docs: record integrated review gates and native constructor evidence

harness/DECISIONS.md

@@ -116,3 +116,18 @@ typed facts can outlive former constructors/families and deleted references. The
 typed reference visitor supports explicit reidentification but does not add live
 deletion dependencies. Derived linked-definition drift remains bounded and exposes
 missing review coverage instead of copying a shared definition into every baseline.
+
+## Hosted destination identity and bounded independent panes — 2026-09-06
+
+A hosted save binding belongs to one installed document, not the connection dialog.
+Installing any local source workspace, including invalid repair source, detaches
+it; a failed or cancelled load does not. Verified regression prevented accidental
+write to a previously opened server model after repairing local text. Catalog
+freshness is explicit and scoped to its service; observing a changed bound head
+invalidates even empty filtered results. Background polling is unnecessary.
+
+Pending process forms use an independent bounded scroll pane with pinned actions,
+while the diagram retains its own camera/scroll state. Nesting both under the page
+scroll supplied infinite height and clipped the fields at the supported minimum.
+Real Iced layout tests verify finite field space; native recheck remains required.
+

harness/PLAN.md

@@ -73,7 +73,8 @@ Every concrete requirement in the new objective and release coverage table has a
 
 Milestone4 desktop adapter is implemented on the existing Document/REST boundary.
 Windows native publish, graphical/text save, rejected invalid source, API artifact
-reload and stale-revision recovery are demonstrated. Continue offline/local-copy/
+reload and stale-revision recovery are demonstrated. Offline/retry and exact local-copy/catalog Open native acceptance passed on Windows.
-catalog and Linux native acceptance, then integrate current documentation/help.
+Destination and catalog defects found afterward are fixed/reviewed/integrated;
-Constructor groups are implemented in SEM and independently reviewing; keyed/order/
+recheck those and Linux native next. Constructor groups and reset/unordered keyed
-reset and artifact/multi-source graphical parity remain dependencies for release.
+GUI are integrated/reviewed. Annotation/Binding and Home/recents are active; order,
+attachments, artifacts, multi-source GUI and checkpoint recovery remain required.

harness/STATE.md

@@ -2,90 +2,93 @@
 
 The first-release goal remains active and incomplete. Authoritative objective:
 attachment10134df9-bea2-4c02-a820-67b53d6b86f7/goal-objective.md. PLAN/TASK_LEDGER
-retain the whole release scope. Scoped tests/native acceptance are not full parity.
+retain complete OA/SA, graphical/source/includes/REST parity and release acceptance.
 
-## Checkouts and ownership
+## Ownership and integrated state
 
 - Main C:/Users/sorok/OneDrive/Documents/ChatGPT/Capella 2 is the continuation
-  pointer, codex/release1-engineering, last pointer04316a7.
+  pointer, codex/release1-engineering,4fa9591; production work is in DATA below.
 - DATA D:/CodexBuilds/Capella2-data-integration, codex/data-contract-integration,
-  productioncf04ff1; root owns index/data-target. Constructor desktop gates active3782.
+  production14b8e18. Root owns index and Capella2-data-target (idle).
 - Linux D:/CodexBuilds/Capella2-data-linux-review, codex/data-linux-review,
-  equivalentb5db730; root owns index/data-linux-target. Constructor gates active6616.
+  equivalent9c61d0d. Root owns index and data-linux-target (idle).
-- SEM D:/CodexBuilds/Capella2-semantic-review, codex/semantic-review, c149f2f.
+- SEM D:/CodexBuilds/Capella2-semantic-review, codex/semantic-review,6fb01ae.
-  Constructor GUI review is closed. semantic_gui_design owns slice1 exact history
+  semantic_gui_design owns slice2 Annotation/Binding GUI, index and
-  reset + unordered Member/Literal authoring, index and semantic-desktop-target.
+  semantic-desktop-target. Slice1 exact reset/unordered Member/Literal is integrated
-  Broader annotation/order/attachment work is still planned, not implemented.
+  and independently reviewed; ordered/attachment/artifact/multi-source work remains.
-- HOST D:/CodexBuilds/Capella2-hosted-desktop, codex/hosted-desktop, base798b277. semantic_integration owns the high-impact invalid-local-source
+- HOST D:/CodexBuilds/Capella2-hosted-desktop, codex/hosted-desktop,e807086.
-  destination fix in app.rs and focused hosted tests plus index/scenario-target.
+  semantic_integration owns Home/start/recents, index and scenario-target. Child
-  Parent then handles a separate native stale-catalog finding. Fresh child reviewer
+  owns new Home tests; no overlap with root or SEM. Recovery is not implemented.
-  owns read-only fix review; its constructor native fixtures are complete in Temp.
+- Root is sole native operator. Agents may not issue native input.
-- Root is sole native operator. No workers may issue native input.
 
