RustRaptor/docs/hd-coordinator-checkpoint.md

# HD coordinator checkpoint — 11 October 2026

The reviewed external development pack contains **1,148 original picture frames in 421 complete sequences**. The committed Linux and Windows playable snapshots remain **800 frames / 340 sequences**, assembled at `964ba93` from the immutable 800-frame handoff. Root owns runtime data, binaries, libraries and archives; coordinator owns external development registration and this metadata. Bundled originals and approved runtime art are tracked under this repository's data/. Working originals, prompts, job candidates and review evidence remain external under ../data/.

## Verified development coverage

| Category | Registered / original pictures |
| --- | ---: |
| Player banking | 21 / 21 |
| Bosses | 232 / 249 |
| Enemies and ground objects | 151 / 419 |
| Player and enemy projectiles | 45 / 51 |
| Explosions and effects | 176 / 281 |
| Equipment and pickups | 47 / 47 |
| Terrain | 416 / 4,535 |
| Menus, portraits, HUD and other pictures | 60 / 150 |
| Total | 1,148 / 5,753 |

All 6,449 catalog entries and 5,753 pictures were audited with zero HD source/hash/canvas/ID errors. **4,605 pictures still await registration**. The current ledger contains 1,128 registered, 20 render-reachable, 1,755 candidate, 1,019 in-progress and 1,831 missing pictures. Candidate status establishes neither artistic approval nor a live occurrence. Unused and damaged IDs remain required. The303 AGX delta frames and four bitmap fonts retain their separate classic-art preservation policies.

## Closed immutable 1,148 output proof

../data/hd/registered-class-review/runtime-1148-current/combined-review.json closes **4,592 actual scale outputs / 5,740 original and scaled PPMs**, all byte-identical to independently accepted references. Both source-age guards are false at actual final source invocation and closure; all17 Rust source hashes and mtimes remain exact. Immutable release library `target/hd-review-libraries/636eccd24f56fc08ed25aa3bdf311d0b9e26284f2c95ab5ab6c6df070edc3b7c/libraptor_replica-f076ad67c588e355.rlib`, SHA `636eccd24f56fc08ed25aa3bdf311d0b9e26284f2c95ab5ab6c6df070edc3b7c`, original build time `1791706432981505461`, binds root's final Stage2 optional animation/effect.kind API source. Current development hd.json SHA is `5d6b0010049cf5d9d29612391faa72a35d867968f2ce31d6a8e9622e597e4ed8`; combined review SHA `fffd79b1c1e63b1dc21f92f6f961693e9d483c9a73d027fb3e61c56f71e7d323`. No source flag is inferred solely from unchanged pixels. Root subsequently appended and formatted desktop test code, so this closure now records the exact pre-append source epoch; its historical false guards are not relabeled as current after that edit.

All 1058 ordinary source pictures introduce no reserved240–255 labels. 87 source-class pictures retain authentic gameplay classes; three opening cards use their original static256-color palettes. Exact native/source loading does not establish whole-mission completion, custom-menu reachability, complete assembled-boss joins or new destroyed artwork.

After the historical929 checkpoint, batch-979-approval.json adds **50 frames / eight complete families**, with250 exact accepted PPMs and15 complete coordinator-inspected source/native1/HD4 pages on four boards. The batch contains radar40115–40134/32, four tread/slat/fork families15, TEXTURE10018 and side trims50005/50006. batch-1037-approval.json adds **58 frames / eleven complete families**, with290 exact accepted PPMs and20 complete inspected pages on six boards: Orange9, difficulty4, craft3008f/92/95/98, ground40135–40154/32, restored10310/200a3 and complete400ac–400b2/7. Every candidate, binding, source, peer evidence, raw and current output is bound. The former held boss mains are SHA-named snapshots before exact sibling-byte promotion; all rejected versions remain unchanged.

The radar's nine-cell native object, mast, controls and252 lamp remain source-aligned. Its70 contexts/709 pairs/17 states produce3,316 current compositions; nine radar damage partners stay original fallback. The next two ground shards preserve source crack branches, rock positions and shallow divots through36 contexts/121 pairs and756 compositions; twelve unused IDs remain gallery-only and there are no state partners. Fine soil density/contrast remains visible against original fallback.

