What a speculative decoder gives away for free

What the sideband record wrote about its own limitations after a read only audit of its own code and record, and what the public repository leaves out of each folder.

Lessons from the record's own limitations

In plain wordsA note the sideband record wrote about its own limitations after a read only audit of its own code and record. For each one: the mechanism of the mistake, what it cost as measured, the rule the next instrument follows, and where the repository itself does not yet follow that rule.

Written 2026-10-16 as the closing step of lane B of the public-cut plan, after the 2026-10-15 image audit (docs/audits/2026-10-15-image-audit/README.md, the audit's report with the recompute scripts beside it). sideband/docs/LESSONS.md:3 · 61a765b6939d

The note's preamble, as written

Written 2026-10-16 as the closing step of lane B of the public-cut plan, after the 2026-10-15 image audit (docs/audits/2026-10-15-image-audit/README.md, the audit's report with the recompute scripts beside it). Each entry below is a limitation that stays in the evidence: the instruments are frozen (their bytes are attested by committed payloads) and the registered runs are not repeated, so the record carries a dated note or erratum beside the affected text instead of a fix. For each one: the mechanism, the cost as measured, the rule the next instrument follows, and where the repository itself does not yet follow the rule. The dated notes in FINDINGS.md, DECISIONS.md and docs/BLUEPRINT.md are the primary text; this file is a derived reading aid, and on any disagreement the record's dated note wins. Figures quoted from the audit folder's reruns of 2026-10-16 name their file; the counts in entries 7, 8 and 13 were measured on the tree the same day by the commands named. sideband/docs/LESSONS.md:3 · 61a765b6939d

1. A mechanism sentence copied forward past the code

Mechanism
"the HF adapter recomputes prefixes" was written on 2026-08-29 and was false from a commit later that day (b1dae57, cropped KV caches by default). Twelve files carried the sentence, eight of them written after that commit, because each new document copied it from the last one instead of the code; a thirteenth, docs/METHOD.md, quotes the critic's rule that carried it. sideband/docs/LESSONS.md:17 · 61a765b6939d
Measured cost
fifteen false or stale statements, zero numbers moved; the ban itself was right for a different reason (no benchmark harness exists). sideband/docs/LESSONS.md:22 · 61a765b6939d
Rule
a mechanism claim has one home (here DECISIONS.md D-9 and its dated note of 2026-10-16); every other file cites the home rather than restating the mechanism, and a ban states its own ground, not a code detail that can change. sideband/docs/LESSONS.md:24 · 61a765b6939d
Not yet followed by
this lane's own dated notes, which restate the b1dae57 mechanism beside each stale sentence so that a reader of that sentence alone sees the correction; the cost is accepted, and tests/test_record_claims.py pins the code default they cite. sideband/docs/LESSONS.md:27 · 61a765b6939d

Cites D-9

2. Intervals that are conditional on the trained seeds

Mechanism
every probe CI is a prompt-cluster bootstrap over counts summed across three train seeds (tools/run_probes.py, frozen), so it is conditional on those three trained probes; the registered all-seeds rule protects the fire direction only. The registered disclosure that the seed "only shuffles AdamW batch order" was false: the trainer seeds the initial weights too (dated erratum in docs/BLUEPRINT.md). sideband/docs/LESSONS.md:33 · 61a765b6939d
Measured cost
across the 40 D rows the seed SE runs 0.33 to 3.26 times the bootstrap SE (docs/audits/2026-10-15-image-audit/seed_var_out.json, which brackets 72 rows of F-24, its corrected twin and F-25; F-15 to F-18 and F-28 are not bracketed). No label moves under the three approximations. Three bracketed readings are seed-sensitive: F-25's S1 L2 deciding row, +0.0022 [+0.0003, +0.0039], reads [-0.0012, +0.0055] / [-0.00065, +0.00498] / [-0.0002, +0.0064]; F-24's S1 corrected-twin CI-clear reading is lost under two of three; F-24's S3 linear CI-positive qualifier is lost under all three. A fourth, descriptive reading, the primary S3 L3 Mn_r below-zero value behind F-25's post-hoc "same shape" sentence, has its upper above zero under all three. Three seeds are two degrees of freedom; the component is bracketed, not measured. sideband/docs/LESSONS.md:38 · 61a765b6939d
Rule
a registration states what its interval conditions on, in the regime line, and either registers a seed-inclusive interval beside the cluster bootstrap or says the seed component is unmeasured; a disclosure about a trainer is written after reading the trainer. sideband/docs/LESSONS.md:48 · 61a765b6939d
Not yet followed by
F-28's SURVIVES-STRONGER cells and the F-15 to F-18 margins, which carry the conditioning note but no bracket (F-28's dated note of 2026-10-16 says so). sideband/docs/LESSONS.md:52 · 61a765b6939d

Cites F-24, F-25, F-15, F-18, F-28, F-15 to F-18

3. A scorer that ran live without its support clip

Mechanism
the frozen Stage-C heads (tools/train_outcome_head.py) export TRAIN moments but no TRAIN support, and the live scorer applies only the [0, 1] output clip; the standardization pathology that F-22 (iii) records for Stage R reached the live decisions of F-21, where the record said nothing about it. Stage A was pinned with "the support clip live" without back-checking Stage C. sideband/docs/LESSONS.md:57 · 61a765b6939d
Measured cost
a counterfactual TRAIN-support clip changes 41 of 17,185 consulted decisions on arm 6 and 41 of 17,616 on arm 7 (0.24% / 0.23%); a first-order estimate of the direct tokens/call effect is at most 0.0119 / 0.0116 (five drafted tokens between a stop at position 1 and an extension to six; the rest of a changed prompt's trajectory is not priced), inside every interval of F-21; the replay matches all logged decisions (docs/audits/2026-10-15-image-audit/replay_c1.json). sideband/docs/LESSONS.md:62 · 61a765b6939d
Rule
a scorer that runs live carries its TRAIN support clip, pinned at the freeze; when a pathology is found in one stage, every stage that shares the code path is back-checked in the same landing. sideband/docs/LESSONS.md:69 · 61a765b6939d

