Complete source 6 engineering workflows and preserve release validation evidence

harness/TASK_LEDGER.md

@@ -1,142 +1,56 @@
 # Task Ledger — first release
 
-Authoritative objective: attachment10134df9-bea2-4c02-a820-67b53d6b86f7/
-goal-objective.md, read fully2026-09-06. STATE.md records execution; PLAN.md retains
-scope; DECISIONS.md and linked contracts preserve rationale.
+Updated 2026-09-06 evening after corrected reverse-transition native acceptance, teaching source/history/reopen and Linux server/HTTP restart passes. [STATE.md](STATE.md) owns current execution/evidence and leases. [PLAN.md](PLAN.md) owns the release plan; [DECISIONS.md](DECISIONS.md) preserves architectural rationale. Full pre-consolidation contents, including superseded requirements interpretations and evidence, remain [archived byte-for-byte](history/2026-09-06-ledgers-before-consolidation/TASK_LEDGER.md).
 
 ## Goal and success criteria
 
-System engineers develop and iteratively reconcile OA/SA models through equivalent
-graphical, textual and REST workflows. Rust/Iced Windows/Linux, strict reST,
-traceability, navigable offline guidance and reproducible deployment. Acceptance
-requires native workflows, semantic evaluators and fresh independent review.
+The authoritative user objective is `C:\Users\User\.codex\attachments\10b0f701-1743-4de7-9ee1-225920e19649\goal-objective.md`. Deliver a usable, substantially complete OA/SA engineering tool in Rust/Iced on Windows and Linux; equivalent graphical, strict textual/reST and REST workflows; practical artifact traceability; navigable offline guidance; recoverable drafts; reproducible deployment. Completion requires native engineering task evidence and fresh independent end-state review, not implementation or passing tests alone. Later Arcadia layers remain future scope.
 
-## Given facts
+## Given facts and constraints
 
-- User prioritizes Capella domain fidelity, hierarchy, typed ports and intuitive
-  transitions in both directions, without its clutter and navigation friction.
-- Direct exchange drawing must avoid large endpoint dropdowns; ports must move
-  between sides; contextual menus should replace persistent action clutter.
-- Modular source must be practical for humans/AI and Git. Text/graph/API parity is
-  required. Behavior canvases must support editing and preserve drag selection.
-- Git/worktrees are authorized. Remote publication is not requested.
+- User prioritizes Capella domain fidelity, useful containment/nesting and explicit typed ports, while avoiding clutter, persistent action overload and awkward navigation. Study real domain workflows rather than mechanically copying Capella classes.
+- Both-layer transitions and reviewed counterpart reconciliation must be intuitive and precise. Behavior/scenario diagrams must be directly editable and preserve selection/camera/task context.
+- Human/AI/Git-friendly modular source, comments/includes, complete graphical/source/API parity and clear rejection are required. One validated model/history boundary must govern every representation.
+- User permits autonomous reversible engineering, experiments, independent agents and authorized native work. Root is the sole native operator in this collaboration. Do not run concurrent shared Cargo writers. No remote push, usage reset, broad target deletion or host restart is implied by current task authorization.
+- User permits isolated Linux work. WSL remains unavailable on this host; a task-local QEMU core pilot completed and shut down cleanly, and a second bounded server/application gate is active. Historical external worktrees/toolchains are not present on this machine.
 
