aaronrene / overseer-kit public
feat/freeze-review-verdict-integrity #4 / 4
aaronrene · 16 days ago · Sep 12, 2026 · Diff

FRV-a: freeze freeze-review verdict integrity (F1-F7)

Thinking freeze only - no build code, no tests, no CLI edits.

Freezes the repair of the freeze gate itself. The default reviewer is a four-regex keyword scan (tools/freeze_reviewer/providers/base.py:51-125) that accepts a reviewer argument and never reads it (:145-160); its result is written as the hardcoded string pass (stamp.py:33-42) under the same key a substantive review would use (types.py:82-91), asserting a reviewer_model with no causal role. All 31 stamped archive docs carry that claim. Because pre_stamp_canonical_bytes excises review_stamp before hashing (artifact.py:119-147) and the no-op guard requires an existing pass (stamp.py:45-52), a human downgrade fails the guard and the write proceeds as wholesale replacement (:55-58). That field then authorizes a mechanical build session (next_regen.py:517-524), and absent a stamp a bold **pass** in a prose table suffices (:415-436).

Root cause frozen: a verdict record must not live inside the artifact it judges. Reuses the ISR hash-chained ledger, not a parallel mechanism.

F1 vocabulary split (fourteen-key stamp, gate: mechanical); F2 self-describing stamp (reviewer_model null under a rule engine); F3 merge-not-replace + escalation refusal + exit 39; F4 additive freeze_review ledger kind; F5 both prose fallbacks deleted; F6 auto_may_start honored; F7 reconciliation, no bulk rewrite.

FRV-r4 caught a BLOCKER-class reachability defect: the gate was wired only to Thinking -> Auto, 4 of 103 live roadmap rows (all DONE) against 43 plain Auto - dead code under this repo's own convention.

Freeze verdict: pass (FRV-r5) Mechanical stamp: sha256:c113efa33a12b892d55f9c055dd029830ed36ef48f42384bc8bff071edbb5b86 NEXT: FRV-b (Auto, one build)

