harden nnest proxy and canonical depth

docs/LIRIS-NNEST-GATE-HARDEN-READBACK-2026-06-11.hbp

@@ -0,0 +1,8 @@
+LIRISNNESTHARDENRBHDR|host=liris|date=2026-06-11|pulled_commit=2789d14|topic=component-4-counter-verify-of-acer-single-read-snapshot-hardening-plus-200-step-delta-precision|json=0
+LIRISNNESTHARDENRBVERIFY|blob_level_sidecars=ALL_OK|pyramid_at_pull=105of105_PASS|acer_delta_precision=ACCEPTED(two-real-doc-fixes)|acer_harden_receipt=READ|json=0
+LIRISNNESTHARDENRBACCEPT|acer_three_findings_against-liris-exact-tuple-patch=REAL|accessor-toctou+non-enumerable-own+symbol-keyed=correctly-caught|single-read-snapshot-doctrine=RIGHT_DIRECTION|json=0
+LIRISNNESTHARDENRBFINDINGS|liris_two_new_edges_after-acer-hardening=TWO_REAL|F1=revoked-proxy-chain-or-tuple-threw-TypeError-instead-of-emitting-CHILD_HELD-row|F2=negative-zero-depth-aliased-to-canonical-zero-and-could-CHILD_MAY_ACT|verdict=TWO_REAL_PATCHED|json=0
+LIRISNNESTHARDENRBPATCH|F1=materializeChain+snapshotTuple-now-catch-hostile-proxy-traps-and-return-null-or-empty-materialization|F2=isCanonicalDepth-rejects-negative-zero-for-max_depth-and-tuple-depth|also=descriptor-value-snapshot-used-instead-of-later-property-get|json=0
+LIRISNNESTHARDENRBPROBES|extended=5of5_PASS|revoked-proxy-tuple=CHILD_HELD-chain-topology-invalid@1|revoked-proxy-chain=CHILD_HELD-empty-or-missing-chain|tuple-depth-negative-zero=CHILD_HELD-chain-topology-invalid@0|max-depth-negative-zero=CHILD_HELD-invalid-max-depth|proxy-descriptor-get-split=CHILD_MAY_ACT-on-descriptor-snapshot-no-verdict-digest-split|json=0
+LIRISNNESTHARDENRBSAFETY|repo_side_only=1|untouched=process-spawn+real-agent-recursion+harness-edits+mint+USB+engine+apex-T0|mutates=component4-tool+tests+descriptor+parity+receipt-only|json=0
+LIRISNNESTHARDENRBFTR|state=COMPONENT_4_LIRIS_PROXY_DEPTH_COUNTERHARDENING_READY_FOR_ACER_PULL|json=0

docs/LIRIS-NNEST-GATE-HARDEN-READBACK-2026-06-11.hbp.sha256

@@ -0,0 +1 @@
+FA61742BF2DACD7BCA3630998EEFFA46061D73F37AD682BF66EC77F44EA05027  LIRIS-NNEST-GATE-HARDEN-READBACK-2026-06-11.hbp

docs/NNEST-WATCHER-GATE-PARITY-BASELINE-2026-06-11.hbp

@@ -1,4 +1,4 @@
-NNESTGATEPARITYHDR|component=4|cases=21|clock=none-time-free-contract|rule=rows-byte-identical-on-every-machine|json=0
+NNESTGATEPARITYHDR|component=4|cases=24|clock=none-time-free-contract|rule=rows-byte-identical-on-every-machine|json=0
 NNESTGATEPARITY|case=01|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|chain_len=4|chain_sha16=502e00a9b19e839d|verdict=CHILD_MAY_ACT|first_bad_depth=none|gate=none|executable=0|json=0
 NNESTGATEPARITY|case=02|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=16|chain_len=17|chain_sha16=58b859999d5e364a|verdict=CHILD_MAY_ACT|first_bad_depth=none|gate=none|executable=0|json=0
 NNESTGATEPARITY|case=03|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|chain_len=4|chain_sha16=f4579dd9c63399f5|verdict=CHILD_HELD|first_bad_depth=2|gate=hash-divergence|executable=0|json=0
@@ -20,4 +20,7 @@ NNESTGATEPARITY|case=18|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|
 NNESTGATEPARITY|case=19|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|chain_len=4|chain_sha16=none|verdict=CHILD_HELD|first_bad_depth=1|gate=chain-topology-invalid|executable=0|json=0
 NNESTGATEPARITY|case=20|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|chain_len=4|chain_sha16=none|verdict=CHILD_HELD|first_bad_depth=2|gate=chain-topology-invalid|executable=0|json=0
 NNESTGATEPARITY|case=21|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|chain_len=4|chain_sha16=none|verdict=CHILD_HELD|first_bad_depth=0|gate=chain-topology-invalid|executable=0|json=0
-NNESTGATEPARITYFTR|cases=21|exit=byte-match-when-regenerated-file-equals-sealed-baseline|json=0
+NNESTGATEPARITY|case=22|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|chain_len=4|chain_sha16=none|verdict=CHILD_HELD|first_bad_depth=1|gate=chain-topology-invalid|executable=0|json=0
+NNESTGATEPARITY|case=23|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=invalid|chain_len=1|chain_sha16=8f6d8d4eca0f9e07|verdict=CHILD_HELD|first_bad_depth=none|gate=invalid-max-depth|executable=0|json=0
+NNESTGATEPARITY|case=24|agent=AGT-NNEST-PROBE-0001|action=report-up|max_depth=3|chain_len=4|chain_sha16=none|verdict=CHILD_HELD|first_bad_depth=0|gate=chain-topology-invalid|executable=0|json=0
+NNESTGATEPARITYFTR|cases=24|exit=byte-match-when-regenerated-file-equals-sealed-baseline|json=0

