feat(lens): store-aware substrate manifest + preflight guardrail (anti-sand) + correct the lens_rules claim

THE INCIDENT (2026-07-03): retrieveRules queries lens_rules in .thetacog/transcripts.db
(128 coord-mapped rows, per-rule CLAUDE.md placePixel coords), but TWO audits — the
original perimeter assumption AND my own last-commit audit — checked data/thetacoach.db,
found it absent, and concluded 'empty'. The failure was never emptiness; it was WRONG
STORE. 'perimeter 0' = sparse seeding (few distinct coords), not an empty table.

THE FIX (the mechanism, not the instance):
- data/pmu/substrate-manifest.json — explicit planned-vs-active declaration of every
  load-bearing substrate WITH ITS EXACT STORE, who queries/seeds it, and its fallback.
- scripts/pmu/substrate-check.mjs — verifies each against ITS declared store (a boolean
  table-exists check is itself sand). Classes: OK / GHOST (active but missing) / STUB
  (planned, carried by a fallback) / RISEN (stub now populated). Exports assertSubstrate()
  as the programmatic PREFLIGHT — 'verify before build' is now a guardrail, not an instinct.
- lens-rule-fit.mjs: preflight assertSubstrate('lens-reef') before measuring, and the
  header comment CORRECTED — the earlier 'lens_rules is empty' was flatly wrong.

AUDIT RESULT (store-aware): lens_rules 128@transcripts · gcal_fired 51@transcripts ·
lens_rule_meta 87 · tc_pipeline_gates 13 · tc_tasks 10 · lens-reef 32 domains — all OK.
STUBS carried by fallbacks: book_passages (empty; COMPLETE-BOOK.txt is live source) ·
hive_visits (migration never run; alert emails carry it). Zero ghosts.

Guard: tests/ops/substrate-manifest.test.js (no ghosts · covers load-bearing ids ·
lens_rules declared in transcripts.db · assertSubstrate throws on undeclared).

Originating-Terminal: 🔨 iTerm Builder
Relevant-Rooms: 🧪 Cursor Laboratory, 🔨 iTerm2 Builder, 📐 VS Code Architect
Story: The operator asked to close the whole ghost-stub class before mirroring; verifying
found my own prior conclusion was the very trap — lens_rules is populated, in a different
store — so the guardrail was built store-aware and the wrong claim corrected in the same commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013BUf5M5p42Zw73VaGt33ZL

commit 9d7852777 — 144×144 lattice triptych (on-chip)

◎ the ingest chose A3,C2 — Strategy·Fund × Operations·Loop — acting on C,B1 — Operations × Tactics·Speed (grip 0.766) · the walk starts at the ACTOR's row · 4 file(s)

⏱ ingest 241.4ms (corpus→lattice) · definer walk 385ms (row→transpose→row, ballistic XOR per hop) · total 766ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 4% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

A3,C2 — Strategy·Fund × Operations·Loop (actor) acting on C,B1 — Operations × Tactics·Speed (patient) · grip 0.766

actor seed A3,C2 — Budget runway funds the capital needed for each iterative feedback loop and hypothesis test cycle. Each iteration is a hypothesis tested against the ground truth of the world. Loops shorter than the feedback half-life waste the half-life; loops longer than it pay compounding interest on the wait. Cycles compound when each turn's exhaust feeds the next turn's intake. Closed loops compound; open loops decay. The closing of the loop IS the productivity, not the running of it. Iteration discipline: one commit per iteration, never bundled. Bundled iterations destroy the bisect, and the bisect is the future agent's only tool for finding which round of feedback produced which artifact. Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round). Allocation is which one this dollar chooses, and the choice is irreversible by the time the wire clears. Burn rate divides into substrate-building and exhaust. Substrate compounds; exhaust evaporates by quarter-end. The investor who pays for substrate is buying a different asset than the investor who pays for exhaust. Capital allocation is the irreversible vote — the bet that closes options to keep the others open. Each dollar deployed buys both the asset and the foreclosure of every alternative the dollar could have funded. The funding question is the runway question. Eighteen months at one burn rate is a different company than twelve months at a higher burn rate, even when the bank balance matches.

