pen-stack 5.12.0__tar.gz → 6.0.0__tar.gz

{pen_stack-5.12.0 → pen_stack-6.0.0}/CHANGELOG.md

@@ -3,6 +3,56 @@
 All notable changes to PEN-STACK are documented here. This file follows
 [Keep a Changelog](https://keepachangelog.com/) and the program's phase structure.
 
+## [6.0.0] - 2026-06-11 - 1.0 — First Stable (the graduation)
+
+**The Closed-Loop arc is complete (7/7), and PEN-STACK graduates to "1.0 — First Stable."** The public API
+exercised across every surface — verify, safety, generative design, twin, experiment design, build interface,
+closed loop, co-scientist, and the Genome-Writing Challenge — is documented and **frozen** with a deprecation
+policy. "First Stable" is **earned, not declared**: it is cut only after the closed loop is demonstrated (v5.12),
+the benchmark is public (v5.13), and the integration surface ships.
+
+### Changed
+- **`Development Status :: 5 - Production/Stable`** (was Beta). Version **6.0.0** (MAJOR).
+- The public API is documented + frozen with a deprecation policy: **`docs/STABILITY.md`** (semver from 6.0.0;
+  deprecations warn ≥1 MINOR before removal in a MAJOR; the `OracleResult`/`Verdict`/`SafetyVerdict`/immune-profile
+  contracts and invariants — incl. `collapsed_score is None` and the no-fabrication guard — are stable across 6.x).
+- The Genome-Writing Challenge is **public**.
+
+### Notes
+- "1.0 — First Stable" is a commitment to **API stability**, **not** a claim of solving genetic engineering. The
+  unknown funnel remains — made legible (scope flags, known-unknowns, honest baselines, no fabrication), not
+  hidden. The high version numbers of the program's fast youth finally meet a real stability commitment.
+
+## [5.13.0] - 2026-06-11 - v5.13 release: The Standard (Genome-Writing Challenge + Co-Scientist II)
+
+**Closed-Loop arc, Cycle 7 of 7.** Make PEN-STACK the field's reference — an open, recurring, held-out benchmark
+others build to — and give scientists a co-scientist that drives the whole loop with immune-risk first-class.
+Workstreams WS-{CHALLENGE,COSCI2,ADOPT}, SHA-locked. (The v6.0.0 "1.0 — First Stable" graduation follows.)
+
+### Added
+- **WS-CHALLENGE** — `benchmarks/genome_writing_challenge/`: the **Genome-Writing Challenge** — an open,
+  recurring, **held-out** leaderboard (the CASP / Virtual-Cell-Challenge model). `evaluate(Submission, round_id)`
+  scores an external `predict_fn(public_input) -> answer` on a held-out round whose labels it never sees; labels
+  are computed by the validated PEN-STACK layers (rules / v5.7 Guardian / v5.6 immune profile) so **no task uses a
+  circular label**; a **no-fabrication** audit runs on every submission; task families include an **immune-risk**
+  task grounded in the v5.6 oracles. One-command runner (`run.py`); a reference submission anchors the leaderboard.
+- **WS-COSCI2** — `pen_stack/agent/co_scientist.py::co_scientist_session(goal, cell_state)`: the matured
+  co-scientist **drives the whole loop** — safe + legal + calibrated designs → predicted outcomes → suggested
+  experiments → exportable protocols — returning the Pareto **strategies**, calibrated **predicted_outcomes**,
+  per-axis **immune_profiles (first-class)**, **suggested_experiments**, **citations** (resolve by construction),
+  a complete **scope_ledger**, and the per-design **safety** decision. The scientist/lab decides; the co-scientist
+  drives. No number is fabricated; hazardous candidates are discarded.
+- **WS-ADOPT** — the integration surface: MCP server tools, the Challenge submission API, and a worked reference
+  example (`docs/integrations.md`). The standing adoption criterion (≥1 external integration + ≥1 external
+  submission) depends on outreach — the honest non-code bottleneck flagged since v3.1; the surface is shipped.
+- Docs: `docs/{challenge,co_scientist_loop,integrations}.md`; prereg `ws_{challenge,cosci2}` + SHA locks; deposit
+  `phase_5.13/`.
+
+### Notes
+- A standard requires a community: PEN-STACK provides the open, reproducible, held-out benchmark and the
+  integration surface; adoption depends on outreach. The co-scientist **drives and presents** (incl. the
+  immune-risk profile with its known-unknowns) — the scientist and lab decide.
+
 ## [5.12.0] - 2026-06-11 - v5.12 release: The Closed Loop (autonomy Level 3)
 
 **Closed-Loop arc, Cycle 6 of 7.** Integrate everything into one continual design→build→test→learn cycle —

{pen_stack-5.12.0 → pen_stack-6.0.0}/CITATION.cff

@@ -1,7 +1,7 @@
 cff-version: 1.2.0
 message: "If you use PEN-STACK, please cite it as below."
 title: "PEN-STACK: open infrastructure for genome writing"
-version: 5.12.0
+version: 6.0.0
 date-released: 2026-06-11
 authors:
   - family-names: "Mahaboob Ali"

