docs+config: propagate proposals 0001/0002 [accepted]+ADR status across stale references (#117)

## Summary

Companion to #115 (acceptance flip) and #116 (ADR promotion). Sweeps the
remaining files that still carried `[draft]` / `[review]` proposal
status
or referenced now-closed cross-repo gating issues.

## Files changed

| File | What changed |
|---|---|
| \`README.adoc\` | Proposal status flipped to \`[accepted]\` + ADR
links; added 0003/0004 to forward-looking section; rewrote the
verifier-pass status sentence (was "gated on proposal 0002's
acceptance"; now reflects PR #109 having shipped). |
| \`CHANGELOG.md\` | New Unreleased section "Multi-producer carrier ABI:
proposals 0001 + 0002 accepted, promoted to ADRs (2026-05-30)" covering
PRs #110-#116 + the seven closed issues + producer-side gates that
remain. |
| \`crates/typed-wasm-verify/Cargo.toml\` | Feature-flag comments
updated to reflect post-acceptance state. \`unstable-l2\` /
\`unstable-l15\` feature gates retained while Phase 3 stabilisation is
open. |
| \`docs/PRODUCTION-PATH.adoc\` | Proposals 0001/0002 flipped to
\`[accepted]\` with PR pointers; added 0003/0004 to active-design-work
list. |
| \`spec/type-safety-levels-for-wasm.adoc\` | Wire-section status column
updated for \`typedwasm.regions\` / \`typedwasm.capabilities\` /
\`typedwasm.access-sites\`; tail references enumerate all four proposals
with current status. |
| \`.machine_readable/6a2/STATE.a2ml\` | Capabilities-by-level entries
flipped 30→100; rewrote critical-next-actions; rewrote \`[carrier-abi]\`
section with accepted-date / acceptance-pr / adr-pr for both proposals +
added \`[draft]\` entries for 0003/0004. |

## What was deliberately left alone

\`spec/{ARG,CRG,FRG,TRG}-PROFILE.adoc\` — these are point-in-time audit
snapshots, not config. They mention the proposals as the live RFC
corpus, but rewriting audit history adds more noise than signal.

## Test plan

- [ ] CI green (docs + config only; no source changes)
- [ ] Cross-links resolve in rendered AsciiDoc

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Author: hyperpolymath

.machine_readable/6a2/STATE.a2ml

@@ -64,10 +64,10 @@ milestones = [
   { name = "LevelAttestation reindexed-by-witness (standards#130 long-tail)", completion = 100 },  # 2026-05-27 (PR #80, this PR)
   { name = "WitnessCertificate lift (heterogeneous-list certificate)", completion = 100 },  # 2026-05-27 (#83 folded into #80)
   { name = "L13 module isolation enforcement on emitted wasm", completion = 100 },  # PR #37, 2026-05-19
-  { name = "L2-L6 carrier ABI proposal (proposal 0001)", completion = 30 },  # PR #76 filed 2026-05-27; [draft], blocked on affinescript+ephapax review
-  { name = "L2 region-binding codec pre-stage (unstable-l2 feature)", completion = 100 },  # PR #77, 2026-05-27 — codec only, no verifier pass yet
-  { name = "L15 capability carrier ABI", completion = 30 },  # bundled into proposal 0001 (typedwasm.capabilities section)
-  { name = "Access-site carrier (proposal 0002)", completion = 30 },  # PR #86 filed + merged 2026-05-28 — proposal authored as [draft] specifying typedwasm.access-sites with Encoding B per issue #78 measurement; next gates: cross-repo affinescript+ephapax review → promote to [accepted] → land unstable-l2-access-sites codec + verify_region_binding pass
+  { name = "L2-L6 carrier ABI proposal (proposal 0001)", completion = 100 },  # PR #76 filed 2026-05-27; [accepted] 2026-05-30 (PR #115) → ADR-0002 (PR #116)
+  { name = "L2 region-binding codec + verifier pass", completion = 100 },  # PR #77 codec, PR #107 cross-checks, PR #109 verify_regions_from_module
+  { name = "L15 capability carrier ABI + verifier pass", completion = 100 },  # bundled into proposal 0001; verify_capabilities_from_module shipped in PR #109
+  { name = "Access-site carrier (proposal 0002)", completion = 100 },  # PR #86 [draft] → [accepted] 2026-05-30 (PR #115) → ADR-0003 (PR #116). Codec + verify_access_sites_from_module shipped in PR #109. Producer-side access-site emission gated downstream (affinescript#462; ephapax owner-action).
   { name = "C5.1 real-AffineScript fixture corpus", completion = 100 },  # PR #81, 2026-05-27 — 4 fixtures + regenerate workflow
 ]
 
