ci(node-status): trigger the freshness checks on their remaining inputs

.github/workflows/cbz-cold-start-node.yml

@@ -0,0 +1,80 @@
+name: cbz-cold-start-node
+on:
+  push:
+    branches: [cbz/cold-start-node-20261029]
+    paths:
+      - 'tools/cbz_node_regression.py'
+      - 'tools/cbz_node_controls.py'
+      - 'tests/test_cbz_node_regression.py'
+      - '.github/workflows/cbz-cold-start-node.yml'
+  pull_request:
+    paths:
+      - 'tools/cbz_node_regression.py'
+      - 'tools/cbz_node_controls.py'
+      - 'tests/test_cbz_node_regression.py'
+      - '.github/workflows/cbz-cold-start-node.yml'
+permissions:
+  contents: read
+jobs:
+  controls-and-prepared:
+    runs-on: ubuntu-24.04-arm
+    timeout-minutes: 15
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: '3.11'
+      - name: Ordinary controls and intended source/harness mutations
+        run: python -I -B -S tools/cbz_node_controls.py
+      - name: Optimized controls and intended source/harness mutations
+        if: always()
+        run: python -I -B -O -S tools/cbz_node_controls.py
+      - name: Fetch immutable historical fixture objects
+        if: always()
+        run: |
+          git clone --no-checkout https://github.com/d6g8k5htny-coder/Math-.git "$RUNNER_TEMP/Math-"
+          git clone --no-checkout https://github.com/d6g8k5htny-coder/query-.git "$RUNNER_TEMP/query-"
+      - name: Every tracked mjs test with verified fixtures
+        if: always()
+        env:
+          NODE_OPTIONS: --require=/definitely-missing-cbz-node-preload.cjs
+          NODE_PATH: /untrusted/cbz-node-path
+        run: python -I -B -S tools/cbz_node_regression.py --math-root "$RUNNER_TEMP/Math-" --query-root "$RUNNER_TEMP/query-" --output "$RUNNER_TEMP/cbz-node-result"
+      - name: Print actual result for independent readback
+        if: always()
+        run: |
+          python -I -B -S - <<'PY'
+          import hashlib, json, os
+          from pathlib import Path
+          root = Path(os.environ["RUNNER_TEMP"]) / "cbz-node-result"
+          record = json.loads((root / "result.json").read_text())
+          print("CBZ_NODE_RESULT_JSON " + json.dumps(record, sort_keys=True))
+          raw = (root / "node.tap").read_bytes()
+          def verify_log(value):
+              if hashlib.sha256(value).hexdigest() != record["log_sha256"]:
+                  raise ValueError("Node transcript no longer matches executed report")
+          verify_log(raw)
+          try:
+              verify_log(raw + b"\0")
+          except ValueError:
+              print("CBZ_NODE_TRANSPORT_ADVERSE_PASS")
+          else:
+              raise SystemExit("modified transcript was admitted")
+          text = raw.decode("utf-8")
+          chunks = [text[i:i+4096] for i in range(0, len(text), 4096)]
+          print("CBZ_NODE_TAP_TOTAL " + str(len(chunks)))
+          print("CBZ_NODE_TAP_GIT_BLOB " + hashlib.sha1(
+              b"blob " + str(len(raw)).encode("ascii") + b"\0" + raw).hexdigest())
+          for number, chunk in enumerate(chunks):
+              print("CBZ_NODE_TAP_JSON " + str(number) + " " + json.dumps(chunk))
+          PY
+      - name: Preserve actual result and transcript
+        if: always()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+        with:
+          name: cbz-node-result
+          path: ${{ runner.temp }}/cbz-node-result
+          if-no-files-found: error

