ARCADIA-Studio/harness/STATE.md

First release — current engineering state

Objective and phase

Direct scenario work is now in isolated codex/scenario-direct, checkout D:/CodexBuilds/Capella2-scenario-direct, base ab661f2, dedicated target D:/CodexBuilds/Capella2-scenario-target. Scope and acceptance are recorded in release-scenario-editing.md. Existing scene/order semantics and typed drafts are retained; direct drawing, explicit insertion, same-parent reorder and correlated activation rendering are implemented in d1d8f0b, with independent-review fixes in 7a66607 for stale scroll slots, actual Iced scroll coordinates, operand-specific activation segments and repeated picker cost, plus e7e37d4 for passive scroll observations during async save. DATA b35dede is integrated in dfd2e41 without conflicts. Combined Windows desktop tests pass 286/286, strict all-target desktop Clippy and optimized build pass; a copied artifact/manifest is frozen under D:/CodexBuilds/Capella2-release1-01a06e2e/ui-scenario-data-windows-dfd2e41. Exact artifact hash, before/after failures and timings are in release-scenario-editing.md. Focused independent recheck reports no remaining medium/high finding. Native Windows/Linux trials remain pending and root-owned; this branch claims no native acceptance and does not close process/chain work.

The first-release goal remains active and incomplete. Deliver usable Rust/Iced Operational Analysis and System Analysis/System Architecture, equivalent graphical, textual and REST semantics, artifact traceability, directly editable behavior, offline guidance, and Windows/Linux release evidence. Later Arcadia layers remain future releases. The full authoritative objective was reread on 2026-09-06: attachment10134df9-bea2-4c02-a820-67b53d6b86f7/goal-objective.md. PLAN.md retains the entire release scope; no subsystem acceptance completes it.

Direct state-machine editing is accepted through production316dc55. The main checkout was fast-forwarded to acceptance a8f451e. R6 data/interface contracts through b35dede are now integrated into the isolated direct-scenario checkout. Root retains final main integration and acceptance; the combined direct scenario has not yet completed native trials. Meaningful implementation and runtime progress continues; no external blocker exists.

Accepted foundations

• Core typed OA/SA semantics, validated atomic commands and ordinary history are shared by three Rust crates. Typed ports, explicit unresolved migration and original Capella observations: release-port-{contract,core,migration}.md and release-capella-workflow-benchmark.md.
• Explorer/port discovery d364d3c: Add port on participants, grouped roots, focused children, breadcrumbs, contextual paging/search and full-depth outline. Actual Windows creation,251-root/12-level trials,1100x700 and Linux reopen/font fixes: release-explorer-usability.md.
• Routing23535b4, viewport366ce44, labels65fa9ab: authored bends/labels, group movement, fold restoration, Undo/Redo, save/reopen and SVG, including minimum-size native trials. Dense full solve measured119ms; arbitrary crossings remain possible. See release-routing-verification.md and release-routing-linux.md.
• Source4e8575b: nested lexical ownership/includes, provenance-aware token writes, exact accepted source/model history, retained drafts, Save All/recovery and coupled hosted source/model revisions. Windows/Linux native and actual REST restart, stale ETag, comment-only edit and cross-file reparent passed. Full422 Windows / 425 Linux tests at that checkpoint. See release-source-integration.md.
• Direct drawing fef2e0d plus tooltip ad7feb5: OA Interaction, SA Functional and Boundary Exchange by palette click-click or drag; compatible highlights, automatic function ports, four-side draggable anchors, contextual menus and source folders. Independent pointer/tooltip findings fixed and native retested. Windows193 desktop and Linux189+4 focused tests followed earlier full485/488 suites. Scoped native Windows/Linux acceptance: release-port-drawing.md and release-context-menus.md.

Newly accepted state workspace

Production316dc55 includes typed machine views, shared persisted geometry, atomic region/symbol/state creation, group movement, direct transitions and reconnection, Internal rows, Local edges, typed detail forms, folding, placement and navigation. Architecture and Behavior view selections are separate. Drafts survive rejected source/model commits; passive camera events never apply a form.

Independent/native findings fixed: covered GPU shapes, pseudo-label/edge collision, selection-relayout drag displacement, missing typed form access, folded-content access, wrong-view placement Apply, and camera/tool leakage on machine navigation. An actual owner/view change resets gesture state and fits; returning to the same view preserves camera/tool. Exact evidence and limitations: release-state-editing.md.