Tank phases, forks and stationary architecture retain source identity with exact3–4x occupied-source coverage. Quantified minor shading variance and lower-scale contour smoothing are accepted. New30098 has one missing nativeRGB4 post corner, restored2–4, with both252/253 labels exactly1/4/9/16. Difficulty portraits retain defining faces and framing; warmer painting and the helmet's central pale mark interpreted as a restrained shallow tab with dark underside are accepted, not described as unchanged hardware. Texture repeats preserve connector and slot topology, while stronger edge contrast and burgundy threshold sensitivity remain explicit.

Boss10310 preserves the right disc, skirt and feet, accepting two RGB4 corners plus isolated gray rim(60,46) lost4x. Boss200a3's y35 bridges and central dark structure are restored allscales, with17 outer contour losses2–4 and small right expansion accepted. EBOSS6 retains the final two pale plates and stationary horizontal central grille/crossed lower floor; the firstsix bindings/24 outputs remain exact. Final grain/pitch/frame-width differences are accepted, not byte-stationary. These are complete-family gallery decisions with no whole-boss live assembly claim.

Orange9 retains warm ray/fragment/fade character despite stronger4x cell-edge outlines and small adjacent additions. Three alpha16/17/19 exterior specks in101a8 are excluded, while meaningful alpha32 contour pixels are retained. Original alpha, source masks and raw RGB evidence stay distinct. Smoke4 remains held because every actual shaded output equals original nearest-neighbor output, so no visible HD improvement is established.


The batch-1071-approval.json journal adds **34 frames in four complete families** after1037, with136 scale outputs/170 source and rendered PPMs, all byte-identical to peer-reviewed references, and ten complete pages inspected on two boards. The accepted singles300ac/3009d retain central machinery, source frame/post/pod/foot structure and authentic lamps. The two native RGB4 corner losses in3009d are disclosed; every source cell survives2–4 and cue counts are exact1/4/9/16.

Original Set4 jobs9/10,40155–40174, preserve crack routes, rock groups and shallow divots. Standalone40157/4015b corrections exclude prior foreign top connection/crack/rock errors while preserving authentic faint source fragments. Their material density contrast is accepted. The actual160-tile pack retains original lower foliage40179/7a; the separate whole-bush all-HD diagnostic approves neither lower cell. Twenty-two contexts/eighty-two pairs/no states produce544 current compositions; ten unused IDs remain gallery-only. Both lower cells are now in the different, ongoing jobs11/12 review scope.

The opaque4006e warm center remains held despite coherent gray architecture: the source yellow-inclusive21-cell core becomes13 native cells and about14.19 logical-area cells at4x, with a visibly duller yellow spot. Its job.json inprogress-to-candidate change during peer review came from coordinator hd_job_queue.py bookkeeping in the1037 ledger refresh, not an artist/source change; both byte snapshots and exact unchanged artwork/source pins are preserved. STAG0240088 has independent approval but remains separate from1071 until coordinator inspection/admission.

## Final pre-Stage2 reviewer closures

The77-frame batch1148 contains six complete job families and21 manifest sequences;10410 contributes sixteen standalone sequences. Coordinator actually inspected all20 complete source/native1/HD4 pages on six unresampled boards and matched all385 source/scaled PPMs to independent accepted references. LargeAirv11 restores the connected inner lip and upper shoulder, accepts its one residual dim endpoint and other enumerated contour differences, and discloses stronger hot grain against smoother phases. STAG0240088 keeps original opaque internal architecture with darker gray/finer metal material. Terrain3011d–3012c retains straight gray remnants, damage routing and authentic warm flecks;10410–1041f retains native intact/damaged building panels, rock groups and stippled crossings. New damaged10410/12/14 sources and full-family state transitions are explicit. Terrain40175–40194 retains slopes/rock offsets/material boundaries and admits the genuine lower bush40179/7a after independent target review. Its cleanv2 raw excludes the preserved rejected gridv1. Six unused IDs remain gallery-only; zero state partners in those two Set4 jobs.