.github/workflows/cbz-federation-drift.yml

@@ -0,0 +1,71 @@
+name: CBZ federation drift
+'on':
+  pull_request:
+  push:
+    branches: [main]
+  schedule:
+    - cron: '41 4 * * *'
+  workflow_dispatch:
+permissions:
+  contents: read
+jobs:
+  self-test:
+    name: drift-crawler-self-test
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          persist-credentials: false
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: '3.11'
+      - name: Behaviour and mutation tests in both interpreter modes
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          cd tests
+          for mode in normal optimized; do
+            flag=""; [ "$mode" = optimized ] && flag="-O"
+            python -B $flag -m unittest test_cbz_drift test_cbz_drift_adversarial_01a103c8 test_cbz_drift_canonical_input test_cbz_drift_pr_trigger_01a11c48 -v 2>&1 | tee "$RUNNER_TEMP/drift-$mode.log"
+            grep -Eq '^Ran [1-9][0-9]* tests? in ' "$RUNNER_TEMP/drift-$mode.log" || { echo "::error::drift $mode run collected 0 tests"; exit 1; }
+          done
+  crawl:
+    name: federation-drift
+    needs: self-test
+    runs-on: ubuntu-latest
+    timeout-minutes: 30
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+          path: fed/main
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97
+        with:
+          python-version: '3.11'
+      - name: Crawl the federation from its workspace seed
+        env:
+          PYTHONDONTWRITEBYTECODE: '1'
+        run: |
+          set -euo pipefail
+          # Only the seed is named here. Every other repository, and its ref, is discovered
+          # from the seed's pins, submodules, repository list, registry and lake manifests.
+          git clone -q https://github.com/d6g8k5htny-coder/Universal-Law-Workspace.git fed/Universal-Law-Workspace
+          head=$(git -C fed/main rev-parse HEAD)
+          status=0
+          for at in pins tips; do
+            python -B -S fed/main/tools/cbz_drift/crawl.py --seed d6g8k5htny-coder/Universal-Law-Workspace \
+              --search fed --clone-into fed --fetch --at "$at" \
+              --override "d6g8k5htny-coder/main=$head" \
+              --json "$RUNNER_TEMP/drift-$at.json" || status=$?
+            [ "$status" -le 1 ] || { echo "::error::drift crawler error (exit $status)"; exit "$status"; }
+          done
+          exit "$status"
+      - if: always()
+        uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9
+        with:
+          name: federation-drift-reports
+          path: ${{ runner.temp }}/drift-*.json
+          if-no-files-found: warn

.github/workflows/current-site.yml

@@ -16,6 +16,10 @@ name: Current research site
       - 'tests/test_node_status_refresh.py'
       - 'tests/test_node_status_freshness.py'
       - 'cbz/evidence/node-status-freshness/run_mutations.py'
+      # inputs of the freshness suite and its mutation runner
+      - 'tools/validate_node_status.py'
+      - 'records/node_status/**'
+      - 'architecture/node-status.schema.json'
       - 'tests/fixtures/node_status_refresh/**'
       - '.github/workflows/current-site.yml'
   schedule:

AGENTS.md

@@ -22,7 +22,7 @@ wait for peer or human approval. No shared `/root` alias is an exclusive
 canonical-file owner. Prepare reversible edits in isolated branches and
 use fresh expected-head guards when changing refs; preserve recovery paths.
 
-The active coordination board remains [Agent Message Board #619](https://github.com/d6g8k5htny-coder/main/issues/619).
+The active coordination board remains [Agent Message Board #738](https://github.com/d6g8k5htny-coder/main/issues/738).
 [#684](https://github.com/d6g8k5htny-coder/main/issues/684) is the CBZ task-local
 record; [#686](https://github.com/d6g8k5htny-coder/main/issues/686) records owner
 source. No board rollover or foreign release is inferred from those links.

