Establish the staged fixed-point bootstrap and normal build

[frankischilling]

Part of #13

Question

Establish the checked-seed stage-1, Cupid-built stage-2, and byte-identical stage-3 bootstrap for CupidC, CupidASM, CupidLD, CupidObj, and CupidDis on Windows and Linux; then switch the normal OS build to those tools for every active C/assembly/object/link input. Keep GCC/Clang/NASM/LLVM/binutils only in an optional oracle escape hatch and enforce full OS, Doom, user-program, size, performance, and boot/runtime gates.

[frankischilling]

Implemented and pushed d5e4ed7.

This checkpoint establishes a static i386 Linux fixed point for all five Cupid tools under WSL:

• Generation-one CupidC, CupidASM, and CupidLD build the 19-source stage-two union, fresh startup, and CupidC, CupidASM, CupidDis, CupidLD, and CupidObj images.
• Stage-two CupidC, CupidASM, and CupidLD repeat the complete build for stage three.
• All 19 C object pairs, startup objects, generation-one to stage-two images, and stage-two to stage-three images match byte for byte.
• Both compared stages pass five help paths, ten successful operations, and six useful failures across compilation, assembly, disassembly, symbol inspection, linking, wrapping, and flattening.
• The generated build audit pins the source set, strict/GNU split, include forms, five link orders, producer lineage, comparisons, paired runner, help paths, and behavior calls. Twelve mutations prove those seams fail closed.
• ADR 0090, the bootstrap records, capability and migration matrices, host-dependency record, wiki, and embedded CTXT manual now describe the same boundary.

Final evidence:

• Focused fixed point: pass in 466.164 seconds.
• CupidC object suite: 52 tests pass in 624.271 seconds.
• Build-graph suite: 51 tests pass in 389.249 seconds.
• Root gate: 393 tests pass in 1,239.905 seconds with one expected optional skip; Make returns zero in 1,283.2 seconds.
• Windows/Clang Toolchain gate: pass. Fresh tracked-tree WSL/GCC Toolchain gate: pass in 62.4 seconds.
• Production image: make all passes, and the rebuilt image runs /bin/ls.cc through the GUI terminal smoke in 18.8 seconds.

Establish the staged fixed-point bootstrap and normal build remains open. The bootstrap still starts from host-built generation-one tools. Checked seeds, direct native Linux and native Windows proof, fresh-checkout independence, normal-build cutover, and full OS C migration are still required.

[frankischilling]

The checked bootstrap seed has advanced to the compiler generation now used by the normal crypto build.

Commit c731e3e promotes the proved stage-three CupidC image after the typed-null, incomplete-external-array, and active GNU assembly work. The old seed rebuilt all 19 C objects, startup, and all five tool images through stages two and three with host compiler and linker commands poisoned. Every staged object and image matched, and both generations agreed on five help checks, ten successful operations, and six expected failures.

The refreshed manifest binds the exact source revision, stage-three generation, producer lineage, fixed-point command, hashes, sizes, static i386 ELF properties, and passing result. Focused negative tests reject the old revision or generation, changed lineage or command, and a non-passing result before execution. A second poisoned-host reproof started from the refreshed seed and reproduced the same fixed point and all 21 behavior checks.

Commit 8cb0c03 consumes that seed in the normal build for all 20 kernel crypto sources, so the refresh now has production evidence as well as staged equality.

Issue #32 remains open. The checked i386 Linux five-tool fixed point is established, but native Windows bootstrap, full normal-build C ownership, Doom, user programs, size and performance gates, and the final optional-oracle-only handoff are still ahead.

[frankischilling]

Progress update from commit c60a5d6:

• Refreshed the checked five-tool i386/Linux seed from source commit d2e0f8b.
• Proved the seed can rebuild itself with both the host C compiler and host linker poisoned.
• Verified all five stage-two and stage-three tools are identical, including the refreshed CupidC binary.
• Recompiled the exact 116-source production frontier from a clean Git index. All 116 object records matched the previously tested frontier; the aggregate size is 2,268,616 bytes.
• Re-ran the generated-source and user-program frontiers and the 14-test seed module.
• Updated the bootstrap ADR, matrices, log, README, wiki, CTXT, audit data, and pinned tests.

Issue #32 stays open because the remaining normal-build, Doom, and cross-platform ownership work is not complete.

[frankischilling]

Commit 25eae0b6 advances the staged fixed point and normal-build cutover by transferring 20 production roots to checked CupidC.

The active audit now records 142 CupidC transforms, including 136 normal-build objects, against 155 host-C transforms and 103 host-C root objects. The generated-install frontier reproduced all three generated sources and objects from a 194-input closure with SHA-256 5986165c00cdc96dde11cd2271a56495e088401ffd8d0dd8c7e0d979390f1cc7. The user frontier also reproduced all three objects and executables.

The final staged input tree built through both CupidLD passes and CupidObj in 164.490 seconds. The resulting kernel.elf is 7,870,352 bytes with SHA-256 e077b5d9ef0af3de57e9f114fbd217547efc598add3afdf3a753141fb9e99845. Its private-image four-vCPU QEMU gate passed in 53.658 seconds with a 53,819-byte serial log, SHA-256 fec0d4636944ab68f2e74d4bb32b43a4d89344d5fb348892314350b05d66148c.

This issue remains open. The host compiler still owns native contracts, hosted development commands, 155 active transforms, and 103 root objects. Python still owns 154 transforms, Windows still launches the checked i386 seed through WSL, and 18 strict checked-in roots plus the generated symbol-data root remain to be transferred.