feat(pmu): write-lock tape gate — 100% cryptographic attribution, Phase 1

write_tape_intent (dumb ledger entry: sha256 cursor_id, PENDING_WALK,
returns ONLY the cursor + directive) and read_tape_receipt (the binary
gate: synchronous lazy evaluation — the read fires the gzip-NCD physics
engine and returns the receipt in the same call; filled:true is the only
success). Three hard limits encoded, not prose: (1) phantom mass — the
walk ALWAYS runs, the measured read is recorded, then classified
INSUFFICIENT_MASS below MIN_GZIP_BYTES=220 (measured: a 232-char pebble
walks to a confident-looking OFF_DOMAIN — plausible-but-untrustworthy
physics, never absent physics); (2) death spiral — 3 sparse strikes per
lineage → terminal CATASTROPHIC_FAILURE, the 4th write REFUSED at the
protocol level (not a prompt directive); (3) async gap — no background
worker, no races: the read is the choke point. Append-only: receipts are
CHILD events, the pending entry is never mutated, every event carries
metrics.verdict so the served scrubber never breaks. New 'hallucination'
preset completes the write-lock matrix (measured OFF_DOMAIN mode B).
Guard: tests/pmu-simulator/tape-write-lock.test.mjs (8 tests) shipped in
this same commit. Receipt path is LLM-free (guarded).

Originating-Terminal: 🔨 builder
Relevant-Rooms: 🔨 builder, 🧪 laboratory, 🧭 navigator
Story: The gated goal for the tape self-improve run: an agent cannot declare success without a cursor_id mapping to a filled receipt on the physics tape. This lands the write-lock leg of the causal loop (terminal writes tape → engine measures → page polls and re-renders → gate reads) on the same shared flight tape the attest instrument already scrubs, so the permutations are visible live. The operator's mid-flight pivots (kill the background worker for synchronous lazy evaluation; never let a JS shortcut preempt the engine) are both encoded and tested.

Receipt-Verified: σ=2.00 · cell=C · witness-agreement=GZIP_ONLY · lens=gzip · receipt=fb672aab

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01YQxP9rRho3RXPUBTtdvWgZ

commit 47283a0f7 — 144×144 lattice triptych (on-chip)

◎ the ingest chose C,B — Operations × Tactics — acting on A2,B3 — Strategy·Goal × Tactics·Signal (grip 0.797) · the walk starts at the ACTOR's row · 6 file(s)

⏱ ingest 1241.7ms (corpus→lattice) · definer walk 906ms (row→transpose→row, ballistic XOR per hop) · total 2542ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 4% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

C,B — Operations × Tactics (actor) acting on A2,B3 — Strategy·Goal × Tactics·Signal (patient) · grip 0.797

actor seed C,B — Daily operations run at a cadence that ensures tactics and maneuver choices land on the correct beat. Tactics is the choice of which leverage to pull at which beat. Not what we want, but how the want lands on Tuesday: the sequence of irreversible commitments, each made before the next one's information is available. Speed of feedback dominates speed of execution. Tactics that converge fast beat tactics that compute long, because the loop closes around the world's response before the world has moved. The tactical map is a ranked list of moves where each move carries a cost-of-delay. Pick the move whose cost of doing it tomorrow exceeds the cost of doing it imperfectly today. Execution is a sequence of bets made under uncertainty. Tactics is the discipline of betting the right size on the bet whose information value pays for the loss-if-wrong. Operations is the loop that runs whether anyone watches. The daily commit, the hourly hook, the per-request fingerprint — the substrate of the substrate, ambient and unwatched. Process is what you forget to do; ops is what does itself. Convert manual moves into ambient state, because the tax of remembering compounds faster than the tax of automating. The daily friction is the diff between your intent and your harness. Close the diff or pay the tax twice — once in the slip, once in the apology to the next agent. Operations earns its keep by being boring. The day the routine is interesting is the day it has already failed and is being narrated rather than executed.

