fix(blog): atomic manifest writes + no-shrink/carry-over gates for the panel index

three-breach-rates-one-ledger's blog-list card rendered broken (sparse, all-amber
encircled.png instead of its own dense per-commit panel) because it was silently
missing from src/data/post-panels-index.json — the bundled index the deployed
(force-dynamic, public/-untraced) blog route actually reads. Root cause traced two
layers deep:

1. scripts/pmu/post-drift-history.sh wrote manifest.json via a long sequence of
   non-atomic `>`/`>>` shell redirects directly to the final path. Two overlapping
   runs for the same post (post-commit fan-out firing close together) raced and
   interleaved their writes, producing a corrupted file (a closed `]` followed by a
   stray `,` and a dangling object).
2. scripts/blog/build-panels-index.mjs treated an unparseable manifest as "skip this
   post" — silently dropping it from the index on every subsequent rebuild, with no
   protection against the index net-shrinking across a full rescan.

Fix: post-drift-history.sh now builds the manifest in a private tmp file, validates
it with JSON.parse, and mv's it into place atomically — a losing writer can never
leave a half-written file behind. build-panels-index.mjs now reads two SQLite-backed
gates (tc_pipeline_gates, matching the existing lens/AR-15 gate pattern):
blog-panel-manifest-valid (a still-unparseable manifest carries over the last-known-
good index entry instead of dropping the post) and blog-panel-index-no-shrink (a
rescan that nets fewer slugs than the committed index retries once, then refuses to
overwrite rather than regress the live index) — both trip .thetacog/pipeline-gate-
trips.ndjson so a recurrence is visible instead of silent. attach-tolerance-panel.sh
now surfaces these warnings (was piping build-panels-index.mjs to /dev/null) and
runs the existing tests/blog/panel-index-current.test.mjs as a non-blocking sanity
check after every rebuild.

Repaired the corrupted manifest + regenerated the index (108 posts, was 107).

Originating-Terminal: 📐 VS Code Architect
Relevant-Rooms: 📐 VS Code Architect, 🎭 Alacritty Performer, 🔨 iTerm2 Builder
Story: The operator flagged a visibly broken blog-list card and asked both for the
fix and for a guarantee it can't silently recur. Diagnosis ruled out the PMU
classifier/Rust walk (deterministic, reproducible, no crash) and landed on the
index-build layer instead — a concurrent-write race with no atomicity and no
shrink-guard, the same failure class the walk/heat layer already defends against
elsewhere in this pipeline but this script never inherited. The fix follows the
repo's existing SQLite-gate convention (tc_pipeline_gates + pipeline-gate-trips.ndjson)
rather than inventing a new mechanism.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

commit 0dfd6c521 — 144×144 lattice triptych (on-chip)

◎ the ingest chose A1,A2 — Strategy·Law × Strategy·Goal — acting on B3,A1 — Tactics·Signal × Strategy·Law (grip 0.766) · the walk starts at the ACTOR's row · 7 file(s)

⏱ ingest 165.8ms (corpus→lattice) · definer walk 1120ms (row→transpose→row, ballistic XOR per hop) · total 1454ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 6% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

A1,A2 — Strategy·Law × Strategy·Goal (actor) acting on B3,A1 — Tactics·Signal × Strategy·Law (patient) · grip 0.766

actor seed A1,A2 — Legal binding mandates and governance rules dictate how a quarterly goal position is occupied and secured. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. The target is the cell coordinate the system MUST occupy by end-of-quarter. Anything that does not drive toward that coordinate is exhaust, and exhaust does not become substrate by being labelled progress. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. Vision is the coordinate the lattice rotates around — the fixed bearing every iteration is measured against. Without the fixed point, motion is movement; with the fixed point, motion is convergence. A rule names what the system MAY NOT do. If the agent can do X, then 'forbid X' is not the constraint — it is wishful thinking dressed as policy. Constraints live in the gate, not in the prompt. Define the goal as a verifiable predicate, not a feeling. The system terminates when the predicate evaluates true, and the predicate is what the next agent inherits when this one hands off. Regulation is not advisory. The fine is the price tag stapled to the omitted control; insurance is the option pricing on the failure-mode the regulation already named. A goal that cannot be tested is a wish. Wishes have no termination condition, so they consume budget forever; goals have a finish line and therefore a payable price.

