Merge pull request #10 from bdbrown4/claude/test-wsk42i

agent/hotpath_agent/harness.py

@@ -1,13 +1,21 @@
 """Client for harnessd — the agent's only door to the trust layer.
 
-Spawns the Rust daemon and speaks one JSON object per line over its
+Two transports:
-stdio. The client is deliberately dumb: no retries that could double-
+- Unix socket (production/SPEC §10): if HOTPATH_HARNESS_SOCKET is set,
-apply a patch, no local fallbacks that could fabricate evidence.
+  connect to a daemon owned by the trusted uid. The agent process runs
+  unprivileged and cannot write the repo except through this door.
+- Spawned stdio subprocess (dev fallback): same uid, defense-in-depth
+  only — the filesystem boundary does not hold in this mode.
+
+The client is deliberately dumb: no retries that could double-apply a
+patch, no local fallbacks that could fabricate evidence.
 """
 
 from __future__ import annotations
 
 import json
+import os
+import socket
 import subprocess
 from typing import Any
 
@@ -18,6 +26,14 @@ class HarnessError(RuntimeError):
 
 class HarnessClient:
     def __init__(self, repo_root: str, binary: str = "target/debug/harnessd"):
+        sock_path = os.environ.get("HOTPATH_HARNESS_SOCKET")
+        self._proc: subprocess.Popen[str] | None = None
+        self._sock: socket.socket | None = None
+        if sock_path:
+            self._sock = socket.socket(socket.AF_UNIX, socket.SOCK_STREAM)
+            self._sock.connect(sock_path)
+            self._io = self._sock.makefile("rw", encoding="utf-8", newline="\n")
+        else:
             self._proc = subprocess.Popen(
                 [binary],
                 cwd=repo_root,
@@ -27,18 +43,28 @@ class HarnessClient:
             )
 
     def call(self, op: str, **kwargs: Any) -> dict[str, Any]:
-        assert self._proc.stdin and self._proc.stdout
+        payload = json.dumps({"op": op, **kwargs}) + "\n"
-        self._proc.stdin.write(json.dumps({"op": op, **kwargs}) + "\n")
+        if self._sock is not None:
+            self._io.write(payload)
+            self._io.flush()
+            line = self._io.readline()
+        else:
+            assert self._proc and self._proc.stdin and self._proc.stdout
+            self._proc.stdin.write(payload)
             self._proc.stdin.flush()
             line = self._proc.stdout.readline()
         if not line:
-            raise HarnessError("harnessd exited")
+            raise HarnessError("harnessd connection closed")
         resp = json.loads(line)
         if not resp.get("ok"):
             raise HarnessError(resp.get("error", "unknown harness error"))
         return resp["result"]
 
     def close(self) -> None:
+        if self._sock is not None:
+            self._io.close()
+            self._sock.close()
+        if self._proc is not None:
             if self._proc.stdin:
                 self._proc.stdin.close()
             self._proc.wait(timeout=10)

agent/hotpath_agent/loop.py

@@ -36,15 +36,14 @@ HARNESS_TOOLS = [
 ]
 
 # Built-in tools we deny at the SDK layer. This is DEFENSE IN DEPTH, not the
-# trust boundary. SPEC §10's real boundary is OS-level process/user isolation:
+# trust boundary. SPEC §10's real boundary is OS-level isolation, shipped in
-# harnessd runs as a separate process the agent can't bypass, target code runs
+# scripts/agent-isolated.sh: this whole process tree runs either inside a
-# in a no-net container. In THIS dev container the nested agent runs as root
+# mount namespace with the repo read-only and CAP_SYS_ADMIN dropped, or as
-# under a parent Claude Code session, so neither --dangerously-skip-permissions
+# the unprivileged hpagent user — verified by `just isolation-check`. Even
-# nor a can_use_tool callback reliably gates built-ins (settings inherited from
+# if the nested CLI reaches a shell despite this list (settings inherited
-# the parent session shadow them). We enumerate what we can; production runs the
+# from a parent session can shadow SDK gating), repo writes fail at the OS.
-# agent process without host-shell capability at all. What holds regardless:
+# What holds regardless: propose_patch is the only harness-mediated write
-# propose_patch is the only harness-mediated write path (path-allowlist + git
+# path (path-allowlist + git apply), and the ledger is append-only.
-# apply), and the ledger is append-only (mutation-refusing triggers).
 BUILTIN_TOOLS_DENIED = [
     "Bash", "Read", "Write", "Edit", "Glob", "Grep",
     "WebSearch", "WebFetch", "Task", "TodoWrite",
@@ -76,13 +75,20 @@ async def run_attempt(target: str, run_id: str, max_turns: int, repo_root: str)
     task = (
         f"Perform ONE optimization attempt on target '{target}'. You have NO shell, file, or "
         f"web tools — only the seven mcp__harness__ tools. Do not attempt any other tool.\n"
-        f"1. read_ledger to see attempted classes; read_profile for hotspots.\n"
+        f"1. read_ledger for the attempt history (class, hotspot, hypothesis, verdict per "
-        f"2. Pick the cheapest UNTRIED playbook class whose preconditions the profile "
+        f"prior attempt); read_profile for hotspots (includes cache-miss and branch-miss "
-        f"satisfies; read_playbook for it.\n"
+        f"columns from cache simulation).\n"
+        f"2. Pick the cheapest playbook class whose preconditions the profile satisfies AND "
+        f"whose (hotspot, class, hypothesis) would be materially NEW — an attempted class "
+        f"may be re-entered with a different hotspot or a genuinely different mechanism, "
+        f"but never re-submit a hypothesis equivalent to one already in the ledger; "
+        f"read_playbook for it.\n"
         f"3. Read the relevant source with read_target_source — for large files pass "
         f"offset/limit and page through in windows (do NOT attempt any shell). State your "
         f"hypothesis, then propose_patch (unified diff, a/ b/ prefixes, paths relative to the "
-        f"target workspace root).\n"
+        f"target workspace root, trailing newline required). Each proposal is STANDALONE — "
+        f"the workspace resets to pristine before every apply, so always submit the complete "
+        f"patch, never an increment on a prior proposal.\n"
         f"4. run_verdict with run_id '{run_id}', the class number, and the hotspot string. "
         f"It launches a multi-minute pipeline and returns immediately.\n"
         f"5. Poll read_verdict('{run_id}') until it returns a verdict (not a 'running' status). "

agent/hotpath_agent/mcp_server.py

@@ -50,9 +50,12 @@ def read_target_source(target: str, path: str, offset: int = 0, limit: int = 400
 
 @mcp.tool()
 def propose_patch(target: str, diff: str, hypothesis: str) -> str:
-    """Submit a unified git diff (a/ b/ prefixes, paths relative to the target workspace)
+    """Submit a unified git diff (a/ b/ prefixes, paths relative to the target
-    plus the hypothesis it tests. The harness applies it only after a path-allowlist
+    workspace, MUST end with a trailing newline) plus the hypothesis it tests.
-    check. Returns a patch_id, or an error string if refused."""
+    Each proposal is STANDALONE: the workspace is reset to pristine before the
+    diff is applied, so always submit the complete patch — never an increment
+    on top of an earlier proposal. The harness applies it only after a
+    path-allowlist check. Returns a patch_id, or an error string if refused."""
     return harness.propose_patch(target, diff, hypothesis)
 
 

crates/harnessd/src/main.rs

@@ -10,11 +10,24 @@ use anyhow::{anyhow, ensure, Result};
 use serde_json::{json, Value};
 use sha2::{Digest, Sha256};
 use std::io::{BufRead, Write};
+use std::os::unix::net::UnixListener;
 use std::path::{Component, Path};
 use std::process::Command;
+use std::sync::Mutex;
+
+/// Serializes mutating ops (git apply, pending writes) across socket
+/// connections; reads don't need it but the cost is nil at one agent.
+static HANDLE_LOCK: Mutex<()> = Mutex::new(());
 
 fn main() -> Result<()> {
     let root = std::env::current_dir()?.canonicalize()?;
+    let args: Vec<String> = std::env::args().collect();
+    if let Some(i) = args.iter().position(|a| a == "--socket") {
+        let path = args
+            .get(i + 1)
+            .ok_or_else(|| anyhow!("--socket requires a path"))?;
+        return serve_socket(&root, Path::new(path));
+    }
     let stdin = std::io::stdin();
     let mut stdout = std::io::stdout().lock();
     for line in stdin.lock().lines() {
@@ -22,16 +35,76 @@ fn main() -> Result<()> {
         if line.trim().is_empty() {
             continue;
         }
-        let resp = match handle(&root, &line) {
+        let resp = respond(&root, &line);
-            Ok(v) => json!({"ok": true, "result": v}),
-            Err(e) => json!({"ok": false, "error": e.to_string()}),
-        };
         writeln!(stdout, "{resp}")?;
         stdout.flush()?;
     }
     Ok(())
 }
 
+/// SPEC §10 socket mode: harnessd runs as the trusted uid and listens on a
+/// Unix socket; the agent process runs as an unprivileged user whose only
+/// write path into the repo is this daemon. Socket permissions (owner/group/
+/// mode) are set by the supervisor script that starts us.
+fn serve_socket(root: &Path, sock: &Path) -> Result<()> {
+    if let Some(dir) = sock.parent() {
+        std::fs::create_dir_all(dir)?;
+    }
+    let _ = std::fs::remove_file(sock);
+    let listener = UnixListener::bind(sock)?;
+    eprintln!("harnessd listening on {}", sock.display());
+    for conn in listener.incoming() {
+        let stream = match conn {
+            Ok(s) => s,
+            Err(e) => {
+                eprintln!("accept error: {e}");
+                continue;
+            }
+        };
+        let root = root.to_path_buf();
+        std::thread::spawn(move || {
+            let reader = match stream.try_clone() {
+                Ok(s) => std::io::BufReader::new(s),
+                Err(_) => return,
+            };
+            let mut writer = stream;
+            for line in reader.lines() {
+                let Ok(line) = line else { break };
+                if line.trim().is_empty() {
+                    continue;
+                }
+                let resp = respond(&root, &line);
+                if writeln!(writer, "{resp}").is_err() {
+                    break;
+                }
+            }
+        });
+    }
+    Ok(())
+}
+
+fn respond(root: &Path, line: &str) -> Value {
+    // read_verdict long-polls the ledger (read-only) and must not hold
+    // the lock that serializes mutating ops while it sleeps.
+    let is_read_verdict = serde_json::from_str::<Value>(line)
+        .ok()
+        .and_then(|v| {
+            v.get("op")
+                .and_then(Value::as_str)
+                .map(|o| o == "read_verdict")
+        })
+        .unwrap_or(false);
+    let _guard = if is_read_verdict {
+        None
+    } else {
+        Some(HANDLE_LOCK.lock().unwrap_or_else(|p| p.into_inner()))
+    };
+    match handle(root, line) {
+        Ok(v) => json!({"ok": true, "result": v}),
+        Err(e) => json!({"ok": false, "error": e.to_string()}),
+    }
+}
+
 /// Single-quote a string for safe embedding in a generated shell script.
 fn shq(s: &str) -> String {
     format!("'{}'", s.replace('\'', "'\\''"))
@@ -84,7 +157,14 @@ fn handle(root: &Path, line: &str) -> Result<Value> {
             // Read-only surface over the append-only DB.
             let ledger = ledger::Ledger::open(&root.join("results/ledger.sqlite"))?;
             let classes = ledger.attempted_classes(t)?;
-            Ok(json!({"attempted_playbook_classes": classes, "total_attempts": ledger.count()?}))
+            let history = ledger.attempt_history(t)?;
+            Ok(json!({
+                "attempted_playbook_classes": classes,
+                "attempts": history,
+                "total_attempts": ledger.count()?,
+                "note": "a class may be re-entered with a materially NEW hypothesis; \
+                         never duplicate a (hotspot, class, hypothesis) that has a verdict",
+            }))
         }
         "read_playbook" => {
             let class = match req.get("class") {
@@ -142,6 +222,13 @@ fn handle(root: &Path, line: &str) -> Result<Value> {
             let diff = field(&req, "diff")?;
             let hypothesis = field(&req, "hypothesis")?;
             check_target(t)?;
+            // git rejects a diff without a final newline with an opaque
+            // "corrupt patch" — say it plainly (phase2-comrak-004 burned
+            // several turns rediscovering this).
+            ensure!(
+                diff.ends_with('\n'),
+                "diff must end with a trailing newline (git would report 'corrupt patch' at EOF)"
+            );
             // Allowlist: every path named by the diff must be a safe
             // relative path (the git -C below roots them in the target
             // workspace; nothing outside it is reachable).
@@ -158,18 +245,51 @@ fn handle(root: &Path, line: &str) -> Result<Value> {
                 );
             }
             let ws = root.join(format!("targets/{t}/workspace"));
-            let mut check = Command::new("git")
+            // Every proposal stands alone: reset the workspace to HEAD
-                .args(["-C", ws.to_str().unwrap(), "apply", "--check", "-"])
+            // first so probe/iteration patches cannot accumulate into a
+            // tested tree the ledger's patch field doesn't describe
+            // (phase2-comrak-004 audit finding).
+            ensure!(
+                Command::new("git")
+                    .args(["-C", ws.to_str().unwrap(), "checkout", "--", "."])
+                    .status()?
+                    .success(),
+                "workspace reset failed"
+            );
+            ensure!(
+                Command::new("git")
+                    .args(["-C", ws.to_str().unwrap(), "clean", "-fdq"])
+                    .status()?
+                    .success(),
+                "workspace clean failed"
+            );
+            let run_git_apply = |check: bool| -> Result<std::process::Output> {
+                let mut args = vec!["-C", ws.to_str().unwrap(), "apply"];
+                if check {
+                    args.push("--check");
+                }
+                args.push("-");
+                let mut child = Command::new("git")
+                    .args(&args)
                     .stdin(std::process::Stdio::piped())
+                    .stderr(std::process::Stdio::piped())
                     .spawn()?;
-            check.stdin.take().unwrap().write_all(diff.as_bytes())?;
+                child.stdin.take().unwrap().write_all(diff.as_bytes())?;
-            ensure!(check.wait()?.success(), "diff does not apply cleanly");
+                Ok(child.wait_with_output()?)
-            let mut apply = Command::new("git")
+            };
-                .args(["-C", ws.to_str().unwrap(), "apply", "-"])
+            let checked = run_git_apply(true)?;
-                .stdin(std::process::Stdio::piped())
+            ensure!(
-                .spawn()?;
+                checked.status.success(),
-            apply.stdin.take().unwrap().write_all(diff.as_bytes())?;
+                "diff does not apply cleanly against the pristine workspace \
-            ensure!(apply.wait()?.success(), "git apply failed");
+                 (proposals are standalone; prior proposals were reset): {}",
+                String::from_utf8_lossy(&checked.stderr).trim()
+            );
+            let applied = run_git_apply(false)?;
+            ensure!(
+                applied.status.success(),
+                "git apply failed: {}",
+                String::from_utf8_lossy(&applied.stderr).trim()
+            );
             let patch_id = format!("{:x}", Sha256::digest(diff.as_bytes()))[..12].to_string();
             let pending = root.join("results/pending");
             std::fs::create_dir_all(&pending)?;
@@ -244,11 +364,21 @@ fn handle(root: &Path, line: &str) -> Result<Value> {
         }
         "read_verdict" => {
             let run_id = field(&req, "run_id")?;
+            // Long-poll: the pipeline runs for minutes and the MCP transport
+            // caps a tool call at 60s. Waiting ~45s server-side per poll cuts
+            // the agent's turn burn ~15x versus instant "running" replies.
+            let deadline = std::time::Instant::now() + std::time::Duration::from_secs(45);
+            loop {
                 let ledger = ledger::Ledger::open(&root.join("results/ledger.sqlite"))?;
-            match ledger.verdict_summary(run_id)? {
+                if let Some(v) = ledger.verdict_summary(run_id)? {
-                Some(v) => Ok(v),
+                    return Ok(v);
-                None => Ok(json!({"status": "running",
+                }
-                                   "note": "no ledger row yet; the pipeline is still building/benching"})),
+                drop(ledger);
+                if std::time::Instant::now() >= deadline {
+                    return Ok(json!({"status": "running",
+                                     "note": "no ledger row yet; the pipeline is still building/benching — poll again"}));
+                }
+                std::thread::sleep(std::time::Duration::from_secs(3));
             }
         }
         other => Err(anyhow!(

