Tooling: source-versioned PR799 evidence coverage with fresh replay and corruption controls

.github/workflows/frontier741.yml

@@ -9,6 +9,10 @@ on:
       - 'research/direct-delivery504-global/**'
       - 'research/complex-sw4-frame8/**'
       - 'scripts/verify_frontier741*.py'
+      - 'scripts/verify_frontier_complete.py'
+      - 'scripts/verify_replay_coverage.py'
+      - 'certificates/replay-coverage/**'
+      - 'tests/test_replay_coverage.py'
       - 'tests/test_frontier741_bindings.py'
       - 'scripts/verify_selected_result.py'
       - 'certificates/selected-result.json'
@@ -23,6 +27,10 @@ on:
       - 'research/direct-delivery504-global/**'
       - 'research/complex-sw4-frame8/**'
       - 'scripts/verify_frontier741*.py'
+      - 'scripts/verify_frontier_complete.py'
+      - 'scripts/verify_replay_coverage.py'
+      - 'certificates/replay-coverage/**'
+      - 'tests/test_replay_coverage.py'
       - 'tests/test_frontier741_bindings.py'
       - 'scripts/verify_selected_result.py'
       - 'certificates/selected-result.json'
@@ -57,7 +65,7 @@ jobs:
         env:
           CXX: g++
           BOOST_INCLUDE: /usr/include
-        run: python -B scripts/verify_frontier741.py --work "$RUNNER_TEMP/frontier741"
+        run: python -B scripts/verify_frontier_complete.py --frontier 741 --work "$RUNNER_TEMP/frontier741"
       - name: Require committed files unchanged
         run: git diff --exit-code
       - uses: actions/upload-artifact@v4
@@ -66,9 +74,10 @@ jobs:
           name: frontier741-linux-python312
           path: |
             ${{ runner.temp }}/frontier741/RESULT.json
-            ${{ runner.temp }}/frontier741/STEPS.json
-            ${{ runner.temp }}/frontier741/*.log
-            ${{ runner.temp }}/frontier741/complex/RESULT.json
-            ${{ runner.temp }}/frontier741/complex/RECEIPT.json
-            ${{ runner.temp }}/frontier741/complex/STAGES.json
-            ${{ runner.temp }}/frontier741/complex/global-replay/ASSEMBLY.json
+            ${{ runner.temp }}/frontier741/COVERAGE.json
+            ${{ runner.temp }}/frontier741/replay/STEPS.json
+            ${{ runner.temp }}/frontier741/replay/*.log
+            ${{ runner.temp }}/frontier741/replay/complex/RESULT.json
+            ${{ runner.temp }}/frontier741/replay/complex/RECEIPT.json
+            ${{ runner.temp }}/frontier741/replay/complex/STAGES.json
+            ${{ runner.temp }}/frontier741/replay/complex/global-replay/ASSEMBLY.json

