docs(perception): record binary full-graph evidence and remaining gates

docs/adr/0049-stream-first-perception-profiles.md

@@ -1,6 +1,7 @@
 # ADR 0049 — Stream-first full perception profiles
 
-Date: 2026-09-01. Status: stage-1 contract candidate; not a runtime cutover.
+Date: 2026-09-01; updated 2026-09-02 13:55 MSK. Status: stage-1 engineering
+baseline complete; stage-2 binary full-graph prototype, not a product runtime cutover.
 Execution order remains the four stages in
 [the ExecPlan](../OBSERVATORY_REALTIME_PROFILES_EXECPLAN.md).
 
@@ -189,6 +190,59 @@ Next: preserve the existing causal sensor cut at camera release, connect decoded
 bundles to the same full graph, then repeat full-profile parity/timing. The last
 full-profile p95/p99 remains 124.98/136.12 ms, not this decoder's timing.
 
+Stage-2 full binary graph increment, 2026-09-02 13:55 MSK (`221e429`):
+the preceding decoder-only boundary is now connected to the existing full graph.
+The recording adapter alone reads bounded current fMP4 fragments and normalized
+map point/pose rows. It emits original timestamps at 1× through the existing
+binary socket ABI; the consumer and decoder receive neither source paths nor
+recording length. The diagnostic container still mounts source/code/weights and
+a private pinned PyAV target: this is not standalone packaging or a network test.
+
+Native decoding runs in a lifecycle-owned CPU child with a 1-GiB address-space
+limit. POSIX pipe RPC reserves header scratch, accepts ≤1 MiB input and writes
+exactly 1,440,000 BGR bytes into the caller's pre-reserved buffer. A 250-ms request
+deadline, malformed reply or lost lease terminates the stream; no implicit retry
+across predictive codec state. Process/native memory remains under container
+limits, separately from the 16-MiB application payload budget.
+
+`streaming_sensors` owns the existing causal selection rules. Its rolling and
+fresh caches are each bounded by 64,000 points/64 increments; camera arrival
+freezes the original-time cut before decode, never selecting future pose/points.
+The legacy pilot delegates to the same selection rules. A separate CPU oracle
+compares the old producer's complete points/rolling/times/pose/lineage bundles.
+`admit_reserved` transfers the decoded allocation atomically to the common
+mailbox; rejection retains caller ownership until buffers are discarded.
+The global two-pending limit and active-input protection remain unchanged.
+
+Worker evidence: 384/384 input events, 128/128 full graph outputs, no drops,
+126 outputs before source End; first result 583 ms. BGR, masks, proposals,
+tracks, threats, material and raw TGS costmap match the reference on 128/128.
+Two `metric_geometry.range_m` values differ by 1.3877787807814457e-17 m
+(seq13/observation3 and seq29/observation2): **strict raw parity remains false**.
+No rounding/tolerance was added; the numerical cause remains unreproduced.
+The geometry distance-estimator definition and all thresholds are unchanged.
+
+Full p95/p99 161.974/191.806 ms FAIL the unchanged 125-ms target. Available
+camera/sensor pairs remain 76/128; 74 scenes are fresh at receipt, with seq106/107
+additionally expiring. Auto GPU memory clocks fall from 10,251 to 405–810 MHz;
+this correlates with longer DDRNet/queue times, but is not a controlled transport
+A/B. Peak input 8,883,895 bytes; remaining input/children/lease zero after stop.
+VRAM peak 2,367 MiB is not GPU utilization or a compute-capacity percentage.
+Normal 32-frame CPU oracles and a synthetic hung-decoder cleanup probe pass.
+
+The full GPU sample preserves its exact measured code snapshot. Subsequent
+review bounds finite-check scratch, closes sockets/cache after constructor or
+pre-start failure, and removes CPU-harness heartbeat shutdown noise; those three
+files pass a separate Worker CPU oracle, not a second GPU performance sample.
+271 focused tests, Ruff/format and five-module mypy pass. Four temporarily stopped
+Mission Core services are restored; Ollama/Frigate remain exited/restart=no.
+Manifest: 161 artifacts, SHA-256
+`e224de4e9f2c5fd419fe0fb0b9be6e01ec267628568e104795ae211ec803bce4`,
+`.runtime/perception-stage2-binary-graph-worker-20260902T1335MSK/manifest.json`.
+Next: explain numerical reproducibility, measure/tune remaining pipeline tails,
+then complete controller/network/standalone boundaries within stage 2.
+No quality, physical-live, vehicle-control or real-time qualification is granted.
+
 Open → validate bounded metadata/claim → warm models → Ready → start the replay
 clock → observations and incremental scenes → stop/drain bounded state → close
 and asynchronously seal the immutable receipt. A live source already producing