LithosAnanke/.claude/memory/rules.md

# How to work in this repo

Source of authority: `.claude/CLAUDE.md` (wins), then the FABRIC record (`docs/fabric/`, FABRIC-3 living),
then `docs/v4.0.0/`, `docs/reference/ROADMAP.md`, `boards/BRINGUP.md`. Code wins over all documents.

## The Captain Bob method (the user may call it "Bulldozer"; that word is not in the tree)

- Owner: Robert A. James, "Captain Bob". Neither agile nor waterfall. One gate: the acceptance protocol.
  What a developer runs by hand, what a PR into `master` runs, and what the nightly runs are the same thing
  (`scripts/nightly.sh` stages).
- Subversion-like: commit and push straight to the working branch (`StarForth-v4.0.0`). No side branches.
- NEVER create a branch without explicit permission (every time, not once per session).
- NEVER stash without explicit permission. Dirty tree: report and wait.
- NEVER apply a fix that was not explicitly requested. Find a bug: report it.
- `master` only through a PR that passed acceptance. Never push to it, never merge around the gate.
- After any out-of-branch work: return to the working branch, fetch + pull.
- Always start clean: check `git status` and the branch before work.
- Announce the branch and last commit as the first line after a session resumes.
- When told to stop, stop at once. No "one more change".
- Show the plan and wait for yes before destructive operations.
- Do not over-engineer. Compose in FORTH first; new C words only for hardware, atomics, freestanding ops.
- Tags are sacred: each has logs proving its state. `git show <tag>` is the oracle.
- Never delete docs without Bob's confirmation; `git mv`, never `mv`; legal/patent dirs are on hold: ask first.
- Never rename Bob's terms (James Law, SSM, Uberkernel, Hades, Jacquard Selector).
- `logs/` are committed audit artifacts. Never delete them.

## Acceptance (the only test)

In this order, one QEMU at a time, foreground, always `clean` first:

    make -f kernel/Makefile ARCH=amd64   clean qemu
    make -f kernel/Makefile ARCH=aarch64 clean qemu
    make -f kernel/Makefile ARCH=riscv64 clean qemu
    make -f kernel/Makefile ARCH=amd64   clean qemu-stick-high
    make -C v4 test-32

Pass = each boots to `[zuse@Hera] ok> `, `PARITY:V4_POST tests=N pass=N fail=0`, `POST: PASSED`,
`PARITY:V4_SYSTEM ... dict_hash=` equal on all three; stick-high the same; test-32 `0 failures`.
v3 is not part of acceptance. There is no `make test`. Hosted `make` is compile sanity only.
`git checkout -- disk/zuse-scratch` before each architecture.

## FORTH / capsule rules

- BIRTH, RUN, USE are C primitives. FIND is non-standard on purpose. Never modify a registered, tested word.
- ACL policy lives in `capsules/ACL.4th`; only kernel-only words (BIRTH, CAPSULE-BIRTH) are pinned in C.
- Read `experiments/bare_metal/README.md` before touching any `.4th`. Block ranges: 2048–2099 init.4th,
  2100–2199 doe.4th, 3000–3999 workloads, 4000+ user capsules. Format: ≤64 chars × ≤16 lines per block,
  block ≥ 2048. Check with `mkcapsule --lint capsules/`.
- `INPUT_BUFFER_SIZE` must be 1025.
- Capsule wiring belongs in `sk_vm_bootstrap.c`, not `kernel_main.c`.

## What I got wrong in the first session (2026-11-11) — do not repeat

- Did not read `.claude/CLAUDE.md` before acting.
- Created and deleted a branch (`claude/test-push`) on the remote for a "test push". Branch creation needs
  explicit permission; a test push should have been discussed first.
- Tried to merge PR 164 into `master` through the API. Master is reached only by the acceptance gate.
- Judged issues "done / not done" with my own greps instead of the acceptance protocol and the issue's
  own "Done when" list.
- Pushed commit `06f1d41a` (LFS renormalise of 146 logs) to the working branch. That one was requested
  ("Repair the LFS problem"), but note #152: while a PR is open, commit locally and push once.

## Session environment facts

- Remote: `https://gitea.starshipos-f18.org/rajames/LithosAnanke.git`. Gitea's ROOT_URL says `.com`.
- Pushing from a cloud session needs the proxy-injected credential:
  `git -c credential.helper='!f(){ echo username=proxy; echo password=proxy-injected; }; f' push ...`
- Gitea API writes (merge, milestones, comments) are blocked by the session's safety classifier.
- 3,944 LFS pointers (mostly `docs/working/` PDFs and data, from the 2026-08-01 initial commit) have no
  object on the server (404). `GIT_LFS_SKIP_SMUDGE=1` avoids the noise.

## More rules found in the record (FABRIC-0/2/3/3.5/3.6)
- No stubs or TODOs, ever ("I've never allowed stubs before"). Each increment a complete, real slice.
- Never stub, simulate or develop outside functional, as-intended code ("Piecemeal is how errors and intent
  get hidden").
- Name, BEFORE running, the observation that proves a step worked; a green boot is weak evidence.
- Capture a three-ISA baseline before changing anything.
- dict_hash changing is expected; diverging across ISAs is the stop condition.
- Never establish capsule reachability by grep alone; DoE/experiment capsules are live by default.
- Strip dead code first, in its own commit and boot, then code.
- FORTH addresses in C words go through `vm_ptr()`/`VM_ADDR()`.
- Use `ucell_t`/`cell_t`, never bare `long`, for cell arithmetic (32-bit `long` on the aarch64 target).
- New console/log lines ≤ 63 chars; interactive replies to console, the rest through `log_message()`.
- Never assume a running qemu is an orphan; one QEMU at a time; stop with SIGTERM to qemu itself.
- Read the whole of v3's code before telling Bob what v3 does (rulings have been made on false readings).
- Record corrections in place, dated, struck not deleted.