# R2 · SET-MAKE · SEAT-HALF 2 (450 seats) — THE HONESTY PANEL OF 2,700, ROUND 2

**Mandate:** audit **the make** — the ledger, the journal, the laws and the gates that produced the belt.
**Method:** nothing in this file is quoted from the commissioner's code. Every number below was re-derived
by this bench from `framework/_FRAMEWORK-103200.json`, `framework/_TRACKER-JOURNAL.jsonl` and a full walk
of `build/`. Scripts are named at each claim. Labels per I-1: ✅ VERIFIED · 📊 CALCULATED · ⚠️ ESTIMATE.

**Opening credit, because honesty runs both ways (I-3).** The commissioner published his own belt's
thinness — median 882 bytes, 2,995 real / 1,094 declared — *before* this panel sat. That act is the
reason the findings below could be found at all. Three of the ten findings would have been invisible
without it. Round 2 is harder on him than Round 1 was; that is what he asked for.

---

## 0 · THE BENCH'S OWN CENSUS (re-derived, nothing inherited)

| quantity | this bench's own route | value | vs the face |
|---|---|---|---|
| points in the canon | `len(F["points"])` | **103,200** | ✅ agrees |
| blocks `(pillar,domain,block)` | `len(set(...))` | **4,464** | ✅ agrees |
| domains `(pillar,domain)` | `len(set(...))` | **1,017** | ✅ agrees |
| pillars | `len(set(pillar))` | **72** | ✅ agrees |
| blocks-per-domain | histogram | **{1: 634, 10: 383}** | not published anywhere |
| journal status partition | `Counter` over last-write-wins | 85,041 / 16,608 / 1,000 / 242 / 159 / 150 = **103,200 exactly** | ✅ a true partition |
| belt files on disk | `os.walk build/P47-BLOCKS` | **4,089** | ✅ agrees |
| blocks with **neither** a P47 file **nor** a real P46 slice | node-id join, no shortcuts | **0** | ✅ **the coverage claim is TRUE** |

> The coverage claim `4,464/4,464` is **correct in fact**. Finding 4 shows the gate that "proved" it
> could not have proved it. Both statements are true and both are published.

---

## 1 · TEN FINDINGS

### F1 · 🔴 THE 86,370 IS NOT A DESIGN RULING. IT IS ONE LINE OF TRUNCATION CODE.

The face's central defence of the elite figure is that **86,370 nodes are "never-as-distinct planning
shares BY RULED DESIGN"** (`HONEST-COUNTS.json:21`, `reaudit_round2_floor.json:26`). This bench derived
where that integer comes from.

`framework/p47_belt.py:84` normalises every purpose string:

```python
"purposes": sorted({q["purpose"].split(" - unit")[0].split(" — unit")[0][:120] for q in block})[:6],
```

Run over the whole canon:

| | |
|---|---|
| distinct `(block, purpose)` pairs the canon actually holds | **79,398** ✅ VERIFIED |
| distinct pairs surviving that one `.split(" - unit")[0][:120]` line | **16,830** ✅ VERIFIED |
| **103,200 − 16,830** | **= 86,370** — **exact, to the unit** 📊 CALCULATED |

The "ruled design" and the truncation rule are the **same number**. The design did not decide that
86,370 nodes can never be distinct; a string-truncation in the cutter decided it, and the ruling was
written afterwards to match. **62,568 distinct purpose strings that the canon does carry never reached
any artifact.** This is the single most consequential finding in the round: the ledger's justification
for its own thinness is downstream of the code that produced the thinness.

*Evidence: `cause.py` — canon load, set-difference, printed both totals.*

### F2 · 🔴 `HONEST-COUNTS.json` COMMITS THE EXACT DEFECT IT CONVICTED `artifact_figure.json` OF.

Round 1's ratification convicted the integrator in these words: *"`artifact_figure.json` was written at
15:08:54. `build/P46-ARTIFACTS` was cut at 15:16:37 … obsolete eight minutes after it was written and
no one re-ran it."* (`HONESTY-RATIFICATION.md` §1.1).

| file | `_meta.built` | |
|---|---|---|
| `HONEST-COUNTS.json` — *"the ratified partition, **on the face**"* | **15:30:53** | ✅ VERIFIED |
| the belt's 4,089 files | **15:33:01** | ✅ VERIFIED |

The face therefore still reads **`substantive_built: 2337`**, **`still_to_cut: 2220`**, **`built_pct: 51.3`**
— written **2 minutes 8 seconds before** the belt cut 4,089 artifacts. Every one of those three numbers
is false today, and they sit on the gift's front page. The verdict of Round 1 was passed on an
eight-minute staleness; the honesty ledger's own staleness is now the age of the whole belt.

