trunkit 0.2.1__tar.gz → 0.2.2__tar.gz

{trunkit-0.2.1 → trunkit-0.2.2}/.github/workflows/python-package-conda.yml

@@ -54,11 +54,11 @@ jobs:
       - name: Lint
         run: ruff check src/
 
-      - name: Apply schema
+      - name: Apply Trunkit schema
         env:
           PGPASSWORD: trunk
         run: |
-          for f in src/calx/sql/0[0-7]*.sql; do
+          for f in $(ls src/calx/sql/*.sql | sort); do
             psql -h localhost -p 5434 -U trunk -d trunk -f "$f" -q
           done
 
@@ -67,15 +67,16 @@ jobs:
           NERODE_DSN: postgresql://nerode:nerode@localhost:5435/nerode
         run: |
           python -c "
-          from nerode.db import apply_schema, connect
-          with connect() as conn:
+          import psycopg
+          from nerode.db import apply_schema
+          with psycopg.connect('postgresql://nerode:nerode@localhost:5435/nerode') as conn:
               apply_schema(conn, verbose=True)
           "
 
       - name: Test
         env:
           CALX_TEST_DSN: postgresql://trunk:trunk@localhost:5434/trunk
-          NERODE_TEST_DSN: postgresql://nerode:nerode@localhost:5435/nerode
+          NERODE_DSN: postgresql://nerode:nerode@localhost:5435/nerode
         run: pytest -m "not slow and not primesieve and not network"
 
   build:

{trunkit-0.2.1 → trunkit-0.2.2}/Makefile

@@ -1,27 +1,17 @@
-<<<<<<< HEAD
 TRUNK_DSN  ?= postgresql://trunk:trunk@localhost:5434/trunk
 NERODE_DSN ?= postgresql://nerode:nerode@localhost:5435/nerode
 
-.PHONY: up down apply apply-trunkit apply-nerode check install dev-install test lint build
+.PHONY: up down apply apply-trunkit apply-nerode check check-trunkit check-nerode \
+        install dev-install test test-network lint build reset-trunkit reset-nerode
 
 ## Start both PostgreSQL instances via Docker Compose
 up:
 	docker compose up -d db-trunkit db-nerode
-=======
-DSN ?= postgresql://trunk:trunk@localhost:5434/trunk
-
-.PHONY: up down apply check reset install
-
-## Start PostgreSQL via Docker Compose
-up:
-	docker compose up -d db
->>>>>>> origin/main
 
 ## Stop and remove containers
 down:
 	docker compose down
 
-<<<<<<< HEAD
 ## Apply Trunkit (calx/kan/curry/cert) schemas — idempotent
 apply-trunkit:
 	@for f in $$(ls src/calx/sql/*.sql | sort); do \
@@ -56,32 +46,10 @@ check: check-trunkit check-nerode
 ## Full local bootstrap: up -> apply -> check
 install: up
 	@echo "Waiting for databases to be ready..."
-=======
-## Apply all SQL schemas in order (idempotent)
-apply:
-	@for f in $$(ls src/calx/sql/*.sql | sort); do \
-		echo "  $$f"; \
-		psql $(DSN) -f "$$f" -q; \
-	done
-	@echo "Done. Run 'make check' to verify."
-
-## Populate integers and run reflexive closure + cert attestation
-check:
-	python tools/kan_in_kan.py
-
-## Attest formal-tier proof artifacts
-attest:
-	python tools/cert_formal.py
-
-## Full local bootstrap: up → apply → check
-install: up
-	@echo "Waiting for db to be ready..."
->>>>>>> origin/main
 	@sleep 3
 	$(MAKE) apply
 	$(MAKE) check
 
