liris: expand github live office reconcile

docs/LIRIS-GITHUB-LIVE-OFFICE-RECONCILE-EXPANSION-2026-06-13.hbp

@@ -0,0 +1,7 @@
+LIRISGLORECHDR|date=2026-06-13|topic=github-live-office-reconcile-expansion|responds_to=fabric-verdict-council-q-1781401127593-7z9650-CONVERGE-147of251+operator-ask-fabric-dont-ask-me|source_feed=:4949/hbp/supervisors|feed_entries=726|feed_body_sha16=872bfe2c398ae5c2|tag=PROVEN-BUILD|json=0
+LIRISGLORECWHY|closes=OLDLEARNNEWPIDLAW-shadow-gap|old_tool=tools/behcs/github-live-pid-reconcile.mjs|old_scope=seed-3-entries-shannon-hermes-deepseek-count41|new_tool=tools/behcs/github-live-office-reconcile-expansion.mjs|new_scope=parse-live-supervisor-feed-and-classify-every-REG-row|tag=EXPANSION|json=0
+LIRISGLORECMECH|rule=derive-github-proposed-identity-with-mintPid-for-each-office-name|match=MATCH-when-office-pid-equals-github-sha16-and-office-g1024-equals-github-g1024|alias=ALIAS_REQUIRED-when-sha-or-glyph-differs-due-to-name-sanitization-or-legacy-office-derivation|examples=OP-JESSE-MATCH+CEO-ASOLARIA-INSTANCES-legacy-alias+cube_cubed_sealer-name-alias|json=0
+LIRISGLORECSAFE|descriptor_only=1|process_launch=0|no_D_write=1|no_office_write=1|no_mint=1|no_cutover=1|no_spawn=1|github_pid_is_proposed_until_live_office_alias_map_byte_receipted=1|tag=HELD-SAFE|json=0
+LIRISGLORECLIVE|probe=Invoke-WebRequest-192.168.1.50:4949/hbp/supervisors-piped-to-tool---stdin---limit=8|entries=726|match=411|alias_required=315|invalid_office_row=0|noncanonical_name=300|duplicate_names=1|duplicate_name_rows=2|registered_not_canonical=8|emitted=8|tag=PROVEN-LIVE|json=0
+LIRISGLORECTEST|node_check=OK|self_test=9of9|unit=10of10|catalog=7of7|lattice=9of9|full_suite=265of265|diff_check=clean-before-push|regressions=canonical-match+canonical-looking-legacy-alias+underscore-alias+duplicates+registered-not-canonical+invalid-row+injection-safe+limit-summary+no-mutation-capability|json=0
+LIRISGLORECFTR|state=descriptor-only-alias-map-producer-built-live-smoked-verified-and-ready-to-push|next=push-then-ask-fabric-again|tag=PROVEN-GREEN|json=0

docs/LIRIS-GITHUB-LIVE-OFFICE-RECONCILE-EXPANSION-2026-06-13.hbp.sha256

@@ -0,0 +1 @@
+085458EC9D432176FE0BF59AC6779FDD8FFFAAD7817B3A63826B7E07E00EA66A  LIRIS-GITHUB-LIVE-OFFICE-RECONCILE-EXPANSION-2026-06-13.hbp

