acer: attack-verify liris catalog — add :4949-flap route + harness-classifier gate (acer-local truths)

docs/ACER-ATTACK-VERIFY-CATALOG-2026-06-12.hbp

@@ -0,0 +1,8 @@
+CATVHDR|host=acer|date=2026-06-12|target=25e6e2b-tools-behcs-fabric-agent-preload-catalog|method=attack-implementation-AND-compare-to-acer-local-then-patch-the-acer-unique-truths|json=0
+CATVACCEPT|finding=the-catalog-implements-all-7-operator-enrichments-PID-emitter-plus-16-level-index-with-up-and-down-translate-plus-sister-folder-reflection-plus-hookwall-and-gnn-pipe-plus-folder-microkernel-plus-rotator-file-manager-host-node-plus-division-laws|verdict=ACCEPT-the-structure-it-is-the-package-that-makes-the-8byte-seed-actionable|tag=PROVEN+structure-accepted|json=0
+CATVCATCH1-4949-ABSENT|severity=MAJOR|finding=the-route-table-omitted-the-4949-super-os-and-mcp-proxy-base-and-mislabeled-the-two-mcp-routes-supervisors-hbp-and-bus-health-mcp-as-READ_READY-though-they-proxy-through-4949|acer_local=4949-is-in-a-watchdog-respawn-flap-so-those-mcp-routes-fetch-fail-as-they-did-all-session|fix=acer-added-a-super-os-4949-route-verdict-RESPAWN_FLAP_DO_NOT_TRUST-and-noted-the-mcp-routes-proxy-through-it|tag=PROVEN+BUG-acer-patched|json=0
+CATVCATCH2-HARNESS-GATE|severity=MAJOR|finding=FABPRELOADGATE-listed-live_control-DEFER_TO_OPERATOR-but-omitted-the-harness-classifier-gate|acer_local=physical-machine-control-adb-tap-and-keystroke-is-blocked-by-the-runtime-harness-classifier-an-orthogonal-gate-NOT-liftable-by-operator-authorization-the-supervised-keyboard-route-is-required-and-acer-lacks-it|consequence=an-agent-loading-the-catalog-would-think-operator-cosign-is-enough-and-try-to-drive-a-machine-the-harness-blocks|fix=acer-added-the-physical_control-HARNESS-CLASSIFIER-BLOCKED-clause-to-the-gate-row|tag=PROVEN+BUG-acer-patched|json=0
+CATVCATCH3-GROUNDING|severity=MEDIUM-follow-up|finding=the-emitter-and-host-node-and-sister-reflection-and-level-rows-describe-architecture-not-verified-running-code|recommend=carry-an-explicit-PROPOSAL-or-design-tag-on-the-FABPRELOADEMITTER-and-FABPRELOADHOSTNODE-and-FABPRELOADLEVEL-rows-so-agents-do-not-assume-a-live-emitter-or-rotator-supervisor-exists|owner=liris|tag=PARTIAL+tag-honesty-follow-up|json=0
+CATVCATCH4-VISIBILITY|severity=MINOR-follow-up|finding=the-16-level-visibility-bands-4-bands-over-16-levels-are-a-clean-design-but-ungrounded-against-the-actual-office-tier-semantics-same-class-as-the-earlier-16-level-ladder-catch|recommend=mark-the-visibility-mapping-as-a-design-mapping-pending-office-verification|owner=liris|tag=PARTIAL+follow-up|json=0
+CATVDIVISION|acer-applied-catch1-and-catch2-directly-because-they-are-acer-unique-truths-per-the-vantage-asymmetry-law-the-relevant-vantage-contributes-its-truth|catch3-and-catch4-left-for-liris-tag-honesty|byte_verify=liris-pulls-and-byte-verifies-acers-route-and-gate-additions|tag=PROVEN+bilateral-division|json=0
+CATVFTR|state=CATALOG-HARDENED-WITH-ACER-LOCAL-ROUTE-AND-GATE-TRUTH-before-any-agent-loads-it|nothing_minted=1|nothing_launched=1|json=0

docs/ACER-ATTACK-VERIFY-CATALOG-2026-06-12.hbp.sha256

@@ -0,0 +1 @@
+1ff3f03c604c7f26bf1e89c50bedb21ae14a5df7b3e1fd269938e33a7b8dfc7a  ACER-ATTACK-VERIFY-CATALOG-2026-06-12.hbp

tests/supervisor-collision-router.system.test.mjs

@@ -54,6 +54,7 @@ const sealedFiles = [
   'docs/ACER-PIXELROOM-PID-RECONCILE-PATCH-2026-06-12.hbp',
   'docs/ACER-ROUND-CLOSE-CONVERGENCE-ATTACK-VERIFY-2026-06-12.hbp',
   'docs/ACER-FABRIC-PRELOAD-CATALOG-CASCADE-RECEIPT-2026-06-12.hbp',
+  'docs/ACER-ATTACK-VERIFY-CATALOG-2026-06-12.hbp',
   'docs/acer-ecosystem-fullbody-receipt-20260612.hbp',
   'docs/CLAIMSLEDGER-2026-06-12.hbp',
   'docs/CLAIMSGATE-PARITY-BASELINE-2026-06-12.hbp',

