Close distributed proof matrix acceptance rows

Author: nshkrdotcom

docs/gn_ten_proof_matrix.md

@@ -174,6 +174,30 @@ path, and run GitHub or Linear live commands by prefixing them with
   CI until node-lab migration. It does not prove owner facades, domain
   semantics, parity, production security, per-run cookie application to peers,
   or release boot.
+- `gn_ten_distributed_context_roundtrip`: records the v2 Phase 8 context
+  distributed proof. It runs the fugu Context ABI baseline and distributed
+  context scenario from `examples/gn_ten_distributed_stack`, represents
+  AppKit, Mezzanine, Citadel, OuterBrain, and AITrace as distinct peer-node
+  owner profiles, and records context packet hash, authority refs, render
+  handoff refs, trace refs, evidence posture, owner `:pg` groups, and
+  envelope scanner facts. It does not prove router/model invocation,
+  Execution Plane lower lanes, production security, release boot, live
+  provider behavior, or fault recovery.
+- `gn_ten_distributed_router_model_roundtrip`: records the v2 Phase 9
+  router/model distributed proof. It extends the context proof through the
+  deterministic TRINITY router adapter, Mezzanine render handoff, Jido
+  Integration fake/local model invocation, token/cost facts, stream fragment
+  posture, and terminal AppKit projection. It does not prove the unbuilt
+  `full_9_node` lower-lane proof, live provider behavior, production
+  security, release boot, GEPA candidate generation, or TRINITY long-loop
+  feedback behavior beyond the deterministic route fixture.
+- `gn_ten_distributed_partition_recovery`: records the v2 Phase 11 fault and
+  recovery proof. It starts from the implemented `router_model_6_node` proof
+  and records bounded receipts for peer crash, node disconnect/heal, facade
+  timeout, stale DTO, duplicate delivery, and AITrace exporter failure. It
+  does not prove WAN partition behavior, Kubernetes/container discovery,
+  production Erlang distribution security, live provider retry/billing,
+  Execution Plane lower-lane partition behavior, or release boot.
 - `gn_ten_distributed_parity`: records the v2 Phase 13 semantic parity proof.
   It runs the fugu router/model monolith baseline and distributed router/model
   proof from one command, hashes deterministic semantic fields with
@@ -191,6 +215,15 @@ path, and run GitHub or Linear live commands by prefixing them with
   feasibility fields are supplied. It does not prove 32/49-node local stress,
   sustained SLOs, production distribution security, release boot, or live
   provider behavior.
+- `gn_ten_distributed_release_peer`: records the v2 Phase 16 release-path
+  parity prototype. It verifies a test-only release-wrapper manifest for the
+  `execution_plane_node` profile, records owner app start, expected app
+  version, facade ping, code-path mode, and receipt-shape parity with peer
+  mode, and emits bounded open-defect receipts for missing manifest, version
+  mismatch, unavailable facade, and receipt-shape mismatch. It does not prove
+  production release packaging, release artifact minimality, an all-domain
+  production release, production distribution security, container/VM
+  networking, or live provider behavior.
 - `cost_budget_scanner`: verifies adaptive token, provider request,
   self-hosted GPU minute, endpoint startup, eval batch, replay, optimization
   search, provider pool turn, role budget, promotion, failed retry, budget

lib/mix/tasks/stack_lab.gn_ten.node_lab.attach.ex

@@ -3,7 +3,7 @@ defmodule Mix.Tasks.StackLab.GnTen.NodeLab.Attach do
 
   use Mix.Task
 
-  alias StackLab.GnTenNodeLab.{RunState, Runner}
+  alias StackLab.GnTenNodeLab.{Runner, RunState}
 
   @shortdoc "Prints a redacted gn-ten node-lab attach recipe"
 

lib/mix/tasks/stack_lab.gn_ten.node_lab.down.ex

@@ -3,7 +3,7 @@ defmodule Mix.Tasks.StackLab.GnTen.NodeLab.Down do
 
   use Mix.Task
 
-  alias StackLab.GnTenNodeLab.{RunState, Runner}
+  alias StackLab.GnTenNodeLab.{Runner, RunState}
 
   @shortdoc "Clears gn-ten node-lab run state"
 

lib/mix/tasks/stack_lab.gn_ten.node_lab.probe.ex

@@ -3,7 +3,7 @@ defmodule Mix.Tasks.StackLab.GnTen.NodeLab.Probe do
 
   use Mix.Task
 
-  alias StackLab.GnTenNodeLab.{RunState, Runner}
+  alias StackLab.GnTenNodeLab.{Runner, RunState}
 
   @shortdoc "Probes a gn-ten node-lab logical node"
 

lib/mix/tasks/stack_lab.gn_ten.node_lab.status.ex

@@ -3,7 +3,7 @@ defmodule Mix.Tasks.StackLab.GnTen.NodeLab.Status do
 
   use Mix.Task
 
-  alias StackLab.GnTenNodeLab.{RunState, Runner}
+  alias StackLab.GnTenNodeLab.{Runner, RunState}
 