tests/github-live-office-reconcile-expansion.unit.test.mjs

@@ -0,0 +1,90 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import test from 'node:test';
+
+import {
+  RECONCILE_STATES,
+  SAMPLE_FEED,
+  emitRows,
+  parseSupervisorFeed,
+  reconcileEntry,
+  reconcileSupervisorFeed,
+  selfTest,
+} from '../tools/behcs/github-live-office-reconcile-expansion.mjs';
+
+const repo = dirname(dirname(fileURLToPath(import.meta.url)));
+
+test('self-test passes', () => {
+  assert.equal(selfTest().ok, true);
+});
+
+test('parses the HBP supervisor feed contract', () => {
+  const feed = parseSupervisorFeed(SAMPLE_FEED);
+  assert.equal(feed.reported_entries, 6);
+  assert.equal(feed.entries.length, 6);
+  assert.equal(feed.entries[0].name, 'OP-JESSE');
+  assert.equal(feed.entries.at(-1).name, 'ASOLARIA-SLICE-ENGINE-LAW');
+});
+
+test('canonical uppercase-hyphen office names match GitHub sha16 and g1024', () => {
+  const report = reconcileSupervisorFeed(SAMPLE_FEED);
+  const op = report.aliases.find((a) => a.name === 'OP-JESSE');
+  assert.equal(op.state, RECONCILE_STATES.MATCH);
+  assert.equal(op.sha_match, true);
+  assert.equal(op.glyph_match, true);
+  assert.equal(op.github_sha16.toLowerCase(), op.office_pid);
+});
+
+test('lowercase/underscore names become descriptor aliases, not false matches', () => {
+  const report = reconcileSupervisorFeed(SAMPLE_FEED);
+  const cube = report.aliases.find((a) => a.name === 'cube_cubed_sealer');
+  assert.equal(cube.state, RECONCILE_STATES.ALIAS_REQUIRED);
+  assert.equal(cube.name_canonical, false);
+  assert.equal(cube.github_name, 'CUBE-CUBED-SEALER');
+  assert.notEqual(cube.github_sha16.toLowerCase(), cube.office_pid);
+});
+
+test('canonical-looking names can still need aliases when live office derivation differs', () => {
+  const report = reconcileSupervisorFeed(SAMPLE_FEED);
+  const ceo = report.aliases.find((a) => a.name === 'CEO-ASOLARIA-INSTANCES');
+  assert.equal(ceo.name_canonical, true);
+  assert.equal(ceo.glyph_match, true);
+  assert.equal(ceo.sha_match, false);
+  assert.equal(ceo.state, RECONCILE_STATES.ALIAS_REQUIRED);
+});
+
+test('duplicates and registered-not-canonical entries are counted separately', () => {
+  const report = reconcileSupervisorFeed(SAMPLE_FEED);
+  assert.equal(report.counts.duplicate_names, 1);
+  assert.equal(report.counts.duplicate_name_rows, 2);
+  assert.equal(report.counts.registered_not_canonical, 1);
+});
+
+test('invalid office rows are held as invalid descriptors', () => {
+  const row = reconcileEntry({ name: '', pid: 'nothex', layer: 'supervisor', g1024: 12, status: 'CANONICAL' });
+  assert.equal(row.state, RECONCILE_STATES.INVALID_OFFICE_ROW);
+  assert.equal(row.github_pid, 'none');
+});
+
+test('emitted rows are HBP-only, injection-safe, and descriptor-only', () => {
+  const hostile = `${SAMPLE_FEED}\nREG|name=BAD|ROW\nFAKE|pid=aaaaaaaaaaaaaaaa|hilbert=1|layer=supervisor|class=x|g1024=1|g5=1|sector=?|status=CANONICAL`;
+  const rows = emitRows(reconcileSupervisorFeed(hostile), { limit: 10 });
+  assert.ok(rows.every((row) => row.endsWith('|json=0') && !/[\r\n]/.test(row) && !row.includes('{"')));
+  assert.ok(rows.some((row) => row.startsWith('GLORECGATE|') && row.includes('no_office_write=1') && row.includes('process_launch=0')));
+});
+
+test('limit controls alias row volume but not summary math', () => {
+  const rows = emitRows(reconcileSupervisorFeed(SAMPLE_FEED), { limit: 2 });
+  assert.equal(rows.filter((row) => row.startsWith('GLORECALIAS|')).length, 2);
+  assert.ok(rows.some((row) => row.startsWith('GLORECSUM|') && row.includes('entries=6') && row.includes('emitted=2')));
+});
+
+test('tool has no live mutation or network capability', () => {
+  const src = readFileSync(join(repo, 'tools/behcs/github-live-office-reconcile-expansion.mjs'), 'utf8');
+  assert.equal(/child_process|spawnSync|\.spawn\(|execSync|writeFileSync|appendFileSync|fetch\(|Invoke-WebRequest|Start-Process|Stop-Process/.test(src), false);
+  assert.equal(/process_launch=1/.test(src), false);
+  assert.match(src, /no_office_write=1/);
+  assert.match(src, /no_cutover=1/);
+});