sha256:3a5194bcf91fb16d85c4f8f6e9a3ce756a6f01b975cd266b260bba3e6c4f410e sha
sha256:8d7f41aafae41deee70035a92f93602ef1722a290153597451e5932af503a42c parent
+107 ~10 −7 symbols
3 changed · 817 in snapshot files
sha256:eccabf5b7cc989b209ee39d008444c093824472f5c320465ffef121686259a61 snapshot
+107
symbols added
~10
symbols modified
−7
symbols removed
3
files changed
817
files in snapshot
0
dead code introduced
Semantic Changes 124 symbols
~ docs/archive/phases/PHASE-FRV-FREEZE-REVIEW-VERDICT-INTEGRITY.md .md 100 symbols added
+ Phase FRV — Freeze-review verdict integrity (Thinking freeze) section Phase FRV — Freeze-review verdict integrity (Thinking freeze) L1–1298
+ Freeze-review findings ledger (FRV-r1 … FRV-r4) section Freeze-review findings ledger (FRV-r1 … FRV-r4) L107–130
+ table section table L109–123
+ code[yaml] variable variable code[yaml] L7–81
+ table section table L99–106
+ 0 — Simple summary section §FRV.0 — Simple summary L130–165
+ 1 — Verified problem (do not redesign, do not re-derive) section §FRV.1 — Verified problem (do not redesign, do not re-derive) L165–233
+ 1 — The gate is a word search, and it signs a model's name section §FRV.1.1 — The gate is a word search, and it signs a model's name L170–180
+ table section table L172–179
+ 2 — The record lives inside the artifact, in borrowed words section §FRV.1.2 — The record lives inside the artifact, in borrowed words L180–189
+ table section table L182–188
+ 3 — Polarity is inverted: sticky on pass, self-healing back to pass section §FRV.1.3 — Polarity is inverted: sticky on pass, self-healing back to pass L189–197
+ table section table L191–196
+ 4 — The field is load-bearing, and the fallbacks are wider than the field section §FRV.1.4 — The field is load-bearing, and the fallbacks are wider than the field L197–208
+ table section table L199–207
+ 5 — Kit intent was already correct, and the structural cause is recorded section §FRV.1.5 — Kit intent was already correct, and the structural cause is recorded L208–216
+ table section table L210–215
+ 6 — Root cause frozen section §FRV.1.6 — Root cause frozen L216–233
+ 10 — Exit codes (frozen) section §FRV.10 — Exit codes (frozen) L1172–1213
+ table@L1178 section table@L1178 L1178–1181
+ table@L1188 section table@L1188 L1188–1198
+ 11 — Boundary, capability, rejection section §FRV.11 — Boundary, capability, rejection L1213–1236
+ table section table L1220–1227
+ 12 — Seven-tier matrix (FRV-b) section §FRV.12 — Seven-tier matrix (FRV-b) L1236–1253
+ table section table L1241–1250
+ 13 — Definition of Done section §FRV.13 — Definition of Done L1253–1279
+ 14 — Operator paste for FRV-b (informational; GS-PASTE may regen) section §FRV.14 — Operator paste for FRV-b (informational; GS-PASTE may regen) L1279–1288
+ 15 — Cross-references section §FRV.15 — Cross-references L1288–1298
+ 2 — Scope section §FRV.2 — Scope L233–303
+ 1 — In scope (FRV-a freezes; FRV-b implements as ONE build) section §FRV.2.1 — In scope (FRV-a freezes; FRV-b implements as ONE build) L235–258
+ 2 — Out of scope (explicit non-goals) section §FRV.2.2 — Out of scope (explicit non-goals) L258–277
+ table section table L260–276
+ 3 — Self-reference hazard (frozen authoring rule) section §FRV.2.3 — Self-reference hazard (frozen authoring rule) L277–303
+ 3 — F1: Separate the vocabulary (frozen) section §FRV.3 — F1: Separate the vocabulary (frozen) L303–434
+ 1 — The two records section §FRV.3.1 — The two records L305–316
+ table section table L307–311
+ 2 — Frozen key names and stamp shape section §FRV.3.2 — Frozen key names and stamp shape L316–355
+ code[text] variable variable code[text] L322–341
+ table section table L344–349
+ 3 — Serializer contract (unchanged, and why) section §FRV.3.3 — Serializer contract (unchanged, and why) L355–373
+ 4 — Legacy acceptance window (frozen) section §FRV.3.4 — Legacy acceptance window (frozen) L373–418
+ 5 — Surfaces that must be updated by FRV-b section §FRV.3.5 — Surfaces that must be updated by FRV-b L418–434
+ table section table L420–431
+ 4 — F2: Self-describing stamp, no false model claim (frozen) section §FRV.4 — F2: Self-describing stamp, no false model claim (frozen) L434–510
+ 1 — What the stamp must disclose section §FRV.4.1 — What the stamp must disclose L436–443
+ 2 — Producer identity (frozen mechanism) section §FRV.4.2 — Producer identity (frozen mechanism) L443–474
+ code[text] variable variable code[text] L448–451
+ table section table L454–460
+ 3 — reviewer_model must be null when a rule engine produced the verdict section §FRV.4.3 — reviewer_model must be null when a rule engine produced the verdict L474–494
+ 4 — checklist_ids, checklist_source, findings_count section §FRV.4.4 — checklist_ids, checklist_source, findings_count L494–502
+ table section table L496–501
+ 5 — Not in the stamp (frozen exclusions) section §FRV.4.5 — Not in the stamp (frozen exclusions) L502–510
+ 5 — F3: Invert the stickiness (frozen) section §FRV.5 — F3: Invert the stickiness (frozen) L510–626
+ 1 — Merge, do not replace section §FRV.5.1 — Merge, do not replace L512–536
+ 2 — Refuse to escalate section §FRV.5.2 — Refuse to escalate L536–592
+ table section table L542–549
+ 3 — A true no-op section §FRV.5.3 — A true no-op L592–613
