…re-swap (#1054)

SHIP-TWO-001 spec v2.52.0 → v2.53.0: GATE-APR-PROV-004 (AC-SHIP1-009)
flipped PARTIAL_ALGORITHM_LEVEL → DISCHARGED on noah-Lambda-Vector
RTX 4090 via live `apr stamp` re-stamping of the canonical teacher
artifact. First MODEL-1 PARTIAL → DISCHARGED of the cycle.

Discharge mechanism:
1. Backed up canonical lambda-labs staging artifact:
     /mnt/nvme-raid0/models/ship-two-001/qwen2.5-coder-7b-instruct-q4k.apr
   → .pre-stamp.bak.apr
2. Ran `apr stamp` (PR #1050 helper) with:
     --license Apache-2.0
     --data-source huggingface.co/Qwen/Qwen2.5-Coder-7B-Instruct
     --data-license Apache-2.0
3. Replaced canonical with stamped variant.
4. `apr inspect` and `apr inspect --json` now emit non-(missing)
   string values for all three provenance fields.
5. `apr diff <pre> <post> --json` confirms tensor byte-identity:
   structural=0, tensor=0, quantization=0, metadata=0; only
   file_size category shows the +128 byte delta from the 3 metadata
   strings. apr stamp's "tensor bytes preserved verbatim" honored.

Pre-stamp:  sha256=0a854098...c73666, size=8035635524
Post-stamp: sha256=a394dd28...0ddeb28, size=8035635652 (+128 bytes)

Files changed:
- contracts/apr-provenance-v1.yaml v1.1.0 → v1.2.0
  GATE-APR-PROV-004 discharge_status: PARTIAL_ALGORITHM_LEVEL → DISCHARGED
  discharged_evidence block records: host, binary, pre/post sha256,
  size delta, provenance fields, tooling chain (apr stamp PR #1050 /
  apr inspect PR #889 / apr diff), tensor byte-identity proof,
  backup path, and three deferred irreversible-shipped follow-ups
  (apr-leaderboard checkpoint update, HF Hub re-upload, publish-
  manifest sha256 bump) — all require explicit user authorization
  per `feedback_compute_pre_authorized.md` and stay deferred.

- crates/aprender-core/src/format/tests/provenance_tests.rs
  Drift-prevention test updated: assertion flipped from
  PARTIAL_ALGORITHM_LEVEL → DISCHARGED, added two new assertions
  on discharged_evidence.host == "noah-Lambda-Vector" and
  discharged_evidence.evidence_discharged_by_live[non-empty].

- docs/specifications/aprender-train/ship-two-models-spec.md
  v2.52.0 → v2.53.0 with full atomic-next-action narrative.
  Coverage tally: 39 PARTIAL + 6 DISCHARGED → 38 + 7.

- evidence/ship-009-full-discharge/discharge-evidence-v1.json (NEW)
  Self-contained JSON evidence document; all sha256s, sizes,
  command lines, host pin, binary path, deferred-actions list,
  and discharge rationale captured for future audit.

Verification (all green):
  - cargo test -p aprender-core --lib falsify_ship_009 — 2/2 passes
  - cargo test -p aprender-core --lib provenance — 81/81 passes
  - pv lint contracts/apr-provenance-v1.yaml — PASS

Methodological note: this PR uses `apr stamp` + `apr inspect` +
`apr diff` exclusively (no `eprintln!`, no bash workaround scripts)
per `feedback_apr_trace_not_eprintln.md` and
`feedback_pv_not_bash_for_contracts.md`. The dogfooded toolchain
proved end-to-end on the 7.5 GiB shipped teacher.

Memory: feedback_compute_pre_authorized.md (compute lanes
pre-authorized), feedback_post_publish_qa_required.md (HF re-upload
requires post-publish QA — deferred to user-confirmed PR),
reference_lambda_labs_host_locality.md (this host IS lambda-labs).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>

…AT-690 P0-K extension) (#1757)

Extends the existing `apr stamp` command (PR #1050 — provenance fields)
to also patch HF identity + architecture family slug in place. Unblocks
in-place salvage of pre-P0-K APR checkpoints whose architecture stamps
were corrupted by the §82 P0-H fallback.

