Commit Graph
20 Commits
Author SHA1 Message Date
Robert Allan James 422ef2fa29 proof/: all 23 Isabelle theory files now verify under Isabelle2025-2
Isabelle toolchain replaced (was genuinely 2011, 14+ years stale) and every
theory file fixed to actually compile -- most had apparently never been
checked under a working Isabelle at all. Fixed the vm_state self-reference
in StarForth_Base.thy properly (word_table is now a free-standing global
constant, not a circular record field), corrected the word_physics_transparent
axiom (was claiming full state equality from mere exec-equivalence, provably
too strong), and worked through 14 years of HOL-Library drift plus several
missing-hypothesis bugs across the physics-loop and ACL theories.

Two genuine (non-tactical) bugs found and left oops-flagged rather than
silently resolved: forth_roll's index arithmetic disagrees with both its own
test lemma and the real C ROLL implementation (three-way inconsistency), and
pm_wf isn't actually preserved by pm_record_hit/pm_record_miss. Both need a
decision, not a proof-script fix.

Full writeup in FABRIC-2.md item 5.2.
2026-08-13 12:30:30 -04:00
Robert Allan James 5787718c30 FABRIC-2.md: record Isabelle toolchain replacement + StarForth_Q48_16.thy breakage diagnostic
Isabelle2011-1 (genuinely 14+ years old) replaced with Isabelle2025-2 at the same path. Real build attempt: HOL-Library builds clean, StarForth session fails on one root-cause file (StarForth_Q48_16.thy) -- undefined fact, two non-closing proofs, one name collision against a new HOL-Library constant. Everything else is downstream unresolved-import fallout, not independent breakage. Not fixed yet.
2026-08-13 11:20:39 -04:00
Robert Allan James ebdf3726e6 FABRIC-2.md: audit ARTEMIS.md/HERMES.md/CONSOLE.md for staleness (item 5.3)
ARTEMIS.md got the same well-scoped fix as TRIPOD.md (already committed separately). CONSOLE.md's entire architecture premise (Console as 4th Tripod VM) was superseded by FABRIC.md §17.5's later utility-not-patron ruling, and its keyboard-input-doesn't-exist claim is false -- i8042.c/virtio_input.c and the 4.4v keyboard bridge are live. HERMES.md's message-node cell count (8) contradicts the capsule's own 9 CONSTANT MSG-CELLS, and its locked block map is missing item 4.2's new blocks. Both reported, not fixed -- too large for a one-paragraph correction, left for Captain Bob's call on rewrite vs. superseded-header treatment.
2026-08-13 10:41:29 -04:00
Robert Allan James cd6081fbb4 TRIPOD.md: fix stale Immediate Goal section, Hera does not auto-spawn at boot
Item 0.1 pruned capsules/init.4th to Hera-alone; TRIPOD.md was never updated to match. Corrected to reflect current on-demand-birth reality and distinguish Artemis-the-storage-device (auto-attaches at boot, kernel_main.c) from Artemis-the-VM-patron (not auto-spawned). Partial closure of FABRIC-2.md item 5.3 -- the doc's broader shrink-to-three-lines scope remains open.
2026-08-13 10:29:28 -04:00
Robert Allan James be598af65c ONTOLOGY.md: add Stadium/Fabric vocabulary section, close taxonomy/glossary debt
Extends the existing lexicon (which already covered heat/decay/inference vocabulary but predated Stadium work entirely) with patron, mass, density, K, cell, code field, Stadium, warehouse, utility -- all cited to their FABRIC.md DECIDED sections. Adds a Kconfig-knob-to-concept table with verified wiring status, flagging STADIUM_CAPACITY_TICK as dead (matches this session's §12 Q5 finding). Bumped to v1.1.
2026-08-13 10:26:22 -04:00
Robert Allan James c9710093ae FABRIC-2.md: §17.4 framebuffer physics -- confirm still not ripe, correct its real prerequisite
Live console/framebuffer stack has zero dirty-region or heat/decay instrumentation (grepped framebuffer.c/vt100.c/console.c). True prerequisite is item 1.11 (dirty-event granularity), still unstarted, not 'the framebuffer work' generally, which has since shipped. Left open.
2026-08-13 10:22:55 -04:00
Robert Allan James bb39012e55 FABRIC-2.md: §12 Q5 eight-loop interference analysis -- found a real §22.4 violation
