[gHashTag]

Closes #12673. Pareto variant 2 of #12479, the law half (the gate output wiring is a follow-up for the gate's own lane).

• specs/policy/seal_ownership.t27: owns(diff_csv, spec_path) -- exact path match, no prefixes, an empty diff owns nothing; action_for(owned, stale) -- A_RESEAL_NOW for the PR's own stale spec (t27c seal --save, never --force), A_NAME_OWNER for a foreign one (the gate names the owning lane instead of failing this PR for the impossible).
• Measured root: ten stale seals red on every PR on 2026-10-26, nine foreign to any open lane (spec-guards red on every PR: ten stale gen-hash seals; nine resealed, wasm.t27 refused (WOP_AND) by the gate itself #12667, resealed by seals: reseal nine stale gen-hash seals; wasm.t27 refused by the gate and left to #12668 (Closes #12667) #12669); the tenth was a refused regression (wasm32: bit-op lowering missing end to end -- emitter refuses & (M-D cut), wasm spec does not compile (WOP_AND), two gates red #12668) and stays stale until its fix lands -- attribution never upgrades a refused seal.
• t27c 2/2, 0 vacuous (6+4 asserts), 1 invariant; t27b 2/2; ASCII clean.

[github-actions]

PR Dashboard

Generated at: 2026-10-26 14:45:24 UTC

• t27os: the fleet word on a KEYS row -- route states folded by the scanner rank (Closes #12674) #12677 t27os: the fleet word on a KEYS row -- route states folded by the scanner rank (Closes #12674) | Created: 2026-10-26 | Updated: 2026-10-26 | 26 failing / 37 total
• policy: the seal ownership law -- own stale seals reseal, foreign ones name their lane (Closes #12673) #12676 policy: the seal ownership law -- own stale seals reseal, foreign ones name their lane (Closes #12673) | Created: 2026-10-26 | Updated: 2026-10-26 | 21 failing / 37 total
• crons: the t27os release-on-merge card -- due-rule and publish gate as law (Closes #12672) #12675 crons: the t27os release-on-merge card -- due-rule and publish gate as law (Closes #12672) | Created: 2026-10-26 | Updated: 2026-10-26 | 19 failing / 36 total
• t27os: the post-publish verify law -- one verdict over manifest, sums and the six assets (Closes #12670) #12671 t27os: the post-publish verify law -- one verdict over manifest, sums and the six assets (Closes #12670) | Created: 2026-10-26 | Updated: 2026-10-26 | 14 failing / 38 total
• seals: reseal nine stale gen-hash seals; wasm.t27 refused by the gate and left to #12668 (Closes #12667) #12669 seals: reseal nine stale gen-hash seals; wasm.t27 refused by the gate and left to #12668 (Closes #12667) | Created: 2026-10-26 | Updated: 2026-10-26 | 9 failing / 32 total
• seals: corpus refresh -- re-save every stale gen_hash seal the currency check names #12626 seals: corpus refresh -- re-save every stale gen_hash seal the currency check names | Created: 2026-10-26 | Updated: 2026-10-26 | 5 failing / 32 total
• seals: refresh the two seals stale from the queue-drain merges (Refs #12603) #12623 seals: refresh the two seals stale from the queue-drain merges (Refs #12603) | Created: 2026-10-26 | Updated: 2026-10-26 | 3 failing / 32 total
• crons: the rebase bot -- mechanical DIRTY fixer for seal-only conflicts (Closes #12620) #12621 crons: the rebase bot -- mechanical DIRTY fixer for seal-only conflicts (Closes #12620) | Created: 2026-10-26 | Updated: 2026-10-26 | 9 failing / 40 total
• crons: the queue health report -- hourly one-screen truth (Closes #12613) #12615 crons: the queue health report -- hourly one-screen truth (Closes #12613) | Created: 2026-10-26 | Updated: 2026-10-26 | 9 failing / 40 total
• t27b(wasm): floor 17 -- the LOCALS MOUNT (statement bodies lower, fact word 11 feeds the walk) #12378 t27b(wasm): floor 17 -- the LOCALS MOUNT (statement bodies lower, fact word 11 feeds the walk) | Created: 2026-10-25 | Updated: 2026-10-26 | 3 failing / 46 total
• spec(fpga): wasm board P6 -- the 64-bit datapath design floor (STACK_2x32, OP_RUN_USER64) #12167 spec(fpga): wasm board P6 -- the 64-bit datapath design floor (STACK_2x32, OP_RUN_USER64) | Created: 2026-10-25 | Updated: 2026-10-26 | 4 failing / 48 total
• T27 OS: calls, chat, cabinet, LAN self-update, H.264 30 fps video, IPv6 calls and reach U1-U2 (Closes #12034) #12035 T27 OS: calls, chat, cabinet, LAN self-update, H.264 30 fps video, IPv6 calls and reach U1-U2 (Closes #12034) | Created: 2026-10-24 | Updated: 2026-10-24 | 7 failing / 37 total
• test(t27f): frame_render clears the raster before it blends (Refs #3) #11922 test(t27f): frame_render clears the raster before it blends (Refs #3) | Created: 2026-10-23 | Updated: 2026-10-26 | 3 failing / 38 total
• spec(crons): the lab.yml verdict step as t27 law (t27os#9) #11894 spec(crons): the lab.yml verdict step as t27 law (t27os#9) | Created: 2026-10-23 | Updated: 2026-10-26 | 3 failing / 37 total
• t27c test: execute assertions via zig test (Closes #11805) #11806 t27c test: execute assertions via zig test (Closes #11805) | Created: 2026-10-23 | Updated: 2026-10-26 | 3 failing / 46 total
• tri git: surface commit/push/status verbs (Closes #11793) #11794 tri git: surface commit/push/status verbs (Closes #11793) | Created: 2026-10-23 | Updated: 2026-10-26 | 4 failing / 40 total
• dupe ledger: bless bytes_eq group (master Duplicate Body Ratchet green) #11426 dupe ledger: bless bytes_eq group (master Duplicate Body Ratchet green) | Created: 2026-10-20 | Updated: 2026-10-26 | 2 failing / 30 total
• spec(port): share tree helpers across eight gen_w ports (Closes #9633) #9636 spec(port): share tree helpers across eight gen_w ports (Closes #9633) | Created: 2026-10-15 | Updated: 2026-10-23 | 6 failing / 23 total

