Skip to content

XCSV-REFACTOR-INV-001: expand component inventory - #41

Merged
x-cessive merged 8 commits into
mainfrom
inventory/xcsv-refactor-inv-001-issue30
Aug 21, 2026
Merged

XCSV-REFACTOR-INV-001: expand component inventory#41
x-cessive merged 8 commits into
mainfrom
inventory/xcsv-refactor-inv-001-issue30

Conversation

@x-cessive

@x-cessive x-cessive commented Aug 21, 2026

Copy link
Copy Markdown
Owner

XCSV-REFACTOR-INV-001 / Issue #30 Source-Inventory Candidate

Final accepted candidate: d2373eabbdb6f35ce312eb2c4df546049f9078ab.

Merged to main as normal merge commit: 09e4b61168904e9fd04e001f7f10d44917d2cc82.

Final observation-only follow-up on main: 0cb610d8430543a5474191c466d1439b5479a1d8.

Verdict: PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED.

Final inventory counts:

  • total components: 330
  • SOURCE_WIRED: 35
  • all 330 components retain UNKNOWN / NOT_REVERIFIED runtime/deployment/boot/player evidence where live sources were not inspected

Final source-observation model:

  • XCSV superproject source preflight verifies repository identity, HEAD, and relevant cleanliness before generation.
  • XCSV_ADDONS, Exile, and XCSV_GUARD are verified against exact XCSV gitlink SHAs, expected origins, and clean member worktrees before enumeration.
  • Explicit XCSV_ORCH source is verified for repository identity, HEAD, cleanliness, and repository-relative canonical paths.
  • Dirty/stale/wrong-origin source fails closed and cannot masquerade as clean-HEAD VERIFIED_AT_OBSERVATION truth.
  • SOURCE_WIRED requires concrete include/config/init/import/module/handler/call-path evidence; source presence/name reference remains candidate evidence only.

Final validation matrix:

  • inventory precision: 4/4 PASS
  • provenance/reproducibility: 3/3 PASS
  • member-source/gitlink: 5/5 PASS
  • root/ORCH source cleanliness: 5/5 PASS
  • JSON/schema validation: PASS
  • duplicate component IDs: PASS
  • docs generation validation: PASS
  • memory index generation: PASS
  • RAG generation: PASS
  • sync-policy: 33/33 PASS
  • continuity-state: 5/5 PASS
  • current-state: 5/5 PASS
  • changed-page link validation: PASS
  • git diff --check: PASS

Publication/reconciliation:

  • GitHub Wiki: WIKI_SYNCHRONIZED, XCSV.wiki.git@f55184f0bf71e366e29db2bb454ae7136692fb12, 17 tracked wiki pages matched published wiki by SHA256.
  • GitHub Pages: VERIFIED for deployment 6015372598 at merge SHA 09e4b61168904e9fd04e001f7f10d44917d2cc82, status success, served System Components content confirmed.
  • D:\XCSV: reconciled to 0cb610d8430543a5474191c466d1439b5479a1d8; safety branch retained; tools/local-ai preserved untracked.

Runtime/deployment/live DB/live BattlEye/RPT boot/player-runtime truth remains NOT_REVERIFIED / UNKNOWN. Issue #30 remains open for that evidence lane.

Expand registry/components.json from Git source enumeration, generate the System Components view, refresh memory index and generated docs, and preserve runtime/deployment evidence as UNKNOWN where not inspected.

XCSV-Agent: chatgpt

XCSV-Agent-Role: primary

XCSV-Work-ID: XCSV-REFACTOR-INV-001

XCSV-Issue: #30

Copy link
Copy Markdown
Owner Author

Independent review — XCSV-REFACTOR-INV-001 / PR #41

Verdict: CHANGES_REQUIRED. The inventory breadth is useful, but the generated registry currently contains systematic false-positive classifications and must not be merged as documentation truth yet.

Blocking issues:

  1. DATABASE false positives
    tools/build-component-inventory.ps1 uses (?i)(\.sql$|extdb|database|db) over full paths. The bare db substring catches unrelated names such as findBuildings.sqf, deadBodies.sqf, DMS/FuMS mission/object files, etc. This materially inflates the reported 118 DATABASE entries. Restrict database detection to actual database/extDB/SQL semantics and add regressions proving unrelated *Buildings*/*deadBodies* files are not classified DATABASE.

  2. XCSV_ADDONS top-level pollution
    The non-mission top-level scan classifies every entry as SERVER_ADDON, including .agents, AGENTS.md, AI-START-HERE.md, CLAUDE.md, and README.md. These are governance/docs surfaces, not server addons. Enumerate actual addon/module directories/files using repository-specific structure.

  3. SOURCE_WIRED overpromotion
    Add-FileGroup sets source_wired=true for every GUARD/ORCH/hub source/tool file merely because it exists. Test-SourceReference also promotes a catalogue item to SOURCE_WIRED on any name match in LiveSource even while its own detail says exact wiring still requires deeper audit. Under issue [XCSV-REFACTOR-INV-001] Component registry + live wiring truth capture #30's evidence ladder, source presence/reference candidate != proven wiring. Preserve presence separately and set SOURCE_WIRED only when a concrete include/config/init/import/module/handler/call-path relationship is evidenced.

Required correction:

The candidate can remain PARTIAL_INVENTORY. The blocker is evidence precision, not lack of runtime verification.

Fix database false positives, exclude XCSV_ADDONS governance/docs from runtime addon enumeration, and reserve SOURCE_WIRED for concrete wiring evidence. Add focused generator regressions and regenerate the component registry and System Components view.

XCSV-Agent: chatgpt

XCSV-Agent-Role: primary

XCSV-Work-ID: XCSV-REFACTOR-INV-001

XCSV-Issue: #30
@x-cessive

Copy link
Copy Markdown
Owner Author

XCSV-REFACTOR-INV-001 / issue #30

Mode: READ / INVENTORY / CLASSIFY / DOCUMENT.