### F3 · 🔴 THE ANSWER TO Q1: **129 of 4,089 belt files are substantive in truth. 3.2%.**

Fourteen files opened across fourteen pillars and judged one by one; then all 4,089 classified.
A file is judged by whether it delivers *its block's* content or is a well-labelled shim.

| class | files | % |
|---|---:|---:|
| **A · SUBSTANTIVE IN TRUTH** — real embedded rows, payload unique in the whole belt | **129** | **3.2%** |
| **B · TRUE BUT NOT DISTINCT** — real rows, payload byte-identical to ≥1 sibling | 1,308 | 32.0% |
| **C · SHIM** — `sample_rows` is a verbatim copy of the file's own `purposes` field | 1,558 | 38.1% |
| **C · SHIM** — declared-only, zero rows | 1,094 | 26.8% |

**Three sentences carry the belt.** `"JSON+CSV, versioned, citable"`, `"a planted misquote is refused;
joins spot-verified"` and `"a probe the builder never saw, run and recorded"` are each embedded as the
"REAL corpus-derived content" in **1,221 files** — identically, in *Jibril ʿalayhi al-salām in the
Qurʾān*, in *Balāghah semantics*, and in *The grave · Barzakh* alike. The entire belt contains **327
distinct sample-row sentences** and **770 distinct payloads** across 4,089 files.

Named specimens from the fourteen opened (all ✅ VERIFIED, `samp.py`):

| verdict | file | note |
|---|---|---|
| B, 122 twins | `C5/Jibril-…-in-the-Qur-an--Sources-licences.json` | rows = the three generic sentences |
| B, 122 twins | `C6/The-grave-Barzakh--Education-print.json` | same three sentences |
| B, 121 twins | `P14/Narratives-geography--The-hadith-layer.json` | same three sentences |
| C shim | `G05-ILAL-AL-HADITH/D4-The-ilal-education-shuruh-slots--engine.json` | `declared`, zero rows |
| C shim | `G19-DA-WAT-AL-675/D8-The-gates--gates.json` | the single row is the block's own title, `"The gates"` |

Also verified, and to the belt's credit: two lens files of the same domain
(`P34/M6-The-witness-growth-ledger--quran.json` and `--hadith.json`) are byte-identical apart from the
block name and the node range — **829 B vs 831 B** — and *the belt says so in its own `_meta`*. It
never hid the shim; it counted it.

**Per-pillar distinctness is a flat 10.0%** — P31 900 files / 90 payloads, P35 250/25, P33 200/20,
P34 150/15, P36 100/10. The 383 ten-block domains received **one payload stamped ten times.**

### F4 · 🔴 BOTH GATES THAT CERTIFIED THE BELT ARE STRUCTURALLY INCAPABLE OF FAILING (I-2).

**G40 — `framework/g40_substance_gate.py:21-23`:**
```python
    else:
        # covered by a real P46 slice?
        cov += 1  # P46 real slices verified at belt start; absence here means P46-covered
```
A block with **no file anywhere** increments the coverage counter. `red` can only be populated by a
file that exists *and* is below floor. G40's control asserts that an empty `{}` fails `substantive()` —
it tests the **threshold limb**, which was never the limb at risk. It fires on the wrong limb. The
statement *"4,464/4,464 (G40 GREEN, control fired)"* is a **tautology**, not a measurement. I-2: *the
baseline must be independent of the check, or the check cannot fail.*

**The belt's per-cycle audit — `framework/p47_belt.py:98`:**
```python
assert substantive(fp) or "declared" in o["embedded_payload"], fp
```
A declared-only shim satisfies the right disjunct. The published **"21 cycles, 4/4 each"** is 84
assertions none of which could fire.

**And the floor itself cannot bind.** The standard is *"≥200 chars beyond `_meta`"*. The belt's own
scaffold — `unit` + `purposes` + `embedded_payload` — has a **measured minimum of 252 chars**
(min/med/max = 252 / 391 / 32,323). ✅ VERIFIED, `belt.py`. Every file clears the bar **by
construction**. `"below_floor": 0` is not a result.

