test(claw): mutation sweeps of ledger_union and seven specs, plus move_gate.t27

.trinity/seals/claw_ClawLedgerUnion.json

@@ -7,23 +7,23 @@
     }
   ],
   "config": "gen=c,rust,verilog,zig;tests=zig",
-  "gen_hash_c": "sha256:f5f2bdf2bfdd9ef25d0ba280851b3504149efd01b36191943b9ec731eddfec99",
-  "gen_hash_rust": "sha256:0c4d2ff8d06ea85b4c205e68dedc8081b1c3768ce0fdcfad6d948cd72b952254",
-  "gen_hash_verilog": "sha256:7beda094f46814f7db05772cd52e22de60e4ba6f845b94b01a8d761b3596ffab",
-  "gen_hash_zig": "sha256:86d1598c1805d89624d659204e8a37c5409e3b1e2745ad9c32947b97a5bcda11",
+  "gen_hash_c": "sha256:6e4d4e7407cdeecf34c806c9d05c1f6e8479407cf18fdb585a23aa30a4042ca4",
+  "gen_hash_rust": "sha256:99e922aa7fb4f02998b67236fb27238bc5927b2edf8a3afb83b636ba2a4dda4d",
+  "gen_hash_verilog": "sha256:6986ba1f836a966d913f14eba98349a316b4e30777e8acd9574ed6395ec242f7",
+  "gen_hash_zig": "sha256:93f4349b59f44e9690da2253337c4f3e3d73702fd063c7af57959fb1d5de36d3",
   "module": "ClawLedgerUnion",
   "ring": 12,
   "seal_schema": 2,
-  "sealed_at": "2026-10-19T00:13:54Z",
+  "sealed_at": "2026-10-19T02:30:28Z",
   "sealed_by": "t27c-bootstrap@0.5.2",
-  "spec_hash": "sha256:38a31c67e68321f02ef60d23f2e563f51e528921112a22dc6cfe9c5d1ccead69",
+  "spec_hash": "sha256:2b782d0001cc5d38c834673891cc303785677dbbac028b1e24e34e68ee1a35e3",
   "spec_path": "specs/claw/ledger_union.t27",
   "tests": {
     "failed": 0,
     "failing": [],
     "forced": false,
-    "passed": 25,
-    "total": 25,
+    "passed": 27,
+    "total": 27,
     "vacuous": 0
   },
   "toolchain": {

.trinity/seals/claw_ClawMoveGate.json

@@ -0,0 +1,33 @@
+{
+  "built_by": "t27c-bootstrap@0.5.2+9448ab4be",
+  "closure": [
+    {
+      "spec": "specs/claw/text.t27",
+      "spec_hash": "sha256:968755ec1917f766eb2cdd0ab4c0c48aef028a0e7d69e191911695e925b286ad"
+    }
+  ],
+  "config": "gen=c,rust,verilog,zig;tests=zig",
+  "gen_hash_c": "sha256:cb40a79b66fe668a64d2a2c12c2517435f3c1197b8a65c13e0ba5db5d2732648",
+  "gen_hash_rust": "sha256:27f70c20627453be0d36ac43f5159fc14fee0c0a74c25faaae9f2726ab5b0e45",
+  "gen_hash_verilog": "sha256:fd7b0e8658131c8bf55763d40a1a19ed65e9b28d280ff5075202a18a89b302e6",
+  "gen_hash_zig": "sha256:6ecca30250f05ea00e7dc5df0dbc994b8e9d98550fd3a77fcf25b987d1144505",
+  "module": "ClawMoveGate",
+  "ring": 12,
+  "seal_schema": 2,
+  "sealed_at": "2026-10-19T03:12:51Z",
+  "sealed_by": "t27c-bootstrap@0.5.2",
+  "spec_hash": "sha256:6fe7791e9d0a834195514dcf4ab926ed609503213e0c316e80cbcf7e14d1bd1c",
+  "spec_path": "specs/claw/move_gate.t27",
+  "tests": {
+    "failed": 0,
+    "failing": [],
+    "forced": false,
+    "passed": 17,
+    "total": 17,
+    "vacuous": 0
+  },
+  "toolchain": {
+    "test_runner": "sha256:8512b80da533b79289110fca4a65f3336abd7a059ca4b72ea595d5e33ff8ad10",
+    "zig": "0.16.0"
+  }
+}

