docs(soa): sync migration plan with cycle-ownership architecture (repo-in-sync)

.claude/board/AGENT_LOG.md

@@ -1,3 +1,32 @@
+## 2026-06-18 — 5+3 council: mailbox-belief-update-and-substrate-test-v1 (design, no code)
+
+**Main thread (Opus) + 8-agent council.** Branch `claude/soa-cycle-ownership-sync`. Question: should within-mailbox belief change be a per-item AriGraph belief update ("this thought made me smarter, what did I learn"), best-cased with Sudoku/goban/deepeval?
+
+**Builders (5):** trajectory (DERIVED read, witness arc IS the revision log, emit at Commit not consume), dto-soa (FITS-COLUMN, no new layer), creative-explorer (2nd-order: competence self-model; 2 axes ΔF+ΔStaunen, single signed delta is the dilution), contradiction-cartographer (**P0: net Δ⟨f,c⟩ is LOSSY** — averaging hides revision-vs-contradiction-commit; carry signed residual + regime tag + qualia delta, reuse `support`/`dissonance`), convergence (single-step delta = OPPORTUNITY `belief_delta()` no new column; multi-cycle arc = D-MBX-A3 not free; `last_write_cycle` doesn't exist yet, `last_active_cycle`+`current_cycle` give the N+1 endpoint only).
+
+**Critics (brutal):** cross-domain-synthesizer — Sudoku↔edge-Weyl **[S] DROP** (rhyme; two real Weyls in codebase, neither is this), Sudoku field-prop TEST-HARNESS-ONLY (confluence regression), goban **[H] MECHANISM** for support/capture/ko (DROP influence leg [S]), deepeval **DROP** (Python LLM-judge = firewall breach; cherry-pick only the trivial threshold shape). theorem-checker — Sudoku↔Weyl **[S]** (20-regular vertex-transitive → maximally degenerate spectrum = OPPOSITE of φ-Weyl degeneracy-breaking; real statement is a Hoffman coloring bound [G], not Weyl), constraint-prop↔VSA **[H]-skeleton/[S]-semantics** (Tarski fixpoint shared; exact/finite/lossless vs statistical/continuous/lossy differ in the load-bearing property), a Sudoku harness certifies speed+correctness in the deterministic limit ONLY — not the spectral/concentration property.
+
+**Operator reframe (resolved the critique):** the test is NOT the Weyl spectral connection — it's TWO axes: (1) THROUGHPUT "16M sudoku in 3.4 min" (exact-oracle workload, hard speed+correctness number) vs (2) LEARNING "thinking-style improved exponentially, ceiling x" (= φ-1 humility; the belief-update learning curve). They compose: Sudoku = workload, learning-curve = belief-update measured over it.
+
+**Outcome:** plan `mailbox-belief-update-and-substrate-test-v1.md` created, slots S2.5b (after the write contract). Verdict: belief-update = derived read (LAND), carry the non-lossy 4-tuple; throughput test valid (drop Weyl label); deepeval dropped. No source/test change — design only.
+
+## 2026-06-18 — 5+3 council: mailbox-cycle-aware-write-contract-v1 (design, no code)
+
+**Main thread (Opus) + 8-agent council.** Branch `claude/soa-cycle-ownership-sync`. Drafted `.claude/plans/mailbox-cycle-aware-write-contract-v1.md` (the next code deliverable named by `E-SOA-CYCLE-OWNERSHIP` rule 1) and ran the operator-mandated 5+3.
+