tests/github-live-office-reconcile-expansion.unit.test.mjs.sha256

@@ -0,0 +1 @@
+3D091E941CB1BCE455B39205D676F38317EC140CC0C7462A89FE60E7A7774506  github-live-office-reconcile-expansion.unit.test.mjs

tests/supervisor-collision-router.system.test.mjs

@@ -93,6 +93,7 @@ const sealedFiles = [
   'docs/LIRIS-ROUTE-HEALTH-BASELINE-2026-06-13.hbp',
   'docs/ACER-ROUTE-HEALTH-CROSS-VANTAGE-2026-06-13.hbp',
   'docs/ACER-BUS-HEALTH-CONTRACT-FIX-2026-06-13.hbp',
+  'docs/LIRIS-GITHUB-LIVE-OFFICE-RECONCILE-EXPANSION-2026-06-13.hbp',
   'docs/acer-ecosystem-fullbody-receipt-20260612.hbp',
   'docs/CLAIMSLEDGER-2026-06-12.hbp',
   'docs/CLAIMSGATE-PARITY-BASELINE-2026-06-12.hbp',
@@ -224,6 +225,7 @@ const sealedFiles = [
   'tools/behcs/github-pid-register.mjs',
   'tools/behcs/github-live-pid-reconcile.mjs',
   'tools/behcs/github-live-pid-reconcile.hbp',
+  'tools/behcs/github-live-office-reconcile-expansion.mjs',
   'tools/behcs/fabric-agent-preload-catalog.mjs',
   'tools/behcs/fabric-agent-preload-catalog.hbp',
   'tools/behcs/pixel-room-handle.mjs',
@@ -247,6 +249,7 @@ const sealedFiles = [
   'tests/kimi-desktop-surface-scan.unit.test.mjs',
   'tests/github-pid-register.unit.test.mjs',
   'tests/github-live-pid-reconcile.unit.test.mjs',
+  'tests/github-live-office-reconcile-expansion.unit.test.mjs',
   'tests/fabric-agent-preload-catalog.unit.test.mjs',
   'tests/pixel-room-handle.unit.test.mjs',
   'tests/d22-verb-adapter.unit.test.mjs',

tests/supervisor-collision-router.system.test.mjs.sha256

@@ -1 +1 @@
-EA5CB9D9B8DFFC0309677014B1ABEF2B7D14A077566600611CC7C12F598D514E  supervisor-collision-router.system.test.mjs
+2BE5789B98F18135C9FA1319683DCC094FD66CC3B6A1C54A81498A406F29E7BD  supervisor-collision-router.system.test.mjs