crates/ledger/src/lib.rs

@@ -165,6 +165,27 @@ impl Ledger {
         Ok(rows.collect::<Result<Vec<_>, _>>()?)
     }
 
+    /// Per-attempt history for a target: class, hotspot, hypothesis,
+    /// verdict. The agent's anti-duplicate memory at hypothesis
+    /// granularity — a class may be re-entered with a materially new
+    /// hypothesis, but never the same (hotspot, class, hypothesis).
+    pub fn attempt_history(&self, target: &str) -> Result<Vec<serde_json::Value>, LedgerError> {
+        let mut stmt = self.conn.prepare(
+            "SELECT run_id, playbook_class, hotspot, hypothesis, verdict \
+             FROM attempts WHERE target = ?1 ORDER BY rowid",
+        )?;
+        let rows = stmt.query_map([target], |r| {
+            Ok(serde_json::json!({
+                "run_id": r.get::<_, String>(0)?,
+                "playbook_class": r.get::<_, u8>(1)?,
+                "hotspot": r.get::<_, String>(2)?,
+                "hypothesis": r.get::<_, String>(3)?,
+                "verdict": r.get::<_, String>(4)?,
+            }))
+        })?;
+        Ok(rows.collect::<Result<Vec<_>, _>>()?)
+    }
+
     /// Read-only verdict summary for one run — the agent's only window
     /// onto a completed attempt (harnessd `read_verdict`). Returns the
     /// verdict plus the bench CIs; never enough to game, since the row

docs/infra.md

@@ -11,7 +11,38 @@ repo's CI cannot provide. Status by requirement:
 | Environment noise measured | ✅ (measured, likely fails bars) | `runner-calibration` CI job, artifact per run |
 | Profiling | ⚠️ software `cpu-clock` only (VM PMU usually absent) | `perf-probe` CI job reports what works |
 | Pinned cores, governor, SMT/turbo control | ❌ shared VM | **bench-metal box (below)** |
-| Separate-uid read-only trust layer | ❌ | bench-metal box setup |
+| Separate-uid read-only trust layer | ✅ shipped | `scripts/agent-isolated.sh` + `just isolation-check` (below) |
+
+## OS-level agent isolation (SPEC §10) — shipped
+
+`scripts/agent-isolated.sh` launches one unattended attempt with the
+agent process tree behind an OS boundary; `just isolation-check`
+verifies the boundary from the agent's side (19 negative/positive
+checks, both modes). harnessd runs OUTSIDE the boundary as the trusted
+uid, serving its seven ops on a Unix socket (`harnessd --socket`) — the
+agent's only write path into the repo.
+
+Two modes (`HOTPATH_ISOLATION`):
+
+- **`mountns` (default in this container).** The agent tree runs uid 0
+  inside a private mount namespace with the repo bind-mounted
+  read-only, `CAP_SYS_ADMIN`/`CAP_SYS_PTRACE` dropped from the bounding
+  set. Verified refused: repo writes (EROFS), forged ledger INSERT,
+  trust-binary replacement, `mount -o remount,rw`, and userns re-entry
+  to undo the mount. Chosen because the nested CLI's auth is bound to
+  the parent session's uid — no credentials are copied anywhere.
+- **`user` (bench-metal shape).** The agent runs as unprivileged
+  `hpagent`; the repo is root-owned with no world-writable paths (the
+  launcher refuses to start otherwise). Verified refused: all of the
+  above plus running the `verdict` binary directly. Requires the agent
+  user to bring its own API credentials; a parent session's root-owned
+  auth is deliberately not copied across the boundary.
+
+Residual (both modes, this container): the agent tree can still read
+the repo (by design — it needs source), reach the network through the
+container's egress proxy, and signal same-uid processes in `mountns`
+mode. The bench-metal `user` mode plus no-net target containers remains
+the production shape.
 
 ## The bench-metal box (human setup, ~15 min + account)
 

justfile

@@ -47,3 +47,12 @@ verdict target candidate run_id class hypothesis hotspot *flags:
         --candidate-bin "{{candidate}}" --run-id "{{run_id}}" \
         --playbook-class {{class}} --hypothesis "{{hypothesis}}" \
         --hotspot "{{hotspot}}" {{flags}}
+
+# One unattended agent attempt behind the SPEC §10 OS boundary:
+# harnessd (trusted uid) on a Unix socket, agent loop as user hpagent.
+agent-attempt target run_id max_turns="40":
+    sh scripts/agent-isolated.sh {{target}} {{run_id}} {{max_turns}}
+
+# Verify the OS boundary from the agent user's side (negative + positive)
+isolation-check:
+    sh scripts/isolation-check.sh

results/comrak/hotspots.txt

@@ -1,40 +1,93 @@
 --------------------------------------------------------------------------------
-Profile data file 'results/comrak/callgrind.out' (creator: callgrind-3.22.0)
+Profile data file 'results/comrak/callgrind-cache.out' (creator: callgrind-3.22.0)
 --------------------------------------------------------------------------------
-I1 cache: 
+I1 cache: 32768 B, 64 B, 8-way associative
-D1 cache: 
+D1 cache: 32768 B, 64 B, 8-way associative
-LL cache: 
+LL cache: 35651584 B, 64 B, 17-way associative
-Timerange: Basic block 0 - 196578070
+Timerange: Basic block 0 - 196577507
 Trigger: Program termination
-Profiled target:  targets/comrak/workspace/target/release/comrak (PID 17601, part 1)
+Profiled target:  targets/comrak/workspace/target/release/comrak (PID 15172, part 1)
-Events recorded:  Ir
+Events recorded:  Ir Dr Dw I1mr D1mr D1mw ILmr DLmr DLmw Bc Bcm Bi Bim
-Events shown:     Ir
+Events shown:     Ir Dr Dw I1mr D1mr D1mw ILmr DLmr DLmw Bc Bcm Bi Bim
-Event sort order: Ir
+Event sort order: Ir Dr Dw I1mr D1mr D1mw ILmr DLmr DLmw Bc Bcm Bi Bim
-Thresholds:       99
+Thresholds:       97 0 0 0 0 0 0 0 0 0 0 0 0
 Include dirs:     
 User annotated:   
 Auto-annotation:  on
 
 --------------------------------------------------------------------------------
-Ir                   
+Ir                   Dr                   Dw                   I1mr               D1mr               D1mw               ILmr           DLmr               DLmw             Bc                   Bcm                Bi                 Bim                
 --------------------------------------------------------------------------------
-883,766,827 (100.0%)  PROGRAM TOTALS
+883,763,413 (100.0%) 207,318,878 (100.0%) 126,935,453 (100.0%) 3,000,233 (100.0%) 8,276,981 (100.0%) 2,660,635 (100.0%) 6,331 (100.0%) 1,254,757 (100.0%) 834,215 (100.0%) 162,190,890 (100.0%) 8,293,863 (100.0%) 7,743,929 (100.0%) 2,916,494 (100.0%)  PROGRAM TOTALS
 
