docs: record integrated review gates and native constructor evidence

docs/server.md

@@ -1,6 +1,6 @@
 # Arcadia Studio server
 
-`arcadia-server` is a headless Rust REST service for the same schema-4 model, commands, source language, validation, artifacts and OA/SA traces used by the desktop. It stores each model and its authored source project together in an atomic JSON envelope. The service provides a deployment artifact and configuration examples; this repository does not assert that a remote instance has been deployed.
+`arcadia-server` is a headless Rust REST service for the same schema-5 model, commands, source language, validation, artifacts and OA/SA traces used by the desktop. It stores each model and its authored source project together in an atomic JSON envelope. The service provides a deployment artifact and configuration examples; this repository does not assert that a remote instance has been deployed.
 
 The complete HTTP contract is [api.rst](api.rst); machine-readable schemas are in [openapi.json](openapi.json), also served at `/api/v1/openapi.json`. The original [service research](research-v2-service.md) discusses broader alternatives; retained history, SQLite, idempotency receipts and stored transition plans from that research are **not** the implemented storage contract.
 

harness/DECISIONS.md

@@ -116,3 +116,18 @@ typed facts can outlive former constructors/families and deleted references. The
 typed reference visitor supports explicit reidentification but does not add live
 deletion dependencies. Derived linked-definition drift remains bounded and exposes
 missing review coverage instead of copying a shared definition into every baseline.
+
+## Hosted destination identity and bounded independent panes — 2026-09-06
+
+A hosted save binding belongs to one installed document, not the connection dialog.
+Installing any local source workspace, including invalid repair source, detaches
+it; a failed or cancelled load does not. Verified regression prevented accidental
+write to a previously opened server model after repairing local text. Catalog
+freshness is explicit and scoped to its service; observing a changed bound head
+invalidates even empty filtered results. Background polling is unnecessary.
+
+Pending process forms use an independent bounded scroll pane with pinned actions,
+while the diagram retains its own camera/scroll state. Nesting both under the page
+scroll supplied infinite height and clipped the fields at the supported minimum.
+Real Iced layout tests verify finite field space; native recheck remains required.
+

harness/PLAN.md

@@ -68,3 +68,13 @@ Tests must cover user-visible meaning and cross-representation invariants, not j
 ## Definition of done
 
 Every concrete requirement in the new objective and release coverage table has authoritative current evidence. Primary OA/SA engineering workflows work graphically, textually and through the API; help is navigable and useful; native Windows/Linux UI is intentionally designed and exercised; no blocking/high-impact defect remains; strict checks pass; independent findings are closed; durable docs accurately reflect the release; another engineer can build/run/test and use the supplied packages. V2 completion alone does not satisfy this goal.
+
+## Current milestone progress — hosted integration
+
+Milestone4 desktop adapter is implemented on the existing Document/REST boundary.
+Windows native publish, graphical/text save, rejected invalid source, API artifact
+reload and stale-revision recovery are demonstrated. Offline/retry and exact local-copy/catalog Open native acceptance passed on Windows.
+Destination and catalog defects found afterward are fixed/reviewed/integrated;
+recheck those and Linux native next. Constructor groups and reset/unordered keyed
+GUI are integrated/reviewed. Annotation/Binding and Home/recents are active; order,
+attachments, artifacts, multi-source GUI and checkpoint recovery remain required.

harness/STATE.md

@@ -1,92 +1,96 @@
 # Current release state — 2026-09-06
 
-The first-release goal remains active and incomplete. The authoritative objective
+The first-release goal remains active and incomplete. Authoritative objective:
-is attachment10134df9-bea2-4c02-a820-67b53d6b86f7/goal-objective.md. PLAN and
+attachment10134df9-bea2-4c02-a820-67b53d6b86f7/goal-objective.md. PLAN/TASK_LEDGER
-TASK_LEDGER retain release scope. Do not equate the accepted0.2 prototype or scoped
+retain complete OA/SA, graphical/source/includes/REST parity and release acceptance.
-verification with complete OA/SA/source/REST/UI parity.
 
