acer: close pixel room catches and pid reconcile

docs/ACER-PIXEL-ROOM-REMOTE-CONTROL-LANE-2026-06-12.hbp

@@ -4,6 +4,8 @@ PIXROOMLANETHREE|systems=LOGICAL-WAVE+FROZEN-BRAIN+REAL-FREE|regulator=law-of-th
 PIXROOMLANECOST|REAL_FREE=wide-deterministic-sweep-is-cheap|LOGICAL_WAVE=actual-model-judgment-uses-token-thrift-through-room-handle+pixel-diff-sha16+row-sha16|rule=do-not-call-smart-inference-free|json=0
 PIXROOMLANEGNN|message_stream=can-feed-edge-ledger-and-loop-ticks|status=ingest-loop-PARTIAL-full-inference-not-claimed|gate=wire-live-inference-only-after-receipted-route-baseline|json=0
 PIXROOMLANETOOL|tool=tools/behcs/pixel-room-handle.mjs|descriptor=tools/behcs/pixel-room-handle.hbp|tests=tests/pixel-room-handle.unit.test.mjs|contract=deterministic-handle+proof-hashes+control-gates|json=0
+PIXROOMLANEPATCH|closes=PIXATKC1+PIXATKC2+PIXATKC3+PIXATKC4|surface_tier_gate=restricted-operator-owner-hidden-defer-to-supervisor-live-control-1|fail_closed=unknown-action-live-control-1|identity=handle8-plus-identity16|room_lane=prime-mod3-L0-L1-L2|tag=PROVEN+tool-level|json=0
+PIXFOLDERLANE|contract=agent-folder-dashboard-can-call-the-level-below-as-a-row-only-host-process-delegation|physical_level_cap=16|logical_nesting=row-chain-unbounded|process_launch=0|cost_model=thin-reasoning-plus-deterministic-host-row|tag=PROPOSAL|json=0
 PIXROOMLANELIVEGATE|live_control=TYPE+CLICK+ENTER+REMOTE_ACT+SHELL+OPEN+LAUNCH+MINT-all-DEFER_TO_OPERATOR|nothing_launched=1|nothing_minted=1|json=0
 PIXROOMLANELIRIS|ask=liris-attack-contract-against-her-live-room-surfaces-and-supervisor-council|compare=acer-fuller-local-dashboard-registry-hard-drive-truth-before-promotion|json=0
 PIXROOMLANEFTR|state=READY-FOR-BILATERAL-ATTACK|next=fix-github-PID-preimage+map-github-to-live-office+bind-room-handles-to-Hermes-spindle-task-rows-after-fabric-stable|json=0

docs/ACER-PIXEL-ROOM-REMOTE-CONTROL-LANE-2026-06-12.hbp.sha256

@@ -1 +1 @@
-EDBA9F5ED153270B9EA8F9B20A6359C756CF51346E9D354364C176A116E6428C  ACER-PIXEL-ROOM-REMOTE-CONTROL-LANE-2026-06-12.hbp
+9B632F04C54E4DB6EA5845627BDBDEA172519F8BB77B5BBE6C5E8F40A70A9B9F  ACER-PIXEL-ROOM-REMOTE-CONTROL-LANE-2026-06-12.hbp

docs/ACER-PIXELROOM-PID-RECONCILE-PATCH-2026-06-12.hbp

@@ -0,0 +1,7 @@
+PIXRECPATCHHDR|host=acer|date=2026-06-12|topic=close-pixel-room-attack-catches-plus-github-pid-preimage-plus-live-reconcile|source_bridge=e74915d|mode=repo-side-contract-no-live-launch|json=0
+PIXRECPATCHPIX|closes=PIXATKC1+PIXATKC2+PIXATKC3+PIXATKC4|surface_tiers=public+agent+supervisor+operator+owner+hidden|restricted=operator+owner+hidden|unknown_action=fail-closed-live_control-1|identity=handle8-plus-identity16|room_lane=prime-mod3-L0-L1-L2|tag=PROVEN+tool-level|json=0
+PIXRECPATCHFOLDER|operator_idea=folder-dashboard-calls-level-below-host-process|contract=PIXFOLDERHOST+PIXFOLDERLEVEL+PIXFOLDERGATE|physical_level_cap=16|logical_nesting=row-chain-unbounded|process_launch=0|cost_model=thin-reasoning-plus-deterministic-host-row|tag=PROPOSAL|json=0
+PIXRECPATCHPID|closes=PIDADVCATCH1COLLISION|fix=registerAgent-uses-versioned-length-prefixed-0x1F-tuple-identity-and-Gxxxxxxxx-suffix-before-mintPid|keeps=mintPid-plus-LAW-triad-stable|test=previous-claude-vs-claude-logical-wave-alias-now-distinct|tag=PROVEN+tool-level|json=0
+PIXRECPATCHRECONCILE|closes=PIDADVCATCH2DIVERGENCE-contract-level|tool=tools/behcs/github-live-pid-reconcile.mjs|snapshot=shannon-HD16C+hermes-HD17C+deepseek-HD15C-from-supervisors-HBP-count41|corrected=deepseek-github-H4DAC-not-HB5EC|unknown=PENDING-OFFICE-SNAPSHOT|tag=PROVEN+snapshot-limited|json=0
+PIXRECPATCHFABRIC|mcp_health=4944-liris-mirror-UP|supervisors_hbp=count41+hidden-layer+operator-profile+shannon+hermes+deepseek-present|bus_health=stale-all-bases-unavailable-for-acer-4949|effect=surface-tier-gate-is-grounded-but-acer-full-office-705-still-pending|tag=PARTIAL+live-read-lane|json=0
+PIXRECPATCHFTR|state=PIXELROOM-CATCHES-CLOSED-AND-PID-RECONCILE-SEEDED|next=liris-attack-this-patch+extend-live-office-snapshot-when-4949-or-office-705-readable|nothing_minted=1|nothing_launched=1|json=0

docs/ACER-PIXELROOM-PID-RECONCILE-PATCH-2026-06-12.hbp.sha256

@@ -0,0 +1 @@
+67933D9AC3AABB790437CD5F1181F5A07B1DEA619F99087C47BD4A153B078BEB  ACER-PIXELROOM-PID-RECONCILE-PATCH-2026-06-12.hbp

