#1505 private neutral reader readiness — selected before executable code

Status: SELECTED private contract. Root publishes this exact text in Issue1505 AND Wiki before executable writers. Product private/public functions remain UNRUN until those receipts. Active1342 native a20→a50fcc25 is immutable and awaiting scopedadoption, not rebased or replayed.

Actual immutable author and source

Parent13e5cea743d80763841661d0230eb647a040d352; managed /Users/user/.codex/worktrees/paired-curved-surface-result-loader-1505/barocss, clean codex/issue-1505-paired-curved-surface-private. Actual1499adoption3527c952 is an ancestor; leaf37282B/c0530c39 unchanged, privatepolynomial14412B/d51f9f80 unchanged. Actual1511 availability is unrelated added provider code, not this admission. Node22.22.0/offline frozen install FIRST0/identityeasylogic [email protected]. Captured12967trackedSHA/full51development+publishedmaps/README227174B32ccce7d/ownCAD+InteropDISTabsent/oldcodec11058B451ea4d. Immutable baseline 1505-private-author-baseline.json. No product changes are authorized in this private stage.

Frozen private module interfaces and ownership

External directory /Users/user/.barocss-ai/v3/evidence-loader-forward-plans/1505-private-readiness/ only. Codec writer owns private-json.ts and codec-static.json; driver writer owns consumer.mjs, run.mjs, driver-static.json; independent reviewer owns independent-static-review.json and later purefileauditor/static only. Root owns actual execution/captures/pins/signedfiles/artifacts/Issue/Wiki and allproductchanges. Helpers are not alone; no other's edits/reverts. Grammar Node22--check allowed, no imports/native/SDK/codec/bundle/type/gates/browser or Git/remote mutations by helpers. No live peers/Three/Babylon/Pixi/GPU/Viewer/Editor and no permanent chats.

Mechanically copy actual source packages/barocss-cad-interop/src/qualified-body-json.ts SHA451ea4d17c7afce5adf9f5f81c33de3f96eafca297631cac2f73afd437ff1683. Change only identifiers containing QUALIFIED_BODY→EXACT_PAIRED_VLINEAR_SURFACE_INTERSECTION, QualifiedBody→ExactPairedVLinearSurfaceIntersection, qualifiedBody→exactPairedVLinearSurfaceIntersection and initial utf8Bytes/utf16Units2097152→4194304. values1048576 and all other rules/constants unchanged. No other algorithm change; inverse mapping must recover exact451. Exports include EXACT_PAIRED_VLINEAR_SURFACE_INTERSECTION_LIMITS, BaroCadExactPairedVLinearSurfaceIntersectionReadError/DiagnosticCode, parseExactPairedVLinearSurfaceIntersectionJson, copyExactPairedVLinearSurfaceIntersectionOwnData and their mechanically renamed metrics. Private helpers never become public package exports. Codec import into bundled consumer is relative ./private-json.ts from external folder.

Consumer uses ONLY actual @barocss/cad ordinary root validateExactPairedVLinearSurfaceIntersection / runtime Error; no builder/evaluator/parent/producer/demo repetition. Whole native7 and actual returnedREPORT separate; actual report discriminator barocss-exact-paired-vlinear-surface-intersection-report,v0. Exactly options5required/maxObservations5; direct D1 objects; originalModels3+3 namespacequalifiers; full UV wrappers/proof/falseflags/signs. Original4files54416B and exactSHA/pins from draft below. Plain JSON.parse is DATA/reference only, never the strict decoder or admission. Every number compared Object.is, orderedkey retention for copies; request DATA association comparison uses membership where authored JSON object insertion differs but never strips fields.

Frozen one bounded private flow and attempt accounting

Initial MAIN and EDITED: literal original result/requestDATA pinned byte/SHA; strictdecode eachresult once; owncopyA and independently owncopyB each; matchingwhole validator ONCE on A; separately owncopy actual report once. Preserve full original raw text/nativeA/B/report before/after mutation controls. Capture complete separate report and all true/false nativeflags, directD1/chain Points/both completeModels, exactrational/orderedkeys/native4negativezeros each. Clone/reference sets independently checked, mutate only callerB proof witness then demonstrate isolation/restoration without more native calls. No World/UV Source recompilation by consumer.

Save each original complete nativeA using signed JSON.rawJSON('-0') serializer +oneLF, whole filebyte/SHA must equal its authentic result. Sameprocess cold reread/strictdecode once per savednative, owncopy once, fullorderedObject.is equality; NO coldnativecall. Two genuine4-field family Read values are a later PUBLICstage, not invented private tokens.

