feat(weave): complete native sequence cycle and repair review findings

.github/workflows/weave.yml

@@ -4,30 +4,62 @@ on:
     paths:
       - 'research/weave/**'
       - '.github/workflows/weave.yml'
+      - 'stack-manifest.json'
+      - 'STACK_MANIFEST.md'
   push:
     paths:
       - 'research/weave/**'
       - '.github/workflows/weave.yml'
+      - 'stack-manifest.json'
+      - 'STACK_MANIFEST.md'
   workflow_dispatch:
 permissions:
   contents: read
 jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - name: Checkout the event source with GitHub PR isolation
-        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
+      - name: Checkout event source with PR isolation
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
         with:
           persist-credentials: false
       - name: Verify exact event identity
         env:
           SOURCE_SHA: ${{ github.sha }}
         run: test "$(git rev-parse HEAD)" = "$SOURCE_SHA"
-      # Push validates the exact branch head; pull_request validates GitHub's
-      # isolated merge ref. Neither grants write credentials to tested code.
-      - name: Verify assembly and provisional transport, not native cipher security
+      - name: Checkout exact native geometry producer
+        uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1
+        with:
+          repository: The-Interdependency/ucns
+          ref: 905e66964a495d7596a577bb64e4158db9465864
+          path: .weave-inputs/ucns
+          persist-credentials: false
+      - name: Verify native cycle and existing regressions
         run: |
           set -euo pipefail
+          export WEAVE_SOURCES="$GITHUB_WORKSPACE/.weave-inputs"
+          test "$(git -C "$WEAVE_SOURCES/ucns" rev-parse HEAD)" = "905e66964a495d7596a577bb64e4158db9465864"
           python3 -VV
           PYTHONDONTWRITEBYTECODE=1 python3 research/weave/test.py --receipt "$RUNNER_TEMP/weave-check.json"
           cat "$RUNNER_TEMP/weave-check.json"
+          PYTHONDONTWRITEBYTECODE=1 python3 research/weave/cycle.py demo | tee "$RUNNER_TEMP/weave-demo.json"
+      - name: Package tracked research source and observed evidence
+        if: always()
+        run: |
+          set -euo pipefail
+          mkdir -p "$RUNNER_TEMP/weave-inspection"
+          git archive --format=zip --output="$RUNNER_TEMP/weave-inspection/stack.zip" HEAD research/weave tools stack-manifest.json STACK_MANIFEST.md AGENTS.md README.md docs
+          git -C .weave-inputs/ucns archive --format=zip --output="$RUNNER_TEMP/weave-inspection/ucns.zip" HEAD
+          git rev-parse HEAD > "$RUNNER_TEMP/weave-inspection/STACK_HEAD.txt"
+          git -C .weave-inputs/ucns rev-parse HEAD > "$RUNNER_TEMP/weave-inspection/UCNS_HEAD.txt"
+          for evidence in weave-check.json weave-demo.json; do
+            if test -f "$RUNNER_TEMP/$evidence"; then cp "$RUNNER_TEMP/$evidence" "$RUNNER_TEMP/weave-inspection/"; fi
+          done
+      - name: Retain exact-source research bundle, not a security release
+        if: always()
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1, Node 24
+        with:
+          name: weave-inspection-${{ github.sha }}
+          path: ${{ runner.temp }}/weave-inspection/
+          if-no-files-found: error
+          retention-days: 7

AGENTS.md

@@ -150,9 +150,10 @@ coherence; it does not replace workspace behavioral tests.
   independent repository/release authority boundary; exact UCNS affixiation geometry is unresolved.
 - URPCS is retired for specification divergence. Why GPT substituted the different
   architecture remains `hmmm`; its retained evidence is historical and implementation-local.
-- Weave is specification-first research. Uneven partitions, stage-input
-  composition, schedule encoding, thread/corpus binding, hyperspace/gonol binding,
-  authentication/state, and the threat model remain `hmmm` until explicitly resolved.
+- Weave remains research. Its explicit native binary sequence-cycle candidate
+  lives in `research/weave/native_binary.py`; UCNS geometry is consumed, not
+  redefined. UCHC binary graduation has not occurred. Private/public lifting,
+  authentication/state and full-cipher security remain `hmmm`.
 - The complete root `skill-lib/` snapshot refresh remains separate because the current
   provenance-bound fresh-making doctrine is newer than the local generator snapshot.
 - Project graduation automation remains unimplemented.

