fix(outreach): truncated-UA scanners can no longer pass the human gate (the Marsh burst) + regression fixtures

Verdict on the jaymin.kim@marsh.com click: NOT human. Four events in five
seconds across two different links, from two datacenter IPs (Leaseweb
Manassas hosting · M247 NY proxy), all carrying a UA that ends at the bare
"AppleWebKit/537.36" prefix — no Chrome//Safari//Version/ family token, which
no real browser omits. Marsh's mail-security stack detonating links.

Two gaps closed: (1) the truncated-UA signature joins BOT_SIGNATURES and the
click-log write-time classifier — this forgery resolved geo, so it passed the
UA-present + geo-resolved gate; (2) the alert-gate commit itself (652d6a1db,
2026-07-13) was never pushed, so prod emailed alerts for both scanner clicks
(alert_sent 17:16:51 + 17:17:05 on the ledger) — this push deploys the gate.
25 fixtures green, incl. real Chrome/Safari UAs still passing.

Originating-Terminal: 🔒 vault
Relevant-Rooms: ☕ network, 🔨 builder, 📐 architect
Story: The operator asked "is this human?" about a no-UA click alert; the ledger showed the burst pattern, the IPs showed datacenters, and the diagnosis surfaced that the existing gate was stranded unpushed while a truncated-UA forgery would have beaten it anyway.
Persona-Intent: the operator triaging click signals — alerts should now mean a human with overwhelming probability; scanners stay on the forensic ledger where they belong.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017qmembLtWRgiuSKCAAg25t

commit 4450c85f8 — 144×144 lattice triptych (on-chip)

◎ the ingest chose B,A1 — Tactics × Strategy·Law — acting on A,B1 — Strategy × Tactics·Speed (grip 0.734) · the walk starts at the ACTOR's row · 3 file(s)

⏱ ingest 155.2ms (corpus→lattice) · definer walk 871ms (row→transpose→row, ballistic XOR per hop) · total 1132ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 5% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

B,A1 — Tactics × Strategy·Law (actor) acting on A,B1 — Strategy × Tactics·Speed (patient) · grip 0.734

actor seed B,A1 — Maneuver choices in tactics must respect the binding mandate and governance rule of law within the beat. Tactics is the choice of which leverage to pull at which beat. Not what we want, but how the want lands on Tuesday: the sequence of irreversible commitments, each made before the next one's information is available. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Speed of feedback dominates speed of execution. Tactics that converge fast beat tactics that compute long, because the loop closes around the world's response before the world has moved. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. The tactical map is a ranked list of moves where each move carries a cost-of-delay. Pick the move whose cost of doing it tomorrow exceeds the cost of doing it imperfectly today. A rule names what the system MAY NOT do. If the agent can do X, then 'forbid X' is not the constraint — it is wishful thinking dressed as policy. Constraints live in the gate, not in the prompt. Execution is a sequence of bets made under uncertainty. Tactics is the discipline of betting the right size on the bet whose information value pays for the loss-if-wrong. Regulation is not advisory. The fine is the price tag stapled to the omitted control; insurance is the option pricing on the failure-mode the regulation already named.

patient seed A,B1 — Defining a long-horizon strategy frame requires a lattice where speed and tempo beats prevent missed choices. The lattice we build today is what next year's underwriter inherits. We set the substrate that downstream pricing rides on, and that choice is paid back across every quarter we keep operating. Direction is what you keep when you forget the calendar. Multi-year posture, irreversibly chosen, defines the boundary every quarter renegotiates inside. Strategy is the bearing the rotation is measured against. Latency is the price of a missed beat. Every hundred milliseconds of round-trip turns a parallel race into a stalemate, because the first arrival sets the rules the second arrival has to honor. Throughput compounds: doubling the rate doubles the surface area where serendipity can hit. A pipeline at twice the velocity is not twice as productive — it is exponentially more lucky. Time-to-first-byte is the only number the operator feels at the wheel. Optimize the felt latency before the raw throughput; the operator's grip on the loop is what drives the loop forward.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 4% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 3% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 4 in the 9×9 A1..C3 square · 899 in the 132×132 children square · 152 cross-zone
REALITY: 0 in the 3×3 ABC corner · 7 in the 9×9 A1..C3 square · 1214 in the 132×132 children square · 184 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 9 claims @ θ 0.6094 · reality 16 claims @ θ 0.6094 · projection 281ms

SHAPE-MATCH σ = -0.35 — the real intent↔reality definer walk vs random-reality (actual 0.0526 vs random 0.066). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · noise · below zero — this read is noise, not a measurement

Most out-of-lane row: C3 · Flow — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 24% vs tolerance 25%.
552 green · 770 amber · 0 red · 84 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 69% (no distinctive match)

reality 70% // applewebkit\/[\d.]+\s*$ = TRUNCATED UA (2026-07-14 Marsh burst): scanners ship the bare

B,B Tactics is the choice of which leverage to pull at which beat.

intent 69% (no distinctive match)

reality 64% (no distinctive match)

C,C Operations is the loop that runs whether anyone watches.

intent 70% (no distinctive match)

reality 66% (no distinctive match)

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 70% (no distinctive match)

reality 66% (no distinctive match)

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 73% (no distinctive match)

reality 67% (no distinctive match)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 72% (no distinctive match)

reality 66% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 67% (no distinctive match)

reality 67% (no distinctive match)

B2,B2 The deal sets the exchange rate between two value substrates.

intent 66% (no distinctive match)

reality 67% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 67% (no distinctive match)

reality 69% // WebKit prefix with no Chrome//Safari//Version/ family token after it — no real browser does.

C1,C1 Power flows where the grid lets it.

intent 78% (no distinctive match)

reality 63% (no distinctive match)

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 67% (no distinctive match)

reality 66% const SECURITY_UA = /safelinks|microsoft office|proofpoint|mimecast|barracuda|forcepoint|symant

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 81% (no distinctive match)

reality 66% // so it would pass the UA-present + geo-resolved gate without this signature.

commit context — 3 file(s)

fix(outreach): truncated-UA scanners can no longer pass the human gate (the Marsh burst) + regression fixtures

Verdict on the jaymin.kim@marsh.com click: NOT human. Four events in five
seconds across two different links, from two datacenter IPs (Leaseweb
Manassas hosting · M247 NY proxy), all carrying a UA that ends at the bare
"AppleWebKit/537.36" prefix — no Chrome//Safari//Version/ family token, which
no real browser omits. Marsh's mail-security stack detonating links.

Two gaps closed: (1) the truncated-UA signature joins BOT_SIGNATURES and the
click-log write-time classifier — this forgery resolved geo, so it passed the
UA-present + geo-resolved gate; (2) the alert-gate commit itself (652d6a1db,
2026-07-13) was never pushed, so prod emailed alerts for both scanner clicks
(alert_sent 17:16:51 + 17:17:05 on the ledger) — this push deploys the gate.
25 fixtures green, incl. real Chrome/Safari UAs still passing.

Originating-Terminal: 🔒 vault
Relevant-Rooms: ☕ network, 🔨 builder, 📐 architect
Story: The operator asked "is this human?" about a no-UA click alert; the ledger showed the burst pattern, the IPs showed datacenters, and the diagnosis surfaced that the existing gate was

src/app/api/track/click-log/route.ts
src/lib/notify/click-sense.ts
tests/notify/click-sense.test.ts

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 642.87ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 4450c85f8

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.