Verify native behavior creation recovery and source authoring contracts

harness/STATE.md

@@ -12,12 +12,14 @@ in that file. It requires constraints/calculations, quantities/units and reusabl
 libraries, plus uncluttered human/AI text-only modeling at small and large scale.
 Long homogeneous lists and poor behavior editing remain explicit concerns.
 
-Local branch: `codex/release1-9e8r6t`, base `1797516`, committed head `d114a27` at
-this checkpoint. Scenario integration3978bbe and subsequent Sensor identity fix
-are committed. Named behavior creation is wired and has passing focused tests;
-its final ancestry/guide correction passed full653; post-lint history63, strict
-Clippy/fmt and matching GUI build passed. Preserve all
-workers' edits. No open Gitea PRs at the latest read, comments through118.
+Local branch: `codex/release1-9e8r6t`, base `1797516`, committed head `4bb4aaf`.
+Named behavior creation, its guide and independent oracle, concise text-first
+examples and prior integration evidence are committed and remotely transferred.
+Its final ancestry/guide correction passed full653; post-lint history63, strict
+Clippy/fmt and matching GUI build passed. Current uncommitted work corrects the
+oracle's retained-file rule, clarifies source-7 constructor defaults, records
+native creation and implements contextual prerequisite creation. Preserve all
+workers' edits. No open Gitea PRs at the latest read, comments through138.
 
 ## Completed work and scoped evidence
 
@@ -51,7 +53,26 @@ workers' edits. No open Gitea PRs at the latest read, comments through118.
   found no additional correctness blocker. StrictClippy/all-targets/-Dwarnings
   and workspacefmt pass after one behavior-equivalent history_fields let-chain
   correction; affected history63/63 and matching GUI rebuild pass. Current native
-  GUI is `gui-verified` SHA D4D9C2BD…B20C31; native acceptance is active.
+  GUI is `gui-verified` SHA D4D9C2BD…B20C31. At actual 1100×700 client size,
+  named OA Process, explicit ParticipantInteraction Scenario with capability
+  context and SA owner-linked State machine plus requested first view passed
+  complete independent Project/SourceBundle checks at 7/8/9 files. Each single
+  Undo/Redo preserved exact expected semantics, sources and role identities.
+  Reopen/Save retained all nine physical source files byte-for-byte. Wide/minimum
+  draft cancellations retained the initial six files exactly. Detailed report:
+  [native creation](release-behavior-creation-native-20260911.md).
+- Independent creation oracle v2 corrects a harness assumption: Save retains
+  known detached source files after Undo. Full Project and reachable source
+  equality remain mandatory; the complete physical inventory must equal the
+  explicit pre-Undo checkpoint overlaid with expected reachable bytes. Unknown,
+  changed or missing retained files fail. No product defect was hidden by this
+  correction; see [oracle review](release-behavior-creation-oracle-20260911.md).
+- Fresh source-7 constructor probes passed 54 explicit/omitted comparisons and
+  12 required-field refusals across OA/SA, with complete typed models, canonical
+  reparse and exact authored no-op/name-edit retention. Constructor and Scenario
+  default wording now describes current behavior; strict HTML regeneration
+  passed. Other constructor families are explicitly outside this evidence.
+  See [default review](release-constructor-defaults-review-20260911.md).
 - Source schema checks passed: 72 fixtures, 204 schemas, 14 families, 90 scalar
   leaves. API/language reST rendered with strict docutils without warnings.
 - Packaging committed `b98f135`: portable Linux adapter, shared package checks,
@@ -84,18 +105,29 @@ Detailed evidence: [integrated gates](release-integrated-gates-20260910.md),
 