docs/NNEST-WATCHER-GATE-PARITY-BASELINE-2026-06-11.hbp.sha256

@@ -1 +1 @@
-88F20CBEC126E5194B1C1D04BC83674765DDEC4C0BBBA51DD4E7EFBC4A59F3C7  NNEST-WATCHER-GATE-PARITY-BASELINE-2026-06-11.hbp
+CBB5F7F0CC5AC8EA629B3ED42C709A30F1EAFCE3A321DD949D6D78C4E3E23419  NNEST-WATCHER-GATE-PARITY-BASELINE-2026-06-11.hbp

docs/TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp

@@ -10,7 +10,7 @@ PTPTEST|required=classify-prime-power-49-p2+transition-allowed-5-7+disputed-band
 COMP3DELTA|insert_after_step=60|adds=bh_lane-extraction+bh_ppow-classification+p3-collision-reserve-proposal+blocked-row-skip-classification+frozen-slice-manifest-rebind|current_status=PARTIAL-bh_lane-bh_ppow-and-blocked-redaction-proven-manifest-rebind-and-p3-mint-pending|verification=component3-lattice-test-1e6-random-addresses-required|json=0
 FROZSEQ|insert_after_step=80|sequence=fill-frozen-model-socket+hash-manifest-bytes+bind-frozen-slice-to-BH+attach-geospatial-MTP-route+watcher-emits-suggestion-row+supervisor-validates-topology+fischer-scores-output+shannon-gates-novelty+whiteroom-mint-promotes-with-operator-cosign|status=DRAFT-and-OPERATOR_GATED-where-live-or-minting|json=0
 ORGANMAP|insert_after_step=90|fischer=judge-score-kernel|omnishannon=novelty-gate|hermes-hyperhermes-spindles=transport-pulse|gnn=edge-wiring|whiteroom=quarantine-promote-chamber|mint=canon-promotion|hookwall=pass-block-policy|nnest=recursive-watcher-gate|rule=each-organ-carries-current-proof-plus-gap-plus-next-step-number|json=0
-COMP4DELTA|insert_after_step=115|liris_readback=docs/LIRIS-NNEST-GATE-READBACK-2026-06-11.hbp|acer_harden=docs/ACER-NNEST-GATE-HARDEN-2026-06-11.hbp|patch_stack=exact-own-field-plain-object-tuples+chain_sha16-none-for-invalid-or-noncanonical-chains+single-read-frozen-data-tuple-snapshot+reject-accessors-nonenum-symbol-keys|state=READY_FOR_LIRIS_COUNTER_VERIFY|dry_run_harness_embedding=OPERATOR_GATED|json=0
+COMP4DELTA|insert_after_step=115|liris_readback=docs/LIRIS-NNEST-GATE-READBACK-2026-06-11.hbp|acer_harden=docs/ACER-NNEST-GATE-HARDEN-2026-06-11.hbp|liris_counter_harden=docs/LIRIS-NNEST-GATE-HARDEN-READBACK-2026-06-11.hbp|patch_stack=exact-own-field-plain-object-tuples+chain_sha16-none-for-invalid-or-noncanonical-chains+single-read-frozen-data-tuple-snapshot+reject-accessors-nonenum-symbol-keys+hostile-proxy-held-not-thrown+negative-zero-depth-rejected|state=READY_FOR_ACER_READBACK|dry_run_harness_embedding=OPERATOR_GATED|json=0
 TUPLESHAPELAW|rule=verification-inputs-must-be-single-read-frozen-snapshots|reject=accessors+setters+non-enumerable-own-fields+symbol-keys+prototype-inherited-fields+extra-fields+proxy-TOCTOU-splits|applies_to=nnest-now+fischer-shannon-binder-future|source=ACER-NNEST-GATE-HARDEN-2026-06-11|json=0
 TAGLAW|replace_free_text_hype_with_tags=PROVEN+PARTIAL+DRAFT+PROPOSAL+OPERATOR_GATED+ASPIRATIONAL|rule=every-grand-claim-in-plan-must-carry-one-tag|example=ASI-on-16GB-stick-rewrites-to-ASPIRATIONAL-logical-agent-addressability-with-PROVEN-tests-only-where-present|json=0
 CLAIMSLEDGER|required=extraordinary-number-and-language-ledger|tracks=0.3-bytes+pico-second+1e200+100B-agents+sub-BIOS+ASI|rule=each-claim-gets-tag+evidence+critic-proof-restatement|json=0