@@ -87,9 +87,9 @@ issues = [
 
 [critical-next-actions]
 actions = [
-  "Phase 2: cross-repo review of proposal 0001 carrier-section ABI — externally gated (affinescript#402 + ephapax#165 sit in maintainers' queues).",
-  "Phase 2: cross-repo review of proposal 0002 access-site carrier (PR #86, [draft]) — affinescript + ephapax codegen-path maintainers gate promotion to [accepted].",
-  "Phase 2: after proposal 0002 [accepted], unstable-l2-access-sites codec + verify_region_binding pass land in crates/typed-wasm-verify/ (closes the deliberate PR #77 omission).",
+  "Phase 2: producer-side access-site emission — gated downstream (affinescript#462 open; ephapax counterpart owner-action pending, auto-mode classifier blocked the cross-repo create on 2026-05-30).",
+  "Phase 2: ephapax `Codegen.region_stack` dead-code removal (proposal 0001 Appendix B follow-up).",
+  "Phase 3: proposals 0003 (region-imports / L13 cross-module) and 0004 (capability-grants / L15-C) move from [draft] when producer-side multi-module + L15-A emission lands.",
   "Track A: extend tree-sitter grammar from region-decls v0 to full spec/grammar.ebnf parity.",
   "Track A: Idris2 parser at 188-test parity with the ReScript parser.",
   "Track A: ReScript cut single PR (auto-closes anti-pattern policy red).",
@@ -118,7 +118,7 @@ items = [
   "WasmCert-Isabelle tie-back (requires external Isabelle/HOL install + bridge — multi-week)",
   "Emitted-wasm byte-equality P3.1(a) — blocked on .twasm→.wasm emitter not yet existing",
   "Parser round-trip in Idris2 — blocked on AffineScript parser port to Idris2",
-  "Verifier L1-L6 + L13-L16 coverage on emitted wasm (#34, #35) — IN PROGRESS on PRs #76 / #77 by a parallel session, do not interfere",
+  "Verifier L1-L6 + L13-L16 coverage on emitted wasm (#34, #35) — L2/L3-L6/L15 carrier-backed verifier passes shipped in PRs #107 + #109 against proposals 0001 + 0002 ([accepted] 2026-05-30 → ADR-0002 + ADR-0003). L13 cross-module + L15-C remaining (proposals 0003 + 0004 [draft], gated on producer-side codegen).",
 ]
 