-<<<<<<< HEAD
 ## Install Python packages in editable/dev mode
 dev-install:
 	pip install -e ".[dev]"
@@ -112,10 +80,3 @@ reset-trunkit:
 reset-nerode:
 	psql "$(NERODE_DSN)" -c "DROP SCHEMA IF EXISTS nerode CASCADE;"
 	$(MAKE) apply-nerode
-=======
-## Drop all Trunkit schemas and start fresh (destructive)
-reset:
-	psql $(DSN) -c "DROP SCHEMA IF EXISTS cert, kan, curry, calx CASCADE;"
-	$(MAKE) apply
-	$(MAKE) check
->>>>>>> origin/main

trunkit-0.2.2/PKG-INFO

@@ -0,0 +1,309 @@
+Metadata-Version: 2.4
+Name: trunkit
+Version: 0.2.2
+Summary: Trunkit — proof-carrying code and deterministic automata middleware on PostgreSQL, with Porter agent context handoff
+Project-URL: Homepage, https://github.com/Athena-Pro/Trunkit
+Project-URL: Repository, https://github.com/Athena-Pro/Trunkit
+License: MIT
+License-File: LICENSE
+Keywords: agent,automata,category-theory,dfa,formal-verification,handoff,integer-sequences,llm,minimization,nerode-equivalence,postgresql,proof-carrying-code
+Classifier: Development Status :: 3 - Alpha
+Classifier: Intended Audience :: Developers
+Classifier: Intended Audience :: Science/Research
+Classifier: License :: OSI Approved :: MIT License
+Classifier: Programming Language :: Python :: 3
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: SQL
+Classifier: Topic :: Database
+Classifier: Topic :: Scientific/Engineering :: Mathematics
+Requires-Python: >=3.11
+Requires-Dist: psycopg<4,>=3.2
+Provides-Extra: binary
+Requires-Dist: psycopg[binary]<4,>=3.2; extra == 'binary'
+Provides-Extra: dev
+Requires-Dist: build>=1.0; extra == 'dev'
+Requires-Dist: psycopg[binary]<4,>=3.2; extra == 'dev'
+Requires-Dist: pytest-cov>=5; extra == 'dev'
+Requires-Dist: pytest>=8; extra == 'dev'
+Requires-Dist: ruff>=0.6; extra == 'dev'
+Requires-Dist: twine>=5.0; extra == 'dev'
+Description-Content-Type: text/markdown
+
+<p align="center">
+  <img src="assets/logo.png" alt="Trunkit" width="220" />
+</p>
+
+# Trunkit
+
+> The smallest elephant in the room that's not too Coq-y and doesn't Lean too heavily on your system.
+
+Proof-carrying code middleware on PostgreSQL. Trunkit is a self-contained schema stack
+that attaches verifiable claims to mathematical objects, chains proofs compositionally,
+and lets consumers re-verify results without trusting the producer — all inside a
+database you already operate, with no specialist toolchain required.
+
+No 3 GB compiler. No gigabytes of cached proof objects. No new runtime to learn.
+Just PostgreSQL, Python, and ~1.5 MB of schemas.
+
+---
+
+## Stack
+
+```
+┌──────────────────────────────────────────────────────────────────┐
+│  Porter  — agent context handoff                                  │
+│    Precacher · Sources · close_session() · open_session()         │
+│    cybernetic DFAs · composite pattern detection                  │
+├──────────────────────────────────────────────────────────────────┤
+│  Nerode  — deterministic automata engine                          │
+│    DFA construction · minimization · product · session DFAs       │
+│    sequence cache · cert-signed handoff envelopes                 │
+├──────────────────────────┬───────────────────────────────────────┤
+│  cert                    │  kan                                   │
+│  proof-carrying          │  category theory meta-layer            │
+│  attestation             │  (monoidal · NTs · Kan · profunctors)  │
+├──────────────────────────┼───────────────────────────────────────┤
+│  curry                   │  calx                                  │
+│  versioned provenance    │  integer arithmetic bedrock            │
+│  + immutable constants   │  (primes · CRT · dynamics · OEIS)     │
+└──────────────────────────┴───────────────────────────────────────┘
+   Trunkit DB  postgresql://trunk:trunk@localhost:5434/trunk
+   Nerode DB   postgresql://nerode:nerode@localhost:5435/nerode
+```
+
+| Layer | Role |
+|-------|------|
+| **calx** | Dense prime factorisation of ℤ[1..N]; aliquot/derivative dynamics; CRT; OEIS sequence matching |
+| **curry** | Immutable versioned constants and functions; append-only computational provenance |
