Architecture page: stack, layer, host and desk views; unblock its refresh - #984

Peer-path correction acknowledged by the CC as #984's owner in
correction #147 (2026-10-10T21:40Z).

Git 2.53.0's default pathspec '*' can match directory separators;
':(glob)' uses FNM_PATHNAME, so its wildcard cannot cross '/'.
Primary source: git/git v2.53.0, Documentation/glossary-content.adoc,
the pathspec and glob sections.

Reader references at merged main a7c15bd:
tools/local-pages/architecture_sources.py:375 and
tools/local-pages/architecture_builder.py:241 both use top-level
Path.glob('*.json'). The test now uses the equivalent supported
Git pathspec, ':(glob)catalogs/landscape/*.json'.

Regression evidence: the exact native inventory method from merged
main a7c15bd, compiled in memory with its policy and committed catalog
inputs, fails one test before on the nested gap-closeouts/schema.json
and passes one test after changing only the pathspec literal; zero
errors in either probe. The complete requested architecture, closeout
and workflow modules then pass 170 tests with one existing skip.

Integrate the already-landed #984 baseline through this one forward
merge on d965908, because the peer test did not exist in its earlier
base. Relative to Git's clean automatic integration, authored changes
are only the single inventory line and its files[] registration.

Peer-path correction acknowledged by the CC as #984's owner in
correction #147 (2026-10-10T21:40Z). This commit carries, as its own
linear commit on main eb31d23, the fold that a08b616 authored inside
its forward merge of d965908 and a7c15bd: the single inventory line
and its files[] registration, re-registered through
host_receipts.register_file and evidence_manifest.py --write.

Git 2.53.0's default pathspec '*' can match directory separators;
':(glob)' uses FNM_PATHNAME, so its wildcard cannot cross '/'.
Primary source: git/git v2.53.0, Documentation/glossary-content.adoc,
the pathspec and glob sections, re-read from the installed Git 2.53.0
gitglossary(7).

Reader references, unchanged from a7c15bd to main eb31d23:
tools/local-pages/architecture_sources.py:375 and
tools/local-pages/architecture_builder.py:241 both use top-level
Path.glob('*.json'). The test now uses the equivalent supported
Git pathspec, ':(glob)catalogs/landscape/*.json'.

Regression evidence carried from a08b616, measured at main a7c15bd:
the exact native inventory method from merged main, compiled in memory
with its policy and committed catalog inputs, fails one test before on
the nested gap-closeouts/schema.json and passes one test after
changing only the pathspec literal; zero errors in either probe.

Re-measured on this linear branch at parent e1c6df7
(2026-10-11T00:08Z): git ls-files lists 22 paths for
'catalogs/landscape/*.json', including
catalogs/landscape/gap-closeouts/schema.json, and 21 top-level paths
for ':(glob)catalogs/landscape/*.json'.
tests.test_local_pages_architecture_landscape_exclusions ran 7 tests
with 1 failure on that nested schema.json before this change, and
7 tests OK after it.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

Peer-path correction acknowledged by the CC as #984's owner in
correction #147 (2026-10-10T21:40Z). This commit carries, as its own
linear commit on main eb31d23, the fold that a08b616 authored inside
its forward merge of d965908 and a7c15bd: the single inventory line
and its files[] registration, re-registered through
host_receipts.register_file and evidence_manifest.py --write.

Git 2.53.0's default pathspec '*' can match directory separators;
':(glob)' uses FNM_PATHNAME, so its wildcard cannot cross '/'.
Primary source: git/git v2.53.0, Documentation/glossary-content.adoc,
the pathspec and glob sections, re-read from the installed Git 2.53.0
gitglossary(7).

Reader references, unchanged from a7c15bd to main eb31d23:
tools/local-pages/architecture_sources.py:375 and
tools/local-pages/architecture_builder.py:241 both use top-level
Path.glob('*.json'). The test now uses the equivalent supported
Git pathspec, ':(glob)catalogs/landscape/*.json'.

Regression evidence carried from a08b616, measured at main a7c15bd:
the exact native inventory method from merged main, compiled in memory
with its policy and committed catalog inputs, fails one test before on
the nested gap-closeouts/schema.json and passes one test after
changing only the pathspec literal; zero errors in either probe.

Re-measured on this linear branch at parent e1c6df7
(2026-10-11T00:08Z): git ls-files lists 22 paths for
'catalogs/landscape/*.json', including
catalogs/landscape/gap-closeouts/schema.json, and 21 top-level paths
for ':(glob)catalogs/landscape/*.json'.
tests.test_local_pages_architecture_landscape_exclusions ran 7 tests
with 1 failure on that nested schema.json before this change, and
7 tests OK after it.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* Add the shared evidence-bound gap closeout loader

Validate dated layer closeouts through the pinned jsonschema 4.26.0
Draft 2020-12 API. Bind original crosswalk identity, registered evidence,
supported vendor sources and two passing GPT/Claude reports at the same head.
Preserve proposed/residual/blocked gaps and all current-main counts.

Retain the required failing-before controls, receipt/files compatibility
correction and final native fixture evidence. Make the existing validator
pin available through hash-pinned CI requirements.

Sources: python-jsonschema/jsonschema v4.26.0 at
a7277432b0f7bcd0551f6e589d30457017125df4, validators.py:307,348,812;
native-agent-stack main 9d4c00c,
catalog_decisions.py:57,85 and host_receipts.py:710.

Validation: 84 touched-module/inventory tests, zero skips; unchanged native
matrix check and final registered-tree FULL validation passed.

* Refresh the bounded advisory inventory for closeout reads

Account for the shared loader's eight additional input-read locations and
one measured dynamic shape in the existing repository workflow test.
Retain the historical inventory and every other script, shape, coverage
and enforcement expectation; no loader, schema or worker-policy change.

