ARCADIA-Studio/harness/history/2026-09-10-ledgers-before-continuation-refresh/STATE.md

Progress Ledger — first release

Active continuation — 2026-09-10

Latest source checkpoint is 8547b85 on codex/behavior-authoring-20260910. The cold one-job desktop test build has reached oa-desktop; it has not yet completed. Root retains the only local Cargo/native lease. Exact native scenario fixture/checker preparation is committed, including whole-snapshot identity comparison for Undo/Redo; compilation and native use remain pending.

The independent revised-requirements audit is release-requirements-delta-20260910.md. Current constraint expressions and unit labels are descriptive, and source includes are not maintained cross-project libraries. These remain explicit first-release gaps. Separate maximum-reasoning analysis/quantity and library design tracks are comparing precise contracts and falsifiers before production changes; their recommendations are not decisions.

External integrated tests exposed actual defects, superseding the earlier source-only B3 review below. Root corrected typed-history NotApplicable constructor seeding in 4ecad78; thirteen focused history tests await execution here. Gitea #79 distinguishes a retarget test setup error from a real same-ID selection/visible-owner navigation defect. The external scenario owner is fixing Back/OpenUse owner restoration, mounted viewport coverage and pending-draft guards alongside their workspace layout. No overlapping scenario edits here.

Both hosts now report unavailable direct Git push authentication. Anonymous fetch and authenticated Gitea MCP remain usable; exact verified Git bundles are exchanged through the separate transfer branch. No credentials are copied into the repository or conversation. External checkpoints and evidence remain scoped to their source/binary, and their current integration is not yet imported here.

The updated user goal from attachment 2f1f0002-e43c-45ba-80a8-b359f05f99d0 was read in full and copied exactly to PROJECT_GOAL.md on 2026-09-10. It now explicitly requires calculations, quantities/units and reusable model libraries, and rejects long homogeneous choice lists. Root is integrating the first release, prioritizing direct diagram authoring and behavior/scenario usability. The checkout began clean at 1797516 on codex/release1-continuation. Gitea issue #1 and Wiki Home were read; ownership and progress are coordinated there.

• Root owns integration, serialized builds, native Computer Use and these ledgers. palette_repair owns architecture authoring and diagram.rs; behavior_audit and release_audit independently inspect ergonomics and release coverage.
• The recorded palette compilation errors have local corrections pending a fresh build. Earlier 584-test evidence does not cover those corrections.
• This checkout began without the historical .local toolchain/cache/packages. Project-local Rust/Cargo 1.98.1 GNU/LLVM and verified LLVM-MinGW 20260908 (clang 23.1.1) are installed. Windows desktop dependencies are compiling. Host: four logical processors, 8 GiB RAM; builds remain serialized.
• Computer Use initialized successfully. The renewed request authorizes native evaluation; old session Escape holds and process IDs are historical. No Arcadia or Capella window is currently running.
• WSL lists no installed distribution. Linux runtime/build acceptance remains an open gate; no historical denied guest workaround is being retried.

Current branch is codex/behavior-authoring-20260910. A distinct Gitea user Codex-9e8r6t is running another root/team on a separate environment with the old build cache. Our identity is Codex-956atf. Gitea #25 and #38 acknowledge the scope split: their palette/platform/package and subsequent scenario layout work; our process/scenario adapters and typed-history work. We will publish a clearly untested coherent snapshot on this distinct branch for their warm-cache checks. No shared branch-tip push or merge has occurred here. Their reports/results must not be claimed as local validation or overwritten.

