#1517 selected private complete original-A UV split Face reader readiness

Status: selected bounded PRIVATE contract, functional proof UNRUN. Root publishes this exact contract in Issue1517 AND Wiki before executable writers. Public entry/profile/10path product contract remain UNSELECTED/UNRUN until actual private proof and pure artifact audit. Private external modules are not package APIs.

Actual fixed author and prerequisite

Parent92ce4d5ede41d99c8de0d7f65406ecf66cde11d2; clean branchcodex/issue-1517-paired-uv-faces-private; root /Users/user/.codex/worktrees/paired-uv-split-faces-loader-1517/barocss. Node22.22.0/offlinefrozeninstallFIRST0/13028trackedpins/51development+publishedmaps/fullREADME228928B/noownCADorInteropDIST. Root baseline E=/Users/user/.barocss-ai/v3/evidence-loader-forward-plans/1517-private-author-baseline.json includes fulloriginalmanifest/allfilehashes. Actual CAD1511 adoption34638bba and byteexactprovidercb16/proof6a62 available; shared451codec unchanged. Native1505 now adopted91e6b7c9/CLOSED; this privateauthor stays fixed earlier92ce and does not import1505 product entry. No rebase or shareddevelop edits.

Actual whole authority

Only validatePairedSurfaceUVSplitFaces(unknown):PairedSurfaceUVSplitFacesReport from normal @barocss/cad source package is called. Returns independently owned REPORT only. Complete Result11 request/isoCurves/intervals/world/vertices/edges/loops/faces/proof/observations/report; request2 section/options, full1499section7, options6evaluationId/resultIdPrefix/orientation/maximumIsoCurves2/maximumIntervals2/maximumObservations35. Report.schema barocss-paired-surface-uv-split-faces/version0; do not invent rootschema or defaults.

Original-A windowUA[-1,.5]×fullAV[-.5,1.5]; fullbothoriginalSource+Models3+3/source-qualified duplicateIDs/siblings/bothoriginalUV/parentworld and completeiso2+interval2 retained. NewWorldModel8 one untrimmedASupport+7actualWorldCurves, originalsupportindex1/newSupportordinal0. Topology6V7E2loops2Faces8Uses/oppositesharedcut/fullintervalsense/order and entireproof.uvRegions, dimensionlessUVarea9/8+15/8=3 retained. Not physicalarea. Outer35observations tagged evaluated{value}/native-refused{reason,nativeErrorName}, nullchain/residual on refusal; parent1499directD1 remains direct. CrosscaseBSourceconstant does not imply BUVunchanged. Preserve all true localFace and falseBsplit/outsidewindow/sewnManifold/BodySolid/globalBinary64/manufacturing/publicationflags literally. No newoperator/rendering/proofcertificate.

Minimal private population and evidence

Donor /Users/user/.barocss-ai/v3/evidence-paired-uv-split-faces-cad2/demo-output. ExactlyMAIN/EDITEDwholepositives2 and standalonecompleteRequestDATA2,297032B. Fouroriginalfiles eachretain4numericnegativezeros, corrected from old planned0 using literalJSON/Object.is. Oldmetadata failure preserved separately, no provider/codec failed. Sourcebytes/rawSHA below immutable; signed compactJSON+LF saves exactlysamebytes/SHA and keyorder. RequestDATA adds0native/editorcalls.

For MAIN then EDITED: strictdecodewhole→safeowncopiesA/B→ONE matchingwholevalidator onA→safeindependent actualreportcopy. Save actual native+returnedreport before assertions. Compare fulloriginal/A/B/report/requestDATA/Source/Models/UV/proof/observations/flags/order/allnumbersObject.is and allmutablerefintersections0, including acrosscases. Bcallerown.report.quality.solid false→true witness changes onlyindependentB, keep A/report/originalsame, restorefalse; never submit this witness. Retain rawtext and wholefield proofs, not fabricated exportingBtree authority. Save2actualsignednativefiles, sameprocesscoldstrictdecode+owncopy→fullvaluecomparison, nativecoldcalls0. PublicfreshPIDqualification is later, not cachedprivateproof.