docs/TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp

@@ -105,3 +105,6 @@ PIXELROOMHANDLETOOL|insert_after_step=174|tool=tools/behcs/pixel-room-handle.mjs
 THREESYSTEMREMOTE|insert_after_step=174|systems=LOGICAL-WAVE+FROZEN-BRAIN+REAL-FREE|regulator=law-of-three-mod3+yin-yang-mod2+prime-parity+all-pid|remote_control=read-and-draft-actions-can-be-proof-rowed-live-control-actions-defer-to-operator|tag=PROPOSAL-to-live+PROVEN-contract|json=0
 PIXELROOMTOKENLAW|insert_after_step=102|rule=REAL-FREE-sweeps-wide-deterministically-while-LOGICAL-WAVE-uses-model-judgment-with-token-thrift-via-room-handle+pixel-diff-sha16+row-sha16|forbidden_claim=smart-inference-is-free|tag=DESIGN-VERDICT|json=0
 SPINEPIXELROOMATTACKREF|insert_after_step=198|artifact=docs/ACER-ATTACK-SPINE-PIXELROOM-READBACK-2026-06-12.hbp|effect=accepts-the-consistency-regulator-spine-with-ClaimsGate-tag-syntax-fix-and-pixel-room-contract-narrowing|tag=PROVEN+readback|json=0
+PIXELROOMPIDPATCHREF|insert_after_step=174|artifact=docs/ACER-PIXELROOM-PID-RECONCILE-PATCH-2026-06-12.hbp|effect=closes-pixel-room-attack-catches+adds-folder-host-lower-level-delegation+fixes-registerAgent-tuple-collision+seeds-github-to-live-PID-reconcile-map|tag=PROVEN+tool-level|json=0
+FOLDERHOSTNESTLAW|insert_after_step=174|rule=agent-folder-dashboards-may-call-the-level-below-by-PIXFOLDERHOST-rows-with-process_launch-0-physical-level-cap-16-and-logical-row-chain-nesting|cost=thin-reasoning-plus-deterministic-host-row-not-full-harness-context|tag=PROPOSAL|json=0
+GITHUBLIVEPIDRECONCILE|insert_after_step=198|tool=tools/behcs/github-live-pid-reconcile.mjs|rule=github-PIDs-remain-PROPOSED-until-live-office-assignment-or-alias-map-byte-receipted|seed=shannon+hermes+deepseek-only-from-supervisors-HBP-count41|unknown=PENDING-OFFICE-SNAPSHOT|tag=PROVEN+snapshot-limited|json=0

docs/TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp.sha256

@@ -1 +1 @@
-4E78CB54C72644BEA1782036A2223B14D46D202A82F8597A3D08FB89930BD874  TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp
+0DE8CA8937C725A24A9CD333058B72B5AF4B7422B3B1FFC577B7813C3CA28BDB  TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp

tests/github-live-pid-reconcile.unit.test.mjs

@@ -0,0 +1,45 @@
+import assert from 'node:assert/strict';
+import test from 'node:test';
+
+import {
+  LIVE_SNAPSHOT, RECONCILE_STATUS, SNAPSHOT_SOURCE,
+  emitReconcileRow, emitSnapshotRows, reconcile, selfTest,
+} from '../tools/behcs/github-live-pid-reconcile.mjs';
+
+test('self-test passes', () => {
+  assert.equal(selfTest().ok, true);
+});
+
+test('known live office snapshot entries reconcile as divergent, not equal', () => {
+  const shannon = reconcile({ name: 'shannon' });
+  assert.equal(shannon.github_hex, 'HE2EC');
+  assert.equal(shannon.live_hex, 'HD16C');
+  assert.equal(shannon.status, RECONCILE_STATUS.DIVERGENT);
+  const hermes = reconcile({ name: 'hermes' });
+  assert.equal(hermes.github_hex, 'HDFEC');
+  assert.equal(hermes.live_hex, 'HD17C');
+  assert.equal(hermes.status, RECONCILE_STATUS.DIVERGENT);
+});
+
+test('deepseek uses the corrected github hex H4DAC, not the stale HB5EC typo', () => {
+  const deepseek = reconcile({ name: 'deepseek' });
+  assert.equal(deepseek.github_hex, 'H4DAC');
+  assert.notEqual(deepseek.github_hex, 'HB5EC');
+  assert.equal(deepseek.live_hex, 'HD15C');
+  assert.equal(deepseek.status, RECONCILE_STATUS.DIVERGENT);
+});
+
+test('unknown names remain pending instead of fabricating a live office assignment', () => {
+  const r = reconcile({ name: 'future-agent' });
+  assert.equal(r.status, RECONCILE_STATUS.PENDING);
+  assert.equal(r.live_pid, 'none');
+  assert.equal(r.snapshot_source, SNAPSHOT_SOURCE);
+});
+
+test('snapshot rows are HBP-only and include source metadata', () => {
+  assert.equal(Object.keys(LIVE_SNAPSHOT).length, 3);
+  const rows = emitSnapshotRows();
+  assert.ok(rows.every((row) => row.endsWith('|json=0') && !row.includes('\n')));
+  assert.ok(rows.some((row) => row.includes('snapshot_source=') && row.includes('count41')));
+  assert.ok(emitReconcileRow(reconcile({ name: 'shannon' })).includes('status=DIVERGENT'));
+});

tests/github-live-pid-reconcile.unit.test.mjs.sha256

@@ -0,0 +1 @@
+6B3A81C02F0E3E263C0740FCD70C0DBF501E29D6618F2B4351ADA808CFDD7110  github-live-pid-reconcile.unit.test.mjs

tests/github-pid-register.unit.test.mjs

@@ -3,7 +3,7 @@ import test from 'node:test';
 
 import {
   AGENT_TYPES, KIND_BITS, KINDS, ROLES, RUNTIMES, SECTORS,
-  classifyAgentType, emitAgentRow, emitRegistrationRows, mintPid, mintTriad, registerAgent, selfTest,
+  classifyAgentType, emitAgentRow, emitRegistrationRows, mintPid, mintTriad, registerAgent, selfTest, tuplePreimage,
 } from '../tools/behcs/github-pid-register.mjs';
 
 test('self-test passes', () => {
@@ -72,3 +72,14 @@ test('kind is load-bearing for agent PID identity', () => {
   assert.equal(frozen.agent_type, 'FROZEN-BRAIN');
   assert.equal(realFree.agent_type, 'REAL-FREE');
 });
+
+test('registerAgent uses unambiguous tuple identity and closes hyphen split alias', () => {
+  const a = registerAgent({ runtime: 'claude', name: 'LOGICAL-WAVE-WORKER', kind: 'logical' });
+  const b = registerAgent({ runtime: 'claude-logical-wave', name: 'WORKER', kind: 'logical' });
+  assert.notEqual(a.pid, b.pid);
+  assert.match(a.register_identity_sha16, /^[0-9a-f]{16}$/);
+  assert.match(b.register_identity_sha16, /^[0-9a-f]{16}$/);
+  assert.notEqual(tuplePreimage(['REGISTER_AGENT', 'claude', 'LOGICAL-WAVE', 'LOGICAL-WAVE-WORKER', 'logical', '0']),
+    tuplePreimage(['REGISTER_AGENT', 'claude-logical-wave', 'LOGICAL-WAVE', 'WORKER', 'logical', '0']));
+  assert.ok(emitAgentRow(a).includes(`register_identity_sha16=${a.register_identity_sha16}`));
+});

tests/github-pid-register.unit.test.mjs.sha256

@@ -1 +1 @@
-32CCCB206EBE5B71726907924FAB4DD50F7D9E2694BD77DCDD07138C3DE03D24  github-pid-register.unit.test.mjs
+4F523A3BECDED6CC6DEEC9327D851789A1998DAF9AEABCFE849B3C0472FB85F3  github-pid-register.unit.test.mjs

tests/pixel-room-handle.unit.test.mjs

@@ -3,7 +3,9 @@ import test from 'node:test';
 
 import {
   classifyRoomAction,
+  createFolderHostCall,
   createPixelRoomTask,
+  emitFolderHostRows,
   emitPixelRoomRows,
   mintPixelRoom,
   normalizeSha16,
@@ -31,6 +33,8 @@ test('mints deterministic 8-byte room handles', () => {
   const b = mintPixelRoom(base);
   assert.match(a.handle, /^[0-9a-f]{16}$/);
   assert.equal(a.handle_bytes, 8);
+  assert.match(a.identity16, /^[0-9a-f]{32}$/);
+  assert.equal(a.identity_bytes, 16);
   assert.equal(a.handle, b.handle);
 });
 
