migration B+C: full-corpus triage + C1 deep wave (8 kernels, 4-gate green)

[hyperpolymath]

ReScript → AffineScript → wasm migration of hyperpolymath/idaptik, staged under proposals/idaptik/ (the access gate keeps idaptik writes out of scope; this is verified + staged + applyable, not applied). Two phases on this branch.

Phase C — deep wave 1 (cluster C1), 4-gate green

Cluster C1 (the eleven shared/src leaf modules) re-decomposed into 8 pure-integer co-processor kernels staged under proposals/idaptik/migrated/<Name>/. Brain = the integers that cross the wasm boundary; the host keeps strings/floats/DOM/mutable state (the senses).

Kernel	Brain	Boundary verdict
DeviceType	12-device taxonomy: count, validity, code-clamp	LOSSLESS
PuzzleFormat	difficulty(4)/tier(5) + DLCLoader clamp-to-default	CONTROLLED-LOSS @0
PortNames	10 coprocessor-domain port taxonomy (= portnames.wasm)	LOSSLESS
GameEvent	alertLevel(4, ordered clamp) + direction(6, flat)	LOSSLESS + CL @0
Kernel_Compute	per-domain element caps + 504/413/404/0 scheduler gate	decision (parity)
Kernel	503/404/0 pre-flight gate + domain→handler router	CONTROLLED-LOSS @4
RetryPolicy	503/504/429 transient classifier + 3-policy table	decision (parity)
Diagnostics	<70/<90/≥90 health-band classifier + registry check	decision (parity)

Re-decomposed, not transliterated: Promise/async collapsed to the synchronous status decision; service-locator reads (ResourceAccounting, backend registry) threaded as explicit integer params; variants re-encoded as closed integer bands; floats + wall-clock timing kept host-side.

Four gates green (captured in migrated/EVIDENCE.adoc):

• G1 compile — 8/8 → wasm
• G2 parity — 1223/1223 oracle-vs-wasm inputs (independent JS oracles)
• G3 echo-boundary — 6 Agda proofs, agda exit 0: 3 LOSSLESS + 3 CONTROLLED-LOSS, each collision named and certified
• G4 assail — 8/8 clean (no undeclared clamp / unguarded decoder)

Three C1 files are host-side "senses" with no brain and stay in the host: Coprocessor_Backends.res (registration wiring), PortNamesCoprocessor.res (JS bridge shim — consumes PortNames.affine), DLCLoader.res (JSON parser; its one integer fragment ships as PuzzleFormat.clamp_tier).

Phase B — full-corpus triage (the worklist)

affine-migratability over all 571 idaptik .res files → the resumable worklist Phases C–Ω navigate from.

Verdict	Count	%
MIGRATABLE NOW	389	68%
STRING-GATED (wall 1)	71	12%
EFFECT-GATED (wall 2)	111	19%

Non-test production: 358 files, 196 migratable (55%). Twelve clusters C1..C12 ordered leaf-pure-integer-first. Top walls: module-level ref() (79), string subscript (44), String.length (30).

• migration-map.json — machine worklist (resume rule + per-cluster files + per-file wall labels); C1 status → DONE
• migration-map.adoc — human map
• {state-vs-digest,game-vs-deepspace}.svg — Phase A determinism diagrams (not previously committed)

Ledger

Phase B DONE; Phase C wave 1 (C1) DONE. NEXT: C2 — the vm/lib/ocaml instruction set (31 files, the pure-integer reversible VM opcodes), same 4-gate recipe.

Rebased onto current main (incl. #534 codegen-deno WASI stub); #533 evangelist toolkit confirmed merged.

https://claude.ai/code/session_01WoKhFQePiRsAj7aqnxbG8s

---

Generated by Claude Code

[github-actions]

🔍 Hypatia Security Scan

Findings: 87 issues detected

Severity	Count
🔴 Critical	2
🟠 High	15
🟡 Medium	70

⚠️ Action Required: Critical security issues found!

View findings

[
  {
    "reason": "Action perpolymath/standards/.github/workflows/governance-reusable.yml@main\n needs attention",
    "type": "unpinned_action",
    "file": "governance.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action ons/checkout@v6\n    needs attention",
    "type": "unpinned_action",
    "file": "publish-jsr.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Action land/setup-deno@v2\n    needs attention",
    "type": "unpinned_action",
    "file": "publish-jsr.yml",
    "action": "pin_sha",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in affine-vscode-publish.yml",
    "type": "missing_timeout_minutes",
    "file": "affine-vscode-publish.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in casket-pages.yml",
    "type": "missing_timeout_minutes",
    "file": "casket-pages.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  },
  {
    "reason": "Issue in ci.yml",
    "type": "missing_timeout_minutes",
    "file": "ci.yml",
    "action": "flag",
    "rule_module": "workflow_audit",
    "severity": "medium"
  }
]

Powered by Hypatia Neurosymbolic CI/CD Intelligence