swayfx-mosaic/docs/ROADMAP.md

Roadmap

The EGL/FX attempt failed at Bubblewrap namespace creation before the helper: EGL_NOT_RUN / ALLOCATOR_NOT_ATTEMPTED; budget consumed. The probe-local cgroup task-limit protocol is IMPLEMENTED_OFFLINE, EXPERIMENTAL / OFFLINE_REVIEW_ACCEPTED, with inert validation only. The next gate is new conversational approval of the reviewed benign qualification manifests, before requesting separate benign qualification approval. Real manager qualification and new EGL runtime remain NOT_RUN; a later EGL attempt needs its own approval. No production contract or STEP20C status changes, and no new native execution is authorized.

The CORE-C V2 follow-up V4 is PARTIALLY_ADVANCED: five consumed runs/32 output captures, sampled migration/ refocus and root/nested OOM progress, fullscreen comparison and native G3 readback NOT_EXERCISED. Disposition remains PRIVATE_COREC_V2_NEEDS_TARGETED_EVIDENCE; production OOM policy UNDECIDED. The separate OFFLINE_ONLY fixture repair and its review are complete. The next scientific evidence is an observable fullscreen client identity without relaxing dumpability or the identity guard, before a new fullscreen campaign; native readback acquisition also remains outstanding. Those campaigns require a distinct instruction and budget; no retry, refund, optional-slot substitution or reopening of either closed campaign is admitted. The historical V2 evidence, 12 runs/102 captures and its failures remain unchanged. Buffer identity, atomic generation, complete damage and GPU completion remain NOT_PROVEN; legal approval and named maintenance owners remain open. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED; PRODUCTION_MULTI_OUTPUT NOT_YET_SUPPORTED; PRODUCTION_AUTHORIZED FALSE.

This is the canonical order of work, not proof that a feature exists. A step is not ready for implementation until its user-visible and architectural behavior is documented in the canonical docs. Update UX, architecture, and the relevant packaging/upstream documents before changing behavior. Record validation and limitations when the step closes.

Step	State	Goal
STEP20A	DONE	Native compositor foundation
STEP20B	EXPERIMENTAL	First scrollable runtime row
STEP20C	NEXT	Viewport and multi-output correctness
STEP20D	PLANNED	Multiple runtime rows
STEP20E	PLANNED	Session V2 persistence
STEP20F	PLANNED	QuickShell visualization
STEP20G	PLANNED	Package and daily-use qualification

STEP20A — native foundation · DONE

Deliverables: native layout enum/parser, workspace-local state, real tiled Row 0, insertion/removal/focus model, IPC exposure, isolated build/staging, headless tests. Exit evidence: historical report and current source/tests. Documentation before implementation: original architecture, upstream base, and package coexistence contract; current canonical versions are Architecture, Upstream, and Packaging.

STEP20B — first scrollable row · EXPERIMENTAL

Deliverables: logical horizontal geometry, bounded scroll_x, scene translation, focus visibility, workspace-local standard-layout toggle, headless visual evidence, patch export. Exit evidence: historical report. The single-row proof is present, but it is not a general-use viewport guarantee. Documentation before further implementation: UX and Architecture must keep the temporary sizing and scene boundaries explicit.

STEP20C — viewport correctness · NEXT

Goal: make the single-row viewport correct at workspace and output boundaries. Planned deliverables: clipping or an equivalent rendering strategy, matching hit testing, adjacent-output tests, resize/migration tests, and transaction-safe camera animation. Exit criteria: no cross-output visual/input leakage in the tested scenarios; camera and IPC remain consistent across transactions; standard layouts still pass. Docs first: review the STEP20C viewport proposal, resolve the visual/input gaps found by the PARTIALLY FEASIBLE isolated probe and the PARTIALLY FEASIBLE SceneFX subtree spike, then settle the resulting contract in Architecture and UX and update Known Limitations before implementation. The subtree spike proves a narrow tiled path but exposes a popup visual/input leak and unresolved damage, effect and package-maintenance gates. The PARTIALLY_FEASIBLE popup ownership probe closes the sampled root/nested popup leak in an isolated build. The later PARTIALLY_FEASIBLE valid-grab and hidden-owner probe measures a real XDG grab and exposes a hidden-owner leak in that initial private clip; a further private guard closes the sampled leak. The later nested valid-grab probe closes only its sampled horizontal matrix; the separate vertical probe covers sampled Y-crossing popups. Further output geometries, transaction/output migration, complete damage/effects and packaging remain unresolved. None of these probes authorizes production STEP20C development or general multi-output support.

The source fixture for the valid-grab probe preserves a bounded replay path. Its existence does not change STEP20C's NEXT status or any exit criterion.