Root's Stage2 API edits and formatting intervened after the initial77 registration checks. The supplementary1148 attempt using d844a5d7 has all5,740 pixels byte-identical to accepted references, but its broad source-age guard correctly reads true. That attempt, its exact source snapshot and comparison remain under runtime-1148-pre-final-stage2-source; they were not relabeled or used as current-source certification. The definitive1148 render rebuilt the final formatted animation/effect.kind API epoch and preserved earlier1071/1037/800 output history. Packaged800 and private1037 copies remain unchanged.

Seven reviewers have checkpointed their former HD scopes and switched to Stage2; no new HD reservations go to them until Stage2 integration finishes. Their final exact reports are bound before the transition. Full-family Flare26v8 remains held for10258's five-cell and10266's two-cell transparent holes filled by old bindings, report65648399844683bc4287ce3d5bca5992ccdb602f1f18c5ef5b12eb1dbb13eb1a. Sparkle17v8 remains held for10277's ten-cell alpha-zero opening and10272–76's muted authentic bright ray-tip material, reportde6d412e1647168500778333c277d0823330c9b2d047fd3550ad09dd4bae562d. Artists may generate bounded sibling corrections for those exact two/six frame scopes while preserving other24/11 bindings and the whole frozen history; no self-approval or partial registration.

Terrain3 shard3 remains wholly unadmitted: twelve per-frame judgments are positive, but30112/13/19/1a lose surviving linear gray remnants. Complete shard4's sixteen bindings are separately admitted. The shared independent report755667dfb498724e17a35358d8d01541f51783b061cf26f80684c0d618ad68cb preserves both conclusions without implying joined64 exhaustive seams. Terrain10400's reporte8254870c26cf95c4add0a08ababa03e6108086a33aa2feadf4d3849bfc16a46 accepts fifteen exact bindings with original10406 fallback but holds the whole family on rectangular organic-ground slabs. Its genuine10406 sibling must preserve those fifteen accepted raw/bindings/outputs before complete-family admission. SHIP25 now has separate independent approval but is not included in1148; source-age and current pixel continuity remain required before admission.

## Private approved 1,148 release input

The separate private handoff at ../data/hd/registered-class-review/handoff-1148-20261011/pack/ contains **1,148 frames / 421 complete sequences**, **398 files / 649,901,106 bytes**:396 artwork files plus hd.json/provenance.json. Its handoff-manifest.json SHA is `a701425c73fe671aca1015c4bed78218cde70fd193ff45ab7418031818ad3b31`; pack hd.json SHA is `5d6b0010049cf5d9d29612391faa72a35d867968f2ce31d6a8e9622e597e4ed8`. Original INDEX SHA remains `4ce78e5e638b6603114dd233ceaa41f386c0963ba4aa02ecf88ce0215b096681`. Every source/destination hash matches and every pack file has a private inode. Copied proof includes all5,740 accepted PPM matches, audit, runtime QA, provenance-correction journal and exact final Stage2 production API source epoch. Root received this reviewable assembly input; coordinator has not changed tracked runtime files. Earlier800/1037 private handoffs remain byte-exact.

Root authorized a scoped review-tool repair after Cargo retained two incompatible serde_core feature graphs. Commit `9dba15d` changes only tools/hd_candidate_review.py and its regression test. The helper now compiler-checks Manifest Deserialize/Serialize against the exact frozen game library and freezes the compatible serde_json dependency; dependency-selection.json and runtime QA record the attempted and selected identities. Helper SHA changed from `979558477b61507bf8be587b8f1fc148c3bb5d1f29b58c3b6f6f75aa569d299b` to `ad2ba9c350ecd8d1d59507a69f0a7da8386a3df231d0c9bb639d105b8ced7f80`; old bytes remain under .reference/hd-review-serde-alignment-fix/. A synthetic two-universe rustc regression passes, genuine636 selects compatible89b5 instead of11c796, and a fresh537005 actual SHIP25 gallery passes both source guards with all5 PPMs identical to accepted references. Verification summary SHA is `7976b991b2c47bc9583f9cdbaee60c7b15a512954216f89493a55069ab765de0`. No renderer, policy, raw pixels or production manifests changed.

