opsle · sneakocom · Aug 31, 2026 · Aug 31, 2026
diff --git a/ARCHITECTURE.md b/ARCHITECTURE.md
@@ -54,6 +54,9 @@ for a primary developer and returns one terminal result.
 
 Supporting boundaries:
 
+- Affected Verification independently decides which verification checks are
+  defensible for a change; humans, CI, or Gearbox may execute the plan, and
+  Context Firewall may subsequently reduce the resulting evidence.
 - Gearbox admits deterministic versus cognitive work; Routing Policy selects an
   eligible cognitive route after admission.
 - Resource Claims establishes current concurrent ownership; Execution

diff --git a/PROGRAM_STATUS.md b/PROGRAM_STATUS.md
@@ -2,25 +2,25 @@
 
 <!-- Generated by tools/render_program_status.py from program/registry.json, program/experiments.json, program/theory-registry.json, and program/THEORY_MAP.md. -->
 
-**Coverage: 20/20 expected repositories; duplicates: 0.**
+**Coverage: 21/21 expected repositories; duplicates: 0.**
 
-Last verified: `2026-08-29T14:49:44Z`. HEADs are the verified default-branch revisions, not an assumption about later changes.
+Last verified: `2026-08-31T01:29:54Z`. HEADs are the verified default-branch revisions, not an assumption about later changes.
 
 ## Portfolio totals
 
 | Lifecycle stage | Count |
 |---|---:|
 | `THEORY` | 12 |
 | `SPECIFIED` | 0 |
-| `PROTOTYPED` | 6 |
+| `PROTOTYPED` | 7 |
 | `VERIFIED` | 2 |
 | `BENCHMARK_READY` | 0 |
 | `EXPERIMENTED` | 0 |
 | `REPRODUCED` | 0 |
 | `DOCUMENTED` | 0 |
 | `COMPLETE` | 0 |
 
-Program state totals: active 4; waiting 16; complete 0.
+Program state totals: active 5; waiting 16; complete 0.
 