 --------------------------------------------------------------------------------
-Ir                   file:function
+Ir                  Dr                  Dw                  I1mr             D1mr               D1mw             ILmr         DLmr             DLmw             Bc                  Bcm                Bi                 Bim                 file:function
 --------------------------------------------------------------------------------
-88,282,747 ( 9.99%)  ./malloc/./malloc/malloc.c:_int_malloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
+88,282,747 ( 9.99%) 15,161,332 ( 7.31%) 10,846,319 ( 8.54%) 110,614 ( 3.69%)   273,016 ( 3.30%) 433,764 (16.30%) 126 ( 1.99%)      23 ( 0.00%) 138,027 (16.55%) 16,944,752 (10.45%)   656,090 ( 7.91%)         .                  .           ./malloc/./malloc/malloc.c:_int_malloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
-60,568,128 ( 6.85%)  ./malloc/./malloc/malloc.c:_int_free [/usr/lib/x86_64-linux-gnu/libc.so.6]
+60,568,128 ( 6.85%) 16,122,636 ( 7.78%)  6,880,485 ( 5.42%)  56,877 ( 1.90%)   123,854 ( 1.50%)      55 ( 0.00%)  15 ( 0.24%)  31,853 ( 2.54%)       0          11,314,120 ( 6.98%)   647,338 ( 7.81%)         .                  .           ./malloc/./malloc/malloc.c:_int_free [/usr/lib/x86_64-linux-gnu/libc.so.6]
-58,911,428 ( 6.67%)  ???:comrak::parser::inlines::Subject::parse_inline [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+58,911,428 ( 6.67%) 18,983,759 ( 9.16%)  2,330,770 ( 1.84%)      63 ( 0.00%)   141,596 ( 1.71%)       0           37 ( 0.58%) 118,651 ( 9.46%)       0          17,414,106 (10.74%)   196,661 ( 2.37%)   152,518 ( 1.97%)    76,001 ( 2.61%)  ???:comrak::parser::inlines::Subject::parse_inline [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-57,026,217 ( 6.45%)  ???:comrak::parser::Parser::process_line [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+57,026,217 ( 6.45%)  8,299,499 ( 4.00%)  6,362,169 ( 5.01%)  33,693 ( 1.12%)       419 ( 0.01%)       1 ( 0.00%)  73 ( 1.15%)       7 ( 0.00%)       0           7,891,753 ( 4.87%)   372,126 ( 4.49%) 1,370,916 (17.70%) 1,276,403 (43.76%)  ???:comrak::parser::Parser::process_line [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-45,107,073 ( 5.10%)  ???:core::str::converts::from_utf8 [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+45,107,073 ( 5.10%)  6,727,739 ( 3.25%)     14,388 ( 0.01%)      32 ( 0.00%)   172,892 ( 2.09%)       2 ( 0.00%)  15 ( 0.24%) 170,841 (13.62%)       0          15,130,253 ( 9.33%)   721,185 ( 8.70%)         .                  .           ???:core::str::converts::from_utf8 [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-41,962,238 ( 4.75%)  ???:<comrak::plugins::syntect::SyntectAdapter as comrak::adapters::SyntaxHighlighterAdapter>::write_highlighted [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+41,962,238 ( 4.75%)  8,133,524 ( 3.92%)  2,677,147 ( 2.11%) 249,668 ( 8.32%) 2,604,182 (31.46%)   7,860 ( 0.30%)  40 ( 0.63%)     680 ( 0.05%)       3 ( 0.00%) 10,331,083 ( 6.37%) 1,300,080 (15.68%)   252,687 ( 3.26%)    11,528 ( 0.40%)  ???:<comrak::plugins::syntect::SyntectAdapter as comrak::adapters::SyntaxHighlighterAdapter>::write_highlighted [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-34,662,512 ( 3.92%)  ./malloc/./malloc/malloc.c:malloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
+34,662,512 ( 3.92%)  9,411,891 ( 4.54%)  5,058,635 ( 3.99%)       8 ( 0.00%)   166,523 ( 2.01%)  11,565 ( 0.43%)   8 ( 0.13%)      10 ( 0.00%)       5 ( 0.00%)  5,934,080 ( 3.66%)   278,213 ( 3.35%)         .                  .           ./malloc/./malloc/malloc.c:malloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
-33,819,139 ( 3.83%)  ???:comrak::parser::Parser::parse [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+33,819,139 ( 3.83%)  7,862,705 ( 3.79%)  9,879,672 ( 7.78%)     100 ( 0.00%)   629,812 ( 7.61%)  33,131 ( 1.25%) 100 ( 1.58%) 151,904 (12.11%)   4,793 ( 0.57%)  4,565,759 ( 2.82%)   173,065 ( 2.09%)   282,120 ( 3.64%)    69,702 ( 2.39%)  ???:comrak::parser::Parser::parse [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-30,762,786 ( 3.48%)  ./malloc/./malloc/malloc.c:malloc_consolidate [/usr/lib/x86_64-linux-gnu/libc.so.6]
+30,762,786 ( 3.48%)  6,914,039 ( 3.33%)  5,365,600 ( 4.23%)  28,066 ( 0.94%)   317,538 ( 3.84%)   7,837 ( 0.29%)  15 ( 0.24%)   1,498 ( 0.12%)   1,043 ( 0.13%)  6,631,541 ( 4.09%)   342,425 ( 4.13%)         .                  .           ./malloc/./malloc/malloc.c:malloc_consolidate [/usr/lib/x86_64-linux-gnu/libc.so.6]
-27,843,363 ( 3.15%)  ???:syntect::parsing::parser::ParseState::parse_line [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+27,843,363 ( 3.15%)  8,569,068 ( 4.13%)  6,550,216 ( 5.16%) 495,961 (16.53%)    68,687 ( 0.83%) 137,766 ( 5.18%)  95 ( 1.50%)       2 ( 0.00%)       0           3,319,794 ( 2.05%)   113,475 ( 1.37%)   654,543 ( 8.45%)    34,627 ( 1.19%)  ???:syntect::parsing::parser::ParseState::parse_line [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-27,272,869 ( 3.09%)  ./string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:__memcpy_avx_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
+27,272,853 ( 3.09%)  7,819,460 ( 3.77%)  6,055,142 ( 4.77%)  22,591 ( 0.75%)   182,784 ( 2.21%) 932,789 (35.06%)  21 ( 0.33%)  38,840 ( 3.10%) 640,166 (76.74%)  7,527,406 ( 4.64%) 1,020,870 (12.31%)         .                  .           ./string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:__memcpy_avx_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
-26,634,752 ( 3.01%)  ???:comrak::parser::Parser::open_new_blocks [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+26,634,752 ( 3.01%)  5,801,344 ( 2.80%)  3,987,988 ( 3.14%)  41,920 ( 1.40%)       424 ( 0.01%)   2,287 ( 0.09%)  94 ( 1.48%)       6 ( 0.00%)   2,261 ( 0.27%)  3,296,026 ( 2.03%)    86,374 ( 1.04%)   465,843 ( 6.02%)   454,341 (15.58%)  ???:comrak::parser::Parser::open_new_blocks [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-22,049,414 ( 2.49%)  ./malloc/./malloc/malloc.c:free [/usr/lib/x86_64-linux-gnu/libc.so.6]
+22,049,414 ( 2.49%)  7,874,780 ( 3.80%)  4,724,874 ( 3.72%)      33 ( 0.00%)   147,870 ( 1.79%)      23 ( 0.00%)   7 ( 0.11%)  16,047 ( 1.28%)       0           2,362,446 ( 1.46%)     7,500 ( 0.09%)         .                  .           ./malloc/./malloc/malloc.c:free [/usr/lib/x86_64-linux-gnu/libc.so.6]
-21,200,547 ( 2.40%)  ???:jetscii::simd::Bytes::find [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+21,200,547 ( 2.40%)  3,738,530 ( 1.80%)  1,563,105 ( 1.23%)  74,657 ( 2.49%)   320,259 ( 3.87%)       0           12 ( 0.19%) 145,883 (11.63%)       0           3,742,609 ( 2.31%)   285,846 ( 3.45%)   102,525 ( 1.32%)         5 ( 0.00%)  ???:jetscii::simd::Bytes::find [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
-20,549,182 ( 2.33%)  ???:alloc::raw_vec::RawVecInner<A>::finish_grow [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+20,549,182 ( 2.33%)  3,391,931 ( 1.64%)  4,239,979 ( 3.34%)  65,654 ( 2.19%)       143 ( 0.00%)   3,117 ( 0.12%)  47 ( 0.74%)       0                5 ( 0.00%)  1,894,056 ( 1.17%)    42,449 ( 0.51%)   424,024 ( 5.48%)    83,894 ( 2.88%)  ???:alloc::raw_vec::RawVecInner<A>::finish_grow [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+18,865,498 ( 2.13%)  3,835,440 ( 1.85%)  1,355,673 ( 1.07%)  37,908 ( 1.26%)     9,482 ( 0.11%)       0            9 ( 0.14%)       4 ( 0.00%)       0           5,169,671 ( 3.19%)   714,235 ( 8.61%)   133,279 ( 1.72%)    12,316 ( 0.42%)  ???:<syntect::escape::Escape as core::fmt::Display>::fmt [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+17,221,788 ( 1.95%)  4,813,738 ( 2.32%)  3,400,854 ( 2.68%) 196,395 ( 6.55%)   400,340 ( 4.84%)  67,499 ( 2.54%)  98 ( 1.55%) 126,457 (10.08%)       1 ( 0.00%)  1,379,802 ( 0.85%)    27,286 ( 0.33%)   574,011 ( 7.41%)   189,820 ( 6.51%)  ???:comrak::html::format_node_default [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+16,466,261 ( 1.86%)  3,159,376 ( 1.52%)  1,805,636 ( 1.42%)  58,505 ( 1.95%)    24,077 ( 0.29%)     159 ( 0.01%)  27 ( 0.43%)   1,253 ( 0.10%)       2 ( 0.00%)  3,382,159 ( 2.09%)    11,925 ( 0.14%)         .                  .           ./malloc/./malloc/malloc.c:realloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
+16,055,275 ( 1.82%)  3,262,848 ( 1.57%)  2,036,668 ( 1.60%)  32,190 ( 1.07%)    70,452 ( 0.85%)  24,160 ( 0.91%)  20 ( 0.32%)     408 ( 0.03%)  20,671 ( 2.48%)  2,424,937 ( 1.50%)    25,757 ( 0.31%)         .                  .           ./malloc/./malloc/malloc.c:_int_realloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
+11,172,305 ( 1.26%)  2,452,804 ( 1.18%)  1,163,275 ( 0.92%)  99,116 ( 3.30%)    41,131 ( 0.50%)     896 ( 0.03%)  10 ( 0.16%)  41,110 ( 3.28%)       1 ( 0.00%)  1,865,601 ( 1.15%)   174,075 ( 2.10%)    61,225 ( 0.79%)         1 ( 0.00%)  ???:<core::str::pattern::CharSearcher as core::str::pattern::Searcher>::next_match [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+10,712,772 ( 1.21%)  4,588,108 ( 2.21%)  2,549,120 ( 2.01%)  11,505 ( 0.38%)    31,512 ( 0.38%)       0            2 ( 0.03%)       0                0             511,672 ( 0.32%)    16,386 ( 0.20%)   508,592 ( 6.57%)         2 ( 0.00%)  ???:<fmt2io::Writer<W> as core::fmt::Write>::write_str [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 9,926,098 ( 1.12%)  2,417,045 ( 1.17%)  1,896,295 ( 1.49%)  14,659 ( 0.49%)    84,524 ( 1.02%)   4,228 ( 0.16%)  11 ( 0.17%)  24,372 ( 1.94%)     440 ( 0.05%)  1,657,186 ( 1.02%)    54,127 ( 0.65%)         .                  .           ./malloc/./malloc/malloc.c:_int_free_merge_chunk [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 9,036,324 ( 1.02%)  1,190,544 ( 0.57%)  1,636,986 ( 1.29%)  57,522 ( 1.92%)   241,794 ( 2.92%)  19,710 ( 0.74%)  15 ( 0.24%)  67,100 ( 5.35%)       3 ( 0.00%)  1,636,947 ( 1.01%)   119,174 ( 1.44%)         2 ( 0.00%)         2 ( 0.00%)  ???:comrak::html::format_document_with_plugins [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 9,030,451 ( 1.02%)  1,758,576 ( 0.85%)    824,384 ( 0.65%)   1,343 ( 0.04%)       163 ( 0.00%)     405 ( 0.02%)  27 ( 0.43%)       2 ( 0.00%)       0           2,525,863 ( 1.56%)    19,590 ( 0.24%)    48,475 ( 0.63%)    38,795 ( 1.33%)  ???:comrak::parser::Parser::finalize_borrowed [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 8,989,164 ( 1.02%)  3,807,286 ( 1.84%)  1,261,936 ( 0.99%)   1,855 ( 0.06%)   116,286 ( 1.40%)       0            4 ( 0.06%)      27 ( 0.00%)       0           1,916,808 ( 1.18%)   100,612 ( 1.21%)         .                  .           ./malloc/./malloc/malloc.c:unlink_chunk.isra.0 [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 7,684,630 ( 0.87%)  2,755,482 ( 1.33%)  1,243,789 ( 0.98%)       8 ( 0.00%)    31,036 ( 0.37%)       0            7 ( 0.11%)       0                0           1,086,833 ( 0.67%)    23,766 ( 0.29%)         .                  .           ???:<syntect::parsing::syntax_definition::MatchIter as core::iter::traits::iterator::Iterator>::next [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 7,504,360 ( 0.85%)  1,755,937 ( 0.85%)  1,420,699 ( 1.12%)       9 ( 0.00%)   430,234 ( 5.20%)  11,697 ( 0.44%)   9 ( 0.14%)  93,204 ( 7.43%)  11,693 ( 1.40%)  1,452,304 ( 0.90%)   114,437 ( 1.38%)         1 ( 0.00%)         1 ( 0.00%)  ???:comrak::parser::Parser::propagate_list_sourcepos [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 7,311,367 ( 0.83%)  1,622,140 ( 0.78%)  1,559,377 ( 1.23%)  34,521 ( 1.15%)    52,470 ( 0.63%)     259 ( 0.01%)   6 ( 0.09%)       7 ( 0.00%)       3 ( 0.00%)    936,596 ( 0.58%)    60,076 ( 0.72%)   169,664 ( 2.19%)    26,305 ( 0.90%)  ???:core::fmt::write [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 6,860,179 ( 0.78%)  1,911,852 ( 0.92%)  2,699,089 ( 2.13%)       7 ( 0.00%)         0              326 ( 0.01%)   7 ( 0.11%)       0                3 ( 0.00%)    449,848 ( 0.28%)       615 ( 0.01%)   112,462 ( 1.45%)         2 ( 0.00%)  ???:comrak::parser::inlines::Subject::make_inline [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 6,789,723 ( 0.77%)  1,980,340 ( 0.96%)  1,414,538 ( 1.11%)  72,325 ( 2.41%)         1 ( 0.00%)     558 ( 0.02%)  36 ( 0.57%)       0                3 ( 0.00%)    282,901 ( 0.17%)       276 ( 0.00%)         .                  .           ???:alloc::raw_vec::RawVec<T,A>::grow_one [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 6,704,848 ( 0.76%)  2,188,577 ( 1.06%)  1,726,368 ( 1.36%)       6 ( 0.00%)         0              274 ( 0.01%)   6 ( 0.09%)       0              269 ( 0.03%)    859,771 ( 0.53%)   108,431 ( 1.31%)   113,588 ( 1.47%)         1 ( 0.00%)  ???:comrak::parser::Parser::add_line [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 6,605,173 ( 0.75%)  1,445,746 ( 0.70%)    440,686 ( 0.35%)      18 ( 0.00%)       110 ( 0.00%)       0           16 ( 0.25%)       7 ( 0.00%)       0             419,068 ( 0.26%)     4,800 ( 0.06%)   408,675 ( 5.28%)   405,943 (13.92%)  ???:comrak::parser::Parser::handle_html_block [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 5,944,647 ( 0.67%)  1,200,740 ( 0.58%)  1,389,651 ( 1.09%)  13,375 ( 0.45%)    12,585 ( 0.15%)       0            8 ( 0.13%)       4 ( 0.00%)       0             466,523 ( 0.29%)    21,591 ( 0.26%)   117,663 ( 1.52%)     2,294 ( 0.08%)  ???:comrak::html::escape [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 5,932,910 ( 0.67%)  1,886,352 ( 0.91%)  1,851,838 ( 1.46%)  13,645 ( 0.45%)   780,497 ( 9.43%) 780,518 (29.34%)   3 ( 0.05%)       0                0             540,636 ( 0.33%)    21,851 ( 0.26%)         .                  .           ./string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:__memcpy_chk_avx_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 5,306,558 ( 0.60%)  1,045,870 ( 0.50%)    882,546 ( 0.70%)      12 ( 0.00%)     3,494 ( 0.04%)       0           12 ( 0.19%)   2,999 ( 0.24%)       0           1,166,088 ( 0.72%)    28,366 ( 0.34%)    54,452 ( 0.70%)         2 ( 0.00%)  ???:comrak::parser::inlines::Subject::handle_backticks [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 5,005,028 ( 0.57%)  1,437,161 ( 0.69%)    177,862 ( 0.14%)       7 ( 0.00%)   476,691 ( 5.76%)       0            7 ( 0.11%) 204,818 (16.32%)       0             937,329 ( 0.58%)     3,368 ( 0.04%)   338,712 ( 4.37%)    92,394 ( 3.17%)  ???:core::ptr::drop_in_place<alloc::vec::Vec<comrak::arena_tree::Node<core::cell::RefCell<comrak::nodes::Ast>>>> [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 4,717,574 ( 0.53%)  1,825,338 ( 0.88%)  1,117,649 ( 0.88%)     175 ( 0.01%)    20,486 ( 0.25%)      81 ( 0.00%)   7 ( 0.11%)       0                0             545,725 ( 0.34%)    13,910 ( 0.17%)         .                  .           ./malloc/./malloc/malloc.c:_int_free_maybe_consolidate [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 4,661,697 ( 0.53%)    839,429 ( 0.40%)    762,919 ( 0.60%)       8 ( 0.00%)         0                0            8 ( 0.13%)       0                0           1,161,543 ( 0.72%)    56,461 ( 0.68%)         .                  .           ???:comrak::strings::normalize_code [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 4,514,848 ( 0.51%)    987,742 ( 0.48%)    705,534 ( 0.56%)  23,081 ( 0.77%)         0                4 ( 0.00%)  16 ( 0.25%)       0                0             282,121 ( 0.17%)     2,891 ( 0.03%)         .                  .           ???:alloc::raw_vec::RawVecInner<A>::reserve::do_reserve_and_handle [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 4,221,361 ( 0.48%)  1,115,302 ( 0.54%)  1,600,195 ( 1.26%)  14,131 ( 0.47%)         0               44 ( 0.00%)   9 ( 0.14%)       0                0             388,948 ( 0.24%)     2,080 ( 0.03%)    48,476 ( 0.63%)         1 ( 0.00%)  ???:comrak::parser::Parser::add_child [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 4,202,658 ( 0.48%)    190,377 ( 0.09%)  1,620,427 ( 1.28%)   6,228 ( 0.21%)       340 ( 0.00%)  27,926 ( 1.05%)  11 ( 0.17%)       0            1,066 ( 0.13%)    756,751 ( 0.47%)     1,341 ( 0.02%)         .                  .           ./string/../sysdeps/x86_64/multiarch/memset-vec-unaligned-erms.S:__memset_avx2_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 3,721,690 ( 0.42%)    691,455 ( 0.33%)    698,793 ( 0.55%)     185 ( 0.01%)     5,138 ( 0.06%)   6,013 ( 0.23%) 172 ( 2.72%)   5,047 ( 0.40%)   5,597 ( 0.67%)    980,267 ( 0.60%)       875 ( 0.01%)       936 ( 0.01%)        20 ( 0.00%)  ???:comrak::plugins::syntect::SyntectAdapter::new [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 3,492,202 ( 0.40%)    555,444 ( 0.27%)    136,130 ( 0.11%)       6 ( 0.00%)         0                0            6 ( 0.09%)       0                0           1,094,976 ( 0.68%)    27,687 ( 0.33%)         .                  .           ???:comrak::parser::inlines::Subject::adjust_node_newlines [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 2,948,015 ( 0.33%)    926,519 ( 0.45%)    589,603 ( 0.46%)       3 ( 0.00%)         0                0            2 ( 0.03%)       0                0             505,374 ( 0.31%)    21,016 ( 0.25%)   168,458 ( 2.18%)    72,727 ( 2.49%)  ???:onig_region_free [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 2,915,325 ( 0.33%)  1,001,729 ( 0.48%)    783,207 ( 0.62%)  23,004 ( 0.77%)         0                0            2 ( 0.03%)       0                0             109,261 ( 0.07%)    29,612 ( 0.36%)   109,261 ( 1.41%)         .           ???:<alloc::string::String as core::fmt::Write>::write_str [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 2,663,823 ( 0.30%)    558,812 ( 0.27%)    669,760 ( 0.53%)   1,810 ( 0.06%)     1,478 ( 0.02%)       0            5 ( 0.08%)       1 ( 0.00%)       0             206,679 ( 0.13%)    15,567 ( 0.19%)   122,450 ( 1.58%)         1 ( 0.00%)  ???:onig_region_resize [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 2,412,668 ( 0.27%)  1,072,223 ( 0.52%)    267,557 ( 0.21%)  11,503 ( 0.38%)    54,327 ( 0.66%)  11,502 ( 0.43%)   1 ( 0.02%)       5 ( 0.00%)       0             268,222 ( 0.17%)     1,198 ( 0.01%)   268,222 ( 3.46%)         1 ( 0.00%)  ???:<comrak::html::context::Context<T> as core::fmt::Write>::write_str [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 2,362,407 ( 0.27%)          0                   0                0                  0                0            0                0                0             787,469 ( 0.49%)    15,143 ( 0.18%)         .                  .           ./malloc/./malloc/arena.c:free
+ 2,220,177 ( 0.25%)    636,832 ( 0.31%)    635,955 ( 0.50%)   3,374 ( 0.11%)        43 ( 0.00%)     807 ( 0.03%)  59 ( 0.93%)       1 ( 0.00%)       4 ( 0.00%)    250,994 ( 0.15%)       283 ( 0.00%)       245 ( 0.00%)        20 ( 0.00%)  ???:comrak::parser::Parser::resolve_reference_link_definitions [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 2,131,093 ( 0.24%)    744,774 ( 0.36%)    362,210 ( 0.29%)       5 ( 0.00%)         0                1 ( 0.00%)   5 ( 0.08%)       0                0             410,380 ( 0.25%)    31,395 ( 0.38%)         .                  .           ???:comrak::parser::Parser::handle_thematic_break [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 2,127,922 ( 0.24%)    621,126 ( 0.30%)    517,607 ( 0.41%) 176,183 ( 5.87%)    17,779 ( 0.21%)  48,799 ( 1.83%)  27 ( 0.43%)       1 ( 0.00%)       0             241,546 ( 0.15%)    11,529 ( 0.14%)    34,506 ( 0.45%)         1 ( 0.00%)  ???:match_at [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 1,735,787 ( 0.20%)    654,381 ( 0.32%)    404,988 ( 0.32%)      40 ( 0.00%)     1,385 ( 0.02%)       0            4 ( 0.06%)       3 ( 0.00%)       0             156,323 ( 0.10%)        19 ( 0.00%)    12,789 ( 0.17%)    12,789 ( 0.44%)  ???:comrak::parser::Parser::handle_setext_heading [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 1,656,414 ( 0.19%)    221,190 ( 0.11%)    191,127 ( 0.15%)  36,246 ( 1.21%)    11,852 ( 0.14%)       0           16 ( 0.25%)       1 ( 0.00%)       0             206,805 ( 0.13%)    16,816 ( 0.20%)         .                  .           ???:<core::hash::sip::Hasher<S> as core::hash::Hasher>::write [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 1,598,778 ( 0.18%)    575,100 ( 0.28%)    322,056 ( 0.25%)  80,859 ( 2.70%)    17,552 ( 0.21%)       0           14 ( 0.22%)       0                0             253,044 ( 0.16%)    31,045 ( 0.37%)         .                  .           ???:syntect::parsing::parser::ParseState::push_meta_ops [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 1,590,572 ( 0.18%)    429,468 ( 0.21%)    755,306 ( 0.60%)      72 ( 0.00%)       300 ( 0.00%)       0           46 ( 0.73%)       2 ( 0.00%)       0             146,492 ( 0.09%)     5,272 ( 0.06%)     1,571 ( 0.02%)       160 ( 0.01%)  ???:comrak::parser::inlines::Subject::process_emphasis [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 1,590,373 ( 0.18%)    565,587 ( 0.27%)    335,425 ( 0.26%)  76,211 ( 2.54%)    22,241 ( 0.27%)       0           22 ( 0.35%)       2 ( 0.00%)       0             207,036 ( 0.13%)     2,176 ( 0.03%)    23,004 ( 0.30%)     9,440 ( 0.32%)  ???:syntect::html::line_tokens_to_classed_spans::{{closure}} [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 1,575,496 ( 0.18%)    225,070 ( 0.11%)          0           11,506 ( 0.38%)         5 ( 0.00%)       0            2 ( 0.03%)       0                0             450,142 ( 0.28%)     4,351 ( 0.05%)         .                  .           ./malloc/./malloc/arena.c:realloc
+ 1,544,186 ( 0.17%)    126,056 ( 0.06%)    189,084 ( 0.15%)  40,237 ( 1.34%)         0              627 ( 0.02%)  27 ( 0.43%)       0                2 ( 0.00%)          .                  .                  .                  .           ???:core::hash::BuildHasher::hash_one [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+ 1,466,193 ( 0.17%)    301,941 ( 0.15%)    190,336 ( 0.15%)      66 ( 0.00%)     1,852 ( 0.02%)     814 ( 0.03%)  47 ( 0.74%)     114 ( 0.01%)      22 ( 0.00%)    301,881 ( 0.19%)    14,682 ( 0.18%)    12,598 ( 0.16%)         1 ( 0.00%)  ???:comrak::parser::inlines::Subject::handle_delim [/home/user/peltier.io/targets/comrak/workspace/target/release/comrak]
+
+--------------------------------------------------------------------------------
+The following files chosen for auto-annotation could not be found:
+--------------------------------------------------------------------------------
+  ./malloc/./malloc/arena.c
+  ./malloc/./malloc/malloc.c
+  ./string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S
+  ./string/../sysdeps/x86_64/multiarch/memset-vec-unaligned-erms.S
+