+ 4 — Why a document edit still cannot lie section §FRV.5.4 — Why a document edit still cannot lie L613–626
+ 6 — F4: Move Auto authorization onto the ledger (frozen) section §FRV.6 — F4: Move Auto authorization onto the ledger (frozen) L626–972
+ 1 — Additive entry kind section §FRV.6.1 — Additive entry kind L628–646
+ code[text] variable variable code[text] L636–639
+ 2 — Frozen schema section §FRV.6.2 — Frozen schema L646–710
+ code[text] variable variable code[text] L672–692
+ table@L650 section table@L650 L650–659
+ table@L662 section table@L662 L662–669
+ 3 — Match rule (frozen) section §FRV.6.3 — Match rule (frozen) L710–742
+ code[text] variable variable code[text] L715–718
+ 4 — Shared authorization state (frozen) section §FRV.6.4 — Shared authorization state (frozen) L742–799
+ code[text] variable variable code[text] L752–756
+ table section table L762–769
+ 1 — phase_id must be derived identically by both readers (frozen) section §FRV.6.4.1 — phase_id must be derived identically by both readers (frozen) L799–833
+ table section table L805–809
+ 5 — Emission change (frozen) section §FRV.6.5 — Emission change (frozen) L833–869
+ code[text] variable variable code[text] L839–842
+ table section table L857–865
+ 1 — The plain Auto label must gate too (frozen, R4-M1) section §FRV.6.5.1 — The plain Auto label must gate too (frozen, R4-M1) L869–931
+ code[text] variable variable code[text] L913–916
+ table section table L887–893
+ 6 — Advisory channel (frozen, R1-M1) section §FRV.6.6 — Advisory channel (frozen, R1-M1) L931–972
+ code[text]@L949 variable variable code[text]@L949 L949–956
+ code[text]@L961 variable variable code[text]@L961 L961–965
+ 7 — F5: Delete the prose fallbacks (frozen) section §FRV.7 — F5: Delete the prose fallbacks (frozen) L972–1016
+ 1 — Bold text in a table must never authorize a build section §FRV.7.1 — Bold text in a table must never authorize a build L974–986
+ 2 — The second prose fallback goes too (R1-M2) section §FRV.7.2 — The second prose fallback goes too (R1-M2) L986–1006
+ 3 — No opt-in (frozen) section §FRV.7.3 — No opt-in (frozen) L1006–1016
+ 8 — F6: Honor an explicit operator block (frozen) section §FRV.8 — F6: Honor an explicit operator block (frozen) L1016–1068
+ 1 — Key, locus, semantics section §FRV.8.1 — Key, locus, semantics L1018–1037
+ table@L1020 section table@L1020 L1020–1026
+ table@L1027 section table@L1027 L1027–1033
+ 2 — Why the locus matters (frozen rationale) section §FRV.8.2 — Why the locus matters (frozen rationale) L1037–1051
+ 3 — CLI behavior (frozen) section §FRV.8.3 — CLI behavior (frozen) L1051–1068
+ 9 — F7: Migration and reconciliation (mandatory, in scope) section §FRV.9 — F7: Migration and reconciliation (mandatory, in scope) L1068–1172
+ 1 — Enumerated blast radius (verified, read-only) section §FRV.9.1 — Enumerated blast radius (verified, read-only) L1070–1112
+ code[text]@L1087 variable variable code[text]@L1087 L1087–1094
+ code[text]@L1097 variable variable code[text]@L1097 L1097–1103
+ table section table L1075–1080
+ 2 — No bulk migration, no retro-fail (frozen) section §FRV.9.2 — No bulk migration, no retro-fail (frozen) L1112–1128
+ 3 — Forward procedure (frozen) section §FRV.9.3 — Forward procedure (frozen) L1128–1151
+ 4 — Re-opening an archived slice (frozen, R2-M2) section §FRV.9.4 — Re-opening an archived slice (frozen, R2-M2) L1151–1162
+ 5 — Consumers (frozen boundary) section §FRV.9.5 — Consumers (frozen boundary) L1162–1172
~ docs/OVERSEER-HANDOVER.md .md 7 symbols added, 7 symbols removed, 6 symbols modified
− NEXT SESSION — Build queue idle (operator pick) section NEXT SESSION — Build queue idle (operator pick) L11–90
− Paste-ready prompt — queue-idle section Paste-ready prompt — queue-idle L53–90
− code[text] variable variable code[text] L55–86
− THE ONE NEXT STEP — Model: Operator + Auto section THE ONE NEXT STEP — Model: Operator + Auto L25–53
− table section table L43–50
− What just landed section What just landed L17–25
− table section table L19–24
+ NEXT SESSION — FRV-b Freeze-review verdict integrity build section NEXT SESSION — FRV-b Freeze-review verdict integrity build L11–135
+ Paste-ready prompt — FRV-b section Paste-ready prompt — FRV-b L63–135
+ code[text] variable variable code[text] L65–131
+ THE ONE NEXT STEP — Model: Auto section THE ONE NEXT STEP — Model: Auto L23–63
+ table section table L53–60
+ What just landed section What just landed L17–23
+ table section table L19–22
~ 🆗 Overseer Kit — overseer-kit
~ Change log
~ Handover regeneration rules (SD-3, SD-17)
~ What just landed
~ table
~ Hard stops (unchanged)
~ docs/ROADMAP.md .md 4 symbols modified
~ Overseer Kit — Roadmap
~ Build queue
~ table
~ Cross-references
Files Changed
+1 ~2
817 in snapshot
+ docs/archive/phases/PHASE-FRV-FREEZE-REVIEW-VERDICT-INTEGRITY.md .md
~ docs/OVERSEER-HANDOVER.md .md
~ docs/ROADMAP.md .md
← Older Oldest on feat/freeze-review-verdict-integrity
All commits Newer FRV-b: freeze-review verdict integrity (F1-F7 one build) sha256:bf2ed3b498604b921f12f5bcaa1e5ad4975e2facc102ce9c2db0c295ff4f0ca8

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:3a5194bcf91fb16d85c4f8f6e9a3ce756a6f01b975cd266b260bba3e6c4f410e --body "your comment"