This draft PR expands and corrects the component registry from PARTIAL_GITHUB_ONLY to PARTIAL_SOURCE_VERIFIED using Git source enumeration only. It does not claim deployed/runtime verification and does not delete or mutate gameplay/source files in member repos.

Current candidate

  • Candidate SHA: f20e616
  • Verdict: PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED
  • Expected not to be PASS_INVENTORY_VERIFIED until live deployment/runtime evidence is inspected.

Corrected counts

  • Total components: 327
  • By repository: x-cessive/Exile=221, x-cessive/XCSV_GUARD=53, x-cessive/XCSV=26, x-cessive/XCSV_ORCH=14, x-cessive/XCSV_ADDONS=13
  • By kind: TOOL=93, DATABASE=83, ADDON=56, MISSION_MODULE=38, SCRIPT=29, OTHER=25, SERVER_ADDON=3
  • By working verdict: REFACTOR_ACTIVE=154, UNKNOWN=108, KEEP_VENDOR_REFERENCE=64, CONSOLIDATE_DUPLICATE=1
  • CATALOGUE_PRESENT: 327
  • SOURCE_WIRED: 35
  • status UNKNOWN: 230

Review correction

Resolved the independent-review blockers from issue comment 5364627180 / PR comment 5364626637:

  • DATABASE detection no longer uses a bare db substring over the full path.
  • XCSV_ADDONS repository metadata/governance/docs files are excluded from SERVER_ADDON enumeration.
  • SOURCE_WIRED is no longer promoted from presence or name/reference candidates; concrete entrypoint/config/init/module evidence is required.

False-positive examples now removed:

  • findBuildings.sqf: DATABASE=0, SERVER_ADDON=0
  • deadBodies.sqf: DATABASE=0, SERVER_ADDON=0
  • nedbuild1_objects.sqf: DATABASE=0, SERVER_ADDON=0
  • FuMS_nedbuild1_mission.sqf: DATABASE=0, SERVER_ADDON=0
  • addons/README.md: DATABASE=0, SERVER_ADDON=0
  • addons/AGENTS.md: DATABASE=0, SERVER_ADDON=0
  • addons/AI-START-HERE.md: DATABASE=0, SERVER_ADDON=0
  • addons/CLAUDE.md: DATABASE=0, SERVER_ADDON=0
  • addons/.agents: DATABASE=0, SERVER_ADDON=0

Outputs

egistry/components.json regenerated from corrected generator.

  • ools/build-component-inventory.ps1 corrected.
  • ools/tests/component-inventory.tests.ps1 added with deterministic regressions for:
  • false database substring rejection
  • docs/governance exclusion from SERVER_ADDON
  • presence does not imply SOURCE_WIRED
  • known concrete wiring promotes SOURCE_WIRED
  • wiki/System-Components.md and docs/wiki/System-Components.md regenerated.
  • wiki/Memory-Index.md generation was rerun and had no candidate diff.
  • RAG was rebuilt because canonical inventory/wiki content materially changed; output remains outside repo at D:\CAGE\xcsv-rag.

Validation

  • New inventory tests: PASS, 4 passed / 0 failed.
  • JSON/schema validation: PASS for components, repository identity and current-state.
  • Duplicate component_id check: PASS, 0 duplicate IDs.
  • Docs generation: PASS, 16 pages written, front matter verified.
  • Memory index generation: PASS, 465 entries.
  • RAG generation: PASS, 2133 chunks.
  • Sync-policy tests: PASS, 33 passed / 0 failed.
  • Continuity-state tests: PASS, 5 passed / 0 failed.
  • Current-state tests: PASS, 5 passed / 0 failed.
  • Changed-page link validation: PASS.

Remaining UNKNOWN / NOT_REVERIFIED

  • live server deployed PBOs and hashes
  • loaded mod/servermod command line
  • RPT/boot logs
  • live DB schema/query presence
  • live BattlEye filter files
  • player-runtime behavior
  • runtime authority for AI engines and overlapping vehicle systems
  • final XCSV_ADDONS <-> LiveSource custody beyond source/mirror evidence

Completion Impact

COMPLETION_IMPACT: v1.0.0
CHANGED_SURFACES: registry/components.json, tools/build-component-inventory.ps1, tools/tests/component-inventory.tests.ps1, wiki/System-Components.md, docs/wiki/System-Components.md
DOC_IMPACT: UPDATED - System Components regenerated from corrected registry evidence; generated docs projection refreshed.
TEST_IMPACT: UPDATED - new focused component inventory regression added; existing sync/continuity/current-state checks pass.
INTERFACE_IMPACT: UNCHANGED
SECURITY_IMPACT: NO_CHANGE_REVIEWED - no runtime/security behavior changed; BattlEye surfaces remain inventory evidence only.
OPERATIONAL_IMPACT: NONE - no deployment/wiki publication/Pages deployment performed.
CROSS_REPO_IMPACT: NONE - member repos inspected read-only, not mutated.
COMPATIBILITY_IMPACT: NONE
FRESHNESS[github_candidate_branch]: VERIFIED_AT_OBSERVATION at f20e616
FRESHNESS[live_server/deployment/runtime]: NOT_REVERIFIED
FRESHNESS[live_db]: NOT_REVERIFIED
FRESHNESS[live_battleye]: NOT_REVERIFIED

Stopping for independent review. PR #41 remains draft/open and unmerged.

Copy link
Copy Markdown
Owner Author

INDEPENDENT CONTROL REVIEW — PR #41 REMAINS DO NOT MERGE

The prior evidence-precision defects are corrected, but the candidate still has a reproducibility/provenance blocker in tools/build-component-inventory.ps1.