Three same-shape owned MAIN controls on fresh owncopies retaining whole request: world.source appendoneASCIIspace; pcurves.a.support.assetIndex original0→1; report.quality.solid false→true. Confirm each oldvalue and actualnonnoop beforematching. Call matchingvalidator once each; raw first error saved BEFORE expected assertion. SOURCE predicted ExactPairedVLinearSurfaceIntersectionError/OWNED/message Exact paired V-linear intersection: Complete original sources/Models/World/UVs/coefficients/observations/counts/report differ from reconstruction; context phaseowned/assetIndex/stationIndex/directCounts and owncause/nestedcause are actual measured values, never borrowed zero/absent assertions. Stop first unexpectedvalue. AfterEACH refusal fullaccepted nativeA/B/report/requestDATA/rawtext/signs/refs/failedinput retention.

Seven strictcodec controls only: decodedduplicate text {"k":0,"\u006b":1}; loneUnicode text {"k":"\ud800"}; nonfiniteNumber text {"k":1e400}; ownenumerable getter counter0; ownsymbol key; ancestorcycle; plain RECORD envelope {chunks:Array.from({length:128},()=>Array(8192).fill(0))} exceeding own1M budget while all individual array/depth/record caps remain legal. Capture actual first codecError class/code/message and failedmetrics availability beforeassert; JSON/OWNED/BUDGET stage is actual. No invented exact failedwork telemetry, alternate budget witnesses or alias-positive/boundary campaign. BUDGET failure afteractualwalker is recorded honestly, not labeled free.

Exactly matching5=2positives+3native refusals. Expected successfuldecode4 (original2+cold2); faileddecodes3→attempts7. Successfulcopy11 (A2+B2+report2+cold2+nativeprep3); failedcopies4→attempts15. Total10declared refusals; getter0. These are selected arithmetic, actual ledger must confirm; no duplicate successfulcalls to satisfy counters. Keep successmetrics perpass and raw FIRST errors separate.

Root-only command, graph, resources and completion

Root Node22 run.mjs --output ABSfresh --author /Users/user/.codex/worktrees/paired-curved-surface-result-loader-1505/barocss. Run is import-inert until CLI. Verify immutableparent/cleanbaseline/fullsource/51maps/README/noDIST/original4pins/old451/Node22/outputoutsideproduct/fresh/reserve512MiB beforebundle. Actual esbuild resolved from authorpackage context, writefalse/metafile, ordinary public SOURCE only; externalbuiltins allowed, exactexternalconsumer+codec only, no aliases/interoperabilitySDK/peers/ownDIST/sourcefallback/privateproducer entry. Save bundle/fullphysical+virtualgraph/pins/command/preflight before spawning ONE freshNode22 --max-old-space-size=4096 child to run bundledconsumer. Capture actualPID/stdoutstderr/exit/FIRSTpartial/telemetry/ledgers/rawerrors/positivewhole/report files/signed2+SHA and wholebefore/after trackedmanifest. CPUchild180s, outerrunner300s/stdout16MiB. Helpers don't execute them.

No requested librarybuild/type/browser in private stage. Pureartifactauditor file+Nodebuiltins only/0matching/codec/native replay; inspect all wholecopies/reports/signpaths/filenames/rawerrors/metrics/refs/graphs, preserve FIRSTauditfailure then narrowly fixaudit only. Successfulprivatefunctions never replayed merely formetadata corrections. Actualmatching/native inheritedmath+compilation/50D0D1 attempts perbuild are real; no new oracle/inference/math.

Privatecomplete only after actualboundedflow, baselineunchanged, purefileaudit and exactlimits/error/metric receipts. Then Root freezes PUBLIC exact10paths/optionalentry/API/profile/schema/owned guards/source-beforebuild→gates→realpublishedJS+DTS/freshPID/errors/parity before productwriters. No finalpubliccontract chosen by this private selection. Issue/Wiki directly maintained; ONE1505record under674; Planner majoroutcome/newcard only. #1517advanceplan remains separate;1254/674composedUIfileRecoveryUNRUN/801HELD/no productpushPRnpmdeployrelease.

---

Source-derived readiness detail (earlier proposed arithmetic is overridden by selected recipes above)

#1505 private readiness draft — complete exact paired V-linear Surface result

Status: STATIC preparation. Issue1505 is already planned. Do not create another Issue. Native1499 is locally AVAILABLE at adopted 3527c952428d1fb0ed5771a3d496296dab3d06ea; this reader's author, branch, baseline, before-code publication and functions remain UNSELECTED/UNRUN. Active1342 stays at its selecteda20 parent. Root selects and publishes the bounded private contract before executable writing.