+**Builders (5):** convergence (OQ-B → reuse `SoaEnvelope::cycle()`, NO version bump; OQ-A → two stamps, phase-pack deferred `OQ-CSV-CYCLEPACK`), dto-soa (FITS-COLUMN/EXTENDS-CANONICAL; `WriteCell` must stay a staging view), trajectory (`temporal.rs` is read-only — plan over-claimed a write seam; HLC keys within-lane order, `current_cycle` keys the lane; OQ-C → Aware-buffer), integration-lead (slots S2.5 pre-S3; 3 increments; not blocked by surrealdb; OQ-D → `WriteOutcome` enum), container-architect (spawn pointer = `identity` 24-bit new `u32` field, not `mailbox_id`; **gate MUST be wrap-aware** else 8–40 min sweep misclassifies post-wrap; `WriteCell` carries `(row,cycle)`; OQ-B no-bump holds iff identity stays in key).
+
+**Critics (3):** brutally-honest → **HOLD** on 2 P0s (temporal.rs write-sink fiction + unreachable feature-graph) — both CLEARED by operator direction (de-interlace = addressing via GUID identity tail, stale handling LOCAL, no planner dep); reversed 2 builder leans (OQ-D infallible not Result; setters stay `pub`+`#[doc(hidden)]` not `pub(crate)` — breaks `tests/w2_differential.rs`). iron-rule → **YIELDS-WITH-AP** (no violation; conditional on no-production-blind-path guard + `last_write_cycle`/`identity` in `reset_row`+field-isolation SAME commit). baton-handoff → **CATCH-CRITICAL**: `BackingStoreWrite::Singleton(&BindSpace)` has no `current_cycle` → uniform gated signature returns unconditional `Accepted` = C2-divergence sentinel-lie; fix = Singleton cycle-blind-by-construction. CATCH-LATENT: `mailbox_id`(u32)→`NodeGuid::identity`(24b) panics-not-corrupts if >0x00FF_FFFF.
+
+**Outcome:** all fixes folded into the plan (resolved OQs A–E, P0 addressing rewrite, wrap-aware gate, Singleton contract, test/guard same-commit requirements, 3-increment cascade). Verdict: **LAND as S2.5**, code 5+3-clean. Cold TS+kanban stay Lance-native (lancedb 0.30 / lance 7). No source/test change this entry — design only.
+
+## 2026-06-18 — repo-sync: SoA cycle-ownership architecture into the migration plan (no code)
+
+**Main thread (Opus).** Branch `claude/soa-cycle-ownership-sync`. Operator directive: tie the converged BindSpace→SoA architecture into the plan to bring the repo in sync, before the code wiring's 5+3. Docs only.
+
+Captured (plan ERRATA ADDENDUM 2026-06-18c + `E-SOA-CYCLE-OWNERSHIP`): (1) cycle ownership per-mailbox/per-cycle, LE-contract-enforced on tenant + envelope — the gap is the cycle-blind setters/`BackingStoreWrite` (next code deliverable, 5+3-gated); (2) multi-mailbox interlace is the target, the `backing()` ≤1 assert is W5-transitional (16k=8MB, 16M=8GB, GUID-prefix-routed via L3-resident prefix tables); (3) consumer fork — SoA-fit rotates in, non-fit gets an OGAR `classid→schema` (ClassView/Template, #530/#533); (4) OGAR + Template + Schema-version mandatory at the consumer/persistence boundary. Also recorded that #535 closed the with-engine break + the i4-codebook_index risk via the F32 anchor.
+
+No source/test change.
 ## 2026-06-18 — S-series Step 1+2: unbreak --features with-engine + F32-17D bit-exact qualia tenant
 
