Plan direct process and chain editing milestone

harness/STATE.md

@@ -2,6 +2,14 @@
 
 ## Objective and phase
 
+Direct process/chain editing is now being implemented on `codex/process-direct`
+at base 1bf8ebc in the scenario checkout and its dedicated target. The previous
+scenario branch is retained. `release-process-editing.md` records the adopted
+direct occurrence/link, guard-preserving insertion, bounded picker, derived
+nesting and lifetime contract. This is desktop-only work; core/source/API types
+stay unchanged. Automated implementation evidence and root-owned native trials
+are pending. Cross-reference inner-chain linking remains an explicit semantic
+extension rather than a claim of full Capella chain equivalence.
 Direct scenario work is now in isolated `codex/scenario-direct`, checkout
 `D:/CodexBuilds/Capella2-scenario-direct`, base ab661f2, dedicated target
 `D:/CodexBuilds/Capella2-scenario-target`. Scope and acceptance are recorded in
@@ -181,3 +189,4 @@ Call/Reply history were verified; flat property paths prompted the latest fix.
 The independent bounded-browser review reports no remaining medium/high finding.
 Linux native R6 workflows remain a root-owned acceptance gate. See
 release-data-verification.md. Main remains a8f451e; R6 is not yet accepted.
+

harness/release-process-editing.md

@@ -0,0 +1,55 @@
+# Direct process / functional-chain editing
+
+Status: implementation started on 2026-09-06 in `codex/process-direct`, based on
+1bf8ebc in `D:/CodexBuilds/Capella2-scenario-direct`; dedicated target remains
+`D:/CodexBuilds/Capella2-scenario-target`. The prior scenario branch is retained.
+No native acceptance is claimed; root owns Windows/Linux native operation.
+
+## Decisions and observable outcome
+
+An engineer can involve existing work/exchanges more than once, draw guarded
+sequence links and controls, insert on a selected path, reconnect its endpoint,
+inspect/reuse a subprocess, and undo/save/reopen with contextual identities intact.
+Extend the existing derived topology graph and ordinary typed drafts. No core
+schema, persisted geometry, source grammar or REST route is added.
+
+Palette tools capture document/owner/revision/epoch and a specific contribution,
+link or presentation slot. Canvas click-click and drag connect local occurrence
+IDs. A link insertion preserves the captured link UUID, alias, description and
+guard on the upstream segment, creates the downstream segment and new occurrence,
+and updates `steps` in one validated Batch. Membership/presentation order remains
+separate from SequenceLink topology. Incomplete control guards/cardinalities are
+warnings, as in the core. Reconnection retains the link's authored properties.
+
+Select always means the local occurrence/relation. Shared source navigation uses
+explicit Open; reusable previews expand without copying or reparenting source
+contributions. Inner preview endpoints are not caller-owned endpoints. Capella's
+richer cross-reference hierarchy linking is an unresolved semantic extension,
+not implied by this milestone. Existing explicit legacy-path conversion remains.
+
+Keep canvas and bounded draft independently scrollable, use searchable paged
+contextual choices, and default to readable zoom with explicit Fit and scrolling.
+Transient drawing cancels on context, tool, bounds, scroll, resize or focus changes;
+form inputs survive failed validation/source updates. Reuse passive scroll
+observations including async-save delivery. Commit through Document::execute,
+acknowledging and selecting the created occurrence only after model/source success.
+
+## Ownership and verification
+
+Own `behavior/topology.rs` and local tests, with narrow `behavior.rs` and `app.rs`
+routing/lifecycle changes. Do not change DATA/Linux/semantic checkouts or perform
+native input. Verify production pointer events, planners, App and model/source:
+
+1. OA/SA repeated work/exchange involvement preserves shared records.
+2. Alternative/parallel/loop creation, guards and incomplete warnings.
+3. Specific guarded-link insertion preserves metadata; incompatible adjacency rejects.
+4. Reconnect/delete/Undo/Redo retain unrelated paths and exact source.
+5. Repeated subprocess reuse, explicit navigation, expansion and recursive rejection.
+6. Legacy conversion and presentation reorder independent of explicit topology.
+7. Dirty/source-failure/stale/scroll-save/resize/Escape/focus lifetimes retain drafts.
+8. Nested source save/reopen and ordinary serialized command/model parity.
+
+Run focused invariants, all desktop tests, strict all-target desktop Clippy and
+optimized desktop build with --locked --offline and the dedicated target. Record
+actual evidence and remaining native tasks before freezing. Root independently
+reviews and native-tests the freeze; full-release completeness remains separate.