results/phase2/case-study-agent-loop.md

@@ -1,11 +1,14 @@
 # Phase 2 case study — the unattended agent loop
 
-**Result: the Claude Agent SDK loop ran the full profile → hypothesize →
+**Result: the Claude Agent SDK loop runs the full profile → hypothesize →
-patch → gated-verdict cycle on comrak with no human in the loop, across
+patch → gated-verdict cycle with no human in the loop, on two targets,
-multiple attempts, with ZERO false accepts. The agent twice refused to
+with ZERO false accepts — and produced its first verified auto-accepted
-fabricate a verdict it could not read back, verifying ledger integrity
+win: +10.7% median on tokei, 95% CI [+8.4%, +13.1%] (221 MB / 4360-file
-instead — exactly the anti-reward-hacking behavior SPEC §10 is designed
+pinned workload, single rayon thread, pinned core), surviving a
-to produce.**
+10,000-input differential fuzz and ASan/LSan on top of the pipeline's
+gates. The agent twice refused to fabricate a verdict it could not read
+back, verifying ledger integrity instead — exactly the
+anti-reward-hacking behavior SPEC §10 is designed to produce.**
 
 ## What runs
 
@@ -26,6 +29,51 @@ to produce.**
 | phase2-comrak-001 | 3 alloc-churn | syntect buffer `with_capacity` | rejected-bench | [0.971, 1.007] |
 | phase2-comrak-002 | 5 algorithmic | gate dead `VecDeque` build in text postprocess | rejected-bench | [0.982, 1.026] |
 | phase2-comrak-003 | 6 SIMD | hoist `^`-in-brackets check out of `find_special_char` predicate | rejected-bench | [0.970, 1.007] |
+| phase2-tokei-001 | 5 algorithmic | first-byte gate table for per-byte token matchers in `perform_multi_line_analysis` | **accepted** | **[1.084, 1.131]** |
+
+### phase2-tokei-001 — the first auto-accepted win, and its audit
+
+Running behind the OS boundary (`scripts/agent-isolated.sh`, mountns
+mode), the agent read the new cache-sim profile, saw `parse_lines` at
+55.9% of instructions / 62% of branches / 44% of branch mispredicts,
+re-entered class 5 with a hypothesis distinct from every ledger entry
+(the hypothesis-granular `read_ledger` shipped for exactly this), and
+proposed a 256-entry first-byte gate: most bytes of most lines can't
+start any quote/comment token, so five per-byte token-matcher loops
+collapse to one table load. `git apply` refused its first diff (bad
+hunk counts); it recomputed and resubmitted — the harness, not the
+agent, owns what reaches the tree.
+
+Pipeline verdict: accepted at +10.7% median, 95% CI [+8.4%, +13.1%]
+vs the pristine-rebuilt baseline (which already banks the Phase 0
+wins, so this is marginal, not cumulative, speedup). 21 turns,
+$4.61.
+
+The pipeline's auto-gates cover upstream tests + golden replay +
+bench; fuzz and sanitizers are per-attempt manual in this phase, so
+the 100% Phase 2 audit ran them by hand before counting the win:
+
+- **Differential fuzz** (`scripts/diff-fuzz-tokei.py`): 10,000 mutated
+  inputs (quote/comment/backslash-focused mutations over 400 corpus
+  seeds), pristine vs candidate, batched over 200 process pairs —
+  **0 divergences** after canonicalizing JSON output order.
+- **ASan + LSan** (nightly, patched tree): clean over the full 221 MB
+  corpus and every kept fuzz batch.
+- Mechanical re-check (`scripts/audit-attempt.py`): CI lower bound
+  1.084 ≥ 1.02 bar; patch paths inside the workspace; hypothesis
+  matches the patch; safe code only — correct auto-accept tier.
+
+**Audit finding worth keeping: raw-byte differential comparison
+overcounts.** The first fuzz runs reported 3/200 batch divergences —
+but on different batches across two identical-seed runs, and none
+reproducible. Cause: tokei's parallel directory walker
+(`ignore::WalkBuilder::build_parallel`, its own thread pool,
+unaffected by `RAYON_NUM_THREADS`) makes same-name report ordering
+timing-dependent in both binaries — benign, count-identical, present
+in the pristine baseline. The fuzzer now canonicalizes (sorts) JSON
+before comparing and stores both raw outputs on any divergence.
+Differential gates must compare semantics, not bytes, wherever the
+target itself is legitimately nondeterministic in presentation.
 
 Run 003 exercised the two shipped fixes: the agent **paged through a
 2,400-line file with `read_target_source` windows** (no shell reach this

results/phase2/transcript-tokei-001.txt

@@ -0,0 +1,22 @@
+[agent] Now let me see the outer driver `parse_lines` in `language_type.rs`.
+[agent] The hunk line counts were off. Recomputing and resubmitting:
+[agent] Patch applied — `patch_id: 4e3da7e6bd1c`. Launching the gate+bench pipeline.
+[agent] Still running. Polling again.
+[agent] **Verdict: `accepted`** — ledger row written for `phase2-tokei-001`.
+
+## Attempt summary
+
+| | |
+|---|---|
+| **Run ID** | `phase2-tokei-001` |
+| **Target / hotspot** | tokei — `LanguageType::parse_lines` 55.89% Ir / 62% branches / 44% branch-misses + `__memcmp_avx2_movbe` 9.37% Ir |
+| **Playbook class** | 5 (algorithmic — precomputed lookup table tier) |
+| **Patch** | `4e3da7e6bd1c`: 256-entry first-byte "interesting bytes" table in `SharedMatchers` (superset of all quote/comment token start+end first bytes, plus `\`), gating the five per-byte token matchers in `perform_multi_line_analysis`; `parse_context` still consulted on gated bytes so semantics are exactly preserved |
+| **Verdict** | **accepted** |
+| **Speedup (median)** | 1.1071× (~+10.7%) |
+| **Speedup 95% CI** | **[1.0836, 1.1310]** — CI lower bound +8.4%, clear of the 2% accept threshold |
+
+Measured on the tokei benchmark workload (`tokei --sort code corpora/tokei/input`), interleaved A/B vs pristine-rebuilt baseline, all equivalence gates green (upstream tests, golden replay, diff-fuzz, sanitizers — no FP/concurrency/unsafe surface touched, so no human-review routing triggered).
+
+The hypothesis predicted 5–12% median; the measured +10.7% landed inside that band. Notably, this also satisfies the outstanding Phase 2 exit criterion of at least one auto-accepted win from the unattended loop. One attempt was requested; stopping here.
+[result] turns=21 cost_usd=4.614901

