fix(lens): DEFAULT-DENY qwen — the cure for the sneak-back (opt-in, not opt-out)

Operator: 'this keeps sneaking back — figure out where it's coming from and remove it.' Traced the
recurrence: qwen-in-the-sync-path has been 'moved off' 4+ times (54e1e76c8, 8418fe76b, 6dd4d10d9,
0699d1f5a). ROOT CAUSE: every fix was an OPT-OUT gate (tiny budget / keyword-confidence / NO_LLM env),
so any caller that forgot the gate silently re-armed the synchronous buildStubSpec qwen inside lensPrompt.
The gate kept getting weakened or bypassed because forgetting it meant qwen-ON.

THE CURE — flip to default-deny: lensPrompt now takes allowLLM (DEFAULT FALSE). qwen (buildStubSpec +
pingOllama) is reachable ONLY when a caller EXPLICITLY passes allowLLM:true, and the ONLY caller that does
is the detached background refine (the CLI --prompt path). Every hook calls lensPrompt with no flag → the
safe deterministic path, automatically. Forgetting = OFF, not ON.

Sneak-proof guard (hooks-first-pass-no-llm.test.mjs): (1) default lensPrompt stays fast + qwen-free even
with ollama at a DEAD port; (2) allowLLM defaults false + qwen gated on it; (3) it ENUMERATES every
allowLLM:true in scripts/ + hooks/ and fails unless the ONLY one is the background CLI — so a new sync
caller that opts in turns the build red. lens-qwen-gated + placement-is-llm-free still green.

Originating-Terminal: 🔨 iTerm Builder
Relevant-Rooms: 🔨 builder, 🧪 laboratory, 🎤 voice
Story: The drill finally holds because the invariant is structural, not vigilant — reaching qwen requires a single greppable token a guard can count, and the default is always the safe one.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013BUf5M5p42Zw73VaGt33ZL

commit 1f1a2af58 — 144×144 lattice triptych (on-chip)

◎ the ingest chose C,C3 — Operations × Operations·Flow — acting on C1,A1 — Operations·Grid × Strategy·Law (grip 0.750) · the walk starts at the ACTOR's row · 2 file(s)

⏱ ingest 106.6ms (corpus→lattice) · definer walk 1704ms (row→transpose→row, ballistic XOR per hop) · total 1904ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 4% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

C,C3 — Operations × Operations·Flow (actor) acting on C1,A1 — Operations·Grid × Strategy·Law (patient) · grip 0.750

actor seed C,C3 — Maintaining the daily cadence and operational execution ensures flow throughput and delivery rate across the finish. Flow is the rate at which committed work crosses the finish line. Inventory accumulates upstream; flow is the only thing the customer pays for, and the only thing the operator can measure honestly. Movement is the irreversible delivery of value across the boundary. Anything stationary is cost; anything moving is either revenue, deferred revenue, or the exhaust of revenue not yet realized. Throughput dominates utilization. A ninety-nine-percent utilized system at low throughput pays the same wages as a fifty-percent utilized system at twice the throughput, but the second one ships the customer's order. Operations is the loop that runs whether anyone watches. The daily commit, the hourly hook, the per-request fingerprint — the substrate of the substrate, ambient and unwatched. Process is what you forget to do; ops is what does itself. Convert manual moves into ambient state, because the tax of remembering compounds faster than the tax of automating. The daily friction is the diff between your intent and your harness. Close the diff or pay the tax twice — once in the slip, once in the apology to the next agent. Operations earns its keep by being boring. The day the routine is interesting is the day it has already failed and is being narrated rather than executed.

patient seed C1,A1 — Power flows where the grid lets it. Choose connections before topologies; the topology is what the connections compose, and a connection added later is a topology silently rewritten. Latency is geography expressed in milliseconds. The grid IS the map of where compute meets storage meets bandwidth; the map is the territory at the scale the request actually traverses. Infrastructure decisions are reversible at ten-times the cost of being right the first time. Buy the irreversibility down before you provision the easy decisions, because the easy decisions ride on the irreversible ones. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. A rule names what the system MAY NOT do. If the agent can do X, then 'forbid X' is not the constraint — it is wishful thinking dressed as policy. Constraints live in the gate, not in the prompt.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 3% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration)

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 4% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 6 in the 9×9 A1..C3 square · 1550 in the 132×132 children square · 308 cross-zone
REALITY: 0 in the 3×3 ABC corner · 1 in the 9×9 A1..C3 square · 1244 in the 132×132 children square · 174 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 41 claims @ θ 0.625 · reality 40 claims @ θ 0.625 · projection 867ms

SHAPE-MATCH σ = -0.36 — the real intent↔reality definer walk vs random-reality (actual 0.0542 vs random 0.066). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · noise · below zero — this read is noise, not a measurement

Most out-of-lane row: B1 · Speed — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=armed — orthogonal out-of-lane 8% vs tolerance 25%.
551 green · 650 amber · 0 red · 131 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 72% (no distinctive match)

reality 78% (no distinctive match)

B,B Tactics is the choice of which leverage to pull at which beat.

intent 78% (no distinctive match)

reality 72% export async function lensPrompt(prompt, { audit = spawnAudit, allowLLM = false } = {}) {

C,C Operations is the loop that runs whether anyone watches.

intent 80% (no distinctive match)

reality 86% (no distinctive match)

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 75% (no distinctive match)

reality 80% (no distinctive match)

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 80% (no distinctive match)

reality 83% (no distinctive match)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 70% (no distinctive match)

reality 72% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 69% (no distinctive match)

reality 73% (no distinctive match)

B2,B2 The deal sets the exchange rate between two value substrates.

intent 75% (no distinctive match)

reality 75% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 72% (no distinctive match)

reality 72% (no distinctive match)

C1,C1 Power flows where the grid lets it.

intent 75% (no distinctive match)

reality 75% (no distinctive match)

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 69% (no distinctive match)

reality 70% (no distinctive match)

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 78% (no distinctive match)

reality 78% (no distinctive match)

commit context — 2 file(s)

fix(lens): DEFAULT-DENY qwen — the cure for the sneak-back (opt-in, not opt-out)

Operator: 'this keeps sneaking back — figure out where it's coming from and remove it.' Traced the
recurrence: qwen-in-the-sync-path has been 'moved off' 4+ times (54e1e76c8, 8418fe76b, 6dd4d10d9,
0699d1f5a). ROOT CAUSE: every fix was an OPT-OUT gate (tiny budget / keyword-confidence / NO_LLM env),
so any caller that forgot the gate silently re-armed the synchronous buildStubSpec qwen inside lensPrompt.
The gate kept getting weakened or bypassed because forgetting it meant qwen-ON.

THE CURE — flip to default-deny: lensPrompt now takes allowLLM (DEFAULT FALSE). qwen (buildStubSpec +
pingOllama) is reachable ONLY when a caller EXPLICITLY passes allowLLM:true, and the ONLY caller that does
is the detached background refine (the CLI --prompt path). Every hook calls lensPrompt with no flag → the
safe deterministic path, automatically. Forgetting = OFF, not ON.

Sneak-proof guard (hooks-first-pass-no-llm.test.mjs): (1) default lensPrompt stays fast + qwen-free even
with ollama at a DEAD port; (2) allowLLM defaults false + qwen gated on it; (3) it ENUMERATES every
allowLLM:true in scripts/ + hooks/ and fail

scripts/pmu/prompt-lens.mjs
tests/pmu-simulator/hooks-first-pass-no-llm.test.mjs

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 850.32ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 1f1a2af58

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.