P-037 A2.2-4R6b: F-MEMBER repaired; the member bodies the legacy pass never visits reach the orphan carrier

A2.2-4's completeness oracle found (formal note §10.6.10, F-MEMBER, §10.1
case 3) that expression-bodied members, methods of struct, record, record
struct and interface types, and property accessors reach neither carrier:
the legacy pass enumerates ClassDeclarationSyntax members that are
BaseMethodDeclarationSyntax with a block body, and the three A2.2-3P
admission gates sit inside that loop. The owner ruled it a production
completeness repair under one boundary: the legacy `functions[]` universe
does not grow.

The repair keeps that boundary. An independent enumeration,
GuardedOnlyMembers, walks every TypeDeclarationSyntax and yields exactly the
bodies the legacy loop does not read — an expression-bodied method-like
member of a class, every method-like member of a struct, record, record
struct or interface, every accessor with a body, an expression-bodied
property or indexer (its getter) — after each tree's legacy class loop, so
every earlier orphan keeps its place. GuardedOnlyAdmission records, as
symbols, the same owned-parameter predicate and the same candidate families
in the same order as the legacy loop admits for its own methods (by-value
owned disposable parameters; a local created by `new`, rented from a pool,
opened by a BCL factory, rented from a MemoryPool, or returned by a
first-party disposable factory; a `using` local only as a MemoryPool owner);
BuildGuardedFacts takes any member declaration and any body (a block or an
arrow clause; MethodSymbolOf resolves an expression-bodied property to its
getter) and the result rides in `guarded_functions[]`. No legacy structure,
gate or lowering input changes, and no member enumerated here ever had a
`functions[]` record, so the carrier's identity refusal cannot fire.
Lambdas and local functions stay the separate nested-function gap.

Measured on this tree: the 53 census shapes read byte-identical and two new
shapes pin the repair (orphan-expression-bodied, orphan-struct-method); the
probe re-measured into a2_2_4r6_observed moves no row while its helper
Box.op_Implicit, an expression-bodied conversion operator, now carries its
object_creation fact as an orphan and the probe reads RED-free; the six
member-* witnesses read green with carrier guarded_functions; the oracle
raises no RED over any input, so the findings ledger's expected_red is
empty and F-MEMBER moves to `closed`; the inertness control and the local
rehearsal against the T before-takes are unchanged on both engines. Same
instrument, no new T/R.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QfeUtLRm6KFRWcTGQZxQQb

Author: claude

corpus/p037-hostile/cases/member-accessor.cs

@@ -1,5 +1,5 @@
 // GENERATED by scripts/p037_hostile_census.py (P-037 A2.2-4 hostile census); do not edit.
-// member kind: a property setter passing its `value` parameter; accessors are not BaseMethodDeclarationSyntax and are never visited (finding F-MEMBER)
+// member kind: a property setter passing its `value` parameter; accessors are not BaseMethodDeclarationSyntax and are never visited (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)
 using System;
 using System.IO;
 using System.Collections.Generic;

corpus/p037-hostile/cases/member-default-interface-method.cs

@@ -1,5 +1,5 @@
 // GENERATED by scripts/p037_hostile_census.py (P-037 A2.2-4 hostile census); do not edit.
-// member kind: a default interface method with a body; the legacy pass enumerates class declarations only, and the root cause is the enumeration, not struct-ness (finding F-MEMBER)
+// member kind: a default interface method with a body; the legacy pass enumerates class declarations only, and the root cause is the enumeration, not struct-ness (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)
 using System;
 using System.IO;
 using System.Collections.Generic;

corpus/p037-hostile/cases/member-expression-bodied.cs

@@ -1,5 +1,5 @@
 // GENERATED by scripts/p037_hostile_census.py (P-037 A2.2-4 hostile census); do not edit.
-// member kind: an expression-bodied method with an owned parameter; the legacy pass visits block bodies only, so neither carrier sees the call (finding F-MEMBER)
+// member kind: an expression-bodied method with an owned parameter; the legacy pass visits block bodies only, so neither carrier sees the call (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)
 using System;
 using System.IO;
 using System.Collections.Generic;

corpus/p037-hostile/cases/member-record-struct.cs

@@ -1,5 +1,5 @@
 // GENERATED by scripts/p037_hostile_census.py (P-037 A2.2-4 hostile census); do not edit.
-// member kind: a method of a record struct; neither a class declaration nor a record class (finding F-MEMBER)
+// member kind: a method of a record struct; neither a class declaration nor a record class (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)
 using System;
 using System.IO;
 using System.Collections.Generic;

