Add parent waiting-entry source candidate and lifecycle controls

research/h25-parent-waiting-entry/NEXT-QUESTIONS.md

@@ -0,0 +1,8 @@
+# Open next questions
+
+1. Build the actual immutable successor assembly, including source/role/loader/controller/stage manifests and all transitive dependencies, without altering historical pins. The current isolated directory is not that assembly.
+2. Independently review the exact parent caller, entry, terminal reader and deadline retirement as one chain. In particular inspect raw error precedence, inherited aliases, uncertain releases/waits, normal versus optimized dispositions and finalizer timing.
+3. Exercise the genuinely authenticated parent qualification path under its complete paid, bounded attempt envelope. The current fixture deliberately substitutes those ports and provides no native or actual-instance qualification.
+4. Complete the original fixed baseline/candidate ordering, full receiver/equality, symmetric primary measurements, retention and CLOSE/readback. No local helper or publication can substitute for these conditions.
+
+The next useful action is source-assembly and caller review, not repeating already successful unchanged fixtures or changing the acceptance criterion. Native/scientific execution remains unadmitted until its existing source, ownership, resource and funding gates close.

research/h25-parent-waiting-entry/NOTICE.md

@@ -0,0 +1,7 @@
+# Attribution and modification notice
+
+This source archive extends Clear1nsight's original investigation in PR #6321 and the source/ownership/relay work in PRs #6762, #6830 and #6847. All predecessor attribution, Apache-2.0 licensing and source-specific notices remain applicable. The repository LICENSE and NOTICE are retained in the unchanged parent tree.
+
+The waiting-entry implementation, parent qualification connection, caller/receiver adaptation and standalone fixtures were prepared for Clear1nsight with substantial OpenAI Codex assistance. ProtectedRoot, DeadlineOwner and the common-runner starting point adapt a partial ChatGPT Pro proposal recovered on 2026-11-07. That proposal was incomplete and was changed during implementation. No independent human review or scientific admission is claimed.
+
+Every implementation file in this directory is a modified successor, not an unmodified upstream reference. Original local files, earlier source snapshots and failed controls were preserved. SOURCE-MANIFEST.json distinguishes authored bytes, publication notice comments and retained executed snapshots. The archive does not import the mathematical construction, licenses or notices of unrelated research packages.