.github/workflows/frontier799.yml

@@ -10,6 +10,10 @@ on:
       - 'research/complex-sw4-frame8/**'
       - 'research/gauge44-frames-x/**'
       - 'scripts/verify_frontier799*.py'
+      - 'scripts/verify_frontier_complete.py'
+      - 'scripts/verify_replay_coverage.py'
+      - 'certificates/replay-coverage/**'
+      - 'tests/test_replay_coverage.py'
       - 'tests/test_frontier799_bindings.py'
       - 'scripts/verify_selected_result.py'
       - 'certificates/selected-result.json'
@@ -25,6 +29,10 @@ on:
       - 'research/complex-sw4-frame8/**'
       - 'research/gauge44-frames-x/**'
       - 'scripts/verify_frontier799*.py'
+      - 'scripts/verify_frontier_complete.py'
+      - 'scripts/verify_replay_coverage.py'
+      - 'certificates/replay-coverage/**'
+      - 'tests/test_replay_coverage.py'
       - 'tests/test_frontier799_bindings.py'
       - 'scripts/verify_selected_result.py'
       - 'certificates/selected-result.json'
@@ -59,7 +67,7 @@ jobs:
         env:
           CXX: g++
           BOOST_INCLUDE: /usr/include
-        run: python -B scripts/verify_frontier799.py --work "$RUNNER_TEMP/frontier799"
+        run: python -B scripts/verify_frontier_complete.py --frontier 799 --work "$RUNNER_TEMP/frontier799"
       - name: Require committed files unchanged
         run: git diff --exit-code
       - uses: actions/upload-artifact@v4
@@ -68,10 +76,11 @@ jobs:
           name: frontier799-linux-python312
           path: |
             ${{ runner.temp }}/frontier799/RESULT.json
-            ${{ runner.temp }}/frontier799/ANCESTRY.json
-            ${{ runner.temp }}/frontier799/STEPS.json
-            ${{ runner.temp }}/frontier799/*.log
-            ${{ runner.temp }}/frontier799/INDEPENDENT-*.json
-            ${{ runner.temp }}/frontier799/global/ASSEMBLY.json
-            ${{ runner.temp }}/frontier799/global/STAGES.json
-            ${{ runner.temp }}/frontier799/native/STEPS.json
+            ${{ runner.temp }}/frontier799/COVERAGE.json
+            ${{ runner.temp }}/frontier799/replay/ANCESTRY.json
+            ${{ runner.temp }}/frontier799/replay/STEPS.json
+            ${{ runner.temp }}/frontier799/replay/*.log
+            ${{ runner.temp }}/frontier799/replay/INDEPENDENT-*.json
+            ${{ runner.temp }}/frontier799/replay/global/ASSEMBLY.json
+            ${{ runner.temp }}/frontier799/replay/global/STAGES.json
+            ${{ runner.temp }}/frontier799/replay/native/STEPS.json

Makefile

@@ -582,9 +582,9 @@ frontier626-verify: selected-record-check
 .PHONY: frontier741-verify
 frontier741-verify: selected-record-check
 	@work=$$(mktemp -d "$${TMPDIR:-/tmp}/integer-mult-frontier741.XXXXXX"); \
-	python3 -B scripts/verify_frontier741.py --work "$$work/replay"
+	python3 -B scripts/verify_frontier_complete.py --frontier 741 --work "$$work/replay"
 
 .PHONY: frontier799-verify
 frontier799-verify: selected-record-check
 	@work=$$(mktemp -d "$${TMPDIR:-/tmp}/integer-mult-frontier799.XXXXXX"); \
-	python3 -B scripts/verify_frontier799.py --work "$$work/replay"
+	python3 -B scripts/verify_frontier_complete.py --frontier 799 --work "$$work/replay"

