feat(intervention): receipt reverts to LLM-free · the intervention becomes the two-sided self-improvement pass · always-fires

Operator 2026-07-13, three moves:

1. RECEIPT → NO LLM IN THE LOOP. Removed the per-commit commit-story email-2 (qwen) spawn from
   commit-triptych's receipt path. The drift receipt is now purely deterministic/LLM-free — one
   email, the receipt. (Also trimmed the wrapper's superfluous 'receipt not a report' framing.)

2. THE INTERVENTION IS THE LLM, and now a real SENSEMAKING + SELF-IMPROVEMENT pass whose north
   star is REDUCING RECURRENCE. New prompt fields (build-intervention-prompt.mjs):
   · WRONG OPERATION — the plain metaphor mapped to real coords ('asked for the plumbing,
     performed brain surgery') so a human feels the drift instantly;
   · the TWO-SIDED REPAIR — spec_rewrite (fix the intent/docs) AND code_rewrite (fix the reality
     code) — because drift is intent≠reality and you close it from both ends;
   · RECURRENCE — does spec+code+guard stop the CLASS from recurring, with residual risk named.
   Rendered in the email (metaphor banner · two-sided repair block · will-it-recur) and carried
   into the /intervene story.

3. ALWAYS FIRE. Cap raised 10→50 (out-of-lane + once-per-sha are the real limits; the cap is only
   a runaway backstop). NEW scripts/controller/intervention-backfill.sh (controller STAGE 7b):
   any out-of-lane commit (offPct>15) with no intervention event — hooks-off, crashed hook — is
   caught, bounded + exactly-once, mirroring receipt-backfill. The intervention is now
   impossible-to-forget.

Guards (same commit): tests/ops/intervention-fire.test.js +4 (two-sided repair · metaphor ·
always-fire backfill+cap · receipt-LLM-free) ; email-exactly-once receipt-LLM-free rewritten.
Receipt determinism unchanged (909g/362a/0r); all guards green.

Originating-Terminal: 🔨 builder
Relevant-Rooms: 🔨 builder, 🔒 vault, 🧪 laboratory
Story: the receipt states WHERE (LLM-free, every commit); the intervention explains WHY and
repairs BOTH sides (LLM, out-of-lane only, always) — the two are finally cleanly split.

Receipt-Verified: σ=2.00 · cell=A1 · witness-agreement=GZIP_ONLY · lens=gzip · receipt=84f0ad82

commit dc0369906 — 144×144 lattice triptych (on-chip)

◎ the ingest chose C3,A1 — Operations·Flow × Strategy·Law — acting on C3,C2 — Operations·Flow × Operations·Loop (grip 0.766) · the walk starts at the ACTOR's row · 7 file(s)

⏱ ingest 247.8ms (corpus→lattice) · definer walk 1817ms (row→transpose→row, ballistic XOR per hop) · total 2254ms
ingest here = commit-scoped SENSING only (this commit's message + changed files → lit anchors) — deep seed authoring lives in the reef-self-loop, off the commit path

rows = ACTOR (lens) · cols = PATIENT (object) · diagonal = self-reference; ◎ at actor-row × patient-col — every panel, same orientation. Heat above the diagonal = actors ranking ShortLex-earlier than their patients (the walk follows definers uphill in rank).
The 12 canonical lanes (rows top→bottom, cols left→right): A·Strategy · B·Tactics · C·Operations · A1·Law · A2·Goal · A3·Fund · B1·Speed · B2·Deal · B3·Signal · C1·Grid · C2·Loop · C3·Flow

PAIR LATTICE (the map we normally see)

PRE-WALK SENSE · INTENT grid — the snapshot, no point of view

the no-point-of-view snapshot — what the sensor lit before any walk; the leaf walk below is what bridges the two grids

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK SENSE · REALITY grid — the snapshot, no point of view

the no-point-of-view snapshot, reality side — same sensor law

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PRE-WALK Δ · straight comparison of the two ingested grids (green both · cyan intent-only · amber reality-only) · 3% overlap · ◎ = where the competence pixel sits in the raw overlap

good = green overlap without being a copy — near-100% is self-similarity, not alignment

