veraxis-protocol · veraxis-protocol · Sep 6, 2026 · Sep 4, 2026 · Sep 4, 2026 · Sep 4, 2026
diff --git a/AGENTS.md b/AGENTS.md
@@ -1,10 +1,13 @@
 # Agent operating boundary
 
-This repository is a non-semantic infrastructure foundation. The semantic OIC
-code-start gate remains **BLOCKED** by `STATUS.md`. No agent may implement or
-claim document interpretation, candidate extraction, institutional admission,
-Open Control Envelope generation, Rego compilation, or runtime semantic
-decisions under this work order.
+This repository contains infrastructure and the owner-admitted synthetic reference
+path under OIC-SEMANTIC-PROMOTION-001. That work order alone permits its exact 58-path
+maximum on `oic-weekly-convergence-2026-09-03`. The active capability matrix records
+the bounded surface; it cannot authorize its own extension. No later work is authorized
+by this file. After return, wait for a new deposited WO and explicit execution signal.
+The broader production semantic gate remains **BLOCKED** by `STATUS.md`. No Open Control
+Envelope generation, Rego compilation, real corpus fetch, live provider call, production
+runtime decision, rights expansion, or merge to main is authorized by this promotion.
 
 ## Safe commands
 

diff --git a/Makefile b/Makefile
@@ -1,4 +1,4 @@
-.PHONY: verify falsify
+.PHONY: verify falsify demo
 
 PYTHON ?= python
 
@@ -11,3 +11,6 @@ verify:
 
 falsify:
 	$(PYTHON) scripts/falsify_infrastructure.py
+
+demo:
+	@$(PYTHON) -B scripts/demo_bounded_semantic_path.py
@@ -1,6 +1,6 @@
 # Open Institutional Compiler
 
-- **Status:** OWNER-AUTHORIZED BOOTSTRAP - PRE-EXTERNAL-REVIEW
+- **Status:** BOUNDED_REFERENCE_IMPLEMENTATION — scoped independent Gate F repository validation passed; merge pending Gate G and owner authorization
 - **Bootstrap date:** 2026-07-29
 - **Governing design:** TDD-OIC-001 v1.1
 
@@ -17,14 +17,38 @@ Target capability:
 > evidentiary standard required to authorize, explain, audit, or correct those
 > actions.
 
-**What exists today:** a tested, non-semantic Python infrastructure package for
+**What exists today:** a Python infrastructure package for
 offline schema validation, historical bootstrap verification, current manifest
 verification, environment and gate diagnostics, and reproducible CI and SBOM
-checks. It is not a functioning institutional compiler.
-
-**What is blocked:** semantic implementation remains blocked pending the corpus
-provenance and ZTL/VEIP interface evidence listed in [`STATUS.md`](STATUS.md).
-Nothing in this README opens that gate or promotes the repository's maturity.
+checks, plus a deterministic offline synthetic reference path: grounded candidates,
+divergent review records, supplied authority-evidence admission, provisional eleven-slot
+interpretation, unresolved references, and canonical evidence receipts. It is not a
+production institutional compiler.
+
+**What is blocked:** production compilation and runtime authorization remain unestablished.
+The broader production semantic gate remains BLOCKED. The separately owner-admitted
+synthetic slice does not qualify a model provider or broaden corpus rights.
+
+Run `make demo` (or `python -B scripts/demo_bounded_semantic_path.py`) in the installed
+environment. It emits canonical JSON, makes no network request, needs no model credentials,
+and writes no repository files. Two review records remain divergent; missing/malformed
+authority evidence is refused. The eleven slots are provisional, not canonical meaning.
+Independent Gate F repository validation passed for candidate
+`c0108a7a80585d6f5732407d4904ba815073ecd2` (tree
+`1d12b17aad7977c939090909171183be166cfd50`): canonical Linux execution reported
+1714 passed, 0 failed, 0 errors, 1 declared skip, 93.5% coverage, and two
+byte-identical offline demo runs with SHA-256
+`0f9d01bb0dfc488505e027ac7bd8aecf869578e379b5a977cd9d642f2101a39a`. This establishes reproducibility, boundary integrity, the
+specified fail-closed properties, packaging, and the named adversarial checks for
+that exact candidate only. It does not establish semantic correctness, model
+accuracy, institutional validity, legal effect, provider qualification, rights
+resolution, ontology execution, production compilation, runtime authorization,
+institutional-IR closure, enterprise readiness, or benchmark superiority. It
+also does not establish legal validity or production readiness. Merge remains
+pending Gate G and owner authorization.
+See [`CAPABILITY_MATRIX.json`](docs/capabilities/CAPABILITY_MATRIX.json) for exact provenance
+and ceilings. NVIDIA is NOT_QUALIFIED; Canada redistribution is UNRESOLVED; Ontology 007R1
+is unexecuted and execution-unauthorized. No model accuracy or legal validity is claimed.
 