 ## Active ownership and execution
 
-- Root: integration, common ledgers, source/API checks. Full653 is terminal PASS.
-  Computer Use remains authorized; old Escape holds are historical. Native input
-  is temporarily leased exclusively to palette_finish for the bounded QA below.
-- `release_audit`: creation/guide/historylint implementation and report frozen,
-  all assigned gates passed; Cargo writer released. No duplicate full suite.
-- `behavior_audit`: independent native creation saved-model oracle compiled
-  warnings-denied; self-falsifiers and six-source baseline pass. Exe73FA81…A9BFF;
-  final report follows. Direct-rustc released; no native.
-- `palette_finish`: exclusive native lease for fresh v4 GUI wide/minimum creation
-  drafts, focus, long names, first Escape and exact cancellation. No accepted new
-  model objects until the independent oracle; no source/Cargo. Text experiment
-  finished and its loopback server is stopped.
+- Root: integration, common ledgers, source/API checks and exclusive native input.
+  Full653 is terminal PASS. V4 creation/Undo/Redo/reopen is complete; actual SA
+  pending-draft crash recovery is active on the same verified GUI. The forced
+  interruption targeted only isolated QA PID5184 after checkpoint persistence;
+  restarted PID1284/window6161106 uses the same private profile and runtime.
+  Recovery is now terminal PASS: full draft fields/IDs retained, autofocus,
+  first Escape and a fresh Save As preserve the complete nine-file model. The
+  current wide GUI is saved on `checkpoint-recovery-cancel/project.arcadia`;
+  treat that checkpoint as immutable and reopen a work copy before editing.
+- `release_audit`: prior creation and constructor reports frozen. Now owns the
+  staged prerequisite creation implementation for Scenario Lifeline/process Work/
+  New machine owner, semantic first-action prompts, relevant App/recovery/guide
+  wiring and focused tests. Cargo writer is reserved to this worker when needed;
+  freeze source during tests and request independent review before integration.
+- `behavior_audit`: v2 native oracle frozen, warnings-denied compilation and
+  falsifiers pass, executable056EEFD…F6A36. Now independently challenges staged
+  source semantics and expected behavior; no production/Cargo/native ownership.
+- `palette_finish`: native report/evidence frozen: 13 creation oracle commands
+  and 19 separate recovery checks pass. Now owns new `crates/oa-cli` for local
+  source check/lint, preview/explicit-write stabilization and alias rename/diff.
+  Uses existing source-file diagnostics/expectations/journal writer, no grammar
+  or core changes. Root owns workspace/lock integration; serialize Cargo with
+  release_audit. Preview UUIDs remain candidates until that invocation writes.
 - Separate host Codex-956atf: standalone scenario lifetime projection, independent
   native scenario oracle, quantity/calculation design and library design. It has
   its own cold toolchain/results. Its source-only reviews are not local passes.
@@ -112,18 +144,24 @@ unassigned-lane map differences that must be addressed before acceptance.
 1. Finish native basic supplementary move/camera/focus/minimum matrix and current
    scenario/process/state tasks. Main basic/transition/history/reopen passed at
    wide size. Check raw drafts, recovery, exact source and real task completion.
-2. Natively verify named local Process/Scenario/State machine creation; address
-   contextual missing-source and operand-editing detours from the behavior audit.
+2. Implement/review/natively verify contextual
+   missing-source and first-action flows. Named creation/history/reopen passed;
+   operand-editing and qualified Action allocation remain separate open work.
 3. Constraints/calculations and quantity compatibility are currently descriptive
    metadata; same-project includes are not maintained cross-project libraries.
    Independent semantic designs and falsification are active before broad schema
    changes. See [library review brief](release-library-candidate-review-20260910.md).
    Other-host proposals expose cosmetic package revision/type compatibility,
    subjectless analysis closure and text-only instance normalization decisions;
-   full reports are requested but not yet available locally.
-4. Implement and evaluate text-only authoring improvements after synthesizing
-   local usability and other-host language designs. Concise examples alone do
-   not satisfy modular engineering navigation and safe changes.
+   full reports and paired criticism are now available from verified c6d296a.
+   Its 218-assertion maintenance experiment supports explicit baseline values
+   with one-level Case overrides; complete freeze and effective-case evaluation
+   are required. Refined baseline/library contracts remain active externally.
+4. Implement and evaluate the source-only CLI baseline, then compare language
+   improvements using both local usability and complete other-host proposals.
+   Current grammar+tooling, domain syntax, namespaces and portable identity
+   modules remain distinct candidates. Concise examples/CLI alone do not prove
+   uncluttered modular engineering authoring or safe large-model changes.
 5. Run coherent current desktop/core/server, specification, examples, REST and
    optimized packaging gates after integration. Prior passes remain scoped.
 6. Current Linux runtime requires a viable environment: supported WSL2 import
@@ -140,8 +178,23 @@ anonymous fetch and Gitea MCP still work. Integration3978bbe was published and
 independently fetched/hash-verified as a Git bundle on
 `codex/integration-transfer-20260910`; Wiki `Integration3978bbe` and issue#97 own
 exact transfer instructions. Other host has integrated it and an equivalent
-Sensor fix. Publish the next coherent creation/docs checkpoint similarly;
-preserve its later B4/reference chooser/design work and avoid duplicate patches.
+Sensor fix. Creation4bb4aaf was likewise published on
+`codex/integration-transfer-20260911`, file
+`harness/transfers/creation-4bb4aaf.bundle.b64`: decoded105022 bytes,
+SHA256 `0DEFAE91A56430076C432758F923BC0675911DA9FA7588C9961FF15F47EAEBF6`,
+prerequisite3978bbe. Anonymous Git readback, strict base64 length/hash check and
+`git bundle verify` passed; issue#128 gives selective integration instructions.
+Publish subsequent corrected oracle/native/default evidence similarly; preserve
+the other host's later B4/reference chooser/design work and avoid duplicates.
+
+Other-host c6d296a transfer is verified and imported as local
+`codex/behavior-snapshot-c6d296a`: 334830 bytes,
+SHA256 `526A80E2D32ED0E57A7B2372B5F02D4652E8751DFEBA81953C4F045225D6AACB`,
+prerequisite1797516, from `codex/behavior-transfer-20260910` file
+`harness/transfers/behavior-c6d296a.bundle.b64`. Selected analysis/library/text
+reports, criticism, experiments and independent scenario oracle are restored;
+51 evidence files compare byte-for-byte with Git blobs. No source/ledger merge.
+Issue#136/#143 and refreshed Wiki Authoring20260911 record the handoff.
 
 The old ledgers, including all historical platform and native evidence, were
 archived byte-for-byte before this consolidation in