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

◎ the pixel this commit belongs to

C3,A1 — Operations·Flow × Strategy·Law (actor) acting on C3,C2 — Operations·Flow × Operations·Loop (patient) · grip 0.766

actor seed C3,A1 — Flow rate and delivery throughput are subject to the binding mandate and governance rule of law. EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at any moment. Compliance attaches to the artifact the artifact cannot escape — provenance is a regulatory primitive, not a feature. Constraints precede objectives. The cap-table, the license text, the consent envelope — each draws the inviolate line the action must respect, and the line is enforced before the optimization runs. A rule names what the system MAY NOT do. If the agent can do X, then 'forbid X' is not the constraint — it is wishful thinking dressed as policy. Constraints live in the gate, not in the prompt. Regulation is not advisory. The fine is the price tag stapled to the omitted control; insurance is the option pricing on the failure-mode the regulation already named. Flow is the rate at which committed work crosses the finish line. Inventory accumulates upstream; flow is the only thing the customer pays for, and the only thing the operator can measure honestly. Movement is the irreversible delivery of value across the boundary. Anything stationary is cost; anything moving is either revenue, deferred revenue, or the exhaust of revenue not yet realized. Throughput dominates utilization. A ninety-nine-percent utilized system at low throughput pays the same wages as a fifty-percent utilized system at twice the throughput, but the second one ships the customer's order. Flow has a direction. Bidirectional flow is two flows, each measured separately; calling them a single flow hides the chokepoint and the chokepoint is where the leverage lives.

patient seed C3,C2 — Finish throughput and flow rate provide the data for the iterative feedback loop and hypothesis test. Each iteration is a hypothesis tested against the ground truth of the world. Loops shorter than the feedback half-life waste the half-life; loops longer than it pay compounding interest on the wait. Cycles compound when each turn's exhaust feeds the next turn's intake. Closed loops compound; open loops decay. The closing of the loop IS the productivity, not the running of it. Iteration discipline: one commit per iteration, never bundled. Bundled iterations destroy the bisect, and the bisect is the future agent's only tool for finding which round of feedback produced which artifact. Flow is the rate at which committed work crosses the finish line. Inventory accumulates upstream; flow is the only thing the customer pays for, and the only thing the operator can measure honestly. Movement is the irreversible delivery of value across the boundary. Anything stationary is cost; anything moving is either revenue, deferred revenue, or the exhaust of revenue not yet realized. Throughput dominates utilization. A ninety-nine-percent utilized system at low throughput pays the same wages as a fifty-percent utilized system at twice the throughput, but the second one ships the customer's order. Flow has a direction. Bidirectional flow is two flows, each measured separately; calling them a single flow hides the chokepoint and the chokepoint is where the leverage lives.

INTENT · leaf-walk clouds · BLUE→VIOLET by ply (◎ = the competence pixel: actor∩patient)

good = the clouds concentrate where the commit SAYS it works

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

REALITY · leaf-walk clouds · ORANGE→RED by ply (◎ = the same pixel — the shared perspective)

good = the same clouds as intent — shipped where declared

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

DELTA · graded cloud divergence (green agree · magenta declared-not-done · amber done-not-declared) · 1% agree

good = mostly green; magenta = said-not-done (chase it in the code), amber = done-not-said (chase it in the docs)

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

TOLERANCE · cloud topology (dim green in-shape · hot amber bleed · red orthogonal concentration) · ⚠ TOO MANY

red only matters above the flip — a few amber is normal bleed

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

SHORTLEX-3 PROJECTION (ABC · A1..C3 · the 132 children — candidate, pre-ratchet)

PROJECTED INTENT · the commit’s claims, head→axis_i tail→axis_j (cyan)

the three-length view — good = claims land inside their own zone

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

PROJECTED REALITY · same projection law (amber)

same projection law — good = reality occupies the zones intent does

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

STRAIGHT COMPARISON · green both · cyan intent-only · amber reality-only · 8% overlap

good = the zones agree; cross-zone scatter is the drift to read

	ABC A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N A1–C3
ABC A1–C3 A1A–O A2A–O A3A–O B1A–O B2A–O B3A–O C1A–N C2A–N C3A–N

shortlex-3 zone occupancy (lit cells per diagonal square)
INTENT: 0 in the 3×3 ABC corner · 9 in the 9×9 A1..C3 square · 2001 in the 132×132 children square · 385 cross-zone
REALITY: 1 in the 3×3 ABC corner · 6 in the 9×9 A1..C3 square · 1721 in the 132×132 children square · 255 cross-zone
axes: identical 144 ShortLex names both sides (symmetric); weights asymmetric
zone 3 = candidate children, pre-ratchet (repo-derived dumps not yet past the perturbation-probe gate) · intent 58 claims @ θ 0.625 · reality 61 claims @ θ 0.625 · projection 1468ms

SHAPE-MATCH σ = -0.45 — the real intent↔reality definer walk vs random-reality (actual 0.0377 vs random 0.053). >0 = the walk distinguishes real alignment from noise; aggregate over independent walks → the divergent series.
σ_drift · noise · below zero — this read is noise, not a measurement

Most out-of-lane row: B2 · Deal — that lane is drifting most (read the red band in that row).

Three-colour tolerance (out-of-lane = reality fires where intent is weak, in orthogonal blocks): green=in-lane agreement · amber=a few out-of-lane (tolerated) · red=FIRED — orthogonal out-of-lane 34% vs tolerance 25%.
306 green · 485 amber · 408 red · 162 XOR-friction cells.

