feat(attest-demo-ux): TWO floating live encircled panels + coherent surgical scenario + expandable named regions · v2.28.0

Replaces the single tolerance grid in the floating HUD with the TWO encircled
panels (Fail A · drift, Fail B · catastrophe) drawn as live canvases — the 144
lattice coloured green/amber/red + ellipse RINGS around each cluster (the gzip
ANALOGUE of the Rust encircleRegionsPng). Both redraw INSTANTLY on every text edit
or intervention. Labeled: the sealed Rust encircled PNGs above are the receipt;
these are the fast in-browser preview (live Rust/GPU redraw is the horizon).
  • A = reality's cells coloured by the authorized lane; B = where reality lands
    ON the negative's territory (overlap = on the excluded rail).
  • Expandable 'named regions' list in the HUD — the lit coordinates named
    (🔧🌊 C,C3 = Operations ⊕ Operations.Flow), green in-lane / red out-of-lane.

COHERENT default scenario (from spec.txt), not word-salad: Intent = a laparoscopic
gallbladder removal (authorized), Reality = a faithful completion (loads IN_LANE),
Negative = an emergency open-chest bypass (dramatically different). Presets are the
two polished canonical scenarios — 'Surgery → Sledgehammer' (heavy manual force —
same vocabulary, structural authority breach → OFF_DOMAIN) and 'Analysis →
Execution' (pushes a live trade the intent forbade) — plus Faithful (reset) and
Force Tie (UNPLACEABLE).

Encircled decode now states the key point: the placement is DETERMINISTIC RELATIVE
TO THIS REEF — if this reef defines 'sledgehammer' as operational, the Operations
band lights; if strategic, the Strategy band. The reef comes from the spec.

Verified in jsdom (canvas ctx stubbed): default surgical faithful → IN_LANE,
Sledgehammer → OFF_DOMAIN + hudB CATASTROPHE, two encircled canvases, region list
populated, single </script>. Guard 25/25.

Originating-Terminal: 📐 architect (VS Code)
Relevant-Rooms: 🔨 builder, 📐 architect, 🧭 navigator
Story: The floating panel was the wrong output (a plain grid) — the operator wants the TWO encircled renders floating and redrawing live on edit/intervention, with named expandable regions, and a coherent real scenario (surgery vs sledgehammer) so it works as expected rather than reading as word-salad. All landed; the reef-relative determinism made explicit.

Receipt-Verified: σ=2.54 · cell=A · witness-agreement=GZIP_ONLY · lens=gzip · receipt=d27b27a7

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EssMgKix9aZmZ5dxGPqYCW

commit 3aa8fa918 — 144×144 lattice triptych (on-chip)

◎ the ingest chose A3,B3 — Strategy·Fund × Tactics·Signal — acting on A1,B2 — Strategy·Law × Tactics·Deal (grip 0.766) · the walk starts at the ACTOR's row · 5 file(s)

⏱ ingest 2598.9ms (corpus→lattice) · definer walk 359ms (row→transpose→row, ballistic XOR per hop) · total 3177ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 15% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

A3,B3 — Strategy·Fund × Tactics·Signal (actor) acting on A1,B2 — Strategy·Law × Tactics·Deal (patient) · grip 0.766

actor seed A3,B3 — Financial budget runway funds the signal bandwidth and message reach of the intended broadcast channel. Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round). Allocation is which one this dollar chooses, and the choice is irreversible by the time the wire clears. Burn rate divides into substrate-building and exhaust. Substrate compounds; exhaust evaporates by quarter-end. The investor who pays for substrate is buying a different asset than the investor who pays for exhaust. Capital allocation is the irreversible vote — the bet that closes options to keep the others open. Each dollar deployed buys both the asset and the foreclosure of every alternative the dollar could have funded. Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipients tune out. The right channel is the one whose floor matches the message's importance. A broadcast that addresses everyone addresses no one. Precision over reach until the address is calibrated; only then does scale convert prospects into recipients rather than into unsubscribes. Repetition is the cost of being heard. Three sends to one recipient beats one send to three; the first send announces, the second send is heard, the third send is remembered.

