review(#507): 5+3 agent fleet — FIX-A repr(transparent) + const _ guards + fmt + asserts

8-agent review fleet (5 specialists + PP-13/15/16 hardeners) against the
4-task unblock-cascade (PR #507): zero REJECT, but two real defects all four
green test suites missed.

P0 — incomplete cherry-pick (PP-16 root cause). Task 2 cherry-picked
463d71b's mailbox_soa.rs half (+149) but dropped its causal-edge/src/edge.rs
half (+6: #[repr(transparent)] on CausalEdge64). The SAFETY comments cited a
repr the type didn't carry — sound on today's rustc by newtype-layout
coincidence, unsound by the letter, invisible to CI.

P1 — fmt --check overclaim (PP-13). The 4-task entry said "clippy/fmt clean"
but only clippy had been run; cargo fmt --check failed on PR-added lines.

Fixes:
- FIX-A: restore #[repr(transparent)] + doc on CausalEdge64 (edge.rs:148-156);
  add const _ size/align guards at edges_raw/meta_raw cast sites; corrected
  both SAFETY comments.
- FIX-B: cargo fmt across all 5 touched crates; fmt --check exit 0.
- FIX-C (PP-15): SurrealMailboxView::from_columns debug_assert_eq! ->
  assert_eq! (release-build OOB closed); + from_columns_rejects_ragged_projection panic test.
- FIX-D: pub fn base_path() on VersionedGraph; deleted format!("{:?}")
  Debug-scrape (embedded-quote truncation hazard).
- FIX-E (PP-13): test_edges_raw_meta_raw_reinterpret_round_trips — the
  unsafe cast had ZERO coverage; now bit-exact round-trip + pointer-identity
  asserted.
- FIX-F/H (P2 docs): hhtl bijection 0..=16 -> 1..=16; drive_at_latest scope
  note + versions().last() upstream-pagination caveat tying ascending-sort
  assumption to the lance =7.0.0 pin.

Process lesson -> EPIPHANIES E-CHERRYPICK-SPANS-CRATES-1 (queued).

Board hygiene: AGENT_LOG.md prepended in same commit (this commit), per the
mandatory rule — no retroactive cleanup.