 **Main thread (Opus) + panel.** Branch `claude/with-engine-build-fix`. Two commits: (1) import `QUALIA_DIMS` to unbreak `--features with-engine` (engine_bridge.rs:259 used it unimported — the entire dispatch/unbind lab surface was dormant); (2) restore an F32-17D bit-exact qualia tenant.

.claude/board/EPIPHANIES.md

@@ -1,3 +1,17 @@
+## 2026-06-18 — E-SOA-CYCLE-OWNERSHIP — cycle is per-mailbox + per-cycle, LE-contract-enforced; multi-mailbox interlaces; non-fitting consumers get OGAR classid→schema
+
+**Status:** FINDING (operator-ratified architecture sync; the wiring itself is 5+3-gated before code). Repo brought in sync via the `bindspace-singleton-to-mailbox-soa-v1` ERRATA ADDENDUM 2026-06-18c.
+
+After the AoS→SoA rotation (done) + the F32 bit-exact anchor (#535), the remaining migration is bounded by four operator-ratified rules:
+
+1. **Cycle ownership = per-mailbox, per-cycle, byte-explicit in the LE contract of the tenant AND the envelope.** No cycle-blind write; nothing buffers a stale/older mailbox. The gap today: only `consume_firing` is cycle-aware; the per-row setters (`set_content/qualia/edge/meta/temporal`) and `BackingStoreWrite` are cycle-blind. Target: every write carries/checks `current_cycle` (`SoaEnvelope::cycle()` / `current_cycle` / `last_active_cycle`). This is the next code deliverable.
+
+2. **Multi-mailbox interlace is the target; `backing()`'s `debug_assert(≤1 mailbox)` is W5-transitional, not the design.** 16k open mailboxes ≈ 8 MB (512 B each); 16M ≈ 8 GB — linear, trivial. No open mailbox goes inaccessible at scale because addressing is the canonical GUID prefix-route (classid·HEEL·HIP·TWIG → ~1024 L3-resident prefix tables; trie binds the prefix, masked-load the tail). Per-cycle discipline is per-mailbox.
+
+3. **Consumer fork — not every consumer rotates into the one SoA.** SoA-fits → rotate onto the SoA columns. Doesn't-fit → a customized OGAR-driven `classid → schema` (per-class ClassView/Template, the Core-First path #530/#533). The ~10 live BindSpace consumers (cypher_bridge, sentence_crystal, fabric, learning/{scm,feedback}, spo/merkle, callcenter/transcode, planner/elevation) split along this line; they migrate at D-MBX-12 (gated on D-MBX-7 + D-MBX-9-surrealdb). Dissolves the "all nine migrate to one SoA" misframe.
+
+4. **Layering down:** at the consumer/persistence boundary, OGAR (canonical node) + Template (ClassView) + Schema-version (envelope `LAYOUT_VERSION`, currently 2) become mandatory.
+
 ## 2026-06-18 — E-QUALIA-F32-LAB-TENANT — i4 qualia is lossy for codebook_index + energies; the F32-17D BindSpace tenant is the migration's bit-exact anchor
 
 **Status:** FINDING (operator-directed "wire F32; one exactness to measure against during the migration"; 3-agent panel LAND — dto-soa FITS-COLUMN, iron-rule LAND-with-AP1-guard, truth-architect PASS-able — supplementing the earlier 8-agent S-series council).