DECISIONS.md

@@ -34,3 +34,7 @@ Append-only. Historical source outcomes remain in their original records.
 | 2026-10-30 00:36:59 | 3 | C/runtime | Clarified Atlas control runtime in its existing guide: CPython3.9.6 yields9 preserved assertion/subtest failures across2 grader methods because callbacks arrive after teardown; currentMain11e288 hosted3.12.15 run40976675758/attempt1/job123806316839 passed31controls and2required browser methods in each mode. Preserve failures and historical30/45 counts; update the old exclusive-writer guidance to current fluid roles. No grader, test, workflow or browser policy changed. | Yes | [Actual hosted run](https://github.com/d6g8k5htny-coder/main/actions/runs/40976675758); exact source/decoded-log diagnosis; docs/cbz/ATLAS_BROWSER_REGRESSIONS.md |
 | 2026-10-30 00:36:59 | 2 | C/composition | Ruling: prepare this four-document contribution as an isolated successor of713/62292ad6 and a stacked PR, without changing the existing713 branch or resetting its current checks. Retarget to Main after that base actually lands and recheck the resulting composition. Source guards prevent overwrites; the pending base is an integration dependency, not an exclusive coordinator lock. | Yes | Original713 source and parent; current team Master; guarded source/readback records |
 | 2026-10-30 00:40:56 | 2 | C/source | Guard observed713 advance62292ad6 toaf3996f5. Recompose this same bounded registration on freshaf3996f5, preserving its strict replay-qualifier GOVERNANCE section and complete prior ledger. Original author corrected review finding: GOV and STATUS now print all6 actual reproduction commands, including unchanged MomentTail unittest discovery normal/optimized, rather than only4. Private prior proposal retained; no old result rebound to new code. | Yes | Current713 source; bounded documentation review; exact command-to-native-CI comparison |
+| 2026-10-30 00:01 | 2 | C | Removed the federation crawler's PR path filter so new topology/registry inputs reach discovery. Added a restricted subscription guard to its self-test; preserved the original failed check and the independently found comment-hidden-filter defect before fixing it. Local 55-test populations passed in both parent modes. The complete owner team reissue supersedes exclusive B-003 locks; this is an isolated compatible patch on Claude017's source, with no crawler/parser or mathematical change and no final tool/G7 admission. | Yes | [Pickup](https://github.com/d6g8k5htny-coder/main/pull/712#issuecomment-6511287308); [repair evidence](cbz/evidence/pr-trigger-01a11c48-20261029/README.md); [complete owner directive](https://github.com/d6g8k5htny-coder/main/issues/686#issuecomment-6511339492) |
+| 2026-11-01 14:40 | 2 | B/tooling | Registered the empirical statement check (main#726, merged d0d384b1; tool blob 020cb194) under GOVERNANCE and STATUS with its exact commands, the hosted navigation run 41242533228 / job 124659189973 (35 tests ok on CPython 3.11.17 at the merge commit) and the three-class mutation contract; coverage recorded honestly: main formal 31/31 PASS, #740 formal 59/59 PASS, Math- formal 63/63 UNSUPPORTED (exact-rational interval backend is the recorded gap). No global CLOSED guard installed; the final G0-G11 run remains required. Actor: Anthropic Claude session 01NMeK (tool author); reviews of record 01DKKe (same family, P1 fixed by follow-on) and Grok Bot agent 12 (different family). | Yes | [registration](GOVERNANCE.md#empirical-statement-check-for-core-lean-arithmetic-skeletons-bounded-registration); [#726](https://github.com/d6g8k5htny-coder/main/pull/726) |
+
+[2026-11-01 22:05 UTC] [Phase 3] [Layer C / G8] Correct the stale current-navigation statement that PR #713 is pending integration. Native PR metadata records merge 9abd2c100ae105103945073a7fa6c47b15679269 at 2026-10-31 10:18:44 UTC. Preserve the former 11e28815 source as pre-integration history, all scientific snapshot bytes and all qualification limits. This documentation correction neither replays checks nor establishes current-composition, theorem or CBZ-0 acceptance. Reversible: isolated commit; previous text retained in Git history. Evidence: https://github.com/d6g8k5htny-coder/main/pull/713 and https://github.com/d6g8k5htny-coder/main/commit/9abd2c100ae105103945073a7fa6c47b15679269 .

GOVERNANCE.md

@@ -122,6 +122,81 @@ Mission tools must be finished, documented with exact usage and verification,
 and registered here and in `TOOLING.md` before final admission. Tools are a
 means to closure, never a reason to open a general infrastructure project.
 