+| **kan** | Category-theory meta-layer: base categories → monoidal → NTs → Kan extensions → enrichment → profunctors → adjunctions |
+| **cert** | Proof-carrying attestation: five method tiers, structured witness storage, proof composition DAG, portable bundle export, consumer re-verification |
+| **Nerode** | DFA/automata engine on PostgreSQL: construction, minimization, product, session DFAs, sequence cache, certified handoff envelopes |
+| **Porter** | Agent context handoff: pre-pack external data, certify session boundaries, hand verified context to a new model with zero tool calls |
+
+---
+
+## Quick start
+
+```bash
+# 1. Start both PostgreSQL instances
+docker compose up -d db-trunkit db-nerode
+
+# 2. Apply all schemas (idempotent)
+make apply
+
+# 3. Trunkit: populate integers and run reflexive closure
+trunkit generate --limit 10000
+trunkit close --write
+
+# 4. Porter: pre-pack a morning brief and open it as Model B
+python scripts/morning_brief_demo.py
+```
+
+```bash
+# Install
+pip install trunkit   # proof kernel
+pip install nerode    # automata + porter layer
+```
+
+Environment variable: `CALX_DSN=postgresql://trunk:trunk@localhost:5434/trunk`
+
+---
+
+## CLI
+
+Trunkit ships a dual-surface CLI. Consumer commands are read-only and safe for LLM use.
+Prover commands require `--write` to record; they dry-run without it.
+
+### Consumer — read-only
+
+```bash
+trunkit verify <claim_id>
+# Re-verifies a claim without inserting. Replays the stored witness or
+# re-runs the probe SQL in a subtransaction. Exits 0 if valid.
+
+trunkit standing [--method M] [--status S]
+# Lists all claims with their latest attestation status.
+# Filter by method (comp_sql, struct_kan, formal_external,
+# empirical_corpus, witness_carry) or status (valid, refuted, unverified).
+
+trunkit export <id> [<id> ...]
+# Emits a self-contained JSONB bundle to stdout:
+# claims + certificates + witnesses + derivations.
+# Portable — consumers can re-verify without a Trunkit install.
+```
+
+```
+$ trunkit standing
+  [✓] #  1  comp_sql              valid         2026-05-19 14:32  28 is a perfect number: σ(28) − 28 = 28
+  [✓] #  2  witness_carry         valid         2026-05-19 14:32  12 has p-adic stratification {2:2, 3:1}
+  [✓] #  3  struct_kan            valid         2026-05-19 14:33  calx → curry functor is faithful
+  [?] #  4  formal_external       unverified    —                 σ(28) = 56 (external Python proof)
+
+$ trunkit verify 2
+  [✓] claim 2  →  VALID
+  evidence : {
+      "v2": 2,
+      "v3": 1
+  }
+  witness  : {
+      "kind": "term",
+      "levels": {"prime_2": 2, "prime_3": 1},
+      "reconstruction": "2^2 * 3^1 = 12"
+  }
+```
+
+### Prover — require `--write`
+
+```bash
+trunkit check <claim_id> [--write]
+# Dry-run: shows what the claim would attest as (via cert.verify).
+# With --write: runs cert.check() and records a certificate.
+
+trunkit attest [--write]
+# Dry-run: reports formal-tier claims that would be attested.
+# With --write: runs cert_formal.py and records all formal-tier certificates.
+
+trunkit close [--write]
+# Dry-run: reports intent without side effects.
+# With --write: computes reflexive closure — curry fixed points
+# (primitive eigenforms) + kan Perron-Frobenius attractor — and
+# records eigenform claims.
+
+trunkit witness <claim_id> --kind KIND --body JSON [--write]
+# Attach a structured proof witness to a claim.
+# KIND: term | trace | counterexample | hash_chain | kan_diagram
+```
+
+### calx data
+
+```bash
+trunkit init                           # apply schema DDL
+trunkit generate --limit N             # populate integers 1..N
+trunkit validate [--limit N]           # compare ω/Ω against OEIS
+trunkit reset                          # drop all calx tables
+trunkit oeis-load [--family F]         # fetch curated OEIS b-files
+trunkit oeis-match [--orbit-id ID | --all]
+trunkit compose-match
+```
+
+---
+
+## Porter — model-to-model context handoff
+
+Each model session starts with no memory of what the previous session fetched, proved,
+or decided. Porter pre-packs that context — external data, DFA states, proof certificates
+— into an envelope before the session closes. The next model calls