The nested valid-grab probe is FEASIBLE within its sampled horizontal headless matrix: distinct valid grabs for parent and child popups, visual/input clipping, outside dismissal, hidden-owner camera return and standard-layout return were measured in a disposable guarded binary. Its source fixture is reproducible. The next bounded feasibility test should change output geometry with the same nested grabbed hierarchy and direct control comparison. Transaction, resize/migration, damage/effects and ABI/package gates remain open; this result does not change STEP20C's NEXT status.

The vertical-output nested-grab probe is FEASIBLE within its sampled stacked-headless matrix: both standard controls produced real Y-crossing A/B popup pixels and button targets, while the disposable guarded Mosaic build excluded sampled lower popup pixels/hits and preserved upper interaction, hidden-owner return and standard-layout return. Its source fixture also reproduced the horizontal B-crossing control. The separate negative-origin comparison is recorded below. Scaling, rotation, resize/migration, transaction generations, complete damage/effects and dependency maintenance remain open. STEP20C stays NEXT.

The negative-origin nested-grab probe is FEASIBLE within its sampled signed-coordinate headless matrix: HEADLESS-1 remained at x=-800, the virtual pointer reached both outputs, standard controls proved A/B crossing pixels and buttons, and the private guarded Mosaic build clipped sampled right-output pixels and hits. Hidden owner and splith return passed. Its source fixture preserves replay. Scaling, rotation, resize/migration, transaction generations, complete damage/effects and dependency maintenance remain open. STEP20C stays NEXT.

The temporal damage probe is PARTIALLY_FEASIBLE: repeated XDG lifecycle and camera transitions restored sampled private Mosaic pixels and standard controls, and time-ordered private damage extents covered changed pixels between sampled captures. It did not identify every presented frame or bind camera/clip/input to a native applied transaction generation. Its source fixture remains experimental. Its proposed headless presentation-event gate was examined by the subsequent probe below. Scaling, rotation, resize/migration, complete effects and dependency maintenance remain open. STEP20C stays NEXT.

The presentation identity probe is PARTIALLY_FEASIBLE: native wlroots 0.20.2 headless present events were paired to commits by (output, commit_seq) and applied scene/clip snapshots were taken at the commit callback. Settled target states passed sampled clipping and input checks; faster commands could coalesce or defer. The actual buffer content of each commit and frame-specific pointer relation remain unproven. Its private source fixture does not enter the production build. Its then-open buffer identity gate was examined by the subsequent private probe below. Scaling, rotation, migration/resize, complete effects/damage and SceneFX maintenance remain open. STEP20C stays NEXT.

The output buffer identity probe is PARTIALLY_FEASIBLE in this fixed matrix: 32 real GBM output-state buffers were read through FX texture APIs, correlated with native commits and headless presents. Twenty-eight were released on present and four early because HEADLESS-2 repaint reached a global release in the private instrumentation; the latter were not retained through present. Three second reads were byte-identical. Sampled popup pixels matched the applied scene/clip across three pairs with the same A/B popup objects; the initial logical/applied camera lag also had an identified buffer but no proven visual defect. Readback materially changed timing, and neither frame-specific pointer identity nor an atomic scene/input generation is proven. Its private fixture is preserved experimental source, not a production dependency. The smallest next gate is a lower-impact buffer observation with an explicit applied scene/input generation, then separate effects/damage and SceneFX maintenance qualification. STEP20C stays NEXT.

The applied state/input probe is PARTIALLY_FEASIBLE in its fixed headless matrix. A distinct private patch prevented the historical cross-output buffer release; three selected buffers were read and retained through native headless present, while a partial experimental epoch and real pointer traces exposed applied state at build and hit. Client delivery under grabs remained a separate observation. Incomplete mutation coverage, untested error paths and intrusive readback leave the temporal-consistency gate open. The next experiment was to map the mutation boundary with lower-impact observation before any production STEP20C decision. STEP20C stays NEXT; multi-output remains NOT YET SUPPORTED.

The mutation coverage probe is PARTIALLY_FEASIBLE overall. A bounded trace-only matrix separated camera/clip, popup hierarchy, same-size client content and surface input region changes. The input-region test changed the actual scene hit while asi_applied_epoch was unchanged, so that counter is not a complete geometry/hit identity. Output destruction released one held reference in the real private compositor; rejected-commit cleanup is still untested on a backend. Whether SwayFX's existing event-loop ordering suffices for build/present/input coherence is UNDECIDED. The smallest next gate is a controlled hit-geometry mutation between one known output-state build and its deferred headless present, with hits and client delivery sampled on both sides. This remains scientific evidence, not production STEP20C.

The independently replayed commit/present/input ordering probe tested that gate without changing backend scheduling. Twenty real input region mutations applied in two private modes, but none occurred between an accepted output commit and its matching headless present; P2 is INCONCLUSIVE. The sampled hit and client delivery matched effective input state, and no distinct Mosaic clipping defect was reproduced. The subsequent pending-input event-loop follow-up below addressed that bounded timing question without observing the target interval. STEP20C remains NEXT and multi-output NOT YET SUPPORTED.

