launch.json').write_text(json.dumps(result, indent=2), encoding='utf-8')
+print(json.dumps(result, indent=2))

harness/experiments/authoring-prerelease-20260911/gui-loaded-modules.json

@@ -0,0 +1,64 @@
+[
+  "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\authoring-prerelease-gui-20260911-v2\\extracted\\ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm\\arcadia-studio.exe",
+  "C:\\Windows\\SYSTEM32\\ntdll.dll",
+  "C:\\Windows\\System32\\KERNEL32.DLL",
+  "C:\\Windows\\System32\\KERNELBASE.dll",
+  "C:\\Windows\\SYSTEM32\\apphelp.dll",
+  "C:\\Windows\\System32\\user32.dll",
+  "C:\\Windows\\System32\\win32u.dll",
+  "C:\\Windows\\System32\\GDI32.dll",
+  "C:\\Windows\\System32\\gdi32full.dll",
+  "C:\\Windows\\System32\\msvcp_win.dll",
+  "C:\\Windows\\System32\\ucrtbase.dll",
+  "C:\\Windows\\System32\\ole32.dll",
+  "C:\\Windows\\System32\\combase.dll",
+  "C:\\Windows\\System32\\RPCRT4.dll",
+  "C:\\Windows\\System32\\advapi32.dll",
+  "C:\\Windows\\System32\\msvcrt.dll",
+  "C:\\Windows\\System32\\sechost.dll",
+  "C:\\Windows\\System32\\bcryptprimitives.dll",
+  "C:\\Windows\\System32\\shell32.dll",
+  "C:\\Windows\\System32\\imm32.dll",
+  "C:\\Windows\\System32\\ws2_32.dll",
+  "C:\\Windows\\System32\\oleaut32.dll",
+  "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\authoring-prerelease-gui-20260911-v2\\extracted\\ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm\\libunwind.dll",
+  "C:\\Windows\\SYSTEM32\\bcrypt.dll",
+  "C:\\Windows\\SYSTEM32\\dwmapi.dll",
+  "C:\\Windows\\SYSTEM32\\uxtheme.dll",
+  "C:\\Windows\\SYSTEM32\\opengl32.dll",
+  "C:\\Windows\\SYSTEM32\\GLU32.dll",
+  "C:\\Windows\\SYSTEM32\\CRYPTBASE.DLL",
+  "C:\\Windows\\SYSTEM32\\dxcore.dll",
+  "C:\\Windows\\System32\\MSCTF.dll",
+  "C:\\Windows\\SYSTEM32\\kernel.appcore.dll",
+  "C:\\Windows\\System32\\clbcatq.dll",
+  "C:\\Windows\\system32\\dataexchange.dll",
+  "C:\\Windows\\system32\\twinapi.appcore.dll",
+  "C:\\Windows\\system32\\explorerframe.dll",
+  "C:\\Windows\\System32\\SHCORE.dll",
+  "C:\\Windows\\System32\\SHLWAPI.dll",
+  "C:\\Windows\\System32\\Windows.Storage.dll",
+  "C:\\Windows\\SYSTEM32\\powrprof.dll",
+  "C:\\Windows\\SYSTEM32\\UMPDC.dll",
+  "C:\\Windows\\SYSTEM32\\CFGMGR32.dll",
+  "C:\\Windows\\system32\\dxgi.dll",
+  "C:\\Windows\\SYSTEM32\\windows.staterepositorycore.dll",
+  "C:\\Windows\\SYSTEM32\\directxdatabasehelper.dll",
+  "C:\\Windows\\SYSTEM32\\d3d12.dll",
+  "C:\\Windows\\SYSTEM32\\d3dcompiler_47.dll",
+  "C:\\Windows\\SYSTEM32\\cryptsp.dll",
+  "C:\\Windows\\System32\\DriverStore\\FileRepository\\vm3d.inf_amd64_39d3dfd189710365\\vm3dgl64.dll",
+  "C:\\Windows\\System32\\DriverStore\\FileRepository\\vm3d.inf_amd64_39d3dfd189710365\\vm3dglhelper64.dll",
+  "C:\\Windows\\SYSTEM32\\WINMM.dll",
+  "C:\\Windows\\SYSTEM32\\D3D12Core.dll",
+  "C:\\Windows\\SYSTEM32\\d3d10warp.dll",
+  "C:\\Windows\\SYSTEM32\\D3DSCache.dll",
+  "C:\\Windows\\SYSTEM32\\USERENV.dll",
+  "C:\\Windows\\SYSTEM32\\dxilconv.dll",
+  "C:\\Windows\\SYSTEM32\\dcomp.dll",
+  "C:\\Windows\\SYSTEM32\\Microsoft.Internal.WarpPal.dll",
+  "C:\\Windows\\SYSTEM32\\textinputframework.dll",
+  "C:\\Windows\\SYSTEM32\\uiautomationcore.dll",
+  "C:\\Windows\\SYSTEM32\\OLEACC.dll",
+  "C:\\Windows\\System32\\threadpoolwinrt.dll"
+]

harness/experiments/authoring-prerelease-20260911/gui-post-save-exact.json

@@ -0,0 +1,5 @@
+{
+  "matched_files": 558,
+  "exact_physical_inventory": 559,
+  "result": "PASS after native packaged walkthrough open and Save"
+}

harness/experiments/authoring-prerelease-20260911/hashes.json

@@ -0,0 +1,116 @@
+[
+  {
+    "path": "producer-inventory.json",
+    "original": ".local/authoring-prerelease-20260911/inventory.json",
+    "bytes": 66465,
+    "sha256": "3c78dea4e93dae186fd24ab826c6680178a2c7849c270a22deae2ff732f1857b"
+  },
+  {
+    "path": "producer-build-evidence.json",
+    "original": ".local/authoring-prerelease-20260911/build-evidence.json",
+    "bytes": 1230,
+    "sha256": "ccc1ccd087f1de9605ba23a4680e1cb6d37ce5ccf0f8db03c03c4797ae32db25"
+  },
+  {
+    "path": "producer-package-result.json",
+    "original": ".local/authoring-prerelease-20260911/package-initial-result.json",
+    "bytes": 216,
+    "sha256": "45f372960931fa34ca75086df5d346eab9127a7ae70b53aed86751e372c24bae"
+  },
+  {
+    "path": "producer-roundtrip.json",
+    "original": ".local/authoring-prerelease-20260911/committed-roundtrip.json",
+    "bytes": 40443,
+    "sha256": "27e4cd2d6130a9ced76560cee130b5d363478ee0da62925e785691c63fadb098"
+  },
+  {
+    "path": "reviewer-artifact-result.json",
+    "original": ".local/authoring-prerelease-review-20260911/artifact-result.json",
+    "bytes": 338784,
+    "sha256": "8b20e9d294338754ddc9b3320b59f55fc19ab979b8da18819fb47a8036db0bba"
+  },
+  {
+    "path": "reviewer-server-result.json",
+    "original": ".local/authoring-prerelease-review-20260911/server-result.json",
+    "bytes": 128779,
+    "sha256": "086bf21e79f3bc7deddfd3278c8ade9b470b11031f7fb278ca0ead3a75b6cfb1"
+  },
+  {
+    "path": "reviewer.py",
+    "original": ".local/authoring-prerelease-review-20260911/review.py",
+    "bytes": 21434,
+    "sha256": "af9eb20946dfcec78bf8959f1d5dc175e82ebb9fabba9f94cefe590fea516b92"
+  },
+  {
+    "path": "gui-launch.json",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/launch.json",
+    "bytes": 827,
+    "sha256": "ade93cb1abea623f1cc63b8124857cad822e4f75e8d1c389f75fd8a9089b2c39"
+  },
+  {
+    "path": "gui-loaded-modules.json",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/loaded-modules.json",
+    "bytes": 3123,
+    "sha256": "ccae3d91310644e171bf35028f1c0758ef330ebb051983e0524b8cd714652b6b"
+  },
+  {
+    "path": "gui-post-save-exact.json",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/post-save-package-exact.json",
+    "bytes": 133,
+    "sha256": "e340289a2c09058c539e63de33a361326b146fc181a8bd1349a88bfc813f2420"
+  },
+  {
+    "path": "upload-binaries-verified.json",
+    "original": ".local/authoring-prerelease-20260911/upload-binaries-verified.json",
+    "bytes": 685,
+    "sha256": "16799aa759e7287f4c50af1068d311f6f916f97e0cfbd7aaddf7432770d281f3"
+  },
+  {
+    "path": "gui-launch.py",
+    "original": ".local/authoring-prerelease-gui-20260911.py",
+    "bytes": 2001,
+    "sha256": "db256498e44cbb67cd84738a1a37f0e9ab0931d130a3b8c830af2c02cff0924c"
+  },
+  {
+    "path": "home.png",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/home.png",
+    "bytes": 97695,
+    "sha256": "e9c24489e949096347b11234d8d2d343716fd5895903c4978d139107a70e3e5a"
+  },
+  {
+    "path": "oa-walkthrough-save.png",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/oa-walkthrough-save.png",
+    "bytes": 131037,
+    "sha256": "61b2cbdd2dddb6fa176000198ae845554147cbc80abe52fa992211157f6297b5"
+  },
+  {
+    "path": "sa-walkthrough.png",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/sa-walkthrough.png",
+    "bytes": 132180,
+    "sha256": "7f3a2bbed9fa69f9d5d844f9a52f81fbc3928244f49d7a9ff1e475c3f2411dbf"
+  },
+  {
+    "path": "state-workspace.png",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/state-workspace.png",
+    "bytes": 135827,
+    "sha256": "79010527e5e1bb8ccf428788a00dea80e6d8253f3d7c249089218e2df9edd6da"
+  },
+  {
+    "path": "offline-guide.png",
+    "original": ".local/authoring-prerelease-gui-20260911-v2/offline-guide.png",
+    "bytes": 185496,
+    "sha256": "58812d2bd0d6e73daa5187f2dd87564189960387ac4bb1e399af4b8d114c05df"
+  },
+  {
+    "path": "published-verified.json",
+    "original": ".local/authoring-prerelease-20260911/published-verified.json",
+    "bytes": 374,
+    "sha256": "668f28c4d8cf753386085271eb181513b0127940f324f423a2b87614ec8cc85a"
+  },
+  {
+    "path": "upload-validation-verified.json",
+    "original": ".local/authoring-prerelease-20260911/upload-validation-verified.json",
+    "bytes": 277,
+    "sha256": "f39859baea544662fc4bdd1fe14dbcb9bdab5639b173754a34b58b853f0d47a7"
+  }
+]

harness/experiments/authoring-prerelease-20260911/producer-build-evidence.json

@@ -0,0 +1,10 @@
+{
+  "source_identity": "Exact-byte reconstructed input snapshot 234e01e27d6935d213097b345d91d369f808af82, derived from release base 2ec72d4241fa8971fa6fe9f626937de9dfd7c7eb by seven documented LF-to-CRLF restorations and preservation attributes. All 253 GUI manifest inputs and 120 preserved server source files matched. This derived commit is not claimed as the original build commit; GUI and server original build records are retained separately.",
+  "profile": "Prebuilt Windows debug/development artifacts: GUI cargo build --locked -p oa-desktop --bin arcadia-studio, September 11 2026; preserved server from September 7 workspace bins build. Not a release-profile or reproducible-build claim.",
+  "compiler": "rustc 1.98.1, commit 48a229ceaefd4985c50990b14116b6d856af0985, x86_64-pc-windows-gnullvm, LLVM 22.1.8. Current rustc -vV, all 58 prior-notice target-library hashes and both embedded compiler paths matched; original recorded build evidence retained.",
+  "target": "x86_64-pc-windows-gnullvm",
+  "binary_sha256": {
+    "arcadia-studio.exe": "d4d9c2bd937e301ff1009d7cb93a34ee5aa6dfc837ff7e87d468c85371b20c31",
+    "arcadia-server.exe": "efeeb89c0d2e0f93df4472cb3e9f48b2b722a37ae1043c90a5a56f2e845fe665"
+  }
+}

harness/experiments/authoring-prerelease-20260911/producer-package-result.json

@@ -0,0 +1,7 @@
+{
+  "started": "2026-09-11T12:17:30.7730570Z",
+  "source_commit": "234e01e27d6935d213097b345d91d369f808af82",
+  "success": true,
+  "finished": "2026-09-11T12:21:23.0302800Z",
+  "elapsed_seconds": 232.2812442
+}

harness/experiments/authoring-prerelease-20260911/published-verified.json

@@ -0,0 +1,10 @@
+{
+  "id": 1,
+  "tag": "v0.2.0-preview.authoring.20260911",
+  "url": "http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/v0.2.0-preview.authoring.20260911",
+  "draft": false,
+  "prerelease": true,
+  "asset_count": 3,
+  "notes_sha256": "e48399db78b18c6bd779412f7aeccf13fe78bf8c9bac22a4c418755acfab175c",
+  "published_at": "2026-09-11T12:40:51Z"
+}