Corrected complete10400–1040f candidate `2605e5ce6a4b02bbb6b021796e3d010745acf96c379cc23a4e1f1eab297bdaec` is now independently approved by report `7fe17ddcc8e71f75d112f3940b054d9de3091fb4fb9ede7cb198a1be2d57eae2`. Genuine organic10406 resolves the former rectangular-panel hold; fifteen accepted siblings remain exact. All2,380 context cases and4,840 PPMs are bound, with18 changed physical contexts reviewed at all scales. Its636 proof honestly records the later desktop source-age flag as true. This family and approved SHIP25 remain outside the already frozen1,148 handoff pending a later coordinator batch. The historical10406 whole-family hold remains intact.

Flare26v10 is reserved next to hd_full_review at exact candidate `0b9c6e789bd275336a59d38005dfb1d66ed6aaa64172c7f384e2767d0d959fd3`; only10258/66 are genuine replacements, with both source holes clear and other24 bindings/120 PPMs unchanged. Sparkle17v11 remains an unassigned frozen author proposal at `2ba86de91a31034a187bc61adc8f7f3d757f14e0f4e2f9d0f52a3910fdf48d96`, restoring10272–77 while preserving other11 bindings/55 PPMs. Residual contour/material differences require independent whole-family judgment; neither proposal is registered or packaged.

## Private development1,037 input

A separate immutable development input is published at ../data/hd/registered-class-review/handoff-1037-20261011/pack/. Its handoff-manifest.json SHA is `51a857fc9a1e584e00ece4800436e3c9411de5c1fba8a25e527c65d1ee542d4f`; hd.json SHA is `707ab815114579828bcb823cc3e62efa80ea05b54ae83e83dc30c5730cde0e96`. It contains1,037 frames/396 complete sequences,366 distinct files/569,685,991 bytes, with source INDEX, complete source/scale proof and original build identity pinned. Every file is a private copy with verified bytes and a distinct inode; future development mutation cannot change the handoff. This is a reviewable future assembly input, not authorization to refresh the existing800 runtime files or archives. The original packaged800 handoff remains untouched.

## Frozen Linux/Windows800 history

The separate historical runtime-800-current/combined-review.json remains unchanged:3,200 scales/4,000 accepted PPMs using immutablef71826f4eec106d59a55c12380ee1437a3cfeddf6f9d145480624ff5e5b8eaa5. Historical929,979,1037 and1071 closures remain separate and are not retroactively associated with a newer library. Root's later test-only terrain capture fixes did not alter the production desktop prefix, loader, compositor or shaders.

The private immutable handoff is ../data/hd/registered-class-review/handoff-800-20261011/pack/, pack manifest SHA `fbf8b6a9af134e263881ce28f002259affbf0636f53d214ea34bbd8c61205f71`. handoff-manifest.json SHA `29821d06c34114101041e50318c5c013a9236e474716a382257d6d252c304b1e` binds292 pack files:290 artwork files plus hd.json/provenance.json. Root copied and verified all into tracked data:6,742 files/461,771,350 bytes. Later348 development approvals are not included in that runtime snapshot.

Native Windows third CI38121272504 passed279 tests/0failed/24ignored, exact committedGNU launcher/gameplay/full800/all22mods and a freshMSVC build. Linux/Windows relocated launch, catalog, SDL and audio checks passed. Root documentation proof is fb6574a. Final Windows archive SHA25fca23c5ca95b754cf49fcf24b07d94dec8094863e6750c1898a55d6893cbfe,602433522bytes; Linux SHA0f384c3592a1a6d9302c16769cd8aafb096464fe17150ea1a66b34743fbdc97a. Both archiveCRC/data/runtime/source/doc checks passed. No further packaged art changes are authorized by this development metadata checkpoint.

Metadata-only provenance corrections preserve before-byte snapshots and exact actual attempt/request/prompt authority. All raw/candidate/source/render bindings stay unchanged. Cursor's absent historical request JSON remains disclosed; no retrospective request history was invented. Buoy center252/253 and cyan/water240–244 wording corrections likewise retain prior bytes. BUTTON's four corrected transparency flags were independently verified.

## Stage2 reassignment and preserved HD scopes

Root is temporarily assigning iron_coast_2, iron_coast_3, iron_coast_5, iron_coast_6, windows_persistence, terrain_capture_fixture and campaign_release_review to Iron Coast Stage2: eight levels, one or two weapons and authorized API additions. They must checkpoint existing HD review evidence first. No new independent HD review reservations will be assigned to these seven until Stage2 integration finishes. The scopes listed below record their last HD assignments for later resumption, rather than new active review work.