Actual source and user input

The public matching function is validateExactPairedVLinearSurfaceIntersection(input: unknown): ExactPairedVLinearSurfaceIntersectionReport. It returns a separate REPORT, not a replacement result. Adopted leaf is37,282B/c0530c393b6385d1e1037a72d5cf13ef5f8eef10d4f5c47ca2af879e793aaf51; private polynomial leaf14,412B/d51f9f80886c5eb9bc847fbde9f446237033581dc5b6a9579a0c8f4b284aa055. Both were read through immutable Git at3527, not from mutable develop. Existing exact availability receipt proves five adoptedpaths and native matchingnewblobs; no producer replay is needed.

Native complete seven fields are request, originalModels, world, pcurves, proof, observations, report. Request has assets, uAInterval, options; two assets each retain exactly sourceId, source, surface. Options are exactly evaluationId/worldCurveId/pcurveAId/pcurveBId/maximumObservations. There are NO option defaults; observation limit must be the literal5. Preserve both complete Source0 strings and two original Models. MAIN and EDITED have the same Model name intersection_model, Surface ID support and three original object IDs in different source order. The selected assetA has objectIndex1; assetB has objectIndex2. Only source_a/source_b + assetIndex + originalModel field qualify these equal names.

World contains its actual degree4 Curve, Source0/sourceVersion0 and one-curve Model. Both originalUV Curves have degree4/five poles/ten authored-UA knots and dimensionless units, embeddedZ0, parameterFrame original-a-u. Their support selections reference the two original Source/Model namespaces. Do not compile them as World Source. Preserve all original chart profiles, rational numerator/denominator strings, composed/stored coefficients, residual arrays, fixed-U determinant, branch proof and five full observations.

Important source correction: actual Observation declares direct CurveD1Result {point,derivative} and direct SurfaceD1Result {point,du,dv}, plus chainA/chainB Points. It has NO tagged refusal union or nullable D1 values. The old planned prose's generic tagged-union wording must not become a fabricated API/schema. Native refusal still has its real structured Error.context and optional cause; output success fields remain exactly as saved.

Exact four originals and DATA roles

Donor /Users/user/.barocss-ai/v3/evidence-exact-paired-vlinear-intersection-cad2/demo-output.retry1:

Input	Bytes	SHA256	Role
main-result.json	24608	63b19b6f27a0ca4933ba4128b2a0654f1e67666e2aac8ae6432f5e1fb1173b08	Whole positive MAIN
edited-result.json	25608	a7e4186f7f001c2258e11b1658072ce852adf7fef1a52825ecd97310a92647f2	Whole positive EDITED
main-request.json	2096	8c0911c7f73259f95998ae81882c47b962322c6b99bd91b74f323c74d53ea9b0	Complete request comparison DATA
edited-request.json	2104	556f61703cdf2371be98b2940b3ac28b93ad658121822b55e98021f8082ddf80	Complete request comparison DATA

Total54,416B. JSON numeric negativezero paths are4 in each whole result and0 in each request. All four occur in retained originalModel siblings, not the selected Surface DTO or output World. The detailed audit stores every exact path. Whole text UTF16 lengths are24,600/25,600; request lengths2,088/2,096. UTF8 is eight bytes larger in each original file. Keep exact original bytes and source spelling, not JSON.stringify normalization. Two standalone requests equal each result.request as saved data; they add0 native/editor admissions. EDITED is actual CAD1147 one-pole DATA, never replay the editor or reconstruct an oracle.

Minimal future private population

Proposed external dir E/exact-paired-vlinear-private-readiness/ with two disjoint writers: private-json.ts+codec-static.json and consumer.mjs+run.mjs+consumer-static.json. Root owns selected author/baseline/pins, FIRST, raw receipts and a separate pure-file auditor. These paths are proposals only; no executable is written by this task.

For each MAIN then EDITED: decode the unchanged whole literal once, create separate own-data copiesA/B, invoke the actual public REPORT-only validator onA once, safely copy the returned report, and compare retainedA/B/original native7 and returnedreport to original savedreport with full Object.is comparisons. Ensure all mutable object-reference intersections are0 among acceptedcopies/reports and across cases. Preserve every Source, Model sibling, Curve/UV coefficient/knots/weights/proof/rational/string/sign/observation/report field. Qualify full authority; do not reduce to selected curves or an eligibility token.

Keep two request DATA clones, associate exact nested request independently with the whole savedresult, and retain them after each refusal. Only main/edited whole result may be matching positives. Saving each result must use signed numeric -0 JSON and original key order plus one LF, yielding exact donorbyte/SHA. Read that saved file in the SAME process, decode+copy and compare; matching native calls0 on this cold step. A future public fresh-PID admission is separate and will call the real public reader, not this private cached proof.

Three source-derived native controls, not an executed claim

Use fresh MAIN own-data copies. Check precondition and exact before/after path before submitting each control. Do not mutate an accepted authority or change the request into another valid producer input.

