Files
wanderbooks/docs/parity.md
T
swaitsandClaude Fable 5.1 af553a3706
check / check (push) Canceled after 0s
two-user / two-user (push) Canceled after 0s
docs: the 2026-10-28 drift review; the plan, status and docs brought to date
The planning session read plan/served.md, every design document and the
five branches the owner paused on 2026-10-27 against main (44ee4083),
with dry-run merges touching no branch. plan/2026-10-28_DRIFT_REPORT.md
lists every divergence and judges every recorded departure (all kept;
three owed back; one needs a decision: P6 made ledger-store depend on
ledger-import).

The plan: section 0 "What changed on 2026-10-28"; 8.0.1 and the unit
Status lines name S4.4, S5, S6, S7 and P6 as built but unmerged; 8.0.2
records the destination (D-56: the installed app, P11a starts now) and
the resume order with the known conflicts (the shared documents.rs
test file, the types.rs appends, P6 retaking schema 18, the law numbers
34 to 37); 8.0.3 lists the names the EM approved during the wave; P11a
gains step 0 (the macOS and Windows keyring stores, the Windows data
root and pipes, a cross-platform CI build: today the agent path runs on
Linux alone); Q-5 is due and Q-8 asks whether D-47 to D-54 stand; the
Landlock sentences in section 2 and server.toml are struck.

STATUS.md and HANDOFF.md say where things stand and how to resume;
roadmap.md and gui.md are rewritten to today. The docs lose their
stale facts: 122 tools, 2,700 tests, the parity floor at 21 with the
P4b notes the slices never wrote, the ten crates and their dependency
graph (jiff added to the core's allowed list), the cutover of
2026-10-20 recorded in capability-parity.md and parallel-run.md, the
P4b S1 law and its two Kani harnesses added to verification.md (law
34), the proof counts (51 and 9), and README, the site and install.sh
honest about macOS (the viewer runs; connecting an agent waits for
P11a's keyring store, and the installer now says so instead of failing).

just check on main at 44ee4083: exit 0 (167 suites, 2,871 passed, 0
failed, 7 ignored, the server-only build clean). No code changed.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01HS8WZziDnyxunC23MUxrLp
2026-10-28 18:26:23 -06:00

9.4 KiB

Parity catalog

Every semantic feature we intend to clone, with its status. Updated in the same commit as the feature. The floor never decreases: the count of done items is monotonic across commits.

Statuses: done = implemented + invariant-tested + golden-covered. partial = implemented but missing tests or goldens. todo = not started. No other statuses.

Floor: 21 done (2026-10-28; it was 10 on 2026-10-10, when the fixed-asset register was added, and the sections below record each rise).

Area GnuCash counterpart (a cross-check, not the spec) Status Notes
Chart of accounts (5 types, codes, hierarchy) Accounts tab done account.rs; placeholder support in
Double-entry validation (balanced, ≥2 lines) Journal validation done journal.rs::validate
Exact decimal money, no floats — (we go further) done money.rs; Currency ISO codes
Posted-entry immutability Read-only posted txns done reversal via reverse_entry
Trial balance Reports → Trial Balance done golden-covered
Balance sheet (A = L + E) Reports → Balance Sheet done current earnings folded in pre-close; golden-covered
Profit & loss Reports → Income Statement done golden-covered
P&L for a date range, line per account (closing entries excluded) Reports → Income Statement (custom dates) partial hand-verified fixture + property tests; no golden file yet
Balance sheet as of a date, line per account Reports → Balance Sheet (as of) partial hand-verified fixture + property tests; no golden file yet
General ledger by account (running balance, split) Reports → General Ledger partial hand-verified fixture, ties to trial balance; no golden file yet
Trial balance as of a date Reports → Trial Balance (as of) partial hand-verified fixture; no golden file yet
Statement of changes in members' equity Reports → Statement of Changes in Equity partial hand-verified two-member fixture incl. rounding and a close; no golden file yet
Tax line mapping + tax summary Accounts → Tax line mapping; Tax reports partial hand-verified fixture (50% meals, nondeductible, contra income); no golden file yet
Reversing entries Reverse transaction done linked via reversal_of
Canonical report snapshots (JSON) — (our oracle format) done reports::snapshot
Fixed-asset register + straight-line depreciation Fixed Asset register done assets.rs; golden-covered schedule; idempotent runs; disposal with gain/loss; posted (the books') vs scheduled, in-service vs acquired dates, the §723, depreciable and §704(c) figures (P3)
Cash flow statement (direct, with the reconciliation schedule and noncash disclosures) Reports → Cash Flow done R-FUTURE-3; rules.md B-14 (P3 defect 1)
Foreign-currency lines (base + foreign stored) Multi-currency accts done R-FUTURE-1
Period close (closing entry to Retained Earnings) Close books done R-FUTURE-2
Bank reconciliation (cleared flags + report) Reconcile done —
QuickBooks CSV import (bank txns, chart of accounts) Banking → Upload done R-FUTURE-4
QuickBooks IIF + XLSX export Export / reports done R-FUTURE-4
A/R invoices + payments + aging Business → Invoices done R-FUTURE-5; since P4b S1 (D-45) a document's paid, outstanding and status are read from its tagged ledger lines, hand lines on the receivables account are refused, books.void_document and books.control_check tie the subledger to the control account (rules.md B-38); S2 books.documents/books.document and the viewer pages; S3 the invoice PDF; S4.1-S4.3 terms, numbers, line accounts, the issued PDF filed at issue (behind documents_v2, the owner's next upgrade)
A/P bills + payments + aging Business → Bills done R-FUTURE-5; the same S1 derivation and control guard on the payables account; S4.1-S4.3 the vendor's invoice number, terms, every line on its own account (behind documents_v2)
Payroll runs (accounting only, no tax tables) + tax remittance Payroll done —
Tracking classes (divisional P&L) Class tracking done invoice and bill lines take a class too (projects, rules.md B-37 item 8; QBO/Xero class or tracking per line)
CPA handoff package (TB + GL xlsx, P&L + BS pdf, zip) Reports → export done —
Budgets Budgets todo R-FUTURE-6 (declined as bloat)
Scheduled transactions (recurring entries → drafts) Scheduled txns / Recurring transactions partial hand-verified fixture incl. month-end dates; drafts only, by design
Payout gross-up (deposit → revenue, fees, adjustments) Bank deposit with fee lines; Xero/QBO Stripe & Shopify integrations partial hand-verified fixture incl. classes and a negative payout; no statement parsers yet
1099 vendor tracking + year-end worksheet Vendors → Track payments for 1099; 1099 report partial hand-verified fixture (bill payments, card exclusion, reversal, year boundary); no golden file yet
Prepaid expense + deferred revenue amortization Amortization schedules (Xero/QBO add-ons) partial hand-verified fixture, to the cent; no golden file yet
Automated cross-implementation diff harness (GnuCash first) — (just oracle) partial live: tests/oracle_gnucash.rs runs 200 random books through GnuCash 5.10 in a pinned container, 15,800 exact comparisons, weekly in CI (docs/oracle.md Layer 5); open: fixture books diffed as snapshot() output, and the machine-readable catalog with CI enforcing this floor

