docs/plans: graph-port Plan A revision 12 (two A-1 scopes after the 41fe7fe review; per-class staged rule; TCB digest and absent-digest fixes required)

[MaxGhenis]

Plan revision 12, drafted from the clause-by-clause review of the A-1/A-2 build at exact head 41fe7fe (REVIEW.md sha256 01c768fb1523b0c7…) and the shadow child at df10c8b (REPORT.md sha256 0e06f2cf9dbef8e5…):

• A1 / §4: A-1 is accepted in two named scopes — FIXTURE (met at 41fe7fe) and LIVE (not met; excluded classes disclosed). Any acceptance names its scope.
• §5: the staged-bytes rule is per source class; a global path-fragment blacklist is a defect (F2); implemented in the child.
• §4 A-1 accepted-when: TCB digest in every run artifact (F3) and absent declared digest fails (F4); both implemented in the child.
• NEW A2a: kernel totality contract — total over admitted inputs or a typed gate failure, never an interpreter error; printed NaN, over-limit digit runs (limit pinned as a TCB component) and arities above int64 are admitted inputs; the three measured counterexamples (T1–T3) are open A-2 defects until fixed and re-measured.
• A-3 does not start before this revision is agreed.

Gate: peer Astra through subfleet gate plan, after the C20 ceremony frees the Codex home. Do not merge before agreement. Plan file sha256 at this head: 94beaa0ad0b7d0ba1eefb7ecf92decba7fd3f95060de0ed28d54b054d5f173e5. Gate round 1 (20260905-200417-plan-6deac85c) requested one change, folded: A-5 requires A-1 at LIVE scope.

🤖 Generated with Claude Code

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
social-security-model	Ready	Preview	Sep 6, 2026 12:10am UTC