Save complete restart handoff for user-requested reboot

harness/REBOOT_HANDOFF_20260911.md

@@ -0,0 +1,121 @@
+# User-requested reboot checkpoint — 2026-09-11
+
+Codex-956atf `/root`. The user will install Ubuntu26.04 in WSL2 and reboot, and
+explicitly requested progress preservation and a safe-reboot signal. Work is
+**paused**, not completed. Resume only after the user returns. All three local
+agents stopped and saved their work; root stopped its sole Cargo build. No machine
+restart, installation, Windows feature change or credential change was performed.
+
+## Saved source and ownership
+
+- Main checkout `codex/behavior-authoring-20260910`: numeric foundation7d14bd0,
+  CLIbc311bc, corrected external evidence dc0f2e1, instructions ancestryc7ed894,
+  chooser/workspace7f081ad, staged prerequisites c0e66f9 (externaldf6f595), numeric
+  evidence/decoder review03d20ec, followed by this reboot checkpoint. Remote branch
+  is `codex/release1-956atf`. New desktop source is **uncompiled/unaccepted**.
+- Isolated `.local/analysis-core-worktree-20260911/`, local branch
+  `codex/analysis-core-20260911`, remote `codex/analysis-core-956atf-20260911`:
+  Checkpoint `b96ff3935ab3f36b7144566e46559a05a29292a5`: WIP actual schema8
+  definitions/Expr/records, commands/references/migration and
+  static admission, based at7d14bd0. Its
+  `harness/release-analysis-core-schema8-wip-20260911.md` inventories20 code/test
+  paths and22 prepared, unexecuted tests. No source8/evaluator/transport closure.
+- Isolated `.local/behavior-canvas-worktree-20260911/`, local branch
+  `codex/behavior-canvas-20260911`, remote `codex/behavior-canvas-956atf-20260911`:
+  WIP shared camera/viewport, based atc0e66f9. Checkpoint
+  `e511c4153fb5bb484652434340e0e4c7000c93d0` is deliberately
+  not compile-coherent: missing test module, missing App Camera handlers and old
+  production Scrollables still active. Its
+  `harness/release-behavior-canvas-reboot-handoff-20260911.md` lists exact paths
+  and ten remaining steps. Do not merge it as a finished canvas implementation.
+
+Both WIP branches are independent of the main branch. Preserve them, finish their
+bounded slices and review before integration. No worker may run Cargo/native or
+edit the root checkout without a new root lease. Separate-host9e8r6t owns incoming
+prerequisite-form refinements; ytr83r owns B4/lifecycle/Linux work. Re-read Gitea
+issues1/2 and current Wiki before resuming; their progress may have changed.
+
+## Verified gates and interrupted build
+
+- Numeric26/26 at7d14bd0,0.29s execution; strict core all-target Clippy with
+  warnings denied passes11m49s. Exact162-input/binary/log provenance is in
+  [the numeric gate](release-analysis-numeric-gate-20260911.md).
+- Local `cargo test --locked -p oa-cli -- --test-threads=1`:12/12 integration
+  tests, zero failures/ignored,3.00s execution after42.86s compile. The initial
+  `--bin arcadia` invocation ran zero tests and counts only as compilation.
+  Full log: `.local/logs/source-cli-full-local-20260911.log`.
+- Previous desktop676/676, formatting and strict Clippy passed at2cc4d11.
+  No acceptance transfers to new7f081ad/c0e66f9 source.
+- `cargo test --locked -p oa-desktop --bin arcadia-studio --no-run` was deliberately
+  stopped for this reboot while compiling oa-core after renderer dependencies.
+  Cargo exit101 follows the explicitly stopped owned rustc process (`0xffffffff`);
+  no source diagnostic or test failure was reported, and no desktop tests ran.
+  Preserve `.local/logs/desktop-chooser-contextual-first-20260911.log`. Root
+  verified no Cargo/rustc/Clippy processes remained after stopping its process tree.