corpus/p037-hostile/cases/member-record.cs

@@ -1,5 +1,5 @@
 // GENERATED by scripts/p037_hostile_census.py (P-037 A2.2-4 hostile census); do not edit.
-// member kind: a method of a record; the legacy pass enumerates class declarations only (finding F-MEMBER)
+// member kind: a method of a record; the legacy pass enumerates class declarations only (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)
 using System;
 using System.IO;
 using System.Collections.Generic;

corpus/p037-hostile/cases/member-struct.cs

@@ -1,5 +1,5 @@
 // GENERATED by scripts/p037_hostile_census.py (P-037 A2.2-4 hostile census); do not edit.
-// member kind: a method of a struct; the legacy pass enumerates class declarations only (finding F-MEMBER)
+// member kind: a method of a struct; the legacy pass enumerates class declarations only (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)
 using System;
 using System.IO;
 using System.Collections.Generic;

corpus/p037-hostile/expected.json

@@ -319,7 +319,7 @@
   "member-accessor": {
    "member": "H_member_accessor.M",
    "member_override": ".set_Slot",
-   "carrier": "none",
+   "carrier": "guarded_functions",
    "occurrences": [
     {
      "symbol": "value",
@@ -329,16 +329,13 @@
      "expected": "param"
     }
    ],
-   "red": {
-    "occurrence_not_captured": 1
-   },
-   "finding": "F-MEMBER",
-   "why": "member kind: a property setter passing its `value` parameter; accessors are not BaseMethodDeclarationSyntax and are never visited (finding F-MEMBER)"
+   "red": {},
+   "why": "member kind: a property setter passing its `value` parameter; accessors are not BaseMethodDeclarationSyntax and are never visited (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)"
   },
   "member-default-interface-method": {
    "member": "H_member_default_interface_method.M",
    "member_override": ".IHolder.M",
-   "carrier": "none",
+   "carrier": "guarded_functions",
    "occurrences": [
     {
      "symbol": "r",
@@ -348,15 +345,12 @@
      "expected": "param"
     }
    ],
-   "red": {
-    "occurrence_not_captured": 1
-   },
-   "finding": "F-MEMBER",
-   "why": "member kind: a default interface method with a body; the legacy pass enumerates class declarations only, and the root cause is the enumeration, not struct-ness (finding F-MEMBER)"
+   "red": {},
+   "why": "member kind: a default interface method with a body; the legacy pass enumerates class declarations only, and the root cause is the enumeration, not struct-ness (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)"
   },
   "member-expression-bodied": {
    "member": "H_member_expression_bodied.M",
-   "carrier": "none",
+   "carrier": "guarded_functions",
    "occurrences": [
     {
      "symbol": "r",
@@ -366,11 +360,8 @@
      "expected": "param"
     }
    ],
-   "red": {
-    "occurrence_not_captured": 1
-   },
-   "finding": "F-MEMBER",
-   "why": "member kind: an expression-bodied method with an owned parameter; the legacy pass visits block bodies only, so neither carrier sees the call (finding F-MEMBER)"
+   "red": {},
+   "why": "member kind: an expression-bodied method with an owned parameter; the legacy pass visits block bodies only, so neither carrier sees the call (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)"
   },
   "member-local-function": {
    "member": "H_member_local_function.M",
@@ -389,7 +380,7 @@
   "member-record": {
    "member": "H_member_record.M",
    "member_override": ".Holder.M",
-   "carrier": "none",
+   "carrier": "guarded_functions",
    "occurrences": [
     {
      "symbol": "r",
@@ -399,16 +390,13 @@
      "expected": "param"
     }
    ],
-   "red": {
-    "occurrence_not_captured": 1
-   },
-   "finding": "F-MEMBER",
-   "why": "member kind: a method of a record; the legacy pass enumerates class declarations only (finding F-MEMBER)"
+   "red": {},
+   "why": "member kind: a method of a record; the legacy pass enumerates class declarations only (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)"
   },
   "member-record-struct": {
    "member": "H_member_record_struct.M",
    "member_override": ".Holder.M",
-   "carrier": "none",
+   "carrier": "guarded_functions",
    "occurrences": [
     {
      "symbol": "r",
@@ -418,16 +406,13 @@
      "expected": "param"
     }
    ],
-   "red": {
-    "occurrence_not_captured": 1
-   },
-   "finding": "F-MEMBER",
-   "why": "member kind: a method of a record struct; neither a class declaration nor a record class (finding F-MEMBER)"
+   "red": {},
+   "why": "member kind: a method of a record struct; neither a class declaration nor a record class (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)"
   },
   "member-struct": {
    "member": "H_member_struct.M",
    "member_override": ".Holder.M",
-   "carrier": "none",
+   "carrier": "guarded_functions",
    "occurrences": [
     {
      "symbol": "r",
@@ -437,11 +422,8 @@
      "expected": "param"
     }
    ],
-   "red": {
-    "occurrence_not_captured": 1
-   },
-   "finding": "F-MEMBER",
-   "why": "member kind: a method of a struct; the legacy pass enumerates class declarations only (finding F-MEMBER)"
+   "red": {},
+   "why": "member kind: a method of a struct; the legacy pass enumerates class declarations only (F-MEMBER, repaired in A2.2-4R6: the orphan carrier holds the fact)"
   },
   "pw-ctor-array-params-orphan-local": {
    "member": "H_pw_ctor_array_params_orphan_local.M",