docs/TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp.sha256

@@ -1 +1 @@
-704E486700811FBB854E642C668FFC271970BD26C2E2AB733AB36430B8CDCB6A  TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp
+EAD46448F8B1B2AC501B1703B442E9EB7B5BB6D0E400FBB9971D454C768A0E74  TARGET-ARCHITECTURE-200-STEP-DELTA-2026-06-11.hbp

docs/TARGET-ARCHITECTURE-VISION-2026-06-10.hbp

@@ -23,7 +23,7 @@ COMPONENT|4|name=INFINITE-NESTED-AGENTS-IN-OS-HARNESSES|vision=infinite-nested-a
 PROVEN|4|N-Nest-Prime(depth-N-watcher-gate-proven-depth-16-over-2732-real-files,planted-confab-caught-at-EVERY-level,131071-nodes)+8-byte-agent-seed(sha256(seed)->glyph/cube/hilbert/prime,35TB/8B~=4.38T-slots)+intelligent-terminal-host-CMD-harness(wta-registry-fills-at-runtime)
 GAP|4|infinite-nesting-not-yet-wired-into-EVERY-agent-OS-harness|FIX=each-agent-harness-embeds-the-N-Nest-Prime-watcher-gate(child-acts-only-if-reported==recomputed)+consent-anchors-only-at-apex-T0
 PROGRESS|4|gate_seed=tools/behcs/nnest-watcher-gate.mjs|law=hash-match-every-level-AND-chain-complete-contiguous-unique-ordered(operator-amendment)|topology-violations=CHILD_HELD-with-first_bad_depth|consent=DEFER-at-apex-T0-only-even-on-perfect-chain|depth_bound=16-proven|parity_baseline=NNEST-WATCHER-GATE-PARITY-BASELINE-2026-06-11.hbp|draft_only=1|no_spawn=1|no_harness_edit=1|json=0
-PROGRESS|4|liris_readback=docs/LIRIS-NNEST-GATE-READBACK-2026-06-11.hbp|acer_harden=docs/ACER-NNEST-GATE-HARDEN-2026-06-11.hbp|patch_stack=exact-tuples+chain_sha16-none+snapshotTuple-data-only-single-read|state=READY_FOR_LIRIS_COUNTER_VERIFY|json=0
+PROGRESS|4|liris_readback=docs/LIRIS-NNEST-GATE-READBACK-2026-06-11.hbp|acer_harden=docs/ACER-NNEST-GATE-HARDEN-2026-06-11.hbp|liris_counter_harden=docs/LIRIS-NNEST-GATE-HARDEN-READBACK-2026-06-11.hbp|patch_stack=exact-tuples+chain_sha16-none+snapshotTuple-data-only-single-read+revoked-proxy-held-not-thrown+negative-zero-depth-rejected|state=READY_FOR_ACER_READBACK|json=0
 
 COMPONENT|5|name=REAL-TIME-SELF-REFLECTION-WATCHER-SUGGESTS-TO-SUPERVISORS|vision=self-reflection-subagent-watches-ANY-agent+suggests-next-steps-to-supervisors-IN-REAL-TIME+supervisors-SEE-it=INFINITE-NEXT-with-self-reflection
 PROVEN|5|LAW-RECURRENCE-IS-MIND(recurrence+corrective-gate=mind,proven-twice-live)+PROF-AUTOCHRONE(self-reflection-cycle-enforcer-LOOK->TYPE->LOOK->ENTER->LOOK)+self-reflect-daemon(60s-heartbeat-FOUNDATION-V3)+adversarial-verify-pattern(workflows:skeptic-default-refuted-caught-2-real-bugs-this-session)

docs/TARGET-ARCHITECTURE-VISION-2026-06-10.hbp.sha256

@@ -1 +1 @@
-21C9D18EAC6564C427DCECB208C584EF5DE45438DCE898FBBB621027665E7CD3  TARGET-ARCHITECTURE-VISION-2026-06-10.hbp
+03B584DBC5D3CF3A6D87325F3A639646D861A0F12B614148CF6A1CECB10B8700  TARGET-ARCHITECTURE-VISION-2026-06-10.hbp

tests/nnest-watcher-gate.unit.test.mjs

@@ -69,6 +69,39 @@ test('tuple shape is exact: extra fields and inherited fields are topology viola
   assert.equal(protoOut.chain_sha16, 'none');
 });
 
