LithosAnanake/FABRIC-3.9.8.md

FABRIC-3.9.8.md — Observers and participants: execution plan and log

Status: PLANNED. No stage started. The design and its open rulings (O-1 to O-4, plus the discard question) are in FABRIC-3.9.0.md.

Each stage:

• needs Captain Bob's explicit go;
• gets its own commit;
• gets its own three-architecture acceptance (clean qemu; amd64, then aarch64, then riscv64; foreground; visible framebuffer; one at a time; coupled images reset before each).

Evidence is named before each stage runs.

The standing acceptance sequence for every stage, unchanged from FABRIC-3.8.md:

• a boot to [zuse@Hera] ok> with zero UNKNOWN WORD, faults and frame corruption;
• the dict_hash set identical across ISAs;
• the Stage G interleave (two workers, A/B), byte-identical across ISAs;
• mint → WIREBIND → USE → 1 2 + . → 3;
• 0 bytes of idle log growth over 20 s.

1. Staged plan

Stage	Change	Evidence (named in advance)
O-A	Observer role (FABRIC-3.9.0.md §2.1). The absolute-heat-share charge is discarded (ruling 5). Observers are left out of the decision's candidates, the work-heat charge and the floor, and (O-2) the absolute charge. Observers with events go ahead at clean boundaries, among themselves by wait stamp (§2.4, per O-1).	(Corrected before starting.) The standard sequence, with the G interleave unchanged. Console responsive under load: 1 2 + . typed while wa/wb run prints 3 in the middle of the A/B stream. Observer precedence: a message to Hestia sent in the same line as the two worker jobs runs before any A/B. Not run: the busy-wait DoE driver. Under O-1, Hera running DOE is an observer acting on an event, and nothing displaces her, so MU-WAIT-ALL would wait forever. The originally named evidence ("Hera's share falls on the unchanged busy-wait driver") contradicts the design. DOE stays unrun until O-C replaces the driver.
O-B	Hera's own mail drained at sk_vm_idle_point(), with the readline n > 0 gate; the timer-paced pump drain removed (§2.5).	The standard sequence, plus: a message sent to Hera while she sits idle at the prompt is acted on without waiting for the idle beat. A probe records the delay in beats from admission to drain; it must be well under SK_IDLE_BEAT_INTERVAL. The relay and BLK-ATTACH flows are unchanged.
O-C	An event-driven DoE driver (§3): DOE starts trial 1 and returns to the prompt; MU-DONE counts, ends trials and starts the next; MU-WAIT-ALL is deleted. Capsule only.	A 1-rep smoke campaign on amd64 runs all 6 cells to MU-CAMPAIGN: complete, with every trial fail=0 and N/N KILL … dead. Hera's rows during trials are only event handling. The prompt answers typed input while trials run. Then the standard sequence on all three ISAs.
O-D	The DoE relaunch: 12345 3 S" <isa>" DOE, amd64, then aarch64, then riscv64, with the ring extracted between ISAs and artemis.img not reset in between.	A fresh time estimate from O-C's measured row rate, before launch. Then per ISA: 18 MU-TRIAL markers, fail=0, MU-CAMPAIGN: complete.
Merge	This branch to master, once all three ISAs have completed O-D.	Per this project's own merge practice, at Captain Bob's word.

Stop conditions (re-plan rather than push on):

• dict_hash diverges across ISAs;
• conservation (vm_physics_conserved(), stadium_conserved()) goes false;
• an observer is ever returned as a heat candidate;
• a switch storm: log growth at an idle prompt, with QEMU pinned;
• a trial that never produces its marker.

2. Execution log

• Stage O-A — the observer role (FABRIC-3.9.0.md §2). 2026-09-24. Captain Bob: "all as proposed, go ahead with O-A" (O-1 to O-4 and the discard, all as proposed). - Discarded: the uncommitted absolute-heat-share charge (git checkout of capsule_vm_physics.c/.h), per ruling 5. - capsule_vm_switch_signal.c/.h: - Each slot carries an observer flag, with sk_vm_switch_signal_set_observer() and is_observer(). - sk_vm_switch_decide() now works in tiers: 1. An observer that is itself in progress (a live non-IDLE frame) or holding an event keeps the CPU. 2. Otherwise, an observer with an event, meaning mail (or console input, for Hera), goes ahead of every participant. Among observers, the oldest wait stamp wins. 3. Otherwise, participants are compared by work heat exactly as in FABRIC-3.8. Observers are never heat candidates. - note_work_gained() never floors an observer and leaves observers out of the floor set. The running VM counts only if it is a participant. - capsule_birth.c: is_fleet_foundation is hoisted to function scope. Registration marks the Tripod as observers from that same birth-time fact. - kernel_main.c: Hera is marked an observer where she registers. - vm_runtime.c: observers are not charged at all (O-2). - Nothing a VM executes can set or clear the role.

  **Evidence, as corrected before starting (§1).** Ordinary words only, typed at
  `[zuse@Hera] ok>`, byte-identical on all three ISAs (`logs/20260924-084904/amd64/`,
  `-090107/aarch64/`, `-091424/riscv64/`):
  - **G interleave unchanged:** A = 40, B = 40, 48 runs.
  - **Observer precedence:** `S" LA" S" wa" SEND . S" LB" S" wb" SEND . S" 72 EMIT 72 EMIT
    72 EMIT" S" Hestia" SEND .` gives `HHHABBAABBAA…`. Hestia's mail ran before any
    participant output once Hera went idle.
  - **Console responsive under load:** with `wa`/`wb` on 200 markers × 20,000-iteration
    loops, `1 2 + .` typed mid-run appears as `…ABABAB1 2 + .` / `3  ok` / `ok> ABABBA…`.
    Hera, an observer with console input, got the CPU at the next worker boundary, ran the
    line, and the workers resumed. This is the C-4 (α) starvation recorded at C-b, fixed.
    *(The first amd64 attempt at this check used loops that finished before the line was
    typed, so it proved nothing. It was re-run with the heavy loops, and the script was fixed
    for the other two ISAs.)*
  
  **Acceptance** (same boots):
  - All reach `[zuse@Hera] ok>` with zero `UNKNOWN WORD`, faults and frame corruption.
  - The `dict_hash` set is unchanged from Stage I (word_count 531, M7.1a
    `0x572daac83b797332`), since no words were added or removed.
  - Mint → WIREBIND → `USE` → `1 2 + .` → `3`.
  - Idle log growth: 0 bytes.
  - Clean build on all three plus hosted, no new warnings.
  
  **Not run, by design:** the busy-wait DoE driver, which would deadlock under O-1 (§1).
  Don't run `DOE` until O-C.