.claude/board/INTEGRATION_PLANS.md

@@ -1,3 +1,28 @@
+## 2026-06-18 — mailbox-belief-update-and-substrate-test-v1 ("what did I learn" = NARS-revision delta + two-axis test; 5+3-ratified; slots S2.5b)
+
+**Status:** CONJECTURE / design — 5+3 COMPLETE. **Plan file:** `.claude/plans/mailbox-belief-update-and-substrate-test-v1.md`. Parent: `bindspace-singleton-to-mailbox-soa-v1` §11 + `E-SOA-CYCLE-OWNERSHIP`.
+**Owns:** the per-item belief-update ("this thought made me smarter") + the two-axis substrate test.
+- **Belief-update = NARS-revision delta, DERIVED** (not stored). Single-step = `belief_delta(row)` read method on `MailboxSoaView`, ZERO new column (`(f,c)` off `CausalEdge64` + `qualia` diff). Multi-cycle arc = the queued `D-MBX-A3` witness column (not free). Emit at Commit, not every consume (witness arc IS the revision log — parent §11.2).
+- **Must NOT be lossy net Δ⟨f,c⟩** (contradiction-cartographer P0): carry signed residual `(Δw⁺,Δw⁻)` (reuse `support`/`dissonance`) + regime tag (Revision vs contradiction-commit) + qualia delta. Accumulates into a per-mailbox **competence self-model** (creative-explorer 2nd-order).
+- **Two-axis test:** Axis-1 THROUGHPUT "16M sudoku in 3.4 min" (exact-oracle constraint workload; certifies speed+correctness, **NOT Weyl/spectral** — that's [S] RHYME, dropped); Axis-2 LEARNING "thinking-style improved exponentially, ceiling x = φ-1 humility" (native integer metric; **deepeval DROPPED** = Python LLM-judge firewall breach). They compose: Sudoku = workload, learning-curve = belief-update over it. goban = secondary belief-state harness ([H] support/capture/ko; drop influence leg).
+**Key decisions:** both math critics (cross-domain + theorem-checker) graded Sudoku↔edge-Weyl [S] RHYME (20-regular degenerate spectrum is opposite of φ-Weyl's degeneracy-breaking) — reframed to throughput per operator. Sequencing S2.5b (after the write contract).
+**Repos:** lance-graph, branch `claude/soa-cycle-ownership-sync`. Grounded by an 8-agent 5+3 (2026-06-18).
+
+---
+
+## 2026-06-18 — mailbox-cycle-aware-write-contract-v1 (every SoA write carries/checks its cycle; 5+3-ratified; slots as S2.5)
+
+**Status:** CONJECTURE / design — 5+3 council COMPLETE (LAND after plan-edit fixes, all applied). **Plan file:** `.claude/plans/mailbox-cycle-aware-write-contract-v1.md`. Child of `bindspace-singleton-to-mailbox-soa-v1` rule 1 (`E-SOA-CYCLE-OWNERSHIP`).
+**Owns:** the per-cycle write-awareness contract — `write_row(row, cycle, &WriteCell) -> WriteOutcome`, `last_write_cycle: [u32;N]` (2nd stamp), `identity: u32` spawn pointer (GUID tail), wrap-aware gate, local stale handling.
+- **Resolved OQs:** A→two stamps (phase-pack deferred `OQ-CSV-CYCLEPACK`); B→**no version bump** (reuse `current_cycle`/`SoaEnvelope::cycle()`; identity stays in key); C→Aware-buffer (`WriteDisposition`, not `EpistemicMode` reuse); D→infallible `WriteOutcome::{Accepted,Stale,Future}` (W4b `Arc` precedent = category error); E→**S2.5** pre-S3, own `mailbox-thoughtspace` gate.
+- **P0 fixes folded:** de-interlace is ADDRESSING (GUID identity tail), NOT planner-routing — `temporal.rs` write-sink was fiction (read-only `deinterlace()`) + unreachable under the feature gate; stale handling is LOCAL (no planner dep). `BackingStoreWrite::Singleton` is cycle-blind-by-construction (gate is Mailbox-only until W7 deletes BindSpace) — else a C2-divergence sentinel-lie.
+- **P1 fixes folded:** wrap-aware gate (`wrapping_sub`+half-range, else 8–40 min sweep misclassifies post-wrap stragglers); setters stay `pub`+`#[doc(hidden)]` (`pub(crate)` breaks `tests/w2_differential.rs`); `last_write_cycle`+`identity`→`reset_row`+field-isolation matrix SAME commit; no-production-blind-path guard SAME commit (I-LEGACY); `mailbox_id` not overloaded (≤0x00FF_FFFF when used as spawn pointer).
+- **3 increments:** Inc1 contract floor (no bump) → Inc2 gated mutator+stamps+identity+tests → Inc3 engine_bridge consumers (post-#535). Cold TS+kanban stay Lance-native (lancedb 0.30 / lance 7).
+**Key decisions:** iron-rule verdict YIELDS-WITH-AP (no violation, conditional on the two same-commit guards); brutally-honest HOLD→cleared by operator addressing direction; baton-handoff CATCH-CRITICAL (Singleton arm) folded. Not blocked by surrealdb/D-MBX-9.
+**Repos:** lance-graph, branch `claude/soa-cycle-ownership-sync`. Grounded by an 8-agent 5+3 (convergence/dto-soa/trajectory/integration-lead/container-architect + brutally-honest/iron-rule/baton-handoff, 2026-06-18).
+
+---
+
 ## 2026-06-15 — integrated-cognitive-planner-v1 (ONE Rubicon/kanban/ractor/thinking-style/AST↔Elixir planner; ~90% EXISTS, 6 additive seams + addressing + cognitive-cycle sequencer)
 