 ## Repository inventory
 
@@ -43,13 +43,14 @@ Program state totals: active 4; waiting 16; complete 0.
 | 15 | [agent-recovery-policy](https://github.com/opsle/agent-recovery-policy) | concept | `1b733a111e26` | `THEORY` | [none; placeholder source directory only](https://github.com/opsle/agent-recovery-policy/blob/1b733a111e26e0a409fee3b96f627048531daefe/THEORY.md); placeholder only; no automated tests | No shared failure schema, attempt ledger, route evaluator, or comparative fixture set. | After decision evidence and route schemas stabilize, define same-failure convergence on synthetic failures. | `agent-routing-policy`, `agent-state-ledger`, `decision-evidence-protocol` | waiting |
 | 16 | [ephemeral-agent-workers](https://github.com/opsle/ephemeral-agent-workers) | concept | `ad96fcfdfac0` | `THEORY` | [none; placeholder source directory only](https://github.com/opsle/ephemeral-agent-workers/blob/ad96fcfdfac06d340b5e96d369634980cee78ef4/THEORY.md); placeholder only; no automated tests | Portable authority, claim, and handoff contracts are not ready; no safe synthetic containment harness exists. | Wait for prerequisite contracts, then define a fake worker adapter and destruction receipt without infrastructure changes. | `agent-execution-authorization`, `agent-resource-claims`, `verifiable-agent-handoff` | waiting |
 | 17 | [gearbox](https://github.com/opsle/gearbox) | concept | `f3fab9f292cf` | `PROTOTYPED` | [provider-free Python reference core with strict authority-policy admission, exact deterministic argv execution, content-addressed staged helper context, injected one-shot helper transport, passive process waiting, compact results, raw-artifact accounting, fail-closed budgets, and Visible Value receipts](https://github.com/opsle/gearbox/blob/f3fab9f292cf4eabd7200615d444f98881f57d55/src/opsle_gearbox/core.py); 19 of 19 provider-free automated tests passed locally, in PR #1 CI, and in final-main CI; ruff, shellcheck, actionlint, gitleaks, wheel build, receipt validation, and public raw-locator/hash checks passed | A production-quality bounded helper transport, independently verified isolation and termination, full Context Firewall integration, and a frozen comparative benchmark remain missing. | Freeze a provider-free deterministic-versus-direct baseline and helper-transport conformance corpus before considering any live model/provider run. | `context-firewall`, `decision-evidence-protocol`, `agent-trajectory-profiler`, `agent-routing-policy`, `agent-execution-authorization` | waiting |
-| 18 | [research](https://github.com/opsle/research) | program infrastructure | `9ee43197880c` | `PROTOTYPED` | [authoritative 20-repository ledger, machine-readable 17-concept theory registry, canonical theory map, normative Visible Value controls, and provider-free EXP-001 benchmark, launch, one-block coordinator, external four-label LIVE_PROVIDER_RUN authorization, and current catalogue/pricing preflight artifacts with six content-addressed tasks, deterministic oracle, four arm contracts, sealed blinded allocation, exact subject configuration and adapter, exact authorization admission, private boundaries, receipts, mutation tests, and integrity CI](program/THEORY_MAP.md); 88 of 88 repository tests pass on the unreleased provider-free live-preflight branch, including 13 authorization validations and two byte-identical replays; PR #13 and exact main CI remain the released coordinator baseline | The exact live authorization set remains unconsumed and unreleased, account-specific API entitlement is unverified under the zero-provider-call policy, no immutable dated model snapshot is documented, and the program has no canonical measured concept experiment. | Independently review and release the provider-free live-authorization and catalogue/pricing preflight; do not consume authorization or launch a provider/model subject. | — | active |
-| 19 | [site](https://github.com/opsle/site) | program infrastructure | `28ad65be4750` | `PROTOTYPED` | [React/Vinext source implementation with content routes](https://github.com/opsle/site/blob/28ad65be4750dc849976fbf5c9eae9501c6bbb25/README.md); automated build/render tests present; not rerun because this reconciliation kept other repositories read-only | Wait for validated registry data and measured research; deployment requires separate authorization. | After registry merge, add a read-only registry ingestion design without deploying the site. | `research` | waiting |
-| 20 | [.github](https://github.com/opsle/.github) | program infrastructure | `01c38e726db7` | `THEORY` | [documentation-only organization profile](https://github.com/opsle/.github/blob/01c38e726db7c3e45059d25fccce55e071e35938/profile/README.md); not applicable to current single Markdown profile; consistency is unverified | No mechanical registry consistency check exists in this repository. | After registry merge, design a read-only consistency check for organization-profile repository links. | `research` | waiting |
+| 18 | [affected-verification](https://github.com/opsle/affected-verification) | concept | `12076522c9b8` | `PROTOTYPED` | [dependency-free Node.js 20 deterministic planner with normalized change/impact evidence, reverse-dependency closure, explicit verification catalog and policy rules, selected and skipped check arguments, fail-closed escalation, canonical SHA-256 provenance, opsle.value-receipt.v1 output, and fixture-level shadow miss classification](https://github.com/opsle/affected-verification/blob/12076522c9b82501794d816f1fcc0b7775fad6e1/SPEC.md); 54 of 54 automated tests, 15 of 15 positive/boundary/negative/tampered conformance scenarios, and 5 of 5 determinism checks passed locally and in PR #1 CI; exact main CI, current Opsle value-receipt validation, actionlint, gitleaks, and clean local/remote parity passed | A frozen real public-repository full-verification baseline, complete catalog, production evidence adapter, relevance oracle, native-selector comparison, shadow observations, and independent review are missing. | Freeze one real public repository's full-verification baseline, catalog, adapter outputs, and relevance oracle, then run an OBSERVE/SHADOW comparison without replacing CI. | — | active |
+| 19 | [research](https://github.com/opsle/research) | program infrastructure | `9ee43197880c` | `PROTOTYPED` | [authoritative 21-repository ledger, machine-readable 18-concept theory registry including Affected Verification, canonical theory map, normative Visible Value controls, and provider-free EXP-001 benchmark, launch, one-block coordinator, external four-label LIVE_PROVIDER_RUN authorization, and current catalogue/pricing preflight artifacts with six content-addressed tasks, deterministic oracle, four arm contracts, sealed blinded allocation, exact subject configuration and adapter, exact authorization admission, private boundaries, receipts, mutation tests, and integrity CI](program/THEORY_MAP.md); 88 of 88 repository tests pass locally after deliberate migration to the 21-repository, 18-concept anti-forgetting set, including 13 authorization validations and two byte-identical replays; generated status and registry validation pass | The exact live authorization set remains unconsumed and unreleased, account-specific API entitlement is unverified under the zero-provider-call policy, no immutable dated model snapshot is documented, and the program has no canonical measured concept experiment. | Independently review and release the provider-free live-authorization and catalogue/pricing preflight; do not consume authorization or launch a provider/model subject. | — | active |
+| 20 | [site](https://github.com/opsle/site) | program infrastructure | `28ad65be4750` | `PROTOTYPED` | [React/Vinext source implementation with content routes](https://github.com/opsle/site/blob/28ad65be4750dc849976fbf5c9eae9501c6bbb25/README.md); automated build/render tests present; not rerun because this reconciliation kept other repositories read-only | Wait for validated registry data and measured research; deployment requires separate authorization. | After registry merge, add a read-only registry ingestion design without deploying the site. | `research` | waiting |
+| 21 | [.github](https://github.com/opsle/.github) | program infrastructure | `01c38e726db7` | `THEORY` | [documentation-only organization profile](https://github.com/opsle/.github/blob/01c38e726db7c3e45059d25fccce55e071e35938/profile/README.md); not applicable to current single Markdown profile; consistency is unverified | No mechanical registry consistency check exists in this repository. | After registry merge, design a read-only consistency check for organization-profile repository links. | `research` | waiting |
 
