Complete host-realistic refresh execution and reference authority gates

Re-validate flagship host-realistic-20260525 on the licensed path with release sync, batch viability policy, and hardened refresh orchestration.

- Target family current_run_id by default; auto release sync and reference_authority_check at cycle end

- Batch acceptance: sweep 4/8/16, any_row_meets >= 0.98, committed batch_solve_report.latest.json

- Preserve approved governance_decision; reference-authority CI workflow; vendor-ci sweep alignment

Author: fraware

.github/workflows/reference-authority.yml

@@ -0,0 +1,35 @@
+name: reference-authority
+
+# Public gate: index, snapshot, flagship invariants, and reference evidence tests.
+on:
+  pull_request:
+  push:
+    branches: [main]
+  schedule:
+  workflow_dispatch:
+    # Monthly drift check on main (same as scheduled).
+    - cron: "0 6 1 * *"
+
+concurrency:
+  group: reference-authority-${{ github.workflow }}-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  verify:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-python@v5
+        with:
+          python-version: "3.12"
+      - name: Install project (dev)
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install -r requirements-dev.txt
+          python -m pip install -e ".[dev]"
+      - name: verify-reference-system
+        run: make verify-reference-system
+      - name: Committed batch acceptance report (viability policy)
+        run: |
+          python scripts/check_batch_acceptance.py \
+            --report benchmarks/reports/batch_solve_report.latest.json

.github/workflows/solver-ci.yml

@@ -98,7 +98,7 @@ jobs:
           python scripts/environment_check.py --out-dir "$VDIR"
           python scripts/smoke_check.py --vendor --out-dir "$VDIR"
           python scripts/reference_correctness_summary.py --out-dir "$VDIR"
-          python scripts/performance_benchmark.py --out-dir "$VDIR" --repeats 5 --batch-size 4
+          python scripts/performance_benchmark.py --out-dir "$VDIR" --repeats 5 --sweep --batch-sizes 4,8,16
           python scripts/batch_solve_report.py --input "$VDIR/performance_summary.json" --out "$VDIR/batch_solve_report.json"
           python scripts/check_batch_acceptance.py --report "$VDIR/batch_solve_report.json"
           python scripts/differentiation_check.py --out-dir "$VDIR"

Makefile

@@ -23,7 +23,7 @@ else
   PYTHON ?= python
 endif
 
-.PHONY: test test-reference test-slow test-solver test-vendor-moreau smoke-solver smoke-check env-check reference-correctness perf-benchmark diff-check trust-dashboard parity-native-licensed artifact-validation-report parity-report audit dashboard validate-fixture lint typecheck format format-check cov cov-gates compile-deps verify-extended bootstrap-moreau upgrade-host-realistic-vendor host-realistic-rehearsal export-upstream-rehearsal batch-solve-report check-batch-acceptance verify-reference-system reference-authority-check reference-authority-snapshot refresh-live-upstream-export host-realistic-refresh-cycle sync-published-readmes
+.PHONY: test test-reference test-slow test-solver test-vendor-moreau smoke-solver smoke-check env-check reference-correctness perf-benchmark diff-check trust-dashboard parity-native-licensed artifact-validation-report parity-report audit dashboard validate-fixture lint typecheck format format-check cov cov-gates compile-deps verify-extended bootstrap-moreau upgrade-host-realistic-vendor host-realistic-rehearsal export-upstream-rehearsal batch-solve-report check-batch-acceptance verify-reference-system reference-authority-check reference-authority-snapshot refresh-live-upstream-export host-realistic-refresh-cycle host-realistic-refresh-milestone sync-published-readmes
 
 test:
 	$(PYTHON) -m pytest -q
@@ -64,7 +64,10 @@ check-batch-acceptance:
 	$(PYTHON) scripts/check_batch_acceptance.py
 
