board: post-merge arc + state entries for #880 — and record the arc gap for #862/#875/#876/#879

.claude/board/LATEST_STATE.md

@@ -1,3 +1,19 @@
+## 2026-08-03 — branch `claude/x265-x266-plans-review-h9osnl` (PR #880, MERGED `6bc9115`) — the kanban-64k-inverted-awareness plan + four honest module headers
+
+**Plan landed.** `.claude/plans/kanban-64k-inverted-awareness-v1.md` (W0–W6) over the two operator anchors: (a) real thinking at 64k via kanban orchestration **in parallel**, (b) inverted awareness — ontologies as the frozen cathedral an observation layer reads into, with a statistical witness. Board rows in the same commit (INTEGRATION_PLANS prepend, STATUS_BOARD D-KIA ×7, `write-on-behalf.md` caller-status supersession). **No code paths changed.**
+
+**What is now pinned, before any measurement:**
+- **W2's falsifier thresholds are pre-registered** and not adjustable after the run: median of ≥5 runs after one discarded warm-up; can-fire = ≥2× speedup at ≥4,096 owners with ≥100 µs per-thought busy-work; stay-silent = trivial (<1 µs) bodies within ±10 %. Kill condition: failure regrades claim (a) to "64k-scale **sequential** sparse cycles" — still true, different claim.
+- **Dichotomous-statistics discipline:** φ not "Pearson", KR-20 not "α", κ-family not "ICC"; ICC only on a non-binary escalation, named at its site. Reliability ≠ validity — the witness is capped at reliability until an external criterion exists.
+- **`MailboxFleet`-over-the-registry is WITHDRAWN** as the W1 shape (structurally impossible: the trait's synchronous `owner()`/`owner_mut()` borrows can't reach actor-private state behind `where_is`, `cycle_driver.rs:183-190`). A1 is now a two-seam **design gate** — guarantee-dummy single owner vs per-mailbox `KanbanMsg::Advance` apply; both keep one-writer-per-mailbox with no ack state. W1 chooses.
+- **The HashMap fleet is deliberate** (operator ruling this session): an order-free keyed store; ordering is recovered by `temporal.rs` HLC deinterlace at READ time. Parallelism lives in the thought phase; apply stays order-free keyed writes.
+
+**Four module headers now report state, not intent** (a `head -5`/grep tells the truth): `actors/medcare_actor.rs` = UNWIRED STUB, never spawned (`supervisor::StubConsumerActor` is what the tree spawns, supervisor.rs:368), owns no bridge, emits no audit — and is publicly re-exported, so removal is breaking; `actors/mod.rs` = no concrete actor ships there; `soa_bake/mod.rs` = only the label-codebook half is implemented, the rest is type scaffolding; `bridges/medcare_bridge.rs` = the `#[deprecated]` migration pointer is now above the fold.
+
+**Open, named:** the `ConsumerActor<P: PortSpec>` generalization (would re-derive the stub actor as a one-line alias — the actor-half of the bridge collapse onto `UnifiedBridge<P>`; #570 did that for OpenProject/Redmine and explicitly deferred Healthcare until the codebook promotion, which landed in a later, unnamed PR); the ownership question for `soa_bake`'s scaffolded half now that OGAR ships complete bakes emitting `NodeRow` bytes; A3 `LanceShardSink` still deferred behind its own crash falsifiers.
+
+**Process, recorded not buried:** an operator-ruled public/private separation-of-concerns violation occurred mid-arc and was remediated the same session (files scrubbed, three unmerged commits rewritten into one and force-pushed with lease — PR branch only, `main` untouched — PR body rewritten, bot comments patched). Residue stated honestly at the time: orphaned SHAs may persist until GC, edit histories remain in the UI, and pre-existing occurrences on merged `main` were surfaced for an operator decision rather than rewritten unilaterally. **Also found:** the PR arc's memory practice has broken again — **no `PR_ARC_INVENTORY` entry exists for #862, #875, #876, or #879**. The gap is now recorded at the top of that file; reconstruction is queued, not done.
+
 ## 2026-08-02 — branch `claude/medcare-rs-continue-ufsazd` — PR #879 review round: recovery/data-integrity holes fixed + scope honesty (grain-of-salt audit)
 