harness/experiments/authoring-prerelease-20260911/reviewer.py

@@ -0,0 +1,335 @@
+"""Independent frozen archive and packaged-server checks; never runs Cargo or GUI."""
+from pathlib import Path, PurePosixPath
+import hashlib
+import json
+import os
+import re
+import socket
+import stat
+import struct
+import subprocess
+import sys
+import tarfile
+import time
+import tomllib
+import traceback
+import urllib.request
+import uuid
+import zipfile
+
+OUT = Path(__file__).resolve().parent
+ROOT = OUT.parents[1]
+PREP = ROOT / '.local/authoring-prerelease-20260911'
+NAME = 'ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm'
+ZIP = PREP / 'packages' / (NAME + '.zip')
+EXTRACT = OUT / 'extracted'
+PACKAGE = EXTRACT / NAME
+SOURCE = PREP / 'source'
+SOURCE_COMMIT = '234e01e27d6935d213097b345d91d369f808af82'
+BASE_COMMIT = '2ec72d4241fa8971fa6fe9f626937de9dfd7c7eb'
+EXPECTED_ZIP = '664f30b6217689aca1492eb263b3d15777067d732fa890eeb028f435209dadfa'
+BINARIES = {
+    'arcadia-studio.exe': 'd4d9c2bd937e301ff1009d7cb93a34ee5aa6dfc837ff7e87d468c85371b20c31',
+    'arcadia-server.exe': 'efeeb89c0d2e0f93df4472cb3e9f48b2b722a37ae1043c90a5a56f2e845fe665',
+    'libunwind.dll': 'f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4',
+}
+RESULT = {'checks': [], 'scope': sys.argv[1], 'started_utc': time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime())}
+
+
+def check(condition, label):
+    if not condition:
+        raise AssertionError(label)
+    RESULT['checks'].append(label)
+
+
+def sha(data):
+    return hashlib.sha256(data).hexdigest()
+
+
+def read_json(path):
+    return json.loads(path.read_text(encoding='utf-8-sig'))
+
+
+def write_json(path, value):
+    with path.open('x', encoding='utf-8', newline='\n') as f:
+        json.dump(value, f, indent=2, ensure_ascii=False)
+        f.write('\n')
+
+
+def file_map(directory):
+    result = {}
+    for p in directory.rglob('*'):
+        check(not p.is_symlink() and not (getattr(p.lstat(), 'st_file_attributes', 0) & 0x400), 'ordinary path: ' + p.relative_to(directory).as_posix())
+        if p.is_file():
+            result[p.relative_to(directory).as_posix()] = sha(p.read_bytes())
+    return result
+
+
+def safe_name(name):
+    p = PurePosixPath(name)
+    return not p.is_absolute() and p.as_posix() == name and '\\' not in name and ':' not in name and all(c not in ('', '.', '..') and not c.endswith(('.', ' ')) and not re.match(r'(?i)^(con|nul|prn|aux|com[1-9]|lpt[1-9])(\.|$)', c) for c in p.parts)
+
+
+def git_blobs(ref, paths):
+    raw = subprocess.run(['git', 'cat-file', '--batch'], input=''.join(ref + ':' + p + '\n' for p in paths).encode(), cwd=ROOT, capture_output=True, check=True).stdout
+    result, cursor = {}, 0
+    for p in paths:
+        end = raw.index(b'\n', cursor)
+        header = raw[cursor:end].split()
+        check(len(header) == 3 and header[1] == b'blob', 'Git blob exists: ' + ref[:7] + ':' + p)
+        size = int(header[2])
+        result[p] = raw[end + 1:end + 1 + size]
+        cursor = end + 2 + size
+    check(cursor == len(raw), 'Git batch framing complete: ' + ref[:7])
+    return result
+
+
+def artifact():
+    check(not EXTRACT.exists(), 'clean extraction destination absent')
+    check(ZIP.stat().st_size == 32618262 and sha(ZIP.read_bytes()) == EXPECTED_ZIP, 'frozen ZIP size and SHA256')
+    with zipfile.ZipFile(ZIP) as archive:
+        infos = archive.infolist()
+        names = [i.filename for i in infos]
+        check(len(infos) == 559, '559 ZIP members')
+        check(len({n.casefold() for n in names}) == len(names), 'no duplicate or case-colliding ZIP names')
+        check(all(safe_name(n) and n.startswith(NAME + '/') for n in names), 'one safe ZIP root without traversal or Windows special paths')
+        check(all(not i.is_dir() and stat.S_IFMT(i.external_attr >> 16) in (0, stat.S_IFREG) for i in infos), 'ordinary file-only ZIP entries')
+        check(all(i.date_time == (2000, 1, 1, 0, 0, 0) and i.flag_bits & 1 == 0 for i in infos), 'fixed timestamps and no encrypted entries')
+        check(archive.testzip() is None, 'all ZIP CRCs')
+        EXTRACT.mkdir()
+        archive.extractall(EXTRACT)
+        archive_hashes = {i.filename[len(NAME) + 1:]: sha(archive.read(i)) for i in infos}
+    actual = file_map(PACKAGE)
+    check(actual == archive_hashes, 'complete extracted file set and bytes equal ZIP')
+    sums = {}
+    for line in (PACKAGE / 'SHA256SUMS.txt').read_text().splitlines():
+        match = re.fullmatch(r'([0-9a-f]{64})  (.+)', line)
+        check(match is not None and safe_name(match[2]) and match[2] not in sums, 'well-formed unique checksum row')
+        sums[match[2]] = match[1]
+    check(sums == {p: h for p, h in actual.items() if p != 'SHA256SUMS.txt'}, 'checksum inventory covers every other file exactly')
+    package = read_json(PACKAGE / 'package.json')
+    inputs = package['input_sha256']
+    generated = {'SHA256SUMS.txt', 'START-HERE.txt', 'THIRD-PARTY-NOTICES.txt', 'dependency-notices.json', 'documentation-check.json', 'package.json'}
+    check(set(actual) - set(inputs) == generated and all(actual[p] == h.lower() for p, h in inputs.items()), '553 package input hashes plus exactly six generated files')
+    check(package['version'] == '0.2.0-preview.authoring.20260911' and package['target'] == 'x86_64-pc-windows-gnullvm', 'version and target')
+    check(all(actual[p] == h for p, h in BINARIES.items()), 'exact GUI, server and runtime hashes')
+    for p in BINARIES:
+        data = (PACKAGE / p).read_bytes()
+        offset = struct.unpack_from('<I', data, 0x3c)[0]
+        check(data[:2] == b'MZ' and data[offset:offset + 4] == b'PE\0\0' and struct.unpack_from('<H', data, offset + 4)[0] == 0x8664, 'ordinary PE x86_64: ' + p)
+    check({p for p in actual if '/' not in p} == {'arcadia-server.exe', 'arcadia-studio.exe', 'libunwind.dll', 'LICENSE', 'README.md'} | generated, 'only declared portable top-level files')
+    check({p.split('/')[0] for p in actual if '/' in p} == {'deployment', 'docs', 'examples', 'licenses'}, 'no harness, private profile, source checkout or credential-directory payload')
+    for p in actual:
+        if p.startswith(('docs/', 'examples/', 'deployment/')) or p == 'LICENSE':
+            check((SOURCE / p).is_file() and sha((SOURCE / p).read_bytes()) == actual[p], 'public source document/example bytes: ' + p)
+    RESULT['archive'] = {'path': str(ZIP), 'sha256': EXPECTED_ZIP, 'bytes': ZIP.stat().st_size, 'file_count': len(actual), 'files': actual}
+    RESULT['package_claims'] = {k: package[k] for k in ('version', 'target', 'acceptance', 'build', 'build_evidence')}
+    provenance()
+    notices(actual)
+
+
+def provenance():
+    gui_path = ROOT / '.local/behavior-creation-20260911/gui-verified/manifest.json'
+    gui = read_json(gui_path)
+    expected = {i['path']: i['sha256'].lower() for i in gui['inputs']}
+    check(len(expected) == 253, 'original GUI manifest has 253 unique inputs')
+    derived = git_blobs(SOURCE_COMMIT, list(expected))
+    base = git_blobs(BASE_COMMIT, list(expected))
+    differences = []
+    for p, h in expected.items():
+        check(sha(derived[p]) == h == sha((SOURCE / p).read_bytes()), 'original GUI input equals derived Git blob and checkout: ' + p)
+        if sha(base[p]) != h:
+            check(sha(base[p].replace(b'\r\n', b'\n').replace(b'\n', b'\r\n')) == h, 'exact LF-to-CRLF-only restoration: ' + p)
+            differences.append(p)
+    check(set(differences) == {'docs/openapi.json'} | {'crates/oa-desktop/src/semantic_review/' + p + '.rs' for p in ('artifacts_view', 'attachments_view', 'keyed_rows', 'keyed_tests', 'keyed', 'ordered')}, 'exact seven documented CRLF restorations')
+    delta = subprocess.run(['git', 'diff', '--name-only', '--ignore-space-at-eol', BASE_COMMIT, SOURCE_COMMIT], cwd=ROOT, check=True, capture_output=True).stdout.decode().splitlines()
+    check(delta == ['.gitattributes'], 'derived commit changes only preservation attributes beyond EOL bytes')
+    origin = read_json(ROOT / 'harness/experiments/textual-authoring-20260911-local/provenance.json')
+    tar_path = ROOT / '.local/linux-qa/runtime/source7-20260907T082753190288Z.tar.gz'
+    check(sha(tar_path.read_bytes()) == 'cbb371a93a562e1e641d7629fe351e016d63e66fc9112499b3fed6d5cd171f78', 'original server source tar identity')
+    server_expected = {i['path']: i['snapshot_sha256'].lower() for i in origin['source_comparisons']}
+    check(len(server_expected) == 120, '120 independently recorded server source files')
+    server_base = git_blobs(BASE_COMMIT, list(server_expected))
+    tar_manifest = read_json(tar_path.with_suffix('').with_suffix('.tar.manifest.json'))
+    with tarfile.open(tar_path) as tar:
+        members = {m.name.removeprefix('./'): m for m in tar.getmembers() if m.isfile()}
+        for p, h in server_expected.items():
+            check(sha(tar.extractfile(members[p]).read()) == h == sha(server_base[p]) == sha((SOURCE / p).read_bytes()), 'server recorded tar equals base Git and staged input: ' + p)
+        shared = [p for p in members if p in ('Cargo.toml', 'Cargo.lock', 'docs/openapi.json') or p.startswith('build/')]
+        for p in shared:
+            check(sha(tar.extractfile(members[p]).read()) == expected[p] == tar_manifest['files'][p].lower(), 'original server/GUI shared manifest or build input: ' + p)
+    evidence = read_json(PACKAGE / 'package.json')['build_evidence']['evidence']
+    check(evidence['binary_sha256'] == {k: v for k, v in BINARIES.items() if k.endswith('.exe')}, 'packaged build evidence binds both exact executables')
+    check(SOURCE_COMMIT in evidence['source_identity'] and BASE_COMMIT in evidence['source_identity'], 'evidence identifies auxiliary and base sources distinctly')
+    check('not claimed as the original build commit' in evidence['source_identity'] and 'Not a release-profile or reproducible-build claim' in evidence['profile'], 'packaged provenance retains explicit limitations')
+    RESULT['provenance'] = {'gui_manifest_sha256': sha(gui_path.read_bytes()), 'gui_build_record': gui['build'], 'historical_gui_head': gui['head'], 'gui_inputs': 253, 'source_commit': SOURCE_COMMIT, 'base_commit': BASE_COMMIT, 'eol_restorations': differences, 'server_source_files': 120, 'shared_input_files': shared, 'tar_sha256': sha(tar_path.read_bytes())}
+
+
+def notices(actual):
+    notice = read_json(PACKAGE / 'dependency-notices.json')
+    check(notice['root_packages'] == ['oa-desktop', 'oa-server'] and len(notice['packages']) == 266, '266 notice packages and exact desktop/server roots')
+    check(notice['cargo_lock_sha256'].lower() == sha((SOURCE / 'Cargo.lock').read_bytes()), 'notice lock equals exact historical source lock')
+    for p, h in notice['workspace_build_inputs_sha256'].items():
+        check(sha((SOURCE / p).read_bytes()) == h, 'notice common build input: ' + p)
+    lock = tomllib.loads((SOURCE / 'Cargo.lock').read_text())
+    locked = {(p['name'], p['version'], p.get('source')): p for p in lock['package']}
+    referenced = set()
+    def refs(items):
+        for i in items:
+            p = i['path']
+            check(safe_name(p) and p.startswith('licenses/') and actual.get(p) == i['sha256'].lower(), 'bundled exact notice reference: ' + p)
+            referenced.add(p)
+    fonts = []
+    for p in notice['packages']:
+        key = (p['name'], p['version'], p['source'])
+        check(key in locked and p['registry_checksum'] == locked[key].get('checksum'), 'notice identity/checksum occurs in historical lock: ' + p['name'] + '@' + p['version'])
+        check(len(p['notices']) > 0, 'package has notice text: ' + p['name'])
+        refs(p['notices'])
+        for f in p['embedded_fonts']:
+            check(len(f['notices']) > 0, 'embedded font notice present: ' + p['name'] + '/' + f['path'])
+            refs(f['notices'])
+            fonts.append({'package': p['name'], 'path': f['path'], 'sha256': f['sha256'], 'license': f['license']})
+        if p['source'] is None:
+            directory = SOURCE / 'crates' / p['name']
+            files = {f.relative_to(directory).as_posix(): sha(f.read_bytes()) for f in directory.rglob('*') if f.is_file() and 'target' not in f.relative_to(directory).parts and f.name != '.cargo-ok'}
+            check(files == p['local_source_sha256'], 'complete ordinary local-crate inventory: ' + p['name'])
+    refs(notice['rust']['notices'])
+    refs(notice['runtime']['notices'])
+    check(notice['runtime']['sha256'] == BINARIES['libunwind.dll'], 'runtime notice is bound to shipped DLL')
+    library_dir = ROOT / '.local/toolchain/rustup/toolchains/stable-x86_64-pc-windows-gnullvm/lib/rustlib/x86_64-pc-windows-gnullvm/lib'
+    check(len(notice['rust']['target_libraries_sha256']) == 58, '58 compiler target libraries recorded')
+    for name, h in notice['rust']['target_libraries_sha256'].items():
+        check(sha((library_dir / name).read_bytes()) == h, 'retained compiler target-library bytes: ' + name)
+    RESULT['notices'] = {'packages': len(notice['packages']), 'roots': notice['root_packages'], 'lock_sha256': notice['cargo_lock_sha256'], 'notice_reference_files': len(referenced), 'additional_license_files': sorted({p for p in actual if p.startswith('licenses/')} - referenced), 'embedded_fonts': fonts, 'rust_version': notice['rust']['version'], 'runtime_provenance': notice['runtime']['provenance'], 'scope': notice['scope']}
+
+
+def server():
+    prior = read_json(OUT / 'artifact-result.json')
+    check(prior['status'] == 'PASS' and file_map(PACKAGE) == prior['archive']['files'], 'previously verified extracted package is unchanged')
+    runtime = OUT / 'server-run'
+    runtime.mkdir()
+    data_dir = runtime / 'data'
+    temp = runtime / 'temp'
+    temp.mkdir()
+    windows = Path(os.environ['SystemRoot'])
+    env = {'SystemRoot': str(windows), 'WINDIR': str(windows), 'PATH': str(windows / 'System32') + ';' + str(windows), 'TEMP': str(temp), 'TMP': str(temp)}
+    exe = PACKAGE / 'arcadia-server.exe'
+    RESULT['environment'] = env
+    RESULT['processes'] = []
+    for arg in ('--version', '--help'):
+        output = subprocess.run([str(exe), arg], cwd=PACKAGE, env=env, capture_output=True, timeout=15, creationflags=subprocess.CREATE_NO_WINDOW)
+        (runtime / (arg[2:] + '.stdout')).write_bytes(output.stdout)
+        (runtime / (arg[2:] + '.stderr')).write_bytes(output.stderr)
+        check(output.returncode == 0 and not output.stderr, arg + ' succeeds under clean runtime PATH')
+        if arg == '--version':
+            check(output.stdout.decode().strip() == 'arcadia-server 0.2.0', 'server reports underlying application version 0.2.0')
+    check(not data_dir.exists(), 'help/version do not create explicit test data directory')
+    opener = urllib.request.build_opener(urllib.request.ProxyHandler({}))
+    request_number = 0
+    def request(port, method, path, payload=None):
+        nonlocal request_number
+        request_number += 1
+        body = None if payload is None else json.dumps(payload, ensure_ascii=False).encode()
+        req = urllib.request.Request(f'http://127.0.0.1:{port}' + path, data=body, method=method, headers={} if body is None else {'Content-Type': 'application/json'})
+        with opener.open(req, timeout=10) as response:
+            raw = response.read()
+            meta = {'method': method, 'path': path, 'status': response.status, 'headers': dict(response.headers), 'body_sha256': sha(raw)}
+        prefix = runtime / f'http-{request_number:02d}'
+        prefix.with_suffix('.body').write_bytes(raw)
+        write_json(prefix.with_suffix('.json'), meta)
+        return meta, raw
+    def start(index):
+        with socket.socket() as s:
+            s.bind(('127.0.0.1', 0))
+            port = s.getsockname()[1]
+        out = (runtime / f'server-{index}.stdout').open('xb')
+        err = (runtime / f'server-{index}.stderr').open('xb')
+        args = [str(exe), '--bind', f'127.0.0.1:{port}', '--data-dir', str(data_dir)]
+        process = subprocess.Popen(args, cwd=PACKAGE, env=env, stdout=out, stderr=err, creationflags=subprocess.CREATE_NO_WINDOW)
+        out.close()
+        err.close()
+        RESULT['processes'].append({'pid': process.pid, 'port': port, 'arguments': args})
+        deadline = time.monotonic() + 15
+        while True:
+            if process.poll() is not None:
+                raise AssertionError('packaged server exited before listening')
+            try:
+                with socket.create_connection(('127.0.0.1', port), timeout=.2):
+                    break
+            except OSError:
+                if time.monotonic() > deadline:
+                    process.terminate()
+                    process.wait(timeout=5)
+                    raise AssertionError('packaged server did not listen within 15s')
+                time.sleep(.05)
+        return process, port
+    def stop(process):
+        process.terminate()
+        code = process.wait(timeout=10)
+        RESULT['processes'][-1]['exit_after_explicit_terminate'] = code
+    process = None
+    try:
+        process, port = start(1)
+        for path in ('/health', '/health/ready'):
+            meta, raw = request(port, 'GET', path)
+            check(meta['status'] == 200 and json.loads(raw) == {'status': 'ok'}, path + ' contract')
+        meta, raw = request(port, 'GET', '/api/v1/openapi.json')
+        check(meta['status'] == 200 and raw == (PACKAGE / 'docs/openapi.json').read_bytes(), 'served OpenAPI equals complete packaged source bytes')
+        name = 'Independent package persistence — 救助 20260911'
+        meta, raw = request(port, 'POST', '/api/v1/projects', {'name': name})
+        created = json.loads(raw)
+        check(meta['status'] == 201, 'one create returns 201')
+        resource = str(uuid.UUID(created['resource_id']))
+        model_id = str(uuid.UUID(created['model_id']))
+        expected_summary = {'resource_id': resource, 'revision': 1, 'model_id': model_id, 'schema_version': 7, 'name': name, 'elements': 0, 'relations': 0, 'migration': None}
+        check(created == expected_summary and resource != model_id, 'complete create summary with distinct fresh resource/model IDs')
+        etag = f'"p-{resource}-r1"'
+        headers = {k.lower(): v for k, v in meta['headers'].items()}
+        path = '/api/v1/projects/' + resource
+        check(headers.get('etag') == etag and headers.get('location') == path, 'create ETag and resource Location')
+        meta, raw = request(port, 'GET', path)
+        stored = json.loads(raw)
+        model = {'schema_version': 7, 'id': model_id, 'alias': 'mission', 'name': name, 'description': '', 'elements': {}, 'relations': {}, 'diagrams': {}, 'artifact_links': {}, 'traces': {}}
+        source = f'arcadia 7;\nproject mission {json.dumps(name, ensure_ascii=False)} id "{model_id}" {{\n    description "";\n}}\n'
+        expected = {'resource_id': resource, 'revision': 1, 'model': model, 'source_project': {'entry': 'project.arcadia', 'files': {'project.arcadia': source}}}
+        check(meta['status'] == 200 and stored == expected, 'GET equals independently predicted complete Project and SourceBundle')
+        check({k.lower(): v for k, v in meta['headers'].items()}.get('etag') == etag, 'GET ETag equals created revision')
+        disk = data_dir / (resource + '.json')
+        disk_bytes = disk.read_bytes()
+        check(json.loads(disk_bytes) == expected, 'durable disk envelope equals complete expected GET')
+        check({p.name for p in data_dir.iterdir()} == {'.arcadia.lock', disk.name}, 'private store contains only one project and lock')
+        stop(process)
+        process = None
+        process, port = start(2)
+        meta, raw = request(port, 'GET', '/health/ready')
+        check(meta['status'] == 200 and json.loads(raw) == {'status': 'ok'}, 'restarted packaged server ready')
+        meta, raw = request(port, 'GET', path)
+        check(meta['status'] == 200 and json.loads(raw) == expected, 'restart retains exact complete Project and SourceBundle')
+        check({k.lower(): v for k, v in meta['headers'].items()}.get('etag') == etag and disk.read_bytes() == disk_bytes, 'restart retains revision, ETag and every durable envelope byte')
+        RESULT['persistence'] = {'resource_id': resource, 'model_id': model_id, 'revision': 1, 'etag': etag, 'disk_sha256': sha(disk_bytes), 'expected': expected, 'stop_kind': 'explicit process termination after acknowledged durable create; not a graceful-drain claim'}
+    finally:
+        if process is not None and process.poll() is None:
+            stop(process)
+    check(file_map(PACKAGE) == prior['archive']['files'], 'server execution leaves complete extracted package unchanged')
+    check(sha(ZIP.read_bytes()) == EXPECTED_ZIP, 'frozen ZIP unchanged after independent runtime checks')
+
+
+if __name__ == '__main__':
+    result_path = OUT / (sys.argv[1] + '-result.json')
+    if result_path.exists():
+        raise SystemExit('Refusing to overwrite prior evidence: ' + str(result_path))
+    try:
+        {'artifact': artifact, 'server': server}[sys.argv[1]]()
+        RESULT['status'] = 'PASS'
+    except Exception as error:
+        RESULT['status'] = 'FAIL'
+        RESULT['error'] = repr(error)
+        RESULT['traceback'] = traceback.format_exc()
+    RESULT['finished_utc'] = time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime())
+    RESULT['script_sha256'] = sha(Path(__file__).read_bytes())
+    write_json(result_path, RESULT)
+    print(json.dumps({k: RESULT[k] for k in ('scope', 'status', 'started_utc', 'finished_utc')}, indent=2))
+    print('checks:', len(RESULT['checks']))
+    if RESULT['status'] == 'FAIL':
+        print(RESULT['traceback'])
+        sys.exit(1)

harness/experiments/authoring-prerelease-20260911/upload-binaries-verified.json

@@ -0,0 +1,18 @@
+[
+  {
+    "id": 1,
+    "name": "ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm.zip",
+    "bytes": 32618262,
+    "sha256": "664f30b6217689aca1492eb263b3d15777067d732fa890eeb028f435209dadfa",
+    "url": "http://217.177.34.108:3000/attachments/48a283b7-5391-4677-9427-02a772e5e7e4",
+    "readback": "PASS"
+  },
+  {
+    "id": 2,
+    "name": "ArcadiaStudio-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm.zip.sha256",
+    "bytes": 143,
+    "sha256": "ea553a85f35d2d48f229dd4cd00ac0c3d4a6e9dafa58273004b2c49d1279f856",
+    "url": "http://217.177.34.108:3000/attachments/08164a39-9292-4b2d-9856-c6ec41d9b8e2",
+    "readback": "PASS"
+  }
+]

harness/experiments/authoring-prerelease-20260911/upload-validation-verified.json

@@ -0,0 +1,10 @@
+[
+  {
+    "id": 3,
+    "name": "VALIDATION.md",
+    "bytes": 29308,
+    "sha256": "c2a70be735c780d3e468d5f12643fb00be75673434211366739926536bbbe9b9",
+    "url": "http://217.177.34.108:3000/attachments/9ff53361-eedf-46a0-aa4e-34f11bb0f302",
+    "readback": "PASS"
+  }
+]

harness/experiments/cli-packaging-20260911/README.md

@@ -0,0 +1,15 @@
+# Standalone CLI package evidence
+
+Exact frozen author and independent reviewer evidence for the Windows
+`ArcadiaCLI-0.2.0-preview.authoring.20260911` artifact. `hashes.json` records
+original private paths, lengths and hashes; preserve these bytes through Git.
+
+The original host-specific reviewer script expects its recorded `.local` layout,
+source snapshot and fresh disposable outputs. Restore that layout to reproduce
+it; running the archived file in this directory is not a portable test command.
+The production packaging tests remain under `scripts/`.
+
+The author report records 15 inert checks, 13 Python tests, default-preserving
+notice selection and strict package assembly. Independent review verifies source
+equivalence/defaults, all 114 archive files and 156 assertions across 10 clean
+runtime invocations. Neither completed the wider OA/SA product or Linux acceptance.

harness/experiments/cli-packaging-20260911/artifacts-final.log

@@ -0,0 +1,5 @@
+.............
+----------------------------------------------------------------------
+Ran 13 tests in 1.252s
+
+OK

