workflow.json

{
  "status": "local-process-pilot",
  "review_manifest": "docs/standards-review/2026-09-05-approved/manifest.json",
  "review_manifest_sha256": "4c93d3ad68e41d27c4b48be0fa34722db75aa0e79ebf2486388c99cd586e3d76",
  "interfaces": {
    "docs/NATIVE-C.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence. Mapped owner construction uses the component FS-BROKER-INIT contract and AT-BROKER-INIT; this is host/size qualification, not an additional kernel launch profile. Separate AENFS005/ABI31 guarded owner: AT-OWNER-EXEC; matched complete owner and actual static shell/helper build only; native qualification separate.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-CHANNEL.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-COEXIST.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-COMMAND-IO.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-COMMAND-RUNNER.md": {
      "status": "proposal",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-CONNECTIONS.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-FILE-IO.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-FILES.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-INHERITANCE-REVIEW.md": {
      "status": "proposal",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-INHERITED-LAUNCH.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-INIT.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-IO.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-LAUNCH.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-LOOKUP.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-MEMORY.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-PROCESS.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-PROGRAM.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-SHARED-FILES.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-SUPERVISION.md": {
      "status": "experimental-reference",
      "validation": "Run the applicable native command in this reference; review identity against its retained evidence.",
      "gap": "Manual publication, independent reference review and packaged offline lookup remain open."
    },
    "docs/NATIVE-CONSOLE.md": {
      "status": "experimental-reference",
      "validation": "Use the pinned console commands for their existing profiles; selected native-tty-mode-probe additionally uses the current query/model/profile controls and separately reviewed fixed native mode experiment in issue122. Match exact artifacts; private qualification inputs are separate. The selected native-tty-signal-probe also requires exact-target preflight/post, safe mask-return delivery and the matched issue125 consumer. Selected canonical policy reuses the existing MODE/SIGINT kernel closure; issue128 owns its Rust/C consumer and exact byte evidence.",
      "gap": "Independent consumer adoption, interrupt service and TTY semantics remain open."
    },
    "docs/NATIVE-BLOCK.md": {
      "status": "experimental-reference",
      "validation": "Run block_smoke.py --native, --native --regions and --native --regions --rust-worker with the explicit strict SDK and tool lock.",
      "gap": "Filesystem service/consumer adoption, async recovery and physical hardware pending."
    },
    "docs/NATIVE-TASKQ.md": {
      "status": "experimental-reference",
      "validation": "Use the NATIVE-TASKQ paired lifecycle invocation in both memory profiles, including exact failure controls and supervisor replacement; retain source/import/layout evidence and run zig build test.",
      "gap": "Independent production consumer review, full-engine live resource budgets and filesystem integration remain open."
    },
    "docs/NATIVE-CAT.md": {
      "status": "experimental-reference",
      "validation": "AT-CAT-ROLES under the full command suite; source-matched evidence required.",
      "gap": "Toybox admission/runtime/finalization and independent consumer acceptance remain open."
    },
    "docs/NATIVE-SHELL-STARTUP.md": {
      "status": "experimental-reference",
      "validation": "Run pending/disposition host state and frame-composition tests through zig build test; standalone Debug/ReleaseSafe commands are in the reference. Run the full command-runner suite including cat-roles-startup, shared public/internal mask, synchronous frame/restorer, nested/register/red-zone, return-payload and saved-target mapping checks, preempted RF normalization and forged-frame rejection controls and dup2 replacement/flag/close controls with a pinned SDK and tool lock.",
      "gap": "Independent SDK/userland acceptance, custom signal delivery, fork/exec/wait and full dash remain open."
    },
    "docs/NATIVE-INIT-COMMAND.md": {
      "status": "experimental-reference",
      "validation": "Run the five source-built handoff cases with the pinned SDK/tools; verify frozen imports and exact terminal/cleanup results.",
      "gap": "Sys-init adapter, composed image size/stack, independent acceptance, sustained boot and shutdown remain open."
    },
    "docs/NATIVE-ENTROPY.md": {
      "status": "experimental-reference",
      "validation": "Run the sealed private native entropy recipe and existing host/hardware regressions as documented.",
      "gap": "SDK facade/adoption, restart/latency/health policy and independent review remain open."
    },
    "docs/NATIVE-THREAD-REUSE.md": {
      "status": "experimental-reference",
      "validation": "Run the sealed lifetime recipe and affected older pair/pthread/kernel regressions.",
      "gap": "Parent-only two-slot fixture; engine resources, production SDK/TCB and independent review remain open."
    },
    "docs/NATIVE-THREAD-ORIGIN.md": {
      "status": "experimental-reference",
      "validation": "Run the sealed nested-creation recipe and affected older pair/pthread/kernel regressions.",
      "gap": "Two-slot bare-child fixture; production TCB/SDK, engine resources and independent review remain open."
    },
    "docs/NATIVE-BACKING.md": {
      "status": "experimental-reference",
      "validation": "Run the boot reservation packet and host/selected kernel regressions.",
      "gap": "Reservation probe only; native aliases, scalable metadata/admission and independent review remain open."
    },
    "docs/NATIVE-EXTERNAL-BACKING.md": {
      "status": "experimental-reference",
      "validation": "Run the source-matched embedded/external memory, pair/pthread and private origin/reuse/entropy matrices plus isolated pool/M4 regressions recorded in the reference; run zig build test.",
      "gap": "No larger owner/live-worker capacity, general VM implementation, cross-core/physical hardware, full engine or independent SDK/reader adoption."
    },
    "docs/NATIVE-SERVICE-MEMORY.md": {
      "status": "experimental-reference",
      "validation": "Run the one-owner memory packet and complete affected native memory/thread/entropy/M4 selection; zig build test.",
      "gap": "Trial memory budget only; live-worker/engine admission, independent SDK/reader, hardware and R1 assembly remain open."
    },
    "docs/NATIVE-SERVICE-SCANS.md": {
      "status": "experimental-reference",
      "validation": "Run the larger-owner scan packet, selected native memory/M4 and zig build test.",
      "gap": "No wall-clock WCET, stack high-water proof, larger live-worker admission, full engine, independent reader/SDK or R1 assembly."
    },
    "docs/NATIVE-SERVICE-WORKERS.md": {
      "status": "experimental-reference",
      "validation": "Run the service worker packet, full affected memory/thread selection and zig build test.",
      "gap": "Trial live budget only; native engine/TCB/demand, independent reader/SDK, production latency and R1 assembly remain open."
    },
    "docs/NATIVE-SERVICE-MUSL.md": {
      "status": "experimental-reference",
      "validation": "Run frozen native-service-musl evidence recipes and zig build test.",
      "gap": "Private producer experiment; production port, native engine demand/startup, independent consumer and release remain open."
    },
    "docs/NATIVE-SERVICE-RETIREMENT.md": {
      "status": "experimental-reference",
      "validation": "Run the frozen service retirement recipes and zig build test.",
      "gap": "Private primary-driven reaper; full engine/progress/production port/independent acceptance remain open."
    },
    "docs/NATIVE-SERVICE-REAPER.md": {
      "status": "experimental-reference",
      "validation": "Run frozen native-service-reaper recipes and zig build test.",
      "gap": "Private bounded cleanup worker; worker-origin creation, full engine, SDK/independent consumer and R1 remain open."
    },
    "docs/NATIVE-SERVICE-ORIGIN.md": {
      "status": "experimental-reference",
      "validation": "Run frozen native-service-origin recipes and zig build test.",
      "gap": "Phased fixed-batch creation only; dynamic creation/reuse, production port, full engine and independent SDK/R1 remain open."
    },
    "docs/NATIVE-SERVICE-DYNAMIC.md": {
      "status": "experimental-reference",
      "validation": "Run frozen native-service-dynamic recipes and zig build test.",
      "gap": "Private bounded creation/cleanup/reuse; production runtime/SDK sizing, engine, independent consumer and R1 remain open."
    },
    "docs/NATIVE-SERVICE-COPY.md": {
      "status": "experimental-reference",
      "validation": "Run frozen native-service-copy recipes and selected maintained regressions; zig build test.",
      "gap": "Only fixed native mask/descriptor inputs; production SDK/reader, full engine latency and independent consumer/R1 remain open."
    },
    "docs/NATIVE-SERVICE-PINS.md": {
      "status": "experimental-reference",
      "validation": "Run frozen native-service-pins recipes and selected maintained regressions; zig build test.",
      "gap": "Private mapping pin cost/reuse; production SDK/reader, full engine resources/providers and independent consumer/R1 remain open."
    },
    "docs/NATIVE-CLOCKS.md": {
      "status": "experimental-reference",
      "validation": "python3 scripts/libc_clock_smoke.py --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test; retained raw source/wait probes use current inputs, historical archive replay retired.",
      "gap": "BSP q35 only; UTC/TSC/physical/SMP, POSIX timed-condition/SDK adoption, full engine and independent acceptance remain open."
    },
    "docs/NATIVE-ZSH-APPLICATION.md": {
      "status": "experimental-reference",
      "validation": "Issue69 selected host plan: actual-path unittest test_fs_application_profile.py, affected kernel models/guards, actual Zsh/envelope parser and configured kernel-check footprint; final zig build test with exact private prerequisites/current associations.",
      "gap": "No guest, native heap/stack/IRQ/copy latency, TTY/jobs/persistence or ISO qualification. Private SDK/artifact receipts remain local."
    },
    "docs/NATIVE-AF09-DRAIN.md": {
      "status": "experimental-reference",
      "validation": "Issue75 owner-approved closed control, separate implemented source/reader review, actual kernel-body/default guard tests and prospective writer/empty-reader controls. Fresh component/target and major-handoff gates remain separate.",
      "gap": "Matched final current qualifications, complete target fit/preparation and later native disposition/guest witnesses remain acceptance gates; no release readiness."
    }
  },
  "tools": {
    "scripts/check_workflow.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/deps.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/display.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "excluded-internal",
      "reason": "Private experiment/build helper; use the owning documented workflow. No shipped CLI claim; re-review if exposed as a public command."
    },
    "scripts/emulator.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/image.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "excluded-internal",
      "reason": "Private experiment/build helper; use the owning documented workflow. No shipped CLI claim; re-review if exposed as a public command."
    },
    "scripts/io_smoke.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/launch_smoke.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/lifecycle.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "excluded-internal",
      "reason": "Private experiment/build helper; use the owning documented workflow. No shipped CLI claim; re-review if exposed as a public command."
    },
    "scripts/memory_probe.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "excluded-internal",
      "reason": "Private experiment/build helper; use the owning documented workflow. No shipped CLI claim; re-review if exposed as a public command."
    },
    "scripts/memory_smoke.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/native_smoke.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/regression.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/reproduce.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/smp_supervisor.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "excluded-internal",
      "reason": "Private experiment/build helper; use the owning documented workflow. No shipped CLI claim; re-review if exposed as a public command."
    },
    "scripts/supervised_smoke.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "blocked-not-written",
      "reason": "Developer-facing tool has Markdown usage; mdoc and independent walkthrough are pending before documentation release."
    },
    "scripts/user.py": {
      "reference": "docs/DEVELOPMENT.md",
      "manual": "excluded-internal",
      "reason": "Private experiment/build helper; use the owning documented workflow. No shipped CLI claim; re-review if exposed as a public command."
    },
    "scripts/console_smoke.py": {
      "reference": "docs/NATIVE-CONSOLE.md",
      "manual": "blocked-not-written",
      "reason": "Markdown transport reference; independent walkthrough and manual pending."
    },
    "scripts/block_smoke.py": {
      "reference": "docs/BLOCK-DEVICE.md",
      "manual": "blocked-not-written",
      "reason": "Opt-in hardware experiment has Markdown usage; independent manual review pending."
    },
    "scripts/native_image_smoke.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "blocked-not-written",
      "reason": "Developer image-admission experiment; Markdown usage below, independent manual review pending."
    },
    "scripts/thread_smoke.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "blocked-not-written",
      "reason": "Bounded experimental thread suite; independent walkthrough and mdoc remain pending."
    },
    "scripts/pipeline_capacity.py": {
      "reference": "docs/NATIVE-CONNECTIONS.md",
      "manual": "blocked-not-written",
      "reason": "Private capacity fixture has Markdown usage; independent walkthrough and manual remain pending."
    },
    "scripts/entropy_smoke.py": {
      "reference": "docs/ENTROPY-DEVICE.md",
      "manual": "blocked-not-written",
      "reason": "Private BSP hardware experiment has Markdown usage; independent manual and hardware review pending."
    },
    "scripts/libc_clock_smoke.py": {
      "reference": "docs/NATIVE-CLOCKS.md",
      "manual": "blocked-not-written",
      "reason": "Private actual-musl timed-condition/sleep conformance; production SDK and independent walkthrough remain pending."
    },
    "scripts/service_clock_smoke.py": {
      "reference": "docs/NATIVE-SERVICE-WORKERS.md",
      "manual": "blocked-not-written",
      "reason": "Private 82-worker clock capacity conformance; SDK/engine and independent walkthrough remain pending."
    },
    "scripts/service_libc_clock_smoke.py": {
      "reference": "docs/NATIVE-CLOCKS.md",
      "manual": "blocked-not-written",
      "reason": "Private actual-musl 82-worker elapsed-time conformance; maintained SDK/engine and independent walkthrough remain pending."
    },
    "scripts/service_runtime_smoke.py": {
      "reference": "docs/NATIVE-CLOCKS.md",
      "manual": "blocked-not-written",
      "reason": "Private sealed runtime intake, empty READ/read-write engine startup and actual file-vdev/Rust region qualification; no pool, production service or public SDK acceptance.",
      "validation": "Private --pool-zpl-write and --pool-zpl-recover require isolated build-only namespace diagnostics. Compile explicit WRITE7 or READ1 controller/envelope/ABI14 kernel; neither permits guest execution or user-selected modified media."
    },
    "scripts/zpl_pair.py": {
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "manual": "excluded-internal",
      "reason": "Private bounded ZPL and filesystem-service qualification; not a public operational service or arbitrary-media runner. Old writers60s6000/readers30s3000 remain. Explicit separate storage-lifetime selects AENBD005 owner27 with unchanged engine26/AF06 for one120s writer,6500-tick idle and post-idle I/O; other limits fixed.",
      "validation": "Prepare and admit exact pristine/writer/fresh-reader artifacts before execution; verify actual kernel/cfg/profile/SDK/producer/oracle identities. Only explicit storage-lifetime normal directories may use120s writer; readers30s3000, old modes unchanged. Frozen file/media/export/drain/reclaim/stop/join gates; no automatic retries or archives."
    },
    "scripts/zpl_namespace.py": {
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "manual": "excluded-internal",
      "reason": "Fixed private seven-image namespace qualification; no public filesystem API or media selection.",
      "validation": "Prepare all seven before VM, fixed one-transaction writers60s/6000/readers30s/3000, original symbol origins/static frames/seals, preceding stopped writer plus fresh reader and exact media admit each internal seed; stop on failure, joined-VM compact cleanup. The --file-sizes selection reuses seven profiles for nonzero shrink, initialized extension and existing two-record repeated writes; source/label/role/witness/actual file-length seals precede exact seeded media and fresh recovery. The exclusive --eight-writes mode selects the approved fixed eight-record/10240-byte observer, source/count/budget seals, full intermediate hashes, ninth sticky-capacity denial and old-default byte equality; all other limits and seven-image recovery gates remain. The exclusive --write-lifetimes mode keeps the native eight-write workload and all limits, but selects one epoch/pin-protected successful record with permanent error/device/summary retention and8192 combined bytes; actual guarded hook source, retirement FFI origins, context consumption, stale/busy/overflow rejection and old-mode equality precede VM.",
      "gap": " Separate exact36-member namespace-service selection adds no operational acceptance."
    },
    "scripts/fs_launch.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "blocked-not-written",
      "reason": "Build-only static filesystem owner; Markdown command/limits and focused controls are maintained. Native consumer, mdoc and independent review remain open."
    },
    "scripts/fs_session.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "excluded-internal",
      "reason": "Private fixed filesystem/SESSION native qualification; no installed user command or release acceptance."
    },
    "scripts/fs_init_intake.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "excluded-internal",
      "reason": "Read-only exact ELF/raw owner inspection before the pending sys-init delivery; no guest, lifecycle policy or launch authorization."
    },
    "scripts/fs_metadata.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "excluded-internal",
      "reason": "Separate private READ-only Rust metadata/original-decoder disk qualification; no installed command, new client ABI or release acceptance."
    },
    "scripts/fs_metadata_service.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "excluded-internal",
      "reason": "Separate private AF07 consuming qualification; no installed command, AF06 repin or release acceptance."
    },
    "scripts/fs_metadata_launch.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "excluded-internal",
      "reason": "Separate build-only AF07 owner composition/intake; no installed CLI, old pin update or native acceptance. Markdown commands/limits and scoped internal CLI exception maintained."
    },
    "scripts/fs_af07_inputs.py": {
      "reference": "docs/NATIVE-C.md",
      "manual": "excluded-internal",
      "reason": "Private offline dependency refresh; no guest or released-pin adoption. Exact selected ABI31 qualification is a separate reviewed component runner; re-review before installed exposure."
    },
    "scripts/fs_context_launch.py": {
      "reference": "userland/docs/proposals/FS-CWD.md",
      "manual": "excluded-internal",
      "reason": "Private offline AF08 directory/FILE03 build and input checks; no guest or released/default-pin update. Installed/manual/independent acceptance remains separate."
    },
    "scripts/fs_context_inputs.py": {
      "reference": "userland/docs/proposals/FS-CWD.md",
      "manual": "excluded-internal",
      "reason": "Private offline AF08 directory/FILE03 build and input checks; no guest or released/default-pin update. Installed/manual/independent acceptance remains separate."
    },
    "scripts/fs_home_launch.py": {
      "reference": "userland/docs/proposals/FS-HOME-PREP.md",
      "manual": "excluded-internal",
      "reason": "Explicit AF09 offline composition with current producer and helper/clock receipts, actual origins and kernel loader admission. No guest, default-pin update or release acceptance."
    },
    "scripts/fs_home_inputs.py": {
      "reference": "userland/docs/proposals/FS-HOME-PREP.md",
      "manual": "excluded-internal",
      "reason": "Explicit AF09 owner/shell/helper reconstruction, measured fit and current kernel parser admission; no guest, default-pin update or persistence acceptance."
    },
    "scripts/check_fs_home_prep.py": {
      "reference": "userland/docs/proposals/FS-HOME-PREP.md",
      "manual": "excluded-internal",
      "reason": "Bounded offline preparation guards and typed independent reader checks with compact retained attempts; no guest or persistence acceptance."
    }
  },
  "launch_profiles": {
    "--command-runner": "docs/NATIVE-COMMAND-IO.md",
    "--file-io": "docs/NATIVE-FILE-IO.md",
    "--inherited-launch": "docs/NATIVE-INHERITED-LAUNCH.md",
    "--shared-files": "docs/NATIVE-SHARED-FILES.md",
    "--connections": "docs/NATIVE-CONNECTIONS.md",
    "--program": "docs/NATIVE-PROGRAM.md",
    "--coexist": "docs/NATIVE-COEXIST.md",
    "--process": "docs/NATIVE-PROCESS.md",
    "--lookup": "docs/NATIVE-LOOKUP.md",
    "--init": "docs/NATIVE-INIT.md",
    "--writable-files": "docs/NATIVE-FILES.md",
    "--files": "docs/NATIVE-FILES.md",
    "--channel": "docs/NATIVE-CHANNEL.md",
    "--init-large": "docs/NATIVE-INIT.md",
    "--init-composed": "docs/NATIVE-INIT.md"
  },
  "test_groups": [
    {
      "id": "AT-HOST",
      "reference": "docs/DEVELOPMENT.md",
      "invariants": "Loader bounds; capability/memory/IPC lifetime; frame/wait models; pure exec candidate preservation/reset without publication; standards pin rejection; pure bounded CLOEXEC descriptor preparation, local holder releases and rejected-input preservation; private pipe core FIFO/backpressure, canonical replies, staged holders, terminal release, stale-generation rejection and pending-aware retirement (host only); null-profile four-binding CLOEXEC preparation keeps null distinct from copied stdin, rejects invented counts and leaves live inputs unchanged (host-only, no native open route); suspend-frame preparation separates temporary handler mask from restored original mask, preserves EINTR and rejects invalid stack writes (host-only, no suspend syscall or scheduler integration); opt-in native suspension adds terminal-derived SIGCHLD, pending-before-entry libc checks and unchanged wait.sh helper7/parent0/backend17 twice with six reclaims; disabled route rejects parent233/owner1950; forced race, stale-parent and parked-stop controls remain pending; scratch backend canonical records, read/write rights, retained bytes, allocation-before-truncate, stale/foreign lifetime and retired-slot rejection (host transitions and no_std compilation only; not yet wired to shell); scratch open-description owner shares offsets across authenticated parent/child holders, closes backend only after final holder, reserves before truncate, rejects stale child epochs and poisons uncertain replies without replay (host composition only); private scratch descriptor gateway validates root/binding/canonical records; C open adapter checks grants, flags, capacity-before-send, CLOEXEC and malformed-reply poison (host witness only; native descriptor/fork table integration pending); private exec handshake fragments1\u201316, EAGAIN preservation, one operation per poll, idempotent completion and malformed opcode/image/slot/generation/padding rejection before reply (mock transport only)",
      "command": "zig build test --cache-dir .zig-cache --global-cache-dir .zig-cache/global",
      "oracle": "All discovered Zig and Python tests and offline checks pass; no zero-test or missing-tool success",
      "gaps": "Models do not establish native isolation; no bounded parser fuzz runner yet",
      "budget_seconds": 900,
      "owner": "Aether maintainer; standing complete-host budget in PROJECT; implementing contributor retains and triages each run",
      "historical_budget_note": "The following historical record preserves the then-current policy. The current AT-HOST budget and PROJECT owner decision govern subsequent complete host gates; the old exception remains consumed.",
      "historical_af09_host_gate": {
        "issue": "https://github.com/gonz0w/Aether/issues/2",
        "date": "2026-10-25",
        "attempt": "private attempt05",
        "status": "passed; one-run exception consumed",
        "aggregate_seconds": 900,
        "elapsed_seconds": 530.184,
        "python_tests": 976,
        "child_seconds": 180,
        "diagnostic_bytes_per_stream": 4194304,
        "scope": "Private complete unfiltered gate, final source/tools/accepted legacy pair,9115 inputs/six artifacts/owned cleanup; no guest. Attempts01-04 remain failed. Not public replay or standing permission; budget_seconds remains300."
      }
    },
    {
      "id": "AT-BOOT-SMP",
      "reference": "docs/CONTRIBUTING.md",
      "invariants": "Per-core authority, fault replacement, stale transport, backing zeroing, rendered output",
      "command": "python3 scripts/regression.py",
      "oracle": "Seven cases with exact marker/panic/context and pixel expectations",
      "gaps": "Physical RTX 3060, hardware failure containment and long soak not verified",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-COMMAND-RUNNER",
      "reference": "docs/NATIVE-COMMAND-IO.md",
      "invariants": "Scoped launch and two-binding authority; actual libc I/O; terminal kind; consumed close; selected reply faults poison the connection without byte publication or further channel calls; malformed second bootstrap binding publishes neither descriptor; complete malformed launch frames reject without receipts and permit valid retry; pre-admission EOF rejects at the exact drained prefix length; opt-in six-argument startup carrier validates and copies without widening native Args; collected result mapping preserves normal status and native fault identity; combined carrier forwards exact child argv/environment before mapped completion; runner-local empty-output witness requires explicit closes, unchanged backend bytes, zero child admission and exactly four reclaims across two generations; separate AEOUT001 runner roles validate before publication and deliver exact text to independently read back bounded sinks; deterministic zero/EIO/ENOSPC/consumed-close errors require exact prefix, observed failure, exit1, no replay and complete independently verified cleanup; actual zero/eight-byte reply cuts poison client traffic and require exact post-terminal owner alias retirement before backend cleanup; AEOUT001 malformed field categories publish no bindings and a capacity-validation bypass is rejected independently; AERIO001 denial witnesses require actual request/errno, no child admission, exact stderr and reservation-quota restoration; composed denial diagnostic failures preserve actual errno, require status1 and independently consume all four aliases, with post-terminal owner retirement after lost replies; AERIO001 child success requires retained delegated input after parent close, independent child output, consumed collection, exact backend readback and six reclaims; selected four-role nonzero/fault mapping preserves raw terminal kind, retires remaining child aliases only after terminal/EOF, and forwards copied AERUN001 arguments to an independent child observer; RL return coverage includes short writes for statuses0/2/64, forbidden help launch and prior-generation collection rejection",
      "command": "python3 scripts/launch_smoke.py --command-runner --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees; private native pipe FIFO/EOF/backpressure and interrupted-create cleanup are covered by AT-CONNECTIONS; public pipe/SDK integration and actual substitution remain unqualified; selected opt-in SIGPIPE schedules are covered by AT-CONNECTIONS",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-FILE-IO",
      "reference": "docs/NATIVE-FILE-IO.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --file-io --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-INHERITED-LAUNCH",
      "reference": "docs/NATIVE-INHERITED-LAUNCH.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --inherited-launch --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SHARED-FILES",
      "reference": "docs/NATIVE-SHARED-FILES.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --shared-files --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CONNECTIONS",
      "reference": "docs/NATIVE-CONNECTIONS.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile; native exec descriptor preparation/CLOEXEC removal and retained alias offset; missing/partial exec final-close receipt requires confirmed stop before reclaim; exec bootstrap/table stalls deny application readiness and require confirmed stop; exec bootstrap EOF/malformed rejection preserves exact terminal and cleanup outcomes; cross-process exec holders preserve shared position and backend lifetime until confirmed final close; peer-first normal/fault termination preserves surviving holders and requires exact terminal before fault cleanup; incomplete shared close receipts keep exec parked and require all affected domains stopped before reclaim; private musl execve staging preserves error conversion, argument delivery and non-returning successful replacement; caller-mask guard restores failure state and keeps successful replacement blocked until descriptor installation; composed public fork/exec/wait preserves parent holders, shared position, child identity and observed replacement status, rejecting CLOEXEC leakage and false wait status; bounded post-fork incremental dispatch permits child exec/I/O during parent blocking wait in two request orders, rejecting foreign references and premature wait completion; pre-fork file/wait requests preserve positions through admission and reject false no-child success and foreign references; explicit AENMX002 capacity preserves old-version limits and mapping protections; pinned actual dash explicit subshell command preserves startup authority, stdio, CLOEXEC removal and real wait3 status with exact skip-main/leak/status controls; explicit source-built native dash ordinary command selects existing forkshell, preserves the disabled upstream vfork branch and retains the prior shell lifecycle/FD/status checks; serial dash shares one UART backend across two sessions using native one-byte input fallback and preserves denied generation reuse; a healthy original console parent cleans up independently of exit value and resumes stdin after child collection; opt-in ABI17 pipe probe carries five-binding fork v2, authenticated endpoint transfer, full-buffer progress, EOF before wait and six real reclaims; premature EOF and retained terminal writer reject with named states; INT32_MIN create reply rejects before errno negation and FD publication, with no retry and terminal-before-retirement witness; interrupted create replies at zero/one/31 bytes require EIO, mask preservation, no FD publication or retry, terminal-based holder release and three complete parent/backend lifetimes; retained-holder mutant rejects retirement; a real child UD2 after a17-byte write prefix preserves256 buffered bytes through EOF before wait, discards only the confirmed-terminal partial frame, reports SIGILL and completes six reclaims; retained-frame and false-normal-status controls reject; a complete blocked pipe write is discarded only after capability stop and exact terminal observation, preserving256 bytes to EOF before collection; skipped-stop and retained-pending-frame controls reject with zero reclaims; opt-in native SIGPIPE posts once after validated EPIPE, preserves masks/errno, handles ignored/handled/blocked/coalesced signals and pending-ignore discard, and observes real default signal13 termination directly and after unblock; missing post/poll controls reject; actual dash command substitution uses pipe/fork/dup2/EOF/wait3 and forwards exact outer stdout to the independent backend across two lifetimes; v1 header and false wait status reject; repeated dash substitutions retain one parent while advancing pipe/child/freeze generations, retiring after EOF and wait ACK; fresh builtin-only shell verifies backend reuse; serial pipe profile reads commands only from scoped console backend, retains EAGAIN requests without advancing offsets, resumes prompts after acknowledged child collection and shares UART across two shell sessions Opt-in copied-child SIGCHLD/sigsuspend: unchanged dash wait.sh; forced pending-before-entry and terminal-after-observed-park, one handler/EINTR/original-mask return, retained wait status and two generations. Omitted park must reject owner2330 with zero reclaims. Private supervisor query exposes only a parked bit under the existing handle authority. Suspend lifecycle: confirmed parked stop clears state, repeats preserve terminal cause, parent channel reaches EOF, retired query/stop handles reject; ignored or temporarily blocked SIGCHLD preserves parking through child exit; repeated child stop after handler completion preserves child status and must not repost. Each success reclaims six domains across two generations; skipped stop rejects owner2331 before child completion. An injected duplicate self-post after the repeated-stop boundary rejects parent236/owner1950 with zero reclaims. Stale-parent rendezvous: replacement generation2 installs/blocks SIGCHLD before old child1 exits, polls for zero old deliveries, then its own child2 wakes it normally; six total reclaims. Old query/stop handles reject after replacement. An injected pending post rejects replacement237/owner1950 after exactly three reclaims. Failed suspend-frame entry: three insufficient-stack positions reject EINVAL with original mask, zero handlers and unchanged 1024-byte canary; normal-stack retry consumes the retained child notification exactly once. A valid-stack control rejects parent238/owner1950 with child72 and zero reclaims.; the opt-in failed-exec prototype forwards missing and present-without-image-grant routes to the owner, preserves denied-child copied references and rollback state, and requires actual127/126 child outcomes plus parent0/backend17 and four reclaims; full qualification is tracked in STATE; opt-in scratch backend preflight checks real IPC create/write/reopen, rights and stale references over two lifetimes; dropped-write and stale-epoch controls reject before shell descriptor adoption; scratch owner composition uses real backend IPC to qualify shared holder offsets, last-holder close and independent read descriptions; offset and early-close mutants reject2503 before native FD-table adoption; live C scratch open/fcntl/read/write/close exercises shared alias offsets and independent opens before copy; owner verifies AB readback and empty holders, with offset/CLOEXEC controls; scratch close EIO poisons",
      "command": "python3 scripts/launch_smoke.py --connections --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json; freeze positives require repeated cancellation or stop and exact terminal order; six reclaims, except four in the unsupported signal-action/runner-local profile; skipped parking/stale-token acceptance reject1710/1712 with zero reclaims; private copy, local libc child rebinding with omission controls, and copy-profile generation-bound set_tid_address with registration isolation checks isolated continuation/grants/anonymous mappings and staged rollback with six reclaims; sharing/ownership/zeroing mutants reject1821/1820 or named rollback invariant; inherited-stream copy uses real startup FD10/CLOEXEC and shared backend position/lifetime across two generations, terminal order0=71/2=72/1=17 with six reclaims; private-position and early-close mutants reject1903/1952 with zero reclaims; rejected receipt/completion and confirmed child stop recover parent FD10/position with six reclaims; omitted receipt/child gate/parent gate/stop reject1961/1963/1962/1964 before reclaim; injected pre-copy ENOMEM preserves frozen source, closes staged endpoints, cancels matching sequence and preserves parent FD10/input position; replacement slot generation remains available; leaked endpoint/premature backend close/omitted cancel reject1972/1952/1973 before reclaim; missing/partial child receipt/acknowledgment hits bounded readiness limit, then verified stop and parent recovery with six reclaims; zero-padded partial ack/omitted stop reject1982/1981 before reclaim; shared backend malformed reply blocks both client aliases with EIO, confirmed backend stop before six reclaims; alias bypass/omitted stop reject1992/1993 before reclaim; missing/17-byte backend replies use bounded shared recovery, false padding rejects source254/owner1992 and omitted stop rejects1993; uncertain write/final close require shared blocking and confirmed stop; replay rejects backend124/owner1994 or1995, false close success child255/owner1996, omitted stop1993 before reclaim; missing/17-byte write and close replies retain shared uncertainty, padding rejects source254/1992 or child255/1996, missing-reply omitted stop1993; incomplete final parent/child completion contains both clients before draining peer request, idle backend17 and six reclaims; padding2001/omitted stops2002 or2003 reject before reclaim; nine invalid client descriptor preparations send no plan, source78/backend17 and six reclaims over three generations; skipped validation2010/leaked reservation2011 before reclaim; preparation mask held through completion and restored on success/rejection/rollback with nonzero seed; skipped entry/rejection restore client79/2010, parent or child restore79/1950 before reclaim Explicit native-copy-signals checks private dispositions, empty child pending state, parent delivery, inherited handler return and rollback; disabled opt-in246/1800, dropped records247/1820, copied pending248/1820 and lost parent pending248/1821 reject before reclaim. Copied-handler R12/XMM14 restoration, invalid private payload rejection/repair and nonlocal escape retain positive lifecycles; omitted corruption or bad saved register/FP rejects child250/1820, omitted escape mask child249/1820 before reclaim. Signal/descriptor composition requires completed publication, repaired identity/auxv/references and private FD10 state before handler-local dup/close; success and rollback keep six reclaims; early restore, corrupt decoded completion or stale child refs/missing post reject client79/1950 before reclaim. Live-handler preparation/receipt/completion rejection restores mask and errno through an observer with zero FD operations, preserving normal recovery; omitted abort selection or descriptor access rejects client79/2010 or1960 before reclaim. Live-handler missing/partial receipt, readiness and final completion retain confirmed-stop containment, parent recovery and six reclaims; padding and omitted-stop controls require 1982/1981/2001/2002/2003 with zero reclaims. Public musl fork: two returns, inherited CLOEXEC, libc TID repair, mask/errno and shared offsets; known rollback/denial and missing-repair/premature-flag controls. Public fork live signals and real atfork reverse/forward callback order, libc repair before delivery, failure unwinding; reversed registration/missing child post/omitted repair require client81/owner1950 and zero reclaims. Public waitpid: pending WNOHANG, PID/options errors, checked EFAULT without consumption, normal/NULL collection and repeat ECHILD; wrong status/premature consumption require client82/owner1950 and zero reclaims. Retained wait distinguishes exit134, actual #UD(kind2/detail134) and SIGTERM(kind4/detail15), with no core bit; fault/signal-as-exit controls require parent82/owner1950 and zero reclaims. Missing/partial wait headers, short status and lost/malformed ACK replies require EIO, mask restoration, retained-versus-consumed owner state and no retry traffic over two generations/six reclaims; bypassing both poison guards rejects2024, false ACK success parent82/2023 before reclaim. Source-built wait3/wait4 retain collection and reject non-NULL rusage before output/traffic; four positives repeat six reclaims, omitted usage gate rejects parent82/1950 before reclaim; independent SDK adoption remains separate. Native exec image gate: rejected admission preserves old TLS/stack through cancellation, committed image remains parked until matching publication, stable PID/argv/env/fresh TLS, retained query and six reclaims; early-publication/stale-token controls reject2031/2032 before reclaim; valid-endpoint copying of unpublished images rejects EBUSY without mutation, bypass control rejects2035 and allocation/cleanup errors are distinct2036. No Unix FD/CLOEXEC claim.; real dash explicit subshell requires child72/parent72/backend17 twice and six reclaims; skip-main parent72/1950, CLOEXEC leak child224/2130 and corrupted wait parent73/2130 require zero reclaims; ordinary-command candidate child72/parent72/backend17 twice and six reclaims; unconfigured branch must reject before reclaim, leaked CLOEXEC child224/2130 and false wait parent73/2130; serial dash requires two actual prompts, host command/child input exchanges,16/24/2 stream byte totals and six reclaims; original tee input rejects2140 before child admission, wrong child input224/2130 with zero reclaims; resumed serial sessions require four prompts, separate post-child commands, real status72 output, parent0/7,22/27/4 byte totals and six reclaims; old cleanup gate parent0/2131 with zero reclaims and wrong second exit parent8/2130 with two reclaims reject; one serial dash parent runs three external children with slot2 generations1\u20133, stable PPID5, four prompts,36/51/8 byte totals and six reclaims; collected children are reclaimed before further admission; stale copy token rejects2151 and parent-generation bootstrap rejects child224/1950 on child2 after exactly one reclaim; actual builtin stdout-to-stderr redirection and restoration precede three external commands, with72/60/19 byte totals, four prompts and six reclaims; raw inactive FD metadata in fork/exec requests rejects2150/2120 with zero reclaims while live-entry validation remains strict; dash pipe positive verifies pipe and backend bytes pipe\\n, real child0/parent0/backend17 and six reclaims; header2174 and false status parent1/owner2176 reject with zero reclaims; repeated substitution stdout pipe\\npipe\\n then fresh shell clean\\n, six real reclaims; stale freeze token2179 and stale pipe receipt child80/owner2180 reject after exactly one reclaim; serial substitution types four commands at four prompts, verifies two pipe lines and one clean line, six real terminal/reclaim outcomes and denied replacement UART grant; altered input rejects2182 before fork, stale second copy token rejects2179 after one reclaim; DASH-signal-table runs unchanged substitution and USR1 trap with exact pipe and backend bytes and six reclaims; dropped post rejects2175 after child0, bypassed PID scope terminates parent with signal10 and rejects2176 before child admission; DASH-argv runs unchanged script and pinned helper via actual fork/exec/wait, requires backend readback argv ok and six reclaims; corrupted argument/environment yields child91/owner2130, skipped helper rejects2310 with zero reclaims; serial pipe-exec repeats external substitutions at observed prompts, reclaims two children then a clean second shell and verifies six terminals; second-cycle stale commit rejects2184 after one reclaim, stale startup grant yields child227/owner2176 after one reclaim; pipe-exec runs actual dash external substitution after denied admission, preserves stdout pipe alias across replacement while FD10/11 close, requires pipe bytes/EOF and six reclaims; stale commit rejects2184 before publication with zero reclaims and dropped survivor table yields child227/owner2176 with zero reclaims Consumer closure runs unchanged fd-closure.sh and helper closed through actual dash fork/exec/wait; stdout closed ok newline, child/parent0/backend17 twice and six reclaims. Injected FD3 returns helper95/owner2130; corrupt wait status gives child0 then missing-output owner2310 before parent terminal publication, zero reclaims. These are producer controls, not the writable consumer leak script. Scoped null/subshell profiles require advertised child-only create authority, EOF from separate binding3, unchanged original stdin, CLOEXEC filtering, private null ok output, actual helper7 and parent0/backend17 twice with six reclaims. Wrong-handle bypass gives child2/owner2130, false EOF gives child224/owner2130, and retained exec table gives child224/owner1950; all require zero reclaims. Native null lifetime probes reopen instances2\u201316, reject stale read/close and foreign-generation references, reject active and exhausted opens, and leave no active object. False stale-read success yields child225/owner2130 and false exhausted-open success yields child226/owner2130, both with zero reclaims. These are raw owner-protocol probes, not libc reopen support. Null exec first returns actual EACCES after native prepare rejects an unauthorized image, preserves commit inspection and holders, resumes token1, verifies client FD/mask/null EOF and retries the identical record with token2. Premature null close gives child231/owner2130; missing mask restoration gives child229/owner2130, zero reclaims. The unchanged background wait now passes in the opt-in suspend profile; this is not general writable null or inherited-null fork support. The unchanged scratch fd-leak-control selection requires actual helper95, dash22, empty stdout, backend17 and six reclaims over two lifetimes. Parent-ref child grant rejects child80/owner1980; omitted replacement description rejects child224/owner2130; skipped consumer helper rejects child0/owner2130, each with zero reclaims. The unchanged scratch redirection selection requires AB readback through actual helper stdin, helper0/dash0/backend17 twice and six reclaims. Lost B write and skipped helper reject owner2310; retained old stdin rejects child0/parent0/owner2131, each with zero reclaims. Frozen fork/exec retain old stdin at CLOEXEC FD10 and FD11; exec removes both aliases and only the child holder. Unchanged denied-redirection uses the child fork stream handles without exec, requires authenticated backend EACCES, child2/parent0/backend17 twice, exact denied ok newline and six reclaims. Wrong errno rejects owner2554; lost stdout rejects owner2310, both with zero reclaims. Unchanged consumer substitution requires four quoted arguments, WITNESS=value, actual helper argv ok newline through inherited pipe stdout, dash substitution ok newline, helper0/parent0/backend17 twice and six reclaims. Wrong replacement argument and skipped helper fail pipe EOF accounting with owner2175 and zero reclaims before terminal observation. Native denied-exec retry, CLOEXEC and exact pipe/output readback remain required. The pipe-core host gate now exercises the shared two/four-participant implementation: 34 Rust tests, authenticated peer generations, staged holder reservation, last-writer EOF, last-reader EPIPE, exec non-amplification and all-slot pending-aware retirement. The separate two-pipe routing adapter has eight additional host tests (42 combined), validating object/reference/binding isolation and preserving per-object lifetime and participant enforcement. Seven-binding preparation and atomic two-object fork/exec/readiness/terminal transitions now have five further semantic tests; the combined host wrapper now runs 69 tests including 13 repeated descriptor-validator tests, explicit nine-creation/fifteen-participant session bounds, stale routed identities and a three-child collection ledger with delivery/reclaim barriers. These added session cores are host/no_std coverage only; no native composed session is inferred. Native pipeline dispatch and matching pipeline qualification are not yet implemented; the separate AT-PIPELINE-CAPACITY fixture covers five-worker capacity; existing native pipe cases remain regressions for the two-participant interface. Candidate AENMX004 parsing is covered by the ordinary native_launch host tests: five disjoint entropy slices, strict framing/limits and rejection by the normal bundle parser. AENMX004 activation is separately tested by AT-PIPELINE-CAPACITY; ordinary bundle parsing still rejects it.",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees; private pipe probe qualifies its selected SIGPIPE schedules but does not supply public pipe(), installed SDK integration, general signal interruption/restart, live-client recovery, copy rollback or actual dash substitution",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-PROGRAM",
