H16: audit the sanitizer threat model instead of continuing the carrier search

CHANGELOG.md

@@ -32,6 +32,9 @@
 - Cycle 8 letter-mix scale reserved seeds `1040000` and `1050000` before generation. Combined with `1020000`+`1030000`, mix is **0/256** raw transformed WM, mix UW **0/256**, worst mix score 0.519522 (gap 0.037577). The two-corpus 0/128 scorecard is not rewritten. This 0/256 is development scale, not confirmation.
 - Froze development mechanism `u034f-ufe00-letter-alt-v1` as `cycle8-mix-freeze-v1`. Public CLI remains empty.
 - Cycle 8 mix freeze one-shot confirmation on preregistered seeds `830000` / `840000` / `850000`: mix **0/192** raw transformed WM, mix UW **0/192**, visible **192/192**, frozen sanitizers matching raw zeros, worst mix score 0.524300 versus threshold 0.557099 (gap 0.032798). Those seeds are spent. Do not rerun looking for zero. Mix is not product-authorized. Do not generate `950000`.
+- Recorded `cycle8-mix-publishability-v1` after merging that freeze onto `main`. Product hardening on that report: software compatibility PASS on the UTF-8 product surface (Latin-1/ASCII/cp1252 unsupported; visible-projection search; raw codepoint search is not the product API). Sanitizer weaknesses still FAIL; assigned-Unicode feasibility and the width-0 closed set found no stronger Priority-Zero invisible mechanism. All 13 enclosing marks change Chromium `pre` pixels. Cross-detector generalization PASSes on Hugging Face nine-key GPT-2 Weighted Mean 0/192 plus independent Google `synthid-text` 30-key GPT-2 mix **0/192** (identity WM 189/192). DistilGPT2 n=16 is HYPOTHESIS second-model transfer (identity 16/16, mix 0/16), not confirmation-scale. Mean versus Weighted Mean on the same GPT-2 Hugging Face adapter remains HYPOTHESIS. Mix is not product-publishable. Tag `v0.3.0` is not retagged.
+- Cycle 8 H12 control-code research: DEL and C1 except NEXT LINE survive Mn-strip, default-ignorable-strip, Cf-strip, NFC/NFKC/NFKD, and frozen Cycle 6/7 sanitizers while keeping exact visible projection. Chromium `pre` pixels are host-dependent (research host matched; GitHub Actions Chromium rejected the full apply). Seen DeepMind 30-key diagnostic rescore of seed `920000` n=16 is control-mix **0/16** WM with identity **16/16**. Independent reserved seed `1100000` n=16 is control-mix **0/16** WM with identity **15/16**. This is a new `Cc` class, not a mix sanitizer PASS. Public CLI stays empty. Do not generate `950000`.
+- Cycle 8 H13 post-sanitizer mechanism class: no measured Unicode-string transform family is simultaneously sanitizer-surviving on the required set, Chromium-portable, ordinary plain text, and Priority-Zero safe. This is a classification, not a Unicode re-scan, and does not rewrite mix sanitizer FAIL. Public CLI stays empty. Do not generate `950000`.
 
 ## v0.2.0 — Exact-survival confirmation and release hardening
 

README.md

@@ -23,7 +23,7 @@ A later system benchmark reserved seeds `980000` and `990000` before generation
 
 Letter-space margin seeds `1000000` and `1010000` were reserved before generation. Combined fresh letter-space is **1/128**; do not rewrite that as zero.
 