 ## Research paper
 
@@ -305,9 +329,9 @@ semantic OIC-Bench results.
 | Schema validation | MEASURED - 9/9 |
 | Bootstrap integrity | MEASURED - 52/52 |
 | Infrastructure falsification harness | MEASURED - 4/4 |
-| Full repository test suite | MEASURED - 1232 passed, 1 intentional skip |
+| Prior main Linux baseline | MEASURED - 1255 passed, 1 intentional skip; not candidate acceptance |
 | Manifest | MEASURED - INCOMPLETE, required exit 3 |
-| Semantic implementation gate | BLOCKED |
+| Bounded synthetic path / production semantic gate | BOUNDED_REFERENCE_IMPLEMENTATION / BLOCKED |
 | OIC-Bench preflight design | PREREGISTERED |
 | Semantic OIC-Bench preflight | NOT YET RUN |
 | Full OIC-Bench v0.1 | NOT YET RUN |
@@ -339,7 +363,7 @@ gate.
 
 ### Stage 1 - Source-to-control reference
 
-**STATUS: NEXT - BLOCKED by the semantic code-start gate**
+**STATUS: BOUNDED SYNTHETIC SUBSET IMPLEMENTED; full source-to-control path BLOCKED**
 
 Target path:
 
@@ -406,17 +430,17 @@ conformance, and community governance.
 
 ## Current phase
 
-This repository authorizes contract-first, non-semantic infrastructure work.
+OIC-SEMANTIC-PROMOTION-001 admits the bounded offline synthetic reference path only.
 It currently implements four infrastructure CLI commands:
 
 - `oic validate-schema`
 - `oic verify-bootstrap`
 - `oic verify-manifest`
 - `oic doctor`
 
-It does not implement document interpretation, candidate extraction,
-institutional admission, Institutional IR production, Open Control Envelope
-generation, Rego compilation, or runtime semantic decisions.
+The separate demo exercises candidate extraction, supplied synthetic admission evidence,
+and provisional interpretation. It does not implement Institutional IR production,
+Open Control Envelope generation, Rego compilation, or runtime semantic decisions.
 
 Run the safe non-semantic checks after the hash-locked installation described
 in [`docs/operations/CI.md`](docs/operations/CI.md):
@@ -432,7 +456,7 @@ must not be normalized into success.
 
 ## First executable objective
 
-The first semantic objective remains blocked. When its prerequisites are
+The full production source-to-control objective remains blocked. When its prerequisites are
 authorized, a bounded set of public or synthetic procurement governing sources
 is intended to flow through:
 
@@ -489,8 +513,8 @@ boundaries include:
 
 ## Public limitations
 
-The repository is a governance, contract, and non-semantic infrastructure
-foundation. It is not a functioning institutional compiler. Current scope,
+The repository is an infrastructure foundation with a bounded synthetic reference path.
+It is not a production institutional compiler. Current scope,
 provisional interfaces, corpus restrictions, human-judgment boundaries, and
 benchmark limitations are recorded in [`LIMITATIONS.md`](LIMITATIONS.md).
 
@@ -506,7 +530,7 @@ things. Passing tests or CI does not establish semantic correctness,
 institutional validity, compliance, comparative advantage, or owner acceptance.
 
 The permitted, evidence-gated, and forbidden claims are recorded in
-[`CLAIMS.md`](CLAIMS.md). Semantic implementation remains blocked by
+[`CLAIMS.md`](CLAIMS.md). The broader production semantic gate remains blocked by
 [`STATUS.md`](STATUS.md).
 
