PLAN → DESIGNtask #16 leg [C]infrastructuredefault-OFFCONFIDENTIAL · PATENT PENDING
Field-route [C] + the kill-cosine ablation
FORGE_FIELD_ROUTE_ABLATION_v1 · revive-frontier · base 277a4ed644 · verifier revive-overwatch · composes the LANDED QToAddress [A] + intuition field
What lands. The connective tissue that turns the two already-landed pieces — QToAddress [A] (symbolic address from query tokens, no embedding) and the intuition field (PPR over usage co-access) — into the not-a-RAG [C] field-route, plus the kill-cosine ablation harness that proves the path recalls with every similarity primitive hard-off. Both ship default-OFF and byte-identical when the flag is unset. This is the WIRE + the PROOF harness on synthetic co-access — NOT the live not-a-RAG claim.
The path — where [C] sits
[A] QToAddressquery tokens → symbolic address. LANDED (origin/main). No embedding.
→
[B] exact-fetchO(1) get at the derived address = the seed set.
→
[C] field-route ← THISfieldRoute(seeds, SessionGraph) = intuition PPR over CLEAN co-access. Ranks by field mass.
→
[D] field-mass emitseeds first, then the field-expanded usage-neighbourhood.
Deliverables (3 files, ~230 LOC, default-OFF)
| file | what | gate |
|---|
| src/field-route.ts | fieldRoute(seeds, graph, opts) → seeds + PPR-expanded co-access neighbours. Imports NO embedder / vector-index / cosine / BM25 / SimHash — usage-only. | FORGE_WICK_FIELD_ROUTE
default-OFF |
| src/field-route.test.ts | 9 tests — see coverage below | — |
| bench/notarag-ablation.ts | kill-cosine ablation (T0 vs T1 + controls) w/ the runtime tripwire. Bench, not serving code. | — |
The proof — kill-cosine ablation
82.0%
T0 · RAG cosine baseline
89.8%
T1 · address→field, cosine OFF
0.0%
T4a · no seeds (bar <15%)
30.5%
T4b · edge-shuffle (bar <0.6·T1)
1.9%
T6 · query-shuffle (bar <0.6·T1)
- PASS predicate (quantitative, fixed PRNG seed 0x51ee ⇒ reproducible):
T1 ≥ 0.85·T0 && T4a < 0.15 && T4b < 0.6·T1 && T6 < 0.6·T1. All controls collapse ⇒ address AND field are both load-bearing, no hidden cosine.
- Corpus: 60 clusters × 18. Each cluster has 3 LEX records (share query tokens ⇒ address-reachable) + 15 FIELD-only records with UNIQUE non-addressable tokens (reachable only via co-access). Both share the cluster centroid embedding, so T0's cosine recovers all — the field is what recovers the FIELD-only members for T1.
NEW rigor — the runtime assert-throws tripwire (overwatch + Codex-driven)
Before- "cosine-free by construction" — a STATIC argument (T1's file imports no embedder).
- Can miss a transitive call in a dep.
After- Runtime guard: T1/controls run
armed(); any cosine / embed / vectorSearch / bm25 / hammingTopk / knnScore touch THROWS. - A green T1 under the arm proves — dynamically + transitively — no banned primitive fired.
- Self-check every run (hard-exit-1 if inert): arms the guard, forces all 6 primitives, requires each to throw, then confirms cosine is OK once disarmed (T0 needs it). Output:
armed⇒{cosine,embed,vectorSearch,bm25,hammingTopk,knnScore} all THROW ✓ disarmed⇒cosine OK ✓. You never have to trust an inert guard.
- revive-overwatch will test it LIT (force a banned call inside T1 → expect throw) at the committed SHA.
Test coverage — 9 field-route tests (Codex PLAN Major #1 folded)
- default-OFF ⇒ seeds passthrough (inert) · flag-ON ⇒ seeds + same-clique expansion · empty-graph inert · empty-seeds ⇒ [] · deterministic · gate-value
- + disconnected-component isolation (b-seed never leaks a-clique) · + input non-mutation (seeds array + graph untouched, no accumulated state) · + deterministic rank ORDER (seeds lead, stable tie-break across 5 runs)
- Ablation is self-falsifying: if any control fails its bar, or T1 falls below survival, the harness prints FAIL.
Honesty & boundaries (the load-bearing part)
- The claim is "recall SURVIVES the kill-cosine when clean co-access exists" — NOT "beats RAG". The 1.09× T1/T0 is a corpus-PLANTED artifact (clean co-access IS the planted ground truth).
- Idealized-clean corpus ⇒ this is an UPPER BOUND; real co-access is noisier.
- The live not-a-RAG claim is HELD on (a) revive-overwatch's source-verify of the committed harness + (b) a real live forward-accrued co-access cohort (revive-build's #10
getRelated(freq-only, knn=0) — a rebuild, further out).
- Rollback: default-OFF flag; delete = revert. No schema / contract / migration.
touches_security=true only because it's a serving-path option — byte-identical when off.