-## Checkouts and ownership
+## Ownership and integrated state
 
-- Main C:/Users/sorok/OneDrive/Documents/ChatGPT/Capella 2 is the continuation pointer
+- Main C:/Users/sorok/OneDrive/Documents/ChatGPT/Capella 2 is the continuation
-  checkout, branch codex/release1-engineering, last pointer04316a7.
+  pointer, codex/release1-engineering,4fa9591; production work is in DATA below.
-- Active integration D:/CodexBuilds/Capella2-data-integration,
+- DATA D:/CodexBuilds/Capella2-data-integration, codex/data-contract-integration,
-  codex/data-contract-integration, production67ed8e0. Root owns index and data-target.
+  production14b8e18. Root owns index and Capella2-data-target (idle).
 - Linux D:/CodexBuilds/Capella2-data-linux-review, codex/data-linux-review,
-  43dd566 equivalent source. Root owns index and data-linux-target; currently idle.
+  equivalent9c61d0d. Root owns index and data-linux-target (idle).
-- SEM D:/CodexBuilds/Capella2-semantic-review, codex/semantic-review,
+- SEM D:/CodexBuilds/Capella2-semantic-review, codex/semantic-review,6fb01ae.
-  f73551f. semantic_gui_design owns remaining constructor families in semantic_review,
+  semantic_gui_design owns slice2 Annotation/Binding GUI, index and
-  minimal forms adapters and its GUI ledger; semantic-desktop-target is exclusive.
+  semantic-desktop-target. Slice1 exact reset/unordered Member/Literal is integrated
-- HOST D:/CodexBuilds/Capella2-hosted-desktop, codex/hosted-desktop, base1086e54.
+  and independently reviewed; ordered/attachment/artifact/multi-source work remains.
-  semantic_integration owns hosted client/lifecycle, Cargo/index and exactly three
+- HOST D:/CodexBuilds/Capella2-hosted-desktop, codex/hosted-desktop,e807086.
-  views.rs header hooks. Its child owns client.rs only. scenario-target is exclusive.
+  semantic_integration owns Home/start/recents, index and scenario-target. Child
-- semantic_http_review closed MessageKind review; Temp target and SEM target released.
+  owns new Home tests; no overlap with root or SEM. Recovery is not implemented.
-  Root is sole native operator. No worker may issue native input.
+- Root is sole native operator. Agents may not issue native input.
 
-## Integrated behavior and evidence
+## Verified integration
 
-R6 data contracts, direct scenario/process editing, source5 typed core reconciliation,
+R6 data contracts, direct scenario/process gestures, source5 core/REST and scalar/
-REST typed preview/apply and scalar GUI are integrated. Milestone3 has only the
+constructor GUI are integrated. Full Windows767/Linux770 workspace tests passed
-MessageKind/TimerExpression constructor group complete; other constructor/keyed/order/
+at DATA28ebbbb/Linux04210b3, one intentional benchmark ignore each; strict checks
-reset/artifact/multi-source graphical decisions remain required.
+and optimized desktop/server builds passed. Live REST184 schemas/19 typed values/
+9 malformed rejections passed. See scoped ledgers for limits.
 
-Full source5 baseline passed Windows718 and Linux721 workspace tests, one intentional
+Newest DATA14b8e18/Linux9c61d0d:392 desktop tests each, strict all-target desktop
-benchmark ignored on each; strict workspace Clippy and optimized desktop/server builds.
+Clippy, workspace fmt and release builds pass. Sessions24877/10919 closed0.
-Real optimized loopback REST checked184 schemas,19 actual typed values and9 malformed
+Logs integrated-review-{test,clippy,build}.log in Windows data-target and Linux
-rejections. Current67ed8e0/43dd566 adds desktop-only changes:335 complete desktop tests,
+checkout target. Initial Windows log redirect failed before Cargo (nonexistent
-strict all-target Clippy, whole-workspace fmt and optimized builds pass on both.
+checkout target); rerun used the existing dedicated target and passed.
-Linux sessions/logs are recorded in release-semantic-native.md.
 