results/phase2/transcript-tokei-002.txt

@@ -0,0 +1,20 @@
+[agent] The pipeline has completed and the ledger row is written. Reporting verbatim:
+
+## Verdict: `phase2-tokei-002`
+
+```
+verdict:        rejected-gate
+speedup_median: None
+speedup_ci:     None
+```
+
+**Outcome:** REJECTED at the equivalence gates. The pipeline never reached benchmarking (no speedup CI exists — and per policy, no performance number is claimed). This is a complete, valid outcome with a clean ledger row.
+
+**Attempt summary:**
+- **Hotspot:** `LanguageType::parse_lines` 43.04% Ir + `SyntaxCounter::parse_context` 12.59% Ir (per-byte `parse_context` calls on gated bytes)
+- **Class:** 5 (algorithmic, tier-2 invariant hoisting) — re-entered with a materially new mechanism vs the accepted phase2-tokei-001 gate table; classes 2/4/7 preconditions were honestly unsatisfied by the profile (allocator symbols ~4% < 5% bar; hot loop branch-bound, not memory-bound; no lock contention), and class 6 was rejected as classification-shopping since the state-machine loop can't vectorize
+- **Patch:** `3467042e690d` — skip-scan over gated bytes when `regex_cache.family()` is `None` (or Rust at non-whitespace bytes), eliminating per-byte `parse_context` calls and trim-break checks
+- **Result:** a gate (upstream tests / golden replay / diff-fuzz / sanitizers) refuted the equivalence argument. My purity proof for the skipped-byte path evidently missed a case — most plausibly in the `ended_with_comments` / all-whitespace-`break` interaction or the Rust whitespace-stop refinement. The gate did its job; the hypothesis is falsified as expressed.
+
+Per the iteration rule I am not restructuring the patch to chase the measurement — this was the one attempt requested. The ledger now records the falsified hypothesis, so a future attempt on this hotspot must bring a genuinely different mechanism (or diagnose the divergence from the gate log at `results/pending/phase2-tokei-002.log` before re-hypothesizing, counting as iteration 1 of 2).
+[result] turns=20 cost_usd=4.863955

results/tokei/hotspots.txt

@@ -1,40 +1,100 @@
 --------------------------------------------------------------------------------
-Profile data file 'results/tokei/callgrind.out' (creator: callgrind-3.22.0)
+Profile data file 'results/tokei/callgrind-cache.out' (creator: callgrind-3.22.0)
 --------------------------------------------------------------------------------
-I1 cache: 
+I1 cache: 32768 B, 64 B, 8-way associative
-D1 cache: 
+D1 cache: 32768 B, 64 B, 8-way associative
-LL cache: 
+LL cache: 35651584 B, 64 B, 17-way associative
-Timerange: Basic block 0 - 600400493
+Timerange: Basic block 0 - 300193319
 Trigger: Program termination
-Profiled target:  targets/tokei/workspace/target/release/tokei --sort code corpora/tokei/input (PID 17959, part 1)
+Profiled target:  targets/tokei/workspace/target/release/tokei --sort code corpora/tokei/input (PID 13816, part 1)
-Events recorded:  Ir
+Events recorded:  Ir Dr Dw I1mr D1mr D1mw ILmr DLmr DLmw Bc Bcm Bi Bim
-Events shown:     Ir
+Events shown:     Ir Dr Dw I1mr D1mr D1mw ILmr DLmr DLmw Bc Bcm Bi Bim
-Event sort order: Ir
+Event sort order: Ir Dr Dw I1mr D1mr D1mw ILmr DLmr DLmw Bc Bcm Bi Bim
-Thresholds:       99
+Thresholds:       97 0 0 0 0 0 0 0 0 0 0 0 0
 Include dirs:     
 User annotated:   
 Auto-annotation:  on
 
 --------------------------------------------------------------------------------
-Ir                     
+Ir                     Dr                   Dw                   I1mr               D1mr               D1mw             ILmr            DLmr            DLmw            Bc                   Bcm                Bi                 Bim              
 --------------------------------------------------------------------------------
-1,808,959,061 (100.0%)  PROGRAM TOTALS
+1,274,372,614 (100.0%) 309,077,825 (100.0%) 150,457,742 (100.0%) 1,749,899 (100.0%) 3,544,342 (100.0%) 375,891 (100.0%) 10,888 (100.0%) 20,920 (100.0%) 48,117 (100.0%) 234,950,723 (100.0%) 9,767,520 (100.0%) 8,245,447 (100.0%) 184,720 (100.0%)  PROGRAM TOTALS
 