tools/behcs/fabric-agent-preload-catalog.hbp

@@ -1,4 +1,4 @@
-FABPRELOADHDR|tool=fabric-agent-preload-catalog.v1|purpose=preload-agents-with-laws-routes-tools-gates-and-workflow-before-fabric-use|laws=8|routes=6|tools=4|emitters=3|levels=16|roles=4|json=0
+FABPRELOADHDR|tool=fabric-agent-preload-catalog.v1|purpose=preload-agents-with-laws-routes-tools-gates-and-workflow-before-fabric-use|laws=8|routes=6|tools=5|emitters=3|levels=16|roles=4|json=0
 FABPRELOADLAW|laws=three-systems-LOGICAL-WAVE-FROZEN-BRAIN-REAL-FREE+law-of-three-mod3-lanes+yin-yang-mod2-real-logical+prime-parity-and-prime-mod3-are-load-bearing+quants-are-address-and-evidence-classes-not-raw-material+all-agent-artifact-system-addresses-get-PID-or-handle+slice-engine-law-fabric-is-frozen-position-space-until-spawner-pid-emits+live-control-and-mint-and-launch-defer-to-operator|json=0
 FABPRELOADWORKFLOW|cadence=memory-index-plan-memory-index-respond-execute-memory-index|operator_rule=respond-before-live-control-and-log-after-execute|json=0
 FABPRELOADSLICEENGINE|law=SLICE-ENGINE-LAW|scope=all-supervisor-operator-level-agents+SUP-HELM-AGT-L3-H8EF7+ASOLARIA-root-profile|rule=fabric-is-frozen-positional-slice-field-engine-drive-is-the-only-mover|materialization=spawner-PID-emits-then-PID_SIGNAL-to-AGENT_ROOM-to-GULP-to-ERASE|pid_registration=repo-side-HBP-receipt-until-live-office-ingest|cube_mint=operator-gated-runtime-action-not-implied-by-doc|engine_crank=operator-gated-RUN_HERMES_SPINDLE-or-equivalent|json=0
@@ -11,6 +11,7 @@ FABPRELOADROUTE|id=super-os-4949|method=GET|endpoint=http://127.0.0.1:4949|paylo
 FABPRELOADTOOL|id=pixel-room-handle|path=tools/behcs/pixel-room-handle.mjs|provides=8-byte-room-handle+identity16+PIXFOLDERHOST|gate=process_launch-0-live_control-gated|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=github-pid-register|path=tools/behcs/github-pid-register.mjs|provides=open-runtime-PID-register+0x1F-tuple-identity|gate=github-PID-proposed-until-live-reconciled|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=github-live-pid-reconcile|path=tools/behcs/github-live-pid-reconcile.mjs|provides=github-vs-live-office-snapshot-status|gate=unknown-PENDING-OFFICE-SNAPSHOT|tag=PROVEN+tool-level|json=0
+FABPRELOADTOOL|id=github-live-office-reconcile-expansion|path=tools/behcs/github-live-office-reconcile-expansion.mjs|provides=github-vs-live-726-office-alias-map|gate=descriptor-only-no-mint-no-cutover|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=token-cube-catalog-binder|path=tools/behcs/token-cube-catalog-binder.mjs|provides=sha16-token-to-BH-address-draft-binding|gate=mint-write-live-DEFER_TO_OPERATOR|tag=PROVEN+tool-level|json=0
 FABPRELOADEMITTER|id=pid-emitter|process=PID-specific-emitter-envelope|route=send-json|before=preload-catalog+law-ack+connection-label|after=hookwall+gnn+ack-log|connection_label=PID-specific|json=0
 FABPRELOADEMITTER|id=hookwall|process=risk-and-governance-gate|route=send-json|before=operator-gates+role-forbidden-list|after=allow-or-defer-row|connection_label=PID-specific|json=0

tools/behcs/fabric-agent-preload-catalog.hbp.sha256

@@ -1 +1 @@
-C5E22E9A68AB101DC9751FE681288492528A410F7A903CC8A1F4A0EBA1BD910E  fabric-agent-preload-catalog.hbp
+E1EFE72CF526206D9B34FCBD51EA24DE973741D11EA70DD7B9CAFCE8E7EBE3CA  fabric-agent-preload-catalog.hbp

tools/behcs/fabric-agent-preload-catalog.mjs

@@ -86,6 +86,12 @@ export const TOOLS = Object.freeze([
     provides: 'github-vs-live-office-snapshot-status',
     gate: 'unknown-PENDING-OFFICE-SNAPSHOT',
   }),
+  Object.freeze({
+    id: 'github-live-office-reconcile-expansion',
+    path: 'tools/behcs/github-live-office-reconcile-expansion.mjs',
+    provides: 'github-vs-live-726-office-alias-map',
+    gate: 'descriptor-only-no-mint-no-cutover',
+  }),
   Object.freeze({
     id: 'token-cube-catalog-binder',
     path: 'tools/behcs/token-cube-catalog-binder.mjs',
@@ -252,7 +258,8 @@ export function selfTest() {
   add('routes-include-two-send-lanes', routeById('send-hbp').payload.includes('single-HBP') && routeById('send-json').payload.includes('operator-packet'));
   add('packet-lines-use-json-envelope', classifyPayloadForRoute({ route_id: 'send-json', payload_kind: 'operator-packet-lines' }) === 'ACCEPT_JSON_ENVELOPE');
   add('packet-lines-rejected-on-hbp-lane', classifyPayloadForRoute({ route_id: 'send-hbp', payload_kind: 'operator-packet-lines' }) === 'REJECT_WRONG_ROUTE');
-  add('tools-include-room-and-pid', !!toolById('pixel-room-handle') && !!toolById('github-live-pid-reconcile'));
+  add('tools-include-room-and-pid', !!toolById('pixel-room-handle') && !!toolById('github-live-pid-reconcile')
+    && !!toolById('github-live-office-reconcile-expansion'));
   add('slice-engine-law-preloaded', LAWS.some((law) => law.startsWith('slice-engine-law-'))
     && emitPreloadRows().some((row) => row.startsWith('FABPRELOADSLICEENGINE|')));
   add('emitters-pipe-hookwall-gnn', EMITTERS.some((e) => e.id === 'hookwall') && EMITTERS.some((e) => e.id === 'gnn-edge'));

