Record token-stack host receipts on the workstation: RTK hook path, repomix, toon, Context Mode, jCodeMunch, Serena, ccusage - #263

Scope

• What this PR changes: records the missing host receipts for the selected token-efficiency stack on the WSL2 workstation nativestack-5975wx-20260925. That covers RTK's Claude hook path and Codex instruction mode, repomix, toon, Context Mode, jCodeMunch and Serena: 14 receipts, each with an independent review. It regenerates the matrix and grand list. As a result, Serena on WSL2 moves from accepted to host_verified, derived from serena -2.
• Base commit: 6752ede5 (current origin/main, after Workstation lane wave A: systemd re-record, SPY/LEAN parity host replay, Nemotron qualification on the RTX 4090, ai-memory 2.4.0 review #256, Record SocratiCode and ai-memory use receipts on nativestack-5975wx-20260925 #257 and Record 26 independently reviewed host receipts on nativestack-5975wx-20260925 #262). The receipts were recorded at 3f267b5c and replayed with the hot-file protocol in docs/lanes.md.
• ccusage was dropped on replay. Record 26 independently reviewed host receipts on nativestack-5975wx-20260925 #262 merged an independently reviewed …--ccusage--use--20260925.json with the same id. This branch's two ccusage receipts are kept in the PR timeline (commit ca0d239d) and were reviewed there: gen-1 got needs_changes and -2 got agree. They are not merged.
• Lane: lane:foundation
• Owned paths touched: 14 files under evidence/hosts/nativestack-5975wx-20260925/. The generated files catalogs/landscape/component-evidence-matrix.json and docs/component-evidence-matrix.md are regenerated, and manifests/evidence.json gets the new registrations.

Context: repomix 1.18.1 and toon 4.1.1 were missing on this host, so scripts/native_token_ci.py failed. They were installed today at their manifests/stack.json pins with npm install --global --ignore-scripts --prefix ~/.local/share/codex-ecosystem/tools/<name>-<ver>; npm checks the registry sha512 integrity. After that, native_token_ci.py passes 14/14 checks and 30 commands. SocratiCode and ai-memory are in #257. vLLM and systemd are in #256.

Evidence-class table

Superseded generations are kept, byte for byte. Round 1 recorded the fixture workloads of repomix, toon, Context Mode, jCodeMunch and Serena as native_proven. A read-only review pointed out that docs/contributing-evidence.md §2 classes fixture workloads as local_integration. The -2 generations correct that. rtk -3 and ccusage -2 fix two overstated labels. platform_status.py and component_matrix.py do not read supersedes. So an independent review must not record agree on a misclassified generation 1. The requested review marks them needs_changes.

Local commands run

$ uv run … scripts/host_receipts.py record …           # 9 + 7 receipts, all result=pass, every command exit 0
$ uv run … scripts/component_matrix.py --write         # {"flip_rule_violations": 0, "rows": 32, "status": "written"}
$ uv run … scripts/new_host_grand_list.py --write      # {"status": "written", "layers": 32, "winners": 66}
$ uv run … scripts/host_receipts.py validate           # {"receipts": 87, "status": "passed"}   (after the replay onto 6752ede5)
$ uv run … scripts/evidence_manifest.py --check        # {"files": 5523, "status": "passed"}
$ uv run … scripts/validate.py                         # passed: 69 components, 5523 hashed files, 147 receipts
$ uv run … scripts/verdict_review_gate.py --base origin/main   # passed (0 changed rows, 0 violations); 2 generated verdict paths changed
$ uv run … scripts/verdict_review_gate.py --base origin/main   # passed, 0 violations (at 3f267b5c)
$ gitleaks-guarded dir evidence/hosts/nativestack-5975wx-20260925 --redact   # no leaks found; the pre-commit hook also passed
$ uv run … -m unittest   # at 3f267b5c: 5307 tests, 1 failure (test_pre_commit_gate: gitleaks per-user lock contention with a concurrent scan); passes on rerun

uv run … stands for uv run --no-project --python 3.13 --with-requirements .github/requirements-ci.txt python, because the host's python3 lacks jsonschema and PyYAML.

Decision record

None. This PR is evidence only. No pin, verdict or platform_status changes.

Host evidence

• python3 scripts/host_receipts.py validate passes for every new or changed receipt (63 receipts, passed).

• Independent review is recorded. A separate headless Claude session (Sonnet; its own session id, with Agent and Workflow disallowed) recorded independent_session verdicts:

  • agree on the 9 current generations and installs: rtk -3, repomix install and use -2, toon install and use -2, context-mode -2, jcodemunch-mcp -2 and serena -2;
  • needs_changes on the superseded generation-1 receipts (and rtk -2), which cannot count.

  Opus was at its weekly limit, so the reviewer ran on Sonnet. Codex cross-family review is unavailable until 2026-09-30.

• No platform_status change is made from a host receipt alone.

Checklist

• No workflow changes.
• No secrets printed, logged or committed. A privacy scan of every receipt found 0 hits for the username, home paths, scratch paths and session ids.
• No new paid hosting, subscription or billing surface.
• Peer-owned untracked files and worktrees preserved. Side effects outside the repository: jCodeMunch session files under ~/.code-index, RTK tracking rows, and uv cache reads for Serena's pyright.

🤖 Generated with Claude Code