ARCADIA-Studio/harness/STATE.md

# Progress Ledger — first release

Current checkpoint: 2026-09-06 evening, after corrected reverse-transition native acceptance, teaching source/history/reopen checks, and actual Linux server build/HTTP restart acceptance. **Goal active; release incomplete.** The authoritative objective is `C:\Users\User\.codex\attachments\10b0f701-1743-4de7-9ee1-225920e19649\goal-objective.md`: a usable, feature-complete OA/SA engineering tool for Windows and Linux with graphical/source/REST parity, artifact traceability, offline guidance and independent end-state acceptance.

## Workspace and ownership

- Current branch `codex/release1-continuation`, HEAD `2b2d2bc18bc11ca71ef8c4c5d26610939c1b1f42`; source-6 continuation contains substantial uncommitted work. Integrated ancestry starts at `c091f80`; [branch audit](release-branch-integration-20260906.md) prevents reimplementing already integrated data, state/scenario/process, hosted and semantic work.
- Root is sole native operator. Latest process **9672** ran `.local/native-qa/bin-source6-behavior-context`, GUI SHA-256 `F5ECAEC02BBAFBC6F3BDC6ADEB746AFE91F3A495C6D9564A68DEA41E61AC9246`, and closed cleanly for the next rebuild. Corrected reverse transition and teaching Home/guide/raw guard/review/source/history/reopen passed on this binary; the newly found semantic-review canvas navigation fix is building separately.
- QEMU second gate is active, PID10880, one vCPU/2GiB/BelowNormal, launched20:33PDT with90-minute bounded budget and clean-poweroff reserve. State-contract owns guest Cargo/server runtime validation. Snapshot281files SHA256394197749a01afe5a6e911f0ad4594bfef034c0da4cdc7ffd96454354a51c5c6 includes embedded docs; predates the latest teaching/navigation corrections. WSL remains unavailable pending restart; no host restart is authorized.
- Behavior-review owns semantic-review navigation and S2 critique. State-representation completed S1 critique; state-contract owns guest Cargo and its Linux report. Guest compiler briefly paused21:31PDT for the bounded Windows navigation tests/build, with unchanged35-minute test/90-minute guest deadlines. No concurrent Cargo writers; user-local Windows environment: `. .local/toolchain/env.ps1`.