@@ -45,12 +49,27 @@ test('three systems are regulated by yin-yang and prime parity', () => {
   assert.equal(createPixelRoomTask({ ...base, kind: 'real', prime: 0 }).agent_type, 'FROZEN-BRAIN');
   assert.equal(createPixelRoomTask({ ...base, kind: 'real', prime: 1 }).agent_type, 'REAL-FREE');
   assert.equal(createPixelRoomTask({ ...base, kind: 'real', prime: 4 }).prime_mod3, 1);
+  assert.equal(createPixelRoomTask({ ...base, kind: 'real', prime: 4 }).room_lane, 'L1');
 });
 
 test('control actions are gated; read and draft actions are not live control', () => {
-  assert.deepEqual(classifyRoomAction('LOOK'), { action: 'LOOK', verdict: 'READ_READY', live_control: 0 });
-  assert.deepEqual(classifyRoomAction('PREDICT'), { action: 'PREDICT', verdict: 'DRAFT_READY', live_control: 0 });
-  assert.deepEqual(classifyRoomAction('TYPE'), { action: 'TYPE', verdict: 'DEFER_TO_OPERATOR', live_control: 1 });
+  assert.equal(classifyRoomAction('LOOK').verdict, 'READ_READY');
+  assert.equal(classifyRoomAction('LOOK').live_control, 0);
+  assert.equal(classifyRoomAction('PREDICT').verdict, 'DRAFT_READY');
+  assert.equal(classifyRoomAction('PREDICT').live_control, 0);
+  assert.equal(classifyRoomAction('TYPE').verdict, 'DEFER_TO_OPERATOR');
+  assert.equal(classifyRoomAction('TYPE').live_control, 1);
+});
+
+test('surface-tier gates fail closed for hidden or unknown actions', () => {
+  const hidden = createPixelRoomTask({ ...base, surface_tier: 'hidden', action: 'LOOK' });
+  assert.equal(hidden.verdict, 'DEFER_TO_SUPERVISOR');
+  assert.equal(hidden.live_control, 1);
+  assert.equal(hidden.access_gate, 'restricted-surface');
+  const typo = createPixelRoomTask({ ...base, action: 'typ' });
+  assert.equal(typo.verdict, 'DEFER_TO_SUPERVISOR');
+  assert.equal(typo.live_control, 1);
+  assert.equal(typo.access_gate, 'unknown-action-fail-closed');
 });
 
 test('proof rows carry hashes only, not raw pixel payloads or DOM authority', () => {
@@ -80,3 +99,23 @@ test('emitted rows include MCP token-thrift and no live launch', () => {
   assert.ok(rows.some((row) => row.includes('mcp_payload=sha16-row-handles-not-full-context')));
   assert.ok(rows.some((row) => row.includes('nothing_launched=1')));
 });
+
+test('folder dashboard can delegate to a lower-level host row without launching it', () => {
+  const call = createFolderHostCall({
+    ...base,
+    folder: 'dashboards/A08',
+    host_process: 'child-host.mjs',
+    child_room: 'A09-child-room',
+    child_route: '/api/child/room',
+    child_action: 'PLAN',
+  });
+  assert.equal(call.parent.tier, 'A08');
+  assert.equal(call.child.tier, 'A09');
+  assert.equal(call.process_launch, 0);
+  assert.equal(call.process_gate, 'HBP_ROW_ONLY');
+  assert.equal(call.logical_nesting, 'row-chain-unbounded');
+  const rows = emitFolderHostRows(call);
+  assert.ok(rows.every((row) => row.endsWith('|json=0') && !row.includes('\n')));
+  assert.ok(rows.some((row) => row.includes('PIXFOLDERHOST|')));
+  assert.ok(rows.some((row) => row.includes('process_launch=0')));
+});

tests/pixel-room-handle.unit.test.mjs.sha256

@@ -1 +1 @@
-FD8D889816CBC637BF1DB97CAC0D7B1B5DAE5A2FA3C90A4B711421D6F14630FD  pixel-room-handle.unit.test.mjs
+A436F1511F3B0581F73C3F15CFAD6C468935067EC6C59481EBC2450F49D9B4C3  pixel-room-handle.unit.test.mjs

tests/supervisor-collision-router.system.test.mjs

@@ -51,6 +51,7 @@ const sealedFiles = [
   'docs/ACER-PIXEL-ROOM-REMOTE-CONTROL-LANE-2026-06-12.hbp',
   'docs/ACER-ATTACK-SPINE-PIXELROOM-READBACK-2026-06-12.hbp',
   'docs/ACER-ATTACK-PIXELROOM-CONTRACT-2026-06-12.hbp',
+  'docs/ACER-PIXELROOM-PID-RECONCILE-PATCH-2026-06-12.hbp',
   'docs/acer-ecosystem-fullbody-receipt-20260612.hbp',
   'docs/CLAIMSLEDGER-2026-06-12.hbp',
   'docs/CLAIMSGATE-PARITY-BASELINE-2026-06-12.hbp',
@@ -173,6 +174,8 @@ const sealedFiles = [
   'tools/behcs/kimi-desktop-surface-scan.mjs',
   'tools/behcs/kimi-desktop-surface-scan.hbp',
   'tools/behcs/github-pid-register.mjs',
+  'tools/behcs/github-live-pid-reconcile.mjs',
+  'tools/behcs/github-live-pid-reconcile.hbp',
   'tools/behcs/pixel-room-handle.mjs',
   'tools/behcs/pixel-room-handle.hbp',
   'tools/omni-processor/omnitranslator-v0.js',
@@ -186,6 +189,7 @@ const sealedFiles = [
   'tests/answer-producer.unit.test.mjs',
   'tests/kimi-desktop-surface-scan.unit.test.mjs',
   'tests/github-pid-register.unit.test.mjs',
+  'tests/github-live-pid-reconcile.unit.test.mjs',
   'tests/pixel-room-handle.unit.test.mjs',
   'tests/d22-verb-adapter.unit.test.mjs',
   'tests/d22-parity-probe.unit.test.mjs',