tools/behcs/fabric-agent-preload-catalog.mjs.sha256

@@ -1 +1 @@
-E26A706660821CAFF8EB34F0FA15B4DC916579D988632180630FDEA1DEA6DBAD  fabric-agent-preload-catalog.mjs
+9DC5EDBB68B29E35F3CFC85849F1F22CE8C7B9FC8E4632E84263D05FCA94354C  fabric-agent-preload-catalog.mjs

tools/behcs/github-live-office-reconcile-expansion.mjs

@@ -0,0 +1,235 @@
+#!/usr/bin/env node
+// github-live-office-reconcile-expansion.mjs
+//
+// Descriptor-only expansion of the old github-live-pid-reconcile seed. It consumes
+// the live fabric supervisor HBP feed (:4949/hbp/supervisors), derives the
+// GitHub-side deterministic PID identity for each office REG row via mintPid(),
+// and emits an alias map. ALIAS_REQUIRED can mean name sanitation divergence OR
+// legacy/live-office derivation divergence; it is not treated as failure. It does
+// not mint, write to the office, cut over a PID, spawn a process, or repair anything.
+
+import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { mintPid } from './github-pid-register.mjs';
+
+export const EXPANSION_ID = 'github-live-office-reconcile-expansion.v1';
+export const FEED_CONTRACT = ':4949/hbp/supervisors';
+export const RECONCILE_STATES = Object.freeze({
+  MATCH: 'MATCH',
+  ALIAS_REQUIRED: 'ALIAS_REQUIRED',
+  INVALID_OFFICE_ROW: 'INVALID_OFFICE_ROW',
+});
+
+const sha16 = (s) => createHash('sha256').update(String(s ?? ''), 'utf8').digest('hex').slice(0, 16).toUpperCase();
+const safe = (s) => { try { return String(s == null ? '' : s).replace(/[|\r\n]/g, '_'); } catch { return '_'; } };
+const isObj = (x) => x !== null && typeof x === 'object';
+
+function fieldMap(row) {
+  const out = {};
+  for (const part of String(row ?? '').split('|').slice(1)) {
+    const i = part.indexOf('=');
+    if (i > 0) out[part.slice(0, i)] = part.slice(i + 1);
+  }
+  return out;
+}
+
+export function parseSupervisorFeed(input = '') {
+  const text = String(input ?? '');
+  const lines = text.split(/\r?\n/).map((line) => line.trim()).filter(Boolean);
+  const header = {};
+  const footer = {};
+  const entries = [];
+  for (const line of lines) {
+    if (line.startsWith('FEEDHDR|')) Object.assign(header, fieldMap(line));
+    if (line.startsWith('FEEDFTR|')) Object.assign(footer, fieldMap(line));
+    if (!line.startsWith('REG|')) continue;
+    const f = fieldMap(line);
+    entries.push({
+      name: f.name || '',
+      pid: f.pid || '',
+      hilbert: Number.parseInt(f.hilbert || '0', 10) || 0,
+      layer: f.layer || '',
+      class: f.class || '',
+      g1024: Number.parseInt(f.g1024 || '-1', 10),
+      g5: Number.parseInt(f.g5 || '-1', 10),
+      sector: f.sector || '',
+      status: f.status || '',
+    });
+  }
+  const reported = Number.parseInt(header.entries || footer.rows || String(entries.length), 10);
+  return {
+    header,
+    footer,
+    feed_contract: FEED_CONTRACT,
+    reported_entries: Number.isFinite(reported) ? reported : entries.length,
+    body_sha16: footer.body_sha16 || sha16(text),
+    entries,
+  };
+}
+
+function roleForLayer(layer) {
+  const s = String(layer || '').toLowerCase();
+  if (s.includes('prof')) return 'PROF';
+  if (s.includes('agent')) return 'AGT';
+  return 'SUP';
+}
+
+function tierForLayer(layer) {
