docs/theorem-runtime-manifest.json

{
  "schemaVersion": 2,
  "generatedBy": "anchor-gates-instill-subagent",
  "observedAt": "2026-05-30",
  "canonicalRule": "A theorem claim is active only when its runtime hook and validation command are present in GitHub. Lean proof status is scoped separately from runtime test status.",
  "wiredGateCount": 35,
  "claimedGateCount": 35,
  "gapCount": 0,
  "gapNote": "All 35 anchor formula gates have TypeScript runtime files in packages/policy/src/gates/ (runtime claims are test-backed). Lean proof status is scoped separately: see leanCitationAudit. Per SZL Doctrine v11, gates whose cited leanFile does not exist in szl-holdings/lutar-lean are honestly marked leanStatus=phantom (undisclosed phantom citations were corrected 2026-06-11, Task #695) or, for the 3 open-proof gates, stagedAdvisory=true.",
  "stagedAdvisoryGates": [
    "A7-BekensteinBound",
    "TH4-LambdaCategoryComposability",
    "TH_L3-BekensteinSoundness",
    "LiuHuiPi-axiom"
  ],
  "testValidationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates.test.ts && npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
  "entries": [
    {
      "id": "RUNTIME-FALSE-POSITION",
      "theorem": "Lutar.Calibration.FalsePosition.false_position_correct",
      "formula": "FalsePosition",
      "lineage": "Rhind Mathematical Papyrus problems 24-29 / false position",
      "leanFile": "Lutar/Calibration/FalsePosition.lean",
      "leanStatus": "theorem",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/falsePosition_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Runtime gate is tested; cite Lean proof status separately when making formal claims."
    },
    {
      "id": "RUNTIME-MADHAVA-BOUND",
      "theorem": "Lutar.PACBayes.MadhavaBound.madhavaRemainderBound_nonneg",
      "formula": "MadhavaBound",
      "lineage": "Madhava / Kerala school arctangent series",
      "leanFile": "Lutar/PACBayes/MadhavaBound.lean",
      "leanStatus": "theorem-with-tracked-sorries",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/madhavaBound_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Full arctangent specialization still has tracked Lean sorries; runtime enforces numeric remainder threshold."
    },
    {
      "id": "RUNTIME-LIU-HUI-PI",
      "theorem": "Lutar.Banach.LiuHuiPi.sideSquared_bounds",
      "formula": "LiuHuiPi",
      "lineage": "Liu Hui polygon-doubling \u03c0 approximation",
      "leanFile": "Lutar/Banach/LiuHuiPi.lean",
      "leanStatus": "axiom-advisory",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/liuHuiPi_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": true,
      "caveat": "Convergence is axiom/tracked in Lean; runtime enforces approximation threshold. STAGED-ADVISORY by design."
    },
    {
      "id": "RUNTIME-ADVERSARIAL-ROBUSTNESS",
      "theorem": "Lutar.Composition.Robustness.robustness_preserved_by_composition",
      "formula": "AdversarialRobustness",
      "lineage": "Banach/Lipschitz robustness specialization",
      "leanFile": "Lutar/Composition/AdversarialRobustness.lean",
      "leanStatus": "theorem",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/adversarialRobustness_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Numeric gate is the Lipschitz special case, not the full abstract metric theorem."
    },
    {
      "id": "RUNTIME-SUMMATION-INVARIANT",
      "theorem": "Lutar.Khipu.SummationInvariant.khipuReceipt_checksum_invariant",
      "formula": "SummationInvariant",
      "lineage": "Inka khipu summation-cord accounting",
      "leanFile": "Lutar/Khipu/SummationInvariant.lean",
      "leanStatus": "theorem",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/summationInvariant_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Runtime checks additive receipt invariants."
    },
    {
      "id": "RUNTIME-PARETO-STABILIZATION",
      "theorem": "Lutar.Thesis.ParetoStabilization.th_v18_11_pareto_stabilization",
      "formula": "ParetoStabilization",
      "lineage": "Lynch 1996 Distributed Algorithms Ch.8; finite discrete Pareto frontier",
      "leanFile": "Lutar/Thesis/TH_V18_11_ParetoFiniteStabilization.lean",
      "leanStatus": "theorem",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/pareto_stabilization.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Pareto stabilization enforced in finite rounds; runtime iterates up to maxRounds."