Implemented locally, awaiting compilation:

• Palette compile repair, retained inline name after rejected stale Submit, nonfinite click rejection and rename/allocation/history regressions.
• One interactive process renderer with presentation-only inferred ordered paths; first editing batch preserves adjacency atomically. Independent source review found no confirmed defect. Root added 3+ step/before-first insertion and incompatible imported conversion tests after the reviewer hit model capacity.
• Scenario Action/State/Reuse/empty Fragment tools capture clicked operand/slot and optional lifeline. Pointer-to-App, recovery, stale-event and history tests are written. A bounded exact caller/use return path and scoped mounted-scroll restoration are implemented with regressions, also untested.
• Advanced typed stored-history editor uses existing OpenAPI type descriptors; twelve focused tests cover typed selectors, historical IDs, invalid raw input, recovery and source/history. Core validation remains authoritative.
• Normative catalogs now include ExchangeCategory, ContextualLink and both Exchange trace pairs. Manual trace help and scope source version corrected; strict Docutils 0.22.2 HTML regeneration passed. OpenAPI semantic_schema.py --check --validate passed 72 fixtures and all 204 component schemas.

Reference evidence: actual Capella 7.1 scenario/lifeline/LOOP creation and saved XML are recorded in release-capella-scenario-benchmark-20260910.md; the isolated Capella process closed normally and is absent. This is not Studio acceptance.

Toolchain bootstrap exec session 20812 completed successfully: verified LLVM-MinGW 20260908 ZIP SHA256 1bcf74d06b724aeecaa6412ca85f5b26fb1da770e7cdcefa9263c9c5c3ad34b6, extracted successfully; stable 1.98.1 GNU/LLVM, rustfmt and Clippy installed. .local/toolchain/env.ps1 configures task-local Cargo/Rustup/PATH and one build job. The original full-platform dependency fetch 13108 was stopped after network timeouts; Windows-only compilation fetched its remaining dependencies. No current Rust build/test pass is established yet.

The coherent candidate 01bb52a passed cargo fmt --all and git diff --check. Direct push failed because this fresh host has no Git credentials. Authenticated Gitea MCP transferred its exact verified Git bundle through codex/behavior-transfer-20260910 (harness/transfers/behavior-01bb52a.bundle.b64), prerequisite 1797516, decoded SHA256 85A38B00207036DCB8DB24ED4A7E80B2BE670275EEB7B00413D36153322ADA5D. This UNTESTED integration snapshot lets the other host use its warm cache; transfer is not acceptance. Their broader architecture palette/Escape repair should be reconciled with our overlapping compile/stale repairs while retaining the additional invariant tests. Their measured minimum scenario canvas is too small; they own the subsequent layout implementation. Their isolated palette commit 7d1df4f was cherry-picked cleanly as aed40d7. Our additional authoring tests and scenario handlers are retained. External native/test results remain scoped to their exact source and executable.

Independent F1 review found a real optional-value cache collision in 01bb52a. The follow-up distinguishes null/scalar/list/tagged constructor identities and adds actual inner selector-event tests. Independent source recheck found no remaining collision; execution is still pending. The original full-platform fetch was stopped after network timeouts; current Windows desktop test build is exec session 51036, compiling dependencies. Root owns this Cargo lease.

Commit eb5161b adds the pure B4 lifecycle projection, ten admitted-fixture tests and current scenario/history guide wording. The module is declared only under cfg(test) pending coordinated Scene integration after the other host's scenario workspace refactor. Independent source reviews found no confirmed B3 navigation or B4 projection blocker; synthetic geometry tests do not establish actual Scene/marker/hit-test acceptance. No new Studio binary has launched here.

Latest transfer: harness/transfers/behavior-eb5161b.bundle.b64 on the transfer branch, decoded 91,268 bytes, SHA256 87F3FBA862AE3751E60E18B39C7BB02B147E4E66079F501050A709D8ADDADE6D. Full MCP readback matched local bytes. It contains all four local commits from 1797516; the other host can cherry-pick b6b76ef and eb5161b onto its existing integration. Gitea #65 records exact handoff and the Wiki title-encoding problem. Root is preparing an independent native scenario fixture/oracle through the release auditor; only harness/scenario-authoring-contract.rs and its README are owned by that worker. Generated fixtures require a later direct-rustc lease.

