space-architect 1.3.0 → 2.0.0.rc1

data/lib/space_src/shell_integration.rb

@@ -0,0 +1,321 @@
+# frozen_string_literal: true
+
+require "fileutils"
+require "pathname"
+
+module Space::Src
+  # Generates the standalone `src` fish shell integration and completions.
+  # All paths resolved through Space::Src::Paths (no external core deps).
+  module ShellIntegration
+    FISH_TEMPLATE = <<~'FISH'
+      # Generated by space-src. Do not edit by hand.
+
+      function src --wraps src --description "Navigate source checkouts"
+          if not set -q __src_compat_checked
+              set -g __src_compat_checked 1
+              set -l __src_installed_version __SRC_VERSION__
+              set -l __src_binary_version (command src --version 2>/dev/null)
+              if test "$__src_binary_version" != "$__src_installed_version"
+                  echo "space-src: shell integration version $__src_installed_version does not match binary version $__src_binary_version; re-run 'src shell fish install'" >&2
+              end
+          end
+
+          switch "$argv[1]"
+              case repo org sync status config daemon clone shell
+                  command src $argv
+                  return $status
+              case '*'
+                  set -l __src_output (command src $argv)
+                  set -l __src_status $status
+
+                  if test (count $__src_output) -gt 0
+                      printf "%s\n" $__src_output
+                  end
+
+                  if test $__src_status -eq 0
+                      set -l __src_target $__src_output[-1]
+                      set __src_target (string replace -r "^~(?=/|$)" $HOME -- $__src_target)
+                      if test -d "$__src_target"
+                          cd "$__src_target"
+                      end
+                  end
+
+                  return $__src_status
+          end
+      end
+    FISH
+
+    FISH_COMPLETIONS = <<~'FISH'
+      # Generated by space-src. Do not edit by hand.
+
+      function __src_complete_command
+          set -l tokens (commandline -opc)
+          set -l index 2
+
+          while test $index -le (count $tokens)
+              set -l token $tokens[$index]
+
+              switch "$token"
+                  case "-*"
+                      set index (math $index + 1)
+                      continue
+                  case "*"
+                      echo $token
+                      return 0
+              end
+          end
+      end
+
+      function __src_complete_needs_command
+          test -z "(__src_complete_command)"
+      end
+
+      function __src_complete_using_command
+          contains -- (__src_complete_command) $argv
+      end
+
+      function __src_complete_first_argument_after
+          set -l commands $argv
+          set -l tokens (commandline -opc)
+          set -l index 2
+          set -l matched_command 0
+
+          while test $index -le (count $tokens)
+              set -l token $tokens[$index]
+
+              switch "$token"
+                  case "-*"
+                      set index (math $index + 1)
+                      continue
+              end
+
+              if test $matched_command -eq 0
+                  if contains -- "$token" $commands
+                      set matched_command 1
+                  else
+                      return 1
+                  end
+              else
+                  echo $token
+                  return 0
+              end
+
+              set index (math $index + 1)
+          end
+
+          return 1
+      end
+
+      function __src_complete_has_first_argument_after
+          set -q argv[1]; or return 1
+          set -l first_argument (__src_complete_first_argument_after $argv)
+          test -n "$first_argument"
+      end
+
+      function __src_complete_second_argument_after
+          set -q argv[1]; or return 1
+          set -l command $argv[1]
+          set -l tokens (commandline -opc)
+          set -l index 2
+          set -l matched_command 0
+          set -l matched_first_argument 0
+
+          while test $index -le (count $tokens)
+              set -l token $tokens[$index]
+
+              switch "$token"
+                  case "-*"
+                      set index (math $index + 1)
+                      continue
+              end
+
+              if test $matched_command -eq 0
+                  test "$token" = "$command"; or return 1
+                  set matched_command 1
+              else if test $matched_first_argument -eq 0
+                  set matched_first_argument 1
+              else
+                  echo $token
+                  return 0
+              end
+
+              set index (math $index + 1)
+          end
+
+          return 1
+      end
+
+      function __src_complete_has_second_argument_after
+          set -q argv[1]; or return 1