Blocking findings:

  1. Hard-coded observation identity/time

    • generated evidence embeds hub commit 38249878de2c03d6f5e2afd4884ee1b5beb9603d;
    • last_verified is hard-coded to 2026-08-21.
      A future rerun after main advances would therefore emit stale observation metadata rather than the actual source identity/time used for that run.
  2. Machine-local ORCH dependency

    • generator defaults OrchRoot = D:\XCSV_ORCH;
    • ORCH entries are generated only if that external local directory exists.
      Therefore the supposedly deterministic registry is host-dependent. A clean/GitHub/CI environment without that path cannot reproduce the same registry.
  3. Non-portable ORCH canonical paths

    • ORCH component canonical_path values are machine paths such as D:/XCSV_ORCH/src/... rather than paths relative to x-cessive/XCSV_ORCH (for example src/...).
      Canonical repository identity must not depend on one workstation path.
  4. Stale evidence wording

    • registry notes still describe source_wired as where LiveSource "contains or references" the component, even though the corrected implementation now requires concrete entrypoint/config/init/module evidence. The generated contract and implementation must agree.

Required correction: make the inventory generation provenance-bound and reproducible. Derive/accept explicit observed source identities; use repo-relative paths for external/member repos; do not silently include/omit ORCH based solely on presence of a machine-local directory. If an external source snapshot is required, make its repo identity + observed SHA explicit and fail/mark NOT_REVERIFIED rather than changing canonical output nondeterministically.

Do not merge until corrected and independently reviewed. Preserve the new 4/4 evidence-precision regressions and all existing UNKNOWN runtime boundaries.

Copy link
Copy Markdown
Owner Author

XCSV-REFACTOR-INV-001 / issue #30 receipt

PR #41 remains draft/open and unmerged.

Candidate SHA: 49ca90fa71d875987b3ea293a19999b35f0b25b4
Verdict: PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED

Provenance correction:

  • Removed hard-coded XCSV base commit 38249878de2c03d6f5e2afd4884ee1b5beb9603d from tools/build-component-inventory.ps1.
  • Removed the hard-coded last_verified standing constant; generated entries derive the observation date from execution time.
  • Removed default machine-local D:\XCSV_ORCH dependency.
  • ORCH inventory now requires an explicit verified x-cessive/XCSV_ORCH source when refreshing ORCH file entries.
  • Missing/unverified ORCH source emits explicit EXTERNAL_SOURCE_NOT_REVERIFIED instead of silently changing canonical output.
  • ORCH canonical_path values are repository-relative (src/..., tools/..., tests/...).
  • SOURCE_WIRED wording now requires concrete engine entrypoint, config/include, init/bootstrap, module/handler, or direct load/import/call-path evidence.

Observed source identities:

  • XCSV generated inventory source observation: x-cessive/XCSV@c9407cf6ba38ff629400a76161beaa342e6ca2d3, VERIFIED_AT_OBSERVATION, observed at 2026-08-21T03:17:45Z.
  • XCSV_ORCH external observation: x-cessive/XCSV_ORCH@8cb52165912fd2dcd2890397c351b477ee63c2ce, VERIFIED_AT_OBSERVATION, observed at 2026-08-21T03:17:45Z.
  • Final candidate SHA after generated output commit: 49ca90fa71d875987b3ea293a19999b35f0b25b4.

Corrected counts:

  • Total components: 328
  • By repository: x-cessive/Exile=221, x-cessive/XCSV=27, x-cessive/XCSV_ADDONS=13, x-cessive/XCSV_GUARD=53, x-cessive/XCSV_ORCH=14
  • By kind: ADDON=56, DATABASE=83, MISSION_MODULE=38, OTHER=25, SCRIPT=29, SERVER_ADDON=3, TOOL=94
  • By working verdict: CONSOLIDATE_DUPLICATE=1, KEEP_VENDOR_REFERENCE=64, REFACTOR_ACTIVE=155, UNKNOWN=108
  • CATALOGUE_PRESENT=328
  • SOURCE_WIRED=35
  • Remaining runtime/deployment/boot/player UNKNOWN/NOT_REVERIFIED: 328 component entries retain unverified live evidence boundaries.

Portable ORCH path proof:

  • Generated ORCH paths are repository-relative only: src/xcsv-controller.ps1, src/xcsv-gauntlet.ps1, src/xcsv-hermes.ps1, src/xcsv-integrity.ps1, src/xcsv-workers.ps1, tests/xcsv-failure-tests.ps1, tests/xcsv-gauntlet-run.ps1, tests/xcsv-gauntlet-v2.ps1, tests/xcsv-gauntlet-v3.ps1, tests/xcsv-integrity-tests.ps1, tests/xcsv-regression.ps1, tools/deploy.ps1, tools/release.ps1, tools/secret-scan.ps1.
  • Regression proves the same ORCH Git identity/content at two different checkout paths emits equivalent ORCH component IDs and canonical paths.

Validation:

  • Component inventory precision tests: PASS, 4 passed / 0 failed.
  • Component inventory provenance/reproducibility tests: PASS, 3 passed / 0 failed.
  • JSON/schema validation: PASS for registry/components.json, registry/current-state.json, registry/repository-identity.json.
  • Duplicate component_id check: PASS, 0 duplicates across 328 components.
  • Docs generation: PASS, 16 pages written, front matter verified.
  • Memory index generation: PASS, 465 entries.
  • RAG generation: PASS, 2136 chunks, output outside repo at D:\CAGE\xcsv-rag.
  • Sync-policy tests: PASS, 33 passed / 0 failed.
  • Continuity-state tests: PASS, 5 passed / 0 failed.
  • Current-state tests: PASS, 5 passed / 0 failed.
  • Changed-page link validation: PASS for wiki/System-Components.md and docs/wiki/System-Components.md.
  • git diff --check: PASS.