+`Precacher.open(envelope, session_id)` and has everything ready, cert verified, with
+zero tool calls.
+
+```python
+from datetime import date
+from nerode.precache import Precacher
+from nerode.sources import WeatherSource, TickerSource, HNSource
+
+today = date.today().isoformat()
+
+# Model A — fetch and pack before closing
+with Precacher(f"brief-{today}") as pc:
+    pc.fetch(f"weather:london:{today}", WeatherSource(51.5, -0.1, label="London"))
+    pc.fetch(f"ticker:AAPL:{today}",    TickerSource("AAPL"))
+    pc.fetch(f"news:hn:top5:{today}",   HNSource(5))
+# __exit__ calls close_session(); pc.envelope is now set
+
+# Model B — open the envelope in a separate process/connection
+ctx = Precacher.open(pc.envelope, "model-b-001")
+resolved = ctx["resolved"]        # {"weather:london:…": {…}, "ticker:AAPL:…": {…}, …}
+cert_ok  = ctx["prior_session"]["cert_valid"]   # True
+```
+
+### Cybernetic monitoring
+
+Porter includes DFA-based pattern detectors that fire over metric and control streams:
+
+| DFA | Pattern | Meaning |
+|-----|---------|---------|
+| `metric_rise_3` | `U{3,}` | 3+ consecutive rises |
+| `metric_oscillate` | `(UD){3,}` | oscillation / gain too high |
+| `dead_time_5/10/20` | `A_{k,}` | action without response in k steps |
+| `homeostasis_alarm_5` | `O{5,}` | 5+ steps outside target band |
+| `dead_time_5_x_metric_oscillate` | composite | oscillating AND unresponsive |
+
+```python
+# Log a paired (metric, control) event and scan all relevant DFAs
+conn.execute(
+    "SELECT nerode.log_cybernetic(%s, 'metric_x_control', %s)",
+    (session_id, "UA")   # metric rose (U), action taken (A)
+)
+# pg_notify('nerode_control_warn', ...) fires if any pattern matches
+```
+
+---
+
+## cert method tiers
+
+| Method | Trust root | Use |
+|--------|-----------|-----|
+| `comp_sql` | In-DB probe | Computational facts about integers or categorical counts |
+| `struct_kan` | Existing kan invariant | Naturality, triangle identities, faithfulness checks |
+| `formal_external` | SHA256-pinned external artifact | Python/Lean/Agda proof scripts |
+| `empirical_corpus` | Provenance only | Corpus document assertions |
+| `witness_carry` | In-DB witness term | Structured proof terms stored alongside certificates; consumer-replayable |
+
+---
+
+## PCC properties
+
+| Property | Mechanism |
+|----------|-----------|
+| Proof travels with code | `cert.witness` stores structured proof terms alongside every certificate |
+| Proofs compose | `cert.derivation` encodes a DAG of premises → conclusion under named rules |
+| Consumer re-verifies | `cert.verify(claim_id)` replays without INSERTing — safe for untrusted callers |
+| Bundle is portable | `cert.export_bundle(ids[])` emits self-contained JSONB: claims + certs + witnesses + derivations |
+
+---
+
+## Bundle size
+
+| Component | Files | Size |
+|-----------|-------|------|
+| SQL (94 files, 00–97) | 94 | ~534 KB |
+| Python tools | 39 | ~342 KB |
+| Proof scripts | 4 | ~23 KB |
+| Src + tests + config | ~58 | ~483 KB |
+| **Total (no virtualenv)** | **~199** | **~1.4 MB** |
+
+Compare: Lean 4 toolchain ≈ 2.9 GB per version; Mathlib compiled ≈ 4–10 GB per project.
+
+---
+
+## Repository layout
+
+```
+src/
+  calx/       — Trunkit Python package (calx + kan + curry + cert)
+  nerode/     — Nerode/Porter Python package
+    sql/      — 23 idempotent SQL schema files (00_bootstrap → 97_composite_dfa)
+    precache.py   — Precacher context manager (Porter API)
+    sources.py    — WeatherSource, TickerSource, HNSource, TickerHistorySource
+    adapters.py   — HttpSource, CallableSource, resolve(), with_retry()
+    db.py         — connection utilities + SCHEMA_FILES list
+scripts/
+  morning_brief_demo.py   — end-to-end Porter demo
+tests/
+  test_sources.py         — network tests (pytest -m network)
+  test_cybernetic.py      — cybernetic DFA tests
+  test_composite_dfa.py   — paired-alphabet composite DFA tests
+  test_dead_time_factory.py
+  test_*.py               — unit tests for all schema layers
+proofs/
+  *.py    — Trunkit proof scripts
+tools/
+  kan_in_kan.py   — Trunkit reflexive closure tool
+```
+
+---
+
+## License
+
+MIT