    },
    {
      "id": "RUNTIME-A1-SOUNDNESS-AXIOM",
      "theorem": "soundnessAxiom",
      "formula": "SoundnessAxiom",
      "lineage": "SZL Doctrine v6 A1: conjunctive Lambda floor >=0.90",
      "leanFile": "Lutar/Gate/SoundnessAxiom.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/soundnessAxiom_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Enforces conjunctive 9-axis Lambda floor; no open sorries in gate Lean file."
    },
    {
      "id": "RUNTIME-A2-MORAL-GROUNDING-FLOOR",
      "theorem": "MoralGroundingTheorem",
      "formula": "MoralGroundingFloor",
      "lineage": "SZL Doctrine v6 A2: moral grounding >= 0.95 with ORCID requirement",
      "leanFile": "Lutar/DoctrineV3/MoralGrounding.lean",
      "leanStatus": "theorem",
      "runtimeFile": "packages/policy/src/gates/moralGroundingFloor_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/MoralGrounding.lean to the real kernel-checked theorem MoralGroundingTheorem (with corollary P_moral_iff_conjunction) in Lutar/DoctrineV3/MoralGrounding.lean (zero sorry, zero axiom). The Lean proof establishes the structural core: the moral-safety predicate P_moral decomposes into a finite six-category harm conjunction provable by exhaustive case analysis (Doctrine V3 Section 6). The 0.95 numeric floor and ORCID requirement are the runtime predicate (tested separately); they are not encoded in Lean because they require a probability-space axiom, as disclosed in the Lean file (Section 6.4).",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac"
    },
    {
      "id": "RUNTIME-A3-MEASURABILITY-HONESTY-FLOOR",
      "theorem": "MeasurabilityHonestyTheorem",
      "formula": "MeasurabilityHonestyFloor",
      "lineage": "SZL Doctrine v6 A3: honesty floor with unsupported-claim penalty",
      "leanFile": "Lutar/DoctrineV3/MeasurabilityHonesty.lean",
      "leanStatus": "theorem",
      "runtimeFile": "packages/policy/src/gates/measurabilityHonestyFloor_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/MeasurabilityHonesty.lean to the real kernel-checked theorem MeasurabilityHonestyTheorem (with corollary ReceiptSlot.verified_ne_markedUnverifiable) in Lutar/DoctrineV3/MeasurabilityHonesty.lean (zero sorry, zero axiom). The Lean proof establishes the exhaustive, mutually-exclusive partition {Verified, MarkedUnverifiable} of every receipt slot (Doctrine V3 Section 7). The numeric honesty floor and unsupported-claim penalty are the runtime predicate, tested separately.",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac"
    },
    {
      "id": "RUNTIME-A4-DUAL-WITNESS-DISJOINTNESS",
      "theorem": "dualWitnessDisjointness",
      "formula": "DualWitnessDisjointness",
      "lineage": "SZL Doctrine v6 A4: two witnesses must be distinct identities",
      "leanFile": "Lutar/Gate/DualWitness.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/dualWitnessDisjointness_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Identity disjointness checked by string comparison of witness IDs."
    },
    {
      "id": "RUNTIME-A5-DETERMINISTIC-REPLAY",
      "theorem": "deterministicReplay",
      "formula": "DeterministicReplay",
      "lineage": "SZL Doctrine v6 A5: N replay runs must produce identical root hashes",
      "leanFile": "Lutar/Gate/DeterministicReplay.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/deterministicReplay_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Replay determinism enforced over configurable number of runs."