-Independent scalar review closed3 P2 findings (scoped invalid buffers, combined
+Independent reviews closed constructorc149f2f (299 tests), reset/unordered6fb01ae
-candidate context, historical identity). MessageKind review closed22 tests plus288
+(311 tests), invalid-local-source destinationb04c4b3 and catalog12e3020/e807086.
-independent differential cases with no material finding. Process camera/form-scroll
+Catalog review found and corrected false empty filtered results when Check observes
-fixcf33785 and mounted-owner reset8c60008 passed actual Iced red/green regressions,
+a changed head outside displayed rows; unchanged-head/cross-service controls pass.
-327 desktop platform gates and independent26 observer/process checks. Native final
+Constructor and keyed core changes43370de/8a75294 have independent probes and359
-camera/owner verification remains pending; see release-process-scroll-identity.md.
+core tests passing. Full graphical parity is not yet established.
 
-## Native evidence and environment
+## Native state and evidence
 
-Windows scalar e7fa061 trial62786 closed0 normally, empty stderr.1440x900 and1100x700:
+Windows hosted6fcc238 trial71940 closed0/empty stderr. Default/minimum publish,
-mixed Keep/Take/Candidate, invalid default99 retention/repair7, exact source/comment,
+graph/text Save, invalid source retention, artifact API Check/review/Reload/Undo,
-Undo/Redo/Save; Boolean type+default candidate; missing reference mapping rejection,
+stale ETag conflict/local retention, offline/retry, exact three-file local Save As
-explicit named-type pair and valid Integer1 default; distinct deleted UUID headings;
+and catalog Open passed. Isolated loopback serverPID20984 remains at127.0.0.1:8787,
-saved reopen; reverse System→OA minimum/default and atomic Undo. See
+resource d28b2fc9-fbbd-456b-8ba8-a1195d1c8f33 revision6. Evidence/store is
-release-semantic-native.md. Working file windows-scalar.arcadia contains the three
+C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906.
-forward reviews; reverse was undone. Linux and scoped raw-bound clearing remain.
 
-Prior Linux Wayland60d162c actual1440x900: numeric constraints/defaults, recursive
+Invalid local repair source used to retain hosted destination and overwrite that
-qualified value browser, middle Call/Reply scenario and direct SA chain, Undo/Redo,
+resource after repair. Fix is integrated/reviewed; actual fixed native flow remains
-source/includes/Save. Windows reopened Linux69-object chain, added named Choice and
+pending. Catalog freshness is likewise integrated/reviewed, native check pending.
-Two paths at1100x700, Undo/Redo/Save74objects/13links/5 incomplete-model checks. Details
-in release-data-verification.md, release-scenario-editing.md, release-process-editing.md.
 
-New frozen ui-semantic-groups-{windows,linux}-67ed8e0 include current process fixes
+Current Windows constructor trial84997/window4327540 uses frozen cf04ff1 at
-and MessageKind slice. Hashes and source commits in release-semantic-native.md.
+ui-constructors-windows-cf04ff1, SHA86C86A0A4E9E7BDEB5BBB64F6787AA5D3A8715D109979A57D056AEB686538E38.
-Windows freeze/model is an isolated74-object process copy. Neither new binary has
+At1100x700, fixture01 Data reviewed Take, exact source/history, Undo/Redo and Save
-been natively operated yet. Re-inventory windows; scalar2099614 is now closed.
+passed; parsedProject matched independently core-generated expected. Candidate
-Original Capella395654 remains available. Do not touch protected user windows.
+Real retained raw '-' across Integer/Real changes, blocked incompatible Boolean
+default, accepted repaired -1.5..100/default3.5, applied as one Undo/Redo and saved.
+Current accepted file is fixtures/01-data-switch.arcadia with Real candidate;
+native property values/history and disk comments/unitcm confirmed. Independent
+candidate exactProject comparison is pending. No modal currently open.
 