 ## Verified facts
 
-- Original Capella SAB creates FE function input/output endpoints; component ports
-  are separately Standard/Flow with explicit allocation. Native observations are in
-  release-capella-workflow-benchmark.md; adopted contracts preserve that distinction.
-- Explorer/port discovery, editable routing, nested modular source and coupled REST
-  bundles have scoped Windows/Linux acceptance. Evidence links are in STATE.md.
-- Direct palette connections, four-side port anchors, context menus and source
-  folders passed real Windows/Linux operation. Passive stacked Canvas fixes native
-  tooltip overprint; separate Frames did not. See release-port-drawing.md.
-- Persisted state editing now passes Windows/Linux native and independent review:
-  creation, movement, direct transitions, typed forms, reconnection, fold/reopen.
-  See release-state-editing.md. Scenario/process canvases still need direct editing.
-- Ordinary Document commands atomically synchronize source/model; failed writes
-  retain drafts. Source comments require occurrence/provenance-aware edits, not
-  whole-model equality or flat reformatting. Independent counterexamples were fixed.
-- Accepted-main R3 existing-target reconciliation remains name/description only;
-  isolated typed core/source/API are implemented, with desktop integration active. R6 data shape
-  expansion is active implementation, not accepted functionality.
-- R6 ab661f2 full suites passed Windows607/Linux610; f5467e5 desktop263 and
-  strict Clippy/release passed on both platforms. Native Windows data editing,
-  typed defaults, allocations, recursive qualified Call/Reply values, history and
-  saved reopening passed. Source3 migration now preserves comments and nesting.
-  Native found flat property browsing still ambiguous; one-record browsing with
-  bounded pages passes264 desktop tests/Clippy/release on both platforms and native
-  Windows compact/normal browsing, expression retention and saved reopen.
-  Linux native R6 acceptance remains outstanding.
+- Branch/patch/tree audit established that direct state/scenario/process, data contracts, hosted editing and earlier semantic review are already integrated; no required production transplant was found. [Branch evidence](release-branch-integration-20260906.md).
+- Capella's function input/output exchange endpoints and component Standard/Flow ports are distinct; explicit allocation connects them. Preserve that domain distinction. [Native benchmark](release-capella-workflow-benchmark.md).
+- Current source-6 implements participant CommunicationMean, typed explicit transition endpoint decisions, saved exchange categories/view selectors, completeness warnings and presentation duplication. Older audit absence claims are superseded; native acceptance remains scoped by reports.
+- Semantic review includes independent scalar/constructor/keyed/order/Child/Incident/artifact facets and multiple source rows. One frozen accepted base, explicit mappings, unique merged candidate slots and one atomic command preserve raw excluded/rejected drafts. Recovery replans; it never restores an unchecked serialized command. [Batch design](release-semantic-batch-foundation-design.md), [artifact contract](release-semantic-artifacts.md).
+- Native Windows artifact MOVE/CREATE/DELETE passed exact complete Save/Undo/Redo oracles, nine first-attempt saves. MOVE invalid raw optional state and CREATE exclusion/reserved identity survived controlled-stop recovery exactly. Destination-only retention is automated evidence, not separately native-applied in that run. [Native report](release-artifacts-native-20260906.md).
+- Native batch, Child/Incident and source-5 checkpoint workflows have scoped exact source/recovery/history evidence. Dense views have persistence/duplicate/hide and bounded readability evidence. Current counts, binaries and remaining cases are in STATE.md; these are not universal usability claims.
+- Native communication means drawing, explicit create/reuse ports and reverse Call/Reply pass independent complete model/source and exact Undo/Redo checks. The reverse navigation/overlapping-placement defect is fixed and reverified against a distinct oracle:10newUUIDs,zero implicit placements, correct Behavior owner and preserved Architecture. [Exact evidence](release-communication-native-20260906.md).
+- Windows semantic108desktop+2core/full527desktop passes remain scoped. Subsequent guide/home and behavior navigation slices passed focused tests/strict Clippy/build; the latter compiled535desktop tests without claiming a full535run. A separate semantic navigation correction is under current verification. Keep counts scoped until final full-workspace verification.
+- Native Scenario ordered review passed ambiguity rejection, explicit retained-local final order and complete Save/Undo/Redo source oracles at1100×700. Current guide binary passes related-topic heading reset, same-topic search scroll retention and Git auto-selected-topic reset without dirtying the model. Branch/fragment order variants and revised artifact diagnostic rendering remain separate gates. [Native ordered evidence](release-current-native-verification.md), [guide/diagnostic implementation](release-semantic-conflict-diagnostics-20260906.md).
+- Windows user-local GNU/LLVM builds and isolated clean-PATH native launch work. Actual Ubuntu24.04.4/Rust1.90 core/journal tests pass on hashed snapshots. Actual Linux server build and real HTTP modular import/invalidPUT/cleanrestart exact source/model/ETag pass on the older28-source lesson snapshot. Full server tests are running; current desktop/Linux package remain unverified. [Linux evidence](release-linux-validation-options.md).
+- Corrected30-source/37-file teaching project passes minimum-size Home/guide/dirty-source guard, located initial warning, reviewed NameTake and complete exact source/Undo/Redo/reopen checks. The review revealed a separate layer/canvas mismatch; the process workspace is cramped at minimum size. These findings and remaining tutorial tasks are explicit in [native evidence](release-teaching-native-20260906.md).
+- Scope reconciliation established two real semantic gaps using concrete OA/SA models: caller-context links into repeated/nested reusable chains (**S1**) and a maintained interface-operation selection for parameterless messages (**S2**). Existing sequence/functional-refinement workarounds change the intended engineering facts. Contracts/probes/independent critiques exist; production additions are pending. [Scope reconciliation](release-scope-reconciliation-20260906.md).
+
+## Decisions and candidate designs
+
+Retain three Rust crates, one typed Project and validated atomic Command. Keep semantic ownership, reference/allocation/order relationships and diagram placement separate. Forms remain a closed typed adapter, not a second metamodel. Persistent additions require model validation, references/deletion, transition, parser/updater, API/schema and reachable graphical editing parity.
+
+Semantic reconciliation uses finite typed facets and separate member/presence/order decisions. Compare actual destination slots before constructing the core's complete candidate; two rows never become sequential Apply. Missing identities are not inferred by names. Raw constructor/numeric/keyed/optional drafts survive rejection, exclusion and checkpoint recovery. Artifact Presence means attachment to the reviewed owner; an identified source moved away can delete the destination, whereas a source key of None preserves destination-only membership. No invented tombstone or silent seed acknowledgment.
+
+Source updates preserve lexical ownership/comments/includes and exact history. Checkpoint source-5 upgrade admits only the established token/typed migration contract, validates old base fingerprints and resets transient approvals; it does not silently rebase authored drafts. Hosted saves remain explicit and conditional on the resource/ETag; credentials stay in memory.
+
+For Linux journal publication, ordinary rename lost the empty-target ownership invariant in a real ext4 probe. Selected `renameat2(RENAME_NOREPLACE)` through existing locked libc with no fallback; syscall errors fail before model writes. Alternative overwrite fallback was rejected by that falsifier. Windows native no-replace/retry behavior is retained; other OS behavior is explicit. [Contract, alternatives and measured limits](release-linux-journal-publication.md).
+
+Root selected **F1**, a complete source-6 teaching-project example. Corrected model/replay tests and bounded native onboarding/review/history pass; the full process/scenario/state/data/evidence lesson remains open. **F2**, faithful behavior-canvas SVG export, is deferred: current export scope is architecture-only, not a claim of faithful scenario/process/state export. Record this as an explicit scope decision rather than an accepted behavior-export result.
+
+Behavior-root transition Apply should focus the explicitly requested counterpart and its nearest behavior owner. Without an explicit destination diagram it must preserve unrelated architecture presentation. Ordinary architecture transitions retain their existing path; explicit destination remains honored. This decision follows the independently reproduced reverse scenario placement/navigation failure, not a semantic change to the core transition.
 