patient seed A2,B3 — Target goals prioritize the signal reach and message bandwidth required to occupy the quarterly position. Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipients tune out. The right channel is the one whose floor matches the message's importance. A broadcast that addresses everyone addresses no one. Precision over reach until the address is calibrated; only then does scale convert prospects into recipients rather than into unsubscribes. Repetition is the cost of being heard. Three sends to one recipient beats one send to three; the first send announces, the second send is heard, the third send is remembered. The target is the cell coordinate the system MUST occupy by end-of-quarter. Anything that does not drive toward that coordinate is exhaust, and exhaust does not become substrate by being labelled progress. Vision is the coordinate the lattice rotates around — the fixed bearing every iteration is measured against. Without the fixed point, motion is movement; with the fixed point, motion is convergence. Define the goal as a verifiable predicate, not a feeling. The system terminates when the predicate evaluates true, and the predicate is what the next agent inherits when this one hands off. A goal that cannot be tested is a wish. Wishes have no termination condition, so they consume budget forever; goals have a finish line and therefore a payable price.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 3% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 4% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 6 in the 9×9 A1..C3 square · 1372 in the 132×132 children square · 271 cross-zone
REALITY: 0 in the 3×3 ABC corner · 0 in the 9×9 A1..C3 square · 888 in the 132×132 children square · 106 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 42 claims @ θ 0.625 · reality 95 claims @ θ 0.6406 · projection 1140ms

SHAPE-MATCH σ = 2.83 — the real intent↔reality definer walk vs random-reality (actual 0.1488 vs random 0.059). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · weak · panel story is not yet evidence

Most out-of-lane row: B1 · Speed — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 17% vs tolerance 25%.
549 green · 1001 amber · 0 red · 123 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 64% (no distinctive match)

reality 77% for (const ev of pending) {

B,B Tactics is the choice of which leverage to pull at which beat.

intent 70% (no distinctive match)

reality 73% description: 'Appends a proposed state change to the immutable physics tape (the WRITE-LOCK — P

C,C Operations is the loop that runs whether anyone watches.

intent 78% (no distinctive match)

reality 84% intent: 'Perform the authorized laparoscopic gallbladder removal using the minimally-invasive t

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 77% tests/pmu-simulator/tape-write-lock.test.mjs. THE WRITE-LOCK GUARD (Phase 1, 100% Cryptographic

reality 75% return { cursor_id, filled: false, status: 'INSUFFICIENT_MASS', strikes, retries_remaining: MAX

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 73% (no distinctive match)

reality 77% (no distinctive match)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 69% (no distinctive match)

reality 73% const isMain = process.argv[1] && resolve(process.argv[1]) === resolve(new URL(import.meta.url)

B1,B1 Latency is the price of a missed beat.

intent 69% (no distinctive match)

reality 72% } else if (cmd === 'read') {

B2,B2 The deal sets the exchange rate between two value substrates.

intent 72% (no distinctive match)

reality 77% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 73% Receipt-Verified: σ=2.00 · cell=C · witness-agreement=GZIP_ONLY · lens=gzip · receipt=fb672aab

reality 72% metrics: { verdict: 'PENDING_WALK', mode: 'pending' }, // status stub — NOT a measurement

C1,C1 Power flows where the grid lets it.

intent 73% Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/s

reality 75% label: sparse ? '🧾 receipt · INSUFFICIENT_MASS (' + gzip_bytes + 'B < ' + MIN_GZIP_BYTES + 'B

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 69% (no distinctive match)

reality 77% (no distinctive match)

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 78% (no distinctive match)

reality 78% (no distinctive match)

commit context — 6 file(s)

feat(pmu): write-lock tape gate — 100% cryptographic attribution, Phase 1

write_tape_intent (dumb ledger entry: sha256 cursor_id, PENDING_WALK,
returns ONLY the cursor + directive) and read_tape_receipt (the binary
gate: synchronous lazy evaluation — the read fires the gzip-NCD physics
engine and returns the receipt in the same call; filled:true is the only
success). Three hard limits encoded, not prose: (1) phantom mass — the
walk ALWAYS runs, the measured read is recorded, then classified
INSUFFICIENT_MASS below MIN_GZIP_BYTES=220 (measured: a 232-char pebble
walks to a confident-looking OFF_DOMAIN — plausible-but-untrustworthy
physics, never absent physics); (2) death spiral — 3 sparse strikes per
lineage → terminal CATASTROPHIC_FAILURE, the 4th write REFUSED at the
protocol level (not a prompt directive); (3) async gap — no background
worker, no races: the read is the choke point. Append-only: receipts are
CHILD events, the pending entry is never mutated, every event carries
metrics.verdict so the served scrubber never breaks. New 'hallucination'
preset completes the write-lock matrix (measured OFF_DOMAIN mode B).
Guard: tests/pmu-simulator/tape-write-lock.test.mjs (8 tests) s

packages/thetacog-mcp/scripts/bundle-pmu.mjs
packages/thetacog-mcp/server.js
scripts/pmu/attest-scenarios.mjs
scripts/pmu/tape-intent.mjs
scripts/pmu/tape-walk-worker.mjs
tests/pmu-simulator/tape-write-lock.test.mjs

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 646.14ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 47283a0f7

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.