Actual cross-host test evidence supersedes source-only confidence: the other host's immutable pre-b6b76ef integrated artifact ran 618 tests, with 615 passing and three failures (Gitea #68). One B3 deleted/changed-caller regression is being diagnosed by their scenario/layout owner. Two F1 failures came from seeding optional UUID/text as NotApplicable via broad string-shape matching. Local 4ecad78 now recognizes only an explicit enum constructor and adds the nullable UUID/text regression; independent descriptor review clears it for execution. No assertion was weakened. Thirteen history tests now await local execution. Incremental transfer behavior-4ecad78.bundle.b64 requires eb5161b, decoded 1,464 bytes, SHA256 3A93A99AB9C727A4B685D7436C9E23FB262144580E8524623B75D2D676FDF033. Exact local and MCP readback checks pass; Gitea #76 requests warm-host reruns.

The native scenario oracle now requires both independently predicted semantic checkpoint equality and exact saved/restored Project+SourceBundle identity. Independent review caught that rediscovering fresh role IDs at each checkpoint alone could falsely accept recreated IDs on Redo; same and its adversarial self-check close that evaluator gap. It remains uncompiled/unexecuted.

Fresh requirements_delta owns only its new audit report. Early source evidence shows constraints are explicitly unexecuted expressions and units are strings without dimensional conversion; the newly explicit calculation/quantity goals must not be declared complete from this metadata. Reusable library contracts and concrete unbounded selectors are under domain/requirements review before foundational design decisions. Current behavior/native work remains useful.

Next: focused architecture_authoring_tests, behavior::topology, direct_clicked, caller-navigation and history_fields::tests, then full relevant gates and a fresh native binary. Root owns all Cargo on this host. Worker output or tests existing in source are not passes.

Gitea Actions run16 is queued for both ubuntu-latest and windows-latest with no started steps, as are older listed runs. No usable current Linux runner result is established and no duplicate dispatch was made. Progress is concrete; release acceptance remains incomplete. Older checkpoint paragraphs below retain their original revision scope.

Checkpoint publication — 2026-09-10: the user requested committing all current changes and pushing codex/release1-continuation to both origin and gitea. This is a work-in-progress snapshot. The interrupted palette-focused compilation failed with E0659 (ambiguous column! in app/architecture_authoring/palette.rs:168) and E0507 (moving the view out of an Arc in diagram.rs:624); an unnecessary-pattern-parentheses warning also remains in architecture_authoring.rs:346. The prior 584-test pass does not cover this newer palette revision. No Cargo/rustc process or local subagent was active at the publication preflight. Fix these errors and complete automated/native acceptance before packaging the redesign. Gitea coordination starts at issue #1 and the project Wiki; older evidence below retains its original scope.

Latest priority checkpoint — Capella consultation and redesign: the user rejected the large creation buttons and explicitly requested consulting the installed Capella. Native control resumed for that consultation in a disposable Capella 7.1 workspace. Actual palette, F2 rename and activity allocation were exercised; saved XML confirms allocation distinct from ownership. The horizontal creation/connection rows are being replaced with a compact expandable palette and inline naming. This supersedes the Escape hold and toolbar-fix proposal below. New implementation, native acceptance and a fresh user build remain pending. Observed benchmark, alternatives and acceptance criteria. The first-release goal remains active.

Latest checkpoint: basic-editing v1 passed full desktop584/584, Windows binaries, format and strict all-target Clippy. Native v1 D8CFAA confirmed direct contextual named Entity creation at100%, and found a22px placement shift caused by the pending toolbar changing canvas height. The user pressed Escape at the attempted Undo; that action did not execute. Desktop control is paused again. Process9600 remains the isolated unsaved QA application; do not overwrite its binary or presume a clean close. Code-only placement fix is continuing. Exact v1 evidence and remaining acceptance. This supersedes the resumed-control state below; the first-release goal remains incomplete.

Superseding priority checkpoint: the user explicitly said “Resume desktop checks” and rejected the focus on advanced review before basic diagram editing. Isolated native checks resumed and reproduced the global creation catalog, placeholder creation/camera jump and noisy review. Contextual named creation and compatible layer-transition destinations are now being implemented and tested. Their new executable has not yet been accepted. Current priority and scoped evidence. The older Escape hold and next-step priorities below are superseded; historical binary/test results retain their original scope.