-## Implemented and verified
+## Verified integration
 
-R6 data contracts, direct scenario/process gestures, source5 core/REST reconciliation
+R6 data contracts, direct scenario/process gestures, source5 core/REST and scalar/
-and scalar/MessageKind GUI are integrated. Windows full baseline718/Linux721 tests,
+constructor GUI are integrated. Full Windows767/Linux770 workspace tests passed
-one intentional benchmark ignored per platform, strict checks/optimized builds;
+at DATA28ebbbb/Linux04210b3, one intentional benchmark ignore each; strict checks
-live REST184schemas/19typed values/9malformed rejections. See corresponding ledgers.
+and optimized desktop/server builds passed. Live REST184 schemas/19 typed values/
+9 malformed rejections passed. See scoped ledgers for limits.
 
-Hosted desktop uses the existing envelope/source-project API, explicit conditional
+Newest DATA14b8e18/Linux9c61d0d:392 desktop tests each, strict all-target desktop
-Save and separate memory-only connection state.24 focused transport/lifecycle tests
+Clippy, workspace fmt and release builds pass. Sessions24877/10919 closed0.
-and fresh review closed the captured-credential bug. Integrated Windowsf08507a360
+Logs integrated-review-{test,clippy,build}.log in Windows data-target and Linux
-desktop tests/Clippy/fmt/build pass; Linuxba9c117359 pass before compact form fix.
+checkout target. Initial Windows log redirect failed before Cargo (nonexistent
-No external deployment. New core fixes43370de/8a75294 pass359 core tests and fresh
+checkout target); rerun used the existing dedicated target and passed.
-independent optional-row/port probes. DATA28ebbbb/Linux04210b3 full workspace767/770 tests (one intentional benchmark
-ignored each), strict workspace Clippy/fmt/optimized desktop+server builds pass.
 
-Remaining constructor GUIc149f2f (Data/Port/Occurrence/Event) passes299 SEM desktop
+Independent reviews closed constructorc149f2f (299 tests), reset/unordered6fb01ae
-tests, Clippy/fmt/build; fresh independent review closed35 focused and299 full tests. Keyed/order/reset and
+(311 tests), invalid-local-source destinationb04c4b3 and catalog12e3020/e807086.
-artifact/multi-source graphical decisions remain required.
+Catalog review found and corrected false empty filtered results when Check observes
+a changed head outside displayed rows; unchanged-head/cross-service controls pass.
+Constructor and keyed core changes43370de/8a75294 have independent probes and359
+core tests passing. Full graphical parity is not yet established.
 
 ## Native state and evidence
 
-Windows hosted6fcc238 trial71940 closed normally, exit0 and empty stderr. Native
+Windows hosted6fcc238 trial71940 closed0/empty stderr. Default/minimum publish,
-1440x900/1100x700 publish, graph/text Save, invalid draft retention, API artifact
+graph/text Save, invalid source retention, artifact API Check/review/Reload/Undo,
-Check/review/Reload/Undo/Redo, stale revision conflict/local retention, offline/retry,
+stale ETag conflict/local retention, offline/retry, exact three-file local Save As
-exact three-file local Save As and catalog Open passed. Server20984 remains running
+and catalog Open passed. Isolated loopback serverPID20984 remains at127.0.0.1:8787,
-at127.0.0.1:8787 with isolated store/evidence
+resource d28b2fc9-fbbd-456b-8ba8-a1195d1c8f33 revision6. Evidence/store is
 C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906.
-Resource d28b2fc9-fbbd-456b-8ba8-a1195d1c8f33 is revision6. See hosted ledger.
 
-New high-impact reproduced defect: installing invalid local repair source retained
+Invalid local repair source used to retain hosted destination and overwrite that
-the prior hosted save handle; after repair Save overwrote that server resource.
+resource after repair. Fix is integrated/reviewed; actual fixed native flow remains
-HOST worker owns minimal detach fix and actual-App red/green, independent review
+pending. Catalog freshness is likewise integrated/reviewed, native check pending.
-active. Native stale empty catalog after publish/save is a separate pending P2.
-Both require fixes and root native recheck; no hosted completion claim.
 