README.md

@@ -305,3 +305,15 @@ and detailed design attribution remain unresolved; see
 
 Weave native public/private key derivation and source of asymmetry remain
 unresolved. Provenance metadata is not an implementation of that missing law.
+
+### Executable Weave sequence cycle
+
+`research/weave/CYCLE.md` documents the current corpus-normalization → repeated
+sequence affixiation → prime-derived bit-interleave profile and exact inverse.
+The binary origin/sequence candidate remains Stack-owned in
+`research/weave/native_binary.py` and consumes unchanged native UCNS geometry.
+UCHC supplies the origin/axis architecture reference; no new binary package has
+graduated there. Private/public key derivation and security remain separate work.
+
+Run `WEAVE_SOURCES=/checkouts python research/weave/cycle.py demo` with the exact
+UCNS source named in `research/weave/CYCLE_NATIVE.json`.

STACK_MANIFEST.md

@@ -17,7 +17,7 @@ Provenance and authority-boundary record for `The-Interdependency/stack`.
 - English four-view complete-corpus audit UTC: `2026-09-22`, exact view source `1f9a35eb355296fc88d09784c7a3e2e95511ca31`; all 164,864 words, native and independent agreement.
 - Stack-manifest schema: `the-interdependency.stack-manifest` version `1.1.0`
 - Work-graph digest (SHA-256 over canonical `repositories` + `research_participants` + `boundaries` JSON):
-  `889a1234456c29c27473bfddb7808b209b2e1451da10e596fa9feea0f6ea4918`
+  `dc2cac5ac1d609f7f72434514ec95a55e8020b0b9326c17883b1ef25e86baaa3`
 - Weave workspace creation UTC: `2026-09-28`; new specification-first research starts from the intended multi-arity interleaving mechanism without URPCS inheritance
 - Machine-readable copy: [`stack-manifest.json`](stack-manifest.json)
 
