ONT-4b2: extract:code + extract:lean as focus nodes; 16 of the ONT-0 table's 32 W3C SHACL-Core cases vendored in the gate, 16 accounted for by excluding form; the pinned oracle differential out of it (Refs PMAT-3509)

[noahgift]

ont-delta: type code

Closes #3509 (0.68.2 requirement, §0.4 second ruling relayed via the release session). Spec: paiml/infra docs/specifications/paiml-ontology.md §5 ONT-4b2, §3.6, §3.7, R-13, R-15, R-18.

DRAFT while it is stacked. This branch is built on the reconciled #3526 (ONT-4c1) + #3516 (extract:json) tree, because all three touch extract::all and shapes_gate.rs. It rebases onto main after #3516 → #3523 → #3526 land, and the three known-red tests below go green with #3523's receipts. Quorum and seam review can run now; nothing here waits on them.

extract:code — the focus objects are the bound symbols: every module_path + function a binding.yaml declares, resolved by a syn module-tree walk (inline modules, x.rs / x/mod.rs / #[path], one pub use … as hop, impl methods, both [package] name and [lib] name, a facade and the crate it re-exports tried in order). Not every fn in 3.9 M lines: no contract constrains a symbol nothing binds, and ONT-3a already owns the per-binding claim. Fail-closed in the graph: a symbol the walk cannot find is still an ont:Symbol, with sym:resolved false and sym:unresolvedReason naming the file and the segment — so a ghost binding is a violation naming the symbol, not a quietly smaller graph. Measured here: 270 bound symbols, 169 resolved, 101 genuinely absent (chat_session, encrypt, dispatch modules that do not exist; data::run where only run_audit/run_split do).

extract:lean — the in-tree theorems as ont:Statement under world/, read by ONT-2a's own scan and rule (a file carrying sorry grounds nothing), joined to the contracts that cite them by ONT-2a's name forms, with references that name nothing counted (lean_refs_unresolved), never guessed. 410 statements.

The W3C arm, both sides. 16 of ONT-0's 32-case table are translated into the contract dialect and run by the gate every time (ontology::w3c); the other 16 are listed by name with the form that puts them outside the subset (sh:class on a node shape, sh:or, sh:flags, blank-node kinds), so w3c_cases_passed is a count over the cases the subset claims and a case refused by design is never scored as a failure. A failing case declines Unknown{Differential} naming it — never a corpus verdict.

The oracle, out of the gate (R-13). tests/oracle/ is a scratch crate detached from the workspace ([workspace] in its own manifest) with shacl pinned =0.3.21 — ONT-0's measured verdict ORACLE. make oracle runs the pinned processor over the original case files and over the real corpus and writes the tracked tests/oracle/differential.json: 17 cases, 0 disagreements. A planted sh:minCount change in shapes.ttl makes it disagree (measured: 1756 vs 15). A test asserts no shacl/rudof_rdf/oxigraph is in the workspace lock (F-20).

Four conformance fixes the cases and the oracle found in the in-house validator, each with the case that fires on it:

fix	case
sh:class / targetClass use the rdfs:subClassOf closure (SHACL §2.1.1)	property/class-001
sh:datatype checks the lexical form is well formed ("300"^^xsd:byte is a violation)	property/datatype-ill-formed
sh:node reports ONE result per failing value on the outer path	property/node-001, -002
sh:in is term equality, and the export writes the entries typed	the corpus arm: in: ["true"] was accepting "true"^^xsd:boolean, 490 results of difference

The closure is built once per validate() rather than scanned per node: the corpus gate went 27.2 s → 6.9 s in the same commit.

Arming. bound-symbols-resolve and lean-statements-grounded ship computed and reported, in not_armed_shapes (§3.9) — 101 ghosts and three admitted theorem files exist on main today, and a gate red on its own target the day it merges trains bypass. Arming is one string in contracts/lint-baseline.json for the release that cleans them. The fixture pair proves both directions: code-bound/ (unarmed → Pass, unarmed_violations 1) and code-ghost/ (armed → Fail naming the symbol).

Two check_ont_ratchet.sh defects fixed, each with a self-test row that goes red without the fix (17 → 23 rows): entity_types_registered and extractors_implemented grepped the Rust for EntityType:: and impl Extractor — forms this codebase has never used — so both measured 0 while the baseline carried 1 and 1 from an older tree; and --write deleted formal_prose and legacy_unresolved_depends_on, two shrink-only ratchets the sigma and relations gates read from that same file, so updating one ratchet disarmed two others.

