ARCADIA-Studio/harness/STATE.md

Progress Ledger — first release

Current checkpoint: 2026-09-06 evening, after corrected reverse-transition native acceptance, teaching source/history/reopen checks, and actual Linux server build/HTTP restart acceptance. Goal active; release incomplete. The authoritative objective is C:\Users\User\.codex\attachments\10b0f701-1743-4de7-9ee1-225920e19649\goal-objective.md: a usable, feature-complete OA/SA engineering tool for Windows and Linux with graphical/source/REST parity, artifact traceability, offline guidance and independent end-state acceptance.

Workspace and ownership

• Current branch codex/release1-continuation, HEAD 2b2d2bc18bc11ca71ef8c4c5d26610939c1b1f42; source-6 continuation contains substantial uncommitted work. Integrated ancestry starts at c091f80; branch audit prevents reimplementing already integrated data, state/scenario/process, hosted and semantic work.
• Root is sole native operator. Latest process 9672 ran .local/native-qa/bin-source6-behavior-context, GUI SHA-256 F5ECAEC02BBAFBC6F3BDC6ADEB746AFE91F3A495C6D9564A68DEA41E61AC9246, and closed cleanly for the next rebuild. Corrected reverse transition and teaching Home/guide/raw guard/review/source/history/reopen passed on this binary; the newly found semantic-review canvas navigation fix is building separately.
• QEMU second gate is active, PID10880, one vCPU/2GiB/BelowNormal, launched20:33PDT with90-minute bounded budget and clean-poweroff reserve. State-contract owns guest Cargo/server runtime validation. Snapshot281files SHA256394197749a01afe5a6e911f0ad4594bfef034c0da4cdc7ffd96454354a51c5c6 includes embedded docs; predates the latest teaching/navigation corrections. WSL remains unavailable pending restart; no host restart is authorized.
• Behavior-review owns semantic-review navigation and S2 critique. State-representation completed S1 critique; state-contract owns guest Cargo and its Linux report. Guest compiler briefly paused21:31PDT for the bounded Windows navigation tests/build, with unchanged35-minute test/90-minute guest deadlines. No concurrent Cargo writers; user-local Windows environment: . .local/toolchain/env.ps1.

Completed and verified at this checkpoint

Scope	Evidence and limit
Latest Windows diagnostics and guide	Semantic filter 108 desktop + 2 core passed; full desktop 527/527 passed; strict all-target Clippy and GUI/server build passed (.local/semantic-diagnostics-final-tests.log, desktop-diagnostics-final-tests.log, diagnostics-final-clippy.log, diagnostics-final-build.log). Subsequent guide 3/3 focused tests, strict Clippy and build passed (.local/guide-navigation-{tests,clippy,build}.log). The guide test increases compiled desktop inventory to528; no full528 run or final full-workspace total is claimed.
Current artifact implementation checkpoint	Full desktop 518/518, corrected fresh artifact picker 6/6, strict all-target Clippy passed. Logs .local/source6-artifact-inspector-desktop-tests2.log, .local/source6-artifacts-final-tests2.log, .local/source6-artifacts-final-clippy3.log. Four subsequent artifact recovery falsifiers and two core absence oracles passed separately. This predates latest display corrections.
Native artifact MOVE / CREATE / DELETE	All three complete source Apply/Save, one Undo/Save and one Redo/Save oracles passed; nine saves succeeded first attempt. MOVE invalid Owner and disabled optional text, and CREATE excluded row/all eight decisions/reserved UUID survived controlled-stop recovery exactly. DELETE removed destination from identified moved-source absence while retaining the source link. Exact native report, fixture/generator instructions.
Source-6 atomic batch review	Included valid and excluded invalid raw rows survived forced-stop recovery; repaired two-source Apply and complete Save/Undo/Redo source comparisons passed. Native report.
Scenario ordered-member variant	At1100×700, Take rejected ambiguous insertion; explicit final order retained the local self-test. Complete Apply/Save, Undo/Save and Redo/Save matched the independent source oracles with only the schema5→6 header token upgrade. All three saves succeeded first attempt. Branch steps/fragment branches and this variant's crash recovery remain separate cases. Exact native report.
Native guide navigation	On current guide binary at1100×700: related Scenarios-bottom→Exchanges opens the new heading; filtering exchange retains the current topic's bottom position; Git auto-selects Build first and opens its heading. No dirty model. Root's actual native observations close these bounded scroll cases; implementation/tests remain separately scoped.
Communication means	Drawing/create/reuse and legacy reverse full-model/source/history passes are retained. Corrected reverse Apply now opens the explicitly requested OA scenario in Behavior, preserving the original four-object Architecture. Distinct oracle predicts10UUIDs/zero placements; accepted model/all3sources, Undo baseline, Redo and reopen pass. Every Save succeeded first submission. Navigation5focused tests, strict Clippy and bins build pass; compiled desktop535 is not a full535 run. Exact report, implementation.
Teaching project and Home hook	Corrected94element/62relation/5view/68trace/30source example passes4expanded direct-rustc tests. At minimum size, Home/guide actions, whole-folder guidance, invalid raw source guard/Cancel/UndoText, located intended warning, reviewed NameTake and all37file exact Undo/Redo/reopen checks passed. New semantic navigation defect is under correction; complete process/state/data/view/evidence lesson remains open. Native report.
Child/Incident and source-5 recovery	Two-row attachment recovery and complete Apply/Save/Undo/Redo passed, every save first attempt. Exact old source-5 raw/base/include/path retention, manual repair and two-file Save passed. Attachments, source-5 native, independent review.
Dense saved views	Forty-label baseline and selected real relation identities inspected; filter, duplicate/hide, original10/copy9 persistence across restart and exact model oracle passed. Additional coverage/context intersections, empty selections and Names-and-items preview/Apply/Undo observed. Minimum-size overview requires working zoom/pan. Limits remain in native evidence.
Core/source/REST integration	HTTP 48, OpenAPI 39 fixtures / 197 schemas, and source-5 focused 13 passed. Report scoped results until the final full-workspace run; do not total overlapping filters, platform reruns or new compiled-but-unrun tests. Historical aggregate accounting remains archived.
Actual Linux/MSRV core and server	Ubuntu24.04.4/x86_64/glibc2.39/ext4/Rust1.90: core38/38, patched journal4focused/42full and3explicit syscall fault cases pass on recorded snapshots. New actual server build passes34m42s including3m24s pause. Real HTTP modular import, invalid PUT unchanged source/ETag, clean SIGTERM and exact model/source/ETag restart pass on the older28-source lesson snapshot. Full server tests are running; current desktop/Linux package remain unverified. Linux report, journal contract.
Packaging foundation	Portable Windows QA staging, dependency/runtime/font/Rust notices, archive readback and clean-PATH smoke passed at earlier binaries. Package report. QA archives are not current final release artifacts.