 ## Theory reconciliation
 
-Concept coverage: 17 canonical concepts; 17 current concept repositories mapped exactly once; Agent Gearbox maps to opsle/gearbox.
+Concept coverage: 18 canonical concepts; 18 current concept repositories mapped exactly once; Agent Gearbox maps to opsle/gearbox.
 
 Canonical map: `program/THEORY_MAP.md`. Machine registry: `program/theory-registry.json`.
 

diff --git a/program/PRIORITY.md b/program/PRIORITY.md
@@ -80,6 +80,15 @@ Agent Discovery Control should wait for a portable ledger and supervisor fixture
 so duplicate convergence and already-satisfied proofs are durable rather than
 conversation-local.
 
+## Workstream 6: affected verification
+
+Affected Verification is independently prototyped for normalized synthetic
+evidence and remains outside Gearbox. Its next evidence gate is not another
+selector implementation: freeze one real public repository's full-verification
+baseline, complete catalog, native-selector adapter output, and relevance oracle,
+then run only in `OBSERVE`/`SHADOW` without replacing authoritative CI. Correctness
+and relevant selection misses precede workload reduction.
+
 ## Exact next execution
 
 In `opsle/research`, independently review and release the provider-free exact

diff --git a/program/THEORY_MAP.md b/program/THEORY_MAP.md
@@ -1,13 +1,13 @@
 # Canonical Opsle theory map
 
 Status: authoritative conceptual reconciliation plus the 2026-08-29 public
-Gearbox extraction. Consolidation and disposition operations remain
-recommendations only.
+Gearbox extraction and 2026-08-31 Affected Verification project creation.
+Consolidation and disposition operations remain recommendations only.
 
 Machine source: [`theory-registry.json`](theory-registry.json).
 
 Theory registry canonical SHA-256:
-`67b7529c195b501a810a3689f2074b1ed893541a15016ea4a8be83cb34437491`.
+`d3a5f6e03f28d0ae8911763e6cb15c1a3f7306559f1801a2647219563159cb79`.
 