Remaining UNKNOWN / NOT_REVERIFIED:

  • live server deployed PBOs and hashes
  • loaded mod/servermod command line
  • RPT/boot logs
  • live DB schema/query presence
  • live BattlEye filter files
  • player-runtime behavior
  • runtime authority for AI engines and overlapping vehicle systems
  • final XCSV_ADDONS <-> LiveSource custody beyond source/mirror evidence

COMPLETION_IMPACT: v1.0.0
CHANGED_SURFACES: registry/components.json, tools/build-component-inventory.ps1, tools/tests/component-inventory.tests.ps1, tools/tests/component-inventory-provenance.tests.ps1, wiki/System-Components.md, docs/wiki/System-Components.md
DOC_IMPACT: UPDATED - System Components regenerated from corrected registry evidence; generated docs projection refreshed.
TEST_IMPACT: UPDATED - provenance/reproducibility regressions added; precision inventory, sync/continuity/current-state checks pass.
INTERFACE_IMPACT: UNCHANGED
SECURITY_IMPACT: NO_CHANGE_REVIEWED - no runtime/security behavior changed; BattlEye surfaces remain inventory evidence only.
OPERATIONAL_IMPACT: NONE - no deployment/wiki publication/Pages deployment performed.
CROSS_REPO_IMPACT: NONE - XCSV_ORCH inspected read-only, not mutated.
COMPATIBILITY_IMPACT: NONE
FRESHNESS[github_candidate_branch]: VERIFIED_AT_OBSERVATION at 49ca90fa71d875987b3ea293a19999b35f0b25b4
FRESHNESS[XCSV_inventory_source_observation]: VERIFIED_AT_OBSERVATION at c9407cf6ba38ff629400a76161beaa342e6ca2d3
FRESHNESS[XCSV_ORCH_external_observation]: VERIFIED_AT_OBSERVATION at 8cb52165912fd2dcd2890397c351b477ee63c2ce
FRESHNESS[live_server/deployment/runtime]: NOT_REVERIFIED
FRESHNESS[live_db]: NOT_REVERIFIED
FRESHNESS[live_battleye]: NOT_REVERIFIED

Stopping for independent review. PR #41 remains draft/open and unmerged.

Copy link
Copy Markdown
Owner Author

Independent review — PR #41

Verdict: CHANGES_REQUIRED (narrow reproducibility correction).

The provenance/path corrections at candidate 49ca90f materially improve the generator: hard-coded XCSV/date provenance is removed, ORCH is explicit/verified when supplied, ORCH canonical paths are repository-relative, absent ORCH is explicit, and SOURCE_WIRED wording is corrected.

Remaining blocker: member-submodule source identity is not bound.

Most inventory data is read from the addons, catalogue, and guard working trees, but the generator currently binds only the XCSV superproject HEAD plus optional external ORCH. It does not verify that each member working tree:

  • is the expected repository;
  • is checked out at the exact gitlink SHA recorded by the XCSV superproject;
  • is clean (or otherwise binds a dirty-worktree fingerprint).

Therefore the same XCSV superproject HEAD can still generate different components.json output if a submodule is at a different commit or locally modified. A superproject Git SHA alone does not prove the contents actually read from submodule working trees.

Required narrow correction:

  1. For addons, catalogue, and guard, derive expected gitlink SHA from the XCSV superproject and independently observe actual repo identity + HEAD.
  2. Require expected repository identity (x-cessive/XCSV_ADDONS, x-cessive/Exile, x-cessive/XCSV_GUARD).
  3. Require actual HEAD == recorded gitlink SHA before using that member source for authoritative file-level enumeration; otherwise fail closed or explicitly mark the member source NOT_REVERIFIED/STALE and do not silently inventory mismatched contents.
  4. Detect dirty tracked/untracked state that could affect inventory. Either require a clean member worktree for authoritative generation, or bind an explicit deterministic dirty fingerprint and label the observation accordingly. Do not represent a dirty working tree as equivalent to its HEAD SHA.
  5. Add regressions for: matching clean gitlink -> verified; mismatched member HEAD -> blocked/not-reverified; dirty member source -> blocked/non-equivalent; same verified member identities across paths -> equivalent output.
  6. Record all member source observations in generated registry notes/evidence and preserve runtime/deployment UNKNOWN boundaries.

Do not broaden into runtime/gameplay work, member-repo mutation, #31, or deletion. PR remains draft/unmerged pending independent review.

Copy link
Copy Markdown
Owner Author

XCSV-REFACTOR-INV-001 / issue #30 member-submodule provenance receipt

PR #41 remains draft/open and unmerged.

Candidate SHA: 6b7bca059ab4302382ad6659bc12374a0c1f9c71
Verdict: PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED

Implemented only the remaining member-submodule provenance/reproducibility correction requested in PR comment 5364819429 / issue comment 5364820336.

Source Observations

  • XCSV superproject observation: x-cessive/XCSV@1eb51a21040cbec1984c492d164199ebd99a6f44, VERIFIED_AT_OBSERVATION, observed at 2026-08-21T03:33:01Z.
  • XCSV_ADDONS member observation:
    • expected gitlink: 1481d6492524f0c9ecefaf8e48c3ae94e3c2f504
    • observed repo: x-cessive/XCSV_ADDONS
    • observed HEAD: 1481d6492524f0c9ecefaf8e48c3ae94e3c2f504
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
  • Exile/catalogue member observation:
    • expected gitlink: 64f5dff61059bdad2c1d608b60dcd00e583defa3
    • observed repo: x-cessive/Exile
    • observed HEAD: 64f5dff61059bdad2c1d608b60dcd00e583defa3
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
  • XCSV_GUARD member observation:
    • expected gitlink: af497d0dc6fb60dcf1bccbafcc531c7038d64f0c
    • observed repo: x-cessive/XCSV_GUARD
    • observed HEAD: af497d0dc6fb60dcf1bccbafcc531c7038d64f0c
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
  • XCSV_ORCH external observation: x-cessive/XCSV_ORCH@8cb52165912fd2dcd2890397c351b477ee63c2ce, VERIFIED_AT_OBSERVATION; ORCH canonical paths remain repository-relative.

Behavior Added

  • Generator resolves expected member gitlink SHAs from XCSV superproject HEAD via git ls-tree.
  • Generator independently verifies member repository identity/origin, actual HEAD, expected gitlink SHA, and worktree cleanliness before file-level enumeration.
  • Member HEAD mismatch now fails closed with STALE_MEMBER_SOURCE.
  • Dirty tracked/untracked member source now fails closed with DIRTY_MEMBER_SOURCE and a deterministic dirty fingerprint.
  • Incorrect member repository origin/identity fails closed with explicit identity mismatch.
  • Same verified member commits at different workstation paths produce equivalent logical member entries.