harness/experiments/cli-packaging-20260911/assembly.json

@@ -0,0 +1,454 @@
+{
+  "assembly_commit": "a0a48e82bd43be181caca1fe2c1514c21f2bc405",
+  "semantic_commit": "01b76a1e89e93b7992f39e63560aa8b2ca2f69e0",
+  "packaging_files": [
+    {
+      "path": "scripts/package-cli-windows.ps1",
+      "sha256": "b6ec59bb55ff1e5624c782f492ce1d169131e708f257dcca195957edf7341c1a"
+    },
+    {
+      "path": "scripts/package-common.ps1",
+      "sha256": "d859453a8230b4f305d822c8742b371a71e35df698109a5d55c948f6dfaf0640"
+    },
+    {
+      "path": "scripts/package-windows.ps1",
+      "sha256": "28997ff78565619ed9c9b185f66dc922808f1f0be17f522b430c6c415448663d"
+    },
+    {
+      "path": "scripts/windows-notices.ps1",
+      "sha256": "a5328c05579e1b9ca09142ee99e87c12994d12764f7c69448e392883d718ef01"
+    },
+    {
+      "path": "scripts/package-artifacts.py",
+      "sha256": "24515fdbf4eebfb47b82383c6b3ccf290261cbd919f7f46a586b6488af769c8d"
+    },
+    {
+      "path": "scripts/package-cli-readme.md",
+      "sha256": "ea7bc971993e02751f24bc3cb313503a5f5fefd788540974e114398115c7c8e2"
+    },
+    {
+      "path": "scripts/test-package-cli-windows.ps1",
+      "sha256": "2c18f91149ede5c7b677a165bd0d8b31f3c4691642cc10dd1007a7a77bde912a"
+    },
+    {
+      "path": "scripts/test-package-artifacts.py",
+      "sha256": "881718181a36fa5f7abfcd2e746bc1339446f9aeed6b2c039b8d2ce230ec202d"
+    },
+    {
+      "path": "scripts/test-windows-notices.ps1",
+      "sha256": "00a6ad1ed28fdb9044ceb7cc0714ceb7af095db2fb18f4828a053aa872a3147d"
+    }
+  ],
+  "exact_cli_inputs": [
+    {
+      "path": "Cargo.toml",
+      "sha256": "369f5b4b2b60705a94623c8c0b68f8e0b048f263280ce07ae0629ad353797d62"
+    },
+    {
+      "path": "Cargo.lock",
+      "sha256": "2b960242c33eb839ff008d01731f6d5cdb4e047ca8cd6e13151cbf9c09913510"
+    },
+    {
+      "path": "crates/oa-cli/Cargo.toml",
+      "sha256": "49c567f1af74a826683b4d96845feb3806fd9bcb7dc2767e16b5509d4e5e1cde"
+    },
+    {
+      "path": "crates/oa-cli/src/lib.rs",
+      "sha256": "97bebab63b4a611a1d36ad0c20fe452cbe1985fe3a6fbd39c954603da11410fc"
+    },
+    {
+      "path": "crates/oa-cli/src/main.rs",
+      "sha256": "de964f9b6c59c0f31c080afbd3b31d442b07b1b44f6a187a248d3409c45d35fb"
+    },
+    {
+      "path": "crates/oa-cli/tests/source_cli.rs",
+      "sha256": "a3a1b856c7a9fd3d80bc8074150a24fbb0ef0e9ddf736c7cea036725fc3dc2b8"
+    }
+  ],
+  "unchanged_core_shared_build_inputs": [
+    {
+      "path": "build/windows_manifest.rs",
+      "sha256": "168da2c42ecccfebc11ee3e1b455e653a68fe9c6d30a9842a8b9e7441d086c80"
+    },
+    {
+      "path": "build/windows.manifest",
+      "sha256": "9c19c5a02f858ece84c44839ad2b145d9c1d90442da0b15c87fd045f975974eb"
+    },
+    {
+      "path": "build/windows.rc",
+      "sha256": "a27385edcae0bcf96f55361056cb7be5f36d76fcddcaefd20647c91959563e1e"
+    },
+    {
+      "path": "crates/oa-core/build.rs",
+      "sha256": "ab1be6ae1fd8bf3ebaeef6348347a9d5e666bde693126f199e041659e0b094a9"
+    },
+    {
+      "path": "crates/oa-core/Cargo.toml",
+      "sha256": "64824ec447be777841a972bf06c894ef2624a37e4725583bcfe0389deb9f00a3"
+    },
+    {
+      "path": "crates/oa-core/examples/generate_demo.rs",
+      "sha256": "e26f432c95331aeca50985dbb3ad2c558affd43023b585811f0f7bfaa59f6661"
+    },
+    {
+      "path": "crates/oa-core/examples/generate_release1.rs",
+      "sha256": "1d5f11165d74893e4bc18dbf3a2f2111f4026bd89fd06ee7f0bae69e45c4d4b5"
+    },
+    {
+      "path": "crates/oa-core/examples/release_dense_views.rs",
+      "sha256": "a83158488ef9b7394f136c52b1496719be935c4e5bdfe457cab5c9894f5f9412"
+    },
+    {
+      "path": "crates/oa-core/examples/routing_workshop.rs",
+      "sha256": "571307b18b6d4fa04700c5a4d4b0c2154c419e93a21292b2028e7b6f46a2faa7"
+    },
+    {
+      "path": "crates/oa-core/src/data.rs",
+      "sha256": "7f9c7c7dd8353cb5a38597b92cde6d3e890203d392473187eb387d41ff37414a"
+    },
+    {
+      "path": "crates/oa-core/src/demo.rs",
+      "sha256": "ad62123f96c20ff023cafc1a9849b0fa06bc62edd1fb9701799e4599b458600c"
+    },
+    {
+      "path": "crates/oa-core/src/language_nesting_tests.rs",
+      "sha256": "bd061611e8cb6f28ab203c73e544ac98bf275eb464cd314ad5fbd25f773df33b"
+    },
+    {
+      "path": "crates/oa-core/src/language.rs",
+      "sha256": "638f08a42e9cf4996b5d07f69b4d6f517a518369f3604d25be1006e40e080765"
+    },
+    {
+      "path": "crates/oa-core/src/language/semantic_source.rs",
+      "sha256": "584b5bb59d87a7b8d44d5dd2d124c3a1323b21492b138a17bc9526c0087c9e29"
+    },
+    {
+      "path": "crates/oa-core/src/lib.rs",
+      "sha256": "52cb6ee7a4ffc00711ecf121c1a1b14ca154863f7ca27b0d2a8e239edce8aca7"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/adapter.rs",
+      "sha256": "66741b4c8354a23b8a932ecc5bf1bc3bb6e74279558757b8c35bc2157a7e51b5"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/mod.rs",
+      "sha256": "857d8bb13b6814daba6780ca770c16352943c01cb130245d055f11b3b957b3e9"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/model.rs",
+      "sha256": "8ac63eb59b2e57bdecff2477ee0634096090924d3dd1851e1c454880a889dacb"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/references.rs",
+      "sha256": "33a6819abc83139fdaebeebd1b553238a328637106cce7dd5a535f1791d43e20"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/source.rs",
+      "sha256": "74fee9b24e7c912182c998ab9d9aeec125e2009c3214959229e844c67afe2bf6"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/state_validation.rs",
+      "sha256": "e29ef071bab0a68460ddf55c46131c6f66c022d52c3c602c37c013c3649da1b0"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/transitions.rs",
+      "sha256": "f74174c532ba56b57c80b719a11fb4adea0a78ccc2828fff72fe2b9eda5a10b1"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/validation.rs",
+      "sha256": "6d5e4a4e2805ae5045bf789a0485e14a61c63346587bace2b4a91173a688f780"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v3/mod.rs",
+      "sha256": "f4edb6a0b50ecfe8670973776d703047b064420cb1f05913129c00fc656b3722"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v4.rs",
+      "sha256": "50c652964f0f309e7f3f54b6ef12c40d42fcecc0490f005995c713df1179af70"
+    },
+    {
+      "path": "crates/oa-core/src/model.rs",
+      "sha256": "4585c895c64c4a183941c92cf047a9e52ff0cbe41971e16e78d229ea9dc101fb"
+    },
+    {
+      "path": "crates/oa-core/src/operations.rs",
+      "sha256": "a5ffbbf54cd440316a106d1188bfb699b57dae59f466edcb33618c333cd19f41"
+    },
+    {
+      "path": "crates/oa-core/src/persistence.rs",
+      "sha256": "1c01474f906a63e552c0d590b272c95821c00a100b3e79e58e67dbbeac341a14"
+    },
+    {
+      "path": "crates/oa-core/src/ports.rs",
+      "sha256": "5cac12eea70a54ebebbd6be77b63ce92e3195325c4bc7d27705c518686cbac80"
+    },
+    {
+      "path": "crates/oa-core/src/projection.rs",
+      "sha256": "69ed12bace2cc5024e151752a174ab14034ac2d05eb741fcf13e9a27521c059b"
+    },
+    {
+      "path": "crates/oa-core/src/projection/port_layout.rs",
+      "sha256": "a08d17d10a58bb8b206dd001b19b91d5aa3a9f743b298a4da57d503223c20079"
+    },
+    {
+      "path": "crates/oa-core/src/projection/state.rs",
+      "sha256": "73a607bac713ec7ff49a509fefb1a53c7686dca93ee241ffc835564d743afb28"
+    },
+    {
+      "path": "crates/oa-core/src/references.rs",
+      "sha256": "93553c234f32da35f1f41a7b83ad81c471c9803efa78ca222cf7de3c2f86c0bb"
+    },
+    {
+      "path": "crates/oa-core/src/routing.rs",
+      "sha256": "c5ebb350ba76f731f5c48d968bfbba4b6ef68ec046eb5893d116c4637ef15080"
+    },
+    {
+      "path": "crates/oa-core/src/semantic.rs",
+      "sha256": "f9895dd5b8fb27d10d4cfbb41c3542ef2018365a589b8d5778e5674ae5a1f239"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/catalog.rs",
+      "sha256": "1ff74fcca18084d178681d7ff38ee1ccac632c27c4de0595ba1ceab8067ab3a4"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/historical.rs",
+      "sha256": "eaf3284bf234312698514cdb636bc8348e1b5d746cb16b18df777e77d312abfb"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/linked.rs",
+      "sha256": "6f335b14e809aecfc35defcaf77cb821b080d1506dbc46297912b25af98c07a2"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/mutate.rs",
+      "sha256": "dc2b4c4a6eb156fe468eaa8c85fd37a505c0cd8ea1f226cb69cd01689afd3d9d"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/review.rs",
+      "sha256": "0c157d2c327e72e89cca3b423e71ee73798105c5bb7271439c1a101642c91e3e"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/types.rs",
+      "sha256": "6922fe35089f12fad43ab0ce1c6886d01a3855f90b8e2543e99802ac5e6f1bbb"
+    },
+    {
+      "path": "crates/oa-core/src/session.rs",
+      "sha256": "1eb77b329b2986fc6f5dc0171e77fd860375cdfd8c769a1367b445d6c49ebe00"
+    },
+    {
+      "path": "crates/oa-core/src/source_files.rs",
+      "sha256": "669491dbddb8e8e6556161426dffa1a49ac1c826d31020bff0956d81a4d84683"
+    },
+    {
+      "path": "crates/oa-core/src/source_project.rs",
+      "sha256": "1394370bcc5908873b830c2c11312e6e1611af41f46c4f43ca0a6bcb713bb466"
+    },
+    {
+      "path": "crates/oa-core/src/source_project/source_migration.rs",
+      "sha256": "add463ae85c420f853d324b00a221f0f874164cc3f3ed6bbb07557a9ed7a8c95"
+    },
+    {
+      "path": "crates/oa-core/src/source_project/source_structure.rs",
+      "sha256": "9f1f83315856a7025fe662c0fbb13452f31613224a03663150d6225d1ddc162f"
+    },
+    {
+      "path": "crates/oa-core/src/state_validation.rs",
+      "sha256": "e28d7f74385e2a78763716b34491bd73a00bfeccc085970ceb130627e3faee18"
+    },
+    {
+      "path": "crates/oa-core/src/topology_context.rs",
+      "sha256": "16de69b297de95d93c73808621607833b713af811dd082f0169186ae1e5c3e2d"
+    },
+    {
+      "path": "crates/oa-core/src/topology_context/analysis_tests.rs",
+      "sha256": "17839263410815e96fe027d4eba3aae0a9ab3b82b16947e2b29ebe0d09782b56"
+    },
+    {
+      "path": "crates/oa-core/src/topology_context/analysis.rs",
+      "sha256": "dead6194f0aa60cc46045c0e5ee10dbdbb689158c38634dfbbbc45d2ba88ac65"
+    },
+    {
+      "path": "crates/oa-core/src/transitions.rs",
+      "sha256": "fadd1b07b89cae4117b91abb4f1ac9ea81ff818ef20f2175e76ee8cf21fb708d"
+    },
+    {
+      "path": "crates/oa-core/src/transitions/communication.rs",
+      "sha256": "2b476630a88edd9021b9156ca12a5402e01604095f0d4002afb452671903a028"
+    },
+    {
+      "path": "crates/oa-core/src/validation.rs",
+      "sha256": "7c1b4ae5e4ebba13e99af9158ccde138dfc5e9a7afb580e76fba72d0b64ba74e"
+    },
+    {
+      "path": "crates/oa-core/src/validation/coverage.rs",
+      "sha256": "b08e4b344ecad055714168c83beff7fe29ba4edc53edbffa2eae04e5580a4d5f"
+    },
+    {
+      "path": "crates/oa-core/src/view_options_tests.rs",
+      "sha256": "64aac44de2df42a1012239a3dd75c473daf0c8990b3170b7bf7e78a556080208"
+    },
+    {
+      "path": "crates/oa-core/src/view_options.rs",
+      "sha256": "421ede0a04c593ca1df0e6e0d06fabcfcc8113cdbcfb0adc7f5c8ef4d1724208"
+    },
+    {
+      "path": "crates/oa-core/tests/communication_boundary_scenarios.rs",
+      "sha256": "e1100b8f363910a487d90c73acc7df543dc6d532158c3c63ad11cd3d40d8e12b"
+    },
+    {
+      "path": "crates/oa-core/tests/communication_means.rs",
+      "sha256": "a25f2749180bc6f4beb1445bfad3351eedf0669131a7439b633ab804439e95a4"
+    },
+    {
+      "path": "crates/oa-core/tests/coverage_diagnostics.rs",
+      "sha256": "e2e9c3996daab47f2bd23f5d8c48b4e372af33331152f5fc85b76f06d04fcdf4"
+    },
+    {
+      "path": "crates/oa-core/tests/language.rs",
+      "sha256": "77f6cb2a69976bfb5f60b243b71c07fb0edc7505002c1e9e73fcd6ddf6d9496e"
+    },
+    {
+      "path": "crates/oa-core/tests/port_anchors.rs",
+      "sha256": "efbc0fa18733b1aaac501f9785a4c392fc49c05c45a5778d26e9b5dd951ca6fa"
+    },
+    {
+      "path": "crates/oa-core/tests/port_migration.rs",
+      "sha256": "1801c376a5435ac7efb2a8342348b2c7ffef930bba65deca4acb66b06e0483d7"
+    },
+    {
+      "path": "crates/oa-core/tests/port_source.rs",
+      "sha256": "8d2ddaca4045d330f6eda2591561497b858aad53769a823249d0bea4f5916e12"
+    },
+    {
+      "path": "crates/oa-core/tests/prepared_commands.rs",
+      "sha256": "52cab1c668064777412df0a6a3c20d74d579b33794b4b00525b9f151c06eac9b"
+    },
+    {
+      "path": "crates/oa-core/tests/process_diagnostics.rs",
+      "sha256": "1dbbc590239ef7542be4a2bdc9543aaa64d108417b03dd312a0894e364745906"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_constructor_ack.rs",
+      "sha256": "e5c44676ea0aab97f2e091ddac2f4bc4a4a90f5877f7bbf08b61229600944dd0"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_migration.rs",
+      "sha256": "ebd04120f5215b3956fdc79ee78f6e38734c7d13392f1fc28aaba957912265bd"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_semantic.rs",
+      "sha256": "49c3763eaf2131070a7c46cc23a84f917d292d41610b6404510e5607f8890c32"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_source.rs",
+      "sha256": "f31f60659df3c7ef601650d1cff140589d8729f01a3f65a4a6a6c2272f15c408"
+    },
+    {
+      "path": "crates/oa-core/tests/r6_data.rs",
+      "sha256": "5f7ffb3bc73c3c85423623fe56f8680646dc97040327bdbead9d47a37e80f155"
+    },
+    {
+      "path": "crates/oa-core/tests/r6_migration.rs",
+      "sha256": "81519bc1512f5e069432e9a1cdad04c10216d492df01b4b75b02102480ebd6a1"
+    },
+    {
+      "path": "crates/oa-core/tests/r6_source.rs",
+      "sha256": "88a0aa087a7678e2898ff6057538072ca92072190712f05fff08372cc56ebed6"
+    },
+    {
+      "path": "crates/oa-core/tests/release_capabilities.rs",
+      "sha256": "b92cba2a562e78287ddd7dc3e94557848d17faa0c8a102601b50286b9af48a30"
+    },
+    {
+      "path": "crates/oa-core/tests/release_diagrams.rs",
+      "sha256": "cefcc0582d91266d5de6ee5daefcfe41b606ab971ab235b59034a8e1dbc24b7d"
+    },
+    {
+      "path": "crates/oa-core/tests/release_language_limits.rs",
+      "sha256": "8578da4f76bbd2d0e1bfe295ab1259e2162a3fe3d0d2ba8901915d7a40942806"
+    },
+    {
+      "path": "crates/oa-core/tests/release_ports.rs",
+      "sha256": "506e62beab0c7ec0cece83e9e0c1a810fa1f99285c9e1cab0c77f06de55a40e1"
+    },
+    {
+      "path": "crates/oa-core/tests/release_routing.rs",
+      "sha256": "ae168faaba23769b7ca1fd65f217b9db671726e67276eb5a04e5e72b1447a462"
+    },
+    {
+      "path": "crates/oa-core/tests/release_scenarios.rs",
+      "sha256": "0f5d876badeec653fc7b12610a77d867e9a53582e605253deff8d379da21572f"
+    },
+    {
+      "path": "crates/oa-core/tests/release_states.rs",
+      "sha256": "b1a26acee95eaba7f9920f9da738a1e33606552eb078e6d298895daff7e3d811"
+    },
+    {
+      "path": "crates/oa-core/tests/release_topology.rs",
+      "sha256": "c51dbe5aa5a038f9ed830daa02aa67714472179eb7fd6da5ce36dc6931c8b3a9"
+    },
+    {
+      "path": "crates/oa-core/tests/release1_teaching.rs",
+      "sha256": "be179290d871125dc97cfd2a3067c7ac89c8a538fdb0afafc5b825bcdfb2bef2"
+    },
+    {
+      "path": "crates/oa-core/tests/review_regressions.rs",
+      "sha256": "f154e5c88d35e31512e2b07733a1327ea3e2fcfd1ef8eb23066a4e9573f387c1"
+    },
+    {
+      "path": "crates/oa-core/tests/route_source.rs",
+      "sha256": "1a73fdbac0d0ae0e84d8d67b6ad398e11223958f5dca007f73757c91827decfb"
+    },
+    {
+      "path": "crates/oa-core/tests/routing_geometry.rs",
+      "sha256": "2d8eea4a2bba535ed0ea6daabccdaf87b375828c404baa10518c7bd7fd6253d3"
+    },
+    {
+      "path": "crates/oa-core/tests/routing_labels.rs",
+      "sha256": "dff884d799c3c5c9257210248c55767e294e3cb317c605cbd0ddc9600c216eb6"
+    },
+    {
+      "path": "crates/oa-core/tests/semantic_artifact_absence_oracle.rs",
+      "sha256": "d93eaf9667f4221232168bef0fe9f069e5be1b1f23410bda5dd67010b96e5c8a"
+    },
+    {
+      "path": "crates/oa-core/tests/semantic_attachments_gui_oracle.rs",
+      "sha256": "7f526d363ba05e7ac89faf0fead0796e419c34ee204edf44a1b46c78308b0970"
+    },
+    {
+      "path": "crates/oa-core/tests/source_files.rs",
+      "sha256": "f0429a0b89a443458ea9af7083c1e4e7411417a7e6b47e618bfbb9266dc164f9"
+    },
+    {
+      "path": "crates/oa-core/tests/source_identity_updates.rs",
+      "sha256": "f52aa38b4d317e532c641ad7463472e4b40e802e60052cf0017556ffc63da06c"
+    },
+    {
+      "path": "crates/oa-core/tests/source_nested_updates.rs",
+      "sha256": "9ac3390936c0d250651ea94a1b8faf0adfb680f061ececc56f2a52909b5ba855"
+    },
+    {
+      "path": "crates/oa-core/tests/source_project.rs",
+      "sha256": "cef58adb16aa4d2527ddc0628aec3e26f0b42b4be70014a7e360fafdac13a942"
+    },
+    {
+      "path": "crates/oa-core/tests/source6_view_contract.rs",
+      "sha256": "fa566de53946d40bbbd9033edfeed177180c4dc44afa2f2f4667ffdc622eb3bb"
+    },
+    {
+      "path": "crates/oa-core/tests/source7_contract.rs",
+      "sha256": "cad4f1a135ddbd947bdf3c71d1b44f1e438725095ea8c4d893464bc721c2363f"
+    },
+    {
+      "path": "crates/oa-core/tests/state_diagrams.rs",
+      "sha256": "6b02b387a3ae559cb3ad72de24292a5abcb76aaac0adbab5d2aa5211b22cd2e5"
+    },
+    {
+      "path": "crates/oa-core/tests/workflows.rs",
+      "sha256": "bd843dfddbd5724ec08f657571f887496203056fe2fa5864ef50a168a613b89b"
+    }
+  ],
+  "binary_sha256": {
+    "arcadia.exe": "bad169f8be78dcfa74b32714569c886dd2132727080684fc2ba618d5822e3559",
+    "libunwind.dll": "f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4"
+  }
+}

harness/experiments/cli-packaging-20260911/build-evidence.json

@@ -0,0 +1,9 @@
+{
+  "source_identity": "CLI semantic/build-input basis 01b76a1e89e93b7992f39e63560aa8b2ca2f69e0. Six original CLI manifest/workspace/lock/source/test hashes and 95 unchanged core/shared build inputs independently matched. Packaging assembly basis a0a48e82bd43be181caca1fe2c1514c21f2bc405 changes packaging only and is not claimed as the original compiler input commit.",
+  "profile": "Preserved Windows debug/development artifact from cargo build --locked --offline -p oa-cli --bin arcadia, successful September11 2026 11:45:43.6035381Z,9.7336637seconds. No release-profile or reproducible-build claim.",
+  "compiler": "rustc1.98.1 commit48a229ceaefd4985c50990b14116b6d856af0985,x86_64-pc-windows-gnullvm,LLVM22.1.8. Frozen executable embeds that compiler path; current toolchain target-library hashes match preserved inventory. Original compile/test/lint and independent frozen-binary review records retained separately.",
+  "target": "x86_64-pc-windows-gnullvm",
+  "binary_sha256": {
+    "arcadia.exe": "bad169f8be78dcfa74b32714569c886dd2132727080684fc2ba618d5822e3559"
+  }
+}

harness/experiments/cli-packaging-20260911/hashes.json

@@ -0,0 +1,56 @@
+[
+  {
+    "path": "assembly.json",
+    "original": ".local/cli-packaging-20260911/assembly.json",
+    "bytes": 17452,
+    "sha256": "284ecc5e3caaf9e2201785619f81ad200166e7d489c2a65276857f71df7f0dc0"
+  },
+  {
+    "path": "preparation.json",
+    "original": ".local/cli-packaging-20260911/preparation.json",
+    "bytes": 17497,
+    "sha256": "0ec70eef7f487693c4e698cbe54d2b99e6f4d3fc10bb1e7edabc3d236c2a7aff"
+  },
+  {
+    "path": "build-evidence.json",
+    "original": ".local/cli-packaging-20260911/build-evidence.json",
+    "bytes": 1086,
+    "sha256": "b75c6f0b78caf508c046de1dd7e67a1aade15924d50452635da8b6b1eba4a7d5"
+  },
+  {
+    "path": "package-initial-result.json",
+    "original": ".local/cli-packaging-20260911/package-initial-result.json",
+    "bytes": 216,
+    "sha256": "8c474fc7c7ce254fc17c0df9c0e46bb23403bc11be052fda121e49184157dc15"
+  },
+  {
+    "path": "windows-initial.log",
+    "original": ".local/cli-packaging-20260911/windows-initial.log",
+    "bytes": 131,
+    "sha256": "c74a669d68754f45a1649636d70cab82132569ec53810a63c490bfd430e451cf"
+  },
+  {
+    "path": "notices-initial.log",
+    "original": ".local/cli-packaging-20260911/notices-initial.log",
+    "bytes": 430,
+    "sha256": "f37409b4d36959bc03dcb35ec053301da9cf4c6effbb6e9a68fca534133c36b0"
+  },
+  {
+    "path": "artifacts-final.log",
+    "original": ".local/cli-packaging-20260911/artifacts-final.log",
+    "bytes": 117,
+    "sha256": "729fe10826e06b3b0997d6c4879349f388978a5fcb5bea62d55cc4ee6603cc16"
+  },
+  {
+    "path": "reviewer.py",
+    "original": ".local/cli-packaging-review-20260911/review.py",
+    "bytes": 18543,
+    "sha256": "f85d1f34ab75b4067efe09886e447bf9fd54dc232020bcb1a46404ec57b2351e"
+  },
+  {
+    "path": "reviewer-result.json",
+    "original": ".local/cli-packaging-review-20260911/result.json",
+    "bytes": 33967,
+    "sha256": "3b92a816a62de386b5927b208c79c2a7c541e6e2e2e30bde31b4c11bbbc4509e"
+  }
+]

harness/experiments/cli-packaging-20260911/notices-initial.log

@@ -0,0 +1,2 @@
+PASS: normal/build and server-only Linux selection, cross-target runtime refusal, Rust reports, actual source hashes, stale archive refusal, doc-comment font exclusion, production font path/mapping refusals, exact font mapping and changed-byte refusal, unsupported source refusal, traversal refusal, altered supplement refusal.
+Synthetic fixture retained for inspection: C:\Temp\arcadia-notices-c72f98e0978c45618416fe3d2cfdd38e

harness/experiments/cli-packaging-20260911/package-initial-result.json

@@ -0,0 +1,7 @@
+{
+  "started": "2026-09-11T12:36:52.6900250Z",
+  "assembly_commit": "a0a48e82bd43be181caca1fe2c1514c21f2bc405",
+  "success": true,
+  "finished": "2026-09-11T12:37:33.7683084Z",
+  "elapsed_seconds": 41.084165
+}