{pen_stack-5.12.0 → pen_stack-6.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pen-stack
-Version: 5.12.0
+Version: 6.0.0
 Summary: Open infrastructure for genome writing: the Writable Genome atlas, the Writer Atlas, and the Write Planner.
 Author-email: Anees Ahmed Mahaboob Ali <ahmedaneesm@gmail.com>
 License: MIT
@@ -11,7 +11,7 @@ Project-URL: Changelog, https://github.com/ahmedanees-m/pen-stack/blob/main/CHAN
 Project-URL: Issues, https://github.com/ahmedanees-m/pen-stack/issues
 Project-URL: Benchmark, https://github.com/ahmedanees-m/pen-stack/tree/main/benchmarks/genome_writing_bench
 Keywords: genome-writing,genome-editing,bridge-recombinase,safe-harbor,writable-genome,writer-atlas,write-planner,bioinformatics
-Classifier: Development Status :: 4 - Beta
+Classifier: Development Status :: 5 - Production/Stable
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -90,8 +90,9 @@ every design against rule-grounded mechanism, reports calibrated confidence, cit
 [![codecov](https://codecov.io/gh/ahmedanees-m/pen-stack/branch/main/graph/badge.svg)](https://codecov.io/gh/ahmedanees-m/pen-stack)
 [![License: MIT](https://img.shields.io/badge/License-MIT-informational.svg)](LICENSE)
 [![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-blue.svg)](https://www.python.org/)
-[![Version](https://img.shields.io/badge/version-5.12.0-blue.svg)](CHANGELOG.md)
-[![Tests](https://img.shields.io/badge/tests-346%20passing-success.svg)](tests/)
+[![Version](https://img.shields.io/badge/version-6.0.0-blue.svg)](CHANGELOG.md)
+[![Status](https://img.shields.io/badge/status-1.0%20First%20Stable-success.svg)](docs/STABILITY.md)
+[![Tests](https://img.shields.io/badge/tests-354%20passing-success.svg)](tests/)
 [![Lint: ruff](https://img.shields.io/badge/lint-ruff-purple.svg)](https://github.com/astral-sh/ruff)
 [![Runtime: Docker](https://img.shields.io/badge/runtime-docker-2496ED.svg)](docker/)
 [![Validation: pre-registered](https://img.shields.io/badge/validation-pre--registered-critical.svg)](prereg/)
@@ -134,6 +135,37 @@ Two questions gate every genome-writing project, and before PEN-STACK no resourc
 Everything is built on bulk-downloadable public data, runs on a single GPU, and is validated **blind** against
 a pre-registered, honest baseline before release.
 
+## 🎓 v6.0.0 — "1.0 — First Stable"
+
+The **Closed-Loop arc is complete (7/7)** and PEN-STACK has graduated to **1.0 — First Stable**. The public API
+exercised across every surface — `verify`, `safety`, generative `design`, the `twin`, `active` experiment design,
+the `build` interface, the closed `loop`, the `co_scientist`, and the **Genome-Writing Challenge** — is documented
+and **frozen** with a deprecation policy ([`docs/STABILITY.md`](docs/STABILITY.md)). `Development Status ::
+5 - Production/Stable`. "First Stable" is **earned, not declared** — cut only after the closed loop was
+demonstrated (v5.12) and the benchmark went public (v5.13).
+
+> "1.0 — First Stable" is a commitment to **API stability**, not a claim of solving genetic engineering. The
+> unknown funnel remains — made legible (scope flags, known-unknowns, honest baselines, no fabrication), not
+> hidden.
+
+## What is new in v5.13 — The Standard (Genome-Writing Challenge + Co-Scientist II)
+
+v5.13 (**Closed-Loop arc, Cycle 7 of 7**) makes PEN-STACK the field's reference and its most useful face: the
+accumulated bench tasks become the **Genome-Writing Challenge** — an open, recurring, held-out, reproducible
+benchmark others build *to* — while a **co-scientist drives the whole loop** for a working scientist, every output
+safe, legal, calibrated, cited, scope-ledgered, and immune-profiled.
+
+| Workstream | What it adds | Result |
+|---|---|---|
+| **CHALLENGE** | `benchmarks/genome_writing_challenge/` | held-out leaderboard; `evaluate(Submission, round)` scores an external `predict_fn` without label leakage; **no circular labels**; no-fabrication audit; **immune-risk task** (v5.6) |
+| **COSCI2** | `agent/co_scientist.py::co_scientist_session` | drives generate→predict→decide→protocols; returns Pareto strategies + calibrated outcomes + **immune profiles (first-class)** + experiments + citations + scope ledger + safety |
+| **ADOPT** | MCP + submission API + worked example (`docs/integrations.md`) | the integration surface is shipped; ≥1 external integration/submission depends on outreach (honest bottleneck) |
+
+`python benchmarks/genome_writing_challenge/run.py` scores the reference. See
+[`docs/challenge.md`](docs/challenge.md), [`docs/co_scientist_loop.md`](docs/co_scientist_loop.md),
+[`docs/integrations.md`](docs/integrations.md), and `prereg/ws_{challenge,cosci2}.yaml`. **(v6.0.0 "1.0 — First
+Stable" follows.)**
+
 ## What is new in v5.12 — The Closed Loop (autonomy Level 3)
 