certificates/replay-coverage/pr741-sw4-v1.json

@@ -0,0 +1,94 @@
+{
+  "schema": "integer-mult-replay-coverage-v1",
+  "id": "pr741-sw4-v1",
+  "producer": "research/complex-sw4-frame8/verify.py",
+  "producer_sha256": "7706065e3d2934ea493910638b40e6285348d337507e0fb695d8d1e536926637",
+  "manifest_sha256": "b9b39c206fcd2613382b0dcbda23a371e8781d1bedaf8e2f8e7df1e79dc1fa89",
+  "spec_sha256": "7fc2bd2e3c0ac13729c1fa1f0f327a4eb7c72373ba58e5ed3954b30e23c803be",
+  "stages": [
+    "ancestral558-fresh",
+    "gauge44-exact-construction",
+    "notri56-construction",
+    "notri-control-g44",
+    "layered66-construction",
+    "p6n-cold72-construction",
+    "four-promotions",
+    "promotion-controls",
+    "sw4-read-exchanges",
+    "eight-B-frame-construction",
+    "all728-columns-native",
+    "both-native-ledgers",
+    "independent-native-controls",
+    "residual-wrappers",
+    "all-native-phase-edges",
+    "independent-scalar-frames-cones",
+    "inherited-cold-controls",
+    "eight-frame-controls",
+    "owner-construction-controls",
+    "strict-global-admission",
+    "independent-literal-map-moment",
+    "independent-two-engine-outer47"
+  ],
+  "artifacts": [
+    "ANCESTRAL-LINK.json",
+    "FRAME-CONTROLS.json",
+    "INDEPENDENT-LOCAL.json",
+    "INDEPENDENT-MAP.json",
+    "INDEPENDENT-PRICE.json",
+    "OWNER-CONSTRUCTION-CONTROLS.json",
+    "PROMO-CONTROLS.json",
+    "RECONSTRUCTED-OWNERS.json.gz",
+    "RESULT.json",
+    "STAGES.json",
+    "cold-controls/COLD-END-CONTROLS.json",
+    "frames/BUILD.json",
+    "frames/FULL-WORD.json.gz",
+    "gauge44/STEPS.json",
+    "global-replay/ADMISSION-CONTROLS.json",
+    "global-replay/ASSEMBLY.json",
+    "global-replay/BIT-SUPPLIER-CONTROLS.json",
+    "global-replay/REPLAY.json",
+    "global-replay/STAGES.json",
+    "global-replay/global/audit/ASYNC-AUDIT.json",
+    "global-replay/global/audit/OWNERS-AND-PROFILE.json",
+    "global-replay/global/audit/PREFIX-AND-INVOICE.json",
+    "layered66/STEPS.json",
+    "layered66/controls/COLD-END-CONTROLS.json",
+    "layered66/swap/PIVOT-SWAP.json",
+    "local/CANONICAL-WORD.json.gz",
+    "local/CLIFFORD-RECIPES.json",
+    "local/CLIFFORD-REVIEW.json",
+    "local/FULL-WORD.json.gz",
+    "local/INDEPENDENT-LOCAL-REPLAY.json",
+    "local/LOCAL-CHECKS.json",
+    "local/LOCAL-PROGRAMS.json.gz",
+    "local/RESIDUAL-ADAPTERS.json",
+    "local/SCALAR-FRAME-AUDIT.json",
+    "local/WRAPPER-CHECKS.json",
+    "notri-control/STEPS.json",
+    "notri56/STEPS.json",
+    "notri56/cold44/CONSTRUCTION.json",
+    "p6n/STEPS.json",
+    "p6n/controls/COLD-END-CONTROLS.json",
+    "p6n/p6n/FULL-WORD.json.gz",
+    "promoted/FULL-WORD.json.gz",
+    "sw4/BUILD.json",
+    "sw4/FULL-WORD.json.gz"
+  ],
+  "selected": {
+    "id": "pr799-x4-v1",
+    "source_sha256": {
+      "scripts/verify_frontier799.py": "19fe1b32079095160dc00fe2f7df75e0fcbc82cff37f7159b755c8a63bd5ce99",
+      "scripts/verify_frontier799_bindings.py": "43897b3c99212d6134870898a1840f32898aa1b3679b299e654901568ad7e19b",
+      "research/gauge44-frames-x/construction/jx/reproduce_jx.py": "5c7afebb4eb7fcdeb7e971cfbc457cf071850e2da21c3c71295efdd453c2399c",
+      "research/gauge44-frames-x/verify_global.py": "16bd5e54598592e92e210f99065348c5df261b8350fdc688072ce053d15b088a"
+    },
+    "stages": [
+      "manifest",
+      "native",
+      "global",
+      "independent-local",
+      "independent-price"
+    ]
+  }
+}

research/required-replay-coverage/CLAIM.md

@@ -0,0 +1,25 @@
+# User-selected follow-up scope
+
+The user selected PR838 and PR781 for substantial completed follow-ups.
+This branch handles PR838: establish reachability through current PR799,
+enforce a versioned coverage contract in production replay entrypoints,
+retain valid historical evidence, and package negative controls and source pins.
+
+Base f567884aeb8851b6e794af1184119a3bfbe1e631; PR838 head
+2a50020bb9564229874cbfbdc112e17b235bacfc. No pinned sprint issue found in
+the prior and current searches. No external claim comment sent. Source and
+review pins are explicit; predecessor authors retain credit. PR781 remains
+a separate construction investigation, not a dependency of this contribution.
+
+No new random track selection: the user explicitly chose these follow-up objects.
+Overlap refresh through PR845 found PR841's distinct primary-proof-pointer gate
+but no other enforced stage/artifact-coverage implementation. Final refresh and
+publication link will be recorded when the verified contribution is submitted.
+
+Completed result: full current PR799 binding accepts 112 corrupted evidence
+cases; enforced path rejects all 118 tested mutations. Fresh native/global,
+phase and independent replay passes with verified archived ancestry reuse.
+Selected proof pins remain unchanged. Concurrent PR847 independently delivered
+the basic Make/CI gate; our additional version/result/log checks and actual
+fresh replay are described in README.md, with explicit predecessor credit.
+Submitted: https://github.com/CrocSwap/integer-mult-bounds/pull/865