   @shortdoc "Reports gn-ten node-lab status"
 

lib/mix/tasks/stack_lab.gn_ten.node_lab.up.ex

@@ -3,7 +3,7 @@ defmodule Mix.Tasks.StackLab.GnTen.NodeLab.Up do
 
   use Mix.Task
 
-  alias StackLab.GnTenNodeLab.{RunState, Runner}
+  alias StackLab.GnTenNodeLab.{Runner, RunState}
 
   @shortdoc "Boots a gn-ten node-lab topology"
 

mix.exs

@@ -132,11 +132,17 @@ defmodule StackLab.Workspace.MixProject do
         compile: [args: ["compile", "--warnings-as-errors"]],
         test: [args: ["test"], mix_env: "test", color: true],
         credo: [args: ["credo"]],
-        docs: [args: ["docs"]]
+        docs: [
+          args: ["do", "deps.get", "+", "docs"],
+          env: {__MODULE__, :docs_task_env},
+          mix_env: "dev"
+        ]
       ]
     ]
   end
 
+  def docs_task_env(_context), do: [{"MIX_ENV", "dev"}]
+
   defp docs do
     [
       main: "workspace_readme",

proof_matrix.yml

@@ -178,6 +178,89 @@ proofs:
         authoritative_audit?: false
         production_deployment_proven?: false
 
+  - id: gn_ten_distributed_context_roundtrip
+    owner_repo: stack_lab
+    contract_family: "300 architecture"
+    status: implemented
+    profile: local_full
+    command: cd examples/gn_ten_distributed_stack && mix stack_lab.gn_ten.distributed.prove --profile context_6_node --json
+    fixture: examples/gn_ten_distributed_stack/priv/topologies/context_6_node.exs
+    receipt: receipt://stack_lab/gn_ten_distributed_context_roundtrip/latest
+    proves:
+      - the fugu Context ABI baseline and distributed context proof run from one StackLab proof package
+      - AppKit, Mezzanine, Citadel, OuterBrain, and AITrace are represented as distinct owner-profile peer nodes
+      - context packet hash, authority refs, render handoff refs, trace refs, evidence posture, owner pg groups, and envelope scanner facts are present
+      - proof receipts exclude Erlang cookies, raw prompts, raw memory, provider payloads, credentials, local PIDs, and private tool output
+    does_not_prove:
+      - router or model invocation behavior
+      - Execution Plane lower-lane behavior
+      - production distribution security
+      - release artifact boot
+      - live provider behavior
+      - fault recovery
+    next_action: keep this as the required context prerequisite for router/model and parity proofs
+    trace_receipt:
+      schema: aitrace.single_node_proof_trace.v1
+      ref: trace://stack_lab/gn_ten_distributed_context_roundtrip/latest
+      posture:
+        authoritative_audit?: false
+        production_deployment_proven?: false
+
+  - id: gn_ten_distributed_router_model_roundtrip
+    owner_repo: stack_lab
+    contract_family: "300 architecture"
+    status: implemented
+    profile: local_full
+    command: cd examples/gn_ten_distributed_stack && mix stack_lab.gn_ten.distributed.prove --profile router_model_6_node --json
+    fixture: examples/gn_ten_distributed_stack/priv/topologies/router_model_6_node.exs
+    receipt: receipt://stack_lab/gn_ten_distributed_router_model_roundtrip/latest
+    proves:
+      - the fugu router/model baseline and distributed router/model proof run from one StackLab proof package
+      - route decision refs, render handoff refs, model invocation refs, token and cost facts, stream fragment posture, and terminal AppKit projection facts are present
+      - Jido Integration model invocation stays behind owner DTOs and fake/local inference by default
+      - router/model receipts reject raw provider payloads and preserve deterministic receipt hashes for parity
+    does_not_prove:
+      - full 9-node Execution Plane lower-lane proof
+      - live provider behavior
+      - production distribution security
+      - release artifact boot
+      - GEPA candidate generation
+      - TRINITY long-loop feedback behavior beyond the deterministic route adapter fixture
+    next_action: use this proof as the semantic input to parity and partition-recovery proofs; leave full_9_node open until lower-lane runtime is implemented
+    trace_receipt:
+      schema: aitrace.single_node_proof_trace.v1
+      ref: trace://stack_lab/gn_ten_distributed_router_model_roundtrip/latest
+      posture:
+        authoritative_audit?: false
+        production_deployment_proven?: false
+
+  - id: gn_ten_distributed_partition_recovery
+    owner_repo: stack_lab
+    contract_family: "300 architecture"
+    status: implemented
+    profile: local_full
+    command: cd examples/gn_ten_distributed_stack && mix stack_lab.gn_ten.distributed.prove --profile partition_recovery --json
+    fixture: examples/gn_ten_distributed_stack
+    receipt: receipt://stack_lab/gn_ten_distributed_partition_recovery/latest
+    proves:
+      - StackLab records bounded fault receipts for peer crash, node disconnect and heal, facade timeout, stale DTO, duplicate delivery, and AITrace exporter failure
+      - recovery receipts preserve owner safe actions, idempotency posture, outbox or deny posture, trace refs, and cleanup state
+      - partition recovery starts from the implemented router_model_6_node proof rather than a separate untracked harness path
+    does_not_prove:
+      - WAN partition behavior
+      - Kubernetes or container discovery
+      - production Erlang distribution security
+      - live provider retry or billing behavior
+      - Execution Plane lower-lane partition behavior
+      - release artifact boot
+    next_action: keep fault fixtures as regression inputs for Phase 18 hardening
+    trace_receipt:
+      schema: aitrace.single_node_proof_trace.v1
+      ref: trace://stack_lab/gn_ten_distributed_partition_recovery/latest
+      posture:
+        authoritative_audit?: false
+        production_deployment_proven?: false
+
   - id: gn_ten_distributed_parity
     owner_repo: stack_lab
     contract_family: "300 architecture"
@@ -234,6 +317,33 @@ proofs:
         authoritative_audit?: false
         production_deployment_proven?: false
 