tests/supervisor-collision-router.system.test.mjs.sha256

@@ -1 +1 @@
-07c9ef9c8d6756c28ac7d14af99d10a293acb85b709ada9b189dd9e974ca5e2a  supervisor-collision-router.system.test.mjs
+E3F6362D2C1D3337995B12EC8149320CB66D36E62B4802AE4EC2EF9CB8B1CE0E  supervisor-collision-router.system.test.mjs

tools/behcs/github-live-pid-reconcile.hbp

@@ -0,0 +1,5 @@
+PIDRECONCILETOOLHDR|tool=github-live-pid-reconcile.v1|purpose=compare-github-proposed-PIDs-to-live-office-snapshot-without-pretending-they-are-equal|snapshot=liris-supervisors-hbp-count41-acer-office-pending|json=0
+PIDRECONCILELAW|github_pid=PROPOSED-address|live_pid=office-assigned-sequential-Hilbert-address|status=MATCH+DIVERGENT+PENDING-OFFICE-SNAPSHOT|unknown=never-fabricate-live-PID|json=0
+PIDRECONCILESEED|entries=shannon-HD16C+hermes-HD17C+deepseek-HD15C|corrected=deepseek-github-H4DAC-not-HB5EC|source=supervisors-hbp-live-read-lane|tag=PROVEN+snapshot-limited|json=0
+PIDRECONCILEGATE|next=extend-snapshot-only-from-byte-receipted-live-office-or-supervisor-HBP-feed|acer_office_705=not-visible-through-current-MCP-lane|json=0
+PIDRECONCILEFTR|state=SEALED-RECONCILE-CONTRACT|nothing_minted=1|nothing_launched=1|json=0

tools/behcs/github-live-pid-reconcile.hbp.sha256

@@ -0,0 +1 @@
+3E2A400735155A5FA5B010ECE3449186621F0589311B4BD668EB2EEB1BBF7616  github-live-pid-reconcile.hbp

tools/behcs/github-live-pid-reconcile.mjs

@@ -0,0 +1,132 @@
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+import { mintPid } from './github-pid-register.mjs';
+
+export const RECONCILE_ID = 'github-live-pid-reconcile.v1';
+export const SNAPSHOT_SOURCE = 'liris-supervisors-hbp-2026-06-12-count41-acer-office-pending';
+export const RECONCILE_STATUS = Object.freeze({
+  MATCH: 'MATCH',
+  DIVERGENT: 'DIVERGENT',
+  PENDING: 'PENDING-OFFICE-SNAPSHOT',
+});
+
+export const LIVE_SNAPSHOT = Object.freeze({
+  shannon: Object.freeze({
+    name: 'shannon',
+    role: 'AGT',
+    tier: 4,
+    prime: 1,
+    nest: 1,
+    live_pid: 'AGT-SHANNON-PID-HD16C-A04-W1024-P01-N00001',
+    live_hex: 'HD16C',
+    live_source: 'AGT-SHANNON-PID-HD16C-A04-W1024-P01-N00001',
+  }),
+  hermes: Object.freeze({
+    name: 'hermes',
+    role: 'AGT',
+    tier: 4,
+    prime: 1,
+    nest: 1,
+    live_pid: 'AGT-HERMES-PID-HD17C-A04-W1024-P01-N00001',
+    live_hex: 'HD17C',
+    live_source: 'AGT-HERMES-PID-HD17C-A04-W1024-P01-N00001',
+  }),
+  deepseek: Object.freeze({
+    name: 'deepseek',
+    role: 'AGT',
+    tier: 4,
+    prime: 67,
+    nest: 67,
+    live_pid: 'AGT-DEEPSEEK-TUI-PID-HD15C-A04-W1024-P67-N00067',
+    live_hex: 'HD15C',
+    live_source: 'AGT-DEEPSEEK-TUI-PID-HD15C-A04-W1024-P67-N00067',
+  }),
+});
+
+function keyFor(name) {
+  const k = String(name || '').toLowerCase().replace(/[^a-z0-9]+/g, '-').replace(/^-|-$/g, '');
+  if (!k) throw new Error('name-required');
+  return k;
+}
+
+function hbpValue(field, value) {
+  const s = String(value ?? '');
+  if (!s || /[|\r\n]/.test(s)) throw new Error(`${field}-invalid`);
+  return s.replace(/[^A-Za-z0-9._:/-]+/g, '-').replace(/^-|-$/g, '') || 'empty';
+}
+
+export function reconcile({ name, role = 'AGT', tier, prime, nest } = {}) {
+  const key = keyFor(name);
+  const snap = LIVE_SNAPSHOT[key];
+  const p = mintPid({
+    role: snap?.role || role,
+    name: key,
+    tier: tier ?? snap?.tier ?? 4,
+    prime: prime ?? snap?.prime ?? 1,
+    nest: nest ?? snap?.nest ?? 1,
+  });
+  if (!snap) {
+    return {
+      name: key,
+      status: RECONCILE_STATUS.PENDING,
+      snapshot_source: SNAPSHOT_SOURCE,
+      github_pid: p.pid,
+      github_hex: p.hex,
+      github_sha16: p.sha16,
+      live_pid: 'none',
+      live_hex: 'none',
+      live_source: 'none',
+    };
+  }
+  const status = p.hex === snap.live_hex ? RECONCILE_STATUS.MATCH : RECONCILE_STATUS.DIVERGENT;
+  return {
+    name: key,
+    status,
+    snapshot_source: SNAPSHOT_SOURCE,
+    github_pid: p.pid,
+    github_hex: p.hex,
+    github_sha16: p.sha16,
+    live_pid: snap.live_pid,
+    live_hex: snap.live_hex,
+    live_source: snap.live_source,
+  };
+}
+
+export function emitReconcileRow(r) {
+  const x = r.status ? r : reconcile(r);
+  return `PIDRECONCILE|name=${hbpValue('name', x.name)}|status=${x.status}|github_pid=${hbpValue('github_pid', x.github_pid)}|github_hex=${x.github_hex}|github_sha16=${x.github_sha16}|live_pid=${hbpValue('live_pid', x.live_pid)}|live_hex=${x.live_hex}|snapshot_source=${SNAPSHOT_SOURCE}|json=0`;
+}
+
+export function emitSnapshotRows() {
+  const rows = [`PIDRECONCILEHDR|tool=${RECONCILE_ID}|snapshot_source=${SNAPSHOT_SOURCE}|entries=${Object.keys(LIVE_SNAPSHOT).length}|mode=github-proposed-vs-live-office-snapshot|json=0`];
+  for (const name of Object.keys(LIVE_SNAPSHOT).sort()) rows.push(emitReconcileRow(reconcile({ name })));
+  rows.push('PIDRECONCILEFTR|rule=github-pid-is-PROPOSED-until-live-office-assignment-or-alias-map-byte-receipted|unknown=PENDING-OFFICE-SNAPSHOT-not-fabricated|json=0');
+  return rows;
+}
+
+export function selfTest() {
+  const checks = [];
+  const add = (name, ok) => checks.push({ name, ok: Boolean(ok) });
+  const shannon = reconcile({ name: 'shannon' });
+  const hermes = reconcile({ name: 'hermes' });
+  const deepseek = reconcile({ name: 'deepseek' });
+  add('shannon-divergent', shannon.github_hex === 'HE2EC' && shannon.live_hex === 'HD16C' && shannon.status === RECONCILE_STATUS.DIVERGENT);
+  add('hermes-divergent', hermes.github_hex === 'HDFEC' && hermes.live_hex === 'HD17C' && hermes.status === RECONCILE_STATUS.DIVERGENT);
+  add('deepseek-corrected-h4dac', deepseek.github_hex === 'H4DAC' && deepseek.live_hex === 'HD15C' && deepseek.status === RECONCILE_STATUS.DIVERGENT);
+  add('no-stale-hb5ec', deepseek.github_hex !== 'HB5EC');
+  add('unknown-pending', reconcile({ name: 'new-model' }).status === RECONCILE_STATUS.PENDING);
+  add('rows-hbp-only', emitSnapshotRows().every((row) => row.endsWith('|json=0') && !row.includes('\n')));
+  add('source-named', SNAPSHOT_SOURCE.includes('count41'));
+  return { ok: checks.every((c) => c.ok), checks };
+}
+
+const isMain = process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1]);
+if (isMain) {
+  if (process.argv[2] === '--self-test') {
+    const r = selfTest();
+    for (const c of r.checks) console.log(`${c.ok ? 'PASS' : 'FAIL'} ${c.name}`);
+    process.exit(r.ok ? 0 : 1);
+  }
+  for (const row of emitSnapshotRows()) console.log(row);
+}