patient seed A1,B2 — Binding rules in law regulate each deal exchange and negotiation rate through a governance article. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. The deal sets the exchange rate between two value substrates. Mis-priced exchange is a slow-bleed; correctly priced exchange compounds both sides, because each cycle of trade enriches the bench on both ends. Terms are the API between two organizations — every clause is a contract method that survives the handshake. Renegotiation is the breaking change; the deal is the stable interface either side can build against. Negotiation closes at the moment both parties' BATNAs cross. Push past that point and you've bought regret at retail; stop short and you've left margin on the table that the next deal will not return to you. A signed counterparty is more valuable than an unsigned promise. The signature is the substrate; the conversation that preceded it is the exhaust the signature converted into substrate.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 10% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 13% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 9 in the 9×9 A1..C3 square · 1906 in the 132×132 children square · 366 cross-zone
REALITY: 0 in the 3×3 ABC corner · 4 in the 9×9 A1..C3 square · 1120 in the 132×132 children square · 181 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 55 claims @ θ 0.625 · reality 39 claims @ θ 0.625 · projection 316ms

SHAPE-MATCH σ = 12.29 — the real intent↔reality definer walk vs random-reality (actual 0.2382 vs random 0.046). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_spec-delta · verified-reef · realization matches the spec at full instrument grip

Most out-of-lane row: C2 · Loop — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 8% vs tolerance 25%.
631 green · 433 amber · 0 red · 41 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 81% <span style="color:#5a6673">zone 3 = candidate children, pre-ratchet (repo-derived dumps not ye

reality 77% This change operates in the ui frontend domain, involving page render. This change operates in

B,B Tactics is the choice of which leverage to pull at which beat.

intent 72% const colOrder = [...new Set(D.cells144.map(c=>c.col))];

reality 73% const colOrder = [...new Set(D.cells144.map(c=>c.col))];

C,C Operations is the loop that runs whether anyone watches.

intent 84% ## REQUIREMENTS (falsifiable) - **R1 — reef-from-spec.** A command that compiles an arbitrary m

reality 75% (no distinctive match)

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 84% <span class="dim">No throughput figure is quoted that this run did not measure — the speed IS t

reality 81% (no distinctive match)

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 88% (no distinctive match)

reality 78% (no distinctive match)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 80% (no distinctive match)

reality 73% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 72% const pts = lit[grp]; if(pts.length < 2) continue;

reality 81% const pts = lit[grp]; if(pts.length < 2) continue;

B2,B2 The deal sets the exchange rate between two value substrates.

intent 86% const ri = rowOrder.indexOf(c.row), ci = colOrder.indexOf(c.col); if(ri<0||ci<0) continue;

reality 73% const ri = rowOrder.indexOf(c.row), ci = colOrder.indexOf(c.col); if(ri<0||ci<0) continue;

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 72% timings: ⏱ ingest 1151ms <span class="dim">(corpus→lattice sense)</span> · definer walk 127ms <

reality 73% const negativeText = 'Performed an emergency unauthorized open-chest cardiac bypass using heavy

C1,C1 Power flows where the grid lets it.

intent 77% (no distinctive match)

reality 73% (no distinctive match)

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 78% (no distinctive match)

reality 75% // lands equidistant → UNPLACEABLE, defers to a human rather than guess.

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 80% (no distinctive match)

reality 77% hr.innerHTML = \`<div><b class="gn">in-lane \${inl.length}:</b> \${inl.length?inl.slice(0,10).m

commit context — 5 file(s)

feat(attest-demo-ux): TWO floating live encircled panels + coherent surgical scenario + expandable named regions · v2.28.0

Replaces the single tolerance grid in the floating HUD with the TWO encircled
panels (Fail A · drift, Fail B · catastrophe) drawn as live canvases — the 144
lattice coloured green/amber/red + ellipse RINGS around each cluster (the gzip
ANALOGUE of the Rust encircleRegionsPng). Both redraw INSTANTLY on every text edit
or intervention. Labeled: the sealed Rust encircled PNGs above are the receipt;
these are the fast in-browser preview (live Rust/GPU redraw is the horizon).
  • A = reality's cells coloured by the authorized lane; B = where reality lands
    ON the negative's territory (overlap = on the excluded rail).
  • Expandable 'named regions' list in the HUD — the lit coordinates named
    (🔧🌊 C,C3 = Operations ⊕ Operations.Flow), green in-lane / red out-of-lane.

COHERENT default scenario (from spec.txt), not word-salad: Intent = a laparoscopic
gallbladder removal (authorized), Reality = a faithful completion (loads IN_LANE),
Negative = an emergency open-chest bypass (dramatically different). Presets are the
two polished canonical scenarios — 'Surgery → 

docs/pmu/attest-demo-report.html
docs/pmu/attest-demo-ux.html
packages/thetacog-mcp/package.json
scripts/pmu/attest-demo-ux.mjs
tests/pmu-simulator/attest-demo-ux-airgapped.test.mjs

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 617.02ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 3aa8fa918

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.