    },
    {
      "id": "RUNTIME-A6-HASH-CHAIN-INTEGRITY",
      "theorem": "th_v18_14c_hash_audit_integrity",
      "formula": "HashChainIntegrity",
      "lineage": "SZL Doctrine v6 A6: SHA-256 hash chain over receipt sequence",
      "leanFile": "Lutar/Thesis/TH_V18_14_SHA256CollisionHonest.lean",
      "leanStatus": "axiom-advisory",
      "runtimeFile": "packages/policy/src/gates/hashChainIntegrity_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/HashChainIntegrity.lean to the real theorem th_v18_14c_hash_audit_integrity (with th_v18_14a/b/d) in Lutar/Thesis/TH_V18_14_SHA256CollisionHonest.lean. AXIOM-ADVISORY: the audit-integrity and injectivity theorems are conditioned on the honest open axiom A15 (sha256_collision_resistant), which cannot be discharged in Lean 4 without a P != NP / computational-hardness assumption (NIST FIPS 180-4). A15 is disclosed in-file as an OPEN PROBLEM per Lean Czar B2 discipline; the structural tamper-detection proof is otherwise sorry-free.",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac"
    },
    {
      "id": "STAGED-A7-BEKENSTEIN-BOUND",
      "theorem": "bekensteinBound",
      "formula": "BekensteinBound",
      "lineage": "Bekenstein 1981 PRL47 information bound; TH6 DPI formally discharges",
      "leanFile": "Lutar/Gate/BekensteinBound.lean",
      "leanStatus": "conjectured",
      "runtimeFile": "packages/policy/src/gates/bekensteinBound_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "staged-advisory",
      "stagedAdvisory": true,
      "caveat": "STAGED-ADVISORY. Lean proof pending; gate defaults to enforced:false, severity:warning."
    },
    {
      "id": "RUNTIME-A8-INGEST-DISCIPLINE",
      "theorem": "ingestDiscipline",
      "formula": "IngestDiscipline",
      "lineage": "SZL Doctrine v6 A8: bounded ingest queue with epoch timestamps",
      "leanFile": "Lutar/Gate/IngestDiscipline.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/ingestDiscipline_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Ingest queue depth and epoch freshness enforced at gate boundary."
    },
    {
      "id": "RUNTIME-A9-DOCTRINE-COMPLETENESS",
      "theorem": "doctrineCompleteness",
      "formula": "DoctrineCompleteness",
      "lineage": "SZL Doctrine v6 A9: all required doctrine clauses present in receipt",
      "leanFile": "Lutar/Gate/DoctrineCompleteness.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/doctrineCompleteness_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Checks presence of all required doctrine clause fields; no content validation."
    },
    {
      "id": "RUNTIME-A10-TEMPORAL-CONSISTENCY",
      "theorem": "temporalConsistency",
      "formula": "TemporalConsistency",
      "lineage": "SZL Doctrine v6 A10: receipt timestamps must be causally ordered",
      "leanFile": "Lutar/Gate/TemporalConsistency.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/temporalConsistency_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Causal ordering enforced over receipt timestamp sequence."
    },
    {
      "id": "RUNTIME-A11-CAUSAL-SEPARABILITY",
      "theorem": "causalSeparability",
      "formula": "CausalSeparability",
      "lineage": "SZL Doctrine v6 A11: decisions may not carry unexplained causal loops",
      "leanFile": "Lutar/Gate/CausalSeparability.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/causalSeparability_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Causal loop detection is structural (DAG check), not semantic."
    },
    {
      "id": "RUNTIME-A12-CONSTRUCTIVE-TRANSPARENCY",
      "theorem": "constructiveTransparency",
      "formula": "ConstructiveTransparency",
      "lineage": "SZL Doctrine v6 A12: every decision must cite a constructive evidence chain",
      "leanFile": "Lutar/Gate/ConstructiveTransparency.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/constructiveTransparency_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Evidence chain field presence checked; content provenance is a separate concern."
    },
    {
      "id": "RUNTIME-A14-ECONOMIC-GROUNDING",
      "theorem": "economicGrounding",
      "formula": "EconomicGrounding",
      "lineage": "SZL Doctrine v6 A14: decision must have an economic cost receipt above floor",
      "leanFile": "Lutar/Gate/EconomicGrounding.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/economicGrounding_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Economic cost floor enforced; currency normalization is caller responsibility."
    },
    {
      "id": "RUNTIME-T1-RHO-CLOSURE-COMPOSITION",
      "theorem": "rhoClosureComposition",
      "formula": "RhoClosureComposition",
      "lineage": "Category-theoretic rho-closure: composed organs inherit closure property",
      "leanFile": "Lutar/Gate/RhoClosureComposition.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/rhoClosureComposition_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Closure composition checked over finite organ list."