Exactly3MAIN same-shape native controls with unchangedrequest, freshcopy each and explicitnonnoopbefore/after: world.source appendASCIIspace; loops[0].uses[2].sense reverse→forward whileactualoppositeupperUseforward retained; report.quality.solid false→true. Save mutationplan before submissions. Max5 matchingattempts=2wholepositives+3refusals. SOURCE predictsOWNED wholemismatchmessage/contextphaseowned/edgeIndexnull/observationIndexnull/fullsuccessfuldirectCounts; actualcausepresence/undefined/null/nestedError is measuredbeforeassertions. Do not borrow1505assetIndex/stationIndex or inventedzeroproviderwork. Reconstruction compiler/parent/children/evaluators/rationalcounts are real inheritedwork; callledger is not dynamicinternalinstrumentation. Retain allaccepted native/report/DATA/rawtext/signs/refwitness after EACH refusal.

Dedicated private codec mechanically derives actual451 by ONLY names and limits16MiBrawUTF8/rawUTF16/canonicalJSON+LF and4194304valueoccurrencesPERpass, preservesothercaps/algorithm/allmessagesincludingoldINPUTliteral. Selectedfamily PAIRED_SURFACE_UV_SPLIT_FACES / PairedSurfaceUVSplitFaces / pairedSurfaceUVSplitFaces; scalarUtf8Bytes unchanged. Sevencontrols exactly duplicate-decodedkey/loneUnicode/nonfiniteNumber/ownenumerablegetter0/symbolkey/cycle/plainRECORDchunks512×8192distinctzeroarrays. Save rawfirsterrorsbeforeassertions. Last fixedrecipe predictsfirstBUDGET 'Owned occurrence/depth budget exceeded'; actualfailedpartialmetricsnull unavailable. If accepted/differenterror, preserveFIRST and stop; noadaptiveenvelope/newcampaign. Allseven plus3native=10refusals. Proposeddecode7/success4/owncopy15/success11/getter0 are arithmetic until measured. No aggregate16MiB/rationalboundary coverage claim.

Disjoint external writers and Root execution

External E/1517-private-readiness/ only, no trackedproductchanges. capacity_targets owns private-json.ts+codec-static.json (mechanicalinverseproof451). capacity_api_audit owns consumer.mjs+run.mjs+consumer-static.json (reuse immutable1505 bounded scaffolding, actual1517schema/context/signs/wholevalues; do not importoldconsumer). trim_ui, after boundedadvancecarddraft, owns private-artifact-audit.mjs+artifact-audit-static.json only: pure savedbytes/JSON/Gitmetadata comparison, no native/codec replay. Root ownsselectedbaseline/contracts/publication/commands/FIRSTrawproof and remote writes. Helpers are not alone, preserveothers; functions/import/transpile/bundle/types/build/native/codec/SDK/browser/Git/GH/Wikimutations0. Node22--check only ownJS permitted; no TS workaround. Staticdelivery is not acceptance or an approvalgate.

Root only runs actual FIRST Node22 E/1517-private-readiness/run.mjs --out E/1517-private-first. Preflight checks exactHEAD/branch/clean/all13028pins/fullmanifest51maps/README/noDIST/original4/nativeleaf/sharedcodec/Node22/actualIssueANDWiki publicationandcontract/fileSHA. OrdinarypackageCADsourcegraph only+externalcodec+consumer; no Interopproduct/privateproofentry aliases/rendererpeers/sourcefallback. Runner recordsbuildmetafile/command/exit/childPID/rawfirsterrors/completionflag/postbaselinebeforefinalsummary. Matchingmodule211vsnewgraph count must bemeasured, not hardcodedborrowed1505. Timeoutouter300s/child180s/max16MiB. FIRSToutputmustnotexist. No successfulfunctionalreplayforauditor/metadata. Onfailure preserveactualfirstpartialreceipt and narrowownerfix only.

Root thenactual FIRST purefileaudit Node22 E/1517-private-readiness/private-artifact-audit.mjs --evidence E/1517-private-first --out E/1517-private-artifact-audit-first. Readsoriginal/execution/graphs/fullnative/report/rawerrors/request/sign/refs/signedfiles andbefore/afterfullbaseline; zeroimportsprovider/native/codec/SDK/compiler/bundle/type/build/browser/replay. WholeJSON numeric-0 muststayObject.is. Actual mutableB/coldcopyruntimewitnesses retainedtruthfully; no missingtreeinvented. Publicfreeze onlyafterprivateproof+pureaudit. ExistingproposedpublicoptionalRead4/10paths/16MiB4M/gates/DTS/freshPID remainsfuturecontract.

Completion and limits

Actualprivateproof passingdeclaredwhole2/3native/7codec/complete11/report/taggedD1/signs4each/refisolation/signedfiles/samecoldnative0/exactbaseline+purefileaudit definesprivateREADY. Publicsource/emitted/type/gates/browser remainUNRUN; no packageAPI/nativehandoff yet. CurrentRootintegrated1254/674screen/SaveOpen/recovery/context/lifetime remainspending. #801HELD/no productpushPRnpmrelease; RootIssue+ONE674/Wikipreservefirstfailuresandnextreadywork. Planneronlynewcard/majorresult, noapproval/selectionrequest.