.trinity/seals/claw_ClawReelStill.json

@@ -1,9 +1,9 @@
 {
-  "built_by": "t27c-bootstrap@0.5.2+5e4d3b998",
+  "built_by": "t27c-bootstrap@0.5.2+9448ab4be",
   "closure": [
     {
       "spec": "specs/claw/visual_output.t27",
-      "spec_hash": "sha256:17137afe136e39910f38d7b031c659a672e009bfeef1bf4f9b7af7e2cb6cc628"
+      "spec_hash": "sha256:3ef926be1f8a2aa1e00ca66265cdc78b6f8d3418460cbc252bb7319827c5b634"
     },
     {
       "spec": "specs/t27f/frame_shard.t27",
@@ -23,27 +23,27 @@
     }
   ],
   "config": "gen=c,rust,verilog,zig;tests=zig",
-  "gen_hash_c": "sha256:d32a87a4218806616b04b727d7e3f1bc76d6d33440f304f7beb42b566bb50437",
-  "gen_hash_rust": "sha256:5a1adebb39cdeb948aae1da51a64f43b93b1cd845f715389c30cf6785b701c30",
-  "gen_hash_verilog": "sha256:62df937cda4af6426ae5e1170bafa4cf124f5d952dea6b87ccf19e451968dc9f",
-  "gen_hash_zig": "sha256:b4e20621dcef2e6517948018e7f6aeb788da068df27beb9b6c2a485af15b492e",
+  "gen_hash_c": "sha256:51697502da51ccf2bb293226da8e748eef3e173bfd43c691cca61178fb578746",
+  "gen_hash_rust": "sha256:fac7c009707b7e567b2e083d5a501af6755c9f3283dfde21536ff5c3b23f8b69",
+  "gen_hash_verilog": "sha256:d941117df0e0e9c8edd763f66e1b20659e10a2cdd8cb3b1bc7c1c6b6862311e0",
+  "gen_hash_zig": "sha256:253da955678ba32a238d17402ffeecfecc6ec87ed7b7bd181a7469f7e6af3b97",
   "module": "ClawReelStill",
   "ring": 12,
   "seal_schema": 2,
-  "sealed_at": "2026-10-18T17:06:53Z",
+  "sealed_at": "2026-10-19T02:42:47Z",
   "sealed_by": "t27c-bootstrap@0.5.2",
-  "spec_hash": "sha256:4fc5fc3c835193faae7b312194e4f31bc6baa8b7da3f08b12b809cb4e5e293e5",
+  "spec_hash": "sha256:13b018d77d82c4af644eaf00334e89fa91f8b19a7fc0719fbfdfd2801090a65b",
   "spec_path": "specs/claw/reel_still.t27",
   "tests": {
     "failed": 0,
     "failing": [],
     "forced": false,
-    "passed": 15,
-    "total": 15,
+    "passed": 17,
+    "total": 17,
     "vacuous": 0
   },
   "toolchain": {
-    "test_runner": "sha256:1982ae948e24d00c5d221ccec12dfce1eb01204b53e37b0f857f93b16d64629d",
+    "test_runner": "sha256:8512b80da533b79289110fca4a65f3336abd7a059ca4b72ea595d5e33ff8ad10",
     "zig": "0.16.0"
   }
 }

.trinity/seals/claw_ClawT27fGatePins.json

@@ -11,23 +11,23 @@
     }
   ],
   "config": "gen=c,rust,verilog,zig;tests=zig",
-  "gen_hash_c": "sha256:e35b884c19d8d6c37ed63beac053d40a5e86f9c73fa2941ff6cd0039c81bda84",
-  "gen_hash_rust": "sha256:4dc02033cea4ae56d81cca417e99faf450bfd97ffcbd7fed702b56b30119ce25",
-  "gen_hash_verilog": "sha256:a5a99dff99da4b4ebd3c15c210a92a3cb487039215158b2bb3c89a83eab168df",
-  "gen_hash_zig": "sha256:e39bb7edf0cb96766984159a1d7c9f3b79f432094cd7c74cd6a9b660a3195efb",
+  "gen_hash_c": "sha256:3444dc60e17562308a148efa48edbb08a64e39772ac7dcca53df2baaddfc1ef0",
+  "gen_hash_rust": "sha256:192a449bd415c91098e71355fd74b69fc95019bebbaea06f68b178e86f48fabf",
+  "gen_hash_verilog": "sha256:7ff62489f3e9c6bf55e9f0fdcf8c0e7f0da8967e25ae52cd9655c04117336769",
+  "gen_hash_zig": "sha256:ef5c3ac7378603f9afc1fa1352349bc6fb9965ce1ee8dbe0095da81f50a84398",
   "module": "ClawT27fGatePins",
   "ring": 12,
   "seal_schema": 2,
-  "sealed_at": "2026-10-19T01:03:00Z",
+  "sealed_at": "2026-10-19T02:42:50Z",
   "sealed_by": "t27c-bootstrap@0.5.2",
-  "spec_hash": "sha256:1a4fc11a3ee61e990b6226621b4379fe34a727f0d1c830004bfddb5640836666",
+  "spec_hash": "sha256:b623f7c2fb338e388d43730e156cf4d652230321305990494556c057cc70442b",
   "spec_path": "specs/claw/t27f_gate_pins.t27",
   "tests": {
     "failed": 0,
     "failing": [],
     "forced": false,
-    "passed": 4,
-    "total": 4,
+    "passed": 5,
+    "total": 5,
     "vacuous": 0
   },
   "toolchain": {