 ## Assumptions and open questions
 
-- Nested aggregate files reduce cognitive load; any additional port/exchange/step
-  shorthand must justify grammar complexity through real authoring tasks.
-- State placements proved viable without a second geometry system. Scenario/chain
-  gestures still need their own occurrence/order semantics and task verification.
-- Routing offers a usable initial path plus manual pins; arbitrary dense diagrams
-  are not guaranteed crossing-free. Measured dense full solve119ms remains a limit.
-- R3 selected design C uses finite self-tagged typed facets, separate membership
-  and order acknowledgements, and transient constructor groups. Source5 historical
-  references are implemented in the isolated semantic checkout. Independent review
-  found narrow-acknowledgement/canonical-agreement/rollup defects; the worker has
-  added regressions and fixes. Full catalog, GUI/API/spec and acceptance remain.
+- Nested source and contextual editors should reduce authoring effort; additional shorthand/grouping must justify grammar or interaction complexity through real tasks. Dense-view path overlap is not itself a failure when every actual identity remains accessible; arbitrary crossing-free layout is not promised.
+- Remaining native variants must establish useful engineering workflows: CM transitions, advanced OA process/SA chain/scenario reuse/fragment/order, typed state actions, compact/Linux/hosted cases, and uncovered saved-view lifecycle combinations. Do not expand or shrink required OA/SA scope merely to fit implementation convenience.
+- Latest diagnostic/reserved-label corrections have independent review and completed semantic/full-desktop/Clippy/build checks; their new-binary artifact rendering still needs native verification. Latest native process9672/GUIF5ECAE…9246 closed cleanly for the semantic-navigation rebuild; its exact scope is in STATE.md.
+- Current Linux evidence includes x86_64/glibc2.39/ext4 core/MSRV and server/HTTP runtime. Full current desktop, packaging and GUI acceptance remain required. Syscall failure tests do not establish power-loss durability, network-filesystem behavior or cross-process model CAS.
+- Earlier Windows QA packages include runtime/notices and verified archive contents; final accepted-tree optimized distributions and exact provenance/checksums remain a release gate. [Packaging evidence](release-windows-package-review.md).
 
