feat(attest-demo-ux): structural-delta reasoning · claims export · README stage directions · v2.24.0

Final polish steer — the whole lifecycle, ingestion → claims export:

  • Show structural delta — a Reality-minus-Intent subtraction grid: the
    'reasoning' as PURE GEOMETRY (red = drift into unauthorized coordinates,
    blue = authorized coordinates under-weighted, green = agreement). No LLM
    writes a word — it attributes WHY in/out of lane by showing which cells moved.
  • Export sealed claims file (JSON) — a local Blob download (no server, no
    network) carrying inputs, raw payloads, the three sha256 hashes, verdict,
    mode, drift%, and the sealed receipt — the forensic artifact an adjuster
    attaches to a claim.
  • Force Tie (Abstention) preset — the promised third state on demand: it
    returns UNPLACEABLE and defers to a human rather than guess.

README as stage direction: the split-screen setup (CLI left, instrument right),
an exact CLI prompt to feed the local model, the walk-through of every control,
and the hardware framing (Apple-Silicon PMU analogue here; bare-metal Linux
definer-walk for the binding receipt — eliminates browser-gzip variance, runs at
cloud scale — 'works even better on Linux').

Guard: 21/21 — adds delta-is-geometry-not-LLM, local-Blob claims export, and the
Force-Tie abstention preset.

Mirror scrub verified before push: data/pmu/study/ holds only .gitkeep (0 private
JSONs), no private markers, new UX modules present.

Originating-Terminal: 📐 architect (VS Code)
Relevant-Rooms: 🔨 builder, 📐 architect, 🎩 operator
Story: The last steer closed the loop from measurement to claim: the 'reasoning' shown as geometry (never a generated paragraph — that would reopen the black-box objection), a downloadable sealed claims file, the abstention button, and a README that scripts how an underwriter experiences the split-screen demo. Version bumped for the mirror publish.

Receipt-Verified: σ=2.00 · cell=C · witness-agreement=GZIP_ONLY · lens=gzip · receipt=4408281d

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01EssMgKix9aZmZ5dxGPqYCW

commit 50d12cc50 — 144×144 lattice triptych (on-chip)

◎ the ingest chose C3,A1 — Operations·Flow × Strategy·Law — acting on B2,A1 — Tactics·Deal × Strategy·Law (grip 0.797) · the walk starts at the ACTOR's row · 6 file(s)

⏱ ingest 3094.7ms (corpus→lattice) · definer walk 450ms (row→transpose→row, ballistic XOR per hop) · total 3732ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 3% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

C3,A1 — Operations·Flow × Strategy·Law (actor) acting on B2,A1 — Tactics·Deal × Strategy·Law (patient) · grip 0.797

actor seed C3,A1 — Flow rate and delivery throughput are subject to the binding mandate and governance rule of law. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. A rule names what the system MAY NOT do. If the agent can do X, then 'forbid X' is not the constraint — it is wishful thinking dressed as policy. Constraints live in the gate, not in the prompt. Regulation is not advisory. The fine is the price tag stapled to the omitted control; insurance is the option pricing on the failure-mode the regulation already named. Flow is the rate at which committed work crosses the finish line. Inventory accumulates upstream; flow is the only thing the customer pays for, and the only thing the operator can measure honestly. Movement is the irreversible delivery of value across the boundary. Anything stationary is cost; anything moving is either revenue, deferred revenue, or the exhaust of revenue not yet realized. Throughput dominates utilization. A ninety-nine-percent utilized system at low throughput pays the same wages as a fifty-percent utilized system at twice the throughput, but the second one ships the customer's order. Flow has a direction. Bidirectional flow is two flows, each measured separately; calling them a single flow hides the chokepoint and the chokepoint is where the leverage lives.

patient seed B2,A1 — Deal terms and exchange rates must follow the binding mandate and governance rule of law. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. The deal sets the exchange rate between two value substrates. Mis-priced exchange is a slow-bleed; correctly priced exchange compounds both sides, because each cycle of trade enriches the bench on both ends. Terms are the API between two organizations — every clause is a contract method that survives the handshake. Renegotiation is the breaking change; the deal is the stable interface either side can build against. Negotiation closes at the moment both parties' BATNAs cross. Push past that point and you've bought regret at retail; stop short and you've left margin on the table that the next deal will not return to you. A signed counterparty is more valuable than an unsigned promise. The signature is the substrate; the conversation that preceded it is the exhaust the signature converted into substrate.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 2% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 4% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 3 in the 9×9 A1..C3 square · 725 in the 132×132 children square · 201 cross-zone
REALITY: 0 in the 3×3 ABC corner · 2 in the 9×9 A1..C3 square · 1408 in the 132×132 children square · 171 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 160 claims @ θ 0.6563 · reality 19 claims @ θ 0.6094 · projection 635ms