The bounded event-loop pending-input probe decoupled normal client submission from IPC/client acknowledgements, then stopped after five attempts in each private mode. All 20 target mutations applied, with no matching commit-to-present interleaving. Close this particular temporal line as INCONCLUSIVE / NOT EXERCISED for the tested headless backend and fixed geometry. Do not infer an extra generation contract or production readiness. The next separate STEP20C gate should address complete effects/damage, scaling, or resize/migration. STEP20C stays NEXT and multi-output Mosaic NOT YET SUPPORTED.

The effects/damage probe then demonstrated genuine shadow spill in both standard controls, excluded the sampled spill under private Mosaic, and measured a visibly active translucent blur, sampled damage coverage and three exact settled camera returns. Its result is PARTIALLY_FEASIBLE: interior Mosaic shadow, optimized blur cache correctness, outside-viewport shader sampling, popup effects and saved buffers remain unqualified. The next distinct gate should test scaling first for the inherited clip and effect draw regions; rotation, resize/migration, saved buffers and ABI/package maintenance remain open. This does not authorize STEP20C production work or STEP20D. STEP20C stays NEXT and production multi-output Mosaic NOT YET SUPPORTED.

STEP20D — multi-row Spatial Canvas · PLANNED

Goal: connect rows to runtime tree, transactions, scene, input, and IPC. Planned deliverables: active-row navigation, row-local scroll/focus, deterministic insertion/reflow, in-row reorder, and between-row movement. Exit criteria: real tiled containers preserve identity and order across row changes; focus and camera restore correctly; headless multi-row tests pass. Docs first: settle exact interactions and row invariants in UX and Architecture. Unset key combinations remain TBD.

STEP20E — Session V2 persistence · PLANNED

Goal: restore Mosaic workspaces across sessions without creating a second runtime authority. Planned deliverables: durable activation, row order/membership, active row, scroll, focus, stable identities, and restart tests. Exit criteria: deterministic restore and safe fallback for missing windows/older snapshots. Docs first: specify persistence identity, versioning, failure handling, and ownership in Architecture and UX.

STEP20F — QuickShell visualization · PLANNED

Goal: expose compositor-owned Mosaic state in the desktop UI. Planned deliverables: workspace/row view and optional layout indication without duplicate QML layout state. Exit criteria: UI reflects IPC state and cannot contradict the compositor. Docs first: specify IPC consumer behavior and UI interactions in Architecture and UX.

STEP20G — package and daily-use qualification · PLANNED

Goal: publish a validated optional session while preserving standard SwayFX fallback. Planned deliverables: final Arch package, optional distinct session entry, install/rollback instructions, and a forward port proven against a newer SwayFX release. Exit criteria: package file ownership and coexistence verified, release build and headless/live qualification recorded, standard SwayFX updates remain independent. Docs first: update Packaging, Upstream, Development, UX, and Known Limitations with the intended release contract.

Effects freeze audit: the historical campaign exceeded its three-pair budget (15 pairs in five Mosaic runs); all evidence is retained. A separate fresh rebuild reproduced the main counts with one pair under the corrected campaign guard. The traced reference had a different effective size, so instrumentation neutrality and its cause remain unqualified. See the effects report. This adds no contract.

The preserved fractional scaling probe is PARTIALLY_FEASIBLE for static 1.25 uniform/mixed and 1.5 mixed headless outputs. Actual modes/PNGs and logical pointer motion were calibrated. Sampled root/nested popup and shadow spill disappeared on the neighboring output; visible blur, terminal popup columns, two settled camera returns and available physical damage were consistent. Opaque tiled-overflow controls, permitted interior shadow, restored Mosaic hit, caches and intermediate frames remain unqualified. Ten failed early calibrations and their source-provenance limit are retained. The two-pair global budget was respected. The next distinct gate should test resize/migration of owner/output clips; rotation, saved buffers and ABI/package remain separate. This is evidence only: STEP20C stays NEXT, production multi-output NOT YET SUPPORTED, STEP20D–G PLANNED.

The preserved dynamic output ownership probe is PARTIALLY_FEASIBLE: actual logical resize 800→960→800 and workspace migration H1→H2→H1 retain workspace/tiled identities and update sampled applied tiled/root-popup clips. Vacated outputs show exact background after stabilization. Two standard controls fail final reference calibration through fixture occlusion; Mosaic's corrected calibration passes. Maximum-scroll clamp, migrated clipped popup input, independent opaque tiled spill, effects and intermediate frames remain unqualified. Budgets are exhausted at six reconfigurations and six migrations, with zero additional camera pairs. No production change follows. Rotation is the next separate geometric gate; other open STEP20C gates persist. The original temporary evidence manifest passed verification before an offline analyzer rerun replaced its bytes; see the report for provenance. STEP20C stays NEXT, multi-output NOT YET SUPPORTED.