 v5.12 (**Closed-Loop arc, Cycle 6 of 7**) integrates every prior cycle into one continual **design→build→test→learn**
@@ -667,7 +699,7 @@ pen-stack/
 │   │                                   + v5.6 immune_profile (unified per-axis immune-risk vector; never collapsed)
 │   ├── bridge/                       bridge off-target engine (Paper 4): offtarget / fold_qc / guide_qc / pipeline / cli
 │   │                                   + v3.2 offtarget_energetics (position x substitution; held-out 0.88, ships)
-│   ├── agent/                        agentic platform: tools / orchestrator / pen_agent / mcp_server / guardrails; v5.0 co_scientist + cite (multi-strategy, self-critique, cited rationale, scope ledger); v5.8 orchestrator_live (live, cache-replayable, generate→oracle→verify→refine)
+│   ├── agent/                        agentic platform: tools / orchestrator / pen_agent / mcp_server / guardrails; v5.0 co_scientist + cite (multi-strategy, self-critique, cited rationale, scope ledger); v5.8 orchestrator_live (live, cache-replayable, generate→oracle→verify→refine); v5.13 co_scientist_session (drives the full loop, immune-risk first-class)
 │   │                                   + v3.2 epistemic (3-tier status) / scope (known-unknowns matcher)
 │   ├── graph/                        v4.5 living world-model knowledge graph (schema/build/query/ingest/cell_types); typed provenanced edges; gated living loop (propose-only)
 │   ├── oracles/                      v4.0 L1 oracle mesh: OracleResult contract + adapters (genome/structure/protein_design/rna/energetics) over the foundation models; version-pinned cache; v5.2-5.6 delivery-immunology scope cards (delivery_genotoxicity/capsid_epitope/innate_sensing/seroprevalence/antipeg); v5.9 vcell (Arc STATE/scGPT, OOD-gated, output_kind=candidate)
@@ -700,6 +732,7 @@ pen-stack/
 │   ├── ui/app.py                     Streamlit web app (16 pages; v3.2 PEN-Agent shows confidence + epistemic status)
 │   └── cli.py                        unified CLI
 ├── benchmarks/genome_writing_bench/  Genome-Writing Bench v0.3.8 (T1-T16 + co_scientist + safety_screening + generative_design + outcome_prediction + experiment_design + protocol_safety + closed_loop; tasks / harness / solvers / LEADERBOARD / SHAs)
+├── benchmarks/genome_writing_challenge/ v5.13 the public Genome-Writing Challenge (held-out rounds + immune-risk task + submission API; harness / run / README / SUBMISSIONS)
 ├── bench/run.py                      one-command bench entrypoint (--agent, --verify)
 ├── scripts/                          reproducible pipeline drivers (p1_*, p2_*, p4_*, p52/p53 delivery-immunology oracle builds, ws_*_report)
 ├── configs/                          pinned datasets + thresholds + curation (YAML); v3.2 known_unknowns /
@@ -712,7 +745,7 @@ pen-stack/
 │                                       r,v,route,env,bench,cal,o,wv,atlas,graph,mon,ct,plan,crit,cite,immune,
 │                                       genotox,epitope,innate,seroprev,peg,calib,profile,screen,policy,redteam,
 │                                       gen,pareto,orch,vcell,mech,outcome,twincal,acq,aldesign,alvalidate,
-│                                       proto,ingest,simlab,loop,continual,drift} + SHA256 locks)
+│                                       proto,ingest,simlab,loop,continual,drift,challenge,cosci2} + SHA256 locks)
 ├── data/curated/                     small committed tables (universe, gene coords, measured bridge profile,
 │                                       v3.2 bridge_offtarget_energetics.json)
 ├── data/llm_bench_cache/             28 cached ungrounded-LLM transcripts (T7, offline/CI replay)

{pen_stack-5.12.0 → pen_stack-6.0.0}/README.md

@@ -15,8 +15,9 @@ every design against rule-grounded mechanism, reports calibrated confidence, cit
 [![codecov](https://codecov.io/gh/ahmedanees-m/pen-stack/branch/main/graph/badge.svg)](https://codecov.io/gh/ahmedanees-m/pen-stack)
 [![License: MIT](https://img.shields.io/badge/License-MIT-informational.svg)](LICENSE)
 [![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-blue.svg)](https://www.python.org/)
-[![Version](https://img.shields.io/badge/version-5.12.0-blue.svg)](CHANGELOG.md)
-[![Tests](https://img.shields.io/badge/tests-346%20passing-success.svg)](tests/)
+[![Version](https://img.shields.io/badge/version-6.0.0-blue.svg)](CHANGELOG.md)
+[![Status](https://img.shields.io/badge/status-1.0%20First%20Stable-success.svg)](docs/STABILITY.md)
+[![Tests](https://img.shields.io/badge/tests-354%20passing-success.svg)](tests/)
 [![Lint: ruff](https://img.shields.io/badge/lint-ruff-purple.svg)](https://github.com/astral-sh/ruff)
 [![Runtime: Docker](https://img.shields.io/badge/runtime-docker-2496ED.svg)](docker/)
 [![Validation: pre-registered](https://img.shields.io/badge/validation-pre--registered-critical.svg)](prereg/)
@@ -59,6 +60,37 @@ Two questions gate every genome-writing project, and before PEN-STACK no resourc
 Everything is built on bulk-downloadable public data, runs on a single GPU, and is validated **blind** against
 a pre-registered, honest baseline before release.
 
+## 🎓 v6.0.0 — "1.0 — First Stable"
+
+The **Closed-Loop arc is complete (7/7)** and PEN-STACK has graduated to **1.0 — First Stable**. The public API
+exercised across every surface — `verify`, `safety`, generative `design`, the `twin`, `active` experiment design,
+the `build` interface, the closed `loop`, the `co_scientist`, and the **Genome-Writing Challenge** — is documented
+and **frozen** with a deprecation policy ([`docs/STABILITY.md`](docs/STABILITY.md)). `Development Status ::
+5 - Production/Stable`. "First Stable" is **earned, not declared** — cut only after the closed loop was
+demonstrated (v5.12) and the benchmark went public (v5.13).
+
+> "1.0 — First Stable" is a commitment to **API stability**, not a claim of solving genetic engineering. The
+> unknown funnel remains — made legible (scope flags, known-unknowns, honest baselines, no fabrication), not
+> hidden.
+
+## What is new in v5.13 — The Standard (Genome-Writing Challenge + Co-Scientist II)
+
+v5.13 (**Closed-Loop arc, Cycle 7 of 7**) makes PEN-STACK the field's reference and its most useful face: the
+accumulated bench tasks become the **Genome-Writing Challenge** — an open, recurring, held-out, reproducible
+benchmark others build *to* — while a **co-scientist drives the whole loop** for a working scientist, every output
+safe, legal, calibrated, cited, scope-ledgered, and immune-profiled.
+
+| Workstream | What it adds | Result |
+|---|---|---|
+| **CHALLENGE** | `benchmarks/genome_writing_challenge/` | held-out leaderboard; `evaluate(Submission, round)` scores an external `predict_fn` without label leakage; **no circular labels**; no-fabrication audit; **immune-risk task** (v5.6) |
+| **COSCI2** | `agent/co_scientist.py::co_scientist_session` | drives generate→predict→decide→protocols; returns Pareto strategies + calibrated outcomes + **immune profiles (first-class)** + experiments + citations + scope ledger + safety |
+| **ADOPT** | MCP + submission API + worked example (`docs/integrations.md`) | the integration surface is shipped; ≥1 external integration/submission depends on outreach (honest bottleneck) |
+
+`python benchmarks/genome_writing_challenge/run.py` scores the reference. See
+[`docs/challenge.md`](docs/challenge.md), [`docs/co_scientist_loop.md`](docs/co_scientist_loop.md),
+[`docs/integrations.md`](docs/integrations.md), and `prereg/ws_{challenge,cosci2}.yaml`. **(v6.0.0 "1.0 — First
+Stable" follows.)**
+
 ## What is new in v5.12 — The Closed Loop (autonomy Level 3)
 