@@ -63,7 +63,9 @@ release identity.
 | `research/epac/` | `The-Interdependency/stack` | `0e8384bbb60e4c2189016a212bdd0030d04aed7d` | historical forge evidence; active implementation consumed from the independent EPAC release | no |
 | `research/epac-derived-carrier/` | `The-Interdependency/stack` | `545e135e2efbbcf29f033ab5530ac4876a68b718` | active stack-local carrier audit consuming exact EPAC source; no EPAC implementation/public-contract or scientific standing transfer | no |
 | `research/urpcs/` | `The-Interdependency/stack` | `a428a41a38a8b30bacb7025a4d54070b228a8089` | retired substituted-codec historical evidence only; no active URPCS authority or evidence transfer | no |
-| `research/weave/` | `The-Interdependency/stack` | `1ba201449731337dc20c564788f4303c8910bfdd` | full gonol/private-key/thread/corpus/interleave/asymmetric construction research; native derivation unresolved; no URPCS implementation inheritance or security standing | no |
+| `research/weave/` | `The-Interdependency/stack` | `1ba201449731337dc20c564788f4303c8910bfdd` | Stack-owned native binary sequence-cycle candidate; private/public derivation unresolved; no URPCS inheritance or security standing | no |
+| `research/weave/` | `The-Interdependency/ucns` | `905e66964a495d7596a577bb64e4158db9465864` | native exact axis-circle and Mobius geometry; source-verified unchanged mathematical producer for native_binary.py | no |
+| `research/weave/` | `The-Interdependency/uchc` | `4ad94e92be10d2c4c875a848addfda46f3c7cfdb` | origin/axis architecture and domain migration boundary; architectural reference only; speculative binary implementation remains in Stack until graduation gates complete | no |
 | `research/english-gonol/` | `The-Interdependency/stack` | `99b3598b02a6e683b3c84184d8ea443b12fc0e1a` | stack-local English lexical/gonol construction separated from EDCM; full pinned-corpus v2 build/replay survived; consumes UCNS geometry; EDCM may evaluate outputs but does not define construction | no |
 | `research/english-gonol/` | `The-Interdependency/edcm` | `0873c105799681ea1f7ccb3e619d1f7aebbd85e0` | exact repaired EDCM semantic metric-origin producer; preserves canonical O/L identities and proxy-alignment metadata without refreshing `libs/edcm` or transferring measurement authority | no |
 | `research/python-gonol/` | `The-Interdependency/stack` | `0e8384bbb60e4c2189016a212bdd0030d04aed7d` | stack-local bottom-up Python 3.12 source gonol construction; applies METAPAT affixiation semantics, consumes optional UCNS geometry, and transfers no language authority to UCNS or EDCM | no |
@@ -237,7 +239,7 @@ independent repository, release, or security-reviewed cryptosystem.
 - English Gonol Construction remains stack-local research; independent repository/release authority and the exact UCNS displacement law have not been established.
 - Python Gonol Construction remains stack-local research; independent repository/release authority and exact UCNS affixiation geometry remain unresolved.
 - URPCS is retired for specification divergence; why GPT flattened/substituted the intended construction remains unresolved, and retained evidence is scoped only to the substituted implementation.
-- Weave preserves the intended mechanism, while uneven partitioning, stage-input composition, schedule encoding, thread/corpus binding, hyperspace/gonol binding, authentication/state, and the threat model remain unresolved.
+- Weave now runs one explicit native sequence-cycle profile with corpus normalization and prime-derived splits; cryptographic lifting, authentication/state and full-cipher security remain unresolved.
 - `skill-lib/` remains a special operational snapshot at stack root rather than following the ordinary `libs/` + `research/` pair.
 
 ## UCHC input candidate
@@ -255,3 +257,17 @@ and detailed design attribution remain unresolved; see
 
 Weave native public/private key derivation and source of asymmetry remain
 unresolved. Provenance metadata is not an implementation of that missing law.
+
+## Weave native sequence-cycle candidate
+
+`research/weave/native_binary.py` is the Stack-owned binary-origin and sequence
+closure implementation. It consumes the exact UCNS sources above and follows the
+UCHC origin/axis architecture, without shipping an ungraduated UCHC domain. The
+misplaced UCHC #7 proposal is retained only as source provenance in
+`research/weave/NATIVE_BINARY_PROVENANCE.json`. No geometry authority transfers.
+
+The cycle normalizes once with corpus bytes, discovers repeated multi-byte
+sequences, retains native whole/occurrence-circle relations, uses scoped numeral
+references and prime-route bit partitions, and reverses the completed rounds.
+See `research/weave/CYCLE.md` for the explicit profile, exact source lock, bounds
+and all-cost accounting. This is construction/recovery, not established encryption.

research/weave/ASSEMBLY.md

@@ -1,5 +1,11 @@
 # Weave: full modular assembly v1
 
+**Historical transport/assembly scope.** This document describes the retained
+transport experiment, not the current binary sequence cycle. Current executable
+construction and ownership are in [CYCLE.md](CYCLE.md); current question
+status is in [QUESTIONS.md](QUESTIONS.md). The older unresolved declarations below
+apply to that assembly, not to already-implemented parts of the new cycle.
+
 Status: ASSEMBLY IMPLEMENTED; COMPLETE ENCRYPTION NOT IMPLEMENTED.
 
 This is a source-bound composition contract and switchable runner, not a replacement