harness/experiments/cli-packaging-20260911/preparation.json

@@ -0,0 +1,454 @@
+{
+  "semantic_source_commit": "01b76a1e89e93b7992f39e63560aa8b2ca2f69e0",
+  "original_cli_manifest_sha256": "dd73fc2bb2190b23fffe16d6c63d4acddf52338062fac298379ddfd241d82eb8",
+  "exact_cli_inputs": [
+    {
+      "path": "Cargo.toml",
+      "sha256": "369f5b4b2b60705a94623c8c0b68f8e0b048f263280ce07ae0629ad353797d62"
+    },
+    {
+      "path": "Cargo.lock",
+      "sha256": "2b960242c33eb839ff008d01731f6d5cdb4e047ca8cd6e13151cbf9c09913510"
+    },
+    {
+      "path": "crates/oa-cli/Cargo.toml",
+      "sha256": "49c567f1af74a826683b4d96845feb3806fd9bcb7dc2767e16b5509d4e5e1cde"
+    },
+    {
+      "path": "crates/oa-cli/src/lib.rs",
+      "sha256": "97bebab63b4a611a1d36ad0c20fe452cbe1985fe3a6fbd39c954603da11410fc"
+    },
+    {
+      "path": "crates/oa-cli/src/main.rs",
+      "sha256": "de964f9b6c59c0f31c080afbd3b31d442b07b1b44f6a187a248d3409c45d35fb"
+    },
+    {
+      "path": "crates/oa-cli/tests/source_cli.rs",
+      "sha256": "a3a1b856c7a9fd3d80bc8074150a24fbb0ef0e9ddf736c7cea036725fc3dc2b8"
+    }
+  ],
+  "unchanged_core_shared_build_inputs": [
+    {
+      "path": "build/windows_manifest.rs",
+      "sha256": "168da2c42ecccfebc11ee3e1b455e653a68fe9c6d30a9842a8b9e7441d086c80"
+    },
+    {
+      "path": "build/windows.manifest",
+      "sha256": "9c19c5a02f858ece84c44839ad2b145d9c1d90442da0b15c87fd045f975974eb"
+    },
+    {
+      "path": "build/windows.rc",
+      "sha256": "a27385edcae0bcf96f55361056cb7be5f36d76fcddcaefd20647c91959563e1e"
+    },
+    {
+      "path": "crates/oa-core/build.rs",
+      "sha256": "ab1be6ae1fd8bf3ebaeef6348347a9d5e666bde693126f199e041659e0b094a9"
+    },
+    {
+      "path": "crates/oa-core/Cargo.toml",
+      "sha256": "64824ec447be777841a972bf06c894ef2624a37e4725583bcfe0389deb9f00a3"
+    },
+    {
+      "path": "crates/oa-core/examples/generate_demo.rs",
+      "sha256": "e26f432c95331aeca50985dbb3ad2c558affd43023b585811f0f7bfaa59f6661"
+    },
+    {
+      "path": "crates/oa-core/examples/generate_release1.rs",
+      "sha256": "1d5f11165d74893e4bc18dbf3a2f2111f4026bd89fd06ee7f0bae69e45c4d4b5"
+    },
+    {
+      "path": "crates/oa-core/examples/release_dense_views.rs",
+      "sha256": "a83158488ef9b7394f136c52b1496719be935c4e5bdfe457cab5c9894f5f9412"
+    },
+    {
+      "path": "crates/oa-core/examples/routing_workshop.rs",
+      "sha256": "571307b18b6d4fa04700c5a4d4b0c2154c419e93a21292b2028e7b6f46a2faa7"
+    },
+    {
+      "path": "crates/oa-core/src/data.rs",
+      "sha256": "7f9c7c7dd8353cb5a38597b92cde6d3e890203d392473187eb387d41ff37414a"
+    },
+    {
+      "path": "crates/oa-core/src/demo.rs",
+      "sha256": "ad62123f96c20ff023cafc1a9849b0fa06bc62edd1fb9701799e4599b458600c"
+    },
+    {
+      "path": "crates/oa-core/src/language_nesting_tests.rs",
+      "sha256": "bd061611e8cb6f28ab203c73e544ac98bf275eb464cd314ad5fbd25f773df33b"
+    },
+    {
+      "path": "crates/oa-core/src/language.rs",
+      "sha256": "638f08a42e9cf4996b5d07f69b4d6f517a518369f3604d25be1006e40e080765"
+    },
+    {
+      "path": "crates/oa-core/src/language/semantic_source.rs",
+      "sha256": "584b5bb59d87a7b8d44d5dd2d124c3a1323b21492b138a17bc9526c0087c9e29"
+    },
+    {
+      "path": "crates/oa-core/src/lib.rs",
+      "sha256": "52cb6ee7a4ffc00711ecf121c1a1b14ca154863f7ca27b0d2a8e239edce8aca7"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/adapter.rs",
+      "sha256": "66741b4c8354a23b8a932ecc5bf1bc3bb6e74279558757b8c35bc2157a7e51b5"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/mod.rs",
+      "sha256": "857d8bb13b6814daba6780ca770c16352943c01cb130245d055f11b3b957b3e9"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/model.rs",
+      "sha256": "8ac63eb59b2e57bdecff2477ee0634096090924d3dd1851e1c454880a889dacb"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/references.rs",
+      "sha256": "33a6819abc83139fdaebeebd1b553238a328637106cce7dd5a535f1791d43e20"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/source.rs",
+      "sha256": "74fee9b24e7c912182c998ab9d9aeec125e2009c3214959229e844c67afe2bf6"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/state_validation.rs",
+      "sha256": "e29ef071bab0a68460ddf55c46131c6f66c022d52c3c602c37c013c3649da1b0"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/transitions.rs",
+      "sha256": "f74174c532ba56b57c80b719a11fb4adea0a78ccc2828fff72fe2b9eda5a10b1"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v2/validation.rs",
+      "sha256": "6d5e4a4e2805ae5045bf789a0485e14a61c63346587bace2b4a91173a688f780"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v3/mod.rs",
+      "sha256": "f4edb6a0b50ecfe8670973776d703047b064420cb1f05913129c00fc656b3722"
+    },
+    {
+      "path": "crates/oa-core/src/migration_v4.rs",
+      "sha256": "50c652964f0f309e7f3f54b6ef12c40d42fcecc0490f005995c713df1179af70"
+    },
+    {
+      "path": "crates/oa-core/src/model.rs",
+      "sha256": "4585c895c64c4a183941c92cf047a9e52ff0cbe41971e16e78d229ea9dc101fb"
+    },
+    {
+      "path": "crates/oa-core/src/operations.rs",
+      "sha256": "a5ffbbf54cd440316a106d1188bfb699b57dae59f466edcb33618c333cd19f41"
+    },
+    {
+      "path": "crates/oa-core/src/persistence.rs",
+      "sha256": "1c01474f906a63e552c0d590b272c95821c00a100b3e79e58e67dbbeac341a14"
+    },
+    {
+      "path": "crates/oa-core/src/ports.rs",
+      "sha256": "5cac12eea70a54ebebbd6be77b63ce92e3195325c4bc7d27705c518686cbac80"
+    },
+    {
+      "path": "crates/oa-core/src/projection.rs",
+      "sha256": "69ed12bace2cc5024e151752a174ab14034ac2d05eb741fcf13e9a27521c059b"
+    },
+    {
+      "path": "crates/oa-core/src/projection/port_layout.rs",
+      "sha256": "a08d17d10a58bb8b206dd001b19b91d5aa3a9f743b298a4da57d503223c20079"
+    },
+    {
+      "path": "crates/oa-core/src/projection/state.rs",
+      "sha256": "73a607bac713ec7ff49a509fefb1a53c7686dca93ee241ffc835564d743afb28"
+    },
+    {
+      "path": "crates/oa-core/src/references.rs",
+      "sha256": "93553c234f32da35f1f41a7b83ad81c471c9803efa78ca222cf7de3c2f86c0bb"
+    },
+    {
+      "path": "crates/oa-core/src/routing.rs",
+      "sha256": "c5ebb350ba76f731f5c48d968bfbba4b6ef68ec046eb5893d116c4637ef15080"
+    },
+    {
+      "path": "crates/oa-core/src/semantic.rs",
+      "sha256": "f9895dd5b8fb27d10d4cfbb41c3542ef2018365a589b8d5778e5674ae5a1f239"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/catalog.rs",
+      "sha256": "1ff74fcca18084d178681d7ff38ee1ccac632c27c4de0595ba1ceab8067ab3a4"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/historical.rs",
+      "sha256": "eaf3284bf234312698514cdb636bc8348e1b5d746cb16b18df777e77d312abfb"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/linked.rs",
+      "sha256": "6f335b14e809aecfc35defcaf77cb821b080d1506dbc46297912b25af98c07a2"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/mutate.rs",
+      "sha256": "dc2b4c4a6eb156fe468eaa8c85fd37a505c0cd8ea1f226cb69cd01689afd3d9d"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/review.rs",
+      "sha256": "0c157d2c327e72e89cca3b423e71ee73798105c5bb7271439c1a101642c91e3e"
+    },
+    {
+      "path": "crates/oa-core/src/semantic/types.rs",
+      "sha256": "6922fe35089f12fad43ab0ce1c6886d01a3855f90b8e2543e99802ac5e6f1bbb"
+    },
+    {
+      "path": "crates/oa-core/src/session.rs",
+      "sha256": "1eb77b329b2986fc6f5dc0171e77fd860375cdfd8c769a1367b445d6c49ebe00"
+    },
+    {
+      "path": "crates/oa-core/src/source_files.rs",
+      "sha256": "669491dbddb8e8e6556161426dffa1a49ac1c826d31020bff0956d81a4d84683"
+    },
+    {
+      "path": "crates/oa-core/src/source_project.rs",
+      "sha256": "1394370bcc5908873b830c2c11312e6e1611af41f46c4f43ca0a6bcb713bb466"
+    },
+    {
+      "path": "crates/oa-core/src/source_project/source_migration.rs",
+      "sha256": "add463ae85c420f853d324b00a221f0f874164cc3f3ed6bbb07557a9ed7a8c95"
+    },
+    {
+      "path": "crates/oa-core/src/source_project/source_structure.rs",
+      "sha256": "9f1f83315856a7025fe662c0fbb13452f31613224a03663150d6225d1ddc162f"
+    },
+    {
+      "path": "crates/oa-core/src/state_validation.rs",
+      "sha256": "e28d7f74385e2a78763716b34491bd73a00bfeccc085970ceb130627e3faee18"
+    },
+    {
+      "path": "crates/oa-core/src/topology_context.rs",
+      "sha256": "16de69b297de95d93c73808621607833b713af811dd082f0169186ae1e5c3e2d"
+    },
+    {
+      "path": "crates/oa-core/src/topology_context/analysis_tests.rs",
+      "sha256": "17839263410815e96fe027d4eba3aae0a9ab3b82b16947e2b29ebe0d09782b56"
+    },
+    {
+      "path": "crates/oa-core/src/topology_context/analysis.rs",
+      "sha256": "dead6194f0aa60cc46045c0e5ee10dbdbb689158c38634dfbbbc45d2ba88ac65"
+    },
+    {
+      "path": "crates/oa-core/src/transitions.rs",
+      "sha256": "fadd1b07b89cae4117b91abb4f1ac9ea81ff818ef20f2175e76ee8cf21fb708d"
+    },
+    {
+      "path": "crates/oa-core/src/transitions/communication.rs",
+      "sha256": "2b476630a88edd9021b9156ca12a5402e01604095f0d4002afb452671903a028"
+    },
+    {
+      "path": "crates/oa-core/src/validation.rs",
+      "sha256": "7c1b4ae5e4ebba13e99af9158ccde138dfc5e9a7afb580e76fba72d0b64ba74e"
+    },
+    {
+      "path": "crates/oa-core/src/validation/coverage.rs",
+      "sha256": "b08e4b344ecad055714168c83beff7fe29ba4edc53edbffa2eae04e5580a4d5f"
+    },
+    {
+      "path": "crates/oa-core/src/view_options_tests.rs",
+      "sha256": "64aac44de2df42a1012239a3dd75c473daf0c8990b3170b7bf7e78a556080208"
+    },
+    {
+      "path": "crates/oa-core/src/view_options.rs",
+      "sha256": "421ede0a04c593ca1df0e6e0d06fabcfcc8113cdbcfb0adc7f5c8ef4d1724208"
+    },
+    {
+      "path": "crates/oa-core/tests/communication_boundary_scenarios.rs",
+      "sha256": "e1100b8f363910a487d90c73acc7df543dc6d532158c3c63ad11cd3d40d8e12b"
+    },
+    {
+      "path": "crates/oa-core/tests/communication_means.rs",
+      "sha256": "a25f2749180bc6f4beb1445bfad3351eedf0669131a7439b633ab804439e95a4"
+    },
+    {
+      "path": "crates/oa-core/tests/coverage_diagnostics.rs",
+      "sha256": "e2e9c3996daab47f2bd23f5d8c48b4e372af33331152f5fc85b76f06d04fcdf4"
+    },
+    {
+      "path": "crates/oa-core/tests/language.rs",
+      "sha256": "77f6cb2a69976bfb5f60b243b71c07fb0edc7505002c1e9e73fcd6ddf6d9496e"
+    },
+    {
+      "path": "crates/oa-core/tests/port_anchors.rs",
+      "sha256": "efbc0fa18733b1aaac501f9785a4c392fc49c05c45a5778d26e9b5dd951ca6fa"
+    },
+    {
+      "path": "crates/oa-core/tests/port_migration.rs",
+      "sha256": "1801c376a5435ac7efb2a8342348b2c7ffef930bba65deca4acb66b06e0483d7"
+    },
+    {
+      "path": "crates/oa-core/tests/port_source.rs",
+      "sha256": "8d2ddaca4045d330f6eda2591561497b858aad53769a823249d0bea4f5916e12"
+    },
+    {
+      "path": "crates/oa-core/tests/prepared_commands.rs",
+      "sha256": "52cab1c668064777412df0a6a3c20d74d579b33794b4b00525b9f151c06eac9b"
+    },
+    {
+      "path": "crates/oa-core/tests/process_diagnostics.rs",
+      "sha256": "1dbbc590239ef7542be4a2bdc9543aaa64d108417b03dd312a0894e364745906"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_constructor_ack.rs",
+      "sha256": "e5c44676ea0aab97f2e091ddac2f4bc4a4a90f5877f7bbf08b61229600944dd0"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_migration.rs",
+      "sha256": "ebd04120f5215b3956fdc79ee78f6e38734c7d13392f1fc28aaba957912265bd"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_semantic.rs",
+      "sha256": "49c3763eaf2131070a7c46cc23a84f917d292d41610b6404510e5607f8890c32"
+    },
+    {
+      "path": "crates/oa-core/tests/r3_source.rs",
+      "sha256": "f31f60659df3c7ef601650d1cff140589d8729f01a3f65a4a6a6c2272f15c408"
+    },
+    {
+      "path": "crates/oa-core/tests/r6_data.rs",
+      "sha256": "5f7ffb3bc73c3c85423623fe56f8680646dc97040327bdbead9d47a37e80f155"
+    },
+    {
+      "path": "crates/oa-core/tests/r6_migration.rs",
+      "sha256": "81519bc1512f5e069432e9a1cdad04c10216d492df01b4b75b02102480ebd6a1"
+    },
+    {
+      "path": "crates/oa-core/tests/r6_source.rs",
+      "sha256": "88a0aa087a7678e2898ff6057538072ca92072190712f05fff08372cc56ebed6"
+    },
+    {
+      "path": "crates/oa-core/tests/release_capabilities.rs",
+      "sha256": "b92cba2a562e78287ddd7dc3e94557848d17faa0c8a102601b50286b9af48a30"
+    },
+    {
+      "path": "crates/oa-core/tests/release_diagrams.rs",
+      "sha256": "cefcc0582d91266d5de6ee5daefcfe41b606ab971ab235b59034a8e1dbc24b7d"
+    },
+    {
+      "path": "crates/oa-core/tests/release_language_limits.rs",
+      "sha256": "8578da4f76bbd2d0e1bfe295ab1259e2162a3fe3d0d2ba8901915d7a40942806"
+    },
+    {
+      "path": "crates/oa-core/tests/release_ports.rs",
+      "sha256": "506e62beab0c7ec0cece83e9e0c1a810fa1f99285c9e1cab0c77f06de55a40e1"
+    },
+    {
+      "path": "crates/oa-core/tests/release_routing.rs",
+      "sha256": "ae168faaba23769b7ca1fd65f217b9db671726e67276eb5a04e5e72b1447a462"
+    },
+    {
+      "path": "crates/oa-core/tests/release_scenarios.rs",
+      "sha256": "0f5d876badeec653fc7b12610a77d867e9a53582e605253deff8d379da21572f"
+    },
+    {
+      "path": "crates/oa-core/tests/release_states.rs",
+      "sha256": "b1a26acee95eaba7f9920f9da738a1e33606552eb078e6d298895daff7e3d811"
+    },
+    {
+      "path": "crates/oa-core/tests/release_topology.rs",
+      "sha256": "c51dbe5aa5a038f9ed830daa02aa67714472179eb7fd6da5ce36dc6931c8b3a9"
+    },
+    {
+      "path": "crates/oa-core/tests/release1_teaching.rs",
+      "sha256": "be179290d871125dc97cfd2a3067c7ac89c8a538fdb0afafc5b825bcdfb2bef2"
+    },
+    {
+      "path": "crates/oa-core/tests/review_regressions.rs",
+      "sha256": "f154e5c88d35e31512e2b07733a1327ea3e2fcfd1ef8eb23066a4e9573f387c1"
+    },
+    {
+      "path": "crates/oa-core/tests/route_source.rs",
+      "sha256": "1a73fdbac0d0ae0e84d8d67b6ad398e11223958f5dca007f73757c91827decfb"
+    },
+    {
+      "path": "crates/oa-core/tests/routing_geometry.rs",
+      "sha256": "2d8eea4a2bba535ed0ea6daabccdaf87b375828c404baa10518c7bd7fd6253d3"
+    },
+    {
+      "path": "crates/oa-core/tests/routing_labels.rs",
+      "sha256": "dff884d799c3c5c9257210248c55767e294e3cb317c605cbd0ddc9600c216eb6"
+    },
+    {
+      "path": "crates/oa-core/tests/semantic_artifact_absence_oracle.rs",
+      "sha256": "d93eaf9667f4221232168bef0fe9f069e5be1b1f23410bda5dd67010b96e5c8a"
+    },
+    {
+      "path": "crates/oa-core/tests/semantic_attachments_gui_oracle.rs",
+      "sha256": "7f526d363ba05e7ac89faf0fead0796e419c34ee204edf44a1b46c78308b0970"
+    },
+    {
+      "path": "crates/oa-core/tests/source_files.rs",
+      "sha256": "f0429a0b89a443458ea9af7083c1e4e7411417a7e6b47e618bfbb9266dc164f9"
+    },
+    {
+      "path": "crates/oa-core/tests/source_identity_updates.rs",
+      "sha256": "f52aa38b4d317e532c641ad7463472e4b40e802e60052cf0017556ffc63da06c"
+    },
+    {
+      "path": "crates/oa-core/tests/source_nested_updates.rs",
+      "sha256": "9ac3390936c0d250651ea94a1b8faf0adfb680f061ececc56f2a52909b5ba855"
+    },
+    {
+      "path": "crates/oa-core/tests/source_project.rs",
+      "sha256": "cef58adb16aa4d2527ddc0628aec3e26f0b42b4be70014a7e360fafdac13a942"
+    },
+    {
+      "path": "crates/oa-core/tests/source6_view_contract.rs",
+      "sha256": "fa566de53946d40bbbd9033edfeed177180c4dc44afa2f2f4667ffdc622eb3bb"
+    },
+    {
+      "path": "crates/oa-core/tests/source7_contract.rs",
+      "sha256": "cad4f1a135ddbd947bdf3c71d1b44f1e438725095ea8c4d893464bc721c2363f"
+    },
+    {
+      "path": "crates/oa-core/tests/state_diagrams.rs",
+      "sha256": "6b02b387a3ae559cb3ad72de24292a5abcb76aaac0adbab5d2aa5211b22cd2e5"
+    },
+    {
+      "path": "crates/oa-core/tests/workflows.rs",
+      "sha256": "bd843dfddbd5724ec08f657571f887496203056fe2fa5864ef50a168a613b89b"
+    }
+  ],
+  "packaging_files": [
+    {
+      "path": "scripts/package-cli-windows.ps1",
+      "sha256": "b6ec59bb55ff1e5624c782f492ce1d169131e708f257dcca195957edf7341c1a"
+    },
+    {
+      "path": "scripts/package-common.ps1",
+      "sha256": "d859453a8230b4f305d822c8742b371a71e35df698109a5d55c948f6dfaf0640"
+    },
+    {
+      "path": "scripts/package-windows.ps1",
+      "sha256": "28997ff78565619ed9c9b185f66dc922808f1f0be17f522b430c6c415448663d"
+    },
+    {
+      "path": "scripts/windows-notices.ps1",
+      "sha256": "a5328c05579e1b9ca09142ee99e87c12994d12764f7c69448e392883d718ef01"
+    },
+    {
+      "path": "scripts/package-artifacts.py",
+      "sha256": "24515fdbf4eebfb47b82383c6b3ccf290261cbd919f7f46a586b6488af769c8d"
+    },
+    {
+      "path": "scripts/package-cli-readme.md",
+      "sha256": "39171afa7dab4be10a8566153d7384aa439f1494851ce2ca1da989c6f370ef2b"
+    },
+    {
+      "path": "scripts/test-package-cli-windows.ps1",
+      "sha256": "2c18f91149ede5c7b677a165bd0d8b31f3c4691642cc10dd1007a7a77bde912a"
+    },
+    {
+      "path": "scripts/test-package-artifacts.py",
+      "sha256": "881718181a36fa5f7abfcd2e746bc1339446f9aeed6b2c039b8d2ce230ec202d"
+    },
+    {
+      "path": "scripts/test-windows-notices.ps1",
+      "sha256": "00a6ad1ed28fdb9044ceb7cc0714ceb7af095db2fb18f4828a053aa872a3147d"
+    }
+  ],
+  "binary_sha256": {
+    "arcadia.exe": "bad169f8be78dcfa74b32714569c886dd2132727080684fc2ba618d5822e3559",
+    "libunwind.dll": "f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4"
+  }
+}