      "reference": "docs/NATIVE-PROGRAM.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --program --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-COEXIST",
      "reference": "docs/NATIVE-COEXIST.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --coexist --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-PROCESS",
      "reference": "docs/NATIVE-PROCESS.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --process --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-LOOKUP",
      "reference": "docs/NATIVE-LOOKUP.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --lookup --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-INIT",
      "reference": "docs/NATIVE-INIT.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --init --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-WRITABLE-FILES",
      "reference": "docs/NATIVE-FILES.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --writable-files --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-FILES",
      "reference": "docs/NATIVE-FILES.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --files --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CHANNEL",
      "reference": "docs/NATIVE-CHANNEL.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --channel --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-STARTUP",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Target startup, ownership, mappings or retained terminal records as scoped by reference",
      "command": "python3 scripts/native_smoke.py --help; use the full pinned workload invocation in the reference",
      "oracle": "Help is discovery only, NOT a test pass; execute all required positive/rejection cases in reference",
      "gaps": "Native sanitizer runtime unavailable; host models and explicit native rejection controls compensate only for covered invariants",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-MEMORY",
      "reference": "docs/NATIVE-MEMORY.md",
      "invariants": "Per-instance quota, cross-leaf protection/release, stale grants, stop/reuse; default 128-page and opt-in 2048-page modes; distinct TLS/XMM contexts and skipped-FP-restore rejection",
      "command": "python3 scripts/memory_smoke.py --help; run both default and --large with the pinned inputs in the reference",
      "oracle": "Help is discovery only, NOT a test pass; execute all required positive/rejection cases in reference",
      "gaps": "Native sanitizer runtime unavailable; host models and explicit native rejection controls compensate only for covered invariants",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-IO",
      "reference": "docs/NATIVE-IO.md",
      "invariants": "Target startup, ownership, mappings or retained terminal records as scoped by reference",
      "command": "python3 scripts/io_smoke.py --help; use the full pinned workload invocation in the reference",
      "oracle": "Help is discovery only, NOT a test pass; execute all required positive/rejection cases in reference",
      "gaps": "Native sanitizer runtime unavailable; host models and explicit native rejection controls compensate only for covered invariants",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SUPERVISION",
      "reference": "docs/NATIVE-SUPERVISION.md",
      "invariants": "Target startup, ownership, mappings or retained terminal records as scoped by reference",
      "command": "python3 scripts/supervised_smoke.py --help; use the full pinned workload invocation in the reference",
      "oracle": "Help is discovery only, NOT a test pass; execute all required positive/rejection cases in reference",
      "gaps": "Native sanitizer runtime unavailable; host models and explicit native rejection controls compensate only for covered invariants",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CONSOLE",
      "reference": "docs/NATIVE-CONSOLE.md",
      "invariants": "Caller-bound UART grant, validation before effects, partial nonblocking I/O and permanent close; exclusive recipient generation binding; console/client isolation through paired channels; explicit AENMX003/ABI18 composes existing UART handoff with the three-image,16KiB process-owner layout",
      "command": "python3 scripts/console_smoke.py --libc-build <strict-sdk> --tools-lock <pinned-tools.json>; repeat with --handoff and --handoff-fault and --relay and --connections",
      "oracle": "Exact binary echo and console pass; wrong input rejects at supervisor 901 (v1) or 941 (v2); fault recipient has kind 2/detail 134 and replacement is denied; relay peer rejects wrong input at supervisor 941/reclaimed 0, altered peer reply fails exact serial-byte oracle; --connections requires six terminal/reclaim outcomes, four denied slot reuses with the UART left open, and full16KiB owner mapping",
      "gaps": "Physical UART line-error injection and production terminal integration pending",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains each attempt"
    },
    {
      "id": "AT-BLOCK",
      "reference": "docs/BLOCK-DEVICE.md",
      "invariants": "BSP owns static DMA backing; bounded sector I/O and mandatory flush; only disposable disk sector 7 changes",
      "command": "python3 scripts/block_smoke.py",
      "oracle": "Write then fresh-VM verification and whole-disk host byte comparison; exact absent/read-only/corruption panics",
      "gaps": "No user grant, filesystem, physical hardware, power-loss durability, IOMMU or timeout injection",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains every attempt"
    },
    {
      "id": "AT-NATIVE-BLOCK",
      "reference": "docs/NATIVE-BLOCK.md",
      "invariants": "Caller/generation-bound sector/region grant, attenuated bounds and rights, atomic metadata preflight, private copied buffers and no grant inheritance on reuse",
      "command": "python3 scripts/block_smoke.py --native --regions --libc-build <strict-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact native block marker, unchanged disk canaries, readonly rights denial, fault kind/detail, corrupt seed rejection at supervisor 841/reclaimed 1",
      "gaps": "No filesystem service, power-loss guarantee, asynchronous I/O or consumer adoption",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains every attempt"
    },
    {
      "id": "AT-LARGE-IMAGE",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Explicit large static ELF limits; pre-admission rejection; full initialized/BSS verification and replacement",
      "command": "python3 scripts/native_image_smoke.py --help; run the pinned invocation in NATIVE-C.md",
      "oracle": "Positive and replacement must complete; invalid images reject with the expected reason before worker admission",
      "gaps": "Independent consumer review, optimized modes and native engine integration remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains each run"
    },
    {
      "id": "AT-THREAD",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Scoped one-child creation, separate CPU/TLS state, shared memory, live storage pins, child exit, domain fault and stop/replacement; compare/wait/wake, idle deadlines and blocked-word teardown; declared TLS extents and separate parent/clear-TID storage",
      "command": "python3 scripts/thread_smoke.py --help; run default and --large, for the thread, --waits, --stacks, --storage, --libc-tls, --indefinite, --libc-wait, --libc-lock and --signal-mask, --pthread-preflight, --pair and --pthread-lifecycle suites, with the explicit libc/tools pins in NATIVE-C",
      "oracle": "Seven thread, six wait, six stack and six storage and seven libc TLS and six indefinite-wait and eight libc-wait and nine libc-lock and eight signal-mask cases and three pthread-preflight and forty-six pthread-lifecycle and ten pair cases per memory profile; exact semantic rejection and fresh domain completion",
      "gaps": "No production pthread facade, cancellation/timed conditions, independent review or optimized/stack-high-water evidence",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains each attempt"
    },
    {
      "id": "AT-INIT-LARGE",
      "reference": "docs/NATIVE-INIT.md",
      "invariants": "Scoped authority, framing, resource ownership, rejection and cleanup in the named native profile",
      "command": "python3 scripts/launch_smoke.py --init-large --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Exact profile case list and ordered terminal/panic markers in the reference; complete source-matched results.json",
      "gaps": "Independent consumer adoption is separate; bounded fixtures are not general POSIX or recovery guarantees",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-OPENZFS-DEMAND",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Unchanged engine/owned media; creation-time role labels, registration/cleanup accounting and simultaneous first aggregate-peak census; no native budget inference",
      "command": "Use docs/evidence/openzfs-live-roles-2026-09-07/README.md pinned offline build and qualify.py with fresh outputs; preserve all attempts",
      "oracle": "Signature assertion, distinct gated labels and exact dropped-label plus prior controls; complete role/counter/peak reconciliation and independent name counts; warmup plus ten processes per view, storage/zdb and frozen inputs",
      "gaps": "Requested labels can aggregate queues; registration ends before TLS/kernel exit; no required-concurrency proof, full exit census, touched-stack high-water or true heap peaks; dispatch/dependency review and native service remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor owns measurement and failure retention"
    },
    {
      "id": "AT-OPENZFS-TASKQ",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Actual upstream taskq cross-queue progress, whole-queue drain, nonblocking entry rejection/reuse and explicit unsupported delayed dispatch",
      "command": "Use docs/evidence/openzfs-taskq-drain-2026-09-06/README.md pinned offline build and one-off qualify.py with fresh owned outputs",
      "oracle": "Three cycles per positive, warmup plus ten repetitions; exact premature-drain and false-delay controls; queued/active/allocation state and host/source checks",
      "gaps": "Linux fixture; system workers remain; no general executor sharing, live thread quiescence, TQ_SLEEP hard limit, native taskq port or delayed execution",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-NATIVE-TASKQ",
      "reference": "docs/NATIVE-TASKQ.md",
      "invariants": "Scoped TSD/arena, two-worker cross-queue progress, whole-queue drain, saved-ID stop/unmap/retire, two generations/four admissions and exact failure controls",
      "command": "Use NATIVE-TASKQ native integration invocation: scripts/thread_smoke.py --pthread-lifecycle with pinned SDK/tools in both default and --large profiles; zig build test. Retained object recipe covers layout/import rejection.",
      "oracle": "Exact zero terminals and unchanged native pass markers; supervisor replacement; exact controls 328/329/303/302/312; quota and pthread-list restoration",
      "gaps": "Bounded native fixture accepted; no production runtime acceptance, full-engine live-resource sizing or filesystem service integration",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor owns scoped source adaptation and evidence"
    },
    {
      "id": "AT-CAT-ROLES",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Atomic three-role bootstrap, exact finite binary copy and separate diagnostics, explicit alias/backend closes, terminal EOF and four native reclaims; no Toybox or runner-child-admission claim; optional direct owner-selected cat template validates before reservation, observes native EINVAL with endpoint retention and independent copied argv/env after overwrite; bounded extra arguments require exact diagnostic64, zero stdin requests, empty stdout, consuming closes and semantic rejection controls; complete I/O/close EIO retains exact prefixes, nonzero status and remaining cleanup without replay; malformed/truncated cat replies require zero post-poison channel traps, local retirement, exact committed prefixes and separately verified remote cleanup; EINTR preserves errno/nonretry/prefixes and completed finalization re-entry retains status without channel traps; fault/forced-stop kinds, exact prefixes and owner cleanup without client finalization remain independently checked",
      "command": "python3 scripts/launch_smoke.py --command-runner --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "cat-roles case statuses and exact 1502/1503/1505 controls in complete results.json; prior command cases retained",
      "gaps": "CAT-01\u201308 Toybox consumer acceptance, general unknown recovery and extended coverage remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CAT-STARTUP",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Actual toy_singleinit mask exchange/restore, observed TLS and real allocator/setvbuf, private no-memory denial; empty three-role cleanup and four reclaims; no cat_main or exit-hook acceptance",
      "command": "python3 docs/evidence/toybox-native-mask-2026-09-07/run-native.py",
      "oracle": "startup terminal0/backend17 twice with100/reclaimed4; wrong-old/skip-init115 and no-memory116 reject at owner1501",
      "gaps": "Actual applet/stdio vector/terminal adaptation, recursive callbacks and consumer acceptance remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CAT-VECTOR",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Private two-vector gathering through existing scoped transport; validation before effects, confirmed short progress and shared poison without replay",
      "command": "python3 docs/evidence/native-vector-2026-09-07/run-native.py",
      "oracle": "Seven native positives with exact 0/1 terminals and four reclaims; prefix mutant owner1505, null-check mutant client117/owner1501",
      "gaps": "No actual musl stdio loop, Toybox applet, finalization or consumer acceptance",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CAT-STDIO",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Actual musl stdio callback on native scoped vector bridge; prefix/new-data accounting, FILE reset/error state, confirmed progress and no replay after unknown",
      "command": "python3 docs/evidence/native-stdio-2026-09-07/run-native.py",
      "oracle": "Seven normal/error scenarios with exact 0/1 terminals and four reclaims; corrupted bytes owner1505; wrong count client118/owner1501",
      "gaps": "Internal callback only; no public fwrite/fflush, actual Toybox applet, terminal adaptation or independent consumer acceptance",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CAT-PUBLIC-STDIO",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Actual public musl setvbuf/fwrite/fprintf/fflush/ferror on scoped output and diagnostic roles; buffering distinguished from flush completion; no replay after unknown; cleanup before reclaim",
      "command": "python3 docs/evidence/native-public-stdio-2026-09-07/run-native.py",
      "oracle": "Eleven positive/error scenarios with exact 0/1/64 terminals and four reclaims; corrupted output and omitted diagnostic reject at owner1505",
      "gaps": "Private image libc substitution only; actual Toybox applet and terminal callbacks, public runtime adoption and independent consumer acceptance remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-TOYBOX-CAT",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Actual toy_singleinit/cat_main/xexit and private post-rebound cleanup seam; ordered real callbacks and observed real fflush/ferror; binary/empty/short copy and native reclaim",
      "command": "python3 docs/evidence/toybox-native-cat-2026-09-07/run-native.py",
      "oracle": "Three positives repeat0/17 with100/reclaimed4; skip-copy1505, skip-callback/flush120 then1501, skip-close1503",
      "gaps": "Bounded normal exit only; actual applet error/usage paths, recursive/signal finalization, complete CAT consumer handoff and R1 remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-TOYBOX-ERRORS",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Opt-in actual Toybox16-byte error accounting; exact EIO/EINTR diagnostics; no read/write retry and no post-unknown channel traps; owner cleanup across replacement",
      "command": "python3 docs/evidence/toybox-native-errors-2026-09-07/run-native.py",
      "oracle": "Nine positive/error scenarios repeat0/1 and backend17 with100/reclaimed4; wrong diagnostic1505 and forced status0 rejects1501",
      "gaps": "Actual applet usage, close-error/finalizer recursion, complete consumer CAT handoff and R1 remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-TOYBOX-USAGE",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Pre-initialization stdin-only argument rejection in actual Toybox image; exact usage64, no input/output effects, no Toybox initialization, all aliases retired and no post-poison traffic",
      "command": "python3 docs/evidence/toybox-native-usage-2026-09-07/run-native.py",
      "oracle": "Sixteen normal/rejection outcomes repeat0/64 and backend17 with100/reclaimed4; read/corrupt/zero/close mutants reject1520/1505/1501/1503",
      "gaps": "Profile rejection only; upstream options/help, finalizer failure/re-entry and independent consumer CAT acceptance remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-TOYBOX-FINALIZE",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Actual Toybox callback buffered output; flush short-circuit, status preservation, alias retirement and private cleanup re-entry rejection",
      "command": "python3 docs/evidence/toybox-native-finalize-2026-09-07/run-native.py",
      "oracle": "Thirteen outcomes repeat0/1/64 and backend17 with100/reclaimed4; five mutants require1505/1501/1503 with exact client status",
      "gaps": "Finalizer-only mode; recursive xexit, signal handling and independent CAT acceptance remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-TOYBOX-CLOSE",
      "reference": "docs/NATIVE-CAT.md",
      "invariants": "Candidate close ordering, exact final diagnostic, known/unknown outcomes, nonzero re-entry latch and no replay",
      "command": "python3 docs/evidence/toybox-native-close-2026-09-07/run-native.py",
      "oracle": "Twenty-three outcomes repeat0/1/64 with backend17 and100/reclaimed4; diagnostic/success/replay/re-entry mutants reject1505/1501/1504/1501",
      "gaps": "Candidate consumer acceptance, fresh full upstream rebuild, recursive xexit and signals remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-ZFS-DISPATCH",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "External fixed system/delay queue call attribution with unchanged engine; no acceptance-as-completion or internal-call coverage claim",
      "command": "Use docs/evidence/openzfs-dispatch-2026-09-07/README.md pinned offline build and qualify.py with fresh outputs; preserve all attempts",
      "oracle": "Real dispatch/drain control completes4 callbacks; missing counts and false delayed success reject exact exit2; old observer/storage controls and22 owned-media processes pass",
      "gaps": "External call counts only; callback overlap, internal calls, native engine capacity and production filesystem remain unqualified",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-ZFS-TWO-POOL",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private one-worker system and delay queues; unchanged queue identities, TSD and unsupported timer behavior; no native capacity claim",
      "command": "Use docs/evidence/openzfs-two-pool-2026-09-07/README.md offline recipe and qualify.py with fresh outputs; preserve all attempts",
      "oracle": "Both CPU views pass storage and exact fixed-role creation counts; source-rebuilt original profile rejects fixed-pool worker count mismatch; full observer and storage controls pass",
      "gaps": "Host-only workload; wider dependencies, native resource selection and production storage remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-INIT-COMPOSED",
      "reference": "docs/NATIVE-INIT.md",
      "invariants": "Opt-in ABI 16 four RX code pages, RO/NX aliases, zero tail, unchanged one-page stack and init authority; preserved v1/v2 limits",
      "command": "python3 scripts/launch_smoke.py --init-composed --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Added-page execution, exact bounds, malformed and legacy rejection; code-write/NX/guard faults and verified whole-domain shutdown; dirty tail rejects before entry",
      "gaps": "Independent sys-init composed stack and Terminal acceptance, extended/recovery work remain open",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-INIT-COMMAND",
      "reference": "docs/NATIVE-INIT-COMMAND.md",
      "invariants": "Real source-built runner/bytecount, private role grants, preserved input, exact output, fault kind and terminal-before-reclaim; existing profile unchanged",
      "command": "python3 docs/evidence/init-command-handoff-2026-09-08/run.py --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Five cases: positive/empty/fault each two generations and six reclaims; malformed roles and omitted close have exact retained rejection",
      "gaps": "Reference owner only; sys-init adapter and independent acceptance, sustained wait and shutdown remain open",
      "budget_seconds": 300,
      "owner": "Aether producer; sys-init owns consuming adapter and policy acceptance"
    },
    {
      "id": "AT-SHELL-GUARDS",
      "reference": "docs/NATIVE-SHELL-STARTUP.md",
      "invariants": "Single-context complete descriptor and request/reply masking, nested prior-mask restoration, acquisition denial without mutation, fatal restore rejection; opt-in AECAT004 grants a distinct read-only file root; two service-backed bindings share alias offsets under the same guard",
      "command": "python3 scripts/launch_smoke.py --command-runner --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Guarded partial transfers observe authoritative blocked mask; broken block returns 88 and failed restore exits 125, each with exact owner rejection; previous cases remain required; actual dash script input requires CLOEXEC duplication above9, exact hello output, status0 and six reclaims; omitted root publication rejects client2/owner1501 and skipped remote close rejects owner1599; V4 root field/alias corruption, final-record EOF and header-only V3/V4 mismatches require unpublished state, client110 and six reclaims; deliberately early root publication rejects client113/owner1501; V4 descriptor client requires two live descriptions, shared alias and independent offsets, no-traffic 16-FD exhaustion, stale/route/root denial, six-open retirement, exact six-open/nine-read owner counts and six reclaims; broken offset/reference checks reject client114/owner1501; V3/V4 queued-body mismatch leaves15 witnessed bytes and requires client110/six reclaims; malformed or half client replies after known backend open/read/close require poison, unchanged buffers, no further traffic, post-terminal retained-record close/stale-handle checks and client1/six reclaims; omitted retirement rejects owner1599; malformed backend open/read/close requires no unverified publication, client1, queried file terminal143 kind3, stream17 and six reclaims; omitted confirmed stop rejects owner1601 before reclaim; zero-byte and16-byte backend reply EOF after real open/read/close require the same poison and queried stop before six reclaims; half-open omitted-stop control rejects1601; open silent backend exercises the real4096-attempt command-backend exchange and confirmed stop; late-open reply follows request EOF, one status-byte witness leaves at least15 bytes unread for teardown; late omitted-stop control rejects1601; generic transport retains100000 attempts and the native3000-tick/30-second harness bounds remain unchanged; actual-main ENV requires equal interactive loading, UID/GID mismatch and noninteractive/absent/empty suppression with exact output, descriptor counts and six reclaims; pinned unguarded-main controls reject owner1598 after client7; unsupported -p exits2 with exact diagnostic and four reclaims, skipped main rejects1501; unchanged consumer syntax-error script executes through actual main with empty stdout, native syntax diagnostic, status2 and four reclaims; skipped main and omitted descriptor closure reject1501/1503; pinned real consumer helper child accepts exact spaced/wildcard argv and WITNESS via opt-in owner, returns0 with exact argv output and six reclaims; corrupted handoff, skipped body and missing close reject1407/1405/1403",
      "gaps": "No asynchronous queued-handler injection or indefinite I/O cancellation; public handler/action-query compatibility and consumer qualification remain open; full V4 malformed/exhaustion/ambiguous-reply matrix and matching consumer intake remain pending",
      "budget_seconds": 1800,
      "owner": "Aether native facade; userland owns matching libc/dash acceptance"
    },
    {
      "id": "AT-SHELL-ACTIONS",
      "reference": "docs/NATIVE-SHELL-STARTUP.md",
      "invariants": "Private opt-in owner-local record copies; complete input/output validation, RX targets, retained queries and reset; legacy disabled",
      "command": "python3 scripts/launch_smoke.py --command-runner --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Two generations of overlap/cross-page, read-only/no-access/unmapped copy and target rejection with unchanged prefix/record/output; read-only input succeeds, remapped backing is zero; writable control terminal 90/owner 1501; disabled build ENOSYS; four reclaims; supervisor/client same-signal records remain distinct through running/terminal/reclaim; shared-table control owner1591/reclaimed0 (distinct from initial owner1590) and release build rejects fault option Explicit self-post/poll coalesces masked duplicates, delivers once with exact handler mask and restores caller mask; skipped poll rejects client91/owner1501; fresh generations have no pending residue. Invalid-stack polls preserve record/mask and pending occurrence; normal-stack retry delivers once without repost; deliberate discard rejects client92/owner1501. Separately selected private termination retains kind4/detail2 or15 through repeated observe and stop; reclaim rejects stale handles across two generations; exit130 impostor rejects owner1501. Live-descriptor signal15 before/copy/diagnostic cases preserve exact byte prefixes and retire backend/channel resources across two generations; corrupted prefix and skipped backend close reject owner1505/1506 after kind4/detail15. Separately opted-in successful mask return delivers one pending custom handler, preserves syscall result and caller mask; failed mask output leaves it blocked; disabled boundary rejects client91/owner1501. Automatic entry at four invalid stacks preserves successful mask return/old output/committed mask/action and pending signal; normal-stack query delivers once; discarded pending control rejects client94/owner1501. Guarded read queues signal10 until mask restoration; handler duplicates/closes fd11 and writes exact diagnostic through guarded transport; original copy and four reclaims complete; skip restoration rejects client95/owner1501. Musl siglongjmp from the guarded handler restores mask and resumes exact copy from static read storage; no-mask-save rejects client96/owner1501. Known-error handler entry preserves EBADF/EACCES despite handler errno=ERANGE and subsequent exact copy/cleanup; skipped fcntl errno restore rejects client97/owner1501. Malformed/truncated read replies poison before handler write/close reentry; no further channel traps or caller-buffer mutation; local/owner cleanup completes; skipped injection rejects client98/owner1501. Nonlocal escape after ambiguous replies preserves poison/static buffer and restores mask before local cleanup; no-mask-save rejects client99/owner1501. Ambiguous early input close retires local alias/binding before returning or nonlocal handler; repeated close EBADF/no traffic and owner cleanup; alias resurrection rejects client100/owner1501. Experimental public sigaction shares native records with private operations, accepts unused public registers but rejects private reserved registers, rejects unsupported flags and bad mappings atomically, executes musl restorer and nonlocal mask restoration; disabled routing rejects client101/owner1501. Legacy raw route stays ENOSYS. Public DFL/IGN retain inert SA_RESTART, custom restart remains unsupported; actual musl signal() drops queued/future ignored posts and restores DFL, private setter rejects added flag; skipped ignore rejects client101/owner1501. Pinned actual dash signal routines install queried dispositions and handle private SIGCHLD; skipped setup rejects client102/owner1501. Full dash main remains outside this fixture. Separate generated-init diagnostic requires PPID=-38, empty PWD, initialized IFS/OPTIND/CHLD and exact getcwd warning under current unsupported calls; this is gap evidence, not successful startup. Skipped init rejects client103/owner1501. Opt-in parent query returns root zero and real supervisor identity to workers in both slots across reuse; musl zero-argument unused registers accepted; generated PPID becomes 4 while UID/CWD gaps remain. Disabled routing and self-identity substitution reject client104/owner1501. Selected AECAT002 independent getter errno (four mutants 105/1501), all raw getter ENOSYS, descriptor composition and EOF offsets 0/16/48/144/159 (110/four reclaims); AECAT003 all stream aliases and forced getcwd ENOMEM (retry allocation succeeds; missing errno 106/1501), V1/V3 rejection and EOF offsets 0/16/48/144/191 (110/four reclaims), actual-init PWD device/inode comparisons with owner query ordering (collapsed-identity mutants client0/owner1594), malformed/truncated reply poison and no accepted subsequent traffic (exit1/four reclaims; poison mutant 107/1501), alias/short-final-record and v2/v3 version rejection (110/four reclaims), directory init/query checks (raw authority, buffers, PWD, malformed grants; skipped publication 106/1501), AECAT002 stages launcher UID/GID metadata before readiness; fresh tuples and zero effective UID drive actual dash PS1 without new authority. Invalid metadata/version/truncation preserves unpublished getters/descriptors and completes cleanup; skipped publication rejects client105/owner1501. Raw credential calls remain unsupported. The native-runner-files selector retains runner-local authority gates and requires exactly six reclaims. Existing read-only file service can compose in slot2 with real main and stream backend: exact script reads before/after shell, denied root/rights/missing name, stale handles, and six reclaims; wrong payload and omitted file close reject1596/1597. Explicit native main selection requires real parser/builtin stdout dash-main newline, status7 and four reclaims; skipped main rejects0/1501 and skipped facade cleanup rejects7/1503. Queued V1/V2 mismatch witnesses acknowledge the header, enqueue16 bytes and consume one marker, leaving15 unread for teardown; both directions require110/four reclaims and wrong-marker control108/1501.",
      "gaps": "No public sigaction or pending delivery; private signal-owner termination and guarded live-handler qualification remain open",
      "budget_seconds": 1800,
      "owner": "Aether private native experiment; consumer adoption remains separate"
    },
    {
      "id": "AT-PIPELINE-CAPACITY",
      "reference": "docs/NATIVE-CONNECTIONS.md",
      "invariants": "Five isolated workers, ten scoped channels, bounded identity and exact lifecycle cleanup. Exec request/reply state retains partial frames and returns on backpressure; canonical fields precede reply and complete accepted reply precedes snapshot intake. Existing denial/publication/cancellation and lifecycle regressions remain required. AENMX005 private supervisor code is bounded to24 KiB while004 remains16 KiB; boundary envelopes and sixth-page execution/write denial, NX stack and unmapped code guard are checked. Retained replacement phases bind route/handle/generation at construction, return on partial snapshots/grants/reports and preserve freeze/admit/commit/publication/cancellation order. Readiness reports arrive in three-byte chunks.",
      "command": "python3 scripts/pipeline_capacity.py --libc-build <pinned-sdk> --tools-lock <pinned-tools.json>",
      "oracle": "Five-worker positive: fifteen admissions/reclaims across three generations, fourteen normal exits and one confirmed stop; wrong entropy rejects worker73/owner2607 before reclaim; short header and wrong build/envelope pairing reject explicitly. Native two-pipe dispatch uses three independent worker roles, fragmented 32-byte request/reply frames, exact ten-byte transfer and EOF on each pipe, three generations and fifteen normal exits/reclaims. Wrong-object routing rejects owner2723; reapplying a partially delivered reply rejects owner2726, both with zero reclaims. Confirmed writer stops after seven request or reply bytes require respectively zero or ten exact pipe bytes, EOF, three generations and fifteen reclaims each; terminal kind3/status143 precedes frame/holder cleanup. Retained partial frame rejects owner2724 with zero reclaims. Early reader close and exit-with-holder both deliver exact EPIPE on Second then First, require ten successful First bytes, zero Second bytes, zero EOF reads, one EPIPE per pipe and fifteen normal reclaims over three generations. Wrong-errno delivery requires worker97 then owner2726 with zero reclaims. Native copied pipeline: six image admissions plus nine copies over three generations, staged seven-binding inheritance before copy, exact freeze tokens, child readiness and CLOEXEC retention, private TLS/snapshot writes, denied old channels, ten-byte data/EOF and fifteen normal reclaims. Mismatched snapshot counts reject owner2731 before copy/reclaim. Copied-child exec uses a distinct replacement ELF, exact frozen role snapshot, denied image with unchanged receipt, parked image admission, atomic seven-binding CLOEXEC commit, stale publication rejection, independent filtered-table/fresh-TLS validation and readiness before pipe I/O. Nine copies and nine replacements across three generations preserve data/EOF and fifteen reclaims. Retained FD10 delivery rejects replacement105 then owner2734 with zero reclaims. Interrupted exec cancels after parked admission or seven delivered table bytes, confirms all three participant stops before holder/frame disposal, rejects stopped publication, retires both pipes and requires nine stops, six normal exits and fifteen reclaims across three generations. Retained holder rejects owner2736 before reclaim. Seven-binding libc replacement installs only validated live pipe descriptors, starts with absent standard streams, uses shared guarded dup2/fcntl/alias close and actual musl read/write/close, verifies FD10 CLOEXEC and post-close EBADF, and preserves exact data/EOF over three generations. Retained FD10 delivery rejects replacement105/owner2734 before reclaim. Public musl fork creates all three children through the verified archive-derived fork/_Fork candidate and existing rebind helper, checks repaired gettid/getpid and auxv/channel caches, then enters the libc replacement pipeline. No-child-repair control requires child115 then owner2607 with zero reclaims. Live descriptor capture serializes shared startup_fds at masked public-fork/exec boundaries, preserves fcntl-created CLOEXEC aliases at FD10/11/12, derives bounded counts and validates actual pipe holdings before copy; live F_SETFD state controls exec. Corrupted Second-writer binding rejects owner2731 before native copy/reclaim. Client factory grant enables two pipe requests with lowest-free descriptor publication; exhaustion preserves output, fcntl relocates ends, public close removes parent holdings before dispatch, and archive-derived musl waitpid collects each observed child terminal once. Duplicate collection returns ECHILD without changing status. False third status rejects parent121 then owner2730 before reclaim; positive requires exact data/EOF and fifteen normal reclaims over three generations. Interleaved construction creates First before writer copy and Second before relay copy, services parent closes between forks, and stages only each live descriptor snapshot, including absent Second generation for the first child. False First-writer close acknowledgment rejects owner2731 before second copy/reclaim; positive preserves exact data/EOF and fifteen normal reclaims. Multi-child wait-any uses archive-derived musl wait3/wait4; unrelated peer PID returns ECHILD, live wait-any and exact WNOHANG return zero without status mutation, and post-dispatch mixed collection observes each native terminal once. Exhausted wait-any returns ECHILD; unsupported resource usage preserves buffers. False live-child completion rejects parent123 then owner2730 before reclaim. Release uses bounded send after early replies to respect channel backpressure. Final stdout receives an explicit post-exec generation-bound grant only in the last replacement. Actual libc write forwards exact pipeline data to a32-byte owner capture, followed by explicit close. Writer forging the same reference on its own channel must receive EACCES. Malformed grant rejects child105 then owner2734; acknowledged-but-dropped output rejects owner2743 despite normal worker exits, both before reclaim. Positive requires exact output and fifteen normal reclaims over three generations. Inherited stdout is granted to the parent before forks, validated against live snapshot counts and reserved in one generation-local owner. Exec removes CLOEXEC holdings from the first two stages and retains final output; parent closure does not close the child. Deliberately retaining writer output authority fails the independent forged-write check: child124 then owner2726 before reclaim. Positive requires exact output, all holdings closed and fifteen normal reclaims. Inherited stdin/stderr are parent-granted and staged from live snapshots; exec retains input only in writer and diagnostics in all three stages. Parent closes independently. Actual musl read consumes exact source bytes and EOF; stdout and three distinct stderr role bytes are independently captured, with all holdings closed. Relay forging revoked stdin receives EACCES. Retained input authority rejects child126 then owner2726; acknowledged-but-dropped diagnostics reject owner2743 despite normal exits, before reclaim. All54 preceding images are byte-identical on this qualification. Child-requested exec removes owner token2, authenticates canonical image/role/generation requests and checks denied EACCES plus all descriptor flags before retry. Accepted request precedes live snapshot/freeze and existing native admission/commit/publication; successful exec cannot return. Wrong denial errno rejects child127 then owner2730 before reclaim. Positive preserves inherited-stream bytes, EOF, diagnostics and fifteen normal reclaims across three generations. Actual pinned dash printfcmd and flushall replace the direct writer call in a replacement worker; exact pipe bytes, EOF and captured stdout must still match. A wrong first byte rejects relay111 then owner2726 before reclaim. All prior image bytes must be compared; full shell evaluation is not inferred from builtin execution. Copied-child builtin profile skips writer replacement, retains copied TLS, closes inherited stdout and unused pipe reader, redirects live pipe output, and rejects a forged use of the closed capture. Require twelve admissions with per-slot counts3/3/0/3/3, fifteen normal terminals/reclaims and exact streams over three generations. Wrong builtin byte rejects relay111 then owner2726 before reclaim. Autonomous-child profile omits child dispatch-release reads/sends while retaining parent/peer release and scoped readiness. Require exact streams,12 admissions and15 normal reclaims. Reinserting the obsolete writer token must reject writer129 then owner2726 before reclaim; timeout is not success. Wait/I/O profile retains one authenticated parent wait and fragmented reply while polling child I/O, requires a live blocking wait before first I/O, collects each scoped child once and completes all four replies before dispatch returns. Premature zero completion rejects parent121 then owner2750 before reclaim. Direct wait intake profile requires unrelated PID ECHILD and live wait-any/specific WNOHANG with untouched status before I/O; blocking wait-any collects three distinct scoped PIDs in any order, repeated collection and exhaustion return ECHILD. All eight replies cross fragmented sends. Wrong denial errno and omitted collection bit reject parent131 then owner2750 before reclaim. Exec transaction extraction retains descriptor validation, frozen admission and ledger commit/publication as separate bounded functions, preserving cancellation points and all existing54 native oracles. Blocking transport progression remains outside these functions; extraction alone is not exec/I/O multiplexing. Exec request/reply polling now retains frame/offset/phase across fragmented transport, validating canonical requests before replying; host controls check one operation per poll, EAGAIN preservation, terminal idempotence and malformed opcode/image/slot/generation/padding rejection. Snapshot/readiness and the enclosing driver remain sequential. Wide005 code lengths16385/20481/24576 complete fifteen reclaims;24577, truncation, disabled005 and oversized004 reject. Sixth-page write faults14/error7, sixth-page UD2 executes with fault6/error0, stack fetch faults14/error15 and beyond-code fetch faults14/error14, all followed by native supervisor terminated. Total105 cases including legacy004 execution of the basic retained-state exec owner and opt-in exec/I/O overlap. One active replacement owns its route until Done while copied/completed workers continue pipe I/O. A seven-byte denial reply is held until the first copied-writer pipe write; suppressing I/O rejects2760 after32 held rounds, never by timeout. Interrupted overlap stops slot4 after seven filtered-table bytes; exact143/kind3 terminal precedes frame/holder cleanup, surviving relay drains first pipe to EOF and receives EPIPE on second-pipe writes, parent collects SIGTERM15 once. Missing stop and retained frame reject2770/2772 before reclaim. The admitted-but-unpublished boundary uses the same terminal-confirmed cleanup and survivor oracles; publication after stop must reject EBUSY(-16), with the same omission controls. Parent wait interruption preserves one collected child across a seven-byte successful reply, confirms parent143/kind3 before clearing it, records cancellation separately from three delivered probes, then allows surviving children to complete. Missing stop/lost collection/retained reply reject2780/2781/2782 before reclaim. Opt-in pre-exec intake routes complete opcode84 frames through the shared canonical validator and ordinary descriptor requests through the scoped I/O dispatcher only while the active child awaits exec. Both helpers close stdin before denied/retried exec; snapshots/ledger agree, full streams/waits/reclaim complete. Refusing pre-exec descriptor traffic rejects2790 before reclaim. Pre-exec remapping duplicates each reader to fd0 and relay writer to fd1, closes inherited capture through scoped intake, preserves flags on denied exec and filters old CLOEXEC aliases including fd10 on successful exec. Replacements use fd0/1 directly; fd0 CLOEXEC or unflagged fd10 reject2733 before admission. Opt-in helper exec accepts exactly /inputs/helper with argv [/inputs/helper, copy] and empty environment; canonical argc/argument bytes are validated before native admission, which supplies that same vector. Unknown paths, unsupported argv/count/environment reject before transport; corrupted wire argument rejects2746 before helper replacement admission. Native identity replaces fixture role/generation arguments. Both replacement workers now also execute the unchanged pinned consumer helper copy body through the inherited descriptors; the native wrapper retains bootstrap/report/readiness and explicit close. Skipping relay main requires exact2743 missing capture with zero reclaims. Natural parent collection allows child progress without a wait and completes after three unique child collections plus full final reply, rather than eight test probes. Forced first wait after all child exits passes; restoring the old pre-exit requirement rejects2751 with zero reclaims. Copied writer invokes real dash main/init/eval with validated advisory identity and a slot-scoped read-only /work directory view, with linked musl signal calls but without native public routing in that older profile; host decoder tests and native denied/stale cwd probes cover authority. Actual main prints through both unchanged consumer helpers; command-byte mutation rejects2743. Natural descriptor profile keeps the second pipe at local fd4/5 with bindings5/6, removes redundant aliases before exec, and requires exactly fd0/1/2 in both helper snapshots. An unflagged fd10 alias rejects2733 before replacement admission with zero reclaims. Parent-driven profiles run unchanged pipeline.sh and early-reader.sh with actual dash main/jobs, native public signal actions and copied dispositions. Helpers inherit the validated four-entry environment and only exact fd0/1/2 bindings. Pipeline transfers ten bytes and collects three copied children. Early-reader collects only two copied children, validates one consumed byte, EPIPE/pump42, pipefail and exact epipe-ok output; the third capacity slot is an unrelated fresh peer. Both reclaim15 across three generations. Parent close/output/directory requests share retained wait intake. Bad script byte, inherited fd10 and environment profile reject2743/2733/2746. Wrong EPIPE errno retains helper98 and rejects2726. Disabled public signal routing retains parent138 and rejects2730; linked signal symbols alone are not acceptance. Interactive AENMX006/ABI20 profile enters long stdout/stderr builtins, a parent pipeline and a long follow-up at nine real prompts over three shell generations. The serial owner retains no cumulative stream captures or expected output bytes; host checks exact UART output, fifteen terminals/reclaims and closed owner grant. Deliberately corrupted stdout must fail the ordinary host oracle for output mismatch after successful guest cleanup; wrong UART grant rejects2795, and capacity-disabled006 rejects before admission. Total105 cases. AENMX007/ABI21 resource-only qualification: two workers through fifteen lifetimes,30 launches/terminals/reclaims, exact epoch-tagged channels, stale task rejection and final spare channel4 after objects0\u20133 retire. UART unsupported. Stale worker epoch rejects2608 after6 reclaims; legacy005 exhaustion rejects2603 after6; disabled/truncated/reserved/oversized007 and old owner ABI reject at their named boundaries. Total113 cases; this is not composed-session or copied-child acceptance. Qualified composed SESSION integration adds eight cases (121 total): unchanged three-parent script with27 copies/21 helper execs/30 terminal reclaims and exact separate streams; wrong WITNESS reaches helper91, inherited alias reaches helper95, corrupted substitution reaches parent33, stale-wait ECHILD preserves status, deliberate stale acceptance and retained writer require confirmed-stop cleanup. Byte mutation must fail the ordinary host stream oracle after normal cleanup. Owner-only007 observation authority has bounded copied records, cleanup/ordinal/quota checks and encoded bytes; old005 observation calls remain unsupported. Producer packet: docs/evidence/session-native-2026-09-25/README.md; independent private SESSION acceptance: docs/evidence/session-acceptance-review-2026-09-25/README.md; next composed workload, shared SDK and R1 remain open. Recovery composition adds seven cases (128 total): three unchanged parents,21 copies/18 helper replacements/24 reclaims, exact49/20-byte streams, genuine pump42 and healthy follow-up. Wrong EPIPE, retained reader, stale child replay, environment, fd3 leak and stream corruption meet their precise oracles. Packet: docs/evidence/recovery-native-2026-09-25/README.md; independent replay pending. Failed-exec session: authenticated opcode85 resolves actual path independently of argv; three parents produce missing127 then denied126, four successful replacements per parent, exact60/25-byte streams, 24 reclaims and slot2 generation15. Wrong error, omitted request, bad environment, inherited FD, parent stderr and output mutations plus stale-wait controls are required; none establish SI-07 or shared SDK adoption. Real serial SESSION adds11 cases under AENMX008/ABI23: three actual interactive parents, nine prompt-driven commands,27 copies/21 helper replacements/30 reclaims, exact per-stream/UART observations, stale access, wrong grant, cancellation after a real empty read, corrupted bytes and stderr routing/retirement controls. Total160 capacity cases; see docs/evidence/serial-session-2026-09-29/README.md for matched runs and remaining owner gates.",
      "gaps": "The parent profiles now execute both remaining unchanged consumer scripts, but require independent replay. Bootstrap, fixed helper selectors/environment and native reports remain private bounded adapters, not general argv/env, filesystem, process service or published SDK APIs. Earlier copied-main profiles did not enable public signal routing and do not establish that operation; the new parent profiles explicitly enable it and reject a disabled control. General SIGPIPE generation, arbitrary jobs, TTY/interactive assembly, broader malformed bootstrap permutations, other interruption schedules and independent SDK/release gates remain. Full connections/runner results are tracked in STATE and the current evidence packet; fixture counts do not establish release readiness.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SESSION-OBSERVATION",
      "reference": "docs/NATIVE-SHELL-STARTUP.md",
      "invariants": "Separate stream identity and exact lifecycle observations; no success from missing, duplicated, corrupted or premature evidence.",