-Wayland works with WGPU_BACKEND=vulkan and
+Remaining five pristine constructor fixtures and expected outputs are in
-VK_DRIVER_FILES=/usr/share/vulkan/icd.d/lvp_icd.x86_64.json. Compact WSLg frame resizing
+C:/Users/sorok/AppData/Local/Temp/capella2-constructor-native-20260906. Do not rerun
-is unverified. Optional X11 is blocked by missing libxkbcommon-x11-0; sudo requires
+the UUID-generating fixture generator. Copy originals before editing.
-user password. User was told to run sudo apt-get install libxkbcommon-x11-0 in Ubuntu.
+
-No authentication bypass; Windows/Wayland/REST progress is not blocked.
+New frozen accepted builds (native pending) under Capella2-release1-01a06e2e:
+ui-integrated-review-windows-14b8e18 and ui-integrated-review-linux-9c61d0d.
+Manifests contain hashes. Earlier scalar native accepted; process camera/owner
+accepted, compact pending form fixf08507a needs native recheck. See native ledgers.
+
+Linux uses Ubuntu-24.04, Rust1.98.1 PATH/home/sorokinoleg/.cache/arcadia/rust/bin,
+--config target/linux-cargo.toml and dedicated target. Wayland works with
+WGPU_BACKEND=vulkan and VK_DRIVER_FILES=/usr/share/vulkan/icd.d/lvp_icd.x86_64.json.
+Optional X11 missing libxkbcommon-x11-0; user has sudo apt-get install command.
+Do not bypass authentication. Windows/Wayland/REST are unblocked.
 
 ## Exact next actions
 
-1. Launch current frozen native build; verify preserved Fit/manual scale, remote
+1. Complete native constructor fixtures and compact process pane acceptance.
-   scroll through forms, owner-to-owner reset, compact branch labels and toolbar.
+2. Operate corrected invalid-local-open and stale catalog on newest Windows build;
-2. Finish Linux scalar and native MessageKind/TimerExpression acceptance, then
+   complete Linux hosted/semantic native acceptance.
-   remaining advanced OA/process/scenario cases and pending raw-bound cases.
+3. Independently review/integrate SEM Annotation/Binding and HOST Home/recents,
-3. Integrate independently reviewed remaining constructor/keyed/order/reset/artifact/
+   then ordered/attachment/artifact/multi-source GUI and recoverable checkpoints.
-   multi-source GUI slices; preserve core prepared plans and exact source history.
+4. Finish advanced OA/process/scenario, help/coverage and fresh final reviews;
-4. Integrate HOST open/publish/save/conflict lifecycle and operate actual
+   full platforms/MSRV/docs/package verification. No release handoff yet.
-   desktop→loopback API→desktop including offline retention and Save as local.
-5. Complete remaining coverage/filter, Home/recent/recovery, offline help and guided
-   engineering task requirements; fresh final reviews, full platform/MSRV and packaging.
 
-Build workflow: cargo test --locked --offline --workspace;
+Build: cargo test --locked --offline --workspace;
 cargo clippy --locked --offline --workspace --all-targets -- -D warnings;
 cargo build --locked --offline --release -p oa-desktop -p oa-server.
-Use dedicated targets. WSL Ubuntu24.04 Rust1.98.1 PATH starts
+Dedicated targets only. No remote push, usage reset or broad target deletion.
-/home/sorokinoleg/.cache/arcadia/rust/bin; add --config target/linux-cargo.toml.
-No remote push/publication, usage reset or broad target deletion is authorized.