Corrected Counts

  • Total components: 329
  • By repository: x-cessive/Exile=221, x-cessive/XCSV=28, x-cessive/XCSV_ADDONS=13, x-cessive/XCSV_GUARD=53, x-cessive/XCSV_ORCH=14
  • By kind: ADDON=56, DATABASE=83, MISSION_MODULE=38, OTHER=25, SCRIPT=29, SERVER_ADDON=3, TOOL=95
  • By working verdict: CONSOLIDATE_DUPLICATE=1, KEEP_VENDOR_REFERENCE=64, REFACTOR_ACTIVE=156, UNKNOWN=108
  • CATALOGUE_PRESENT=329
  • SOURCE_WIRED=35
  • Runtime/deployment/boot/player evidence remains UNKNOWN/NOT_REVERIFIED for 329 entries.

Validation

  • Inventory precision tests: PASS, 4 passed / 0 failed.
  • Provenance/reproducibility tests: PASS, 3 passed / 0 failed.
  • Member-source/gitlink tests: PASS, 5 passed / 0 failed.
    • clean exact gitlink -> verified
    • wrong member commit -> stale/blocked
    • dirty member source -> dirty/blocked with fingerprint
    • same verified members at different paths -> equivalent entries
    • incorrect origin identity -> fail closed
  • JSON/schema validation: PASS for registry/components.json, registry/current-state.json, registry/repository-identity.json.
  • Duplicate component_id validation: PASS, 0 duplicates across 329 components.
  • Docs generation: PASS, 16 pages written, front matter verified.
  • Memory index generation: PASS, 465 entries.
  • RAG generation: PASS, 2141 chunks, output outside repo at D:\CAGE\xcsv-rag.
  • Sync-policy tests: PASS, 33 passed / 0 failed.
  • Continuity-state tests: PASS, 5 passed / 0 failed.
  • Current-state tests: PASS, 5 passed / 0 failed.
  • Changed-page link validation: PASS for wiki/System-Components.md and docs/wiki/System-Components.md.
  • git diff --check: PASS.

Remaining UNKNOWN / NOT_REVERIFIED

  • live server deployed PBOs and hashes
  • loaded mod/servermod command line
  • RPT/boot logs
  • live DB schema/query presence
  • live BattlEye filter files
  • player-runtime behavior
  • runtime authority for AI engines and overlapping vehicle systems
  • final XCSV_ADDONS <-> LiveSource custody beyond source/mirror evidence

Completion Impact

COMPLETION_IMPACT: v1.0.0
CHANGED_SURFACES: registry/components.json, tools/build-component-inventory.ps1, tools/tests/component-inventory.tests.ps1, tools/tests/component-inventory-provenance.tests.ps1, tools/tests/component-inventory-member-source.tests.ps1, wiki/System-Components.md, docs/wiki/System-Components.md
DOC_IMPACT: UPDATED - System Components regenerated from corrected member-bound registry evidence; generated docs projection refreshed.
TEST_IMPACT: UPDATED - member-source/gitlink provenance regressions added; inventory/provenance/sync/continuity/current-state checks pass.
INTERFACE_IMPACT: UNCHANGED
SECURITY_IMPACT: NO_CHANGE_REVIEWED - no runtime/security behavior changed; BattlEye surfaces remain inventory evidence only.
OPERATIONAL_IMPACT: NONE - no deployment/wiki publication/Pages deployment performed.
CROSS_REPO_IMPACT: NONE - member repositories and XCSV_ORCH inspected read-only, not mutated.
COMPATIBILITY_IMPACT: NONE
FRESHNESS[github_candidate_branch]: VERIFIED_AT_OBSERVATION at 6b7bca059ab4302382ad6659bc12374a0c1f9c71
FRESHNESS[XCSV_inventory_source_observation]: VERIFIED_AT_OBSERVATION at 1eb51a21040cbec1984c492d164199ebd99a6f44
FRESHNESS[XCSV_ADDONS_member_gitlink]: VERIFIED_AT_OBSERVATION at 1481d6492524f0c9ecefaf8e48c3ae94e3c2f504, clean
FRESHNESS[Exile_member_gitlink]: VERIFIED_AT_OBSERVATION at 64f5dff61059bdad2c1d608b60dcd00e583defa3, clean
FRESHNESS[XCSV_GUARD_member_gitlink]: VERIFIED_AT_OBSERVATION at af497d0dc6fb60dcf1bccbafcc531c7038d64f0c, clean
FRESHNESS[XCSV_ORCH_external_observation]: VERIFIED_AT_OBSERVATION at 8cb52165912fd2dcd2890397c351b477ee63c2ce
FRESHNESS[live_server/deployment/runtime]: NOT_REVERIFIED
FRESHNESS[live_db]: NOT_REVERIFIED
FRESHNESS[live_battleye]: NOT_REVERIFIED

Stopping for independent review. PR #41 remains draft/open and unmerged.

Copy link
Copy Markdown
Owner Author

Independent review — candidate 6b7bca059ab4302382ad6659bc12374a0c1f9c71.

The member-submodule correction is sound: addons, catalogue, and guard are now identity-bound to XCSV gitlinks, required clean, and covered by stale/dirty/wrong-origin/path-reproducibility regressions.

One final reproducibility blocker remains. The generator also reads XCSV superproject source (tools/*, including the generator itself) and optional XCSV_ORCH source, but Get-GitObservation for those repositories verifies repo/HEAD only and does not bind or fail on a dirty worktree. Dirty XCSV or ORCH content could therefore influence registry/components.json while still being labeled VERIFIED_AT_OBSERVATION for the clean HEAD SHA.

Required narrow correction: apply one source-observation invariant to every repository whose files are read. Preflight XCSV and explicit ORCH for identity + HEAD + relevant cleanliness before generation; dirty source must fail closed or be explicitly dirty/fingerprinted, but must not be represented as clean-HEAD truth. Perform XCSV preflight before generated outputs make the worktree dirty. Add regressions for dirty XCSV source and dirty ORCH source. Preserve all existing precision, member-gitlink, provenance, and runtime-UNKNOWN behavior.

