# PUSH LIST — f3, S12, 2026-09-04

**Nothing in this list has been executed.** Every command below was prepared, its inputs built and
checked locally, and then stopped. No push, no upload, no publish, no org creation, no OTS stamp.
Local branch `site-program/2026-09` at **afb4497**.

## What a stranger sees today, and what is true

`github.com/nickharris808/wireless-reliability-fallback-lab` is **PRIVATE**; an unauthenticated
request returns **404** (`gh repo view … --json isPrivate` → true; `curl` → 404). So a stranger sees
**nothing of this repository**: not the register, not the seals, not the corrections. What a
stranger *can* see is the nine public package repositories, two Hugging Face datasets, two Spaces
and the documentation site — all of which are this lane's, all MIT, and all byte-identical to this
tree as of 2026-09-04 apart from the deltas named below.

What an authorised collaborator sees is `main` as of 2026-08-29 — **71 commits behind** this
branch, missing every S02–S12 result including the register, the twelve seals, the kernel
correction and the closure rename.

## ip_class

`ip_class` is UNKNOWN for every register asset by standing order and no lane spends a turn on IP.
For the files in these bundles the operative fact is stronger and checkable: **every one of them is
either already public today or a distribution built from already-public source.** No file classed
DRAFTED-UNFILED or MECHANISM-PRIVATE is present, and that is enforced rather than asserted —
`python3 oss/tools/stage_outbox.py` refuses to stage while any staged file sits under a private
directory, imports a private module, carries an IP marker, or contains an absolute path naming this
machine. Its refusal is tested against a real private source file, not a mock (`--control`, 6 legs).

## 1 — PyPI (the only genuinely unpublished content)

Built and `twine check` PASSED (12 of 12 distributions). The index still serves the previous
version of each. **Order matters: PyPI before the Spaces**, because the Spaces' pages tell a reader
`pip install protocol-bench`.

| # | command (run from `oss/`) | target | carries | ip_class |
|---|---|---|---|---|
| 1 | `python -m twine upload minicheck/dist/minicheck-0.4.1*` | pypi.org/project/minicheck | 0.4.0 → **0.4.1** | public source |
| 2 | `python -m twine upload protocol-bench/dist/protocol_bench-1.1.1*` | pypi.org/project/protocol-bench | 1.1.0 → **1.1.1** | public source |
| 3 | `python -m twine upload failclosed/dist/failclosed-0.2.1*` | pypi.org/project/failclosed | 0.2.0 → **0.2.1** | public source |
| 4 | `python -m twine upload polyfrac/dist/polyfrac-0.2.1*` | pypi.org/project/polyfrac | 0.2.0 → **0.2.1** | public source |

**Owner-gated, new distribution names — not approved, listed for the decision:**

| # | command | target | carries | why gated |
|---|---|---|---|---|
| 5 | `python -m twine upload specforge/dist/pcar_specforge-0.1.0*` | pypi.org/project/**pcar-specforge** | new name, 0.1.0 | a name nobody holds. The wheel on disk before today was `Name: specforge`, built pre-rename; uploading it would have targeted **SGLang's** project. It was deleted and rebuilt. |
| 6 | `python -m twine upload minicheck-mcp/dist/minicheck_mcp-0.2.0*` | pypi.org/project/minicheck-mcp | 0.2.0, first upload | a first publication of a name. Its five tools declare no capability annotations, so it is currently ungradable by this lane's own checker; better to annotate first. |

**After 1–4 only:** bump the four README version lines and re-run `python3 tools/index_names.py
--write`. Not done locally and deliberately so — `test_the_readme_never_advertises_a_version_that_is
_not_released_yet` fails if a README quotes a version the index does not serve, which is the test
doing its job.

## 2 — GitHub (7 of 9 repositories; 2 need no push)

Method: `PUBLISH.md` §2 — clone, `rsync --delete` excluding `.git/ build/ dist/ *.egg-info/`
`__pycache__/ .ruff_cache/ .pytest_cache/ mcp.json`, stage explicit paths, never `git add -A`.
Every delta below was measured file by file against the live tree (`out/s12/push_delta.log`).

| # | target | files changed | what it carries | ip_class |
|---|---|---|---|---|
| 7 | github.com/nickharris808/minicheck | 2 differ, 0 new, 0 only-remote | the `tomllib` fallback (CI red on 3.9/3.10 since 2026-08-18) and `tomli` in the test extra | already public |
| 8 | github.com/nickharris808/protocol-bench | 4 differ, 0 new, 0 only-remote | the same CI fix, plus the dataset card's provenance, hashes and runnable control, plus the paper's sealed model row | already public |
| 9 | github.com/nickharris808/failclosed | 2 differ, 0 new, 0 only-remote | the same CI fix | already public |
| 10 | github.com/nickharris808/polyfrac | 2 differ, 0 new, 0 only-remote | the same CI fix | already public |
| 11 | github.com/nickharris808/specforge | 3 differ, 0 new, 0 only-remote | the same CI fix, plus the dataset card's Provenance, Citation and control sections | already public |
| 12 | github.com/nickharris808/minicheck-mcp | 2 differ, 0 new, 0 only-remote | the same CI fix, **and `git rm mcp.json`** (estate hold, applied to every lane permanently) | already public |
| 13 | github.com/nickharris808/minicheck-action | 1 differ, 0 new, 0 only-remote | `pyyaml` added to the self-test workflow (the job has errored on `import yaml` since it was published) | already public |

**No push needed:** `protocol-bench-action` and `verification-docs` — 0 differ, 0 new, 0 only-remote.
Re-running the docs deploy after the bumps is optional and changes no content.