patient seed B3,A1 — Signal reach and message broadcast channels are governed by the binding mandate and governance rule of law. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. A rule names what the system MAY NOT do. If the agent can do X, then 'forbid X' is not the constraint — it is wishful thinking dressed as policy. Constraints live in the gate, not in the prompt. Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipients tune out. The right channel is the one whose floor matches the message's importance. A broadcast that addresses everyone addresses no one. Precision over reach until the address is calibrated; only then does scale convert prospects into recipients rather than into unsubscribes. Repetition is the cost of being heard. Three sends to one recipient beats one send to three; the first send announces, the second send is heard, the third send is remembered. Every message carries provenance. The sender's history is half the message's weight; an unknown sender pays in attention what a known sender pays in seconds saved.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 5% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 4% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 5 in the 9×9 A1..C3 square · 1577 in the 132×132 children square · 306 cross-zone
REALITY: 1 in the 3×3 ABC corner · 1 in the 9×9 A1..C3 square · 979 in the 132×132 children square · 120 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 44 claims @ θ 0.625 · reality 27 claims @ θ 0.625 · projection 543ms

SHAPE-MATCH σ = 1.24 — the real intent↔reality definer walk vs random-reality (actual 0.136 vs random 0.101). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · weak · panel story is not yet evidence

Most out-of-lane row: C3 · Flow — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 13% vs tolerance 25%.
836 green · 744 amber · 0 red · 336 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 67% (no distinctive match)

reality 72% (no distinctive match)

B,B Tactics is the choice of which leverage to pull at which beat.

intent 64% (no distinctive match)

reality 69% (no distinctive match)

C,C Operations is the loop that runs whether anyone watches.

intent 78% (no distinctive match)

reality 80% (no distinctive match)

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 75% (no distinctive match)

reality 73% (no distinctive match)

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 73% (no distinctive match)

reality 78% (no distinctive match)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 67% (no distinctive match)

reality 66% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 72% (no distinctive match)

reality 70% (no distinctive match)

B2,B2 The deal sets the exchange rate between two value substrates.

intent 72% (no distinctive match)

reality 75% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 69% (no distinctive match)

reality 77% (no distinctive match)

C1,C1 Power flows where the grid lets it.

intent 73% (no distinctive match)

reality 70% (no distinctive match)

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 73% (no distinctive match)

reality 69% (no distinctive match)

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 77% Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

reality 75% (no distinctive match)

commit context — 7 file(s)

fix(blog): atomic manifest writes + no-shrink/carry-over gates for the panel index

three-breach-rates-one-ledger's blog-list card rendered broken (sparse, all-amber
encircled.png instead of its own dense per-commit panel) because it was silently
missing from src/data/post-panels-index.json — the bundled index the deployed
(force-dynamic, public/-untraced) blog route actually reads. Root cause traced two
layers deep:

1. scripts/pmu/post-drift-history.sh wrote manifest.json via a long sequence of
   non-atomic `>`/`>>` shell redirects directly to the final path. Two overlapping
   runs for the same post (post-commit fan-out firing close together) raced and
   interleaved their writes, producing a corrupted file (a closed `]` followed by a
   stray `,` and a dangling object).
2. scripts/blog/build-panels-index.mjs treated an unparseable manifest as "skip this
   post" — silently dropping it from the index on every subsequent rebuild, with no
   protection against the index net-shrinking across a full rescan.

Fix: post-drift-history.sh now builds the manifest in a private tmp file, validates
it with JSON.parse, and mv's it into place atomically — a losing writer can never
l

data/thetacoach.db
public/blog/post-panels/2026-07-02-three-breach-rates-one-ledger/encircled.png
public/blog/post-panels/2026-07-02-three-breach-rates-one-ledger/manifest.json
scripts/blog/attach-tolerance-panel.sh
scripts/blog/build-panels-index.mjs
scripts/pmu/post-drift-history.sh
src/data/post-panels-index.json

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 1372.92ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 0dfd6c521

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.