harness/TASK_LEDGER.md

@@ -106,3 +106,34 @@ includes named mapping/default, historical identities, reopen and reverse Undo;
 trial closed0/empty stderr. Exact scope and pending native cases:
 release-semantic-native.md. Hosted desktop implementation is isolated in
 Capella2-hosted-desktop; all release completion claims remain pending.
+
+## Hosted/native and constructor checkpoint — 2026-09-06
+
+Verified: optional hosted desktop is integrated; native publish, exact authored
+bundle preservation, graphical/text Save, invalid-source rejection, API artifact
+review/reload/Undo/Redo and competing-revision local retention passed on Windows.
+Minimum hosted dialog controls remain reachable. Offline/reopen/local Save As and
+Linux native hosted acceptance continue. No external server was deployed.
+
+Independent core review closed43370de/8a75294 with31 semantic tests, optional
+Binding/Annotation both-direction probes,3 reverse Port boundary and13 port
+regressions. Full owner core suite359 passes. Semantics preserve target-local keyed
+members without resurrecting source removals, mandatory reset and OA Legacy rules.
+Remaining constructor GUIc149f2f passes299 SEM tests; fresh review is active.
+
+Native process camera/owner fix acceptance passed. New compact form finding was
+fixed and passed real Iced layout+360 desktop tests; native fix acceptance pending.
+Strategy remains measured release completion, not treating these slices as full
+source/UI/API parity. Keyed/order/reset, artifacts/multi-source, remaining advanced
+native cases, Home/recovery/help/coverage and final acceptance are still required.
+
+## Reviewed corrections and native Data evidence — 2026-09-06
+
+Verified: constructorc149f2f/reset-unordered6fb01ae and hostedb04c4b3/cataloge807086
+are independently reviewed/integrated. Both platforms pass392 desktop tests and
+strict gates. Native Data Take matched the whole core-generated Project/history;
+Candidate raw invalid/type mismatch/repair/compact Apply/Undo/Redo/Save passed.
+Candidate exactProject and remaining constructors/Linux native are still pending.
+Strategy: finish structured parity while Home/recents progresses independently;
+recovery, ordered/attachments/artifacts/multi-source and final acceptance remain.
+

harness/release-hosted-desktop.md

@@ -55,3 +55,89 @@ Frozen executable: `D:/CodexBuilds/Capella2-release1-01a06e2e/ui-hosted-windows-
 SHA-256: `51E4C02F1265D3E9B140C2BCF34A8B11E25E5B0D1D32C83E987FEA4BEB4FC061`.
 