+test('hostile proxy inputs are held as rows, never thrown exceptions', () => {
+  const tupleProxy = goodChain(3);
+  const tupleRevoke = Proxy.revocable(tupleProxy[1], {});
+  tupleRevoke.revoke();
+  tupleProxy[1] = tupleRevoke.proxy;
+  assert.doesNotThrow(() => gateChain({ ...GOOD, chain: tupleProxy }));
+  const tupleOut = gateChain({ ...GOOD, chain: tupleProxy });
+  assert.equal(tupleOut.verdict, 'CHILD_HELD');
+  assert.equal(tupleOut.gate, 'chain-topology-invalid');
+  assert.equal(tupleOut.first_bad_depth, 1);
+  assert.equal(tupleOut.chain_sha16, 'none');
+
+  const chainRevoke = Proxy.revocable(goodChain(3), {});
+  chainRevoke.revoke();
+  assert.doesNotThrow(() => gateChain({ ...GOOD, chain: chainRevoke.proxy }));
+  assert.equal(gateChain({ ...GOOD, chain: chainRevoke.proxy }).gate, 'empty-or-missing-chain');
+});
+
+test('canonical depths reject negative zero instead of aliasing it to zero', () => {
+  const tupleNegativeZero = goodChain(3);
+  tupleNegativeZero[0] = { ...tupleNegativeZero[0], depth: -0 };
+  const tupleOut = gateChain({ ...GOOD, chain: tupleNegativeZero });
+  assert.equal(tupleOut.verdict, 'CHILD_HELD');
+  assert.equal(tupleOut.gate, 'chain-topology-invalid');
+  assert.equal(tupleOut.first_bad_depth, 0);
+  assert.equal(tupleOut.chain_sha16, 'none');
+
+  const maxOut = gateChain({ ...GOOD, max_depth: -0, chain: goodChain(0) });
+  assert.equal(maxOut.verdict, 'CHILD_HELD');
+  assert.equal(maxOut.gate, 'invalid-max-depth');
+  assert.equal(maxOut.max_depth, 'invalid');
+});
+
 test('mismatch-at-depth-k precision: divergence named at the exact level, every k', () => {
   for (let k = 0; k <= 5; k += 1) {
     const chain = goodChain(5);

tests/nnest-watcher-gate.unit.test.mjs.sha256

@@ -1 +1 @@
-FE5CEAD6034E316F51AA9C72EC05916EBA65349559817B5657C23138B3D79218  nnest-watcher-gate.unit.test.mjs
+86838433939F5AA3EEEC81D42813D777846B3A015DE241FB3FC3CBFE4605C8D8  nnest-watcher-gate.unit.test.mjs

tests/supervisor-collision-router.system.test.mjs

@@ -42,6 +42,7 @@ const sealedFiles = [
   'docs/ACER-NNEST-GATE-SEED-2026-06-11.hbp',
   'docs/LIRIS-NNEST-GATE-READBACK-2026-06-11.hbp',
   'docs/ACER-NNEST-GATE-HARDEN-2026-06-11.hbp',
+  'docs/LIRIS-NNEST-GATE-HARDEN-READBACK-2026-06-11.hbp',
   'docs/LIRIS-WATCHER-SUPERVISOR-READBACK-2026-06-11.hbp',
   'docs/ACER-READBACK-WATCHER-SUPERVISOR-2026-06-11.hbp',
   'docs/LIRIS-STEP166-PARITY-CONFIRMED-2026-06-11.hbp',

tests/supervisor-collision-router.system.test.mjs.sha256

@@ -1 +1 @@
-394233109BB44774DE4E7EC8DDCD950D57D6F3DBFADB42F5FD4DBB1791DD421C  supervisor-collision-router.system.test.mjs
+0BB256FECA79C3CC354A2F20FA8816ECB5559EB96CA91706CD081A88DD088D1E  supervisor-collision-router.system.test.mjs

tools/behcs/nnest-watcher-gate.hbi

@@ -1,13 +1,14 @@
-NNESTGATEINDEX|host=acer|target=nnest-watcher-gate.hbp|tool=nnest-watcher-gate.mjs|rows=12|json=0
+NNESTGATEINDEX|host=liris|target=nnest-watcher-gate.hbp|tool=nnest-watcher-gate.mjs|rows=13|json=0
 INDEXROW|row=1|kind=header|component=architecture-component-4|json=0
-INDEXROW|row=2|kind=law|may_act=hash-match-AND-topology-valid-and-exact-3-field-plain-data-tuples-single-read|hashes=necessary-not-sufficient|json=0
+INDEXROW|row=2|kind=law|may_act=hash-match-AND-topology-valid-and-exact-data-snapshot-and-canonical-depth|hashes=necessary-not-sufficient|json=0
 INDEXROW|row=3|kind=scope|repo_side_draft_only=1|no_spawn=1|no_harness_edit=1|json=0
 INDEXROW|row=4|kind=ladder|rungs=9|topology_before_hashes=1|json=0
 INDEXROW|row=5|kind=table|actions_free=3|actions_consent=3|consent_cap=DEFER|json=0
 INDEXROW|row=6|kind=bound|max_depth=16-proven|json=0
 INDEXROW|row=7|kind=leak|held_rows=first_bad_depth+chain_sha16-only|noncanonical_chain_sha16=none|json=0
 INDEXROW|row=8|kind=harden|acer-findings=accessor-toctou+non-enumerable-own+symbol-keyed|fix=single-read-snapshot-data-descriptor-only|json=0
-INDEXROW|row=9|kind=safety|mutates=0|pure_function=1|json=0
-INDEXROW|row=10|kind=verify|required=node-check+node-test+self-test+parity-byte-compare|json=0
-INDEXROW|row=11|kind=sha|fields=gate_sha256+test_sha256|json=0
-INDEXROW|row=12|kind=footer|state=COMPONENT_4_ACER_TUPLE_SHAPE_HARDENING_READY_FOR_LIRIS_READBACK|json=0
+INDEXROW|row=9|kind=counter-harden|liris-findings=revoked-proxy-throw+negative-zero-depth|fix=held-not-thrown+canonical-depth|json=0
+INDEXROW|row=10|kind=safety|mutates=0|pure_function=1|json=0
+INDEXROW|row=11|kind=verify|required=node-check+node-test+self-test+parity-byte-compare|json=0
+INDEXROW|row=12|kind=sha|fields=gate_sha256+test_sha256|json=0
+INDEXROW|row=13|kind=footer|state=COMPONENT_4_LIRIS_PROXY_DEPTH_COUNTERHARDENING_READY_FOR_ACER_READBACK|json=0