https://claude.ai/code/session_01Xzyc27Nx3f8WC5KzwfWfjx

Author: claude

.claude/board/AGENT_LOG.md

@@ -1,3 +1,26 @@
+## 2026-06-16 — PR #507 review pass: 5+3 agent fleet (5 specialists + PP-13/15/16 hardeners) → 1 P0 + 2 P1 + P2 docs fixed
+
+**Main thread (Opus 4.7) spawned an 8-agent review fleet against PR #507** (the 4-task unblock-cascade below): 5 specialists (sentinel-qa, dto-soa-savant, iron-rule-savant, scenario-world, container-architect) + the 3 brutal hardeners (PP-13 brutally-honest-tester, PP-15 baton-handoff-auditor, PP-16 preflight-drift-auditor). Verdicts: dto-soa **LAND**, iron-rule **YIELDS-ALL**, container-architect **EXACT**, sentinel-qa **SOUND+P1**, scenario-world **CORRECT+P1**, PP-15 **CATCH-LATENT**, PP-16 **HOLD(P0)**, PP-13 **HOLD(P1×2)**. Consensus: mergeable after mechanical fixes; **zero REJECT, zero architectural rework** — "high-quality work" (PP-13), tests verified not-theater.
+
+**The fleet earned its keep — two real defects all four green test suites missed:**
+
+- **P0 (PP-16, root cause) — incomplete cherry-pick.** Task 2 cherry-picked `463d71b`'s `mailbox_soa.rs` half (+149) but **dropped its `causal-edge/src/edge.rs` half** (+6: the `#[repr(transparent)]` on `CausalEdge64` that is the layout enabler the `&[CausalEdge64]→&[u64]` reinterpret depends on). The SAFETY comment cited a `repr(transparent)` the type didn't carry — sound on today's rustc by newtype-layout coincidence, unsound by the letter, invisible to CI (borrow-checker ignores `repr`). Confirmed via `git show 463d71b --stat`. **Process lesson → EPIPHANIES E-CHERRYPICK-SPANS-CRATES-1.**
+- **P1 (PP-13) — `fmt --check` overclaim.** The prior AGENT_LOG entry below said "clippy/fmt clean" but only clippy had been run; `cargo fmt --check` actually FAILED on PR-added lines (`hhtl.rs`, `scheduler.rs`, `view.rs`). Honest correction.
+
+**Fixes applied (new commit on the same branch — preserves review history):**
+- **FIX-A (P0):** restored the dropped enabler — `#[repr(transparent)]` + doc on `CausalEdge64` (`causal-edge/src/edge.rs:148-156`); added `const _` size/align guards at the `edges_raw`/`meta_raw` cast sites (compile-error on any layout regression); corrected both SAFETY comments.
+- **FIX-B (P1):** ran `cargo fmt` on all 5 touched crates; `fmt --check` now exits 0.
+- **FIX-C (P1, PP-15):** `SurrealMailboxView::from_columns` `debug_assert_eq!` → `assert_eq!` (the column-length invariant now fails loudly in ALL profiles — closes a release-build OOB where a ragged kv-lance projection → `n_rows() > entity_type().len()` → `SoaWavePrimer::project` indexes out of bounds). + `from_columns_rejects_ragged_projection` panic test.
+- **FIX-D (P1, 4 agents):** `pub fn base_path()` on `VersionedGraph`; deleted the `format!("{:?}")` Debug-scrape in `scheduler.rs` (embedded-quote truncation hazard).
+- **FIX-E (PP-13):** `test_edges_raw_meta_raw_reinterpret_round_trips` — the unsafe cast had ZERO coverage; now bit-exact round-trip + pointer-identity asserted.
+- **FIX-F/H (P2 docs):** `hhtl` bijection doc `0..=16` → `1..=16` (prefix(0)=EMPTY is ancestor of nothing); `drive_at_latest` scope note (version-agnostic policies only) + `versions().last()` upstream-pagination caveat tying the ascending-sort assumption to the lance =7.0.0 pin.
+
+**Disk verification this turn:** `git diff` confirms FIX-A landed (`#[repr(transparent)]` on `CausalEdge64` at `edge.rs:156`, `const _:` size/align guards at both cast sites in `mailbox_soa.rs`, `test_edges_raw_meta_raw_reinterpret_round_trips` at `mailbox_soa.rs:716`, `from_columns_rejects_ragged_projection` at `surreal_container/src/view.rs:257`). 34 files modified, +2841/-1100 — all uncommitted, awaits operator decision.
+
+**Discipline note:** this entry prepended BEFORE commit, per board-hygiene rule (board update must land in same commit, not as retroactive cleanup).
+
+---
+
 ## 2026-06-16 — 4-task unblock-cascade landing: NiblePath::from_guid_prefix + MailboxSoaOwner cherry-pick + LanceVersionScheduler + SurrealMailboxView (D-PG-6 contract slice)
 
 **Main thread (Opus 4.7) — single agent**, four ordered tasks responding to the user's "1 2 3 and 4" go-ahead on the shortest-unblocking-path list surfaced after #497-#501 + the surrealdb fork bump (`AdaWorldAPI/surrealdb` PR #34/#35/#36/#37 → main at `3aa6ab9` with `lance=7.0.0`/`lancedb=0.30.0`). All four committed together on `claude/odoo-savant-reasoners`, branch fast-forwarded through `cb14704`.

crates/causal-edge/src/edge.rs

@@ -5,13 +5,13 @@
 //! OQ-LAYOUT-1: RESOLVED. G-slot dropped (L-3). Mantissa = 4b signed i4 (L-4).
 
 // ── v1 fields preserved (shifts unchanged from v1) ─────────────────────────
-pub const S_SHIFT:      u32 = 0;
-pub const P_SHIFT:      u32 = 8;
-pub const O_SHIFT:      u32 = 16;
-pub const FREQ_SHIFT:   u32 = 24;
-pub const CONF_SHIFT:   u32 = 32;
+pub const S_SHIFT: u32 = 0;
+pub const P_SHIFT: u32 = 8;
+pub const O_SHIFT: u32 = 16;
+pub const FREQ_SHIFT: u32 = 24;
+pub const CONF_SHIFT: u32 = 32;
 pub const CAUSAL_SHIFT: u32 = 40;
-pub const DIR_SHIFT:    u32 = 43;
+pub const DIR_SHIFT: u32 = 43;
 
 // ── v1→v2 EXPANDED field ────────────────────────────────────────────────────
 /// Inference mantissa: 4-bit signed (−8..+7).
@@ -23,18 +23,18 @@ pub const DIR_SHIFT:    u32 = 43;
 ///   7=Extension/Intension-negative (future).
 /// Encodes direction × NARS rule in one field.
 /// See pr-ce64-mb-2-causaledge64-v2.md §"Signed Mantissa Rationale".
-pub const INFER_SHIFT:  u32 = 46;
+pub const INFER_SHIFT: u32 = 46;
 
