Audit current R437 whole-word translation under retained physical contracts

research/r437-whole-word-refinement/.gitattributes

@@ -0,0 +1,3 @@
+inputs/** -text -diff
+R437-LICENSE -text
+R437-UPSTREAM-NOTICE.md -text -diff

research/r437-whole-word-refinement/COORDINATION.md

@@ -0,0 +1,41 @@
+# Scope, overlap and checkpoints
+
+Explicit user assignment: multiple distinct research items in the current
+R437/OQ4 caller stream, each with a focused PR where warranted, pairing
+contrasting mathematical methods. This lane pairs operational semantics and
+separation relations with algebraic expression substitution. It owns only
+`research/r437-whole-word-refinement` and uses a separate worktree.
+
+Canonical main was refreshed at entry and again at the overlap/scope checkpoint
+on 2026-10-19; both were 20ecf2891d80b5acf18d980b2164fb44ea7faa90, priority revision 6.
+The selected conditional kappa remains 0.001672660197076918. The research baseline
+binding check passed; no complete selected cold replay was needed or run.
+
+Public team claim:
+https://github.com/CrocSwap/integer-mult-bounds/pull/3967#issuecomment-6262146714
+Parent checked PR3967 CI run 39215291431 PASS at
+32af060614fefa9729c86370524c2e72265acd76 before this round.
+
+`find_overlap.py --task independent-moment --offline` returned only the local
+ledger and explicitly reported no usable remote cache. Live GitHub query
+`R437 refinement` returned PR3967, PR3950, PR3936, PR3724, PR3690. Discussion coverage remains
+partial; the parent handles current board claims. These searches were not a
+novelty proof. The transport agent additionally found canonical PR2989,
+head 133cd8a7c5ce16a3d66e3372c5fdd9e88067d75b, and its README was read in full.
+
+That predecessor already supplies the general conditional ordering lemma and
+both duplicate-owner/self-bridge guard counterexamples. The scope was corrected
+before submission: no first-proof or new-guard claim. The independently useful
+delta is complete **current R437/OQ4 event skeleton** translation validation,
+903456 residual sites and 29 checkpoints, plus the actual run-loop contract
+check. PR2989 used eight reduced GL2(F3) abstract words, 67024 instructions and 8064
+residual boundaries. Both remain conditional on physical primitive contracts.
+
+The sibling transport lane handles actual chart separation/units; the resource
+lane handles complete physical envelopes; the alternate route lane explores
+rank-seven all-class factorization. Their unpublished findings are not inputs
+or automatic admissions of this package. Its theorem retains their respective
+premises explicitly, so there is no circular dependence.
+
+Shared submission refresh by the parent at 2026-10-19 07:49:55 UTC again found
+canonical main 20ecf2891d80b5acf18d980b2164fb44ea7faa90 and unchanged revision 6.

research/r437-whole-word-refinement/EXPECTED.json

@@ -0,0 +1,62 @@
+{
+  "checkpoints": 29,
+  "complete_xor_count": 7035840,
+  "controls": {
+    "lost_private_output": "read a live complete abstract packet",
+    "move_instead_of_clone": "read a live complete abstract packet",
+    "omit_disposal": "every emitted disposal completed",
+    "reverse_XOR_roles": "all ordered local and family XOR inputs and outputs",
+    "stale_family_scatter": "all ordered local and family XOR inputs and outputs"
+  },
+  "duplicate_owner_guard_gap": {
+    "conclusion": "Compiler success alone does not imply source-domain admission.",
+    "finite_compiler": "ACCEPTED",
+    "logical_driver": "REJECTED: disjoint complete owned low packets"
+  },
+  "final_family_terms_sha256": "9bc0eb00183a70855069c646e6bff9935c5d1715fd40611563e01d6d1c8ecb47",
+  "formal_low_labels": 1,
+  "macros": {
+    "block": 2710368,
+    "checkpoint": 29,
+    "clear": 256608,
+    "copy": 2592,
+    "exchange": 14208,
+    "family_xor": 63936,
+    "gather": 63936,
+    "gather_route": 189792,
+    "move": 2592,
+    "node": 1,
+    "residual_begin": 903456,
+    "residual_end": 903456,
+    "return": 1,
+    "route_scatter": 189792,
+    "scatter": 63936,
+    "xor": 6971904
+  },
+  "physical_payload_executed": false,
+  "primitive_contracts_proved": false,
+  "residuals": 903456,
+  "run_loop_contract_checks": [
+    {
+      "depth": 0,
+      "macros": 4
+    },
+    {
+      "depth": 1,
+      "macros": 8
+    },
+    {
+      "depth": 2,
+      "macros": 12
+    },
+    {
+      "depth": 17,
+      "macros": 72
+    }
+  ],
+  "source_residual_trace_sha256": "16cf5bf8bb6c63f54e7a4986c16cf9925e4e774c3d939cdf4e938e51b36b4efc",
+  "staged_roles": 660,
+  "status": "PASS_R437_SYMBOLIC_WHOLE_WORD_REFINEMENT",
+  "symbolic_low_scope": "One formal arbitrary low; all-low claim is the written loop induction, not GL64 enumeration.",
+  "xor_trace_sha256": "1122a4a21e69a368526066394a5b0a101415f7f75992988d452e63312c69dd49"
+}