research/h25-parent-waiting-entry/PROVENANCE.json

@@ -0,0 +1,106 @@
+{
+  "upstream_base": "7c49fe32c55de02c2c873655c804b16e4c3fef0a",
+  "original_pr": 6321,
+  "related_inspected_heads": {
+    "6762": "3bcf99910a95248452e955d382c59bd23792a39b",
+    "6830": "39fcd67c991bd72918080b1d2c02feb3d679206d",
+    "6847": "efb116491184bd16c5d1ada60d71efdefee61691"
+  },
+  "reuse": "Adapt recovered Pro ProtectedRoot/DeadlineOwner/common-runner partial; retain predecessor relay/owner/source/original command contracts. Add actual lexical caller wiring rather than another dormant helper.",
+  "overlap_search": "All-author/all-state PR body search for ProtectedRoot returned zero at round opening; bounded search is not global novelty. Main and implicated heads refreshed.",
+  "external_dependencies": "Original absolute paths are preserved reference bindings. Full local source/role assembly and actual native/environment qualification are external and not shipped as executable closure.",
+  "test_snapshots": {
+    "controls-v3": {
+      "fresh_supervisor.py": "2483d0e26d75fa86c52148de936bebc1e3b71b988f46a7642ede2197ee590e05",
+      "bounded_relay.py": "2bd356f6b886c1ca417ee866c99863d96c27c7c5a59e9e22e6bfad3c2bb335ee",
+      "candidate_entry.py": "773afb0903991cd2751c7f398418ebe18e15aae9628c0e57902dab921796c18c",
+      "run_guarded_v3.py": "87e12a80e26fd6ef8df9bbb76bfd294f09533942f4504e9772f701e06b9218f1"
+    },
+    "controls-v4": {
+      "fresh_supervisor.py": "2483d0e26d75fa86c52148de936bebc1e3b71b988f46a7642ede2197ee590e05",
+      "bounded_relay.py": "2bd356f6b886c1ca417ee866c99863d96c27c7c5a59e9e22e6bfad3c2bb335ee",
+      "candidate_entry.py": "0c7987aa893473c47c9785856b7be233c80991dfe97a36bd4a9953549b95ff24",
+      "run_guarded_v3.py": "87e12a80e26fd6ef8df9bbb76bfd294f09533942f4504e9772f701e06b9218f1"
+    },
+    "controls-v5": {
+      "fresh_supervisor.py": "04406464851db70bea7c69ac02d87b070e60be30861eba9659f35dfd3781e842",
+      "bounded_relay.py": "2bd356f6b886c1ca417ee866c99863d96c27c7c5a59e9e22e6bfad3c2bb335ee",
+      "candidate_entry.py": "0c7987aa893473c47c9785856b7be233c80991dfe97a36bd4a9953549b95ff24",
+      "run_guarded_v3.py": "87e12a80e26fd6ef8df9bbb76bfd294f09533942f4504e9772f701e06b9218f1"
+    },
+    "controls-v7": {
+      "fresh_supervisor.py": "04406464851db70bea7c69ac02d87b070e60be30861eba9659f35dfd3781e842",
+      "bounded_relay.py": "2bd356f6b886c1ca417ee866c99863d96c27c7c5a59e9e22e6bfad3c2bb335ee",
+      "candidate_entry.py": "0c7987aa893473c47c9785856b7be233c80991dfe97a36bd4a9953549b95ff24",
+      "run_guarded_v3.py": "87e12a80e26fd6ef8df9bbb76bfd294f09533942f4504e9772f701e06b9218f1"
+    }
+  },
+  "source_rows": [
+    {
+      "path": "implementation/bindings/private_loader.py",
+      "sha256": "f0b31dc974d774bdceed784d626e00688619281d3baa9ece58c002b04d24af16",
+      "bytes": 41243,
+      "local_authored_sha256": "a4589101ccbe56f96b457eaa83e1a663cae263ae5cccf693b45fa7ead47b58b6",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/bootstrap/controller_entry.py",
+      "sha256": "a8432c30466e88753398a7b2641918e07823060b6ffc522ec3ea6cdfd946fd9f",
+      "bytes": 10604,
+      "local_authored_sha256": "153ab8da6e919188b436d30f9dab3e2d746a47809a3f2b42d267c51c74dfe9fe",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/controller/composed_controller.py",
+      "sha256": "f136fc84eeea8bb318df7f4fdec32cc78f1aa7b11ef3f143778ea498576dffb7",
+      "bytes": 100729,
+      "local_authored_sha256": "6763de293acec9c8284e83a065d394f0d6821136998a0c490312432bb4a93788",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/source/bounded_relay.py",
+      "sha256": "db49147c02d70e3494375cb203b1501a143c4c7c66074f6cb5e6c3c2e9ef362e",
+      "bytes": 16280,
+      "local_authored_sha256": "2bd356f6b886c1ca417ee866c99863d96c27c7c5a59e9e22e6bfad3c2bb335ee",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/source/candidate_entry.py",
+      "sha256": "048e5020c8424e168a614809aaab8c3c188b78de1269a2bf73f7393389b58120",
+      "bytes": 24755,
+      "local_authored_sha256": "0c7987aa893473c47c9785856b7be233c80991dfe97a36bd4a9953549b95ff24",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/source/composed_queue.py",
+      "sha256": "06cb0bc8393dad361470719fb7d9603bd33314bb191ef91eecb301992618775a",
+      "bytes": 17167,
+      "local_authored_sha256": "0d25e6a02df4af018d649abbe884a2abb84e9a32089fb4e94a90a080b2d2938c",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/source/fresh_supervisor.py",
+      "sha256": "73741e77533eb7022c583842e01e120bdaa24461d68fac8fb0af784ae93c9163",
+      "bytes": 126369,
+      "local_authored_sha256": "8588ac0a24cb039bed87d42145ec37c935b66cb40b16057565d955e185d46566",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/source/full_result_receiver.py",
+      "sha256": "368c1d4668b13ba47fef6e6b7e0dd80096c63a2e323f042a99716b4513bf7e2f",
+      "bytes": 26088,
+      "local_authored_sha256": "4bf578dad37abe7b933e7034cebcf5885eb1788d12cab1ffb0e44d578e172b64",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    },
+    {
+      "path": "implementation/source/run_guarded_v3.py",
+      "sha256": "1bd63a710f5e2d8124ec32637cfc01d9932e976554c5307f828a19b7e6993304",
+      "bytes": 21276,
+      "local_authored_sha256": "87e12a80e26fd6ef8df9bbb76bfd294f09533942f4504e9772f701e06b9218f1",
+      "publication_difference": "one leading modification-notice comment; AST equal"
+    }
+  ],
+  "independent_source_review": "Bounded Pro source review of initial commit; concrete first-error defect locally corrected/tested. No complete successor acceptance.",
+  "original_completion_credit": 0,
+  "unwind_fixture_publication_delta": "Only source lookup path changes from the colocated guarded snapshot to implementation/source/fresh_supervisor.py; all injected body and production-node selection logic retained."
+}

