ci: run the TinkerPop parity harness in java-suites on JDK 28 EA

Two steps at the end of the java-suites job: fetch-deps.sh pulls the 19
sha256-pinned jars, then run.sh compiles and runs TinkerParityTest with
LGJ_JDK pointed at the JDK 28 EA setup-java installed for the job.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AhMhXd2gDhYzTgwKeHaWHB

Author: claude

.claude/board/LATEST_STATE.md

@@ -1,8 +1,9 @@
 ## 2026-10-09 — Gremlin and the mask hop chain agree (interop/tinkerpop, A1)
 
 `interop/tinkerpop/` adds a parity harness, built outside `consumers/` so the
-`java-suites` CI job (which compiles `consumers/` without TinkerPop) is
-untouched. It copies three `RowStore.openWithEdges` fixtures into TinkerGraph
+`java-suites` CI job (which compiles `consumers/` without TinkerPop) does not
+see TinkerPop. Two extra steps at the end of that job fetch the pinned jars and
+run the harness. It copies three `RowStore.openWithEdges` fixtures into TinkerGraph
 3.7.7, a test-oracle copy under rule E2. It then compares
 `Graph.from(seeds).hop(KNOWS)^k.count()` with
 `g.V(seeds).out("knows")^k.dedup().count()` for k = 1..3.

.claude/board/PR_ARC_INVENTORY.md

@@ -19,8 +19,9 @@
   count for k = 1..3 on three fixtures. The walk count without `dedup()`
   differs, and the suite requires that difference.
 - **Deferred:** A2 (a `TraversalStrategy` that lowers compilable step runs
-  with a counted fallback), and CI wiring (it needs the jar fetch on the
-  runner).
+  with a counted fallback).
+- **CI:** two steps at the end of `java-suites` fetch the sha256-pinned jars
+  and run the harness on the job's JDK 28 EA.
 - **Gates:** 25 checks green; disable run red-then-green. The core suite was
   untouched (612 checks green before the change).
 - **Confidence:** high for parity on these fixtures. It says nothing yet about

.github/workflows/lint.yml

@@ -343,3 +343,17 @@ jobs:
             exit 1
           fi
           echo "all four consumer suites passed"
+      # Quick win A1: TinkerGraph 3.7.7 vs mask hop chain parity. Kept out of
+      # `consumers/` because that tree is compiled above without TinkerPop on the
+      # classpath. `fetch-deps.sh` downloads 19 jars from Maven Central and
+      # refuses any whose sha256 differs from `deps.lock`; `run.sh` reads
+      # LGJ_JDK, not JAVA_HOME, so point it at the JDK 28 EA that setup-java
+      # installed in this job.
+      - name: Fetch TinkerPop jars (sha256-pinned)
+        working-directory: lance-graph-java/interop/tinkerpop
+        run: ./fetch-deps.sh
+      - name: Run the TinkerPop parity harness (A1)
+        working-directory: lance-graph-java/interop/tinkerpop
+        env:
+          LGJ_JDK: ${{ env.JAVA_HOME }}
+        run: ./run.sh

interop/tinkerpop/README.md

@@ -17,6 +17,8 @@ from the same seeds twice:
 
 The harness lives outside `consumers/` on purpose. CI compiles every file under
 `consumers/` against `java/out` alone, and TinkerPop is not on that classpath.
+The `java-suites` job runs this harness in two separate steps at its end:
+`fetch-deps.sh`, then `run.sh` with `LGJ_JDK` set to the job's JDK 28 EA.
 
 ## What it checks (25 checks, all green)