ONT-4g: every binary is an ONT-001 entity (Σ binary + extract:binary + surface_audit.csv ledger) #4476

owner: infra-83 (spec row) · aprender-df (surface_audit.csv ledger)

ONT-001 amendment: every aprender binary becomes an entity (Σ binary), per operator-shared review #4 (2026-09-26). Row id: next free after ONT-4f (4f is taken by GitHub objects in v4.16), proposed ONT-4g.

Live spec is v4.16 (infra origin/main; 29 rows, 14 bound, 48%), not v4.3 or v4.9 as the reviews cited. docs/audits/surface_audit.csv on aprender main has 839 lines (last touched 5fa13fe, 2026-09-25); the attachment the review saw was empty, not the file.

Scope

• Σ binary with sub-concepts cli-command, http-route, mcp-tool (⊑ via ONT-4d).
• extract:binary, reading the BUILT artifact: cargo metadata [[bin]], recursive --help, mounted router, MCP tools/list. It must be deterministic, with a planted pc_extract control.
• Shapes absorbing these dogfood gates:
  • G0.1: --version == HEAD.
  • G0.5: duplicate apr bin targets diverged.
  • G1.2: help.
  • G1.3: value_parser. apr serve run --backend is live RED.
  • G1.4: apr eval --task has 8 undocumented arms.
  • G4.1 and G4.2.
• surface_audit.csv as a csv entity, with header, evidence_path and resolves shapes.

Coverage measures

• Structural: 100% of binaries per cargo metadata.
• Behavioral: at or above the 17.1% baseline and never down, with at least 1 feature per binary.

Falsifiers

• RED fixture: delete one CSV row for a live command, and the gate goes RED by name.
• The extractor-missing count is 0 at the tag.

Gate

0.70 FINAL (not rc.1): this row is bound, apr-dogfood --release --twice is GO with a byte-identical receipt, and ONT-11 (pmat) is released.