patient seed C,B1 — Cadence in daily operations ensures that velocity beats and speed requirements are met without missing a run. Latency is the price of a missed beat. Every hundred milliseconds of round-trip turns a parallel race into a stalemate, because the first arrival sets the rules the second arrival has to honor. Throughput compounds: doubling the rate doubles the surface area where serendipity can hit. A pipeline at twice the velocity is not twice as productive — it is exponentially more lucky. Time-to-first-byte is the only number the operator feels at the wheel. Optimize the felt latency before the raw throughput; the operator's grip on the loop is what drives the loop forward. Operations is the loop that runs whether anyone watches. The daily commit, the hourly hook, the per-request fingerprint — the substrate of the substrate, ambient and unwatched. Process is what you forget to do; ops is what does itself. Convert manual moves into ambient state, because the tax of remembering compounds faster than the tax of automating. The daily friction is the diff between your intent and your harness. Close the diff or pay the tax twice — once in the slip, once in the apology to the next agent.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 2% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration) · ⚠ TOO MANY

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 4% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 5 in the 9×9 A1..C3 square · 1580 in the 132×132 children square · 288 cross-zone
REALITY: 0 in the 3×3 ABC corner · 6 in the 9×9 A1..C3 square · 841 in the 132×132 children square · 127 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 52 claims @ θ 0.625 · reality 35 claims @ θ 0.625 · projection 461ms

SHAPE-MATCH σ = -1.87 — the real intent↔reality definer walk vs random-reality (actual 0.0136 vs random 0.07). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · noise · below zero — this read is noise, not a measurement

Most out-of-lane row: A1 · Law — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=FIRED — orthogonal out-of-lane 46% vs tolerance 25%.
296 green · 432 amber · 611 red · 125 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 72% Guard: tests/ops/substrate-manifest.test.js (no ghosts · covers load-bearing ids · lens_rules d

reality 73% // RISEN — declared planned-stub but now populated (info: candidate to promote to active).

B,B Tactics is the choice of which leverage to pull at which beat.

intent 69% (no distinctive match)

reality 75% (no distinctive match)

C,C Operations is the loop that runs whether anyone watches.

intent 78% (no distinctive match)

reality 75% (no distinctive match)

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 75% (no distinctive match)

reality 78% !/usr/bin/env node. scripts/pmu/lens-rule-fit.mjs — THE DETERMINISTIC RULE-FIT SELF-EXPERIMENT

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 73% (no distinctive match)

reality 72% (no distinctive match)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 70% (no distinctive match)

reality 70% (no distinctive match)

B1,B1 Latency is the price of a missed beat.

intent 73% (no distinctive match)

reality 72% catch { return { present: false, rows: 0, detail: `unparseable ${s.store}` }; }

B2,B2 The deal sets the exchange rate between two value substrates.

intent 70% (no distinctive match)

reality 73% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 72% (no distinctive match)

reality 70% if (!p.present) return 'GHOST';

C1,C1 Power flows where the grid lets it.

intent 78% (no distinctive match)

reality 73% // scripts/pmu/substrate-check.mjs — the STORE-AWARE anti-sand guardrail (operator 2026-07-03).

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 69% (no distinctive match)

reality 70% (no distinctive match)

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 77% (no distinctive match)

reality 70% (no distinctive match)

commit context — 4 file(s)

feat(lens): store-aware substrate manifest + preflight guardrail (anti-sand) + correct the lens_rules claim

THE INCIDENT (2026-07-03): retrieveRules queries lens_rules in .thetacog/transcripts.db
(128 coord-mapped rows, per-rule CLAUDE.md placePixel coords), but TWO audits — the
original perimeter assumption AND my own last-commit audit — checked data/thetacoach.db,
found it absent, and concluded 'empty'. The failure was never emptiness; it was WRONG
STORE. 'perimeter 0' = sparse seeding (few distinct coords), not an empty table.

THE FIX (the mechanism, not the instance):
- data/pmu/substrate-manifest.json — explicit planned-vs-active declaration of every
  load-bearing substrate WITH ITS EXACT STORE, who queries/seeds it, and its fallback.
- scripts/pmu/substrate-check.mjs — verifies each against ITS declared store (a boolean
  table-exists check is itself sand). Classes: OK / GHOST (active but missing) / STUB
  (planned, carried by a fallback) / RISEN (stub now populated). Exports assertSubstrate()
  as the programmatic PREFLIGHT — 'verify before build' is now a guardrail, not an instinct.
- lens-rule-fit.mjs: preflight assertSubstrate('lens-reef') before measuring, and the
  h

data/pmu/substrate-manifest.json
scripts/pmu/lens-rule-fit.mjs
scripts/pmu/substrate-check.mjs
tests/ops/substrate-manifest.test.js

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 635.05ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit 9d7852777

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.