.trinity/seals/claw_ClawVisualOutput.json

@@ -7,31 +7,31 @@
     },
     {
       "spec": "specs/t27mcp/visual_output.t27",
-      "spec_hash": "sha256:06c1c5e73142e2f79fa5d7be037eace63c1f20597a6e33274ebf8e1b428b7584"
+      "spec_hash": "sha256:2c44da44a1f662108a7b3558e763ff86e89db4bc9f49fe749dd7617051343960"
     }
   ],
   "config": "gen=c,rust,verilog,zig;tests=zig",
-  "gen_hash_c": "sha256:195d1b6aa754842316d3c8becc34ce6a0a90e5f7d4ddaebd490823103ed06c33",
-  "gen_hash_rust": "sha256:93ecd121c7efadf95e4ca54e1e750fb5c7a8159284cebe1cbb61d7065d1b7875",
-  "gen_hash_verilog": "sha256:794e86d5753efad530cd7732b2638ad3c3a5c4e6d8c9a851bd686663aa097282",
-  "gen_hash_zig": "sha256:d6204f6e99bc281a0163177b92ee4abf096ea32cb23cb3b817913d16c8d072b1",
+  "gen_hash_c": "sha256:0047efb32fc909b0eb6c3436a03157799b149869004e6511fc6a170287a685a0",
+  "gen_hash_rust": "sha256:f0c069590af49c8c2d2d281016bbe0a486000907a87b88e67062c2a6e97c270a",
+  "gen_hash_verilog": "sha256:0147f34a1b6ab52cac77fdab5f904031798315e084059317656eb0b7bb3497a4",
+  "gen_hash_zig": "sha256:596073936f65114907ad7dea76a3a3205855b154940c8a3564092f5c8d6cd9fb",
   "module": "ClawVisualOutput",
   "ring": 12,
   "seal_schema": 2,
-  "sealed_at": "2026-10-18T16:42:30Z",
+  "sealed_at": "2026-10-19T02:42:50Z",
   "sealed_by": "t27c-bootstrap@0.5.2",
-  "spec_hash": "sha256:17137afe136e39910f38d7b031c659a672e009bfeef1bf4f9b7af7e2cb6cc628",
+  "spec_hash": "sha256:3ef926be1f8a2aa1e00ca66265cdc78b6f8d3418460cbc252bb7319827c5b634",
   "spec_path": "specs/claw/visual_output.t27",
   "tests": {
     "failed": 0,
     "failing": [],
     "forced": false,
-    "passed": 6,
-    "total": 6,
+    "passed": 7,
+    "total": 7,
     "vacuous": 0
   },
   "toolchain": {
-    "test_runner": "sha256:1982ae948e24d00c5d221ccec12dfce1eb01204b53e37b0f857f93b16d64629d",
+    "test_runner": "sha256:8512b80da533b79289110fca4a65f3336abd7a059ca4b72ea595d5e33ff8ad10",
     "zig": "0.16.0"
   }
 }

docs/claw/README.md

@@ -1,3 +1,4 @@
+| Move gate: whether a Railway service can move to another project, checked before anything is created there (private hosts, doubled outbound loops, state volumes, a target with no plan) | `specs/claw/move_gate.t27` (move kind and five readings in, one `V` line out: go or hold; not wired to a job yet) | #10794 |
 # TRI CLAW
 
 TRI CLAW — TRI-27 — Trinity S3AI: every CI gate of this repository, packaged

docs/reports/t27b_expectations.json

@@ -200,6 +200,7 @@
   {"path": "specs/claw/ledger_union.t27", "t27b": "pass"},
   {"path": "specs/claw/merge_lane.t27", "t27b": "pass"},
   {"path": "specs/claw/model_route.t27", "t27b": "pass"},
+  {"path": "specs/claw/move_gate.t27", "t27b": "pass"},
   {"path": "specs/claw/preview.t27", "t27b": "pass"},
   {"path": "specs/claw/push_gate.t27", "t27b": "pass"},
   {"path": "specs/claw/queue_cost.t27", "t27b": "pass"},

gen/c/claw/ledger_union.c

@@ -1149,6 +1149,36 @@ void test_the_reason_tables_match_their_lengths(void) {
     assert((buf_has(&r, s, "same pull request", 17) == true));
 }
 