harness/experiments/cli-packaging-20260911/reviewer-result.json

@@ -0,0 +1,458 @@
+{
+  "started_utc": "2026-09-11T12:42:56Z",
+  "checks": [
+    "preserve earlier evidence; no overwrite",
+    "all original ELF/tar/document/notice helpers unchanged outside product selection",
+    "windows actual full Studio document closure unchanged",
+    "linux actual full Studio document closure unchanged",
+    "only notice source delta is oa-cli allowed-root check; default/body unchanged",
+    "Linux entry/deployment unchanged: scripts/package-linux.ps1",
+    "Linux entry/deployment unchanged: deployment/Dockerfile",
+    "Linux entry/deployment unchanged: deployment/Dockerfile.dockerignore",
+    "PE reader extraction is byte-equivalent after function rename/EOL normalization",
+    "Windows system DLL allowlist unchanged",
+    "Studio explicitly retains both original binary inputs",
+    "Studio post-inspection packaging pipeline unchanged",
+    "assembly delta exactly nine packaging/script paths",
+    "reviewed main packaging sources equal frozen assembly bytes",
+    "fresh extraction directory",
+    "frozen ZIP size and hash",
+    "114 unique ZIP files",
+    "single safe normalized Windows ZIP root",
+    "ordinary fixed-time ZIP members and CRCs",
+    "complete clean extraction equals ZIP bytes",
+    "complete checksum inventory equals every other extracted file",
+    "all package inputs plus exactly six generated records",
+    "frozen CLI and runtime hashes",
+    "no unrelated executable payload",
+    "exact public document/example: LICENSE",
+    "exact public document/example: docs/api.rst",
+    "exact public document/example: docs/language.html",
+    "exact public document/example: docs/language.rst",
+    "exact public document/example: docs/source-cli.md",
+    "exact public document/example: examples/release1/expected-diagnostics.json",
+    "exact public document/example: examples/release1/model.json",
+    "exact public document/example: examples/release1/model.rs",
+    "exact public document/example: examples/release1/project.arcadia",
+    "exact public document/example: examples/release1/README.md",
+    "exact public document/example: examples/release1/traceability.arcadia",
+    "exact public document/example: examples/release1/transition-before.json",
+    "exact public document/example: examples/release1/transition-request.json",
+    "exact public document/example: examples/text-first/project.arcadia",
+    "exact public document/example: examples/text-first/README.md",
+    "exact public document/example: examples/release1/evidence/repair-check.md",
+    "exact public document/example: examples/release1/oa/capabilities.arcadia",
+    "exact public document/example: examples/release1/oa/model.arcadia",
+    "exact public document/example: examples/release1/oa/participants.arcadia",
+    "exact public document/example: examples/release1/oa/types.arcadia",
+    "exact public document/example: examples/release1/sa/capabilities.arcadia",
+    "exact public document/example: examples/release1/sa/model.arcadia",
+    "exact public document/example: examples/release1/sa/participants.arcadia",
+    "exact public document/example: examples/release1/sa/types.arcadia",
+    "exact public document/example: examples/release1/views/diagram_oa_allocation_view.arcadia",
+    "exact public document/example: examples/release1/views/diagram_sa_allocation_view.arcadia",
+    "exact public document/example: examples/release1/views/diagram_sa_capability_view.arcadia",
+    "exact public document/example: examples/release1/views/diagram_sa_service_view.arcadia",
+    "exact public document/example: examples/release1/views/diagram_sa_state_view.arcadia",
+    "exact public document/example: examples/release1/oa/activities/activity_oa_restore_work.arcadia",
+    "exact public document/example: examples/release1/oa/behavior/process_oa_assessment_procedure.arcadia",
+    "exact public document/example: examples/release1/oa/behavior/process_oa_field_procedure.arcadia",
+    "exact public document/example: examples/release1/oa/behavior/process_oa_response.arcadia",
+    "exact public document/example: examples/release1/oa/behavior/scenario_oa_conversation.arcadia",
+    "exact public document/example: examples/release1/oa/behavior/scenario_oa_full_scenario.arcadia",
+    "exact public document/example: examples/release1/oa/behavior/state_machine_oa_monitor.arcadia",
+    "exact public document/example: examples/release1/sa/behavior/process_sa_assessment_procedure.arcadia",
+    "exact public document/example: examples/release1/sa/behavior/process_sa_field_procedure.arcadia",
+    "exact public document/example: examples/release1/sa/behavior/process_sa_response.arcadia",
+    "exact public document/example: examples/release1/sa/behavior/scenario_sa_conversation.arcadia",
+    "exact public document/example: examples/release1/sa/behavior/scenario_sa_full_scenario.arcadia",
+    "exact public document/example: examples/release1/sa/behavior/state_machine_sa_monitor.arcadia",
+    "exact public document/example: examples/release1/sa/functions/function_sa_audit_thresholds.arcadia",
+    "exact public document/example: examples/release1/sa/functions/function_sa_restore_work.arcadia",
+    "CLI-specific README",
+    "27 dependency packages; only CLI root",
+    "original CLI Cargo lock identity",
+    "locked dependency: oa-cli",
+    "complete local crate inputs: oa-cli",
+    "locked dependency: oa-core",
+    "complete local crate inputs: oa-core",
+    "locked dependency: cfg-if",
+    "locked dependency: fastrand",
+    "locked dependency: getrandom",
+    "locked dependency: itoa",
+    "locked dependency: memchr",
+    "locked dependency: once_cell",
+    "locked dependency: proc-macro2",
+    "locked dependency: quote",
+    "locked dependency: rand_core",
+    "locked dependency: same-file",
+    "locked dependency: serde_core",
+    "locked dependency: serde_derive",
+    "locked dependency: serde_json",
+    "locked dependency: serde",
+    "locked dependency: sha1_smol",
+    "locked dependency: syn",
+    "locked dependency: tempfile",
+    "locked dependency: thiserror-impl",
+    "locked dependency: thiserror",
+    "locked dependency: unicode-ident",
+    "locked dependency: uuid",
+    "locked dependency: winapi-util",
+    "locked dependency: windows-link",
+    "locked dependency: windows-sys",
+    "locked dependency: zmij",
+    "all package/compiler/runtime notice references and bytes",
+    "runtime notice binds packaged DLL",
+    "all shared build input hashes",
+    "six original CLI manifest inputs",
+    "95 original core/shared build inputs",
+    "CLI expected exit: ['--version']",
+    "underlying CLI version",
+    "CLI expected exit: ['--help']",
+    "packaged help has command/preview contract",
+    "CLI expected exit: ['check', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/examples/text-first/project.arcadia'), '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "packaged example check: text-first/project.arcadia",
+    "CLI expected exit: ['check', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/examples/release1/project.arcadia'), '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "packaged example check: release1/project.arcadia",
+    "checks preserve complete copied examples byte-for-byte",
+    "CLI expected exit: ['stabilize', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/exact-source/project.arcadia'), '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "stabilization is preview by default",
+    "only missing-ID source changes; exact captured raw bytes",
+    "fresh ID is attached to literal intended activity",
+    "allocated identity differs from every preexisting identity",
+    "stabilization preserves every other character, CRLF, comment, name and reference",
+    "preview preserves all physical source bytes including detached file",
+    "CLI expected exit: ['stabilize', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/exact-source/project.arcadia'), '--write', '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "explicit stabilization writes",
+    "only missing-ID source changes; exact captured raw bytes",
+    "fresh ID is attached to literal intended activity",
+    "allocated identity differs from every preexisting identity",
+    "stabilization preserves every other character, CRLF, comment, name and reference",
+    "stabilized complete physical file inventory and bytes",
+    "CLI expected exit: ['rename-alias', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/exact-source/project.arcadia'), 'crew', 'rescue_team', '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "alias preview changes exact declaration and typed reference only",
+    "rename preview retains exact source bytes and identities",
+    "CLI expected exit: ['rename-alias', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/exact-source/project.arcadia'), 'crew', 'rescue_team', '--write', '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "explicit alias write matches full independent raw expected files",
+    "all four identities remain ordered and exact through rename",
+    "CLI expected exit: ['stabilize', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/exact-source/project.arcadia'), '--write', '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "explicit no-op reports unchanged",
+    "no-op preserves all file bytes and mtimes",
+    "CLI expected exit: ['stabilize', WindowsPath('C:/Users/User/Documents/Git/ARCADIA-Studio/.local/cli-packaging-review-20260911/runtime/invalid.arcadia'), '--write', '--json']",
+    "JSON invocation keeps diagnostic envelope on stdout",
+    "versioned JSON report agrees with process exit",
+    "invalid source write refuses with exact raw retention",
+    "all packaged files and frozen ZIP unchanged after runtime checks"
+  ],
+  "source_review": {
+    "semantic_source": "01b76a1e89e93b7992f39e63560aa8b2ca2f69e0",
+    "assembly_source": "a0a48e82bd43be181caca1fe2c1514c21f2bc405",
+    "packaging_paths": {
+      "scripts/package-artifacts.py": "24515fdbf4eebfb47b82383c6b3ccf290261cbd919f7f46a586b6488af769c8d",
+      "scripts/package-cli-readme.md": "ea7bc971993e02751f24bc3cb313503a5f5fefd788540974e114398115c7c8e2",
+      "scripts/package-cli-windows.ps1": "b6ec59bb55ff1e5624c782f492ce1d169131e708f257dcca195957edf7341c1a",
+      "scripts/package-common.ps1": "d859453a8230b4f305d822c8742b371a71e35df698109a5d55c948f6dfaf0640",
+      "scripts/package-windows.ps1": "28997ff78565619ed9c9b185f66dc922808f1f0be17f522b430c6c415448663d",
+      "scripts/test-package-artifacts.py": "881718181a36fa5f7abfcd2e746bc1339446f9aeed6b2c039b8d2ce230ec202d",
+      "scripts/test-package-cli-windows.ps1": "2c18f91149ede5c7b677a165bd0d8b31f3c4691642cc10dd1007a7a77bde912a",
+      "scripts/test-windows-notices.ps1": "00a6ad1ed28fdb9044ceb7cc0714ceb7af095db2fb18f4828a053aa872a3147d",
+      "scripts/windows-notices.ps1": "a5328c05579e1b9ca09142ee99e87c12994d12764f7c69448e392883d718ef01"
+    },
+    "studio_document_counts": {
+      "windows": 65,
+      "linux": 64
+    }
+  },
+  "artifact": {
+    "zip_sha256": "2b051f8ce1ea4f59ee7e233e1fbd516d423aadbfbca5d549755cbe78fcde1af6",
+    "zip_bytes": 5091267,
+    "file_count": 114,
+    "files": {
+      "arcadia.exe": "bad169f8be78dcfa74b32714569c886dd2132727080684fc2ba618d5822e3559",
+      "dependency-notices.json": "d42920dc9958536d2d617bca17f453fc44b5e35f869b544c91abceb334cd51c1",
+      "documentation-check.json": "c660725a9b9076f51c4e735c077ec149e84d9ec2db1748a129209a36b5542130",
+      "libunwind.dll": "f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4",
+      "LICENSE": "51009f2cb07e5d19645858b2fbc037a672a25f8cbf7999522942b86807ecf365",
+      "package.json": "efe3e2227477a0f0db49ddb3a8d4ed3f48c65f9d060dd911bb3dd82e569fc446",
+      "README.md": "ea7bc971993e02751f24bc3cb313503a5f5fefd788540974e114398115c7c8e2",
+      "SHA256SUMS.txt": "b0b3d1c32dce6a0d5b1551e5b1c1cc9aa67d50ab2143a8645cde1dffdff6a4f9",
+      "START-HERE.txt": "58e0cb3c20dcb0e94d9acf7d47f390c32e47ed55f41e2d7be775e969be4a2626",
+      "THIRD-PARTY-NOTICES.txt": "8d1ffe4a7841bd8220cae95b1625e4c715d799c5dee1ba54274e9c95a3d8fb44",
+      "docs/api.rst": "ca7d310138c3b4d429d80a1d03d1ac8d4a9296069e205da573034256d10438a7",
+      "docs/language.html": "67dcfa3477b48a0b07298ec81741840cc3ccff12c7d58164873d746d41d611c8",
+      "docs/language.rst": "ac6b1d982c55f246de2f3c844b24b874599a3c20cfbd7ed22efe4561ac622b83",
+      "docs/source-cli.md": "34f12b72cc6d6ead4f47c7818c1897db592f8ad493c70776db2ab48c24d8f051",
+      "licenses/llvm-mingw-LICENSE.TXT": "8d85c1057d742e597985c7d4e6320b015a9139385cff4cbae06ffc0ebe89afee",
+      "examples/release1/expected-diagnostics.json": "3700393d76b940cfc076bf52861bd7b1f43370f8eabce3594531bd0bf1fc851e",
+      "examples/release1/model.json": "ef0ef4006c3e09d5db6e1b621256b3f7d6642f3a7b09cc34607cfbcca830c727",
+      "examples/release1/model.rs": "15f30f6bde655808fe754665c26d560e36f2a9bad340f346b09137d0d05045f5",
+      "examples/release1/project.arcadia": "b2674e6bf77cfe0f6f0ba79c81d2e96d92f39c02ca2c6266d80e91723bfb9fda",
+      "examples/release1/README.md": "113cfb1cf38a98b51bff60442d86a35d636a3d80ef206bece7d53d0aae67f2d5",
+      "examples/release1/traceability.arcadia": "48a96f543456c9b5a5798fc795594e4119147fe45f11a6f109f141b7f514560f",
+      "examples/release1/transition-before.json": "2253e6434f741687e22327c37d520ed15c043bc36025498650bc2366bb6a874d",
+      "examples/release1/transition-request.json": "43b9a22e5f95ad3bc0ebd2478ead0e14406854abc989ae94ded9367b013d812a",
+      "examples/text-first/project.arcadia": "f441535c623e0cf20e1875eb2cd33b587ed00e078c37af39cb36d89bb5edc19a",
+      "examples/text-first/README.md": "4ec8250d5ed556f1d496e8c85137e973e802ecb11df1a36488411e8cdc5a9f9e",
+      "examples/release1/evidence/repair-check.md": "f4db17bdca4ecbb1bf0caef01b2da5f1f7f798ab3152b648ce6dd8696a6a68e5",
+      "examples/release1/oa/capabilities.arcadia": "fc8012e5554350b12e1cb80080f8feab80d933c9b33c0f2a7bb500cb7d609936",
+      "examples/release1/oa/model.arcadia": "f7cf914766ea73ec53b85e32d117ea9a9dba52d3e038246863541ae7069b1a15",
+      "examples/release1/oa/participants.arcadia": "951764c14179f27c10e315acf2ea37d1fff54c77b8441e23addd239e8c715ce3",
+      "examples/release1/oa/types.arcadia": "9d0396fb82dd5733edd8d1cf52f968ca84906927c704f9cf0944a7fae215cf49",
+      "examples/release1/sa/capabilities.arcadia": "b6912fb3ece439912345fa71724acd462e716a1e5a88203a1058a5c3b2c20a4f",
+      "examples/release1/sa/model.arcadia": "d431509251acb859fbb98733b6d18add952495e10a78703fbe8f31e40bc083c4",
+      "examples/release1/sa/participants.arcadia": "780d2eb08b217b67b55febb3d34846f727b8ee9018df6c5741748647e36b2ff8",
+      "examples/release1/sa/types.arcadia": "101fc0fbd99f1101514aa7b6da4f8e535aae0bb94c9e2b9e7e6c151135b28660",
+      "examples/release1/views/diagram_oa_allocation_view.arcadia": "dfc0eb61e0e2aa5bda45524571fbfa3494f44ce19696f3e15e07438074a07bc7",
+      "examples/release1/views/diagram_sa_allocation_view.arcadia": "b78b43a26a82efb8fbd5374b09c329fa341f57b29f635d397b9ef8aede71d389",
+      "examples/release1/views/diagram_sa_capability_view.arcadia": "75e8dc9fb30f25d6f8fd3c6b595593ab4f98958a25798f961e336e0fac557649",
+      "examples/release1/views/diagram_sa_service_view.arcadia": "b08c84f3ea633e7c78dfdad3272f75415f6256cf3614b6d99bfd4f0269076c9b",
+      "examples/release1/views/diagram_sa_state_view.arcadia": "5f42f4c605e57b817d8400ed21f2b14bfc4e1592aebe941ff113767504c2b869",
+      "examples/release1/oa/activities/activity_oa_restore_work.arcadia": "83e73d0a013d5c3e1a4af0d9139ab0cfa362d25a846671fc2dac59181061a9d4",
+      "examples/release1/oa/behavior/process_oa_assessment_procedure.arcadia": "172c32c044ef4b5bc58a1f4635cc81f48dabb4014479b47dce7b25fedf2dbd0d",
+      "examples/release1/oa/behavior/process_oa_field_procedure.arcadia": "d2552dc5383e2e91cb302a790364e197f663c2edc013a2ab1978789825c9c324",
+      "examples/release1/oa/behavior/process_oa_response.arcadia": "cf86f46fa5c5d70592ef43f1bc1cb4d968efd8add384ba88036bef6b88aa4abc",
+      "examples/release1/oa/behavior/scenario_oa_conversation.arcadia": "b25be524e98a35ebac5e4481b7609c027b32baf9605e8097f807560f94a77ca6",
+      "examples/release1/oa/behavior/scenario_oa_full_scenario.arcadia": "00a1edf2c9707a0eb62ac070c2d02467874f2c9c1f273cc6ddb53d6d65999a1c",
+      "examples/release1/oa/behavior/state_machine_oa_monitor.arcadia": "447c9ad1359f4a31ecf975ad07c0b08d8e7e03191fb0858e2fc56f377b223cd5",
+      "examples/release1/sa/behavior/process_sa_assessment_procedure.arcadia": "73928ced61c06cbc08728d7956676a50fd4c05aa5b7f1ff4f29ce27a0b0f2088",
+      "examples/release1/sa/behavior/process_sa_field_procedure.arcadia": "886d462af83110cbfa55dd232a667ea1446761234471357cbb878794e98e8768",
+      "examples/release1/sa/behavior/process_sa_response.arcadia": "041785fc22842423822431bd5e6e8d16094ebd0716965e7c765fb8c1d7549e8a",
+      "examples/release1/sa/behavior/scenario_sa_conversation.arcadia": "97276f5757ee9aa12a0dbd9d3ccd58174b3091162bb8bcce357cec20a45f5d85",
+      "examples/release1/sa/behavior/scenario_sa_full_scenario.arcadia": "e12fc406b99d60a2f7768aaa0b25ba560e8605f0b8e37f3a7cdd3b8443562b74",
+      "examples/release1/sa/behavior/state_machine_sa_monitor.arcadia": "05ce29af99424c491c47fe2450dc6f5f8ce995511c01ec7e17bb5855be3c9736",
+      "examples/release1/sa/functions/function_sa_audit_thresholds.arcadia": "e5a04325d52183956dca814dd90f4e56c96c6b7db0f4f202f203ecb49c3e0f4f",
+      "examples/release1/sa/functions/function_sa_restore_work.arcadia": "fddeb67308051325041fee641fe758ddf43345b7c47b66d433616ad07fdccdd6",
+      "licenses/llvm-libunwind/llvm-ea7d852a70e8-libunwind-LICENSE.TXT": "b5efebcaca80879234098e52d1725e6d9eb8fb96a19fce625d39184b705f7b6d",
+      "licenses/rust/COPYING.RUNTIME": "28e85c5aa4af9b4f1dfe6b4817aa3eefb3eaaee7fd735045016f29ccf50276a1",
+      "licenses/rust/COPYING3": "8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903",
+      "licenses/rust/COPYRIGHT-library.html": "68129500b616d5838629e68f55ff3aed5e096dacf60ce9eb41bbe599a563afa6",
+      "licenses/rust/COPYRIGHT.html": "5b0c93fc4e6d4b072eaa521b1762d1e746f4c368f65e81a0e5308e2772dac85e",
+      "licenses/dependencies/cfg-if-1.0.4/LICENSE-APACHE": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+      "licenses/dependencies/cfg-if-1.0.4/LICENSE-MIT": "378f5840b258e2779c39418f3f2d7b2ba96f1c7917dd6be0713f88305dbda397",
+      "licenses/dependencies/fastrand-2.5.0/LICENSE-APACHE": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+      "licenses/dependencies/fastrand-2.5.0/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/getrandom-0.4.3/LICENSE-APACHE": "aaff376532ea30a0cd5330b9502ad4a4c8bf769c539c87ffe78819d188a18ebf",
+      "licenses/dependencies/getrandom-0.4.3/LICENSE-MIT": "523a42c25d245dde9c015f882cec7f4555aad883382a6cf19b4b7d9b2cd5419b",
+      "licenses/dependencies/itoa-1.0.18/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/itoa-1.0.18/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/memchr-2.8.3/COPYING": "01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f",
+      "licenses/dependencies/memchr-2.8.3/LICENSE-MIT": "0f96a83840e146e43c0ec96a22ec1f392e0680e6c1226e6f3ba87e0740af850f",
+      "licenses/dependencies/memchr-2.8.3/UNLICENSE": "7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c",
+      "licenses/dependencies/oa-cli-0.2.0/workspace-LICENSE": "51009f2cb07e5d19645858b2fbc037a672a25f8cbf7999522942b86807ecf365",
+      "licenses/dependencies/oa-core-0.2.0/workspace-LICENSE": "51009f2cb07e5d19645858b2fbc037a672a25f8cbf7999522942b86807ecf365",
+      "licenses/dependencies/once_cell-1.21.4/LICENSE-APACHE": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+      "licenses/dependencies/once_cell-1.21.4/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/proc-macro2-1.0.107/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/proc-macro2-1.0.107/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/quote-1.0.47/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/quote-1.0.47/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/rand_core-0.10.1/COPYRIGHT": "92b81db30f7ab6d693e0af5661a40d273ca1947e891123ed823924192c10cbc7",
+      "licenses/dependencies/rand_core-0.10.1/LICENSE-APACHE": "6df43f6f4b5d4587f3d8d71e45532c688fd168afa5fe89d571cb32fa09c4ef51",
+      "licenses/dependencies/rand_core-0.10.1/LICENSE-MIT": "8b6e9feec03e7c9a5facb26855cecd31662bf989b636bcfe79521bdf8ac863f0",
+      "licenses/dependencies/same-file-1.0.6/COPYING": "01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f",
+      "licenses/dependencies/same-file-1.0.6/LICENSE-MIT": "cb3c929a05e6cbc9de9ab06a4c57eeb60ca8c724bef6c138c87d3a577e27aa14",
+      "licenses/dependencies/same-file-1.0.6/UNLICENSE": "7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c",
+      "licenses/dependencies/serde-1.0.229/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/serde-1.0.229/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/serde_core-1.0.229/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/serde_core-1.0.229/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/serde_derive-1.0.229/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/serde_derive-1.0.229/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/serde_json-1.0.151/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/serde_json-1.0.151/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/sha1_smol-1.0.1/LICENSE": "282a21b0710441c364025461a447362daf18f5798a7b72ae2f801a2aa536da51",
+      "licenses/dependencies/syn-3.0.5/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/syn-3.0.5/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/tempfile-3.27.0/LICENSE-APACHE": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+      "licenses/dependencies/tempfile-3.27.0/LICENSE-MIT": "8b427f5bc501764575e52ba4f9d95673cf8f6d80a86d0d06599852e1a9a20a36",
+      "licenses/dependencies/thiserror-2.0.20/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/thiserror-2.0.20/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/thiserror-impl-2.0.20/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/thiserror-impl-2.0.20/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/unicode-ident-1.0.24/LICENSE-APACHE": "62c7a1e35f56406896d7aa7ca52d0cc0d272ac022b5d2796e7d6905db8a3636a",
+      "licenses/dependencies/unicode-ident-1.0.24/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3",
+      "licenses/dependencies/unicode-ident-1.0.24/LICENSE-UNICODE": "f7db81051789b729fea528a63ec4c938fdcb93d9d61d97dc8cc2e9df6d47f2a1",
+      "licenses/dependencies/uuid-1.26.0/LICENSE-APACHE": "a60eea817514531668d7e00765731449fe14d059d3249e0bc93b36de45f759f2",
+      "licenses/dependencies/uuid-1.26.0/LICENSE-MIT": "436bc5a105d8e57dcd8778730f3754f7bf39c14d2f530e4cde4bd2d17a83ec3d",
+      "licenses/dependencies/winapi-util-0.1.11/COPYING": "01c266bced4a434da0051174d6bee16a4c82cf634e2679b6155d40d75012390f",
+      "licenses/dependencies/winapi-util-0.1.11/LICENSE-MIT": "cb3c929a05e6cbc9de9ab06a4c57eeb60ca8c724bef6c138c87d3a577e27aa14",
+      "licenses/dependencies/winapi-util-0.1.11/UNLICENSE": "7e12e5df4bae12cb21581ba157ced20e1986a0508dd10d0e8a4ab9a4cf94e85c",
+      "licenses/dependencies/windows-link-0.2.1/license-apache-2.0": "c16f8dcf1a368b83be78d826ea23de4079fe1b4469a0ab9ee20563f37ff3d44b",
+      "licenses/dependencies/windows-link-0.2.1/license-mit": "c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383",
+      "licenses/dependencies/windows-sys-0.61.2/license-apache-2.0": "c16f8dcf1a368b83be78d826ea23de4079fe1b4469a0ab9ee20563f37ff3d44b",
+      "licenses/dependencies/windows-sys-0.61.2/license-mit": "c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383",
+      "licenses/dependencies/zmij-1.0.23/LICENSE-MIT": "23f18e03dc49df91622fe2a76176497404e46ced8a715d9d2b67a7446571cca3"
+    },
+    "notice_packages": 27,
+    "notice_reference_files": 60,
+    "package_claims": {
+      "product": "Arcadia CLI",
+      "version": "0.2.0-preview.authoring.20260911",
+      "target": "x86_64-pc-windows-gnullvm",
+      "acceptance": "Packaging integrity only; clean-environment CLI verification required.",
+      "build": "Prebuilt input; source/compiler/profile assertions are recorded, not inferred.",
+      "build_evidence": {
+        "assertion": "Caller-supplied build evidence; target and binary hashes checked, source/compiler/profile statements not inferred or independently proven by packaging.",
+        "evidence": {
+          "source_identity": "CLI semantic/build-input basis 01b76a1e89e93b7992f39e63560aa8b2ca2f69e0. Six original CLI manifest/workspace/lock/source/test hashes and 95 unchanged core/shared build inputs independently matched. Packaging assembly basis a0a48e82bd43be181caca1fe2c1514c21f2bc405 changes packaging only and is not claimed as the original compiler input commit.",
+          "profile": "Preserved Windows debug/development artifact from cargo build --locked --offline -p oa-cli --bin arcadia, successful September11 2026 11:45:43.6035381Z,9.7336637seconds. No release-profile or reproducible-build claim.",
+          "compiler": "rustc1.98.1 commit48a229ceaefd4985c50990b14116b6d856af0985,x86_64-pc-windows-gnullvm,LLVM22.1.8. Frozen executable embeds that compiler path; current toolchain target-library hashes match preserved inventory. Original compile/test/lint and independent frozen-binary review records retained separately.",
+          "target": "x86_64-pc-windows-gnullvm",
+          "binary_sha256": {
+            "arcadia.exe": "bad169f8be78dcfa74b32714569c886dd2132727080684fc2ba618d5822e3559"
+          }
+        }
+      }
+    }
+  },
+  "environment": {
+    "SystemRoot": "C:\\Windows",
+    "WINDIR": "C:\\Windows",
+    "PATH": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\extracted\\ArcadiaCLI-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm;C:\\Windows\\System32;C:\\Windows",
+    "TEMP": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\temp",
+    "TMP": "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\temp"
+  },
+  "invocations": [
+    {
+      "arguments": [
+        "--version"
+      ],
+      "exit": 0,
+      "stdout_sha256": "0ebfaa91da207b98ef56f307b64a3f083359812b2655870f4a61459733d8590c",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "--help"
+      ],
+      "exit": 0,
+      "stdout_sha256": "e41dd6452098023fd333c52cc210e5c2a7e08d20c377e0622deadb90d274f28f",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "check",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\examples\\text-first\\project.arcadia",
+        "--json"
+      ],
+      "exit": 0,
+      "stdout_sha256": "64e6c3cb866801ec441a040406ce5111747fcb0c04a0cbfae3ab4fe0acac6fca",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "check",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\examples\\release1\\project.arcadia",
+        "--json"
+      ],
+      "exit": 0,
+      "stdout_sha256": "0c29e2b2d297cfb06f0359ea1c6565997b1f396f442fc5684f12dbff8eca84bf",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "stabilize",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\exact-source\\project.arcadia",
+        "--json"
+      ],
+      "exit": 0,
+      "stdout_sha256": "849cff20bd541febf6133a4206fd4dddab396857b361add78093cf01f55aeff4",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "stabilize",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\exact-source\\project.arcadia",
+        "--write",
+        "--json"
+      ],
+      "exit": 0,
+      "stdout_sha256": "beec44418f383d205522b6784b0aba096466e41da3b0728eb8798991149e2143",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "rename-alias",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\exact-source\\project.arcadia",
+        "crew",
+        "rescue_team",
+        "--json"
+      ],
+      "exit": 0,
+      "stdout_sha256": "1267c7a17e2701a2dd6b91cbaacdd0e52fdb8b031660d1f788542921aa5948bb",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "rename-alias",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\exact-source\\project.arcadia",
+        "crew",
+        "rescue_team",
+        "--write",
+        "--json"
+      ],
+      "exit": 0,
+      "stdout_sha256": "0967d3dff03ebf5c5bfcfe716af8e369e23e0289885c02b83beeb4f92d5e008d",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "stabilize",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\exact-source\\project.arcadia",
+        "--write",
+        "--json"
+      ],
+      "exit": 0,
+      "stdout_sha256": "b95dfd2d8effc49df2a7fe893cd414a5edad9c4686c5dada4faca72ef40360b7",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    },
+    {
+      "arguments": [
+        "stabilize",
+        "C:\\Users\\User\\Documents\\Git\\ARCADIA-Studio\\.local\\cli-packaging-review-20260911\\runtime\\invalid.arcadia",
+        "--write",
+        "--json"
+      ],
+      "exit": 1,
+      "stdout_sha256": "546ab1d5bb19dd8fa22dd6f017cc0e58b91602ccc24a048c41602b0dae45c70b",
+      "stderr_sha256": "e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"
+    }
+  ],
+  "runtime": {
+    "fixed_source_ids": [
+      "c073d2cf-83e5-4c98-8eaf-4a465ff0cf71",
+      "1987c990-e3cb-4f0e-9be9-fe61f007b997",
+      "9ba9e3cd-96f5-4f9a-865e-6b31ba94b4e6",
+      "ffcf7e41-f94b-4f7c-99c1-1a30a0b46959"
+    ],
+    "allocated_activity_id": "9ba9e3cd-96f5-4f9a-865e-6b31ba94b4e6",
+    "final_source_sha256": {
+      "detached.arcadia": "ae79cfc57c5e227c281f1ad8493c1cdb483700fe0fe78ec8e448135afc98d239",
+      "project.arcadia": "1352c29a8cce5b5dbd7563b086680f889bdf35198f010d0083e99dd25e1007be",
+      "modules/oa.arcadia": "a781e165aaddeecb05fc9110873dd1e00e7a30687cef9cded11107ee2846c162"
+    },
+    "source_exact_expected": {
+      "detached.arcadia": "// known detached bytes remain\r\n",
+      "project.arcadia": "arcadia 7;\r\nproject review \"CLI package 救助\" id \"c073d2cf-83e5-4c98-8eaf-4a465ff0cf71\" {\r\n    description \"Literal @crew remains\";\r\n    include \"modules/oa.arcadia\";\r\n}\r\n",
+      "modules/oa.arcadia": "// @crew stays in this comment; Ω\r\noa_actor rescue_team \"Crew literal @crew\" id \"1987c990-e3cb-4f0e-9be9-fe61f007b997\" {}\r\noa_activity observe \"Observe Ω\" id \"9ba9e3cd-96f5-4f9a-865e-6b31ba94b4e6\" {}\r\nallocation responsibility \"Assigned @crew\" id \"ffcf7e41-f94b-4f7c-99c1-1a30a0b46959\" { source @rescue_team; target @observe; }\r\n"
+    },
+    "stabilization_note": "Separate preview UUID remains provisional; each result is checked by literal declaration role, not assumed equal across invocations."
+  },
+  "status": "PASS",
+  "finished_utc": "2026-09-11T12:43:12Z",
+  "script_sha256": "f85d1f34ab75b4067efe09886e447bf9fd54dc232020bcb1a46404ec57b2351e"
+}