      "command": "python3 -m unittest discover -s tests -p test_session_smoke.py -v",
      "oracle": "Five host counterexample tests; marker-shaped program bytes stay encoded. Native acceptance remains in AT-PIPELINE-CAPACITY.",
      "gaps": "Host oracle tests do not execute native SESSION or establish independent consumer acceptance.",
      "budget_seconds": 300,
      "owner": "Aether"
    },
    {
      "id": "AT-SUSTAINED-CORE",
      "reference": "docs/NATIVE-INIT-COMMAND.md",
      "invariants": "Owner-local atomic-park prerequisite; retained completion, serial level readiness, deadline/cancel ordering, non-wrapping disjoint identity fields; no ambient authority",
      "command": "zig test kernel/native_sustained.zig --cache-dir .zig-cache --global-cache-dir .zig-cache/global",
      "oracle": "Six host tests cover identity boundaries, both event orderings, serial readiness before/during park, spurious polls, retained cancel/deadline and sequence exhaustion and retention of read-cleared UART errors; repeat with -O ReleaseSafe",
      "gaps": "Host-only core. Native profile admission, authority checks, atomic IF=0 integration, real idle/wakeup/reuse, authorized halt and independent sys-init acceptance remain open.",
      "budget_seconds": 60,
      "owner": "Aether enforcing mechanism; sys-init lifecycle policy and consumer acceptance"
    },
    {
      "id": "AT-SUSTAINED-NATIVE",
      "reference": "docs/NATIVE-INIT-COMMAND.md",
      "invariants": "Experimental AENSI001/ABI22 selected only with native-init-sustained; contextual serial/event/halt authority, actual idle beyond 3000 ticks, non-wrapping reuse; legacy profiles remain bounded",
      "command": "python3 docs/evidence/sustained-controls-2026-09-29/run.py <fresh-id>",
      "oracle": "Self-building ABI22 mechanism witness: six real worker lifetimes/reclaims, EACCES for known owner-only grant values from worker context, invalid reserved fields with unchanged sequence, event-before-park, terminal wake, serial level readiness across two waits and consumed-input deadline; idle>=3000 then authorized halt. --wrong-expectation requires exact worker77, confirmed reclaim/stale denial and named owner rejection. Older prepared-image and real-command blocked probes remain sealed separately.",
      "gaps": "Private kernel mechanism evidence only, not versioned userland protocol or sys-init policy. Matched v2 generation1\u20135 commands, native cohort cleanup and65536 pre-admission rejection now pass in docs/evidence/si07-native-2026-10-03; five legacy command cases pass. Seeded native255/256/65534/65535 completion and both parent-carrier mismatch directions pass, with nine final comparisons and66 corruption controls. This is not65535 sequential executions; Four child-profile native cases now qualify both mismatch directions and matched v1/v2 controls in si07-child-profile-2026-10-03. Four native private-dispatch controls now qualify count/padding -13 and foreign/stale selectors -9 with reply/cleanup/halt in docs/evidence/si07-request-denial-2026-10-03/README.md. These inject a complete real received child frame; arbitrary forged native endpoints, truncated frames, wider waits and full SUSTAIN-01\u201306 qualification remain open. Independent userland nine-case replay and seven-case sys-init loop replay are verified in si07-handoff-review-2026-10-03; sys-init partial/Unknown error controls retain failure uncertainty and no replay. Two composed native wait/command schedules in docs/evidence/si07-wait-composition-2026-10-03/README.md qualify serial level recheck, delayed input, future-sequence denial, deadline and retained lifecycle events. Exact cancellation/race/framing and useful-session integration remain open; The source-backed docs/evidence/serial-boot-contract-2026-10-03/README.md now reconciles ABI22/ABI23 and selects a separate serial SESSION lifecycle experiment; no identifier or runtime allocation is made. Next qualify owner-only wait/halt with unchanged SESSION IDs/quotas, then actual sys-init/userland composition. The original bounded SI-07 kernel backlog is complete per docs/evidence/si07-completion-review-2026-10-03/README.md; full protocol/product and sibling acceptance remain separate. Host exhaustion/cancellation models do not establish exhaustive native race coverage.",
      "budget_seconds": 600,
      "owner": "Aether prototype; userland protocol epochs; sys-init policy and acceptance"
    },
    {
      "id": "AT-RECOVERY-OBSERVATION",
      "reference": "docs/NATIVE-SHELL-STARTUP.md",
      "invariants": "Actual EPIPE recovery, exact scoped child identities and phase cleanup; missing, stale or corrupted observations cannot qualify.",
      "command": "python3 -m unittest discover -s tests -p test_recovery_smoke.py -v",
      "oracle": "Four host counterexample tests check streams, pump42, phase order, unique24 terminals,21 admissions and completion. Native recovery cases run in AT-PIPELINE-CAPACITY.",
      "gaps": "Host tests are not native acceptance. Producer packet records128 capacity cases, five unchanged non-pipeline command regressions, linked stack inspection and119 Python/configured Zig/Rust checks. Independent recovery replay, reader reviews and shared SDK remain open.",
      "budget_seconds": 300,
      "owner": "Aether"
    },
    {
      "id": "AT-SCRATCH-SESSION-ORACLE",
      "invariants": "Typed owner-held scratch descriptions preserve shared offsets, truncate, EACCES, EOF, exact streams, identity and confirmed cleanup across a composed session.",
      "command": "python3 -m unittest discover -s tests -p test_scratch_smoke.py -v",
      "oracle": "Four host tests reject changed stream bytes, terminal status/identities, missing admissions, phase order and incorrect early-close diagnostics/cleanup. Native scratch cases run through AT-PIPELINE-CAPACITY.",
      "gaps": "Producer packet records149 capacity cases, five legacy command regressions,127 Python/configured Rust/Zig checks and12 new native comparisons with96 counterexamples. Verified independent userland acceptance adds12 comparisons and100 controls for the matched private profile. Shared SDK, reader review and real serial composition remain separate.",
      "budget_seconds": 300,
      "owner": "Aether",
      "reference": "docs/NATIVE-SHELL-STARTUP.md"
    },
    {
      "id": "AT-SERIAL-SESSION-ORACLE",
      "reference": "docs/NATIVE-SHELL-STARTUP.md",
      "invariants": "Exact prompt/input progression, separate stream routing, authenticated generations and phase cleanup; empty UART is not EOF.",
      "command": "python3 -m unittest discover -s tests -p test_serial_session.py -v",
      "oracle": "Five host tests reject future input, wrong generations, dropped/duplicated input, missing/duplicated prompts, unknown UART bytes, wrong/missing admissions and early observations/prompts. Eleven native controls run in AT-PIPELINE-CAPACITY.",
      "gaps": "Private AENMX008/ABI23 producer qualification covers160 matched capacity cases, five legacy cases and four envelope controls;132 host/configured checks and11 native comparisons with88 mutations pass. Independent userland SERIAL-SESSION-01\u201306 acceptance is verified in docs/evidence/serial-acceptance-review-2026-09-29:169 fresh native cases,132 host/configured checks,11 comparisons and151 checker controls. UL-081 static boundary assessment is verified in docs/evidence/session-sdk-intake-2026-09-29; bounded runtime ownership and candidate are now supplied and technically reviewed with exact local offline rebuild in docs/evidence/session-runtime-review-2026-09-29; actual independent technical/reader findings, SSDK-01\u201306 consumer/owner disposition, general terminal behavior and R1 remain open.",
      "budget_seconds": 300,
      "owner": "Aether prototype; userland workload and independent acceptance"
    },
    {
      "id": "AT-SESSION-LIFECYCLE",
      "reference": "docs/NATIVE-CONNECTIONS.md",
      "invariants": "Explicit AENMX009/ABI24 owner clock/park/halt; unchanged SESSION identities/quotas; worker denial and resource settlement before halt.",
      "command": "python3 docs/evidence/session-lifecycle-2026-10-03/run.py positive",
      "oracle": "Exact labelled probe phases, six genuine worker terminals/reclaims, >3000 idle ticks, UART consume/deadline and authorized quiescent halt; semantic negative controls retained in the packet.",
      "gaps": "Private mechanism witness only; actual sys-init/SESSION owner loop, complete consumer suite, independent review and R1 remain open.",
      "budget_seconds": 300,
      "owner": "Aether"
    },
    {
      "id": "AT-SESSION-OWNER-LIFECYCLE",
      "reference": "docs/NATIVE-CONNECTIONS.md",
      "invariants": "Selected ABI24 dispatcher drains available work, parks, settles one parent and children before halt; legacy fixture semantics and scoped UART rights preserved.",
      "command": "python3 docs/evidence/session-owner-lifecycle-2026-10-03/run.py short-session",
      "oracle": "Exact prompt-driven real dash command/pipeline/state/stderr/terminal/ten-reclaim trace; wide output bypasses fixture observation caps; retained long-idle control exposes bounded client transport limit.",
      "gaps": "Private owner only; healthy long idle requires scoped channel wait and matching userland client; actual sys-init/SDK/reader and R1 remain open.",
      "budget_seconds": 300,
      "owner": "Aether fixture/enforcement; userland runtime and sys-init policy separate"
    },
    {
      "id": "AT-ENTROPY-DEVICE",
      "reference": "docs/ENTROPY-DEVICE.md",
      "invariants": "BSP ownership, device identity/geometry, exact completion head/index/length, bounded partial fills and retained DMA on failure; no native API.",
      "command": "python3 scripts/entropy_smoke.py",
      "oracle": "Real backend draws/partial fills; exact semantic rejections; omitted length validator rejected; VM teardown and source identity checked.",
      "gaps": "Capability binding, physical hardware/IOMMU, entropy health and independent review pending.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-NATIVE-ENTROPY",
      "reference": "docs/NATIVE-ENTROPY.md",
      "invariants": "Per-domain selector/generation, full writable-span preflight, byte quota, permanent close and no ambient authority.",
      "command": "python3 docs/evidence/native-entropy-2026-10-04/native.py",
      "oracle": "Real device draw with legacy fixture checks; disabled and omitted quota control exact terminal oracles.",
      "gaps": "SDK facade/independent adoption, general service composition, latency and health policy pending; replacement qualified only in the bounded memory/thread fixture.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-NATIVE-THREAD-REUSE",
      "reference": "docs/NATIVE-THREAD-REUSE.md",
      "invariants": "Monotonic generation-bound lifetime IDs; exact-stop retirement; unchanged live-slot/backing quotas and ordinary ceiling.",
      "command": "python3 docs/evidence/native-thread-reuse-2026-10-04/setup.py && python3 docs/evidence/native-thread-reuse-2026-10-04/native.py",
      "oracle": "512 safe admissions, default four, stale/running/foreign rejection, exact same-ID mutant254 and supervised reset",
      "gaps": "two live slots and memory unchanged; parent-only/bare-child fixture; no full-engine/public SDK capacity claim",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-NATIVE-THREAD-ORIGIN",
      "reference": "docs/NATIVE-THREAD-ORIGIN.md",
      "invariants": "Same domain grant; actual creator mask, exact-ID reaping and unchanged live/lifetime/memory limits.",
      "command": "python3 docs/evidence/native-thread-origin-2026-10-04/setup.py && python3 docs/evidence/native-thread-origin-2026-10-04/native.py",
      "oracle": "Parent-A-B creation/reaping while primary parked, mask isolation, legacy denial and omitted-mask mutant254.",
      "gaps": "Bare child fixture; production TCB/SDK, full-engine resources and independent review remain open.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-NATIVE-BACKING",
      "reference": "docs/NATIVE-BACKING.md",
      "invariants": "Validated usable-only contiguous region, canonical boot alias, no partial write on rejection and retained exclusive BSP ownership.",
      "command": "python3 docs/evidence/native-backing-plan-2026-10-04/native.py; zig build test",
      "oracle": "64MiB zero verification, overlap rejection and exact final-byte/omitted-clear controls; all lab modes reject with release-artifact.",
      "gaps": "No native service binding/allocator/CR3 reuse, full engine budget, physical hardware/IOMMU or independent review.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-MEMORY-PLANS",
      "reference": "docs/NATIVE-BACKING.md",
      "invariants": "Constant-size validated descriptors; IF-clear authoritative metadata borrowed only through commit; virtual order under fragmentation, visited-record publication/clearing, whole-request rejection; unchanged default128/large2048 quotas.",
      "command": "zig test kernel/native_memory.zig --cache-dir .zig-cache --global-cache-dir .zig-cache/global; run both existing memory and pair/pthread lifecycle profiles with pinned SDK inputs",
      "oracle": "Exact size and fragmented/committed traversal tests; nonadvancing cursor mutant fails the exact quota/order oracle; complete source-matched native suites with their semantic rejection markers.",
      "gaps": "No larger native binding, linear allocator claim, whole-engine admission, independent reader or SDK adoption.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-BACKING-ALIASES",
      "reference": "docs/NATIVE-BACKING.md",
      "invariants": "Exclusive boot-owned physical frames; fresh supervisor RW-NX aliases shared across two BSP roots; no inherited HHDM/global/PCID translations; readonly/NX/U-S/detach hardware faults and flush-before-zero/reuse; ordinary native quotas unchanged.",
      "command": "python3 docs/evidence/native-backing-alias-2026-10-04/native.py; zig build test; run both existing memory profiles and scripts/regression.py",
      "oracle": "Exact CR2/vector/CPL/error records for four actual faults; first/last patterns across both roots and whole-region zeroing; omitted RO/NX/U-S/detach each reaches its specific forbidden-progression panic; all thirteen lab cases and release exclusions.",
      "gaps": "No native service binding, cross-core shootdown, allocator/frame reclamation, malicious DMA, physical hardware or full engine/SDK/release adoption.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-EXTERNAL-BACKING",
      "reference": "docs/NATIVE-EXTERNAL-BACKING.md",
      "invariants": "Single BSP-owned retained physical pool, disjoint existing-quota partitions and State authority; bootstrap-only HHDM views retarget before admission; fixed-length payload pointers only in opt-in profiles; immutable kernel aliases and detach/flush-before-zero/reuse.",
      "command": "Run the frozen evidence recipes in docs/evidence/native-external-backing-2026-10-04; zig build test",
      "oracle": "Exact old quota/pin/stale/permission/stop/context outcomes under embedded and external memory; actual omitted immutable narrowing fails named invariant; old lab physical faults and release negative exclusion.",
      "gaps": "No larger engine admission, new ABI, broader process-profile external qualification, cross-core/DMA/hardware or independent adoption.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-MEMORY",
      "reference": "docs/NATIVE-SERVICE-MEMORY.md",
      "invariants": "One larger domain and three small disjoint owners; metadata/payload view bounds follow checked partitions through reset; queries and pins use actual quota; detach/flush/zero precedes reuse; old profiles and child limits unchanged.",
      "command": "Run frozen evidence recipes in docs/evidence/native-service-memory-2026-10-04; zig build test",
      "oracle": "Actual large and small budgets, complete allocation/exhaustion/metadata retry, exact protection faults, middle-span zeroing, stale-handle and stop/replacement outcomes; omitted protection/zero and prerequisite/release guards reject exactly.",
      "gaps": "No measured engine budget or larger live-worker admission, general VM, cross-core/DMA/hardware, independent SDK/reader adoption or R1 assembly.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-SCANS",
      "reference": "docs/NATIVE-SERVICE-SCANS.md",
      "invariants": "Owner-local bounded temporary set and constant cursor; actual owner extent, complete preflight and pin/flush/zero/reuse unchanged; legacy typed paths unchanged.",
      "command": "Run frozen recipes in docs/evidence/native-service-scans-2026-10-04; zig build test",
      "oracle": "Fragmented/permuted differential plans, coverage mutant, full three-generation large image and exact fault/lifetime/omission outcomes under the existing watchdog.",
      "gaps": "No wall-clock WCET or measured stack peak, expanded workers, independent adoption, full engine or R1 assembly.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-WORKERS",
      "reference": "docs/NATIVE-SERVICE-WORKERS.md",
      "invariants": "One 82-record service owner and three two-record companions; checked views reconstruct after reset; context lists remain owner-local temporary borrows; exact grants/IDs/pins/lifetimes and stop/zero/reuse unchanged.",
      "command": "Run frozen recipes in docs/evidence/native-service-workers-2026-10-04; zig build test",
      "oracle": "82 live 256 KiB stack/4 KiB FS cookies, small two-slot exhaustion, no ordinal consumption on full slots, live pins/retire and stop/replacement; actual omitted rebind and release controls fail exactly.",
      "gaps": "No native upstream engine/TCB or measured budget/high-water/WCET, independent reader/SDK adoption or R1 assembly.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-MUSL",
      "reference": "docs/NATIVE-SERVICE-MUSL.md",
      "invariants": "Existing owner-local memory/thread authority and pins; real musl TLS/list and join lifetime; failed realloc preserves original buffer; no general VM or SDK adoption.",
      "command": "Run frozen recipes in docs/evidence/native-service-musl-2026-10-05; zig build test",
      "oracle": "Actual full-owner pthread capacity, private TLS/errno/guards, counted park/wake, join reclamation, failed allocation preservation, stop/replacement and exact self/guard controls.",
      "gaps": "No engine execution/peak, measured stack high-water, production SDK, broader VM or independent consumer/R1 acceptance.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-RETIREMENT",
      "reference": "docs/NATIVE-SERVICE-RETIREMENT.md",
      "invariants": "Actual musl per-thread data and destructor lifetime; pending is not stopped; confirmed exit precedes unmap/retire; existing native authority and quotas stay.",
      "command": "Run frozen recipes in docs/evidence/native-service-retirement-2026-10-05; zig build test",
      "oracle": "82/two live TSD values, destructor repetition/deletion, joinable and detached cleanup plus stopped replacement; omitted real destructor traversal and early unmap fail exactly.",
      "gaps": "No complete engine reaper/blocked-creator/worker-origin concurrency, measured engine peak, production SDK/independent consumer or R1 acceptance.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-REAPER",
      "reference": "docs/NATIVE-SERVICE-REAPER.md",
      "invariants": "Held native grants; blocked primary uses real join; one worker owns cleanup; confirmed stop before mapping release; worker counts toward existing quota.",
      "command": "Run frozen recipes in docs/evidence/native-service-reaper-2026-10-05; zig build test",
      "oracle": "Real 82/two musl workers with joinable reaper and detached peers; accepted primary compare-park; ordinary/reverse cleanup and parked replacement; origin denial355 and early unmap352.",
      "gaps": "No worker-origin creation/concurrent admission, production reaper/SDK, actual engine peak/startup or independent consumer/R1 acceptance.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-ORIGIN",
      "reference": "docs/NATIVE-SERVICE-ORIGIN.md",
      "invariants": "Actual worker-origin musl creation uses held native grants, atomic admission counters and upstream list-lock publication; one cleanup owner after completed creation; confirmed stop before unmap/retire.",
      "command": "Run frozen recipes in docs/evidence/native-service-origin-2026-10-05; zig build test",
      "oracle": "Two actual concurrent creator preflights,40 descendants each within82; peer and single-creator profiles; masks/TSD/accounting/parked replacement; parent-only359, wrong native clone360, early unmap352 and omitted park356.",
      "gaps": "No creation overlapping cleanup/reuse, production runtime/SDK, observed engine peak/startup, independent consumer or R1 acceptance.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-DYNAMIC",
      "reference": "docs/NATIVE-SERVICE-DYNAMIC.md",
      "invariants": "Atomic local record lifecycle; actual native stop before unmap/retire and reuse; held grants, live pins and unchanged quotas; primary real join park.",
      "command": "Run frozen recipes in docs/evidence/native-service-dynamic-2026-10-05; zig build test",
      "oracle": "Two real musl rounds,162 service/three peer lifetime admissions, creation overlaps cleanup, native IDs/TSD/TLS and budgets across reuse; stopped replacement and exact clone/unmap/overlap/park controls.",
      "gaps": "No production runtime/SDK reaper resource acceptance, actual engine startup/peak or independent consumer/R1 acceptance.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-COPY",
      "reference": "docs/NATIVE-SERVICE-COPY.md",
      "invariants": "Per-owner checked page fragments; no effect on partial input/output failure; mask overlap and exact native grant/storage/admission/pin/error/ABI/quota semantics preserved.",
      "command": "Run frozen recipes in docs/evidence/native-service-copy-2026-10-05; zig build test",
      "oracle": "Real cross-page masks/descriptors and buffer preservation; actual musl dynamic/regression/stop and exact denial controls; maintained memory/pair/lifecycle/stack/mask regressions and repeat workload under fixed watchdog.",
      "gaps": "No full engine281-lifetime/peak/WCET, calibrated providers, production SDK or independent consumer/R1 acceptance.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-SERVICE-PINS",
      "reference": "docs/NATIVE-SERVICE-PINS.md",
      "invariants": "Validated range coverage once; every live FS/clear-TID/TLS/stack and wait pin remains checked under owner serialization before any mapping effect.",
      "command": "Run frozen recipes in docs/evidence/native-service-pins-2026-10-05; zig build test",
      "oracle": "Repeated full-service replacement, four-round reuse, real skip-pin mutant373, old dynamic/copy/mask controls, Plan pin boundaries/error order and maintained memory/thread regressions.",
      "gaps": "No actual engine/ARC/native peak, calibrated latency, production SDK or independent consumer/R1 acceptance.",
      "budget_seconds": 1800,
      "owner": "Aether maintainer; implementing contributor retains and triages each run"
    },
    {
      "id": "AT-CLOCK",
      "invariants": "BSP HPET period/width, supervisor MMIO, checked monotonic conversion and independent source/deadline domains; scoped absolute park/requeue/error/teardown.",
      "command": "zig build test; new private native clock experiment using .deps/native-current/sdk and docs/evidence/native-clock-2026-10-05/clock-probe.c; historical archive setup/check recipes retired; PYTHONPATH=tests python3 -B -m unittest test_clock_attach -v",
      "oracle": "Source/rollover/conversion and mixed-clock models; real native elapsed reads/absolute parks, disabled/authority/field/MMIO/missing-source and tick/early-wait controls; selected legacy target suites. Actual Debug/ReleaseSafe clock.attach reattachment accepts/preserves only hardware Accessed bit5; all other frame/flag changes and absent source fail without writes. Four compiling controls detect missing allowance, widened user/frame mask and dropped Accessed state.",
      "gaps": "No UTC/TSC physical calibration/SMP/production musl timed conditions, full engine or independent consumer signoff.",
      "owner": "Aether native time/execution; userland owns maintained SDK/POSIX adapters",
      "budget_seconds": 1800,
      "reference": "docs/NATIVE-CLOCKS.md"
    },
    {
      "id": "AT-RETENTION",
      "invariants": "Owned completed run cleanup; unchanged pinned consumer fixtures; compact results including failed attempts; no historical test archives as active dependencies.",
      "command": "python3 -m unittest discover -s tests -p test_evidence_retention.py; zig build test",
      "oracle": "Generated files removed after pass/failure, diagnostics retained, large logs bounded, outside/nested/symlink paths denied, original fixture hashes and drift/traversal denials.",
      "gaps": "POC retention does not preserve historical artifact replay or establish release support retention.",
      "owner": "Aether contributor running the suite; maintainer owns retention policy",
      "budget_seconds": 300,
      "reference": "docs/DEVELOPMENT.md"
    },
    {
      "id": "AT-LIBC-CLOCK",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Actual musl 1.2.6 conditions preserve absolute monotonic deadlines through spurious wakes and mutex cleanup; elapsed sleep parks; bounded values/errors and unsupported UTC remain explicit. Legacy virtual fixture unchanged.",
      "command": "python3 scripts/libc_clock_smoke.py --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Two isolated owners/two child generations; timeout, signal and contended relock; exact same-deadline retries; actual relative/absolute sleep; malformed/overflow/too-far/UTC condition errors with reacquired mutex; early completion 331 and disabled 330; legacy zero terminals.",
      "gaps": "Private two-child BSP profile only; no production SDK, shared conditions, signals/cancellation, UTC, expanded worker clocks or full engine.",
      "owner": "Aether native conformance; userland owns maintained POSIX SDK",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-CLOCK",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "82 service/two peer live workers use one retained absolute deadline, bounded native scans and source observations; exact wakes/requeue/pins, stop/replacement and quota restoration.",
      "command": "python3 scripts/service_clock_smoke.py --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/libc_clock_smoke.py --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test; python3 scripts/regression.py",
      "oracle": "Exact full cohort registrations/settlements, distinct replacement deadline, bounded scan observation, original grants/8192/128 quotas, supervisor stop and three reclaims; named early/wake/requeue/pin controls and legacy capacity.",
      "gaps": "Bare native storage trial; no actual expanded musl TCB/conditions, physical WCET, UTC or full engine startup.",
      "owner": "Aether native time/service-memory owner; userland maintains SDK",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-LIBC-CLOCK",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Actual musl timed conditions retain absolute deadlines and reacquire mutexes at82/two-worker scale; elapsed sleep, live word lifetime, TSD/join/retirement and stop/replacement preserve authority/quotas.",
      "command": "python3 scripts/service_libc_clock_smoke.py --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/libc_clock_smoke.py --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Repeated full condition cohorts; explicit original-deadline spurious retries; broadcast/actual contended relock; per-worker relative/absolute elapsed sleep; malformed/overflow/over-bound/UTC errors and waiter cleanup; confirmed stop and three reclaims; named early381/disabled380 plus legacy joinable/reaper. Trace corruptions reject without requiring all wake-scan completions to have periodic timeout logs.",
      "gaps": "Private BSP conformance only; no maintained SDK, UTC, interruption/cancellation, shared-process conditions, physical WCET, full OpenZFS lifecycle or R1 acceptance.",
      "owner": "Aether native conformance; userland owns maintained SDK",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-ELAPSED",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Actual selected libzpool CV/delay and libtpool elapsed blocks use monotonic time; absolute deadlines and exact lbolt quantum survive musl waiting, owner restoration, error/stop/replacement and unchanged quotas.",
      "command": "python3 scripts/service_libc_clock_smoke.py --openzfs --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/service_libc_clock_smoke.py --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Byte-identical selected baseline and original objects; exactly two reviewed upstream object replacements, no probe in full engine; actual82/two-worker timeouts/spurious/broadcast/stop, relative/tick waits/delay and libtpool initializer/deadline blocks; explicit early125/old-domain125/disabled380; deterministic C arithmetic/error/owner counterexamples and unchanged real-musl regressions.",
      "gaps": "Full-engine relink is build-only against guarded SDK. No tpool lifecycle, long native waits, truthful UTC, scoped production resources/provider binding, maintained SDK, filesystem persistence or R1 release acceptance.",
      "owner": "Aether native/OpenZFS conformance; userland maintains SDK",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-ENTROPY",
      "reference": "docs/NATIVE-ENTROPY.md",
      "invariants": "Selected actual OpenZFS random init/fill/fini uses explicit native grant, exact bounded progress, shared quota and permanent close; old elapsed semantics, stop/replacement and authority/quotas remain intact.",
      "command": "python3 scripts/service_libc_clock_smoke.py --openzfs-entropy --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/service_libc_clock_smoke.py --openzfs --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Actual82/two-worker OpenZFS/musl composition draws and drains exact4096-byte quota, rejects after close, replaces/stops correctly, and rejects absent/future/closed125 plus omitted-quota395; real QEMU hardware backend; deterministic actual C21 chunk/error/range/lifecycle cases; byte-identical baseline/originals and only two selected object replacements, no test probes in engine.",
      "gaps": "Private BSP grant and selected port only, no entropy quality/health/reseed, physical/IOMMU, full engine entropy usage/resources/startup, production SDK/getentropy/device namespace, long waits/UTC, persistent filesystem or R1.",
      "owner": "Aether native/OpenZFS conformance; userland maintains SDK; filesystem service owns eventual engine policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-HEAP",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Unchanged actual libspl malloc fallback uses only granted native backing; default OOM preserves live bytes/accounting; zero/aligned/cache allocations free or are reclaimed after confirmed stop.",
      "command": "python3 scripts/service_libc_clock_smoke.py --openzfs-heap --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/service_libc_clock_smoke.py --openzfs-entropy --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Actual82/two-worker musl and elapsed/entropy composition; measured owner backing at fixed heap phases, live4MiB/16KiB allocations, exact default OOM/no effects, aligned cache callbacks, free/replacement; omitted free rejects399; diagnostic corruption tests; baseline/engine ELF unchanged with no heap observer.",
      "gaps": "Private malloc fallback only; NOFAIL/constructor-error/reclaim behavior remains unqualified. No ARC or full-engine resource fit, scoped total-resource/CPU/identity/configuration/volume provider, production long wait/UTC, SDK owner acceptance or R1.",
      "owner": "Aether native/OpenZFS conformance; userland maintains SDK; eventual filesystem service owns ARC policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-ALLOCATION",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Actual selected malloc fallback NOFAIL has one attempt then fatal125; DEFAULT constructor failure frees raw storage without a destructor or publication; cache metadata must succeed or terminate. Existing grants and elapsed/entropy ownership remain.",
      "command": "python3 scripts/service_libc_clock_smoke.py --openzfs-alloc --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/service_libc_clock_smoke.py --openzfs-heap --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Fresh checked dependencies and byte-identical originals for every selected inline-header consumer; actual rebuilt full closure without test observers; actual82/two-worker musl elapsed/entropy/heap composition, successful NOFAIL, repeated DEFAULT constructor rejection/cleanup, omitted-free399/old-constructor410, native NOFAIL malloc/zero/aligned/constructor/cache-metadata/invalid125; controlled actual C single-attempt counts/cleanup and old-loop/constructor counterexamples.",
      "gaps": "Fatal private exhaustion is not blocking KM_SLEEP, reclaim policy, core dumping, transaction rollback or full-engine runtime acceptance. Required scoped resources/CPU/ARC policy, helpers/281 lifetimes, identity/configuration/volume, longer waits/UTC, maintained SDK/owner acceptance and R1 remain open.",
      "owner": "Aether native/OpenZFS conformance; userland maintains SDK; filesystem service owns eventual resource/ARC policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-RESOURCES",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Checked total granted backing and free-page observations never mean physical RAM or reservations. Core-local profile has one assigned CPU; absent/stale authority and signed/malformed/overflow results fail125 before publishing unsigned memory. Public sysconf, quotas and selected queue policies remain.",
      "command": "python3 scripts/service_libc_clock_smoke.py --openzfs-resources --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/service_libc_clock_smoke.py --openzfs-alloc --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Actual resource getter on8192/128-page native grants before/during/after allocation, stable total and one assigned core; absent/future125 and free-as-total414 controls. Checked kernel initialization and header/taskq CPU bindings with fresh consumer rebuild/original byte equality; retained allocation/elapsed/entropy controls. Host actual validation covers signed denial, zero, excess free, overflow and revalidation.",
      "gaps": "One-CPU profile is not a topology API or multi-CPU discovery. Full-engine relink is not entry; ARC/service headroom/engine helpers, identity/configuration/volume, longer waits/UTC, public SDK/owner and R1 acceptance remain.",
      "owner": "Aether native/OpenZFS conformance; userland maintains SDK; filesystem service owns ARC/resource policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-ARC-PRESSURE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "ARC adapter reads actual checked total/free granted backing without entropy draws or hidden allocation/reclaim. Signed free-minus-domain headroom; page-rounded10 percent initialization precedes background callers. Preserve32MiB floor, quotas, selected queue policy and public SDK.",
      "command": "python3 scripts/service_libc_clock_smoke.py --openzfs-arc --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/service_libc_clock_smoke.py --openzfs-resources --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; zig build test",
      "oracle": "Actual ARC adapter and header/stat types with native map/unmap across positive/zero/negative pressure and stable quota, exact entropy drain, invalid-headroom125 and old simulated-pressure415; absent/foreign/future resource125 and free-as-total414. Actual ARC initializer rebuild/original bytes, unchanged resource regression and host actual math/initializer/floor checks.",
      "gaps": "Fixture owns ARC stats and no ARC engine is started. Headroom target is not reservation, allocator live bytes or a guarantee of reclamation. Throttle/reap, real dirty transactions, growth/eviction, engine/helper/281-lifetime fit, providers, long waits/UTC and SDK/owner/R1 acceptance remain.",
      "owner": "Aether native/OpenZFS conformance; eventual Rust filesystem service owns ARC policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-LIBC-LONG-WAITS",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Private opt-in actual musl elapsed sleeps/monotonic conditions retain original absolute deadlines beyond one second, using authority-checked native parks of at most one second; final timeout, errors, mutex cleanup and default profile remain explicit.",
      "command": "python3 -m unittest discover -s tests -p test_long_waits.py -v; python3 scripts/libc_clock_smoke.py --long-waits --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json",
      "oracle": "Actual C controlled providers check original deadlines, bounded chunks, wake/mismatch, early intermediate timeout, denied/failed sources and signed ranges; native two-second relative/absolute sleep and conditions, original-deadline retries/reacquired mutex/waiter cleanup; early331/old-bound341 rejection. Default object/image identity reviewed against prior receipt. Checked --case selection rejects unavailable/empty coverage; boot envelope must contain recorded ELF.",
      "gaps": "Private two-child BSP profile; no maintained SDK, expanded long-wait cohort/stop witness,30-second idle linger, UTC, signals/cancellation or full engine entry.",
      "owner": "Aether native conformance; userland owns production SDK adoption",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-LONG-SLEEP",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Opt-in82/two-worker two-second relative/absolute elapsed sleeps preserve native one-second park admission and exact owner-local cleanup; stop after first-chunk expiry quiesces live words before fresh replacement. Existing900ms conditions retain original deadlines.",
      "command": "python3 -m unittest discover -s tests -p test_service_libc_clock.py -v; python3 scripts/service_libc_clock_smoke.py --long-waits --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json; python3 scripts/service_libc_clock_smoke.py --case timeout --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json",
      "oracle": "Actual musl full-worker timeout/spurious/stop and exact old-bound384; native primary parks past latest worker start+1.1s then verifies all82 parked and no sleep completion before readiness; exact three reclaims/remaining backing and mapping pages; focused trace corruption and unsupported-profile selection reject; default timeout image identity.",
      "gaps": "Private BSP producer fixture; no maintained SDK,82-worker long condition cohort,30-second tpool linger,UTC/signals/cancellation,physical accuracy or full engine entry.",
      "owner": "Aether native conformance; userland owns maintained SDK adoption",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-RUNTIME-INTAKE",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Sealed userland runtime supplement consumes unchanged guarded base; charged reaper, owner-local lifetime, long condition wait, busy/final shutdown and confirmed stop/reclaim/replacement.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py -v; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2",
      "oracle": "All282 delivery and240 base seal members verify; private archive rebuild identical; independent full81/one application workers plus reaper; named disabled804/early802 reject; exact three successful/reclaimed generations or confirmed first stop. Private diagnostic guard compiled over host rows: exact C/seven zero padding bytes, wrong tag/padding/phase/owner/profile and broken-padding control. Actual finally branch reads attached case disk against distinct unused seed; missing case disk never falls back.31 tests on final bytes.",
      "gaps": "Private candidate intake only; engine providers/UTC/full engine/helper/ARC lifecycle and independent human reader remain open.",
      "owner": "Aether independent intake; userland owns runtime",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-RUNTIME-OPENZFS-WAITS",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Actual selected OpenZFS CV/mutex functions compose with the maintained archive at full81/one application capacity plus reaper; original monotonic deadlines and owner bookkeeping survive waits, finish and confirmed replacement.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py -v; python3 -m unittest discover -s tests -p test_openzfs_elapsed.py -v; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --openzfs-waits",
      "oracle": "Pinned port baseline rebuild and actual map object/function binding; independent normal/stop lifecycle; missing clock804 and actual OpenZFS early-expiry125 reject; changed adaptation context and substitute object maps reject.",
      "gaps": "Private caller witness; no engine startup/fini, pool lifecycle, real30-second linger, resource-policy/UTC/provider closure, persistence or human reader acceptance.",
      "owner": "Aether OpenZFS port qualification; userland owns maintained runtime",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-RUNTIME-ENGINE-COMPOSITION",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Selected elapsed/entropy/allocation/resource/ARC ports and sealed runtime bind in the whole engine; initial thread initializes before engine entry and finishes after engine fini; busy/failed retirement never certifies cleanup.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py -v; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --engine-link; zig build test --cache-dir .zig-cache --global-cache-dir .zig-cache/global",
      "oracle": "Actual C wrapper host ordering/init/finish/survivor failures; pinned selected port rebuild and actual engine/runtime map origins; real old-adapter duplicate and missing archive rejection; static relocations/imports and actual kernel parser on current ELF bytes; build-only selection cannot enter native cases.",
      "gaps": "Build/host checks only; actual engine not executed. Native profile/helper/ARC/heap admission, identity/configuration/volume/UTC,30-second linger/cancellation and startup/fini/restart remain open.",
      "owner": "Aether engine composition; userland owns maintained runtime",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-STARTUP-METADATA",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "A private initial-thread startup record is validated and copied once before actual engine consumers; missing/malformed/unsupported configuration never publishes a valid view or falls back to failed path I/O.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_startup.py -v; python3 -m unittest discover -s tests -p test_service_runtime.py -v; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --startup-config",
      "oracle": "Actual provider malformed/copy/rebind checks; native normal/stop/replacement plus missing125/version830/cache830; selected whole-engine map binds four actual startup providers.",
      "gaps": "Private empty-cache fixture metadata only; persistent identity, production Rust handoff, imported caches, native engine admission, volume/UTC and reader review remain open.",
      "owner": "Aether storage port; sys-init retains launch/configuration policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-EMPTY-ENGINE-ADMISSION",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Default empty READ-mode and separately selected read/write-mode engine startup/fini executes with current explicit providers, maintained runtime and unchanged enforcing resource limits. Small peer image denial and three terminal/reclaim/fresh owner generations are required.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py -v; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --engine-native; repeat with --case no-fini, --case no-finish and --case no-entropy; repeat with --case write-mode for actual SPA_MODE_READ | SPA_MODE_WRITE",
      "oracle": "Actual 18 symbol origins/static loader checks precede QEMU. Source-bound witness checks four owner-local backing/live/admission observations; every generation returns0, runtime finishes live0, small slot rejects ENOMEM, stale handles reject and exactly three owners reclaim. Deliberately omitted fini224/finish225 and missing entropy125 reject with supervisor401/reclaimed0.",
      "gaps": "No imported pool/device, transaction, persistence, UTC, libtpool cancellation/linger, production Rust handoff or independent reader acceptance. Observations are checked in target and not numerically exported.",
      "owner": "Aether empty-engine qualification; userland owns maintained runtime; sys-init owns supervision policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-BLOCK-SERVICE-MEMORY",
      "reference": "docs/NATIVE-BLOCK.md",
      "invariants": "The existing ABI14 one-hop region grant composes with large service backing only under explicit native-service-block selection; default service and region profiles retain their contracts.",
      "command": "python3 -m unittest discover -s tests -p test_block_profile.py; python3 -m unittest discover -s tests -p test_build_policy.py; python3 scripts/block_smoke.py --native --regions --rust-worker --service-memory --libc-build .deps/native-current/sdk --tools-lock .deps/native-current/sdk/tools.lock.json",
      "oracle": "Actual Rust/C clients exercise writes, fresh-VM reads, attenuation, pointer/region validation, close and actual fault/replacement denial. C sector copies cross a real 4KiB boundary with guards; mapped-first/unmapped-second and read-only destinations reject without caller/media mutation. Complete disk readback/canaries enforce scope; the omitted composition flag rejects before writes. Existing small region and service-runtime native normal regressions pass.",
      "gaps": "Native primitive composition only; no maintained pthread runtime/block composite, engine vdev binding, regrant/recovery factory, UTC, pool or persistent filesystem acceptance.",
      "owner": "Aether native capability/backing/device owner",
      "budget_seconds": 1800
    },
    {
      "id": "AT-RTC-RAW-SOURCE",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Read-only bounded coherent raw q35/TCG samples require the exact live thread grant and fully writable owner-local output; no calendar interpretation or UTC authority enters the kernel.",
      "command": "zig test kernel/native_rtc.zig; python3 -m unittest discover -s tests -p test_rtc_source.py; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --rtc-source",
      "oracle": "Controlled update/mode/battery/frozen/budget/source models; explicit current-date and leap-day native samples with before/after bounds; wrong/stale grants, invalid fields, protected/cross-page output denials without mutation; maintained runtime and three reclaimed owner generations; unchanged ELF rejects disabled source831.",
      "gaps": "QEMU TCG only, one-second quantization. No source trust, UTC SDK, physical NMI ownership, synchronization, realtime waits or persistent timestamp acceptance.",
      "owner": "Aether raw native source; Aether-userland shared UTC policy/runtime",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-RUNTIME-BLOCK",
      "reference": "docs/NATIVE-BLOCK.md",
      "invariants": "Maintained real pthread/backing/clock lifecycle composes with exact one-hop region ownership; peers/replacement lack the volume, close is final and all dirty bytes stay inside its region.",
      "command": "python3 -m unittest discover -s tests -p test_service_block_runtime.py; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --block-region",
      "oracle": "Full81/one application capacity plus charged reaper and3 reclaims; actual worker reads; one write/flush and same-disk fresh-VM verify with whole-disk comparison; attenuated write/flush denials; corrupt-read rejection840 before mutation; malformed profile/external-disk requests reject before launch.",
      "gaps": "Private startup route only; no production vdev, Rust service/FFI, UTC, automatic regrant/recovery or pool acceptance.",
      "owner": "Aether independent volume/runtime qualification; userland maintains runtime; sys-init owns production supervision",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-VOLUME-BINDING",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Immutable per-owner Rust volume view revalidates native possession; actual file-vdev resolves only one declared region, does not advertise TRIM, and reports exact completed-sector residuals without replay. Engine file close differs from volume revoke. Flush provider/leaf completion is distinct from parent ZIO success and upstream cache/non-concrete bypasses.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py; python3 -m unittest discover -s tests -p test_service_runtime.py; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --engine-volume",
      "oracle": "Pinned actual kernel/vdev objects and Rust archive origins, actual archive-omission rejection, three generations and small-peer denial; positioned first/last/multi-sector I/O, partial protected-buffer read/write, unsupported calls, bounds/right/close/replacement denials; write/flush and same-disk fresh-VM readback with complete disk canaries; corrupt data rejects840. Host actual owned fsync/upstream callback/constructor bodies with injected backend errors and bypasses; actual Rust returned flush failure performs no adapter replay.",
      "gaps": "Private fixed-selector file-vdev/open/close and synchronous provider only. Host flush bodies use synthetic device/queue transport; no actual native write-ZIO/leaf-flush qualification, pool/transaction, production Rust service protocol, parallel I/O qualification or recovery/regrant acceptance. Candidate UTC attribution/reader gates remain.",