Summary

Status	Count
Total Open PRs	18
PRs with Failing Checks	18
PRs with All Checks Green	0
READY	0
FAILING	18
PENDING	0
NO CHECKS YET	0

Seal Status

• ⚠️ STALE -- sha256(compiler.rs)=67adcf31aff7 != manifest seal=87e5cbd3ad94.
  The committed NMSE numbers were certified against an older compiler.rs.
  Run scripts/reseal-check.sh locally for the two-step reseal command (advisory; not a merge gate).

[tri-claw]

Summary by t27-bees

Checked by the t27 compiler

_{t27c parse, parse-complete and typecheck on each changed .t27 file at d712fbc. Nothing was generated, built or run. A pass means the file is well formed, not that it is right.}

• specs/policy/seal_ownership.t27: parses and typechecks.

Read by the model

This change introduces a policy module that attributes stale seals to either the current PR (exact path match in the diff) or a foreign lane, so the gate can ask the PR to reseal its own specs (t27c seal --save) and merely name the owner for foreign ones instead of failing the PR.

Worth a look

• specs/policy/seal_ownership.t27:35-42 — The CSV parser splits on raw commas with no whitespace trimming or quoting; if the diff CSV ever contains spaces (e.g., "a, b"), owns will not match "b".
• specs/policy/seal_ownership.t27:33-34 — An empty spec_path returns false; if a caller passes an empty string by mistake, the seal is treated as foreign rather than raising an error.
• specs/policy/seal_ownership.t27:44-55 — field_eq returns false for zero-length fields (e.g., "a,,b"), which is consistent with “exact match only” but means an empty field in the CSV silently owns nothing.
• specs/policy/seal_ownership.t27:58-65 — action_for returns A_NAME_OWNER for any stale seal not owned by this PR, including refused regressions; the comment says attribution never upgrades a refused seal, but the function has no refused parameter to enforce that — the caller must filter beforehand.
• specs/policy/seal_ownership.t27:78-79 — The invariant only checks the three constant values; it does not verify that ACTION_NAMES stays in sync with the constants.

---

_{Read: 1 files, +91 -0, the whole diff. Head d712fbc. Model: openai-compatible/nvidia/nemotron-3-ultra-550b-a55b. Commands: @t27-bees review | summary | help | pause | resume. Free for every repository.}