The rotated-output probe is PARTIALLY_FEASIBLE for sampled applied geometry, PNG/pointer calibration, hidden-owner return and physical damage. Its partial-popup clipping conclusion is UNDECIDED because the Mosaic popup never crossed the R90 boundary and the pristine R90 capture was lost to a fixture assertion. The next distinct geometric gate should force a legal grabbed Mosaic popup portion across that boundary with a completed pristine control. STEP20C remains NEXT.

The static R90 partial-popup gate then measured exactly that B crossing and completed the pristine control. The bounded result is PARTIALLY_FEASIBLE: B's sampled pixels/input obeyed the owner clip, while the independent clipped-away A input point and broader temporal/effect cases remain open. Next prioritize saved transaction buffers against the same owner-derived viewport before optimized blur cache, interior shadow and ABI/package maintenance. STEP20C remains NEXT; production multi-output remains NOT YET SUPPORTED.

The subsequent saved transaction buffer campaign observed real held XDG configure transactions, reused saved buffers, private render entries and sampled ACK/timeout removal. Its target never crossed the H1/H2 boundary after the applied Mosaic camera settled at 1760. Overall INCONCLUSIVE; all three run reservations are consumed. A new, separately authorized saved-buffer experiment must calibrate the applied camera and target crossing before the first transaction. Optimized blur/cache and SceneFX ABI/package remain separate unqualified gates. STEP20C stays NEXT, multi-output NOT YET SUPPORTED.

The independent saved target crossing campaign used one measured signed camera correction and observed the actual target saved node cross x=0, render inside H1 and retain permitted pixels. H2 showed no target color, but whole-image equality failed by a repeated 253-pixel reference difference. Mosaic timeout cleanup and held input remain untested after an E2 fixture pointer error. Result PARTIALLY_FEASIBLE, architecture UNDECIDED. The next narrow gate should first resolve the H2 reference artifact and complete a fresh target timeout/input observation; optimized blur/cache and SceneFX ABI/package remain later separate gates. STEP20C is still NEXT and multi-output NOT YET SUPPORTED.

The saved-target freeze audit identifies the repeated 253-pixel H2 difference as strongly compatible with Kitty's blinking block cursor, not causally proven. A separate static-reference Mosaic timeout/input gate is authorized before optimized blur/cache and SceneFX ABI/package work. No production readiness or changed UX contract follows.

The completed static-reference saved-target natural timeout gate then measured a real crossing target saved node, clipped H1 rendering, stable full-image H2 RGB, two targeted pointer hits and natural timeout cleanup with the XDG client alive and serial 50 withheld. Combined with the earlier E1 ACK, the tested saved-target clipping matrix is viable, while damage across every frame, broader input and GPU/texture lifetime remain unqualified. Its verdict is PARTIALLY_FEASIBLE; the earlier probe's own UNDECIDED conclusion is preserved. The next separate STEP20C gate is optimized blur/cache, followed by SceneFX ABI/package. STEP20C is still NEXT, production multi-output NOT YET SUPPORTED.

The preserved optimized blur cache probe is PARTIALLY_FEASIBLE, architecture UNDECIDED. A real background layer under blur_tree triggered natural output-specific cache reconstruction and fresh central A/B/A filtered pixels in private splith and Mosaic. Sampled final tiled drawing excluded H2, whose whole RGB remained identical; output damage extents covered stabilized differences and sampled cache/FBO teardown completed. Shared boundary differences up to six RGB levels remain unresolved. Pristine C0 failed before captures through a duplicate configure fixture; its second initial image was reserved only after observation. No numerical budget was exceeded or run repeated. Instrumentation neutrality, whole-cache equivalence and intermediate frames remain unqualified. A separate pristine/untraced boundary-sampling gate should precede ABI/package qualification. This evidence freeze changes no production or UX contract. STEP20C stays NEXT, multi-output NOT YET SUPPORTED.

The preserved optimized edge causality gate is PARTIALLY_FEASIBLE, architecture UNDECIDED. Four completed fixed negative-origin runs qualify pristine/private splith and same-binary Mosaic OPT-off/on controls. Pristine/private full images and Mosaic trace-off/on full images are exact at six homologous states; common glass across layouts is also exact. Historical right/bottom differences persist without new traces, with max RGB delta 6, fresh central pixels and stable whole H2. Native FBO history causality remains unproved despite source/model support. R3 damage extents cover stabilized differences only. No clipping regression or required invariant violation is established. A separate SceneFX ABI/package audit is now justified, retaining this shared rendering limitation; optional selective GPU observation requires a new scoped ticket. This evidence is preserved without a production change. STEP20C stays NEXT, production multi-output NOT YET SUPPORTED.