## Completed and verified at this checkpoint

| Scope | Evidence and limit |
|---|---|
| Latest Windows diagnostics and guide | Semantic filter **108 desktop + 2 core** passed; full desktop **527/527** passed; strict all-target Clippy and GUI/server build passed (`.local/semantic-diagnostics-final-tests.log`, `desktop-diagnostics-final-tests.log`, `diagnostics-final-clippy.log`, `diagnostics-final-build.log`). Subsequent guide **3/3** focused tests, strict Clippy and build passed (`.local/guide-navigation-{tests,clippy,build}.log`). The guide test increases compiled desktop inventory to528; no full528 run or final full-workspace total is claimed. |
| Current artifact implementation checkpoint | Full desktop **518/518**, corrected fresh artifact picker **6/6**, strict all-target Clippy passed. Logs `.local/source6-artifact-inspector-desktop-tests2.log`, `.local/source6-artifacts-final-tests2.log`, `.local/source6-artifacts-final-clippy3.log`. Four subsequent artifact recovery falsifiers and two core absence oracles passed separately. This predates latest display corrections. |
| Native artifact MOVE / CREATE / DELETE | All three complete source Apply/Save, one Undo/Save and one Redo/Save oracles passed; **nine saves succeeded first attempt**. MOVE invalid Owner and disabled optional text, and CREATE excluded row/all eight decisions/reserved UUID survived controlled-stop recovery exactly. DELETE removed destination from identified moved-source absence while retaining the source link. [Exact native report](release-artifacts-native-20260906.md), [fixture/generator instructions](fixtures/release1-native/artifacts/README.md). |
| Source-6 atomic batch review | Included valid and excluded invalid raw rows survived forced-stop recovery; repaired two-source Apply and complete Save/Undo/Redo source comparisons passed. [Native report](release-current-native-verification.md). |
| Scenario ordered-member variant | At1100×700, Take rejected ambiguous insertion; explicit final order retained the local self-test. Complete Apply/Save, Undo/Save and Redo/Save matched the independent source oracles with only the schema5→6 header token upgrade. All three saves succeeded first attempt. Branch steps/fragment branches and this variant's crash recovery remain separate cases. [Exact native report](release-current-native-verification.md). |
| Native guide navigation | On current guide binary at1100×700: related Scenarios-bottom→Exchanges opens the new heading; filtering `exchange` retains the current topic's bottom position; `Git` auto-selects Build first and opens its heading. No dirty model. Root's actual native observations close these bounded scroll cases; [implementation/tests](release-semantic-conflict-diagnostics-20260906.md) remain separately scoped. |
| Communication means | Drawing/create/reuse and legacy reverse full-model/source/history passes are retained. Corrected reverse Apply now opens the explicitly requested OA scenario in Behavior, preserving the original four-object Architecture. Distinct oracle predicts10UUIDs/zero placements; accepted model/all3sources, Undo baseline, Redo and reopen pass. Every Save succeeded first submission. Navigation5focused tests, strict Clippy and bins build pass; compiled desktop535 is not a full535 run. [Exact report](release-communication-native-20260906.md), [implementation](release-behavior-transition-context-20260906.md). |
| Teaching project and Home hook | Corrected94element/62relation/5view/68trace/30source example passes4expanded direct-rustc tests. At minimum size, Home/guide actions, whole-folder guidance, invalid raw source guard/Cancel/UndoText, located intended warning, reviewed NameTake and all37file exact Undo/Redo/reopen checks passed. New semantic navigation defect is under correction; complete process/state/data/view/evidence lesson remains open. [Native report](release-teaching-native-20260906.md). |
| Child/Incident and source-5 recovery | Two-row attachment recovery and complete Apply/Save/Undo/Redo passed, every save first attempt. Exact old source-5 raw/base/include/path retention, manual repair and two-file Save passed. [Attachments](release-attachments-native-20260906.md), [source-5 native](release-source5-native-recovery-20260906.md), [independent review](release-source5-checkpoint-independent-review-20260906.md). |
| Dense saved views | Forty-label baseline and selected real relation identities inspected; filter, duplicate/hide, original10/copy9 persistence across restart and exact model oracle passed. Additional coverage/context intersections, empty selections and Names-and-items preview/Apply/Undo observed. Minimum-size overview requires working zoom/pan. Limits remain in [native evidence](release-current-native-verification.md). |
| Core/source/REST integration | HTTP **48**, OpenAPI **39 fixtures / 197 schemas**, and source-5 focused **13** passed. Report scoped results until the final full-workspace run; do not total overlapping filters, platform reruns or new compiled-but-unrun tests. Historical aggregate accounting remains archived. |
| Actual Linux/MSRV core and server | Ubuntu24.04.4/x86_64/glibc2.39/ext4/Rust1.90: core38/38, patched journal4focused/42full and3explicit syscall fault cases pass on recorded snapshots. New actual server build passes34m42s including3m24s pause. Real HTTP modular import, invalid PUT unchanged source/ETag, clean SIGTERM and exact model/source/ETag restart pass on the older28-source lesson snapshot. Full server tests are running; current desktop/Linux package remain unverified. [Linux report](release-linux-validation-options.md), [journal contract](release-linux-journal-publication.md). |
| Packaging foundation | Portable Windows QA staging, dependency/runtime/font/Rust notices, archive readback and clean-PATH smoke passed at earlier binaries. [Package report](release-windows-package-review.md). QA archives are not current final release artifacts. |

Historical full platform/native milestones retain their original revision scope; [complete prior ledger](history/2026-09-06-ledgers-before-consolidation/STATE.md) preserves all evidence links and previous environments. A test or native pass never transfers automatically to a changed executable.

