# TrueFix complete canonical DAC preparation — 2026-10-13

The complete current-thread runtime from the preceding qualification now has a
separate physical controller, fixed namespace launcher and immutable root
installer. They use a new prefix and retain the legacy Rust adapters and
all previously queued jobs unchanged. The 10k/s rate contract and full
fixture, administration, raw delay, physical counter and stability gates stay
in force. Existing local mixed-flow failures do not prevent a complete
physical diagnostic matrix from being retained.

## Qualified inputs

The portable payload contains exactly three regular files. Tree SHA:
`ab3f59fa05ab842a085b0fd0c6ac1283bc8e969c3c4b564a4042fa164cd84284`.
Executable SHA:
`fa4c3c9f005924241a153cbf67a7ec531ac8c2cb4094645f3ecff1f99269c386`.
Dictionary SHA:
`17c7d7936bdfdab9359dbb6e8602110a1937660bdfccdc464671e098aa18c49a`.
Provenance SHA:
`1bb560a4a4166ead088e5f3ed78288bfb321eab0f674e99abfa08e8125df02d0`.
Launcher SHA:
`56eb68a469a6abf64a5dbaf3509be16266ed3e1dd3ffaa9e8b5e442290cd840f`.

Both hosts have those staged inputs. HP has completed the actual twelve-pair
functional and full local/cold qualification of this exact executable. SCAN's
separate exact-current-thread twelve-pair check is queued through the helper;
it must pass before its new physical job may start. The default portable
executable has separately passed twelve actual SCAN pairs, and an independent
HP cold reader reproduces those SCAN originals with 91 refusals. SCAN's own
cold reader remains queued; these checks create no new physical proof.

## Controller and independent reader

The standalone controller source contains 823 files, pin
`uncommitted-truefix-physical-controller-8341f4b9120a00e2f33d67e9d45ac24ab96aa63574a2fad793cd306d0aeb5fd4`.
It requires explicit deployment facts and an exclusive shared/isolated lease,
then verifies every root payload pin before output creation or sockets. HP's
actual help and missing-root checks pass, with no output created on refusal.

The SDK-free physical reader now selects an explicit TrueFix policy, including
its production-log/completed-socket observer and prepared-send clock. HP
replays sixteen retained SDK cases across C++ CORE, Native, Rust and TrueFix,
and refuses 56 synthetic physical metadata/counter controls, with no SDK
builds or new socket pairs. Synthetic counter declarations cannot establish
an actual NIC link or report grade. Twelve existing counter/polling tests
pass with zero skips; both shell scripts parse and both public files have
zero scrub findings.

Immutable `evidence/truefix-dac-preparation-20261013` retains 5,061 files,
17,547,593 bytes, seal
`6abf0b98e41d92851bf8d62c7dfac72e7e03aeb9bd9f68ca59fd64d907250aa8`.
Both host replicas verify every original byte and mode. This seal contains
no new SDK/physical runs.

## Queued physical work and remaining admission

Both frozen capsules are
`~/.cache/libhft/fullbench-truefix-canonical-dac-20261013-8341f4b9120a`.
Their waiting jobs hold no CPU lease until
`/usr/local/libexec/libhft-bench/fullbench-truefix-canonical` and its fixed
launcher are installed. SCAN additionally waits for its exact staged runtime
functional receipt. HP requests high priority; SCAN requests normal priority.
Both then use isol-no-shared and queue when occupied. Ports 58800/58900 are
reserved for the four tiny and twelve full pairs respectively. A completed
matrix retains 120,080 primary/delay samples and original link counters.

Root installation, actual tiny/full DAC results, independent physical replay
and matched Rust comparison remain pending. Four other new runtime prefixes
also remain uninstalled on both hosts, with eight prior waiting physical jobs.
The home installer still selects those four; adding this fifth runtime will
follow the exact SCAN qualification and staged-input checks. No existing
installer or user-running script is replaced by this preparation.