n_samples = 128
rtol = 1e-4
atol = 1e-6
branch = linear-pipeline (inlined from lithos-oracle/oracle.py)
search space = (token order) × (start input) × (per-slot operand source)
acceptance = single interpretation consistent across all 128 samples
false-completion = bounded by ((nin · |srcs|^nslots) · 2) / 2^(128·prec_bits)
scope
certified : cold-path forward map per cell, c = clamp(μ + σ⊙(V_d·clamp(z)))
(4 atoms: denorm, affine_pt, clamp_pt, dot8)
NOT certified: stateful IIR (biquad poles), oscillator phase accumulator,
noise generators, plate reverb delay lines, the 22-row sweep
and staging logic. These sit outside the oracle's decidable
domain by construction (see WHERE-WE-ARE.md).