The preserved SceneFX ABI/package audit is PARTIALLY_FEASIBLE, architecture SCENEFX_ABI_PACKAGE_REQUIRES_ARCHITECTURAL_DECISION. The unchanged current package builds with stock SceneFX and stages exactly /usr/bin/swayfx-mosaic. The shared experimental binary needs two clip exports absent from stock despite the same SONAME. Static embedding builds and resolves without a SceneFX shared dependency, but shared wlroots interposition, updates, security maintenance and license notices remain gates. A distinct private shared library would require a new file-ownership decision; upstream API acceptance is unknown. No integration or packaging contract is approved. The historical audit is frozen as evidence; STEP20C stays NEXT, production multi-output NOT YET SUPPORTED.

The preserved static distribution contract dossier is EXPERIMENTAL / PARTIALLY_FEASIBLE, conclusion STATIC_DISTRIBUTION_REQUIRES_CONTRACT_DECISION. One private Meson DESTDIR stage of the hash-qualified static executable contains exactly /usr/bin/swayfx-mosaic; this proves file shape only. The 85 overlapping exports and 31/34 wlroots scene bindings into the executable remain explicit paired-version constraints, not automatically defects. Only the pinned SceneFX 0.5 / observed wlroots 0.20.2 pair has non-graphical evidence. Notices (including generated protocols), security ownership, upgrades, rollback and graphical semantics remain gates. A disposable notice-section extraction passes mechanically; legal distribution compliance is not approved. The upstream API dossier is preserved and not submitted. Production strategy: NONE — USER DECISION REQUIRED. Packaging/UX contracts are unchanged; STEP20C stays NEXT and production multi-output NOT YET SUPPORTED.

Approved private STEP20C static candidate — 2026-10-13

The user approved four decisions for documentation and private prototypes only: private static SceneFX; separate complete notices under /usr/share/licenses/swayfx-mosaic/; project responsibility for embedded SceneFX maintenance; and qualification of each exact SceneFX/wlroots pair. See the decision register and bounded runtime gate. The current PKGBUILD, system SceneFX dependency, one-binary package, production sources and cumulative patch remain unchanged. The future private stage may contain only /usr/bin/swayfx-mosaic and justified regular notice files below the license directory. No private shared library, session, service, config or Sway symlink is allowed. No real installation is authorized.

Mosaic owns monitoring, impact review, rebuild and requalification of embedded SceneFX fixes, including renderer/shaders/dependencies/ABI/buffer lifetime/clip/ damage changes. Before public distribution, a release maintainer and security reviewer must be designated; no names or SLA are assigned. Preserve exact source, patch, compiler/options/dependency, notice, test and artifact manifests. A new relevant dependency build requires header/symbol/shared-layout inspection, rebuild, relocation/model/staging/headless checks and graphical requalification of relevant paths, then a separate publication decision. No automatic update subsystem is added. Ordinary SwayFX upgrades remain independent and standard SwayFX remains the fallback. All other pairs are NOT QUALIFIED.

These decisions do not settle popup UX or close STEP20C production gates. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED. Production multi-output remains NOT YET SUPPORTED.

The private static runtime gate is EXPERIMENTAL / PARTIALLY_FEASIBLE, architecture UNDECIDED. Real /usr static build/model/stage/notices/loaded-library identity/headless startup pass. Sampled H1 target pixels survive with zero target colors on H2, but whole-H2 reference equality fails through a focus/decor mismatch; input and splith return are NOT TESTED after the single run stopped. No rerun or algorithm modification occurred. Distribution notice closure, named release/security roles and broader ABI/graphics gates remain open. STEP20C NEXT, multi-output NOT YET SUPPORTED.

The static focus/input/standard follow-up is EXPERIMENTAL / INCONCLUSIVE, architecture UNDECIDED. One run reused the exact static binary, verified loaded wlroots/output geometry, calculated camera and observed the applied clip. A fixture incorrectly required stored current_border_width=0 under border none; actual IPC retained thickness 2 with empty decoration and full-size client rectangles. The run stopped before any PNG, click or splith transition. Those gates are NOT TESTED; no clipping defect or need for an algorithm change is demonstrated. No retry/build/production change occurred. A separately authorized corrected-fixture gate is required. STEP20C stays NEXT; production multi-output remains NOT YET SUPPORTED.