 host-realistic-refresh-cycle:
-	$(PYTHON) scripts/host_realistic_refresh_cycle.py --force
+	$(PYTHON) scripts/host_realistic_refresh_cycle.py --run-id host-realistic-20260525 --force
+
+host-realistic-refresh-milestone:
+	$(PYTHON) scripts/host_realistic_refresh_cycle.py --new-milestone --promote-release --force
 
 sync-published-readmes:
 	$(PYTHON) scripts/sync_published_run_readmes.py
@@ -103,6 +106,7 @@ verify-reference-system: reference-authority-check
 		tests/governance/test_check_batch_acceptance.py \
 		tests/governance/test_native_arm_publish_evidence.py \
 		tests/governance/test_run_host_realistic_publish.py \
+		tests/governance/test_host_realistic_refresh_cycle.py \
 		tests/governance/test_batch_solve_report.py \
 		tests/bench/test_inter_sim_export.py \
 		tests/scripts/test_export_inter_sim_cli.py \

benchmarks/PUBLISHED_RUN_INDEX.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 2,
-  "generated_at_utc": "2026-05-26T05:34:06Z",
+  "generated_at_utc": "2026-05-26T05:47:34Z",
   "published_root": "benchmarks/published_runs",
   "governed_run_ids": [
     "host-realistic-20260525",
@@ -13,19 +13,19 @@
       "repository_relative_path": "benchmarks/published_runs/host-realistic-20260525",
       "integrity": {
         "config.json": {
-          "sha256": "dbec85e22afc79b5abfefaeb8590a34327dfb85ab959908a59b92626455689d8"
+          "sha256": "ab21e47b8d88ceac50e4609c888205b5b68382cc4a80bfdcc79710d89e83655a"
         },
         "config.schema.json": {
           "sha256": "dc0d0af539739180848d298d3a8e112fda79dbec96091ed42dce7bcae58005bd"
         },
         "summary.json": {
-          "sha256": "66f63d88037d50664d6ce64bab1242a64e2f80775631d0771b25d36dd31f8797"
+          "sha256": "9042038f2b9ba098eb291abcc1fa174f95d2d2f074bcdd8ae3acb9e3b1708df3"
         },
         "summary.schema.json": {
           "sha256": "c54f6deb392afcefae57e7822bd00c1191c47263655e3f76cfeb432576310fa6"
         },
         "episodes.jsonl": {
-          "sha256": "7878bb1b8dd8847999bb07fe6a91a7baf3a91ee2e4b01beaff2b85262281c5fa"
+          "sha256": "e2bc4661db46e719f0d0f9257444824ae0b054ad5299563e4cf127b578ff4e3d"
         },
         "episodes.schema.json": {
           "sha256": "94819ce8fddc8fd4ab880d219bc1c65654158a7a0a2884de644a70e4a3dfdff2"
@@ -40,10 +40,10 @@
           "sha256": "692f5803a79c0a4eb7185533e111c1a755d98d4d2cc01afbbccd1f390b3d2e17"
         },
         "governance_decision.md": {
-          "sha256": "037726d21ee3691d4cf8ef6e8868492e734b6a6679fa3ccd6b387c323cc2b5e2"
+          "sha256": "645a8ee1cc94c445bfdafb6552d05af95f33a0122e92bac2e9a36d6ace8ffaf3"
         },
         "release_decision.json": {
-          "sha256": "57eef50cf75c163368d4ed38a2dfb875739b8b63c98d054cf6397740a44bd5a7"
+          "sha256": "3acae9b15626813f0af3bfd47484c65dc9b34012eb98b98518caf9e176739ccd"
         },
         "solver_versions.json": {
           "sha256": "1db4e6dda92c509858f66dc377689bff9501829fab500f7b883207ed29d21afc"

benchmarks/published_runs/host-realistic-20260525/config.json

@@ -1,7 +1,7 @@
 {
   "benchmark_name": "host-realistic-20260525",
   "description": "Frozen parity fixture",
-  "created_at_utc": "2026-05-26T04:21:01Z",
+  "created_at_utc": "2026-05-26T05:46:50Z",
   "policy": {
     "policy_id": "policy_fixture",
     "checkpoint": null,