# Private ordinary authored-name index checkpoint

Source **ee500908e3d77182ddd54e12524f9b6c6eb43b60**, separately published on
`codex/analysis-ordinary-index-956atf-20260924`. The
[accepted contract](../../analysis-ordinary-index-contract-20260924.md) is now
implemented by a consumed read-only owner that retains the complete typed
authority and adds ordinary/project headers and actual authored references.
Original canonical files, token ranges, full reference extents, ownership,
complete Project, warnings and inherited limits remain attached. No legacy
updater conversion, edit composition or public source8 activation is added.
This source is outside the published Windows prerelease.

Windows gnullvm, rustc/Cargo 1.98.1: strict core all-target Clippy and all **13 new
tests pass**. The actual listing contains229 names. Full library remains
**FAILED: 213 passed, 16 failed**, preserving all216 baseline outcomes plus13
new passes. All16 failure bodies retain their unsupported-public-source8
diagnostics. Formatting remains **FAILED** with exactly the same eight inherited
diff blocks in five files. Neither failure is reclassified as success. Linux
checks were not run.

The [independent runtime review](ORDINARY-RUNTIME-REVIEW.md) verifies all549
declared input paths against immutable Git/raw disk bytes, every actual named
outcome, original/final receipts, launcher hashes and the actual41,463,296-byte
test executable (`208e0e790627d7ab20d1fdf4a83b65ccc452b003510c8f6ae3bfb96fe57b9110`).
The [production source review](ORDINARY-SOURCE-REVIEW.md) remains applicable:
the final repairs changed only tests, their fixture and the implementation note.

The complete independent oracles cover OA/SA and Unicode/CRLF, cross-file
references with coincident coordinates, ordinary/global versus scoped parameter
names, nested explicit/implicit parents, routes/views, artifacts, traces and
historical UUID exclusion. Corruption cases reach exact ownership, whole-token,
extent, containment, uniqueness and safe-location checks. Hand-counted inherited
entry caps45/46 and91/92 reach this stage after earlier phases fit; successful
retention and small-stack success/late-failure cleanup are verified.

Preserved history matters: initial `147b247` focused execution passed9/failed4.
Three fixtures incorrectly assumed C-style block comments; the language supports
`//` comments. The fourth duplicated a physical call token before reaching the
intended duplicate-header check. Final `ee500908` uses accepted line comments
and removes the former call role in that corruption control. The category
replacement is byte-neutral: all36 authored numeric tuples remain unchanged,
with corrected fixture SHA256
`3943579866157c7b5d95ce9edcb2d643058826b9af44257557e2864f130d15fc`.
The [original oracle](ORDINARY-ORACLE.md) and its old pinned report-only scripts
remain historical; the runtime review explicitly supersedes its invalid comment
example and old runnable-fixture hash. Do not run that old pinned category script
against the repaired fixture and treat its expected pin refusal as a regression.

The archive contains **50 members**, **456,290 bytes**, SHA256
`99ee3761a77c2f634d36d4cdd0c3ec6d305cbd2f3322cf37a2f25f21e6d9fbed`.
[manifest.json](manifest.json) pins each member; [evidence.zip](evidence.zip)
contains eight initial/final gate triplets, three baseline triplets, captured
launchers, source/oracle/runtime reports, raw-byte evaluators/readbacks, two
repair diffs and the unchanged toolchain's earlier version capture. Accessible
review/script/result files here are exact mirrors of their archived bytes.
The archive builder re-read every member and verified its CRC and bytes.

Raw scripts retain their actual local directory layout. Their contents are
evidence, not an instruction to execute unreviewed code. The independent
readback checker reads Git/raw records and the current test executable without
running it; replay requires reconstructing its documented source/gate layout.
Receipts cover declared inputs and selected environment fields, not authenticated
build provenance or exhaustive environmental capture.

To rerun subject gates at the exact source with the project Windows toolchain,
use one compiler job, `CARGO_INCREMENTAL=0`, and no lifecycle/RUST_MIN_STACK
override:

```text
cargo test --locked --offline -p oa-core --lib -- --list
cargo test --locked --offline -p oa-core --lib language::analysis_source::mixed::project::ordinary_index::tests:: -- --test-threads=1
cargo test --locked --offline -p oa-core --lib -- --test-threads=1
cargo clippy --locked --offline -p oa-core --all-targets -- -D warnings
cargo fmt --all -- --check
```

Complete rename planning/output admission, scalar/structural editing, public
source8, checked persistence and graphical/API parity remain required work in
issue7. Complete occurrence indexing is one dependency toward that objective.