+  - id: gn_ten_distributed_release_peer
+    owner_repo: stack_lab
+    contract_family: "300 architecture"
+    status: implemented
+    profile: local_full
+    command: cd examples/gn_ten_distributed_stack && mix stack_lab.gn_ten.node_lab.release.verify --json
+    fixture: examples/gn_ten_distributed_stack/priv/releases/execution_plane_node_release_peer.exs
+    receipt: receipt://stack_lab/gn_ten_distributed_release_peer/latest
+    proves:
+      - one test-only release-wrapper manifest can boot the execution_plane_node profile and return a peer-mode-compatible node receipt shape
+      - release-path verification records owner app start, expected app version, facade ping, code-path mode, and receipt-shape parity with peer mode
+      - missing manifest, version mismatch, unavailable facade, and receipt-shape mismatch produce bounded open-defect receipts
+    does_not_prove:
+      - production release packaging
+      - release artifact minimality
+      - a single all-domain production release
+      - production distribution security
+      - container or VM networking
+      - live provider behavior
+    next_action: keep release mode as an opt-in parity prototype until peer-mode distributed semantics stay green under Phase 18 regressions
+    trace_receipt:
+      schema: aitrace.single_node_proof_trace.v1
+      ref: trace://stack_lab/gn_ten_distributed_release_peer/latest
+      posture:
+        authoritative_audit?: false
+        production_deployment_proven?: false
+
   - id: product_no_bypass
     owner_repo: stack_lab
     contract_family: "300 architecture"

support/gn_ten_node_lab/test/stack_lab/gn_ten_node_lab/runner_test.exs

@@ -97,7 +97,7 @@ defmodule StackLab.GnTenNodeLab.RunnerTest do
   defp temp_state_path do
     Path.join(
       System.tmp_dir!(),
-      "stack_lab_node_lab_state_#{System.unique_integer([:positive])}.json"
+      "stack_lab_node_lab_state_#{System.system_time(:nanosecond)}_#{System.unique_integer([:positive, :monotonic])}.json"
     )
   end
 

test/stack_lab/gn_ten_proof_matrix_test.exs

@@ -86,13 +86,32 @@ defmodule StackLab.GnTen.ProofMatrixTest do
     assert report.schema_version == "gn_ten_proof_matrix_v1"
     assert report.workspace_ref == "workspace://nshkrdotcom/gn-ten"
     assert report.branch_policy == "main_only"
-    assert report.proof_count == 24
-    assert report.implemented_count == 24
+    assert report.proof_count == 30
+    assert report.implemented_count == 30
     assert report.partial_count == 0
     assert report.missing_proof_count == 0
     assert report.highest_risk_missing_proof == nil
   end
 
+  test "checked-in proof matrix closes implemented distributed StackLab claims" do
+    assert {:ok, report} = ProofMatrix.validate()
+    proof_ids = MapSet.new(Enum.map(report.proofs, & &1.id))
+
+    required_ids =
+      MapSet.new(~w(
+        gn_ten_distributed_topology_freeze
+        gn_ten_distributed_preflight
+        gn_ten_distributed_context_roundtrip
+        gn_ten_distributed_router_model_roundtrip
+        gn_ten_distributed_partition_recovery
+        gn_ten_distributed_parity
+        gn_ten_distributed_scale_12
+        gn_ten_distributed_release_peer
+      ))
+
+    assert MapSet.subset?(required_ids, proof_ids)
+  end
+
   defp failure_code?(report, code) do
     Enum.any?(report.failures, &(&1.code == code))
   end