 **Status:** RESEARCH MAP + REFERENCE DOC (capture-before-dilution; pre-expansion). **Plan file:** `.claude/plans/integrated-cognitive-planner-v1.md`.

.claude/plans/bindspace-singleton-to-mailbox-soa-v1.md

@@ -3,6 +3,12 @@
 > **ERRATA (2026-06-13, post-#490):** D-MBX-A1 columns are shipped (PR #386, mailbox_soa.rs); `last_emission_cycle` is renamed to `last_active_cycle` (PR #477); `CollapseGateEmission` + `MailboxSoA::emit()` are deleted (PR #487); §2.6 DTO inventory predates the TD-RESONANCEDTO-DUP-1 deferral. §5 sequencing (D-MBX-A2 → S1 → S2 → S3 → S4) is still directionally correct; D-MBX-A2 is the current gating gap. Full diff resolution: `soa-migration-diff-resolution-2026-06-13.md`.
 >
 > **ERRATA ADDENDUM (2026-06-18, `E-DMBXA2-SHIPPED-RECONCILE`):** the "D-MBX-A2 is the current gating gap" clause above is now superseded. D-MBX-A2's **column carrier is Shipped** — landed AFTER the 2026-06-13 snapshot via W1 `22f5120a` (temporal/expert/sigma) + W1b `707360dc` (dense content/topic/angle Hamming planes) + W1c + W4a `BackingStore`/`BackingStoreWrite` shim, with accessors + parity + field-isolation tests. **S1 is effectively done** (columns + feature-gated shim). The §6 S1 gate (`D-CE64-MB-1-impl` par-tile apex / `PR-NDARRAY-MIRI-COMPLETE`) was **sidestepped** (enum-over-trait shim, OQ-C resolved in `backing.rs`), not satisfied. OQ-1 RESOLVED (dense planes hot, not ≤6B ref). "S/P/O role slices" = **NON-GAP** (VSA-unbind vs `grammar/role_keys`, not a column). **S2** (engine_bridge re-home) is ~80% pre-absorbed by the W4a shim; its residual (re-point the `#[cfg(with-engine)]` lab callers through the shim) folds into **S3** (driver off the singleton), the true next substantive node — gated on OQ-2 + the pre-existing `--features with-engine` compile break (`QUALIA_DIMS` unimported, engine_bridge.rs:259) + the i4-qualia[9] `codebook_index` correctness risk (D-CSV-5b made qualia i4 while the doc comments still claim f32-lossless).
+>
+> **ERRATA ADDENDUM (2026-06-18c — architecture sync, `E-SOA-CYCLE-OWNERSHIP`):** #535 shipped the `--features with-engine` fix + the **F32-17D bit-exact qualia tenant** (BindSpace-singleton-only, `#[cfg(with-engine)]`) — the migration's single exactness anchor — closing the i4-`codebook_index` risk noted just above. Converged architecture for the remaining migration (operator-ratified this session):
+> 1. **Cycle ownership is per-mailbox + per-cycle, LE-contract-enforced.** No cycle-blind write; nothing buffers a stale/older mailbox. Today only `consume_firing` is cycle-aware — the per-row setters (`set_content/qualia/edge/meta/temporal`) **and `BackingStoreWrite`** are cycle-blind: that is THE gap. Target: every write carries/checks `current_cycle`, byte-explicit in the **tenant + envelope** LE contract (`SoaEnvelope::cycle()` / `current_cycle` / `last_active_cycle`). **Batch writes are de-interlaced into per-mailbox/per-cycle lanes by `lance-graph-planner/src/temporal.rs`** — the HLC tick `(server_id, lance_version, hlc_tick)` is the de-interlace key, so an interlaced multi-producer batch (lance / surrealql / ractor / thinking) is combed back into one lane per `(mailbox, cycle)` before it touches a row. **This is the next code deliverable — 5+3-gated before code.**