trunkit-0.2.2/README.md

@@ -0,0 +1,277 @@
+<p align="center">
+  <img src="assets/logo.png" alt="Trunkit" width="220" />
+</p>
+
+# Trunkit
+
+> The smallest elephant in the room that's not too Coq-y and doesn't Lean too heavily on your system.
+
+Proof-carrying code middleware on PostgreSQL. Trunkit is a self-contained schema stack
+that attaches verifiable claims to mathematical objects, chains proofs compositionally,
+and lets consumers re-verify results without trusting the producer — all inside a
+database you already operate, with no specialist toolchain required.
+
+No 3 GB compiler. No gigabytes of cached proof objects. No new runtime to learn.
+Just PostgreSQL, Python, and ~1.5 MB of schemas.
+
+---
+
+## Stack
+
+```
+┌──────────────────────────────────────────────────────────────────┐
+│  Porter  — agent context handoff                                  │
+│    Precacher · Sources · close_session() · open_session()         │
+│    cybernetic DFAs · composite pattern detection                  │
+├──────────────────────────────────────────────────────────────────┤
+│  Nerode  — deterministic automata engine                          │
+│    DFA construction · minimization · product · session DFAs       │
+│    sequence cache · cert-signed handoff envelopes                 │
+├──────────────────────────┬───────────────────────────────────────┤
+│  cert                    │  kan                                   │
+│  proof-carrying          │  category theory meta-layer            │
+│  attestation             │  (monoidal · NTs · Kan · profunctors)  │
+├──────────────────────────┼───────────────────────────────────────┤
+│  curry                   │  calx                                  │
+│  versioned provenance    │  integer arithmetic bedrock            │
+│  + immutable constants   │  (primes · CRT · dynamics · OEIS)     │
+└──────────────────────────┴───────────────────────────────────────┘
+   Trunkit DB  postgresql://trunk:trunk@localhost:5434/trunk
+   Nerode DB   postgresql://nerode:nerode@localhost:5435/nerode
+```
+
+| Layer | Role |
+|-------|------|
+| **calx** | Dense prime factorisation of ℤ[1..N]; aliquot/derivative dynamics; CRT; OEIS sequence matching |
+| **curry** | Immutable versioned constants and functions; append-only computational provenance |
+| **kan** | Category-theory meta-layer: base categories → monoidal → NTs → Kan extensions → enrichment → profunctors → adjunctions |
+| **cert** | Proof-carrying attestation: five method tiers, structured witness storage, proof composition DAG, portable bundle export, consumer re-verification |
+| **Nerode** | DFA/automata engine on PostgreSQL: construction, minimization, product, session DFAs, sequence cache, certified handoff envelopes |
+| **Porter** | Agent context handoff: pre-pack external data, certify session boundaries, hand verified context to a new model with zero tool calls |
+
+---
+
+## Quick start
+
+```bash
+# 1. Start both PostgreSQL instances
+docker compose up -d db-trunkit db-nerode
+
+# 2. Apply all schemas (idempotent)
+make apply
+
+# 3. Trunkit: populate integers and run reflexive closure
+trunkit generate --limit 10000
+trunkit close --write
+
+# 4. Porter: pre-pack a morning brief and open it as Model B
+python scripts/morning_brief_demo.py
+```
+
+```bash
+# Install
+pip install trunkit   # proof kernel
+pip install nerode    # automata + porter layer
+```
+
+Environment variable: `CALX_DSN=postgresql://trunk:trunk@localhost:5434/trunk`
+
+---
+
+## CLI
+
+Trunkit ships a dual-surface CLI. Consumer commands are read-only and safe for LLM use.