research/h25-parent-waiting-entry/README.md

@@ -0,0 +1,33 @@
+# Parent-owned waiting entry and qualification wiring
+
+This source archive makes the common-runner candidate entry stop before inner native/scientific birth. The actual parent then qualifies the stopped generation, retires its property-query subtree without disturbing the protected runner/time/entry chain, writes and reads back immutable intent and release records, and sends one pidfd SIGCONT. The implementation connects those operations to the bootstrap, loader, controller and terminal reader. Original investigation: https://github.com/CrocSwap/integer-mult-bounds/pull/6321.
+
+The source is a concrete implementation candidate. It is not an installed, independently accepted full execution tuple. Its original absolute paths and historical scientific pins are deliberately retained. Do not execute the archived controller or replace a frozen predecessor tree with this directory. A separately declared source assembly, role manifests and complete native/funding qualification are still required.
+
+## Changed behavior
+
+- The intent producer waits for an actual stopped entry and held R/time/entry generations. A JSON arrival token alone cannot release work.
+- Query cleanup borrows a protected exclusion set. It does not own the root pidfds or the parent execution owner.
+- One absolute alarm owner spans launch, qualification and caller validation. A nested query can shorten the working deadline; it cannot give the parent a fresh interval or remove its retirement cutoff.
+- The entry uses bounded pipes and inherited capture aliases, retains first failures, and emits closure/result records only after known local retirement. Envelope failures exit 125, distinct from the original optimized refusal exit 1.
+- The receiver binds both the common entry command and the original inner command. The original optimized STOP is never rewritten as positive PASS. Parent wall and SELF+CHILDREN CPU endpoints extend through validation. Concurrent waiting/query RSS samples are retained in the owned-forest peak; no new parent RSS admission criterion is introduced.
+
+## Executed controls and limits
+
+Standalone fixtures use the new source and the actual private qualification body, with explicitly inert Context/association/schema/funding ports. Real owned processes, pidfds, SIGSTOP/SIGCONT and query descendants execute. The native payload is a fixture-owned byte-identical copy of /usr/bin/false; the scientific driver, compiler, native view and actual property observer do not run.
+
+The two readback failure controls passed in controls-v3: intent and release-seal readback errors retain the raw error and leave the entry stopped. The positive query-retirement/release control passed in controls-v4 and, after the changed RSS reporting, controls-v7. The two real timer controls passed in controls-v5. These are five distinct bounded behaviors across explicitly pinned snapshots, not a complete caller or resource qualification.
+
+Earlier failures are retained under evidence/: descriptor-census lifetime, moved-local name, fixture image ownership, missing retention directory and wrong frozen-source modes. The last two were fixture preparation mistakes; production source guards were preserved. Successful unchanged timer and readback controls were not rerun.
+
+Each fixture dispatch used clean environment, Python 3.12 -S -s -P -B, AS 256 MiB, soft FSIZE 2 MiB/hard 512 MiB, core 0, umask 077 and an outer timeout with kill tail. The file cap applies to capture; complete artifact-fit proof remains open. These settings are test conditions, not universal resource bounds. Costs outside the recorded guard debit remain OPEN_NOT_ZERO.
+
+Suggested fixture reproduction after deliberate local review: create validation/tmp, set the four source files loaded by the fixture to mode 0444, then run validation/test_waiting_boundary.py under the stated guard. This is not a registered research replay package; no VERIFY hook executes the unqualified scientific images.
+
+## Remaining decisive check
+
+See NEXT-QUESTIONS.md. The full authenticated source/role assembly, real parent qualification, baseline/candidate comparison, funding, retention and final CLOSE remain uncompleted. This contribution establishes no speedup, multiplication bound, complete resource admission or original-activity credit.
+
+## Bounded Pro review and correction
+
+Pro inspected the exact initial public source and found a first-error ordering defect in both query and root timer unwind. The successor captures the original raw working error before fallible timer pop and records a pop error afterwards. A deterministic collision regression executes both actual production try/except/finally nodes with an injected body error and actual DeadlineOwner expiry against inert clock/signal ports; both preserve the exact original exception object. This correction has local regression evidence, not independent review of the complete successor. Pro did not fully review relay, loader/bootstrap authentication, external dependencies or the full assembly. No such acceptance is claimed.