corpus/p037-relevance/oracle_findings.json

@@ -1,24 +1,8 @@
 {
   "schema": "p037-oracle-findings/1",
   "why": "Every RED the completeness oracle (frontend/roslyn/OwnSharp.Oracle) is EXPECTED to raise, tied to a finding classified by docs/notes/p037-formal-kernel.md \u00a710.1. An input absent from expected_red must be RED-free; an input present must raise exactly these kinds and counts. A finding closes only by a ruling or a separately classified change that removes its RED, and the entry with it.",
-  "findings": {
-    "F-MEMBER": {
-      "class": "case 3",
-      "title": "member bodies the legacy pass never visits: expression-bodied members, methods of struct and record types, property accessors",
-      "evidence": "Program.cs enumerates ClassDeclarationSyntax only and, inside it, BaseMethodDeclarationSyntax with a block Body; the three A2.2-3P admission gates sit inside that loop, so these members reach neither functions[] nor guarded_functions[]. Witnessed by the probe (Box.op_Implicit, an expression-bodied conversion operator) and by four hostile cases.",
-      "status": "open: a census finding; carrying these members in the orphan carrier is a production change to be classified on its own",
-      "red": "occurrence_not_captured"
-    }
-  },
-  "expected_red": {
-    "probe": {
-      "red": {
-        "occurrence_not_captured": 1
-      },
-      "finding": "F-MEMBER",
-      "member": "Probe.Box.op_Implicit"
-    }
-  },
+  "findings": {},
+  "expected_red": {},
   "closed": {
     "F-SHADOW": {
       "class": "case 1",
@@ -54,6 +38,13 @@
       "evidence": "`Holder(MemoryStream r) : base(r, true)` passes the owned parameter into a really invoked constructor's declared ordinal 0, the same ownership edge object_creation was added for; the frozen vocabulary has no call_kind for a ConstructorInitializerSyntax site, so no fact exists and the oracle reads the occurrence as unclassified. Ruled in A2.2-4R4 to be a fact shape (call_kind constructor_initializer; site the initializer; callee the target constructor's {Type}..ctor key; sig its canonical signature; arguments bound to the target constructor's declared ordinals; first_party by declaring syntax; the same value-flow and binding machinery), landing in A2.2-4R5. Witnessed by the hostile case vocab-constructor-initializer.",
       "status": "closed: A2.2-4R5. call_kind constructor_initializer; the initializer's argument syntax is visited for nested call sites too; three hostile witnesses and the census shape sidecar-ctorinit-base are green; the probe row CtorInit reads orphan_call:constructor_initializer.",
       "red": "unclassified_argument_shape:constructor_initializer"
+    },
+    "F-MEMBER": {
+      "class": "case 3",
+      "title": "member bodies the legacy pass never visits: expression-bodied members, methods of struct and record types, property accessors",
+      "evidence": "Program.cs enumerates ClassDeclarationSyntax only and, inside it, BaseMethodDeclarationSyntax with a block Body; the three A2.2-3P admission gates sit inside that loop, so these members reach neither functions[] nor guarded_functions[]. Witnessed by the probe (Box.op_Implicit, an expression-bodied conversion operator) and by four hostile cases.",
+      "status": "closed: A2.2-4R6. An independent guarded-only member enumeration (expression-bodied members of a class, every method-like member of a struct, record, record struct or interface, property and indexer accessors) feeds BuildGuardedFacts and the orphan carrier; the legacy enumeration and functions[] are untouched. Six hostile witnesses and the probe's Box.op_Implicit read green; lambdas and local functions stay the separate nested-function gap.",
+      "red": "occurrence_not_captured"
     }
   }
 }