Cosmic Econometric Observatory

A university curriculum, rendered as a navigable graph —
where every node can tell you which source document it came from.

▶ Open the observatory

---

What you see in 30 seconds

The Bursa Uludağ University Econometrics programme — 144 curriculum relations compiled from a pinned source snapshot — laid out as a 3D graph. Search a course by code or title, select it, and its direct incoming and outgoing relations light up. The inspector panel shows semester, status, ECTS, elective pool and provenance: which snapshot the value came from. If a field was never recorded, it says so instead of inventing a number.

Everything the canvas shows is also reachable without the canvas. The HTML and SVG surfaces expose the identical sorted node and edge identifiers, with visible focus, Enter/Space selection, Escape to clear, and keyboard-navigable search. prefers-reduced-motion is honoured. No information exists only in pixels.

The one rule everything follows

source snapshot → explicit assertions/anomalies → curriculum compiler
  → stable anchors/routes → domain graph → Scene IR → projections

Raw source values are never silently corrected. When two catalogue pages disagree, the disagreement is recorded as an anomaly and carried forward — it is not averaged, guessed, or quietly dropped. Human-facing course codes are assignments, never identity.

Entity	Meaning	Must not contain
Course	Persistent canonical academic entity	semester, instructor, room
CurriculumRelation	A course's placement/status/credits in one curriculum version	section, instructor, schedule
Offering	A time-bound delivery of a course	copied canonical title/credits

This is a clean successor project. umutseve4/eko-rasathane remains an immutable legacy/reference repository; its application code and history are never imported or executed here.

Verify

Requires Node.js 22 or newer. The dependency graph is locked.

npm ci --ignore-scripts
npm run verify
npm run test:browser-smoke

The standard verification gate includes type checking, build, M0/M1/M2 domain tests, materializer safety tests, fixture integrity, environment determinism, legacy isolation, renderer regressions, and real-Chromium DOM/WebGL smoke tests.

What is deliberately not here

Scraping, databases, user accounts, and LLM/RAG integration are not implemented.

Full M3 remains open. Broad cross-browser and assistive-technology certification, production-scale performance, disposal-throw resilience, and continuously current public provenance availability are not claimed. The exact-merge Pages result is point-in-time evidence, not universal production-readiness certification.

---

Engineering record

M1 — Source-backed BUÜ snapshot

M1 pins the 2025–2026 BUÜ Economics curriculum and timetable at legacy commit db8d52f0b29d712c34e8b7487e2299ce9f75c266.

• 144 curriculum relations: 41 required and 103 elective.
• 164 source offerings: 83 spring, 81 fall, 108 first education, 56 second education.
• Reconciliation: 129 mapped, 15 mapped-with-anomaly, 0 ambiguous, 20 unmatched.
• Unmatched offerings receive timetable-derived Course identities; no fake curriculum relation is invented.
• Duplicate codes, suspicious spellings, the 241 versus 240 ECTS conflict, and printed-code mismatches remain explicit anomalies.
• Fixture lengths and SHA-256 values are checked against the committed manifest.

M2a — Deterministic curriculum graph core

M2a compiles the source-backed institution, Econometrics program, 2025–2026 curriculum, and its curriculum courses into versioned artifacts.

• Every 144 CurriculumRelation record is projected exactly once with semester, status, ECTS, optional pool, and provenance.
• Insertion-only evolution accepts a complete previous CurriculumCompilation; the previous graph, AnchorManifestV1, and RouteManifestV1 are hash-bound and must have exact node-set parity.
• Retained anchors, slots, coordinates, and canonical /v1/nodes/{persistent-id} URLs remain stable. Prior course-assignment records are immutable and cumulative; aliases are derived exactly and deterministically from that cumulative assignment history.
• RouteManifestV1 derives canonical /v1/nodes/{persistent-id} URLs from stable identity; course codes are aliases only.
• Input ordering and locale cannot alter canonical output.
• Duplicate/dangling identities, malformed or mixed provenance, unknown anomaly references, silent relation drift, prior-node removal, internally inconsistent predecessor state, and enforceable continuity violations are fatal. The compiler validates continuity relative to the supplied predecessor; without an external trust anchor it does not authenticate that predecessor or detect a coordinated full-bundle rewrite.
• Known offering-only anomalies remain valid snapshot evidence but are excluded from the M2a curriculum graph.
• Topics and laboratories are intentionally deferred until pinned evidence exists; renderer and deployment remain outside M2a.

See docs/adr/0002-m2a-curriculum-graph-core.md for the exact boundary.

M3a — Semantic projection contract

M3a establishes a renderer-neutral parity gate before browser rendering begins.

• project() returns the versioned ProjectionManifestV2; the legacy ProjectionManifest construction shape remains source-compatible.
• Three.js payload, SVG projection and HTML fallback expose identical sorted semantic node/edge identifiers.
• A separate focusOrderNodeIds contract makes keyboard and screen-reader traversal deterministic even if Scene IR arrays arrive in a different order.
• HTML navigation links resolve to balanced node detail targets and relation endpoints remain traversable.
• SVG nodes expose ordered list semantics, position-aware accessible labels and keyboard focus without an ancestor img role hiding descendants from the accessibility tree.
• Duplicate node identifiers and invalid or duplicate focus orders fail closed before any projection is emitted.

M3b — Injected browser preparation/mount boundary

M3b adds a dependency-free boundary between projection manifests and an injected browser host.