### F5 · 🔴 MERGE 1 OF THE RATIFIED FIGURE IS A SUBSTRING SWEEP ON NAMES (I-1).

`HONESTY-RATIFICATION.md:152` — *"−335 MERGE 1 panel/seal blocks 407 → 72 pillar records"*.
This bench reproduced the 407 exactly:

```
/panel|seal|review/i  ->  407 = 258 "Panel review & seal" + 143 "panel" + 6 "Page, print & review"
strict panel/seal only ->  401
```
✅ VERIFIED, `fin.py`. **Six `Page, print & review` blocks were swept into a panel/seal merge by the
substring `review`.** They are *page* deliverables of the prophet-profile domains — reader-facing
artifacts, not panel records. I-1: *join on IDs, never on names.*

**Second error, opposite sign:** the merge target of **72** assumes one seal-record per pillar. Only
**65 pillars actually hold a panel/seal block** ✅ VERIFIED. Seven pillar seal-records answer to no
block in the ledger.

The honest merge is **401 → 65 = −336**, not 407 → 72 = −335. The two errors are **+6 and −7 and very
nearly cancel** — which is precisely why neither was caught. The published 4,557 is right to within
one, for two wrong reasons.

### F6 · 🔴 THE FACE'S NODE BLOCK IS HARD-CODED LITERALS, AND THEY HAVE ALREADY DRIFTED.

`framework/p47_wave_a.py:119-120` — the file that *writes* `HONEST-COUNTS.json`:
```python
"nodes": {"total": 103200, "really_built": 27140, "pending_band": [6440, 17216],
          "never_by_machine": 901, "never_as_distinct_planning_shares": 86370, "credit_v1": 247},
```
Not one of these is computed at write time. They are transcribed constants. Two consequences, both live:

1. **`credit_v1: 247` on the face vs `credit-v1: 242` in the journal** — and the commissioner's own
   `reaudit_round2_floor.json:11` also says **242**. ✅ VERIFIED (`Counter` over the journal's
   last-write-wins status map). **The gift's front page is five nodes wrong**, and the machine
   underneath it already knows the right answer.
2. **The published classes are called a partition and are not one.** `_meta.layer` reads *"the ratified
   **partition**, on the face"*. `27,140 + 901 + 86,370 + 247 = 114,658` — an **overflow of 11,458**
   over the 103,200 universe 📊 CALCULATED. A reader who adds the column gets a number larger than the
   whole. The journal's status census *is* a clean partition (85,041 + 16,608 + 1,000 + 242 + 159 + 150
   = 103,200 exactly ✅). The face publishes the one that does not add up and hides the one that does.

### F7 · 🔴 THE BELT BUILT THE **SUPERSEDED** UNIT, AND G40 POLICES THE SUPERSEDED UNIT.

The 2,700 ratified **4,557**. The belt iterates `set((pillar,domain,block))` = **4,464** — the pre-merge,
pre-split canon (`p47_belt.py:17-18`) — and G40 iterates the same 4,464 (`g40_substance_gate.py:11`).
The `−335` merge and the `+416` split, the two adjustments that *make* the figure 4,557, are **not
executed anywhere in the tree**. `artifact_figure.json:75` concedes this in a subordinate clause —
*"published as the residual program, deltas open"* — while the same object's `covered_substantive` field
announces *"4,464/4,464 … block coverage is TOTAL"*. **Total coverage of a unit the panel retired.**

### F8 · 🟠 TEN LIVE BROKEN POINTERS SURVIVE A CLAIM OF "100.00%".

Commit `1c805f3c`: *"pointer sweep 130 stragglers fixed + 155 credit lineages restored → 100.00%"*.
This bench resolved every live pointer in the journal against the filesystem:

| | |
|---|---|
| nodes carrying a pointer (last-write-wins) | 67,100 |
| pointers resolving to a file on disk | 67,090 |
| **broken** | **10** — all ten to `build/P41-COUNCIL/gap_register.json`, which does not exist |

✅ VERIFIED, `n2.py`. These ten are **not** in `DEFECTS.md`'s 84 (that queue is the evidence-string
queue, a different class, and none of its entries is this file). **100.00% is 99.985%**, and the
residue is one missing file that ten nodes point at.

### F9 · 🟠 THE COMMISSIONER'S OWN DEFENCE OF THE ELITE FIGURE IS UNEVIDENCED.

`reaudit_round2_floor.json:26`: *"103,200 files would be ~98,000 stubs"*. That implies ~5% distinct
content. Measured: the canon holds **79,398 distinct `(pillar,domain,block,purpose)` tuples over
103,200 points — 76.9% distinct, 23.1% duplicate** ✅ VERIFIED (and the canon's own `_meta` says 79,398,
so the number was already in the building). The `~98,000` is off by roughly **four-fold** and cites
nothing. **The conclusion is right and the reasoning is wrong**, which is the more dangerous pairing:
103,200 is refused by the *unit law* (a point is a planning share, ~1/100th of a domain — it is not a
thing that can be a file), not by a duplication rate. A defence resting on an invented statistic is one
audit away from collapsing a correct verdict.

