T08: close out - workplan notes and ground-truth record

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 1629012@bnt-lap001
Assistant-Session: 78d4fb13-8a1e-474b-87a3-9b9261c49a39

workplans/TD-WP-0002-vertical-spike-crystallization.md

@@ -358,7 +358,7 @@ The headline result is a narrowing, not a confirmation:
 
 ```task
 id: TD-WP-0002-T08
-status: progress
+status: done
 priority: high
 state_hub_task_id: "e2403d3c-bc35-5dd3-b1c8-2474663e06d0"
 ```
@@ -378,6 +378,39 @@ one publicly normalised authorization defect kills the thesis permanently. Targe
 is zero across the set, and a non-zero result is a stop-and-redesign signal, not
 a tuning exercise.
 
+**Done 2026-08-22.** `classification.py`, `CompositeDriver`,
+`scenarios/full_journey.py` (one asset crossing both surfaces). 141 tests pass.
+
+**False Adaptation Rate = 0/7**, including the three E-003 attacks. The other
+side of the trade is asserted too — 11 of 12 mechanical mutations are absorbed
+without a human, so the safety result is not bought by escalating everything.
+
+| Ground truth | Accepted without a human |
+|---|---|
+| MECHANICAL (12) | 11 |
+| SEMANTIC (4) | 2 — both genuinely inert here |
+| DEFECT (7) | **0** |
+
+- **F-0006 (resolved)** — the T02 decision table listed `SEMANTIC_CHANGE` as an
+  outcome it could produce. It cannot: M12 and M19 are behaviourally identical,
+  as the lab has asserted since T05. `PRODUCT_DEFECT` and `SEMANTIC_CHANGE`
+  collapse into one escalating outcome, `BEHAVIOUR_CHANGED`, and the distinction
+  becomes a recorded human adjudication. `INTENT_CHANGED` survives but is
+  detected by the *claim fingerprint* moving — a fact about the recorded use
+  case, not an inference about behaviour. Erring toward "false alarm" costs one
+  review; erring toward "false adaptation" ends the project.
+- **Two classifier defects found and fixed rather than reported.** Claims
+  downstream of a failed realization now yield `INCONCLUSIVE` rather than `FAIL`
+  — accusing the system of a defect on the strength of the test's own inability
+  to act is the mirror image of a false adaptation. And the browser driver now
+  records a page signature, so a surface change is detectable even when the
+  chosen interaction path is identical.
+- **What this does not establish.** FAR = 0 follows largely from architecture
+  (D-02, plus `SAFE_TO_ACCEPT` being a closed two-element set). The experiment
+  confirms the architecture behaves as designed over 23 hand-written mutations;
+  it says nothing about mutations nobody thought of. That distinction should
+  survive into any external claim.
+
 ## Crystallize one asset into deterministic regression
 
 ```task