Known red, all three the same inherited assertion, none of it this row's: lint_passes_on_real_contracts, ont4b_shapes_gate::the_repo_corpus_passes_…, ont4c1_model_receipts::the_repo_corpus_reports_… assert the real corpus PASSES, and the armed ladder-measured finds 0 witnesses until #3523's re-measured receipts are on main. Proven by measurement: with ladder-measured unarmed for one run the same corpus is Pass, 0 violations, 113 reported.

Green here: aprender-contracts lib 1659/1660 (the one above), ontology:: 82/82, ont4b2_code_lean_w3c 8/8, ont_extract_json 7/7, ont4b_shapes_gate 10/11, ont4c1_model_receipts 11/12, pv extract --check 0, check_ont_ratchet.sh --self-test 23/23, clippy -D warnings clean, cargo fmt clean, make oracle 0 disagreements.

R-23 (this head, pv built from it):

aprender: cmd="pv lint contracts --gate shapes --format json" pv=<this head> exit=1 verdict="Fail — 5 shapes, 2318 focus nodes, 8 armed violations (ladder-measured, 0 witnesses until #3523), 105 reported from the two unarmed ONT-4b2 shapes, w3c_cases_passed 16/16, pc_extract code+lean fired"
rmedia:   cmd="pv lint crates/rmedia-core/contracts --gate shapes --format json" pv=<this head> exit=2 verdict="decline: NoShapes on origin/main 9e90468 — the Σ and the first shape are on rmedia#559, measured Pass there (131 focus nodes)"

🤖 Generated with Claude Code

[noahgift]

quorum-review (AD-04): NOT agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3509",
 "head": "bb738faab1635af346fe24902d81cd5e574c24ae",
 "width": 3,
 "executor": "agy",
 "agreed": false,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "FAIL",
   "findings": 1
  },
  {
   "lane": 2,
   "verdict": "FAIL",
   "findings": 1
  },
  {
   "lane": 3,
   "verdict": "FAIL",
   "findings": 1
  }
 ]
}

[noahgift]

quorum-review (AD-04): three PASS — agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3509",
 "head": "f5dd5d7f6f6cd7b0ea5a045db9b505ae9c088928",
 "width": 3,
 "executor": "agy",
 "agreed": true,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "PASS",
   "findings": 0
  },
  {
   "lane": 2,
   "verdict": "PASS",
   "findings": 1
  },
  {
   "lane": 3,
   "verdict": "PASS",
   "findings": 0
  }
 ]
}

[github-actions]

§13.11 rung 1 — quorum shadow verdict

S13-SHADOW pr=3528 head=60c460827baf5e44e9d20a3d1a8b195fb0441e98 verdict=REFUSE class=Q1 arm_rc=1

Shadow mode: this records a verdict and merges nothing. A refusal
to arm is not a block (§13 adds zero rows to §7) — the pull request is
exactly as green as it was.

[noahgift]

quorum-review (AD-04): three PASS — agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3509",
 "head": "a6927091a2e29fdaa0de49757d88eed7298795cd",
 "width": 3,
 "executor": "agy",
 "agreed": true,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "PASS",
   "findings": 0
  },
  {
   "lane": 2,
   "verdict": "PASS",
   "findings": 3
  },
  {
   "lane": 3,
   "verdict": "PASS",
   "findings": 0
  }
 ]
}

[noahgift]

quorum-review (AD-04): NOT agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3509",
 "head": "3329c7cde4f704673d06df5bb50ba2b4e5cf7271",
 "width": 3,
 "executor": "agy",
 "agreed": false,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "NO-VERDICT",
   "findings": 0
  },
  {
   "lane": 2,
   "verdict": "PASS",
   "findings": 3
  },
  {
   "lane": 3,
   "verdict": "PASS",
   "findings": 0
  }
 ]
}

[noahgift]

quorum-review (AD-04): three PASS — agreed (auto_merge: checked=true was_armed=false disarmed=false)

{
 "ticket": "PMAT-3509",
 "head": "3329c7cde4f704673d06df5bb50ba2b4e5cf7271",
 "width": 3,
 "executor": "agy",
 "agreed": true,
 "auto_merge": {
  "checked": true,
  "was_armed": false,
  "disarmed": false,
  "note": "auto-merge not armed"
 },
 "lanes": [
  {
   "lane": 1,
   "verdict": "PASS",
   "findings": 3
  },
  {
   "lane": 2,
   "verdict": "PASS",
   "findings": 4
  },
  {
   "lane": 3,
   "verdict": "PASS",
   "findings": 4
  }
 ]
}