### F10 · 🟠 THE BELT RESOLVES PARENT ARTIFACTS BY LOWERCASE BASENAME, FIRST-WALK-WINS.

`p47_belt.py:26-28, 72-74`: a single dict maps **lowercase basename → first path found anywhere in the
tree**, then the parent is chosen by regex-matching a filename out of a free-text evidence string. Any
two files sharing a basename in different directories silently collapse to whichever `os.walk` reached
first, and the embedded "REAL rows" are then drawn from the wrong parent — with `sources_true` naming a
parent the rows did not come from. I-1: *join on IDs, never on names.* Same defect class as F5, in the
data path rather than the arithmetic.
*Hygiene, same file:* lines 30-32 are dead (`for fp in os.listdir(...): pass`; `p46 = {}` never read).

---

## 2 · FRESH HONEST COUNTS, POST-BELT (this bench's own derivation)

Two classes re-derived independently, as instructed; the rest reconciled.

| class | this bench's route | value |
|---|---|---|
| **really-built (nodes)** ⟵ *re-derived* | pointer resolves to a file **on disk** | **67,090** ✅ |
| — of which point at a payload **unique in the belt** | fingerprint count == 1 | **18,820** ✅ |
| — of which point at a **cloned** payload | fingerprint count > 1 | **46,970** ✅ |
| **broken pointers** ⟵ *re-derived* | filesystem check | **10** ✅ |
| pending-machine | journal status | **16,608** ✅ |
| pending-human-or-rights | journal status | **1,000** ✅ |
| reserved-awaiting-acquisition | journal status | **150** ✅ |
| credit-v1 | journal status | **242** ✅ (face says 247 — F6) |
| panel-sealed | journal status | **159** ✅ |
| never-as-distinct | **the truncation rule's output**, 103,200 − 16,830 | **86,370** — see F1 |

**Artifacts, post-belt:** 7,190 files under `build/`; **7,029 clear the threshold (97.8%)**; of the 6,572
JSON files carrying ≥200 chars of payload, **3,495 are identity-stripped clones of another file and
3,077 are genuinely distinct** ✅ VERIFIED (`fin.py`). The honest headline is **3,077 distinct built
artifacts**, not 7,029 — and the face's **2,337** is stale in the *other* direction (F2). Honesty runs
both ways: the correction is **upward** on count and **downward** on distinctness.

---

## 3 · THE ELITE FIGURE

**Is it 103,000 / 103,200?** **No — and this bench states that with proof, not deference.** Not because
of duplication (F9 disposes of that argument), but because of the ledger's own unit law: a point is a
*planning share* of a domain's deliverable, ~1/100th of a domain. 103,200 files would be 103,200
**shares**, and a share is not a thing. The block is the ledger's leaf: `len(set((pillar,domain,block)))
= 4,464` ✅ VERIFIED by this bench's own count.

**Does 4,557 stand?** **Almost — it is wrong by one, and for two reasons that cancel.** The formula,
with this bench's corrections applied:

```
  4,464   blocks in the canon ..................... ✅ VERIFIED (own count)
   −336   MERGE 1 · 401 true panel/seal blocks → 65 pillar seal-records
          (ratified figure used 407→72: it swept in 6 "Page, print & review"
           page-deliverables on a substring, and invented 7 seal-records for
           pillars holding no panel block — F5)      ✅ VERIFIED (own count)
     −2   MERGE 2 · the 2 `reserved` blocks — nothing to deliver .. ✅ VERIFIED
   +416   SPLIT 1 · the 416 one-block `layer` domains each need a
          data record AND a reader page ............ ✅ VERIFIED (own count: exactly 416)
    +14   global infrastructure .................... ⚠️ inherited, not re-verified by this bench
  ─────
  4,556   THE ELITE FIGURE
```

**But the count is not what is missing, and this is the bench's real answer to the owner's question.**
Coverage of the block unit is already **4,464/4,464** and that is true (§0). At 4,556 artifacts the waqf
would be **complete and still not elite**, because **3.2% of what was cut is substantive in truth** (F3).
The elite bar is not a larger integer — it is the same integer under a standard the current one cannot
express:

> **THE ELITE STANDARD.** An artifact is elite when its payload is **unique to its block** — no sibling
> in the tree shares its fingerprint — and its embedded rows are drawn from *its own* corpus parent, not
> from a boilerplate sentence shared with 1,220 other files.

