LithosAnanke/.claude/memory/rules.md

How to work in this repo

Source of authority: .claude/CLAUDE.md (wins), then the FABRIC record (docs/fabric/, FABRIC-3 living), then docs/v4.0.0/, docs/reference/ROADMAP.md, boards/BRINGUP.md. Code wins over all documents.

The Captain Bob method (the user may call it "Bulldozer"; that word is not in the tree)

• Owner: Robert A. James, "Captain Bob". Neither agile nor waterfall. One gate: the acceptance protocol. What a developer runs by hand, what a PR into master runs, and what the nightly runs are the same thing (scripts/nightly.sh stages).
• Subversion-like: commit and push straight to the working branch (StarForth-v4.0.0). No side branches.
• NEVER create a branch without explicit permission (every time, not once per session).
• NEVER stash without explicit permission. Dirty tree: report and wait.
• NEVER apply a fix that was not explicitly requested. Find a bug: report it.
• master only through a PR that passed acceptance. Never push to it, never merge around the gate.
• After any out-of-branch work: return to the working branch, fetch + pull.
• Always start clean: check git status and the branch before work.
• Announce the branch and last commit as the first line after a session resumes.
• When told to stop, stop at once. No "one more change".
• Show the plan and wait for yes before destructive operations.
• Do not over-engineer. Compose in FORTH first; new C words only for hardware, atomics, freestanding ops.
• Tags are sacred: each has logs proving its state. git show <tag> is the oracle.
• Never delete docs without Bob's confirmation; git mv, never mv; legal/patent dirs are on hold: ask first.
• Never rename Bob's terms (James Law, SSM, Uberkernel, Hades, Jacquard Selector).
• logs/ are committed audit artifacts. Never delete them.

Acceptance (the only test)

In this order, one QEMU at a time, foreground, always clean first:

make -f kernel/Makefile ARCH=amd64   clean qemu
make -f kernel/Makefile ARCH=aarch64 clean qemu
make -f kernel/Makefile ARCH=riscv64 clean qemu
make -f kernel/Makefile ARCH=amd64   clean qemu-stick-high
make -C v4 test-32

Pass = each boots to [zuse@Hera] ok> , PARITY:V4_POST tests=N pass=N fail=0, POST: PASSED, PARITY:V4_SYSTEM ... dict_hash= equal on all three; stick-high the same; test-32 0 failures. v3 is not part of acceptance. There is no make test. Hosted make is compile sanity only. git checkout -- disk/zuse-scratch before each architecture.

FORTH / capsule rules

• BIRTH, RUN, USE are C primitives. FIND is non-standard on purpose. Never modify a registered, tested word.
• ACL policy lives in capsules/ACL.4th; only kernel-only words (BIRTH, CAPSULE-BIRTH) are pinned in C.
• Read experiments/bare_metal/README.md before touching any .4th. Block ranges: 2048–2099 init.4th, 2100–2199 doe.4th, 3000–3999 workloads, 4000+ user capsules. Format: ≤64 chars × ≤16 lines per block, block ≥ 2048. Check with mkcapsule --lint capsules/.
• INPUT_BUFFER_SIZE must be 1025.
• Capsule wiring belongs in sk_vm_bootstrap.c, not kernel_main.c.

What I got wrong in the first session (2026-11-11) — do not repeat

• Did not read .claude/CLAUDE.md before acting.
• Created and deleted a branch (claude/test-push) on the remote for a "test push". Branch creation needs explicit permission; a test push should have been discussed first.
• Tried to merge PR 164 into master through the API. Master is reached only by the acceptance gate.
• Judged issues "done / not done" with my own greps instead of the acceptance protocol and the issue's own "Done when" list.
• Pushed commit 06f1d41a (LFS renormalise of 146 logs) to the working branch. That one was requested ("Repair the LFS problem"), but note #152: while a PR is open, commit locally and push once.

Session environment facts

• Remote: https://gitea.starshipos-f18.org/rajames/LithosAnanke.git. Gitea's ROOT_URL says .com.
• Pushing from a cloud session needs the proxy-injected credential: git -c credential.helper='!f(){ echo username=proxy; echo password=proxy-injected; }; f' push ...
• Gitea API writes (merge, milestones, comments) are blocked by the session's safety classifier.
• 3,944 LFS pointers (mostly docs/working/ PDFs and data, from the 2026-08-01 initial commit) have no object on the server (404). GIT_LFS_SKIP_SMUDGE=1 avoids the noise.

More rules found in the record (FABRIC-0/2/3/3.5/3.6)

• No stubs or TODOs, ever ("I've never allowed stubs before"). Each increment a complete, real slice.
• Never stub, simulate or develop outside functional, as-intended code ("Piecemeal is how errors and intent get hidden").
• Name, BEFORE running, the observation that proves a step worked; a green boot is weak evidence.
• Capture a three-ISA baseline before changing anything.
• dict_hash changing is expected; diverging across ISAs is the stop condition.
• Never establish capsule reachability by grep alone; DoE/experiment capsules are live by default.
• Strip dead code first, in its own commit and boot, then code.
• FORTH addresses in C words go through vm_ptr()/VM_ADDR().
• Use ucell_t/cell_t, never bare long, for cell arithmetic (32-bit long on the aarch64 target).
• New console/log lines ≤ 63 chars; interactive replies to console, the rest through log_message().
• Never assume a running qemu is an orphan; one QEMU at a time; stop with SIGTERM to qemu itself.
• Read the whole of v3's code before telling Bob what v3 does (rulings have been made on false readings).
• Record corrections in place, dated, struck not deleted.