Run the synchronized Genesis Neural Link proof

Context

PR #15279 delivers the reusable BigData Neural Link probe tooling and a successful exact-head bundled rehearsal. This required successor isolates the remaining bilateral evidence so the coherent implementation can be reviewed independently of external scheduling while the graduated success condition remains explicit and open.

The source contract is D#15173. Genesis readiness is already accepted at commit 2a7e9d75d2e5cceb9d36fd0dc290c7586d9ad4c8 / version 7.9.38. The Neo runner and operating protocol live in ai/scripts/diagnostics/genesisProbe.mjs and learn/agentos/tooling/GenesisNeuralLinkProbe.md.

Live duplicate sweep: 2026-07-16T17:17:47Z; checked the latest 20 open GitHub issues, recent A2A lane claims through 2026-07-16T17:18:32Z, repository issue/discussion content, and Memory Core prior art. No equivalent active follow-up exists.

The Problem

The real L4 receipt requires two independently operated systems to be online at the same time. Neo must start a disposable loopback-only server with a one-run bearer; Genesis must connect, call the exact three-operation profile, and freeze its evidence-led deliverable before Neo reveals the oracle. Starting that globally bounded session without a confirmed window wastes the proof and risks secret-handling mistakes.

This coordination receipt does not gate the merge of PR #15279. It remains required to complete Epic #15184 and D#15173's graduated bilateral success condition. Its value is the public bilateral evidence, not another code delta.

The Architectural Reality

• ai/scripts/diagnostics/genesisProbe.mjs --external is the existing execution entrypoint and enforces one global two-hour ceiling.
• The accepted client is Genesis 7.9.38 at exact commit 2a7e9d75d2e5cceb9d36fd0dc290c7586d9ad4c8.
• The server exposes only healthcheck, get_worker_topology, and get_component_tree through the pinned local-readonly-probe profile.
• The bearer is transferred privately and exists only for the disposable process lifetime.
• The runner keeps raw diagnostics until the joint review explicitly authorizes cleanup, then proves whole-root absence and untouched default paths.
• The structure map confirms the owning implementation surfaces remain ai/scripts/diagnostics/ for the runner and learn/agentos/tooling/ for the operating contract; this ticket adds no new runtime surface.

The Fix

Coordinate one confirmed UTC window, transfer a freshly generated bearer through a private channel, and execute the committed external-mode runner against the accepted Genesis artifact. Publish the immutable commitment before the Genesis deliverable is frozen, reveal only afterward, reproduce the hash on both sides, compare every positive and not-inferable claim, authorize cleanup jointly, and attach the final secret-free receipt to this ticket.

No code PR is required when the run succeeds. Any implementation defect discovered by the run gets its own narrowly scoped bug ticket and PR rather than expanding this validation ticket. #15187 closes with the reusable implementation; Epic #15184 remains open until this required successor's receipt is complete.

Contract Ledger

Decision Record impact

aligned-with ADR 0020; no ADR change.

Decision Record

NOT_NEEDED — this executes the already graduated D#15173 contract without changing architecture.

Discussion Criteria Mapping

• D#15173 exact Streamable HTTP profile -> run only the three committed read operations.
• D#15173 blind oracle -> commitment before freeze, reveal after freeze, bilateral reproduction.
• D#15173 retention boundary -> joint review before cleanup, then whole-root absence proof.
• D#15173 capacity boundary -> confirmed window, no SLA, no remotely hosted endpoint.

Acceptance Criteria

• PR #15279 is merged into dev; the run uses that exact merged probe implementation.
• Both parties confirm one UTC window and a private bearer-transfer channel before the global two-hour session starts.
• Genesis runs version 7.9.38 at exact commit 2a7e9d75d2e5cceb9d36fd0dc290c7586d9ad4c8.
• Neo launches NEO_GENESIS_PROBE_BEARER=<private> npm run ai:genesis-probe -- --external; the published local-ready event contains only the redacted URL/header contract and exact tool profile.
• Neo publishes the run-specific salted commitment before Genesis freezes its deliverable.
• Genesis freezes a deliverable naming the root class, complete direct-child set, explicit not-inferable claims, and returned-field traceability before Neo reveals the canonical JSON and salt.
• Both parties reproduce the commitment hash and record agreement or a precise mismatch.
• Joint review explicitly authorizes cleanup; the final receipt proves whole-root absence, untouched default paths, listener closure, and child termination without exposing bearer, headers, raw args, or raw results.
• The final secret-free bilateral receipt is posted on this ticket, linked from D#15173, and used to complete Epic #15184's bilateral outcome.
• If the run exposes an implementation defect, file a separate bug ticket and keep this ticket limited to the execution receipt.

Out of Scope

• Holding PR #15279 open or adding another implementation commit to it.
• A persistent or remotely hosted Neural Link endpoint.
• Cloud deployment, PAT/OAuth/OIDC, tenant identity, mutations, or a wider tool profile.
• Reopening the graduated D#15173 architecture.

Related

Source Discussion: D#15173
Parent Epic: #15184
Implementation authority: #15187
Required Epic successor: this ticket remains open until the bilateral receipt completes
Implementation PR: #15279

Origin Session ID: 7efa8a03-b5cb-46c6-b1e9-bda072fead25

Retrieval Hint: Genesis Neural Link external L4 e08fb415d6 2a7e9d75 disposable bearer commitment reveal cleanup