    },
    {
      "id": "RUNTIME-T2-LAMBDA-MONOTONICITY",
      "theorem": "th_v18_01_lambda_monotone",
      "formula": "LambdaMonotonicity",
      "lineage": "Lutar/Thesis/TH_V18_01_LambdaMonotonicity.lean; Lambda monotone in each argument",
      "leanFile": "Lutar/Thesis/TH_V18_01_LambdaMonotonicity.lean",
      "leanStatus": "theorem",
      "runtimeFile": "packages/policy/src/gates/lambdaMonotonicity_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/LambdaMonotonicity.lean to the real kernel-checked theorem th_v18_01_lambda_monotone in Lutar/Thesis/TH_V18_01_LambdaMonotonicity.lean (fully proved, axioms: none). It proves that Lambda k is monotone in each argument (axis-wise x <= y implies Lambda k x <= Lambda k y) via Lutar.lambda_isMonotone.",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac"
    },
    {
      "id": "RUNTIME-T3-MERKLE-DAG-BATCH",
      "theorem": "merkleDagBatch",
      "formula": "MerkleDagBatch",
      "lineage": "Merkle/SCITT receipt DAG: acyclic batch hash chain",
      "leanFile": "Lutar/Gate/MerkleDagBatch.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/merkleDagBatch_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: DAG acyclicity checked; full Merkle proof path verification is separate."
    },
    {
      "id": "RUNTIME-T4-BEKENSTEIN-ENTROPY-MEASURE",
      "theorem": "Lutar.DPI.dpi_bound_monotone",
      "formula": "BekensteinEntropyMeasure",
      "lineage": "Elementary DPI byte-count bound (Cover-Thomas, Elements of Information Theory 2006, sec 2.8.1): chain entropy <= 8*sizeBytes; the bound's positivity and monotonicity are the proven theorem TH6 (Lutar/DPI/DPIBound.lean). NOT the physical Bekenstein entropy-area proportionality, which has no SZL counterpart (F1-4 errata).",
      "leanFile": "Lutar/DPI/DPIBound.lean",
      "leanStatus": "theorem",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/bekensteinEntropyMeasure_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Runtime numeric predicate is independently testable; the byte bound dpiEntropyBound r = sizeBytes * 8 is kernel-checked (zero sorry) as theorem TH6 in Lutar/DPI/DPIBound.lean (dpi_bound_positive, dpi_bound_monotone). The prior phantom citation Lutar/Gate/BekensteinEntropyMeasure.lean never existed in lutar-lean and has been removed."
    },
    {
      "id": "RUNTIME-T5-REPLAY-DETERMINISM",
      "theorem": "replayDeterminism",
      "formula": "ReplayDeterminism",
      "lineage": "K10v2 PRNG replay: deterministic root produces identical receipt stream",
      "leanFile": "Lutar/Gate/ReplayDeterminism.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/replayDeterminism_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Replay hash comparison; PRNG seed handling is caller responsibility."
    },
    {
      "id": "RUNTIME-T6-CONJUNCTIVE-GATE-COUNTEREXAMPLE",
      "theorem": "conjunctiveGateCounterexample",
      "formula": "ConjunctiveGateCounterexample",
      "lineage": "Logical gate composition: counterexample witness for non-trivial conjunctive failure",
      "leanFile": "Lutar/Gate/ConjunctiveGate.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/conjunctiveGateCounterexample_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Counterexample witnesses are logged to receipt for audit."