## 3 — Action tags

| # | command | target | carries |
|---|---|---|---|
| 14 | `git tag v1.0.1 && git push origin v1.0.1` | nickharris808/minicheck-action | the fixed HEAD |
| 15 | `git tag v1.0.2 && git push origin v1.0.2` | nickharris808/protocol-bench-action | the fixed HEAD |

`v1` is **not** moved. It resolves to `e39ad12` (2026-07-28), three commits behind, and is missing
a real fix — spec paths were derived back from a sanitised filename, so any spec whose name
contains an underscore was reported under a path that does not exist. A reader's `uses: …@v1` gets
that bug today. Moving a published tag is a forced update and I6 forbids it, so the tags above are
cut instead and the READMEs pin them. **Whether `v1` may be re-pointed is the owner's call.**

## 4 — Hugging Face

| # | command | target | carries | ip_class |
|---|---|---|---|---|
| 16 | `hf upload nickh007/protocol-bench oss/protocol-bench/dataset/README.md README.md --repo-type dataset` | hf.co/datasets/nickh007/protocol-bench | card only: a runnable negative control (`protocol-bench run always-safe` → 0.867 accuracy, 0.500 balanced, 0 detections) and the sha256 of the published jsonl | already public |
| 17 | `hf upload nickh007/specforge oss/specforge/dataset/README.md README.md --repo-type dataset` | hf.co/datasets/nickh007/specforge | card only: Provenance with the three exact `specforge export` commands, the sha256 of all three files, a control, and a citation | already public |
| 18 | Spaces, `PUBLISH.md` §3 — copy files **without** `--delete`, then `git push` | hf.co/spaces/nickh007/{protocol-bench-demo, specforge-leaderboard} | rebuild `index.html` carrying only the 0.4.1/1.1.1 wheels; the hub currently vendors both old and new | already public |

The data files themselves are **not** re-uploaded and do not change. Both cards' commands were
verified to regenerate the published bytes exactly on 2026-09-04: `protocol_bench.jsonl` sha256
`a147f0e1…`, and all three specforge files from `--seed 2026` (`e4655a30…`, `2568dc41…`,
`8d9d5315…`). Item 18 must follow items 1–2 or the pages will name a version the index lacks.

## 5 — This repository

| # | command | target | carries |
|---|---|---|---|
| 19 | `git push -u origin site-program/2026-09` | new ref on the private repo | afb4497, 71 commits |
| 20 | `gh pr create --base main --head site-program/2026-09` | a record of the merge | — |
| 21 | `git push origin site-program/2026-09:main` | private repo `main` | **fast-forward**, verified: `origin/main` is an ancestor, 71 ahead / 0 behind |
| 22 | `git push origin repair/cede-80211bt-to-sister-estate` | private repo | 1 ahead / 0 behind, fast-forward |

Item 21 is a CLI fast-forward on purpose. GitHub's "rebase and merge" would rewrite 71 commit
shas that the seals and every ledger entry cite by hash. Nothing is deleted, no tag moves, the two
backup branches and the 13 pull-request heads are untouched, and the repository stays private.

## 6 — Owner decisions, each its own line, none prepared

Create the `orbitalproof` GitHub and Hugging Face organisations (neither exists — both 404 today),
or keep the D15 default of personal accounts with a README pointer. Open or decline the four
candidate offline-verifier surfaces (`pcar-verify`, `closure-verify`, `prereg-verify`, a HoldCo
tooling repository for the three estate instruments). OTS-anchor the twelve seals, which is an
outbound network action and needs its own approval.

## Bundle receipts

`oss/outbox/MANIFEST.json` — 13 bundles, 201 files, each with its target and a `bundle_sha256`.
Regenerate with `python3 oss/tools/stage_outbox.py`; it re-runs its six refusal legs first and
stages nothing if any fails.

| bundle | kind | target | files | sha256 |
|---|---|---|---:|---|
| `failclosed` | github | nickharris808/failclosed | 15 | `aea3f7fe4499e6b5…` |
| `minicheck` | github | nickharris808/minicheck | 30 | `df4cb11684189013…` |
| `minicheck-action` | github | nickharris808/minicheck-action | 11 | `89720519c1fc3564…` |
| `minicheck-mcp` | github | nickharris808/minicheck-mcp | 15 | `519ee730703a520a…` |
| `polyfrac` | github | nickharris808/polyfrac | 14 | `b729d0b380cf9c95…` |
| `protocol-bench` | github | nickharris808/protocol-bench | 33 | `6caaaed63ba89298…` |
| `action-repo` | github | nickharris808/protocol-bench-action | 8 | `d126ed5a0b8edc31…` |
| `specforge` | github | nickharris808/specforge | 18 | `0d1571fa47059b73…` |
| `verification-docs` | github | nickharris808/verification-docs | 25 | `2920ac7c23fa19f0…` |
| `protocol-bench/dataset` | hf_dataset | nickh007/protocol-bench | 3 | `27b93e4e1c7cb3a7…` |
| `specforge/dataset` | hf_dataset | nickh007/specforge | 1 | `a56cb7f10c82456e…` |
| `spaces/protocol-bench-demo` | hf_space | nickh007/protocol-bench-demo | 15 | `4d9af1f39b6eab34…` |
| `spaces/specforge-leaderboard` | hf_space | nickh007/specforge-leaderboard | 13 | `1813ce702a4adfe0…` |