-Constructor native fixtures: C:/Users/sorok/AppData/Local/Temp/capella2-constructor-native-20260906.
+Current Windows constructor trial84997/window4327540 uses frozen cf04ff1 at
-README lists six independently core-validated input models and expected outcomes
+ui-constructors-windows-cf04ff1, SHA86C86A0A4E9E7BDEB5BBB64F6787AA5D3A8715D109979A57D056AEB686538E38.
-covering Data/Event/Port/Occurrence/MessageKind. Copy before native edits.
+At1100x700, fixture01 Data reviewed Take, exact source/history, Undo/Redo and Save
+passed; parsedProject matched independently core-generated expected. Candidate
+Real retained raw '-' across Integer/Real changes, blocked incompatible Boolean
+default, accepted repaired -1.5..100/default3.5, applied as one Undo/Redo and saved.
+Current accepted file is fixtures/01-data-switch.arcadia with Real candidate;
+native property values/history and disk comments/unitcm confirmed. Independent
+candidate exactProject comparison is pending. No modal currently open.
 
-Windows process67ed8e0 trial closed0, empty stderr. Native Fit/manual-scale and
+Remaining five pristine constructor fixtures and expected outputs are in
-remote scroll survive tools/forms; owner switch resets actual canvas; compact
+C:/Users/sorok/AppData/Local/Temp/capella2-constructor-native-20260906. Do not rerun
-Traceability wraps. New compact pending form issue fixedf08507a, tests pass, native
+the UUID-generating fixture generator. Copy originals before editing.
-fix verification pending. See release-process-editing.md. Scalar e7fa061 trial
-closed0; Windows default/minimum forward/reverse, mapped typed reference, raw
-invalid retention, historical identities, exact source/Undo/Save/reopen evidence is
-in release-semantic-native.md. Linux scalar/MessageKind and advanced cases pending.
 
-Linux uses distribution Ubuntu-24.04 (Ubuntu is a separate unconfigured distro),
+New frozen accepted builds (native pending) under Capella2-release1-01a06e2e:
-Rust1.98.1 PATH /home/sorokinoleg/.cache/arcadia/rust/bin, dedicated target and
+ui-integrated-review-windows-14b8e18 and ui-integrated-review-linux-9c61d0d.
---config target/linux-cargo.toml. Wayland works with WGPU_BACKEND=vulkan and
+Manifests contain hashes. Earlier scalar native accepted; process camera/owner
-VK_DRIVER_FILES=/usr/share/vulkan/icd.d/lvp_icd.x86_64.json. Optional X11 missing
+accepted, compact pending form fixf08507a needs native recheck. See native ledgers.
-libxkbcommon-x11-0; user already has sudo apt-get install libxkbcommon-x11-0 command.
-Do not bypass authentication. Windows/Wayland/REST are not blocked.
 
-## Next actions
+Linux uses Ubuntu-24.04, Rust1.98.1 PATH/home/sorokinoleg/.cache/arcadia/rust/bin,
+--config target/linux-cargo.toml and dedicated target. Wayland works with
+WGPU_BACKEND=vulkan and VK_DRIVER_FILES=/usr/share/vulkan/icd.d/lvp_icd.x86_64.json.
+Optional X11 missing libxkbcommon-x11-0; user has sudo apt-get install command.
+Do not bypass authentication. Windows/Wayland/REST are unblocked.
 
-1. Integrate independently reviewed invalid-local-open and catalog fixes, then
+## Exact next actions
-   operate fixed native flow and complete hosted Linux acceptance.
+
-2. Finish active platform gates, freeze combined builds and verify compact process
+1. Complete native constructor fixtures and compact process pane acceptance.
-   form fix and hosted workflows on Linux; retain exact hashes/evidence.
+2. Operate corrected invalid-local-open and stale catalog on newest Windows build;
-3. Complete native scalar/group cases and independently reviewed reset/keyed
+   complete Linux hosted/semantic native acceptance.
-   slice, then order/annotation/attachment/artifact/multi-source decisions.
+3. Independently review/integrate SEM Annotation/Binding and HOST Home/recents,
-4. Complete advanced process/scenario/OA, Home/recent/recovery/help/coverage requirements;
+   then ordered/attachment/artifact/multi-source GUI and recoverable checkpoints.
-   fresh final reviews, full platform/MSRV/docs/package acceptance. No release handoff yet.
+4. Finish advanced OA/process/scenario, help/coverage and fresh final reviews;
+   full platforms/MSRV/docs/package verification. No release handoff yet.
 