Cites F-22, F-21

4. The percentile bootstrap at thirty clusters

Mechanism
a percentile cluster bootstrap narrows by (n-1)/n and uses z where t belongs, so it under-covers at small cluster counts; src/sideband/stats.py called it "the conservative end" (relative to Clopper-Pearson), and no document disclosed the shortfall at the record's cluster counts. sideband/docs/LESSONS.md:75 · 61a765b6939d
Measured cost
coverage 0.897 / 0.939 / 0.948 at 10 / 30 / 60 clusters for a nominal 0.95 on an F-24-shaped paired simulation of paired_cluster_delta_ci (docs/audits/2026-10-15-image-audit/coverage_out.json). The nearest label-deciding bound to the +0.005 floor is F-28's RN at L1 replication gate upper +0.004951 (results/real/readers_s3_r.json), which a t-for-z correction carries to +0.005026: under that correction the cell would read NOT-SHOWN instead of ABSORBED by the frozen rule, while the registered estimator is the percentile bootstrap, the label stands as registered, and the final S3 word K-2-ISOLATED does not change (F-28's dated note). sideband/docs/LESSONS.md:79 · 61a765b6939d
Rule
METHOD states the coverage of the interval method at the cluster count in use before the first landing that uses it; a new instrument at thirty clusters uses a t-multiplier or a bias-corrected bootstrap and says which. sideband/docs/LESSONS.md:87 · 61a765b6939d
Not yet followed by
every landed interval, by construction; the record discloses the one cell the correction would move and leaves the labels as registered. sideband/docs/LESSONS.md:90 · 61a765b6939d

Cites F-24, F-28, K-2

5. A sign sentence from one seed

Mechanism
the synthetic experiments ran one seed per curve (e04: seed 200), and F-4 wrote "net harmful at every offset" from that curve at rho 0.6. sideband/docs/LESSONS.md:95 · 61a765b6939d
Measured cost
over seeds 200 to 209 the offset-1 value is +0.0005 on average (SE 0.0010), negative on 5 of 10, with the committed seed the most negative of the ten; offsets 2 to 6 are negative on all ten, so the rule of thumb stands and one committed clause does not (docs/audits/2026-10-15-image-audit/f4_seeds_out.json). sideband/docs/LESSONS.md:97 · 61a765b6939d
Rule
a sign sentence is written only after the seeds that could overturn it have run; a curve from one seed is labelled as one seed in the finding's regime line (F-4's regime line carries that clause since 2026-10-16; F-3 and F-5 are one-seed curves too). sideband/docs/LESSONS.md:101 · 61a765b6939d

Cites F-4, F-3, F-5

6. A ledger that omits a term that differs between arms

Mechanism
F-9's bit ledger priced corrections and hints but not the bonus token the verifier emits when a whole block is accepted, and the omission was not listed among the ledger's caveats; the bonus rate differs between arms, so the omission favours the arm it was meant to judge. sideband/docs/LESSONS.md:107 · 61a765b6939d
Measured cost
with the bonus term priced the dense hint's break-even budget of 0.162 bits per token is about 26% high and the loss ratio reads about 26:1 instead of 20:1; the direction holds (docs/audits/2026-10-15-image-audit/e07_ledger_out.json). sideband/docs/LESSONS.md:111 · 61a765b6939d
Rule
a ledger lists every term it omits and says whether each is arm-invariant; a term that is not arm-invariant is priced or no budget number is stated. sideband/docs/LESSONS.md:115 · 61a765b6939d

Cites F-9

7. Counts and dates in prose

Mechanism
counts were typed on a date and never re-measured: 30 path-bearing files (80 at HEAD), 609 and 711 tests (734), 27 findings in the lint line (29), 45 test files (47), 40 top-level tools (41), "batch-16" in a payload for a batch-10 run, "smoke runs no longer overwrite evidence" when each script's own flag still does, and the tool-docstring counts of docs/CONVENTIONS.md. sideband/docs/LESSONS.md:120 · 61a765b6939d
Measured cost
seven stale statements a reader can falsify with one command each; no number of the record moved. This lane's first draft typed three more ("fourteen files", a helper count that did not add up, "two path kinds"), caught by its reviewers. sideband/docs/LESSONS.md:125 · 61a765b6939d
Rule
every count in prose carries its date and the command that measured it, is written into the file by the generator that measured it (never retyped from a print), and is re-measured whenever the quantity it counts can have changed, not only when the file is touched. sideband/docs/LESSONS.md:128 · 61a765b6939d
Not yet followed by
the counts in this file and in README.md, which carry their date but not their commands; and the next landing that adds a test or a tool moves 734 and 41. sideband/docs/LESSONS.md:132 · 61a765b6939d

8. One provenance stamp with two meanings

Mechanism
the instruments' git helpers disagree on what -dirty means. Measured at HEAD on 2026-10-16: in tools/run_*.py twelve copies count modified tracked files only and four count untracked files too (run_probes, run_posthoc_topic, run_k3_arms, run_error_predictor); the adapter hf_specdec, the harvesters and the trainers count untracked files, 20 plain git status --porcelain call sites against 13 with --untracked-files=no under src/, tools/ and experiments/ (the harness's tools/cc excluded); two documents each described one of the behaviours as the rule. sideband/docs/LESSONS.md:137 · 61a765b6939d
Measured cost
a provenance reader gets contradictory definitions; nothing is unattested, but what a stamp attests must be read from the instrument's own helper. sideband/docs/LESSONS.md:144 · 61a765b6939d
Rule
one provenance helper in the library with one definition; until a frozen instrument's copy is retired, the record names which definition each payload carries. sideband/docs/LESSONS.md:146 · 61a765b6939d
Not yet followed by
every instrument and the adapter; the dated notes of 2026-10-16 in docs/SHARP_EDGES.md and docs/REPORT.md give the split. sideband/docs/LESSONS.md:148 · 61a765b6939d

9. A bold claim without a forward pointer

Mechanism
the registration log announced EXISTENCE CONFIRMED in bold at two sites and in two verdict lines, and later read ABSORBED and K-2 FIRED thousands of lines below; nothing at the claims pointed forward, so a top-down reader or a quotation of the bold line gives the opposite of the record's final state. sideband/docs/LESSONS.md:153 · 61a765b6939d
Measured cost
no number, but the one defect both walkthrough readers of the audit hit first; the premise paragraph and docs/REPORT.md's abstract carried the same exposure. sideband/docs/LESSONS.md:157 · 61a765b6939d
Rule
when a later entry overturns or narrows a bold claim, the landing that records the later entry appends a dated forward pointer at the claim in the same commit; the registered text is never rewritten. sideband/docs/LESSONS.md:159 · 61a765b6939d
Not yet followed by
CITATION.cff's abstract, which still reads "existence is shown" (the export tool rewrites that file's authors block, so its text is lane C's to touch). sideband/docs/LESSONS.md:162 · 61a765b6939d