 --------------------------------------------------------------------------------
-Ir                    file:function
+Ir                   Dr                   Dw                  I1mr             D1mr               D1mw            ILmr         DLmr            DLmw           Bc                   Bcm                Bi                 Bim              file:function
 --------------------------------------------------------------------------------
-572,758,799 (31.66%)  ???:tokei::language::syntax::SyntaxCounter::perform_multi_line_analysis [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+548,435,636 (43.04%) 132,846,352 (42.98%) 49,394,843 (32.83%)  45,338 ( 2.59%)    18,536 ( 0.52%)  9,674 ( 2.57%) 116 ( 1.07%)     39 ( 0.19%)     0          115,272,944 (49.06%) 3,420,156 (35.02%) 3,724,072 (45.17%)  4,759 ( 2.58%)  ???:tokei::language::language_type::LanguageType::parse_lines [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
-172,785,648 ( 9.55%)  ???:tokei::language::language_type::LanguageType::parse_lines [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+160,445,063 (12.59%)  40,161,280 (12.99%) 19,766,321 (13.14%)  11,013 ( 0.63%)       486 ( 0.01%)      3 ( 0.00%)  32 ( 0.29%)      1 ( 0.00%)     0           33,834,376 (14.40%) 1,461,679 (14.96%) 1,032,896 (12.53%)    311 ( 0.17%)  ???:tokei::language::syntax::SyntaxCounter::parse_context [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
-154,178,149 ( 8.52%)  ./string/../sysdeps/x86_64/multiarch/memset-vec-unaligned-erms.S:__memset_avx2_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 92,131,240 ( 7.23%)  21,374,784 ( 6.92%)  6,308,280 ( 4.19%)  14,574 ( 0.83%) 1,366,304 (38.55%)  1,580 ( 0.42%)  21 ( 0.19%)    711 ( 3.40%)     0           15,080,720 ( 6.42%)   782,402 ( 8.01%)         .               .           ???:memchr::arch::x86_64::avx2::packedpair::Finder::find_impl [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
-146,199,746 ( 8.08%)  ./string/../sysdeps/x86_64/multiarch/memcmp-avx2-movbe.S:__memcmp_avx2_movbe [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 72,750,472 ( 5.71%)  26,815,120 ( 8.68%) 12,925,816 ( 8.59%)  11,962 ( 0.68%)    13,083 ( 0.37%)  1,421 ( 0.38%)  26 ( 0.24%)      0              0           10,849,392 ( 4.62%)    74,573 ( 0.76%) 1,174,944 (14.25%) 14,563 ( 7.88%)  ???:aho_corasick::automaton::try_find_fwd [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
-104,071,008 ( 5.75%)  ???:tokei::language::syntax::SyntaxCounter::try_perform_single_line_analysis [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 45,291,861 ( 3.55%)   9,384,022 ( 3.04%)          0           14,423 ( 0.82%) 1,493,531 (42.14%)      0            6 ( 0.06%) 13,381 (63.96%)     0            5,188,747 ( 2.21%) 1,318,056 (13.49%)         .               .           ???:memchr::arch::x86_64::avx2::memchr::One::find_raw_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
- 93,030,608 ( 5.14%)  ???:memchr::arch::x86_64::avx2::packedpair::Finder::find_impl [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 27,720,640 ( 2.18%)   7,753,864 ( 2.51%)  4,849,848 ( 3.22%)   2,427 ( 0.14%)     1,988 ( 0.06%)  1,428 ( 0.38%)   4 ( 0.04%)      0              0            3,015,664 ( 1.28%)   230,894 ( 2.36%)         .               .           ???:memchr::memmem::searcher::searcher_kind_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
- 75,136,592 ( 4.15%)  ???:aho_corasick::automaton::try_find_fwd [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 27,626,392 ( 2.17%)   5,687,312 ( 1.84%)  4,896,264 ( 3.25%)   2,277 ( 0.13%)     1,397 ( 0.04%)  2,713 ( 0.72%)   3 ( 0.03%)      0              0            3,255,496 ( 1.39%)    18,544 ( 0.19%)   800,936 ( 9.71%)    102 ( 0.06%)  ???:<aho_corasick::util::prefilter::Memmem as aho_corasick::util::prefilter::PrefilterI>::find_in [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
- 71,820,456 ( 3.97%)  ./string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:__memcpy_avx_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
+ 26,582,656 ( 2.09%)   3,322,832 ( 1.08%)  9,968,496 ( 6.63%)   1,936 ( 0.11%)         0           4,413 ( 1.17%)   1 ( 0.01%)      .              .                    .                  .                  .               .           ???:memchr::arch::x86_64::memchr::memchr_raw::find_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
- 50,442,206 ( 2.79%)  ???:memchr::arch::x86_64::avx2::memchr::One::find_raw_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 22,263,784 ( 1.75%)   3,010,736 ( 0.97%)    420,728 ( 0.28%)   1,562 ( 0.09%)         0               0            5 ( 0.05%)      0              0            6,557,000 ( 2.79%)   403,768 ( 4.13%)         .               .           ???:memchr::arch::x86_64::avx2::memchr::Three::find_raw [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
- 28,664,232 ( 1.58%)  ???:memchr::memmem::searcher::searcher_kind_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 20,005,440 ( 1.57%)   3,342,584 ( 1.08%)  3,309,424 ( 2.20%)   9,887 ( 0.57%)         4 ( 0.00%)      0            4 ( 0.04%)      0              0            3,344,448 ( 1.42%)    24,635 ( 0.25%)         .               .           ???:memchr::arch::x86_64::avx2::memchr::One::find_raw [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
- 27,626,392 ( 1.53%)  ???:<aho_corasick::util::prefilter::Memmem as aho_corasick::util::prefilter::PrefilterI>::find_in [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 18,171,943 ( 1.43%)   4,122,075 ( 1.33%)          0           11,144 ( 0.64%)     8,033 ( 0.23%)      0            9 ( 0.08%)    355 ( 1.70%)     0            3,925,755 ( 1.67%)   410,582 ( 4.20%)         .               .           ./string/../sysdeps/x86_64/multiarch/memcmp-avx2-movbe.S:__memcmp_avx2_movbe [/usr/lib/x86_64-linux-gnu/libc.so.6]
- 26,582,656 ( 1.47%)  ???:memchr::arch::x86_64::memchr::memchr_raw::find_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 12,389,624 ( 0.97%)   2,219,455 ( 0.72%)  1,596,394 ( 1.06%)  81,319 ( 4.65%)    33,549 ( 0.95%) 54,429 (14.48%)  84 ( 0.77%)      3 ( 0.01%) 7,486 (15.56%)   2,421,332 ( 1.03%)   230,740 ( 2.36%)         .               .           ./malloc/./malloc/malloc.c:_int_malloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
- 22,263,784 ( 1.23%)  ???:memchr::arch::x86_64::avx2::memchr::Three::find_raw [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 11,584,340 ( 0.91%)   3,406,264 ( 1.10%)  1,550,009 ( 1.03%)  31,001 ( 1.77%)       802 ( 0.02%)  1,121 ( 0.30%)   4 ( 0.04%)      0              0            1,972,496 ( 0.84%)    84,259 ( 0.86%)    70,312 ( 0.85%)  1,650 ( 0.89%)  ???:tokei::language::language_type::LanguageType::parse_lines'2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
- 20,246,771 ( 1.12%)  ???:tokei::language::syntax::SyntaxCounter::perform_multi_line_analysis'2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 11,563,723 ( 0.91%)   3,003,356 ( 0.97%)  1,343,288 ( 0.89%)   9,283 ( 0.53%)    27,758 ( 0.78%)    138 ( 0.04%)  13 ( 0.12%)      8 ( 0.04%)     0            2,141,100 ( 0.91%)   143,048 ( 1.46%)         .               .           ./malloc/./malloc/malloc.c:_int_free [/usr/lib/x86_64-linux-gnu/libc.so.6]
- 20,005,440 ( 1.11%)  ???:memchr::arch::x86_64::avx2::memchr::One::find_raw [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 10,488,480 ( 0.82%)     699,232 ( 0.23%)  4,894,624 ( 3.25%)   1,668 ( 0.10%)         0           1,102 ( 0.29%)   3 ( 0.03%)      .              .                    .                  .                  .               .           ???:memchr::arch::x86_64::memchr::memchr3_raw::find_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 10,038,240 ( 0.79%)   2,794,944 ( 0.90%)  1,810,824 ( 1.20%)     384 ( 0.02%)        69 ( 0.00%)     33 ( 0.01%)   2 ( 0.02%)      0              0            1,048,104 ( 0.45%)    21,424 ( 0.22%)   349,368 ( 4.24%)      2 ( 0.00%)  ???:<aho_corasick::util::prefilter::StartBytesThree as aho_corasick::util::prefilter::PrefilterI>::find_in [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+ 10,030,996 ( 0.79%)   2,299,952 ( 0.74%)    851,099 ( 0.57%)  35,985 ( 2.06%)    28,926 ( 0.82%)  1,613 ( 0.43%)  27 ( 0.25%)      0              0            2,489,385 ( 1.06%)    17,878 ( 0.18%)         .               .           ???:regex_automata::hybrid::search::find_overlapping_fwd [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  7,001,430 ( 0.55%)   2,314,951 ( 0.75%)    954,753 ( 0.63%) 160,176 ( 9.15%)    47,047 ( 1.33%) 14,038 ( 3.73%) 203 ( 1.86%)      2 ( 0.01%) 1,306 ( 2.71%)   1,337,108 ( 0.57%)    89,819 ( 0.92%)    93,554 ( 1.13%)  5,525 ( 2.99%)  ???:std::sys::backtrace::__rust_begin_short_backtrace [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  6,949,776 ( 0.55%)   2,316,592 ( 0.75%)  2,316,592 ( 1.54%)      80 ( 0.00%)         .               .            .               .              .                    .                  .                  .               .           ???:aho_corasick::automaton::Automaton::try_find [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  6,322,025 ( 0.50%)   1,684,091 ( 0.54%)    945,965 ( 0.63%)   1,397 ( 0.08%)    14,306 ( 0.40%)    910 ( 0.24%)   8 ( 0.07%)      1 ( 0.00%)    23 ( 0.05%)   1,093,864 ( 0.47%)    52,145 ( 0.53%)         .               .           ./malloc/./malloc/malloc.c:malloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  6,164,315 ( 0.48%)   1,646,960 ( 0.53%)    753,945 ( 0.50%)   8,134 ( 0.46%)       834 ( 0.02%)      2 ( 0.00%)  12 ( 0.11%)      0              0            1,150,904 ( 0.49%)    51,102 ( 0.52%)    47,384 ( 0.57%)  1,521 ( 0.82%)  ???:tokei::language::syntax::SyntaxCounter::parse_context'2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  5,698,560 ( 0.45%)     889,112 ( 0.29%)     17,000 ( 0.01%)     593 ( 0.03%)     1,046 ( 0.03%)     97 ( 0.03%)  32 ( 0.29%)      3 ( 0.01%)     0            1,427,824 ( 0.61%)    91,679 ( 0.94%)     1,280 ( 0.02%)      1 ( 0.00%)  ???:encoding_rs::variant::VariantDecoder::decode_to_utf8_raw [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  5,040,226 ( 0.40%)   1,796,241 ( 0.58%)  1,512,328 ( 1.01%)  16,382 ( 0.94%)    54,288 ( 1.53%) 74,434 (19.80%)  13 ( 0.12%)     38 ( 0.18%) 8,013 (16.65%)   1,708,766 ( 0.73%)    76,967 ( 0.79%)         .               .           ./string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S:__memcpy_avx_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  4,477,761 ( 0.35%)   1,479,556 ( 0.48%)    809,067 ( 0.54%)  42,837 ( 2.45%)    25,143 ( 0.71%)  2,169 ( 0.58%)  45 ( 0.41%)      2 ( 0.01%)     0              591,508 ( 0.25%)    27,474 ( 0.28%)   165,408 ( 2.01%) 66,275 (35.88%)  ???:globset::GlobSet::matches_candidate_into [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  4,264,099 ( 0.33%)     800,404 ( 0.26%)    207,746 ( 0.14%)  20,669 ( 1.18%)    13,811 ( 0.39%)     42 ( 0.01%)  20 ( 0.18%)      0              0              282,175 ( 0.12%)    33,228 ( 0.34%)     3,115 ( 0.04%)    869 ( 0.47%)  ???:hashbrown::map::HashMap<K,V,S,A>::get [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  4,062,792 ( 0.32%)   1,450,987 ( 0.47%)    870,582 ( 0.58%)     542 ( 0.03%)    25,829 ( 0.73%)     53 ( 0.01%)   5 ( 0.05%)      0              0              435,315 ( 0.19%)     8,926 ( 0.09%)         .               .           ./malloc/./malloc/malloc.c:free [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  2,939,629 ( 0.23%)     566,122 ( 0.18%)    353,530 ( 0.23%)   4,561 ( 0.26%)     2,754 ( 0.08%)  4,448 ( 1.18%)   7 ( 0.06%)      0              7 ( 0.01%)     637,035 ( 0.27%)     9,805 ( 0.10%)         .               .           ./malloc/./malloc/malloc.c:realloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  2,729,390 ( 0.21%)     589,459 ( 0.19%)    222,910 ( 0.15%)  15,990 ( 0.91%)     3,212 ( 0.09%)    383 ( 0.10%)  28 ( 0.26%)      0              0              560,010 ( 0.24%)    11,546 ( 0.12%)         .               .           ???:regex_automata::hybrid::search::find_rev [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  2,724,108 ( 0.21%)      17,717 ( 0.01%)  2,520,914 ( 1.68%)   7,070 ( 0.40%)        44 ( 0.00%) 44,249 (11.77%)   5 ( 0.05%)      0          6,608 (13.73%)   2,536,655 ( 1.08%)     4,586 ( 0.05%)         .               .           ./string/../sysdeps/x86_64/multiarch/memset-vec-unaligned-erms.S:__memset_avx2_unaligned_erms [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  2,706,135 ( 0.21%)     426,076 ( 0.14%)          0            4,241 ( 0.24%)     2,320 ( 0.07%)      0            6 ( 0.06%)     21 ( 0.10%)     0              282,153 ( 0.12%)    47,405 ( 0.49%)         .               .           ???:memchr::arch::x86_64::avx2::memchr::Three::find_raw_avx2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  2,505,488 ( 0.20%)     504,686 ( 0.16%)    320,496 ( 0.21%)  12,209 ( 0.70%)    12,142 ( 0.34%)  3,885 ( 1.03%)  10 ( 0.09%)      0            417 ( 0.87%)     375,892 ( 0.16%)    23,218 ( 0.24%)         .               .           ./malloc/./malloc/malloc.c:_int_realloc [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  2,336,305 ( 0.18%)     465,427 ( 0.15%)    390,214 ( 0.26%)  14,554 ( 0.83%)    37,954 ( 1.07%)    890 ( 0.24%)   7 ( 0.06%)      0              2 ( 0.00%)     400,843 ( 0.17%)    32,647 ( 0.33%)         .               .           ./malloc/./malloc/malloc.c:malloc_consolidate [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  2,318,963 ( 0.18%)     380,320 ( 0.12%)    475,735 ( 0.32%)   7,704 ( 0.44%)       266 ( 0.01%)  2,065 ( 0.55%)  62 ( 0.57%)      0             25 ( 0.05%)     204,839 ( 0.09%)    10,401 ( 0.11%)    47,595 ( 0.58%)    392 ( 0.21%)  ???:alloc::raw_vec::RawVecInner<A>::finish_grow [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  2,227,842 ( 0.17%)     344,940 ( 0.11%)     90,540 ( 0.06%)  11,721 ( 0.67%)     2,718 ( 0.08%)      0            5 ( 0.05%)      0              0              573,948 ( 0.24%)    18,555 ( 0.19%)         .               .           ???:std::path::Components::parse_next_component_back [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  2,131,874 ( 0.17%)     505,578 ( 0.16%)    340,189 ( 0.23%)  27,688 ( 1.58%)     1,042 ( 0.03%)  1,471 ( 0.39%)  11 ( 0.10%)      2 ( 0.01%)     1 ( 0.00%)     366,366 ( 0.16%)    32,041 ( 0.33%)         .               .           ???:<std::path::Components as core::iter::traits::double_ended::DoubleEndedIterator>::next_back [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,728,994 ( 0.14%)     430,508 ( 0.14%)    322,377 ( 0.21%)  13,500 ( 0.77%)    12,702 ( 0.36%)  1,984 ( 0.53%)   7 ( 0.06%)      0             69 ( 0.14%)     290,980 ( 0.12%)    37,436 ( 0.38%)         .               .           ./malloc/./malloc/malloc.c:_int_free_merge_chunk [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  1,648,110 ( 0.13%)     429,930 ( 0.14%)    453,793 ( 0.30%)   2,036 ( 0.12%)     1,595 ( 0.05%)  1,902 ( 0.51%)   6 ( 0.06%)      6 ( 0.03%)     0              143,304 ( 0.06%)     3,752 ( 0.04%)    71,652 ( 0.87%)      6 ( 0.00%)  ???:std::path::Path::_join [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,619,413 ( 0.13%)     373,523 ( 0.12%)    189,695 ( 0.13%)  13,534 ( 0.77%)     4,408 ( 0.12%)  1,729 ( 0.46%)  59 ( 0.54%)      2 ( 0.01%)   192 ( 0.40%)     256,813 ( 0.11%)    11,348 ( 0.12%)    20,218 ( 0.25%) 13,281 ( 7.19%)  ???:regex_automata::hybrid::dfa::Lazy::cache_next_state [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,595,880 ( 0.13%)     534,128 ( 0.17%)      2,192 ( 0.00%)  14,100 ( 0.81%)     1,430 ( 0.04%)      0          122 ( 1.12%)      1 ( 0.00%)     0              298,184 ( 0.13%)     9,081 ( 0.09%)     3,400 ( 0.04%)    497 ( 0.27%)  ???:tokei::language::language_type::LanguageType::from_file_extension [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,583,578 ( 0.12%)     484,447 ( 0.16%)    190,570 ( 0.13%)  20,565 ( 1.18%)     4,379 ( 0.12%)    564 ( 0.15%)  64 ( 0.59%)      0              0              272,833 ( 0.12%)    14,732 ( 0.15%)     5,376 ( 0.07%)     44 ( 0.02%)  ???:regex_automata::hybrid::search::find_fwd [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,540,600 ( 0.12%)     334,528 ( 0.11%)    134,992 ( 0.09%)  11,815 ( 0.68%)       643 ( 0.02%)     25 ( 0.01%)  16 ( 0.15%)      1 ( 0.00%)     0              348,320 ( 0.15%)    14,133 ( 0.14%)     5,800 ( 0.07%)      3 ( 0.00%)  ???:<&rayon::iter::par_bridge::IterParallelProducer<Iter> as rayon::iter::plumbing::UnindexedProducer>::fold_with'2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,527,935 ( 0.12%)     273,164 ( 0.09%)          0            1,404 ( 0.08%)     3,329 ( 0.09%)      0            0               0              0              145,093 ( 0.06%)       402 ( 0.00%)         .               .           ./malloc/./malloc/arena.c:free
+  1,456,161 ( 0.11%)     618,800 ( 0.20%)    204,928 ( 0.14%)   9,633 ( 0.55%)    18,029 ( 0.51%)      0            3 ( 0.03%)      0              0              299,568 ( 0.13%)    23,127 ( 0.24%)         .               .           ./malloc/./malloc/malloc.c:unlink_chunk.isra.0 [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  1,447,864 ( 0.11%)     204,528 ( 0.07%)    210,864 ( 0.14%)   9,454 ( 0.54%)     5,393 ( 0.15%)     89 ( 0.02%)   6 ( 0.06%)      1 ( 0.00%)     0              179,928 ( 0.08%)    13,234 ( 0.14%)     9,376 ( 0.11%)      2 ( 0.00%)  ???:alloc::str::<impl str>::to_lowercase [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,407,400 ( 0.11%)     228,447 ( 0.07%)     75,880 ( 0.05%)  10,121 ( 0.58%)         0             969 ( 0.26%)   8 ( 0.07%)      0              0              289,656 ( 0.12%)    21,257 ( 0.22%)    18,970 ( 0.23%)     19 ( 0.01%)  ???:std::sys::fs::metadata [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,304,881 ( 0.10%)     279,666 ( 0.09%)     79,610 ( 0.05%)     724 ( 0.04%)       127 ( 0.00%)     24 ( 0.01%)  27 ( 0.25%)      0              2 ( 0.00%)     304,422 ( 0.13%)     3,074 ( 0.03%)         .               .           ???:aho_corasick::dfa::Builder::finish_build_one_start [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,292,264 ( 0.10%)     291,411 ( 0.09%)    215,021 ( 0.14%)   2,776 ( 0.16%)         0             889 ( 0.24%)  26 ( 0.24%)      0              2 ( 0.00%)      76,345 ( 0.03%)       594 ( 0.01%)         .               .           ???:alloc::raw_vec::RawVecInner<A>::reserve::do_reserve_and_handle [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,286,756 ( 0.10%)     209,955 ( 0.07%)    160,647 ( 0.11%)  18,454 ( 1.05%)    10,254 ( 0.29%)  7,163 ( 1.91%) 158 ( 1.45%)     86 ( 0.41%)     0               88,627 ( 0.04%)     5,372 ( 0.05%)     7,023 ( 0.09%)  2,462 ( 1.33%)  ???:tokei::language::syntax::SyntaxCounter::new [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,232,179 ( 0.10%)     525,323 ( 0.17%)    172,040 ( 0.11%)   7,639 ( 0.44%)    33,548 ( 0.95%)      0           39 ( 0.36%)      0              0              246,082 ( 0.10%)    19,205 ( 0.20%)    26,594 ( 0.32%)  1,701 ( 0.92%)  ???:alloc::sync::Arc<T,A>::drop_slow'2 [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,150,952 ( 0.09%)     344,096 ( 0.11%)    100,944 ( 0.07%) 103,824 ( 5.93%)        80 ( 0.00%)      0          187 ( 1.72%)      3 ( 0.01%)     0              474,304 ( 0.20%)    12,672 ( 0.13%)     6,648 ( 0.08%)    299 ( 0.16%)  ???:<tokei::language::language_type::LanguageType as core::str::traits::FromStr>::from_str [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,132,468 ( 0.09%)     281,653 ( 0.09%)    194,911 ( 0.13%)  28,259 ( 1.61%)    13,870 ( 0.39%)  9,864 ( 2.62%)  83 ( 0.76%)      0              0              178,338 ( 0.08%)    10,638 ( 0.11%)    10,496 ( 0.13%)     33 ( 0.02%)  ???:<rayon::iter::for_each::ForEachConsumer<F> as rayon::iter::plumbing::Folder<T>>::consume [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,103,075 ( 0.09%)     164,178 ( 0.05%)     53,943 ( 0.04%)  11,967 ( 0.68%)     6,638 ( 0.19%)     53 ( 0.01%)  12 ( 0.11%)      0              1 ( 0.00%)     243,168 ( 0.10%)    10,403 ( 0.11%)         .               .           ./malloc/./malloc/malloc.c:_mid_memalign.isra.0 [/usr/lib/x86_64-linux-gnu/libc.so.6]
+  1,094,450 ( 0.09%)     174,235 ( 0.06%)    106,788 ( 0.07%)   8,785 ( 0.50%)     1,523 ( 0.04%)  1,121 ( 0.30%) 124 ( 1.14%)     16 ( 0.08%)    60 ( 0.12%)     141,026 ( 0.06%)     7,732 ( 0.08%)    14,243 ( 0.17%)  6,746 ( 3.65%)  ???:regex_automata::nfa::thompson::compiler::Compiler::build_many_from_hir [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,093,692 ( 0.09%)     322,376 ( 0.10%)    302,222 ( 0.20%)   8,280 ( 0.47%)     5,942 ( 0.17%)      0           11 ( 0.10%)      0              0              111,956 ( 0.05%)     9,760 ( 0.10%)         .               .           ???:ignore::gitignore::Gitignore::matched_stripped [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,059,072 ( 0.08%)     308,896 ( 0.10%)    308,896 ( 0.21%)  11,468 ( 0.66%)     6,752 ( 0.19%)      0            7 ( 0.06%)      0              0              154,448 ( 0.07%)        26 ( 0.00%)         .               .           ???:aho_corasick::automaton::try_find_overlapping_fwd [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+  1,031,672 ( 0.08%)     163,520 ( 0.05%)     75,072 ( 0.05%)   9,959 ( 0.57%)         1 ( 0.00%)      0            4 ( 0.04%)      0              0              242,494 ( 0.10%)     9,894 ( 0.10%)         .               .           ???:<core::str::lossy::Utf8Chunks as core::iter::traits::iterator::Iterator>::next [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+    992,784 ( 0.08%)     194,352 ( 0.06%)     95,832 ( 0.06%)  14,542 ( 0.83%)     2,916 ( 0.08%)     46 ( 0.01%)  19 ( 0.17%)      0              0               75,368 ( 0.03%)     5,295 ( 0.05%)     1,608 ( 0.02%)     15 ( 0.01%)  ???:globset::RequiredExtensionStrategy::matches_into [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+    950,404 ( 0.07%)      78,890 ( 0.03%)    191,149 ( 0.13%)     160 ( 0.01%)         0           3,149 ( 0.84%)   5 ( 0.05%)      0            872 ( 1.81%)     188,601 ( 0.08%)     1,363 ( 0.01%)         .               .           ???:aho_corasick::nfa::noncontiguous::NFA::init_full_state [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+    926,778 ( 0.07%)     342,025 ( 0.11%)    275,825 ( 0.18%)  20,252 ( 1.16%)         0              63 ( 0.02%)  12 ( 0.11%)      0              0               66,200 ( 0.03%)     8,984 ( 0.09%)         .               .           ???:<std::path::Components as core::cmp::PartialEq>::eq [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+    917,172 ( 0.07%)     346,781 ( 0.11%)    327,834 ( 0.22%)  87,093 ( 4.98%)     4,809 ( 0.14%)  9,180 ( 2.44%)  60 ( 0.55%)      0             20 ( 0.04%)      89,061 ( 0.04%)     4,386 ( 0.04%)    13,265 ( 0.16%)     60 ( 0.03%)  ???:ignore::dir::Ignore::add_child_path [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+    913,135 ( 0.07%)     119,269 ( 0.04%)    150,269 ( 0.10%)  14,598 ( 0.83%)       160 ( 0.00%)  1,483 ( 0.39%)  11 ( 0.10%)      0            287 ( 0.60%)     104,217 ( 0.04%)     6,222 ( 0.06%)         .               .           ./malloc/./malloc/malloc.c:_int_memalign [/usr/lib/x86_64-linux-gnu/libc.so.6]
+    852,160 ( 0.07%)     230,883 ( 0.07%)    172,175 ( 0.11%)   4,361 ( 0.25%)     1,239 ( 0.03%)    794 ( 0.21%)  18 ( 0.17%)      1 ( 0.00%)     0              124,944 ( 0.05%)     8,504 ( 0.09%)    16,349 ( 0.20%) 10,647 ( 5.76%)  ???:regex_automata::util::determinize::epsilon_closure [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+    830,821 ( 0.07%)     344,112 ( 0.11%)    238,142 ( 0.16%)   6,107 ( 0.35%)     1,365 ( 0.04%)     34 ( 0.01%)   4 ( 0.04%)      0              0               72,635 ( 0.03%)       737 ( 0.01%)         .               .           ./malloc/./malloc/malloc.c:_int_free_maybe_consolidate [/usr/lib/x86_64-linux-gnu/libc.so.6]
+    809,718 ( 0.06%)     185,994 ( 0.06%)    146,387 ( 0.10%)  26,874 ( 1.54%)     3,275 ( 0.09%)  2,482 ( 0.66%)  31 ( 0.28%)      0              0              145,761 ( 0.06%)     1,605 ( 0.02%)       154 ( 0.00%)    103 ( 0.06%)  ???:regex_automata::util::pool::inner::Pool<T,F>::get_slow [/home/user/peltier.io/targets/tokei/workspace/target/release/tokei]
+    801,643 ( 0.06%)     139,369 ( 0.05%)          0            4,231 ( 0.24%)       187 ( 0.01%)      0            3 ( 0.03%)      0              0               69,984 ( 0.03%)        88 ( 0.00%)         .               .           ./malloc/./malloc/arena.c:realloc
+
+--------------------------------------------------------------------------------
+The following files chosen for auto-annotation could not be found:
+--------------------------------------------------------------------------------
+  ./malloc/./malloc/arena.c
+  ./malloc/./malloc/malloc.c
+  ./string/../sysdeps/x86_64/multiarch/memcmp-avx2-movbe.S
+  ./string/../sysdeps/x86_64/multiarch/memmove-vec-unaligned-erms.S
+  ./string/../sysdeps/x86_64/multiarch/memset-vec-unaligned-erms.S
+