Current checkpoint: 2026-09-07. The requested Windows development preview is built and packaged with its runtime, documentation, notices and complete examples. Latest Fit6, two existing scroll/branch regressions, full desktop570/570, workspace bins, formatting and strict workspace/all-target Clippy pass. Corrected server56/56 retains its earlier unchanged-server scope. Packaged DC50 GUI launched and the OA graph Fit overview was observed at1444×932 and1102×932; minimum-height and pending-form native acceptance remain open. The user stopped Computer Use with Escape; do not resume native control without renewed authorization. Native Linux core436passed/2ignored remains verified; corrected Linux server and full Linux GUI build/runtime remain open. The fresh Linux desktop cross-build passed on Rust1.90 in2m20s using the preserved cache; ELF and all37 teaching files are verified. Three later guest boots failed the early IO-APIC timer check before SSH/tests; the exact-kernel workaround was then rejected by automatic approval review before launch. All task VM processes are stopped. Goal active; release incomplete. The authoritative objective is C:\Users\User\.codex\attachments\10b0f701-1743-4de7-9ee1-225920e19649\goal-objective.md: a usable, feature-complete OA/SA engineering tool for Windows and Linux with graphical/source/REST parity, artifact traceability, offline guidance and independent end-state acceptance.

Workspace and ownership

• Current branch codex/release1-continuation, checkpoint 4b6b5fc197 commits290files of source6 work and evidence. Bounded checkpoint audit verified65pinned manifest entries and145exact staged/working fixture/archive files; .gitattributes protects their measured line endings. Integrated ancestry starts at c091f80; branch audit prevents reimplementing already integrated work. New source7 implementation is authorized but not yet accepted.
• Historical6BAB native scope (superseded in rendering by BCC1 and Fit by DC50): acceptance binary .local/native-qa/bin-source7-acceptance/arcadia-studio.exe SHA256 6BAB6CDE7D31326F3C3CF7342D9B25FB6ADA032864BBE8104625E5EC9736283B follows the Windows433/55/561 and strict/build gates below. Reset and ReadStatus each passed exact complete model/source Save/Undo/Redo and reopening with the correct derived Reply allocation30/31. OA caller→First.B passed exact persistence/history/reopen; routing remains open. Process11060 closed cleanly; isolated old6 recovery process11240 also closed after its complete source/JSON/raw-draft pass. Old5 process5244 subsequently passed exact30-source/full-JSON recovery and raw-workspace comparison. Current7 process8224→10420 passed invalid nested-link draft crash recovery; completing the recovered SA X→[R3,Inner]/B link passed exact model/two-source Save/Undo/Redo and saved reopening. Those historical native processes closed; the later BCC1 routing and DC50 Fit evidence is recorded separately below. Native evidence.
• Completed bounded90minute Linux gate: one-job Rust1.90,455-file immutable snapshot SHA256 7104946c89b2be7a1a030fdff47cb4405bacf05357d68cf35d181e860f55c279, launched07:02:43UTC, deadline08:32:43UTC. Server compilation passed17m10s; unit2/2 and HTTP50/51 passed, with one504-vs-412 test assertion reproduced in an isolated rerun. Its two-second read/PATCH checks passed, but later persisted-state assertions were not reached. This establishes a timing-dependent fixture/deadline mismatch, not a production locking defect. Native core completed436passed/0failed/2ignored across40targets, Rust1.90, compile23m03 and1992seconds total; all455 source pre/post checks passed. The two ignored cases are optional inheritance scaling and explicit strace fault injection (earlier separately scoped injection passes remain historical). All artifacts were copied before sync/poweroff; QEMU6280, launcher5000 and seed816 were absent08:13:56UTC. Current Linux report. Earlier Linux evidence retains its older snapshot scope. WSL remains pending restart; no host restart is authorized.
• Windows session5735 completed all six gates with exit0: focused prepared-HTTP and cancellation, full server56/56 in68.78s, format10.44s, strict workspace/all-target Clippy99.60s, bins102.22s. Status/logs: .local/source7-post-routing-gates-status.json. Distinct GUI BCC1FC6DB68123C9D3A43CE53AA8EF59E33C54080632C104C99ED13270D5333F process8568 passed the scoped corrected routing checks and closed cleanly. HTTP evaluator correction, routing correction, native details. These passes precede the now-tested Fit/layout correction.
• The requested Windows preview is dist/ArcadiaStudio-preview-source7-20260907-x86_64-pc-windows-gnullvm/arcadia-studio.exe; its565-file ZIP includes all37 teaching-folder files and has SHA256 1fac10b30daf2f8e1dac29e9469485e4bea142e77ff5a13e4c9d1e41ff03abb2. The adjacent provenance records actual source/binary hashes. This is a development profile, not an optimized final release. Latest gates are in .local/source7-latest-preview-status.json; full desktop570/570 completed in198.82s test time,200.63s command time, exit0 in .local/source7-latest-full-desktop-status.json. Initial Fit4/2 failures exposed real zero-size-slot remounting; corrected constructors pass unchanged expectations. Fit review, development summary.
• Computer Use is stopped. Read-only inspection initially found preview9148 and second GUI8044 live; later9148 exited without agent intervention, while8044 remained untouched. No GUI control/closure is authorized for background verification. The cross-compiler lease ended after the successful142.766s monotonic run; no cross processes remain. The Linux worker completed a bounded headless guest experiment and released the lease. Three boots (same configuration twice, then Normal boot priority) reached terminal IO-APIC timer panic before SSH/Cargo; all task VM trees stopped and exact evidence was preserved. Exact matching kernel/microcode extraction passed without changing base/overlay hashes; automatic approval review rejected preparation/launch of the transient no_timer_check experiment as “blocked by policy.” No fourth boot or corrected tests ran. No task VM is live; see the preserved boot evidence. Cross-build report.