 This map corrects an extraction-boundary error. The original 16 concept
 repositories were useful hypotheses isolated from one production system, but
@@ -38,6 +38,7 @@ OPSLE
 ├── Independent Opsle tools
 │   ├── Context Firewall
 │   ├── Agent Trajectory Profiler
+│   ├── Affected Verification
 │   └── Semantic Edit Protocol
 ├── Cross-cutting protocols
 │   ├── Decision Evidence Protocol
@@ -266,6 +267,7 @@ not an executed repository action.
 | Repository | Primary classification | Recommended disposition | Confidence | One-sentence rationale |
 |---|---|---|---|---|
 | `gearbox` | `GEARBOX_CORE` | `KEEP_STANDALONE` | `HIGH` | One bounded primary-developer transmission operation now has a narrow public home without absorbing durable orchestration or external policies and protocols. |
+| `affected-verification` | `INDEPENDENT_OPSLE_TOOL` | `KEEP_STANDALONE` | `HIGH` | Minimum-defensible verification planning composes native impact evidence, catalogs, and risk policy without owning check execution or model-context reduction. |
 | `agent-trajectory-profiler` | `INDEPENDENT_OPSLE_TOOL` | `KEEP_STANDALONE` | `HIGH` | Reusable correctness-gated telemetry is external to both Gearbox and durable orchestration, although generic Visible Value scope needs ownership cleanup. |
 | `semantic-edit-protocol` | `INDEPENDENT_OPSLE_TOOL` | `KEEP_STANDALONE` | `HIGH` | Bounded structural editing is independently useful and can be selected as a deterministic Gearbox tool without becoming Gearbox core. |
 | `durable-supervisor` | `DURABLE_ORCHESTRATION` | `KEEP_AS_RESEARCH` | `HIGH` | Durable objective ownership and reconstruction form a distinct autonomous-orchestration hypothesis whose package boundary remains unproven. |
@@ -354,6 +356,22 @@ profile, but it must not evolve into a competing reduction policy. Profiler must
 not become the normative owner of every receipt protocol merely because it
 aggregates them.
 
+### Affected Verification versus selectors, Gearbox, and Context Firewall
+
+Native affected/related systems remain authoritative evidence providers for
+their own graphs and test frameworks. Affected Verification composes that
+evidence with a complete verification catalog and explicit risk policy to
+produce selected checks, explained skips, and a sufficiency or uncertainty
+state. It does not reimplement those selectors, execute CI, or claim global
+mathematical minimality.
+
+Gearbox may consume a plan and choose an execution gear, but does not own the
+verification theory or planner. After checks execute, Context Firewall decides
+which results enter model context; Affected Verification decides only what
+verification should execute. Decision Evidence may validate plan provenance,
+and Agent Trajectory Profiler may measure planned versus actual or shadow work,
+without initial package coupling.
+
 ## Restored home and remaining gaps
 
 `opsle/gearbox` now coherently owns deterministic task admission, requested-gear
@@ -390,6 +408,11 @@ repositories.
 - Verifiable Agent Handoff is prototyped only for HMAC manifest binding and
   caller-supplied destruction state; publication, transport, destruction proof,
   reconstruction, and independent verification are not implemented.
+- Affected Verification is prototyped for normalized synthetic evidence,
+  deterministic catalog/policy planning, fail-closed escalation, skip reasons,
+  Visible Value receipts, and fixture-level shadow classification. No production
+  adapter, check execution, real-repository benchmark, or trusted selective
+  verification class exists.
 - The remaining theory repositories contain coherent falsifiable narratives,
   but their `SPEC.md` files are generic templates and their source/tests are
   placeholders. Their current lifecycle remains `THEORY`.
@@ -482,6 +505,7 @@ Minimum requirements:
 
 ## Repository anti-forgetting invariant
 
-The authoritative program registry tracks exactly 20 repositories: 17 concept
-repositories, `research`, `site`, and `.github`. Agent Gearbox is mapped exactly
-once to `opsle/gearbox`. Concept tracking does not replace repository tracking.
+The authoritative program registry tracks exactly 21 repositories: 18 concept
+repositories, `research`, `site`, and `.github`. Agent Gearbox and Affected
+Verification are each mapped exactly once to their public repositories. Concept
+tracking does not replace repository tracking.