tools/behcs/nnest-watcher-gate.hbi.sha256

@@ -1 +1 @@
-B1A91A33A0AB317B52228E7C099196A9299D5543D66112C088F3E21021BD0C52  nnest-watcher-gate.hbi
+C91A03F5D05AF44965C1E01AA03990683D7CBE013356E62661F5BE40CDBF88AD  nnest-watcher-gate.hbi

tools/behcs/nnest-watcher-gate.hbp

@@ -1,12 +1,13 @@
-NNESTGATEHDR|host=acer|component=architecture-component-4|tool=tools/behcs/nnest-watcher-gate.mjs|purpose=n-nest-watcher-gate-child-acts-only-if-reported-equals-recomputed-at-every-level|json=0
-NNESTGATELAW|may_act_requires=BOTH(hash-match-every-level)AND(chain-complete-contiguous-unique-ordered-depth-0-to-max+exact-3-field-plain-DATA-tuples-single-read-snapshot)|hashes=necessary-but-NOT-sufficient|topology_violations=CHILD_HELD-chain-topology-invalid-with-first_bad_depth(never-merely-malformed)|source=OP-JESSE-amendment-2026-06-11+liris-exact-tuple-patch+acer-tuple-shape-hardening|composes=TARGET-ARCHITECTURE-VISION-2026-06-10(COMPONENT-4)+N-Nest-Prime-proof(depth-16-2732-files-131071-nodes)+LAW-RECURRENCE-IS-MIND|json=0
+NNESTGATEHDR|host=liris|component=architecture-component-4|tool=tools/behcs/nnest-watcher-gate.mjs|purpose=n-nest-watcher-gate-child-acts-only-if-reported-equals-recomputed-at-every-level|json=0
+NNESTGATELAW|may_act_requires=BOTH(hash-match-every-level)AND(chain-complete-contiguous-unique-ordered-depth-0-to-max+exact-3-field-plain-DATA-tuples-single-read-snapshot+canonical-depths-no-negative-zero)|hashes=necessary-but-NOT-sufficient|topology_violations=CHILD_HELD-chain-topology-invalid-with-first_bad_depth(never-merely-malformed)|source=OP-JESSE-amendment-2026-06-11+liris-exact-tuple-patch+acer-tuple-shape-hardening+liris-proxy-depth-counterhardening|composes=TARGET-ARCHITECTURE-VISION-2026-06-10(COMPONENT-4)+N-Nest-Prime-proof(depth-16-2732-files-131071-nodes)+LAW-RECURRENCE-IS-MIND|json=0
 NNESTGATESCOPE_DOC|repo_side_draft_only=1|never=process-spawn+recursion-into-real-agents+harness-edits|gate-emits-verdict-rows-it-never-acts|live_harness_embedding=SEPARATE-GATED-FOLLOW-UP-operator-signoff|json=0
 NNESTGATELADDER|rungs=9|order=dirty-HELD+malformed-agent-HELD+unknown-action-HELD+invalid-max-depth-HELD+empty-chain-HELD+TOPOLOGY-HELD(first_bad_depth)+hash-format-HELD(first_bad_depth)+hash-divergence-HELD(first_bad_depth)+consent-DEFER+honest-free-CHILD_MAY_ACT|topology_before_hashes=BY-DESIGN|json=0
 NNESTGATETABLE|actions_free=observe+report-up+draft-row|actions_consent=act-on-world+spawn-child+modify-self|consent_cap=DEFER_TO_OPERATOR-even-on-perfect-chain(consent-anchors-at-apex-T0-only)|membership=DRAFT_ASSUMPTION-bilateral-contest-welcome|json=0
 NNESTGATEBOUND|max_depth=16|why=the-PROVEN-N-Nest-Prime-depth|beyond=CHILD_HELD-invalid-max-depth|json=0
 NNESTGATELEAK_DOC|held_rows_carry=first_bad_depth+chain_sha16-only|chain_sha16=none-for-noncanonical-or-invalid-hash-chains|level_hashes=NEVER-echoed-into-rows|catch-at-exact-level=preserved(first_bad_depth-names-the-divergent-depth)|json=0
 NNESTGATEHARDEN_DOC|acer-findings-2026-06-11=THREE-real-bypasses-of-liris-Object.keys-check|F1=accessor(getter)-tuple-split-check-from-use-TOCTOU-granted-CHILD_MAY_ACT-with-chain_sha16-ne-verified-content|F2=non-enumerable-own-field-smuggled-past-exact-shape|F3=symbol-keyed-field-smuggled|fix=single-read-frozen-snapshot+getOwnPropertyNames+getOwnPropertySymbols+data-descriptor-only|proxy-array=neutralized-by-single-index-read|parity_cases_added=19+20+21|json=0
+NNESTGATECOUNTERHARDEN_DOC|liris-findings-2026-06-11=TWO-real-edges-after-acer-hardening|F1=revoked-proxy-chain-or-tuple-threw-TypeError-instead-of-CHILD_HELD-row|F2=negative-zero-depth-aliased-to-canonical-zero|fix=try-catch-materializeChain+descriptor-value-snapshot+isCanonicalDepth-rejects-negative-zero|parity_cases_added=22+23+24|json=0
 NNESTGATESAFETY|mutates=0|pure_function=1|time_free_contract=1|no_spawn=1|no_recursion_into_real_agents=1|no_harness_edit=1|mints=0|launches=0|usb_writes=0|engine_edits=0|external_calls=0|json=0
 NNESTGATEVERIFY|required=node-check+node-test+self-test+parity-byte-compare|parity_baseline=docs/NNEST-WATCHER-GATE-PARITY-BASELINE-2026-06-11.hbp|clock=none-time-free|json=0
-NNESTGATESHA|gate_sha256=81602D6027A19941A38C910D32F8971CEDA137B6EA42FB55210FD3B8024956C7|test_sha256=FE5CEAD6034E316F51AA9C72EC05916EBA65349559817B5657C23138B3D79218|json=0
-NNESTGATEFTR|state=COMPONENT_4_ACER_TUPLE_SHAPE_HARDENING_READY_FOR_LIRIS_READBACK|json=0
+NNESTGATESHA|gate_sha256=995BD8A457D7E22865F5FAC1F2E9516C52D014F34F5AF26D2DEDF40D3EFF6008|test_sha256=86838433939F5AA3EEEC81D42813D777846B3A015DE241FB3FC3CBFE4605C8D8|json=0
+NNESTGATEFTR|state=COMPONENT_4_LIRIS_PROXY_DEPTH_COUNTERHARDENING_READY_FOR_ACER_READBACK|json=0