+
+## Two new focus findings to fix first
+
+[Paused independent integration review](release-chooser-contextual-integration-review-20260911.md)
+contains16 source hashes and two source-derived, unexecuted P2 findings:
+
+1. Initial parent FormShown consumes its one-time focus. Child source Open removes
+   that parent widget tree; Back/Use remounts it without a new focus intent.
+2. FormShown validates context before creating a global NAME_INPUT focus Task,
+   but the delayed operation is not bound to the still-current mount/session.
+   It can act on a replacement parent or clear current child/Review input focus.
+
+Implement a live-session/mount-scoped focus operation covering initial mount and
+source→parent return. Add actual mounted regressions for Open→Back/Use, changed
+document/owner/modal/session between Task creation and execution, raw/source/history
+preservation, and then continue the combined compile/focused/full/Clippy/native
+gates. Do not misstate the popup search-input counterexample: the root Popup
+operation traverses its ordinary content; the separate picker input is excluded.
+
+## Native session and exact private backup
+
+Immutable GUI80cf197 remains the native test binary; SHA256
+`A5ED6DF334B1BFB620425AFDF3E863F0B522990E6FB47C6C401A71CF4443954A`.
+All four OA create/history checkpoints and final reopen pass. Separate SA Action
+Save/Undo/Redo passes, with63 accepted objects. Working entry:
+`.local/native-qa/scenario-20260911/sa/project.arcadia`.
+
+The current **unapplied** State draft has literal name `SA native state`, captured
+by clicking SA A inspector at the inner chosen operand before SA Inner anchor.
+Its lifeline is preselected, but SA Ready is not chosen and Create was not pressed.
+It must not be described as a passed SA State checkpoint. Old GUI again required
+scrolling its new form back upward to find Name; new fixes have not run natively.
+
+Private backup `.local/reboot-20260911-1344/` contains the complete accepted SA
+source directory, exact64,935-byte recovery JSON, build/CLI logs and hash manifest.
+Recovery id `30511014-b831-47e3-afd2-6c4e44835a8f`; copied recovery SHA256
+`5C7B90BE613AF35463C563B9AA85A7AB1F8D48561EA935ABC6FC1E79549DF0E8`.
+Root verified its project/origin and raw draft name before copying. The original
+checkpoint remains under `%LOCALAPPDATA%/ArcadiaStudio/recovery/`. The saved-model
+backup passes `check sa-action` and exact `same` against sa-action-verified.
+No private recovery data is committed or sent to Gitea.
+
+After reboot prefer the application's Home recovery entry to resume this raw draft.
+If needed, preserve any newer checkpoint before restoring the exact private backup
+to that same recovery directory. Use the independent scenario oracle for subsequent
+State/Reuse/Fragment/history/reopen checks. Old window handles/screenshot ids and
+process ids are invalid after reboot; select the actual returned Studio window.
+
+## Linux and resumption
+
+Before installation, this account had WSL2.7.13/kernel6.18.33.2-2 and default2 but
+no registered distribution or Ubuntu Appx package. VirtualMachinePlatform was
+enabled, hypervisor present, common reboot flags absent; elevated feature detail
+was unavailable. No Linux startup/build pass follows from those checks.
+
+On return, inspect `wsl --list --verbose` and actually execute `uname -sr` inside
+the installed Ubuntu. Verify the user's installed distribution/version, then set
+up the project's Linux dependencies and perform real Linux build/test/runtime
+gates. Keep Windows compilation serialized using `.local/toolchain/env.ps1`.
+The isolated core's first proposed gate is its22 prepared analysis tests, plus
+numeric regressions, after review of its WIP handoff. Full depth128 JSON decoding,
+allocation/lifecycle/output caps and exact save/readback remain required; see
+[the decoder review](release-analysis-decoder-review-20260911.md).
+
+Continue the original complete OA/SA release goal, preserving issue2's modern
+canvas requirement and analysis/library/source/REST/GUI parity. This reboot pause
+does not alter completion criteria or authorize marking the project complete.