Cites K-2

10. Undefined voices

Mechanism
the registration log scored predictions as "the assistant's" against "the critic's" and reported "critic-recomputed to 0.0" without saying that the assistant is an AI co-author, the critic an LLM review agent, and the user, operator and owner one person. sideband/docs/LESSONS.md:167 · 61a765b6939d
Measured cost
the review chain read as more independent than it is, to every reader who did not already know the harness. sideband/docs/LESSONS.md:171 · 61a765b6939d
Rule
a document that names roles defines them in its front matter; an LLM review is named as such wherever its recompute is cited. sideband/docs/LESSONS.md:173 · 61a765b6939d

11. A threshold supported by the run it then judged

Mechanism
the R1 fidelity rider's entropy tolerance cited "v2 max 0.0773" among its support, and v2 was the rerun then judged against that tolerance; both payloads arrived in one commit and the text never defined v2. sideband/docs/LESSONS.md:178 · 61a765b6939d
Measured cost
the entropy leg's pass is not independent of its threshold; the overlap and mass legs are independent and stand, and the AND-structure limits what the entropy leg alone licenses (dated erratum in docs/BLUEPRINT.md). sideband/docs/LESSONS.md:181 · 61a765b6939d
Rule
calibration data and the judged run are different draws, and the registration says which draw supports each tolerance. sideband/docs/LESSONS.md:184 · 61a765b6939d

12. Citations recalled from memory

Mechanism
an attribute of a benchmark ("seeded realizations") entered registered text from a recalled idea list; the landing's source check found no such thing, and the correction sat far from the claim. sideband/docs/LESSONS.md:189 · 61a765b6939d
Measured cost
one false attribute in registered text, corrected in its OUTCOME; other recalled identifiers remain marked "to verify" in docs/PRIOR_ART.md. sideband/docs/LESSONS.md:192 · 61a765b6939d
Rule
an identifier or attribute recalled rather than read is marked "recalled, unverified" at the point of use until it is read at the source; a correction is placed beside the claim, not only in the outcome. sideband/docs/LESSONS.md:194 · 61a765b6939d
Not yet followed by
the recalled identifiers docs/PRIOR_ART.md lists for verification, a lane of their own. sideband/docs/LESSONS.md:197 · 61a765b6939d

13. Absolute paths stored in evidence

Mechanism
instruments recorded the operator's absolute invocation paths in payloads, and three recorded path kinds are read back: the Phase-3 companion paths as basenames by the frozen reader-lens tool with the running OS's semantics, the amendment's rider path by one test, and a relative backslash harvest_dir by one prefetch test. sideband/docs/LESSONS.md:202 · 61a765b6939d
Measured cost
six tests red on a fresh Linux clone (three, two and one) until lane A (c41f9f1, 2026-10-16) handled them test-side; 80 tracked payloads under results/ and 87 tracked files tree-wide carry such paths (git grep -l -E on the home-path pattern) and are disclosed, not edited. sideband/docs/LESSONS.md:206 · 61a765b6939d
Rule
an instrument stores repository-relative paths; a reader that must consume a recorded path normalises it with PureWindowsPath before taking a name. sideband/docs/LESSONS.md:210 · 61a765b6939d
Not yet followed by
the instruments, whose shared guard does not relativize paths, so a new run still records the operator's paths (README.md's provenance note says so). sideband/docs/LESSONS.md:212 · 61a765b6939d

14. A smoke flag that writes into the evidence

Mechanism
the driver's --smoke redirects to a gitignored folder, but each experiment script's own --smoke does not, and the release notes generalised the driver's fix. sideband/docs/LESSONS.md:217 · 61a765b6939d
Measured cost
a one-command rerun of a script dirties a committed payload (caught by the evidence-bytes test and git status; no committed number changed). sideband/docs/LESSONS.md:219 · 61a765b6939d
Rule
a smoke path redirects at the script level, and the document that claims a fix names the exact entry point it covers. sideband/docs/LESSONS.md:221 · 61a765b6939d
Not yet followed by
experiments/e01 to e07, lane C's fix. sideband/docs/LESSONS.md:223 · 61a765b6939d

15. The audit method that found these

Mechanism
twenty-four finders read the code in two modes, a tone reader read the registration log, two walkthrough readers used the export, and twelve refuters re-derived every number with the default set to refute. sideband/docs/LESSONS.md:227 · 61a765b6939d
Measured cost
of 375 findings, 45 were refuted and 136 downgraded; the raw finder list would have misled by about half, and zero committed labels were overturned. sideband/docs/LESSONS.md:230 · 61a765b6939d
Rule
a finding is acted on after a refuter has recomputed it; a review that cannot be recomputed is labelled judgement, as the tone section of the audit report is. sideband/docs/LESSONS.md:232 · 61a765b6939d
Not yet followed by
this lane itself, which acted on B1 (verified by the orchestrator's own read and re-verified here, no refuter) and on B7 (tone, judgement, no refuter), and says so; the lane's own three reviewers then found eleven wording and count errors in its first draft, which is the rule's point. sideband/docs/LESSONS.md:234 · 61a765b6939d

16. The site survey before registration

Mechanism
two of the record's largest turns were arguable before any run. OQ-16's reconstruction target is the lm_head input, so the softmax-bottleneck identity settles it (F-23's dated note of 2026-10-18); and the first free baseline left token ids out while, at S3, the published analyses of MoE routing say routing follows token identity (F-24's dated note of the same day: consistent with the absorption measured, not a prediction of it, since the re-test added token ids and the standardized state in one arm). The registration apparatus checks procedure, not premises, so it could not catch either: a kill criterion and a pinned prediction test what was asked, not whether the question was already answered. sideband/docs/LESSONS.md:241 · 61a765b6939d
Measured cost
the OQ-16 lane through its Stage R run and Stage A freeze (F-22, F-23); the existence claims F-15 and F-17 and their re-tests F-24, F-25, F-28 and F-29, at readers below the practice the probing references describe (untuned, where Pimentel et al. ask for the highest-performing probe available; scored on top-1 accuracy; on raw inputs at F-15 and F-17). Counted in registered stages and findings, not hours: two stages of OQ-16 and four re-test findings. The cold read of 2026-10-18 (five reviewers briefed without the record's conclusions; docs/PUBLIC_CUT_PLAN.md 15.8) named both. [withheld: docs/PUBLIC_CUT_PLAN.md not in this repository; see WITHHELD.md] sideband/docs/LESSONS.md:249 · 61a765b6939d
Rule
before a freeze, write the strongest "already known, or settled by an identity" argument against the question; read the three nearest papers literally; read ten raw samples of the data in hand; run a tuned standard baseline. Formalise only what survives that page, and put the papers the argument needed into docs/PRIOR_ART.md before the registration, not after the result (its 2026-10-18 additions are the ones this record needed). sideband/docs/LESSONS.md:256 · 61a765b6939d
Not yet followed by
every registration in this record, all of which predate the rule, and the harness, which has no pre-registration checklist step for it. sideband/docs/LESSONS.md:262 · 61a765b6939d

Cites OQ-16, F-23, F-24, F-22, F-15, F-17, F-25, F-28, F-29

What the repository leaves out

The public repository was exported from private research repositories with a fresh history. Its 4 WITHHELD.md files, one at the root and one per folder, say what each folder leaves out (private planning documents, operator logs, session scratch) and what the export changed in place; here they are rendered from their lines. 2 lines are not shown because they quote a local path.