harness/experiments/cli-packaging-20260911/reviewer.py

@@ -0,0 +1,256 @@
+"""Independent CLI packaging review: read-only source checks and isolated CLI runs."""
+from pathlib import Path, PurePosixPath
+import ast
+import hashlib
+import json
+import os
+import re
+import shutil
+import stat
+import subprocess
+import sys
+import time
+import tomllib
+import traceback
+import uuid
+import zipfile
+
+OUT = Path(__file__).resolve().parent
+ROOT = OUT.parents[1]
+SOURCE = ROOT / '.local/cli-packaging-20260911/source'
+NAME = 'ArcadiaCLI-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm'
+ZIP = SOURCE.parent / 'packages' / (NAME + '.zip')
+PACKAGE = OUT / 'extracted' / NAME
+BASE = '01b76a1e89e93b7992f39e63560aa8b2ca2f69e0'
+ASSEMBLY = 'a0a48e82bd43be181caca1fe2c1514c21f2bc405'
+ZIP_SHA = '2b051f8ce1ea4f59ee7e233e1fbd516d423aadbfbca5d549755cbe78fcde1af6'
+EXE_SHA = 'bad169f8be78dcfa74b32714569c886dd2132727080684fc2ba618d5822e3559'
+DLL_SHA = 'f45604a12e8bcd839fd86f667c1be1cc7c4f9da2b3c69ff381ac708f0e1ae7d4'
+RESULT = {'started_utc': time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime()), 'checks': []}
+
+
+def check(ok, label):
+    if not ok:
+        raise AssertionError(label)
+    RESULT['checks'].append(label)
+
+
+def sha(b):
+    return hashlib.sha256(b).hexdigest()
+
+
+def read_json(p):
+    return json.loads(p.read_text(encoding='utf-8-sig'))
+
+
+def record(path, obj):
+    with path.open('x', encoding='utf-8', newline='\n') as f:
+        json.dump(obj, f, indent=2, ensure_ascii=False)
+        f.write('\n')
+
+
+def snapshot(directory):
+    files = {}
+    for p in directory.rglob('*'):
+        if p.is_symlink() or getattr(p.lstat(), 'st_file_attributes', 0) & 0x400:
+            raise AssertionError('unexpected reparse path ' + str(p))
+        if p.is_file():
+            files[p.relative_to(directory).as_posix()] = p.read_bytes()
+    return files
+
+
+def git(path, ref=BASE):
+    return subprocess.run(['git', 'show', ref + ':' + path], cwd=ROOT, check=True, capture_output=True).stdout
+
+
+def source_checks():
+    old = git('scripts/package-artifacts.py').decode()
+    new = (ROOT / 'scripts/package-artifacts.py').read_text()
+    original_functions = {f.name: ast.dump(f, include_attributes=False) for f in ast.parse(old).body if isinstance(f, ast.FunctionDef)}
+    new_functions = {f.name: ast.dump(f, include_attributes=False) for f in ast.parse(new).body if isinstance(f, ast.FunctionDef)}
+    check(all(new_functions[k] == v for k, v in original_functions.items() if k not in ('document_inputs', 'main')), 'all original ELF/tar/document/notice helpers unchanged outside product selection')
+    before, after = {'__name__': 'review_baseline'}, {'__name__': 'review_current'}
+    exec(compile(old, '<baseline packaging>', 'exec'), before)
+    exec(compile(new, '<current packaging>', 'exec'), after)
+    counts = {}
+    for platform in ('windows', 'linux'):
+        expected = before['document_inputs'](SOURCE, platform)
+        default = after['document_inputs'](SOURCE, platform)
+        explicit = after['document_inputs'](SOURCE, platform, 'studio')
+        check(default == explicit == expected, platform + ' actual full Studio document closure unchanged')
+        counts[platform] = len(default['files'])
+    old_notice = git('scripts/windows-notices.ps1').decode().splitlines()
+    new_notice = (ROOT / 'scripts/windows-notices.ps1').read_text().splitlines()
+    check(len(old_notice) == len(new_notice) and [i for i, pair in enumerate(zip(old_notice, new_notice)) if pair[0] != pair[1]] == [3], 'only notice source delta is oa-cli allowed-root check; default/body unchanged')
+    for p in ('scripts/package-linux.ps1', 'deployment/Dockerfile', 'deployment/Dockerfile.dockerignore'):
+        check(git(p).decode().splitlines() == (ROOT / p).read_text().splitlines(), 'Linux entry/deployment unchanged: ' + p)
+    old_windows = git('scripts/package-windows.ps1').decode().replace('\r\n', '\n')
+    common = (ROOT / 'scripts/package-common.ps1').read_text()
+    reader_old = old_windows.split('function Read-PeImports', 1)[1].split('\n# Windows system components', 1)[0].strip()
+    reader_new = common.split('function Read-PackagePeImports', 1)[1].split('\nfunction Get-PackageWindowsInputs', 1)[0].strip()
+    check(reader_old == reader_new, 'PE reader extraction is byte-equivalent after function rename/EOL normalization')
+    old_allowlist = re.search(r'\$systemDlls = @\((.*?)\n\)', old_windows, re.S)[1]
+    new_allowlist = re.search(r'\$systemDlls = @\((.*?)\n    \)', common, re.S)[1]
+    check(re.findall(r"'([^']+)'", old_allowlist) == re.findall(r"'([^']+)'", new_allowlist), 'Windows system DLL allowlist unchanged')
+    new_windows = (ROOT / 'scripts/package-windows.ps1').read_text()
+    check("Get-PackageWindowsInputs $BinaryDirectory $Target $LlvmMinGWRoot @('arcadia-studio.exe', 'arcadia-server.exe')" in new_windows, 'Studio explicitly retains both original binary inputs')
+    check(old_windows.split('$evidence = Read-PackageBuildEvidence', 1)[1].splitlines() == new_windows.split('$evidence = Read-PackageBuildEvidence', 1)[1].splitlines(), 'Studio post-inspection packaging pipeline unchanged')
+    delta = subprocess.run(['git', 'diff', '--name-only', BASE, ASSEMBLY], cwd=ROOT, capture_output=True, check=True).stdout.decode().splitlines()
+    check(len(delta) == 9 and all(p.startswith('scripts/') for p in delta), 'assembly delta exactly nine packaging/script paths')
+    check(all((ROOT / p).read_bytes() == (SOURCE / p).read_bytes() for p in delta), 'reviewed main packaging sources equal frozen assembly bytes')
+    RESULT['source_review'] = {'semantic_source': BASE, 'assembly_source': ASSEMBLY, 'packaging_paths': {p: sha((ROOT / p).read_bytes()) for p in delta}, 'studio_document_counts': counts}
+
+
+def artifact():
+    check(not PACKAGE.parent.exists(), 'fresh extraction directory')
+    check(ZIP.stat().st_size == 5091267 and sha(ZIP.read_bytes()) == ZIP_SHA, 'frozen ZIP size and hash')
+    with zipfile.ZipFile(ZIP) as z:
+        names = z.namelist()
+        check(len(names) == 114 and len({n.casefold() for n in names}) == 114, '114 unique ZIP files')
+        check(all(n.startswith(NAME + '/') and PurePosixPath(n).as_posix() == n and '..' not in PurePosixPath(n).parts and '\\' not in n and ':' not in n and all(not p.endswith((' ', '.')) for p in PurePosixPath(n).parts) for n in names), 'single safe normalized Windows ZIP root')
+        check(all(not i.is_dir() and stat.S_IFMT(i.external_attr >> 16) in (0, stat.S_IFREG) and i.date_time == (2000, 1, 1, 0, 0, 0) for i in z.infolist()) and z.testzip() is None, 'ordinary fixed-time ZIP members and CRCs')
+        PACKAGE.parent.mkdir()
+        z.extractall(PACKAGE.parent)
+        archived = {n[len(NAME) + 1:]: z.read(n) for n in names}
+    actual = snapshot(PACKAGE)
+    check(actual == archived, 'complete clean extraction equals ZIP bytes')
+    hashes = {p: sha(b) for p, b in actual.items()}
+    lines = actual['SHA256SUMS.txt'].decode().splitlines()
+    sums = dict((line[66:], line[:64]) for line in lines)
+    check(len(sums) == len(lines) and sums == {p: h for p, h in hashes.items() if p != 'SHA256SUMS.txt'}, 'complete checksum inventory equals every other extracted file')
+    package = read_json(PACKAGE / 'package.json')
+    generated = {'SHA256SUMS.txt', 'START-HERE.txt', 'THIRD-PARTY-NOTICES.txt', 'dependency-notices.json', 'documentation-check.json', 'package.json'}
+    check(set(actual) - set(package['input_sha256']) == generated and all(hashes[p] == h for p, h in package['input_sha256'].items()), 'all package inputs plus exactly six generated records')
+    check(hashes['arcadia.exe'] == EXE_SHA and hashes['libunwind.dll'] == DLL_SHA, 'frozen CLI and runtime hashes')
+    check(not {'arcadia-studio.exe', 'arcadia-server.exe'} & set(actual), 'no unrelated executable payload')
+    for p in actual:
+        if p.startswith(('docs/', 'examples/')) or p == 'LICENSE':
+            check((SOURCE / p).read_bytes() == actual[p], 'exact public document/example: ' + p)
+    check(actual['README.md'] == (SOURCE / 'scripts/package-cli-readme.md').read_bytes(), 'CLI-specific README')
+    notice = read_json(PACKAGE / 'dependency-notices.json')
+    check(notice['root_packages'] == ['oa-cli'] and len(notice['packages']) == 27, '27 dependency packages; only CLI root')
+    check(notice['cargo_lock_sha256'] == sha((SOURCE / 'Cargo.lock').read_bytes()) == '2b960242c33eb839ff008d01731f6d5cdb4e047ca8cd6e13151cbf9c09913510', 'original CLI Cargo lock identity')
+    lock = {(p['name'], p['version'], p.get('source')): p for p in tomllib.loads((SOURCE / 'Cargo.lock').read_text())['package']}
+    references = []
+    for p in notice['packages']:
+        check(lock[p['name'], p['version'], p['source']].get('checksum') == p['registry_checksum'], 'locked dependency: ' + p['name'])
+        references.extend(p['notices'])
+        for f in p['embedded_fonts']:
+            references.extend(f['notices'])
+        if p['source'] is None:
+            local = snapshot(SOURCE / 'crates' / p['name'])
+            local = {k: sha(v) for k, v in local.items() if 'target' not in PurePosixPath(k).parts and PurePosixPath(k).name != '.cargo-ok'}
+            check(local == p['local_source_sha256'], 'complete local crate inputs: ' + p['name'])
+    references += notice['rust']['notices'] + notice['runtime']['notices']
+    check(all(hashes[i['path']] == i['sha256'] for i in references), 'all package/compiler/runtime notice references and bytes')
+    check(notice['runtime']['sha256'] == DLL_SHA, 'runtime notice binds packaged DLL')
+    check(all(sha((SOURCE / p).read_bytes()) == h for p, h in notice['workspace_build_inputs_sha256'].items()), 'all shared build input hashes')
+    original = read_json(ROOT / '.local/source-cli-20260911/verified/manifest.json')
+    cli_inputs = [i for i in original['Artifacts'] if not i['Path'].startswith('.local/')]
+    check(len(cli_inputs) == 6 and all(sha((SOURCE / i['Path']).read_bytes()) == i['SHA256'].lower() for i in cli_inputs), 'six original CLI manifest inputs')
+    core_inputs = [i for i in read_json(ROOT / '.local/behavior-creation-20260911/gui-verified/manifest.json')['inputs'] if i['path'].startswith(('crates/oa-core/', 'build/'))]
+    check(len(core_inputs) == 95 and all(sha((SOURCE / i['path']).read_bytes()) == i['sha256'].lower() for i in core_inputs), '95 original core/shared build inputs')
+    RESULT['artifact'] = {'zip_sha256': ZIP_SHA, 'zip_bytes': ZIP.stat().st_size, 'file_count': len(actual), 'files': hashes, 'notice_packages': 27, 'notice_reference_files': len({i['path'] for i in references}), 'package_claims': {k: package[k] for k in ('product', 'version', 'target', 'acceptance', 'build', 'build_evidence')}}
+    return actual
+
+
+def runtime(original_package):
+    run = OUT / 'runtime'
+    run.mkdir()
+    temp = run / 'temp'
+    temp.mkdir()
+    windows = Path(os.environ['SystemRoot'])
+    env = {'SystemRoot': str(windows), 'WINDIR': str(windows), 'PATH': ';'.join(map(str, (PACKAGE, windows / 'System32', windows))), 'TEMP': str(temp), 'TMP': str(temp)}
+    RESULT['environment'] = env
+    RESULT['invocations'] = []
+    def invoke(args, expect=0, report=True):
+        index = len(RESULT['invocations']) + 1
+        r = subprocess.run([str(PACKAGE / 'arcadia.exe'), *map(str, args)], cwd=run, env=env, capture_output=True, timeout=30, creationflags=subprocess.CREATE_NO_WINDOW)
+        (run / f'{index:02d}.stdout').write_bytes(r.stdout)
+        (run / f'{index:02d}.stderr').write_bytes(r.stderr)
+        RESULT['invocations'].append({'arguments': list(map(str, args)), 'exit': r.returncode, 'stdout_sha256': sha(r.stdout), 'stderr_sha256': sha(r.stderr)})
+        check(r.returncode == expect, 'CLI expected exit: ' + str(args))
+        if not report:
+            return r.stdout
+        check(not r.stderr, 'JSON invocation keeps diagnostic envelope on stdout')
+        value = json.loads(r.stdout)
+        check(value['format_version'] == 1 and value['exit_code'] == expect, 'versioned JSON report agrees with process exit')
+        return value
+    check(invoke(['--version'], report=False).decode().strip() == 'arcadia 0.2.0', 'underlying CLI version')
+    help_text = invoke(['--help'], report=False).decode()
+    check(all(word in help_text for word in ('check ROOT', 'stabilize ROOT', 'rename-alias ROOT OLD NEW', '--write', 'provisional')), 'packaged help has command/preview contract')
+    examples = run / 'examples'
+    shutil.copytree(PACKAGE / 'examples', examples)
+    before_examples = snapshot(examples)
+    for relative in ('text-first/project.arcadia', 'release1/project.arcadia'):
+        r = invoke(['check', examples / relative, '--json'])
+        check(r['status'] == 'checked' and not r['written'] and not r['changes'], 'packaged example check: ' + relative)
+    check(snapshot(examples) == before_examples, 'checks preserve complete copied examples byte-for-byte')
+    fixture = run / 'exact-source'
+    (fixture / 'modules').mkdir(parents=True)
+    entry = 'arcadia 7;\r\nproject review "CLI package 救助" id "c073d2cf-83e5-4c98-8eaf-4a465ff0cf71" {\r\n    description "Literal @crew remains";\r\n    include "modules/oa.arcadia";\r\n}\r\n'
+    module = '// @crew stays in this comment; Ω\r\noa_actor crew "Crew literal @crew" id "1987c990-e3cb-4f0e-9be9-fe61f007b997" {}\r\noa_activity observe "Observe Ω" {}\r\nallocation responsibility "Assigned @crew" id "ffcf7e41-f94b-4f7c-99c1-1a30a0b46959" { source @crew; target @observe; }\r\n'
+    (fixture / 'project.arcadia').write_bytes(entry.encode())
+    (fixture / 'modules/oa.arcadia').write_bytes(module.encode())
+    (fixture / 'detached.arcadia').write_bytes(b'// known detached bytes remain\r\n')
+    before = snapshot(fixture)
+    root = fixture / 'project.arcadia'
+    def stabilized(report):
+        check(len(report['changes']) == 1 and report['changes'][0]['path'] == 'modules/oa.arcadia' and report['changes'][0]['before'] == module, 'only missing-ID source changes; exact captured raw bytes')
+        text = report['changes'][0]['after']
+        match = re.search(r'oa_activity observe "Observe Ω" id "([0-9a-f-]{36})"', text)
+        check(match is not None, 'fresh ID is attached to literal intended activity')
+        identity = str(uuid.UUID(match[1]))
+        check(identity not in (entry + module), 'allocated identity differs from every preexisting identity')
+        expected = module.replace('oa_activity observe "Observe Ω" {}', f'oa_activity observe "Observe Ω" id "{identity}" {{}}')
+        check(text == expected, 'stabilization preserves every other character, CRLF, comment, name and reference')
+        return text, identity
+    preview = invoke(['stabilize', root, '--json'])
+    check(preview['status'] == 'preview' and not preview['written'] and preview['identities_to_stabilize'] == 1, 'stabilization is preview by default')
+    stabilized(preview)
+    check(snapshot(fixture) == before, 'preview preserves all physical source bytes including detached file')
+    written = invoke(['stabilize', root, '--write', '--json'])
+    check(written['status'] == 'written' and written['written'], 'explicit stabilization writes')
+    text, identity = stabilized(written)
+    stable_expected = dict(before, **{'modules/oa.arcadia': text.encode()})
+    check(snapshot(fixture) == stable_expected, 'stabilized complete physical file inventory and bytes')
+    renamed = text.replace('oa_actor crew ', 'oa_actor rescue_team ').replace('source @crew;', 'source @rescue_team;')
+    preview = invoke(['rename-alias', root, 'crew', 'rescue_team', '--json'])
+    check(not preview['written'] and preview['status'] == 'preview' and [(c['path'], c['before'], c['after']) for c in preview['changes']] == [('modules/oa.arcadia', text, renamed)], 'alias preview changes exact declaration and typed reference only')
+    check(snapshot(fixture) == stable_expected, 'rename preview retains exact source bytes and identities')
+    saved = invoke(['rename-alias', root, 'crew', 'rescue_team', '--write', '--json'])
+    renamed_expected = dict(before, **{'modules/oa.arcadia': renamed.encode()})
+    check(saved['written'] and snapshot(fixture) == renamed_expected, 'explicit alias write matches full independent raw expected files')
+    expected_ids = re.findall(r'\bid "([0-9a-f-]{36})"', entry + text)
+    check(re.findall(r'\bid "([0-9a-f-]{36})"', entry + renamed) == expected_ids and len(expected_ids) == 4, 'all four identities remain ordered and exact through rename')
+    timestamps = {p: (fixture / p).stat().st_mtime_ns for p in renamed_expected}
+    noop = invoke(['stabilize', root, '--write', '--json'])
+    check(noop['status'] == 'unchanged' and not noop['written'] and not noop['changes'] and noop['identities_to_stabilize'] == 0, 'explicit no-op reports unchanged')
+    check(snapshot(fixture) == renamed_expected and timestamps == {p: (fixture / p).stat().st_mtime_ns for p in renamed_expected}, 'no-op preserves all file bytes and mtimes')
+    invalid = run / 'invalid.arcadia'
+    invalid.write_bytes(b'arcadia 7;\r\nproject broken "Unclosed" {\r\n')
+    invalid_before = invalid.read_bytes()
+    refusal = invoke(['stabilize', invalid, '--write', '--json'], expect=1)
+    check(not refusal['written'] and invalid.read_bytes() == invalid_before, 'invalid source write refuses with exact raw retention')
+    check(snapshot(PACKAGE) == original_package and sha(ZIP.read_bytes()) == ZIP_SHA, 'all packaged files and frozen ZIP unchanged after runtime checks')
+    RESULT['runtime'] = {'fixed_source_ids': expected_ids, 'allocated_activity_id': identity, 'final_source_sha256': {p: sha(b) for p, b in renamed_expected.items()}, 'source_exact_expected': {p: b.decode() for p, b in renamed_expected.items()}, 'stabilization_note': 'Separate preview UUID remains provisional; each result is checked by literal declaration role, not assumed equal across invocations.'}
+
+
+try:
+    check(not (OUT / 'result.json').exists(), 'preserve earlier evidence; no overwrite')
+    source_checks()
+    frozen = artifact()
+    runtime(frozen)
+    RESULT['status'] = 'PASS'
+except Exception as error:
+    RESULT['status'] = 'FAIL'
+    RESULT['error'] = repr(error)
+    RESULT['traceback'] = traceback.format_exc()
+RESULT['finished_utc'] = time.strftime('%Y-%m-%dT%H:%M:%SZ', time.gmtime())
+RESULT['script_sha256'] = sha(Path(__file__).read_bytes())
+record(OUT / 'result.json', RESULT)
+print(json.dumps({k: RESULT[k] for k in ('status', 'started_utc', 'finished_utc')}, indent=2))
+print('checks:', len(RESULT['checks']), 'invocations:', len(RESULT.get('invocations', [])))
+if RESULT['status'] == 'FAIL':
+    print(RESULT['traceback'])
+    sys.exit(1)

harness/experiments/cli-packaging-20260911/windows-initial.log

@@ -0,0 +1 @@
+PASS: 15 CLI/Windows packaging assertions; inert fixture retained at C:\Temp\arcadia-cli-package-2a5110e4fc074b6f9db9bfa623db315c

harness/experiments/cli-prerelease-20260911/README.md

@@ -0,0 +1,47 @@
+# CLI prerelease publication records — 2026-09-11
+
+These four files are exact byte copies from `.local/cli-packaging-20260911/`.
+They contain sanitized publication results and release prose only. No credential,
+configuration, authentication helper or upload script is included.
+
+| File | Bytes | SHA256 |
+| --- | ---: | --- |
+| `upload-binaries-verified.json` | 678 | `e945e2724020c48bfe15be7b4258861bd6c01291b98eae036eca786bb022ebde` |
+| `upload-validation-verified.json` | 277 | `73581acbb5b5fe4aca1fda1b626f80a28bcb3d6c036f7ce793c62bf5a8ef4a72` |
+| `published-verified.json` | 382 | `b5fe8a38579fb8399c78bca9db9fd91b64e8b7b7de7c664049cf5e615a671100` |
+| `RELEASE-NOTES.md` | 2010 | `86a1b5b0744c8f63f6ed640e14b23bdbcb34b63a25320d67eb1fa7da4128a0a5` |
+
+All four originals use CRLF. `preserve.py` rereads source and destination bytes,
+refuses any unequal existing destination, and records the inventory in
+`manifest.json`. It does not upload or execute application binaries. Running it
+again requires the original private source records and preserved MCP readbacks.
+
+`mcp-release-readback.json` and `mcp-tag-readback.json` are locally serialized
+parsed responses from fresh read-only Gitea MCP calls. They are observations,
+not original HTTP wire bytes. Release 2 is published as a prerelease at
+`cli-v0.2.0-preview.authoring.20260911`, pointing to integration commit
+`27df4a3945ebc97cd7cbde61f6aeea7a91c680d3`.
+
+The publisher's `notes_sha256` is
+`1b83b9c904a79ff7acbde421851c9da9b520f3fa0aea920bf55fb71bea392a9d`.
+It binds the **1988-byte UTF-8 LF public body**, not the raw CRLF Markdown file
+above. Converting only CRLF to LF makes the preserved prose exactly equal to
+the MCP public body, including its final newline. `preservation.log` records
+the corrected successful check. `preservation-initial-failure.txt` discloses
+the initial checker assumption and its correction; no publication changed.
+
+The asset readback PASS fields are the original publisher's downloaded-asset
+verification, preserved without re-downloading or repeating runtime checks.
+The semantic source (`01b76a1`), packaging assembly (`a0a48e8`) and release
+integration (`27df4a3`) remain distinct in `manifest.json` and the report.
+
+Proposed repository attribute rule for root integration:
+
+```gitattributes
+harness/experiments/cli-prerelease-20260911/** -text
+```
+
+The preserving worker did not edit `.gitattributes` or Git state. Root must
+apply the rule before adding these exact evidence bytes and verify index or
+checkout hashes. The standalone report is
+`harness/release-cli-prerelease-published-20260911.md`.