Verification: full551 Windows /554 Linux workspace tests and strict workspace Clippy at e0b2210. Final316dc55:241 desktop tests, strict all-target desktop Clippy, and desktop builds on each platform; five new navigation tests included. Two guide tests passed after help changes. Source/reST/API state contracts and actual HTTP rejection/revision/source/restart tests passed earlier in the integration.

Root and independent Windows native trials covered1440x900 and1100x700 creation, nested movement, first-drag transition, endpoint/menu reconnect, invalid target, Escape, timed Internal, Local/EntryPoint, placement Apply, Undo/Redo and save/reopen. Linux native covered1440x900 creation, first transition/move, Undo/Redo, fold and saved collapsed reopen. Final316dc55 native on both platforms proved same-view camera/tool preservation and different-machine Fit/Select reset. Logs are empty.

Active R6 implementation and next actions

Checkout D:/CodexBuilds/Capella2-data-integration; branch codex/data-contract-integration, base5ce3eef+plan2bf4c54+navigation9118218. Dedicated target D:/CodexBuilds/Capella2-data-target. Contract freeze is schema/source4 with full data payload and dictionary slices together; existing typed ports remain. See release-data-implementation.md and release-data-contract.md in that checkout.

R6 core/source/desktop are frozen at ab661f2. Full Windows607 tests and Linux610 tests pass (one explicit benchmark ignored on each platform); strict workspace all-target Clippy passes on both. Optimized desktop/server Linux build also passed. Windows desktop261 tests include the bounded scenario value editor. Exact logs, binaries and runtime evidence: release-data-verification.md.

All4 R6 actual HTTP workflows pass, covering data protocols/artifact identity, rejected defaults, qualified Call/Reply paths, validation locations, source edits, reidentification, source3 migration and restart persistence. The published example's actual server responses passed served/local OpenAPI validation; obsolete shapes reject. Strict reST rendering and81 OpenAPI schemas passed.

Independent core review found association transition closure pulling unrelated types and missing empty-enum warning; both corrected and focused tests passed. Repeated per-ancestor full scans were simplified to one scan per helper call. Explicit optimized inheritance timings250/500/1000: Windows21.070/89.088/391.590ms, Linux22.381/111.662/408.129ms. These single-run empty-chain fixtures measure core validation, not general UI latency. A1000-deep chain remains a pathological cost.

Independent desktop review fixes now pass tests: a focused dictionary with24-row pages replaces unbounded inherited rows; recursive paths support explicit drill-down and imported finite paths; same-phase styles/same-exchange reselection preserve valid drafts. Read-only follow-up found no new path/style defect. Paging resets only on actual layer/document changes; its regression failed before and passes now. The bounded scenario editor replaces whole-recursion enumeration and per-field inputs with24-row browsing and a single focused value draft. The reply call picker no longer filters alternative calls using values belonging to the old exchange. Automated and independent checks pass; native scenario checks are next.

Root exclusively operates native R6. The Windows13-object data model has saved native bounds/default repair, a typed physical flow/field, allocation protocol edit, allocation removal/Undo, and inherited-owner navigation. Association endpoint labels/selectability were exercised. The1100x700 data layout has been inspected. A separate53-object recursive-operation fixture was prepared with core APIs and round-tripped for upcoming native scenario trials; fixture construction is not claimed as native authoring. See the verification note for remaining gates.

Parallel isolated work: drawing_correctness implements direct scenario gestures in Capella2-scenario-direct. data_core owns typed semantic review core and state_architecture_review owns source5/migration in Capella2-semantic-review. The typed facet C design won the bounded experiment/criticism round; its production plan and decision are recorded in that checkout. No overlapping writers or targets.

1. State evidence is committed and main fast-forwarded to a8f451e; DATA received the same evidence in c5276b1. Finish native data-authoring acceptance and bounded scenario-value authoring, then full integrated Windows/Linux verification.
2. Finish R6 core/source/desktop, integrate actual REST/schema/reST, independent semantic/correctness/UX review, Windows/Linux checks and real data authoring.
3. Implement R3 typed semantic drift/reconciliation after R6 freezes. Current baselines/reconciliation only cover prose. Use the experimentally selected typed facet review design C; the semantic integration checkout records the full scope and source5 migration plan.
4. Complete direct scenario/process gestures, persistent coverage/filters, Home/recent/recovery, hosted desktop ETag workflows and offline guidance.
5. Fresh final requirements/domain/correctness/native UX/architecture review; full Windows/Linux/MSRV checks, real runtime, reproducible docs and release packaging.