Both axes = the 144 ShortLex anchors, cell=row⊕col, on the chip. INTENT=docs+rules · REALITY=code · DELTA=friction.

tile dump — what the SimHash matched on the diagonal (inspect the sensor; tap to expand)

A,A The lattice we build today is what next year's underwriter inherits.

intent 69% (no distinctive match)

reality 77% 8. MISSING GUARD: the single test/gate/rule that, had it existed, would have prevented this eve

B,B Tactics is the choice of which leverage to pull at which beat.

intent 70% (no distinctive match)

reality 72% cd "$(dirname "$0")/../.." || exit 0

C,C Operations is the loop that runs whether anyone watches.

intent 78% (no distinctive match)

reality 83% # hook is the fast path; this is the impossible-to-forget guarantee. Any commit whose receipt r

A1,A1 EU AI Act Article 14 requires human-on-the-loop oversight, with the supervisor able to interrupt the system at

intent 75% (no distinctive match)

reality 83% 4. SPEC REWRITE (the intent side of the repair): if the INTENT was wrong or under-bounded — the

A2,A2 The target is the cell coordinate the system MUST occupy by end-of-quarter.

intent 75% (no distinctive match)

reality 80% MAX="${INTERVENTION_BACKFILL_MAX:-3}" # bound the fires per tick (each may run the big LLM)

A3,A3 Every dollar builds either the floor (substrate that lifts future bets) or the ceiling (cap on the next round)

intent 70% (no distinctive match)

reality 72% if(!sha||seen.has(sha)) continue; seen.add(sha);

B1,B1 Latency is the price of a missed beat.

intent 70% (no distinctive match)

reality 77% ${s.wrong_operation ? `<p style="font-size:16px;line-height:1.5;color:#1a1a1a;background:#fbf3e

B2,B2 The deal sets the exchange rate between two value substrates.

intent 73% (no distinctive match)

reality 75% (no distinctive match)

B3,B3 Signal-to-noise is the inverse cube of bandwidth — narrow the channel, the message arrives; broaden it, recipi

intent 70% Receipt-Verified: σ=2.00 · cell=A1 · witness-agreement=GZIP_ONLY · lens=gzip · receipt=84f0ad82

reality 78% console.log(` ⛔ exactly-once: receipt email for ${shaShort} already in the ledger — send SKIPPE

C1,C1 Power flows where the grid lets it.

intent 73% (no distinctive match)

reality 75% (no distinctive match)

C2,C2 Each iteration is a hypothesis tested against the ground truth of the world.

intent 69% (no distinctive match)

reality 75% (no distinctive match)

C3,C3 Flow is the rate at which committed work crosses the finish line.

intent 77% (no distinctive match)

reality 78% (no distinctive match)

commit context — 7 file(s)

feat(intervention): receipt reverts to LLM-free · the intervention becomes the two-sided self-improvement pass · always-fires

Operator 2026-07-13, three moves:

1. RECEIPT → NO LLM IN THE LOOP. Removed the per-commit commit-story email-2 (qwen) spawn from
   commit-triptych's receipt path. The drift receipt is now purely deterministic/LLM-free — one
   email, the receipt. (Also trimmed the wrapper's superfluous 'receipt not a report' framing.)

2. THE INTERVENTION IS THE LLM, and now a real SENSEMAKING + SELF-IMPROVEMENT pass whose north
   star is REDUCING RECURRENCE. New prompt fields (build-intervention-prompt.mjs):
   · WRONG OPERATION — the plain metaphor mapped to real coords ('asked for the plumbing,
     performed brain surgery') so a human feels the drift instantly;
   · the TWO-SIDED REPAIR — spec_rewrite (fix the intent/docs) AND code_rewrite (fix the reality
     code) — because drift is intent≠reality and you close it from both ends;
   · RECURRENCE — does spec+code+guard stop the CLASS from recurring, with residual risk named.
   Rendered in the email (metaphor banner · two-sided repair block · will-it-recur) and carried
   into the /intervene story.

3. ALWAYS FIRE.

scripts/controller/intervention-backfill.sh
scripts/controller/tick.sh
scripts/interventions/build-intervention-prompt.mjs
scripts/interventions/intervention-fire.sh
scripts/pmu/commit-triptych.mjs
tests/ops/intervention-fire.test.js
tests/pmu-simulator/email-exactly-once.test.mjs

Produced on the chip by the running pipeline (scripts/pmu/pipeline.mjs → runPipeline → walk + xor), commit-scoped · on-chip per-walk 639.09ns (this commit). Recompute: node scripts/pmu/commit-triptych.mjs --commit dc0369906

Commit artifacts (open on a computer — Gmail mobile won't follow file:// links; the inline images above are the phone-viewable form): reef grid · this triptych · the HDL — all three are also attached to this email.