Architecture 9 Cursor strategy and isolated OProver residency

[FluffyAIcode]

Summary

• cut proof orchestration over to Architecture 9 with Cursor SDK advisory strategy and host-owned, content-addressed plan compilation
• add target-context isolation, exact provider provenance, and typed DEFINITION_RESOLUTION_PLAN remediation when no elaborated theorem exists
• reconcile Gemma residency by live executable/model/revision/health/start generation, rejecting stale owners and PID reuse
• add durable target-bound report provenance, exclusive single-use resume leases, and signed resume certificates
• prohibit Proof Search and OProver for definition-remediation certificates until a Research Contract exists
• dispatch consumed definition-remediation certificates directly to the host-owned Definition Resolution gate
• exhaust every configured target-interface, Mathlib, theorem-card, evidence, history, publication, typed-synthesis, and rewrite source before issuing a mathematical terminal blocker

Safety properties

• model memo can select only registered short IDs and cannot set plan or interface content
• planning-only proof skeletons remain infeasible
• remediation certificates route only to DEFINITION_RESOLUTION and explicitly set proof_search_allowed=false and oprover_allowed=false
• certified Definition Resolution stops the current turn before generic model-role dispatch
• underspecified root targets receive a content-addressed exhaustion certificate, typed backjump, and idempotent durable quarantine
• credentials remain Keychain-backed and are never persisted or passed in process arguments
• no candidate, ledger, runtime state, logs, snapshots, caches, weights, model bundles, environment files, or OpenMontage content is included

Test plan

• exact Architecture 9 interface/remediation regression suite: 237 passed / 9 skipped
• mandatory local CI: 1,343 passed / 10 skipped; 100% canonical coverage
• Lean build: 2,793 jobs
• Python compile and staged/unstaged diff checks
• authenticated read-only Cursor Strategy smoke outside CI using exact model gpt-5.6-sol
• all eight GitHub checks green on e8bf5ac
• diff secret/forbidden-artifact scan

Production fixture coverage

• stale residency PID reconciliation, dead identity, and PID reuse rejection
• planning-only to typed remediation without theorem fabrication
• remediation feasibility, host selection, and provider provenance
• report provenance plus lease missing/stale/tampered/conflict handling
• signed certificate issuance/consumption and replay rejection
• four RH-C1 interface schemas with host-only feasibility and circularity guards
• complete reliable-source status inventory and stable exhaustion hashing
• typed root backjump/quarantine and replay idempotency
• Definition Resolution policy keeps OProver unloaded and Proof Search inaccessible
• crash/restart/replay/idempotency paths

Production result

Terminal condition B was reached on RH-C1. Cursor gpt-5.6-sol ranked TI-DISTINGUISH-FUNCTIONS, but every registered interface/rewrite schema failed host feasibility. The pinned Mathlib declarations were verified; all other configured sources returned explicit target-bound exhaustion statuses. The resulting exhaustion hash is 243595a4092b60ea5f5bcfb633052321dab5b90b9313666759a79cb5f92045a1; RH-C1 is quarantined at ledger v95 with backjump ROOT_UNAVAILABLE. Proof Search and OProver were never opened. The PR must not be merged automatically.

Made with Cursor

[cursor]

Bugbot is not enabled for your account, so this pull request was not reviewed.

Enable Bugbot in the Cursor dashboard to get automatic reviews on future PRs.