SHAPE-MATCH σ = 1.2 — the real intent↔reality definer walk vs random-reality (actual 0.099 vs random 0.071). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_spec-delta · weak · the work has not yet landed inside the declared intent

Most out-of-lane row: C1 · Grid — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 14% vs tolerance 25%.
485 green · 721 amber · 0 red · 203 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 77% To understand GDD, you have to look at why Test-Driven Development (TDD) fails when applied to

reality 70% This change operates in the ui frontend domain, involving button page render. This change opera

B,B Tactics is the choice of which leverage to pull at which beat.

intent 81% ## Cognitive Affordance Model

reality 61% (no distinctive match)

C,C Operations is the loop that runs whether anyone watches.

intent 86% **The hardware framing — say this out loud.** This local `npx` run uses the **Apple-Silicon PMU

reality 72% setTimeout(()=>URL.revokeObjectURL(url), 1000);

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 84% **Prerequisites:** Node ≥ 18 and the Claude Code CLI (`npm install -g @anthropic-ai/claude-code

reality 75% const gc = document.createElement('div');

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 88% **Market 2 · Competence Verification (the dignity-pixel market).** The same receipt clears a hu

reality 78% gc.onclick = gc.onmouseenter = ()=> {

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 80% The HTML dashboards are starting points. Edit them to match YOUR workflow:

reality 70% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 81% **No conceptual leaks.** Every step above is the exact code in this package. Run `npx thetacog-

reality 72% (no distinctive match)

B2,B2 The deal sets the exchange rate between two value substrates.

intent 86% **Voice rules that govern themselves. Heavy LLM checks that never block your push.**

reality 70% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 75% <!-- STRUCTURAL DELTA — the "reasoning" as pure geometry (NO LLM): where Reality deviated from

reality 72% <!-- STRUCTURAL DELTA — the "reasoning" as pure geometry (NO LLM): where Reality deviated from

C1,C1 Power flows where the grid lets it.

intent 78% (no distinctive match)

reality 70% (no distinctive match)

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 80% (no distinctive match)

reality 69% (no distinctive match)

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 86% - **tol✓ N%** — off-shape N% is **inside** tolerance → **in the lane, accept** (the in-lane put

reality 70% function paintDelta(){

commit context — 6 file(s)

feat(attest-demo-ux): structural-delta reasoning · claims export · README stage directions · v2.24.0

Final polish steer — the whole lifecycle, ingestion → claims export:

  • Show structural delta — a Reality-minus-Intent subtraction grid: the
    'reasoning' as PURE GEOMETRY (red = drift into unauthorized coordinates,
    blue = authorized coordinates under-weighted, green = agreement). No LLM
    writes a word — it attributes WHY in/out of lane by showing which cells moved.
  • Export sealed claims file (JSON) — a local Blob download (no server, no
    network) carrying inputs, raw payloads, the three sha256 hashes, verdict,
    mode, drift%, and the sealed receipt — the forensic artifact an adjuster
    attaches to a claim.
  • Force Tie (Abstention) preset — the promised third state on demand: it
    returns UNPLACEABLE and defers to a human rather than guess.

README as stage direction: the split-screen setup (CLI left, instrument right),
an exact CLI prompt to feed the local model, the walk-through of every control,
and the hardware framing (Apple-Silicon PMU analogue here; bare-metal Linux
definer-walk for the binding receipt — eliminates browser-gzip variance, runs at
clou

docs/pmu/attest-demo-report.html
docs/pmu/attest-demo-ux.html
packages/thetacog-mcp/README.md
packages/thetacog-mcp/package.json
scripts/pmu/attest-demo-ux.mjs
tests/pmu-simulator/attest-demo-ux-airgapped.test.mjs

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 519.48ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 50d12cc50

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.