 [maintenance-status]
@@ -167,21 +167,40 @@ phase-6 = 54
 
 [carrier-abi]
 # Multi-producer carrier sections for L2-L6 and L15.
-# Status as of 2026-05-27.
+# Status as of 2026-05-30 (proposal-acceptance arc closed).
 proposal-0001-pr = 76
-proposal-0001-status = "draft"
-proposal-0001-acceptance-gates = [
-  "hyperpolymath/affinescript review (issue #402)",
-  "hyperpolymath/ephapax review (issue #165)",
-]
+proposal-0001-status = "accepted"
+proposal-0001-accepted-date = "2026-05-30"
+proposal-0001-acceptance-pr = 115
+proposal-0001-adr = "docs/decisions/0002-multi-producer-carrier-sections.adoc"
+proposal-0001-adr-pr = 116
 codec-pre-stage-pr = 77
+codec-cross-checks-pr = 107
+verifier-passes-pr = 109
 codec-feature-flag = "unstable-l2"
 codec-section-name = "typedwasm.regions"
 capabilities-section-name = "typedwasm.capabilities"
 access-site-issue = 78
 access-site-decision = "option A — per-instruction (func_idx, instruction_byte_offset) -> (region_id, field_id)"
-access-site-recommended-encoding = "B (LEB128 per field, ~5 B/access, ~1.1% module overhead)"
-proposal-0002-status = "not yet authored — wait until proposal 0001 [accepted]"
+access-site-encoding = "B (LEB128 per field, ~5 B/access, ~1.1% module overhead)"
+proposal-0002-status = "accepted"
+proposal-0002-accepted-date = "2026-05-30"
+proposal-0002-acceptance-pr = 115
+proposal-0002-adr = "docs/decisions/0003-access-site-carrier.adoc"
+proposal-0002-adr-pr = 116
+# Follow-up proposals in [draft]:
+proposal-0003-status = "draft"
+proposal-0003-section-name = "typedwasm.region-imports"
+proposal-0003-purpose = "L13 cross-module schema agreement"
+proposal-0004-status = "draft"
+proposal-0004-section-name = "typedwasm.capability-grants"
+proposal-0004-purpose = "L15-C per-call-site enforcement"
+# Producer-side codegen of access-sites is the remaining v1 gate:
+producer-gates = [
+  "affinescript#462 — emit typedwasm.access-sites carrier (open)",
+  "ephapax access-sites codegen — owner action pending (classifier-blocked 2026-05-30)",
+  "ephapax Codegen.region_stack dead-code removal",
+]
 
 [c5-real-fixtures]
 # Real-AffineScript-emitted .wasm corpus, PR #81 landed 2026-05-27.

CHANGELOG.md

@@ -10,6 +10,51 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Multi-producer carrier ABI: proposals 0001 + 0002 accepted, promoted to ADRs (2026-05-30)
+
+Closes typed-wasm#34 (proposal 0001), typed-wasm#78 (proposal 0002),
+typed-wasm#106 (roadmap from `[review]` to `[accepted]`), typed-wasm#94
+(WBool wire width), typed-wasm#95 (proposal 0003 tracking), typed-wasm#96
+(proposal 0004 tracking), and typed-wasm#97 (producer-readiness
+checklist + canonical emit ordering).
+
+**Acceptance arc (PRs #110–#116):**
+
+- **#110** — pre-acceptance gates: cross-reference between proposals.
+- **#111** — proposal 0004 `[draft]` (`typedwasm.capability-grants` /
+  L15-C per-call-site enforcement, wire format defined).
+- **#112** — proposal 0003 `[draft]` (`typedwasm.region-imports` /
+  L13 cross-module schema agreement, wire format defined).
+- **#113** — pinned WBool wire width at 4 bytes in `Region.idr`
+  (`sizeOf WBool = 4`) matching both shipping producers; reserves
+  `WBoolPacked` as a separate `WasmType` for a future 1-byte variant.
+- **#114** — added Appendix B "Producer-readiness checklist" to
+  proposal 0001 + cross-reference subsection in proposal 0002 +
+  canonical emit ordering in proposal 0001 §"Producer obligations".
+- **#115** — flipped proposals 0001 + 0002 from `[review]` to
+  `[accepted]` (owner decision 2026-05-30); rewrote `LEVEL-STATUS.md`
+  L2 / L3-L6 / L13 single-module / L15 rows from "proposal-stage" to
+  **YES (carrier-backed)** via the PR #107 / #109 verifier passes.
+- **#116** — promoted proposals 0001 + 0002 to ADR-0002 / ADR-0003:
+  - `docs/decisions/0002-multi-producer-carrier-sections.adoc`
+  - `docs/decisions/0003-access-site-carrier.adoc`
+  - Proposal files retained as canonical wire-format references with
+    cross-links in both directions (`Promoted to` / `Promoted from`).
+
+**Status of carrier-format Cargo features:**
+
+- `unstable-l2` — codec + `verify_regions_from_module` +
+  `verify_access_sites_from_module` (post-acceptance; feature gate
+  retained while Phase 3 stabilisation is open).
+- `unstable-l15` — codec + `verify_capabilities_from_module`
+  (post-acceptance; feature gate retained while Phase 3 stabilisation
+  is open).
+
+**Producer-side codegen remains gated downstream:** AffineScript
+access-site emission at affinescript#462; Ephapax counterpart owner-
+action pending (auto-mode classifier blocked the cross-repo create
+on 2026-05-30).
+
 ### Proof-debt closure pass (2026-05-27)
 