    },
    {
      "id": "RUNTIME-T7-PRIVACY-MASK",
      "theorem": "scitt_mask_entropy_bound",
      "formula": "PrivacyMask",
      "lineage": "Lutar/DPI/SCITTMaskEntropy.lean: DPI H(mask(X)) <= H(X)",
      "leanFile": "Lutar/DPI/SCITTMaskEntropy.lean",
      "leanStatus": "theorem",
      "runtimeFile": "packages/policy/src/gates/privacyMask_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/PrivacyMask.lean to the real kernel-checked theorem scitt_mask_entropy_bound (with mask_refinement_entropy_mono, full_mask_zero_entropy, scitt_mask_preserves_hash) in Lutar/DPI/SCITTMaskEntropy.lean (axiom-free, zero sorry). It proves the DPI privacy property H(mask(X)) <= H(X) (Cover-Thomas 2006 Section 2.8) for the SCITT mask kernel.",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac"
    },
    {
      "id": "RUNTIME-T8-SINGLE-WITNESS-EXCLUSION",
      "theorem": "two_witness_KS18_soundness",
      "formula": "SingleWitnessExclusion",
      "lineage": "SZL Doctrine v6 T8: single witness insufficient for high-stakes decisions",
      "leanFile": "Lutar/TwoWitness.lean",
      "leanStatus": "theorem-with-tracked-sorries",
      "runtimeFile": "packages/policy/src/gates/singleWitnessExclusion_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/SingleWitnessExclusion.lean to Lutar/TwoWitness.lean, the KS-18 two-witness contextuality model used by a11oy-ks18-witness.ts. The soundness half two_witness_KS18_soundness (a consistent witness reports zero inconsistencies and flags CLASSICAL) is fully proved (zero sorry). THEOREM-WITH-TRACKED-SORRIES: the completeness half no_NCHV (no single non-contextual hidden-variable witness exists, the formal ground for 'single witness insufficient') depends on double_count, whose Cabello double-counting identity is left as one tracked sorry (2^18 decide enumeration, obligation documented in-file).",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac"
    },
    {
      "id": "RUNTIME-T9-CROSS-REGION-POLICY",
      "theorem": "crossRegionPolicy",
      "formula": "CrossRegionPolicy",
      "lineage": "SZL Doctrine v6 T9: decisions spanning regions require multi-region receipts",
      "leanFile": "Lutar/Gate/CrossRegionPolicy.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/crossRegionPolicy_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Region tags checked for coverage; actual data residency is a separate enforcement."
    },
    {
      "id": "RUNTIME-T10-DOCTRINE-ENFORCEMENT",
      "theorem": "doctrineEnforcement",
      "formula": "DoctrineEnforcement",
      "lineage": "SZL Doctrine v6 T10: enforcement clauses must be flagged and receipt-anchored",
      "leanFile": "Lutar/Gate/DoctrineEnforcement.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/doctrineEnforcement_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Enforcement clause flags checked; content of flags is caller responsibility."
    },
    {
      "id": "RUNTIME-TH1-COMPOSABILITY",
      "theorem": "composition_overhead_bound",
      "formula": "Composability",
      "lineage": "Lutar/Composition/CompositionOverhead.lean: linear overhead bound for N composed systems",
      "leanFile": "Lutar/Composition/CompositionOverhead.lean",
      "leanStatus": "theorem",
      "runtimeFile": "packages/policy/src/gates/composability_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/Composability.lean to the real kernel-checked theorem composition_overhead_bound (with totalOverhead_le_len_mul_max, totalOverhead_append) in Lutar/Composition/CompositionOverhead.lean (no axiom, no sorry). It proves the linear overhead bound totalOverhead systems <= systems.length * C for N composed cost systems. The strict-bound improvement is tracked separately (composition_overhead_strict_bound_tracked, an explicit obligation marker, not a claimed result).",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac"
    },
    {
      "id": "RUNTIME-TH2-REPLAY-DOI-DUALITY",
      "theorem": "replayDoiDuality",
      "formula": "ReplayDoiDuality",
      "lineage": "SZL Doctrine v6 TH2: DOI citation and replay root must be paired",
      "leanFile": "Lutar/Gate/ReplayDoiDuality.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/replayDoiDuality_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: DOI format and replay root presence checked; DOI resolution is not performed at gate time."
    },
    {
      "id": "RUNTIME-TH3-ANATOMY-REDUCTION",
      "theorem": "anatomyReduction",
      "formula": "AnatomyReduction",
      "lineage": "SZL Doctrine v6 TH3: 7-layer anatomy reduces to verifiable receipt chain",
      "leanFile": "Lutar/Gate/AnatomyReduction.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/anatomyReduction_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Layer coverage checked; layer content validation is a separate concern."