+  const s = String(layer || '').toLowerCase();
+  if (s.includes('operator')) return 0;
+  if (s.includes('helm')) return 1;
+  if (s.includes('prof')) return 2;
+  return 4;
+}
+
+function cleanHex16(s) {
+  return /^[0-9a-fA-F]{16}$/.test(String(s || '')) ? String(s).toLowerCase() : '';
+}
+
+export function reconcileEntry(entry = {}, opts = {}) {
+  const e = isObj(entry) ? entry : {};
+  const duplicateNameCount = Number(opts.duplicateNameCount || 1);
+  const role = roleForLayer(e.layer);
+  const tier = tierForLayer(e.layer);
+  let github = null;
+  let error = '';
+  if (!String(e.name || '').trim() || /[|\r\n]/.test(String(e.name || ''))) {
+    error = 'office-name-required-clean';
+  } else {
+    try {
+      github = mintPid({ role, name: e.name, tier, prime: 0, nest: 1 });
+      if (!github.name) {
+        github = null;
+        error = 'github-name-empty-after-sanitize';
+      }
+    } catch (err) {
+      error = err?.message || 'mintPid-failed';
+    }
+  }
+  const officePid = cleanHex16(e.pid);
+  const officeGlyph = Number(e.g1024);
+  const githubSha16 = github?.sha16 || '';
+  const githubGlyph = Number(github?.glyph_1024);
+  const sha_match = !!officePid && githubSha16.toLowerCase() === officePid;
+  const glyph_match = Number.isFinite(officeGlyph) && Number.isFinite(githubGlyph) && officeGlyph === githubGlyph;
+  const name_canonical = !!github && github.name === e.name;
+  const state = !github || !officePid
+    ? RECONCILE_STATES.INVALID_OFFICE_ROW
+    : (sha_match && glyph_match ? RECONCILE_STATES.MATCH : RECONCILE_STATES.ALIAS_REQUIRED);
+  return {
+    name: e.name || '',
+    layer: e.layer || '',
+    class: e.class || '',
+    status: e.status || '',
+    hilbert: e.hilbert || 0,
+    office_pid: officePid || e.pid || '',
+    office_g1024: Number.isFinite(officeGlyph) ? officeGlyph : '',
+    github_role: role,
+    github_pid: github?.pid || 'none',
+    github_name: github?.name || 'none',
+    github_sha16: githubSha16 || 'none',
+    github_g1024: Number.isFinite(githubGlyph) ? githubGlyph : '',
+    sha_match,
+    glyph_match,
+    name_canonical,
+    duplicate_name: duplicateNameCount > 1,
+    duplicate_name_count: duplicateNameCount,
+    registered_not_canonical: e.status && e.status !== 'CANONICAL',
+    state,
+    error,
+  };
+}
+
+export function reconcileSupervisorFeed(input = '') {
+  const feed = parseSupervisorFeed(input);
+  const nameCounts = new Map();
+  for (const e of feed.entries) nameCounts.set(e.name, (nameCounts.get(e.name) || 0) + 1);
+  const aliases = feed.entries.map((entry) => reconcileEntry(entry, { duplicateNameCount: nameCounts.get(entry.name) || 1 }));
+  const counts = {
+    entries: aliases.length,
+    reported_entries: feed.reported_entries,
+    match: aliases.filter((a) => a.state === RECONCILE_STATES.MATCH).length,
+    alias_required: aliases.filter((a) => a.state === RECONCILE_STATES.ALIAS_REQUIRED).length,
+    invalid_office_row: aliases.filter((a) => a.state === RECONCILE_STATES.INVALID_OFFICE_ROW).length,
+    noncanonical_name: aliases.filter((a) => !a.name_canonical).length,
+    duplicate_name_rows: aliases.filter((a) => a.duplicate_name).length,
