Second tranche of the contracts-against-code audit. Two threads, both
applied conservatively under the over-correction guards in
docs_honesty_pin.rs (the self-labelled tiebreaker in 0008 and the
Diverge-reserved anchor in 0010 are deliberate honest content and were
left untouched; design rationale that explains a present-state design
principle — semantic-locality, the reuse-as-wrapper reasons — was also
preserved).
Honesty-rule (0007): demote clear change/deletion narration to
present tense.
- 0008: drop "they were promoted from ... to ... Recorded here so";
strip the "Iter A"/"Iter B" iteration labels (the descriptive titles
carry the meaning); drop "(no longer a carve-out)".
- 0001: "were rewired to use ... was deleted at the same time" ->
present tense. (The substance was already correct: `pretty.rs` holds
only the diagnostic helpers; an audit agent had misread the line as
"pretty.rs was deleted" — the file exists, the printer code does not.)
- 0012: drop "Per the tail-call survey of existing fixtures" and
"Migration of existing fixtures is partial" -> present-state
description of which corpus fixtures carry the tail marker.
Ratifier integrity: a contract that names a test which does not
ratify it is itself a form of the dishonesty this ledger forbids.
- 0014 named `bench/architect_sweeps.sh`, which sweeps honesty-anchors
and ratifies none of the six verification mechanisms; and claim 5
cited `tests/expected/`, which never existed (git log empty). Point
claim 5 at the real golden mechanism (`crates/ail/tests/snapshots/`
via `ir_snapshot.rs`) and the footer at each mechanism's actual test.
- 0015's four constraints are guaranteed by absence (no thunk/`ref`/
`IORef` node, non-recursive `let`); the named uniqueness in-source
tests only count RC consumes, never the constraints. State the
by-construction guarantee and point the ratifier at `ast.rs` (the
single source of truth for which nodes exist).
- INDEX ratifying-test column updated for both to match.
All ledger pins green (docs_honesty_pin, design_index_pin incl.
every_contract_names_a_resolvable_ratifying_test, effect_doc_honesty_pin,
carve_out_inventory); architect honesty sweep clean.
Deferred, recommend-only: 0016-method-dispatch carries no invariant
absent from 0013 (merge candidate), but a contract-file merge touches
INDEX, the retired-counter convention, and cross-refs — a structural
call left for explicit direction. Minor history phrasing in 0008's
Type::Con.name hash-shift paragraph (§"FnDef.suppress") also left.
All 176 files in the four accumulating directories now use a
zero-padded 4-digit counter prefix that reflects creation order
(`NNNN-slug.md`). The counter is assigned per directory in strict
git-log creation order; ties broken alphabetically by original name.
The old `YYYY-MM-DD-` prefix on docs/specs/ and docs/plans/ files is
dropped — the date is recoverable from git log and the counter
carries the ordering.
A file's counter is stable for the life of the file: never reassigned,
never reused, never compacted. Deleted files retire their counter;
subsequent files do not fill the gap. This is the property that lets
cross-references stay literal — refs use the full filename including
the counter (`design/contracts/0007-honesty-rule.md`) so they grep
cleanly and resolve directly without a glob step.
313 cross-references updated across .md/.rs/.toml/.c/.json files
(test pins, include_str! paths, design-INDEX entries, baseline notes,
runtime C comments, inter-contract markdown links incl. bare basename
and `../models/foo.md` forms).
CLAUDE.md gets a new "File-naming convention" section spelling out
the rule and rationale. skills/brainstorm/SKILL.md and
skills/planner/SKILL.md updated so new spec/plan creation produces
counter-prefixed names from the start.
The full test suite (cargo test --workspace) passes.
Brummel