Exact input pins and sign paths

[ { "file": "main-result.json", "bytes": 122421, "utf16": 122413, "sha256": "2ea5cdb6f1f2167d25c30c3395703080f3b24e689a7f88aa844ea8d0dba83701", "negativeZeroCount": 4, "negativeZeroPaths": [ "$.request.section.originalModels.0.objects.0.controlPoints.0.0", "$.request.section.originalModels.0.objects.2.controlPoints.0.0.2", "$.request.section.originalModels.1.objects.0.controlPoints.0.0.2", "$.request.section.originalModels.1.objects.1.controlPoints.0.0" ] }, { "file": "edited-result.json", "bytes": 124815, "utf16": 124807, "sha256": "14b2aaad764bde3e3d2b31f70b6311ad5c6ebc236928071f3798fda83ea73578", "negativeZeroCount": 4, "negativeZeroPaths": [ "$.request.section.originalModels.0.objects.0.controlPoints.0.0", "$.request.section.originalModels.0.objects.2.controlPoints.0.0.2", "$.request.section.originalModels.1.objects.0.controlPoints.0.0.2", "$.request.section.originalModels.1.objects.1.controlPoints.0.0" ] }, { "file": "main-request.json", "bytes": 24594, "utf16": 24586, "sha256": "07816e6a4cd42fd0aabd4ece285259d9aef94edd67b955557a23c18db480a59d", "negativeZeroCount": 4, "negativeZeroPaths": [ "$.section.originalModels.0.objects.0.controlPoints.0.0", "$.section.originalModels.0.objects.2.controlPoints.0.0.2", "$.section.originalModels.1.objects.0.controlPoints.0.0.2", "$.section.originalModels.1.objects.1.controlPoints.0.0" ] }, { "file": "edited-request.json", "bytes": 25202, "utf16": 25194, "sha256": "8c4e04552236b861a09fc375fcf9552bc0513fa9728348ab4b0e05a661e9eb05", "negativeZeroCount": 4, "negativeZeroPaths": [ "$.section.originalModels.0.objects.0.controlPoints.0.0", "$.section.originalModels.0.objects.2.controlPoints.0.0.2", "$.section.originalModels.1.objects.0.controlPoints.0.0.2", "$.section.originalModels.1.objects.1.controlPoints.0.0" ] } ]

Mechanical codec specification (selected portions above override proposal status)

#1517 private codec freeze proposal

STATIC STOP. Author preparation is selected at 92ce4d5ede41d99c8de0d7f65406ecf66cde11d2 in /Users/user/.codex/worktrees/paired-uv-split-faces-loader-1517/barocss. Codec names, controls and executable publication remain proposals for Root selection. No executable module or native/codec call was made.

Mechanical source change only

Use the actual author's packages/barocss-cad-interop/src/qualified-body-json.ts (11,058B; SHA 451ea4d17c7afce5adf9f5f81c33de3f96eafca297631cac2f73afd437ff1683). The successful external1505 template is 12,195B, SHA 8dabf58343d34280e1e51cce9689aa0498e338b57bb55af24e28fcbb774c107d. Its smaller4MiB/1M profile must not be copied as the final1517 limits.

Proposed identifier mappings: QUALIFIED_BODY → PAIRED_SURFACE_UV_SPLIT_FACES; QualifiedBody → PairedSurfaceUVSplitFaces; qualifiedBody → pairedSurfaceUVSplitFaces. Change only initial limit literals utf8Bytes:2097152 and utf16Units:2097152 to 16777216, and values:1048576 to 4194304. From1505, first reverse its exact three mappings/two4MiB literals to451, then apply these new mappings/three limits. Require inverse byte equality to451. Keep generic scalarUtf8Bytes unchanged.

Proposed runtime exports are PAIRED_SURFACE_UV_SPLIT_FACES_LIMITS, BaroCadPairedSurfaceUVSplitFacesReadError, merged BaroCadPairedSurfaceUVSplitFacesDiagnosticCode, parsePairedSurfaceUVSplitFacesJson, copyPairedSurfaceUVSplitFacesOwnData, and scalarUtf8Bytes. Types follow the measured convention: PairedSurfaceUVSplitFacesJsonMetrics, PairedSurfaceUVSplitFacesOwnCopyMetrics, PairedSurfaceUVSplitFacesJsonDecoded, PairedSurfaceUVSplitFacesOwnDataCopy. Parse/copy return {value, metrics}. These are external private exports, not new package entries.