+    duplicate_names: [...nameCounts.values()].filter((n) => n > 1).length,
+    registered_not_canonical: aliases.filter((a) => a.registered_not_canonical).length,
+  };
+  return {
+    tool: EXPANSION_ID,
+    feed_contract: FEED_CONTRACT,
+    feed_ts: feed.header.ts || '',
+    office: feed.header.office || '',
+    body_sha16: feed.body_sha16,
+    process_launch: 0,
+    descriptor_only: true,
+    counts,
+    aliases,
+  };
+}
+
+export function emitRows(report, opts = {}) {
+  try {
+    const r = isObj(report) && Array.isArray(report.aliases) ? report : reconcileSupervisorFeed('');
+    const limit = Number.isFinite(opts.limit) ? Math.max(0, Math.floor(opts.limit)) : r.aliases.length;
+    const rows = [
+      `GLORECHDR|tool=${EXPANSION_ID}|feed_contract=${safe(r.feed_contract)}|feed_ts=${safe(r.feed_ts)}|office=${safe(r.office)}|entries=${safe(r.counts.entries)}|reported_entries=${safe(r.counts.reported_entries)}|body_sha16=${safe(r.body_sha16)}|descriptor_only=1|process_launch=0|json=0`,
+    ];
+    for (const a of r.aliases.slice(0, limit)) {
+      rows.push(`GLORECALIAS|name=${safe(a.name)}|state=${safe(a.state)}|office_pid=${safe(a.office_pid)}|office_g1024=${safe(a.office_g1024)}|github_role=${safe(a.github_role)}|github_name=${safe(a.github_name)}|github_sha16=${safe(a.github_sha16)}|github_g1024=${safe(a.github_g1024)}|github_pid=${safe(a.github_pid)}|sha_match=${a.sha_match ? 1 : 0}|glyph_match=${a.glyph_match ? 1 : 0}|name_canonical=${a.name_canonical ? 1 : 0}|duplicate_name=${a.duplicate_name ? 1 : 0}|duplicate_name_count=${safe(a.duplicate_name_count)}|hilbert=${safe(a.hilbert)}|layer=${safe(a.layer)}|status=${safe(a.status)}|json=0`);
+    }
+    rows.push(`GLORECSUM|entries=${safe(r.counts.entries)}|emitted=${safe(Math.min(limit, r.aliases.length))}|match=${safe(r.counts.match)}|alias_required=${safe(r.counts.alias_required)}|invalid_office_row=${safe(r.counts.invalid_office_row)}|noncanonical_name=${safe(r.counts.noncanonical_name)}|duplicate_names=${safe(r.counts.duplicate_names)}|duplicate_name_rows=${safe(r.counts.duplicate_name_rows)}|registered_not_canonical=${safe(r.counts.registered_not_canonical)}|json=0`);
+    rows.push('GLORECGATE|github_pid_is_proposed=1|alias_map_descriptor_only=1|no_office_write=1|no_mint=1|no_cutover=1|no_spawn=1|process_launch=0|oldlearnnewpidlaw=github-pids-remain-proposed-until-live-office-alias-map-byte-receipted|json=0');
+    return rows;
+  } catch {
+    return [
+      `GLORECHDR|tool=${EXPANSION_ID}|feed_contract=${FEED_CONTRACT}|entries=0|reported_entries=0|descriptor_only=1|process_launch=0|json=0`,
+      'GLORECERROR|error=emit-threw-on-hostile-input|json=0',
+      'GLORECGATE|github_pid_is_proposed=1|alias_map_descriptor_only=1|no_office_write=1|no_mint=1|no_cutover=1|no_spawn=1|process_launch=0|oldlearnnewpidlaw=github-pids-remain-proposed-until-live-office-alias-map-byte-receipted|json=0',
+    ];
+  }
+}
+
+export const SAMPLE_FEED = `FEEDHDR|schema=hbp.fabric.supervisor.feed.v1|ts=2026-06-13T21:27:21.857Z|office=D:/PID-Registration-Office|entries=6|cap_joined=37|authority=OP-JESSE-BUILD-and-upgrade-2026-06-10|json=0
+REG|name=OP-JESSE|pid=76c91471d760073b|hilbert=908|layer=operator|class=operator_class_agent|g1024=113|g5=2|sector=?|status=CANONICAL