+void test_a_path_with_no_closing_quote_at_the_end_of_a_full_buffer_is_refused_without_reading_past_it(void) {
+    uint8_t x[30] = {0};
+    size_t n = put_str(&x, 30, 0, FIX_HEAD, FIX_HEAD_LEN);
+    n = put_str(&x, 30, n, ENTRY_HEAD, ENTRY_HEAD_LEN);
+    n = put_str(&x, 30, n, "aa", 2);
+    assert((n == 30));
+    size_t fr[2] = {0};
+    assert((lu_frame(&x, 30, &fr) == U_SHAPE));
+    uint8_t out[128] = {0};
+    uint32_t st[4] = {0};
+    size_t m = ledger_union(&x, 30, &x, 30, &x, 30, &out, 128, &st);
+    assert((st[0] == U_SHAPE));
+    assert((st[3] == 0));
+    assert((m == 52));
+}
+
+void test_a_lone_tag_byte_at_the_end_of_a_full_record_buffer_is_not_read_past(void) {
+    uint8_t x[25] = {0};
+    size_t n = put_str(&x, 25, 0, "F\t.trinity/seals/a.json\n", 24);
+    n = put_str(&x, 25, n, "S", 1);
+    assert((n == 25));
+    assert((lu_find(&x, 25, 'S', 2, 23) == 25));
+    uint8_t out[128] = {0};
+    uint32_t st[2] = {0};
+    size_t m = pr_scope(&x, 25, &out, 128, &st);
+    assert((st[0] == SC_SEAL));
+    assert((st[1] == 1));
+    assert((m == 100));
+}
+
 
 /* -------------------------------------------------------
    Test runner (compile with -DT27_TEST_MAIN to execute)
@@ -1182,7 +1212,9 @@ int main(void) {
     test_an_empty_or_unreadable_file_list_is_refused();
     test_the_scope_rule_reads_each_record_exactly();
     test_the_reason_tables_match_their_lengths();
-    printf("All %d tests passed.\n", 25);
+    test_a_path_with_no_closing_quote_at_the_end_of_a_full_buffer_is_refused_without_reading_past_it();
+    test_a_lone_tag_byte_at_the_end_of_a_full_record_buffer_is_not_read_past();
+    printf("All %d tests passed.\n", 27);
     return 0;
 }
 #endif /* T27_TEST_MAIN */

specs/claw/ledger_union.t27

@@ -1107,3 +1107,40 @@ test the_reason_tables_match_their_lengths {
     const s : usize = put_str(&r, 128, 0, SCOPE_REASONS[2], SCOPE_REASON_LENS[2]);
     assert buf_has(&r, s, "same pull request", 17) == true;
 }
+
+// Written against the mutation sweep of this file: two readers stopped at their range end only
+// because no test gave them a text that fills its buffer to the last byte.
+
+// `while (i < e)` to `<=` in lu_key_end read x[e] when a path had no closing quote. On the last
+// line of a side that fills its buffer, x[e] is past the buffer.
+test a_path_with_no_closing_quote_at_the_end_of_a_full_buffer_is_refused_without_reading_past_it {
+    var x : [30]u8 = undefined;
+    var n : usize = put_str(&x, 30, 0, FIX_HEAD, FIX_HEAD_LEN);
+    n = put_str(&x, 30, n, ENTRY_HEAD, ENTRY_HEAD_LEN);
+    n = put_str(&x, 30, n, "aa", 2);
+    assert n == 30;
+    var fr : [2]usize = undefined;
+    assert lu_frame(&x, 30, &fr) == U_SHAPE;
+    var out : [128]u8 = undefined;
+    var st : [4]u32 = undefined;
+    const m : usize = ledger_union(&x, 30, &x, 30, &x, 30, &out, 128, &st);
+    assert st[0] == U_SHAPE;
+    assert st[3] == 0;
+    assert m == 52;
+}
+
+// `e > s + 1` to `>=` in lu_find read the byte after a one-byte last line, which is past the
+// record text when that text fills its buffer.
+test a_lone_tag_byte_at_the_end_of_a_full_record_buffer_is_not_read_past {
+    var x : [25]u8 = undefined;
+    var n : usize = put_str(&x, 25, 0, "F\t.trinity/seals/a.json\n", 24);
+    n = put_str(&x, 25, n, "S", 1);
+    assert n == 25;
+    assert lu_find(&x, 25, 'S', 2, 23) == 25;
+    var out : [128]u8 = undefined;
+    var st : [2]u32 = undefined;
+    const m : usize = pr_scope(&x, 25, &out, 128, &st);
+    assert st[0] == SC_SEAL;
+    assert st[1] == 1;
+    assert m == 100;
+}