 /// 4-bit unsigned mask for pack/unpack of the signed i4 mantissa field.
-pub const BITS4_MASK:   u64 = 0xF;
+pub const BITS4_MASK: u64 = 0xF;
 
 /// Mask covering the mantissa field (bits 46-49) in the u64 word.
-pub const INFER_MASK:   u64 = BITS4_MASK << INFER_SHIFT;
+pub const INFER_MASK: u64 = BITS4_MASK << INFER_SHIFT;
 
 // ── v1 field SHIFTED ────────────────────────────────────────────────────────
 /// Plasticity flags: bits 50-52 (shifted by +1 from v1's bits 49-51 due to
 /// mantissa expansion from 3b unsigned to 4b signed i4 per L-4).
-pub const PLAST_SHIFT:  u32 = 50;
+pub const PLAST_SHIFT: u32 = 50;
 
 // ── v1 field DEPRECATED ─────────────────────────────────────────────────────
 /// Deprecated: temporal field shift from v1. Bits 52-63 reclaimed in v2.
@@ -51,26 +51,26 @@ pub const V1_TEMPORAL_SHIFT: u32 = 52;
 // ── v2 NEW fields (reclaimed from dropped temporal 12 bits) ─────────────────
 /// W slot: 6-bit witness corpus root handle (bits 53-58), 0..=63.
 /// 0 = no corpus anchor. Per cognitive-substrate-convergence-v1.md L-6.
-pub const W_SHIFT:      u32 = 53;
+pub const W_SHIFT: u32 = 53;
 
 /// Truth-band lens: 2-bit TrustTexture ordinal (bits 59-60).
 /// 0 = Crystalline. Per cognitive-substrate-convergence-v1.md L-7.
-pub const TRUTH_SHIFT:  u32 = 59;
+pub const TRUTH_SHIFT: u32 = 59;
 
 /// Spare: 3-bit reserved for sprint-12+ (bits 61-63).
 /// Candidates: Rubicon-commit marker, Markov-decay quantum, I-NOISE-FLOOR-JIRAK threshold.
-pub const SPARE_SHIFT:  u32 = 61;
+pub const SPARE_SHIFT: u32 = 61;
 
 // ── Common masks ─────────────────────────────────────────────────────────────
-pub const BYTE_MASK:    u64 = 0xFF;
-pub const BITS3_MASK:   u64 = 0x7;
-pub const BITS6_MASK:   u64 = 0x3F;
-pub const BITS2_MASK:   u64 = 0x3;
+pub const BYTE_MASK: u64 = 0xFF;
+pub const BITS3_MASK: u64 = 0x7;
+pub const BITS6_MASK: u64 = 0x3F;
+pub const BITS2_MASK: u64 = 0x3;
 
-pub const PLAST_MASK:   u64 = BITS3_MASK << PLAST_SHIFT;
-pub const W_MASK:       u64 = BITS6_MASK << W_SHIFT;
-pub const TRUTH_MASK:   u64 = BITS2_MASK << TRUTH_SHIFT;
-pub const SPARE_MASK:   u64 = BITS3_MASK << SPARE_SHIFT;
+pub const PLAST_MASK: u64 = BITS3_MASK << PLAST_SHIFT;
+pub const W_MASK: u64 = BITS6_MASK << W_SHIFT;
+pub const TRUTH_MASK: u64 = BITS2_MASK << TRUTH_SHIFT;
+pub const SPARE_MASK: u64 = BITS3_MASK << SPARE_SHIFT;
 
 // ── Compile-time layout coverage assertion ────────────────────────────────────
 /// Const-assert: all 64 bits covered exactly once.
@@ -88,7 +88,7 @@ const _LAYOUT_COVERAGE: () = {
         | (BITS3_MASK << PLAST_SHIFT)             // bits 50-52 (shifted from v1)
         | (BITS6_MASK << W_SHIFT)                 // bits 53-58 (NEW)
         | (BITS2_MASK << TRUTH_SHIFT)             // bits 59-60 (NEW)
-        | (BITS3_MASK << SPARE_SHIFT);            // bits 61-63 (NEW)
+        | (BITS3_MASK << SPARE_SHIFT); // bits 61-63 (NEW)
     assert!(
         all == u64::MAX,
         "CausalEdge64 v2 bit layout must cover all 64 bits exactly once"