-Letter-mix margin seeds `1020000` and `1030000` were reserved before generation. Detector-blind U+034F/U+FE00 letter-alt is fresh **0/128** raw transformed WM (max 0.513691, gap 0.043407) with mix UW **0/128**. Independent scale seeds `1040000` and `1050000` were reserved before generation; combined mix is **0/256** (worst max 0.519522, gap 0.037577). The two-corpus 0/128 scorecard is not rewritten. Letter-x1 on those same corpora is also 0/256 (worst max 0.543903). Chromium mix fixtures were pixel-equal on the measured surfaces. The mix mechanism is frozen as `cycle8-mix-freeze-v1`. One-shot confirmation on seeds `830000` / `840000` / `850000` is **0/192** raw transformed WM, mix UW **0/192**, visible **192/192**, worst max 0.524300 (gap 0.032798). Those seeds are spent. It is still not product-authorized. Seed `880000` is publicly exposed by closed unmerged PR #98 and is not eligible as unseen validation. See [`docs/cycle8/mix-freeze.md`](docs/cycle8/mix-freeze.md), [`docs/cycle8/letter-mix-margin.md`](docs/cycle8/letter-mix-margin.md), [`docs/cycle8/letter-system-benchmark.md`](docs/cycle8/letter-system-benchmark.md), and [`docs/seeds.md`](docs/seeds.md).
+Letter-mix margin seeds `1020000` and `1030000` were reserved before generation. Detector-blind U+034F/U+FE00 letter-alt is fresh **0/128** raw transformed WM (max 0.513691, gap 0.043407) with mix UW **0/128**. Independent scale seeds `1040000` and `1050000` were reserved before generation; combined mix is **0/256** (worst max 0.519522, gap 0.037577). The two-corpus 0/128 scorecard is not rewritten. Letter-x1 on those same corpora is also 0/256 (worst max 0.543903). Chromium mix fixtures were pixel-equal on the measured surfaces. The mix mechanism is frozen as `cycle8-mix-freeze-v1`. One-shot confirmation on seeds `830000` / `840000` / `850000` is **0/192** raw transformed WM, mix UW **0/192**, visible **192/192**, worst max 0.524300 (gap 0.032798). Those seeds are spent. Publishability: software compatibility PASS on the UTF-8 / visible-search product surface; sanitizer FAIL (Mn-strip and default-ignorable-strip still restore mix; assigned-Unicode closed set found no Priority-Zero-safe survivor); cross-detector PASS on Hugging Face nine-key GPT-2 Weighted Mean plus independent DeepMind 30-key GPT-2 mix **0/192**. DistilGPT2 n=16 is `HYPOTHESIS` second-model transfer, not confirmation-scale. Mix is still not product-authorized. Seed `880000` is publicly exposed by closed unmerged PR #98 and is not eligible as unseen validation. See [`docs/cycle8/mix-publishability.md`](docs/cycle8/mix-publishability.md), [`docs/cycle8/mix-freeze.md`](docs/cycle8/mix-freeze.md), [`docs/cycle8/mix-deepmind-transfer.md`](docs/cycle8/mix-deepmind-transfer.md), [`docs/cycle8/mix-second-model-transfer.md`](docs/cycle8/mix-second-model-transfer.md), [`docs/cycle8/letter-mix-margin.md`](docs/cycle8/letter-mix-margin.md), [`docs/cycle8/letter-system-benchmark.md`](docs/cycle8/letter-system-benchmark.md), and [`docs/seeds.md`](docs/seeds.md).
 
 See [`docs/product-contract.md`](docs/product-contract.md) and `specs/fuckmark-user-visible-invariance-v1.contract.json`.
 
@@ -144,7 +144,7 @@ Cycle 7 Stage A/B/C researched collapse-resistant *visible* edits (contractions,
 