Preserve depth64, recordFields64, arrayElements8192, stringUnits262144 and keyUnits128. Preserve decoded duplicate keys, scalar Unicode, standard finite JSON numbers, numeric -0, descriptor-before-getter copying, prototype/symbol/hidden/sparse guards, ancestor-cycle detection, per-occurrence alias copies and all error order/messages. Copy canonical cost includes one LF from its initial cost1. Work quotas apply separately to each traversal, not a combined lifetime total. Failed thrown passes expose no partial metrics; null is unavailable, not zero work.

The names-only mapping leaves the private INPUT literal Qualified Body JSON text must be a string unchanged, as1505 did. A family-specific replacement must be explicitly selected by Root before writing; it is a message edit, not an algorithm change. Do not rename unselected helpers or alter the shared451 file.

Four literal inputs and one source correction

Donor: /Users/user/.barocss-ai/v3/evidence-paired-uv-split-faces-cad2/demo-output. Four pins match the Wiki plan; total297,032B. MAIN/EDITED whole positives are122,421B and124,815B; request DATA is24,594B and25,202B. Request files add no native/editor admission.

Correct the earlier plan's numeric -0 count0. All four pinned originals actually contain4 numeric -0 values each. Results retain them under request.section.originalModels; requests retain them under section.originalModels. Exact paths are in the adjacent static receipt. They are parent sibling values, not a new synthetic sign fixture. Preserve whole Object.is comparisons and signed compact JSON+LF; do not normalize them away or substitute owner runtime resultHash for raw file SHA.

Pure data shape inspection found result11/request2/options6; result11216 values, depth13, maximum record37/array38/key42UTF16, maximum string1294 or1349UTF16. Requests2229 values/depth9/record32/array10/key38/string648. Raw UTF8/UTF16 and these visible shapes fit the proposed codec limits. This is static data inspection, not strict parser/copy metrics or aggregate native-boundary execution. Native report's stored ownValues11216 is DATA.

Retain whole parent7/direct parent D1, iso2/interval2 children, WorldModel8, vertices6/edges7/loops2/Faces2/Uses8, proof.uvRegions and observations35. The outer1511 observations use actual tagged evaluated/native-refused D1 unions and nullable chain/residual fields. Do not use1505 direct-D1 fields for this outer packet. Keep per-case source/order/UV coefficients; no cross-case B-UV equality assumption.

One fixed RECORD budget proposal, UNRUN

Select only {chunks: Array.from({length:512}, () => Array(8192).fill(0))}. Each leaf array remains at its8192 cap; root record has one own field; depth3 remains legal. This is the1505 selected128×8192 recipe scaled to4M work, with distinct leaves and no alias-positive population.

Static arithmetic gives prospective occurrence count 1 + 1 + 512 × (1 + 8192) = 4194818, greater than4194304. Its complete zero-only compact canonical JSON plus LF would be8,389,645ASCII bytes, below16MiB. Source check order predicts BUDGET / Owned occurrence/depth budget exceeded before a complete copy returns. It is still a coupled work/canonical walker: record actual first error before assertions, and do not invent the failed partial metrics or claim the other cap was functionally tested. If accepted or differently refused, retain FIRST and stop; no search for another witness.

Other small controls can reuse the selected1505 decoded-duplicate, lone surrogate, nonfinite number, enumerable getter(counter0), symbol key and cycle recipes. Root must freeze that seven-control population before code. No extra raw-cap, alias-positive or boundary campaign is proposed.

Separate codec, schema and native boundaries

The generic codec accepts supported JSON/own data subject to its fixed limits; it does not certify a Face result. Future admission must separately guard the exact11 root fields and own report.schema === 'barocss-paired-surface-uv-split-faces', version0, after safe copy. Wrong primitive/array INPUT and wrong whole/report SCHEMA are reader decisions, not new codec rules.

Only actual validatePairedSurfaceUVSplitFaces(input:unknown):PairedSurfaceUVSplitFacesReport performs whole matching once per eligible admission and returns a separate report. Its native request4MiB/Source256KiB/Model16/inherited child limits remain unchanged. Native Error context is phase/edgeIndex/observationIndex/directCounts, not1505 assetIndex/stationIndex. Preserve actual cause presence and nested context. Root alone measures native/codec FIRST, signed files, errors and source graph after the selected before-code Issue/Wiki publication.