harness/experiments/cli-prerelease-20260911/RELEASE-NOTES.md

@@ -0,0 +1,22 @@
+Standalone Windows x64 tools for `.arcadia` projects: `check`/`lint`, missing-ID stabilization and semantic alias rename. Editing commands preview by default; `--write` saves through the shared source conflict/recovery guards. Studio and a server are not required.
+
+Extract the complete ArcadiaCLI ZIP, keep `libunwind.dll` beside `arcadia.exe`, and open a terminal in that folder:
+
+```powershell
+.\arcadia.exe --help
+.\arcadia.exe check examples/text-first/project.arcadia
+```
+
+Copy a complete example folder before editing. Read `docs/source-cli.md` for command, diagnostic and exit-code contracts. Preview IDs remain provisional until saved; a later invocation can generate different missing IDs.
+
+Verified: 12 source CLI tests, strict lint/format/build, independent 183 semantic assertions across 21 processes, all 114 packaged files and 27 dependency packages, plus independent source/default compatibility and 156 assertions across 10 clean extracted CLI invocations. Preview, exact stabilization/rename, preserved identities/comments/Unicode/CRLF, no-op timestamps and invalid-source refusal passed. ZIP, checksum and validation asset were downloaded and hash-verified after upload.
+
+This is a development-profile Windows preview. It does not provide a saved-plan/digest protocol, complete large-model text ergonomics or current Linux runtime acceptance. It is separate from the [Studio preview](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/v0.2.0-preview.authoring.20260911). The full OA/SA release remains under development.
+
+Release checkpoint: [27df4a3](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/commit/27df4a3945ebc97cd7cbde61f6aeea7a91c680d3). Preserved semantic build source is `01b76a1`; packaging-only assembly is `a0a48e8`. Attached `VALIDATION.md` records exact evidence and the distinct source/build roles.
+
+ZIP size: **5,091,267 bytes**. SHA256:
+
+```text
+2B051F8CE1EA4F59EE7E233E1FBD516D423AADBFBCA5D549755CBE78FCDE1AF6
+```

harness/experiments/cli-prerelease-20260911/manifest.json

@@ -0,0 +1,96 @@
+{
+  "scope": "Publication evidence preservation and read-only MCP release/tag comparison; no runtime tests or asset re-download.",
+  "release_id": 2,
+  "tag": "cli-v0.2.0-preview.authoring.20260911",
+  "publication_url": "http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/cli-v0.2.0-preview.authoring.20260911",
+  "published_at": "2026-09-11T12:50:39Z",
+  "source_roles": {
+    "semantic_source": "01b76a1e89e93b7992f39e63560aa8b2ca2f69e0",
+    "packaging_assembly": "a0a48e82bd43be181caca1fe2c1514c21f2bc405",
+    "release_integration": "27df4a3945ebc97cd7cbde61f6aeea7a91c680d3"
+  },
+  "assets": [
+    {
+      "id": 4,
+      "name": "ArcadiaCLI-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm.zip",
+      "bytes": 5091267,
+      "sha256": "2b051f8ce1ea4f59ee7e233e1fbd516d423aadbfbca5d549755cbe78fcde1af6",
+      "url": "http://217.177.34.108:3000/attachments/024ac74c-8806-4da2-9ca4-726c01a7735f",
+      "readback": "PASS"
+    },
+    {
+      "id": 5,
+      "name": "ArcadiaCLI-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm.zip.sha256",
+      "bytes": 140,
+      "sha256": "0dc3f12d2f79edfb735e311298d1528cbdb828b775ec885b3badde24e66bceef",
+      "url": "http://217.177.34.108:3000/attachments/24af1b92-ce23-41e3-bc25-60fed95a6270",
+      "readback": "PASS"
+    },
+    {
+      "id": 6,
+      "name": "VALIDATION.md",
+      "bytes": 50297,
+      "sha256": "5a0206b493bf1ca98fe931243452a9092cdf2acf10f4e3fd0a7ee9a7d8f56ec8",
+      "url": "http://217.177.34.108:3000/attachments/628863de-e4ff-4fc7-afdb-45b071705d7b",
+      "readback": "PASS"
+    }
+  ],
+  "files": [
+    {
+      "path": "upload-binaries-verified.json",
+      "source": ".local/cli-packaging-20260911/upload-binaries-verified.json",
+      "bytes": 678,
+      "sha256": "e945e2724020c48bfe15be7b4258861bd6c01291b98eae036eca786bb022ebde",
+      "crlf_sequences": 17,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    },
+    {
+      "path": "upload-validation-verified.json",
+      "source": ".local/cli-packaging-20260911/upload-validation-verified.json",
+      "bytes": 277,
+      "sha256": "73581acbb5b5fe4aca1fda1b626f80a28bcb3d6c036f7ce793c62bf5a8ef4a72",
+      "crlf_sequences": 9,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    },
+    {
+      "path": "published-verified.json",
+      "source": ".local/cli-packaging-20260911/published-verified.json",
+      "bytes": 382,
+      "sha256": "b5fe8a38579fb8399c78bca9db9fd91b64e8b7b7de7c664049cf5e615a671100",
+      "crlf_sequences": 9,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    },
+    {
+      "path": "RELEASE-NOTES.md",
+      "source": ".local/cli-packaging-20260911/RELEASE-NOTES.md",
+      "bytes": 2010,
+      "sha256": "86a1b5b0744c8f63f6ed640e14b23bdbcb34b63a25320d67eb1fa7da4128a0a5",
+      "crlf_sequences": 22,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    },
+    {
+      "path": "mcp-release-readback.json",
+      "bytes": 2495,
+      "sha256": "e0a1d9324cd7a115e22c87c7905489aec81d30277a17b4480866380cbec8edb1",
+      "method": "MCP read-only parsed response, locally serialized as UTF-8 JSON; not original HTTP wire bytes"
+    },
+    {
+      "path": "mcp-tag-readback.json",
+      "bytes": 196,
+      "sha256": "bb770f30f292b65ca4af28d688f0f1dc1d04fb918b10f527a56ba847d44e9b2e",
+      "method": "MCP read-only parsed response, locally serialized as UTF-8 JSON; not original HTTP wire bytes"
+    }
+  ],
+  "checks": {
+    "four_exact_copies": true,
+    "release_and_tag_match": true,
+    "published_flags_and_time_match": true,
+    "normalized_notes_hash_matches_publisher_record": true,
+    "notes_match_public_body_after_CRLF_to_LF_only": true,
+    "asset_records_are_original_publisher_readbacks": true
+  }
+}

harness/experiments/cli-prerelease-20260911/mcp-release-readback.json

@@ -0,0 +1,13 @@
+{
+  "author": "Codex-9e8r6t",
+  "body": "Standalone Windows x64 tools for `.arcadia` projects: `check`/`lint`, missing-ID stabilization and semantic alias rename. Editing commands preview by default; `--write` saves through the shared source conflict/recovery guards. Studio and a server are not required.\n\nExtract the complete ArcadiaCLI ZIP, keep `libunwind.dll` beside `arcadia.exe`, and open a terminal in that folder:\n\n```powershell\n.\\arcadia.exe --help\n.\\arcadia.exe check examples/text-first/project.arcadia\n```\n\nCopy a complete example folder before editing. Read `docs/source-cli.md` for command, diagnostic and exit-code contracts. Preview IDs remain provisional until saved; a later invocation can generate different missing IDs.\n\nVerified: 12 source CLI tests, strict lint/format/build, independent 183 semantic assertions across 21 processes, all 114 packaged files and 27 dependency packages, plus independent source/default compatibility and 156 assertions across 10 clean extracted CLI invocations. Preview, exact stabilization/rename, preserved identities/comments/Unicode/CRLF, no-op timestamps and invalid-source refusal passed. ZIP, checksum and validation asset were downloaded and hash-verified after upload.\n\nThis is a development-profile Windows preview. It does not provide a saved-plan/digest protocol, complete large-model text ergonomics or current Linux runtime acceptance. It is separate from the [Studio preview](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/v0.2.0-preview.authoring.20260911). The full OA/SA release remains under development.\n\nRelease checkpoint: [27df4a3](http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/commit/27df4a3945ebc97cd7cbde61f6aeea7a91c680d3). Preserved semantic build source is `01b76a1`; packaging-only assembly is `a0a48e8`. Attached `VALIDATION.md` records exact evidence and the distinct source/build roles.\n\nZIP size: **5,091,267 bytes**. SHA256:\n\n```text\n2B051F8CE1EA4F59EE7E233E1FBD516D423AADBFBCA5D549755CBE78FCDE1AF6\n```\n",
+  "created_at": "2026-09-11T12:50:39Z",
+  "draft": false,
+  "html_url": "http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/cli-v0.2.0-preview.authoring.20260911",
+  "id": 2,
+  "prerelease": true,
+  "published_at": "2026-09-11T12:50:39Z",
+  "tag_name": "cli-v0.2.0-preview.authoring.20260911",
+  "target": "27df4a3945ebc97cd7cbde61f6aeea7a91c680d3",
+  "title": "Arcadia CLI — standalone Windows authoring preview"
+}

harness/experiments/cli-prerelease-20260911/mcp-tag-readback.json

@@ -0,0 +1,5 @@
+{
+  "commit_sha": "27df4a3945ebc97cd7cbde61f6aeea7a91c680d3",
+  "message": "Package standalone source CLI with verified runtime and notices\n",
+  "name": "cli-v0.2.0-preview.authoring.20260911"
+}

harness/experiments/cli-prerelease-20260911/preservation-initial-failure.txt

@@ -0,0 +1,16 @@
+Initial preservation checker stopped after copying the four files unchanged:
+
+Traceback (most recent call last):
+  File "C:\Users\User\Documents\Git\ARCADIA-Studio\harness\experiments\cli-prerelease-20260911\preserve.py", line 35, in <module>
+    assert hashlib.sha256(notes).hexdigest() == publication['notes_sha256']
+           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
+AssertionError
+
+The checker incorrectly assumed notes_sha256 meant local raw Markdown bytes.
+Read-only comparison established that it instead exactly matches the LF public
+release body. Local CRLF bytes remain preserved unchanged; CRLF-to-LF conversion
+alone yields the public body and the publisher's recorded hash. The corrected
+checker records both identities, without changing any publication asset or the
+four source records. A subsequent temporary PowerShell comparison command had
+an empty-pipeline parse error and was corrected before producing the comparison;
+it made no file changes.

harness/experiments/cli-prerelease-20260911/preservation.log

@@ -0,0 +1,42 @@
+{
+  "result": "PASS",
+  "copied_files": [
+    {
+      "path": "upload-binaries-verified.json",
+      "source": ".local/cli-packaging-20260911/upload-binaries-verified.json",
+      "bytes": 678,
+      "sha256": "e945e2724020c48bfe15be7b4258861bd6c01291b98eae036eca786bb022ebde",
+      "crlf_sequences": 17,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    },
+    {
+      "path": "upload-validation-verified.json",
+      "source": ".local/cli-packaging-20260911/upload-validation-verified.json",
+      "bytes": 277,
+      "sha256": "73581acbb5b5fe4aca1fda1b626f80a28bcb3d6c036f7ce793c62bf5a8ef4a72",
+      "crlf_sequences": 9,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    },
+    {
+      "path": "published-verified.json",
+      "source": ".local/cli-packaging-20260911/published-verified.json",
+      "bytes": 382,
+      "sha256": "b5fe8a38579fb8399c78bca9db9fd91b64e8b7b7de7c664049cf5e615a671100",
+      "crlf_sequences": 9,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    },
+    {
+      "path": "RELEASE-NOTES.md",
+      "source": ".local/cli-packaging-20260911/RELEASE-NOTES.md",
+      "bytes": 2010,
+      "sha256": "86a1b5b0744c8f63f6ed640e14b23bdbcb34b63a25320d67eb1fa7da4128a0a5",
+      "crlf_sequences": 22,
+      "bare_lf_sequences": 0,
+      "method": "exact byte copy; source and destination reread equal"
+    }
+  ],
+  "release_target": "27df4a3945ebc97cd7cbde61f6aeea7a91c680d3"
+}

harness/experiments/cli-prerelease-20260911/preserve.py

@@ -0,0 +1,62 @@
+"""Preserve four sanitized publication records; never read credentials or upload."""
+import hashlib
+import json
+from pathlib import Path
+
+destination = Path(__file__).resolve().parent
+repository = destination.parents[2]
+source = repository / '.local/cli-packaging-20260911'
+names = ['upload-binaries-verified.json', 'upload-validation-verified.json',
+         'published-verified.json', 'RELEASE-NOTES.md']
+records = []
+for name in names:
+    data = (source / name).read_bytes()
+    target = destination / name
+    if not target.exists():
+        with target.open('xb') as output:
+            output.write(data)
+    assert target.read_bytes() == data
+    records.append({'path': name, 'source': '.local/cli-packaging-20260911/' + name,
+                    'bytes': len(data), 'sha256': hashlib.sha256(data).hexdigest(),
+                    'crlf_sequences': data.count(b'\r\n'),
+                    'bare_lf_sequences': data.count(b'\n') - data.count(b'\r\n'),
+                    'method': 'exact byte copy; source and destination reread equal'})
+def read(name):
+    return json.loads((destination / name).read_text(encoding='utf-8-sig'))
+publication = read('published-verified.json')
+release = read('mcp-release-readback.json')
+tag = read('mcp-tag-readback.json')
+assert publication['id'] == release['id'] == 2
+assert publication['tag'] == release['tag_name'] == tag['name'] == 'cli-v0.2.0-preview.authoring.20260911'
+assert publication['draft'] is release['draft'] is False
+assert publication['prerelease'] is release['prerelease'] is True
+assert release['target'] == tag['commit_sha'] == '27df4a3945ebc97cd7cbde61f6aeea7a91c680d3'
+assert publication['published_at'] == release['published_at'] == '2026-09-11T12:50:39Z'
+notes = (destination / 'RELEASE-NOTES.md').read_bytes()
+# The publisher's recorded hash binds the LF public body, not the local CRLF
+# file. Keep both exact identities and prove the sole normalization explicitly.
+normalized_notes = notes.decode('utf-8-sig').replace('\r\n', '\n')
+assert hashlib.sha256(normalized_notes.encode('utf-8')).hexdigest() == publication['notes_sha256']
+assert normalized_notes == release['body']
+assets = read('upload-binaries-verified.json') + read('upload-validation-verified.json')
+assert len(assets) == publication['asset_count'] == 3
+assert all(item['readback'] == 'PASS' for item in assets)
+assert assets[0]['sha256'] == '2b051f8ce1ea4f59ee7e233e1fbd516d423aadbfbca5d549755cbe78fcde1af6'
+assert assets[0]['bytes'] == 5091267
+for name in ['mcp-release-readback.json', 'mcp-tag-readback.json']:
+    data = (destination / name).read_bytes()
+    records.append({'path': name, 'bytes': len(data), 'sha256': hashlib.sha256(data).hexdigest(),
+                    'method': 'MCP read-only parsed response, locally serialized as UTF-8 JSON; not original HTTP wire bytes'})
+result = {'scope': 'Publication evidence preservation and read-only MCP release/tag comparison; no runtime tests or asset re-download.',
+          'release_id': 2, 'tag': tag['name'], 'publication_url': release['html_url'],
+          'published_at': release['published_at'], 'source_roles': {
+              'semantic_source': '01b76a1e89e93b7992f39e63560aa8b2ca2f69e0',
+              'packaging_assembly': 'a0a48e82bd43be181caca1fe2c1514c21f2bc405',
+              'release_integration': release['target']},
+          'assets': assets, 'files': records,
+          'checks': {'four_exact_copies': True, 'release_and_tag_match': True,
+                     'published_flags_and_time_match': True, 'normalized_notes_hash_matches_publisher_record': True,
+                     'notes_match_public_body_after_CRLF_to_LF_only': True,
+                     'asset_records_are_original_publisher_readbacks': True}}
+(destination / 'manifest.json').write_text(json.dumps(result, indent=2) + '\n', encoding='utf-8', newline='\n')
+print(json.dumps({'result': 'PASS', 'copied_files': records[:4], 'release_target': release['target']}, indent=2))

harness/experiments/cli-prerelease-20260911/published-verified.json

@@ -0,0 +1,10 @@
+{
+  "id": 2,
+  "tag": "cli-v0.2.0-preview.authoring.20260911",
+  "url": "http://217.177.34.108:3000/sorokin.oleg.edu/ARCADIA-Studio/releases/tag/cli-v0.2.0-preview.authoring.20260911",
+  "draft": false,
+  "prerelease": true,
+  "asset_count": 3,
+  "notes_sha256": "1b83b9c904a79ff7acbde421851c9da9b520f3fa0aea920bf55fb71bea392a9d",
+  "published_at": "2026-09-11T12:50:39Z"
+}

harness/experiments/cli-prerelease-20260911/upload-binaries-verified.json

@@ -0,0 +1,18 @@
+[
+  {
+    "id": 4,
+    "name": "ArcadiaCLI-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm.zip",
+    "bytes": 5091267,
+    "sha256": "2b051f8ce1ea4f59ee7e233e1fbd516d423aadbfbca5d549755cbe78fcde1af6",
+    "url": "http://217.177.34.108:3000/attachments/024ac74c-8806-4da2-9ca4-726c01a7735f",
+    "readback": "PASS"
+  },
+  {
+    "id": 5,
+    "name": "ArcadiaCLI-0.2.0-preview.authoring.20260911-x86_64-pc-windows-gnullvm.zip.sha256",
+    "bytes": 140,
+    "sha256": "0dc3f12d2f79edfb735e311298d1528cbdb828b775ec885b3badde24e66bceef",
+    "url": "http://217.177.34.108:3000/attachments/24af1b92-ce23-41e3-bc25-60fed95a6270",
+    "readback": "PASS"
+  }
+]

harness/experiments/cli-prerelease-20260911/upload-validation-verified.json

@@ -0,0 +1,10 @@
+[
+  {
+    "id": 6,
+    "name": "VALIDATION.md",
+    "bytes": 50297,
+    "sha256": "5a0206b493bf1ca98fe931243452a9092cdf2acf10f4e3fd0a7ee9a7d8f56ec8",
+    "url": "http://217.177.34.108:3000/attachments/628863de-e4ff-4fc7-afdb-45b071705d7b",
+    "readback": "PASS"
+  }
+]

harness/experiments/contextual-source-20260911/README.md

@@ -0,0 +1,58 @@
+# Contextual-source verification evidence, 2026-09-11
+
+Codex-9e8r6t /root/release_audit. Root authorized this preservation-only directory while running separate native checks. No new tests, compilation, GUI actions, source edits, Git staging or publication were performed to create this archive.
+
+## Scope and byte preservation
+
+The 37 original records (201,835 bytes) were copied byte-for-byte from the two private evidence directories. `inventory.json` records their original repository-relative paths, sizes and SHA-256 values, plus the generated README and source readback record. It excludes itself to avoid a recursive hash. The directory contains 40 files total. No executable, DLL, rlib, model output, credential or dependency tree is included.
+
+`desktop/` preserves the original relative layout of `.local/contextual-source-20260911/`. `oracle-preparation/` preserves concise records from `.local/staged-source-oracle-20260911/`. Embedded paths, timestamps, line endings, compiler diagnostics and manifest wording are deliberately unmodified. They describe the original host and run; they do not assert that private executables or dependency paths exist in another checkout.
+
+Root should preserve these bytes through Git using the same narrow attribute convention as neighboring experiments:
+
+```gitattributes
+harness/experiments/contextual-source-20260911/** -text whitespace=cr-at-eol
+```
+
+This worker did not modify the root attributes or index. The existing global text normalization would otherwise change some CRLF records. Verify every inventory hash again after staging or a checkout with that rule.
+
+## Results and distinct source snapshots
+
+| Evidence | Meaning |
+| --- | --- |
+| `desktop/focused1*` | Missing private topology Draft Clone; compiler error, Cargo101, no tests. The already-failed compiler was stopped; raw diagnostic retains its process exit code. |
+| `desktop/focused2*` | Extra guide `explain` argument; compiler error, Cargo101, no tests, same stopped-failed-compiler policy. |
+| `desktop/focused3*` | Test called private App method; compiler error, Cargo101, no tests. Corrected to the actual Message route. |
+| `desktop/focused4*` | Successful contextual-source22/22, 2.04s; frozen input manifest and terminal status. |
+| `desktop/tests-verified/` | Root's full675/675, 448.33s test duration, plus exact executable identity `6E677F58...BE38CC0`. This is the earlier snapshot. |
+| `desktop/clippy1*` | Completed strict-lint failure on three constant-event `then` expressions; later corrected to `then_some`. |
+| `desktop/focused5*` | Final contextual-source23/23, 0.98s. The seven-file delta adds the captured document/exact owner recovery regression and narrow guide/lint corrections. Both dated input manifests are retained (about44KB each) because their metadata and hashes bind different executions. |
+| `desktop/guide-final*` | Final guide3/3, 0.20s. |
+| `desktop/clippy2*` | Final all-target strict Clippy with warnings denied, PASS, 4m29s. |
+| `desktop/gui-final*` | Matching final Windows GUI build PASS, 6m20s. |
+| `desktop/fmt-final-status.json` | Workspace formatting PASS. The original runner produced no `fmt-final.log` file because there was no output; no substitute log was fabricated. |
+| `desktop/tests-final/manifest.json` | Final test executable `405577A3...626F38`, inventory676; affected23 and guide3 were executed. |
+| `desktop/gui-verified/manifest.json` | Final GUI `52DE82E4...246ACCE`, with runtime identity. Native acceptance is a separate root task. |
+
+**There is no full final676 pass in this evidence.** The earlier full675 result must not be relabeled as execution of the later binary. Input manifests identify source-file hashes and contemporaneous Git context, not a claim that uncommitted desktop changes were contained in the listed commit or that every external build input was archived.
+
+The original `run-final-gates.ps1` and `stage-final.ps1` are preserved as raw records. They document serialized commands, failure stops, unchanged-input checks and refusal to overwrite frozen artifacts. They assume repository cwd, the task-local Windows toolchain and private output paths; they were not run from this archive. Any future rerun needs an explicitly coordinated compiler slot and fresh output paths, and produces new evidence rather than replacing these records.
+
+## Independent oracle preparation
+
+`oracle-preparation/manifest.json` binds the independently authored evaluator, fixed two-file baseline, designated core rlib and executable. `build-initial.log` is an actual zero-byte successful diagnostics log, accompanied by its exit/time JSON. Self-check and baseline logs/status passed. The small CLI baseline check records admission with expected warnings, without source writes. These records establish evaluator preparation and falsifier execution, not acceptance of GUI-produced staged-source objects. The already-owned oracle source, fixture and report remain at `harness/staged-source-authoring-contract.rs`, `harness/fixtures/staged-source-authoring/` and `harness/release-staged-source-authoring-oracle-20260911.md`; they are not duplicated here.
+
+`source-freeze-readback.json` is a new preservation-time check: all13 desktop source hashes matched the final focused5 snapshot. The implementation and independent-review reports remain outside this directory and were not edited by this task.
+
+To verify this archive without running any application, from this directory:
+
+```powershell
+$inventory = Get-Content -LiteralPath inventory.json -Raw | ConvertFrom-Json
+foreach ($entry in $inventory.files) {
+    $file = Get-Item -LiteralPath $entry.path
+    if ($file.Length -ne $entry.bytes -or
+        (Get-FileHash -LiteralPath $file.FullName -Algorithm SHA256).Hash -ne $entry.sha256) {
+        throw "Evidence mismatch: $($entry.path)"
+    }
+}
+```

harness/experiments/contextual-source-20260911/desktop/clippy1-status.json

@@ -0,0 +1,5 @@
+{
+  "started": "2026-09-11T12:02:24.4104250Z",
+  "finished": "2026-09-11T12:06:15.0919494Z",
+  "exitCode": 101
+}