Current source build and stopped runtime gate

The guide-only followup compiled successfully with locked Windows workspace bins in12.70s Cargo/12.82s command, exit0. Status .local/source7-guide-current-build-status.json records guide SHA256 80A6797051FB28E767F2AB5DD2F335ABCD9F3E5F3A75C731CDE46D8B90D5C92E; resulting GUI SHA256 327FBDF734716A7F1AF2874183D46A531A8F429BA1A478E83A3E7F2EB1D6248B. Formatting and independent actual-label review pass. This later debug artifact does not replace the user-facing packaged DC50 preview, its archive or earlier native evidence. No full570 rerun is claimed for the text-only followup.

Previous goal turn made progress by confirming full570 tests and handing off the package/summary. This continuation produced the successful Linux GUI build/ELF evidence, validated purpose oracles, corrected/built guide text, and concrete guest-boot evidence. Goal remains active/incomplete. The denied direct-boot action must not be split or retried to bypass automatic review; no new Linux job is running or scheduled.

Latest Linux build and purpose-oracle evidence

Linux GUI snapshot458files source7-20260907T102528493108Z has archive SHA256 9b10aa8457a5371367f7e24a0b2260b63c19fed69873d98a3972062a744503d7. Run 20260907T1025486926611Z passed locked/offline Rust1.90 zigbuild, both source checks and independent ELF/package readback. GUI72,953,296bytes SHA256 330A3872D48EBF24AD21E6D4FA13CB6098BEBB3CB7FF82A2E082925CCF3DD346; ELF64PIE, glibc requirements≤2.28, all37 lesson files exact. Actual Linux GUI runtime is still unverified. Subsequent guide-label text is excluded from both published Windows and this frozen Linux preview.