-## Decisions and current strategy
+## Current strategy
 
-Preserve one typed core and validated command boundary. Retain current typed ports;
-R6 uses schema/source4 with explicit1/2/3 migration and no intermediate public4
-shape. Freeze payload, defaults, inheritance, associations and identified interface
-allocations together. Preserve lexical includes/comments during migration.
-
-Finish and independently verify R6, then semantic R3 reconciliation and direct
-scenario/process gestures. Complete lifecycle/recovery, hosted editing, guidance
-and fresh cross-disciplinary Windows/Linux acceptance. No subsystem checkpoint
-completes the first release. Current work is making measured implementation,
-review and runtime progress. User reauthorized Computer Use. Root resumed combined Windows scenario tests;
-middle insertion, history, save, reorder and scroll/Escape cancellation passed.
-Three native UI findings are being refined; Linux acceptance remains pending.
-
-
-Latest verified facts: integrated60d162c passes306 desktop tests/strict Clippy/build
-on Windows and Linux. Windows ALT/pinned-actions/viewport retention native passed;
-Linux native is active. RESTd130013 passed48 server tests plus served/local schema
-validation and independent review after direct user confirmation resolved approval.
-New constructor-acknowledgment reachability defect was independently reproduced;
-narrow core fix and separate scalar GUI implementation are active in SEM. These
-are current unresolved work, not accepted release limitations. See current STATE.
-
-## Current evidence superseding earlier in-progress notes — 2026-09-06
-
-Semantic source5/core/REST and scalar GUI are integrated at d114a5d. Full Windows718/
-Linux721 tests, strict Clippy, optimized builds and live semantic REST contracts pass.
-The equal initial discriminator acknowledgment defect is fixed and independently
-closed. Three scalar GUI P2 fixes5a51a75 are under fresh recheck/integration; structured
-authoring remains required. Basic Linux R6, middle scenario and guarded chain insertion
-have actual native evidence in their ledgers; advanced and compact cases remain.
-X11 lacks libxkbcommon-x11-0, installation requires user's sudo password. User has
-the exact fix command; Windows/Wayland progress is independent. This environment
-issue is not evidence of a semantic defect or reason to mark the release blocked.
-
-2026-09-06: DATA67ed8e0/Linux43dd566 integrates bounded MessageKind/TimerExpression
-review.335 desktop tests and strict checks/build pass per platform; independent22
-module tests+288 differential cases close no findings. Windows native scalar now
-includes named mapping/default, historical identities, reopen and reverse Undo;
-trial closed0/empty stderr. Exact scope and pending native cases:
-release-semantic-native.md. Hosted desktop implementation is isolated in
-Capella2-hosted-desktop; all release completion claims remain pending.
-
-## Hosted/native and constructor checkpoint — 2026-09-06
-
-Verified: optional hosted desktop is integrated; native publish, exact authored
-bundle preservation, graphical/text Save, invalid-source rejection, API artifact
-review/reload/Undo/Redo and competing-revision local retention passed on Windows.
-Minimum hosted dialog controls remain reachable. Offline/reopen/local Save As and
-Linux native hosted acceptance continue. No external server was deployed.
-
-Independent core review closed43370de/8a75294 with31 semantic tests, optional
-Binding/Annotation both-direction probes,3 reverse Port boundary and13 port
-regressions. Full owner core suite359 passes. Semantics preserve target-local keyed
-members without resurrecting source removals, mandatory reset and OA Legacy rules.
-Remaining constructor GUIc149f2f passes299 SEM tests; fresh review is active.
-
-Native process camera/owner fix acceptance passed. New compact form finding was
-fixed and passed real Iced layout+360 desktop tests; native fix acceptance pending.
-Strategy remains measured release completion, not treating these slices as full
-source/UI/API parity. Keyed/order/reset, artifacts/multi-source, remaining advanced
-native cases, Home/recovery/help/coverage and final acceptance are still required.
-
-## Reviewed corrections and native Data evidence — 2026-09-06
-
-Verified: constructorc149f2f/reset-unordered6fb01ae and hostedb04c4b3/cataloge807086
-are independently reviewed/integrated. Both platforms pass392 desktop tests and
-strict gates. Native Data Take matched the whole core-generated Project/history;
-Candidate raw invalid/type mismatch/repair/compact Apply/Undo/Redo/Save passed.
-Candidate exactProject and remaining constructors/Linux native are still pending.
-Strategy: finish structured parity while Home/recents progresses independently;
-recovery, ordered/attachments/artifacts/multi-source and final acceptance remain.
-
-
-## 2026-09-06 branch reconciliation
-Verified integrated baseline c091f80 contains direct state/scenario/process editing, data contracts, schema 5 semantic review and hosted editing. Current branch codex/release1-continuation adopts it; independent ancestry/patch/tree audits found no required production transplant. Historical environment is absent here. Current user objective is attachment 10b0f701-1743-4de7-9ee1-225920e19649/goal-objective.md. See release-branch-integration-20260906.md for evidence and ownership. Assumption: portable user-local GNU tooling can verify Windows without system installation; being tested, not yet established.
+Finish the semantic-review navigation correction and native replay. Freeze the independently critiqued S1/S2 contracts together, including exact old5/6 checkpoint/message compatibility, before coordinated source7/core implementation and graphical/source/REST parity. Complete the remaining tutorial/artifact/view/process/state/hosted workflows while bounded Linux validation progresses. Then run full-workspace, complete Linux and optimized/MSRV/REST/docs/package gates and fresh independent end-state review. Preserve exact revision/binary/platform scope; successful slices and architecture-only SVG export do not complete the broader goal.