From c2cf61b199948a137d5cd5542691c3062c3a747a Mon Sep 17 00:00:00 2001 From: Claude Date: Wed, 11 Nov 2026 21:24:15 +0000 Subject: [PATCH] =?UTF-8?q?plan(D-DRDT-SPLIT-1=20=C2=A71):=20a=20refusal?= =?UTF-8?q?=20means=20not=20witnessed=20for=20this=20version=20(EXO-256)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Losing or outgrowing a witness removes the replay guarantee; it does not refute the conclusion. With versions never compacted, an advance only ends a binding's or kept result's certification for the new version. Co-Authored-By: Claude Opus 5.5 Claude-Session: https://claude.ai/code/session_01XAqKMPJjVvasjwqhjJ6c9p --- .claude/plans/dr-widefieldmask-dt-classview-v1.md | 11 +++++++++++ 1 file changed, 11 insertions(+) diff --git a/.claude/plans/dr-widefieldmask-dt-classview-v1.md b/.claude/plans/dr-widefieldmask-dt-classview-v1.md index 9f8756ca8..e9abc5a6d 100644 --- a/.claude/plans/dr-widefieldmask-dt-classview-v1.md +++ b/.claude/plans/dr-widefieldmask-dt-classview-v1.md @@ -38,6 +38,17 @@ As stated by the operator (2026-11-11): mask; the implicit identity order and the versioned mapping can suffice. - Mapping replay reproduces the assignment; identical values or results are not promised by it. +- **A refusal means "not witnessed for this version", never "wrong" + (DECISION EXO-256, 2026-11-11).** A conclusion carries a witness (the + version and frame it was derived under). Losing or outgrowing the witness + removes the replay guarantee; it does not refute the conclusion. Only a + counter-witness refutes. Because versions are not compacted, a witness + for version v is never removed: after an advance a binding or a kept + result is simply not certified for v+1, and `SourceChanged` / + `MapChanged` / `CoordinatesChanged` state that reach. A recomputation at + v+1 is a new conclusion with its own witness and does not falsify the one + for v. Describe such refusals as "not witnessed for this version", never + as "invalid", "wrong" or "a gap". Revisit if compaction is ever enabled. - **The mapping is DR-adjacent.** It binds the context to DR addresses without being stored as a DR mask, and it lives where the existing contract puts it: no new store instance for this distinction alone, and