+REG|name=CEO-ASOLARIA-INSTANCES|pid=9198ed80b00dddee|hilbert=892|layer=helm|class=supervisor_of_supervisors_role_seat|g1024=858|g5=0|sector=?|status=CANONICAL
+REG|name=CEO-ASOLARIA-INSTANCES|pid=9198ed80b00dddee|hilbert=892|layer=agent|class=supervisor_of_supervisors_role_seat|g1024=858|g5=1|sector=?|status=CANONICAL
+REG|name=cube_cubed_sealer|pid=adaa7553334e9d40|hilbert=1006|layer=supervisor|class=hyperbehcs_supervisor_entity|g1024=339|g5=3|sector=?|status=CANONICAL
+REG|name=PLANB-FABRIC-SUPERVISOR-V1|pid=250d55bd01957814|hilbert=1622|layer=agent|class=planb_fabric_supervisor_advisory|g1024=269|g5=2|sector=planb|status=REGISTERED
+REG|name=ASOLARIA-SLICE-ENGINE-LAW|pid=3cb83d616e3dd777|hilbert=1630|layer=supervisor|class=agent_supervisor|g1024=353|g5=2|sector=supervisor|status=CANONICAL
+FEEDFTR|rows=6|body_sha16=SAMPLE`;
+
+export function selfTest() {
+  const report = reconcileSupervisorFeed(SAMPLE_FEED);
+  const byName = new Map(report.aliases.map((a) => [a.name, a]));
+  const rows = emitRows(report, { limit: 4 });
+  const checks = [
+    ['sample-count', report.counts.entries === 6 && report.counts.reported_entries === 6],
+    ['canonical-op-matches', byName.get('OP-JESSE')?.state === RECONCILE_STATES.MATCH],
+    ['canonical-looking-legacy-alias-counted', byName.get('CEO-ASOLARIA-INSTANCES')?.state === RECONCILE_STATES.ALIAS_REQUIRED && byName.get('CEO-ASOLARIA-INSTANCES')?.name_canonical === true],
+    ['noncanonical-underscore-alias-required', byName.get('cube_cubed_sealer')?.state === RECONCILE_STATES.ALIAS_REQUIRED && byName.get('cube_cubed_sealer')?.name_canonical === false],
+    ['duplicate-name-counted', report.counts.duplicate_names === 1 && report.counts.duplicate_name_rows === 2],
+    ['registered-not-canonical-counted', report.counts.registered_not_canonical === 1],
+    ['gate-held-safe', rows.some((row) => row.startsWith('GLORECGATE|') && row.includes('no_mint=1') && row.includes('no_cutover=1'))],
+    ['hbp-only', rows.every((row) => row.endsWith('|json=0') && !/[\r\n]/.test(row) && !row.includes('{"'))],
+    ['limit-does-not-affect-summary', rows.some((row) => row.startsWith('GLORECSUM|') && row.includes('entries=6') && row.includes('emitted=4'))],
+  ].map(([name, ok]) => ({ name, ok: Boolean(ok) }));
+  return { ok: checks.every((c) => c.ok), checks };
+}
+
+const isMain = process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1]);
+if (isMain) {
+  if (process.argv.includes('--self-test')) {
+    const r = selfTest();
+    for (const c of r.checks) console.log(`${c.ok ? 'PASS' : 'FAIL'} ${c.name}`);
+    process.exit(r.ok ? 0 : 1);
+  }
+  const limitArg = process.argv.find((arg) => arg.startsWith('--limit='));
+  const limit = limitArg ? Number(limitArg.slice('--limit='.length)) : undefined;
+  const hbp = process.argv.includes('--stdin') ? readFileSync(0, 'utf8') : SAMPLE_FEED;
+  for (const row of emitRows(reconcileSupervisorFeed(hbp), { limit })) console.log(row);
+}

tools/behcs/github-live-office-reconcile-expansion.mjs.sha256

@@ -0,0 +1 @@
+B045686E3B027E6A01AE81A83C7FD3C872DAAE08F2F92951F8FBA71CB7EA7804  github-live-office-reconcile-expansion.mjs