      "owner": "Aether private engine/volume provider; userland owns runtime/UTC; sys-init owns production supervision",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-VOLUME-WORKER-LIFETIME",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Real taskq callback keeps owner-local file/request/buffer alive through drain; nonblocking single-entry exhaustion rejects; parked-before-I/O work after native revoke reports EBADF and complete residual without mutation. Drain/destroy precedes reference release and engine/runtime retirement.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py; python3 -m unittest discover -s tests -p test_service_runtime.py; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --engine-volume-workers",
      "oracle": "Actual upstream taskq/Rust/C provider map origins and worker TSD/pthread identity; write/read-only cases, queued revoke and output canaries, single-entry NOSLEEP rejection, exact three owner/reclaim generations; deliberately inlined actual dispatcher rejects846; unchanged default volume ELF digest.",
      "gaps": "Private taskq/provider fixture only; no actual ZIO completion substitution or pipeline qualification, already-issued device cancellation, multiworker throughput, pool/UTC, production service/regrant/recovery or independent reader acceptance.",
      "owner": "Aether private volume/helper qualification; userland runtime/UTC; sys-init production supervision",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-SPA-UTC-GATE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Actual SPA-add wall-time consumer fails closed through original termination when maintained realtime is unavailable; observer preserves provider errno/output/result and does not supply UTC or initialize synthetic SPA state.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py; python3 -m unittest discover -s tests -p test_service_runtime.py; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --engine-spa-utc",
      "oracle": "38 actual upstream/probe/Rust/maintained-runtime origins, unchanged sentinel on unavailable realtime; actual spa_add -> allocator debug wall-time failure produces849/supervisor401/reclaimed0, omitted observer produces125; readonly whole disk canaries. No normal fini/reclaim claim.",
      "gaps": "No-UTC failure regression only; newly delivered candidate UTC is separately opt-in. SPA activation, physical ZIO, pool/transaction/persistence, production service and peak/stack/throughput remain unqualified.",
      "owner": "Aether private engine/provider; userland runtime/UTC; sys-init production supervision",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-SHARED-UTC",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Pinned opt-in UTC is established before app/engine helpers, immutable and authority-checked per read; actual guarded wall-time consumers reject unavailable time and signed overflow. Helper/SPA/engine cleanup precedes live1 UTC close and live0 runtime finish.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py; python3 -m unittest discover -s tests -p test_openzfs_wall_time.py; python3 -m unittest discover -s tests -p test_service_runtime.py; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --engine-utc --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v2",
      "oracle": "Exact314/282/240 nested intake and identical rebuilt UTC archive;49 actual symbol origins, normal/leap dates through real SPA-add and taskq worker, ordered close/live0/reclaim; disabled RTC856 and missing policy855 preserve outputs/media. Actual pinned host time bodies separately test arithmetic/errors/overflow; no native overflow claim. Eight real SPA/taskq reuse cycles on a leap anchor require29 phase rows per owner; seven-cycle short control must finish its owner normally but reject847/zero reclaims for the exact phase-sequence mismatch in the supervisor.",
      "gaps": "Initial missing terminal remains unresolved despite later passes; candidate stays opt-in and is not promoted. No SPA activation, physical ZIO, pool/transactions/reboot, production service, native beyond-firmware-range calendar, UTC trust/accuracy or independent reader acceptance.",
      "owner": "Aether actual engine intake; userland shared UTC/runtime; sys-init production supervision",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-RUNTIME-REAPER-CYCLE",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Detached exits must not hold a lock required by their sole reaper while awaiting that reaper. The witness changes ordering only, never runtime records or native retirement; numbers remain capability-scoped observations.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --case reaper-cycle; python3 scripts/service_runtime_smoke.py --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v2 --case reaper-serial",
      "oracle": "Five final ELF/map origins require actual original reap/unmap/lock bodies and two probe entry wrappers; wrapper omission refuses linking. Exact870 follows two stable parked/lock/stop/live observations across an actual monotonic wait, supervisor401/zero reclaims. Serial control must finish live0 and reclaim all three owners. Assertion/loader/watchdog failures cannot substitute.",
      "gaps": "Known candidate defect, not runtime acceptance or attribution of the original UTC missing terminal. Userland must deliver a reviewed maintained-runtime fix plus a UTC rebuild; then replace the expected-defect oracle with recovery/clean finish. No scheduling exhaustiveness, production pool or independent reader sign-off.",
      "owner": "Aether native witness; Aether-userland maintained runtime and UTC rebuild",
      "budget_seconds": 1800
    },
    {
      "id": "AT-SERVICE-RUNTIME-FIXED-REAPER",
      "reference": "docs/NATIVE-CLOCKS.md",
      "invariants": "Explicit corrected294/343-member candidates preserve guarded SDK and released/default pins; atomic free-last record ownership removes list-lock retirement dependency without changing native authority or quotas.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3; python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --case reaper-cycle; python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --case reaper-serial; python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --case reaper-exhaustion; python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --engine-utc --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Exact selected seals and identical elapsed/UTC rebuilds; wrong revisions reject before processing. Eight overlapping pairs per large owner retire A while B holds real musl lock; original bodies and clean three-owner reclamation required. Serial/full-capacity join/TSD/busy finish/stop and512 total admissions deny extra handle unchanged. Six actual UTC cases include29-row reuse and short847 plus disabled856/policy855.",
      "gaps": "Private candidate integration, not default promotion, exhaustive scheduling, human reader sign-off, attribution of prior leap stall or initialized SPA/ZIO/pool/persistence.",
      "owner": "Aether independent intake; Aether-userland maintained runtime/UTC",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-SPA-ACTIVE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Actual original SPA activation/deactivation and root ZIO completion; namespace and stack borrow owned by the primary thread through real wait/drain. Corrected UTC v3 explicitly selected, fixed native quotas and unchanged readonly media. No synthetic SPA/ZIO state or pool minimum reduction.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py; python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --engine-utc --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3 --spa-active",
      "oracle": "Exact selected slot reconstruction and final symbol origins. Positive eleven-row BIUVWAZDJFR sequence, three normal owner terminals, live0 and supervisor100/reclaimed3. Controls require857/858 with supervisor401/zero reclaims; other failures never qualify.",
      "gaps": "No physical ZIO, pool/create/import/transaction/reboot, production service, peak/stack/throughput or independent reader acceptance. Original missing UTC terminal remains unattributed.",
      "owner": "Aether private engine qualification; Aether-userland maintained runtime/UTC; sys-init production supervision",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-PHYSICAL-READ",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Authoritative original SPA/vdev allocation/open with unchanged pool minimum, real physical readonly ZIO and ABD/callback borrows until completion. First owner has one-use grant; replacements prove no authority. Grant closure occurs after completed read; separately selected revoked-ZIO case requires real ENXIO, intact destination and actual teardown. Whole media stays readonly.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py; python3 -m unittest discover -s tests -p test_service_block_runtime.py; python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --engine-utc --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3 --spa-physical",
      "oracle": "Exact slot90 reconstruction and actual final ELF origins; first-owner eighteen-row BIUVWACOQSTKHPDJFR sequence, replacements three-row BNR, terminal0/live0/100/reclaimed3. Real TOO_SMALL/EOVERFLOW861, absent callback862 and corrupted sector860 require401/zero reclaims. Separately selected healthy-open checkpoint867 is intentional unclean evidence, requiring401/zero reclaims and14 bounded observations: BIUVWAC, three actual 8KiB L/M provider pairs with valid entry/completion ordering, then O; it cannot qualify the later read or cleanup. Explicit physical selection executes exactly one case; zero native cases fail. Default16MiB versus explicitly selected owned64MiB+8KiB disk guards remain exact.",
      "gaps": "Readonly physical qualification only, not in-flight DMA cancellation, pool/create/import/transactions/persistence, production service or reader sign-off. Separately select --case spa-physical-revoked for error-path qualification. Original UTC terminal attribution remains open.",
      "owner": "Aether private engine/provider/harness; userland maintained runtime/UTC; sys-init production recovery",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-PHYSICAL-WRITE-FLUSH",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "One delegated disposable region and original synchronous physical write/flush pipeline. Owner-local witness records original callback leaf/provider identity and real result before upstream error suppression; borrows settle before release. No native authority/bounds/default change or automatic replay.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py; python3 -m unittest discover -s tests -p test_service_runtime.py; python3 scripts/service_runtime_smoke.py --fixed-reaper --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --engine-utc --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3 --spa-write",
      "oracle": "Original slot reconstruction and write/flush callback/provider/ZIO origins. Positive29-row sequence, actual provider success/readback, fresh-VM readonly verification and clean three-generation/reclaim witnesses. Exact868 missing flush,869 rights/closed-grant provider errors and871 missing write callback require401/zero reclaims; parent success alone fails. Entire image unchanged except declared512-byte sector; no standalone fresh-verify or zero-case acceptance.",
      "gaps": "Raw physical write/flush only, not pool/TXG/DMU/VFS, interrupted-media recovery, physical power-loss durability, production service or live device reset/regrant. UTC attribution/reader gates remain before persistent acceptance.",
      "owner": "Aether private engine/provider/harness; userland maintained runtime/UTC; sys-init production recovery",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-POOL-WITNESS-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Owner-local bounded generation-tagged ledger matches each provider and leaf completion. Errors remain sticky across concurrent slot reuse. No ZIO/buffer borrow, I/O lock, authority grant, reset/retry or native selection. Inspect only after upstream drain and no further admissions. Actual leaf/file identity stays immutable; target0 rejects until one original assigned transaction target is bound atomically. Binding preserves all earlier I/O/errors/slots; zero/repeat/conflict/competing publication rejects.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py",
      "oracle": "Optimized actual C ledger with 32 overlapping pthread workers, 4096 writes and 4096 flushes. Exact stale/duplicate/foreign/partial/provider/leaf/missing/capacity/wrap/TXG-pending rejection bits. Deliberately suppressed provider error must fail the named ledger assertion. Existing volume/provider host checks remain passing; temporary binaries removed. Eleven deferred-target modes execute the pinned original getter on a synthetic transaction.32 I/O workers overlap target publication;16 competing publishers produce one winner and15 EALREADY with sticky rejection. Early provider error, incomplete slots and capacity survive binding. Unbound-guard omission and target overwrite mutations compile and fail exact named assertions.",
      "gaps": "Synthetic ledger events and assigned transaction only; getter does not establish native assignment/provenance. Separate groups cover original-body host file-vdev and TXG/label observations. Native constructor publication and phase/root/child/provider association, transport/resources, pool execution and persistence acceptance remain. Human UTC disposition accepted on2026-10-07 only for the bounded disposable corrected-v3 experiment. An unexpected v3 stall/missing terminal, unmatched completion or uncertain cleanup stops qualification and is reported to the maintainer; renewed investigation/disposition precedes affected acceptance.",
      "owner": "Aether private experiment; existing userland runtime and sys-init recovery ownership unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-OPENZFS-POOL-VDEV-HOOKS-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Pinned original open-mode/open/close/write/flush/start bodies preserve outcomes, calls and exact restored bytes. Prepare before workers; successful original constructor publishes actual SPA/leaf/file once through release/acquire. Same live identity reopening preserves observations; original close permanently retires identity. Prepublication/foreign/replacement events remain sticky failures. Admit before dispatch, observe provider/leaf before interrupt release;128 slot-indexed associations and complete observer state at most8KiB. No reset, quiescence or authority claim. Selected assigned transaction binds once via original DMU pool/TXG and SPA reverse-pool getters. Reject foreign/unassigned/sync-context/closed/repeated joins; numeric target alone stays pending. Live original borrows, no retained transaction pointer, release/acquire join publication before final inspection.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py",
      "oracle": "38 host modes execute actual owned provider and instrumented original file-vdev bodies with synthetic transport/ABD/queues.16 workers started before construction observe publication then complete1024 writes/1024 flushes;16 original competing constructors publish one identity. Path/open/attribute failures, missing preparation, early I/O, reopening with retained errno, foreign SPA/leaf, address reuse after close, dropped callbacks and completion under a modeled close preemption remain distinct. Six compile-success mutation controls require exact named provider/leaf/lifetime/open/close/attribute assertions. Five restored original bodies and open-mode pin; drift/duplicate/repeated input rejects. Temporary sources/binaries removed. Thirteen transaction modes include separate forward/reverse denials, original target11,16 competing join callers, poisoned transaction after capture, numeric-bind bypass and pre-binding provider EIO retained. Four new successful-compile mutations fail exact identity/getter/guard assertions; three original getter bodies reject drift/duplicates.",
      "gaps": "No native selection/execution, native assignment/commit or actual DSL construction. Original getter bodies run on synthetic transactions/pools. Existing queued-close/preemption schedules are synthetic borrows, not quiescence. Phase/root/child/provider association and native transport/resources/pool/persistence qualification remain. Human UTC disposition accepted on2026-10-07 only for the bounded disposable corrected-v3 experiment; technical execution/resource/recovery gates remain. Recurrence stops qualification, is reported to the maintainer and requires renewed investigation/disposition.",
      "owner": "Aether private experiment; userland runtime/UTC and sys-init recovery ownership unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-OPENZFS-POOL-SYNC-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Pinned original TXG/config/label/uberblock bodies retain locks, waits, errors, retries and I/O calls. Resolved target, synced TXG and original error observed before TXG unlock. Config attempts and original synchronization boundaries are observations only; parent success alone cannot qualify provider completion or durability. Call-duration identity borrows, bounded nonblocking callbacks; selected only by the private opt-in pool checkpoint, not durability-qualified.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py",
      "oracle": "Six original TXG schedules with real pthread waiting and synthetic progress cover resolved target0, already synced, EINTR/ESHUTDOWN and interruption after progress. Nine original label/config schedules cover exact block/even/uberblock/odd ordering, early returns, retries and failures, and successful markers with missing lower flushes. Omitted/moved observers and removed original flush fail named assertions. Source pins, exact restoration and drift/repeated/duplicate denials pass; temporary generated outputs removed.",
      "gaps": "No native TXG workers or pool execution. Constructor identity/assigned DMU TXG publication, phase-root-child-provider association and native resource/lifetime qualification remain. Observations alone establish neither durability nor device quiescence. Human UTC disposition accepted on2026-10-07 only for the bounded disposable corrected-v3 experiment; technical gates remain. Recurrence stops qualification, is reported to the maintainer and requires renewed investigation/disposition.",
      "owner": "Aether private experiment; userland runtime/UTC and sys-init recovery ownership unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-OPENZFS-POOL-FLOW-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Seven original selected-TXG roots propagate bounded tags through original locked child insertion and retire before free. Actual physical requests match provider byte/flush counts, including aggregate descendants. Original synced target/pool and complete phases required after upstream helper drain. Errors, capacity, overflow, partial/bypassed phases and retries remain sticky. No additional I/O/lock/allocation/authority or native selection; combined observer budget8KiB.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_volume.py",
      "oracle": "21 optimized host modes; original constructor/child/destructor/provider/getter bodies. Healthy/empty-label/aggregation and16worker1024write schedules; partial/whole omission, bypass/error, foreign/overlapping/stale/capacity/overflow and failed/missing wait denials. Five compiling mutations fail exact named oracles. Original source restoration/pins/drift/repeat reject. Three target objects preserve all original imports.",
      "gaps": "Host graph execution/unlink/wait/transport/assigned objects are synthetic. Native original pipeline/resource/drain, pool commit/export/import/recovery and durability remain unqualified. Accepted human disposition is bounded; unexpected v3 recurrence stops qualification and must be reported.",
      "owner": "Aether private experiment; userland runtime/UTC and sys-init recovery ownership unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-OPENZFS-POOL-CREATE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Exclusive disposable corrected-v3 shared UTC profile. Original create/export, constructor/provider ledger and engine/runtime drain; no force, feature enabling, assigned DMU target or durability acknowledgment. Only generation1 receives READ/WRITE/FLUSH region; later owners deny it before helpers. Existing limits/pins/defaults unchanged.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --case pool-create --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Exact creation/input-fingerprint/export/retirement phases, three normal terminals/three reclaims, matched lower provider writes/flushes and namespace removal; feature inspection and exported root/file selector. Outside-region canaries intact, actual region mutated. Original slot reconstruction and final symbol origins; runtime/provider omission/old-adapter overlap rejected. Host selection/trace negative controls.",
      "gaps": "Corrected worker-sized diagnostic create/export checkpoint now passes three terminal0 owners/three reclaims, denied replacement storage and actual case-media mutation/canaries. No assigned transaction/TXG completion target, fresh import/readback, interrupted/full/corrupt recovery, mounted Rust filesystem/package service, peak memory/reaper demand or durability qualification. Prior wrong-path seed claims stay superseded and failures retained; original v2 attribution unknown. Full host suite selected once at this integration milestone.",
      "owner": "Aether private checkpoint; userland runtime/UTC, sys-init recovery and pkg-mgr package policy unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-POOL-FAILURE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Exclusive private diagnostic pool selection. Source-bound unique guards, original125/results preserved, bounded raw stdout only; no resource queries, observer state, allocation, locks, retries or authority changes. Original sealed runtime reconstructed exactly before copied backend instrumentation; pure TLS tid helper uses same compiler/headers with strict selected-engine origin. No pin/quota/floor/default changes.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_failure.py -v",
      "oracle": "Actual allocation/default cleanup/runtime fatal effects, exact trusted pthread VERIFY0 varargs, original assertion125, selected admission/clone rejection and successful publication, actual mapping/mask returns without retries, bounded payload/overflow and actor/error/stage/order denial controls.46 catalogue identities;234 time consumers rebuilt/checked.47 focused affected tests and build-only origin/omission/structural checks pass. One approved native attempt observes pthread11/EAGAIN and stage4 live82/capacity82, caller tid1, exactly32 rows/256 bytes.",
      "gaps": "Earlier exact pthread11/stage4 live82 denial remains valid. Worker sizing and raw-C/case-media harness fixes now pass the corrected native create/export/reclamation checkpoint. Original v2 attribution and old executed final media remain unknown; historical seed conclusions superseded. No diagnostic site expected on successful terminal0. No full filesystem/transaction/recovery/durability or sibling/SDK/ABI acceptance.",
      "owner": "Aether diagnostic experiment; canonical userland runtime/UTC ownership unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-OPENZFS-POOL-WORKERS",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private single-core/single-file-leaf pool selection only. Selected global queues retain existing1/1 workers; named FREE-issue throughput floor8. Preserve distinct issue/completion/config-writer and background queues, original taskq dispatch/wait/destruction, assertions/errors, stack/guard/TLS, ARC/device floors and runtime admission/reaper ownership. Non-pool recipes/pins/siblings unchanged; no generic clamp or new configuration API.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_workers.py -v",
      "oracle": "Actual selected libzpool global init/fini and all SPA table sizing run over real host pthread primitives.31 pool workers/14 distinct queues dispatch work and drain, objects freed and host threads joined. Cross-queue wait cannot return before actual child completion; merged completion queue deadlocks to named watchdog99, premature wait mutation rejects90/98. Exact source/context drift and actual slot/dependency-hash controls preserve all untuned bytes; reject confusion between unselected upstream64/4 globals and executed1/1.59 affected host checks plus build-only original reconstruction and final symbol origins/omission/loader checks.",
      "gaps": "Named FREE floor8 now passes native first-owner pool creation/export/engine/runtime retirement plus three owner reclaims and two storage-denied replacements. Phase-end budgets are not transient native thread/stack/map/backing/reaper-lag measurements. Broader topology/features/operations still require resource review; no fresh import, transaction/recovery/durability or release qualification.",
      "owner": "Aether private OpenZFS pool engine policy; unchanged runtime/kernel enforcement owners",
      "budget_seconds": 120
    },
    {
      "id": "AT-OPENZFS-POOL-LABEL-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private on-media label intake; separately qualified by the bounded corrected native fresh readonly import/MOS readback pair, not arbitrary media acceptance. Pinned original synchronous offset/reader bodies, grant-bound readonly file calls, exact64MiB/four-label geometry, local ownership/error state and cleanup. Require four matching leaf GUIDs, exported single-file/no-feature configuration and fixed name/path; returned label data is not a SPA import config. No scanning/AIO/host descriptor, write/flush, force/rewind or widened quota. Object-only AETHER_POOL_ACTIVE_LABELS=1 preparation requires ACTIVE in validation/rebuilt config; default EXPORTED remains exact. No native/CLI selection, force/rewind, live recovery or new authority.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_labels.py -v",
      "oracle": "Actual original reader and adapter execute against synthetic decoder/provider; check exact four offsets/read sizes, geometry/open/attribute/allocation/provider/short-read errors, matching GUID count, malformed/missing identity/topology and enabled/unknown read features, no leaked nvlist/buffer/file and clean subsequent call. Omitted count and feature guards must reject with named label oracle90, not compilation failure. Source/body/duplicate drift rejects. Strict selected-header native object compile verifies allocation-header consumption and exact unresolved dependencies without host I/O imports. Actual constrained root builder executes with typed deep-copy nvlist scaffolding; every allocation/add failure preserves errno/cleanup, poison policy/paths are not copied, metadata geometry/types reject, and weaker rewind policy fails named91. Separate active/default actual bodies reject opposite/destroyed/missing/unknown states with errno/cleanup intact; active config preserves ACTIVE and NEVER_REWIND under every add/allocation failure. Compiling omitted-state and forged-EXPORTED controls fail named90/92; unsupported selector values reject compilation. Actual native-header objects must preserve default bytes and identical import sets.",
      "gaps": "Synthetic decoding/deep-copy nvlist API does not qualify arbitrary XDR/checksum/cross-label disagreement or malicious-media peaks/fuzzing. Separate original native reader/SPA import/MOS5000 readback and readonly retirement pass on one fresh creator-owned exported disk; entire import disk unchanged/canaries intact. No application transaction/committed data/ordered TXG/provider/recovery or persistence/R1 acceptance. Host label preparation alone does not establish native import or interrupted-data recovery. AT-OPENZFS-POOL-INTERRUPT separately qualifies the guarded after-sync writer checkpoint/confirmed VM-stop/media oracle and fresh ACTIVE-only readonly data recovery. 2026-10-08 preparation passes107 affected focused methods and both native-header label objects9,832 bytes/23 imports; default object and both healthy data-pair engines/supervisors/runtime byte-identical.145 inputs/13 tools/formatter match; outputs removed, no guest/envelope/ISO or active runner selection. Two corrected host setup/missing-state-errno oracle failures retained.",
      "owner": "Aether private OpenZFS engine adapter; unchanged native runtime/grant owners",
      "budget_seconds": 120
    },
    {
      "id": "AT-OPENZFS-POOL-IMPORT",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Explicit pool-import selects create/export then fresh readonly original SPA import on one owned disk after confirmed VM teardown. Build constrained config from admitted label identity/allocation fields with uint32 NEVER_REWIND/MAX_TXG policy, readonly=1/cachefile=none/flags0. No raw config passthrough, scan/force/rewind/widened quotas, helper overrides, write replay or application transaction claim. Importer retires its sole readonly private pool via original spa_evict_all rather than unsupported readonly spa_export. Default create-only profile preserved.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Actual original SPA import/uberblock/MOS load; matching GUID/no enabled feature/readonly state and zap_lookup creation-version5000, creator nonforce export; importer original readonly cache retirement/empty namespace. First owner22 phases followed by two BNR denied replacements and three exact clean reclaims. Actual compiled supervisor READ-only region expression, exact phase/identity, successful-create/VM teardown/hash prerequisite and shared-media finally capture host controls. Create changes scoped media; fresh import leaves all bytes unchanged. Build-only compiles both engines/supervisors with original binding/omission/loader and4096-byte supervisor budgets.",
      "gaps": "Corrected native pair passes creator nonforce export and fresh readonly original SPA/MOS5000 readback/private retirement after confirmed VM teardown on exact shared disk. Both guests complete21 ordered cleanup rows/three terminal0/final-live0/100/reclaimed3/native marker, exact prepared artifacts/frozen inputs/tools, unchanged READ1/global READ/30s/82-context/32MiB; import disk unchanged/canaries intact. One full host checkpoint passes329 Python methods plus wired Zig/pins/workflow. Earlier unsupported export failure preserved; old timeout causes unknown. No assigned application transaction/ordered TXG/provider/recovery/durability, transient peaks, mounted Rust service or companion/R1 acceptance.",
      "owner": "Aether private OpenZFS engine experiment; runtime/UTC and companion policy ownership unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-NATIVE-CLEANUP-TRACE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Default-off private service-worker/block v1 cleanup diagnostics. Preserve terminal/success markers, authority, context stop/select, alias detach, complete zero/verification, metadata/context reset and reclaim count. No watchdog/resource widening, new ABI/SDK, native retry or acceptance from partial trace.",
      "command": "python3 -m unittest discover -s tests -p test_native_cleanup.py -v",
      "oracle": "Extracted actual formatter, context-stop/selection tail and reclaim branch execute with small host Zig scaffolding. Exact phase ordering and preceding cleanup/reset effects, no output when disabled, live owner denied without effects, dirty backing fails named91 before verified/reclaimed markers. Native full-trace oracle rejects missing/foreign/reordered/version/resource/reclaim/terminal/final records. Compile actual x86_64 trace-on/off kernels and reject missing worker/block prerequisites before native execution. Complete aligned word scan rejects every byte offset with low/high dirty bits across two host pages; deliberately omitted last word/page fail named coverage91. Actual first/last dirty backing reject before verified/reclaimed markers.",
      "gaps": "Corrected paired creator and readonly importer both pass all21 ordered stop/select/detach/zero/full-word-verify/reset/reclaim rows on32MiB backing, three terminal0/final-live0/100/reclaimed3/native marker. Original readonly retirement avoids invalid export without WRITE rights or mode changes. Exact artifacts/frozen inputs and confirmed VM stops; prior failures remain unqualified and earlier timeout causes unknown. No transient resource peaks, durability, filesystem/companion/R1 acceptance.",
      "owner": "Aether private native service fixture; runtime/UTC and companion ownership unchanged",
      "budget_seconds": 180
    },
    {
      "id": "AT-OPENZFS-IMPORT-RETIRE-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private single readonly imported pool retirement through pinned original spa_evict_all; require expected sole entry, readonly and unreferenced under original namespace lock, no competing caller, empty namespace after original retirement. No global WRITE mode, export/force, new authority/ABI/quota or native acceptance from scaffolding.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_import_retire.py -v",
      "oracle": "Actual original eviction body and private helper compiled under strict host warnings. Verify hold/drop-lock/suspend/re-lock/close/unload/deactivate/remove flow, uninitialized removal, missing/foreign/additional/writable/referenced denials before effects and retained namespace rejection. Four compiling guard omissions fail named oracle91. Original function SHA256/body drift rejects; importer closes borrow before retirement and emits D only after it.",
      "gaps": "Synthetic namespace/helpers alone do not qualify native drain/provider borrows/backing reuse. Separate corrected actual native pair now passes original readonly retirement plus21 cleanup rows/three terminal0/final-live0/100/reclaimed3; import disk unchanged/canaries intact, both VMs stopped. READ1/global READ/limits remain fixed. One full host checkpoint passes329 methods plus wired Zig/pins/workflow. Earlier failed export/unknown timeouts preserved. No assigned application transactions/ordered TXG/recovery/durability/FS/companion/R1 acceptance.",
      "owner": "Aether private OpenZFS engine adapter; runtime/UTC/companion ownership unchanged",
      "budget_seconds": 120
    },
    {
      "id": "AT-OPENZFS-POOL-DATA-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private fixed DMU_OST_OTHER dataset/object1/64-byte target-dependent data probe, not native-selected. Original create callback/claim and explicit dataset ownership; selected non-sync dmu_tx_create/hold/assign/getter/identity join before commit, unassigned abort versus assigned commit, original suspend-aware TXG wait and byte readback; readonly reader validates identity/type/block/bonus/nonzero synced target and exact record. No authority/default/grant/quota/pin/SDK/kernel change or durable acknowledgment from host mocks.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_pool_data.py -v",
      "oracle": "Actual owned helper plus pinned original TXG getter execute over synthetic DMU/dataset/media state. Check constructor/claim/ownership/foreign/readonly/geometry/errors, commit destroys transaction borrow, wait/read errors and unchanged output on failure; all64 single-byte corruptions reject. Five compiling omission mutations of foreign owner, bonus geometry, synced target, payload and original getter target fail named HOST DATA oracle92. Strict native-header object compile and explicit build-only link closure inspect original dataset/DMU imports and existing structural/supervisor bounds without helper execution.",
      "gaps": "51 affected focused methods and strict5,680-byte native helper/one build-only creator engine closure pass;20 original/helper origins and structural1316 pages/2299-byte supervisor checked, no helper execution/envelope/ISO/VM. Synthetic assignments/storage/sync/ownership do not qualify native creation/commit, ordered root/child/provider flush, actual resource/stack call depth, fresh data or recovery. First target-byte/unused-stub failures preserved and corrected. Current metadata pair/defaults and137 native inputs remain exact; no filesystem/companion/R1 acceptance. Next explicit opt-in native pair must compare observed assigned and fresh recovered target and require post-drain ordered witness.",
      "owner": "Aether private OpenZFS engine probe; userland runtime/UTC and companion policy ownership unchanged",
      "budget_seconds": 120
    },
    {
      "id": "AT-OPENZFS-POOL-DATA-PAIR",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Explicit --pool-data requires existing corrected UTC diagnostic pool case; default metadata profiles unchanged. Original assigned DMU dataset writer and fresh readonly reader compare captured/recovered nonzero target; creator strict root/child/provider ordered witness after actual drain/export; original readonly retirement. READ1/global READ importer, no force/rewind/rights/quota/watchdog/ABI/SDK/pin change. Data importer drains original queued dbuf-user eviction after all client borrows close and outside namespace/config locks; unchanged SPA reference guard still rejects actual live holders.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-data --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Writer30/importer32 exact first-owner phases and 8-byte TXG fields, two BNR denied replacements,21 cleanup rows/three terminal0/final-live0/100/reclaimed3/native marker each. Original data/geometry/owner and ordered completion strict checks precede success. Confirm creator VM stop and same post-export media before fresh import; entire import disk unchanged/canaries intact. Zero/different target or missing witness/phase/identity rejects; source-bound supervisor data fields cannot bypass resource/raw-C checks. Build-only metadata identities and selected data original origins, READ/WRITE macros, structural and4096-byte supervisor limits required. Actual original wait/retirement host control releases queued async holds but rejects a remaining client hold; omitted wait fails named oracle.",
      "gaps": "Approved corrected native pair passes assigned/recovered TXG6 and full data validation, strict ordered writer/export and readonly original-user-queue drain/private retirement/full cleanup in both guests. Entire import disk unchanged/canaries intact; both VMs stopped. This is one opt-in graceful fixed single-leaf fixture, not interruption/full/corrupt-media recovery, arbitrary malicious media, transient peak/stack resource fit, physical power-loss durability, mounted Rust filesystem/companion/R1 acceptance. Earlier generic873 and unknown timeout causes remain unmeasured; prior failures retained.",
      "owner": "Aether private OpenZFS adapter/harness; unchanged userland runtime/UTC and companion policy owners",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-POOL-CORRUPT-LABELS",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private explicit diagnostic data pair only. Confirm writer export, full cleanup, VM stop and exact media before changing only the four XDR encoding bytes to255. Same native artifacts as healthy pair, fresh READ1/global READ importer; no force/rewind, rights/limits/ABI/SDK/pin changes. Expected partial cleanup never authorizes guest reclaim.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-data --pool-corrupt-labels --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Exact BIUVWL observations, terminal873, only cleanup phases1/2, supervisor401/reclaimed0 and intentional profile-rejection panic; no import/readback/retirement/native pass. Entire mutated import disk unchanged and canaries intact; both VM finally waits returned. Focused runtime guard/media/trace controls and actual pinned original nvlist encoding dispatch/unpack bodies test all254 unsupported encodings under signed/unsigned char; deliberately weakened dispatch fails named91.",
      "gaps": "103 focused methods, both exact healthy build-only profiles and one declared two-VM rejection pair pass;144 native inputs/13 tools/QEMU/prelaunch hashes exact, whole corrupted import disk unchanged/canaries intact, both VMs stopped and outputs disposed. Header rejection before payload decoding only; not arbitrary XDR/checksum/cross-label disagreement, valid-label recovery, interruption/full-media recovery, malicious-media resource safety, guest reclaim, mounted filesystem or R1 acceptance. Earlier failures unchanged; no broad suite repeat.",
      "owner": "Aether private harness/OpenZFS experiment; runtime/UTC and companion policy ownership unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-POOL-INTERRUPT",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Explicit exclusive corrected diagnostic assigned-data pair only. Original assigned sync/readback, closed client borrow and strict ordered witness before K/1ms park; original30s native runner stops/waits VM before fresh ACTIVE-only READ1/global READ import on exact same owned disk. No export/guest writer reclaim, force/rewind/replay, label edit, kernel/SDK/ABI/pin/rights/quota change. Defaults remain exact.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-data --pool-interrupt --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Exact27 live writer rows ending offset208/byte75 with actual nonzero assigned target and no terminal/cleanup/supervisor/panic/pass; confirmed original VM finally return and exact post-stop disk guard. Fresh readonly original SPA/MOS data must match target/record, drain/retire and pass all21 cleanup/three terminal0/final-live0/100/reclaimed3. Whole import media/canaries unchanged. Actual checkpoint boundary/sleep and named omitted-order guard controls; selector/trace/stop/media/target denials. Default and selected build-only origins/macros/loader/supervisor bounds before one guarded native pair.",
      "gaps": "114 focused methods, default/selected build-only profiles and one controlled two-VM after-sync/pre-export recovery pair pass: assigned/recovered TXG6, strict completion, confirmed writer VM stop, exact same media, unchanged READ import disk/canaries and full reader cleanup.145 native inputs/13 tools/QEMU/artifacts match; outputs removed. One full host checkpoint passes362 Python methods plus wired Zig/pins/workflow on416 inputs/13 tools. This after-sync controlled stop is not before-ack interruption, arbitrary crash/device timing, QEMU-host cache loss, physical power-loss durability, live replacement/reclaim, full/deeper corruption, malicious-media safety, mounted filesystem/companion/R1 acceptance.",
      "owner": "Aether private OpenZFS probe/harness; unchanged runtime/UTC and companion policy owners",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-POOL-UNCOMMITTED",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Explicit --pool-uncommitted requires the exclusive corrected diagnostic interrupted data-import pair. Strict synced baseline B then original dirty assigned candidate C>B held before commit; retain dataset/SPA/transaction and provider memory until confirmed VM stop. Fresh ACTIVE-only READ1/global READ importer must recover baseline B exactly. No candidate acknowledgment, clean export, guest writer reclaim, new rights/quotas/ABI/pins or force/rewind/replay. Default and after-sync profiles preserved.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-data --pool-interrupt --pool-uncommitted --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Exact28 live rows BIUVWPCAT/baseline8/SH/candidate8/K; positive B<C, no terminal/cleanup/supervisor/panic/pass. Confirmed original VM finally return and exact stopped-media hash before fresh READ import. Same baseline record/target, original queued-user drain/readonly retirement and21 cleanup/three terminal0/final-live0/100/reclaimed3; entire import disk/canaries unchanged. Actual helper/checkpoint host tests plus compiling early-commit/omitted-write/foreign/target/release mutations must fail named semantic oracles; selector/trace/media/target denials.",
      "gaps": "129 focused methods and both after-sync/new build-only pairs pass, with existing after-sync engines/importer/supervisors/runtime byte-exact. One two-VM pair passes synced baselineTXG6, dirty assignedTXG7 held before commit, confirmed writer VM stop, fresh ACTIVE-only READ recovery of exact baseline6, full reader cleanup and entire import disk/canary equality.151 native inputs/13 tools/QEMU/artifacts match; outputs disposed. Prior full host reused only for unchanged infrastructure; next broad checkpoint filesystem-service integration or shared risk. One held transaction boundary is not all pre-ack crash schedules, host-cache/physical power-loss durability, arbitrary-media/parser safety, full-media/deeper corruption, live guest writer reclaim, mounted filesystem or companion/R1 acceptance.",
      "owner": "Aether private OpenZFS probe/harness; existing runtime/UTC and companion policy owners unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-POOL-CAPACITY",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Original synced64-byte baseline; original128MiB dataset refreservation request must return ENOSPC before application, preserve the original zero property and baseline record, then release dataset borrow. Unexpected success/other errno fails without hiding property changes. Exact32 observations, normal ordered export/full cleanup and fresh READ baseline recovery, unchanged media/canaries. Existing quotas/rights/ABI/pins/defaults fixed.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-data --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3 --pool-recovery-check capacity",
      "oracle": "Actual helper with reservation-success/other-errno/owner/prior-property/read-corruption/release tests and seven compiling omission controls; adapted actual supervisor enforces32 rows/resources/raw padding and Q/28. Host selectors/trace/stop/media guard then build-only default/capacity comparisons before one guarded native pair.",
      "gaps": "141 focused methods and reviewed build-only profiles pass; original128MiB dataset refreservation returns ENOSPC28 with property0/baseline intact, normal ordered export/full cleanup and fresh READ recovery of TXG6/record/full retirement/cleanup. Whole import disk unchanged/canaries intact;169 inputs/13 tools/QEMU/artifacts exact, both VMs stopped, outputs removed. Earlier write-reservation plans superseded before guests; failures retained. Oversized reservation is not actual near-full/fragmented storage or all ENOSPC/interruption schedules; no mounted filesystem/package/R1 or physical power-loss qualification.",
      "owner": "Aether private OpenZFS probe/harness; runtime/UTC and companion policy unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-POOL-UBERBLOCK-CHECKSUM",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Original normal assigned writer/export/full cleanup and confirmed VM stop before host bit flip in last checksum byte of every populated native1KiB uberblock slot across four labels; other media/label bytes preserved. Fresh EXPORTED-only READ1/global READ import must return original ENXIO6 after valid label intake and SPA load; no rewind/force/replay or guest reclaim.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-data --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3 --pool-recovery-check uberblock-checksum",
      "oracle": "Exact21 observations BIUVWLP/hash8/O/E/6,0,0,0 plus terminal873, cleanup1/2,401/reclaimed0 and intentional panic; entire corrupted disk unchanged/canaries intact, original VM finally return. Fixed-geometry/populated-slot mutation and stopped-media/selector/trace denials; actual scalar errno emitter. Build-only default/checksum origin/artifact checks then one declared two-VM negative pair.",
      "gaps": "Declared two-VM checksum pair passes: normal writer/export/full cleanup/stop,16 checksum-bit changes (four per label), fresh READ original SPA ENXIO6 with exact21 observations/873/cleanup1,2/401/reclaimed0/intentional panic. Corrupted import disk unchanged/canaries intact;169 inputs/13 tools/QEMU/artifacts exact, both VMs stopped, outputs removed.141 focused checks and scoped build-only preparation/review; failures retained. This is bounded checksum rejection, not arbitrary malicious-media/parser/peak-resource safety, repair/failover/full-media recovery, guest cleanup, mounted filesystem or R1 readiness.",
      "owner": "Aether private OpenZFS probe/harness; runtime/UTC and companion policy unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-OPENZFS-ZPL-READ",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private unselected read-only ZPL5 adapter owns a genuine ZFS objset under a borrowed readonly SPA. Root/master/SA format, registered attribute IDs, component names, inode/entry type and generation checked; no client object-number authority, writes, symlink/parent traversal or ambient I/O. Failed own never disowned; acquired SA/objset/context cleanup balanced. Bounded read failure clears partial output.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_zpl_read.py -v",
      "oracle": "Actual adapter executes78 host API-double scenarios and seven compiling omission controls rejected by HOST ZPL oracle92. Full C object compiles with pinned original common-znode native-header recipe, consumed dependency pins and exact read-only direct-import allowlist checked.",
      "gaps": "These nine methods retain API-double/unlinked-header scope. Separate original-decoder host and native namespace receipts now pass the real fixture, resource-aware link, complete file SHA and close/drain/retire/reclaim under existing bounds. No Rust capability service, namespace writes, hostile-media/full-storage/physical durability, companion or R1 acceptance.",
