cycle 80: officer CONFIRMED + post-seed run VERIFIED HEALTHY (153 acknowledged, 0 NEW) — asserted->verified gap closed; c78 installable-now; +temporary-shim & status-key-noise notes; summary table updated

188b25f74423fc072b379d9160b43bfcdc196cfe · 2026-06-18 02:41:58 -0700 · Steve Abrams
Files touched

M scripts/canary-install/INSTALL-RUNBOOK.md
Diff

commit 188b25f74423fc072b379d9160b43bfcdc196cfe
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Thu Jun 18 02:41:58 2026 -0700

    cycle 80: officer CONFIRMED + post-seed run VERIFIED HEALTHY (153 acknowledged, 0 NEW) — asserted->verified gap closed; c78 installable-now; +temporary-shim & status-key-noise notes; summary table updated
---
 scripts/canary-install/INSTALL-RUNBOOK.md | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/scripts/canary-install/INSTALL-RUNBOOK.md b/scripts/canary-install/INSTALL-RUNBOOK.md
index 871f47a..d522f78 100644
--- a/scripts/canary-install/INSTALL-RUNBOOK.md
+++ b/scripts/canary-install/INSTALL-RUNBOOK.md
@@ -6,7 +6,7 @@
 | Guard | Watches | Built/hardened | State now |
 |---|---|---|---|
 | **c77 sitemap-integrity** | population-collapse (the April-2026 mass-archive failure mode) | `sitemap-integrity-canary.mjs` (baseline 72,462) | HEALTHY — **ready to install now** |
-| **c78 zero-dollar-orderable** | free-checkout (orderable $0 variants, P1) | `zero-dollar-orderable-canary.mjs` | ALERTs on the open 145+8 — **install AFTER the gated reprice** (see §3) |
+| **c78 zero-dollar-orderable** | free-checkout (orderable $0 variants, P1) | `zero-dollar-orderable-canary.mjs` + `ack-baseline.json` (153 known-open tuples, c80) | **INSTALLABLE NOW** — set-difference ack-baseline alerts only on a NEW regression (see §3) |
 | c75 dw-map-auditor extension | price/mislabel/disco (spec) | spec-only | not built yet (future cycle) |
 
 All three use the existing `scripts/promote-canary.sh` (writes the plist, PRINTS the bootstrap — never bootstraps; install is Steve-gated by design) + the new `scripts/canary-install/run-canary-with-cncp.sh` wrapper (adds the CNCP-alert-on-exit-3 that the bare canary lacks).
@@ -66,6 +66,8 @@ launchctl kickstart -k gui/$(id -u)/com.steve.dw-sitemap-integrity   # run-now t
 - **Re-baseline to 0 after the gated reprice:** once Steve clears the 145+8, `rm ack-baseline.json` (or re-run `ACK_SEED=1` → it'll seed 0) so the guard's "acknowledged" set is empty and ANY future $0-orderable fires. Verify the reprice via a manual run first.
 - **Modes:** `ACK_SEED=1 node …` (re-acknowledge the current set); `SELFTEST=1 node …` (instant logic check, no scan — proves NEW fires + acknowledged quiet + draft→active escalation fires).
 - **Prior fallback (if you'd rather not run with an ack-baseline):** reprice first, then install with `ack-baseline.json` deleted (absolute-gate mode: alerts on any hit). The ack-baseline path above is preferred — it protects during the gated-reprice window.
+- **⚠️ The ack-baseline is a TEMPORARY reprice-shim, NOT a permanent fixture (c80 officer):** the `handle#position#status` grain cannot distinguish "still-open" from "fixed-then-identically-re-broke" — if a repriced handle is later re-imported at the SAME position+status with $0, it reuses an acknowledged tuple and is silently acknowledged. Bounded + narrow, but the rule is: **`rm ack-baseline.json` right after the gated reprice** (→ absolute-gate, every $0 fires) so this window can't hide a re-break.
+- **Expect occasional benign NEW fires (c80 officer):** because position is in the key, a benign variant-reorder of an acknowledged $0 (`#3#ACTIVE`→`#4#ACTIVE`) or an active→draft re-draft fires as NEW. This fails SAFE (alerts, never silently passes); just re-baseline (`ACK_SEED=1`) after a known benign reorder.
 - Either way the install mechanics are identical to §2 (promote-canary.sh + wrapper + PlistBuddy + bootstrap).
 - **Nuance (officer):** c78's coverage floor is `MIN_ACTIVE_SCAN=50000`. If the active catalog ever dips near that (e.g. *during* an archive event), c78 flips to INCONCLUSIVE (exit 2, posts a card) — that's the gate refusing to trust a shrunken scan, NOT the free-checkout failure it watches. Read an INCONCLUSIVE card as "scan was incomplete/small," and cross-check the c77 sitemap-integrity crater alarm (the actual population-collapse detector).
 