 ## Cycle 8 status
 
-Cycle 8 is the exact-visible-projection generation. See [`docs/cycle8/README.md`](docs/cycle8/README.md). U+200C remains a diagnostic baseline (stripped by Cf). Combining grapheme joiner U+034F letter-x1 remains a strong visible-invariant development arm (`HYPOTHESIS`): fresh reserved-before-generation **0/128** on seeds `980000`+`990000` with a thin 0.003 gap, plus a separate experimental **0/192** (128 seen + 64 independent). The later U+034F/U+FE00 letter-mix arm is currently stronger on fresh independent corpora: **0/128** on seeds `1020000`+`1030000` with worst score 0.513691 (gap 0.043407), plus independent scale **0/256** including `1040000`+`1050000` with worst score 0.519522 (gap 0.037577). Mix is frozen as `cycle8-mix-freeze-v1` and is not a release mechanism. One-shot confirmation is **0/192**. Public CLI remains empty.
+Cycle 8 is the exact-visible-projection generation. See [`docs/cycle8/README.md`](docs/cycle8/README.md). U+200C remains a diagnostic baseline (stripped by Cf). Combining grapheme joiner U+034F letter-x1 remains a strong visible-invariant development arm (`HYPOTHESIS`): fresh reserved-before-generation **0/128** on seeds `980000`+`990000` with a thin 0.003 gap, plus a separate experimental **0/192** (128 seen + 64 independent). The later U+034F/U+FE00 letter-mix arm is currently stronger on fresh independent corpora: **0/128** on seeds `1020000`+`1030000` with worst score 0.513691 (gap 0.043407), plus independent scale **0/256** including `1040000`+`1050000` with worst score 0.519522 (gap 0.037577). Mix is frozen as `cycle8-mix-freeze-v1` and is not a release mechanism. One-shot confirmation is **0/192**. Publishability still fail-closes: sanitizer weaknesses and cross-detector generalization remain FAIL. Public CLI remains empty.
 
 ## Reproduce the research environment
 

docs/cli.md

@@ -34,12 +34,13 @@ Use `--stdin` or `--non-interactive` to request the same mode explicitly. Standa
 
 ## File use
 
-The positional input path is decoded strictly as UTF-8:
+The positional input path is decoded strictly as UTF-8. Latin-1, ASCII, and Windows-1252 are unsupported product encodings:
 
 ```text
 FuckMark input.txt
 FuckMark input.txt --output output.txt
 FuckMark input.txt --copy
+FuckMark --stdin --encoding latin-1   # rejected
 ```
 
 Without `--output`, file-mode output is written to standard output. `--output -` also selects standard output. Named output files are written through an fsynced temporary file and atomically replaced. Input and output paths must differ.
@@ -52,6 +53,8 @@ Without `--output`, file-mode output is written to standard output. `--output -`
 | `--stdin`, `--non-interactive` | Read all standard input in explicit stream mode. |
 | `-o FILE`, `--output FILE` | Atomically write transformed UTF-8 text to a file. |
 | `--copy` | Also copy transformed text to the platform clipboard. |
+| `--visible` | Write the user-visible projection of the product-authorized payload. With zero approved carriers this is identity. |
+| `--encoding NAME` | Output encoding. Only `utf-8` is supported. `latin-1`, `ascii`, and `cp1252` are rejected. |
 | `-q`, `--quiet` | Hide interactive processing and completion messages. |
 | `--no-color` | Disable ANSI terminal color. |
 

docs/cycle8/README.md

@@ -17,11 +17,13 @@ Cycle 8 is a new scientific generation. The mechanism class is hidden Unicode re
 