 Post-Phase-0 sweep of the long-tail items the 2026-05-18 PROOF-NEEDS

README.adoc

@@ -244,10 +244,12 @@ against that plan.
 
 Design proposals for Phase 2+ features are tracked in link:docs/proposals/[`docs/proposals/`]:
 
-* **Proposal 0001** — link:docs/proposals/0001-multi-producer-carrier-section.adoc[Multi-producer carrier sections] for L2–L6 (`typedwasm.regions`) and L15 (`typedwasm.capabilities`). Status: `[draft]`, cross-repo review under way (affinescript#402, ephapax#165).
-* **Proposal 0002** — link:docs/proposals/0002-access-site-carrier.adoc[Access-site carrier section] (`typedwasm.access-sites`) closing the "L2-the-enforcement" gap via per-instruction `(func_idx, byte_offset) → (region_id, field_id)` mapping. Encoding B (LEB128 per field, ~5B/access) per issue #78 size measurement. Status: `[draft]`, gated on proposal 0001 acceptance.
+* **Proposal 0001** — link:docs/proposals/0001-multi-producer-carrier-section.adoc[Multi-producer carrier sections] for L2–L6 (`typedwasm.regions`) and L15 (`typedwasm.capabilities`). Status: `[accepted]` 2026-05-30 → promoted to link:docs/decisions/0002-multi-producer-carrier-sections.adoc[ADR-0002].
+* **Proposal 0002** — link:docs/proposals/0002-access-site-carrier.adoc[Access-site carrier section] (`typedwasm.access-sites`) closing the "L2-the-enforcement" gap via per-instruction `(func_idx, byte_offset) → (region_id, field_id)` mapping. Encoding B (LEB128 per field, ~5B/access). Status: `[accepted]` 2026-05-30 → promoted to link:docs/decisions/0003-access-site-carrier.adoc[ADR-0003].
+* **Proposal 0003** — link:docs/proposals/0003-region-imports-carrier.adoc[Region imports carrier section] (`typedwasm.region-imports`) for L13 cross-module schema agreement. Status: `[draft]`.
+* **Proposal 0004** — link:docs/proposals/0004-capability-grants-carrier.adoc[Capability grants carrier section] (`typedwasm.capability-grants`) for L15-C per-call-site enforcement. Status: `[draft]`.
 
-The post-codegen verifier's `verify_region_binding` pass is gated on proposal 0002's acceptance; until then, L2-the-enforcement on emitted wasm bytes is producer-side only.
+The post-codegen verifier's `verify_access_sites_from_module` pass shipped in PR #109 and reads `typedwasm.access-sites`; `verify_regions_from_module` and `verify_capabilities_from_module` (PRs #107 / #109) cover L3–L6 and L15-A/B. Producer-side codegen of access-sites is the remaining gate for L2-the-enforcement on emitted bytes (AffineScript: affinescript#462; Ephapax: owner action pending).
 
 == Related Projects
 

crates/typed-wasm-verify/Cargo.toml

@@ -10,22 +10,25 @@ readme = "README.md"
 