    },
    {
      "id": "STAGED-TH4-LAMBDA-CATEGORY-COMPOSABILITY",
      "theorem": "lambdaCategoryComposability",
      "formula": "LambdaCategoryComposability",
      "lineage": "Pending Lutar/LaxFunctor.lean; lax functor property for Lambda over organ category",
      "leanFile": "Lutar/Gate/LambdaCategoryComposability.lean",
      "leanStatus": "conjectured",
      "runtimeFile": "packages/policy/src/gates/lambdaCategoryComposability_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "staged-advisory",
      "stagedAdvisory": true,
      "caveat": "STAGED-ADVISORY. Pending LaxFunctor.lean formalization. Gate defaults to enforced:false."
    },
    {
      "id": "RUNTIME-TH5-RECEIPT-CHAIN-CONFLUENCE",
      "theorem": "receiptChainConfluence",
      "formula": "ReceiptChainConfluence",
      "lineage": "Church-Rosser confluence: concurrent receipt chains reduce to same root",
      "leanFile": "Lutar/Gate/ReceiptChainConfluence.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/receiptChainConfluence_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Confluence enforced by deterministic hash ordering; formal confluence proof is the backing."
    },
    {
      "id": "RUNTIME-TH6-BEKENSTEIN-ENTROPY-DPI",
      "theorem": "bekensteinEntropyDpi",
      "formula": "BekensteinEntropyDpi",
      "lineage": "Cover-Thomas DPI: I(X;Z) <= I(X;Y); entropy non-increasing through masking",
      "leanFile": "Lutar/DPI/DPIBound.lean",
      "leanStatus": "theorem",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/bekensteinEntropyDpi_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Numeric DPI monotonicity enforced over discrete label distributions."
    },
    {
      "id": "RUNTIME-TH7-CURRY-HOWARD-RECEIPT-CALCULUS",
      "theorem": "curryHowardReceiptCalculus",
      "formula": "CurryHowardReceiptCalculus",
      "lineage": "Curry-Howard: receipt terms are proofs; proof terms are programs",
      "leanFile": "Lutar/Gate/CurryHowardReceiptCalculus.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/curryHowardReceiptCalculus_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Receipt term structure checked; full type-theoretic correspondence is lineage."
    },
    {
      "id": "CONJECTURE-THL1-LAMBDA-UNIQUENESS",
      "theorem": "lambdaUniquenessConjecture",
      "formula": "LambdaUniquenessConjecture",
      "lineage": "Lutar/Thesis/TH_V18_12 Lambda uniqueness: only one Lambda satisfies A1-A4",
      "leanFile": "Lutar/Uniqueness.lean",
      "leanStatus": "conjecture-open",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/lambdaUniquenessConjecture_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": true,
      "caveat": "CONJECTURE \u2014 NOT a theorem. \u039b uniqueness is Conjecture 1 per Doctrine v11. Gate validates scoring consistency; formal uniqueness is unproven. Gate file renamed to lambdaUniquenessConjecture_gate.ts.",
      "status": "CONJECTURE",
      "proven": false,
      "lambda_statement": "Conjecture 1 (NOT a theorem \u2014 LOCKED by Doctrine v11)"
    },
    {
      "id": "RUNTIME-THL2-LAMBDA-MINMAX-BOUNDS",
      "theorem": "lambdaMinMaxBounds",
      "formula": "LambdaMinMaxBounds",
      "lineage": "Lambda min/max bounds: floor <= Lambda(v) <= ceil for all valid v",
      "leanFile": "Lutar/Bound.lean",
      "leanStatus": "theorem",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": "packages/policy/src/gates/lambdaMinMaxBounds_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Repointed from the phantom path Lutar/Gate/LambdaMinMaxBounds.lean to the real kernel-checked theorem lambdaMinMaxBounds in Lutar/Bound.lean (lean_status=real in gates_manifest.json). Gate Lean file has 0 sorries; 2 sorries exist elsewhere in lutar-lean (not in this gate's proof)."
