Verified-Against: 6dd2fd1b (2026-09-09).
Audience: agent · Diátaxis: reference · Kind: contract
Census of study, edges, base evaluation, vector correction, and live-FEA observation
files. Those authorities are not interchangeable. Corrections return through
AgentResource plus a successor workspace file revision.
Index: workspace source map. Domain coverage stays on engineering domains.
Sensitivity authorities: study/ (analyze.seal-sensitivity-study@1) ≠ edges/
(model.write-sensitivity-edges@1) ≠ base-evaluation/
(verify.evaluate-sensitivity-base@1, join sensitivity-base-<metric>-<digest> only) ≠
vector-correction/ (design.apply-vector-correction@1; a proof-run evaluation does
not authorize this) ≠ live-fea/ (analyze.run-fea-sensitivity@1, observations only).
compile.capture-corrected-source@1 is not registered. Not interchangeable
Inbound sensitivity ports split by authority: study seal-review ≠ base-evaluation review ≠ vector-correction review
Outbound live-fea SensitivityStaticStructuralSolver. Not the isolated CalculiX @3
proof runner
Sensitivity reviews by authority: study seal, base-evaluation join, vector-correction.
Tools stay under src/tools/project-control/
Sensitivity adapters by authority: study/, edges/, base-evaluation/,
vector-correction/, live-fea/ (WAL + CalculiX solver + wire parser). Not a flat
captures/ / executors/ dump. Not fea/seal-case or fea/isolated-v3
Sensitivity composition binds the fixed recorded CalculiX adapter and the H1-owned exact
casys-mcp-calculix@1.0.0 group input stager behind server-owned ports. The HTTP
CalculiX sensitivity binding is deliberately unqualified and non-activable until a
separate live qualification; its sealed launch group and recorded protocol do not alter
that state. Product static proof remains separate on the isolated CalculiX worker; base
evaluation and edges require SysON. Vector correction is not authorized by a proof-run
evaluation. Corrections return through AgentResource plus a successor workspace file
revision, not an admission seal.
Reviewed sensitivity case and pure finite-difference derivatives
sensitivity-study-case/3.0 with a provider-neutral method and cadSource naming a
sealed compilation admission
Operation identities and the analyze.seal-sensitivity-study@1 MRTR grammar
Pure unique-case selection and server-owned sensitivity seal identities. It contains no project ids, template paths, or filesystem authority
Application boundary for listing catalogued case ids and reopening one reviewed template by id; callers cannot select a path
Strict config/sensitivity-study-cases/catalog.json adapter: exact schema, safe
relative JSON paths, no duplicate ids/files, manifest-to-template id equality, and
canonical descendant confinement of catalog.json and every declared case file
Pure admission / lookalike classification for cadSource; compile.seal-admission@3
only
Inward sensitivity seal-compilation port: project, basis and catalog id only
Shared reopen/compile of the unique signed catalog-offer; review and seal call this, they do not copy the I/O
Reopens the catalogued template or the unique signed catalog-offer and compiles
sensitivity.case.* through encodeSensitivityStudyDecisionParameters; read-only, no
MRTR. resolved only when the append is paste-ready
MCP project_sensitivity_study_seal_review
First hop before analyze.seal-sensitivity-study@1; does not claim a dl06 case
Provider-free seal of a reviewed sensitivity-study-case/3.0 into a Thread document.
Known catalog id still opens the JSON; otherwise the unique signed offer is reopened. It
does not call CAD or CalculiX.
Server-owned exact private lookup and reuse WAL before dispatch. A miss starts the
capability session before claim/WAL/CAD, stages each exact STEP only through the owned
CalculiX group, and uses one durable request id per phase. Each request is recovered by
calculix_run_get, then proves the ordered nine-resource bundle before CAS capture. It
independently rehashes request.json, requires its ledger digest to equal
requestSha256, reconstructs the server-lowered material/mesh/selection/load/default
tuple, and records the observed execution-identity fingerprint. Observations only, never
a verdict or provider qualification.
Closed project-neutral record, separate private origin, invalidation, review, receipt, exact key compiler, admission, and validators; no caller-selected identity
Closed fresh-or-reused scientific result union; reuse result carries no CAD evidence or readable source origin
Target compilation, exact selection, source/current-tip/runtime revalidation, divergent-result rejection, target-basis review/receipt, and fresh-result admission
Confined installation-private CAS plus append-only admissions/invalidations and reconstructible deterministic index
Server-rendered renderSensitivityEdgeSetSysml insert into SysON; exact typed MRTR is
rechecked against the bound fresh study before any write
Provider-free current-head compiler for the exact studyCapture binding and paste-ready
append/propose route; accepts no SysML or numerical values. Both consumer reviews can
resume with a proposal-only route after recrossing an already-recorded exact append,
pending untouched decision, audit change and absence of a run
Shared closed MRTR identity for base evaluation and edge writing: exact operation, project, Thread basis, capture fingerprint, trusted run, target and metric ids
Pure first-order inversion; domain_exceeded if z_current is outside the living
neighborhood
Closed MRTR grammar for design.apply-vector-correction@1
Provider-free review: identities only, no Thread write
Documentary correction-proposal-capture/1.0 with grants: none
Provider-free seal of one bounded correction document; not a CAD or SysON write
Exact join of study-base observations to Thread requirements; any gap is UNLINKED for
the whole set
src/application/use-cases/sensitivity/base-evaluation/prepare-project-sensitivity-base-evaluation-review.ts
Provider-free join check plus current-head paste-ready append/propose compiler; writes no Thread state and invents no metric mapping
SysON evaluation of sensitivity-base-<metric>-<digest> only; not a proof-run remap
Builds observed measured-local-sensitivity assertions from exact finite-difference
evidence; first producer of the canonical analysis graph, never a verdict or authority
grant
Capability-first StaticStructuralSolver port for a sealed proof and exact input
identity; returns normalized supports, loads, mesh counts and observations without
paths, provider echoes or CalculiX response vocabulary
Pure false-by-default catalog-offer compiler: requires one exact causal admission lever,
source equality with the proof CAD definition and result equality with the proof
target; copies sealed provider-neutral method facts, uses live metric units and leaves
step explicitly not compiled
Fail-closed parser for the sealed sensitivity-catalog-offer-capture/1.0 envelope
published by verify.seal-proof-case@1
Compiles a sensitivity-study-case-template/3.0 from a ready signed offer: copies
mesh/loads/metrics and sets step to the sealed proof mesh target size
The former root-Compose synchronous CalculiX parser and smoke gates were retired. The
successor's required calculix-exports:/exports mount is private and retained; it is
never proof/evidence or a CAD exchange. Recorded sensitivity owns the fixed
calculix_solve_static_recorded + readback protocol in
mcp-calculix-sensitivity-solver.ts; it is never a result verdict.