 [features]
 default = []
-# Pre-stages the L2 region-binding carrier codec for typed-wasm proposal
-# 0001 (typed-wasm#76, refs #34). UNSTABLE: wire format may change before
-# the proposal is [accepted]. Enables `parse_regions_section_payload` /
-# `build_regions_section_payload` and the `RegionEntry` / `FieldEntry`
-# types. Also enables `parse_access_sites_section_payload` /
-# `build_access_sites_section_payload` and `AccessSiteEntry` from
-# proposal 0002 (#78) — access-sites is an L2 enforcement carrier and
-# travels with the L2 feature gate. Does NOT enable a
-# `verify_region_binding` pass — that's a separate plumb step.
+# L2 region-binding + access-site carrier codec for typed-wasm
+# proposal 0001 (`[accepted]` 2026-05-30 → ADR-0002) and proposal 0002
+# (`[accepted]` 2026-05-30 → ADR-0003). Feature gate retained as
+# `unstable-l2` while Phase 3 stabilisation is open. Enables:
+#   - `parse_regions_section_payload` / `build_regions_section_payload`
+#     + `RegionEntry` / `FieldEntry` (proposal 0001)
+#   - `parse_access_sites_section_payload` /
+#     `build_access_sites_section_payload` + `AccessSiteEntry`
+#     (proposal 0002)
+#   - `verify_regions_from_module` (PR #107) and
+#     `verify_access_sites_from_module` (PR #109) verifier passes.
 unstable-l2 = []
-# Pre-stages the L15 capability-lattice carrier codec for typed-wasm
-# proposal 0001. UNSTABLE: wire format may change before [accepted].
-# Enables `parse_capabilities_section_payload` /
-# `build_capabilities_section_payload` and the `CapabilityEntry` /
-# `FunctionCapabilities` types. L15-C (per-call-site grants) is deferred
-# to a separate proposal (tracked by #96).
+# L15 capability-lattice carrier codec for typed-wasm proposal 0001
+# (`[accepted]` 2026-05-30 → ADR-0002). Feature gate retained as
+# `unstable-l15` while Phase 3 stabilisation is open. Enables
+# `parse_capabilities_section_payload` /
+# `build_capabilities_section_payload` + `CapabilityEntry` /
+# `FunctionCapabilities` + `verify_capabilities_from_module` (PR #109).
+# L15-C (per-call-site grants) is a separate proposal 0004 (`[draft]`).
 unstable-l15 = []
 
 [dependencies]

docs/PRODUCTION-PATH.adoc

@@ -163,26 +163,35 @@ Active design work:
 
 * **Proposal 0001** —
   link:proposals/0001-multi-producer-carrier-section.adoc[Multi-producer
-  carrier sections for L2–L6 and L15] (PR #76, `[draft]` 2026-05-27).
-  Proposes two new producer-neutral custom sections
+  carrier sections for L2–L6 and L15] (PR #76, `[accepted]`
+  2026-05-30 → link:decisions/0002-multi-producer-carrier-sections.adoc[ADR-0002]).
+  Adopts two producer-neutral custom sections
   (`typedwasm.regions`, `typedwasm.capabilities`) alongside the
-  existing `typedwasm.ownership`. Blocks L2–L6 / L15 enforcement on
-  emitted wasm. Cross-repo review at affinescript#402 + ephapax#165
-  gates promotion to `[review]`.
-* **Codec pre-stage** (PR #77) — `cargo feature = "unstable-l2"`
-  enables the `typedwasm.regions` codec ahead of `[accepted]` so
-  the wire format gets stress-tested through round-trip tests.
+  existing `typedwasm.ownership`. Wire codec landed in PR #107;
+  verifier passes `verify_regions_from_module` and
+  `verify_capabilities_from_module` landed in PR #109 behind
+  `unstable-l2` / `unstable-l15` Cargo features.
 * **Proposal 0002** —
   link:proposals/0002-access-site-carrier.adoc[Access-site carrier
-  section] (PR #86, `[draft]` 2026-05-28). Authors the
-  `typedwasm.access-sites` wire format using **Encoding B (LEB128
-  per field, ~5B/access)** per the issue #78 prototype size
+  section] (PR #86, `[accepted]` 2026-05-30 →
+  link:decisions/0003-access-site-carrier.adoc[ADR-0003]). Adopts
+  the `typedwasm.access-sites` wire format using **Encoding B
+  (LEB128 per field, ~5B/access)** per the issue #78 prototype size
   measurement. Closes the "L2-the-enforcement" gap (region/field
   carriers say *what exists*; access-site carrier says *which
-  load/store hits which field*). Gated on proposal 0001
-  acceptance; verifier's `verify_region_binding` pass (deliberately
-  omitted from PR #77) lands behind `unstable-l2-access-sites`
-  cargo feature once 0002 is `[accepted]`.
+  load/store hits which field*). Verifier pass
+  `verify_access_sites_from_module` landed in PR #109 behind
+  `unstable-l2`.
+* **Proposal 0003** —
+  link:proposals/0003-region-imports-carrier.adoc[Region imports
+  carrier] (`typedwasm.region-imports`) for L13 cross-module schema
+  agreement. Status: `[draft]`. Gated on producer-side multi-module
+  emission.
+* **Proposal 0004** —
+  link:proposals/0004-capability-grants-carrier.adoc[Capability
+  grants carrier] (`typedwasm.capability-grants`) for L15-C
+  per-call-site enforcement. Status: `[draft]`. Gated on producer
+  L15-A emission.
 