Workflow/UI parity (QuickBooks/Xero reference) gets its own catalog when the egui phase starts; semantics come first.

P0 guard rails (2026-10-16)

P0 (plan/served.md) changed no feature in the catalog above, so no status moved and the floor stands. It hardened what exists: an older version refuses books from a newer one as newer, not corrupt (rules.md B-27); the MCP server fails closed after an internal error, and no input reaches one (dates are four-digit years, amounts at most a line's, B-28); local files were read only from the import roots, never the books, the vault or its key (P2 slice 5 removed local paths: files now come in only as uploads, D-46); no file with a full TIN is filed into the books (B-26); the agent is told the rules in force in a short connect text and a handbook, and no agent text points at the books' files, git or the repo.

P4b: receivables and payables, first class (D-45; 2026-10-23 to 2026-10-27)

The two A/R and A/P rows above were done before P4b and stay done; what moved is their notes, so the floor stands at 21. S1 changed what the figures are (derived from tagged standing lines, so a reversed payment no longer counts and a void is exact; proven by Lean control_agrees and Kani bounds_kept_is_the_definition_on_books_in_bounds), S2 and S3 added the read tools, the viewer pages and the PDF, and S4.1 to S4.3 added terms, numbers, line accounts, the parties' snapshots and the issued copy, journaled only when set so an old-shape document is byte for byte the same. The rest of P4b (S4.4 and S4.5, S5 sent tracking, S6 paying on terms, S7 bad debts) is built on paused branches or open as plan/served.md 8.0.1 says; each adds a note to these rows when it lands. No golden moved.

U0b: one attention engine (D-53, 2026-10-26)

No semantic feature changed, so no status moved and the floor stands (10 done). Needs attention used to be computed by the viewer alone; it now lives in ledger-package::attention, over PackageBooks, and both the viewer and books.start read it (the same items, the same prompts), so the list the human sees and the next steps the agent gets cannot drift. The parity test the_viewer_and_books_start_see_the_same_attention compares them item for item on the demo books and on a book written entry by entry.

Capability parity (AI-first phase)

Semantic parity (above) is about correctness: the engine computes the right numbers. Capability parity is about usefulness: can the new system do everything the GSheet+GDrive system does today? Tracked separately in docs/capability-parity.md, with its own cutover rule (parallel run + the owner's approval). The two catalogs converge: when both are green, the sheet retires.

P13 bookspec (2026-10-26)

P13 is a specification, not a feature, so no row of the semantic catalog moves and the floor stands. It adds the checker crate (bookspec/checker: the example schema, the rule identifiers BS-<area>-<n> and the Engine trait), the runner (bookspec/runner: pass, fail or not claimed per rule), and the rule index from B-1 to B-45 (bookspec/spec/rules-index.md). Every existing bookspec example still runs on every cargo test, through both the loader's own checks and the Engine trait.

P9a self-host deployment (2026-10-26)

P9a is a deployment, not a semantic feature: the same engine, store, MCP surface and reports on a machine of the owner's own. No row above changed status and the floor stands. What it adds is the enforced isolation the catalog's parity claims rest on in practice: a dedicated account, a data root only that account can read, books.start saying service_user (enforced) (--isolation), and the same bearer-guarded MCP door on loopback for Caddy or a tunnel. crates/ledger-cli/tests/two_user.rs proves the account boundary and the move's head in CI (.github/workflows/two-user.yml); the recipe is deploy/README.md. The cutover rule in docs/capability-parity.md is unchanged.