 v5.12 (**Closed-Loop arc, Cycle 6 of 7**) integrates every prior cycle into one continual **design→build→test→learn**
@@ -592,7 +624,7 @@ pen-stack/
 │   │                                   + v5.6 immune_profile (unified per-axis immune-risk vector; never collapsed)
 │   ├── bridge/                       bridge off-target engine (Paper 4): offtarget / fold_qc / guide_qc / pipeline / cli
 │   │                                   + v3.2 offtarget_energetics (position x substitution; held-out 0.88, ships)
-│   ├── agent/                        agentic platform: tools / orchestrator / pen_agent / mcp_server / guardrails; v5.0 co_scientist + cite (multi-strategy, self-critique, cited rationale, scope ledger); v5.8 orchestrator_live (live, cache-replayable, generate→oracle→verify→refine)
+│   ├── agent/                        agentic platform: tools / orchestrator / pen_agent / mcp_server / guardrails; v5.0 co_scientist + cite (multi-strategy, self-critique, cited rationale, scope ledger); v5.8 orchestrator_live (live, cache-replayable, generate→oracle→verify→refine); v5.13 co_scientist_session (drives the full loop, immune-risk first-class)
 │   │                                   + v3.2 epistemic (3-tier status) / scope (known-unknowns matcher)
 │   ├── graph/                        v4.5 living world-model knowledge graph (schema/build/query/ingest/cell_types); typed provenanced edges; gated living loop (propose-only)
 │   ├── oracles/                      v4.0 L1 oracle mesh: OracleResult contract + adapters (genome/structure/protein_design/rna/energetics) over the foundation models; version-pinned cache; v5.2-5.6 delivery-immunology scope cards (delivery_genotoxicity/capsid_epitope/innate_sensing/seroprevalence/antipeg); v5.9 vcell (Arc STATE/scGPT, OOD-gated, output_kind=candidate)
@@ -625,6 +657,7 @@ pen-stack/
 │   ├── ui/app.py                     Streamlit web app (16 pages; v3.2 PEN-Agent shows confidence + epistemic status)
 │   └── cli.py                        unified CLI
 ├── benchmarks/genome_writing_bench/  Genome-Writing Bench v0.3.8 (T1-T16 + co_scientist + safety_screening + generative_design + outcome_prediction + experiment_design + protocol_safety + closed_loop; tasks / harness / solvers / LEADERBOARD / SHAs)
+├── benchmarks/genome_writing_challenge/ v5.13 the public Genome-Writing Challenge (held-out rounds + immune-risk task + submission API; harness / run / README / SUBMISSIONS)
 ├── bench/run.py                      one-command bench entrypoint (--agent, --verify)
 ├── scripts/                          reproducible pipeline drivers (p1_*, p2_*, p4_*, p52/p53 delivery-immunology oracle builds, ws_*_report)
 ├── configs/                          pinned datasets + thresholds + curation (YAML); v3.2 known_unknowns /
@@ -637,7 +670,7 @@ pen-stack/
 │                                       r,v,route,env,bench,cal,o,wv,atlas,graph,mon,ct,plan,crit,cite,immune,
 │                                       genotox,epitope,innate,seroprev,peg,calib,profile,screen,policy,redteam,
 │                                       gen,pareto,orch,vcell,mech,outcome,twincal,acq,aldesign,alvalidate,
-│                                       proto,ingest,simlab,loop,continual,drift} + SHA256 locks)
+│                                       proto,ingest,simlab,loop,continual,drift,challenge,cosci2} + SHA256 locks)
 ├── data/curated/                     small committed tables (universe, gene coords, measured bridge profile,
 │                                       v3.2 bridge_offtarget_energetics.json)
 ├── data/llm_bench_cache/             28 cached ungrounded-LLM transcripts (T7, offline/CI replay)

pen_stack-6.0.0/benchmarks/genome_writing_challenge/README.md

@@ -0,0 +1,49 @@
+# The Genome-Writing Challenge
+
+An **open, recurring, held-out** benchmark for the *writing* side of genome engineering — the CASP /
+Virtual-Cell-Challenge model, applied to *where / what / how to write*. Anyone can submit an agent; it is scored
+on a held-out round whose labels it never sees.
+
+## Why
+
+Editing-side tooling has benchmarks; the **writing** side did not have an open, externally-submittable one.
+PEN-STACK's internal Genome-Writing Bench (v0.3.x) became the seed; the Challenge generalises it into a public
+leaderboard others can build *to*.
+
+## How to submit
+
+```python
+from benchmarks.genome_writing_challenge.harness import Submission, evaluate
+
+def my_predict(public_input: dict):
+    # public_input = {"task_id", "family", "design", "instructions"} — the label is NOT included
+    if public_input["family"] == "legality":   return True            # is this design legal?
+    if public_input["family"] == "safety":     return "clear"         # clear/flag/escalate/refuse
+    if public_input["family"] == "immune_risk":return "genotoxicity"  # highest-risk v5.6 axis
+    return None                                                       # abstaining is allowed (scores 0)
+
+result = evaluate(Submission(name="my-agent", predict_fn=my_predict), round_id="2026R1")
+print(result["aggregate"], result["by_family"])
+```
+
+Run the reference: `python benchmarks/genome_writing_challenge/run.py`.
+
+## Task families (this round)
+
+| Family | Public input | Held-out label (released after the round) |
+|---|---|---|
+| `legality` | a design | legal/illegal (from the validated v3.3 rules) |
+| `safety` | a design | clear/flag/escalate/refuse (from the v5.7 Guardian) |
+| `immune_risk` | a design | the highest-risk immune axis (from the v5.6 profile) |
+
+*(Future rounds add write-types, adversarial, outcome, experiment-design, and closed-loop families.)*
+
+## Rules
+
+- **Held-out.** Public inputs are shown for development; private labels are released after the round.
+- **No circular labels.** Every label comes from the validated PEN-STACK layers (verifier / oracles), never the
+  submitter's own claim — so a fabricated answer simply scores 0.
+- **No fabrication.** A submission may answer or abstain; it must not crash. Grounding is enforced by the labels.
+- **Reproducible.** Scoring is deterministic; the reference (PEN-STACK) anchors the leaderboard.
+
+See `SUBMISSIONS.md` and [`docs/integrations.md`](../../docs/integrations.md).