 The release output and frozen copy hashes match. A sibling `manifest.json` records the production commit, gates and pending acceptance. No existing trial artifact was replaced. The assigned scenario target and HOST index are idle and returned to the lead after this evidence checkpoint.
+
+## Windows native checkpoint — 2026-09-06
+
+Root operated frozen6fcc238 (SHA51E4C02F1265D3E9B140C2BCF34A8B11E25E5B0D1D32C83E987FEA4BEB4FC061)
+at1440x900 and1100x700. Isolated loopback service127.0.0.1:8787 uses
+C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906/store.
+Resource d28b2fc9-fbbd-456b-8ba8-a1195d1c8f33; no external deployment.
+
+- Native Open loaded the isolated74-element/13-link/three-file process model.
+  Connect displayed an empty catalog. Publish created revision1; REST envelope
+  comparison confirmed all three authored file strings exactly matched disk.
+- Edited project description graphically; Save to server applied its pending
+  property draft and saved revision2. REST confirmed content and bundle counts.
+- Typed a source comment without its newline, making the header invalid.
+  Save retained the draft, showed syntax lint and left server revision2 unchanged.
+  Inserted newline; Ctrl+S saved valid source/comment as revision3.
+- Conditional REST CreateArtifact attached Navigation CAD contract to Request
+  navigation, revision4. Native Check server displayed changed project.arcadia;
+  read-only View server text preserved local state. Reload exposed the artifact
+  with Implements, URI and revision. Undo removed the local attachment; Redo
+  restored it and returned to the server-saved state, without network writes.
+- Entered a different local project description; competing REST EditProject
+  created revision5. Native Save was rejected by stale revision protection and
+  automatically loaded a separate review; the local description remained intact.
+  Independent REST read confirmed server revision5 and server description.
+- At1100x700, conflict body scrolls while bottom actions remain visible; review,
+  changed-file action and Reload are reachable. Reload adopted revision5 and
+  Undo restored the exact competing local description as unsaved local content.
+
+Evidence responses: published.json, graphical-save.json, textual-save.json,
+artifact-transaction.json and competing-transaction.json in the isolated directory.
+Root harness mistakes (wrong route prefix, PowerShell array-valued ETag) failed
+before successful corrected requests; these were not application failures.
+Current window2493046 remains open. Server11260 was identity-checked and stopped
+for the next offline-save trial; offline result/restart and Save as local/catalog
+Open/Linux acceptance are still pending at this checkpoint.
+
+Integrated Windowsf08507a passed360 desktop tests, strict all-target Clippy, fmt
+and optimized build. Linuxba9c117 passed359 tests and the same gates before the
+compact form fix. DATA28ebbbb/Linux04210b3 now include independently reviewed
+core constructor-history/explicit-Port fixes; their full workspace gates are active.
+An initial Linux invocation selected unconfigured Ubuntu; corrected to Ubuntu-24.04.
+
+## Windows offline, local-copy and catalog completion
+
+Native6fcc238 at1100x700: stopped only identity-checked isolated server11260.
+Save reported unreachable/interrupted service and retained the local model/source.
+Restarted same binary/store as20984; independent read found revision5 unchanged.
+Explicit Save retry succeeded revision6 with the restored local description and
+CAD attachment. No automatic replay was involved.
+
+Save as local wrote a new .arcadia project under
+C:/Users/sorok/AppData/Local/Temp/capella2-hosted-native-20260906/local-copy.
+Header changed from Save to server/Hosted to Save all/All changes saved. All three
+disk file strings compared exactly equal to server revision6, including the comment
+and both includes. Evidence: offline-recovery.json and local-copy-equality.json.
+Connect/refresh then displayed the resource; selecting it and Open selected loaded
+the hosted revision6, restored Save to server and the authored model. Trial71940
+closed normally, exit0, empty native.stderr.log. No user model was modified.
+
+Native P2: after Publish/Save the catalog retained its initial empty result and
+misleading No models found text until manual refresh. A separate follow-up is pending.
+Code review then reproduced a high-impact destination defect with actual App/HTTP:
+opening invalid local source from hosted, repairing and saving could overwrite the
+old resource. The local repair-workspace branch needs to detach its previous hosted
+handle; true read failure/Cancel must retain it. HOST owns red/green fix; fresh review
+and native fixed-flow verification are required before hosted acceptance closes.
+
+DATA28ebbbb/Linux04210b3 full workspace gates completed:767/770 tests respectively,
+one intentional ignored benchmark each, strict workspace all-target Clippy, fmt and
+optimized desktop/server builds pass. Logs hosted-core-{workspace-test,workspace-clippy,
+build}.log in dedicated data/data-linux targets. GUI constructors and help are now
+integrated at DATAcf04ff1/Linuxb5db730; desktop gates3782/6616 are active.
+
+## Destination and catalog correction checkpoint — 2026-09-06
+
+b04c4b3 detaches a hosted handle when installing invalid local repair source;
+failed/cancelled Open retains the current document and destination. Actual-App
+HTTP regression failed before the fix and passed afterward; independent review
+closed.12e3020/e807086 identify stale catalogs after writes/changed heads, including
+empty filtered results with a bound resource outside the displayed rows. Fresh
+review reproduced that case red, then closed correction with negative unchanged-
+head and cross-service controls. Both fixes are integrated in DATA14b8e18 and
+Linux9c61d0d;392 desktop tests/platform and strict gates pass. Native correction
+checks remain pending. No polling, automatic overwrite or persisted token added.
+