tools/behcs/github-live-pid-reconcile.mjs.sha256

@@ -0,0 +1 @@
+A852E9A292ABE319DE59292DEDA91EB04568F1FAA6083776492F6897CED7940A  github-live-pid-reconcile.mjs

tools/behcs/github-pid-register.mjs

@@ -19,9 +19,24 @@ export const KINDS = Object.freeze(['real', 'logical']);
 export const KIND_BITS = Object.freeze({ logical: 0, real: 1 });
 export const RUNTIMES = Object.freeze(['claude', 'codex', 'deepseek', 'opencode', 'gemini']);
 export const AGENT_TYPES = Object.freeze(['LOGICAL-WAVE', 'FROZEN-BRAIN', 'REAL-FREE']);
+export const REGISTER_AGENT_TUPLE_ID = 'github-pid-register-agent-tuple.v1';
+export const UNIT_SEPARATOR = '\x1f';
 
 const sha256 = (t) => createHash('sha256').update(String(t), 'utf8').digest('hex');
 const u32 = (hex8) => parseInt(hex8, 16);
+const safeTuplePart = (field, value) => {
+  const s = String(value ?? '');
+  if (!s) throw new Error(`${field}-required`);
+  if (/[|\r\n\x1f]/.test(s)) throw new Error(`${field}-contains-hbp-or-tuple-delimiter`);
+  return s;
+};
+
+export function tuplePreimage(parts) {
+  return [REGISTER_AGENT_TUPLE_ID, ...parts].map((part, i) => {
+    const s = safeTuplePart(`tuple_${i}`, part);
+    return `${Buffer.byteLength(s, 'utf8')}:${s}`;
+  }).join(UNIT_SEPARATOR);
+}
 
 // mint ONE deterministic live-format PID for (role, name) at access-tier + nest.
 export function mintPid({ role, name, tier = 4, nest = 1, kind = 'logical', prime = 0 }) {
@@ -85,18 +100,24 @@ export function classifyAgentType({ yin_yang, prime }) {
 export function registerAgent({ runtime, name, role = 'AGT', tier = 4, kind = 'logical', prime = 0, nest = 1 }) {
   const rt = String(runtime || '').toLowerCase().replace(/[^a-z0-9.-]+/g, '-').replace(/^-|-$/g, '');
   if (!rt) throw new Error('runtime-required-accepts-any-model-name');
+  const rawName = safeTuplePart('name', name);
+  const safeName = rawName.toUpperCase().replace(/[^A-Z0-9]+/g, '-').replace(/^-|-$/g, '');
+  if (!safeName) throw new Error('name-required-after-sanitize');
   const agentType = classifyAgentType({ yin_yang: kind, prime });
-  const p = mintPid({ role, name: `${rt.toUpperCase()}-${agentType}-${name}`, tier, kind, prime, nest });
+  const identityPreimage = tuplePreimage(['REGISTER_AGENT', rt, agentType, rawName, kind, String(prime)]);
+  const identitySha16 = sha256(identityPreimage).slice(0, 16);
+  const p = mintPid({ role, name: `${rt.toUpperCase()}-${agentType}-${safeName}-G${identitySha16.slice(0, 8).toUpperCase()}`, tier, kind, prime, nest });
   return {
     ...p,
     runtime: rt,
     known_runtime: RUNTIMES.includes(rt),
     agent_type: agentType,
+    register_identity_sha16: identitySha16,
   };
 }
 
 export function emitAgentRow(a) {
-  return `AGENTPID|runtime=${a.runtime}|known_runtime=${a.known_runtime ? 1 : 0}|agent_type=${a.agent_type}|pid=${a.pid}|tier=${a.tier}|yin_yang=${a.yin_yang}|yin_yang_bit=${a.yin_yang_bit}|lane_mod3=${a.lane}|quad_mod4=${a.quad}|sector=${a.sector}|cube_bh=${a.cube_bh}|json=0`;
+  return `AGENTPID|runtime=${a.runtime}|known_runtime=${a.known_runtime ? 1 : 0}|agent_type=${a.agent_type}|pid=${a.pid}|register_identity_sha16=${a.register_identity_sha16 || 'none'}|tier=${a.tier}|yin_yang=${a.yin_yang}|yin_yang_bit=${a.yin_yang_bit}|lane_mod3=${a.lane}|quad_mod4=${a.quad}|sector=${a.sector}|cube_bh=${a.cube_bh}|json=0`;
 }
 
 export function selfTest() {
@@ -126,6 +147,9 @@ export function selfTest() {
   })());
   add('kind-load-bearing-in-agent-pid', registerAgent({ runtime: 'claude', name: 'worker', kind: 'logical' }).pid
     !== registerAgent({ runtime: 'claude', name: 'worker', kind: 'real' }).pid);
+  add('register-agent-preimage-no-hyphen-collision', registerAgent({ runtime: 'claude', name: 'LOGICAL-WAVE-WORKER', kind: 'logical' }).pid
+    !== registerAgent({ runtime: 'claude-logical-wave', name: 'WORKER', kind: 'logical' }).pid);
+  add('register-identity-sha16', /^[0-9a-f]{16}$/.test(registerAgent({ runtime: 'claude', name: 'worker' }).register_identity_sha16));
   add('empty-runtime-rejected', (() => { try { registerAgent({ runtime: '', name: 'x' }); return false; } catch { return true; } })());
   add('agent-row-hbp', emitAgentRow(registerAgent({ runtime: 'claude', name: 'x' })).endsWith('|json=0'));
   return { ok: checks.every((c) => c.ok), checks };