tools/behcs/nnest-watcher-gate.hbp.sha256

@@ -1 +1 @@
-EC5D5CED95E47D93C32D10F362B3E7704EFD073188438B381259EFF5D79EFBDC  nnest-watcher-gate.hbp
+6D56116777EC0298D503D50FEDC8EA97D9B32438DD5A632B0147121DF7F5C756  nnest-watcher-gate.hbp

tools/behcs/nnest-watcher-gate.mjs

@@ -38,6 +38,10 @@ const HASH_RE = /^[0-9a-f]{16}$/;
 const DIRTY_RE = /[|\r\n]/;
 const TUPLE_KEYS = Object.freeze(['depth', 'reported_sha16', 'recomputed_sha16']);
 
+function isCanonicalDepth(value) {
+  return Number.isInteger(value) && value >= 0 && value <= MAX_DEPTH_BOUND && !Object.is(value, -0);
+}
+
 function sha16(value) {
   const text = typeof value === 'string' ? value : JSON.stringify(value);
   return createHash('sha256').update(text).digest('hex').slice(0, 16);
@@ -62,20 +66,22 @@ function echoField(value, validator) {
 // exact three-field plain data object. (acer hardening 2026-06-11: liris's
 // Object.keys check missed accessors, non-enumerable, and symbol own fields.)
 function snapshotTuple(raw) {
-  if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return null;
-  if (Object.getPrototypeOf(raw) !== Object.prototype) return null;
-  if (Object.getOwnPropertySymbols(raw).length !== 0) return null;
-  const names = Object.getOwnPropertyNames(raw);
-  if (names.length !== TUPLE_KEYS.length) return null;
-  for (const key of TUPLE_KEYS) {
-    const desc = Object.getOwnPropertyDescriptor(raw, key);
-    if (!desc || !Object.hasOwn(desc, 'value')) return null; // reject accessors
+  try {
+    if (!raw || typeof raw !== 'object' || Array.isArray(raw)) return null;
+    if (Object.getPrototypeOf(raw) !== Object.prototype) return null;
+    if (Object.getOwnPropertySymbols(raw).length !== 0) return null;
+    const names = Object.getOwnPropertyNames(raw);
+    if (names.length !== TUPLE_KEYS.length) return null;
+    const snap = Object.create(null);
+    for (const key of TUPLE_KEYS) {
+      const desc = Object.getOwnPropertyDescriptor(raw, key);
+      if (!desc || !Object.hasOwn(desc, 'value')) return null; // reject accessors
+      snap[key] = desc.value;
+    }
+    return Object.freeze(snap);
+  } catch {
+    return null;
   }
-  return Object.freeze({
-    depth: raw.depth,
-    reported_sha16: raw.reported_sha16,
-    recomputed_sha16: raw.recomputed_sha16,
-  });
 }
 