Traced every loop's actual firing cadence from source. Headline finding: the fleet-capacity loop (vm_physics_heartbeat_tick, the exact mechanism §22.4 cites as precedent) shares a global counter fed by every live VM, so with Tripod's real multi-VM topology it can fire faster in wall-clock terms than any single VM's own heat-inference loop -- the opposite of §22.4's required ordering. STADIUM_CAPACITY_TICK, the Kconfig symbol §22.4 specified as the fix, exists but is never read anywhere. Reported, not fixed; left open for Captain Bob's call.
2026-08-13 10:20:53 -04:00
Robert Allan James bdb85bc7c0 FABRIC-2.md: close section D §23.4 #2 -- settled by divergence, not by measurement
Hermes v1's real message struct (init.4th blocks 4100/4105/4143) is 72 bytes with an out-of-line pointer+length payload, not the speculative 64-byte-cell/32-byte-inline-payload scheme from FABRIC.md §23.3. The design question is moot: the implementation went a different direction.
2026-08-13 10:16:25 -04:00
Robert Allan James a0033a2052 FABRIC-2.md: close Kconfig/menuconfig end-to-end item
Verified via tools/kconfig/conf + kernel_amd64_defconfig: a .config edit to CONFIG_SK_PARITY_DEBUG genuinely flows through to the parity.c compile line's -D flag in both directions. Required installing bison/flex, which were missing.
2026-08-13 10:14:05 -04:00
Robert Allan James b381578cb3 FABRIC-2.md: confirm fbtest.c/ttftest.c doc discrepancy, leave open
fbtest.c never existed in git history; ttftest.c exists but is undocumented. Not fixed pending instruction.
2026-08-13 10:05:08 -04:00
Robert Allan James e83a881b75 FABRIC-2.md: confirm and close m5_time_trust/m5_variance dead-field item
Repo-wide grep: no reader or writer anywhere besides the vm.h declarations. Leave as-is.
2026-08-13 10:04:22 -04:00
Robert Allan James 13fffa12ce FABRIC-2.md: close heartbeat_trust() item -- claim was stale, has a caller
kernel_main.c:913 prints it in the M5 heartbeat diagnostic line.
2026-08-13 10:03:18 -04:00
Robert Allan James 845f3d4e3b FABRIC-2.md: confirm and close hotwords_cache_promote() NULL-write item
Ruling recorded: real defect, unreachable under all four call sites' existing NULL guards, leave as-is.
2026-08-13 10:02:51 -04:00
Robert Allan JamesandClaude Sonnet 5 b42993322c FABRIC-2.md: close block_subsystem encoding-field item, wider scope found
Investigated 2026-08-13: not just the encoding field -- blk_get_meta()/
blk_set_meta() and the whole blk_meta_t on-disk layout have zero callers.
Captain Bob's ruling: flag and leave as-is, expected to be consumed once
Artemis's design (content-typed/owned/ACL'd blocks) is completed. No
code changed.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-13 09:32:16 -04:00
Robert Allan JamesandClaude Sonnet 5 d38b3103b8 FABRIC-2.md: check off arch_mmu_init() item -- ruling recorded
No code change; closed as investigated and ruled not-a-bug (deliberate
future-milestone scaffolding) rather than left open as a loose TODO.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-13 08:49:27 -04:00
Robert Allan JamesandClaude Sonnet 5 a813a147fa FABRIC-2.md: arch_mmu_init() is a deliberate TODO, not dead code
Investigated 2026-08-13: confirmed unreachable by repo-wide grep, but
each of the three stubs is a real doc-commented placeholder for a future
per-arch MMU milestone, not leftover cruft. Captain Bob's call: leave in
place, keep tracked as a TODO rather than delete or wire in a no-op call
site. No code changed.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-13 08:46:45 -04:00
Robert Allan JamesandClaude Sonnet 5 307f0e4ecc FABRIC.md/FABRIC-2.md: close vm_physics_retire() Hera-drop item
Punch list §C item complete. Corrects this morning's "structurally
excluded" framing -- the Hera-is-root case was reachable via
S" Hera" KILL, fixed in db66406. Broken-parent-chain half remains
genuinely unreachable and is no longer tracked as open.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-13 08:39:53 -04:00
Robert Allan JamesandClaude Sonnet 5 05c8462f2f FABRIC-2.md: close Fleet heat leak item -- truncation claim doesn't hold
Punch list §B item complete. Full read of capsule_vm_physics.c plus a
worked example show the touch()-fan-out truncation FABRIC.md §20.2
blamed cannot cause conservation drift -- vm_physics_transfer() moves
matched amounts on both sides of every call. Git history rules out a
since-fixed bug: the code predates §20.2's correction unchanged.

