docs: ledger Cycle-3 verification/reconciliation record; TK-10097

ef78cf70f5add58cf502aa15cbe21e5c9d2459e5 · 2026-08-01 11:17:27 -0700 · Steve Abrams

Files touched

M docs/LOOP-LEDGER.md

Diff

commit ef78cf70f5add58cf502aa15cbe21e5c9d2459e5
Author: Steve Abrams <steve@designerwallcoverings.com>
Date:   Sat Aug 1 11:17:27 2026 -0700

    docs: ledger Cycle-3 verification/reconciliation record; TK-10097
---
 docs/LOOP-LEDGER.md | 19 +++++++++++++++++++
 1 file changed, 19 insertions(+)

diff --git a/docs/LOOP-LEDGER.md b/docs/LOOP-LEDGER.md
index c67a276..4e01f53 100644
--- a/docs/LOOP-LEDGER.md
+++ b/docs/LOOP-LEDGER.md
@@ -39,6 +39,25 @@ final verdict → log → reschedule. Cost is $0/cycle (all local, synthetic dat
 - Sec 2.5 `raw_payload` encryption marker in `ingest.py` `CanonicalProperty` — AES-256-GCM + KMS path.
 **Gate:** 7/7 tests pass. All work reversible/synthetic; no Steve-gate triggered.
 
+### Cycle 3 — verification + reconciliation pass (this session; commits 9fbefae/509f657/789f72c)
+Corrections to the record above after live verification (VERIFY-BEFORE-ACTING):
+- NAUPA II fixed-width parser is REAL and tested end-to-end (registry dispatch, cents→dollars,
+  idempotency, masking). NAUPA III XML is NOT built yet — still Cycle-4 backlog (the earlier
+  "stub" note was aspirational).
+- `docs/jurisdictions.json` (not `data/` — that path is gitignored): **51** entries (50 states + DC).
+- **Regression caught + fixed:** the M1 refactor of `complete_state_submission` reused the base
+  idempotency key and re-collided with `queue`'s SUBMITTING event (C3-variant). Namespaced to
+  `:transition`; Cycle-2 regression test now green.
+- **Strategic conflict reconciled:** `docs/03` revenue model was consumer **finder-fees** — which
+  the thesis + brief EXCLUDE at launch (finder-law exposure, conflicts with the state customer).
+  Rewritten to B2G government-paid (~$8.75M ARR at 35 jur). Flagged for Steve to veto.
+- **Guardrail incident:** the tripwire's install-time test accidentally committed an SSN-laced
+  `LEAK_TEST.csv`; caught, commit excised from history, hook then VERIFIED to block SSN (exit 1)
+  and to pass clean commits. The tripwire is installed at `.git/hooks/pre-commit`.
+- **Test state now: 4 suites green** (smoke, cycle2 hardening, cycle3 naupa+blocking, cycle4 fairness).
+- **Fairness fix:** `blocking_keys` no longer early-returns on empty-norm (CJK/Arabic) names —
+  they fall through to geo keys so no owner is un-indexable.
+
 ## Cycle 4 — planned (DTD to select highest-value item at next loop fire)
 Candidate items (in rough priority order):
 - FastAPI search endpoint — wire masked_search to a real ASGI app + OpenAPI spec (Phase 1 blocker).

← 789f72c verify: clean commit passes tripwire · back to Unclaimed Property Platform · auto-save: 2026-08-01T11:36:26 (2 files) — services/common/r 3d2a81a →