 Build: cargo test --locked --offline --workspace;
 cargo clippy --locked --offline --workspace --all-targets -- -D warnings;

harness/TASK_LEDGER.md

@@ -126,3 +126,14 @@ fixed and passed real Iced layout+360 desktop tests; native fix acceptance pendi
 Strategy remains measured release completion, not treating these slices as full
 source/UI/API parity. Keyed/order/reset, artifacts/multi-source, remaining advanced
 native cases, Home/recovery/help/coverage and final acceptance are still required.
+
+## Reviewed corrections and native Data evidence — 2026-09-06
+
+Verified: constructorc149f2f/reset-unordered6fb01ae and hostedb04c4b3/cataloge807086
+are independently reviewed/integrated. Both platforms pass392 desktop tests and
+strict gates. Native Data Take matched the whole core-generated Project/history;
+Candidate raw invalid/type mismatch/repair/compact Apply/Undo/Redo/Save passed.
+Candidate exactProject and remaining constructors/Linux native are still pending.
+Strategy: finish structured parity while Home/recents progresses independently;
+recovery, ordered/attachments/artifacts/multi-source and final acceptance remain.
+

harness/release-hosted-desktop.md

@@ -128,3 +128,16 @@ one intentional ignored benchmark each, strict workspace all-target Clippy, fmt
 optimized desktop/server builds pass. Logs hosted-core-{workspace-test,workspace-clippy,
 build}.log in dedicated data/data-linux targets. GUI constructors and help are now
 integrated at DATAcf04ff1/Linuxb5db730; desktop gates3782/6616 are active.
+
+## Destination and catalog correction checkpoint — 2026-09-06
+
+b04c4b3 detaches a hosted handle when installing invalid local repair source;
+failed/cancelled Open retains the current document and destination. Actual-App
+HTTP regression failed before the fix and passed afterward; independent review
+closed.12e3020/e807086 identify stale catalogs after writes/changed heads, including
+empty filtered results with a bound resource outside the displayed rows. Fresh
+review reproduced that case red, then closed correction with negative unchanged-
+head and cross-service controls. Both fixes are integrated in DATA14b8e18 and
+Linux9c61d0d;392 desktop tests/platform and strict gates pass. Native correction
+checks remain pending. No polling, automatic overwrite or persisted token added.
+

harness/release-semantic-native.md

@@ -79,3 +79,28 @@ Windows build/test session97666 and Linux2903 exited0. Linux logs are
 message-kind-{test,clippy,build}.log in Capella2-data-linux-target. Frozen manifests
 record source/platform/hash. The Windows freeze contains an isolated copy of the
 74-object process fixture for native camera, owner-scroll and branch checks.
+
+## Constructor and keyed integration checkpoint — 2026-09-06
+
+Integrated c149f2f constructor and6fb01ae exact reset/unordered Member/Literal,
+independent reviews closed. DATA14b8e18/Linux9c61d0d pass392 desktop tests each,
+strict Clippy/fmt/release. Builds include hosted destination/catalog fixes too.
+
+Native Windows cf04ff1 trial84997: fixture01 Data Boolean→Integer Take copied
+0..100/default42 while retaining unitcm. Preview acknowledged Constructor,
+IntegerMinimum/Maximum and Default. Apply selected SA; one Undo restored Boolean
+and old history; Redo restored accepted Integer. Save retained authored comments;
+independent Rust verifier matched the complete parsed Project including history to
+expected/01-data-switch-after-primary.arcadia, with zero structural errors.
+
+Then Undo and Candidate Real: incompatible Boolean default blocked Apply; raw '-'
+lower bound survived Real→Integer→Real. Repair -1.5, max100 and default Real3.5
+enabled Apply. At actual1100x700 all fields and pinned actions were reachable;
+exact scope listed Constructor, Integer/Real min/max and Default, no retirement.
+Apply updated model/source/history together. Undo restored Booleanfalse/unitcm and
+old history, Redo restored Real bounds/default and unchanged-since-review state.
+Save succeeded; disk confirmed OA unchanged, SA Real -1.5..100/default3.5/unitcm and
+both authored comments. Independent exact candidate comparison is pending.
+Minor misleading 'Minimum count' error label reported to SEM for local correction.
+Other constructor families, reset/keyed and Linux native are not yet accepted.
+