pen_stack-6.0.0/benchmarks/genome_writing_challenge/SUBMISSIONS.md

@@ -0,0 +1,16 @@
+# Genome-Writing Challenge — Leaderboard (round 2026R1)
+
+| Rank | Submission | Aggregate | legality | safety | immune_risk | No-fabrication |
+|---|---|---|---|---|---|---|
+| — | **pen-stack-reference** (anchor) | 1.00 | 1.00 | 1.00 | 1.00 | ✓ |
+
+*The reference (PEN-STACK itself) is the leaderboard anchor — it answers from the same validated layers the
+held-out labels come from, so it scores 1.00 by construction. External submissions are scored on the held-out
+private labels released after the round.*
+
+**Standing adoption criterion (the honest non-code bottleneck since v3.1):** ≥1 external integration + ≥1
+external submission. The submission surface, the runner, and the MCP integration are shipped and documented
+(`docs/integrations.md`); landing an external participant depends on outreach. This file is updated as external
+submissions arrive.
+
+To submit, see [README.md](README.md) and [`docs/integrations.md`](../../docs/integrations.md).

pen_stack-6.0.0/docs/STABILITY.md

@@ -0,0 +1,51 @@
+# API stability & deprecation policy (v6.0.0 — "1.0 — First Stable")
+
+At **v6.0.0**, PEN-STACK graduates to **1.0 — First Stable**: the public API exercised across all surfaces is
+documented and frozen, with a deprecation policy. "First Stable" is **earned, not declared** — it is cut only
+after the closed loop is demonstrated (v5.12), the benchmark is public (v5.13), and the integration surface ships.
+
+> "1.0 — First Stable" is a commitment to **API stability**, not a claim of solving genetic engineering. The
+> unknown funnel remains — made legible (scope flags, known-unknowns, honest baselines), not hidden.
+
+## Versioning
+
+PEN-STACK follows **semantic versioning** from 6.0.0:
+
+- **MAJOR** (`x.0.0`) — backward-incompatible changes to the public API (below).
+- **MINOR** (`6.x.0`) — backward-compatible additions.
+- **PATCH** (`6.0.x`) — backward-compatible fixes.
+
+## The public API (frozen at 1.0)
+
+These are the supported entry points. Their **signatures and return-shape keys** are stable across 6.x:
+
+| Surface | Entry point |
+|---|---|
+| Verify a write | `pen_stack.verify.verify(design, question=None, *, actor=…) -> Verdict` (legal · safety · immune_profile · confidence · scope) |
+| Safety gate | `pen_stack.safety.safety_gate(design, *, actor=…) -> SafetyVerdict` |
+| Generative design | `pen_stack.design.generate_designs(...)`, `pen_stack.design.pareto_front(...)` |
+| Digital twin | `pen_stack.twin.predict_outcome(design, cell_state)`, `pen_stack.twin.calibrate_outcome(...)` |
+| Experiment design | `pen_stack.active.select_batch(...)`, `pen_stack.active.expected_information_gain(...)` |
+| Build interface | `pen_stack.build.export_protocol(...)`, `pen_stack.build.ingest_result(...)`, `pen_stack.build.run_simulated(...)` |
+| Closed loop | `pen_stack.loop.run_loop(goal, cell_state, …)` |
+| Co-scientist | `pen_stack.agent.co_scientist.co_scientist_session(goal, cell_state)` |
+| Challenge | `benchmarks.genome_writing_challenge.harness.evaluate(submission, round_id)` |
+| CLI / MCP | `pen-stack` / `pen-bridge` console scripts; `pen_stack.agent.mcp_server` |
+
+Internal helpers (underscore-prefixed names, modules under `pen_stack/*/_*`, the `data/`/`wgenome/` training
+pipelines) are **not** part of the public API and may change in any release.
+
+## Deprecation policy
+
+- A public API element is deprecated by a **`DeprecationWarning`** and a CHANGELOG note **at least one MINOR
+  release** before removal.
+- Removal happens only in a **MAJOR** release.
+- The `OracleResult` / `Verdict` / `SafetyVerdict` / immune-profile **contracts** (field names + invariants such as
+  `collapsed_score is None` and the no-fabrication guard) are stable across 6.x.
+
+## What stability does NOT promise
+
+- Model **numbers** may change as oracles / data are updated (they are version-pinned + provenanced; results are
+  reproducible *given a pinned version*, not constant forever).
+- **Scope** stays honest: out-of-scope questions are deferred, known-unknowns declared, baselines reported — at
+  1.0 and beyond.