The static RGB/input/standard retest is EXPERIMENTAL / FEASIBLE for the tested matrix; its evidence is frozen for publication. The corrected shared IPC predicate/replay pass before the sole unchanged-static- binary run. Two full H2 references and all later H2 RGB are exact; H1 retains 182,214 target pixels, H2 zero, actual visible/reference/standard button pairs are delivered only to the right client. Targeted splith removes the native clip and retains ordinary pixels/input. The runner exits 1 only on terminal exit IPC after completed measurements and compositor exit 0; that raw failure is retained and separately diagnosed/revalidated offline. No algorithm, build, production, package or UX change follows. Wider static popup/effect/lifecycle, complete damage/generation, ABI/maintenance/notices gates remain open. D1–D4 persist; STEP20C stays NEXT and production multi-output remains NOT YET SUPPORTED.

The preserved static nested valid-grab probe is EXPERIMENTAL / INCONCLUSIVE, architecture UNDECIDED. The sole unchanged- static-binary run verified actual identity, outputs, applied camera/tiled clip and two exact whole-H2 references, then stopped before any click or popup on an invalid painted-height assertion (573 vs native SHM320). An additional IPC-y/titlebar assertion was also invalid. The recorded offline test PASS had an insufficient source-assertion audit; raw runner exit1 and all evidence remain immutable. Root/nested grabs, geometry, popup pixels/input/dismissal and splith are NOT TESTED in this campaign. No algorithm/production/UX/package change or retry; budget exhausted. Correct/replay geometry predicates offline before a separately authorized fresh static popup gate. Historical failure evidence is frozen; STEP20C NEXT, production multi-output NOT YET SUPPORTED.

The preserved static nested geometry replay gate is EXPERIMENTAL / INCONCLUSIVE. True SHM/configure/paint geometry and nine historical popup cases were replayed;145 historical asserts and2288 current AST sites are classified, with partial executed coverage explicit.195 offline tests pass, but independent review retains CORRECTION_REQUIRED: the readiness aggregator accepts semantically incomplete proof records. Input correlation and terminal-code repairs are accepted; no readiness or new static popup result. No graphical run or execution reservation occurred. Close the residual offline receipt-validation gate before proposing runtime. Architecture UNDECIDED; STEP20C NEXT; production multi-output NOT YET SUPPORTED.

Local receipt semantic integrity gate — offline only

The R02 receipt-integrity gate is local and experimental. The real writer/aggregate share semantic validation through the existing immutable-data replay and R01 input correlation; typed receipt content, scenario-specific omissions, AST/test inventories and final review bindings are checked. Historical geometry evidence remains INCONCLUSIVE; this correction cannot retroactively qualify static popups. The final local gate is READY_FOR_NEW_RUNTIME: 206 offline tests pass, 13478 recorded invalid mutations are rejected, and independent review accepts the final 18-source/15-receipt bindings after one bounded B-01 writer repair. The actual writer returns READY with five PASS markers and no blockers. R02 is RESOLVED for this offline fixture; partial AST coverage and runtime limitations remain explicit. Phase B is uncommitted and unpublished, and readiness only permits requesting a separate future authorization. No compositor/runtime authorization, production/UX/package change or STEP20D work follows. Architecture UNDECIDED; STEP20C NEXT; production multi-output NOT YET SUPPORTED.

Preserved static nested runtime handoff — experimental evidence

The handoff and valid-grab report records PASS transfer/preflight and one unchanged-static-binary run, verdict INCONCLUSIVE. Four genuine grabs and sampled E1/E2 Mosaic crossing pixels, E1 visible/forbidden input and dismissal passed. E2 reached splith with mapped popups and standard pixels, then a fixture root-window consistency predicate rejected the old-to-cleared clip transition. Offline retained observations support settled clip removal; standard A/B input, explicit child close/A survival and final H2 restoration remain NOT TESTED. Raw runner/IPC exit1 and clean compositor/client exits0 remain intact. No rerun or algorithm change; historical phase B is preserved for publication by the E2 completion batch. Architecture UNDECIDED, STEP20C NEXT, production multi-output NOT YET SUPPORTED; broader damage/generation/output/ effects/ABI/distribution gates remain open.

Static E2 completion and conditional private integration — 2026-10-13

The completion report records B offline PASS with accepted final handoff, C independent ACCEPTED / FEASIBLE for the tested matrix, and conditional D initial BUILDABLE. C measures two genuine grabs, applied standard return, B then A standard input, explicit child close/A survival and normal owner close with exact whole-H2 RGB. Historical INCONCLUSIVE evidence is unchanged. D passes its one SceneFX build, one Mosaic build/model/ELF check and one exact five-file stage with zero graphics or installations. The accepted comment delta is COMMENT-ONLY / NOT REBUILT; C does not qualify the different D binary. The original fixture README remains a sealed pre-execution protocol; use README_RESULTS.