      "owner": "Aether private C engine adapter; userland POSIX and other companion policies unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-OPENZFS-NAMESPACE-FIXTURE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Single pinned upstream1GiB sparse ZPL fixture only; compressed/member/actual-image identities, exclusive readonly output, no archive pathname extraction, interrupted cleanup. Original-decoder host composition is READ-only with no rewind, upgrade, device scan outside private fixture directory or on-disk host pathname authority. Existing native defaults unchanged.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_namespace.py -v",
      "oracle": "Six helper methods include actual upstream copy and suppressed-write/partial-read controls. Separate explicit offline Linux host recipe in the reference/receipt builds original zdb/libzpool, compares all780248 bytes in191 actual-adapter reads, and requires exact oracle93 stale-directory/file-bytes from two compiling mutants. Entire pool SHA unchanged.",
      "gaps": "Recorded Linux host and separate native1GiB READ1 namespace composition pass; these six helper methods alone do not execute decoders. Native exact label/features, resource-aware final link, file SHA/denials/retirement/cleanup/media equality qualify only the fixed fixture. Rust capability service, namespace mutation, hostile metadata/full storage/physical durability and persistent consumers/R1 remain open. No automatic container/network setup runner.",
      "owner": "Aether private OpenZFS adapter and fixture intake; companion policy ownership unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-OPENZFS-NAMESPACE-NATIVE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Explicit exclusive --pool-namespace corrected-v3 diagnostic import only; fixed original upstream1GiB ZPL fixture, READ1 at sector8 with4096-byte guards. Exact label/leaf/features, reconstructed delegated path and NEVER_REWIND/MAX_TXG; unchanged default64MiB profiles/kernel/SDK/ABI/pins/quotas. Raw identities private, no published namespace capability or writes. Hardware backend remains writable because current virtio rejects RO; guest has no WRITE/FLUSH authority.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-namespace --pool-diagnose run --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3",
      "oracle": "Focused test_openzfs_native_namespace.py plus actual adapted Rust supervisor in test_service_runtime.py. Exact label/features/config cleanup, six compiling helper/config omissions fail named94/95; stream fixed whole fixture with raw/whole SHA/canary checks, actual complete780248-byte file SHA through original SHA2/ZPL. Exact23 primary phases including Z plus two BNR replacements, original close/drain/readonly retirement,21 cleanup/three terminal0/final-live0/100/reclaimed3; confirmed VM stop and unchanged whole disk. Build-only origins/loader bounds, default artifact comparison, frozen source/tool/prelaunch artifact checks before one declared guest.",
      "gaps": "Original C-only receipt remains scoped to its exact old artifact. Current opt-in namespace profile now selects the Rust owner/original-C composition, qualified fresh in namespace-zpl-native-2026-10-18.json: full780248-byte SHA/denials/two context closes/drain/retire/full21 cleanup/three terminal0/live0/100/reclaimed3, unchanged guarded media and stopped VM.695 frozen inputs/13 tools/QEMU/artifacts exact; defaults byte-exact; outputs removed. Full418-method host checkpoint and separate actual ABI/semantic tests pass. No authenticated caller/transport, namespace writes, malicious-media/full storage/physical durability, companion or R1 acceptance.",
      "owner": "Aether private OpenZFS adapter/harness; runtime/UTC and companion policy owners unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-NAMESPACE-OWNER",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private no_std-compatible Rust namespace owner; one exclusive backend,4 connections/16 handles, scoped trusted peer plus session/service epoch and never-reused serials. LOOKUP/READ attenuation and relative single-component lookup only. Root/lookup identity validation,4096-byte bounded canonical replies, exact EOF completion, no backend effect on authority/table/serial denial. Disconnect revokes only its session; shutdown revokes all then consumes backend once. No wire endpoint, public SDK/ABI, global table or default/native profile selection.",
      "command": "python3 -m unittest discover -s tests -p test_namespace_owner.py -v",
      "oracle": "Three host methods compile/run actual owner with10 Rust tests, require8 separately compiling guard omissions to fail exact named semantic assertions/101, and compile optimized panic-abort x86_64-unknown-none code over explicit synthetic provider. ELF layout1048 bytes/alignment8/session16/handle16 under2048 budget; actual target codegen probe included. Test cross-peer/session/epoch, forged/stale/reused tokens, rights/type/name/length/overflow, full tables and serial exhaustion, partial backend data/errors/impossible counts, metadata admission failure and exact Drop.",
      "gaps": "These core host methods retain synthetic-provider/unlinked codegen scope. Separate namespace-zpl-native receipt now qualifies owned original-C context, Rust-mediated real-file SHA/denials/Drop/drain/retire/reclaim on the pinned fixture. No authenticated IPC, published endpoint, production epoch provisioning, namespace writes, POSIX credential policy, companion or R1 acceptance. Broad checkpoint at authenticated native service composition.",
      "owner": "Aether private Rust filesystem owner; userland POSIX, sys-init lifecycle and pkg-mgr installation policy unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-NAMESPACE-ZPL-COMPOSITION",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private original-C ZPL context owned by Rust backend under one live borrowed readonly SPA; fixed Rust owner probe and C original-SHA2 helper, no pointer escape/reentry/unwind/Send/Clone or client interface. Explicit status/null/node/count checks and failure cleanup. Upgrade opt-in --pool-namespace only; defaults/kernel/SDK/ABI/pins/rights/quotas fixed. Internal epochs/peer labels are synthetic fixture inputs, not authenticated IPC.",
      "command": "python3 -m unittest discover -s tests -p test_namespace_zpl.py -v",
      "oracle": "Actual C header ABI and actual Rust owner/backend/probe against faultable C provider and SHA doubles:16 Rust tests including inherited10 owner checks; all203 reachable provider failures,17 modes, two contexts closed,191 stream updates/193 reads/5 lookups. Four compiling omissions fail named FFI_CLOSE/STATUS/METADATA/DIGEST. Native x86_64 object codegen, build-only exact final origins/loader/supervisor and unchanged defaults before one frozen guarded READ1 original-decoder guest; require complete file SHA, old23 phases/full21 cleanup/3 terminal0/live0/100/reclaimed3, unchanged whole media/canaries and stopped VM.",
      "gaps": "Actual host C-header ABI/Rust composition passes16 Rust tests/all203 reachable provider-failure points/17 modes/four named compiling omissions, plus native codegen/build-only100-origin/static loader inspection. Full418-method host checkpoint passes on695 frozen inputs. One native READ1 guest verifies the real780248-byte file through Rust owner/original C ZPL/SHA2, both contexts close, original drain/retire/full21 cleanup/3 terminal0/live0/100/reclaimed3; whole media unchanged, VM stopped,13 tools/QEMU/artifacts exact. Default data engines/supervisors byte-exact; outputs removed. Internal peer/epoch labels remain synthetic. No authenticated IPC/published service, broad credentials/namespace writes, hostile-media/full-storage/physical durability, companion or R1 acceptance.",
      "owner": "Aether private filesystem adapter/owner; companion policies unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-STORAGE-AUTHENTICATED-CHANNEL",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private opt-in AENBD003/ABI25 admits the storage worker only after direction/ownership/empty-pair/image-budget preflight and transfers its request reader/reply writer before execution. Existing AENBD002/ABI14 and released pins remain unchanged. Rust binding derives peer/session/epoch from its retained kernel reader; no wire attach or raw backend authority.",
      "command": "zig test kernel/native_channel.zig --cache-dir .zig-cache --global-cache-dir .zig-cache/global; python3 -m unittest discover -s tests -p test_namespace_ipc.py -v; python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-namespace --namespace-ipc --pool-diagnose build --case pool-import --delivery ../Aether-userland/build/sdk-deliveries/native-service-runtime-2026-10-06-v3 --utc-delivery ../Aether-userland/build/sdk-deliveries/native-utc-2026-10-06-v3; after preparation/freeze replace build with run for one guarded READ-only guest; zig build test --cache-dir .zig-cache --global-cache-dir .zig-cache/global at native integration",
      "oracle": "Exact preserved pair state on rejection, holder transfer/closure/zeroing/three-generation retirement; actual Rust wire/owner and partial-transfer/EOF/timeout loops, compiling canonical/bounds/disconnect/reply/partial-EOF omission controls, native codegen. Actual separate-domain client must check startup grants, child/old endpoint denial, real lookup/read/EOF/rights/close/disconnect and all original C file SHA/drain/retire/21 cleanup/three terminal0/live0/100/reclaimed3 under unchanged bounds. Entire guarded media unchanged and VM stop confirmed.",
      "gaps": "Seven focused IPC methods and one full425-method host checkpoint pass. namespace-ipc-native-2026-10-18.json qualifies one prepared AENBD003/ABI25 READ1 guest: actual admission/holder/stale/lifetime checks, eight Rust service requests/root greeting, original whole-file SHA and context/pool retirement,21 cleanup/three terminal0/live0/100/reclaimed3, unchanged guarded media and confirmed VM stop. Default data engines/supervisors remain exact; no native recurrence or retry; owned outputs disposed. Only the16-byte count/ELF prefix and EOF cross IPC; whole-file SHA is a separate component oracle. Single boot-local connection only; no general epoch provisioning, multiple live clients, public SDK/credentials/path policy, namespace writes, persistent consumers or R1 acceptance.",
      "owner": "Aether local kernel admission/transport and Rust filesystem owner; userland owns descriptor/POSIX policy, sys-init lifecycle and pkg-mgr installation",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-WRITE-PREREQUISITE",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Unselected private existing-file writer uses original DMU/SA ownership/transactions, explicit UTC and bounded stable input. No assignment means no effects; every assigned tx commits, and post-assignment errors preserve staged/committed progress. Sync is not a public durability acknowledgment. Readonly active object remains byte-exact; no WRITE RPC or grant.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_zpl_write.py -v; python3 -m unittest discover -s tests -p test_openzfs_zpl_read.py -v; python3 -m unittest discover -s tests -p test_namespace_zpl.py -v; pinned clang-format dry-run on new C/header/fixture; python3 scripts/check_workflow.py",
      "oracle": "Actual C over faulting API doubles: overwrite/append/extension/zero/max, all preflight/factory boundaries, restricted flags/set-ID/readonly/snapshot/generation/type/time/overflow, input snapshot, assignment abort, metadata failure/committed progress, failed/early wait and balanced SA/objset/TX cleanup. Twelve compiling omission controls must fail semantic93, not compilation. Pinned original x86_64 headers/import/dependency/tool identities, static stack <=8192 for this helper; before/after reader object comparison.",
      "gaps": "Private helper remains unselected natively. Eight focused writer methods/82 actual-C API-double scenarios/twelve compiling semantic93 controls pass, with affected reader/copy checks. Pinned native headers expose36 imports,9656-byte unlinked writer,4456-byte local write frame/72-byte constructor. Both readonly object controls remain exact. Readonly format/property/snapshot/accounting probe precedes writable own; disabled callback/accounting and upgrades reject. Separate AT-ZPL-WRITE-HOST qualifies real ZPL media with original accounting callback; prior preparation receipt retains its initial narrower scope. Native full call-chain/resource fit, callback selection/init/drain, actual assigned-TXG/ordered-device closure and fresh-VM recovery remain. Rust WRITE/poison/alias coherence, creation, persistent consumers and R1 are open.",
      "owner": "Aether private original-engine port; Aether-userland owns UTC/POSIX policy, sys-init lifecycle, pkg-mgr installation",
      "budget_seconds": 300
    },
    {
      "id": "AT-ZPL-WRITE-HOST",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Host-only original ZPL writes use a freshly admitted private regular-file copy, readonly immutable inputs and reconstructed single-vdev configuration. Serialized owner, explicit UTC, assigned progress, no client pointer authority; export/close/fini before fresh readonly import. No active native writer or shared ABI change.",
      "command": "Use the bounded offline libzpool configure/link/run arrays in docs/evidence/zpl-write-host-2026-10-18.json; original writer write/read phases and zdb extraction; python3 -m unittest discover -s tests -p test_openzfs_namespace.py -v; python3 -m unittest discover -s tests -p test_openzfs_zpl_read.py -v; python3 -m unittest discover -s tests -p test_openzfs_zpl_write.py -v; pinned clang-format dry-run; python3 scripts/check_workflow.py",
      "oracle": "Complete unchanged baseline and overwrite/append/extension byte comparison; exact assigned/synced progress, denial/no-op result zeros and final size/generation/UTC/flags. Fresh process and independent original zdb extraction must match independently generated full expected file. Compiling omitted-data/omitted-size controls require named semantic93. Hash guards on readonly source and reader media; original source unchanged; builder/output removed.",
      "gaps": "Original-media host-only qualification passes overwrite/append/extension, exact progress/data/metadata, fresh-process readonly recovery and independent zdb extraction, with three compiling semantic93 controls and all1112 original inputs unchanged. First unregistered-callback sync assertion is preserved; writable preflight now rejects disabled accounting and original callback is explicitly registered by the owner. Native callback codegen/link/init/drain, actual TXG ordering, resource/full-stack/fresh-VM recovery, writable Rust authority/poison/alias coherence, creation and persistent consumers remain. No native guest, shared SDK/ABI/grant/pin/quota change or R1 handoff.",
      "owner": "Aether engine adapter qualification; Aether-userland UTC/POSIX, sys-init lifecycle and pkg-mgr installation ownership unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-ZPL-NATIVE-WRITE-PREPARATION",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Unselected resource-aware original accounting callback/explicit private engine initializer and strict writer. Exact live assigned transaction binds before DMU/SA effects; bind errors commit target with zero staged bytes and no wait. One transaction per existing witness lifetime; no reset or durable ack. Host/default/readonly native objects exact. No active profile or grant changes.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_zpl_write.py -v; python3 -m unittest discover -s tests -p test_openzfs_zpl_accounting.py -v; python3 -m unittest discover -s tests -p test_openzfs_volume.py -v; python3 -m unittest discover -s tests -p test_openzfs_namespace.py -v; pinned C formatting/simplicity integrity; python3 scripts/check_workflow.py",
      "oracle": "Writer10/accounting3/volume45/fixture6 methods:82 bare and85 ordered scenarios, four compiling missing/late/wrong/ignored binding omissions plus twelve existing controls. Pinned callback source/body/notices and drift rejection; actual resource header compilation/import/stack/dependency checks and pinned relocatable link. Original callback resolved,40 exact remaining imports/no writable statics; bare writer and selected reader object identities preserved.",
      "gaps": "Prepared objects only: callback2240/frame40, initializer1256/frame0, strict writer11360/frame4456 and relocatable13856 bytes. No complete engine startup/drain, memory/full stack, selected write authority/native write/ordered completion/fresh-VM recovery, writable Rust/poison/alias coherency, creation or companion/R1 acceptance. No media/guest/full-suite run. Failed setup attempts retained; generated outputs disposed.",
      "owner": "Aether private engine preparation; userland UTC/POSIX, sys-init lifecycle and pkg-mgr installation policy unchanged",
      "budget_seconds": 300
    },
    {
      "id": "AT-ZPL-COMPLETE-BUILD",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Explicit build-only original ZPL writer integrates original accounting initialization before import, actual one-transaction binding, full pristine/predicted/readback hashes and original context drain/export/ordered closure. No runtime write grant, kernel profile, public WRITE RPC or active readonly behavior changes; CLI rejects run/IPC/ambiguous selectors before intake.",
      "command": "python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-namespace --pool-zpl-write --pool-diagnose build --case pool-import --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; python3 -m unittest discover -s tests -p test_openzfs_zpl_complete.py -v; affected namespace/volume/runtime checks; zig build test at complete integration checkpoint",
      "oracle": "Actual C probe over faulting APIs verifies complete pristine/predicted/readback stream,16-byte overwrite at37, exact TXG/progress, UTC and node invariants; all390 reachable API failures close without retry. Actual import orchestration checks export after context close/drain, no final ordered acceptance before export/no remaining pools. Compiling hash/progress/close/drain/ordering omissions must fail named96/97 oracles. Full engine link requires actual strict writer/initializer/callback/transaction/drain origins, loader budgets and unchanged readonly artifacts.",
      "gaps": "Original build checkpoint passes full writer/readonly composition and445-method broad host/Zig/pin/workflow checks. Matching writer controller/envelope/kernel build is now separately prepared under AT-ZPL-WRITER-CONTROLLER. Run/IPC remain rejected before intake. No native write, runtime memory/full-stack or fresh-VM recovery; Rust WRITE/poison/alias coherence, creation, persistent consumers and R1 remain open. Owned outputs removed.",
      "owner": "Aether private engine; userland UTC/POSIX, sys-init lifecycle, pkg-mgr installation ownership preserved",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-WRITER-CONTROLLER",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Selected private writer supervisor delegates exact sector8/count2097152/rights7 once to the first live generation using unchanged AENBD002/ABI14. Default namespace rights1 and kernel256-byte output bound remain unchanged; writer emits32 eight-byte observations. Changed-media inspection never replaces pristine launcher admission. Execution remains build-only.",
      "command": "python3 -m unittest discover -s tests -p test_service_runtime.py -v; python3 -m unittest discover -s tests -p test_openzfs_zpl_complete.py -v; python3 -m unittest discover -s tests -p test_openzfs_native_namespace.py -v; python3 -m unittest discover -s tests -p test_service_block_runtime.py -v; python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-namespace --pool-zpl-write --pool-diagnose build --case pool-import --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; pinned formatting/simplicity/standards/workflow checks",
      "oracle": "Actual compiled Rust controller/delegation/phase/resource loops and nonzero advancing TXG; exact C import/drain/export/order and32-row quota, compiling extra-record and missing-target controls. Strict changed-media guards/canonical expected-digest/equality; pristine launch rejects modified image before dependencies. Full writer/controller/envelope/kernel build and default readonly supervisor byte comparison; frozen source/tool/artifact hashes.",
      "gaps": "Complete writer4433272 bytes/1318 structural pages/116 origins and2295-byte supervisor/envelope/ABI14 kernel/ISO build pass; readonly1870-byte supervisor remains exact. Focused92 methods plus pins/simplicity/format/workflow130 pass. One AST-discovery test failure is fixed and retained. All owned build/media outputs removed. No guest write, modified-media readonly launch/whole-file recovery, runtime memory/full-stack fit, public Rust WRITE/poison/alias coherence, creation, persistent consumers or R1 acceptance. Next broad checkpoint is native persistence integration.",
      "owner": "Aether private storage controller/engine; userland UTC/POSIX, sys-init lifecycle and pkg-mgr installation ownership unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-RECOVERY-PREPARATION",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Independent original-zdb pristine extraction plus Python splice pins the fixed16-byte overwrite digest before any native write. New isolated build-only original ZPL/SA/SHA2 reader validates whole file, generation/mode/size, flags and bounded equal UTC metadata. Newer exported labels only in selected private reader; pristine labels/default engines remain exact. READ1/ABI14,32 rows and original readonly drain/retirement, no new authority or namespace WRITE.",
      "command": "python3 -m unittest discover -s tests -p test_openzfs_zpl_recovery.py -v; affected native-namespace/runtime/IPC/complete-writer/volume checks; python3 scripts/service_runtime_smoke.py --fixed-reaper --engine-utc --pool-create --pool-namespace --pool-zpl-recover --pool-diagnose build --case pool-import --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; readonly compatibility build; pinned formatting/simplicity and workflow checks",
      "oracle": "Actual C over API/SHA models:197 reader API failures, identity/data/UTC/flags/EOF, SA/context close, readonly import/drain/refcount/retire and newer loaded TXG; compiling omissions require98/99 and stale-label omission95. Actual Rust READ1 controller/32 rows/advancing TXG/resource bounds. Reject missing/unclean writer evidence and mismatched media/reader TXG; pure checks cannot start a guest. Full native object/link/origin/loader/stack/controller/kernel builds, default artifact comparisons and frozen inputs.",
      "gaps": "Independent original-zdb extraction/splice and complete4430288-byte reader/1317 structural pages/100 origins,2295-byte READ1 controller/envelope/kernel/ISO builds pass. Default readonly full ELF and supervisor remain byte-exact. Focused151 methods, nine reader/import98/99 omissions and stale-label95 pass; first fixture-return and inlined-origin check failures retained. Native execution and changed-media launch remain gated. No runtime full-stack/memory, native write/fresh-VM readback, crash replay/power-loss durability, public WRITE/poison/alias coherence, creation, persistent consumers or R1 qualification. Next paired native integration needs broad checkpoint. Owned artifacts disposed.",
      "owner": "Aether private storage experiment; userland UTC/POSIX, sys-init lifecycle and pkg-mgr installation unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-NATIVE-PAIR",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "One pair-owned fixed guarded fixture, both builds before any VM, existing WRITE7 then READ1 first-generation grants and no replacements with authority. Sealed artifacts/sources/tools/runtime; clean writer terminal/reclaim/drain/export/ordered witness before reader on exact stopped media. No retry, user disk, kernel/SDK/pin/quota or shared interface change.",
      "command": "python3 -B -m unittest discover -s tests -p test_zpl_pair.py -v; affected recovery/writer/namespace/block tests; zig build test --cache-dir .zig-cache --global-cache-dir .zig-cache/global; python3 -B scripts/zpl_pair.py --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Host orchestration/real serial oracles deny incomplete builds, artifact/source/tool/runtime drift, unowned paths, unclean writer, changed media and stale recovered TXG. Stop failure is distinct and prevents media cleanup. Native writer must complete full independent data/metadata/progress/original ordered closure, all three terminals and21 cleanup boundaries; fresh readonly VM must match full modified file and metadata, loaded TXG >= assigned TXG, and leave every media byte unchanged. Error-only25-row stage/errno trace must preserve error and context closure across390 API failures; omitted/wrong diagnostics fail96. Final source drift cannot leave a successful qualification flag; CLI controls are escaped. Actual hook/getter/provider regression reproduces provisional close then ENODEV; generated writer-only selection admits first trusted writable open while preserving permanent retirement. Omitted/inverted selection and source drift must reject.",
      "gaps": "Repaired bounded native writer/fresh readonly VM pass: assignedTXG788/recovered798, complete independent780248-byte SHA/metadata, exact media/guards, three normal generations and21 cleanup boundaries per VM. Initial873 and approved stage6 ENODEV diagnostic retained; trusted vdev lifetime selection fixed without reset/default changes. Broad483 Python/159 Zig/pins then focused56 ZPL/46 hooks and final expanded selection controls pass. No peak/full-stack, sustained/general Rust WRITE, alias/poison coherence, creation, crash/power-loss durability, independent consumer or R1 acceptance. OpenZFS committed behind Rust; snapshot/rollback post-R1. Owned outputs disposed.",
      "owner": "Aether private storage experiment; userland UTC/POSIX, sys-init supervision and pkg-mgr installation policy unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-MUTATION-BATCH",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private bounded original-DMU/SA shrink with truthful irreversible progress; two append-only original TXG ordering records with permanent vdev retirement, sticky errors and transaction-indexed graph tokens within8192 bytes. Existing readonly/single-write profiles, kernel, SDK and pins preserved. Userland owns operational Rust authority/aliases/POSIX.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_zpl_resize.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_pool_repeat.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_zpl_repeat.py -v; affected writer/volume/pair checks; broad checkpoint at native integration; python3 -B scripts/zpl_pair.py --repeated-writes --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Actual C API failures/semantic omissions, pinned native imports/frames and unchanged old writer object. Original graph/getter/vdev/provider bodies reject missing/old waits, reused slots, retired/foreign identities, late tokens, partial provider work and exhaustion. Two generated eight-byte writes must complete/sync with advancing original TXGs, full final independent digest and fresh readonly VM metadata/media equality, complete generation cleanup.",
      "gaps": "504-method broad checkpoint and17 new methods pass; final5-method expanded wait/provider controls and compiling prior-wait omission pass. Shrink object11528/local frame344, old objects exact; real-media shrink unqualified. Two native builds pass with unchanged reader/controllers; writer times out at unchanged30s after OAMT/no TXG/terminal/guest cleanup, reader never launches. Host stop confirmed, outputs disposed, compact failure retained. Human disposition gates next persistence guest; no retry or limit increase. No sustained service, crash/power-loss, consumer or R1 acceptance.",
      "owner": "Aether engine/block producer; Aether-userland operational filesystem service",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-STAGE-DIAGNOSTIC",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Opt-in repeated-writer stage observations reuse eight config-fingerprint slots, preserving config validation, fixed-media hashes,32 rows/ABI14 and256-byte capacity. Each fixed stage is checked by the actual Rust controller, including former wildcard positions. Exact partial prefixes remain diagnostic-only; no synthesized input hash, commit/cleanup/durability or false success. Old single/repeated/readonly profiles unchanged.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_zpl_stages.py -v; affected service-runtime, repeated/complete probe and paired-runner checks; python3 -B scripts/zpl_pair.py --repeated-writes --stage-diagnostic --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Actual generated C probe over391 API faults checks marker order, context ownership, cleanup and write progress; compiling omitted/reordered/early-close markers fail96. Import old fingerprint/quota and missing validation fail97. Actual compiled Rust rejects corrupted fixed markers/resources and detects old wildcard regression. Prefix decoder rejects malformed/stale/foreign/order/error-stage contradictions and never qualifies. Reader admission retains full writer terminal/cleanup/ordered/export and exact-media checks.",
      "gaps": "148 affected host methods pass, including14 stage methods/391 API faults and compiling marker/validation/wildcard omissions. Final stage/runtime checks pass after scoped result-field adjustment. Both native builds pass; readonly images exact. Sole writer observes open/baseline/UTC/first-write entry then30s watchdog, no checked first return/second entry, TXG/errno/terminal/guest cleanup. QEMU joined, no reader/retry, outputs disposed. Assignment/commit/wait or error closure and root cause remain unknown; human disposition gates another guest. Prior504 broad checkpoint reused for unchanged infrastructure. No limit, sibling/public SDK/ABI/pin change or R1 claim.",
      "owner": "Aether private engine diagnostic; operational Rust service remains Aether-userland",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-FIRST-WRITE-DIAGNOSTIC",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private first-write wrapper over generated original helper, scalar selector and no mutable call counter. Eight existing fingerprint slots/32 rows/256 bytes; original errors, preflight, assignment/commit/wait/cleanup and config validation remain. Old outer-stage/default/readonly profiles, ABI14 grants/quotas/pins unchanged. Error paths are diagnostic only; no return marker proves success.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_zpl_first_write.py -v; affected writer/stage/pair/service-runtime checks; python3 -B scripts/zpl_pair.py --repeated-writes --first-write-diagnostic --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Actual generated C over original write doubles checks every preflight/assignment/commit/wait/error and marker lifetime, ordinary entry silence and first-only probe selection over391 API failures. Compiling omitted/early/reordered markers fail98. Native selected headers/imports/local frames, unchanged canonical writer/reader controls. Actual Rust fixed-marker/resource checks and old-wildcard omission; strict prefix/error paths reject old/foreign/malformed/order contradictions without qualification. Full writer/cleanup/export/media checks gate fresh reader.",
      "gaps": "161 affected methods pass (95 ZPL/pair,66 runtime), including13 new methods/85 provider modes/391 probe faults and compiling omissions98/96. Native headers/frame4456, old objects exact; initial decoder/test-mode failures retained. Both images build; readonly ELF/supervisor exact. Sole writer observes assignment/commit return and sync-wait entry then30s watchdog; no wait return/TXG/errno/terminal/guest cleanup. Commit return does not qualify sync/durability. QEMU joined, no reader/retry, outputs disposed. Original quiesce/sync/ordered-I/O worker progress, signaling and budget pressure remain unknown; human disposition gates next bounded guest. No speculative runtime fix or limit/public SDK/ABI/pin/sibling/R1 claim.",
      "owner": "Aether native engine diagnostic; Aether-userland operational filesystem service",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-TXG-WORKER-DIAGNOSTIC",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Eight existing fingerprint slots select first immutable target/owner through original bind, quiesce, sync, ordered roots and wait return. No new mutable table/counter, observer reset or resource/authority change. Worker callbacks outside TXG sync mutex; retain original waits/errors/commit/cleanup and default/older diagnostic profiles. Prefixes/early wait/error paths never qualify durability. Prepare separate pristine READ1 baseline before any guest; baseline full file/EOF/metadata/cleanup and exact whole media must pass before WRITE7. Generated worker writer uses fixed independent modified-file hash, retains complete post-write check; unchanged fresh reader gates persistence.",
      "command": "python3 -B -m unittest discover -s tests -p 'test_openzfs_zpl*.py' -v; affected ZPL/pair, volume/original sync/graph, repeated hooks and service-runtime checks; python3 -B scripts/zpl_pair.py --repeated-writes --txg-worker-diagnostic --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Pinned original worker bodies execute over explicit lock/handoff doubles; omitted/moved-under-lock/reordered observations fail99. Actual original graph/getter/vdev/provider checks first-only foreign/unbound/retired selection and sticky errors within existing8192 bytes; compiling filter/phase and wait omissions fail named semantic oracles. Provider preserves85 original failure/progress modes. Actual Rust fixed bytes/resources and wildcard omission, strict old/foreign/reordered/error/ambiguous-TXG prefix denial and full writer/cleanup/media reader-admission guards.",
      "gaps": "Separate-baseline result:197 focused methods pass, initial fixture/oracle failures retained. All three images build on frozen inputs/tools; readonly recovery bytes exact. Pristine READ1 full780248-byte file/metadata/EOF, Rust ownership and21 cleanup boundaries pass with exact whole guarded media. Generated worker writer omits duplicate baseline stream, retains fixed independent full-file oracle and original preflight/sync/order/export/cleanup. Sole WRITE7 guest reaches BIUVWLPOAMTbqs then30s watchdog; no ordered-root/wait return, target/terminal/guest cleanup. History initialization precedes actual spa_sync; sync entry, initial I/O/config/dataset convergence and budget pressure unresolved. QEMU joined, no recovery/retry, outputs disposed. Human disposition before next bounded sync-stage attempt; no runtime fix, limit/authority/SDK/ABI/pin/sibling/consumer/R1 claim.",
      "owner": "Aether native engine producer; Aether-userland operational filesystem policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-SYNC-STAGES",
      "reference": "docs/OPENZFS-FEASIBILITY.md",
      "invariants": "Private sync-stages refinement preserves older selectors and existing32 scalar rows/256 bytes, ABI14, first-target owner/pass/generation/retirement scope and original waits/locks/transactions/order/error/cleanup. Separately qualified pristine READ1/file/media gates WRITE7; fixed independent full-file oracle and unchanged recovery reader. Pinned original SPA/DSL bodies, reuse reconstructed slot90 in its composed SPA wrapper; independently reconstruct/replace additional DSL slot162; no new state/authority/dependency or limit increase. Maintainer-approved one60-second writer diagnostic is a fixed opt-in requiring this profile; defaults/baseline/recovery remain30s, stop remains bounded and no30-second/R1 claim follows.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_zpl_sync_stages.py -v; affected ZPL/pair/service-runtime/namespace, volume/elapsed and syntax/format/pin/workflow checks; python3 -B scripts/zpl_pair.py --repeated-writes --txg-worker-diagnostic --sync-stages --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; python3 -B -m unittest discover -s tests -p test_zpl_writer_budget.py -v; one maintainer-approved run adds --writer-60s to the sync-stages command",
      "oracle": "Actual pinned early SPA/DSL prefixes run over explicit lock/I/O/pass-aware doubles; compiling absent/misplaced/later-pass markers fail94. Actual original two-record graph/owner/getter/provider witness checks all17 prior modes and foreign/missing marker omissions. Actual Rust fixed marker/resource/padding and old-wildcard omission; strict prefix/early-w/error, older-profile, build downgrade and full writer/cleanup/media admission checks. Actual native full bodies and origins; no prefix establishes persistence.",
      "gaps": "258-method frozen checkpoint, corrected12 sync tests,5 watchdog controls and final13 pair/12 sync tests pass with scoped input reuse. Initial test/preparation failures retained.30s writer reaches beicpv; consumed one60s writer reaches beicpvrw, checked two-write/full-readback target789 and pre-export S, then generic kernel assertion. Unchanged3000-tick guard applies but call-site attribution unproved. No successful export/terminal/guest cleanup/fresh recovery or normal30s qualification. VMs joined, owned outputs disposed. Disposition and bounded call-site/tick identification precede another guest. Operational Rust service, remaining mutations/sustained writes, actual Zsh/TTY and persistent ISO remain open; no sibling/pin/authority/consumer/R1 claim. Followup AT-NATIVE-TICK-ASSERTION directly identifies the unchanged3000-tick guard in the current guest; the proposed writer-only bound requires a new decision.",
      "owner": "Aether native engine producer; Aether-userland operational filesystem policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-NATIVE-TICK-ASSERTION",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Preserve nativeTick checked increment, strict3000-tick rejection, lifecycle exemptions, generic panic, all ABI/authority/resource/order/cleanup and smoke contracts. Emit one bounded numeric failure-only assertion ID immediately before the unchanged rejecting require; no pointers, grants, new state or allocation. Latest maintainer continuation authorizes one further60s writer assertion-identification attempt, readonly30s and internal ceiling unchanged; no automatic retry or internal-limit increase.",
      "command": "python3 -B -m unittest discover -s tests -p test_native_tick_assertion.py -v; affected native cleanup, writer budget, pair and sync-stage tests; python3 -B scripts/zpl_pair.py --repeated-writes --txg-worker-diagnostic --sync-stages --writer-60s --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; offline Experience/workflow/simplicity, Zig format and diff checks",
      "oracle": "Actual native Zig tick-prefix/require/panic bodies execute over lifecycle/serial/halt scaffolding;2999 continues,3000 emits exact assertion before unchanged panic, both existing exemptions continue and overflow remains distinct. Compiling missing/late-marker or weakened-bound controls must fail the named oracle. Actual native guest must emit exact marker+panic for attribution; absent/partial trace remains inconclusive and never qualifies recovery.",
      "gaps": "40 affected host methods and all three native builds pass on frozen sources/tools; actual engines/supervisors unchanged. Baseline passes full file/metadata/EOF/ownership/cleanup/media. Sole writer reaches target789/pre-export S then exact tick-budget ticks=3000/limit=3000 immediately before original panic, identifying nativeTick strict guard. No export/terminal/guest cleanup/fresh recovery; VMs joined, outputs disposed. New one-attempt authorization consumed. Proposed fixed6000-tick/60s writer awaits maintainer decision; readonly3000/30 and other bounds/gates unchanged. No internal-limit increase, engine repair, operational service/Zsh/ISO or R1 qualification. The separately approved AT-ZPL-WRITER-TICK-BUDGET pair now passes in exceptional6000-tick/60s scope; no normal-budget or consumer acceptance.",
      "owner": "Aether native fixture and kernel diagnostics; userland filesystem/Zsh policy unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-WRITER-TICK-BUDGET",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Maintainer-approved one private6000-tick/60s writer; baseline/recovery stay3000 ticks/30s. Default-false fixed build flag rejects release/incompatible profiles; CLI requires writer60/sync-stage worker mode; before every guest verify report and actual writer-only Zig option. Preserve strict bound, checked counter, lifecycle exemptions, generic panic, all ABI/authority/resource/file/media/order/export/cleanup/recovery gates and joined stop. No arbitrary limit, automatic retry, production or normal-budget qualification.",
      "command": "python3 -B -m unittest discover -s tests -p test_native_tick_assertion.py -v; python3 -B -m unittest discover -s tests -p test_zpl_tick_budget.py -v; affected build-policy, pair, writer-watchdog, sync-stage and service-runtime host tests; python3 -B scripts/zpl_pair.py --repeated-writes --txg-worker-diagnostic --sync-stages --writer-60s --writer-ticks-6000 --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; workflow/offline pins/simplicity/Experience, Zig format, syntax and diff checks",
      "oracle": "Actual default2999/3000 and selected5999/6000 tick-prefix/require/panic boundaries, lifecycle exemptions/overflow and compiling missing/late/weak-guard omissions. Actual Zig build rejects missing profile and full-profile release request. Prepared flag/command missing, false, duplicate, wrong-role or default downgrade reject; actual option emission and paired baseline/cleanup/recovery admission remain strict. Native full file/media/export/cleanup and fresh reader required regardless of selected budget.",
      "gaps": "108 focused methods and all three actual builds pass; source/tools frozen, engines/supervisors exact. Separate pristine READ1 baseline and6000-tick/60s writer pass two advancing writes/full modified file+metadata/EOF, target789, clean export/drain/retirement/all21 cleanup boundaries/three terminal0/reclaims3. Fresh3000-tick/30s READ1 imports at TXG799, verifies entire independent file/metadata, tears down and leaves whole media unchanged; all VMs joined/outputs disposed. Normal30s false; approved one-off consumed. Next live Rust bridge needs explicit compatible source closure/matching selector and budget; its C/UTC/tool identities match but two builder pins differ. No automatic retry, sustained IO, operational filesystem/Zsh/ISO or R1 claim.",
      "owner": "Aether bounded native fixture/engine producer; userland filesystem/Zsh policy unchanged",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-RUST-BRIDGE",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Exact immutable UL-082 Rust delivery with matching original C/UTC/tool/core inputs and explicit current builder adaptation. Exclusive SPA/context lifetime, one16-byte provider write,24-byte progress including errors, independent full pre/post file+metadata/EOF, ordered export/drain/cleanup and fresh READ1. Standing writer60s/6000; readers30s/3000; unchanged authority/resources/pins/siblings. Outer error progress unknown; no retry.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_bridge.py -v; affected pair/tick/watchdog/volume/elapsed/runtime/complete-probe checks; build-only origin/resource review; python3 -B scripts/zpl_pair.py --filesystem-bridge <pinned-v1-bridge-delivery> --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; broad checkpoint at actual integration handoff; offline pin/workflow/simplicity checks",
      "oracle": "Manifest/member/source/tool drift and aliases/extra members reject. Generated C runs392 reachable API failures with nonoverlapping borrows and retained assigned TXG. Compiling missing callback/preclose/postopen/progress/full-readback checks fail96. Actual partial callback origin is delivered Rust object; six C methods from original C object, final no-undefined links. Baseline/writer/fresh-reader use full original file/media/cleanup gates; doubles cannot qualify native Rust.",
      "gaps": "Exact native Rust writer and fresh readonly recovery now pass in AT-ZPL-RECOVERY-DIAGNOSTIC: one16-byte write, full file/hash/metadata/EOF, target788/export, recoveredTXG798 and21 cleanup boundaries per guest/whole media unchanged. Prior recovery873 retained, not reproduced or fixed; no deterministic, sustained, authenticated/operational service or R1 claim. Initial broad603-Python/159-Zig scaffold repair and scoped result reuse remain in original receipt.",
      "owner": "Aether engine/block producer; Aether-userland Rust filesystem policy owner",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-RECOVERY-DIAGNOSTIC",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Filesystem-bridge or exclusive truncate reader attribution. Writer60s/6000, readers30s/3000. Default predicates stay fixed; selected UTC horizon follows AT-ZPL-RECOVERY-WINDOW, and truncate has its independently fixed empty-file oracle in AT-ZPL-ZERO. All other hash/metadata/close/handle/retirement/media predicates remain. Existing E/stage/errno six bytes after close,25 rows within32/256. No new wire, timestamp dump, arbitrary time or retry before disposition.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_recovery_diagnostic.py -v; affected bridge/pair/tick/recovery/elapsed/runtime checks; build-only reader origin/loader/stack review; after disposition only: existing pinned filesystem-bridge pair command plus --recovery-diagnostic",
      "oracle": "Actual generated original C retains all197 API failures/denials and reports exact stages after ownership release. Compiling missing/wrong markers/errno, widened/removed time bound, omitted hash or close fail98. Strict25-row decode rejects malformed/extra/interleaved/false-success data; opt-in profile cannot downgrade/move to writer/default reader.",
      "gaps": "Original-check diagnostic and subsequently reconciled writer-window native sequences pass; no error stage emitted, prior873 remains unattributed/unfixed. Current source-bound window receipt qualifies the selected60-second metadata horizon with unchanged30-second readers and all full-file/media/export/cleanup gates. Truncate variant qualifies separately. No deterministic/stress/sustained/authenticated-service/R1 claim.",
      "owner": "Aether exact engine fixture; Aether-userland filesystem/UTC policy owner",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-RECOVERY-WINDOW",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Fixed recovery UTC horizon derives from paired writer watchdog: base1791290040 inclusive through30s or approved60s. Readers stay30s/3000. Default canonical source/ABI/pins unchanged; all other metadata/hash/EOF/cleanup/media gates retained. Diagnostic stage14 remains available; prior873 unattributed.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_recovery_window.py -v; affected bridge/recovery/pair/tick/watchdog/volume/elapsed/runtime checks; existing pinned filesystem-bridge pair plus --recovery-diagnostic under standing writer60s/6000 and reader30s/3000 limits",
      "oracle": "Compiled actual generated C accepts inclusive endpoints and rejects each just-outside timestamp, invalid nanoseconds and all existing197 API/metadata/hash/EOF denials with consuming cleanup. Default source byte equality; wrong-role/missing selection, stale generated-source hash and unsupported profiles reject before VM. Pair derives horizon from watchdog independently of ticks/diagnostic. Full native baseline/write/export/fresh reader and whole-media gates remain required.",
      "gaps": "176 focused methods and fresh native pristine/Rust-write/recovery pass; reviewed baseline/writer engines/all supervisors unchanged, target788/export/recovered798, full file/hash/metadata/EOF, all21 cleanup per guest and exact stopped-writer whole media. Readers30s/3000; writer60s/6000. Outputs disposed. Prior873 remains unattributed, not proved fixed; no sustained/authenticated service/consumer signoff/R1 claim.",
      "owner": "Aether private engine fixture; Aether-userland UTC/filesystem policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-ZERO",
      "reference": "docs/NATIVE-C.md",
      "invariants": "One original-engine bounded truncate-to-zero, pristine baseline, full original file hash/EOF, consuming close/reopen, exact post metadata/two EOF checks, independent fresh-reader empty hash/metadata/two EOF checks. Writer60s/6000, readers30s/3000, fixed matching60s UTC acceptance, original ordered export/all21 cleanup/media gates. No extra transactions, authority, memory, workers, SDK/pins/siblings or retry.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_zpl_zero.py -v; existing shrink and affected pair/runtime/volume/elapsed/timestamp tests; python3 -B scripts/zpl_pair.py --truncate-zero --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Compiled actual C probe: every204 API failure and exact data/progress/metadata/close/reopen denials; compiling omissions fail97. Generated readonly C: fixed empty hash/two EOF and all metadata/API denials/consuming ownership; omissions fail98. Exclusive matching profile/source seal and strict original free/SA/transaction/sync linker origins precede native execution. Default engines remain unchanged.",
      "gaps": "184 affected host methods and native pristine baseline/truncate writer/fresh readonly recovery pass. Original target788/export, close/reopen/exact post metadata/two EOF, freshTXG798/fixed empty SHA256/size0/time/flags/two EOF and all21 cleanup per guest pass; exact media/guards, frozen sources/tools, VMs joined and outputs disposed. Local writer4552/shrink344 static frames are not full-stack proof. Zero only: nonzero prefix/extension/sustained/create/rename/remove, authenticated Rust service/consumer witnesses and R1 remain open; service delivery gates boot assembly.",