harness/experiments/contextual-source-20260911/desktop/clippy1.log

@@ -0,0 +1,57 @@
+    Checking oa-core v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-core)
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+   Compiling oa-server v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-server)
+error: unnecessary closure used with `bool::then`
+   --> crates\oa-desktop\src\behavior\scenario\workspace.rs:199:65
+    |
+199 |                       button("Add first lifeline").on_press_maybe(clean.then(|| {
+    |  _________________________________________________________________^
+200 | |                         Message::ScenarioCanvas(CanvasEvent::First(context, Tool::Lifeline))
+201 | |                     }))
+    | |______________________^
+    |
+    = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.98.0/index.html#unnecessary_lazy_evaluations
+    = note: `-D clippy::unnecessary-lazy-evaluations` implied by `-D warnings`
+    = help: to override `-D warnings` add `#[allow(clippy::unnecessary_lazy_evaluations)]`
+help: use `then_some` instead
+    |
+199 ~                     button("Add first lifeline").on_press_maybe(clean.then_some({
+200 +                         Message::ScenarioCanvas(CanvasEvent::First(context, Tool::Lifeline))
+201 ~                     }))
+    |
+
+error: unnecessary closure used with `bool::then`
+   --> crates\oa-desktop\src\behavior\scenario\workspace.rs:209:64
+    |
+209 |                       button("Add first message").on_press_maybe(clean.then(|| {
+    |  ________________________________________________________________^
+210 | |                         Message::ScenarioCanvas(CanvasEvent::First(context, Tool::Message))
+211 | |                     })),
+    | |______________________^
+    |
+    = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.98.0/index.html#unnecessary_lazy_evaluations
+help: use `then_some` instead
+    |
+209 ~                     button("Add first message").on_press_maybe(clean.then_some({
+210 +                         Message::ScenarioCanvas(CanvasEvent::First(context, Tool::Message))
+211 ~                     })),
+    |
+
+error: unnecessary closure used with `bool::then`
+   --> crates\oa-desktop\src\behavior\scenario\workspace.rs:212:63
+    |
+212 |                       button("Add first action").on_press_maybe(clean.then(|| {
+    |  _______________________________________________________________^
+213 | |                         Message::ScenarioCanvas(CanvasEvent::First(context, Tool::Action))
+214 | |                     }))
+    | |______________________^
+    |
+    = help: for further information visit https://rust-lang.github.io/rust-clippy/rust-1.98.0/index.html#unnecessary_lazy_evaluations
+help: use `then_some` instead
+    |
+212 ~                     button("Add first action").on_press_maybe(clean.then_some({
+213 +                         Message::ScenarioCanvas(CanvasEvent::First(context, Tool::Action))
+214 ~                     }))
+    |
+
+error: could not compile `oa-desktop` (bin "arcadia-studio" test) due to 3 previous errors

harness/experiments/contextual-source-20260911/desktop/clippy2-status.json

@@ -0,0 +1,15 @@
+{
+  "started": "2026-09-11T12:25:20.3859405Z",
+  "finished": "2026-09-11T12:29:50.4525461Z",
+  "exitCode": 0,
+  "args": [
+    "clippy",
+    "--locked",
+    "-p",
+    "oa-desktop",
+    "--all-targets",
+    "--",
+    "-D",
+    "warnings"
+  ]
+}

harness/experiments/contextual-source-20260911/desktop/clippy2.log

@@ -0,0 +1,2 @@
+    Checking oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+    Finished `dev` profile [unoptimized] target(s) in 4m 29s

harness/experiments/contextual-source-20260911/desktop/fmt-final-status.json

@@ -0,0 +1,11 @@
+{
+  "started": "2026-09-11T12:36:12.8744967Z",
+  "finished": "2026-09-11T12:36:41.0827202Z",
+  "exitCode": 0,
+  "args": [
+    "fmt",
+    "--all",
+    "--",
+    "--check"
+  ]
+}

harness/experiments/contextual-source-20260911/desktop/focused1-status.json

@@ -0,0 +1,5 @@
+{
+  "finished": "2026-09-11T11:27:02.1571291Z",
+  "started": "2026-09-11T11:23:44.5463460Z",
+  "exitCode": 101
+}

harness/experiments/contextual-source-20260911/desktop/focused1.log

@@ -0,0 +1,33 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+error[E0308]: mismatched types
+   --> crates\oa-desktop\src\behavior\topology.rs:197:31
+    |
+197 |             self.draft = Some(next);
+    |                          ---- ^^^^ expected `Draft`, found `&Draft`
+    |                          |
+    |                          arguments to this enum variant are incorrect
+    |
+note: `behavior::topology::Draft` does not implement `Clone`, so `&behavior::topology::Draft` was cloned instead
+   --> crates\oa-desktop\src\behavior\topology.rs:187:28
+    |
+187 |             let mut next = d.clone();
+    |                            ^
+help: the type constructed contains `&behavior::topology::Draft` due to the type of the argument passed
+   --> crates\oa-desktop\src\behavior\topology.rs:197:26
+    |
+197 |             self.draft = Some(next);
+    |                          ^^^^^----^
+    |                               |
+    |                               this argument influences the type of `Some`
+note: tuple variant defined here
+   --> /rustc/48a229ceaefd4985c50990b14116b6d856af0985/library\core\src\option.rs:606:4
+help: consider annotating `behavior::topology::Draft` with `#[derive(Clone)]`
+    |
+102 + #[derive(Clone)]
+103 | struct Draft {
+    |
+
+error: could not compile `oa-desktop` (bin "arcadia-studio" test) due to 1 previous error
+
+Caused by:
+  process didn't exit successfully: `C:\Users\User\Documents\Git\ARCADIA-Studio\.local\toolchain\rustup\toolchains\stable-x86_64-pc-windows-gnullvm\bin\rustc.exe --crate-name arcadia_studio --edition=2024 crates\oa-desktop\src\main.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --emit=dep-info,link -C embed-bitcode=no --test --check-cfg cfg(docsrs,test) --check-cfg "cfg(feature, values())" -C metadata=e92d7ab29d07ce2a -C extra-filename=-58e30cee1fd51a8b --out-dir C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps -C linker=clang.exe -C incremental=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\incremental -C strip=debuginfo -L dependency=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps --extern axum=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libaxum-ccc7aea466db9258.rlib --extern iced=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libiced-ee73abd722c72024.rlib --extern iced_runtime=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libiced_runtime-97354eb606c5cbe8.rlib --extern oa_core=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\liboa_core-6c8da57367eec642.rlib --extern oa_server=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\liboa_server-69305e51c40cee45.rlib --extern reqwest=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libreqwest-31ac987472fa8038.rlib --extern rfd=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\librfd-17cc7ba2db223d7b.rlib --extern serde=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libserde-60a32311146a42e4.rlib --extern serde_json=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libserde_json-da2c4f333fc47818.rlib --extern tempfile=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libtempfile-86aac28d6be16d2f.rlib --extern tokio=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libtokio-5e0ca96735e3073a.rlib -L native=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\build\ring-5f8d2d20440f09b4\out -L native=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\toolchain\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows_x86_64_gnullvm-0.52.6\lib -C link-arg=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\build\oa-desktop-664d65ac5124e646\out\normal-user-manifest.o` (exit code: 0xffffffff)

harness/experiments/contextual-source-20260911/desktop/focused2-status.json

@@ -0,0 +1,5 @@
+{
+  "finished": "2026-09-11T11:39:43.0079347Z",
+  "started": "2026-09-11T11:37:10.5178164Z",
+  "exitCode": 101
+}

harness/experiments/contextual-source-20260911/desktop/focused2.log

@@ -0,0 +1,26 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+error[E0061]: this function takes 2 arguments but 3 arguments were supplied
+   --> crates\oa-desktop\src\guide.rs:899:25
+    |
+899 | ...   explain(
+    |       ^^^^^^^
+...
+902 | ...       "Behavior → New keeps the exact name, owner ...d raw text, for correction or cancellation.",
+    |           --------------------------------------------...-------------------------------------------- unexpected argument #3 of type `&'static str`
+    |
+note: function defined here
+   --> crates\oa-desktop\src\guide.rs:150:10
+    |
+150 | const fn explain(title: &'static str, body: &'static str) -> Section {
+    |          ^^^^^^^
+help: remove the extra argument
+    |
+901 -                             "Inside a source subform, Back or the first Escape returns to the unchanged parent. Use this new source stages the prerequisite only. Canceling the parent discards it; choosing an existing reference excludes the staged source from creation. Recovery retains both forms and their reserved identities. An open dialog still receives Escape first.",
+902 -                             "Behavior → New keeps the exact name, owner and viewpoint choices outside the model until Create and open succeeds. Cancel or Escape discards only this draft; if a dialog is open, the first Escape dismisses that dialog. New refuses other unfinished property, source or behavior drafts without applying them. Recovery restores the creation form in its original layer, including rejected raw text, for correction or cancellation.",
+901 +                             "Inside a source subform, Back or the first Escape returns to the unchanged parent. Use this new source stages the prerequisite only. Canceling the parent discards it; choosing an existing reference excludes the staged source from creation. Recovery retains both forms and their reserved identities. An open dialog still receives Escape first.",
+    |
+
+error: could not compile `oa-desktop` (bin "arcadia-studio" test) due to 1 previous error
+
+Caused by:
+  process didn't exit successfully: `C:\Users\User\Documents\Git\ARCADIA-Studio\.local\toolchain\rustup\toolchains\stable-x86_64-pc-windows-gnullvm\bin\rustc.exe --crate-name arcadia_studio --edition=2024 crates\oa-desktop\src\main.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --emit=dep-info,link -C embed-bitcode=no --test --check-cfg cfg(docsrs,test) --check-cfg "cfg(feature, values())" -C metadata=e92d7ab29d07ce2a -C extra-filename=-58e30cee1fd51a8b --out-dir C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps -C linker=clang.exe -C incremental=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\incremental -C strip=debuginfo -L dependency=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps --extern axum=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libaxum-ccc7aea466db9258.rlib --extern iced=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libiced-ee73abd722c72024.rlib --extern iced_runtime=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libiced_runtime-97354eb606c5cbe8.rlib --extern oa_core=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\liboa_core-6c8da57367eec642.rlib --extern oa_server=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\liboa_server-69305e51c40cee45.rlib --extern reqwest=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libreqwest-31ac987472fa8038.rlib --extern rfd=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\librfd-17cc7ba2db223d7b.rlib --extern serde=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libserde-60a32311146a42e4.rlib --extern serde_json=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libserde_json-da2c4f333fc47818.rlib --extern tempfile=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libtempfile-86aac28d6be16d2f.rlib --extern tokio=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libtokio-5e0ca96735e3073a.rlib -L native=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\build\ring-5f8d2d20440f09b4\out -L native=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\toolchain\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows_x86_64_gnullvm-0.52.6\lib -C link-arg=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\build\oa-desktop-664d65ac5124e646\out\normal-user-manifest.o` (exit code: 0xffffffff)

harness/experiments/contextual-source-20260911/desktop/focused3-status.json

@@ -0,0 +1,5 @@
+{
+  "started": "2026-09-11T11:48:07.8443256Z",
+  "exitCode": 101,
+  "finished": "2026-09-11T11:49:20.9876952Z"
+}

harness/experiments/contextual-source-20260911/desktop/focused3.log

@@ -0,0 +1,16 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+error[E0624]: method `execute` is private
+    --> crates\oa-desktop\src\behavior\contextual_source_tests.rs:1112:17
+     |
+1112 |     assert!(app.execute(Command::Rename(owner, "Accepted renamed scenario".into())));
+     |                 ^^^^^^^ private method
+     |
+    ::: crates\oa-desktop\src\app.rs:851:5
+     |
+ 851 |     fn execute(&mut self, command: Command) -> bool {
+     |     ----------------------------------------------- private method defined here
+
+error: could not compile `oa-desktop` (bin "arcadia-studio" test) due to 1 previous error
+
+Caused by:
+  process didn't exit successfully: `C:\Users\User\Documents\Git\ARCADIA-Studio\.local\toolchain\rustup\toolchains\stable-x86_64-pc-windows-gnullvm\bin\rustc.exe --crate-name arcadia_studio --edition=2024 crates\oa-desktop\src\main.rs --error-format=json --json=diagnostic-rendered-ansi,artifacts,future-incompat --emit=dep-info,link -C embed-bitcode=no --test --check-cfg cfg(docsrs,test) --check-cfg "cfg(feature, values())" -C metadata=e92d7ab29d07ce2a -C extra-filename=-58e30cee1fd51a8b --out-dir C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps -C linker=clang.exe -C incremental=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\incremental -C strip=debuginfo -L dependency=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps --extern axum=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libaxum-ccc7aea466db9258.rlib --extern iced=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libiced-ee73abd722c72024.rlib --extern iced_runtime=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libiced_runtime-97354eb606c5cbe8.rlib --extern oa_core=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\liboa_core-6c8da57367eec642.rlib --extern oa_server=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\liboa_server-69305e51c40cee45.rlib --extern reqwest=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libreqwest-31ac987472fa8038.rlib --extern rfd=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\librfd-17cc7ba2db223d7b.rlib --extern serde=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libserde-60a32311146a42e4.rlib --extern serde_json=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libserde_json-da2c4f333fc47818.rlib --extern tempfile=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libtempfile-86aac28d6be16d2f.rlib --extern tokio=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\deps\libtokio-5e0ca96735e3073a.rlib -L native=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\build\ring-5f8d2d20440f09b4\out -L native=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\toolchain\cargo\registry\src\index.crates.io-1949cf8c6b5b557f\windows_x86_64_gnullvm-0.52.6\lib -C link-arg=C:\Users\User\Documents\Git\ARCADIA-Studio\.local\target-gnullvm\debug\build\oa-desktop-664d65ac5124e646\out\normal-user-manifest.o` (exit code: 0xffffffff)

harness/experiments/contextual-source-20260911/desktop/focused4-status.json

@@ -0,0 +1,5 @@
+{
+  "exitCode": 0,
+  "finished": "2026-09-11T11:59:25.8739914Z",
+  "started": "2026-09-11T11:49:26.5831603Z"
+}

harness/experiments/contextual-source-20260911/desktop/focused4.log

@@ -0,0 +1,30 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+    Finished `test` profile [unoptimized] target(s) in 9m 56s
+     Running unittests src\main.rs (.local\target-gnullvm\debug\deps\arcadia_studio-58e30cee1fd51a8b.exe)
+
+running 22 tests
+test behavior::contextual_source_tests::contextual_source_app_checkpoint_restores_inner_raw_draft_without_model_adoption ... ok
+test behavior::contextual_source_tests::contextual_source_app_empty_actions_and_child_open_refuse_other_raw_editors ... ok
+test behavior::contextual_source_tests::contextual_source_app_modal_escape_then_child_back_then_parent_cancel_preserve_accepted_source ... ok
+test behavior::contextual_source_tests::contextual_source_back_remains_available_after_owner_deletion_and_with_dirty_editors ... ok
+test behavior::contextual_source_tests::contextual_source_back_retains_parent_and_rejects_late_child_event ... ok
+test behavior::contextual_source_tests::contextual_source_default_consumer_name_has_stable_alias_and_correlated_selection ... ok
+test behavior::contextual_source_tests::contextual_source_deleted_owner_view_retains_draft_instead_of_panicking_or_using_fallback ... ok
+test behavior::contextual_source_tests::contextual_source_empty_history_reports_no_change_and_success_requires_a_real_history_step ... ok
+test behavior::contextual_source_tests::contextual_source_existing_choice_prunes_staged_dependency ... ok
+test behavior::contextual_source_tests::contextual_source_failed_source_budget_preserves_both_drafts_and_accepted_bytes ... ok
+test behavior::contextual_source_tests::contextual_source_incomplete_recovered_kind_reports_error_without_panicking ... ok
+test behavior::contextual_source_tests::contextual_source_inserts_work_on_the_exact_guarded_link_and_refuses_exchange_identity_conflict ... ok
+test behavior::contextual_source_tests::contextual_source_lifelines_stage_exact_separate_records_and_one_history_entry ... ok
+test behavior::contextual_source_tests::contextual_source_machine_before_any_owner_creates_optional_view_atomically ... ok
+test behavior::contextual_source_tests::contextual_source_mounted_small_editor_keeps_back_and_use_outside_field_scroll ... ok
+test behavior::contextual_source_tests::contextual_source_nested_semantic_parent_is_explicit_and_revalidated ... ok
+test behavior::contextual_source_tests::contextual_source_new_callee_lifeline_preserves_caller_bindings_as_an_explicit_warning ... ok
+test behavior::contextual_source_tests::contextual_source_old_empty_action_cannot_open_a_previous_owner_or_layer ... ok
+test behavior::contextual_source_tests::contextual_source_owner_first_can_return_to_an_unnamed_machine_without_losing_source ... ok
+test behavior::contextual_source_tests::contextual_source_recovery_keeps_inner_raw_fields_and_refuses_deleted_or_changed_owner ... ok
+test behavior::contextual_source_tests::contextual_source_second_system_and_role_machine_owner_refuse_without_fallback ... ok
+test behavior::contextual_source_tests::contextual_source_work_uses_reserved_contribution_and_link_ids_and_one_undo ... ok
+
+test result: ok. 22 passed; 0 failed; 0 ignored; 0 measured; 653 filtered out; finished in 2.04s
+

harness/experiments/contextual-source-20260911/desktop/focused5-delta.json

@@ -0,0 +1,37 @@
+[
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\contextual_source_tests.rs",
+    "before": "42E3E985EBA327B518D731AE0714AD5F9B48AF991E9FD62B2B0666E139E02487",
+    "after": "5F05318A6533503B9D6FEBF1EC4DD7256F192394BC1B952A7904C8175BD8DDAE"
+  },
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\creation.rs",
+    "before": "AB851BCBC3EB070D5911F878EE43FE0530FCB67269103B4B56EF73E17F5BC104",
+    "after": "CA7275B5C0118CBB78F5D16254E50FADDC26DBB53816D01950064C852E296B2E"
+  },
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\scenario.rs",
+    "before": "5ED3FD63433EF51A6D6315FC4F8251995BBCAA29A0A938FAC0921A4845FAAB2A",
+    "after": "D12A4B1CAA61C08F69C4D2A64BD15568C4B7158DEA91AAC5A52A58A35ADB863C"
+  },
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\scenario\\workspace.rs",
+    "before": "6100D1A6CE09CD3C2836EB1559DADF382437DB34DB2BDA76CEB4E479CB15DA41",
+    "after": "69C7AD32E4BDC39F42D2E6C7764CFE1FA7867CD7DBCF9B904DEC805E6C912666"
+  },
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\source_draft.rs",
+    "before": "7447D38E178C3B199901E519ABDCA6868CFD52510F7B67A5EA8B849072CDAE2D",
+    "after": "68F396C420FFF132FF0EAB82CB2C6251477412F6F9F90AD2E76C51A259F8A69A"
+  },
+  {
+    "path": "crates/oa-desktop\\src\\behavior\\topology.rs",
+    "before": "40139E3714E702E1F331F98EE2579E167D3CA61330864772EC5E40614F118A5A",
+    "after": "D06B2F0FC39B4814E94200297E148F1D4D97E04CB167766030AC9DF18689E3B0"
+  },
+  {
+    "path": "crates/oa-desktop\\src\\guide.rs",
+    "before": "C6425F2FBC2D7D04015E15D78F602CA838019B7C15352EF5A380F78A30800C68",
+    "after": "47EEB3CC0A48D5712720096015A08387CD354FB91559B0BD6FA106B5CAC6292C"
+  }
+]

harness/experiments/contextual-source-20260911/desktop/focused5-status.json

@@ -0,0 +1,16 @@
+{
+  "started": "2026-09-11T12:20:22.2107248Z",
+  "finished": "2026-09-11T12:25:14.9560639Z",
+  "exitCode": 0,
+  "args": [
+    "test",
+    "--locked",
+    "-p",
+    "oa-desktop",
+    "--bin",
+    "arcadia-studio",
+    "contextual_source",
+    "--",
+    "--test-threads=1"
+  ]
+}

harness/experiments/contextual-source-20260911/desktop/focused5.log

@@ -0,0 +1,31 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+    Finished `test` profile [unoptimized] target(s) in 4m 48s
+     Running unittests src\main.rs (.local\target-gnullvm\debug\deps\arcadia_studio-58e30cee1fd51a8b.exe)
+
+running 23 tests
+test behavior::contextual_source_tests::contextual_source_app_checkpoint_restores_inner_raw_draft_without_model_adoption ... ok
+test behavior::contextual_source_tests::contextual_source_app_empty_actions_and_child_open_refuse_other_raw_editors ... ok
+test behavior::contextual_source_tests::contextual_source_app_modal_escape_then_child_back_then_parent_cancel_preserve_accepted_source ... ok
+test behavior::contextual_source_tests::contextual_source_back_remains_available_after_owner_deletion_and_with_dirty_editors ... ok
+test behavior::contextual_source_tests::contextual_source_back_retains_parent_and_rejects_late_child_event ... ok
+test behavior::contextual_source_tests::contextual_source_default_consumer_name_has_stable_alias_and_correlated_selection ... ok
+test behavior::contextual_source_tests::contextual_source_deleted_owner_view_retains_draft_instead_of_panicking_or_using_fallback ... ok
+test behavior::contextual_source_tests::contextual_source_empty_history_reports_no_change_and_success_requires_a_real_history_step ... ok
+test behavior::contextual_source_tests::contextual_source_existing_choice_prunes_staged_dependency ... ok
+test behavior::contextual_source_tests::contextual_source_failed_source_budget_preserves_both_drafts_and_accepted_bytes ... ok
+test behavior::contextual_source_tests::contextual_source_incomplete_recovered_kind_reports_error_without_panicking ... ok
+test behavior::contextual_source_tests::contextual_source_inserts_work_on_the_exact_guarded_link_and_refuses_exchange_identity_conflict ... ok
+test behavior::contextual_source_tests::contextual_source_lifelines_stage_exact_separate_records_and_one_history_entry ... ok
+test behavior::contextual_source_tests::contextual_source_machine_before_any_owner_creates_optional_view_atomically ... ok
+test behavior::contextual_source_tests::contextual_source_mounted_small_editor_keeps_back_and_use_outside_field_scroll ... ok
+test behavior::contextual_source_tests::contextual_source_nested_semantic_parent_is_explicit_and_revalidated ... ok
+test behavior::contextual_source_tests::contextual_source_new_callee_lifeline_preserves_caller_bindings_as_an_explicit_warning ... ok
+test behavior::contextual_source_tests::contextual_source_old_empty_action_cannot_open_a_previous_owner_or_layer ... ok
+test behavior::contextual_source_tests::contextual_source_original_document_remains_bound_after_back_or_choosing_existing ... ok
+test behavior::contextual_source_tests::contextual_source_owner_first_can_return_to_an_unnamed_machine_without_losing_source ... ok
+test behavior::contextual_source_tests::contextual_source_recovery_keeps_inner_raw_fields_and_refuses_deleted_or_changed_owner ... ok
+test behavior::contextual_source_tests::contextual_source_second_system_and_role_machine_owner_refuse_without_fallback ... ok
+test behavior::contextual_source_tests::contextual_source_work_uses_reserved_contribution_and_link_ids_and_one_undo ... ok
+
+test result: ok. 23 passed; 0 failed; 0 ignored; 0 measured; 653 filtered out; finished in 0.98s
+

harness/experiments/contextual-source-20260911/desktop/gui-final-status.json

@@ -0,0 +1,13 @@
+{
+  "started": "2026-09-11T12:29:50.4564653Z",
+  "finished": "2026-09-11T12:36:12.8525359Z",
+  "exitCode": 0,
+  "args": [
+    "build",
+    "--locked",
+    "-p",
+    "oa-desktop",
+    "--bin",
+    "arcadia-studio"
+  ]
+}

harness/experiments/contextual-source-20260911/desktop/gui-final.log

@@ -0,0 +1,2 @@
+   Compiling oa-desktop v0.2.0 (C:\Users\User\Documents\Git\ARCADIA-Studio\crates\oa-desktop)
+    Finished `dev` profile [unoptimized] target(s) in 6m 20s

harness/experiments/contextual-source-20260911/desktop/gui-verified/manifest.json

@@ -0,0 +1,18 @@
+{
+  "created": "2026-09-11T12:37:04.6742598Z",
+  "scope": "Final matching Windows GUI build, strictClippy and formatting passed; native acceptance pending root",
+  "sourceInputs": "../focused5-inputs.json",
+  "sourceDeltaFromFull675": "../focused5-delta.json",
+  "artifacts": [
+    {
+      "file": "arcadia-studio.exe",
+      "sha256": "52DE82E434B636E18DB02D381842AA6DB84B721CFFD5502063F784F37246ACCE",
+      "bytes": 112219136
+    },
+    {
+      "file": "libunwind.dll",
+      "sha256": "F45604A12E8BCD839FD86F667C1BE1CC7C4F9DA2B3C69FF381AC708F0E1AE7D4",
+      "bytes": 190976
+    }
+  ]
+}