## Active findings and checks

Native artifact review exposed same-row conflict wording and reserved identities shown as deleted. Corrections retain typed actual-slot equality, row-addressed reservations and accepted-identity precedence; independent re-review found no further material defect. The completed108-semantic/527-desktop checks supersede the earlier interrupted run and include reserved-label/partial-creation regressions. Revised artifact wording still needs its own native observation on the current binary. Guide-scroll implementation/tests/build and the bounded native cases above passed. [Diagnostic/guide report](release-semantic-conflict-diagnostics-20260906.md).

**F1** teaching onboarding/review/history has current-binary native evidence; remaining tutorial work is scoped in its report. **F2**, faithful behavior-canvas SVG export, is deferred by root's scope decision: export remains architecture-only and must be described that way; no faithful scenario/process/state SVG acceptance is claimed.

Reverse scenario's first-dependency focus and five overlapping architecture placements are fixed and natively reverified. Teaching NameTake exposed a separate post-commit layer/view mismatch; a bounded shared navigation helper and4focused tests are implemented, current build pending. Minimum-size process working space is cramped; native lesson evidence records23% overview versus100% scrolling rather than claiming readability at Fit.

Independent scope reconciliation verified **S1** missing contextual assembly into repeated/nested process references and **S2** missing maintained interface-operation identity in parameterless messages. Isolated existing-core probes falsify the proposed workarounds. Proposed source7 contracts are not production features. Independent critique requires deterministic cache-independent admission, explicit whole-link deletion, purpose-specific analysis, and one frozen old5/6 message/checkpoint migration shared by both additions. [Scope reconciliation](release-scope-reconciliation-20260906.md), [S1 contract](release-chain-assembly-contract-probe-20260906.md), [S1 critique](release-chain-assembly-contract-independent-review-20260906.md), [S2 contract](release-interface-operation-contract-20260906.md).

Linux ordinary rename's empty-target replacement was independently reproduced and corrected using `renameat2(RENAME_NOREPLACE)` without fallback. Exact errno/no-write assertions now pass under actual syscall injection. This establishes the ext4 publication invariant, not power-loss durability, hostile ancestor protection or model-file compare-and-swap. Windows retains its no-replace API and bounded scanner retries.

## Remaining gates and next actions

1. Finish semantic-review navigation tests/rebuild/native replay; preserve completed reverse/teaching oracles. Synthesize independently critiqued S1/S2 contracts before coordinated core/source7 implementation, then provide complete graphical/source/REST/recovery parity. Native-check revised reserved labels and same-row conflicts; complete uncovered tutorial workflows.
2. Close uncovered selective-view lifecycle cases; advanced ordered/process/scenario/fragment variants beyond the accepted Scenario case; typed state actions and pending Linux data/hosted/compact workflows. Implemented semantics must not be called missing merely because acceptance is outstanding; [coverage audit](release-current-coverage-20260906.md) is the baseline map, newer scoped reports supersede its old gap claims.
3. Verify complete current Linux integration suites and desktop/server build/runtime, then supported-size native workflows. The successful core/MSRV pilot is a reusable starting point, not application acceptance.
4. Run optimized/MSRV/final platform gates, strict reST/docs/example/source/OpenAPI checks, actual hosted transport variants and final migration/package checks. Rebuild portable distributions from the accepted exact tree, validate notices/runtime/content/checksums and clean-environment launch before replacing old bundles.
5. Conduct fresh independent requirements/domain/parity/architecture/runtime/UX/end-state reviews; resolve material findings. Commit/integrate authorized source with reviewable scope; remote publication is not requested. Only complete the goal when its applicable criteria are met.

Meaningful progress continues: native lifecycle and Linux no-replace uncertainty have been resolved with exact oracles. The highest-value work is current-binary validation and closing uncovered engineering workflows, not accumulating repeated historical headings or treating aggregate test counts as release completion.