Allocate remaining candidate integration proof

[yihanzhu]

Tracks #327.

The remaining accepted integration proof exceeds the candidate implementation's size allowance. Adjust only eight numeric spec lines to allow 5,450–6,000 added-plus-removed implementation lines. Risk, behavior, seven allowed paths and all nine proof rows remain byte-identical.

The preserved implementation has 5,061 lines: 2,288 production, 2,598 tests and 175 documentation/manifest. The original author's remaining proof forecast gives a rounded total of 5,475–5,700, with 300 lines of room for uncertainty. Existing fixtures will cover real raw-object/index errors, retained resource limits and OS I/O/lifecycle failures; no new framework or production instrumentation is needed.

Implementation remains paused on PR #396 at 75c3423. This G2 amendment must land before a separate hash-linked high-risk plan amendment and renewed implementation claim. The round cap and required native/Linux proof remain unchanged.

Validation: exact byte comparison outside eight numeric lines, arithmetic, sole-spec history/scope, normal base-merge topology and whitespace checks pass. No test suite was rerun for this numeric artifact change.

review_size: standard. Artifact diff: 8 additions and 8 deletions.

[cloudflare-workers-and-pages]

Deploying ystack with    Cloudflare Pages

Latest commit:	86ad3b3
Status:	✅  Deploy successful!
Preview URL:	https://ac1af2fe.fabrica-6yx.pages.dev
Branch Preview URL:	https://ystack-spec-candidate-conten.fabrica-6yx.pages.dev

View logs

[yihanzhu]

PR405 — independent size-only G2 review

G2-verdict: ACCEPT

No Important findings. This accepts the numeric spec amendment only. It does not accept implementation, waive proof, advance an implementation review round or authorize code to resume before the separate plan gate.

Exact reviewed tuple

• Repository: yihanzhu/ystack.
• PR: Allocate remaining candidate integration proof #405.
• Branch: ystack/spec/candidate-content-preparation.
• Head: 86ad3b33473c586a917ca58cd7263834e35abd6d.
• Base/current main: aedc7a649de71afd7aeff4278e922ab699c53a80.
• New spec blob: 079be9befacd58f19203bf70c0751281668156a8.
• Intent blob and spec link: fd10d967e2c6ee1fea4a80b560e861856d3ed507.
• Unchanged plan blob: ab4653254e7431cfa9a62d4a8740451f2b5b7f00.

Before/after checks confirmed the same local/API head and base, clean spec worktree, OPEN PR and empty labels, including merge-ready absent.

Reviewer: /root/candidate_readonly_preflight, requested Astra/high; actual runtime identity unexposed. Independent from the spec author and original Sol implementation author.

Three review passes

Bugs: Read the complete current spec and exact diff. Only eight sizing lines change, producing eight additions and eight removals. Arithmetic is correct:

• Production: 2,288.
• Tests: 3,012–3,237.
• Documentation/manifest: 175.
• Total forecast: 5,475–5,700.
• Envelope: 5,450–6,000; headroom above upper forecast: 300.

The forecast reasonably accommodates the remaining accepted raw-object, resource and I/O/lifecycle proof. No contradictory numeric change was found.

Security: All non-sizing spec bytes remain unchanged. Trusted-input requirements, descriptor boundaries, resource ceilings, inactivity, ownership limitations, refusal behavior and excluded authority remain intact. The amendment introduces no product instrumentation, runtime capability or exception.

Compliance: The sole changed path is work/candidate-content-preparation/spec.md. Risk remains high; all seven implementation paths and nine proof rows are unchanged. The current program permits reasonable in-scope size amendments through independent artifact review without another operator decision.

History preserves the original branch:

• Amendment parent: d0ff479e21849453a631f7f29a524288512686c5.
• Refresh merge parents: c0527a5f6a138c930f30e4e58999da28cf83a416, then the reviewed base.
• Refresh merge tree exactly equals the base tree.
• Every non-merge commit unreachable from base touches only the spec path.
• Preserved alias remains f9e7ab1bb852a224e946761d3e76e6573a7f38be.

PR396 remains clean and paused at 75c3423ee97308d9f4a953c172d22b208b93ffde. The unchanged plan still links the previous spec; that is intentional at this G2 stage. A separate reviewed high-risk plan amendment must update the link and sizing before implementation resumes.

Validation and limits

Exact-head quick CI 35704323197 completed successfully. No product, test, import, file write, Git mutation or forge mutation was performed by this reviewer.

The outstanding implementation findings, applicable round cap and native/Linux proof obligations remain unchanged. The manager must record this exact G2 tuple and follow the separate plan-amendment sequence.