@@ -101,3 +103,14 @@ The officer traced the full chain + read the watchdog registry. Chain + exit-pro
 - **Minor (addressed):** log-growth → truncate-on-start added to the wrapper. No relative-cwd bug (both canaries use `fileURLToPath`-derived absolute paths under launchd's `/` cwd).
 
 REVISE → chain merge-ready; the two gaps (live-verified CNCP payload + explicit watchdog hbAbs entries) fixed so a clean install is also alert-wired AND liveness-covered. Install remains Steve-gated (every launchctl/registry-edit step is his to run).
+
+---
+## 🏛️ OFFICER SIGN-OFF (c80 — ack-baseline) — vp-engineering: CONFIRMED (1 verification gap closed in-cycle + 2 notes)
+The c80 enhancement makes c78 installable-now via a set-difference acknowledged-baseline. Officer review:
+- **Set-difference logic CORRECT, `handle#position#status` grain right for its core jobs:** verified against the real seeded ack-baseline (153 unique tuples, 145 ACTIVE + 8 DRAFT, no cross-status collisions). Stays quiet on the known 145+8; a new $0 import = new handle = fires; draft→active escalation fires (status in key); SELFTEST proves all three (NEW=1, ack=2, escalation fires → PASS). Faithfully implements the c78/c79 set-difference (NOT count-delta) prescription.
+- **VERIFICATION GAP (the officer's one ask) — CLOSED in-cycle:** the "post-seed run = HEALTHY" claim was asserted from logic+SELFTEST, not executed. → **ran a real post-seed normal run (full 71,733 active + 6,784 draft scan, complete, coverage gate PASS): `acknowledged-pending-fix: 153 | NEW (beyond acknowledged): 0` → VERDICT: HEALTHY (exit 0).** Asserted → VERIFIED. The canary now sits HEALTHY with the 153 known-open quietly tracked, and would exit-3 only on a NEW tuple.
+- **Acknowledged-tuple-reuse false-clean (bounded) → documented as a TEMPORARY shim:** the grain can't distinguish still-open from fixed-then-identically-re-broke; mitigated by the standing `rm ack-baseline.json` after the reprice. Added the "temporary reprice-shim, not a permanent fixture" note to §3.
+- **Status-in-key false-POSITIVE noise (fails SAFE):** a benign variant-reorder/re-draft of an acknowledged $0 fires as NEW (alerts, never silently passes). Added the "expect occasional benign NEW fires, re-baseline after a known reorder" note to §3.
+- **ACK_SEED-on-incomplete correctly refused** (exits 2, never enshrines a partial crawl); re-baseline-to-0 coherent (rm → absolute-gate); token-missing → INCONCLUSIVE not false-HEALTHY; coverage floor decoupled from RL (survives the reprice).
+
+CONFIRMED — set-difference faithful, the only gap (asserted-vs-verified HEALTHY) closed by a real post-seed run, two grain-limitation notes added to §3. c78 is installable-now (Steve-gated) and protects against a NEW free-checkout regression during the gated-reprice window.
← fc4d261 cycle 80: runbook §3 updated — c78 now INSTALLABLE-NOW (ack- · back to Dw Yolo Loop · cycle 81: O&L basis decode — 90 = CURRENT-live RRP-basis mis 46b7a60 →