• HTML/SVG content is prepared off-target through an injected DOM port; Three JSON is parsed and validated before an injected Three preparation port is called.
• Schema, sorted/unique semantic membership, focus-order parity and prepared metadata are validated before target mutation.
• Pre-commit failures do not invoke the target. After all checks pass, the adapter makes exactly one replaceChildren() commit attempt.
• If the injected target mutates and then throws, rollback is outside the adapter contract.
• Port-produced root nodes remain a trusted-port boundary; their semantic metadata is runtime-validated.

M3c–M3e — Concrete parsing and trusted semantic parity

• An allow-listed DOM adapter parses generated HTML/SVG into detached content and rejects active or unexpected structure before mount.
• A real headless Chromium smoke covers parser behavior, hostile-label escaping, namespace correctness, semantic parity and exact mutation counts.
• Manifest and prepared node/edge descriptors are independently reconstructed and compared before target mutation.

M3f — Bounded Three.js/WebGL vertical slice

M3f adds an exact-pinned three@0.185.1 adapter without claiming a production renderer.

• Canonical Three DTOs are validated and prepared off-target into a detached scene.
• A deterministic 320×240, one-frame WebGL render preserves semantic node/edge descriptors and focus order.
• GPU geometries, materials and renderer resources are disposed on covered success and preparation-failure paths; disposal-throw resilience is not yet claimed.
• The canvas is aria-hidden="true"; accessible semantics remain the responsibility of the equivalent HTML/SVG surfaces.
• A real Chromium/SwiftShader smoke verifies 2 nodes, 1 edge, WebGL context health, NO_ERROR, forced-renderer rejection and 0 target mounts on preparation failure.

M3g–M3i — Bounded browser and production closure

• The production browser bridge, deterministic fallback orchestration, bounded keyboard node selection, and responsive application shell are implemented and tested.
• GitHub Pages build, deploy, exact-source artifact parity, and four canonical production-browser cases passed at exact merge SHA a01ef2ef06fb820dc60c67a31beda1fb306a1bf0.
• Canonical visual acceptance is 4/4, responsive acceptance is 10/10, and the bounded rubric result is 40/40.
• Visual CI uses an intentional deterministic system-fallback font policy; issue #36 was closed by PR #45.
• Repository-wide enumeration after that closure returned exactly 0 open issues.

M3j — Product-first observatory slice (implemented, pending merge)

M3j replaces the hard-coded 5-node/4-edge demonstration in site/app.js with the real compiled curriculum artifact and builds the observatory interaction layer on top of it. The compiler, provenance contracts, stable identities, Scene IR, fail-closed browser boundaries, and accessibility parity are unchanged.

• The production scene is generated by scripts/generate-browser-artifact.mjs from the existing compiler output. No second curriculum parser and no parallel graph model were introduced, and the UI consumes the artifact's semantic identities without altering them.
• src/three-runtime.ts owns a single requestAnimationFrame lifecycle and validates the injected handle, so the site cannot hand it a partially constructed renderer. There is exactly one loop and one listener set.
• src/frame-scheduler.ts adds a visibility-aware frame watchdog whose timeout is injected rather than hard-coded, so a backgrounded tab is no longer misread as a stalled renderer.
• src/three-viewport-lifecycle.ts handles responsive resize and device-pixel-ratio changes; src/three-focus-target.ts provides fit-to-graph, reset-view and bounded zoom; src/three-selection-projection.ts maps selection onto scene objects without bypassing the validated selection contract; src/direct-relations.ts resolves direct incoming/outgoing relations deterministically for highlighting.
• Course search by code or title is case-insensitive with deterministic ordering. The node inspector displays only metadata and provenance actually present and shows an explicit unavailable state instead of inventing values.
• The semantic HTML/SVG surface keeps full parity: visible focus, Enter/Space selection, Escape clear, keyboard-navigable search results, and no canvas-only information. prefers-reduced-motion is honored.

M3j is implemented and green in CI but is not yet merged to main, so it carries no exact-merge verification SHA. A transient PIXEL_EVIDENCE_RENDER_TIMEOUT may be publishable shortly after startup when the initial inspector reset arms the recorder without a following invalidation; each later arm clears the prior dataset and timer, but this has not been directly observed.

Pixel-level render evidence

The previous browser smoke asserted the runtime's own renderedFrames counter. That proves scheduling, not pixels — the counter increments while the canvas stays black. src/pixel-evidence.ts closes the gap by reading the drawing buffer back and comparing frames within a single run.

• No golden checksums are stored. They drift across Chrome, ANGLE, SwiftShader, antialiasing and DPR, and the resulting flakiness trains reviewers to ignore the signal. Three same-run guarantees are load-bearing instead: render causality, blank-frame difference, and determinism across repeats.
• Verdicts are ordered so the most specific failure wins: CONTEXT_LOST, EMPTY_VIEWPORT, RENDER_TIMEOUT, NO_RENDER, BUFFER_LENGTH, READBACK_BLOCKED, SENTINEL_COLLISION, SENTINEL_INTACT, BLANK_FRAME, NONDETERMINISTIC, GL_ERROR, then PIXEL_EVIDENCE_OK.
• The sentinel check is supporting rather than load-bearing, because production uses preserveDrawingBuffer: false and the browser may discard the buffer after compositing.

This oracle has demonstrated that it can fail. Its first CI run rejected the build with PIXEL_EVIDENCE_BUFFER_LENGTH:changed=0/59392; 59392 = 256 × 232 showed that a responsive resize between arming and rendering had changed the drawing buffer, so baseline and frame described different geometries. It was corrected with a bounded re-arm, not by tolerating mismatched buffer lengths — that tolerance is the exact defect class the module exists to remove.