scripts/agent-isolated.sh

@@ -0,0 +1,119 @@
+#!/bin/sh
+# Launch one unattended optimization attempt behind an OS-level boundary
+# (SPEC §10). Run as the trusted uid (root in this container):
+#
+#   scripts/agent-isolated.sh <target> <run-id> [max-turns]
+#
+# Two isolation modes (HOTPATH_ISOLATION, default "mountns"):
+#
+#   mountns — this container's boundary. The agent process tree (Claude
+#     CLI + MCP server + harness client) runs in a private mount
+#     namespace where the repo is bind-mounted READ-ONLY, with
+#     CAP_SYS_ADMIN and CAP_SYS_PTRACE removed from the bounding set so
+#     the mount cannot be undone (verified: remount and userns re-entry
+#     both refused). Repo writes fail with EROFS no matter the uid; the
+#     CLI's own auth state (under $HOME) stays untouched. No credential
+#     copying.
+#
+#   user — the bench-metal shape (docs/infra.md). The agent loop runs as
+#     the unprivileged user 'hpagent' whose only door into the repo is
+#     the harnessd socket. Requires the agent user to have its own API
+#     credentials (CLAUDE_CODE_OAUTH_TOKEN or ANTHROPIC_API_KEY in its
+#     environment) — a parent session's root-owned auth is deliberately
+#     NOT copied across the boundary.
+#
+# In both modes harnessd + the verdict pipeline run OUTSIDE the boundary
+# as the trusted uid and own every write into the repo (git apply,
+# ledger rows, pending/ evidence). Verify the boundary any time with
+# scripts/isolation-check.sh.
+set -eu
+
+ROOT=$(cd "$(dirname "$0")/.." && pwd)
+TARGET=${1:?usage: agent-isolated.sh <target> <run-id> [max-turns]}
+RUN_ID=${2:?usage: agent-isolated.sh <target> <run-id> [max-turns]}
+MAX_TURNS=${3:-40}
+MODE=${HOTPATH_ISOLATION:-mountns}
+
+AGENT_USER=hpagent
+SOCK_DIR=/run/hotpath
+SOCK=$SOCK_DIR/harness.sock
+
+[ "$(id -u)" -eq 0 ] || { echo "must run as the trusted uid (root)" >&2; exit 1; }
+
+# --- no world-writable holes in the repo ------------------------------------
+# In user mode the boundary is filesystem permissions; a single o+w path
+# would void it. mountns mode doesn't need this, but a hole is still a
+# smell worth failing on.
+HOLES=$(find "$ROOT" -perm -o+w \( -type f -o -type d \) 2>/dev/null || true)
+if [ -n "$HOLES" ]; then
+    echo "refusing to launch: world-writable paths inside the repo:" >&2
+    echo "$HOLES" >&2
+    exit 1
+fi
+
+# --- trust-layer daemon (outside the boundary) --------------------------------
+( cd "$ROOT" && cargo build -q -p harnessd -p verdict )
+
+mkdir -p "$SOCK_DIR"
+# A stale socket file survives a dead daemon (e.g. after a container
+# suspend), so liveness means answering a real request — not existing.
+sock_alive() {
+    [ -S "$SOCK" ] && timeout 5 python3 -c "
+import socket
+s = socket.socket(socket.AF_UNIX); s.connect('$SOCK')
+f = s.makefile('rw')
+f.write('{\"op\":\"read_playbook\",\"class\":1}\n'); f.flush()
+assert f.readline()
+" 2>/dev/null
+}
+if ! sock_alive; then
+    rm -f "$SOCK"
+    ( cd "$ROOT" && setsid ./target/debug/harnessd --socket "$SOCK" \
+        >>/var/log/hotpath-harnessd.log 2>&1 & )
+    for _ in $(seq 1 50); do [ -S "$SOCK" ] && break; sleep 0.1; done
+    sock_alive || { echo "harnessd did not come up on $SOCK" >&2; exit 1; }
+fi
+
+run_loop="python3 -m hotpath_agent.loop $TARGET --run-id $RUN_ID --max-turns $MAX_TURNS --repo-root $ROOT"
+
+case "$MODE" in
+mountns)
+    chmod 600 "$SOCK"   # uid 0 only; the confined tree is still uid 0
+    exec unshare -m sh -c "
+        mount --bind '$ROOT' '$ROOT' &&
+        mount -o remount,bind,ro '$ROOT' &&
+        exec setpriv --bounding-set -sys_admin,-sys_ptrace --inh-caps -all \
+            env HOTPATH_HARNESS_SOCKET='$SOCK' \
+                HOTPATH_REPO_ROOT='$ROOT' \
+                PYTHONPATH='$ROOT/agent' \
+            $run_loop"
+    ;;
+user)
+    id "$AGENT_USER" >/dev/null 2>&1 || useradd -m -s /bin/sh "$AGENT_USER"
+    HP_HOME=$(getent passwd "$AGENT_USER" | cut -d: -f6)
+    chown root:"$AGENT_USER" "$SOCK"
+    chmod 660 "$SOCK"
+    # The container's TLS-intercepting proxy CA lives under /root (mode
+    # 700); the agent user needs a readable copy to reach the API.
+    CA_SRC=${HOTPATH_CA_SRC:-/root/.ccr/ca-bundle.crt}
+    CA=/etc/hotpath-ca.crt
+    [ -f "$CA_SRC" ] && install -m 644 "$CA_SRC" "$CA"
+    # setpriv preserves the environment (proxy/API routing vars); we
+    # override HOME and every CA var that pointed under /root. The agent
+    # user must bring its own API credentials — see header.
+    exec setpriv --reuid "$AGENT_USER" --regid "$AGENT_USER" --init-groups \
+        env HOME="$HP_HOME" USER="$AGENT_USER" LOGNAME="$AGENT_USER" \
+            HOTPATH_HARNESS_SOCKET="$SOCK" \
+            HOTPATH_REPO_ROOT="$ROOT" \
+            PYTHONPATH="$ROOT/agent" \
+            SSL_CERT_FILE="$CA" NODE_EXTRA_CA_CERTS="$CA" \
+            CURL_CA_BUNDLE="$CA" REQUESTS_CA_BUNDLE="$CA" \
+            GIT_SSL_CAINFO="$CA" AWS_CA_BUNDLE="$CA" \
+            NIX_SSL_CERT_FILE="$CA" GRPC_DEFAULT_SSL_ROOTS_FILE_PATH="$CA" \
+        $run_loop
+    ;;
+*)
+    echo "unknown HOTPATH_ISOLATION mode: $MODE (mountns|user)" >&2
+    exit 1
+    ;;
+esac

scripts/audit-attempt.py

@@ -0,0 +1,94 @@
+#!/usr/bin/env python3
+"""Audit one ledger attempt (SPEC §10: 100% human audit in Phase 2).
+
+Prints the full evidence for a run and re-checks the verdict against the
+accept rule mechanically:
+
+    python3 scripts/audit-attempt.py <run_id> [--threshold 0.02]
+
+Checks:
+  - verdict vs bench evidence: accepted requires ci_lower >= 1 + threshold
+    AND all gates green AND not flagged needs-human-review
+  - rejected-bench requires the CI to actually fail the bar
+  - patch paths stay inside the target workspace
+The human part of the audit — does the patch express the hypothesis, is
+the equivalence tier right — is printed for eyeballing, not automated.
+"""
+
+from __future__ import annotations
+
+import argparse
+import json
+import sqlite3
+import sys
+from pathlib import Path
+
+ROOT = Path(__file__).resolve().parent.parent
+
+
+def main() -> int:
+    ap = argparse.ArgumentParser()
+    ap.add_argument("run_id")
+    ap.add_argument("--threshold", type=float, default=0.02)
+    args = ap.parse_args()
+
+    con = sqlite3.connect(ROOT / "results/ledger.sqlite")
+    con.row_factory = sqlite3.Row
+    row = con.execute("SELECT * FROM attempts WHERE run_id = ?", (args.run_id,)).fetchone()
+    if row is None:
+        print(f"no ledger row for {args.run_id}", file=sys.stderr)
+        return 2
+
+    gates = json.loads(row["gates"]) if row["gates"] else {}
+    bench = json.loads(row["bench"]) if row["bench"] else {}
+    verdict = row["verdict"]
+
+    print(f"run_id       : {row['run_id']}")
+    print(f"target       : {row['target']} @ {row['target_commit']}")
+    print(f"class/hotspot: {row['playbook_class']} / {row['hotspot']}")
+    print(f"hypothesis   : {row['hypothesis']}")
+    print(f"verdict      : {verdict}")
+    print(f"gates        : {json.dumps(gates, indent=2)}")
+    print(f"bench        : {json.dumps(bench, indent=2)}")
+
+    problems: list[str] = []
+    ci = bench.get("speedup_ci") or [None, None]
+    ci_lo = ci[0]
+    bar = 1.0 + args.threshold
+
+    if verdict == "accepted":
+        if ci_lo is None or ci_lo < bar:
+            problems.append(f"accepted but CI lower bound {ci_lo} < {bar}")
+        bad_gates = {k: v for k, v in gates.items() if v not in (True, "pass", "passed", "ok")}
+        if bad_gates:
+            problems.append(f"accepted with non-green gates: {bad_gates}")
+    elif verdict == "rejected-bench":
+        if ci_lo is not None and ci_lo >= bar:
+            problems.append(f"rejected-bench but CI lower bound {ci_lo} >= {bar}")
+    elif verdict == "needs-human-review":
+        pass  # always a valid resting state; the ruling is ours
+    elif verdict == "rejected-gates":
+        if all(v in (True, "pass", "passed", "ok") for v in gates.values()) and gates:
+            problems.append("rejected-gates but every recorded gate is green")
+
+    patch = row["patch"] or ""
+    for line in patch.splitlines():
+        if line.startswith(("--- ", "+++ ")):
+            p = line[4:].strip()
+            if p.startswith("/") or "../" in p:
+                problems.append(f"patch path escapes workspace: {p}")
+
+    print("\npatch:")
+    print(patch if patch else "  (none recorded)")
+
+    if problems:
+        print("\nAUDIT: PROBLEMS FOUND", file=sys.stderr)
+        for p in problems:
+            print(f"  - {p}", file=sys.stderr)
+        return 1
+    print("\nAUDIT: mechanical checks clean (human eyeball still required)")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