Extended native checker source7-native-contract-incidence.exe SHA256 16994DC437F5CCC5E5F6FBB4212C03449F2389AE4615FA98B2930B3637468EE3 compiled with warnings denied in4.05s during a coordinated short lease. OA Exchange and SA CommonWork self-checks pass: exact contextual assembly, unchanged precedence, wrong direction/work rejection, caller-only exchange coverage and stable source update. Separate43-element/10-relation incidence fixture baseline passes; all original golden hashes and preserved OA-link/Reset accepted cases remain exact. Independent review found no material issue. Cases and reproducible native steps. Native purpose authoring/history remains pending.

Completed and verified at this checkpoint

Scope	Evidence and limit
Historical source6 diagnostics and guide	Semantic filter 108 desktop + 2 core passed; full desktop 527/527 passed; strict all-target Clippy and GUI/server build passed (.local/semantic-diagnostics-final-tests.log, desktop-diagnostics-final-tests.log, diagnostics-final-clippy.log, diagnostics-final-build.log). Subsequent guide 3/3 focused tests, strict Clippy and build passed (.local/guide-navigation-{tests,clippy,build}.log). The guide test increases compiled desktop inventory to528; no full528 run or final full-workspace total is claimed.
Current artifact implementation checkpoint	Full desktop 518/518, corrected fresh artifact picker 6/6, strict all-target Clippy passed. Logs .local/source6-artifact-inspector-desktop-tests2.log, .local/source6-artifacts-final-tests2.log, .local/source6-artifacts-final-clippy3.log. Four subsequent artifact recovery falsifiers and two core absence oracles passed separately. This predates latest display corrections.
Native artifact MOVE / CREATE / DELETE	All three complete source Apply/Save, one Undo/Save and one Redo/Save oracles passed; nine saves succeeded first attempt. MOVE invalid Owner and disabled optional text, and CREATE excluded row/all eight decisions/reserved UUID survived controlled-stop recovery exactly. DELETE removed destination from identified moved-source absence while retaining the source link. Exact native report, fixture/generator instructions.
Source-6 atomic batch review	Included valid and excluded invalid raw rows survived forced-stop recovery; repaired two-source Apply and complete Save/Undo/Redo source comparisons passed. Native report.
Scenario ordered-member variant	At1100×700, Take rejected ambiguous insertion; explicit final order retained the local self-test. Complete Apply/Save, Undo/Save and Redo/Save matched the independent source oracles with only the schema5→6 header token upgrade. All three saves succeeded first attempt. Branch steps/fragment branches and this variant's crash recovery remain separate cases. Exact native report.
Native guide navigation	On current guide binary at1100×700: related Scenarios-bottom→Exchanges opens the new heading; filtering exchange retains the current topic's bottom position; Git auto-selects Build first and opens its heading. No dirty model. Root's actual native observations close these bounded scroll cases; implementation/tests remain separately scoped.
Communication means	Drawing/create/reuse and legacy reverse full-model/source/history passes are retained. Corrected reverse Apply now opens the explicitly requested OA scenario in Behavior, preserving the original four-object Architecture. Distinct oracle predicts10UUIDs/zero placements; accepted model/all3sources, Undo baseline, Redo and reopen pass. Every Save succeeded first submission. Navigation5focused tests, strict Clippy and bins build pass; compiled desktop535 is not a full535 run. Exact report, implementation.
Teaching project and Home hook	Corrected94element/62relation/5view/68trace/30source example passes4expanded direct-rustc tests. Minimum-size Home/guide, raw-source guard, reviewed NameTake and exact source/history/reopen pass. Navigation fix is reverified. Additional data/interface/type drill-down, saved-view comparisons, invalid-view guard and typed Entry action selection pass. Fold/unfold and function rename/Undo/Redo each match complete model/all30source oracles, five first-submission saves; saved reopen retains the Entry target identity. Complete process/scenario/reuse/evidence lesson remains open. Native report.
Child/Incident and source-5 recovery	Two-row attachment recovery and complete Apply/Save/Undo/Redo passed, every save first attempt. Exact old source-5 raw/base/include/path retention, manual repair and two-file Save passed. Attachments, source-5 native, independent review.