The one path that can genuinely drop heat is vm_physics_retire()'s
guarded no-valid-root case, structurally unreachable today (Hera can't
be killed, parent chains can't corrupt). Tracked as its own item in §C.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-13 08:21:32 -04:00
Robert Allan JamesandClaude Sonnet 5 389ca74d9f FABRIC-2.md: close Multi-VM heartbeat ownership item
Punch list §B item complete. Documents the Hera-sole-owner ruling and
points to the vm_runtime.c fix (bcc72d0) and its three-arch acceptance
logs.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-13 08:15:44 -04:00
Robert Allan JamesandClaude Sonnet 5 aba0b01a08 Close FABRIC.md, open FABRIC-2.md as the living document
FABRIC.md did its job: §1-24's design argument is settled and every
implementation item through 4.5/4.4ac either landed or was explicitly
deferred with a reason. At 7,595 lines it was no longer a good place
to find what's actually still open, so it's now archival -- header
rewritten to say so, pointing to FABRIC-2.md.

Before closing it, read the entire document end to end (not sampled)
looking for anything unresolved: punch-list checkboxes, the nine
"### N.N Open" architectural subsections in §1-24, the §25.7
"reported, not scheduled" list, and any other "not yet"/"deferred"
language. Found and fixed four stale bookkeeping spots where later
work had actually resolved something but the note was never updated:
§19.6 #3 (resolved by item 2.1), §21.5 #4 (resolved by §20.5 #4), the
§25.7 stadium_owner[idx] bullet (resolved by item 4.2), and item 4.5's
own parent checkbox (all six sub-items 4.5a-4.5f were already [x]).

FABRIC-2.md carries forward everything genuinely still open: the
blocked/scoped punch-list items (1.11, 4.3, 4.4s, 4.6, 5.1-5.3, plus a
specific pending TRIPOD.md edit found within 5.3), two regressions
that were invisible with Tripod pruned to Hera-alone and are now live
since item 4.2 restored Hermes (the fleet heat leak in
vm_physics_touch(), and multi-VM heartbeat ownership), nine dead-code/
cruft reports, three open design questions (§12 Q5, §17.4, §23.4 #2),
and two documentation-debt items (the taxonomy/glossary Captain Bob
flagged 2026-08-04, and re-measuring ACL-RWT DoE overhead now that
real compiler optimization is enabled).

Also includes BLOCK_MAP.md/artemis.img/amd64.csv regenerated by builds
during this session, and a qemu boot log/DoE run that weren't from any
command in this session -- kept per repo convention, logs are audit
artifacts, not deleted.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
2026-08-12 18:45:13 -04:00