      "owner": "Aether engine/block producer; Aether-userland filesystem policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-NAMESPACE-MUTATIONS",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Create empty0600/no inheritance; exact-identity same-directory no-replace rename; single-link/no-external-xattr bounded free. Original ZAP/SA/DMU owns encoding. One transaction/writer60s/6000, readers30s/3000; original file preserved. No SDK/pins/authority/sibling changes or retries.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_zpl_mutate.py -v; python3 -B -m unittest discover -s tests -p test_zpl_namespace.py -v; affected pair/budget/volume/elapsed/runtime/bridge checks; python3 -B scripts/zpl_namespace.py --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Compiled actual primitives: every reachable API fault, preflight rejection, assigned commits/progress, handles and effects; compiling omissions fail94. Actual six guest verifiers: full original hash/EOF, root/name/object inventory, private ACL/time/identity and consuming close; fault/omission controls fail95. Fixed source/role/budget admission, original symbol origins and seven-build/stop/seed ordering controls precede native qualification.",
      "gaps": "193 focused methods and one zig build test checkpoint with640 harness tests pass. Seven prepared-before-launch native guests qualify create788/recover798, rename804/recover814 and remove820/recover830; exact original file/hash/EOF, private ACL/metadata, original allocated-object inventory after remove, ordered export/all21 cleanup per guest and exact media/guards. First pre-import873 was a seeded writer pristine782-label mismatch, reproduced at798 and corrected with sealed newer-label selection; first failure/command-retention gap remain. Corrected actual commands retained, inputs frozen, VMs joined, outputs disposed. Private empty-file subset only: broader/nonempty/sustained semantics, authenticated Rust service, consumer acceptance and R1 remain open.",
      "owner": "Aether private engine/block; Aether-userland filesystem/UTC/POSIX policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-FILE-SIZES",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Original shrink/write unchanged; prefix retained at65539, initialized4096 zeros to69635, two4096-byte writes to73722 using existing two append-only records; no third admission/reset, quota/pin/ABI/sibling changes. Writers60s/6000; readers30s/3000; original export/all21 cleanup/whole-media/guard requirements.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_file_sizes.py -v; affected namespace/pair/shrink/zero/repeat/volume/elapsed/runtime/bridge checks; python3 -B scripts/zpl_namespace.py --file-sizes --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Independent original-zdb/Python prefix/zero/pattern hashes with nonzero removed interval. Actual extension over original writer: every fault/denial/committed progress and omitted-data/length/offset/limit controls. Actual six guest verifiers reject stale hash/EOF/time/length/state/nonadvancing TXGs/missing progress/close; seed/label/role/witness selections and real file-length admission fail closed.",
      "gaps": "202 affected methods, one652-method broad integration checkpoint and seven native guests pass: shrink788/798 at65539, initialized extension804/814 at69635, two4096-byte writes last821/831 at73722. Full independent hashes/metadata/two EOF, original ordered export/all cleanup/media/guards pass; frozen sources/tools, unchanged reviewed baseline/supervisors, joined guests, actual commands retained and owned outputs disposed. Host fixture/layout failures retained; no native retry. Finite two-write scope is not general sustained-service acceptance. Subsequent fixed eight-record/10240-byte qualification is recorded separately in AT-ZPL-EIGHT-WRITES; it is not general uptime. No sparse/POSIX/authenticated-service/crash/whole-stack/consumer/R1 claim.",
      "owner": "Aether private original-engine/block; userland operational filesystem/UTC/POSIX policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-EIGHT-WRITES",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Approved exactly eight append-only records and10240-byte private combined observer, original flow/graph/request/authority/worker/grant rules; old two-record8192 defaults exact. Eight4096-byte appends at69635 to102403. Writers60s6000/readers30s3000; no reset/retry.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_eight_writes.py -v; affected namespace/pair/pool-repeat/size/budget/volume/elapsed/runtime/bridge checks; python3 -B scripts/zpl_namespace.py --eight-writes --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Independent original-zdb/Python full intermediate/final hashes. Actual original graph/vdev/wait bodies: eight records, retained first target/history, every-position incomplete/foreign/duplicate denials, old tokens/waits, sticky ninth capacity and compiling omissions. Actual eight-write/recovery probe with all reachable API faults, preassignment/committed progress and missing eighth/hash/EOF/wait/close controls. Six default native C objects bit-exact; actual generated observer/source/count/budget/label/role/seed/length/stop guards.",
      "gaps": "215 focused affected methods and seven native guests pass: shrink788/798, extension804/814, eight4096-byte appends to102403 at last827/fresh837. Full intermediate/final hashes, metadata/two EOF, consuming close/reopen, original ordered I/O/export/all cleanup/media/guards pass; frozen listed inputs/tools, six default C objects and native shrink/extension engines/all supervisors unchanged, actual commands retained, joined owned outputs disposed. Writer case39.0s within60s6000; readers30s3000, no native retry. Host-method invocation error retained. Previous652-method full checkpoint is pre-extension baseline, not current full-suite coverage. Fixed observer9704/10240; ninth sticky-capacity rejection, old two/8192 defaults exact. Continuous IO needs bounded record lifetime/retirement plus operational userland service and consumer witness. No crash/whole-stack/peak-memory/consumer/R1 claim.",
      "owner": "Aether private engine/block; Aether-userland operational filesystem/UTC/POSIX policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-ZPL-WRITE-LIFETIMES",
      "reference": "docs/NATIVE-C.md",
      "invariants": "One successful-TXG record, monotone epoch and retired/completed summary, reader/exclusive pins, actual seven phases/original wait plus no graph/request/operation borrow before consuming retirement. No reset of poison/device/first target/global counters/op generations; original progress retained. Fixed native eight appends,7596/8192 bytes,60s6000 writer/30s3000 readers; old modes exact.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_write_lifetimes.py -v; affected namespace/eight/repeat/size/pair/budget/volume/elapsed/runtime/bridge checks; python3 -B scripts/zpl_namespace.py --write-lifetimes --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Actual original graph/vdev/wait bodies, eight/64 host reuse, per-position pin/graph/request/operation/unsynced denials, failed dispositions and no erase, real concurrent pinned borrow, same-phase stale epoch, old waits, foreign/closed/backward/overflow/double retirement. Compiling omissions fail named oracles. Actual probe all reachable faults, full intermediate/final independent hashes, progress and consumed contexts, retire/close/error omissions. Eight old native objects exact; selected source/label/role/retirement origins/seed/length/stop gates.",
      "gaps": "Seven native guests pass shrink788/798, extension804/814 and eight4096-byte appends through one successful record to102403/last827/fresh837; full independent hashes/metadata/two EOF, consumed contexts/checked retirement, original ordered export/all cleanup/media/guards pass. Writer37.24s within60s6000/readers30s3000. One broad zig build test checkpoint including674 harness tests passes; host failures retained, no native retry. Frozen sources/tools, eight old probe objects and unchanged size/recovery engines/all supervisors exact; VMs joined, owned outputs disposed, actual commands retained. One record304/combined7596<=8192; host64/concurrent/stale/failure/overflow/omission schedules do not prove all races or general native uptime. Userland new25-member service object verifies build-only; matched writable+IPC/client/negative/recovery intake pending. One-call/context/no-recycling service policy, client outcome retention, native whole-stack/peak-memory, power-loss, consumer and R1 acceptance remain separate.",
      "owner": "Aether native engine/block/observer; userland operational service/UTC/POSIX/reply-loss policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-SERVICE-NATIVE",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Exact25-member userland AFSRPC01 candidate over authenticated AENBD003/ABI25. One16-byte write/context, no recycling/replay, fixed60s6000 writer/30s3000 readers; existing memory/worker/grant/controller/observation bounds. Original full-file/media/recovery oracles and consuming contexts/endpoints. Old modes preserved.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_service.py -v; affected namespace/runtime/volume/elapsed/pair/bridge/budget checks; python3 -B scripts/zpl_pair.py --filesystem-service <sealed-service-delivery> --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; repeat fixed selected native pair with --filesystem-service-case lost-reply, partial-request or close-failure",
      "oracle": "Pinned intake/tool/C/closure drift; actual original C probe adapter, all reachable API faults, consuming context/progress and compiling invocation/hash/cleanup omissions. Sealed Rust native entry over typed host C/channel doubles. Original C/Rust partial/final origins, actual channel/tick options/source/role/ABI gates. Native independent file/hash/EOF/media and fresh reader; native failure matrix separate. Fixed normal/lost-reply/partial-request/close-failure case source and actual Rust cfg/first-partial-wrap options must match; all controllers<=4096/no statics. Real original consuming-close wrapper has one-way arm/permanent injection error; host missing/early/ignored-error controls fail96. Native original C normal probe object byte-exact. Wrapped original close must match original section and global nm definition/address/size, not wrapper substitution; malformed/missing/duplicate/weak/foreign/zero-size controls reject.",
      "gaps": "Current fresh four-case matrix passes12 pristine/writer/recovery guests: normal/lost-reply/partial-request/injected-close-failure, each assigned788/fresh798 with full780248-byte hashes/metadata/EOF, original writer ordered export/drains/all cleanup/media/guards; exact reports checked in-engine, numeric observations project target/cleanup rather than all72 bytes. Current686-method broad checkpoint passes. All six distinct images/twelve roles precede guests; controllers3868/3292/3900/3868<=4096/no writable statics, other bounds fixed. Sources/tools frozen; normal C and baseline/recovery artifacts exact, guests joined/owned outputs disposed/commands retained. Two pre-guest build/admission failures retained; actual command-expression/narrow partial-link regression tests added. Initial positive inherited small-image flag unqualified; actual -12 call restored and passes all current guests. Partial EOF follows synced write; close failure deliberately injected after C consumption, not arbitrary-close quiescence. One-write/context/no-recycling/16-byte/64-request service policy, operational executable/provisioning/readiness/shutdown/idle waiting/namespace mutation delivery, independent consumers/full-stack/peak-memory/power-loss/R1 remain open.",
      "owner": "Aether native engine/block/channel; userland exact service/UTC/POSIX/reply-loss policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-SERVICE-LIFETIME16",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Explicit fixed eight16-byte service profile with consumed-context success-only retirement, exact27-member candidate, original4096/default one-write profiles unchanged; observer7596<=8192 and writer60s6000/readers30s3000. No new RPC or caller authority.",
      "command": "python3 -B -m unittest discover -s tests -p 'test_openzfs_fs_lifetime*.py' -v",
      "oracle": "Actual original observer/provider/graph bodies, eight/64 host reuse, borrowed pins/graph/requests/operations, waits, old epochs, foreign identity, permanent failures and overflow. Wrong16/4096 stage rejects both directions, exact source/duplicate drift rejects, compiling failure/epoch/counter omissions fail named existing oracles. Combined observer7596<=8192.",
      "gaps": "Approved finite eight16-byte service matrix now passes12 guests with seven images admitted before launch: normal/partial/close795/805, lost-first788/798, independent full-file/metadata/EOF/export/drains/all cleanup/media/guards. Sources/tools frozen, all joined/owned outputs disposed;699 harness broad checkpoint passes. Original default C/controller/baseline/old-reader artifacts exact; budgets unchanged. No general uptime, mutation RPC/lifecycle/executable or independent consumer/Zsh/packages/ISO/R1 acceptance. Static fits are not full-stack/peak-memory proof. See compact native/integration receipts; unmodified dependency scans and repeated source contexts hashed, not retained.",
      "owner": "Aether native producer/observer; userland Rust service/context/UTC/reply-loss policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-SERVICE-NAMESPACE",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Exact36-member AFSRPC02 candidate; explicit LOOKUP1/MUTATE_DIR8 and trusted identity; one namespace attempt consumes context before reply, no retirement/reset/replay. Existing profiles/pins and resource ceilings unchanged.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_namespace.py -v; affected service/runtime/volume/elapsed/pair/namespace/budget checks; python3 -B scripts/zpl_namespace.py --filesystem-service <exact36-member-candidate> --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>",
      "oracle": "Actual Rust entry authority/name/live-alias/shared-budget/progress/factory/UTC/transport/cleanup tests and compiling semantic omissions; strict generated original C ABI and original partial/final origins; actual command/profile/source admission. Native independent original-file/namespace/allocation/EOF/fresh-reader/media/export/all21-cleanup gates remain mandatory.",
      "gaps": "All13 native guests pass with9 images admitted before launch: create788/798, rename804/814, remove820/830, fresh lost/close create788/798; independent original file/namespace/allocation/metadata/ACL/EOF/recovery/media/export/drains/all21 cleanup, frozen sources/tools, joined disposal. Exact baseline engine/controller; random envelope/ISO bytes not reproducible. No native partial-request selection, mixed-operation recycling, operational idle/executable/provisioning/readiness/shutdown, independent consumer or persistent Zsh/packages/ISO/R1 acceptance. Broad705 methods had one test fixture default error, repaired with7 focused methods;159 Zig tests/pins/workflow passed; unchanged passing results reused.",
      "owner": "Aether engine/block/channel; Aether-userland service/identity/UTC/transport/lifetime policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-SERVICE-MIXED",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Exact41-member AFSRPC03 private candidate; fixed8 total attempts,4 namespace and4 writes16, explicit rights15/bootstrap identity, root-only policy, success-only consumed-context typed0/16 retirement. Failed/unknown outcomes never replay. Old profiles/pins unchanged. Writer60s6000/readers30s3000, observer8192/controller4096 and all other bounds fixed.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_mixed.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_fs_mixed_service.py -v; python3 -B scripts/zpl_pair.py --filesystem-service-mixed --filesystem-service <exact41-member-candidate> --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; fixed interruption cases use --filesystem-service-case lost-reply, partial-request or close-failure",
      "oracle": "Actual Rust entry, aliases across rename/write, root-cache refresh, shared exhaustion, original failed progress/retirement/reply loss and all frame prefixes; compiling semantic omissions. Exact typed0/16/4096, original pin/graph/epoch/failure/overflow controls. Original C full780248-byte file and independent final p16/q absence/allocation/metadata/ACL/EOF, fresh readonly media and original export/drains/all cleanup. Strict actual build/profile/source/origin/command admission and all22 controller codegen cases.",
      "gaps": "All12 native guests pass with7 distinct images admitted first: normal/partial/close795/805, lost-first-create788/798. Independent original/new file, namespace/allocation/metadata/ACL/EOF/recovery/media/export/drains/all21 cleanup; frozen sources/tools/old seals, joined disposal. Final720-method broad checkpoint passes. Controllers4043/3020/4075/4043<=4096/no statics, observer7596/8192, other limits fixed. Host failures retained, no native retry/failure. Finite one-connection16-byte/64-request/eight-attempt profile; operational executable/ABI/provisioning/idle/larger transport/readiness/shutdown, independent consumer/reader, full-stack/peak-memory, power-loss and persistent Zsh/packages/ISO/R1 remain open.",
      "owner": "Aether native engine/block/channel/observer; Aether-userland service/context/UTC/reply-loss policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-STORAGE-PRIMARY-WAIT",
      "reference": "docs/NATIVE-CHANNEL.md",
      "invariants": "Separate AENBD004/ABI26 primary-only storage wait with existing holder-scoped readiness registration; helpers remain schedulable, completion only primary once. Old ABI25/session/sealed adapters/pins unchanged.30s3000,4096 controller,8192 observer/pages,two channels/three generations/32 observations and100000 frame attempts fixed.",
      "command": "python3 -B -m unittest discover -s tests -p test_storage_channel_wait.py -v; affected namespace/runtime/build/volume/elapsed checks; service_runtime_smoke.py read-only --namespace-wait command in NATIVE-C",
      "oracle": "Execute actual rotate/refresh/dispatcher code and real Wait/nextContext with runnable/blocked helpers, primary saved-frame identity, foreign/worker/reserved denials, close/reset; compiling domain-skip/wrong-frame/worker-admission omissions reject. Actual Rust frame partial/backpressure/spurious/EOF/EPIPE/stale/error/exhaustion checks and four compiling omissions; strict native codegen, legacy build/selector/trace rejection, all23 controllers. Native readonly full file/media/authority/three-generation cleanup and actual balanced park/wake required.",
      "gaps": "Readonly native qualification passes50 balanced park/wake pairs, full original file/media/export/drains/all21 cleanup/three owner generations and frozen-input audit;3939-byte controller, all limits unchanged, joined outputs disposed. Initial parser slot3 assumption rejected a marker-passing guest before final media; retained failed attempt, completed triage/focused regression then exact-engine/controller requalification passes. Broad725 methods had724 pass and one build-policy classification repaired with focused check;159 Zig/pins/workflow passed, no clean full-suite rerun claimed. Host helper/frame/authority/compiling controls pass, old22 controllers exact. Writable Rust candidate adoption, operational ABI/provisioning/idle/lifecycle/bulk transport, all worker races, whole-stack/peak-memory, independent consumers and persistent Zsh/ISO/R1 remain open. Matching separate writable43-member Rust service now passes12 guests/567 balanced waits at unchanged limits; see AT-FS-SERVICE-MIXED-WAIT for final compatibility repair and command-recording gap.",
      "owner": "Aether kernel scheduling/channel mechanisms; userland service/idle/UTC policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-SERVICE-MIXED-WAIT",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Exact43-member separate AFSRPC03/AENBD004 ABI26 mixed candidate. Direction-aware scalar waits; primary parks, helpers continue, partial offsets and errors retained; no mutation replay. Old profiles/pins exact. Fixed8 mixed mutations/64 requests/16-byte data/100000 transfers, writer60s6000/readers30s3000, controller4096/observer8192 and other limits unchanged.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_mixed_service.py -v; python3 -B -m unittest discover -s tests -p test_namespace_ipc.py -v; python3 -B scripts/zpl_pair.py --filesystem-service-mixed --filesystem-service-wait --filesystem-service <exact43-member-candidate> --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; interruption cases use --filesystem-service-case lost-reply, partial-request or close-failure",
      "oracle": "Actual mixed Rust entry/typed C fixture with both-direction short progress/backpressure/spurious hints/wait errors before dispatch and after commit, all partial/lost prefixes, exact original outcomes/cleanup; compiling wait/error/offset/clear omissions. Closed43-member intake and actual kernel/driver/profile/source/origin admission. All27 controllers fit; old23 bytes preserved. Native all-images-before-guests normal/lost/partial/close, balanced park/wake, original full-file/final namespace/data/ACL/EOF/media/recovery/export/drain/all cleanup required.",
      "gaps": "Native7-image/12-guest matrix passes567 balanced waits, independent original/final files/namespace/media/recovery/export/drains/all cleanup. Baseline bytes/old seals exact; controller4059/3020/4091/4059, observer7596/8192, fixed other limits. Host728 checkpoint plus final six wait/three namespace-ZPL repair checks pass. Actual QEMU command files were lost by temporary-helper filename bug; source-derived templates/post-run identities are explicitly weaker, independent/full E-01 acceptance open. Next approved4KiB profile must fix capture. Operational lifetime/executable/provisioning/readiness/shutdown/directory/POSIX/packages/Zsh ISO and independent review remain open.",
      "owner": "Aether native kernel/engine/block integration; Aether-userland Rust service/transport/UTC policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-SERVICE-BULK",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Exact49-member AF04/ABI26;4096-byte initialized/padded bodies, full write body before effects and trusted length-checked consuming retirement. Fixed8 mutations/64 requests, same authority, quotas and watchdogs; no failed reset/replay; old profiles/pins unchanged.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_bulk.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_fs_bulk_service.py -v; python3 -B -m unittest discover -s tests -p test_namespace_ipc.py -v; python3 -B scripts/zpl_pair.py --filesystem-service-mixed --filesystem-service-wait --filesystem-service-bulk --filesystem-service <exact49-member-candidate> --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; interruption cases use --filesystem-service-case lost-reply, partial-request or close-failure",
      "oracle": "Complete length1..4096 data bodies before effect; padded initialized frames, exact trusted retirement length, full-file/namespace/media recovery and original cleanup, old profiles unchanged.",
      "gaps": "All7 images admitted before12 guests; normal795/805, lost/partial788/798, close795/806; full original/new file/namespace/media/export/drains/all cleanup,3450 balanced waits, frozen tools/boot/SDK/Rust and12 actual VM commands pass. Controllers4075/3132/3564/4075, observer7596; joined outputs disposed. Host16/15 omissions and all older selections pass. Broad739 plus final8 affected methods after isolated legacy origin arity repair; no full743 rerun. Separate lifetime9/96 is approved and host-qualified; matching native gate pending, see AT-FS-SERVICE-RUNTIME. Operational executable/provisioning/readiness/shutdown, directory/POSIX/persistent runner/packages/Zsh ISO and independent acceptance remain open.",
      "owner": "Aether native kernel/engine/block integration; Aether-userland Rust service/transport/UTC policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-SERVICE-RUNTIME",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Separate checked lifetime, AF04/ABI26 and55-member candidate; native exactly9 mixed mutations/96 requests. Counters/epochs never wrap or reset failed history. All per-request memory, authority, watchdog, original retirement and cleanup bounds stay fixed.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_fs_runtime_service.py -v; python3 -B -m unittest discover -s tests -p test_namespace_ipc.py -v; python3 -B scripts/zpl_pair.py --filesystem-service-mixed --filesystem-service-wait --filesystem-service-bulk --filesystem-service-runtime --filesystem-service <exact55-member-candidate> --delivery <pinned-v3-runtime-delivery> --utc-delivery <pinned-v3-utc-delivery>; fixed interruption cases use --filesystem-service-case lost-reply, partial-request or close-failure",
      "oracle": "Actual entry crosses old caps; host258 mutations, policy/bridge at MAX and request overflow/compiling omission. Old finite profiles keep denials. Strict actual object/ABI/C/origins/flags and final p8192 two-block original/fresh-media oracle, export/drain/all cleanup and balanced waits.",
      "gaps": "All7 images/12 guests pass after scoped channel-copy fix: full796/806 p8192, lost/partial788/798 empty p,5294 balanced waits, all full-file/media/export/drain/cleanup. Full757 host checkpoint and four old native channel guests pass; engine/controller pairs and six old seals exact. Limits unchanged, failures retained, joined outputs disposed. Operational executable/provisioning/readiness/shutdown and directories/persistent loading/packages/Zsh/independent acceptance remain.",
      "owner": "Aether native kernel/engine/block integration; Aether-userland Rust service/transport/UTC policy",
      "budget_seconds": 1800
    },
    {
      "id": "AT-NATIVE-MONITOR",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Optional writer-only read-only local QMP diagnostic; exactly8 attempts before58s,0.2s whole-query budget, bounded JSON/events and<=64KiB sampled text. Original guest watchdog, panic handling, process join and default runner unchanged. No guest code/authority/observation expansion.",
      "command": "python3 -B -m unittest discover -s tests -p test_native_monitor.py -v; affected test_smoke.py, test_zpl_writer_budget.py, test_zpl_pair.py, test_openzfs_native_namespace.py and test_service_block_runtime.py; one investigated native diagnostic uses replay helper embedded in compact receipt",
      "oracle": "Fixed register/hex stack queries only; malformed/oversized/event-flood replies bounded; eight schedule/text caps, fixed60 watchdog and timeout process join, no panic masking; default profiles retain30/60 and full media/authority/cleanup checks.",
      "gaps": "Read-only non-atomic samples may not locate an operation and change host timing; no performance/uptime/release or independent acceptance claim. No automatic retry or relaxed bounds.",
      "owner": "Aether native harness",
      "budget_seconds": 300
    },
    {
      "id": "AT-NATIVE-CHANNEL-COPY",
      "reference": "docs/NATIVE-CHANNEL.md",
      "invariants": "Same holder/direction/buffer rights and full-request preflight before effects. Fixed16 bytes span<=2 checked pages; noncontiguous backing, IF=0, ephemeral slices, no cache/static/ABI/quota change.",
      "command": "python3 -B -m unittest discover -s tests -p test_native_channel_copy.py -v; zig test kernel/native_channel.zig; affected storage waits/native cleanup and full host checkpoint; original four-case launch_smoke.py --channel with pinned SDK/tools before lifetime storage qualification",
      "oracle": "Actual syscall/helper/byte and real channel/stream: boundaries, flags/holes, no partial effect, precedence, queue closure/short transfers and exactly1/2 lookups. Four compiling omissions fail exact named invariants. Old native channel controls remain required.",
      "gaps": "Actual host cases/four compiling omissions, full757-method checkpoint plus Zig/pins/workflow, four legacy native channel cases and complete7-image/12-guest lifetime storage matrix pass. Same rights/semantics, limits and engine/controller bytes. Compact failures retained; joined outputs disposed. No full-stack/peak-memory, uptime/release or independent acceptance claim.",
      "owner": "Aether kernel/channel mechanism",
      "budget_seconds": 300
    },
    {
      "id": "AT-FS-ACTIVATION",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Private imported-root/UTC readiness publishes once before64-byte greeting on32-byte queue; exact owner-local retained instance must be live+ready. Shared original supervisor poll budget; no new authority/channel/ABI, retry or terminal-bit acceptance.",
      "command": "python3 -B -m unittest discover -s tests -p test_fs_partial_prefix.py -v; python3 -B -m unittest discover -s tests -p test_fs_activation.py -v; python3 -B -m unittest discover -s tests -p test_fs_activation_loader.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_fs_activation_service.py -v; authorized userland: python3 -B experiments/filesystem-service/check-namespace.py --activation; zig build test at native integration; scripts/zpl_pair.py --filesystem-service-activation with explicit runtime/bulk/wait/mixed and exact58-member candidate.",
      "oracle": "Actual scalar gate pending/terminal/stale/foreign/malformed/exhaustion and three compiling omissions; actual Rust entry/typed C provider, publication/UTC/root failure and every greeting prefix, non-retry/greeting and ordering omissions, strict object/ABI and unchanged legacy runtime host cases. Actual selected envelope0/4096/8192/8193/truncation/closure, second RX/stack/NX/read-only aliases/zero tail and three compiling omissions; four actual controllers fit8192, old linker rejects4181 and writable statics; strict kernel option/linker/origin/source/size/profile substitution rejection. Actual activation-only16-byte prefix resumes unsent bytes across EAGAIN/short/spurious hints, rejects zero/oversized/fatal/wait errors, closes only on exact completion, and stops at100000 attempts; five compiling omissions. Actual emitted activation cfg required; all four unselected controllers match original bytes.",
      "gaps": "Producer passes7 admitted images/12 fresh guests at unchanged limits; final formatting reproduces all four native controllers. Independent consumer and operational executable/provisioning/shutdown still open. Actual package-name probe finds16-byte service names cannot represent64-hex blob names; separate255/component510/rename proposal awaits explicit decision. Directories/metadata/loading/packages/Zsh composition remain.",
      "owner": "Aether kernel/runtime mechanisms and Aether-userland filesystem service; sys-init owns activation policy",
      "budget_seconds": 300
    },
    {
      "id": "AT-FS-NAMES",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Separate approved AF05 components1..255/rename<=510; complete padded body before effects, no replay. Old profiles/seals fixed. Existing4096 scratch/8192 controller/4096 stack,9 mutations96 requests and all authority/resource/time/cleanup limits unchanged.",
      "command": "python3 -B -m unittest discover -s tests -p test_fs_names.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_fs_names_service.py -v; authorized userland check-namespace.py --names; zpl_pair.py --filesystem-service-names with activation/runtime/bulk/wait/mixed and exact61-member candidate; broad host at integration.",
      "oracle": "Actual entry29/wrapper3/26 semantic omissions;16/17/64/255/256 and rename510/511, final-name byte, partial/padding/old magic/epoch/rights/stale/no effects/reply loss; typed ABI/object/Clippy/format and legacy21/18. Actual sender ordering/no retry, four controllers fit8KiB; exact intake/origin/owner and independent named recovery source plus actual compiler flags and early CLI guards. Native fixed64-byte names require full content/metadata/media/export/drain/generation/reclaim matrix.",
      "gaps": "Complete7-image/12-fresh-guest producer matrix passes64-byte names: full796/806, lost/partial788/798,5473 balanced waits and all content/metadata/media/export/drain/cleanup.772 host methods plus strict owner checks pass; old seals/pins and bounds fixed; outputs disposed.255 native/independent consumer, operational executable/provisioning/shutdown/directories/metadata/loading/runner/packages/Zsh remain.",
      "owner": "Aether-userland filesystem names/policy; Aether engine/block/native integration",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-DIRECTORIES",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Delegated LOOKUP|MUTATE_DIR, mkdir0700/empty-rmdir and expected-parent refresh; no raw client object identities, aliases on remove, root/self removal, replay or failed reset. Original C/AF05 seals unchanged; names255/rename510/data4096 and existing memory/authority/9-mutation96-request/native watchdog bounds stay fixed.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_directories.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_directory_oracle.py -v; python3 -B -m unittest discover -s tests -p test_fs_directories.py -v; python3 -B -m unittest discover -s tests -p test_openzfs_fs_directories_service.py -v; authorized userland: python3 -B experiments/filesystem-service/check-namespace.py --directories; zpl_pair.py --filesystem-service-directories with explicit names/activation/runtime/bulk/wait/mixed and exact67-member candidate; broad host at integration",
      "oracle": "Actual C directory functions with exact metadata/link/entry counts and ACL, all reachable API failures and compiling omissions; pinned native headers/dependencies/local frames. Actual Rust entry hierarchy9/96, alias/attenuation/stale/partial/padding/reply-loss/no-replay, typed FFI/Clippy/object/legacy behavior and semantic omissions. Independent verifier rejects corrupt hierarchy/content/ACL/metadata/inventory/EOF via eight compiling omissions; actual controller full96 transcript and corrupt replies, first-mkdir reply loss, exactly16-byte partial name prefix across waits, all four8KiB fits. Exact67-member intake/role/origin/source/actual flags and early CLI64 rejection. Native full/missing-body/lost-reply/close/fresh-recovery media/drains/reclaim remains required. Actual binding verifier distinguishes mutable writer imports from independent readonly reader and rejects missing mutators; old selections remain unchanged.",
      "gaps": "Exact67-member AF06 producer and7-image/12-fresh-guest directory matrix pass; full hierarchy/content/ACL/metadata/inventory/media/export/drain/reclaim,36 lifetimes/live0 and2476 balanced waits/wakes. Compact failed attempts retained; owned outputs disposed. No standalone service, full stack/peak-memory, sys-init/runner/packages/Zsh or ISO acceptance.",
      "owner": "Aether engine/native integration; Aether-userland filesystem policy/service",
      "budget_seconds": 1800
    },
    {
      "id": "AT-STORAGE-LIFETIME",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Explicit private AENBD005/controller27 with unchanged engine26/AF06 seal; owner-only scalar self-observe/park, no init halt/console authority. Old3000/6000 stops unchanged. Fixed6500-tick idle,9 mutations96 requests, checked counters/projection; writer120s once/readers30s and all other limits fixed.",
      "command": "python3 -B -m unittest discover -s tests -p test_storage_lifetime.py -v; test_native_tick_assertion.py, test_fs_directories.py, test_openzfs_directory_oracle.py and affected storage/clock/loader/pair checks; zig build test at integration; zpl_pair.py --storage-lifetime --filesystem-service-directories with explicit names/activation/runtime/bulk/wait/mixed and exact67-member candidate",
      "oracle": "Actual kernel owner event/deadline/role/no-console/clock bodies and compiling omissions, actual old tick stop and selected6000+ continuation/overflow; actual Rust idle hints/errors/fixed deadline and compiling omissions; actual controller96-request transcript with retained read alias and post-idle mutations/read; exact actual kernel/cfg/oracle/owner identity and wrong role guards; independent120s timestamp window. One frozen pristine/writer/recovery sequence requires measured6500 ticks, post-idle data/mutations, original whole files/media/export/drain/three reclaims and stop/join.",
      "gaps": "Qualified on the one approved120s writer plus30s pristine/recovery readers:6500 idle ticks, post-idle read/mutations,9/96, full content/metadata/media/export/drain/three reclaims each.794 host/159 Zig and scoped controls pass; frozen inputs/old seals unchanged and outputs disposed. Further attempts require appropriate authority; no standalone operational owner/sys-init/Zsh ISO or independent acceptance.",
      "owner": "Aether kernel/native storage integration; Aether-userland retains unchanged filesystem policy/producer",
      "budget_seconds": 1800
    },
    {
      "id": "AT-FS-LAUNCH-OWNER",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Exact unmodified AF06; genuine Rust main and OpenZFS lifecycle, inherited holder-scoped endpoints and block, truthful errors and distinct ordered cleanup. No fixture workload/error normalization, kernel change, resource expansion or guest execution from builder.",
      "command": "python3 -B -m unittest discover -s tests -p 'test_fs_launch_*.py' -v; python3 -B scripts/fs_launch.py --output .deps/fs-launch-YYYY-MM-DD-vN; authorized userland docs/quality/check.py; focused existing runtime/pair checks and workflow/experience offline checks",
      "oracle": "Actual Rust owner5 tests and5 compiling omissions; actual C lifecycle/import provider faults, metadata/read-only and8 compiling omissions; pinned native C objects and strict Rust native/Clippy/format; actual ELF main/service/engine origins, no fixture importer, no imports/relocations, TLS/W^X/geometry via kernel parser. Exact30-member intake, tampering, source/tool drift and scope rejection.",
      "gaps": "Linked local candidate only; no new native owner execution, sys-init acceptance or storage/SESSION combined profile. Additional combined resources/roles and actual consumer inputs need explicit review. No persistent Zsh ISO or release clearance.",
      "owner": "Aether-userland Rust policy/main; Aether native engine/build/contract; sys-init independent lifecycle consumption",
      "budget_seconds": 300
    },
    {
      "id": "AT-FS-SESSION",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether kernel/runtime; userland filesystem policy and sys-init acceptance separate",
      "budget_seconds": 600,
      "invariants": "Explicit AENFS002 seven domains/35MiB backing/twelve channel records; engine-only helpers/block and process-only copy/exec; old profiles unchanged. Writer60s6000/readers30s3000,9 mutations96 requests,8192 controller/4096 stack, no retries. Separate --sys-init-checks uses actual ABI29 owner16384 ceiling and same combined resources; new reader one4096-byte controller/READ grant/30s3000; fixed negative peers each30s host/combined6000 and separate pristine media. No new mutation count or limit.",
      "command": "python3 -B -m unittest discover -s tests -p test_fs_session.py -v; python3 scripts/fs_session.py for build-only admission; zig build test before native integration; python3 scripts/fs_session.py --run for the approved fresh campaign; python3 -B -m unittest discover -s tests -p test_fs_session_init.py -v; python3 scripts/fs_session.py --controller-16k for separate build-only admission; --controller-16k --run for approved qualification; python3 -B -m unittest discover -s tests -p test_fs_init_intake.py -v; python3 scripts/fs_init_intake.py --help for read-only ELF/raw inspection usage; python3 -B -m unittest discover -s tests -p test_fs_init_consumer.py -v; python3 scripts/fs_session.py --sys-init --run for exact consumer baseline/read-only activation only (post-activation file recovery and native failure matrix remain separate); python3 -B -m unittest discover -s tests -p test_fs_init_checks.py -v; python3 -B scripts/fs_session.py --sys-init-checks --run for independent post-activation original-file recovery plus five fixed failed peers (all images prepared first)",
      "oracle": "Actual bounded envelope parser and kernel preflight/delegation bodies, compiling omissions, disjoint backing and channel roles. Exact new executable plus process exec/wait, per-instance cleanup and independent full-file/media/metadata recovery, matched target TXG and confirmed VM stop. Actual sys-init checks use the exact2072-byte owner; a separate READ-only original-file verifier changes only a copied exported-label TXG guard, requiring exact clean stopped media. Five private peer bodies execute partial/EAGAIN host models and a compiling omission; native admission/terminal/cleanup/stage/fault/panic traces reject missing, replayed or incorrectly settled state. No real-engine fault recovery is inferred from doubles. Prospective normalized machine-record capture has fixed64KiB byte bound, full-selection hash/count and explicit completeness; actual failure-path cleanup preserves early positive rows, compiling omitted-admission retention is rejected. Empty/incomplete capture cannot qualify a run; raw-log SHA/tail contracts unchanged.",
      "gaps": "AENFS002/8192 and AENFS003/16384 conformance pass at796/806. Exact sys-init2072-byte/1096-stack ABI29 activation now passes eight fresh guests: pristine read, actual activation/export/halt, independent original full-file/hash/metadata/media recovery, and five exact hostile-peer owner fail-stops. First oracle failure preserved and corrected: automatic terminal stop1/2 differs from owner reclaim3..7. All output trees disposed;35MiB/seven domains/twelve channels and time/code/stack limits unchanged. Real engine crash/device recovery, full sys-init serial role/PID/FD adaptation, package metadata/promotion, filesystem-backed runner/packages, Zsh/TTY/ISO and independent consuming acceptance remain separate. Sys-init decision0191 independently consumes the first activation/negative spans with18 matched inputs; full positive UART is unavailable. New bounded machine selection has host-only capture/overflow/omission coverage and awaits a future changed native integration, not an unchanged guest rerun."
    },
    {
      "id": "AT-OPENZFS-FILE-METADATA",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether native engine; Aether-userland service/credential/ACL/POSIX policy",
      "budget_seconds": 300,
      "invariants": "Separate unselected136-byte copied metadata record. Existing node/provider/sealed engine unchanged; authorized serialized engine-owned expected identities, no filesystem mutation or retained pointers/state, zero output on every error, release each SA. Raw owner labels/mode/flags/links confer no authority; signed seconds and nanoseconds below1e9. No new RPC/ABI/resource/default.",
      "command": "python3 -B -m unittest discover -s tests -p test_openzfs_metadata.py -v; same discovery with test_openzfs_zpl_read.py and test_openzfs_directories.py; pinned Clang21.1.8 format check with approved coding snapshot config; workflow/pin checks; original-decoder/native/Rust consuming qualification before selected integration",
      "oracle": "Actual original reader plus metadata body over faultable SA/DMU APIs; exact scalar/timestamp/offset/size checks, high labels/special bits/multiple links, stale/type/format/partial/error/handle controls, every reachable API failure and eight named compiling semantic omissions. Native pinned headers174 inputs, one added symbol and exactly unchanged import set, no dynamic local frames and bounded stack. Active30-member seal remains exact.",
      "gaps": "This group alone covers host/API-double and native-header C results. Separate AT-FS-METADATA-BINDING qualifies the private Rust binding and original-disk native getter. Operational service RPC/credential/ACL/POSIX integration, mode/promotion/package/loader/runner/Zsh/ISO acceptance and full/peak-stack proof remain open."
    },
    {
      "id": "AT-FS-METADATA-BINDING",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether-userland Rust binding; Aether native engine/disk qualification",
      "budget_seconds": 300,
      "invariants": "Unsafe owner-only exclusive borrowed view and resolved identity; copied136-byte metadata preserves high raw IDs/modes/flags and signed seconds, no partial output/credential authority. Separate source selection leaves AF06/active seals/defaults unchanged. READ only30s3000ticks, three generations32MiB engine/4KiB controller; no mutation/retry/resource expansion.",
      "command": "python3 -B -m unittest discover -s tests -p test_fs_metadata.py -v; python3 -B scripts/fs_metadata.py --run; existing C metadata affected checks; workflow and sibling quality checks",
      "oracle": "Actual C ABI plus Rust all-field/error/edge cases; nine compiling semantic omissions and two compiler negatives; default Clippy/rustfmt; freestanding object/getattr import; selection and failed preparation cleanup. Native original zdb-second/label/flag reference, stale denial, original full file/hash/EOF, exact unchanged guarded media and three generations/21 cleanup boundaries.",
      "gaps": "Private borrowed binding/disk experiment only. No new client metadata RPC, POSIX credentials/ACLs, general mode/promotion/package/runner/Zsh/ISO acceptance or full/peak stack proof. Independent technical/reader acceptance pending."
    },
    {
      "id": "AT-FS-METADATA-SERVICE",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether engine/transport qualification; Aether-userland AF07 service policy",
      "budget_seconds": 900,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_metadata_service.py -v; python3 -B scripts/fs_metadata_service.py --run; python3 -B scripts/fs_metadata_service.py --diagnostic --run for the separately approved numbered diagnostic; python3 -B -m unittest discover -s tests -p test_fs_metadata_failures.py -v; python3 -B scripts/fs_metadata_service.py --failure-paths --diagnostic --run for the inherited three-case matrix (all distinct images admitted first); python3 -B -m unittest discover -s tests -p test_fs_metadata_specific.py -v",
      "invariants": "Exact77-member candidate/object, explicit METADATA16/AF07/no backend identity wire; unchanged AF06/active engine/pins. Actual original provider and service-object replacement with independently checked origins, no monkeypatch/falsified maps.9 mutations96 requests, writer60s6000/readers30s3000,8192 controller/observer,4096 stack/no writable statics,8192-page engine and existing workers/channels/I/O. No reset/replay or reused idle allowance.",
      "oracle": "Intake closure/source/header/tool/object/entry rejection controls, real native controller/linker guard, exact request count and real112-byte frame decoder/corruptions/semantic omissions. Prepared pristine/writer/recovery images; original/new file/hash/metadata/ACL/namespace/allocation/EOF, media, export/drain and all cleanup/terminal checks; native authenticated holder/rights/version/stale/closed denials. Bounded oracle selection flood/error/unknown/overflow controls; live oracles retain full unfiltered UART input, no retrospective completeness claim. Actual negative controller fit/positive payload identity, partial/lost transcript, C completion/close-consumption omissions and shared-image capture/fail-stop host controls; original close section bytes and wrapper origins on the new provider.",
      "gaps": "Selected positive, inherited transport/context, metadata reply-loss and approved four-provider matrices now pass. Latest12 original-profile guests796/806, complete bounded oracle replay, original getter/wrapper/payload identities and all cleanup/media gates pass. Prior timeout remains preserved/unexplained; no root-cause or operational/release waiver. Major AF07 host checkpoint passes889 Python tests plus Zig/pin/inventory checks. The bounded consuming handoff is ready for userland owner implementation; no independent sign-off or silent operational repin. Current userland delivery is object-only AF07, launch owner remains AF06; matched operational owner/sys-init, modes/promotion/runner/packages/Zsh/ISO, peak/full-stack/hardware/security and independent acceptance remain open."
    },
    {
      "id": "AT-FS-METADATA-REPLY-FAILURES",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether native qualification; Aether-userland metadata policy/operational owner",
      "budget_seconds": 900,
      "command": "python3 -B scripts/fs_metadata_service.py --failure-paths replies --diagnostic --run",
      "invariants": "Fixed replies metadata selections only; original getter section/actual wrapped origins, unchanged AF07 object/authority and old AF06 defaults/seals/pins. No replay/reset, no new caller API. Writer60s6000/readers30s3000,9 mutations96 requests maximum per writer,8192 controller/observer,4096 stack/no statics,8192-page engine and existing workers/channels/I/O/polls. All 5 distinct images precede 9 fresh guests; separate owned guarded media per case.",
      "oracle": "Exact processed count/stop/error/progress/close/getter count. Actual body/error validation and context-retirement/known-error continuation; original getter byte identity and strong original partial/final symbol definition. Full original/new file/metadata/ACL/namespace/allocation/EOF and media guards, ordered export/drain, three generations21 cleanup boundaries, complete bounded oracle replay. Shared preparation only unexecuted immutable build inputs; real guest inputs remain distinct.",
      "gaps": "All nine guests pass at796/806; complete bounded oracle replay, full original/new file recovery, guards/export/three generations21 cleanup boundaries. Slowest writer54.355s, batch613.762498s;4807 generated members disposed. Selected loss points only; no all-schedules, device crashes, whole-stack/peak memory, independent acceptance or operational/Zsh ISO claim."