Source: native-agent-stack main 9d4c00c,
blueprints/runtime-workers/openhands/resolver/gate_reads.py:913-930.

Validation: the original assertion fails before correction; the touched
module passes 125 tests with one existing optional PyYAML skip using the
hash-pinned CI environment. Final registered-tree FULL validation passes.

* Normalize the retained advisory log endings

Remove the final empty line in each native advisory test log to satisfy
the repository whitespace contract. Refresh the explicit file bindings
and retain the prior hashes. Test assertions and results are preserved.

Validation: final registered-tree FULL validate passed after normalization;
the cached whitespace gate must pass before this forward commit.

* Correct the shared closeout registry and review-credit contract

Use files[] as the hash authority and model real metadata-only receipt
rows in the fixtures. Keep unreviewed residual/blocked records proposed
without changing counts or prior credit. Pin each missing closeout guard.

Use the existing missing-library SkipTest convention and install the
hash-locked schema validator before freshness discovery. Document the
Python 3.10 dependency floor and correct the upstream/native citations.

Regenerate the worker advisory snapshot through the native derivation and
remove hard-coded increments. Retain the prior snapshot and fail-before
measurements. Source: main 03a986e,
validate.py:665-666 and the native worker GateReads derivation;
jsonschema 4.26.0/a7277432b0f7bcd0551f6e589d30457017125df4.

Validation: required/schema-enabled modules 552 tests, 2 existing skips;
freshness-related modules 261 tests with the stale-registration case
rechecked after supported refresh; final FULL validation passed.

* Preserve the pinned freshness calendar install step

* Match architecture inventory to top-level native readers

Peer-path correction acknowledged by the CC as #984's owner in
correction #147 (2026-10-10T21:40Z). This commit carries, as its own
linear commit on main eb31d23, the fold that a08b616 authored inside
its forward merge of d965908 and a7c15bd: the single inventory line
and its files[] registration, re-registered through
host_receipts.register_file and evidence_manifest.py --write.

Git 2.53.0's default pathspec '*' can match directory separators;
':(glob)' uses FNM_PATHNAME, so its wildcard cannot cross '/'.
Primary source: git/git v2.53.0, Documentation/glossary-content.adoc,
the pathspec and glob sections, re-read from the installed Git 2.53.0
gitglossary(7).

Reader references, unchanged from a7c15bd to main eb31d23:
tools/local-pages/architecture_sources.py:375 and
tools/local-pages/architecture_builder.py:241 both use top-level
Path.glob('*.json'). The test now uses the equivalent supported
Git pathspec, ':(glob)catalogs/landscape/*.json'.

Regression evidence carried from a08b616, measured at main a7c15bd:
the exact native inventory method from merged main, compiled in memory
with its policy and committed catalog inputs, fails one test before on
the nested gap-closeouts/schema.json and passes one test after
changing only the pathspec literal; zero errors in either probe.

Re-measured on this linear branch at parent e1c6df7
(2026-10-11T00:08Z): git ls-files lists 22 paths for
'catalogs/landscape/*.json', including
catalogs/landscape/gap-closeouts/schema.json, and 21 top-level paths
for ':(glob)catalogs/landscape/*.json'.
tests.test_local_pages_architecture_landscape_exclusions ran 7 tests
with 1 failure on that nested schema.json before this change, and
7 tests OK after it.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

* Refuse conflicting receipt mirrors and unsupported validators

Fix the two P2s from the FIRST GPT read of ad2e1b1. files[] alone
supplies evidence bindings; optional receipt sha256/bytes mirrors must
agree with those bindings. Metadata-only rows remain valid. Nonempty
closeouts require installed jsonschema exactly 4.26.0 before schema or
document loading, with an actionable hash-pinned installation command.
The no-record path does not inspect package metadata.

Use CPython v3.13.16 Lib/importlib/metadata/__init__.py:980 (version)
and :49 (PackageNotFoundError), and python-jsonschema/jsonschema
 a7277432b0f7bcd0551f6e589d30457017125df4 jsonschema/__init__.py:27.
Both fetched primary source files match the installed bytes; retain
source hashes and the supported metadata API citation in the correction
receipt and decision record. No replacement validator is introduced.

The seven focused controls fail against the unchanged reviewed loader:
six assertion failures, zero errors, while equal mirrors, descriptive
receipts and the no-record behavior pass. All seven pass after the fix.
Actual Python 3.14.4/jsonschema 4.19.2 accepts the fixture before the fix
and refuses it afterward without returning a document. Actual missing-
package refusal and no-record compatibility controls also pass.

Keep the receipt key named receipt_path, distinct from the existing
filesystem iterator named path. The unchanged native worker assertion
caught four advisory locations on the unpublished preparation candidate;
the native alias control restores 330/98 with identical per-script counts
and shape multiplicities. Preserve that failure and the candidate-only
control; the final committed head is checked before the first push.

Required modules: 174 tests OK, zero skips (26 closeouts, 64 matrix,
84 validator). FULL validate: 70 components, 11466 hashed files,
4 profiles, 239 receipts, exit 0. Matrix --check: 32 rows, exit 0.
The worker snapshot remains SHA-256 8752740817bb41c1a582e33fa475e4ce4064f2ccfecadb706bce40ecb4512157,
330 locations and 98 shapes; frozen crosswalk and generated reports
remain unchanged. Preserve historical traces and refresh their source
locator and file registrations through the native registry function.

One forward commit on ad2e1b1. The GPT micro and the CC's disposition
of its prior Claude PASS remain required at this new loader head.

---------

Co-authored-by: Claude Opus 5.5 <[email protected]>