1. world.source: append one ASCII space. The unchanged request still reconstructs the original emitted Source; complete same comparison must detect the retained output mismatch.
2. pcurves.b.support.assetIndex: actual1 to0. Keep all fields present and original UV arrays untouched. This changes a legal numeric union member but falsely qualifies originalB asA; full comparison must refuse it. Do not infer namespace from repeated Model/Surface names.
3. report.quality.solid: actualfalse totrue. Native exact intersection success cannot acquire a Body/Solid qualification by editing a saved report.

These are same-shape whole mutations with unchanged complete request. Source536–552 establishes an OWNED mismatch with message Exact paired V-linear intersection: Complete original sources/Models/World/UVs/coefficients/observations/counts/report differ from reconstruction. Expected exactclass/code/context/cause are SOURCE-DERIVED and UNRUN here. Capture every actual raw error BEFORE asserting that expectation, including phase/assetIndex/stationIndex/full directCounts, cause ownpresence/undefined/null/nested class/code/context. Do not claim absent cause for reconstructed failures: non-OWNED inner native errors are wrapped with OWNED/Whole exact paired result reconstruction refused and the actual cause/context. A direct mismatch has actualphase owned and counts copied from the fresh expected report; measure them rather than label the inherited work free.

After each control, verify accepted full native/report/DATA/rawtext/signs/references unchanged. Max matching attempts proposed5=2positives+3refusals. Getter refusal belongs the dedicated own-data codec controls below, not an extra nativegetter campaign.

Dedicated codec and budgets to measure before public freeze

Reuse adopted strict451 codec algorithm mechanically with family-specific names/context, two raw/canonical byte+UTF16 caps4MiB, own-values1,048,576 PER decode/copy pass. Other existing depth64/array8192/record64/key128/string262144, scalarUnicode/decodedduplicate/standardfiniteJSONnumber, -0, descriptor-only getterless copies/per-occurrence aliascharge/ancestorcycle rules stay unchanged. Do not widen old shared codec or native Source256KiB/request2MiB. Native whole validator first snapshots1M, checks exactroot7 and full canonical result4MiB, reconstructs unchanged request once, compares whole result and independently snapshots report. All native inherited compilation/rational/50D0D1 attempts are real.

Proposed seven codec controls only: decodedduplicatekey; loneUnicode; nonfinite JSON number; ownenumerablegetter(counter0); symbolkey; cycle; a fixed plain RECORD envelope exceeding the coupled canonical/work budget. Record the actual first BUDGET and inaccessible failedmetrics as such; do not assert isolated own-value-limit telemetry if canonical4MiB fires first. Whole schema guard stays outside the genericcodec; reject malformedroot/report schema before matching work in the future public wrapper. Expected successfuldecode4 (two initial+two cold), successfulcopy11 (positive8 including cold/report plus three native prep). Three malformed text attempts add3 faileddecodes, four owned guards add4 failedcopies: proposedall7decode/15copy attempts. No new aliaspositive population or exhaustiveboundary campaign.

Codec/runtime/export names, constructor messages, final frozenprofile and exactnegative metrics remain Root selection. Proposed public Read4 is {native,validationReport,profile,sourceText}; complete mutable native and returnedreport independent, metadata deeply readonly+frozen, literal sourceText|null. No URL/byte input/serializer/dispose/render/Face/Body/Solid API is added.

Start and completion conditions

Start only after Root selects an installed clean integrated author containing exact1499, captures actual HEAD/branch/alltrackedSHA/maps/fullREADME/Node22/noownDIST, pins originals and mechanicalcodec reference, and publishes Issue1505+Wiki finalprivate-beforecode with disjointownership and real commands. Native availability3527 is proved; this preparation does not select a parent or grant code authorization. Keep1342 unrelated state,801HELD and composed1254/674 gaps intact.

Private completion requires actual bounded Source-only publicCAD graph/noInterop/rendererpeers/ownDIST, real5matching attemptledger/report-only2positives, declared3native+7codec refusals with getter0/rawerrors/reference retention, signed2byteexact saves/sameprocesscold0native, native7+Models3/3/fullUV/D1/proof/qualityflags, distinct decode/copy metrics and unchanged baseline. Preserve firstfailure and fix only its concrete owner scope; no producer/oracle/evaluator repetition. Root pureartifact audit reads files with0 native/codec replay. Only these measured facts can freeze the later exact10path public consumer/source-before-build→affectedgates→actualpublishedJS/DTS→freshPID/source-emitted whole parity. Public functions/type/gates/browsers/release remain UNRUN now.

STATIC STOP. This draft is source/file evidence, not native/codec validation or approval flow. Root manages the existing Issue/Wiki and next selection directly.