scripts/diff-fuzz-tokei.py

@@ -0,0 +1,120 @@
+#!/usr/bin/env python3
+"""Differential fuzz for phase2-tokei-001: pristine vs candidate tokei
+must produce byte-identical output on mutated source inputs targeting
+the patched code path (quote/comment token scanning).
+
+Seeds: files from the pinned corpus (many languages). Mutations focus on
+quote/comment structure: inserting/deleting/duplicating quote chars,
+comment openers/closers, backslashes, and random bytes; plus boundary
+slices. Deterministic RNG for reproducibility.
+"""
+
+import random
+import subprocess
+import sys
+from pathlib import Path
+
+ROOT = Path("/home/user/peltier.io")
+BASE = ROOT / "targets/tokei/baseline/release/tokei"
+CAND = ROOT / "targets/tokei/candidate-4e3da7e6bd1c/release/tokei"
+CORPUS = ROOT / "corpora/tokei/input/copy1"
+WORK = Path(sys.argv[1]) if len(sys.argv) > 1 else Path("/tmp/difffuzz")
+ITERS = int(sys.argv[2]) if len(sys.argv) > 2 else 10000
+
+TOKENS = [
+    b'"', b"'", b'`', b'"""', b"'''", b"/*", b"*/", b"//", b"#", b"--",
+    b"<!--", b"-->", b"(*", b"*)", b"{-", b"-}", b"\\", b"\\\\", b'\\"',
+    b"r#\"", b"\"#", b"=begin", b"=end", b"'''", b'f"""', b"%{", b"}",
+]
+
+def mutate(data: bytes, rng: random.Random) -> bytes:
+    ops = rng.randrange(1, 6)
+    b = bytearray(data)
+    for _ in range(ops):
+        if not b:
+            b = bytearray(rng.choice(TOKENS))
+            continue
+        op = rng.randrange(5)
+        pos = rng.randrange(len(b) + 1)
+        if op == 0:      # insert a token
+            b[pos:pos] = rng.choice(TOKENS)
+        elif op == 1 and len(b) > 2:  # delete a slice
+            end = min(len(b), pos + rng.randrange(1, 8))
+            del b[pos:end]
+        elif op == 2:    # flip to a random byte
+            if pos < len(b):
+                b[pos] = rng.randrange(256)
+        elif op == 3:    # duplicate a slice
+            end = min(len(b), pos + rng.randrange(1, 32))
+            b[end:end] = b[pos:end]
+        else:            # newline injection (line-structure stress)
+            b[pos:pos] = b"\n"
+    return bytes(b)
+
+def canonicalize(payload: bytes) -> str:
+    """Parse tokei JSON and sort every list so benign output-order
+    nondeterminism (parallel walker arrival order) doesn't count as a
+    divergence; counts/stats still must match exactly."""
+    import json
+
+    def norm(o):
+        if isinstance(o, dict):
+            return {k: norm(v) for k, v in sorted(o.items())}
+        if isinstance(o, list):
+            return sorted((norm(v) for v in o), key=lambda x: json.dumps(x, sort_keys=True))
+        return o
+
+    return json.dumps(norm(json.loads(payload)), sort_keys=True)
+
+
+def run(binary: Path, d: Path) -> tuple[str, bytes, int]:
+    r = subprocess.run(
+        [str(binary), "--sort", "code", "--output", "json", str(d)],
+        capture_output=True, env={"RAYON_NUM_THREADS": "1", "PATH": "/usr/bin:/bin"},
+    )
+    try:
+        canon = canonicalize(r.stdout)
+    except Exception as e:  # unparseable output is always a divergence candidate
+        canon = f"UNPARSEABLE:{e}:{r.stdout[:200]!r}"
+    return canon + f"||rc={r.returncode}", r.stdout, r.returncode
+
+def main() -> int:
+    rng = random.Random(0xB16B00B5)
+    seeds = sorted(CORPUS.rglob("*"))
+    seeds = [p for p in seeds if p.is_file() and p.stat().st_size < 200_000][:400]
+    if not seeds:
+        print("no seeds found", file=sys.stderr)
+        return 2
+    WORK.mkdir(parents=True, exist_ok=True)
+    fdir = WORK / "case"
+    divergences = 0
+    done = 0
+    # Batch: mutate BATCH files per tokei invocation (tokei scans a dir),
+    # keeping each seed's extension so language detection stays realistic.
+    BATCH = 50
+    while done < ITERS:
+        if fdir.exists():
+            for f in fdir.iterdir():
+                f.unlink()
+        fdir.mkdir(exist_ok=True)
+        for j in range(min(BATCH, ITERS - done)):
+            seed = rng.choice(seeds)
+            name = f"m{done + j}{seed.suffix or '.txt'}"
+            (fdir / name).write_bytes(mutate(seed.read_bytes(), rng))
+        a_canon, a_raw, a_rc = run(BASE, fdir)
+        b_canon, b_raw, b_rc = run(CAND, fdir)
+        if a_canon != b_canon:
+            divergences += 1
+            keep = WORK / f"divergence-{done}"
+            fdir.rename(keep)
+            (keep / "_baseline.out").write_bytes(a_raw + f"\nrc={a_rc}".encode())
+            (keep / "_candidate.out").write_bytes(b_raw + f"\nrc={b_rc}".encode())
+            print(f"DIVERGENCE at batch starting {done}; inputs+outputs kept in {keep}")
+        done += BATCH
+        if done % 1000 == 0:
+            print(f"{done}/{ITERS} mutated files, {divergences} divergences", flush=True)
+    print(f"done: {done} mutated files across {done // BATCH} runs, {divergences} divergences")
+    return 1 if divergences else 0
+
+if __name__ == "__main__":
+    sys.exit(main())

scripts/isolation-check.sh

@@ -0,0 +1,132 @@
+#!/bin/sh
+# Verify the SPEC §10 OS boundary from the agent's side of it. Run as the
+# trusted uid (root). Checks BOTH isolation modes of agent-isolated.sh:
+# every write the agent could use to game the harness must fail; the
+# harnessd socket door must work. Exits nonzero on any hole.
+set -u
+
+ROOT=$(cd "$(dirname "$0")/.." && pwd)
+AGENT_USER=hpagent
+SOCK=${HOTPATH_HARNESS_SOCKET:-/run/hotpath/harness.sock}
+FAIL=0
+
+note_fail() { echo "FAIL (boundary hole): $1"; FAIL=1; }
+note_ok()   { echo "ok: $1"; }
+
+[ -S "$SOCK" ] || { echo "FAIL: harnessd socket $SOCK missing (run agent-isolated.sh or start the daemon)"; exit 1; }
+
+# Probe scripts as files: they run nested inside sh -c layers where
+# inline `python3 -c` quoting is unmanageable.
+PROBE_DIR=$(mktemp -d)
+trap 'rm -rf "$PROBE_DIR"' EXIT
+chmod 755 "$PROBE_DIR"
+
+cat > "$PROBE_DIR/sock_check.py" <<EOF
+import json, socket, sys
+s = socket.socket(socket.AF_UNIX); s.settimeout(15); s.connect('$SOCK')
+f = s.makefile('rw')
+f.write(json.dumps({'op': 'read_ledger', 'target': 'comrak'}) + '\n'); f.flush()
+resp = json.loads(f.readline())
+assert resp['ok'], resp
+EOF
+
+cat > "$PROBE_DIR/escape_check.py" <<EOF
+import json, socket
+s = socket.socket(socket.AF_UNIX); s.settimeout(15); s.connect('$SOCK')
+f = s.makefile('rw')
+diff = '--- a/../../../config/accept.toml\n+++ b/../../../config/accept.toml\n@@ -1 +1 @@\n-x\n+y\n'
+f.write(json.dumps({'op': 'propose_patch', 'target': 'comrak', 'diff': diff, 'hypothesis': 'probe'}) + '\n'); f.flush()
+resp = json.loads(f.readline())
+assert not resp['ok'] and 'escape' in resp['error'], resp
+EOF
+
+cat > "$PROBE_DIR/ledger_insert.py" <<EOF
+import sqlite3
+c = sqlite3.connect('$ROOT/results/ledger.sqlite')
+c.execute("INSERT INTO attempts (run_id,timestamp,target,target_commit,phase,hotspot,playbook_class,hypothesis,patch,gates,bench,verdict,tokens_spent,wall_time_s) VALUES ('forged','','t','','','',1,'','','{}','{}','accepted',0,0)")
+c.commit()
+EOF
+chmod 644 "$PROBE_DIR"/*.py
+
+# ============================ mountns mode ====================================
+echo "--- mountns mode (confined uid-0 tree, repo read-only) ---"
+MNT_PREFIX="unshare -m"
+CONFINE="mount --bind '$ROOT' '$ROOT' && mount -o remount,bind,ro '$ROOT' && exec setpriv --bounding-set -sys_admin,-sys_ptrace --inh-caps -all"
+
+mnt_must_fail() {
+    desc=$1; cmd=$2
+    if $MNT_PREFIX sh -c "$CONFINE sh -c \"$cmd\"" >/dev/null 2>&1; then
+        note_fail "[mountns] $desc succeeded"
+    else
+        note_ok "[mountns] $desc refused"
+    fi
+}
+mnt_must_pass() {
+    desc=$1; cmd=$2
+    if $MNT_PREFIX sh -c "$CONFINE sh -c \"$cmd\"" >/dev/null 2>&1; then
+        note_ok "[mountns] $desc works"
+    else
+        note_fail "[mountns] $desc broken"
+    fi
+}
+
+mnt_must_fail "write into crates/ (trust layer)"      "touch '$ROOT/crates/.probe'"
+mnt_must_fail "edit config/accept.toml (thresholds)"  "echo x >> '$ROOT/config/accept.toml'"
+mnt_must_fail "write a target workspace directly"     "touch '$ROOT/targets/comrak/workspace/.probe'"
+mnt_must_fail "INSERT a forged ledger row"            "python3 $PROBE_DIR/ledger_insert.py"
+mnt_must_fail "overwrite results/ evidence"           "echo x > '$ROOT/results/.probe'"
+mnt_must_fail "replace a trust binary"                "echo x > '$ROOT/target/debug/verdict'"
+mnt_must_fail "remount the repo read-write"           "mount -o remount,bind,rw '$ROOT'"
+mnt_must_fail "userns re-entry to undo the ro mount"  "unshare -Ur -m mount -o remount,bind,rw '$ROOT'"
+mnt_must_pass "harnessd socket read_ledger"           "python3 $PROBE_DIR/sock_check.py"
+
+# ============================ user mode =======================================
+if id "$AGENT_USER" >/dev/null 2>&1; then
+    echo "--- user mode (unprivileged $AGENT_USER) ---"
+    HP_HOME=$(getent passwd "$AGENT_USER" | cut -d: -f6)
+    as_agent() {
+        setpriv --reuid "$AGENT_USER" --regid "$AGENT_USER" --init-groups \
+            env HOME="$HP_HOME" "$@"
+    }
+    must_fail() {
+        desc=$1; shift
+        if as_agent "$@" >/dev/null 2>&1; then
+            note_fail "[user] $desc succeeded as $AGENT_USER"
+        else
+            note_ok "[user] $desc refused"
+        fi
+    }
+    must_pass() {
+        desc=$1; shift
+        if as_agent "$@" >/dev/null 2>&1; then
+            note_ok "[user] $desc works"
+        else
+            note_fail "[user] $desc broken for $AGENT_USER"
+        fi
+    }
+    # user mode needs group access on the socket for the positive checks
+    SOCK_GRP_SAVED=$(stat -c '%U:%G %a' "$SOCK")
+    chown root:"$AGENT_USER" "$SOCK"; chmod 660 "$SOCK"
+
+    must_fail "write into crates/ (trust layer)"      sh -c "touch '$ROOT/crates/.probe'"
+    must_fail "edit config/accept.toml (thresholds)"  sh -c "echo x >> '$ROOT/config/accept.toml'"
+    must_fail "write into corpora/ (pinned inputs)"   sh -c "touch '$ROOT/corpora/.probe'"
+    must_fail "write a target workspace directly"     sh -c "touch '$ROOT/targets/comrak/workspace/.probe'"
+    must_fail "INSERT a forged ledger row"            python3 "$PROBE_DIR/ledger_insert.py"
+    must_fail "overwrite results/ evidence"           sh -c "echo x > '$ROOT/results/.probe'"
+    must_fail "replace a trust binary"                sh -c "echo x > '$ROOT/target/debug/verdict'"
+    must_fail "run the verdict binary to write a row" sh -c "cd '$ROOT' && ./target/debug/verdict comrak --candidate-bin /bin/true --run-id forged-direct --playbook-class 1 --hypothesis x --hotspot x"
+    must_pass "harnessd socket read_ledger"           python3 "$PROBE_DIR/sock_check.py"
+    must_pass "harnessd refuses ../ escape in a diff" python3 "$PROBE_DIR/escape_check.py"
+
+    chown "${SOCK_GRP_SAVED%% *}" "$SOCK"; chmod "${SOCK_GRP_SAVED##* }" "$SOCK"
+else
+    echo "--- user mode skipped (no $AGENT_USER user) ---"
+fi
+
+if [ "$FAIL" -eq 0 ]; then
+    echo "isolation-check: ALL CHECKS PASSED"
+else
+    echo "isolation-check: BOUNDARY HOLES FOUND" >&2
+fi
+exit "$FAIL"