chore(measure): gating controls passed, both identity runs reproduce their archives

No code. This commit records that the Arm E round is allowed to be read.

Seven gating controls, all green, each one asking whether the SHIPPED rule is
the rule being measured:

- `src/` diff touches only `propose.py` and `cli.py`; 136 changed lines in
  `propose.py`, most of them `#:` comments.
- The consumer bundle `K2-bundle-20260903` is unchanged against the literals
  already published in the Arm D report: 1108 files and
  9cd745194346cda0c70eab9c7136fa44506203bbe85bc17d7eff2766c6e9b4d1 under
  LC_ALL=C. Pinned to a published value rather than compared before-and-after,
  because a pair both taken this round cannot see a mutation that predates it.
- 0 network imports in the proposer and in both instruments.
- Arm B identity: the whole corpus re-run with no flags at
  --proposed-at 2026-09-03T00:00:00Z is byte-identical to
  K2-plans-baseline-20260907. diff -r exit 0.
- Arm D identity: the whole corpus re-run with --outline-run 3 at
  --proposed-at 2026-09-07T00:00:00Z is byte-identical to
  K2-plans-armd-20260907. diff -r exit 0.
- Door counts: 4 of 43 .err files record FAILED, so extractable is 39/43,
  unchanged, and measured from the run artifacts rather than by building a
  bundle nobody needs.

Three things about the identity controls are deliberate. They compare against
the ARCHIVES, not against a second run of the same binary, which is the only
way to detect a flag accidentally defaulted on. The json and .err counts are
asserted BEFORE the diff, so `diff -r` cannot exit 0 by comparing nothing. And
`_index.txt` is INCLUDED in the comparison rather than excluded: the Arm D
round's published block both omits its generation and excludes it, which would
let NN.json name a different document across two runs without anything saying
so.

The Arm B run is not bookkeeping. It is the corpus-level half of the promise
that --outline-run 0 with the flag absent is still Arm B, and it is what makes
the Arm B row rated later in this round rest on verified bytes rather than on
an archive nobody re-checked.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
This commit is contained in:
Kjell Tore Guttormsen 2026-09-07 11:25:33 +02:00
commit 5184a59162

Diff content is not available