Retire the "upper bound" label in the cause_shares replay crosswalk

[MaxGhenis]

Aligns analysis/cause_shares.py and analysis/cause_shares.json with the corrected amterr lab reading from #92. That PR withdrew the claim that the 37 replay cases that do not reproduce the issued benefit are an "upper bound on computation-side error". Of the 26 Colorado cases with a layer-2 computational finding, 13 reproduce, 10 do not and 3 were not replayed, and the solver moved nothing in 17 of the 37 (paper/snapshot/labs/amterr/ANALYSIS.md, "Layer 3: engine replay / Results"; claims_audit.json case_level).

Stacked on #92. This PR's base is amterr-lab-claims-audit until #92 merges. After that I rebase onto main and retarget.

What changes in colorado_replay_reconciliation

Leaf	Before	After
outcome keys (3 slices, 2 cross-tabs)	explained_input_facts, computation_side_upper_bound	reproduced, not_reproduced
reference.classification	"abs(engine_on_original - RAWBEN) <= 5; a miss is a computation-side upper bound, not a proven computation error"	"reproduced if abs(engine_on_original - RAWBEN) <= 5, else not_reproduced"
committed_prose_discrepancy.claim_location	paper/snapshot/labs/amterr/ANALYSIS.md:L62-L67	… :L62-L67 at commit 755a7f3179e964dccdf6dc2f7266e7c4758a0141
committed_prose_discrepancy.claim_status	(absent)	points at the lab's correction (ANALYSIS.md section "The 10 broad-coded cases that do not reproduce"; claims_audit.json case_level.broad_coded_misses)

The labels are single-sourced in REPLAY_OUTCOMES. The generator now raises if any replay row's within5 flag disagrees with abs(engine_on_original - RAWBEN) <= 5, so the classification string is checked against the data rather than asserted. All 88 values under the renamed keys are unchanged.

No other code reads the old keys. A grep of app/, analysis/, paper/, paper-causal/, tests/, scripts/ and docs/ finds them only in these two files.

Hash-chain regeneration

cause_shares.json records the sha256 of its generator, and other artifacts pin the JSON's sha256, some of them transitively. Each artifact below was regenerated with its own generator, in dependency order. A leaf-by-leaf diff confirms that no data value changed. The only changes are input hashes and, where an artifact records it, environment.platform.

Artifact	Changed leaves
analysis/cause_shares.json	the four leaves above, plus provenance.generator.sha256
analysis/coding_consistency.json	provenance.reference_artifact_sha256
app/public/engine_scenario_data.json	provenance.cause_shares_sha256
app/public/app.js	ADOPT_DATA_SHA256 pin; ASSET_V 20260820b → 20261003a (with index.html), per the cache-buster rule, so browsers do not pair a cached payload with the new pin
analysis/adoption_national.json	provenance.engine_scenario_data_sha256
analysis/persistence_results.json	input_hashes.coding_consistency; environment.platform
analysis/persistence_backtest_results.json	input_hashes.{coding_consistency,persistence_results}; environment.platform
analysis/interventions_results.json	input_hashes.{coding_consistency,persistence_results}
analysis/uhip_decomposition_results.json	input_hashes.{cause_shares,coding_consistency}; environment.platform
analysis/fixed_donor_decomposition_results.json	input_hashes.{cause_shares,coding_consistency,joint_fit_results}; environment.platform

Environment strings. I regenerated on Python 3.14.4 with numpy 2.5.1, pandas 2.3.3 and pyreadstat 1.3.5 (the recorded versions), so python and package strings are unchanged. environment.platform moves from macOS-26.5.1-… to macOS-26.6.2-… because the Mac's OS was updated; this is environment noise, not data. A side effect: the two local raw-regeneration tests that failed on clean main only because of that string (test_fixed_donor_decomposition, test_uhip_decomposition) now pass on this machine. They still skip in CI.

The memos the generators also write (PERSISTENCE.md, PERSISTENCE_BACKTEST.md, INTERVENTIONS.md, UHIP_DECOMPOSITION.md, FIXED_DONOR.md) came out byte-identical. build_interventions_app_data.py reproduces app/public/interventions_data.json byte for byte.

Left as historical records (deliberately not changed). Both still contain the old cause_shares.json hash c5b16617…:

• analysis/NATURE_REPORT.md is the dated 2026-08-11 lane report for PR Commit the layer-2 finding-nature tabulation; quote it in the paper #39. Its gate table records that the artifact hashed to c5b16617… on two runs that day, which remains true. It has no generator and no test reads it.
• paper-causal/_fixed_donor_results.readonly.json is the frozen input snapshot from PR The migrations paper: three SNAP eligibility-system replacements in the QC record (revision 1) #74 (2026-08-16). It has never been refreshed: on main it already differs from analysis/fixed_donor_decomposition_results.json in three input hashes (coding_consistency, joint_fit_results, system_migrations), and no test compares the two. tests/test_migrations_figures.py pins the snapshot's own hash and skips without matplotlib.

Coordination with the manuscript task

The manuscript prose (paper/index.qmd, paper/FACTS.md D4) still calls the 37 a "computation-side upper bound". That text belongs to the separate manuscript task ("Correct FSBEN and reconstruction claims in the snap-qc-sim paper"), so this PR does not touch paper/. Neither file names the renamed keys, so nothing there is forced. FACTS K2 cites analysis/cause_shares.json colorado_replay_reconciliation by section name, which still resolves.

Invariants and tests (tests/test_cause_shares.py)

Invariants, each executed:

• Classification is the documented test. For every committed replay row, within5 == (abs(engine_on_original - rawben) <= 5). The generator enforces this too.
• Labels. Every slice and cross-tab carries exactly {reproduced, not_reproduced}, and the section contains no "upper bound" or "computation_side" text.
• Partitions. In every slice the two outcomes sum to the total in n, weighted n and dollars, and their shares sum to 1. The official (97) and subthreshold (186) slices add up to all 283, outcome by outcome. The fractional cause cross-tab and the any-agency cross-tab each sum to the official slice. The broad residual is no larger than the not-reproduced count.
• Differential (two implementations). cause_shares.py reads the FY2024 SAV; the lab's audit_claims.py reads the May 2026 CSV posting. They agree on 283/246/37 cases, on dollars to the cent ($99,128,122.62 / $71,388,303.72 / $27,739,818.90), on the 76/21 above-threshold split, on 283/283 solver-engine concordance, and on the broad residual (10 cases, $4,469,987.48).
• Pointer. claim_location names a full 40-hex commit. The cited ANALYSIS.md section and figures exist in the revised file, and lines 62–67 at that commit hold the "$3.28M/yr = 3.3%" claim. The git-history check skips in shallow CI checkouts.
• Property (Hypothesis). _replay_metric is additive over any two-way partition of a slice, for arbitrary weights and amounts.

Against the pre-change JSON, four of the new tests fail; against the new JSON all 14 tests in the file pass.

Verification

Full local suite and independent review: in progress; results will be added here.

axiom: n/a: analysis artifact labels, regenerated provenance hashes and tests; no policy encoding.

🤖 Generated with Claude Code

[MaxGhenis]

Superseded by #94: GitHub closed this PR when #92's branch was deleted after its squash merge. #94 carries the same tree, rebased onto main.