docs: require editor rebuild and clarify baseline evidence for 214

agents/herb/work/queue-214/BUILD.md

@@ -18,7 +18,7 @@ returns raw when the sig matches. The vendored text writer escapes brackets
 to pass while dirty-block output escapes a wikilink. This is a source-based
 hypothesis, not a measured result. Both outcomes are in DESIGN.md.
 
-Authored, unrun: the pinned-bundle measurement; eight fixture round-trips;
+Authored, unrun: the pinned-bundle measurement; ten fixture round-trips;
 three browser regressions; inert wikilink schema/tokenizer/serializer. The
 schema includes headings, and front matter remains raw. The serializer
 validates its spelling before bypassing escaping. HTML/entity-like targets
@@ -50,3 +50,21 @@ The whole suite gate and any unexpected failure use mos-0823's stop rule.
 
 Proposed SESSIONS text for Sage's post-253 doc sweep (do not append here):
 2026-10-22 | Herb (gpt-6.1-sol, f6cf4287) | row214 C2-11a editor wikilinks authoring | On herb/row214 at aca16404c, authored baseline round-trip measurement, designs for equal/unequal results, inert inline node and regression tests under sage-2794/Q220. Claim, runs and pushes held while253 owns the slot; measurement and test results unavailable.
+
+## Filbert static design/path review accepted, R1 and R2 required
+
+Review at2026-10-22T16:43:35Z read dee9f3d8d's packet only, no product or
+runs. R1 is now in the plan: set MOSAIC_REQUIRE_EDITOR_BUILD=1 on focused
+provenance and whole webui runs, grep ^# skip plus TAP/spec skip directives,
+and name every skip. Missing/wrong pinned esbuild must fail, not skip.
+R2: baseline no-edit roundTrips are expected to pass. They test retention
+of raw bytes and are not red evidence for the node. Only the baseline
+same-block structural/edit regression is expected red.
+
+Two added fixtures cover a reference-definition collision and an atom
+inside ordinary link text, taking the planned file to10 no-edit tests and
+3 browser tests. The explicit & exclusion preserves the existing escaped
+HTML/entity writer for dirty blocks; Q&A stays text and is a known limit.
+Measurement VM setup matches loadEditor. Browser TMPDIR must use the short
+non-/tmp scratch root. Sweep Node/Chromium after mutant/timeout and at clear.
+All remain authored and unrun while253 owns the slot.

agents/herb/work/queue-214/DESIGN.md

@@ -59,7 +59,7 @@ No input string is parsed as HTML and embeds never load an image.
 ## Acceptance and review
 
 The measurement JSON goes in BUILD.md and the final manifest packet.
-Eight fixture round-trips run with and without a final newline. A browser
+Ten fixture round-trips run with and without a final newline. A browser
 test inspects real ProseMirror atom types and attributes, edits the same
 block and reparses it, for each fixture. Two more browser tests cover
 code/escape/malformed/hostile syntax and DOM/programmatic-attribute safety.
@@ -85,3 +85,44 @@ Final gate: Filbert approves the manifest, then the whole webui suite and
 every scripts/test-*.sh on Sage's slot. Two failures stop a gate. A failure
 outside this row is reported to Sage before any rerun. Source, generated
 output, mode/hash manifest and raw granted logs identify the candidate.
+
+## Static review follow-through (Filbert, 2026-10-22T16:43:35Z)
+
+R1: the focused editor-provenance run and Sage's whole webui gate must set
+MOSAIC_REQUIRE_EDITOR_BUILD=1. A missing, wrong-version or unpinned binary
+then fails. Check every log for ^# skip, as well as TAP # SKIP directives
+and the spec reporter's skipped-test lines; record each skipped name and
+reason. A skipped rebuild is not proof of bundle reproducibility. The CSS
+output must stay byte-identical and match BUILD.json.
+
+R2: no-edit roundTrip checks are expected to pass on the baseline because
+parse sets sig=canonical and an unchanged serialise returns lead+raw. Their
+green result is compatibility evidence, never evidence that the atom was
+needed or installed. The same-block edit/structural regression is the red
+that proves the new node. The required measurement still runs and is kept.
+
+N1: bus.js checks visual mode at949 on this base and also requires
+MosaicMarkdown. The measurement uses the existing helper's bare-window VM
+shape, markdown-preview.js first, then editor.js, both from pinned Git blobs.
+
+N2: the exclusion of & and angle brackets is deliberate: the existing
+text serializer escapes entities/HTML when it rewrites a block for another
+renderer. An atom's verbatim writer must not bypass that rule, including
+for pasted/programmatic values. This keeps those targets as ordinary text;
+[[Q&A]] will still be escaped if its own block changes. It is a known
+representation limit beyond the five brief cases, not a resolver change.
+It is included among the text-only cases. Unedited bytes remain intact.
+
+N3: the reference-definition fixture [[a]] with [a]: u deliberately becomes
+one inert wikilink rather than a bracket around a reference link. Literal
+spelling and the separate definition block remain intact.
+
+N4: [x [[a]]](u) is an explicit fixture. The atom inherits the enclosing
+ordinary link mark, whose existing target gate still applies. The atom
+itself supplies no href or new click behavior; the fixture checks its
+structure and spelling before/after a same-block edit.
+
+N6: every granted browser/test process gets TMPDIR from
+mktemp -d /mnt/storage/scratch/tmp/gXXX. Never /tmp. Sweep owned Chromium
+and Node processes by cwd and the temp-root path after the mutant, after
+any timeout, and before clearing the slot. Retain/report uncertain owners.

agents/herb/work/queue-214/MANIFEST.md

@@ -7,7 +7,7 @@ unchanged. Q222's reply-limit settings belong to C2-06, not this row.
 | Path | Change |
 | --- | --- |
 | packages/webui/editor/model.mjs | inert inline atom, heading content, tokenizer rule and serializer |
-| packages/webui/tests/editor-wikilink.test.mjs | eight round-trips and three browser regressions |
+| packages/webui/tests/editor-wikilink.test.mjs | ten round-trips and three browser regressions |
 | packages/webui/tests/helpers/wikilink-cases.mjs | exact fixtures shared with measurement |
 | packages/webui/src/public/editor.js | generated by the pinned editor build, pending CLEAR |
 | packages/webui/editor/BUILD.json | generated provenance, pending CLEAR |