WITHHELD.md · 9 lines

What this repository leaves out WITHHELD.md:1 · 9efdd8169c92

This repository is a fresh-history export of private research repositories; each folder's WITHHELD.md lists what that folder leaves out and what the export changed in it: WITHHELD.md:3 · 9efdd8169c92

At the root, the export emits README.md, LICENSE, NOTICE, CITATION.cff, licenses/ and .github/workflows/ci.yml from authored sources kept in the private sideband repository under a withheld folder, and this file. The export tool itself and its test are withheld with the sideband folder (its WITHHELD.md says why). WITHHELD.md:9 · 9efdd8169c92

sideband/WITHHELD.md · 145 lines

What this folder leaves out, and what the export changed sideband/WITHHELD.md:1 · b01fa29dbd2b

Generated by the export tool of the private sideband repository at commit e3d7ea76b93dd5497aae99d75abc2fe590b7bce7 (2026-10-19). Every file in this folder that the export did not edit or generate is the tracked file at that commit, byte for byte (the export reads the index blobs and the public repository stores them unconverted), so a sha256 or git blob id the record cites for such a file reproduces here; a file the export edited (listed below: a withheld section, a replaced sentence, a filled placeholder or an appended marker) hashes differently, and a digest the commit log cites for one of those names the private bytes. The plan behind the cut is itself withheld; this file is its reader form. sideband/WITHHELD.md:3 · b01fa29dbd2b

The rest of this file: 8 more sections

Never tracked, so never here sideband/WITHHELD.md:5 · b01fa29dbd2b

  • harvest/: agent transcripts, downloaded papers and patents, the sibling manifests. sideband/WITHHELD.md:7 · b01fa29dbd2b
  • HANDOFF.md: the operator-local session log (docs/RELEASE_NOTES.md 3.3 and docs/GLOSSARY.md describe it). sideband/WITHHELD.md:8 · b01fa29dbd2b
  • cc/GOAL.md, cc/_working_summary.md, cc/blueprints/, cc/execution_plan.json: harness session state. sideband/WITHHELD.md:9 · b01fa29dbd2b
  • .claude/settings.json: per-machine hook wiring. sideband/WITHHELD.md:10 · b01fa29dbd2b
  • results/real/harvest_*/ arrays (*.npz) and results/real/*.byproduct/ folders: the 13.4 GB the sha256 bindings in the committed metas verify; the Zenodo deposit named in the root README carries them (the ignore file also names results/real/oq16_recon_weights.npz, a file never produced, docs/DATA.md; two small tracked weight files, k3_probe_weights.npz and oq15_head_weights.npz, DO ship, and NOTICE and docs/THIRD_PARTY.md's 2026-10-13 note describe them). sideband/WITHHELD.md:11 · b01fa29dbd2b

Tracked files withheld whole sideband/WITHHELD.md:13 · b01fa29dbd2b

PathWhySource line
docs/FUTURE_IDEAS.mdan idea list; its lockstep section carries commercial blueprints (plan section 3) (1 file)sideband/WITHHELD.md:17 · b01fa29dbd2b
docs/IDEAS.mdan idea list in form, nine ranked entries with verifier scores (plan section 3) (1 file)sideband/WITHHELD.md:18 · b01fa29dbd2b
docs/PUBLIC_CUT_PLAN.mdthe plan of this cut; this file is its reader form (plan section 3) (1 file)sideband/WITHHELD.md:19 · b01fa29dbd2b
docs/public_cut/the sources of the authored export-only additions; each is emitted to its public place and the folder is never shipped (plan 11.2) (80 files)sideband/WITHHELD.md:20 · b01fa29dbd2b
.github/the private tree's root workflow; the public repository's root workflow runs the same steps from inside this folder (plan 10.7) (1 file)sideband/WITHHELD.md:21 · b01fa29dbd2b
tools/export_public_cut.pythe export tool: its anchors quote the passages it withholds, so the tool cannot ship with them; this file describes what it does (plan 12) (1 file)sideband/WITHHELD.md:22 · b01fa29dbd2b
tests/test_export_public_cut.pythe export tool's test, withheld with the tool (plan 12) (1 file)sideband/WITHHELD.md:23 · b01fa29dbd2b
docs/audits/critic-recovered/2026-10-13-b10c3ea1/critic rounds of the public-cut lane (the export tool, commit A, 3e7b744): they review the withheld export tool, its test and the plan, quoting their text, digests and placeholders, and go with them (plan 12; 14.2 item 3) (10 files)sideband/WITHHELD.md:24 · b01fa29dbd2b
docs/audits/critic-recovered/2026-10-13-46731adb/critic rounds of the public-cut lane (commit B, the pinned export and its proof, 977ff11): they review the withheld export tool, its test and the plan, quoting their text, digests and placeholders, and go with them (plan 12; 14.2 item 3) (46 files)sideband/WITHHELD.md:25 · b01fa29dbd2b
docs/audits/critic-recovered/2026-10-14-a8adf32c/critic rounds of the public-cut lane (the front-doors lane, d481935): they review the withheld export tool, its test and the plan, quoting their text, digests and placeholders, and go with them (plan 12; 14.2 item 3) (73 files)sideband/WITHHELD.md:26 · b01fa29dbd2b
docs/audits/critic-recovered/2026-10-15-c8cb4ef4/critic rounds of the public-cut lane (decision batch lane 1, the gates, 51ceb9c): they review the withheld export tool, its test and the plan, quoting their text, digests and placeholders, and go with them (plan 12; 14.2 item 3) (1 file)sideband/WITHHELD.md:27 · b01fa29dbd2b
docs/audits/critic-recovered/2026-10-15-9dfaf64d/critic rounds of the public-cut lane (decision batch lane 2, the tool, the allowlist and the record, 5c264b0): they review the withheld export tool, its test and the plan, quoting their text, digests and placeholders, and go with them (plan 12; 14.2 item 3) (23 files)sideband/WITHHELD.md:28 · b01fa29dbd2b
docs/audits/critic-recovered/2026-10-03-58dc4aea/critic/REPORT.mdthe critic's copy of docs/REPORT.md as of 2026-10-03, carrying the placeholders the export fills in the tracked file (1 file)sideband/WITHHELD.md:29 · b01fa29dbd2b
docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic5/diff_ptrs.txta diff hunk of the withheld idea file read by the R1 landing's fifth round; its lines go with the file they come from (plan section 3) (1 file)sideband/WITHHELD.md:30 · b01fa29dbd2b
docs/audits/critic-recovered/MANIFEST_WITHHELD.jsonthe manifest rows of the withheld recovered files above, digests included; MANIFEST.json beside it lists them by session and count (plan 14.2 item 3) (1 file)sideband/WITHHELD.md:31 · b01fa29dbd2b

