[ThorFuchs]

Applications have exact one-node reads and a query runtime, but no reusable many-node structural visitor over the canonical JSON source. This N0/N1 experiment adds iterative DFS preorder, strict physical and virtual scopes, explicit overlap/stop/pruning policies, bounded metadata collection and explicit coverage.

JSONNavigation depends only on JSON and reuses its unchanged package-scoped read scope, admission, typed selection/path construction and noncopyable cumulative meter. The seven public products and empty external dependency graph remain unchanged; no JSONNavigation product is exposed. No core model, query language, renderer, schema dialect, projection, snapshot, actor or persistence feature changes. The only CLI-source delta refreshes its mandatory generated source-identity stamp.

Final source: 4403b9ab3b0a1fadc57c12a283cfabb255f6237a, based on 037e735dc6224789e4d04d2c18d15b8d27440198.

Qualification:

• Native 38785462005: native, safety, docs and Git-free archive reproduction jobs passed. Full root: 583 functions/325 parameter invocations in Debug, Release and ASan; shared-state TSan: 42. Archive repeats the full 33-command native lane outside Git.
• Linux 38785461960: ARM64/x86_64 full and safety jobs passed; 567 functions/325 parameter invocations, TSan 41 per architecture.
• Existing 49 cap probes, all 126 restored maintenance identities, full independent-corpus policies and parameter inventories remain mandatory. Policy exclusions are not evaluated successes.
• Focused Navigation: 37 functions in Debug and Release, explicit strict-memory/warnings-as-errors build; public consumer 18 checks/configuration, three executed guide fences/configuration, eight expected-negative compiler probes. Experimental DocC documents 56/56 authored declarations. Existing six catalogues remain 946/946, separate from this unpublished module.
• WASI: 77 backend commands passed at runtime-identical 6e5e5fa; full Node Debug/Release 479 functions/288 parameters and all 49 caps. Supplemental WasmKit Navigation: 37 functions per configuration. Original source identities and narrower backend/safety scopes are retained.
• iPhoneOS/iPhoneSimulator SDK 27.2 release target builds passed on the corrected runtime source. These are SDK builds, not new device/simulator-runtime/UI evidence.
• Functional scale witness: 100,001 source nodes visited and two noncontiguous physical selections retained, with cumulative logical work/retention reports. No EngineBench, throughput or RSS claim; exact pair/seen scans and path snapshots can be quadratic.

Author review found and corrected requested-key admission parity: too-long missing scope keys now produce the same key/text resource refusal as JSONReadCursor in physical and virtual scopes. Core code is unchanged. Earlier failed/incomplete attempts remain in private evidence. The parent native workflow passed qualification commands but failed raw DocC artifact upload; the final source packages 195 native-named catalogue files byte-for-byte into a verified tar/manifest, and all final uploads passed. This is an author review, not independent human approval.

Read source authority, API/resource decisions, compiled guide and actual consumer.

This remains a draft for API/product-gate review. No product promotion, merge, tag or release is performed. N2/N3/P1/P2/R1/R2, BFS and other future families remain deferred; sibling work and repository protection are untouched.

[ThorFuchs]

Superseded by the qualified protected-main merge of #38 at 7d72c8825982550f0ee87218136fda12d8bae13b.

This original head 4403b9ab3b0a1fadc57c12a283cfabb255f6237a is preserved as source/evidence provenance; it was not merged as this PR head. The fresh-main integration replayed #34 and only #37's incremental promotion while retaining #35 composition, all 56 Navigation declarations and all existing tests. Exact replay mapping.

Native qualification and both Linux architectures passed on the integration source. The owner received source-bound full WASI, SDK, consumer and archive receipts. The merge tree is byte-identical to qualified 621f58d; the external public SwiftPM consumer passed all 18 cases again on protected main. Source archive SHA-256: b38b2954cd54f06ed6fbec9c3fa1032652b398f02bc388a4e04d66c74eb49588.

Closing as superseded under the owner's bounded authorization. Original refs/worktrees remain retained pending dependency-safe archival cleanup. A0/JSONInspection experiments remain separate; no tag or version release was created.