tools/behcs/github-pid-register.mjs.sha256

@@ -1 +1 @@
-D70DB4B359AD6FEBBBB46A34C6E64127719CCAE616C5512EF8295AA4AA516E7D  github-pid-register.mjs
+49B1DA933EDAD721C18C43AB433EA78AB0F1A5A9EE3EB9E75AE51B08AF059DDF  github-pid-register.mjs

tools/behcs/pixel-room-handle.hbp

@@ -3,5 +3,7 @@ PIXROOMTUPLE|preimage=versioned-length-prefixed-fields-joined-by-0x1F|rejects=li
 PIXROOMLAW|systems=LOGICAL-WAVE+FROZEN-BRAIN+REAL-FREE|regulator=yin-yang-bit+prime-mod3+prime-parity+all-pid|human_front=watched-shell|agent_back=HBP-HBI-proof-rows-not-DOM-authority|json=0
 PIXROOMPROOF|proof=pixel_sha16+pixel_delta_sha16+world_rollout_sha16+correction_sha16+target_sha16|never=raw-pixels-or-private-screen-dump-in-HBP|route=room-handle-plus-sha16-row-references|json=0
 PIXROOMGATE|read_actions=LOOK+READ+PROBE+DIFF+HASH+INDEX+CAPTURE|draft_actions=PLAN+PREDICT+CORRECT+ROLL_OUT+REVIEW|control_actions=TYPE+CLICK+ENTER+DRAG+SCROLL+HOTKEY+REMOTE_ACT+SHELL+WRITE+DELETE+SUBMIT+OPEN+LAUNCH+MINT|control_verdict=DEFER_TO_OPERATOR|json=0
+PIXROOMACCESS|surface_tiers=public+agent+supervisor+operator+owner+hidden|restricted=operator+owner+hidden|unknown_action=DEFER_TO_SUPERVISOR-live_control-1|identity=handle8-plus-identity16|room_lane=prime-mod3-load-bearing|tag=PROVEN+tool-level|json=0
+PIXFOLDERHOST|contract=folder-dashboard-may-delegate-to-lower-level-host-row|physical_level_cap=16|logical_nesting=row-chain-unbounded|process_launch=0|process_gate=HBP_ROW_ONLY-or-DEFER|tag=PROPOSAL+contract|json=0
 PIXROOMECONOMY|REAL_FREE=deterministic-wide-sweep|LOGICAL_WAVE=model-judgment-token-thrift-through-8-byte-handles-and-sha16-rows|FROZEN_BRAIN=deterministic-local-slice-requires-double-run-receipt|no_claim=smart-agent-work-is-free|tag=PROPOSAL|json=0
 PIXROOMFTR|state=SEALED-ROOM-HANDLE-CONTRACT|nothing_launched=1|nothing_minted=1|next=liris-attack-plus-bind-to-Hermes-spindle-rooms-after-fabric-route-baselines|json=0

tools/behcs/pixel-room-handle.hbp.sha256

@@ -1 +1 @@
-B28319AB83AEAE295FFD631115060DD48F6E8B0B0190ACA1504C8F03BAC45D77  pixel-room-handle.hbp
+001674EDB3BB52EC40052588864BFFBA0EA1035667DBA61680FC43D0B46630EB  pixel-room-handle.hbp

tools/behcs/pixel-room-handle.mjs

@@ -10,6 +10,8 @@ export const UNIT_SEPARATOR = '\x1f';
 export const READ_ACTIONS = Object.freeze(['LOOK', 'READ', 'PROBE', 'DIFF', 'HASH', 'INDEX', 'CAPTURE']);
 export const DRAFT_ACTIONS = Object.freeze(['PLAN', 'PREDICT', 'CORRECT', 'ROLL_OUT', 'REVIEW']);
 export const CONTROL_ACTIONS = Object.freeze(['TYPE', 'CLICK', 'ENTER', 'DRAG', 'SCROLL', 'HOTKEY', 'REMOTE_ACT', 'SHELL', 'WRITE', 'DELETE', 'SUBMIT', 'OPEN', 'LAUNCH', 'MINT']);
+export const SURFACE_TIERS = Object.freeze(['public', 'agent', 'supervisor', 'operator', 'owner', 'hidden']);
+export const RESTRICTED_SURFACE_TIERS = Object.freeze(['operator', 'owner', 'hidden']);
 
 const sha256 = (text) => createHash('sha256').update(String(text), 'utf8').digest('hex');
 const sha16 = (text) => sha256(text).slice(0, 16);
@@ -34,6 +36,12 @@ function safeKind(kind) {
   return k;
 }
 
+function safeSurfaceTier(surfaceTier = 'agent') {
+  const tier = safeScalar('surface_tier', surfaceTier || 'agent').toLowerCase();
+  if (!SURFACE_TIERS.includes(tier)) throw new Error(`surface-tier-invalid:${surfaceTier}`);
+  return tier;
+}
+
 function intInRange(field, value, min, max) {
   const n = Number.parseInt(String(value), 10);
   if (!Number.isInteger(n) || n < min || n > max) throw new Error(`${field}-out-of-range:${value}`);
@@ -60,12 +68,16 @@ export function normalizeSha16(field, value = 'none') {
   return s;
 }
 
-export function classifyRoomAction(action) {
+export function classifyRoomAction(action, { surface_tier = 'agent' } = {}) {
   const a = hbpToken('action', String(action || 'LOOK').toUpperCase()).replace(/-/g, '_');
-  if (READ_ACTIONS.includes(a)) return { action: a, verdict: 'READ_READY', live_control: 0 };
-  if (DRAFT_ACTIONS.includes(a)) return { action: a, verdict: 'DRAFT_READY', live_control: 0 };
-  if (CONTROL_ACTIONS.includes(a)) return { action: a, verdict: 'DEFER_TO_OPERATOR', live_control: 1 };
-  return { action: a, verdict: 'DEFER_TO_SUPERVISOR', live_control: 0 };
+  const tier = safeSurfaceTier(surface_tier);
+  if (CONTROL_ACTIONS.includes(a)) return { action: a, verdict: 'DEFER_TO_OPERATOR', live_control: 1, surface_tier: tier, access_gate: 'live-control' };
+  if (RESTRICTED_SURFACE_TIERS.includes(tier) && (READ_ACTIONS.includes(a) || DRAFT_ACTIONS.includes(a))) {
+    return { action: a, verdict: 'DEFER_TO_SUPERVISOR', live_control: 1, surface_tier: tier, access_gate: 'restricted-surface' };
+  }
+  if (READ_ACTIONS.includes(a)) return { action: a, verdict: 'READ_READY', live_control: 0, surface_tier: tier, access_gate: 'read-ok' };
+  if (DRAFT_ACTIONS.includes(a)) return { action: a, verdict: 'DRAFT_READY', live_control: 0, surface_tier: tier, access_gate: 'draft-ok' };
+  return { action: a, verdict: 'DEFER_TO_SUPERVISOR', live_control: 1, surface_tier: tier, access_gate: 'unknown-action-fail-closed' };
 }
 