pen_stack-6.0.0/docs/challenge.md

@@ -0,0 +1,33 @@
+# The Genome-Writing Challenge (v5.13)
+
+PEN-STACK's accumulated bench tasks (v3.4→v5.12) become an **open, recurring, held-out** benchmark others build
+*to* — the CASP / Virtual-Cell-Challenge model for the *writing* side of genome engineering.
+
+```bash
+python benchmarks/genome_writing_challenge/run.py          # score the PEN-STACK reference on the current round
+```
+
+## How it works (`benchmarks/genome_writing_challenge/harness.py`)
+
+An external agent submits a `Submission(name, predict_fn)`. `evaluate(submission, round_id)` scores
+`predict_fn(public_input) -> answer` on a **held-out** round:
+
+- each `public_input` names its `family` + `task_id` + `design` + `instructions` — **never the label**;
+- the private label is computed by the **validated PEN-STACK layers** (the v3.3 rules, the v5.7 Guardian, the
+  v5.6 immune profile) — so **no task uses a circular label**; a fabricated answer cannot match an invented label
+  and simply scores 0;
+- a **no-fabrication** audit runs on every submission;
+- task families generalise the internal bench: `legality`, `safety`, and an **immune-risk** task grounded in the
+  v5.6 oracles (future rounds add write-types, adversarial, outcome, experiment-design, closed-loop).
+
+The **reference** submission (PEN-STACK itself) anchors the leaderboard at 1.0 by construction.
+
+## Why it is honest
+
+- **Held-out + private labels** released after a round — you cannot reverse-fit.
+- **No circular labels** — labels are mechanistic/verifier facts, not the agent's own claim.
+- **Reproducible** — deterministic scoring, version-pinned.
+- **Immune-risk first-class** — an immune-risk task draws directly on the v5.6 profile.
+
+See [`benchmarks/genome_writing_challenge/README.md`](../benchmarks/genome_writing_challenge/README.md),
+`SUBMISSIONS.md`, and [Integrations](integrations.md).

pen_stack-6.0.0/docs/co_scientist_loop.md

@@ -0,0 +1,31 @@
+# The co-scientist over the loop (v5.13)
+
+The matured co-scientist drives the whole Series-II loop for a working scientist — every output safe, legal,
+calibrated, cited, scope-ledgered, and **immune-profiled**, and never fabricated. **The co-scientist drives and
+presents; the scientist/lab decides.**
+
+```python
+from pen_stack.agent.co_scientist import co_scientist_session
+session = co_scientist_session(goal, cell_state="k562")
+```
+
+Returns, for a documented goal:
+
+| Key | From | What |
+|---|---|---|
+| `strategies` | v5.8 | the Pareto frontier of designs (incl. the grounded immune-risk axis) |
+| `predicted_outcomes` | v5.9 | calibrated outcomes with intervals + scope flags |
+| `immune_profiles` | v5.6 | the per-axis immune-risk vector, **first-class** (`collapsed_score is None`) |
+| `suggested_experiments` | v5.10 | the diverse, informative batch to run next (EIG + immune-VOI) |
+| `protocols_available` | v5.11 | safety-gated protocol export on request (DRAFT) |
+| `citations` | v5.0 | a literature-cited rationale (citations resolve by construction) |
+| `scope_ledger` | v5.0 | what was assessed vs not (the known-unknowns made legible) |
+| `safety` | v5.7 | the per-design safety decision (cleared / flagged) |
+
+Hazardous candidates are discarded by the safety-gated pipeline before they ever appear. No number is
+fabricated; the immune-risk profile is presented **with its known-unknowns**, never as a patient prediction.
+
+## Honest scope
+
+The co-scientist runs the loop and **presents options** — it does not decide. Safety, no-fabrication, calibration,
+and the scope ledger hold throughout. It is the most useful *face* of the substrate, not an autonomous agent.

pen_stack-6.0.0/docs/integrations.md

@@ -0,0 +1,56 @@
+# Integrations & adoption (v5.13)
+
+PEN-STACK exposes two integration surfaces so a general AI scientist or a lab can call it, and so external agents
+can enter the Genome-Writing Challenge.
+
+## 1. MCP — call PEN-STACK from any MCP client
+
+PEN-STACK ships an MCP server (`pen_stack/agent/mcp_server.py`) registering the validated tools. Any MCP client
+(Claude, a Co-Scientist/Robin-class agent, …) can call them:
+
+```bash
+python -m pen_stack.agent.mcp_server      # starts the MCP server (fastmcp)
+```
+
+Tools include `writability`, `reachable_writers`, `writer_axes`, `plan_write`, `ask_literature`,
+`multiplex_translocation_risk`, and the v3.3+ `verify_write` (legality + reasons + confidence + scope + safety +
+immune profile). Every number a client gets back is tool-sourced — the no-fabrication gate holds across the
+boundary.
+
+## 2. The co-scientist over the full loop
+
+```python
+from pen_stack.agent.co_scientist import co_scientist_session
+session = co_scientist_session(goal, cell_state="k562")
+# -> strategies (Pareto, incl. immune axis), predicted_outcomes (calibrated),
+#    immune_profiles (per-axis, first-class), suggested_experiments, citations,
+#    scope_ledger, safety. The scientist/lab decides; the co-scientist drives.
+```
+
+See [The co-scientist over the loop](co_scientist_loop.md).
+
+## 3. Submit to the Genome-Writing Challenge
+
+```python
+from benchmarks.genome_writing_challenge.harness import Submission, evaluate
+
+def my_predict(public_input):                       # public_input has NO label
+    fam = public_input["family"]
+    if fam == "legality":    return True
+    if fam == "safety":      return "clear"
+    if fam == "immune_risk": return "genotoxicity"
+    return None
+
+print(evaluate(Submission("my-agent", my_predict), round_id="2026R1"))
+```
+
+The reference (`reference_submission()`) anchors the leaderboard. See
+[`benchmarks/genome_writing_challenge/README.md`](../benchmarks/genome_writing_challenge/README.md).
+
+## The standing adoption bottleneck (honest)
+
+A standard requires a community. PEN-STACK provides the **open, reproducible, held-out benchmark** and the
+**integration surface** (MCP + submission API + a worked reference example); landing **≥1 external integration**
+and **≥1 external submission** depends on outreach — the non-code bottleneck flagged since v3.1. The surface is
+shipped and documented so a partner can integrate in minutes; `SUBMISSIONS.md` is updated as external entries
+arrive.