    },
    {
      "id": "STAGED-THL3-BEKENSTEIN-SOUNDNESS",
      "theorem": "bekensteinSoundness",
      "formula": "BekensteinSoundness",
      "lineage": "Measured: 49.5% fire rate under uniform seed (ouroboros v6.3.0, n=8000); formal proof pending lutar-lean PR #12",
      "leanFile": "Lutar/BekensteinSoundness.lean",
      "leanStatus": "measured-conjectured-pending-PR12",
      "runtimeFile": "packages/policy/src/gates/bekensteinSoundness_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "staged-advisory",
      "stagedAdvisory": true,
      "caveat": "STAGED-ADVISORY. Lean formal proof pending lutar-lean PR #12. Gate defaults to enforced:false."
    },
    {
      "id": "RUNTIME-THL4-RHO-CLOSURE-PRODUCTION",
      "theorem": "rhoClosureProduction",
      "formula": "RhoClosureProduction",
      "lineage": "Measured: 100% rho-closure rate over 8000 ouroboros v6.3.0 production calls",
      "leanFile": "Lutar/Gate/RhoClosureProduction.lean",
      "leanStatus": "phantom",
      "runtimeFile": "packages/policy/src/gates/rhoClosureProduction_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "validationCommand": "npx tsx packages/policy/src/gates/__tests__/policy_gates_extended.test.ts",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "PHANTOM CITATION: this leanFile does NOT exist in szl-holdings/lutar-lean (audited against main, 2026-06-11); the runtime gate is tested but the Lean proof is NOT machine-checked. Disclosed per SZL Doctrine v11 (honesty over checklist). Original note: Empirically measured 100% closure; gate enforces minimum closure rate."
    },
    {
      "id": "RUNTIME-THRESHOLD-POLICY-SEVERITY",
      "theorem": "IQ-01 severity-indexed witness threshold gate",
      "formula": "ThresholdPolicySeverity",
      "lineage": "2-of-N / 3-of-N witness threshold invariant from cross-corpus doctrine synthesis",
      "leanFile": null,
      "runtimeFile": "packages/policy/src/gates/thresholdPolicySeverity_gate.ts",
      "exportFile": "packages/policy/src/gates/index.ts",
      "testFile": "packages/policy/src/gates/__tests__/policy_gates.test.ts",
      "validationCommand": "npm run test:policy-gates",
      "claimStatus": "verified-runtime",
      "caveat": "TypeScript runtime gate is tested and emits a DSSE-shaped HMAC receipt on allow; Lean formalization is not claimed."
    },
    {
      "id": "RUNTIME-QEC-LINEAGE",
      "theorem": "Lutar.QEC.HammingFoundations / Shor / CSS / Kitaev runtime parity",
      "formula": "QECLineage",
      "lineage": "Hamming, Shor, CSS, Kitaev, Preskill QEC lineage",
      "leanFile": "Lutar/QEC/*",
      "leanStatus": "mixed-green-red",
      "runtimeFile": "packages/qec-integrity/src/qec_lineage.ts",
      "exportFile": "packages/qec-integrity/src/index.ts",
      "testFile": "packages/qec-integrity/src/qec_lineage.test.ts",
      "validationCommand": "npm run test:qec",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Runtime parity tests are real; do not claim full quantum threshold theorem. Kitaev/CSS Lean files fail lake build."
    },
    {
      "id": "RUNTIME-RECEIPT-SUBSTRATE",
      "theorem": "Operational receipt hash-chain integrity",
      "formula": "ReceiptSubstrate",
      "lineage": "Merkle/SCITT/DSSE-style receipt discipline",
      "leanFile": "Lutar/DPI/* and Lutar/SBOMProvenance.lean",
      "leanStatus": "theorem",
      "runtimeFile": "packages/receipt-substrate/src/index.ts",
      "exportFile": "packages/receipt-substrate/src/index.ts",
      "testFile": "packages/receipt-substrate/src/receipt_substrate.test.ts",
      "validationCommand": "npm test --prefix packages/receipt-substrate",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Local quorum labels are not external cryptographic signer verification."