 ## Seed ledger
 
-See `docs/cycle8/seed-ledger.md` and `docs/seeds.md`. Seeds `890000`, `900000`, and `910000` are spent tiny Cycle 8 evidence. Scale seeds `930000` / `940000` / `950000` were reserved before scale generation. Density seed `960000` was reserved before density generation and scored n=16: both space x1 and space-wordfinal are 1/16. Letter seed `970000` was reserved before letter generation; independent letter-x1 is 0/16 then 0/64. Diagnostic letter rescored of seen `930000` n=64 and `940000` n=64 are 0/64. Experimental letter-x1 0/192 is 128 seen plus 64 independent. System-benchmark seeds `980000` and `990000` were reserved before generation; fresh letter-x1 is 0/128 and fresh space-x1 is 1/128. See `docs/cycle8/letter-system-benchmark.md`. Mix seeds `1020000` and `1030000` were reserved before generation; fresh letter-alt is 0/128 with worst score 0.513691. Mix scale seeds `1040000` and `1050000` were reserved before generation; combined mix is 0/256 with worst score 0.519522. Mix is frozen as `cycle8-mix-freeze-v1`. One-shot confirmation on seeds `830000` / `840000` / `850000` is **0/192** and those seeds are spent. See `docs/cycle8/letter-mix-margin.md` and `docs/cycle8/mix-freeze.md`. Letter-space seeds `1000000` and `1010000` remain 1/128. Seed `880000` is **PUBLICLY_EXPOSED** by closed unmerged PR #98 and is not eligible as unseen validation.
+See `docs/cycle8/seed-ledger.md` and `docs/seeds.md`. Seeds `890000`, `900000`, and `910000` are spent tiny Cycle 8 evidence. Scale seeds `930000` / `940000` / `950000` were reserved before scale generation. Density seed `960000` was reserved before density generation and scored n=16: both space x1 and space-wordfinal are 1/16. Letter seed `970000` was reserved before letter generation; independent letter-x1 is 0/16 then 0/64. Diagnostic letter rescored of seen `930000` n=64 and `940000` n=64 are 0/64. Experimental letter-x1 0/192 is 128 seen plus 64 independent. System-benchmark seeds `980000` and `990000` were reserved before generation; fresh letter-x1 is 0/128 and fresh space-x1 is 1/128. See `docs/cycle8/letter-system-benchmark.md`. Mix seeds `1020000` and `1030000` were reserved before generation; fresh letter-alt is 0/128 with worst score 0.513691. Mix scale seeds `1040000` and `1050000` were reserved before generation; combined mix is 0/256 with worst score 0.519522. Mix is frozen as `cycle8-mix-freeze-v1`. One-shot confirmation on seeds `830000` / `840000` / `850000` is **0/192** and those seeds are spent. DeepMind 30-key mix transfer seeds `1060000` / `1070000` / `1080000` are confirmation-scale mix **0/192** (`HYPOTHESIS`, not mix-freeze confirmation). DistilGPT2 seed `1090000` n=16 is `HYPOTHESIS` second-model transfer. Control-mix exploratory seed `1100000` n=16 is `HYPOTHESIS` (identity WM 15/16, control-mix WM 0/16) and does not rewrite mix sanitizer FAIL. Publishability gates: reproducibility PASS, visibility PASS, software compatibility PASS on the UTF-8 / visible-search product surface, sanitizer FAIL, cross-detector PASS. Mix is not product-publishable. See `docs/cycle8/letter-mix-margin.md`, `docs/cycle8/mix-freeze.md`, `docs/cycle8/mix-publishability.md`, `docs/cycle8/mix-deepmind-transfer.md`, and `docs/cycle8/mix-second-model-transfer.md`. Letter-space seeds `1000000` and `1010000` remain 1/128. Seed `880000` is **PUBLICLY_EXPOSED** by closed unmerged PR #98 and is not eligible as unseen validation.
 
 ## Carrier research
 
-See `docs/cycle8/carrier-research.md`, `docs/cycle8/letter-mix-margin.md`, and `docs/cycle8/mix-freeze.md`.
+See `docs/cycle8/carrier-research.md`, `docs/cycle8/letter-mix-margin.md`, `docs/cycle8/mix-freeze.md`, `docs/cycle8/mix-publishability.md`, `docs/cycle8/mix-deepmind-transfer.md`, and `docs/cycle8/mix-second-model-transfer.md`.
+
+Assigned width-0 insertions remain closed (H9). H12 control-code insertion (`Cc` DEL + C1 except NEXT LINE) is a new sanitizer-surviving research class. Chromium pixels are host-dependent. Independent seed `1100000` n=16 is control-mix **0/16** WM (`HYPOTHESIS`). H13 classifies the post-sanitizer mechanism families: no measured class is simultaneously sanitizer-surviving, Chromium-portable, ordinary plain text, and Priority-Zero safe. H14 extends that negative result to `Mc`, `Lm`, designed blanks, Hangul filler sequences, and font-metric empty glyphs. H15 extends it to sequence-level prepend, joining, Hangul composition, bidi wraps, escape sequences, partial-sanitizer remainders, and font GSUB ligatures. It is not mix, not product-authorized, and does not rewrite the mix sanitizer FAIL. See `docs/cycle8/carrier-research.md`.
 
 U+200C is the diagnostic baseline. It is not durable under Cf-strip.