 Deliverables:
 

spec/type-safety-levels-for-wasm.adoc

@@ -712,18 +712,18 @@ can re-check.
 
 | `typedwasm.regions`
 | L2 region-binding, L3 type-compatible access, L4 null-safety, L5 bounds-proof, L6 result-type
-| Proposal 0001 `[review]`; codec behind `unstable-l2`
-| `parse_regions_section_payload` / `build_regions_section_payload`
+| Proposal 0001 `[accepted]` (ADR-0002); codec + verifier pass behind `unstable-l2`
+| `parse_regions_section_payload` / `build_regions_section_payload` / `verify_regions_from_module`
 
 | `typedwasm.capabilities`
 | L15 resource capabilities (lattice + per-function requirements; excluding L15-C per-call-site grants)
-| Proposal 0001 `[review]`; codec behind `unstable-l15`
-| `parse_capabilities_section_payload` / `build_capabilities_section_payload`
+| Proposal 0001 `[accepted]` (ADR-0002); codec + verifier pass behind `unstable-l15`
+| `parse_capabilities_section_payload` / `build_capabilities_section_payload` / `verify_capabilities_from_module`
 
 | `typedwasm.access-sites`
 | L2 enforcement on emitted bytes (per-instruction `(func_idx, byte_offset) -> (region_id, field_id)` mapping)
-| Proposal 0002 `[review]`; codec behind `unstable-l2`
-| `parse_access_sites_section_payload` / `build_access_sites_section_payload`
+| Proposal 0002 `[accepted]` (ADR-0003); codec + verifier pass behind `unstable-l2`
+| `parse_access_sites_section_payload` / `build_access_sites_section_payload` / `verify_access_sites_from_module`
 |===
 
 === `typedwasm.ownership` (L7 / L10)
@@ -869,7 +869,8 @@ contract:
 === Cross-references
 
 * Codec: `crates/typed-wasm-verify/src/section.rs`
-* Proposal 0001 (regions + capabilities): `docs/proposals/0001-multi-producer-carrier-section.adoc`
-* Proposal 0002 (access-sites): `docs/proposals/0002-access-site-carrier.adoc`
-* Pre-stage roadmap: typed-wasm#106 (`[review]` → `[accepted]` tracker)
+* Proposal 0001 (regions + capabilities): `docs/proposals/0001-multi-producer-carrier-section.adoc` — `[accepted]` 2026-05-30 → `docs/decisions/0002-multi-producer-carrier-sections.adoc` (ADR-0002)
+* Proposal 0002 (access-sites): `docs/proposals/0002-access-site-carrier.adoc` — `[accepted]` 2026-05-30 → `docs/decisions/0003-access-site-carrier.adoc` (ADR-0003)
+* Proposal 0003 (region-imports, L13 cross-module): `docs/proposals/0003-region-imports-carrier.adoc` — `[draft]`
+* Proposal 0004 (capability-grants, L15-C): `docs/proposals/0004-capability-grants-carrier.adoc` — `[draft]`
 * Open questions: typed-wasm#94 (WBool wire width), #95 (region-imports v0.3), #96 (capability-grants L15-C), #97 (producer-readiness checklist)