[WIP] feat(cesium): optional Cesium/ArcGIS reference + parity oracle crate

.claude/rules/agent-cargo-hygiene.md

@@ -0,0 +1,33 @@
+# Agent Cargo Hygiene — one target dir, no 12× build residue
+
+## The problem
+
+When the orchestrator fans out a fleet of subagents (the Sonnet build/fix
+agents), each agent that runs a full `cargo build`/`check`/`test` in its **own**
+isolated working copy materialises its own `target/`. This workspace's
+`target/` is ~7 GB. Twelve agents in twelve worktrees = ~84 GB of duplicated
+build residue and twelve cold compiles competing for the same cores.
+
+## The rule
+
+- **Opus (orchestrator + Opus agents): run cargo freely.** No restriction.
+- **Sonnet fleet agents: do NOT each run a full compile.** They edit code and
+  reason; they must not spawn isolated worktrees or trigger their own cold
+  `cargo build`/`check`/`test` that each grow a separate 7 GB `target/`.
+  - "tests yes, compile no": a targeted `cargo test`/`clippy` against the
+    **shared** workspace `target/` is fine; a bare compile-only
+    (`cargo check`/`build`) is wasted residue — clippy already compiles.
+- **Verification is centralised.** The orchestrator (Opus) runs
+  `cargo fmt` + `cargo clippy` + `cargo test` **once**, in the single shared
+  `target/`, after the fleet's edits land. One build, not twelve.
+
+## How the orchestrator fans out work
+
+- Spawn the fleet **without** `isolation: "worktree"` so all agents share the
+  one repo checkout and one `target/`.
+- Tell each agent explicitly: *edit only; do not run `cargo build`/`check`; do
+  not create a worktree; the orchestrator compiles and lints centrally.*
+- After edits, the orchestrator runs the gates (`cargo fmt -p <crate>`,
+  `cargo clippy -p <crate>`, `cargo test -p <crate>`) — keeping the tree
+  `cargo clippy -- -D warnings`-clean (see `CLAUDE.md` Hard Rules) and
+  `cargo fmt`-clean on the pinned toolchain, with no residue blowup.

CLAUDE.md

@@ -21,6 +21,7 @@ This project uses specialized agents in `.claude/agents/`. Follow these rules:
    - Feature prioritization, gap analysis, phase planning → `l3-strategist`
 4. When encountering `unsafe` code, **always** delegate to sentinel-qa for audit
 5. Write decisions to the blackboard, not just to chat
+6. **Cargo build residue** — fan out the Sonnet fleet in the *shared* checkout (no per-agent worktrees), edit-only; the Opus orchestrator compiles/lints/tests **once** in the single 7 GB `target/`. Opus may run cargo freely. See `.claude/rules/agent-cargo-hygiene.md`.
 
 ## Hard Rules
 - OpenBLAS and MKL are **mutually exclusive** feature gates. Never both.

crates/cesium/Cargo.toml

@@ -0,0 +1,21 @@
+[package]
+name = "cesium"
+version = "0.0.0"
+edition = "2021"
+publish = false
+description = "OPTIONAL Cesium/ArcGIS reference + parity oracle — NOT a production dependency. Reverse-engineers 3D Tiles / KHR_gaussian_splatting / ArcGIS-PBF into ndarray CAM SoA for parity diffing against splat3d. Dev/reference only; relocates to lance-graph/crates/cesium when flawless."
+
+# Workspace member via `crates/*`, deliberately NOT in `default-members` →
+# optional/dev by construction (a member, never a default build target).
+# RULE 3: no serde, no json crates. Prefer ArcGIS PBF (binary) over f=json.
+# JSON, if unavoidable at the cold import boundary, never reaches the hotpath.
+
+[dependencies]
+# Wired when modules go live (see src/lib.rs). The skeleton is dependency-free
+# so it compiles trivially and CI stays green.
+# ndarray = { workspace = true }            # splat3d::GaussianBatch CAM SoA target + cam_pq
+# prost / quick-protobuf = ...              # ArcGIS PBF decode (binary, no-JSON) — module `arcgis_pbf`
+
+[features]
+default = []
+# oracle = []   # gates module `oracle` (reference-render diff harness) once a real reference renderer is wired