research/h25-parent-waiting-entry/SOURCE-MANIFEST.json

@@ -0,0 +1,105 @@
+{
+  "schema": "source-archive-integrity-v1",
+  "files": {
+    "NEXT-QUESTIONS.md": {
+      "bytes": 1223,
+      "sha256": "d6b48bb81dc0d529c7e7610d346317c2b8555b221b272e58d88077379f59d5f1"
+    },
+    "NOTICE.md": {
+      "bytes": 1224,
+      "sha256": "3190854cada01c345ab88e080fe07c713285715494e18a3c70bf1df58c95ead9"
+    },
+    "PROVENANCE.json": {
+      "bytes": 6284,
+      "sha256": "648cd29a06b04866622f8fbfb0b9bf0cd2ff8ae4cde8034153813c9cf7707270"
+    },
+    "README.md": {
+      "bytes": 5046,
+      "sha256": "7a4a222e9e8e005481eb1e4ffeeb96b2471ba1106a2f51799613b24b597d9b29"
+    },
+    "evidence/controls-v1-stderr.txt": {
+      "bytes": 6225,
+      "sha256": "6fb40bdc33fa6d1998ab9227c061d463f95cab04027294964164c7f71ee6a869"
+    },
+    "evidence/controls-v2-stderr.txt": {
+      "bytes": 5404,
+      "sha256": "1da30707887c874936049e65fc27732ec1d6b1cdb1362c47e394232bda15a646"
+    },
+    "evidence/controls-v3-stderr.txt": {
+      "bytes": 2366,
+      "sha256": "534792d2e9ed5dba0fc34857b1d239798bd9b9f11dd602d4b4c2b9cf95d5ea09"
+    },
+    "evidence/controls-v4-stderr.txt": {
+      "bytes": 226,
+      "sha256": "73bc5f0ed489aafb2d146c2bdb64b67955d708ca6855cd22ba39b209ae42bf2f"
+    },
+    "evidence/controls-v5-stderr.txt": {
+      "bytes": 2340,
+      "sha256": "7d1d0eeabe38dbd84e65c14f80c1ed54d4603300d1dd3106338f7853650b85e9"
+    },
+    "evidence/controls-v6-stderr.txt": {
+      "bytes": 1389,
+      "sha256": "37d1053ac6bba46dacae879c684100b3d074825ee542bd63d0e1ad8177ad4160"
+    },
+    "evidence/controls-v7-stderr.txt": {
+      "bytes": 226,
+      "sha256": "043364646aa5207729b32ad863d945267e9c27629a3bb407ae0c9230f3114109"
+    },
+    "evidence/controls-v8-stderr.txt": {
+      "bytes": 209,
+      "sha256": "44590b08255f50a968bb68a3f992c62e2a2dc4c2522ce4f2bc446fe629c8e01f"
+    },
+    "implementation/bindings/private_loader.py": {
+      "bytes": 41243,
+      "sha256": "f0b31dc974d774bdceed784d626e00688619281d3baa9ece58c002b04d24af16"
+    },
+    "implementation/bootstrap/controller_entry.py": {
+      "bytes": 10604,
+      "sha256": "a8432c30466e88753398a7b2641918e07823060b6ffc522ec3ea6cdfd946fd9f"
+    },
+    "implementation/controller/composed_controller.py": {
+      "bytes": 100729,
+      "sha256": "f136fc84eeea8bb318df7f4fdec32cc78f1aa7b11ef3f143778ea498576dffb7"
+    },
+    "implementation/source/bounded_relay.py": {
+      "bytes": 16280,
+      "sha256": "db49147c02d70e3494375cb203b1501a143c4c7c66074f6cb5e6c3c2e9ef362e"
+    },
+    "implementation/source/candidate_entry.py": {
+      "bytes": 24755,
+      "sha256": "048e5020c8424e168a614809aaab8c3c188b78de1269a2bf73f7393389b58120"
+    },
+    "implementation/source/composed_queue.py": {
+      "bytes": 17167,
+      "sha256": "06cb0bc8393dad361470719fb7d9603bd33314bb191ef91eecb301992618775a"
+    },
+    "implementation/source/fresh_supervisor.py": {
+      "bytes": 126369,
+      "sha256": "73741e77533eb7022c583842e01e120bdaa24461d68fac8fb0af784ae93c9163"
+    },
+    "implementation/source/full_result_receiver.py": {
+      "bytes": 26088,
+      "sha256": "368c1d4668b13ba47fef6e6b7e0dd80096c63a2e323f042a99716b4513bf7e2f"
+    },
+    "implementation/source/run_guarded_v3.py": {
+      "bytes": 21276,
+      "sha256": "1bd63a710f5e2d8124ec32637cfc01d9932e976554c5307f828a19b7e6993304"
+    },
+    "review/PRO-REVIEW-DISPOSITION.md": {
+      "bytes": 1670,
+      "sha256": "e50f963f4d408c86c44669476945af985e9200a5425d577ff56695e2adbd9795"
+    },
+    "validation/test_unwind.py": {
+      "bytes": 2130,
+      "sha256": "ca5372e68b36ff7b4a52e821a887c8a4bec86e812621c424819bf7aaa98f651a"
+    },
+    "validation/test_waiting_boundary.py": {
+      "bytes": 17121,
+      "sha256": "c02c5149dba92893139d9965bf599c606086a338d3ff4491e4859f54dc67415c"
+    }
+  },
+  "manifest_excludes_itself": true,
+  "source_history_complete": false,
+  "scientific_replay": false,
+  "modes": "Git100644; deliberate fixture reconstruction uses source0444"
+}