tests/supervisor-collision-router.system.test.mjs.sha256

@@ -1 +1 @@
-8A00E7B8534E3517549BFE50CF904CB5DB62483D33DD24E8E69518B2792EBA74  supervisor-collision-router.system.test.mjs
+d481a815edc24d8c6e974ad5cf16c51a52218202f447350b8e96aa1a3350609e  supervisor-collision-router.system.test.mjs

tools/behcs/fabric-agent-preload-catalog.hbp

@@ -1,11 +1,12 @@
-FABPRELOADHDR|tool=fabric-agent-preload-catalog.v1|purpose=preload-agents-with-laws-routes-tools-gates-and-workflow-before-fabric-use|laws=7|routes=5|tools=4|emitters=3|levels=16|roles=4|json=0
+FABPRELOADHDR|tool=fabric-agent-preload-catalog.v1|purpose=preload-agents-with-laws-routes-tools-gates-and-workflow-before-fabric-use|laws=7|routes=6|tools=4|emitters=3|levels=16|roles=4|json=0
 FABPRELOADLAW|laws=three-systems-LOGICAL-WAVE-FROZEN-BRAIN-REAL-FREE+law-of-three-mod3-lanes+yin-yang-mod2-real-logical+prime-parity-and-prime-mod3-are-load-bearing+quants-are-address-and-evidence-classes-not-raw-material+all-agent-artifact-system-addresses-get-PID-or-handle+live-control-and-mint-and-launch-defer-to-operator|json=0
 FABPRELOADWORKFLOW|cadence=memory-index-plan-memory-index-respond-execute-memory-index|operator_rule=respond-before-live-control-and-log-after-execute|json=0
 FABPRELOADROUTE|id=bus-health|method=GET|endpoint=http://127.0.0.1:4947/behcs/health|payload=none|verdict=READ_READY|use=preflight-local-bus|json=0
 FABPRELOADROUTE|id=send-hbp|method=POST|endpoint=http://127.0.0.1:4947/behcs/send-hbp|payload=single-HBP-pipe-row-ending-json0|verdict=HBP_ROW_READY|use=hot-path-single-row|json=0
 FABPRELOADROUTE|id=send-json|method=POST|endpoint=http://127.0.0.1:4947/behcs/send|payload=JSON-envelope-may-carry-exact-operator-packet-lines|verdict=ENVELOPE_READY|use=packet-burst-and-legacy-envelope|json=0
 FABPRELOADROUTE|id=supervisors-hbp|method=GET|endpoint=mcp-asolaria-fabric-supervisors-hbp|payload=HBP-feed|verdict=READ_READY|use=roster-and-tier-preload|json=0
-FABPRELOADROUTE|id=bus-health-mcp|method=GET|endpoint=mcp-asolaria-fabric-bus-health|payload=HBP-tuple-feed|verdict=READ_READY|use=cross-vantage-bus-status|json=0
+FABPRELOADROUTE|id=bus-health-mcp|method=GET|endpoint=mcp-asolaria-fabric-bus-health|payload=HBP-tuple-feed|verdict=READ_READY|use=cross-vantage-bus-status-NOTE-proxies-through-4949-may-fetch-fail|json=0
+FABPRELOADROUTE|id=super-os-4949|method=GET|endpoint=http://127.0.0.1:4949|payload=none|verdict=RESPAWN_FLAP_DO_NOT_TRUST|use=acer-local-super-os-and-mcp-proxy-base-in-watchdog-respawn-flap-the-mcp-routes-proxy-through-this-and-may-fetch-fail|json=0
 FABPRELOADTOOL|id=pixel-room-handle|path=tools/behcs/pixel-room-handle.mjs|provides=8-byte-room-handle+identity16+PIXFOLDERHOST|gate=process_launch-0-live_control-gated|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=github-pid-register|path=tools/behcs/github-pid-register.mjs|provides=open-runtime-PID-register+0x1F-tuple-identity|gate=github-PID-proposed-until-live-reconciled|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=github-live-pid-reconcile|path=tools/behcs/github-live-pid-reconcile.mjs|provides=github-vs-live-office-snapshot-status|gate=unknown-PENDING-OFFICE-SNAPSHOT|tag=PROVEN+tool-level|json=0
@@ -36,5 +37,5 @@ FABPRELOADROLE|id=scout|must_do=read-laws+probe-health+load-roster+emit-no-launc
 FABPRELOADROLE|id=spindle|must_do=work-one-section+emit-HBP-rows+attach-room-handle|forbidden=raw-pixels+DOM-authority+unbounded-context|json=0
 FABPRELOADROLE|id=flywheel|must_do=attack-spindle-output+compare-to-acer-local-truth+name-catches|forbidden=rubber-stamp+delete-mistakes|json=0
 FABPRELOADROLE|id=dispatcher|must_do=route-by-catalog+respect-operator-gates+log-acks|forbidden=wrong-route-packet-to-send-hbp+daemon-restart-without-gate|json=0
-FABPRELOADGATE|live_control=DEFER_TO_OPERATOR|process_launch=0|mint=OPERATOR_COSIGN|raw_pixels=0|dom_authority=0|unknown_office_pid=PENDING-OFFICE-SNAPSHOT|json=0
+FABPRELOADGATE|live_control=DEFER_TO_OPERATOR|process_launch=0|mint=OPERATOR_COSIGN|raw_pixels=0|dom_authority=0|unknown_office_pid=PENDING-OFFICE-SNAPSHOT|physical_control=HARNESS-CLASSIFIER-BLOCKED-orthogonal-runtime-gate-NOT-liftable-by-operator-authorization-supervised-keyboard-route-required|json=0
 FABPRELOADFTR|state=SEALED-PRELOAD-CATALOG|next=agents-load-this-before-fabric-work|nothing_minted=1|nothing_launched=1|json=0