Historical full platform/native milestones retain their original revision scope; complete prior ledger preserves all evidence links and previous environments. A test or native pass never transfers automatically to a changed executable.

Active findings and checks

Native artifact review exposed same-row conflict wording and reserved identities shown as deleted. Corrections retain typed actual-slot equality, row-addressed reservations and accepted-identity precedence; independent re-review found no further material defect. The completed108-semantic/527-desktop checks supersede the earlier interrupted run and include reserved-label/partial-creation regressions. Revised artifact wording still needs its own native observation on the current binary. Guide-scroll implementation/tests/build and the bounded native cases above passed. Diagnostic/guide report.

F1 teaching onboarding/review/history has current-binary native evidence; remaining tutorial work is scoped in its report. F2, faithful behavior-canvas SVG export, is deferred by root's scope decision: export remains architecture-only and must be described that way; no faithful scenario/process/state SVG acceptance is claimed.

Reverse scenario's first-dependency focus and five overlapping architecture placements are fixed and natively reverified. Teaching NameTake exposed a separate post-commit layer/view mismatch; a bounded shared navigation helper and4focused tests are implemented, current build pending. Minimum-size process working space is cramped; native lesson evidence records23% overview versus100% scrolling rather than claiming readability at Fit.

Independent scope reconciliation verified S1 missing contextual assembly into repeated/nested process references and S2 missing maintained interface-operation identity in parameterless messages. Isolated existing-core probes falsify the proposed workarounds. Proposed source7 contracts are not production features. Independent critique requires deterministic cache-independent admission, explicit whole-link deletion, purpose-specific analysis, and one frozen old5/6 message/checkpoint migration shared by both additions. Scope reconciliation, S1 contract, S1 critique, S2 contract.

Linux ordinary rename's empty-target replacement was independently reproduced and corrected using renameat2(RENAME_NOREPLACE) without fallback. Exact errno/no-write assertions now pass under actual syscall injection. This establishes the ext4 publication invariant, not power-loss durability, hostile ancestor protection or model-file compare-and-swap. Windows retains its no-replace API and bounded scanner retries.

Remaining gates and next actions

1. Finish semantic-review navigation tests/rebuild/native replay; preserve completed reverse/teaching oracles. Synthesize independently critiqued S1/S2 contracts before coordinated core/source7 implementation, then provide complete graphical/source/REST/recovery parity. Native-check revised reserved labels and same-row conflicts; complete uncovered tutorial workflows.
2. Close uncovered selective-view lifecycle cases; advanced ordered/process/scenario/fragment variants beyond the accepted Scenario case; typed state actions and pending Linux data/hosted/compact workflows. Implemented semantics must not be called missing merely because acceptance is outstanding; coverage audit is the baseline map, newer scoped reports supersede its old gap claims.
3. Verify complete current Linux integration suites and desktop/server build/runtime, then supported-size native workflows. The successful core/MSRV pilot is a reusable starting point, not application acceptance.
4. Run optimized/MSRV/final platform gates, strict reST/docs/example/source/OpenAPI checks, actual hosted transport variants and final migration/package checks. Rebuild portable distributions from the accepted exact tree, validate notices/runtime/content/checksums and clean-environment launch before replacing old bundles.
5. Conduct fresh independent requirements/domain/parity/architecture/runtime/UX/end-state reviews; resolve material findings. Commit/integrate authorized source with reviewable scope; remote publication is not requested. Only complete the goal when its applicable criteria are met.

Meaningful progress continues: native lifecycle and Linux no-replace uncertainty have been resolved with exact oracles. The highest-value work is current-binary validation and closing uncovered engineering workflows, not accumulating repeated historical headings or treating aggregate test counts as release completion.