Tracked files changed in the export sideband/WITHHELD.md:33 · b01fa29dbd2b

Every change is marked in place with [withheld: ...; see WITHHELD.md], is a filled placeholder, or is a scrub marker (the Paths section below); the private file is untouched. sideband/WITHHELD.md:35 · b01fa29dbd2b

Lines that name a withheld file sideband/WITHHELD.md:70 · b01fa29dbd2b

Every line of a text file this export may edit that names one of the withheld files above carries the marker [withheld: <name> not in this repository; see WITHHELD.md], appended at export: inside the last cell of a table row, as a # comment in a code or config file. The names are the path (either separator, any leading directory), the basename, the stem where it carries an underscore, each in any case, and the forms listed as extra: (?-i:\bIDEAS\b)(?!\.md). The files the record freezes (results/, data/, tools/cc/, the paths .gitattributes marks -text or binary, and any frozen instruments the folder's pyproject.toml lists) are never edited; a mention there is listed under residue below. Exempt from the rule: .github/ (the public repository's root carries .github/workflows/ci.yml with the same steps plus the analysis extra, and the harness code under tools/cc/ names the path generically; every sentence found describing the private workflow's install contract carries an export note instead (each is listed under 'Tracked files changed in the export' as 'an export note on the private workflow's install line')); docs/audits/critic-recovered/2026-10-03-58dc4aea/critic/REPORT.md (the recovered critic folder's frozen README, manifests and scripts name this withheld file by design and take no marker, and its basename is a word of the record; WITHHELD.md lists what is withheld (plan 14.2 item 3)); docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic5/diff_ptrs.txt (the recovered critic folder's frozen README, manifests and scripts name this withheld file by design and take no marker, and its basename is a word of the record; WITHHELD.md lists what is withheld (plan 14.2 item 3)); docs/audits/critic-recovered/MANIFEST_WITHHELD.json (the recovered critic folder's frozen README, manifests and scripts name this withheld file by design and take no marker, and its basename is a word of the record; WITHHELD.md lists what is withheld (plan 14.2 item 3)). Lines marked, by file: sideband/WITHHELD.md:72 · b01fa29dbd2b

Provenance residue kept as is sideband/WITHHELD.md:102 · b01fa29dbd2b

one line is not shown here: it quotes a local path

  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic/block_now.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:112 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic3/draft_norm.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:113 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic3/wt_norm.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:114 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic5/diff_bp.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:115 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic5/outcome.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:116 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic5/outcome_flat.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:117 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic6/outcome.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:118 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic6/outcome_n.txt: FUTURE_IDEAS: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:119 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-02-12e6097a/strat/critic6/added.txt: FUTURE_IDEAS: the R1 landing diff the critic's sixth round read; its hunk of the withheld idea file is the dated status line the record also holds in OPEN_QUESTIONS.md and README.md; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:120 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-01-64064aa4/critic/reflect_now.txt: IDEAS.md: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:121 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-04-d880d7a7/critic/controls.py: IDEAS.md: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:122 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-05-fdeffb05/critic/gen_probe.py: IDEAS.md: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:123 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-05-fdeffb05/critic/gen_probe2.py: IDEAS.md: a recovered critic file quoting the record's own pointer to a withheld idea file; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:124 · b01fa29dbd2b
  • ESPALIER_MEMORY.md: 07-review-and-ideas.md: a 2026-10-12 memory row naming three documents the lockstep folder withholds (lockstep/WITHHELD.md lists them); the memory file is a log, kept as written (plan 15.7). sideband/WITHHELD.md:125 · b01fa29dbd2b
  • CHANGELOG.md: Blueprints E: a line naming a proposal of a review the lockstep folder withholds (lockstep/WITHHELD.md lists it); kept as written, name-only provenance (plan section 3; 15.7). sideband/WITHHELD.md:126 · b01fa29dbd2b
  • docs/COMMIT_LOG.md: Blueprints E: a commit message of 2026-10-11, quoted by the generated commit log, naming proposals of a review the lockstep folder withholds (lockstep/WITHHELD.md lists it); name-only provenance (plan section 3; 15.7). sideband/WITHHELD.md:127 · b01fa29dbd2b
  • docs/ECOSYSTEM.md: Blueprint E: a line naming a proposal of a review the lockstep folder withholds (lockstep/WITHHELD.md lists it); kept as written, name-only provenance (plan section 3; 15.7). sideband/WITHHELD.md:128 · b01fa29dbd2b
  • docs/audits/critic-recovered/2026-10-16-4a635c95/critic/status_before.txt: test_export_public_cut: a recovered critic file holding a git status line that names the withheld test; frozen bytes take no marker (plan 14.2 item 3). sideband/WITHHELD.md:129 · b01fa29dbd2b

Record lines flagged for the operator sideband/WITHHELD.md:131 · b01fa29dbd2b

The export tool's deny list (the one applied to commit messages) is also run over ESPALIER_MEMORY.md, which the tone sweep excludes. Each hit blocks the export's verdict, and a line kept after review is recorded here by its reason (the matched text stays in the tool's spec): sideband/WITHHELD.md:133 · b01fa29dbd2b

  • kept: ESPALIER_MEMORY.md: the 2026-10-11 row's sentence restating plan section 2's bullet of the same date on what the public cut leaves out (the row's wording, not the bullet's). sideband/WITHHELD.md:135 · b01fa29dbd2b
  • kept: ESPALIER_MEMORY.md: the 2026-10-10 row's name for an unregistered prediction, the science sense of the word. sideband/WITHHELD.md:136 · b01fa29dbd2b
  • kept: ESPALIER_MEMORY.md: the 2026-10-11 row's verdict on lockstep's original idea: the clause names the framing the row then rejects (what stands, the row says, is the coder, the conformance vectors and the method record); kept by the operator's call PC-3 of 2026-10-14 (plan 13). sideband/WITHHELD.md:137 · b01fa29dbd2b