tools/behcs/fabric-agent-preload-catalog.hbp.sha256

@@ -1 +1 @@
-C8232AB82019F4B5C7DAFF3338F2136EF1D3298C3B2D31AC3280BC31794AF610  fabric-agent-preload-catalog.hbp
+dda63aabcc92c34945de3fcde6288789b881d572b41aacd0c189086a3b2144c6  fabric-agent-preload-catalog.hbp

tools/behcs/fabric-agent-preload-catalog.mjs

@@ -52,7 +52,17 @@ export const ROUTES = Object.freeze([
     method: 'GET',
     payload: 'HBP-tuple-feed',
     verdict: 'READ_READY',
-    use: 'cross-vantage-bus-status',
+    use: 'cross-vantage-bus-status-NOTE-proxies-through-4949-may-fetch-fail',
+  }),
+  // acer-local attack-verify of the liris catalog: the :4949 super-os / MCP proxy base is in a
+  // watchdog respawn-flap. The two MCP routes above proxy through it and fetch-fail when it flaps.
+  Object.freeze({
+    id: 'super-os-4949',
+    endpoint: 'http://127.0.0.1:4949',
+    method: 'GET',
+    payload: 'none',
+    verdict: 'RESPAWN_FLAP_DO_NOT_TRUST',
+    use: 'acer-local-super-os-and-mcp-proxy-base-in-watchdog-respawn-flap-the-mcp-routes-proxy-through-this-and-may-fetch-fail',
   }),
 ]);
 
@@ -229,7 +239,7 @@ export function emitPreloadRows() {
   for (const role of ROLES) {
     rows.push(`FABPRELOADROLE|id=${role.id}|must_do=${role.must_do}|forbidden=${role.forbidden}|json=0`);
   }
-  rows.push('FABPRELOADGATE|live_control=DEFER_TO_OPERATOR|process_launch=0|mint=OPERATOR_COSIGN|raw_pixels=0|dom_authority=0|unknown_office_pid=PENDING-OFFICE-SNAPSHOT|json=0');
+  rows.push('FABPRELOADGATE|live_control=DEFER_TO_OPERATOR|process_launch=0|mint=OPERATOR_COSIGN|raw_pixels=0|dom_authority=0|unknown_office_pid=PENDING-OFFICE-SNAPSHOT|physical_control=HARNESS-CLASSIFIER-BLOCKED-orthogonal-runtime-gate-NOT-liftable-by-operator-authorization-supervised-keyboard-route-required|json=0');
   rows.push('FABPRELOADFTR|state=SEALED-PRELOAD-CATALOG|next=agents-load-this-before-fabric-work|nothing_minted=1|nothing_launched=1|json=0');
   return rows;
 }
@@ -243,6 +253,8 @@ export function selfTest() {
   add('tools-include-room-and-pid', !!toolById('pixel-room-handle') && !!toolById('github-live-pid-reconcile'));
   add('emitters-pipe-hookwall-gnn', EMITTERS.some((e) => e.id === 'hookwall') && EMITTERS.some((e) => e.id === 'gnn-edge'));
   add('levels-cover-16', LEVEL_INDEX.length === 16 && LEVEL_INDEX[0].tier === 'A00' && LEVEL_INDEX[15].translate_down === 'physical-cap');
+  add('acer-local-4949-flap-route', routeById('super-os-4949').verdict === 'RESPAWN_FLAP_DO_NOT_TRUST');
+  add('harness-gate-row-present', emitPreloadRows().some((row) => row.includes('physical_control=HARNESS-CLASSIFIER-BLOCKED')));
   add('host-nodes-are-row-only', HOST_NODES.every((h) => h.process_launch === 0 && h.label));
   add('roles-grounded', ROLES.every((r) => r.must_do && r.forbidden));
   add('rows-hbp-only', emitPreloadRows().every((row) => row.endsWith('|json=0') && !row.includes('\n')));

tools/behcs/fabric-agent-preload-catalog.mjs.sha256

@@ -1 +1 @@
-B0DD16130DF9C4D1E876DDFDA020918E20CF62E0645B0D596C380F0E8A983987  fabric-agent-preload-catalog.mjs
+2bee31e45d36eb9b6094088424066e74bb433578546480168f3a4f358d3b4840  fabric-agent-preload-catalog.mjs