Against that standard the waqf stands at **129 / 4,556 = 2.8%**, not 51.3%, not 100%. That is the honest
answer, and it is the one the owner asked for when he asked whether the number is really 103,000: **the
number was never the problem. 4,556 is the target; 4,427 of them do not yet exist as distinct things.**

---

## 4 · IMPROVEMENT PLAN (12 points)

1. **Re-cut the belt without the truncation.** Delete `.split(" - unit")[0][:120]` from
   `p47_belt.py:84` and carry every one of the block's distinct purposes as rows. This alone converts
   the canon's **79,398** distinct pairs from 16,830 survivors — it is the single highest-yield change
   in the tree, and it retires F1.
2. **Rewrite the 86,370 line on the face.** It must read: *"86,370 = 103,200 − 16,830, the output of the
   belt's purpose-normalisation rule"* — with the code line quoted — or the number must be re-derived
   from a design document that predates the code. A ruling may not be reverse-engineered from its
   implementation.
3. **Fix G40's coverage limb.** Replace `cov += 1` on a missing file with an explicit node-id join
   against the P46 real-slice set (this bench's `rederive.py` does it in nine lines and returns 0
   uncovered — so the gate can be made honest without turning red).
4. **Give G40 a second control that fires on the coverage limb**, not the threshold limb: delete one
   belt file to a temp path, assert G40 goes RED, restore it. A gate with one control on the wrong limb
   is worse than no gate, because it is believed.
5. **Raise the substantive floor above the scaffold.** The measured scaffold minimum is 252 chars; a
   200-char floor cannot bind. Set the floor on **payload beyond the scaffold** — `purposes` +
   `sample_rows` only, excluding `unit` and `_meta` — and publish the new pass rate whatever it is.
6. **Add G41 · THE DISTINCTNESS GATE.** RED if any belt file's payload fingerprint is shared with a
   sibling. Publish the count on the face from day one; it starts at **3,560 RED** and that is the
   honest opening position.
7. **Regenerate `HONEST-COUNTS.json` as the last step of every build, never as a step inside one**, and
   assert `_meta.built >= max(mtime)` of everything it counts. F2 cannot recur under that assertion.
8. **Derive the node block instead of transcribing it.** Replace the literals at
   `p47_wave_a.py:119-120` with a `Counter` over the journal. This closes the 247/242 drift at the root
   rather than patching the digit.
9. **Publish the journal's true partition on the face** (85,041 / 16,608 / 1,000 / 242 / 159 / 150 =
   103,200) and either make the four "reconciled" numbers add to 103,200 or stop calling them a
   partition in `_meta.layer`. A column a reader can add must add up.
10. **Execute the merge and the split, or stop claiming the 4,557 unit.** Right now the belt and G40
    police 4,464 while the face publishes 4,557. Correct MERGE 1 to `401 → 65` first (F5), then run it;
    the figure lands at **4,556**.
11. **Add the tenth broken pointer's file to `DEFECTS.md`** — `build/P41-COUNCIL/gap_register.json`,
    10 nodes — and replace "100.00%" in the sealed record with **99.985%**, with the correction dated.
    A published defect outranks a rounded claim.
12. **Replace basename-joining with node-id joining in the belt's parent resolution** (F10), and delete
    the dead loop at `p47_belt.py:30-32`. Then re-run: any file whose `sources_true` names a parent its
    rows did not come from is a false attribution on a religious gift, and there is no acceptable
    non-zero count of those.

---

R2 MAKE-2 VERDICT: The belt's coverage claim is true and its gates could not have proved it — 4,464/4,464 verified by this bench's own node-id join, while G40 credits missing files as covered and the belt's 200-char floor sits below its own 252-char scaffold; but the round's finding is that only 129 of 4,089 belt files (3.2%) are substantive in truth, that the 86,370 "never-as-distinct by ruled design" is arithmetically identical to 103,200 minus the output of one truncation line in `p47_belt.py:84`, that the honesty ledger on the face went stale 2 minutes 8 seconds before the belt it reports, and that the ratified 4,557 is wrong by one through a substring name-sweep of +6 and seven invented seal-records of −7 that very nearly cancelled.

ELITE FIGURE: 4556

IMPROVEMENT POINTS: 12