+Prover commands require `--write` to record; they dry-run without it.
+
+### Consumer — read-only
+
+```bash
+trunkit verify <claim_id>
+# Re-verifies a claim without inserting. Replays the stored witness or
+# re-runs the probe SQL in a subtransaction. Exits 0 if valid.
+
+trunkit standing [--method M] [--status S]
+# Lists all claims with their latest attestation status.
+# Filter by method (comp_sql, struct_kan, formal_external,
+# empirical_corpus, witness_carry) or status (valid, refuted, unverified).
+
+trunkit export <id> [<id> ...]
+# Emits a self-contained JSONB bundle to stdout:
+# claims + certificates + witnesses + derivations.
+# Portable — consumers can re-verify without a Trunkit install.
+```
+
+```
+$ trunkit standing
+  [✓] #  1  comp_sql              valid         2026-05-19 14:32  28 is a perfect number: σ(28) − 28 = 28
+  [✓] #  2  witness_carry         valid         2026-05-19 14:32  12 has p-adic stratification {2:2, 3:1}
+  [✓] #  3  struct_kan            valid         2026-05-19 14:33  calx → curry functor is faithful
+  [?] #  4  formal_external       unverified    —                 σ(28) = 56 (external Python proof)
+
+$ trunkit verify 2
+  [✓] claim 2  →  VALID
+  evidence : {
+      "v2": 2,
+      "v3": 1
+  }
+  witness  : {
+      "kind": "term",
+      "levels": {"prime_2": 2, "prime_3": 1},
+      "reconstruction": "2^2 * 3^1 = 12"
+  }
+```
+
+### Prover — require `--write`
+
+```bash
+trunkit check <claim_id> [--write]
+# Dry-run: shows what the claim would attest as (via cert.verify).
+# With --write: runs cert.check() and records a certificate.
+
+trunkit attest [--write]
+# Dry-run: reports formal-tier claims that would be attested.
+# With --write: runs cert_formal.py and records all formal-tier certificates.
+
+trunkit close [--write]
+# Dry-run: reports intent without side effects.
+# With --write: computes reflexive closure — curry fixed points
+# (primitive eigenforms) + kan Perron-Frobenius attractor — and
+# records eigenform claims.
+
+trunkit witness <claim_id> --kind KIND --body JSON [--write]
+# Attach a structured proof witness to a claim.
+# KIND: term | trace | counterexample | hash_chain | kan_diagram
+```
+
+### calx data
+
+```bash
+trunkit init                           # apply schema DDL
+trunkit generate --limit N             # populate integers 1..N
+trunkit validate [--limit N]           # compare ω/Ω against OEIS
+trunkit reset                          # drop all calx tables
+trunkit oeis-load [--family F]         # fetch curated OEIS b-files
+trunkit oeis-match [--orbit-id ID | --all]
+trunkit compose-match
+```
+
+---
+
+## Porter — model-to-model context handoff
+
+Each model session starts with no memory of what the previous session fetched, proved,
+or decided. Porter pre-packs that context — external data, DFA states, proof certificates
+— into an envelope before the session closes. The next model calls
+`Precacher.open(envelope, session_id)` and has everything ready, cert verified, with
+zero tool calls.
+
+```python
+from datetime import date
+from nerode.precache import Precacher
+from nerode.sources import WeatherSource, TickerSource, HNSource
+
+today = date.today().isoformat()
+
+# Model A — fetch and pack before closing
+with Precacher(f"brief-{today}") as pc:
+    pc.fetch(f"weather:london:{today}", WeatherSource(51.5, -0.1, label="London"))
+    pc.fetch(f"ticker:AAPL:{today}",    TickerSource("AAPL"))
+    pc.fetch(f"news:hn:top5:{today}",   HNSource(5))