 Operator-forwarded review (grain of salt); each finding verified against code before acting. **Accepted + fixed (all real):**

.claude/board/PR_ARC_INVENTORY.md

@@ -33,6 +33,31 @@
 > - **Docs** — knowledge files produced (immutable)
 > - **Confidence (YYYY-MM-DD):** — the ONLY mutable field
 
+## 2026-08-03 — lance-graph #880 — kanban-64k-inverted-awareness plan v1 (two-anchor arc) + a doc-header honesty pass on four unwired/partial modules
+
+> **⚠ ARC-GAP NOTE (2026-08-03, written with this entry).** The memory practice
+> that broke for #851–#856 (see the 2026-07-27 recovery note below) **broke
+> again**: no `PR_ARC_INVENTORY` entry exists for **#862, #875, #876, or #879**,
+> all merged between 2026-07-29 and 2026-08-02. This entry does NOT reconstruct
+> them — it records the gap so it is visible instead of silent, which is the
+> failure mode the previous recovery post-mortem named. The session that wrote
+> this entry drove #875/#876 itself and wrote no entry at the time; naming that
+> is the point. Reconstruction (forensic method: merged diffs + commit messages
+> + PR bodies + the review record, never inference) is queued, not done.
+
+**Merged:** `6bc9115` (branch `claude/x265-x266-plans-review-h9osnl`, commits `1c0959e`..`02413ef`). 3 commits, 8 files, +356/−21. Plan + board + doc-comments only; no behavioural code change.
+
+- **Added (plan)** — `.claude/plans/kanban-64k-inverted-awareness-v1.md`: waves W0–W6 over two operator anchors — (a) real thinking at 64k via kanban orchestration **in parallel**, (b) inverted awareness (frozen-cathedral ontologies read by a volatile observation layer, with a statistical witness). §0 ground-state receipts table, per-wave gates, kill conditions, honesty ledger. W0 (capability map + dichotomous-statistics decision note) is read-only.
+- **Added (board)** — `INTEGRATION_PLANS.md` prepend; `STATUS_BOARD.md` D-KIA rows (7 queued deliverables); `write-on-behalf.md` caller-status supersession (`cycle_driver.rs:516` `cognitive_pass` named as the existing production caller of `emit_bootstrap_intent`, HashMap-fleet-driven; the first ACTOR-OWNED caller narrowed to open W1 work).
+- **Added (doc-comment honesty pass)** — four module headers rewritten so `head -5`/grep reports STATE, not intent: `actors/medcare_actor.rs` (claimed to own a `UnifiedBridge` and emit a `UnifiedAuditEvent` per authorization decision — does neither; now leads "UNWIRED STUB", records that it is never spawned, that `supervisor::StubConsumerActor` is what the tree spawns, and that the type is publicly re-exported so removal is breaking); `actors/mod.rs` (claimed concrete implementations live there; none ship); `soa_bake/mod.rs` (only the label-codebook half is implemented — address column, edge pairs, `ClassView` inheritance and the bake driver are type scaffolding); `bridges/medcare_bridge.rs` (`#[deprecated]` existed on the type but was invisible above the fold; migration pointer now first line).
+- **Locked** — **pre-registered** parallelism falsifier thresholds for W2, fixed before any run and explicitly not adjustable after: median wall-clock of ≥5 runs after one discarded warm-up; can-fire = ≥2× speedup at ≥4,096 owners with ≥100 µs per-thought busy-work; stay-silent = trivial (<1 µs) bodies within ±10 %. **Dichotomous-statistics naming discipline**: φ not "Pearson", KR-20 not "α", κ-family agreement not "ICC"; ICC only on a non-binary escalation path, named at its site. **Reliability ≠ validity** — the witness claim is capped at reliability until an external criterion exists. **The HashMap fleet is deliberate**, not a placeholder: an order-free keyed store whose ordering is recovered by `temporal.rs` HLC deinterlace at READ time (operator ruling, recorded during this PR's review).