Environment and native ownership

The user explicitly reauthorized native testing after Escape. Root's f5467e5 R6 window3476204 and exec93768 closed normally after verified source migration and 55-object recursive scenario reopen; no runtime output. The property-browser replacement build b35dede has passed the root's Windows native retest. The combined direct-scenario binary is frozen for its separate pending native trial. Original Capella is present. Older protected user7210312/6228978 were absent; do not reset/save/close them if they return. Re-inventory before switching apps.

Evidence: D:/CodexBuilds/Capella2-release1-01a06e2e. State source checkout/target: D:/CodexBuilds/Capella2-state-integration and -target. Linux source/target: D:/CodexBuilds/Capella2-state-linux-review and -target. Use distinct Cargo targets per checkout; shared-cache results were previously caught and excluded.

Windows: cargo test --locked --workspace; cargo clippy --locked --workspace --all-targets -- -D warnings; cargo build --locked -p oa-desktop -p oa-server. WSL Ubuntu24.04 uses target/linux-cargo.toml and Mesa software Vulkan for native WSLg. No remote push or usage reset authorized. No broad recursive target deletion.

Latest R6 checkpoint: b35dede Windows264 desktop tests, strict Clippy, optimized build and root-owned native retest pass for the one-record property browser. Paging and location changes retain accepted model and typed expressions. f5467e5 Windows and Linux263 desktop tests, strict Clippy and optimized release passed. Native Windows source3 migration preserved comments/nesting through explicit Save All and clean source4 reopen. Native recursive55-object scenario values and paired Call/Reply history were verified; flat property paths prompted the latest fix. The independent bounded-browser review reports no remaining medium/high finding. Linux native R6 workflows remain a root-owned acceptance gate. See release-data-verification.md. Main remains a8f451e; R6 is not yet accepted.

Latest root runtime checkpoint — Computer Use stopped by user

User physically pressed Escape during the first combined-Windows capture. Root stopped all Computer Use input; new native authorization is required. Before that, Linux b35dede launched but its first capture timed out awaiting WSLg app access. The pending async question asks whether to retry Linux and approve the window. Do not interpret elapsed time as permission. Code work remains authorized.

b35dede Windows native property browser passed at1440x900 and1100x700:32-field pages showed distinct names, page/root navigation did not edit the field/expression, recursive Origin/Next coordinate/Latitude was selected, expression changed to origin.next.latitude + 0.5, Save All/reopen preserved it and the separate Destination value. The reopened properties confirmed the path/expression. Windows app1966548 closed normally; exec94220 exited0 with only newline. Frozen binary SHA256 717B8D5AFF501F42473E043BD49EE3E5E017ABBBC84AB8C3AE85AA37121FBD50. Evidence/model: ui-r6-browser-windows under the release evidence directory.

b35dede Linux264 tests, strict Clippy and optimized build passed. Frozen ELF in ui-r6-linux SHA256 EEDF02913CE69C4D5F2B820A48E375A0D22791A2CEC721D9E29F5532370B9E40. Its exec43338 is still running; last listed WSLg window4524780. No Linux R6 native interaction/visual acceptance occurred. Do not reuse old bindings without inventory.

DATA and Linux integration checkouts fast-forwarded to combined1bf8ebc (production merge dfd2e41). Windows286 tests, strict Clippy/release pass, independent scenario recheck has no medium/high finding. Combined Windows frozen binary in ui-scenario-data-windows-dfd2e41, SHA256 8BC031CF6124859D31082BB0FFB0335C406D54E12ECAD8493CE50A23923E5589, exec57994 running; first capture stopped by user, no native acceptance. Linux combined286 tests passed; Clippy/release still running in exec27433. Root owns both integration targets and native. Poll exact session/logs before recording pass.

Semantic core remains isolated and under independent review. Original five findings were fixed; four additional constructor/canonical/reset/artifact-owner findings prompted immutable independent proposals, agreement over canonical target slots, one application and final expected/prepared audits. Core is running new regressions; do not accept until independent recheck. Historical closed facts may outlive current families; current-family applicability applies to new review resolutions. A proposed stronger historical gate was withdrawn as inconsistent with that contract.

Next: finish core gates/review and process-editing design; after native permission, resume R6 Linux and combined scenario Windows/Linux workflows in their copied models. Then source5 semantic GUI/API/spec integration and remaining release milestones. No goal completion or blocked status is justified by this single native interruption.