    },
    {
      "id": "RUNTIME-KNOWLEDGE-THEOREMS",
      "theorem": "TH1-TH7 theorem lookup",
      "formula": "KnowledgeGraph",
      "lineage": "Ouroboros thesis theorem catalog",
      "leanFile": "packages/a11oy-knowledge/src/theorems.ts",
      "leanStatus": "theorem",
      "runtimeFile": "packages/a11oy-knowledge/src/theorems.ts",
      "exportFile": "packages/a11oy-knowledge/src/index.ts",
      "testFile": "packages/a11oy-knowledge/src/theorems_lookup.test.ts",
      "validationCommand": "npm run test:knowledge:lookup",
      "claimStatus": "verified-runtime",
      "stagedAdvisory": false,
      "caveat": "Lookup reachability is runtime-verified; proof status remains per theorem."
    },
    {
      "id": "STAGED-WHEELER-WINDOW",
      "theorem": "Lutar.Wheeler.DelayedChoiceClosure",
      "formula": "DelayedChoiceClosure",
      "lineage": "Wheeler delayed-choice receipt closure",
      "leanFile": "Lutar/Wheeler/DelayedChoiceClosure.lean",
      "leanStatus": "lean-backed",
      "leanCommit": "b675cd84caa17080671570c153484c817f8769ac",
      "runtimeFile": null,
      "exportFile": null,
      "testFile": null,
      "validationCommand": null,
      "claimStatus": "lean-backed-needs-runtime",
      "stagedAdvisory": true,
      "caveat": "Proof substrate exists; no A11oy TypeScript runtime gate wired yet. Not counted in the 35 anchor gates."
    },
    {
      "id": "STAGED-FEYNMAN-KNOT",
      "theorem": "Lutar.Feynman.PathIntegralAuditSum / Lutar.Feynman.FeynmanLineage",
      "formula": "AuditReidemeister",
      "lineage": "Feynman, Witten, Bar-Natan, Reidemeister, audit-knot calculus",
      "leanFile": "Lutar/Feynman/* and Lutar/Knot/*",
      "leanStatus": "conjectured",
      "runtimeFile": null,
      "exportFile": null,
      "testFile": null,
      "validationCommand": null,
      "claimStatus": "historical-roadmap",
      "stagedAdvisory": true,
      "caveat": "Citation lineage is real; audit-Reidemeister invariance remains conjectural/tracked. Not counted in the 35 anchor gates."
    }
  ],
  "leanCitationAudit": {
    "auditedAgainst": "szl-holdings/lutar-lean main",
    "auditedAt": "2026-06-14",
    "task": "#938 (follow-up to #695)",
    "rule": "A leanFile is honest only when it (a) resolves to a real file in lutar-lean, or (b) is explicitly marked leanStatus=phantom / stagedAdvisory=true.",
    "verifiedExisting": 10,
    "repointedToRealProof": 8,
    "relabeledPhantom": 20,
    "stagedAdvisory": 3,
    "nonLeanOrGlob": 5,
    "commitPin": "b675cd84caa17080671570c153484c817f8769ac",
    "commitPinNote": "Resolvable real-proof entries (leanStatus theorem / theorem-with-tracked-sorries / axiom-advisory / conjecture-open / lean-backed) are now commit-pinned to lutar-lean and are hard-fail-eligible in scripts/check_lean_citations.py, matching gates_manifest.json rigor. Honestly-disclosed non-proof entries (phantom / conjectured / staged-advisory / measured-*) carry no pin and remain report-only.",
    "repointNote": "Task #938: triaged the 27 phantom entries against szl-holdings/lutar-lean main. 7 genuinely corresponded to real proofs and were repointed from the nonexistent Lutar/Gate/* (singular) paths to real declarations: A2 MoralGroundingTheorem, A3 MeasurabilityHonestyTheorem, A6 th_v18_14c_hash_audit_integrity (axiom-advisory, open axiom A15), T2 th_v18_01_lambda_monotone, T7 scitt_mask_entropy_bound, TH1 composition_overhead_bound, T8 two_witness_KS18_soundness (theorem-with-tracked-sorries). The remaining 20 stay honestly leanStatus=phantom: their claims have no real Lean proof (incl. T3 MerkleDAGBuild whose merkle_dag_height_bound only proves a Prop:=True tracked placeholder, and A5/T5 replay determinism which rests entirely on a sorry)."
  }
}