The terrain-set3 children continue their original HD queues directly. HD artists, hd_full_review, hd_dark_player and hd_enemies_01 continue their disjoint original work. Stage2 uses the same four-slot generation gate; its authored mod art is separate from original catalog coverage. Coordinator does not edit Stage2 mods. Runtime800 stays unchanged until root's explicit release update, and the private immutable1037 assembly input remains available. The1071 proof predates the API changes and remains historical. Current1148 closes a separately rebuilt final Stage2 API epoch, while later source changes still require honest new library/source checks and output continuity.

## Durable owners and outstanding holds

Coordinator alone registers external development art and refreshes audit/ledger. Queue offsets change after admission; use original durable job IDs. Artists never approve/register their own artwork. Commit only owned paths; docs/hd-full-review.md remains reviewer-owned. Root alone assembles tracked runtime and controls future loader/alpha/shader/encoder policy. No such production policy changed during1037 closure.

- hd_full_review preserved terrain10400's historical whole-family hold and then approved the complete genuine organic10406 sibling; that16-frame family and separately approved SHIP25 remain pending coordinator admission outside1,148. It next reserves frozen complete Flare26v10 and continues original HD review while the other seven reviewers serve Stage2.
- iron_coast_2 closed and checkpointed independently accepted original Set4 jobs1–12/192frames; no further HD review reservation during its Stage2 mission/boss work. Lower40179/7a is now admitted in the target scope, with prior context-only limits preserved.
- iron_coast_5 closed Terrain3 shards3/4: four30112/13/19/1a gray-remnant holds in shard3, all16 accepted shard4. It now serves Stage2; no active HD review reservation.
- windows_persistence closed complete LargeAirv11 approval and STAG0240088 approval. Earlier LargeAirv6/v9, SHIP35 and4006e holds remain exact. Its new Stage2 weapon work is separate from original-catalog HD evidence.
- terrain_capture_fixture closed all16 terrain10410 frames and verified historical job status/count-only lineage against retained per-frame copies. It now serves Stage2 enemy packages; source/class/shader/scene evidence never implies blanket encounter or liveHost approval.
- iron_coast_3 preserves admitted10310v4/200a3v4/400acv3 and every failed variant. Its Sparkle17v8 whole hold is complete; no new HD reservation during Stage2. Atlas300a8–abv6 remains held;300a0/200ba alpha-class policy stays root-owned.
- iron_coast_6 closed the Flare26v8 whole hold, then switched to Stage2. Children continue original middle5–36 and late37–68 HD queues directly under coordinator oversight. Old exact galleries remain pinned; stronger soil/gray/char relief and fallback rectangles remain unapproved.
- campaign_release_review checkpointed first30 complete Set4 families/480 author-reviewed IDs before Stage2 music work. Job31 has full art and technical proof but uninspected contexts/cardinal/live pages; job32 has only five cross-job crater-quarter proposals. No complete32 or later approval is inferred.
- campaign_integration retains admitted effects and frozen LargeAirv11; bounded Flare10258/66 and Sparkle10272–77 genuine siblings are author correction scopes only. Ground gold/alpha, smoke visible-enhancement and other holds remain explicit; no RGB compensation for loader artifacts.
- hd_enemies_01 retains admitted tanks/singles/STAG02. SHIP25 independent approval is pending coordinator admission; multipart IOTARG/DMOON,4006e warm center, damaged craft/cues and APE refusal stay held. Every failed genuine correction remains preserved.
- hd_dark_player continues complete23-icon102e1–102f7 production; partial diagnostics are not coverage. HANGP's opaque encoder rounding remains a separate root policy hold. Classic-menu route claims are not inferred through custom Rust menus.
- Terrain1 has128 registered tiles, Terrain2 has48, Terrain3 has48 and Terrain4 has192. Other completed/partial proposals remain independently held or awaiting exact review. Terrain2's unequal panels/coarse mosaic/foreign rules and Terrain1's bridge row/gap/material issues remain unadmitted.

The original catalog remains incomplete. Continue source-driven production and independent review, then perform exact current output continuity, complete family coordinator inspection and registration for each later batch. No later candidate is packaged or admitted merely because it decodes.