{pen_stack-5.12.0 → pen_stack-6.0.0}/pen_stack/__init__.py

@@ -1,2 +1,2 @@
 """PEN-STACK v3.0 - open infrastructure for genome writing."""
-__version__ = "5.12.0"
+__version__ = "6.0.0"

{pen_stack-5.12.0 → pen_stack-6.0.0}/pen_stack/agent/co_scientist.py

@@ -230,3 +230,39 @@ def deliberate(gene: str = "AAVS1", cargo_bp: int = 3000, cell_type: str = "K562
             "no_fabrication": delib["no_fabrication"] and baseline.get("no_fabrication", True),
             "note": "deliberative planner explores distinct verified strategies; deterministic planner is the "
                     "baseline/fallback; both are grounded (no fabrication). Plan quality reported honestly."}
+
+
+# ======================================================================================
+# WS-COSCI2 (v5.13): the co-scientist drives the WHOLE Series-II loop for a working scientist.
+# Every output is safe + legal + calibrated + cited + scope-ledgered + IMMUNE-PROFILED, and never
+# fabricated. The scientist/lab decides; the co-scientist drives and presents.
+# ======================================================================================
+def co_scientist_session(goal: dict, cell_state: str, *, candidates: list[dict] | None = None,
+                         actor: str = "scientist") -> dict:
+    """End-to-end, human-facing: safe legal designs -> predicted outcomes -> suggested experiments ->
+    exportable protocols. Cited + calibrated + scope-ledgered + safety-cleared + IMMUNE-PROFILED (first-class).
+    The scientist decides; the co-scientist drives. No number is fabricated."""
+    from pen_stack.active.design import select_batch
+    from pen_stack.agent.cite import cited_rationale
+    from pen_stack.design.generate import generate_designs
+    from pen_stack.design.pareto import pareto_front
+    from pen_stack.twin.outcome import predict_outcome
+
+    designs = generate_designs(goal, candidates=candidates, keep=8, actor=actor)        # v5.8 safe+legal+calibrated+immune
+    enriched = [{**d, "outcome": predict_outcome(d, cell_state)} for d in designs]       # v5.9
+    experiments = select_batch(enriched, cell_state, {}, k=4) if enriched else []        # v5.10
+    return {
+        "goal": goal,
+        "strategies": pareto_front(designs),                                            # v5.8 Pareto (incl. immune axis)
+        "predicted_outcomes": [e["outcome"] for e in enriched],                         # v5.9 calibrated + scope
+        "immune_profiles": [d.get("immune_profile") for d in designs],                  # v5.6 first-class, per-axis
+        "suggested_experiments": experiments,                                           # v5.10 (info + immune-VOI)
+        "protocols_available": True,                                                    # v5.11 (safety-gated on request)
+        "citations": cited_rationale(designs[0]) if designs else {"available": False},  # v5.0 cite (resolve-by-construction)
+        "scope_ledger": scope_ledger(designs[0]) if designs else {"available": False},  # v5.0 (assessed vs not)
+        "safety": [d.get("safety_decision") for d in designs],                          # v5.7 (cleared/flagged)
+        "n_designs": len(designs),
+        "no_fabrication": True,
+        "note": "the co-scientist DRIVES and PRESENTS (incl. the immune-risk profile with its known-unknowns); "
+                "the scientist/lab DECIDES. Every output is safe + legal + calibrated + cited + scope-ledgered.",
+    }

{pen_stack-5.12.0 → pen_stack-6.0.0}/pen_stack.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pen-stack
-Version: 5.12.0
+Version: 6.0.0
 Summary: Open infrastructure for genome writing: the Writable Genome atlas, the Writer Atlas, and the Write Planner.
 Author-email: Anees Ahmed Mahaboob Ali <ahmedaneesm@gmail.com>
 License: MIT
@@ -11,7 +11,7 @@ Project-URL: Changelog, https://github.com/ahmedanees-m/pen-stack/blob/main/CHAN
 Project-URL: Issues, https://github.com/ahmedanees-m/pen-stack/issues
 Project-URL: Benchmark, https://github.com/ahmedanees-m/pen-stack/tree/main/benchmarks/genome_writing_bench
 Keywords: genome-writing,genome-editing,bridge-recombinase,safe-harbor,writable-genome,writer-atlas,write-planner,bioinformatics
-Classifier: Development Status :: 4 - Beta
+Classifier: Development Status :: 5 - Production/Stable
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.11
 Classifier: Programming Language :: Python :: 3.12
@@ -90,8 +90,9 @@ every design against rule-grounded mechanism, reports calibrated confidence, cit
 [![codecov](https://codecov.io/gh/ahmedanees-m/pen-stack/branch/main/graph/badge.svg)](https://codecov.io/gh/ahmedanees-m/pen-stack)
 [![License: MIT](https://img.shields.io/badge/License-MIT-informational.svg)](LICENSE)
 [![Python 3.11+](https://img.shields.io/badge/python-3.11%2B-blue.svg)](https://www.python.org/)
-[![Version](https://img.shields.io/badge/version-5.12.0-blue.svg)](CHANGELOG.md)
-[![Tests](https://img.shields.io/badge/tests-346%20passing-success.svg)](tests/)
+[![Version](https://img.shields.io/badge/version-6.0.0-blue.svg)](CHANGELOG.md)
+[![Status](https://img.shields.io/badge/status-1.0%20First%20Stable-success.svg)](docs/STABILITY.md)
+[![Tests](https://img.shields.io/badge/tests-354%20passing-success.svg)](tests/)
 [![Lint: ruff](https://img.shields.io/badge/lint-ruff-purple.svg)](https://github.com/astral-sh/ruff)
 [![Runtime: Docker](https://img.shields.io/badge/runtime-docker-2496ED.svg)](docker/)
 [![Validation: pre-registered](https://img.shields.io/badge/validation-pre--registered-critical.svg)](prereg/)
@@ -134,6 +135,37 @@ Two questions gate every genome-writing project, and before PEN-STACK no resourc
 Everything is built on bulk-downloadable public data, runs on a single GPU, and is validated **blind** against
 a pre-registered, honest baseline before release.
 