+### Empirical statement check for core-Lean arithmetic skeletons: bounded registration
+
+**Registered 2026-11-01 14:40 UTC; global admission of the empirical layer remains pending.**
+[main PR #726](https://github.com/d6g8k5htny-coder/main/pull/726), merged as
+`d0d384b18a409ed51061458287dde22816782210`, supplies `tools/cbz/statement_fuzz.py`
+(blob `020cb194c206d268972fcc9f50dd0707b21819d0`, SHA-256
+`1bd0f4a3059d6f040cb978691d2954deecf9a84287ce2272e48fe9ae93bdd7a7`),
+`tests/test_cbz_statement_fuzz.py` (blob `723bbd306c70f0ea66b2c461ea40da9df4d923b6`)
+and the run records under `cbz/evidence/g12-statement-fuzz-01n/`.
+
+Purpose: the addendum's empirical layer for *statements*. Kernel verification is not
+strengthened by sampling, so for every theorem registered in a formal package's
+`manifest.json` the tool parses the Lean statement and the package's own `def`s in an
+exact-arithmetic interpreter for the core-Lean subset these skeletons use, evaluates it
+independently of Lean (Python integers and `Fraction`; a float anywhere is an assertion
+failure), enumerates finite quantifier domains exhaustively (list membership, or an upper
+bound on an explicit `Nat`/`ℕ` binder only), probes just outside each domain for tightness
+and vacuity as information, and reports PASS / FAIL / UNSUPPORTED per target. Lean core
+semantics are implemented where they differ from naive arithmetic: `Nat` truncated
+subtraction, totalized division (`x / 0 = 0`, `x % 0 = x`), `Nat` floor division,
+Euclidean `Int` `/` and `%` (`Int.ediv`/`Int.emod`), numeral typing by the `binop%`
+maximal-type rule. A FAIL is a misstatement or transcription defect in the Lean text,
+never kernel evidence; UNSUPPORTED is fail-closed and makes the exit code non-zero.
+
+From a checkout of this repository, run:
+
+```
+python3 -B -S -m unittest tests.test_cbz_statement_fuzz -v
+python3 -B -O -S -m unittest tests.test_cbz_statement_fuzz -v
+python3 -B -S tools/cbz/statement_fuzz.py --package formal --selftest --json <report.json>
+```
+
+Self-verification: the 35 tests (tokenizer, Lean semantics including the six Euclidean
+division goldens of main#684/6511137449, definitions, folds, pairs, quantifiers, vacuity
+and tightness probes, fail-closed behaviour, the mutation contract, the real package) ran
+on the merge commit in the hosted `navigation` job
+([run 41242533228](https://github.com/d6g8k5htny-coder/main/actions/runs/41242533228),
+job `124659189973`, CPython 3.11.17, artifact `research-navigation-41242533228` whose
+`commit.txt` is `d0d384b1…` and whose `tests-normal.log` shows the 35
+`test_cbz_statement_fuzz` cases `ok` among 1,892) and locally in both modes with
+`-W error`. `--selftest` grades every module by a three-class mutation contract:
+guaranteed-false mutants must FAIL (each comparison replaced by its negation one conjunct
+at a time, the right-hand literal of an equality shifted by one — never `<`→`≤`),
+truth-preserving weakenings (`<`→`≤`, `>`→`≥`) must PASS, and the manifest's declared
+negative controls that change a statement must FAIL; an UNSUPPORTED or errored mutant is
+a survivor, never a kill, and a stubbed evaluator fails the unmutated control. Reviews of
+record: same-family 01DKKe
+([726/6547986788](https://github.com/d6g8k5htny-coder/main/pull/726#issuecomment-6547986788);
+one P1 fail-open domain inference found and fixed by its follow-on, tree `198c1f97`) and
+different-family Grok Bot agent 12
+([726/6548050253](https://github.com/d6g8k5htny-coder/main/pull/726#issuecomment-6548050253),
+PASS with the follow-on); Codex 01a103c8 supplied the division-semantics controls.
+
+Coverage actually observed, per package and cut:
+
+| Package | Cut | Targets | PASS | UNSUPPORTED | Mutation contract |
+|---|---|---:|---:|---:|---|
+| main `formal/` (SIDE24 skeleton) | `4712fc13` (`formal/` unchanged since) | 31 | 31 | 0 | 98/98 killed, 12 weakenings kept, 7 declared controls FAIL |
+| main #740 `formal/` (SIDE24 + P15 skeletons, candidate) | `43b10c6f` | 59 | 59 | 0 | 184/184 killed, 14 declared controls FAIL |
+| Math- `formal/` (`ResearchFormalCoreR1`, Mathlib real analysis) | `19a55750` | 63 | 0 | **63** | — |
+
+Gate mapping: G0/G5/G6 use the documented tests and the mutation contract; G8/G9/G11
+require this exact scope, runnable commands and self-verification record. For a new
+CLOSED claim on a core-Lean arithmetic statement, a PASS at the same source cut as the
+kernel receipt is the applicable empirical validation this registry recognises, recorded
+with the report file's SHA-256 and the `manifest_sha256` it binds; it adds nothing to and
+takes nothing from G2–G4. The tool does not cover Mathlib real analysis, binders before
+the colon or unbounded quantifiers, so the Math- core's 63 statements remain explicitly
+unsupported by the empirical layer; an exact-rational interval backend for
+`Real.exp`/`log`/`sqrt` (offered by Claude017, main#684/6532742483) is the recorded gap.
+This component installs no global CLOSED guard and does not complete the common final
+G0–G11 run. Maintenance owner: none; stdlib only, self-contained. Actual executor:
+Anthropic Claude, Claude Code session `session_01NMeKEismAyeqgdB4sy2NJU`; scientific
+effect NONE.
+
 ### Finite MomentTail empirical component: bounded registration
 