Paths sideband/WITHHELD.md:139 · b01fa29dbd2b

one line is not shown here: it quotes a local path

The commit log sideband/WITHHELD.md:143 · b01fa29dbd2b

docs/COMMIT_LOG.md is generated at export: the 186 private commit messages up to the export commit, newest first, with the paths above scrubbed. 8 messages name a private repository or match the export's deny list (monetary and release-posture wording; the regex is COMMIT_LOG_DENY in the withheld tool) and have their bodies replaced by a marker, their subjects keeping their shape with the match replaced by [private repository] or [withheld]. A log of fixed historical text, it sits outside the export's tone sweep (the exclusion list is the withheld tool's), and a marker or placeholder it quotes is not counted as one. sideband/WITHHELD.md:145 · b01fa29dbd2b

amber/WITHHELD.md · 74 lines

What this folder leaves out, and what the export changed amber/WITHHELD.md:1 · fd35447b9bd0

Generated by the export tool of the private amber repository at commit 0b061b54d92c0c6abe926dedab1bcd6394ee7c85 (2026-10-19). Every file in this folder that the export did not edit or generate is the tracked file at that commit, byte for byte (the export reads the index blobs and the public repository stores them unconverted), so a sha256 or git blob id the record cites for such a file reproduces here; a file the export edited (listed below: a withheld section, a replaced sentence, a filled placeholder or an appended marker) hashes differently, and a digest the commit log cites for one of those names the private bytes. The plan behind the cut is itself withheld; this file is its reader form. amber/WITHHELD.md:3 · fd35447b9bd0

The rest of this file: 8 more sections

Never tracked, so never here amber/WITHHELD.md:5 · fd35447b9bd0

  • results/p2/, results/p2_llama32/, results/p7/: the top-256 logit dumps (about 1 GB each; results/p2_dumps.sha256 and results/p2_tinyllama_dumps.sha256 pin them) and results/p7/, which the ignore file names though P7 never ran (F-14 row E14). amber/WITHHELD.md:7 · fd35447b9bd0

Tracked files withheld whole amber/WITHHELD.md:9 · fd35447b9bd0

PathWhySource line
.github/the private tree's workflow: it checks out the private organisation's two sibling repositories with a token secret; the public repository's root workflow runs amber's steps from inside this folder (plan 10.7, 15.2) (1 file)amber/WITHHELD.md:13 · fd35447b9bd0

Tracked files changed in the export amber/WITHHELD.md:15 · fd35447b9bd0

Every change is marked in place with [withheld: ...; see WITHHELD.md], is a filled placeholder, or is a scrub marker (the Paths section below); the private file is untouched. amber/WITHHELD.md:17 · fd35447b9bd0

Lines that name a withheld file amber/WITHHELD.md:30 · fd35447b9bd0

Every line of a text file this export may edit that names one of the withheld files above carries the marker [withheld: <name> not in this repository; see WITHHELD.md], appended at export: inside the last cell of a table row, as a # comment in a code or config file. The names are the path (either separator, any leading directory), the basename, the stem where it carries an underscore, each in any case. The files the record freezes (results/, data/, tools/cc/, the paths .gitattributes marks -text or binary, and any frozen instruments the folder's pyproject.toml lists) are never edited; a mention there is listed under residue below. Exempt from the rule: .github/ (the public repository's root carries .github/workflows/ci.yml with an amber job running the same steps from inside this folder, and no line of amber's prose names the private workflow (0 lines by git grep -i .github -- ':!.github' on 2026-10-17)). Lines marked, by file: amber/WITHHELD.md:32 · fd35447b9bd0

Provenance residue kept as is amber/WITHHELD.md:36 · fd35447b9bd0

  • results/errata_critic/c_e7.py: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:38 · fd35447b9bd0
  • results/errata_dryruns/dry2.json: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:39 · fd35447b9bd0
  • results/errata_dryruns/dry_b3.json: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:40 · fd35447b9bd0
  • results/errata_dryruns/dry_b3b.json: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:41 · fd35447b9bd0
  • results/errata_recompute.json: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:42 · fd35447b9bd0
  • results/errata_recompute_3.json: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:43 · fd35447b9bd0
  • results/p1_download.log: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:44 · fd35447b9bd0
  • results/p2_llama32.log: huggingface: a Hugging Face cache path under the author's home directory (a model snapshot's location, with the snapshot hash) in a frozen evidence file; the first name ships inside it as it does inside the record's own checkout paths (plan section 2; 15.2). amber/WITHHELD.md:45 · fd35447b9bd0
  • results/errata_critic/c_e7.py: REPO = Path(: an absolute path into the author's own amber checkout at the top of a frozen critic recompute script (results/errata_critic/REPORT.md names the scripts); the path's parent folder word was the operator's call (15.5 item 1), decided keep on 2026-10-18 (15.8): see the decided lines below. amber/WITHHELD.md:46 · fd35447b9bd0
  • results/errata_critic/c_misc.py: REPO = Path(: an absolute path into the author's own amber checkout at the top of a frozen critic recompute script (results/errata_critic/REPORT.md names the scripts); the path's parent folder word was the operator's call (15.5 item 1), decided keep on 2026-10-18 (15.8): see the decided lines below. amber/WITHHELD.md:47 · fd35447b9bd0
  • results/errata_critic/c_p1.py: REPO = Path(: an absolute path into the author's own amber checkout at the top of a frozen critic recompute script (results/errata_critic/REPORT.md names the scripts); the path's parent folder word was the operator's call (15.5 item 1), decided keep on 2026-10-18 (15.8): see the decided lines below. amber/WITHHELD.md:48 · fd35447b9bd0
  • results/errata_critic/c_p2.py: REPO = Path(: an absolute path into the author's own amber checkout at the top of a frozen critic recompute script (results/errata_critic/REPORT.md names the scripts); the path's parent folder word was the operator's call (15.5 item 1), decided keep on 2026-10-18 (15.8): see the decided lines below. amber/WITHHELD.md:49 · fd35447b9bd0
  • results/errata_critic/c_e4grid.py: R=Path(: an absolute path into the author's own amber checkout at the top of a frozen critic recompute script (results/errata_critic/REPORT.md names the scripts); the path's parent folder word was the operator's call (15.5 item 1), decided keep on 2026-10-18 (15.8): see the decided lines below. amber/WITHHELD.md:50 · fd35447b9bd0
  • results/errata_critic/c_f10p4.py: R=Path(: an absolute path into the author's own amber checkout at the top of a frozen critic recompute script (results/errata_critic/REPORT.md names the scripts); the path's parent folder word was the operator's call (15.5 item 1), decided keep on 2026-10-18 (15.8): see the decided lines below. amber/WITHHELD.md:51 · fd35447b9bd0
  • results/errata_critic/c_order.py: D = Path(: an absolute path into the author's own amber checkout at the top of a frozen critic recompute script (results/errata_critic/REPORT.md names the scripts); the path's parent folder word was the operator's call (15.5 item 1), decided keep on 2026-10-18 (15.8): see the decided lines below. amber/WITHHELD.md:52 · fd35447b9bd0
  • src/amber/rankcensus.py: probelab: the name of a private sibling repository in the census instrument's module docstring, kept as name-only provenance (plan section 3) because two errata payloads pin this file's blob and a marker would move the bytes they cite (15.5). amber/WITHHELD.md:53 · fd35447b9bd0