+> 2. **Multi-mailbox interlace is the target; `backing()`'s `debug_assert(mailboxes.len() ≤ 1)` is W5-transitional, NOT the design.** *Granularity matters (Codex #537-P2 correction):* the memory budget is **envelope-granular** (= node-granular), not arena-granular. The canonical **envelope = one 4096-bit node = ~500 B** (key 128 b + value 3968 b). Decomposition: **16k envelopes ≈ 8 MB** is the *hot working set per basin/prefix-table* (L2/L3-friendly); **× ~1024 prefix tables = 16M envelopes ≈ 8 GB** is the *full cold addressable space* (DRAM, with the ~1024 prefix tables themselves L3-resident). Linear and trivial ("so what"). This is **NOT** 16k× `MailboxSoA<1024>`: that type is a fixed 1024-row arena (3 dense `u64` planes × 1024 × 256 × 8 ≈ 6 MiB each → 16k of them ≈ 96 GiB), which is the *transitional* default, never the at-scale design. A mailbox at scale is a per-node unit sized to the thought it owns (`N`≈1, not a hardwired 1024), or a lightweight handle into a shared arena. **Deferred optimization (NOT now):** mailboxes run mostly *half-full*, so a future pass can halve the envelope (4096→2048 bits, ~500→~256 B) once the working set is proven — sequencing rule: *eliminate/consolidate what works first, then shrink*, never shrink ahead of the proof. No open mailbox goes inaccessible at scale: addressing is the **canonical GUID prefix-route** (classid·HEEL·HIP·TWIG cascade → ~1024 prefix tables L3-resident; the trie binds the prefix, masked-load the basin-local tail). **16k-mailbox batch writes amortize against those L3-resident prefix tables** — the ~1024 tables are read once and reused across the whole batch, so the per-mailbox routing cost trends to O(1). Per-cycle discipline is per-mailbox (each owns its `current_cycle`); interlacing is expected and de-interlaced per rule 1. **Scaling is two-phase (now vs later):** *now* "scale" means getting per-mailbox cycle ownership **correct** (the foundation — rule 1); *later* scaling opens two independent axes — **(a) quantity** (16k→16M envelopes, linear per the budget above) and **(b) metaconnectivity** (BNN field perturbation / cross-mailbox meta-edges — the OGAR bipolar-phase pyramid, Walsh-Hadamard on VSA). Neither (a) nor (b) is in scope until the cycle-aware write foundation lands.
+> 3. **Consumer fork — NOT every consumer rotates into the one SoA.** SoA-fits → rotate onto the SoA columns (D-MBX-12, gated on D-MBX-7 layout-converge + D-MBX-9 surrealdb). Doesn't-fit → a customized **OGAR-driven `classid → schema`** (per-class ClassView/Template — the Core-First path, #530/#533). The ~10 live `BindSpace` consumers (cypher_bridge, sentence_crystal, fabric/{zero_copy,executor}, learning/{scm,feedback}, spo/merkle, callcenter/transcode, planner/elevation) split along this line. This dissolves the "all nine consumers migrate to one SoA" misframe.
+> 4. **Layering down:** at the consumer/persistence boundary, **OGAR (canonical node) + Template (ClassView) + Schema-version (envelope `LAYOUT_VERSION` gate, currently 2)** become mandatory, not optional.
 
 > **Status:** CONJECTURE / design (migration spec). NOT yet implemented.
 > **Date:** 2026-05-27.