+- **Withdrawn (design, pre-merge)** — `MailboxFleet`-over-the-ractor-registry as the W1 shape. Verified structurally impossible against `cycle_driver.rs:183-190`: the trait's **synchronous** `owner()`/`owner_mut()` borrows cannot reach actor-private state behind `where_is`, and keeping a second owner to satisfy the trait would break single-writer. A1 became a two-seam **design gate** (guarantee-dummy single-owner vs per-mailbox `KanbanMsg::Advance` apply — both preserving one-writer-per-mailbox with no ack state); W1 chooses.
+- **Deferred** — A3 `LanceShardSink` (real durability) stays behind its own crash falsifiers; the `ConsumerActor<P: PortSpec>` generalization that would re-derive `medcare_actor.rs` as a one-line alias — the actor-half of the bridge collapse onto `UnifiedBridge<P>` (#570 did that for the OpenProject/Redmine ports and **explicitly deferred** the Healthcare one "until Healthcare gets promoted into the codebook"; that promotion landed later, in a PR the bridge's own doc-comment does not name — the exact PR is unverified here rather than guessed); the ownership question for `soa_bake`'s scaffolded half now that OGAR ships complete bakes emitting `NodeRow` bytes.
+- **Review** — three external rounds, every finding verified against source before acting. Consistency round (3): a κ/ICC contradiction between the C2 rule and the D3 fusion measure; a task reference that resolved to an unrelated GitHub PR (qualified as session-local everywhere); a stale "no production caller" ground-state row. Inline round (4): a missed wave-table gate row; the `write-on-behalf.md` caller status. External P1/P2: the `MailboxFleet` impossibility (above) and vague W2 thresholds ("materially below"/"must converge") — the PR's own inertness rule turned on itself, fixed by pre-registration. **Claim-ceiling check passed clean twice** (claim (a) conditional on W2, claim (b) capped at reliability). **Process finding:** the "no production caller yet" fact went stale **three times** on this one branch; the durable form is citing the call site, never asserting the absence.
+- **Process (governance)** — an operator-ruled **separation-of-concerns violation** occurred mid-arc: private-consumer identifiers were written into public plan/board text, the PR body, and PR comments. Remediated the same session — source files scrubbed, the three unmerged commits rewritten into one clean commit and force-pushed (`--force-with-lease`, unmerged PR branch only; `main` never touched), PR body rewritten, bot comments patched via REST. Honest residue recorded at the time: force-push removes refs but GitHub may retain orphaned SHAs until GC, comment/PR-body edit histories persist in the UI, and **pre-existing** occurrences on merged `main` history (older board entries, crate filenames) were surfaced for an operator decision rather than rewritten unilaterally. The standing lesson: the public/private boundary is a *drafting-time* rule, not a review-time cleanup.
+- **Docs** — the plan; the four module headers; board files per the mandatory hygiene rule.
+- **Confidence (2026-08-03):** working as a *plan* — no code paths changed, so nothing here can regress behaviour. Its central claims are deliberately unproven: claim (a) is CONJECTURE until W2 measures it against the pre-registered thresholds, claim (b) is capped at reliability. The doc-header pass is verified mechanically (diff adds only `//!` lines; neither edited file appears in a `cargo fmt --check` diff — though `lance-graph-ontology` carries extensive PRE-EXISTING fmt drift in `hydrators/` and `odoo_blueprint/`, untouched here).
+
 ## 2026-07-27 — lance-graph #856 — Base17 fold ceiling measured DIMENSIONAL + GOLDEN_STEP proven a relabel + #855's 11 post-merge review comments closed
 
 > **Recovery note (2026-07-27, forensic session):** this entry, and the five below it down through #851, were reconstructed after the arc's memory practice broke down for six PRs in a row (#851–#856): no `PR_ARC_INVENTORY` entry was written for any of them at the time, and no handover was left. Sourced only from merged diffs, commit messages, PR bodies, and the GitHub review-comment record — never from inference. See `.claude/handovers/2026-07-27-*-arc-841-856-postmortem.md` for the full account of how the gap happened.