Independent select hook repair acceptance — 2026-10-24

PASS, offline semantic acceptance. Candidate f0facf0a89c17dc877894a6d76181bf40ab1a409, exact candidate tree c4b13ad50acec187e9d2cf69fc14a9ebfde4a1e7, is accepted unchanged. Conditional integration includes the original diagnostic, retained rejection, repair and this independent evidence. The actual fresh remote main, exact merged/tested tree, merge commit, push and verified remote refs are recorded in /tmp/maelstrom-select-hook-oracle-independent-integrate-oct24/ops/publication.json.

Private WeakMap capture identity prevents caller records, proxies, revoked records, copies and inherited objects from supplying values. Frozen retained state drives validation/classification. Inspection-record descriptors are checked without executing getters. Invalid acceptance closes that oracle; capture failures poison the source and preserve arbitrary thrown values. Serial freshness, single use, source leases, reentry and counter/cap checks prevent replay and resets. Legitimate unpaired terminal captures still work. The evaluator catches only its invocation-private return identity, restores nested frames in finally, and never reads imported exception properties.

createOracle(instance, instance.exports) pins the supplied source object by identity. An object with identical functions is a different source. Owner is only routing: neither this API nor snapshot authenticates a Wasm instance. The host must supply the actual trusted export object and capture synchronously at a safe boundary, with pure diagnostic functions and no intervening execution. Omitted/undefined source selects the documented legacy first-capture binding. This review does not promote synthetic functions/captures to runtime proof.

All six historical fixture paths were independently checked by bytes, SHA-256, historical revision/blob and working-file blob against b41a7c5f4b752d1f0bdab1141a11d4fed4dc6f9a in the canonical standing root. The sparse transitive require closure contains only the hook, model, two suites and fixture plus Node builtins. All 74 candidate-to-main additions (204279 bytes) were inventoried and sealed against the published donor; original implementation, three chronological reports, rejecting controls and inherited evidence were reviewed. Canonical source and accepted observer implementations are unchanged. The transformed WAT fragments remain byte-identical to original candidate 7fd4373a7ecb364b89b843e78c6015e03ef248e6.

Validation under the task guard:

• node test/test-maelstrom-select-completion-hook.cjs HISTORICAL_ROOT: 11 groups and 10 output mutations pass.
• node test/test-maelstrom-select-hook-repair.cjs HISTORICAL_ROOT: 16 groups, 3 oracle mutations and 1 evaluator mutation pass.
• Original independent/evaluator scripts retain their supplied SHA-256 values and exit 1 against their immutable original paths. Minimal path binding changes only the module-root literal: 10 independent controls and evaluator repro pass. Original source controls pass all 5 rejecting mutations and helper checks.
• node ops/unchanged-source.cjs, syntax and whitespace checks pass.
• node ops/boundary.cjs: 8 additional groups pass, using simple synthetic functions independently of the producer evaluator. They cover exact source identity, routing limits, two precreated oracle leases, hostile prototypes and unused getters, same-value accessor rejection, signed results, readonly exports, proxy functions/revoked sources and original exception identity/source poison.

The adjacent evidence directory retains scripts, exact commands/exits, candidate blob identities, resources and configuration receipt. Merged-tree checks and committed blob seals are additionally retained in task ops. Historical baseline failures and their qualifications remain unchanged. No implementation fix was made.

Canonical diagnostic build/native qualification PENDING; runtime gate UNRESOLVED. Source-model success proves no actual runtime completion, API result, gameplay, compilation or real Wasm behavior. No compile, instantiate, native, guest, box operation, download, deployment or worker launch occurred. No box is assigned; box state/expiry are unqueried. Lifecycle/shutdown stay coordinator-owned.

Fresh resource gates precede checkout and publication, charging the full current session/launcher/WAL, positive SQLite growth, checkout/Git/temp/copies/evidence, future publication/transitive objects and an 8 MiB reserve within 64 MiB. Installed tools and dependency-first flattened readonly alternates are standing inputs; no clone/fetch/repack/object-store copies. Earlier SQLite growth before baseline is unknown and all prior receipts/charges remain retained. Trusted SSH is unchanged; no runtime mount argv/files exist. CPU/wall 60 s, heap 256 MiB, output 128 KiB, aggregate captures 2 MiB, per-file 24 MiB and TERM/KILL/reap 5 s apply. Final resource, process-group/watcher cleanup, empty temp and clean-checkout receipts are in task ops. Root tracked/index/refs and donors remain readonly; only the root messageboard and explicitly authorized integration lock are written. Claude idle. Stop after verified publication and handback.