 // The reported chain is materialized ONCE: each index is read a single time and
@@ -83,11 +89,17 @@ function snapshotTuple(raw) {
 // the topology pass, the hash pass, and the digest. Everything downstream reads
 // only this frozen snapshot, never the caller's original object.
 function materializeChain(rawChain) {
-  if (!Array.isArray(rawChain)) return { len: 0, snaps: [] };
-  const len = rawChain.length;
-  const snaps = new Array(len);
-  for (let i = 0; i < len; i += 1) snaps[i] = snapshotTuple(rawChain[i]);
-  return { len, snaps };
+  try {
+    if (!Array.isArray(rawChain)) return { isArray: false, len: 0, snaps: [] };
+    const len = rawChain.length;
+    if (!Number.isSafeInteger(len) || len < 0) return { isArray: false, len: 0, snaps: [] };
+    const snapLen = Math.min(len, MAX_DEPTH_BOUND + 2);
+    const snaps = new Array(snapLen);
+    for (let i = 0; i < snapLen; i += 1) snaps[i] = snapshotTuple(rawChain[i]);
+    return { isArray: true, len, snaps };
+  } catch {
+    return { isArray: false, len: 0, snaps: [] };
+  }
 }
 
 // chain_sha16 is the only chain-derived value a row may carry: a digest of
@@ -99,7 +111,7 @@ function chainDigest(mat) {
   if (mat.len === 0) return 'none';
   for (const t of mat.snaps) {
     if (!t
-      || !Number.isInteger(t.depth)
+      || !isCanonicalDepth(t.depth)
       || typeof t.reported_sha16 !== 'string'
       || typeof t.recomputed_sha16 !== 'string'
       || !HASH_RE.test(t.reported_sha16)
@@ -112,7 +124,7 @@ function buildResult(inp, verdict, gates, firstBadDepth, mat) {
   const fields = {
     agent: echoField(inp.agent, (v) => AGENT_ID_RE.test(v)),
     action: echoField(inp.action, (v) => Object.hasOwn(ACTIONS, v)),
-    max_depth: Number.isInteger(inp.max_depth) && inp.max_depth >= 0 && inp.max_depth <= MAX_DEPTH_BOUND ? inp.max_depth : 'invalid',
+    max_depth: isCanonicalDepth(inp.max_depth) ? inp.max_depth : 'invalid',
     chain_len: mat.len,
     chain_sha16: chainDigest(mat),
     verdict,
@@ -153,12 +165,12 @@ export function gateChain(input) {
   if (!Object.hasOwn(ACTIONS, inp.action ?? '')) return held('unknown-action');
 
   // Rung 4: depth bound is the proven depth, never beyond.
-  if (!Number.isInteger(inp.max_depth) || inp.max_depth < 0 || inp.max_depth > MAX_DEPTH_BOUND) {
+  if (!isCanonicalDepth(inp.max_depth)) {
     return held('invalid-max-depth');
   }
 
   // Rung 5: a chain must exist.
-  if (!Array.isArray(inp.chain) || mat.len === 0) return held('empty-or-missing-chain');
+  if (!mat.isArray || mat.len === 0) return held('empty-or-missing-chain');
 