    },
    {
      "id": "AT-FS-METADATA-PROVIDER-FAILURES",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether native qualification; Aether-userland metadata policy/operational owner",
      "budget_seconds": 900,
      "command": "python3 -B scripts/fs_metadata_service.py --failure-paths providers --diagnostic --run",
      "invariants": "Fixed providers metadata selections only; original getter section/actual wrapped origins, unchanged AF07 object/authority and old AF06 defaults/seals/pins. No replay/reset, no new caller API. Writer60s6000/readers30s3000,9 mutations96 requests maximum per writer,8192 controller/observer,4096 stack/no statics,8192-page engine and existing workers/channels/I/O/polls. All 6 distinct images precede 12 fresh guests; separate owned guarded media per case.",
      "oracle": "Exact processed count/stop/error/progress/close/getter count. Actual body/error validation and context-retirement/known-error continuation; original getter byte identity and strong original partial/final symbol definition. Full original/new file/metadata/ACL/namespace/allocation/EOF and media guards, ordered export/drain, three generations21 cleanup boundaries, complete bounded oracle replay. Shared preparation only unexecuted immutable build inputs; real guest inputs remain distinct.",
      "gaps": "Approved fixed batch passes all12 original-profile guests796/806 with complete bounded oracle replay, exact provider/context/getter semantics, full file/media/export/reclaim and all writer payload/flag identities matching prior admission.681.672673s fits900s;4865 generated members removed. Earlier nanos timeout preserved/unexplained, not retroactively fixed or durable. Major host checkpoint passes889 Python tests plus Zig/pin/inventory checks; matching operational AF07 Rust owner/sys-init, independent acceptance, all schedules/real device faults and R1 remain open. Fixed-batch approval consumed; no extra guest."
    },
    {
      "id": "AT-FS-METADATA-RETIREMENT-DIAGNOSTIC",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether native retirement diagnosis; human recurrence disposition before execution",
      "budget_seconds": 900,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_metadata_retirement.py -v; python3 -B -m unittest discover -s tests -p test_fs_metadata_failures.py -v; python3 -B scripts/fs_metadata_service.py --failure-paths retirement --diagnostic (build only); add --run only after renewed human disposition",
      "invariants": "Separate fixed nanos case; relocate D/J only,32 primary observations and all non-observation source/call/check ordering preserved. Original getter843-byte identity/wrapped origins and all old profiles/defaults/pins. Writer60s6000/readers30s3000,9 mutations96 requests maximum,8192 controller/observer,4096 stack/no statics,8192-page engine and existing worker/channel/I/O/poll bounds. No automatic retry or consumed idle allowance.",
      "oracle": "Actual generated retirement tail executes success/export/namespace/order/error guards with compiling omissions. Non-observation source equality, invalid selection before output creation, failed guest command/serial capture before cleanup. Recorded compile/link recipe, new SPA/startup origins, loader/controller fit; eventual fresh baseline/writer/recovery requires unchanged file/media/export/drain/terminal/reclaim and complete bounded oracle checks with explicit relocated phase meanings.",
      "gaps": "Approved one-sequence native diagnostic passes all3 guests796/806 with complete bounded oracle replay and missing relocated-J rejection. Prepared writer/recovery payloads,875 inputs and limits match;3071 commands/actual3 QEMU argv retained.454.481416s campaign,4701 generated members removed after VM stop. Source/host preparation failures remain preserved. D/J relocation may affect scheduling: this does not explain/fix old timeout or qualify unchanged providers, operational AF07/Zsh ISO or independent acceptance. One-sequence approval consumed; further affected persistence acceptance needs renewed disposition. Broad integration checkpoint remains open."
    },
    {
      "id": "AT-FS-METADATA-LAUNCH",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether build/intake; Aether-userland operational Rust owner",
      "budget_seconds": 900,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_metadata_launch.py -v; python3 -B -m unittest discover -s tests -p test_fs_metadata_launch_intake.py -v; python3 -B scripts/fs_metadata_launch.py --output .deps/fs-launch-af07-2026-10-21-v3; affected AF06 owner/intake/import tests; workflow/Experience checks",
      "invariants": "Exact18-member owner/77-member service/ABI/tool/source/object identities; inert metadata, trusted local recipes only, no sibling source edits or AF06/default/released-pin drift. Same136-byte state/72-byte result, sole SPA/endpoint ownership, original engine/import/UTC/runtime/CRT. Existing ELF8192-page/TLS/W^X and local-frame bounds. No VM or reused idle allowance; all future writer60s6000/readers30s3000,9 mutations96 requests, code/backing/worker/channel/I/O/poll/cleanup limits remain unchanged.",
      "oracle": "Actual8 owner cases and5 compiling omissions; shipped Rustc object byte identity, Clippy/format, real partial/final strong definitions/origins and old-service exclusion; source/dependency/tool/ABI/closure rejection; CLI and failed-preparation cleanup. Real recorded native recipes link actual new owner/provider/service; kernel structural loader, unresolved/relocation, notices and consumed-input checks. Independently test candidate intake/ELF mutations after successful build.",
      "gaps": "Sys-init0205 gated capture/placement158-member packet and21 closures674 members verified. Aether supplies separate AENFS004/ABI30 fixed8192-byte private RW/NX owner mapping within existing128-page backing; contract13e4f5bc308a5fc24cdfb9a510cdc968da9ba66feaeb526cb23bc6db081d6d01 and focused evidence fs-owner-data-2026-10-22.json. See AT-FS-OWNER-DATA for host/build coverage and unchanged limits. Matching sys-init ABI30 entry/init/whole native owner and measured full fit are next; then fresh scoped native transaction/continued-parent/permission/zeroing/isolation/failure/cleanup/readback qualification. No new native campaign yet; prior approval consumed. Old accepted/default profiles/release pins preserved. Immutable exec/public dup2/writable paths/packages/Zsh/TTY/persistent ISO and independent acceptance remain open."
    },
    {
      "id": "AT-FS-METADATA-SESSION",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether combined runtime; userland AF07 Rust owner/service",
      "budget_seconds": 900,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_metadata_session.py -v; affected test_fs_session*, test_fs_init*, test_fs_launch* checks; python3 -B scripts/fs_session.py --metadata-engine .deps/fs-launch-af07-2026-10-21-v3 --metadata-seal <reviewed-manifest-sha256> for build-only admission; --run only after scoped native disposition",
      "invariants": "Explicit separate AF07 owner/service/seal and current frozen inputs; unchanged AF06 default. Fixed AENFS002/owner28/engine26,8192 controller/4096 stack,35MiB/seven domains/twelve channels/15 SESSION lifetimes. Nine mutations96 requests, writer60s6000/readers30s3000, existing authority/I/O/poll/observation/cleanup bounds. No120s idle,16KiB fallback, automatic retry or hidden failed outcome.",
      "oracle": "Real metadata client adaptation/compiled controller fit and disassembly stack; source/ELF/raw/partial/final origins and existing kernel admission; exact process/engine terminals/two-role reclaim/waits, independent original-reader full-file metadata/namespace/media/export checks. Complete bounded oracle before next guest; only exact clock success rows summarized, all storage waits/errors/unknowns retained; failed-attempt qemu/serial/stopped-media capture, compact joined cleanup. CLI/selection rejection and unchanged default host controls. Capture-only v2 four-record dictionary roundtrips exact waits/order within65536 UTF8; collision/unknown/error handling, counts/hashes/deletion/reorder/compiling omission and unchanged old witness controls; decoder must pass before another guest.",
      "gaps": "Sys-init0205 gated capture/placement158-member packet and21 closures674 members verified. Aether supplies separate AENFS004/ABI30 fixed8192-byte private RW/NX owner mapping within existing128-page backing; contract13e4f5bc308a5fc24cdfb9a510cdc968da9ba66feaeb526cb23bc6db081d6d01 and focused evidence fs-owner-data-2026-10-22.json. See AT-FS-OWNER-DATA for host/build coverage and unchanged limits. Matching sys-init ABI30 entry/init/whole native owner and measured full fit are next; then fresh scoped native transaction/continued-parent/permission/zeroing/isolation/failure/cleanup/readback qualification. No new native campaign yet; prior approval consumed. Old accepted/default profiles/release pins preserved. Immutable exec/public dup2/writable paths/packages/Zsh/TTY/persistent ISO and independent acceptance remain open."
    },
    {
      "id": "AT-FS-INIT-AF07",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether intake/composition; sys-init AF07 activation policy",
      "budget_seconds": 900,
      "command": "Native activation group: python3 -B -m unittest discover -s tests -p test_fs_init_af07.py -v; affected test_fs_init*, test_fs_session*, test_fs_metadata_session and launch intake checks. python3 -B scripts/fs_session.py --metadata-sys-init-checks --metadata-engine .deps/fs-launch-af07-2026-10-21-v5 --metadata-seal f80f45851c0f3616e66033641969ceff4249eebcf30f717c0df6086c9ddb7dca (prepare only); --run requires fresh scoped disposition. Selected typed facade live host consuming check: C header discovery/build and two exact paired process argv retained in docs/evidence/fs-af07-facade-live-intake-2026-10-21.json; no new runner/profile. Mixed FD host component: exact23 build/test argv retained in docs/evidence/fs-af07-mixed-bindings-intake-2026-10-21.json; no new runner/profile. Sys-init0198 consuming exchange: exact five C header/build commands and eight paired session argv in docs/evidence/fs-af07-mixed-dispatch-intake-2026-10-21.json; no new runner/profile. Fork contract regression: python3 -B -m unittest discover -s tests -p test_fs_fork_contract.py -v (actual publication/freeze bodies with doubles and four semantic controls); evidence docs/evidence/fs-af07-fork-contract-2026-10-22.json. Late serialized library direct13-command consuming recipe retained in docs/evidence/fs-af07-serialized-copy-intake-2026-10-22.json; no new script/profile. Stage81/gate/file-view intake: exact19 passing host commands/failed loader in docs/evidence/fs-af07-fork-stage-loader-failed-2026-10-22.json; exact four denial/control triage commands in docs/evidence/fs-af07-fork-stage-gate-intake-2026-10-22.json; no new runtime script/profile. TLS85/sys-init0204 component and actual geometry intake: exact38 passing component commands and file-cap failure in docs/evidence/fs-af07-stream-geometry-filecap-failed-2026-10-22.json; geometry-only correction, source pins and reuse scope in docs/evidence/fs-af07-stream-tls-intake-2026-10-22.json. No new script/profile.",
      "invariants": "Exact sys-init sealed AF07 owner, original v3 engine closure plus separately validated current build with identical ELF; preserve old AF06/defaults and pins. AENFS003/ABI29 owner16KiB/4KiB stack,35MiB/seven domains/twelve channels; writer60s6000/readers30s3000,64KiB normalized oracle. Read-only activation, one process, no new mutations/lifetimes/authority or retry.",
      "oracle": "Exact sys-init native member/source/tool/role/wire/engine/ELF/raw intake,2072-byte owner/1096 stack/1329-page engine, ordered terminal/reclaim/balanced waits; independent original-file readback and guarded media; five exact hostile-peer fail-stops with no inferred engine cleanup; complete bounded oracle before next guest. Existing actual kernel boot-generation/PID/PPID/copied-parent regression and selected corrected v2 C decoder denials preserve truthful identity. New host-only facade intake verifies12/9/20/77 and92/29 closures/artifact/source/tool/header/runtime identity; actual C/unchanged Rust server exchange over host pipes, synthetic storage, ten exchanges/semantic errors/shared offsets/final-close and lost-body clearing/unchanged caller output/once-only cleanup/no replay. Both processes must exit0 with source fixture joined and no forced cleanup; no native shell/authority/fit inference. Explicit future mixed FD kinds, immutable exec and concrete resource placement required. Source-only mixed FD intake verifies routing16/table18/streams20 and dependencies; fresh actual C/Rust host component269 cases,14 pipe/injected-close scenarios per child and six compiling semantic denials. Pin107 C headers before/recheck after; all process groups complete without forced cleanup. Native adapters/selection/fit remain required. Mixed exchange intake:59/92 packets,12/277 deliveries, existing source-bound server; five live sessions plus exact client7/18/21 compiling omission denials,106 precompile/rechecked C inputs/headers and16 stopped processes without forced cleanup. Actual selected native runtime/fit remains required. Fork contract host execution: actual publication resumes parent before scheduler, exact child grant/PID/TLS/mask and alias/endpoint order; exact freeze token, raw thaw-11, owner/exec denials. Four compiling omissions require assertion-specific failure. No native race or new library/constructor claim.",
      "gaps": "Sys-init0205 gated capture/placement158-member packet and21 closures674 members verified. Aether supplies separate AENFS004/ABI30 fixed8192-byte private RW/NX owner mapping within existing128-page backing; contract13e4f5bc308a5fc24cdfb9a510cdc968da9ba66feaeb526cb23bc6db081d6d01 and focused evidence fs-owner-data-2026-10-22.json. See AT-FS-OWNER-DATA for host/build coverage and unchanged limits. Matching sys-init ABI30 entry/init/whole native owner and measured full fit are next; then fresh scoped native transaction/continued-parent/permission/zeroing/isolation/failure/cleanup/readback qualification. No new native campaign yet; prior approval consumed. Old accepted/default profiles/release pins preserved. Immutable exec/public dup2/writable paths/packages/Zsh/TTY/persistent ISO and independent acceptance remain open."
    },
    {
      "id": "AT-FS-OWNER-DATA",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether boot mapping and native ABI; sys-init safe initialization/owner composition",
      "budget_seconds": 900,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_owner_data.py -v; retained test_fs_session_init mapping and build-selector controls; explicit private build with fs_session.FLAGS plus native-fs-session-init and native-fs-owner-data, native-c-image and smp=false. Exact Debug/ReleaseSafe build and disassembly/real-geometry commands in docs/evidence/fs-owner-data-2026-10-22.json. Contract docs/native-fs-owner-data-v1.json SHA25613e4f5bc308a5fc24cdfb9a510cdc968da9ba66feaeb526cb23bc6db081d6d01. No new script or runtime runner.",
      "invariants": "Separate AENFS004/ABI30 selection only; reject incomplete/release/old-envelope selection. Exactly8192 private zeroed RW/NX bytes at0x900000 from existing owner128 pages; rdi30/r10base/r11size initial binding and old grants preserved. Old ABI28/29 mappings/startup remain unchanged. No syscall/dynamic supervisor memory grant/writable image statics/stack or backing expansion. Existing16KiB code,4KiB stack,35MiB,seven domains,twelve channels,writer60s6000/readers30s3000 and9/96/capture limits fixed. Lifetime boot owner until VM termination; no restart/reuse.",
      "oracle": "Actual mapOwnerData/addPage/byte/ownerDataStartup bodies with frame/table/backing doubles: only two selected owner pages clear, correct RW/NX PTEs/boundary holes, no peer effects/code writes/allocation grant and exact initial bindings. Four strictly compiling zero/NX/map/binding omissions fail semantic assertions. All three independent parser selections preserve owner code bounds. Old mapping/selector controls; actual x86_64 Debug+ReleaseSafe kernel links/disassembly; sealed AF07 engine/TLS structural composition admitted only as AENFS004. Source/request/tool pin verification and owned output cleanup.",
      "gaps": "Build/host-qualified producer only; page-table/address/partition doubles do not establish hardware enforcement. Old2072-byte activation owner in geometry is an explicit size placeholder. Sys-init must consume sealed contract, capture volatile entry scalars and safely initialize one exclusive region; complete native transaction/settlement/readiness/shutdown and all state/code/stack/TLS/workspace/backing/channel peak fit remain required. Gate2968+workspace4096 leave1128 bytes, not complete owner fit. Fresh scoped native zeroing/permission/isolation/failure/cleanup witnesses and consumer acceptance remain open. Existing fs_session runner deliberately not extended before matching owner; prior native campaign approval consumed. No guest or R1/persistent Zsh ISO claim."
    },
    {
      "id": "AT-REPOSITORY-INPUTS",
      "reference": "docs/REPOSITORY.md",
      "owner": "Aether system integration",
      "budget_seconds": 30,
      "command": "python3 -m unittest discover -s tests -p test_source_paths.py -v; make check-system at major integration checkpoints",
      "invariants": "Exact former checkout prefixes relocate into local components; unrelated paths including Aether-standards remain separate. Only seven exact pinned Python tooling path/hash pairs admit preserved build provenance. No kernel/service/ABI/binary fallback, no pin rewrite or native acceptance from historical records.",
      "oracle": "Exact component/unrelated-prefix controls; all original tooling digests; unknown digest and runtime-source exclusions; modified catalog and frozen tooling fail closed. Import receipt separately verifies all component source bytes, original refs and offline pins.",
      "gaps": "Host repository/provenance checks only; historical absolute recipes and source closure remain distinct from new native qualification. Old AF07 live-source acceptance must not bypass ABI30 drift. Package full suite600-second timeout and incomplete historical replay are not passing coverage."
    },
    {
      "id": "AT-BROKER-INIT",
      "reference": "userland/docs/proposals/FS-BROKER-INIT.md",
      "owner": "Aether userland/sys-init integration",
      "budget_seconds": 600,
      "command": "python3 -B userland/experiments/filesystem-service/check-process-descriptors.py --in-place; python3 -B sys-init/scripts/check-broker-init.py --libraries PRINTED_OWNED_OUTPUT --compact-compare --unified-route",
      "invariants": "Sole initialized ledger, one AF07 greeting, no aggregate broker temporary, explicit partial failure/raw close/channel drop, mapped owner/workspace separation; no authority or quota change. Positive copy cannot become known no-child refusal; gate reopens only after complete child-ready/parent delivery or settled known refusal delivery. Pinned musl comparison has no retained state or new authority. Same authenticated mixed channel closes owner admission before any prefix; idle zero-byte EAGAIN never parks owner; partial headers never reopen; FILE header/body/reply uses the unchanged handler.",
      "oracle": "36 in-place producer tests/15 controls,50 consuming tests, seven compiling publication/routing omissions and two borrow denials.64 actual old/new FILE protocol schedules compare reply bytes/source effects/cleanup. New native supervisor0 reconciliation keeps parent-11 distinct, denies stale admission, errors and replay; default32 process/eight remote/nine wire checks also required. Concrete Native cancellation plus routing/construction/copy/publication/settlement roots18384/16384; gate2240+workspace4096 of8192. Complete owner, native authority/stack/resource/shutdown and Zsh/ISO acceptance remain open.",
      "gaps": "Expanded native cancellation/routing/construction/copy/publication/settlement roots18384/16384 reject admission. Before adding cancellation, the same prior roots shrink18768 to18176. Target gate2240/workspace4096 leave1856 mapping bytes, not complete resident/stack fit. Complete native owner/entry/boot/copy/exec/wait/terminal/readiness/shutdown and target qualification remain local work. No VM/ISO, quota/pin/default flag change."
    },
    {
      "id": "AT-OWNER-COMPOSE",
      "reference": "sys-init/docs/decisions/0212-complete-native-owner.md",
      "owner": "Aether system integration",
      "budget_seconds": 600,
      "command": "python3 -B userland/experiments/filesystem-service/check-process-descriptors.py --in-place; python3 -B sys-init/scripts/check-broker-init.py --libraries PRINTED_OWNED_OUTPUT --compact-compare --unified-route --compose-owner; focused tests/test_owner_stack_constants.py and retained stack-inspector regression; userland check-client.py",
      "invariants": "New offline composition supersedes16KiB optimization only. Old profiles/seals/pins unchanged. Sole mapped Runtime plus4096 workspace; guarded4KiB stack gate,35MiB/seven domains/twelve channels, native rights/workload/watchdog/cleanup preserved. Failed/partial/unknown outcomes never replay or imply reclaim. Checked disconnect callback after ack and before both closes.",
      "oracle": "57 host owner tests/eight semantic controls/two borrow denials; producer37/15 controls and client13/nine controls. ELF entry/RX/no writable statics/undefined-symbol checks, actual Runtime layout and conservative direct-edge stack with verified immutable linkage constants. Unknown/mutable/register/table edges reject. Exact longest failure path retained; no native execution.",
      "gaps": "Concrete owner34560 bytes and resident3376+4096 of8192; conservative stack6360 exceeds4088. Separate8KiB guarded-stack proposal awaits decision. Immutable exec and initial readiness remain; no complete-owner code budget, native admission or persistent Zsh ISO acceptance. Native failure schedules/independent review pending."
    },
    {
      "id": "AT-OWNER-EXEC",
      "reference": "docs/native-fs-owner-stack-v1.json",
      "owner": "Aether system integration",
      "budget_seconds": 600,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_owner_stack.py -v; test_fs_owner_data.py, test_fs_session.py and test_owner_stack_constants.py; python3 -B userland/experiments/filesystem-service/check-fork-stage.py --exec; python3 -B sys-init/scripts/check-broker-init.py --libraries OWNED_PRODUCER --compact-compare --unified-route --compose-owner --guarded-stack --exec-provider OWNED_PROVIDER. Actual kernel build/admission commands in docs/evidence/owner-exec-2026-10-23/results.json. No new VM runner.",
      "invariants": "Explicit AENFS005/AENMX010/ABI31 only;49152 RX code and8192 zeroed RW/NX guarded stack inside existing128-page owner backing. Old selections exact. Full authenticated context/freeze/image receipt before CLOEXEC/rebind/publish; actual readiness, no partial success/replay. Other bounds35MiB/seven domains/twelve channels/data8192/workload9/96/watchdogs/capture unchanged.",
      "oracle": "Actual mappings/startup/audit and independent parsers, old-budget denials, four compiling omissions;57 host owner regressions plus four exec tests/seven schedules and three new semantic omissions/two borrow denials. C80 exec/readiness cases/two omissions and exact C/Rust608-byte frame; complete shell/helper links and unchanged real ELF parser; code39376/49152, resident7504/8192, conservative stack8000/8184. Debug/ReleaseSafe kernel builds with actual matching images.",
      "gaps": "No VM/native/independent acceptance. Existing fs_session runner remains old-profile only. Next prepare reviewed selected native boot/transaction/continued-parent/failure/export/readback harness before fresh scoped disposition; consumed approvals do not authorize another composition. Persistent ELF loading/public writable paths/Zsh/TTY/packages/ISO remain R1 work."
    },
    {
      "id": "AT-AF07-FRESH",
      "reference": "docs/NATIVE-C.md",
      "owner": "Aether system integration",
      "budget_seconds": 600,
      "command": "PYTHONPATH=tests python3 -B -m unittest test_fs_init_af07 test_fs_metadata_launch_intake test_fs_af07_inputs -v; python3 -B -m unittest discover -s tests -p test_fs_owner_stack.py -v; python3 -B -m unittest discover -s sys-init/tests -p test_harness_af07_owner.py -v; scripts/fs_af07_inputs.py and sys-init/scripts/qualify-af07-owner.py commands in NATIVE-C and decision0214. Native --run only after fresh scoped disposition. python3 -B -m unittest discover -s tests -p test_af07_wait_framing.py -v (actual producer/old/disabled/compiling omission). PYTHONPATH=tests python3 -B -m unittest test_native_panic_site test_native_tick_assertion -v (actual panic hook/old/null/compiling omission and tick bounds); decision0217 records offline panic lookup. PYTHONPATH=tests python3 -B -m unittest test_clock_attach -v (actual common reattachment, Accessed preservation, exact flags/frame/source denials and four compiling semantic controls). Decision0220: explicit --prepare --case exec-missing/exec-denied/parent-close; receipt-bound --run never accepts arbitrary scripts or case override.",
      "invariants": "Preserve old seals/released pins; actual SESSION r9 c003; exact AENFS005/AENMX010/ABI31 source/tool/runtime/envelope chain. Writer60s6000/readers30s3000;35MiB/seven domains/twelve channels;48KiB code/8KiB stack/data; normalized64KiB. Fixed zero-mutation boot/immutable-helper diagnostic does not replace existing9/96 qualification. No replay or broadened authority.",
      "oracle": "Fresh compiled engine/activation/owner/providers; actual producer-frame-to-Rust and enforcing ELF parser; mismatch and old-profile rejection. Real host serial/fault/EOF/watchdog/reap and sequence stop tests. Native requires exact helper exit7, admissions,21 cleanup rows, engine export and independent full-file/media recovery. Decision0215 adds complete same64KiB non-clock UART transcript, exact process wait identities and strict pairing; eight focused qualifier methods pass including old failed witness rejection. First native sequence stops at wait identity after passing pristine reader/clean writer terminals; no recovery or retry. Complete attempt2 capture identifies eight prefixed parent wake rows. Decision0216 producer-only ABI31 newline keeps old-profile bytes and strict host parsing. Actual producer tests and diagnostic projection qualify behavior on host, not native recovery. Decision0217 adds actual root panic-hook selected/old/null/compiling-omission controls; eleven qualifier host methods cover bounded failure transcripts, confirmed-stop media, unknown-stop report-I/O precedence and actual ELF/PC lookup with tool/hash/range/format denials. Warnings remain explicit candidates, not runtime attribution. Decision0218: approved caller-site diagnostic passes all three guests with exact7/0/0 terminals,21 cleanup,220 paired waits/halt1958, full780248-byte original-file recovery and unchanged recovery media; all VM stops confirmed. No panic/PC, so prior failure remains unattributed; no acceptance inferred. Attempt5 batch stops on first writer kernel assertion; PC resolves only to generic std.debug.assert. Selected clock.attach diagnostic preserves its failing predicate and records exact readiness/entry/expected value before assertion; old profile output unchanged. Actual Debug/ReleaseSafe body tests verify unchanged writes/denials and compiling record omission. Attempt7 exact clock-state record and matching source/ELF confirm Accessed-only rejection. The common correction permits/preserves only bit5, keeps source/frame/permission assertion and removes temporary logger; final source-matched native sequence passes7/0/0,21 cleanup,220 paired waits/halt1894, complete780248-byte original-file recovery and unchanged recovery media; all three VMs stop. Final931 Python/all Zig host roots and11 fresh qualifier methods pass. Fixed-case host fixtures distinguish original ENOENT127/EACCES126/no replacement and successful helper7 with continued-parent close/stdout; case/script mismatch rejects before guest setup. All21 cleanup rows, all-role waits, exact terminals and fresh full-file/media recovery remain required. Native results for these three selections are pending. First fixed batch stops on exec-missing after pristine reader:127/0/0,21 cleanup/halt1941 observed but new18-byte parent marker splits across native16-byte writes; strict output oracle rejects. Both VMs stopped, no recovery/later case/retry; failed capture/media retained. No clock recurrence. New marker shortened15 bytes including newline;15 final focused methods verify generated output transfer bounds, exact prior failed raw witness rejection, default receipt compatibility and all fixed-case lifecycle/serial controls. Three fresh corrected cases prepared; no additional VM and renewed disposition pending. Explicitly approved corrected3-case/9-guest batch passes:127/126/7, parent0/engine0,21 cleanup each,229/227/257 paired waits and halt1857/1929/1938. Whole780248-byte recovery and unchanged recovery media/canaries pass; all VMs stopped. Original marker failure stays failed; no independent release acceptance.",
      "gaps": "Fixed exec-missing/exec-denied/parent-close native cases pass. Earlier generic-only clock failures remain individually uncertain; unknown/copy-exhaustion schedules, public dup2, persistent CWD/FILE paths/read-write FDs/ELF loading, packages and Zsh/TTY/ISO remain open."
    },
    {
      "id": "AT-FS-ROOT-PATHS",
      "reference": "userland/docs/proposals/FS-ROOT-PATHS.md",
      "owner": "Aether-userland",
      "budget_seconds": 600,
      "command": "From userland/: python3 -B experiments/filesystem-service/check-paths.py; from userland/: python3 -B experiments/filesystem-service/check-fd-protocol.py --paths and without arguments; owner/provider --paths/--path-probe commands in NATIVE-C and sys-init decision0221; qualifier preparation only, --run requires fresh scoped disposition.",
      "invariants": "Canonical delegated-root reads only; max255 total bytes/two transient handles; no Client/Descriptors fields, root authority/wire/default change or quota increase. Intermediate cleanup/unknown close retires without replay. Directory-relative file/directory walks borrow and retain an exact live base, never substitute root or request writes; unchanged16 bindings/two transient slots/no fields.",
      "oracle": "22/13 client and9/8 descriptor selected/default cases; five compiling semantic controls; real sealed AF07 service over synthetic host storage; layout equality, Rustfmt/Clippy/unsafe denial and host/freestanding builds. Explicit AEFP0001:11 selected/10 default protocol cases/eight compiling controls each, C17 UBSan codec and actual C/Rust/C interoperability. Opposite peer versions and mismatched broker dependency reject. Complete selected owner40640 code/7504 resident/8000 conservative stack fits; actual libc paths/fork/exec/readiness, ten fixed-helper outcomes, foreign router version denial and16 qualifier host methods pass. Approved native read-probe sequence passes all three guests: helper7/parent0/engine0,21 cleanup,302 paired waits/halt2020, full780248-byte recovery and unchanged recovery media/canaries. All VM stops confirmed; no extra guest or FS mutation request. Retained-directory foundation:30/13 client and9/8 descriptor tests; eight compiling controls including root fallback, base type and directory rights. Actual selected FILE consumer15/10 controls passes; no new native selection. Compact evidence: userland/docs/evidence/filesystem-directory-paths-2026-10-23/README.md.",
      "gaps": "Native bounded read/count/cleanup passes; independent durability and minimum-Python coverage remain pending. Real CWD, writable-home grants, public dup2, persistent executable loader, packages and Zsh/ISO remain open. No resource expansion."
    },
    {
      "id": "AT-FS-FILE-REPLACE",
      "reference": "userland/docs/proposals/FS-FILE-REPLACE.md",
      "owner": "Aether-userland",
      "budget_seconds": 600,
      "command": "Commands in userland/docs/proposals/FS-FILE-REPLACE.md: selected protocol --paths --dup2, producer --in-place --replace --file16 --paths, provider --exec --paths --dup2 --path-probe and matching root check-broker-init.py --paths --dup2; old profile regressions. Qualifier prepares only; --run requires exact receipt and fresh scoped persistence disposition.",
      "invariants": "16 aliases/13 descriptions/four views, exact opaque process; selected new FILE/map/startup/fork/exec magic only. Full-table FILE replacement needs no spare; mixed classes hold context guard. Self flags preserved, distinct CLOEXEC cleared/shared offsets; known no-effect errors preserve target; uncertainty retires and public dup2 exits141. Old profiles/wires and all other limits preserved.",
      "oracle": "15 selected protocol cases/10 controls, C/Rust/C12 replies/96 malformed headers; producer15/21, mixed C26/four controls, public libc84 cases/default and TLS, fixed probe19, fork/exec/readiness, owner56 methods/controls and complete target links. Old protocol10/11/eight, producer38/15, provider78/ten probe, old owner56 pass. Complete selected owner41360 code/7528 resident/7992 conservative stack fits;80/33 shell/helper pages. Six failed host attempts retained, no VM.",
      "gaps": "Prepared source-matched three-guest diagnostic awaits fresh scoped disposition; current Python only, minimum/independent/native coverage open. Full writable-home/CWD/disk loader/package/Zsh/TTY/release remain. No interim shell ISO claim."
    },
    {
      "id": "AT-FS-CWD",
      "reference": "userland/docs/proposals/FS-CWD.md",
      "owner": "Aether userland/process integration",
      "budget_seconds": 600,
      "command": "From userland/: python3 -B experiments/filesystem-service/check-directory-contexts.py; python3 -B experiments/filesystem-service/check-fork-stage.py --exec --paths --dup2 --cwd. From root: python3 -B sys-init/scripts/check-broker-init.py --libraries OWNED_PRODUCER --compact-compare --unified-route --compose-owner --guarded-stack --exec-provider OWNED_PROVIDER --paths --dup2 --cwd. Old check-fd-protocol.py with --paths --dup2 and without arguments, and check-metadata-service.py, retain old wire/service gates. Native preparation/receipt remains separate. Native builders scripts/fs_context_launch.py and fs_context_inputs.py consume explicit checked outputs; python3 -B -m unittest discover -s tests -p test_fs_context_launch.py -v and test_fs_af07_inputs.py cover intake/old selectors. Qualifier preparation remains separate; --run needs fresh scoped disposition.",
      "invariants": "Separate fs_directory_contexts/AFSRPC08 and fs_cwd_wire/AEFP0003 only; map/startup002 and fork/exec02 stay exact. Physical SA/ZAP root-constrained observations, parent13/path14 over existing READ|LOOKUP3, no backend IDs or writes. Four process CWD references share fork/preserve exec/last-reference settlement. Component-wise dot/dotdot cannot bypass file ENOTDIR; no PWD cache or synthetic root. Current16 source bindings/13 descriptions/four views and all native limits stay fixed. Unknown state retires and public bindings exit141.",
      "oracle": "24 exact C getter scenarios plus original-header build;13 AF08/public policy/service/client/process/wire tests,10 typed C/Rust provider modes,15 process/in-place regressions,9 compiling omissions and3 compatibility denials. Actual C/Rust/C4 requests with malformed/short headers; C17/UBSan,104 libc scenarios in default and TLS provider, strict Rustfmt/Clippy/warnings and host/target entry/object builds. Old FILE consumers15/10 tests with10/8 controls; AF07 metadata23/eight controls. Matched owner56 tests/controls,44968 code,3528+4096 resident and7992/8184 conservative stack fit. Compact results linked by FS-CWD.",
      "gaps": "Current qualification/review/continuation belongs to userland/docs/proposals/FS-CWD.md selected through root STATE; dated failures remain failures. Non-root native CWD, symlink traversal, writable-home provisioning/descriptions, disk ELF, packages and Zsh/TTY/ISO remain outside this root-only profile. Current Python only; minimum/independent review open. Released pins unchanged."
    },
    {
      "id": "AT-FS-HOME",
      "reference": "userland/docs/proposals/FS-HOME.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland/: python3 -B experiments/filesystem-service/check-home.py. Offline host/target library checks only; no guest or native input selection.",
      "invariants": "Trusted source peer/session/directory with rights15, distinct from system root. Atomic one-connection/two-handle/three-serial publication; root3/home15, no METADATA escalation, no fields/quotas/wire changes. Source close is not revoke; recipient disconnect/retirement invalidates its grants.",
      "oracle": "Actual owner host positive/denial/lifetime/exhaustion tests, meaningful compiling semantic omissions, affected old owner regressions, selected/default no_std builds and unchanged Owner layout; strict pinned Rustfmt/Clippy/unsafe denial. Actual results belong to FS-HOME.",
      "gaps": "No transport greeting, client/process/CWD integration, installed home layout, native whole-owner fit, VM/recovery or persistent Zsh acceptance. Minimum Python and affected runtime acceptance remain separate."
    },
    {
      "id": "AT-FS-HOME-WIRE",
      "reference": "userland/docs/proposals/FS-HOME-WIRE.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland/: python3 -B experiments/filesystem-service/check-home-wire.py; host and no_std only.",
      "invariants": "Explicit AFSRPC09 root3/home15 in one session, two checked greetings before publication/ready, fixed tables and once-only teardown, no old consumer fallback.",
      "oracle": "Actual service/client interop and denial/framing/lifetime tests, compiling semantic controls, old and sealed-AF07 consumers, strict Rust and host/target builds/layout. Exact results in owning record.",
      "gaps": "No native entry/readiness/fit, client mutation API, process CWD/write integration or persistent Zsh qualification."
    },
    {
      "id": "AT-FS-CLIENT-MUTATIONS",
      "reference": "userland/docs/proposals/FS-CLIENT-MUTATIONS.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland/: PYTHONOPTIMIZE=1 python3 -B experiments/filesystem-service/check-client-mutations.py. Host/no_std only; no guest.",
      "invariants": "AF09 authority attenuated, immutable caller-owned validated completion/error receipts, transport/malformed Unknown, every remote mutation error retires, local NotSent before effects, no replay, fixed Client layout and existing service wire.",
      "oracle": "Actual mutation/readback and five namespace operations; scripted completion/error/framing/transport/cleanup matrix, named compiling controls; old AF09/AF07/08/sealed consumers and strict host/target/layout checks. Exact results in owning record.",
      "gaps": "No process/FILE write adapter, native entry/fit/recovery, minimum-Python or persistent Zsh/ISO acceptance."
    },
    {
      "id": "AT-FS-PROCESS-WRITES",
      "reference": "userland/docs/proposals/FS-PROCESS-WRITES.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland/: PYTHONOPTIMIZE=1 python3 -B experiments/filesystem-service/check-process-writes.py. Host/no_std only; no guest.",
      "invariants": "Explicit home rights; one shared offset per open description, advance only on validated success; caller-owned exact progress/attempted offset/cleanup, retire all views without replay on retired source; process occupancy preserved; no FILE/native selection or fields.",
      "oracle": "Actual AF09 service/process writes, alias/inherited/independent offsets, readback/rights/exhaustion/final close, scripted failures and named compiling controls; old process regressions, FILE guards, strict host/no_std/layout checks.",
      "gaps": "No FILE/C/libc writable protocol, CWD writes, in-place/native entry/fit/qualification, minimum-Python or persistent Zsh/ISO acceptance."
    },
    {
      "id": "AT-FS-FILE-WRITES",
      "reference": "userland/docs/proposals/FS-FILE-WRITES.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland/: PYTHONOPTIMIZE=1 python3 -B experiments/filesystem-service/check-file-writes.py. Host/no_std/freestanding only; no guest.",
      "invariants": "Versioned FILE writes retain exact outcome and attempted offset through terminal source retirement and delivery loss; copied owner/C receipts survive cleanup, source/FILE closes distinct, full validation before publication, no replay or staged-success translation; old profiles unchanged.",
      "oracle": "Actual Rust FILE/process/service and C request/reply/client/facade interoperability, receipt and transport-prefix matrix, semantic controls, affected old consumers/guards and strict C/Rust builds; exact results in owning record.",
      "gaps": "No libc/routed write activation, native owner/in-place/whole fit/guest or persistent Zsh/ISO acceptance."
    },
    {
      "id": "AT-FS-HOME-IN-PLACE",
      "reference": "userland/docs/proposals/FS-HOME-IN-PLACE.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland/: PYTHONOPTIMIZE=1 python3 -B experiments/filesystem-service/check-home-in-place.py. Host/no_std only; no guest.",
      "invariants": "Explicit matched AF09 in-place selection; complete fieldwise initialization and both greetings before caller publication, exact root3/home15, one cleanup/channel drop on failure, stable final storage, no replay or limits changed.",
      "oracle": "Poison/canary and complete ledger regressions, actual service/process/FILE writes, both greeting-stage failures/reuse, old constructors/guards, named compiling controls, strict host/target builds and concrete constructor measurements.",
      "gaps": "No native owner/startup/provisioning/whole fit/guest, CWD merge, libc activation, persistent home layout or Zsh/ISO acceptance."
    },
    {
      "id": "AT-FS-WRITE-OBSERVATIONS",
      "reference": "sys-init/docs/decisions/0223-file-write-observations.md",
      "owner": "sys-init/Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: PYTHONOPTIMIZE=1 python3 -B sys-init/scripts/check-file-write-observations.py. Host/no_std only; no guest.",
      "invariants": "Explicit matching AEFW selection; retain bound process and write receipt before first reply send, return through delivery errors/retirement/clear/drop; source versus FILE closes separate, one existing dispatch/workspace, no replay/settlement or persistent fields.",
      "oracle": "Actual AF09 service/process/FILE Peer outcomes, all terminal progress,128 reply-byte loss prefixes, malformed/local/closed/ordinary paths, named controls, old Peer/composed owner/profile regressions and strict host/target builds.",
      "gaps": "No actual native owner/router activation, CWD merge, home provisioning, whole fit, guest, durability or persistent Zsh/ISO acceptance."
    },
    {
      "id": "AT-FS-HOME-OWNER",
      "reference": "sys-init/docs/decisions/0224-home-owner-fit.md",
      "owner": "sys-init/Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: PYTHONOPTIMIZE=1 python3 -B sys-init/scripts/check-home-owner.py. Host/no_std/concrete offline fit only; no guest.",
      "invariants": "Explicit matched AF09 home-owner selection; final-field two-grant construction, original failure closes, File event retains admission/delivery/mutation separately, one native-context outcome slot before fail-stop, no retry/authority/limit changes.",
      "oracle": "Actual router/runtime and poisoned construction cases, exact errors/context/retention/no replay, compiling controls and old owner/profile regressions; full Native ELF/code/resident/direct-call-stack inspection with frozen tools/inputs and complete output disposal.",
      "gaps": "No native engine/home provisioning/C-provider activation, guest/whole-system/native acceptance, recovery, durability, libc write or persistent Zsh/ISO acceptance."
    },
    {
      "id": "AT-FS-HOME-ACTIVATION",
      "reference": "userland/docs/proposals/FS-HOME-ACTIVATION.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: PYTHONOPTIMIZE=1 python3 -B userland/experiments/filesystem-service/check-home-activation.py. Focused host/no_std activation gate with old target-entry compatibility; no matched home entry or guest.",
      "invariants": "Explicit matched AF09 home activation; source/root/home attachment before one readiness publication, publication before first bounded-queue send, both grants before Report.ready, root3/home15, exact errors/cleanup/failure latch, no replay or new authority/resources.",
      "oracle": "Real Owner/service/Client exchange, both greeting stages and callback/malformed/loss cases, named compiling controls, old activation and home-wire regressions, strict host/no_std builds, profile/API/unmatched actual native-entry denials.",
      "gaps": "No matched native-home entry, pre-greeting mutation/provisioning receipts, actual engine/helper/image preparation, native readiness/peak/authority/guest proof, libc write, recovery or R1/release acceptance."
    },
    {
      "id": "AT-FS-HOME-NATIVE",
      "reference": "userland/docs/proposals/FS-HOME-NATIVE.md",
      "owner": "Aether-userland/Aether",
      "budget_seconds": 300,
      "command": "From system root: python3 -B -m unittest discover -s tests -p test_home_native_c_prefix.py -v; then PYTHONOPTIMIZE=1 python3 -B userland/experiments/filesystem-service/check-home-native.py. Offline host/target producer and selected original C lifecycle only; no guest.",
      "invariants": "Strict original/routed header prefix with current product headers, declared retained dependencies and exactly two disposed overlays; unchanged recipe/macro output metadata. One Owner; fixed home/probe bootstrap and two retained typed provider/normalized receipts; total nine provider attempts/96 requests, exact root3/home15, once-only endpoint ownership, monotonic ordered obligation independent of service TXG; old layouts/pins unchanged.",
      "oracle": "Real Owner/native entry/bridge and selected actual C lifecycle/importer bodies with bounded host substitutes; target provider/layout objects, named compiling controls, old profiles and final affected owner/activation consumers. Observed results and limits in the owning record.",
      "gaps": "No complete engine/helper/image fit or guest, actual ZFS host execution, native peak/settlement/recovery, libc write, installed home or R1/release acceptance."