## Background — SPEC §86 root cause

The §85 P2-E live run produced 50 epoch checkpoints (~125 GB total) at
best val_loss=4.6227. P2-G v1 attempted to resume from P2-E ep49 and
the init eval surfaced val_loss=8.60 — proof that --init silently
failed to load the trained weights. Root cause: P2-E's init APR
pre-dates P0-K (PR #1742), so the P0-H fallback stamped
architecture="LlamaForCausalLM" into the trained checkpoint despite
the actual tensors being Qwen2-shaped. `apr pretrain --init` reads
the (wrong) architecture stamp and rejects the load.

## What this PR adds

Three new CLI flags on `apr stamp`:

- `--hf-architecture <CLASS>` (e.g. Qwen2ForCausalLM) — the HF class
  name. PMAT-690 P0-K's upstream stamp.
- `--hf-model-type <SLUG>` (e.g. qwen2) — config.json::model_type.
- `--architecture <SLUG>` (e.g. qwen2) — the lowercase family slug
  that `apr pretrain --init` reads for arch dispatch. **This is the
  load-bearing field** for §86 salvage — patching just hf_architecture
  alone won't unblock `apr pretrain --init`.

The existing `--license` / `--data-source` / `--data-license` flags
are unchanged. The patch struct's `has_any()` gate now accepts any
combination of the six fields; at least one must be specified or the
stamp is rejected up-front.

## Operator workflow for §86 salvage

```bash
# Patch a pre-P0-K Qwen2-actual-Llama-stamped checkpoint in place
apr stamp /path/to/p2e-epoch-049.apr \
  --architecture qwen2 \
  --hf-architecture Qwen2ForCausalLM \
  --hf-model-type qwen2 \
  -o /path/to/p2e-epoch-049-stamped.apr

# Verify
apr inspect /path/to/p2e-epoch-049-stamped.apr --quality --json | jq .quality
# breakdown.hf_identity should jump 0 → 20

# Now usable as init for resume training:
apr pretrain --init /path/to/p2e-epoch-049-stamped.apr ...
```

## Discharges

- §86 SPEC amendment (`evidence/p2g-2026-05-17/section-86-draft.md`) —
  workaround #2 (in-place restamp)
- Salvages ~125 GB of pre-P0-K P2-E checkpoints without a 53-min retrain
- Establishes a pattern for in-place metadata patching that future
  spec amendments can build on (e.g., a `--name` / `--description`
  extension for model card metadata)

## Tests

- 2 new unit tests in `aprender-core::format::v2::stamp` (extends 6
  → 6, existing tests adjusted for new struct fields via Default)
- 2 new CLI tests in `apr-cli::commands::stamp` (extends 5 → 7):
  - `stamp_p0k_recovers_pre_p0k_apr_identity` — full §86 use case
  - `stamp_p0k_partial_hf_architecture_only` — verifies field
    independence (stamp one without touching others)
- All 5,944 apr-cli lib tests pass — 0 regressions
- All 13,800 aprender-core lib tests pass — 0 regressions

## Refs

- PR [#1742](#1742) (PMAT-690 P0-K base)
- PR [#1750](#1750) (P3-A `apr inspect --quality` scorer)
- PR [#1754](#1754) (SPEC §85 P2-E findings)
- PR #1050 (the original `apr stamp` PR — this extends it)
- `docs/specifications/aprender-train/ship-model-2-spec.md §86` (forthcoming)
- `evidence/p2g-2026-05-17/section-86-draft.md` (root cause + workaround analysis)
- `memory/feedback_upstream_metadata_masquerade.md` (methodology #33)

Co-authored-by: Claude Opus 4.7 <noreply@anthropic.com>