Final batch audit is PASS / ACCEPTED with no BLOCKING finding. The accompanying documentation/fixture publication and its verified remote identities are recorded in Git history and the private closeout receipt. A separate bounded authorization is required for an annotated rebuild or D's exact-binary graphical qualification. Complete damage, atomic generation, static hidden-owner/effects/saved-buffer continuity, wider output/migration matrices, maintained ABI, notice/legal closure and named maintenance roles remain gates. This is STEP20C evidence, not implementation of roadmap STEP20D. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED. Production multi-output remains NOT YET SUPPORTED. No production/UX/packaging contract changes.

Preserved overnight STEP20C qualification — 2026-10-14

The overnight qualification dossier advances private evidence through a fresh annotated rebuild, 18 unique graphics attempts/196 captures and a separately built release-shape horizontal smoke. C horizontal is FEASIBLE for sampled cases; the overall scientific result is PARTIALLY_ADVANCED. PRIVATE_CANDIDATE_NEEDS_TARGETED_EVIDENCE is the proposed integration decision, not an applied decision or READY status.

The next justified gate is targeted evidence with a new authorized scope and budget: trigger an actual saved configure, diagnose whole-H1 effects restoration against pristine, tie input assertions to applied geometry, and establish relevant native lifetime/transaction/damage and instrumentation-neutrality proof. Exact-pair requalification, complete package reproduction, actual notice incorporation/legal review and release/security nominations remain open. Popup hide/dismiss/reposition and grab click-through policy remain undecided. Relevant canonical contracts must precede any future implementation.

STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED. Production multi-output remains NOT YET SUPPORTED. No STEP20D work or production integration follows automatically from documentary publication. Final independent review is ACCEPTED / audit PASS for experimental evidence fidelity. Documentary publication is prepared, not executed at this edition.

Targeted STEP20C handoff — 2026-10-14

The targeted closure advances private scale/popup and release-shape output evidence, actually exercises classic blur and obtains a held configure on A/G. It preserves whole-H1 effects FAIL, incomplete saved/input measurements and INCONCLUSIVE terminal IPC outcomes. The recommendation remains PRIVATE_CANDIDATE_NEEDS_TARGETED_EVIDENCE.

C3 is a consumed distinct diagnostic with INCONCLUSIVE runtime and partial native saved creation/draw/teardown observations. Its frozen unique-address predicate rejects actual node-address reuse; no fixture repair or retry follows. Natural transaction timeout, held/live PNG, normal close and GPU completion are unqualified. The final campaign is 14 runs/125 PNG/520 reserved events; independent review is ACCEPTED for experimental evidence fidelity, without closing production gates. Remaining smallest gates are saved/native lifetime, input mutation measurement and bounded native GPU discrimination, followed by relevant transaction/damage/neutrality and exact-pair/package/legal/maintenance closure. Any further runtime or production change requires its own accepted scope and budget. Popup UX remains undecided; canonical contracts precede any eventual implementation. Final independent dossier review is ACCEPTED / audit PASS for experimental evidence fidelity. Publication is authorized and prepared, not executed at this edition; final refs belong to the private closeout and final handoff. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED. Production multi-output NOT YET SUPPORTED; documentary publication does not authorize integration or STEP20D.

Saved/input/GPU STEP20C batch — 2026-10-14

The new gate dossier V2 records a separate six-run campaign:59 captures/240 reservations, 42 common and six GPU offline tests passed; two optional runs were not exercised. The previous 14-run/125-capture/520-reservation campaign remains immutable.

Three saved runs exercise an actual native five-second transaction timeout with client alive, held capture before deadline, normal owner close and exact whole-H2 RGB through hold/timeout/final. C3 identifies target lifetime instance15 and natural node retirement; A/G qualify their own wire/RGB/timeout, without native saved identity transfer. Target retirement release and GPU completion remain NOT PROVEN. Two A/G input runs finish full/empty/full, focus/camera mutations and targeted splith return. Temporally compatible applied state is PARTIALLY_FEASIBLE, without proving atomic generation.

The distinct GPU diagnostic acquires108 native ROI reads and supports local FBO history outside the fresh domain: first sampled fresh divergence is down-2, not down-1. Whole-H1 A/B/A remains FAIL and whole-field causality INCONCLUSIVE; no shader/cache correction follows. Native pairing is414/400/14 with unknown missing-event causes; damage union coverage is sampled, not all-frame proof. The bind-before-failed ordering already exists in pinned pristine SceneFX; the old draft's contrary provenance claim is explicitly corrected in the new GPU report, without historical rewrites.

Measurements, raw runtime exit, scientific cleanup and architecture remain separate: all six global runtimes are INCONCLUSIVE on terminal IPC1; saved/input helpers error32 keep scientific cleanup INCONCLUSIVE despite owner0, while GPU clients error0 give scientific cleanup PASS. Mechanical process cleanup passes. The private core is source-only ACCEPTED for bounded review, build/runtime/C UBSan/OOM NOT RUN; no runtime result transfers. Whole-field GPU/lifetime, atomic scene/input/present, full damage, instrumentation neutrality, exact-pair maintenance, full package/notices/legal and release/security ownership remain gates. Offscreen-popup UX and a particular atomic-counter mechanism remain UNDECIDED. The applied rendering/input coherence contract remains required.