 **Registered 2026-10-30 00:36:59 UTC; global admission remains pending.**

STATUS.md

@@ -15,9 +15,10 @@ cross-repository synchronization and final common G0-G11 pass remain unfinished.
 Source-only checks and individual successful jobs do not complete the twelve
 baseline criteria. The [foundation candidate #695](https://github.com/d6g8k5htny-coder/main/pull/695)
 is a candidate handoff, not the current default-branch baseline.
-At this observation, current Main is `11e28815163e15223e8827fe6ff47a1faaf36ebd`.
-PR #713 is pending integration; its replay sources, controls and this documentation
-must be qualified at their final composed source. The proof catalogue and other
+The pre-integration Main source was `11e28815163e15223e8827fe6ff47a1faaf36ebd`.
+[PR #713](https://github.com/d6g8k5htny-coder/main/pull/713) merged on 2026-10-31 at 10:18:44 UTC
+as `9abd2c100ae105103945073a7fa6c47b15679269`; its qualification evidence
+remains bound to the sources actually checked, not automatically to later compositions. The proof catalogue and other
 foundation material in #695 are pending, not an admitted default-branch baseline.
 This intermediate entry is not a completed cold-start acceptance test.
 
@@ -45,6 +46,24 @@ not full AST/type/theorem synchronization. New gating tools require documented
 commands and self-verification before admission; unavailable or unsupported
 coverage remains explicit. No documented command here runs all G0-G11 yet.
 
+The empirical statement check for core-Lean arithmetic skeletons is a registered
+bounded component on `main` ([PR #726](https://github.com/d6g8k5htny-coder/main/pull/726),
+merged `d0d384b18a409ed51061458287dde22816782210`). From a checkout, run:
+
+```
+python3 -B -S -m unittest tests.test_cbz_statement_fuzz -v
+python3 -B -O -S -m unittest tests.test_cbz_statement_fuzz -v
+python3 -B -S tools/cbz/statement_fuzz.py --package formal --selftest --json report.json
+```
+
+It evaluates every registered Lean statement of a formal package independently in exact
+arithmetic with Lean-core semantics and grades itself by a mutation contract; the
+[registration](GOVERNANCE.md#empirical-statement-check-for-core-lean-arithmetic-skeletons-bounded-registration)
+records commands, hosted self-verification and limits. At [registration #741](https://github.com/d6g8k5htny-coder/main/pull/741): main `formal/` 31/31
+PASS; the Math- core's 63 real-analysis statements are UNSUPPORTED, which is the honest
+coverage at that source cut, not a pass. A PASS is statement-level evidence
+only: not kernel evidence, not scientific acceptance, not the common G0-G11 run.
+
 The finite MomentTail component is a registered bounded candidate in
 [Math PR #545](https://github.com/d6g8k5htny-coder/Math-/pull/545), exact source
 `e1cf617b6bc979b75d420f28df17ddad59426522`. In an isolated checkout of that Math