PR #41 remains draft/unmerged pending independent review.

Copy link
Copy Markdown
Owner Author

XCSV-REFACTOR-INV-001 / issue #30 generalized source-cleanliness receipt

PR #41 remains draft/open and unmerged.

Candidate SHA: d2373eabbdb6f35ce312eb2c4df546049f9078ab
Verdict: PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED

Implemented only the final generalized source-observation cleanliness correction requested in PR comment 5364903242 / issue comment 5364904048.

Source Observations

  • XCSV source observation:
    • observed repo: x-cessive/XCSV
    • observed SHA: 2099f222b43e1074026e9fe4ec8b18817dacea5f
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
    • permitted generated dirty before inventory generation: 0
    • observed at: 2026-08-21T03:55:33Z
  • XCSV_ADDONS member observation:
    • expected gitlink: 1481d6492524f0c9ecefaf8e48c3ae94e3c2f504
    • observed repo: x-cessive/XCSV_ADDONS
    • observed HEAD: 1481d6492524f0c9ecefaf8e48c3ae94e3c2f504
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
  • Exile/catalogue member observation:
    • expected gitlink: 64f5dff61059bdad2c1d608b60dcd00e583defa3
    • observed repo: x-cessive/Exile
    • observed HEAD: 64f5dff61059bdad2c1d608b60dcd00e583defa3
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
  • XCSV_GUARD member observation:
    • expected gitlink: af497d0dc6fb60dcf1bccbafcc531c7038d64f0c
    • observed repo: x-cessive/XCSV_GUARD
    • observed HEAD: af497d0dc6fb60dcf1bccbafcc531c7038d64f0c
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
  • XCSV_ORCH external observation:
    • observed repo: x-cessive/XCSV_ORCH
    • observed SHA: 8cb52165912fd2dcd2890397c351b477ee63c2ce
    • result: VERIFIED_AT_OBSERVATION
    • clean: True
    • ORCH canonical paths remain repository-relative.

Behavior Added

  • XCSV root source preflight now verifies identity, HEAD, and relevant source cleanliness before writing registry/components.json or wiki/System-Components.md.
  • Dirty XCSV source paths that can affect inventory now fail closed with DIRTY_XCSV_SOURCE and a deterministic dirty fingerprint.
  • Only narrow generated-output surfaces are permitted as pre-existing dirty paths between build runs: registry/components.json, wiki/System-Components.md, docs/wiki/System-Components.md.
  • Member submodule dirtiness remains delegated to the dedicated member observations; staged superproject gitlink changes are not ignored.
  • Explicit ORCH source preflight now verifies identity, HEAD, and clean worktree.
  • Dirty explicit ORCH source now fails closed with DIRTY_EXTERNAL_SOURCE and a deterministic dirty fingerprint.
  • Dirty XCSV or ORCH can no longer be represented as clean repo@HEAD VERIFIED_AT_OBSERVATION truth.

Corrected Counts

  • Total components: 330
  • By repository: x-cessive/Exile=221, x-cessive/XCSV=29, x-cessive/XCSV_ADDONS=13, x-cessive/XCSV_GUARD=53, x-cessive/XCSV_ORCH=14
  • By kind: ADDON=56, DATABASE=83, MISSION_MODULE=38, OTHER=25, SCRIPT=29, SERVER_ADDON=3, TOOL=96
  • By working verdict: CONSOLIDATE_DUPLICATE=1, KEEP_VENDOR_REFERENCE=64, REFACTOR_ACTIVE=157, UNKNOWN=108
  • CATALOGUE_PRESENT=330
  • SOURCE_WIRED=35
  • Runtime/deployment/boot/player evidence remains UNKNOWN/NOT_REVERIFIED for 330 entries.

Validation

  • Inventory precision tests: PASS, 4 passed / 0 failed.
  • Provenance/reproducibility tests: PASS, 3 passed / 0 failed.
  • Member-source/gitlink tests: PASS, 5 passed / 0 failed.
  • Root/ORCH source-cleanliness tests: PASS, 5 passed / 0 failed.
    • clean XCSV source -> accepted
    • dirty XCSV source -> blocked/fingerprinted
    • clean explicit ORCH source -> accepted
    • dirty explicit ORCH source -> blocked/fingerprinted
    • expected generated output changes after preflight -> permitted
  • JSON/schema validation: PASS for registry/components.json, registry/current-state.json, registry/repository-identity.json.
  • Duplicate component_id validation: PASS, 0 duplicates across 330 components.
  • Docs generation: PASS, 16 pages written, front matter verified.
  • Memory index generation: PASS, 465 entries.
  • RAG generation: PASS, 2145 chunks, output outside repo at D:\CAGE\xcsv-rag.
  • Sync-policy tests: PASS, 33 passed / 0 failed.
  • Continuity-state tests: PASS, 5 passed / 0 failed.
  • Current-state tests: PASS, 5 passed / 0 failed.
  • Changed-page link validation: PASS for wiki/System-Components.md and docs/wiki/System-Components.md.
  • git diff --check: PASS.

Remaining UNKNOWN / NOT_REVERIFIED

  • live server deployed PBOs and hashes
  • loaded mod/servermod command line
  • RPT/boot logs
  • live DB schema/query presence
  • live BattlEye filter files
  • player-runtime behavior
  • runtime authority for AI engines and overlapping vehicle systems
  • final XCSV_ADDONS <-> LiveSource custody beyond source/mirror evidence