Recommendation PRIVATE_CANDIDATE_NEEDS_TARGETED_EVIDENCE; scientific status PARTIALLY_ADVANCED. Final dossier review ACCEPTED / audit PASS for experimental evidence fidelity; documentary publication PREPARED at this edition, with actual refs in the private post-push receipt. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED; production multi-output NOT YET SUPPORTED. No production, UX or package contract changes, and no authorization for further graphics runs.

Minimal private core handoff — 2026-10-14

The new build/runtime/GPU dossier advances the private core beyond its immutable historical source-only state: exact build, real extracted C normal/UBSan/ASan, local ABI and five-file Stage1 are recorded, with actual sampled scale 1.25/R90 and resize/migration evidence. The campaign spends 12/14 runs and88 captures; two conditional slots remain NOT EXERCISED, not a new runtime authorization. No consumed case is retried.

Recommendation PRIVATE_CORE_NEEDS_TARGETED_EVIDENCE; scientific result PARTIALLY_ADVANCED. The smallest further evidence gates are a comparable standard/vertical control and full horizontal return; fullscreen policy and viable hidden-owner return; native saved/buffer/GPU lifetime and coherent applied input/render/present proof; complete damage and accepted whole-field GPU discrimination. The real E6 timeout does not close its rejected global receipt or native saved identity. G1's modifier-inappropriate stride predicate must be addressed prospectively with valid metadata/read-success observability before any separately scoped diagnostic; no shader change is justified here.

Human decisions still include OOM production availability, offscreen popup UX, release/security ownership, legal distribution and any further experiment's scope. Exact-pair maintenance and full future package reproduction remain gates. Final dossier review is pending; publication PREPARED at this edition, with actual refs in the private post-push receipt/final handoff. Private success does not authorize integration, distribution, daily use or STEP20D. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED; production multi-output NOT YET SUPPORTED.

CORE recovery handoff — 2026-10-14

The V3 decision records nine new runs/102 output captures, no retry/build/stage, and targeted progress on comparable standard controls, two-chain horizontal return, actual Y600 vertical crossing, same-chain hidden return and saved closure. These are PARTIALLY_FEASIBLE observations on exact CORE29baf31, not production milestones. Fullscreen remains INCONCLUSIVE/NOT_EXERCISED for cross-output semantics; non-equivalent owner/ancestor geometry cannot settle popup UX.

The next smallest step is exact final dossier review, then a separately scoped human decision about equivalent fullscreen fixtures, native OOM availability qualification or GPU observability/precision. A's abort remains P1; B/C harness acceptance does not select a production policy. The per-plane DCC repair passes its limited check, but effective halfpixel/read-success/GL-error limits keep the whole gate INCONCLUSIVE and G2 NOT_RUN. No remaining token authorizes a retry. Native coherence/lifetime, complete damage/effects, whole-field GPU, exact-pair maintenance and legal/release/security remain independent gates.

Recommendation PRIVATE_CORE_NEEDS_TARGETED_EVIDENCE; ticket PARTIALLY_ADVANCED. Scoped reviews ACCEPTED; final independent audit/publication pending at this edition, with actual identities in the later private receipt. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED; PRODUCTION_MULTI_OUTPUT NOT_YET_SUPPORTED; PRODUCTION_AUTHORIZED FALSE.

CORE-C source/provenance handoff — 2026-10-15

The new CORE-C/OOM/GPU ticket is BLOCKED, recommendation and OOM policy UNDECIDED. Historical LABs were deliberately deleted; required seals, native exact sources and GPU hook/payload are unavailable. The new budget remains unconsumed: 0/11 runs, 0/176 output captures, 0/3 SceneFX builds, 0/3 Mosaic builds and 0/3 stages. All C1–C8/O1/G2/G3 cases and new native/C/sanitizer checks remain NOT_RUN. Historical outcomes are unchanged and are not requalified by the failing current offline replays.

The smallest justified next step is a separately scoped instruction changing or redefining the provenance gate, or restoration of authoritative exact inputs if a backup exists. Recovery of deliberately deleted data is not promised. A new design inferred from summaries cannot satisfy the existing gate. GPU observation requirements are prospective, with G2 preflight NOT_PROVEN and runtime NOT_RUN; no runtime admission or production decision follows from documentary review. STEP20A DONE; STEP20B EXPERIMENTAL; STEP20C NEXT; STEP20D–G PLANNED; PRODUCTION_MULTI_OUTPUT NOT_YET_SUPPORTED; PRODUCTION_AUTHORIZED FALSE.