 ## Citation

@@ -2,13 +2,34 @@
 
 ## Current status
 
-**OWNER-AUTHORIZED BOOTSTRAP — PRE-EXTERNAL-REVIEW**
-
-This status authorizes repository creation, contract drafting, fixture preparation, dependency verification, benchmark preflight design, and non-semantic infrastructure scaffolding.
-
-It does not authorize public quality, enterprise-readiness, legal-compliance, universal-novelty, or superiority claims.
-
-## Exploratory code-start gate
+**BOUNDED_REFERENCE_IMPLEMENTATION — SCOPED INDEPENDENT GATE F REPOSITORY VALIDATION PASSED**
+
+OIC-SEMANTIC-PROMOTION-001 admits only the 58-path maximum recorded in
+`docs/capabilities/CAPABILITY_MATRIX.json`, from main
+`9ad37fc80d8f34318c6212ed702de5eab3551cf5`. It implements an offline synthetic
+reference path, not production compilation, runtime authorization, or canonical meaning.
+Independent Gate F repository validation passed for exact candidate
+`c0108a7a80585d6f5732407d4904ba815073ecd2`, tree
+`1d12b17aad7977c939090909171183be166cfd50`. Canonical Linux execution reported
+1714 passed, 0 failed, 0 errors, 1 declared skip, 93.5% coverage, and two
+byte-identical offline demo runs with SHA-256
+`0f9d01bb0dfc488505e027ac7bd8aecf869578e379b5a977cd9d642f2101a39a`. The result
+establishes reproducibility, boundary integrity, the specified fail-closed
+properties, packaging, and named adversarial checks for that candidate only.
+Merge remains pending Gate G and owner authorization; no merge is authorized.
+
+NVIDIA: NOT_QUALIFIED and excluded from the demo. Canada redistribution: UNRESOLVED.
+Ontology 007R1: unexecuted and execution-unauthorized. Institutional-IR closure:
+UNESTABLISHED. Production compilation and runtime authorization: UNESTABLISHED. Negative-stability
+live outcome: DEFERRED. Existing SOURCE_MANIFEST.csv remains unchanged and entry-scoped.
+
+It does not establish semantic correctness, model accuracy, institutional validity,
+legal effect, provider qualification, rights resolution, ontology execution,
+production compilation, runtime authorization, institutional-IR closure, enterprise
+readiness, or benchmark superiority. It also does not establish legal validity,
+production readiness, public quality, universal novelty, or legal compliance.
+
+## Historical bootstrap exploratory code-start gate
 
 | Gate | Status | Required evidence |
 |---|---|---|
@@ -21,6 +42,8 @@ It does not authorize public quality, enterprise-readiness, legal-compliance, un
 | Public Lab restrictions visible before upload | PASS as specification | `LIMITATIONS.md`, `docs/architecture/LAB_RESTRICTIONS.md` |
 | Named owner for each implemented module | PASS for kickoff | `OWNERS.md` |
 
-**Semantic implementation gate:** BLOCKED until the preflight corpus manifest and ZTL/VEIP provisional-interface records are completed.
+**Broader production semantic gate:** BLOCKED. Historical NOT OPEN receipts remain
+unchanged; the active capability matrix supersedes only the bounded synthetic surface.
 
-Infrastructure scaffolding and schema validation may proceed before that gate.
+The reference path does not confer real institutional authority or runtime permission.
+After this work order, another deposited authorization plus explicit execution signal is required.
diff --git a/VERSIONING.md b/VERSIONING.md
@@ -1,8 +1,10 @@
 # Versioning
 
 OIC is `0.1.0a0`: pre-release infrastructure with provisional compatibility.
-Pin an exact commit when reproducing it. No semantic compiler API or runtime
-contract exists.
+Pin an exact commit when reproducing it. Bounded candidate, admission-reference and
+provisional interpretation APIs now exist; no production compiler/runtime contract exists.
+The capability matrix records their source provenance and evidence ceilings. Frozen local
+replay is not provider qualification or independent validation.
 
 ## Provisional public surfaces