 export function mintPixelRoom({
@@ -73,6 +85,7 @@ export function mintPixelRoom({
   pid = 'PROPOSED',
   room,
   surface,
+  surface_tier = 'agent',
   route,
   tier = 8,
   kind = 'logical',
@@ -88,16 +101,21 @@ export function mintPixelRoom({
   const pidValue = safeScalar('pid', pid);
   const roomValue = safeScalar('room', room);
   const surfaceValue = safeScalar('surface', surface);
+  const surfaceTier = safeSurfaceTier(surface_tier);
   const routeValue = safeScalar('route', route);
-  const preimage = tuplePreimage(['ROOM', rt, agentType, k, String(p), String(t), String(n), pidValue, roomValue, surfaceValue, routeValue]);
+  const roomLane = `L${p % 3}`;
+  const preimage = tuplePreimage(['ROOM', rt, agentType, k, String(p), String(t), String(n), pidValue, roomValue, surfaceValue, surfaceTier, routeValue, roomLane]);
   const h = sha256(preimage);
   return {
     handle: h.slice(0, HANDLE_BYTES * 2),
     handle_bytes: HANDLE_BYTES,
+    identity16: h.slice(0, 32),
+    identity_bytes: 16,
     runtime: rt,
     pid: pidValue,
     room: roomValue,
     surface: surfaceValue,
+    surface_tier: surfaceTier,
     route: routeValue,
     route_sha16: sha16(routeValue),
     room_sha16: sha16(roomValue),
@@ -108,6 +126,7 @@ export function mintPixelRoom({
     yin_yang_bit: KIND_BITS[k],
     prime: String(p).padStart(2, '0'),
     prime_mod3: p % 3,
+    room_lane: roomLane,
     prime_parity: p % 2 === 0 ? 'even' : 'odd',
     agent_type: agentType,
     preimage_sha16: h.slice(16, 32),
@@ -116,7 +135,7 @@ export function mintPixelRoom({
 
 export function createPixelRoomTask(input = {}) {
   const room = mintPixelRoom(input);
-  const a = classifyRoomAction(input.action || 'LOOK');
+  const a = classifyRoomAction(input.action || 'LOOK', { surface_tier: room.surface_tier });
   return {
     ...room,
     ...a,
@@ -128,13 +147,63 @@ export function createPixelRoomTask(input = {}) {
   };
 }
 
+export function createFolderHostCall(input = {}) {
+  const parent = createPixelRoomTask(input.parent || input);
+  const parentTier = Number.parseInt(parent.tier.slice(1), 10);
+  const childTier = input.child_tier ?? input.childTier ?? Math.min(15, parentTier + 1);
+  const childNest = input.child_nest ?? input.childNest ?? Math.min(99999, Number.parseInt(parent.nest, 10) + 1);
+  const child = createPixelRoomTask({
+    runtime: input.child_runtime ?? input.childRuntime ?? parent.runtime,
+    pid: input.child_pid ?? input.childPid ?? parent.pid,
+    room: input.child_room ?? input.childRoom ?? `${parent.room}/child-${childNest}`,
+    surface: input.child_surface ?? input.childSurface ?? parent.surface,
+    surface_tier: input.child_surface_tier ?? input.childSurfaceTier ?? parent.surface_tier,
+    route: input.child_route ?? input.childRoute ?? parent.route,
+    tier: childTier,
+    kind: input.child_kind ?? input.childKind ?? parent.yin_yang,
+    prime: input.child_prime ?? input.childPrime ?? Number.parseInt(parent.prime, 10),
+    nest: childNest,
+    action: input.child_action ?? input.childAction ?? input.action ?? 'PLAN',
+    pixel_sha16: input.child_pixel_sha16 ?? input.childPixelSha16 ?? input.pixel_sha16 ?? 'none',
+    pixel_delta_sha16: input.child_pixel_delta_sha16 ?? input.childPixelDeltaSha16 ?? input.pixel_delta_sha16 ?? 'none',
+    world_rollout_sha16: input.child_world_rollout_sha16 ?? input.childWorldRolloutSha16 ?? input.world_rollout_sha16 ?? 'none',
+    correction_sha16: input.child_correction_sha16 ?? input.childCorrectionSha16 ?? input.correction_sha16 ?? 'none',
+    target_sha16: input.child_target_sha16 ?? input.childTargetSha16 ?? input.target_sha16 ?? 'none',
+  });
+  const folder = safeScalar('folder', input.folder ?? input.child_folder ?? child.room);
+  const hostProcess = safeScalar('host_process', input.host_process ?? input.hostProcess ?? 'HBP-ROW-ONLY');
+  const depth = intInRange('depth', input.depth ?? childNest, 1, 99999);
+  const preimage = tuplePreimage(['FOLDER_HOST', parent.identity16, child.identity16, folder, hostProcess, String(depth)]);
+  return {
+    parent,
+    child,
+    folder,
+    host_process: hostProcess,
+    depth,
+    delegation_sha16: sha16(preimage),
+    physical_level_cap: 16,
+    logical_nesting: 'row-chain-unbounded',
+    process_launch: 0,
+    process_gate: child.live_control ? child.verdict : 'HBP_ROW_ONLY',
+  };
+}
+
+export function emitFolderHostRows(input = {}) {
+  const c = input.parent && input.child && input.delegation_sha16 ? input : createFolderHostCall(input);
+  return [
+    `PIXFOLDERHOST|delegation_sha16=${c.delegation_sha16}|parent_handle=${c.parent.handle}|child_handle=${c.child.handle}|parent_identity16=${c.parent.identity16}|child_identity16=${c.child.identity16}|folder=${hbpToken('folder', c.folder)}|host_process=${hbpToken('host_process', c.host_process)}|json=0`,
+    `PIXFOLDERLEVEL|delegation_sha16=${c.delegation_sha16}|parent_tier=${c.parent.tier}|child_tier=${c.child.tier}|depth=${c.depth}|physical_level_cap=${c.physical_level_cap}|logical_nesting=${c.logical_nesting}|room_lane=${c.child.room_lane}|json=0`,
+    `PIXFOLDERGATE|delegation_sha16=${c.delegation_sha16}|child_action=${c.child.action}|child_verdict=${c.child.verdict}|child_surface_tier=${c.child.surface_tier}|process_launch=${c.process_launch}|process_gate=${c.process_gate}|cost_model=thin-reasoning-plus-deterministic-host-row|nothing_launched=1|json=0`,
+  ];
+}
+
 export function emitPixelRoomRows(input = {}) {
   const task = input.handle ? input : createPixelRoomTask(input);
   return [
-    `PIXROOMHDR|tool=${PIXEL_ROOM_ID}|handle=${task.handle}|handle_bytes=${task.handle_bytes}|pid=${hbpToken('pid', task.pid)}|runtime=${task.runtime}|agent_type=${task.agent_type}|tier=${task.tier}|room=${hbpToken('room', task.room)}|surface=${hbpToken('surface', task.surface)}|route_sha16=${task.route_sha16}|json=0`,
-    `PIXROOMDIV|handle=${task.handle}|three_system=${task.agent_type}|yin_yang=${task.yin_yang}|yin_yang_bit=${task.yin_yang_bit}|prime=${task.prime}|prime_mod3=${task.prime_mod3}|prime_parity=${task.prime_parity}|nest=${task.nest}|rule=three-systems-three-rules-yin-yang-primes-all-pid|json=0`,
-    `PIXROOMPROOF|handle=${task.handle}|action=${task.action}|verdict=${task.verdict}|pixel_sha16=${task.pixel_sha16}|pixel_delta_sha16=${task.pixel_delta_sha16}|world_rollout_sha16=${task.world_rollout_sha16}|correction_sha16=${task.correction_sha16}|target_sha16=${task.target_sha16}|raw_pixels=0|dom_authority=0|json=0`,
-    `PIXROOMGATE|handle=${task.handle}|live_control=${task.live_control}|control_gate=${task.live_control ? 'DEFER_TO_OPERATOR' : 'not-live-control'}|economy=REAL-FREE-deterministic-sweep-plus-LOGICAL-WAVE-token-thrift-via-handles|mcp_payload=sha16-row-handles-not-full-context|nothing_launched=1|json=0`,
+    `PIXROOMHDR|tool=${PIXEL_ROOM_ID}|handle=${task.handle}|handle_bytes=${task.handle_bytes}|identity16=${task.identity16}|identity_bytes=${task.identity_bytes}|pid=${hbpToken('pid', task.pid)}|runtime=${task.runtime}|agent_type=${task.agent_type}|tier=${task.tier}|room=${hbpToken('room', task.room)}|surface=${hbpToken('surface', task.surface)}|surface_tier=${task.surface_tier}|route_sha16=${task.route_sha16}|json=0`,
+    `PIXROOMDIV|handle=${task.handle}|three_system=${task.agent_type}|yin_yang=${task.yin_yang}|yin_yang_bit=${task.yin_yang_bit}|prime=${task.prime}|prime_mod3=${task.prime_mod3}|room_lane=${task.room_lane}|prime_parity=${task.prime_parity}|nest=${task.nest}|rule=three-systems-three-rules-yin-yang-primes-all-pid|json=0`,
+    `PIXROOMPROOF|handle=${task.handle}|action=${task.action}|verdict=${task.verdict}|surface_tier=${task.surface_tier}|access_gate=${task.access_gate}|pixel_sha16=${task.pixel_sha16}|pixel_delta_sha16=${task.pixel_delta_sha16}|world_rollout_sha16=${task.world_rollout_sha16}|correction_sha16=${task.correction_sha16}|target_sha16=${task.target_sha16}|raw_pixels=0|dom_authority=0|json=0`,
+    `PIXROOMGATE|handle=${task.handle}|live_control=${task.live_control}|control_gate=${task.live_control ? task.verdict : 'not-live-control'}|economy=REAL-FREE-deterministic-sweep-plus-LOGICAL-WAVE-token-thrift-via-handles|mcp_payload=sha16-row-handles-not-full-context|nothing_launched=1|json=0`,
   ];
 }
 