   // Rung 6: OPERATOR INVARIANT -- topology before hashes, read off the frozen
   // snapshot. The chain must be complete, contiguous, unique, and ordered:
@@ -172,7 +184,7 @@ export function gateChain(input) {
   }
   for (let i = 0; i <= inp.max_depth; i += 1) {
     const tuple = mat.snaps[i];
-    if (!tuple || tuple.depth !== i) {
+    if (!tuple || !isCanonicalDepth(tuple.depth) || tuple.depth !== i) {
       return held('chain-topology-invalid', i);
     }
     if (!HASH_RE.test(tuple.reported_sha16 ?? '') || !HASH_RE.test(tuple.recomputed_sha16 ?? '')) {
@@ -201,13 +213,13 @@ export function gateChain(input) {
 export function statusRows() {
   const rows = [
     `NNESTGATEHDR|ok=1|id=${GATE_ID}|component=4|max_depth_bound=${MAX_DEPTH_BOUND}|actions=${Object.keys(ACTIONS).length}|invariant=every-row-executable-0|state=DRAFT_CONTRACT_NO_SPAWN_NO_HARNESS_EDIT|json=0`,
-    'NNESTGATELAW|may_act_requires=hash-match-at-every-level-AND-chain-complete-contiguous-unique-ordered|hashes=necessary-but-not-sufficient|topology_violations=CHILD_HELD-chain-topology-invalid-with-first_bad_depth|source=OP-JESSE-amendment-2026-06-11|json=0',
+    'NNESTGATELAW|may_act_requires=hash-match-at-every-level-AND-chain-complete-contiguous-unique-ordered+exact-data-snapshots+canonical-depths(no-negative-zero)|hashes=necessary-but-not-sufficient|topology_violations=CHILD_HELD-chain-topology-invalid-with-first_bad_depth|source=OP-JESSE-amendment-2026-06-11|json=0',
     'NNESTGATELADDER|rungs=9|order=dirty-HELD+malformed-agent-HELD+unknown-action-HELD+invalid-max-depth-HELD+empty-chain-HELD+topology-HELD(first_bad_depth)+hash-format-HELD(first_bad_depth)+hash-divergence-HELD(first_bad_depth)+consent-DEFER+honest-free-CHILD_MAY_ACT|json=0',
   ];
   for (const [id, meta] of Object.entries(ACTIONS)) {
     rows.push(`NNESTGATEACTION|id=${id}|consent=${meta.consent}|max_verdict=${meta.consent ? 'DEFER_TO_OPERATOR' : 'CHILD_MAY_ACT'}|json=0`);
   }
-  rows.push('NNESTGATELEAK|held_rows_carry=first_bad_depth+chain_sha16-only|chain_sha16=none-for-noncanonical-or-invalid-hash-chains|level_hashes=NEVER-echoed|json=0');
+  rows.push('NNESTGATELEAK|held_rows_carry=first_bad_depth+chain_sha16-only|chain_sha16=none-for-noncanonical-or-invalid-hash-chains|level_hashes=NEVER-echoed|hostile-proxy=HELD-not-thrown|json=0');
   rows.push('NNESTGATESAFETY|mutates=0|pure_function=1|no_spawn=1|no_recursion_into_real_agents=1|no_harness_edit=1|mints=0|launches=0|usb_writes=0|engine_edits=0|json=0');
   rows.push('NNESTGATEEND|state=COMPONENT_4_SEED_DRAFT_CONTRACT|json=0');
   return rows;
@@ -251,6 +263,11 @@ const PARITY_CASES = Object.freeze([
   { id: '19', input: { ...BASE, chain: (() => { const c = goodChain(3); c[1] = Object.defineProperty({ depth: 1, recomputed_sha16: level(1) }, 'reported_sha16', { enumerable: true, get() { return level(1); } }); return c; })() } },
   { id: '20', input: { ...BASE, chain: (() => { const c = goodChain(3); Object.defineProperty(c[2], 'hidden_own_field', { value: 'smuggled', enumerable: false }); return c; })() } },
   { id: '21', input: { ...BASE, chain: (() => { const c = goodChain(3); c[0] = { ...c[0] }; c[0][Symbol.for('nnest-smuggle')] = 'payload'; return c; })() } },
+  // 22-24 (liris counter-hardening 2026-06-11): revoked proxies must become
+  // HELD rows instead of thrown exceptions, and -0 is not canonical depth 0.
+  { id: '22', input: { ...BASE, chain: (() => { const c = goodChain(3); const r = Proxy.revocable(c[1], {}); r.revoke(); c[1] = r.proxy; return c; })() } },
+  { id: '23', input: { ...BASE, max_depth: -0, chain: goodChain(0) } },
+  { id: '24', input: { ...BASE, chain: (() => { const c = goodChain(3); c[0] = { ...c[0], depth: -0 }; return c; })() } },
 ]);
 
 export function emitParityRows() {
@@ -304,6 +321,20 @@ export function selfTest() {
     const expected = sha16(JSON.stringify(c.map((t) => [t.depth, t.reported_sha16, t.recomputed_sha16])));
     return o.verdict === 'CHILD_MAY_ACT' && o.chain_sha16 === expected;
   })());
+  add('revoked-proxy-held-not-thrown', (() => {
+    const c = goodChain(3);
+    const r = Proxy.revocable(c[1], {});
+    r.revoke();
+    c[1] = r.proxy;
+    const o = gateChain({ ...BASE, chain: c });
+    return o.verdict === 'CHILD_HELD' && o.gate === 'chain-topology-invalid' && o.chain_sha16 === 'none';
+  })());
+  add('negative-zero-depth-held', (() => {
+    const c = goodChain(3);
+    c[0] = { ...c[0], depth: -0 };
+    const o = gateChain({ ...BASE, chain: c });
+    return o.verdict === 'CHILD_HELD' && o.gate === 'chain-topology-invalid' && o.chain_sha16 === 'none';
+  })());
 
   return { ok: checks.every((check) => check.ok), checks };
 }

tools/behcs/nnest-watcher-gate.mjs.sha256

@@ -1 +1 @@
-81602D6027A19941A38C910D32F8971CEDA137B6EA42FB55210FD3B8024956C7  nnest-watcher-gate.mjs
+995BD8A457D7E22865F5FAC1F2E9516C52D014F34F5AF26D2DEDF40D3EFF6008  nnest-watcher-gate.mjs