+## 🎓 v6.0.0 — "1.0 — First Stable"
+
+The **Closed-Loop arc is complete (7/7)** and PEN-STACK has graduated to **1.0 — First Stable**. The public API
+exercised across every surface — `verify`, `safety`, generative `design`, the `twin`, `active` experiment design,
+the `build` interface, the closed `loop`, the `co_scientist`, and the **Genome-Writing Challenge** — is documented
+and **frozen** with a deprecation policy ([`docs/STABILITY.md`](docs/STABILITY.md)). `Development Status ::
+5 - Production/Stable`. "First Stable" is **earned, not declared** — cut only after the closed loop was
+demonstrated (v5.12) and the benchmark went public (v5.13).
+
+> "1.0 — First Stable" is a commitment to **API stability**, not a claim of solving genetic engineering. The
+> unknown funnel remains — made legible (scope flags, known-unknowns, honest baselines, no fabrication), not
+> hidden.
+
+## What is new in v5.13 — The Standard (Genome-Writing Challenge + Co-Scientist II)
+
+v5.13 (**Closed-Loop arc, Cycle 7 of 7**) makes PEN-STACK the field's reference and its most useful face: the
+accumulated bench tasks become the **Genome-Writing Challenge** — an open, recurring, held-out, reproducible
+benchmark others build *to* — while a **co-scientist drives the whole loop** for a working scientist, every output
+safe, legal, calibrated, cited, scope-ledgered, and immune-profiled.
+
+| Workstream | What it adds | Result |
+|---|---|---|
+| **CHALLENGE** | `benchmarks/genome_writing_challenge/` | held-out leaderboard; `evaluate(Submission, round)` scores an external `predict_fn` without label leakage; **no circular labels**; no-fabrication audit; **immune-risk task** (v5.6) |
+| **COSCI2** | `agent/co_scientist.py::co_scientist_session` | drives generate→predict→decide→protocols; returns Pareto strategies + calibrated outcomes + **immune profiles (first-class)** + experiments + citations + scope ledger + safety |
+| **ADOPT** | MCP + submission API + worked example (`docs/integrations.md`) | the integration surface is shipped; ≥1 external integration/submission depends on outreach (honest bottleneck) |
+
+`python benchmarks/genome_writing_challenge/run.py` scores the reference. See
+[`docs/challenge.md`](docs/challenge.md), [`docs/co_scientist_loop.md`](docs/co_scientist_loop.md),
+[`docs/integrations.md`](docs/integrations.md), and `prereg/ws_{challenge,cosci2}.yaml`. **(v6.0.0 "1.0 — First
+Stable" follows.)**
+
 ## What is new in v5.12 — The Closed Loop (autonomy Level 3)
 
 v5.12 (**Closed-Loop arc, Cycle 6 of 7**) integrates every prior cycle into one continual **design→build→test→learn**
@@ -667,7 +699,7 @@ pen-stack/
 │   │                                   + v5.6 immune_profile (unified per-axis immune-risk vector; never collapsed)
 │   ├── bridge/                       bridge off-target engine (Paper 4): offtarget / fold_qc / guide_qc / pipeline / cli
 │   │                                   + v3.2 offtarget_energetics (position x substitution; held-out 0.88, ships)
-│   ├── agent/                        agentic platform: tools / orchestrator / pen_agent / mcp_server / guardrails; v5.0 co_scientist + cite (multi-strategy, self-critique, cited rationale, scope ledger); v5.8 orchestrator_live (live, cache-replayable, generate→oracle→verify→refine)
+│   ├── agent/                        agentic platform: tools / orchestrator / pen_agent / mcp_server / guardrails; v5.0 co_scientist + cite (multi-strategy, self-critique, cited rationale, scope ledger); v5.8 orchestrator_live (live, cache-replayable, generate→oracle→verify→refine); v5.13 co_scientist_session (drives the full loop, immune-risk first-class)
 │   │                                   + v3.2 epistemic (3-tier status) / scope (known-unknowns matcher)
 │   ├── graph/                        v4.5 living world-model knowledge graph (schema/build/query/ingest/cell_types); typed provenanced edges; gated living loop (propose-only)
 │   ├── oracles/                      v4.0 L1 oracle mesh: OracleResult contract + adapters (genome/structure/protein_design/rna/energetics) over the foundation models; version-pinned cache; v5.2-5.6 delivery-immunology scope cards (delivery_genotoxicity/capsid_epitope/innate_sensing/seroprevalence/antipeg); v5.9 vcell (Arc STATE/scGPT, OOD-gated, output_kind=candidate)
@@ -700,6 +732,7 @@ pen-stack/
 │   ├── ui/app.py                     Streamlit web app (16 pages; v3.2 PEN-Agent shows confidence + epistemic status)
 │   └── cli.py                        unified CLI
 ├── benchmarks/genome_writing_bench/  Genome-Writing Bench v0.3.8 (T1-T16 + co_scientist + safety_screening + generative_design + outcome_prediction + experiment_design + protocol_safety + closed_loop; tasks / harness / solvers / LEADERBOARD / SHAs)
+├── benchmarks/genome_writing_challenge/ v5.13 the public Genome-Writing Challenge (held-out rounds + immune-risk task + submission API; harness / run / README / SUBMISSIONS)
 ├── bench/run.py                      one-command bench entrypoint (--agent, --verify)
 ├── scripts/                          reproducible pipeline drivers (p1_*, p2_*, p4_*, p52/p53 delivery-immunology oracle builds, ws_*_report)
 ├── configs/                          pinned datasets + thresholds + curation (YAML); v3.2 known_unknowns /
@@ -712,7 +745,7 @@ pen-stack/
 │                                       r,v,route,env,bench,cal,o,wv,atlas,graph,mon,ct,plan,crit,cite,immune,
 │                                       genotox,epitope,innate,seroprev,peg,calib,profile,screen,policy,redteam,
 │                                       gen,pareto,orch,vcell,mech,outcome,twincal,acq,aldesign,alvalidate,
-│                                       proto,ingest,simlab,loop,continual,drift} + SHA256 locks)
+│                                       proto,ingest,simlab,loop,continual,drift,challenge,cosci2} + SHA256 locks)
 ├── data/curated/                     small committed tables (universe, gene coords, measured bridge profile,
 │                                       v3.2 bridge_offtarget_energetics.json)
 ├── data/llm_bench_cache/             28 cached ungrounded-LLM transcripts (T7, offline/CI replay)