@@ -153,12 +222,20 @@ export function selfTest() {
   };
   const t = createPixelRoomTask({ ...base, action: 'LOOK', pixel_sha16: '0123456789abcdef' });
   add('handle-shape', /^[0-9a-f]{16}$/.test(t.handle));
+  add('identity16-shape', /^[0-9a-f]{32}$/.test(t.identity16) && t.identity_bytes === 16);
   add('deterministic', createPixelRoomTask({ ...base, action: 'LOOK' }).handle === createPixelRoomTask({ ...base, action: 'LOOK' }).handle);
   add('tuple-split-no-collision', sha16(tuplePreimage(['a', 'b-c'])) !== sha16(tuplePreimage(['a-b', 'c'])));
   add('separation-logical', createPixelRoomTask({ ...base, kind: 'logical', prime: 0 }).agent_type === 'LOGICAL-WAVE');
   add('separation-frozen', createPixelRoomTask({ ...base, kind: 'real', prime: 0 }).agent_type === 'FROZEN-BRAIN');
   add('separation-real-free', createPixelRoomTask({ ...base, kind: 'real', prime: 1 }).agent_type === 'REAL-FREE');
   add('control-deferred', createPixelRoomTask({ ...base, action: 'TYPE' }).verdict === 'DEFER_TO_OPERATOR');
+  add('unknown-action-fail-closed', createPixelRoomTask({ ...base, action: 'typ' }).live_control === 1);
+  add('hidden-surface-gated', createPixelRoomTask({ ...base, surface_tier: 'hidden', action: 'LOOK' }).verdict === 'DEFER_TO_SUPERVISOR');
+  add('mod3-room-lane-load-bearing', createPixelRoomTask({ ...base, prime: 4 }).room_lane === 'L1');
+  add('nested-folder-host-row-only', (() => {
+    const c = createFolderHostCall({ ...base, child_room: 'A09-child-room', folder: 'dashboards/A08', host_process: 'child-host.mjs' });
+    return c.process_launch === 0 && c.child.tier === 'A09' && c.logical_nesting === 'row-chain-unbounded';
+  })());
   add('no-raw-pixels-row', emitPixelRoomRows(t).some((row) => row.includes('raw_pixels=0') && row.includes('pixel_sha16=0123456789abcdef')));
   add('rows-hbp-only', emitPixelRoomRows(t).every((row) => row.endsWith('|json=0') && !row.includes('\n')));
   add('hbp-injection-rejected', (() => { try { createPixelRoomTask({ ...base, room: 'bad|room' }); return false; } catch { return true; } })());
@@ -179,6 +256,7 @@ if (isMain) {
     surface: process.argv[5] || 'backend-pixels',
     route: process.argv[6] || '/api/omniscrcpy/status',
     action: process.argv[7] || 'LOOK',
+    surface_tier: 'agent',
     kind: 'logical',
     prime: 1,
   })) console.log(row);

tools/behcs/pixel-room-handle.mjs.sha256

@@ -1 +1 @@
-3514D47EB527F96DB69337A30A46590A0FEC898C04CA5116F9BFEC6391E49C3D  pixel-room-handle.mjs
+3A35550662350290CC588CC272AD88E1EFCD1542A981C28A529CAED190923E28  pixel-room-handle.mjs