+# __exit__ calls close_session(); pc.envelope is now set
+
+# Model B — open the envelope in a separate process/connection
+ctx = Precacher.open(pc.envelope, "model-b-001")
+resolved = ctx["resolved"]        # {"weather:london:…": {…}, "ticker:AAPL:…": {…}, …}
+cert_ok  = ctx["prior_session"]["cert_valid"]   # True
+```
+
+### Cybernetic monitoring
+
+Porter includes DFA-based pattern detectors that fire over metric and control streams:
+
+| DFA | Pattern | Meaning |
+|-----|---------|---------|
+| `metric_rise_3` | `U{3,}` | 3+ consecutive rises |
+| `metric_oscillate` | `(UD){3,}` | oscillation / gain too high |
+| `dead_time_5/10/20` | `A_{k,}` | action without response in k steps |
+| `homeostasis_alarm_5` | `O{5,}` | 5+ steps outside target band |
+| `dead_time_5_x_metric_oscillate` | composite | oscillating AND unresponsive |
+
+```python
+# Log a paired (metric, control) event and scan all relevant DFAs
+conn.execute(
+    "SELECT nerode.log_cybernetic(%s, 'metric_x_control', %s)",
+    (session_id, "UA")   # metric rose (U), action taken (A)
+)
+# pg_notify('nerode_control_warn', ...) fires if any pattern matches
+```
+
+---
+
+## cert method tiers
+
+| Method | Trust root | Use |
+|--------|-----------|-----|
+| `comp_sql` | In-DB probe | Computational facts about integers or categorical counts |
+| `struct_kan` | Existing kan invariant | Naturality, triangle identities, faithfulness checks |
+| `formal_external` | SHA256-pinned external artifact | Python/Lean/Agda proof scripts |
+| `empirical_corpus` | Provenance only | Corpus document assertions |
+| `witness_carry` | In-DB witness term | Structured proof terms stored alongside certificates; consumer-replayable |
+
+---
+
+## PCC properties
+
+| Property | Mechanism |
+|----------|-----------|
+| Proof travels with code | `cert.witness` stores structured proof terms alongside every certificate |
+| Proofs compose | `cert.derivation` encodes a DAG of premises → conclusion under named rules |
+| Consumer re-verifies | `cert.verify(claim_id)` replays without INSERTing — safe for untrusted callers |
+| Bundle is portable | `cert.export_bundle(ids[])` emits self-contained JSONB: claims + certs + witnesses + derivations |
+
+---
+
+## Bundle size
+
+| Component | Files | Size |
+|-----------|-------|------|
+| SQL (94 files, 00–97) | 94 | ~534 KB |
+| Python tools | 39 | ~342 KB |
+| Proof scripts | 4 | ~23 KB |
+| Src + tests + config | ~58 | ~483 KB |
+| **Total (no virtualenv)** | **~199** | **~1.4 MB** |
+
+Compare: Lean 4 toolchain ≈ 2.9 GB per version; Mathlib compiled ≈ 4–10 GB per project.
+
+---
+
+## Repository layout
+
+```
+src/
+  calx/       — Trunkit Python package (calx + kan + curry + cert)
+  nerode/     — Nerode/Porter Python package
+    sql/      — 23 idempotent SQL schema files (00_bootstrap → 97_composite_dfa)
+    precache.py   — Precacher context manager (Porter API)
+    sources.py    — WeatherSource, TickerSource, HNSource, TickerHistorySource
+    adapters.py   — HttpSource, CallableSource, resolve(), with_retry()
+    db.py         — connection utilities + SCHEMA_FILES list
+scripts/
+  morning_brief_demo.py   — end-to-end Porter demo
+tests/
+  test_sources.py         — network tests (pytest -m network)
+  test_cybernetic.py      — cybernetic DFA tests
+  test_composite_dfa.py   — paired-alphabet composite DFA tests
+  test_dead_time_factory.py
+  test_*.py               — unit tests for all schema layers
+proofs/
+  *.py    — Trunkit proof scripts
+tools/
+  kan_in_kan.py   — Trunkit reflexive closure tool
+```
+
+---
+
+## License
+
+MIT