Record lines flagged for the operator amber/WITHHELD.md:55 · fd35447b9bd0

Each hit blocks the export's verdict, and a line kept after review is recorded here by its reason (the matched text stays in the tool's spec): amber/WITHHELD.md:57 · fd35447b9bd0

  • kept: docs/ERRATA_PLAN.md: kept by the operator's call of 2026-10-18 (plan 15.9, decision 2; 15.5 item 2): the errata plan's step 1 of 2026-10-10, written before the public cut was decided, declared results/p1, p4, p5 and p6 (the Llama-3.2 generations of P1 as int32 token ids with the draft's rank shards, and the archives coded from them with their decode outputs under P4 to P6; 1,384 tracked files) private evidence not for release; they ship under the root Llama notice as sideband's own model-output files ship, a dated note under the bullet in amber's own record says so, and they are the evidence behind F-8 and F-11 to F-13, with every errata row loading P1. amber/WITHHELD.md:59 · fd35447b9bd0
  • kept: results/errata_critic/c_e7.py: kept by the operator's call of 2026-10-18 (plan 15.8, decision 1; 15.5 item 1): this critic recompute script of 2026-10-10 (results/errata_critic/REPORT.md names it) opens with an absolute path into the author's amber checkout, whose parent folder's name is a word of the deny list the export applies to commit messages; the file is frozen evidence and part of the critic's only recompute code for F-14's rows, so it ships whole and the word ships inside this one path line. amber/WITHHELD.md:60 · fd35447b9bd0
  • kept: results/errata_critic/c_misc.py: kept by the operator's call of 2026-10-18 (plan 15.8, decision 1; 15.5 item 1): this critic recompute script of 2026-10-10 (results/errata_critic/REPORT.md names it) opens with an absolute path into the author's amber checkout, whose parent folder's name is a word of the deny list the export applies to commit messages; the file is frozen evidence and part of the critic's only recompute code for F-14's rows, so it ships whole and the word ships inside this one path line. amber/WITHHELD.md:61 · fd35447b9bd0
  • kept: results/errata_critic/c_p1.py: kept by the operator's call of 2026-10-18 (plan 15.8, decision 1; 15.5 item 1): this critic recompute script of 2026-10-10 (results/errata_critic/REPORT.md names it) opens with an absolute path into the author's amber checkout, whose parent folder's name is a word of the deny list the export applies to commit messages; the file is frozen evidence and part of the critic's only recompute code for F-14's rows, so it ships whole and the word ships inside this one path line. amber/WITHHELD.md:62 · fd35447b9bd0
  • kept: results/errata_critic/c_p2.py: kept by the operator's call of 2026-10-18 (plan 15.8, decision 1; 15.5 item 1): this critic recompute script of 2026-10-10 (results/errata_critic/REPORT.md names it) opens with an absolute path into the author's amber checkout, whose parent folder's name is a word of the deny list the export applies to commit messages; the file is frozen evidence and part of the critic's only recompute code for F-14's rows, so it ships whole and the word ships inside this one path line. amber/WITHHELD.md:63 · fd35447b9bd0
  • kept: results/errata_critic/c_e4grid.py: kept by the operator's call of 2026-10-18 (plan 15.8, decision 1; 15.5 item 1): this critic recompute script of 2026-10-10 (results/errata_critic/REPORT.md names it) opens with an absolute path into the author's amber checkout, whose parent folder's name is a word of the deny list the export applies to commit messages; the file is frozen evidence and part of the critic's only recompute code for F-14's rows, so it ships whole and the word ships inside this one path line. amber/WITHHELD.md:64 · fd35447b9bd0
  • kept: results/errata_critic/c_f10p4.py: kept by the operator's call of 2026-10-18 (plan 15.8, decision 1; 15.5 item 1): this critic recompute script of 2026-10-10 (results/errata_critic/REPORT.md names it) opens with an absolute path into the author's amber checkout, whose parent folder's name is a word of the deny list the export applies to commit messages; the file is frozen evidence and part of the critic's only recompute code for F-14's rows, so it ships whole and the word ships inside this one path line. amber/WITHHELD.md:65 · fd35447b9bd0
  • kept: results/errata_critic/c_order.py: kept by the operator's call of 2026-10-18 (plan 15.8, decision 1; 15.5 item 1): this critic recompute script of 2026-10-10 (results/errata_critic/REPORT.md names it) opens with an absolute path into the author's amber checkout, whose parent folder's name is a word of the deny list the export applies to commit messages; the file is frozen evidence and part of the critic's only recompute code for F-14's rows, so it ships whole and the word ships inside this one path line. amber/WITHHELD.md:66 · fd35447b9bd0

Paths amber/WITHHELD.md:68 · fd35447b9bd0

Absolute paths into the author's own sideband checkouts stay as the record committed them (the export's own-checkout rule), as does a drive or root path with no user segment: the export's path rule concerns a user's home directory. docs/ERRATA_PLAN.md's two paths into that checkout (the harvest folder and the installed package) stay under the rule; its four paths into the amber and lockstep checkouts are scrubbed (the operator's call 1 of 2026-10-17); the paths into the amber checkout at the top of the frozen critic scripts under results/errata_critic/ are listed under residue above. In docs/ERRATA_PLAN.md, docs/COMMIT_LOG.md any other home-directory path is replaced by <path outside the repository, scrubbed at export>, and a digest (sha256 or blob id, full or 12-hex) of a withheld file by <digest of a withheld file, scrubbed at export>. amber/WITHHELD.md:70 · fd35447b9bd0