harness/release-process-editing.md

@@ -272,3 +272,23 @@ executable access was checked without launching. Both build targets are idle and
 returned to the lead. This task used no native input. Root must verify preserved
 Fit scale and the remotely scrolled region through tool/form changes and inspect
 the persistent compact-form labels on the actual application.
+
+## Actual Windows camera/owner verification and compact finding
+
+Root operated67ed8e0 at1440x900,1440x700 and1100x700. Opening the isolated source4
+model and explicit migration/save produced source5 with74 elements,13 relations,
+the same five incomplete-engineering checks and all three files retained.
+Fit28% displayed the entire chain; selecting the OR alternate kept28% scale.
+At100%, horizontal scrolling to the remote Choice/Merge region survived opening
+Two paths and Cancel. Changing owner to Navigation conversation and back reset
+the actual mounted canvas to the first Request navigation occurrence. Compact
+Traceability Artifact action wrapped and remained visible. Trial closed normally,
+exit0 and empty stderr. Source original was unchanged; only the isolated copy migrated.
+
+Native minimum-size trial found P2: pending contribution forms competed with the
+canvas inside an outer page scroll; only74px of fields could be visible. Fixf08507a
+makes the form an independent pane with pinned actions and scrollable fields,
+keeps the diagram scroll/canvas mounted and divides available height while pending.
+Real Iced layout regression covers570/770px,203/303px field viewports and retained
+page scroll open/cancel.23 focused tests and strict Clippy pass; integrated360
+desktop tests/build pass. Actual native verification of this fix remains pending.

harness/release-semantic-native.md

@@ -79,3 +79,28 @@ Windows build/test session97666 and Linux2903 exited0. Linux logs are
 message-kind-{test,clippy,build}.log in Capella2-data-linux-target. Frozen manifests
 record source/platform/hash. The Windows freeze contains an isolated copy of the
 74-object process fixture for native camera, owner-scroll and branch checks.
+
+## Constructor and keyed integration checkpoint — 2026-09-06
+
+Integrated c149f2f constructor and6fb01ae exact reset/unordered Member/Literal,
+independent reviews closed. DATA14b8e18/Linux9c61d0d pass392 desktop tests each,
+strict Clippy/fmt/release. Builds include hosted destination/catalog fixes too.
+
+Native Windows cf04ff1 trial84997: fixture01 Data Boolean→Integer Take copied
+0..100/default42 while retaining unitcm. Preview acknowledged Constructor,
+IntegerMinimum/Maximum and Default. Apply selected SA; one Undo restored Boolean
+and old history; Redo restored accepted Integer. Save retained authored comments;
+independent Rust verifier matched the complete parsed Project including history to
+expected/01-data-switch-after-primary.arcadia, with zero structural errors.
+
+Then Undo and Candidate Real: incompatible Boolean default blocked Apply; raw '-'
+lower bound survived Real→Integer→Real. Repair -1.5, max100 and default Real3.5
+enabled Apply. At actual1100x700 all fields and pinned actions were reachable;
+exact scope listed Constructor, Integer/Real min/max and Default, no retirement.
+Apply updated model/source/history together. Undo restored Booleanfalse/unitcm and
+old history, Redo restored Real bounds/default and unchanged-since-review state.
+Save succeeded; disk confirmed OA unchanged, SA Real -1.5..100/default3.5/unitcm and
+both authored comments. Independent exact candidate comparison is pending.
+Minor misleading 'Minimum count' error label reported to SEM for local correction.
+Other constructor families, reset/keyed and Linux native are not yet accepted.
+