    },
    {
      "id": "AT-FS-HOME-PROBE",
      "reference": "userland/docs/proposals/FS-HOME-PREP.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: PYTHONOPTIMIZE=1 python3 -B userland/experiments/filesystem-service/check-home-probe.py. Offline explicit FILE helper and selected launch count only.",
      "invariants": "Existing native guard and authoritative descriptor map, one fixed16-byte home write and immutable receipt, root write denied before effect, exact final carried attempts3 with foundation default unchanged; no new client/workspace/ledger or libc activation.",
      "oracle": "Actual adapter/helper and selected/unselected launch methods; failures, named compiling controls, old modes and strict C/Rust target builds; Private qualification is summarized in FS-HOME-PREP; issue3 owns public integration.",
      "gaps": "No guest, native settlement/recovery, installed home, Zsh or release qualification; offline engine/images are separate evidence. Exact private receipts, SDK/dependencies and standards are unavailable in a public-only checkout; missing inputs are blocked, not passes."
    },
    {
      "id": "AT-FS-HOME-PREP",
      "reference": "userland/docs/proposals/FS-HOME-PREP.md",
      "owner": "Aether/sys-init/Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: PYTHONOPTIMIZE=1 python3 -B scripts/check_fs_home_prep.py. Offline preparation/intake/reader/oracle host checks; no guest.",
      "invariants": "Distinct AF09 associations and exact member/source/flags/carrier/origins, old seals unchanged; actual original read-only home/probe oracle, unknown evidence never successful, fixed budgets and cleanup.",
      "oracle": "Actual intake/loader and C oracle with typed host doubles, malformed inputs/TLS/WX/reader metadata/payload/EOF and compiling omissions; no synthetic transcript promoted to native evidence. Private qualification is summarized in FS-HOME-PREP; issue3 owns public integration.",
      "gaps": "No physical/native execution, independent cold SDK build, full system peak/recovery/durability or release assurance. Exact private receipts, SDK/dependencies and standards are unavailable in a public-only checkout; missing inputs are blocked, not passes."
    },
    {
      "id": "AT-FS-HOME-OWNER-RECEIPT",
      "reference": "userland/docs/proposals/FS-HOME-PREP.md",
      "owner": "Aether/sys-init/Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: set the paired AETHER_AF09_OWNER_COMPONENT_PROOF/AETHER_AF09_OWNER_COMPONENT_PROOF_SHA256 to the exact current wrapper, then python3 -B -m unittest discover -s tests -p test_fs_home_inputs.py -v and affected test_fs_home_prep.py consumer checks. Explicit paired --owner-component-proof/--owner-component-proof-sha256 selection validates current component evidence; no builder or guest in this reader slice.",
      "invariants": "Historical891/9 default stays strict; explicit current911 component selection binds complete ordered processes/controls, tools/libraries/source, exact47 generated leaves and retained harness, narrow reviewed owner-code-limit metadata impact and owned cleanup. No receipt/SDK/seal rewrite or actual compiler-input waiver.",
      "oracle": "Current real retained component evidence plus malformed/partial selector, controls/markers/process agreement, source/tool/library/harness/cleanup/missing-input/role-impact denials; source frozen and separate review. Retained observations are not fresh or native acceptance.",
      "gaps": "Fresh AF09 producer/helper qualification and execution-tool provenance, matched native workload/observations/fit/artifacts and a concrete execution disposition remain separate. Exact private inputs are required; missing bytes block coverage. No historical1800-second budget is selected."
    },
    {
      "id": "AT-FS-HOME-IMAGES",
      "reference": "userland/docs/proposals/FS-HOME-PREP.md",
      "owner": "Aether/sys-init/Aether-userland",
      "budget_seconds": 1800,
      "command": "Offline target preparation: scripts/fs_home_launch.py --checked RECEIPT --probe-checked HELPER_CLOCK_RECEIPT --output .deps/fs-launch-af09-NAME; scripts/fs_home_inputs.py with explicit engine/seal/producer/owner receipts and paired --owner-component-proof/--owner-component-proof-sha256 only for the distinct current owner record; sys-init/scripts/qualify-home-owner.py --inputs DIR --seal SHA --prepare. No guest.",
      "invariants": "Explicit finite actual tools; immutable SDK lock provenance, canonical retained member/root bindings, resolved-overlap and unknown-executable denials. Actual complete engine/owner/shell/helper and independent baseline/recovery reader images with exact envelopes/resource geometry, source freeze, no old-profile fallback, one current dependency/pending set and compact owned cleanup. Compiler files16MiB and diagnostic streams4MiB remain separate.",
      "oracle": "Strict link/origin/relocation/real parser/fit checks and fresh final broad host integration checkpoint; exact artifacts/inputs/limits in prepared receipt for later disposition. Private qualification is summarized in FS-HOME-PREP; issue3 owns public integration.",
      "gaps": "Guest execution requires a fresh scoped disposition after concrete reviewed artifacts; no previous authorization renewed. Exact private receipts, SDK/dependencies and standards are unavailable in a public-only checkout; missing inputs are blocked, not passes."
    },
    {
      "id": "AT-GITHUB-SOURCE-CI",
      "reference": "docs/GITHUB.md",
      "owner": "Aether maintainer",
      "budget_seconds": 300,
      "command": "GitHub Source checks workflow: Source integrity and Kernel models jobs on standard ubuntu-24.04; .github/workflows/ci.yml. Local comparable model command: zig test each of kernel/capability.zig, kernel/lifetime.zig, kernel/native_elf.zig and kernel/native_launch.zig with owned caches.",
      "invariants": "Read-only token, immutable action/tool pins, no secrets or privileged issue execution; complete Temper bundle and public-path exclusions checked; pure models execute nonzero cases.",
      "oracle": "Successful actual hosted jobs on exact public source; method identities, syntax checks and named nonzero model tests. This job does not run the private standards or quality inventory gates.",
      "gaps": "Private standards and copied tooling deliberately excluded by owner. Full workflow/quality, AT-HOST300 and native/whole-system/release qualification remain separate and require their own inputs."
    },
    {
      "id": "AT-FS-SERVICE-LIFETIME",
      "reference": "userland/docs/proposals/FS-SERVICE-LIFETIME.md",
      "owner": "Aether-userland/sys-init",
      "budget_seconds": 300,
      "command": "Host Rust 1.98.0 test build of service-lifetime-tests.rs against actual metadata/policy/service/client/activation crates with fs_home_native and the referenced explicit flags; run --test-threads=1.",
      "invariants": "One Owner/source/client across two phases and controlled idle; unchanged cumulative 96 requests/9 mutation attempts, grant/epoch and checked disconnect; unknown outcomes never replayed.",
      "oracle": "Seven actual-code host methods, two readiness denials, strict compile/Clippy and Rustfmt. Runtime cutpoint/deadline and native export/park are not modelled by substitutes.",
      "gaps": "No operational Runtime drain, elapsed deadline, native timing/durability or ISO qualification. Private tools/receipts unavailable publicly."
    },
    {
      "id": "AT-ZSH-CLOSURE",
      "reference": "userland/docs/ZSH-CONSUMER.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "Authenticated source/configuration audit and isolated reference build sequence in the reference; exact source pins in userland/docs/zsh-consumer-v1.json. No guest.",
      "invariants": "Pinned upstream signatures/checksums, explicit static module allowlist and local libtinfo; no optional function corpus, forced target API success or host-as-native claims.",
      "oracle": "Source-derived requirement matrix plus final module/config/link inspection and separate handoff review; preserve every failed attempt and clean owned outputs.",
      "gaps": "Actual Aether ELF/API/TTY/process, frontend/terminfo selection, code/memory fit and assembled ISO qualification remain separate."
    },
    {
      "id": "AT-FS-PARENT-TERMINAL",
      "reference": "userland/docs/proposals/FS-SERVICE-LIFETIME.md",
      "owner": "sys-init/Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: PYTHONOPTIMIZE=1 python3 -B sys-init/scripts/check-home-owner.py. Actual Runtime host controls, strict host/native builds and offline complete owner fit; exact private prerequisites required; no guest.",
      "invariants": "Parent poll/terminal cutpoint before child dispatch; existing gate/ledgers retain failure obligations and stop/abandon/reclaim settlement, then final idle retirement. No new fields, authority, ABI or resource limits.",
      "oracle": "Queued FILE/exec/fork/stream consume no child bytes or allocate; pending no-effect work settles only after confirmed terminal; failed close/reclaim/nonterminal stop/partial exchange/unknown outcomes cannot export. Named old-poll and missing-retire controls plus exact complete owner code/resident/conservative-stack measurement.",
      "gaps": "No native Runtime enforcement, peak stack, elapsed drain deadline or assembled Zsh/ISO acceptance. Private SDK/style/evidence unavailable publicly; legacy guarded coverage remains issue56."
    },
    {
      "id": "AT-FS-DRAIN-DEADLINE",
      "reference": "userland/docs/proposals/FS-SERVICE-LIFETIME.md",
      "owner": "sys-init/Aether-userland",
      "budget_seconds": 300,
      "command": "From system root: PYTHONOPTIMIZE=1 python3 -B sys-init/scripts/check-home-owner.py with exact private prerequisites. Actual component check body, typed Native host-trap/loan/omission controls and complete current/AF07/AF08 offline fit; no guest.",
      "invariants": "One checked 500-delivered-tick source-only deadline at authenticated parent terminal; pre-transfer event sequence retained on EAGAIN; no per-wake/frame/child renewal. Keep source obligations/settled facts accurate on expiry and attempt both owned closes.",
      "oracle": "Actual Runtime/source transfer/stop/disconnect/export/progress races, RDX-zero omission, callback loan/retired-source and trap guards, strict host/native builds, original maintained nested suites and fixed-limit complete-owner measurements. Existing actual kernel-body event/deadline/authority controls are host evidence.",
      "gaps": "No native IRQ/wall-clock/peak/drain enforcement, healthy-session timeout policy, operational reopen or Zsh/ISO qualification. Private inputs/receipts remain local; issue64 owns matched native gate."
    },
    {
      "id": "AT-ZSH-TARGET-LINK",
      "reference": "userland/docs/ZSH-TARGET-LINK.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "Use the focused current external-entry and pinned stdio checks in ZSH-TARGET-LINK and the private bounded current-SDK Zsh/tinfo configure/link/parser coordinator selected by issue134. Exact private prerequisites required; no kernel/image/guest.",
      "invariants": "Authenticated required module/terminal closure, one real external startup context and same-context scalar/scoped stdio providers, isolated host generators, no target execution or success stubs. Preserve incompatible-provider/profile guards and approved resource bounds.",
      "oracle": "Actual current compiler/link/config/provider-route outcomes and large-profile ELF/layout/backing/TLS checks with ordinary-profile refusal; focused missing/duplicate/wrong-entry and span/errno/prefix controls, truthful unsupported paths, nonrecursive cleanup and source freeze.",
      "gaps": "No public replay without private inputs. Directory metadata/access, actual path Sources, namespace custody/startup and Zsh runtime resources remain gates. Target /./ lookup is source-derived, not native qualification; no prompt/groups/external/persistence/R1 claim."
    },
    {
      "id": "AT-ZSH-APPLICATION",
      "reference": "docs/NATIVE-ZSH-APPLICATION.md",
      "owner": "Aether / Aether-userland / sys-init",
      "budget_seconds": 300,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_application_profile.py -v; selected pure-kernel and actual-image host/compile controls; final zig build test with exact private inputs. Each selected aggregate retains its own declared scope and budget; no guest. The final complete root gate uses the separate AT-HOST budget; focused groups retain this group budget.",
      "invariants": "Explicit application selector,1.5MiB/384 image+stack/640 total per five slots,45MiB assigned inside64MiB; old defaults/seals/authority unchanged; preflight before effects and complete private reclaim.",
      "oracle": "Actual parser/envelope/body behavior, meaningful wrong-profile/bounds/grant/exhaustion/rollback denials, module/provider/TLS inventory, actual kernel/staging geometry and source/tool freezes.",
      "gaps": "Trial reserve capacity is not measured native workload sufficiency. No public replay without private prerequisites, no guest/TTY/jobs/persistence/ISO acceptance."
    },
    {
      "id": "AT-FS-HOST-ASSOCIATION",
      "reference": "docs/FILESYSTEM-HOST-INPUTS.md",
      "owner": "Aether / Aether-userland",
      "budget_seconds": 300,
      "command": "python3 -B -m unittest discover -s tests -p test_fs_consumer_association.py -v; exact retained-artifact/current-consumer parser/model controls and final complete zig build test with explicit local dependency/association selection. No guest. The final complete root gate uses the separate AT-HOST budget; focused groups retain this group budget.",
      "invariants": "Original seals and seven-tool catalog unchanged; default stale rejection; current source ROOT never routes; exact actual producer inputs remain pinned; current host evidence and finite consumer changes are explicit.",
      "oracle": "Real-root/member and exact source/tool/evidence checks; meaningful stale/malformed/extra/missing/provider/producer-logic and alias/copy denials; current parser semantic controls and complete process cleanup.",
      "gaps": "No public replay without private retained bytes, no cryptographic proof of execution or native authority from a receipt hash, no new guest/runtime/ISO qualification."
    },
    {
      "id": "AT-AF09-DRAIN-TRACE",
      "reference": "docs/NATIVE-AF09-DRAIN.md",
      "owner": "Aether integration",
      "budget_seconds": 300,
      "command": "From system root: run unittest discovery separately for test_af09_drain_trace.py, test_af09_drain_witness.py and test_af09_drain_inputs.py. Standard-library prospective host tests only.",
      "invariants": "Closed cases/canonical bounded rows, causal startup/query/park/ACK/cleanup sequence, fixed deadline, exact actual counters and ordinary native marker consistency; provenance binds current source/raw records without automatic qualification.",
      "oracle": "All-eight synthetic complete/omission/mutation, malformed/stale/overlap/substitution/overflow denials; exact current-file and closed manifest identity checks.",
      "gaps": "Synthetic transcripts do not establish artifact association, execution, recovery, IRQ/CR3 or native acceptance."
    },
    {
      "id": "AT-AF09-DRAIN-C-HOST",
      "reference": "docs/NATIVE-AF09-DRAIN.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland: python3 -B experiments/filesystem-service/fd_home_drain_checks.py --evidence UNUSED_DIRECTORY. Existing nonsymlink parent, pinned Clang/format21.1.8 and installed macOS SDK required; host doubles only.",
      "invariants": "Real home/pipe/fork/startup/READY path, direct parent exit and unexpected-return fail-stop, closed reference encodings, exactly two16-byte writes, existing native-yield0x1fffe with four zero arguments and nonzero failure119, no libc sched_yield or C cleanup/wait, preserved nested-fork authority; consumed source/header/direct-tool freeze and owned cleanup.",
      "oracle": "58 C host scenarios covering all eight selectors, repeated successful native yields, exact callback arguments/order and nonzero yield failures; ten compiling named semantic controls and UBSan; no-build CLI usage/prerequisite/escaped-output controls. A finite forbidden libc-yield sentinel exposes the old unsupported path. Prospective source prerequisite only.",
      "gaps": "No native timing/authority, complete transitive toolchain/loader provenance, target fit/artifacts, cold execution or release acceptance; owner control review is recorded separately."
    },
    {
      "id": "AT-AF09-DRAIN-C-CONTROLLER",
      "reference": "docs/NATIVE-AF09-DRAIN.md",
      "owner": "Aether-userland",
      "budget_seconds": 300,
      "command": "From userland: python3 -B experiments/filesystem-service/fd_home_drain_checks_tests.py. Mocked child results/clocks only; no compiler, real child, kernel selector or guest.",
      "invariants": "Arm unknown cleanup before helper calls, retain work/evidence on unknown or unresolved stop, remove only after known cleanup, complete aggregate includes setup and final hashes/removal/receipt writes.",
      "oracle": "Eleven actual-controller methods with mocked helper results and controlled expiry; old cleanup-loss/initial-budget defects reproduced before correction.",
      "gaps": "No real host process escape containment or native process/timing/authority enforcement. Actual C runs and all target/native gates remain separate."
    },
    {
      "id": "AT-AF09-DRAIN-KERNEL",
      "reference": "docs/NATIVE-AF09-DRAIN.md",
      "owner": "Aether kernel",
      "budget_seconds": 300,
      "command": "From system root: python3 -B -m unittest discover -s tests -p test_native_af09_drain.py -v; actual-body host scaffold, no guest.",
      "invariants": "Generation-bound publication and settled source obligations, primary-only completed-return holds, saved frame/FS/FP, helper and idle progress, actual Events timeout precedence, default zero state, unchanged capability/pointer/direction/cleanup checks.",
      "oracle": "Eight selected cases, actual-body scenarios and compiling semantic omissions; unknown/default selector and enabled-state controls.",
      "gaps": "No hardware IRQ/CR3, real guest scheduling, target fit or native/recovery qualification."
    },
    {
      "id": "AT-NATIVE-APP",
      "reference": "docs/NATIVE-LAUNCH.md",
      "owner": "Aether kernel; issue99 lead",
      "budget_seconds": 300,
      "command": "Pure root registered in hosted CI: zig test kernel/native_app.zig. Local actual-body reference: PYTHONPATH=tests python3 -B -m unittest test_native_app -v, qualified through the separately reviewed private local adapter. The direct Python entry is not a new hosted gate; no guest.",
      "invariants": "Exact320/64-byte records and checked fixed-stack placement; actual four holders/directions/generations and live engine counterpart/epoch; positive-progress history; all denial/resource preflights before effects; app-local kind0x36 clock validation before sampling; every terminal/stop/reclaim/reset/close revocation; bound freeze/copy/exec/publication denial; unchanged ordinary resources and legacy bytes.",
      "oracle": "Shared production core and extracted actual selector/launch/stack/channel/clock/lifecycle bodies, new-op dispatch clauses, full destination/engine/channel snapshots, and compiling counterpart/history/revocation/profile/dispatch omissions. Existing full-body tests retain unbound copy/exec coverage.",
      "gaps": "Maintained capture-helper execution boundary remains separate from private qualified local execution. MMU load/alias flush, device reads, scheduler returns and notification/trace effects are host substitutes; State uses fixed host backing. Dispatch has a fallback sentinel, copy/exec use actual pre-effect prefixes, reset its scalar prefix and init close its detach loop. Execution/results remain in issue99. No guest, adapter acceptance, whole-app fit or release qualification."
    },
    {
      "id": "AT-MKTEMP-DIRECTORY-HOST",
      "reference": "userland/experiments/mktemp-directory/README.md",
      "owner": "Issue97 lead; bounded producer/adapter implementers",
      "budget_seconds": 300,
      "command": "Owner-selected private producer_02.py prepare and host_producer_07.py with its reviewed source freeze; neither private entry is available from the public checkout. Public check.py is an unselected library; no implicit execution.",
      "invariants": "Directory-only31-byte argv/template bound; provisioned home15 parent; mask0077/mode0700; checked MONOTONIC/TLS; one mkdir; typed progress and once-only finalization; unchanged process/resource limits.",
      "oracle": "Generated effective mktemp-only table; scripted C cases and omissions, isolated Rust tests and omissions, and real Toybox terminal cases with the actual Client/service and a typed C provider fixture.",
      "gaps": "Host result separately reviewed. Final quality/integration receipts are recorded in issue97 and the PR. Kernel prerequisite issue99 is merged; issue100 tracks the separately reviewed one-app host binding and issue97 owns matched fit under the approved issue98 contract; no OpenZFS disk, package import, guest or release qualification."
    },
    {
      "id": "AT-NATIVE-ONE-APP-HOST",
      "reference": "sys-init/prototypes/native-filesystem-session/README.md",
      "owner": "Issue100 lead; sys-init and Aether-userland",
      "budget_seconds": 300,
      "command": "Separate selected private owner_host_06.py, legacy_host_02.py and app_host_09.py entries with their reviewed source freezes, pinned Python and 300-second aggregate per family. Issue100 records results and peer reviews. Entries and qualification inputs are not present in the public checkout; root AT-HOST does not execute these consumer binaries.",
      "invariants": "Sole filesystem handoff before greetings; authenticated startup and fd1/fd2 source identity; bounded clock, transfer and cleanup; denied operations and rights; no replay or false export after unknown outcomes; legacy AEFDB001/AEFDB002 consumers remain compatible.",
      "oracle": "Owner host tests and typed-control/compiling omissions; 113 legacy compatibility cases; app namespace and normal/fatal cases in debug and optimized modes, seven compiling omissions, C finalizer/stdio controls and five real Toybox/Client/service host cases. Exact results and separate peer evidence reviews are recorded in issue100.",
      "gaps": "These host observations do not establish native authority, linked application or owner fit, real engine export, guest execution, package integration or release acceptance. Issue97 owns whole-app fit."
    },
    {
      "id": "AT-MKTEMP-READER-CAPTURE",
      "reference": "docs/NATIVE-C.md",
      "invariants": "Default-off private BSP ABI14 reader selector; physical320 bytes per State, logical320 only slot0, defaults/other slots256. Per-request256/per-transfer16, authority/pointer/query/reset contracts unchanged. Four-State raw growth256; linked aligned growth<=16KiB requires actual measurement.",
      "command": "python3 -B -m unittest discover -s tests -p test_native_mktemp_reader.py -v; python3 -B -m unittest discover -s tests -p test_build_policy.py -v",
      "oracle": "Actual extracted write/query/reset bodies cover32/40row capacity, other slots, denied-write nonmutation, offset320 EAGAIN and complete generation clearing; actual build guard conditions reject incompatible configurations.",
      "gaps": "Host bodies only. Default/selected linked static layout and matched kernel-only rebuild/native reader qualification remain separate; frozen OpenZFS/controller artifacts are reused.",
      "budget_seconds": 300,
      "owner": "Aether maintainer; issue97 approved capture correction"
    },
    {
      "id": "UL-SERIAL-TTY-CORE",
      "reference": "userland/experiments/serial-tty/README.md",
      "invariants": "One safe no_std userland terminal,4aliases/16-byte stack scratch/noqueues; trusted caller identity+generation and owner-held READ/WRITE/MODE rights; narrow immediate VMIN1/VTIME0 and optionalCRtoLF; no native authority or production placement.",
      "command": "From system root, use the pinned Rust commands in userland/experiments/serial-tty/README.md: actual-module host tests, x86_64-unknown-none rlib, rustfmt and Clippy under existing bounded capture. Selected compiling guard omissions use the same semantic assertions. No guest or new runner.",
      "oracle": "Actual lifecycle/aliases, foreign same-generation and stale denial, zero/short/progress-before-error I/O, unknown-completion fail-closed behavior, immediate mode/snapshot restoration and hangup draining before EOF; compiling semantic omissions must reject.",
      "gaps": "Library/model slice only. Native owner admission/fit, C adapter, real drain/canonical/signals/groups/TERM and actual Zsh remain separate. Private quality pass covers unchanged adoption inputs; public standalone snapshots are unavailable and new docs/inventory need separate review.",
      "budget_seconds": 300,
      "owner": "Aether-userland; issue112 bounded terminal core"
    },
    {
      "id": "UL-NATIVE-TTY-BYTE-STDIO",
      "reference": "userland/experiments/serial-tty/README.md",
      "invariants": "Explicit native_tty_byte_probe/AMK_NATIVE_TTY_BYTE_PROBE only; owner-held READ0/WRITE1-2/NOMODE, actual admitted handle+epoch, unchanged AEFD and6000tick/1M/12reserve lifecycle; exact16 binary bytes and three closes; default two-output mktemp preserved.",
      "command": "Use the selected/default actual owner and native C facade host test roots and flags in serial-tty/README.md under existing bounded capture, UBSan, no_std target, formatting and Clippy; selected compiling omissions must fail. No Toybox or guest in host checks.",
      "oracle": "Exact startup and binary NUL/CR/LF/high-byte routing; positive short/pending, direction/post-close/zero/forged/unknown denial and independent normal settlement. Callback helper/trap controls are scripted; native requires fresh fit and actual kernel witness.",
      "gaps": "No native claim from host fixtures. Fresh app+owner geometry/TLS/stack, target denials and matched byte exchange remain required; canonical modes/Zsh/login remain later. Private adoption checker excludes public new prose/inventory review.",
      "budget_seconds": 300,
      "owner": "Aether-userland/sys-init; issue114 bounded ordinary-app byte exchange"
    },
    {
      "id": "UL-NATIVE-TTY-DESCRIPTORS",
      "reference": "userland/experiments/serial-tty/README.md",
      "invariants": "Explicit native_tty_descriptor_probe/AMK_NATIVE_TTY_DESCRIPTOR_PROBE with AEFD_TERMINAL_BINDINGS and one AEFD_EXTERNAL_STARTUP context;003 typing follows authenticated owner classification, preserves READ0/WRITE1-2 and canonical alias lifetime;001/002 profiles unchanged.",
      "command": "Use the actual default/byte/descriptor owner, startup and native C/libc test roots and flags in serial-tty/README.md with bounded capture, UBSan, no_std, formatting and Clippy. Review selected semantic controls and fresh target app/owner fit before one separately reviewed native run.",
      "oracle": "Explicit terminal versus file/pipe/raw-console isatty; actual access flags, idempotent F_SETFL and unsupported mutation denial; high dup/CLOEXEC, original-close and last-alias retirement through one canonical context; fixed16-byte exchange and normal app/engine cleanup.",
      "gaps": "Descriptor prerequisite only; no O_RDWR acquisition, NONBLOCK, MODE/termios, drain, signals/groups or Zsh login. Target libc routing and fresh stack/heap/TLS require actual linked-artifact analysis; merged UART alone does not prove descriptor origin.",
      "budget_seconds": 300,
      "owner": "Aether-userland/sys-init; issue116 terminal descriptor classification, status and aliases"
    },
    {
      "id": "UL-NATIVE-TTY-DUPLEX",
      "reference": "userland/experiments/serial-tty/README.md",
      "invariants": "Selected004 pair0READ/1WRITE attests one actual Terminal/caller/generation with unchanged native rights; canonical16-slot map owns immutable duplex description IDs, aliases and dependency-aware source lifetime;001/002/003 unchanged.",
      "command": "Use the selected/default actual C/Rust startup, context/libc, native facade and owner test roots in serial-tty/README.md with bounded capture, UBSan, formats, Clippy/no_std and compiling association/dependency/partial-close controls. Fresh actual app/Owner fit and separate image/proposal review precede one native probe.",
      "oracle": "Literal caller-scoped /dev/tty open O_RDWR with supported NOCTTY/CLOEXEC, distinct opens versus dup IDs, truthful access and unsupported-status denial, source retention after original closes, unknown compound-close containment without replay, one-FD fixed binary exchange and normal app/engine cleanup.",
      "gaps": "No full ttyname/Zsh, MODE/termios/drain, NONBLOCK, permanent reopen factory or new native grant. Merged UART requires exact qualified C assertions/source and linked libc route; persistence remains separate.",
      "budget_seconds": 300,
      "owner": "Aether-userland/sys-init; issue119 scoped duplex acquisition"
    },
    {
      "id": "AT-CONSOLE-TEMT",
      "reference": "docs/NATIVE-CONSOLE.md",
      "invariants": "Approved selected native-tty-mode-probe only; exact existing F001 holder/lifetime/closed checks and zero reserved args before one LSR observation; actual TEMT with RX-error retention, no RX consumption or kernel wait; older dispatch/default profiles unchanged.",
      "command": "Use the changed pure kernel/SerialStatus and build-policy tests documented in NATIVE-CONSOLE plus existing affected permission/profile checks. The single mode native witness needs accepted source/fit/image/proposal first; hosted models exercise the changed pure modules.",
      "oracle": "THRE-only is busy, valid TEMT completes, all-ones/impossible status fails, first RX errors survive transmit polls, and denied/unselected requests never touch hardware. Compiling THRE/guard omissions must fail the same assertions.",
      "gaps": "No UART busy timing or remote receipt claim from native capture; no raw PIO, new kernel queue/wait, physical device qualification or full TTY.",
      "budget_seconds": 300,
      "owner": "Aether kernel; issue122 approved scalar transmitter-empty observation"
    },
    {
      "id": "UL-NATIVE-TTY-MODE",
      "reference": "userland/experiments/serial-tty/README.md",
      "invariants": "Selected005 MODE control in the sole FD context; original live MODE reference authorizes public requests, private fourth alias only post-terminal cleanup; exact generation/revision, bounded32-byte schema and original6000-tick/1M budget. Factory offset296 preserved; control ref at300.",
      "command": "Use focused actual core/owner/C/UBSan/no_std/format/Clippy tests and compiling authority/drain/revision/cleanup controls. Fresh actual app/Owner/kernel fit and libc/query routes precede one reviewed closed two-phase32-byte native exchange.",
      "oracle": "Real tcgetattr/tcsetattr and ICRNL effect after physical drain, saved-mode restoration/rawCR, stale/unsupported/closed and unknown rejection, no replay, deadline/interruption before commit and private cleanup after all public aliases close.",
      "gaps": "Native cancellation is not EINTR; host interruption coverage remains labelled. No full canonical/echo/ISIG/groups/ZLE/owner-death recovery, general control factory or R1 claim.",
      "budget_seconds": 300,
      "owner": "Aether-userland/sys-init; issue122 selected mode/drain/restore experiment"
    },
    {
      "id": "UL-NATIVE-TTY-SIGNAL",
      "reference": "userland/experiments/serial-tty/README.md",
      "invariants": "Selected SIGINT-only exact Owner/app-generation relationship; side-effect-free preflight/current-disposition post outcomes, original pre-critical mask eligibility, full reply and idle context before checked handler at unmask, no false EINTR/replay; older001\u2013005/defaults unchanged.",
      "command": "Use focused actual core/Owner/C/kernel authority, disposition, safe-unmask/reentry and delivery-failure controls documented by issue125. Fresh app/Owner/kernel/handler-frame fit and exact separate image/proposal review precede one fixed three-phase32-byte native exchange.",
      "oracle": "Real handler restores mode through the sole descriptor context and read returns zero-progress EINTR once; ignored/masked/positive-progress/unknown/error cases remain truthful; checked translated then restored raw bytes and complete app/engine cleanup.",
      "gaps": "Fixed admitted recipient is not a POSIX foreground group; no canonical queue/fullZLE/MONITOR/stop-continue/actualZsh or R1 qualification, CPU-bound asynchronous signal claim, SDK rebuild or quota increase.",
      "budget_seconds": 300,
      "owner": "Aether kernel/userland/sys-init; issue125 approved terminal SIGINT prerequisite"
    },
    {
      "id": "UL-NATIVE-TTY-CANONICAL",
      "reference": "userland/experiments/serial-tty/README.md",
      "invariants": "Selected007 fixed canonical S/ZLE Z/admission restore tuples under existing MODE and exact-generation SIGINT grants;64-byte record/3-byte output state, original-byte CRLF mapping, live held write authority for echo, no EOF/hangup conflation or consumed-input replay.",
      "command": "Use focused actual core/Owner/C canonical editing/echo/EOF/partial-output/mode/handler/deadline controls and compatibility checks for001\u2013006. Fresh changed app+signal-frame+reentrant/Owner fit and exact image/media review precede the fixed nine-phase30-byte native consumer; existing kernel mechanisms and flags are reused.",
      "oracle": "Canonical short records/erase/kill/echo and buffered+one-shot empty EOF remain live; ZLE mapping does not cascade, source output counts differ from expanded UART bytes, real handler restores S and final reset restores admission mode; strict physical CRLF/raw prefix gates and complete settlement.",
      "gaps": "Byte-oriented canonical proof is not grapheme editing or actualZsh/group/MONITOR/terminfo/readiness/R1 qualification; default SIGINT effects and TCSAFLUSH remain unsupported. No new kernel operation, service, queue framework or quota.",
      "budget_seconds": 300,
      "owner": "Aether userland/sys-init; issue128 reviewed canonical/ZLE mode step"
    },
    {
      "id": "UL-ZSH-TERMINFO-INPUTS",
      "reference": "userland/docs/ZSH-TARGET-LINK.md",
      "owner": "Aether-userland; issues134/135 independent preparation",
      "budget_seconds": 300,
      "command": "Same-release private tools/zsh-terminfo.py and selected engine input-recovery recipe after frozen lead release; public python3 -B userland/experiments/filesystem-service/home_engine_build_tests.py; actual closed Rust launch/UTC controls in the owning recipe. No native run.",
      "invariants": "One real compiled VT100 file with source closure/notices, no database-free fallback. Same-context stdio semantics; closed expected-six frontend retains oldthree/drain/default and all clean-result checks, original9/96/resource caps and old seal. Same-pin selected input recovery reuses the SDK.",
      "oracle": "Actual tic/infocmp/data identities; source/semantic omission controls; old/new/mixed frontend validation and actual new Zsh/engine origin, ELF/layout/backing/TLS results with known cleanup. Raw/libc errno, partial prefix, EOF and unmask behavior remain truthful.",
      "gaps": "Offline data is not persisted materialization; no activated custody/FILE/metadata/kernel composition, runtime heap/recursive stack/worker peak, native six-mutation completion, terminfo lookup or Zsh/R1 acceptance."
    },
    {
      "id": "UL-ZSH-FILESYSTEM",
      "reference": "userland/docs/ZSH-FILESYSTEM.md",
      "owner": "Aether userland/sys-init/kernel; issue137",
      "budget_seconds": 300,
      "command": "Focused actual C/startup/FILE/typed-directory and Rust Owner constructor/service/loan checks in the owning private recipes; python3 -B -m unittest discover -s tests -p test_zsh_terminfo_profile.py -v; bounded private zsh-target-fit.py --filesystem, zsh-owner-fit.py and host-only zsh-screen-probe.py after source freeze. Public source-only boot gate wiring: python3 -B -m unittest discover -s tests -p test_native_envelope_gate.py -v. Private zsh-witness.py prepares the image; zsh_run.py prepare creates fresh reviewed media/proposal; explicit run alone executes the bounded guest.",
      "invariants": "One retained Owner namespace Client/epoch; exact app generation; readonly closed336/AEFP0004; actual held directory, no fake stat; AENAP002 process-only transfer and positive large/MODE/SIGINT closure. Existing resource/default/cleanup limits; old profiles preserved. Application boot-module bound derives from existing AENFS006 component caps; ordinary/large defaults unchanged. Fixed Screen4 private FIFO and original live holder association survive closed diagnostic pipes.",
      "oracle": "Actual realproducer epoch/inplace constructor and semantic omissions; exact libc/raw errno/mask/publication; compiled app/Owner origins, derived-source pins, current loader/TLS/layout/stack; known child cleanup and real hostVT100 input/render/exit. Actual extracted boot guard admits selected9,081,744/exactcap and rejects one-over/u64max before dispatch; compiling old/omitted gate controls reject. Source-only public checks are distinct from the private actual compiler run.",
      "gaps": "No current image/guest or complete Zsh startup/parser/handler stack/peakheap/whole-session request demand. Expected33requests and capacity are models, not native evidence; externalexecute still overbudget. Unknown historical interrupted hostattempt remains quarantined."
    },
    {
      "id": "zsh-external-parent-helper",
      "reference": "userland/docs/ZSH-FILESYSTEM.md",
      "invariants": "Selected one-parent/one-helper copy/exec/wait with full descriptor snapshots, Owner namespace custody, child-local binding, parent-only MODE/SIGINT, shared FILE lifetime, known wait delivery before reclaim/read-lease restoration. External Owner RX73728/stack12288 within128 backing; old profiles and other execution bounds stay exact.",
      "command": "python3 -B -m unittest discover -s tests -p test_native_zsh_external.py -v; python3 -B -m unittest discover -s tests -p test_zsh_owner_capacity.py -v; actual changed parser/boot/mapping bodies and C/Rust controls in the owning qualified private recipes; lead-frozen selected target/Owner fit, reviewed image/media and fixed native helper/status/prompt workload.",
      "oracle": "Real helper ELF executes and exits7; Zsh observes actual status7 and returns to its prompt; normal final app/engine exit, mode restoration, export and three known reclamations. Qualified issue143 fixed trial:33/96 requests,21 cleanup phases, halt2884/6000ticks, known host cleanup. Malformed/stale/unknown effects contain without replay.",
      "gaps": "Approved comment6591806304 limits acceptance to the fixed helper/status/prompt workload and selected Owner capacity. Full-root141 stays open. No full-host/general peak, child input/job control, arbitrary filesystem exec, login, persistent shell write/reboot readback, packages or R1 qualification. Private recipes are not a standalone distribution.",
      "owner": "Aether kernel, userland and sys-init",
      "budget_seconds": 300
    },
    {
      "id": "zsh-fixed-home-write",
      "reference": "userland/docs/ZSH-FILESYSTEM.md",
      "invariants": "Only exact committed/READY helper may use AEFP0005 fixed-home-open12/write11. Rust sole namespace custody; DIRECTORY10/reserved7 and old profiles unchanged. Completed16-byte write plus known close, no replay; exact-seven engine within9 mutations/96 requests and existing resource/time/capture bounds.",
      "command": "python3 -B -m unittest discover -s tests -p test_home_zsh_reader.py -v; focused actual selected/old C and Rust provider/Owner/helper checks and semantic omissions in qualified private recipes; fresh zsh-target-fit.py --home-write and zsh-owner-fit.py --home-write; separately reviewed exact image/media, explicit fixed writer then pristine/recovery readonly cold readers.",
      "oracle": "Actual helper0/status0/prompt, retained completed16-byte write/close, seven mutations, clean export/reclaim. Original OpenZFS exact payload/EOF, terminfo hash/tree, metadata/ACL/link/full inventory and full preserved original digest comparison after clean readonly shutdown. Qualified fixed native writer:35.657s/36requests/normal0/status0/prompt/21cleanup/3reclaims; independent two-reader cohort31.319s, exact payload/terminfo/metadata/inventory, full original digest match and both media unchanged.",
      "gaps": "Host fixtures/offline fits are not native persistence. Full-root141, general peaks, arbitrary exec/redirection, child job control, login, packages and R1 remain separate. Private recipes require retained development inputs.",
      "owner": "Aether userland/sys-init/kernel; issue145",
      "budget_seconds": 300
    },
    {
      "id": "zsh-filesystem-elf-exec",
      "reference": "userland/docs/ZSH-FILESYSTEM.md",
      "owner": "Aether kernel/userland/sys-init; issue148",
      "budget_seconds": 300,
      "command": "Focused tests/test_native_zsh_file_exec.py actual-body and old C003 controls; selected/old Rust Files/Runtime/native-wrapper checks; userland/experiments/filesystem-service/build-zsh-file-exec-witness.py under its closed bounded recipe; fresh private zsh-target-fit.py --external and AETHER_ZSH_FILE_EXEC_ELF=/actual/helper.elf zsh-owner-fit.py --file-exec; reviewed kernel/loader fits then image/media and explicit zsh_run.py --file-exec fixed trial.",
      "invariants": "Only actual Rust Owner0x2300B may snapshot sealed1..4096-byte held filesystem object into exact frozen child. Existing eager preflight/W^X/zeroing; immutable scratch through RELRO and clear on all exits. All3C003fallbacks denied, C004 observation-only receipt, no-prior-commit, saved672 request and disjoint4096workspace, checked full read/close, no unknown replay. Existing7/9mutations,96requests and resource/time bounds; old profiles exact.",
      "oracle": "Actual full336/native identity/READY helper exits23; real Zsh prints23 and returns to prompt; normal parent/exact-seven engine export, MODE restoration, three reclaims and known host cleanup. Offline fits/fixtures alone are not native execution. Qualified fixed native trial:38.678s,helper23/status23/prompt/READY/C004,3548known-closed bytes,42/96requests,21cleanup/3reclaims,halt3225/6000ticks,known original-holder/client cleanup.",
      "gaps": "Approved12decision6635185907 qualifies this fixed checkpoint while full-root141 remains open. General peaks/IRQ/panic, VM/PATH runner, login, packages, cold boot-to-program and R1 remain separate. No cold-reader or arbitrary executable claim follows."
    },
    {
      "id": "zsh-cold-reopen",
      "reference": "userland/docs/ZSH-FILESYSTEM.md",
      "owner": "Aether userland/sys-init/kernel; issue150",
      "budget_seconds": 300,
      "command": "python3 -B userland/experiments/filesystem-service/check-home-cold-reopen.py --inputs /retained/filesystem-transport/inputs.json (add --ordering-only for the actual transaction/importer regression subset); focused cold/old Rust Files and Runtime checks; fresh private zsh-owner-fit.py --cold-reopen and zsh-engine-recover.py --cold-reopen plan/build; reviewed writer then cold image/media/once-only trial.",
      "invariants": "Closed cold composition reopens actual existing objects without client/bootstrap mutations. C/Rust canonical-zero success/failure receipts and exact-zero engine completion, original writable OpenZFS import/export/order/cleanup. Sole Owner retains current-epoch READ object after complete bytes/type/size/EOF/post-stat checks; existing fresh acquisition closes before0x2300B/C004. No names/hash/mode authority, WRITE aliases, repair/replay, fallback, new syscall/capability/quota; old writer exactseven preserved. Only the fully known clean final-zero result omits selected-mutation ORDERED; dirty/unknown/incomplete records retain conservative ordering/failure, and original exporter/lifecycle always run.",
      "oracle": "Actual fresh VM consumes persisted terminfo/helper from stopped/exported writer disk; helper23/status23/prompt, normal parent/engine export, MODE restore, three reclaims and known holders/client cleanup. Host predicates/artifact identity bind zero mutations; no independent raw receipt/count telemetry or bitwise unchanged-media claim. Qualified corrected fixed pair:writer37.856s/42requests then cold25.628s/38requests,helper23/status23/prompt/normalexport/MODE0/21cleanup/3reclaims,knownhostcleanup. First cold engine5 failure retained; no failed media replay.",
      "gaps": "Owner-approved scoped150 fit/delivery gate leaves141 open. Current host checks/fits do not qualify cold execution by themselves. Sustained/manual/authenticated login, arbitrary exec, packages, general recovery and R1 remain separate; private dependencies are not a public build distribution."
    }
  ]
}