vision / 917a85c86ae6

add the list behavioral oracle and free-before-answer: a probe (oracle/lists_probe.c) calls the list verbs and diffs against a by-hand reference (oracle/lists_ref.c) — the 1-based read is checked at every position 1..6, plus anchors/length/for-each sum; explain memory asserted automatic (local) and explicit (escaping); the unannotated escaping list asserted SURFACED (compile fails, never silent); ASan+UBSan clean. Emitter now frees a verb's top-level heap values before a top-level answer (value computed into a temp first → a returned list element is never use-after-free), closing the early-return leak for the common list-verb shape. Full oracle green; Rungs 1-5 unaffected

dev · 5 days ago · 2026-06-22 · 368.0 KB

session: lists rung · agent: claude-opus-4-8

parent: 93353a846b1a