Completion Impact

COMPLETION_IMPACT: v1.0.0
CHANGED_SURFACES: registry/components.json, tools/build-component-inventory.ps1, tools/tests/component-inventory-source-cleanliness.tests.ps1, wiki/System-Components.md, docs/wiki/System-Components.md
DOC_IMPACT: UPDATED - System Components regenerated from clean-source-bound registry evidence; generated docs projection refreshed.
TEST_IMPACT: UPDATED - root/ORCH source-cleanliness regressions added; inventory/provenance/member/sync/continuity/current-state checks pass.
INTERFACE_IMPACT: UNCHANGED
SECURITY_IMPACT: NO_CHANGE_REVIEWED - no runtime/security behavior changed; BattlEye surfaces remain inventory evidence only.
OPERATIONAL_IMPACT: NONE - no deployment/wiki publication/Pages deployment performed.
CROSS_REPO_IMPACT: NONE - member repositories and XCSV_ORCH inspected read-only, not mutated.
COMPATIBILITY_IMPACT: NONE
FRESHNESS[github_candidate_branch]: VERIFIED_AT_OBSERVATION at d2373eabbdb6f35ce312eb2c4df546049f9078ab
FRESHNESS[XCSV_inventory_source_observation]: VERIFIED_AT_OBSERVATION at 2099f222b43e1074026e9fe4ec8b18817dacea5f, clean
FRESHNESS[XCSV_ADDONS_member_gitlink]: VERIFIED_AT_OBSERVATION at 1481d6492524f0c9ecefaf8e48c3ae94e3c2f504, clean
FRESHNESS[Exile_member_gitlink]: VERIFIED_AT_OBSERVATION at 64f5dff61059bdad2c1d608b60dcd00e583defa3, clean
FRESHNESS[XCSV_GUARD_member_gitlink]: VERIFIED_AT_OBSERVATION at af497d0dc6fb60dcf1bccbafcc531c7038d64f0c, clean
FRESHNESS[XCSV_ORCH_external_observation]: VERIFIED_AT_OBSERVATION at 8cb52165912fd2dcd2890397c351b477ee63c2ce, clean
FRESHNESS[live_server/deployment/runtime]: NOT_REVERIFIED
FRESHNESS[live_db]: NOT_REVERIFIED
FRESHNESS[live_battleye]: NOT_REVERIFIED

Stopping for independent review. PR #41 remains draft/open and unmerged.

Copy link
Copy Markdown
Owner Author

Independent control review — XCSV-REFACTOR-INV-001 / PR #41

Verdict: PASS_ACCEPTED_CANDIDATE_FOR_MERGE.

Accepted candidate: d2373eabbdb6f35ce312eb2c4df546049f9078ab.

Independent review confirms the source-inventory tranche now closes the provenance/reproducibility class previously blocking merge:

  • XCSV superproject source is preflighted for repository identity, HEAD and relevant cleanliness before generation.
  • XCSV_ADDONS, Exile and XCSV_GUARD are verified against the exact XCSV gitlink SHAs, correct origins and clean worktrees before enumeration.
  • Explicit XCSV_ORCH source is verified for repository identity, HEAD and cleanliness; dirty external source fails closed.
  • Dirty source is fingerprinted and cannot masquerade as clean-HEAD VERIFIED_AT_OBSERVATION truth.
  • Only explicitly known generated projection paths may remain dirty after successful source preflight; other root source dirtiness fails closed.
  • Canonical ORCH paths are repository-relative.
  • SOURCE_WIRED remains restricted to concrete wiring evidence rather than source presence/name-reference.
  • Database and XCSV_ADDONS classification precision corrections remain intact.

Validated evidence reported by the candidate:

  • inventory precision: 4/4 PASS
  • provenance/reproducibility: 3/3 PASS
  • member-source/gitlink: 5/5 PASS
  • root/ORCH source cleanliness: 5/5 PASS
  • JSON/schema: PASS
  • duplicate IDs: PASS
  • docs generation: PASS
  • memory index: PASS
  • RAG: PASS
  • sync-policy: 33/33 PASS
  • continuity-state: 5/5 PASS
  • current-state: 5/5 PASS
  • changed-page links: PASS
  • git diff --check: PASS

Important boundary: this acceptance is for PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED only. It does NOT establish deployed/runtime/boot/live-DB/live-BattlEye/player-runtime truth. Those remain NOT_REVERIFIED/UNKNOWN and issue #30 should remain open for the runtime/deployment evidence lane.

PR #41 is approved to proceed through the normal merge + documentation publication/reconciliation transaction. Do not reinterpret this as authority for gameplay mutation, member-repo mutation, deletion, or runtime claims.

@x-cessive
x-cessive merged commit 09e4b61 into main Aug 21, 2026
2 checks passed

Copy link
Copy Markdown
Owner Author

Final merge/publication/reconciliation receipt — XCSV-REFACTOR-INV-001 / issue #30

Verdict: PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED.

Merge:

  • Accepted candidate: d2373eabbdb6f35ce312eb2c4df546049f9078ab.
  • PR XCSV-REFACTOR-INV-001: expand component inventory #41 pre-merge verification: head matched accepted SHA, PR was open/unmerged, no newer candidate on PR branch/pull ref, candidate worktree clean.
  • PR body update via GitHub connector: completed after merge; CLI metadata mutation was token-blocked earlier.
  • Merge commit on main: 09e4b61168904e9fd04e001f7f10d44917d2cc82.
  • Final observation-only follow-up on main: 0cb610d8430543a5474191c466d1439b5479a1d8.
  • PR XCSV-REFACTOR-INV-001: expand component inventory #41 is now GitHub-merged/closed with merge commit 09e4b61168904e9fd04e001f7f10d44917d2cc82.

Post-merge validation from merged main:

  • inventory precision tests: 4/4 PASS
  • provenance/reproducibility tests: 3/3 PASS
  • member-source/gitlink tests: 5/5 PASS
  • root/ORCH cleanliness tests: 5/5 PASS
  • JSON/schema validation: PASS
  • duplicate component IDs: PASS (330 total, no duplicates)
  • docs generation validation: PASS
  • memory index generation: PASS (465 entries)
  • RAG generation: PASS
  • sync-policy tests: 33/33 PASS
  • continuity-state tests: 5/5 PASS
  • current-state tests: 5/5 PASS
  • changed-page link validation: PASS (4 changed docs/pages checked)
  • git diff --check: PASS

Inventory counts:

  • total components: 330
  • SOURCE_WIRED: 35
  • by repo: x-cessive/Exile=221; x-cessive/XCSV=29; x-cessive/XCSV_ADDONS=13; x-cessive/XCSV_GUARD=53; x-cessive/XCSV_ORCH=14
  • by kind: ADDON=56; DATABASE=83; MISSION_MODULE=38; OTHER=25; SCRIPT=29; SERVER_ADDON=3; TOOL=96
  • by refactor action: CONSOLIDATE_DUPLICATE=1; KEEP_VENDOR_REFERENCE=64; REFACTOR_ACTIVE=157; UNKNOWN=108
  • runtime/deployment/boot/player evidence remains UNKNOWN / NOT_REVERIFIED for all 330 components where live sources were not inspected.

