Add a source-shaped Lean bridge for compiler retention

[PellaML]

Contribution

Focused verification follow-up to #3391, in one new package. The original 28-file archive is unchanged; this does not update the selected frontier, a supplier, or the review ledger.

CompilerAudit.SourceBridge.selected_source_transport derives ordered renamed trace equality, 28,278 N distinct source keys, 904,896 N retained wrapper identities, and 1,809,792 N + B direct references from primitive event-projection, LOW-inverse, block-budget and identity-freshness premises. It does not assume the final equality or those totals. Here N = |GL64(F_q)|; B counts emitted blocks, not native cost.

Start with README, CONTRACT, and VALIDATION.

Executed evidence

• Hosted registered Python CI passed at the published head: planning and explicit bounded package replay succeeded. Lean was checked locally, not in hosted CI.
• CPython 3.12.6: registered normal/-O replays pass with identical substantive results; 152 live input pins. PR3391's scientific digest remains c1bc50f54937cd3b2efae61bb5b655b55859b3ed7ddcf1a2e9bbd8682fc88f3d.
• Independent q=3 census: all 32 replicas, 7,843,392 local events, 28,278 requests and 19 groups, without GL64 enumeration. Tiny original-emitter ordering and wrapper-lifetime controls pass.
• 46 Python control-test methods and 17 Lean-runner test methods pass normally and under -O.
• Lean 4.34.1: seven predecessor modules plus the bridge compiled freshly; exact bridge/baseline contracts, the fixed 27-name axiom inventory, explicit bridge-module kernel replay and three discriminating probes pass. Only propext, Classical.choice, Quot.sound; nine dependency source revisions checked. Cached library artifacts remain trusted, not cold-rebuilt.
• Committed-byte/source-history preflight, raw ancestor/source-pin cross-check, checked shared-exporter bundle, and fresh Git-free normal/-O replays pass. The exported bridge also passes a fresh Lean replay. 174 payload files plus one export manifest; no compiled objects or agent scratch reports are included.

Interpretation and limits

This is a conditional, idealized/unbounded source-shaped model, not formal Python semantics or a GL64 codec proof. A complete selected eager list/tuple cannot return on conventional 32/64-bit CPython: at q=3, N has 6,492 bits and the required begin/end entries have 6,512 bits. Other failures may occur earlier; no first-failure, lazy-representation barrier, native/stock tariff, precision result or full multiplication theorem is claimed. Specifications already caches records/plans; wrappers are the distinct objects counted here.

Tiny lifetime fixtures bypass loader bootstrap after source-only hash checks and do not test cold 64-dimensional initialization or selected numerical endpoints. The Windows census adapter changes one authenticated inventory-path spelling expression only. The explicit Lean checks are local; hosted CI covers the registered Python commands. Neither constitutes scientific admission.

Sources, overlap and credit

Base: 20ecf2891d80b5acf18d980b2164fb44ea7faa90; publication: 7bd54e91748eb9fc6b13d61d232b6a91e8158aba. Priority revision 6 and selected conditional kappa 0.001672660197076918 are unchanged. PR3391 remains archival/partially reviewed.

The refreshed overlap pass located #2569's existing written LOW bijection proof for byte-identical codec source. The remaining target is implementation-level formal correspondence, not an absent written argument. #2989/#3041/#3223 cover complementary source refinements. Roger Sato's parallel #3634/#3602 address shared axiom-scanner/report issues; this package changes no shared checker and claims no priority for those issues. Tekalign's shared exporter is retained rather than duplicated. Metadata searches were broad, but the all-open changed-file refresh timed out; no exhaustive novelty claim.

Credit is retained for Jose Manuel, David Arias, ywz65, Nick Petalas, Matthieu Pascal, Ross Richardson, Douglas Colkitt and the retained source contributors. Submitted by Kewin Talaga (PellaML), with substantial OpenAI Codex, GPT 6 Astra and Claude Opus 5.5 assistance. Separate AI checks are not independent human certification. Apache-2.0; original notices preserved.