Dense saved views	Forty-label baseline and selected real relation identities inspected; filter, duplicate/hide, original10/copy9 persistence across restart and exact model oracle passed. Additional coverage/context intersections, empty selections and Names-and-items preview/Apply/Undo observed. Minimum-size overview requires working zoom/pan. Limits remain in native evidence.
Core/source/REST integration	Fresh --all-targets core run: 433 passed/1 ignored,44 target summaries, exit0 in138.72s; fresh server run: 55/55,4 summaries, exit0 in64.74s. Logs .local/source7-core-all-targets.log, .local/source7-server-all-targets.log; exits/timings in .local/source7-current-gates-status.json. These supersede the earlier combined core count and pre-budget-fix HTTP51 checkpoint. OpenAPI 72fixtures/204schemas/90leaves and both strict reST renders pass. Core checkpoint, API integration.
Source7 desktop authoring and recovery	Latest routing3/3 and full desktop 564/564 pass; routing checkpoint records exact logs. Earlier full desktop 561/561 passed, zero failed/ignored,263.39s in .local/source7-desktop-full-tests2.log. The initial560/1 run exposed canvas scroll-state loss when a new conditional navigation control shifted its widget; a fixed navigation container corrected it, and the unchanged regression passed. Coverage includes qualified5, operation3 (selected Async request fields), semantic source7 facets/omission3, recovery8, legacy source5 13, artifact search2 and focus guard1. Exact old-version enum/cache-path intent rejection and raw text retention are covered. The complete-scope endpoint picker preserves access beyond512; canvas preview remains bounded. Guide now accurately describes attachment/artifact reconciliation and artifact filtering. Desktop checkpoint, recovery.
Windows strict/build checkpoint and native7	Strict workspace/all-target Clippy passed2m50s; root observed final format exit0/empty log. Three affected semantic tests passed3.46s after equivalent lint edits; native build exit0 recorded in .local/source7-current-gates-status.json. These earlier results scope the6BAB binary, not the later routing test binary or pending new strict/build sequence. Reset/ReadStatus full model/all-source Save/Undo/Redo/reopen pass. OA First.B persistence passes but routing acceptance remains open. Old6 Recover preserved the complete30-file bundle/workspace/Ports DTO, exact spaces/Unicode/fingerprint/reserved identity; Cancel/Save as and JSON export passed full independent source/model equality. Original seed unchanged. Old5 complete accepted/raw recovery, exact repair/30-source Save and full-model export pass. Current7 invalid nested draft crash recovery plus completed link Save/Undo/Redo/reopen pass; rendering still uses the older binary. Native report.
Current Linux source7 and cross-built probe	Frozen native server compilation passed17m10s; unit2/2 and HTTP50/51, with one timing-dependent504-vs-412 assertion reproduced twice. No complete server pass; later targets not claimed. Native core436passed/0failed/2ignored; VM cleanly off08:13:56UTC. Separately, the complete Windows macro/build-script cross-build probe's hash-verified ELF executed successfully on Linux; this is neither a full desktop build nor GUI acceptance. Native Linux gate, cross-build probe.
Historical Linux/MSRV core and server	Ubuntu24.04.4/x86_64/glibc2.39/ext4/Rust1.90: core38/38, patched journal4focused/42full and3explicit syscall fault cases pass on recorded snapshots. Actual server build passes34m42s including3m24s pause. Real HTTP modular import, invalid PUT unchanged source/ETag, clean SIGTERM and exact model/source/ETag restart pass on the older28-source lesson snapshot. Full server test command timed out while compiling; zero tests executed. That gate shut down cleanly21:53:56; the separate current gate has the scoped results above. Current desktop/Linux package unverified. Linux report, journal contract.
Packaging foundation	Portable Windows QA staging, dependency/runtime/font/Rust notices, archive readback and clean-PATH smoke passed at earlier binaries. Package report. QA archives are not current final release artifacts.

Historical full platform/native milestones retain their original revision scope; complete prior ledger preserves all evidence links and previous environments. A test or native pass never transfers automatically to a changed executable.