Publication:

  • GitHub Wiki: WIKI_SYNCHRONIZED.
  • Published wiki SHA: f55184f0bf71e366e29db2bb454ae7136692fb12.
  • Evidence: tools/push-wiki.ps1 from merged canonical wiki/ reported already up to date; fresh XCSV.wiki.git clone matched all 17 tracked wiki/*.md files by SHA256.
  • GitHub Pages: VERIFIED.
  • Pages evidence: GitHub Pages source main:/docs, build type workflow, deployment 6015372598 for 09e4b61168904e9fd04e001f7f10d44917d2cc82, status success at 2026-08-21T04:20:22Z; served https://x-cessive.github.io/XCSV/wiki/System-Components.html returned HTTP 200 and contained merged inventory content including XCSV-ORCH-TOOL-TOOLS-DEPLOY-PS1 and SOURCE_WIRED markers.

Canonical D:\XCSV reconciliation:

  • Safety branch preserved: safety/xcsv-repo-001-local-main-20260820-212302-2207385017c3 -> 2207385017c3b8ea6dc64c59d42fd71262e2c6f9.
  • Before update, only expected untracked tools/local-ai material was present.
  • D:\XCSV was fast-forwarded without reset/clean/delete.
  • Final D:\XCSV HEAD / origin main: 0cb610d8430543a5474191c466d1439b5479a1d8.
  • tools/local-ai remains preserved and untracked.

Per-source freshness/observation result:

  • GitHub main: observed/verified at merge SHA 09e4b61168904e9fd04e001f7f10d44917d2cc82; final observation commit is 0cb610d8430543a5474191c466d1439b5479a1d8, so consumers correctly derive the stored merge-SHA observation as STALE when comparing to latest main. No standing CURRENT claim is stored.
  • GitHub Wiki: observed/verified at XCSV.wiki.git@f55184f0bf71e366e29db2bb454ae7136692fb12; derived CURRENT only when live comparison uses that same wiki SHA.
  • GitHub Pages: observed/verified at deployment 6015372598 for merge SHA; derived CURRENT only while live comparison confirms that deployment identity.
  • D:\XCSV: reconciled and observed; final checkout is at 0cb610d8430543a5474191c466d1439b5479a1d8 with local-ai untracked.
  • Desktop roadmap: NOT_REVERIFIED.
  • Runtime server: NOT_REVERIFIED.
  • Deployed artifacts/PBOs: NOT_REVERIFIED.
  • Live DB: NOT_REVERIFIED.
  • Live BattlEye: NOT_REVERIFIED.
  • RPT/boot/player-runtime behavior: NOT_REVERIFIED.

Completion impact:

  • CHANGED_SURFACES: registry/components.json; wiki/System-Components.md; docs/wiki/System-Components.md; wiki/Memory-Index.md; docs/wiki/Memory-Index.md; tools/build-component-inventory.ps1; tools/tests/component-inventory*.ps1; registry/current-state.json.
  • DOC_IMPACT: UPDATED. System Components and generated docs/wiki projections refreshed from registry/wiki source; GitHub Wiki and Pages verified after merge.
  • TEST_IMPACT: UPDATED. New and existing inventory/source-observation regression suites passed post-merge.
  • INTERFACE_IMPACT: UNCHANGED. No runtime/API/gameplay interface mutation.
  • SECURITY_IMPACT: NO_CHANGE_REVIEWED. Inventory/provenance/docs only; no credentials/runtime mutation.
  • OPERATIONAL_IMPACT: UPDATED. Documentation publication and local checkout reconciliation completed; no live server/deployment mutation.
  • CROSS_REPO_IMPACT: NONE. Member repositories inspected only through recorded gitlinks/observations; no member repo mutation.
  • COMPATIBILITY_IMPACT: NONE. No gameplay/runtime source changed.
  • FRESHNESS: GitHub source/wiki/Pages/local checkout observed as above; live runtime/deployment/DB/BattlEye/player surfaces remain NOT_REVERIFIED.

Issue #30 remains open for the remaining live/deployment/runtime evidence lane. No issue #31 work was started.

Copy link
Copy Markdown
Owner Author

Independent post-merge review — XCSV-REFACTOR-INV-001 / PR #41

Verdict: PASS_ACCEPTED_MERGE_PUBLICATION_RECONCILIATION.

Canonical GitHub state independently confirms:

  • PR XCSV-REFACTOR-INV-001: expand component inventory #41 merged normally from accepted head d2373eabbdb6f35ce312eb2c4df546049f9078ab.
  • merge commit: 09e4b61168904e9fd04e001f7f10d44917d2cc82.
  • current main: 0cb610d8430543a5474191c466d1439b5479a1d8, observation-only follow-up whose parent is the merge commit.
  • PR body records 330 components / 35 SOURCE_WIRED and preserves the verdict PARTIAL_INVENTORY / PARTIAL_SOURCE_VERIFIED.
  • final receipt records Wiki synchronization, Pages verification, local D:\XCSV reconciliation, safety-branch retention and preservation of tools/local-ai.

This accepts the bounded source-inventory merge/publication/reconciliation transaction. It does NOT promote live server/deployment/DB/BattlEye/RPT/player truth; those remain NOT_REVERIFIED / UNKNOWN under issue #30.

Documentation modernization may now proceed under issue #31 using the merged registry as evidence input, while #37 remains owner of permanent audit/CI guardrails.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant