---
spec_id: reef-the-spec-and-sign
to_room: laboratory
from_room: operator
reef_ref: CLAUDE.md (PMU competence-walk HARD RULE) + scripts/pmu/attest-demo.mjs
originating_commit: 5c385860b
status: draft
---

# Laboratory 🧪 — Reef-the-spec + A↔B signing → the delegation drift receipt

## WHY (authored in Operator)
The delegation itself should be **measured**, not trusted. The author room (actor) signs the spec as intent; the executing room (patient) signs delivered work; the real on-chip walk measures the drift = "did the room build what the spec asked." That makes the actor–patient pair the delegation subdivision, and dogfoods the signing mesh locally as a rehearsal for the internet-wide version. This is also what unblocks Builder's R6.

## REQUIREMENTS (falsifiable)
- **R1 — reef-from-spec.** A command that compiles an arbitrary markdown spec → a reef seeded from *its own* vocabulary (NOT the generic 144-tile library). *Check:* feeding `builder-npx-underwriter-package.md` yields a reef whose anchors come from that spec.
- **R2 — A↔B signing.** Node A (author room) ed25519-signs the reef/intent commitment; node B (executing room) signs the delivered-work payload. The two signatures + the drift receipt form one transaction. *Check:* two distinct host keys appear on the receipt.
- **R3 — The REAL walk (HARD RULE).** Run the **real recursive on-chip ballistic walk** (`pmu-onchip --ballistic`, connectivity lattice, row→column→row recursion) with spec=intent, delivered-work=reality. **NEVER** the analytic `mode=converged`/diffusion shortcut, a diagonal/identity grid, a JS BFS, or Monte-Carlo-as-the-walk. Speed is a correctness signal (~14ms, not ~21s). *Check:* `tests/pmu-simulator/competence-walk-is-real.test.mjs` stays green; the walk propagates past ply 1.
- **R4 — Drift receipt.** Output = a signed receipt stating whether the delivered work cohered with the spec (σ + verdict + triptych). *Check:* run Spec A as reef, Builder's package as payload → a signed σ.
- **R5 — Local mesh dogfood.** Run the whole A↔B loop on this repo's rooms locally, as the rehearsal for the internet-wide mesh. *Check:* a local two-node transaction completes end-to-end.

## ACCEPTANCE
Take this delegation set as the test: Spec A (reef/intent) signed by Operator-as-node-A, Builder's delivered npx package (reality) signed by Builder-as-node-B → the real ballistic walk produces a signed drift receipt with a σ that says whether Builder built what the spec asked. Respect the competence-walk HARD RULE; that's the whole differentiator.