The commit log amber/WITHHELD.md:72 · fd35447b9bd0

docs/COMMIT_LOG.md is generated at export: the 67 private commit messages up to the export commit, newest first, with the paths above scrubbed. 0 messages name a private repository or match the export's deny list (monetary and release-posture wording; the regex is COMMIT_LOG_DENY in the withheld tool) and have their bodies replaced by a marker, their subjects keeping their shape with the match replaced by [private repository] or [withheld]. A log of fixed historical text, it sits outside the export's tone sweep (the exclusion list is the withheld tool's), and a marker or placeholder it quotes is not counted as one. amber/WITHHELD.md:74 · fd35447b9bd0

lockstep/WITHHELD.md · 62 lines

What this folder leaves out, and what the export changed lockstep/WITHHELD.md:1 · c57265724b55

Generated by the export tool of the private lockstep repository at commit a84bef4968dcd7effc1a619ae9fa1d36c8629c68 (2026-10-19). Every file in this folder that the export did not edit or generate is the tracked file at that commit, byte for byte (the export reads the index blobs and the public repository stores them unconverted), so a sha256 or git blob id the record cites for such a file reproduces here; a file the export edited (listed below: a withheld section, a replaced sentence, a filled placeholder or an appended marker) hashes differently, and a digest the commit log cites for one of those names the private bytes. The plan behind the cut is itself withheld; this file is its reader form. lockstep/WITHHELD.md:3 · c57265724b55

The rest of this file: 7 more sections

Never tracked, so never here lockstep/WITHHELD.md:5 · c57265724b55

Tracked files withheld whole lockstep/WITHHELD.md:11 · c57265724b55

PathWhySource line
docs/00-vision.mdthe planning document of the project's original framing: four of its five sections set out a commercial plan and a twelve-week target; its one-sentence version is quoted in README.md's first screen (plan 10.3, 15.6) (1 file)lockstep/WITHHELD.md:15 · c57265724b55
docs/07-review-and-ideas.mda review followed by six proposals for further work, two of them later built (the cost model and the kill-criteria document), one a separate venture; three (D, E and F) were carried into an idea list the sideband folder also withholds (plan 10.3, 15.6) (1 file)lockstep/WITHHELD.md:16 · c57265724b55
docs/03-patent-and-licensing-notes.mdengineering notes on patents and licensing written for a counsel review that never ran (TP-5, archived): unverified freedom-to-operate flags and a licence plan the release supersedes (plan 10.3; 15.1 call 2's shape, 15.6) (1 file)lockstep/WITHHELD.md:17 · c57265724b55
.github/the private tree's workflow (a Python 3.10 to 3.13 matrix of this folder's validation commands and a wheel smoke test); a workflow in a sub-folder never runs, and the public repository's root workflow runs the validation commands from inside this folder (plan 10.7, 15.6) (1 file)lockstep/WITHHELD.md:18 · c57265724b55

Tracked files changed in the export lockstep/WITHHELD.md:20 · c57265724b55

Every change is marked in place with [withheld: ...; see WITHHELD.md], is a filled placeholder, or is a scrub marker (the Paths section below); the private file is untouched. lockstep/WITHHELD.md:22 · c57265724b55

Lines that name a withheld file lockstep/WITHHELD.md:33 · c57265724b55

Every line of a text file this export may edit that names one of the withheld files above carries the marker [withheld: <name> not in this repository; see WITHHELD.md], appended at export: inside the last cell of a table row, as a # comment in a code or config file. The names are the path (either separator, any leading directory), the basename, the stem where it carries an underscore, each in any case, and the forms listed as extra: (?-i:\bdocs[\\/]0[037])(?![\w-]|\.\w); (?-i:\b0[037]-(?:vision|review-and-ideas|patent-and-licensing-notes))(?![\w-]|\.md); (?-i:\bBlueprints? [A-F](?:/[A-F])*)\b. The files the record freezes (results/, data/, tools/cc/, the paths .gitattributes marks -text or binary, and any frozen instruments the folder's pyproject.toml lists) are never edited; a mention there is listed under residue below. Exempt from the rule: .github/ (the public repository's root carries .github/workflows/ci.yml with a lockstep job running this folder's validation commands, and the harness code, its tests and its install manual name the path generically (tools/trellis_install_surface.py, tools/trellis_reflect.py, .claude/trellis-tests/test_public_project_surface.py, trellis-docs/trellis-harness.md)). Lines marked, by file: lockstep/WITHHELD.md:35 · c57265724b55

Provenance residue kept as is lockstep/WITHHELD.md:51 · c57265724b55

  • tools/lockstep_costmodel.py: PLACEHOLDER ratios/speeds: the cost model's own label for its assumed input constants, in the instrument behind F-4 and F-8, which prints the same warning after every scenario (plan 15.7). lockstep/WITHHELD.md:53 · c57265724b55
  • README.md: are carried into sideband's: the 2026-10-11 parking banner's pointer to an idea list the sideband folder withholds (sideband/WITHHELD.md lists it); the banner is kept as written beneath the first screen (plan 15.7). lockstep/WITHHELD.md:54 · c57265724b55

Paths lockstep/WITHHELD.md:56 · c57265724b55

Absolute paths into the author's own sideband checkouts stay as the record committed them (the export's own-checkout rule), as does a drive or root path with no user segment: the export's path rule concerns a user's home directory. task-packs/done/TP-7_errata_and_archive.md's two paths into the amber checkout are scrubbed; its path into the sideband checkout's harvest folder stays under the rule, as the sibling folders' paths into that checkout do. In task-packs/done/TP-7_errata_and_archive.md, docs/COMMIT_LOG.md any other home-directory path is replaced by <path outside the repository, scrubbed at export>, and a digest (sha256 or blob id, full or 12-hex) of a withheld file by <digest of a withheld file, scrubbed at export>. lockstep/WITHHELD.md:58 · c57265724b55

The commit log lockstep/WITHHELD.md:60 · c57265724b55

docs/COMMIT_LOG.md is generated at export: the 18 private commit messages up to the export commit, newest first, with the paths above scrubbed. 0 messages name a private repository or match the export's deny list (monetary and release-posture wording; the regex is COMMIT_LOG_DENY in the withheld tool) and have their bodies replaced by a marker, their subjects keeping their shape with the match replaced by [private repository] or [withheld]. A log of fixed historical text, it sits outside the export's tone sweep (the exclusion list is the withheld tool's), and a marker or placeholder it quotes is not counted as one. lockstep/WITHHELD.md:62 · c57265724b55