Engineering notes on controlled refactors, equivalence evidence, and AI change transactions.https://kodeproof.com/en-ushttps://kodeproof.com/journal/async-side-effects-need-provenance/https://kodeproof.com/journal/async-side-effects-need-provenance/An effect observed after an await should be attributed only when the harness owns the continuation. Otherwise the honest result is no claim.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/equivalence-is-tiered-not-binary/https://kodeproof.com/journal/equivalence-is-tiered-not-binary/Static structure, module loading, runtime traces, visual states, and end-to-end flows cover different failure classes. One green tier cannot stand in for the others.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/initialization-order-is-behavior/https://kodeproof.com/journal/initialization-order-is-behavior/Moving code can preserve every exported value and still change effects, cycles, registries, scheduling, or top-level-await order.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/module-boundary-recovery-should-abstain/https://kodeproof.com/journal/module-boundary-recovery-should-abstain/Recovered bundles often lack original file boundaries. A structural system should use exact evidence where it exists, deterministic fallbacks where it does not, and refuse contradictory paths.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/performance-refactors-need-parity-evidence/https://kodeproof.com/journal/performance-refactors-need-parity-evidence/A faster benchmark is not enough if caching, parsing, batching, or concurrency changes values, ordering, resource ownership, or user-visible behavior.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/public-entrypoints-without-compatibility-facades/https://kodeproof.com/journal/public-entrypoints-without-compatibility-facades/A hard-cut refactor should move consumers to the new owner, prove the retained contract, and refuse when closure requires a permanent re-export shell.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/a-refactor-is-a-transaction/https://kodeproof.com/journal/a-refactor-is-a-transaction/Risky changes become governable when intent, before-state, allowed mutations, evidence, verdict, and transfer are one bound transaction.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/relocating-a-file-is-a-semantic-change/https://kodeproof.com/journal/relocating-a-file-is-a-semantic-change/Framework scanners, routes, singleton identity, provider scope, styles, assets, workers, and generated consumers can all make a filesystem move observable.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/runtime-characterization-catches-static-misses/https://kodeproof.com/journal/runtime-characterization-catches-static-misses/Captured calls, receivers, values, effects, readiness, and state coverage can expose refactor regressions beyond the source graph—when their limits stay explicit.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/from-changed-symbols-to-affected-tests/https://kodeproof.com/journal/from-changed-symbols-to-affected-tests/A workspace symbol map can connect bindings, imports, reverse paths, and focused tests—but incomplete discovery must remain visible.Wed, 12 Aug 2026 00:00:00 GMThttps://kodeproof.com/journal/a-verification-harness-must-test-itself/https://kodeproof.com/journal/a-verification-harness-must-test-itself/Baseline checks, calibrated mutations, differential oracles, false-block reporting, and harness-failure categories keep green verdicts from becoming self-certification.Wed, 12 Aug 2026 00:00:00 GMT