Active findings and checks

Native artifact review exposed same-row conflict wording and reserved identities shown as deleted. Corrections retain typed actual-slot equality, row-addressed reservations and accepted-identity precedence; independent re-review found no further material defect. The completed108-semantic/527-desktop checks supersede the earlier interrupted run and include reserved-label/partial-creation regressions. Revised artifact wording still needs its own native observation on the current binary. Guide-scroll implementation/tests/build and the bounded native cases above passed. Diagnostic/guide report.

F1 teaching onboarding/review/history has current-binary native evidence; remaining tutorial work is scoped in its report. F2, faithful behavior-canvas SVG export, is deferred by root's scope decision: export remains architecture-only and must be described that way; no faithful scenario/process/state SVG acceptance is claimed.

Reverse scenario's first-dependency focus/overlapping architecture placements and teaching NameTake's separate layer/view mismatch are fixed and natively reverified. Latest NameTake4focused tests, strict alltargetClippy28.26s and binsbuild50.50s pass; no full539desktop pass is claimed. Navigation evidence. Minimum-size process working space is cramped; native lesson evidence records23% overview versus100% scrolling rather than claiming readability at Fit.

Independent scope reconciliation verified S1 missing contextual assembly into repeated/nested process references and S2 missing maintained interface-operation identity in parameterless messages. Isolated existing-core probes falsify the proposed workarounds. Root ratified the jointly critiqued source7 integration decision, including deterministic cache-independent admission, whole-link deletion, purpose-specific analysis, exact Call-derived operation/Reply identity and one frozen old5/6 checkpoint migration. These contracts now have implemented core/source/REST/desktop/recovery paths and the current automated gates above; remaining native7 and current Linux acceptance remain incomplete. Scope reconciliation.

Linux ordinary rename's empty-target replacement was independently reproduced and corrected using renameat2(RENAME_NOREPLACE) without fallback. Exact errno/no-write assertions now pass under actual syscall injection. This establishes the ext4 publication invariant, not power-loss durability, hostile ancestor protection or model-file compare-and-swap. Windows retains its no-replace API and bounded scanner retries.

Remaining gates and next actions

1. Fit implementation/review and automated gates are complete, including full570 desktop tests. Finish its native minimum-height/Focus/pending-form checks when native control resumes. Preserve completed BCC1 routing and old5/old6/current7 recovery/source/history oracles. Complete remaining current-binary S1/S2 purpose workflows and teaching cases; operation allocation deletion remains subject to independent channel validation. Native-check revised reserved labels and same-row conflicts. The later guide-only control-label correction passed formatting, independent review and the fresh workspace-binary build; it awaits the next packaged/native release snapshot.
2. Close uncovered selective-view lifecycle cases; advanced ordered/process/scenario/fragment variants beyond the accepted Scenario case; typed state actions and pending Linux data/hosted/compact workflows. Implemented semantics must not be called missing merely because acceptance is outstanding; coverage audit is the baseline map, newer scoped reports supersede its old gap claims.
3. Verify complete current Linux integration suites and desktop/server build/runtime, then supported-size native workflows. The successful core/MSRV pilot is a reusable starting point, not application acceptance.
4. Preserve current strict Clippy/format/reST/example/source/OpenAPI results and rerun affected checks after changes. Complete optimized/MSRV/final platform gates, actual hosted transport variants and final migration/package checks. Rebuild portable distributions from the accepted exact tree, validate notices/runtime/content/checksums and clean-environment launch before replacing old bundles.
5. Conduct fresh independent requirements/domain/parity/architecture/runtime/UX/end-state reviews; resolve material findings. Commit/integrate authorized source with reviewable scope; remote publication is not requested. Only complete the goal when its applicable criteria are met.

Meaningful progress continues: native lifecycle and Linux no-replace uncertainty have been resolved with exact oracles. The highest-value work is current-binary validation and closing uncovered engineering workflows, not accumulating repeated historical headings or treating aggregate test counts as release completion.