+          set -l second_argument (__src_complete_second_argument_after $argv)
+          test -n "$second_argument"
+      end
+
+      function __src_complete_first_argument_is
+          set -q argv[1]; or return 1
+          set -l expected $argv[1]
+          set -e argv[1]
+          test "$(__src_complete_first_argument_after $argv)" = "$expected"
+      end
+
+      function __src_complete_checkouts
+          command src shell complete checkouts 2>/dev/null
+      end
+
+      function __src_complete_shells
+          command src shell complete shells 2>/dev/null
+      end
+
+      complete -c src -f -n "__src_complete_needs_command" -a clone   -d "Clone a repo into the source tree"
+      complete -c src -f -n "__src_complete_needs_command" -a config  -d "Show or update config"
+      complete -c src -f -n "__src_complete_needs_command" -a daemon  -d "Manage the background sync daemon"
+      complete -c src -f -n "__src_complete_needs_command" -a org     -d "Manage tracked GitHub orgs"
+      complete -c src -f -n "__src_complete_needs_command" -a repo    -d "Manage tracked repos"
+      complete -c src -f -n "__src_complete_needs_command" -a shell   -d "Manage shell integration"
+      complete -c src -f -n "__src_complete_needs_command" -a status  -d "Show sync status"
+      complete -c src -f -n "__src_complete_needs_command" -a sync    -d "Sync all tracked repos"
+      complete -c src -f -n "__src_complete_needs_command" -a "(__src_complete_checkouts)" -d "Checkout"
+
+      complete -c src -f -n "__src_complete_using_command config; and not __src_complete_has_first_argument_after config" -a path -d "Print config path"
+      complete -c src -f -n "__src_complete_using_command config; and not __src_complete_has_first_argument_after config" -a show -d "Show config"
+
+      complete -c src -f -n "__src_complete_using_command org; and not __src_complete_has_first_argument_after org" -a add    -d "Add a GitHub org"
+      complete -c src -f -n "__src_complete_using_command org; and not __src_complete_has_first_argument_after org" -a remove -d "Remove a GitHub org"
+      complete -c src -f -n "__src_complete_using_command org; and not __src_complete_has_first_argument_after org" -a list   -d "List tracked orgs"
+
+      complete -c src -f -n "__src_complete_using_command repo; and not __src_complete_has_first_argument_after repo" -a add    -d "Add a repo"
+      complete -c src -f -n "__src_complete_using_command repo; and not __src_complete_has_first_argument_after repo" -a remove -d "Remove a repo"
+      complete -c src -f -n "__src_complete_using_command repo; and not __src_complete_has_first_argument_after repo" -a list   -d "List repos"
+
+      complete -c src -f -n "__src_complete_using_command daemon; and not __src_complete_has_first_argument_after daemon" -a install   -d "Install launchd agent"
+      complete -c src -f -n "__src_complete_using_command daemon; and not __src_complete_has_first_argument_after daemon" -a uninstall -d "Uninstall launchd agent"
+      complete -c src -f -n "__src_complete_using_command daemon; and not __src_complete_has_first_argument_after daemon" -a start     -d "Start the agent"
+      complete -c src -f -n "__src_complete_using_command daemon; and not __src_complete_has_first_argument_after daemon" -a stop      -d "Stop the agent"
+      complete -c src -f -n "__src_complete_using_command daemon; and not __src_complete_has_first_argument_after daemon" -a restart   -d "Restart the agent"
+      complete -c src -f -n "__src_complete_using_command daemon; and not __src_complete_has_first_argument_after daemon" -a status    -d "Show agent status"
+
+      complete -c src -f -n "__src_complete_using_command shell; and not __src_complete_has_first_argument_after shell" -a init     -d "Print shell integration"
+      complete -c src -f -n "__src_complete_using_command shell; and not __src_complete_has_first_argument_after shell" -a fish     -d "Manage fish integration and completions"
+      complete -c src -f -n "__src_complete_using_command shell; and not __src_complete_has_first_argument_after shell" -a complete -d "Print completion candidates"
+
+      complete -c src -f -n "__src_complete_first_argument_is fish shell; and not __src_complete_has_second_argument_after shell" -a install   -d "Install fish integration and completions"
+      complete -c src -f -n "__src_complete_first_argument_is fish shell; and not __src_complete_has_second_argument_after shell" -a uninstall -d "Remove fish integration and completions"
+      complete -c src -f -n "__src_complete_first_argument_is fish shell; and not __src_complete_has_second_argument_after shell" -a path      -d "Print fish integration paths"
+
+      complete -c src -f -n "__src_complete_first_argument_is init shell; and not __src_complete_has_second_argument_after shell" -a "(__src_complete_shells)" -d "Shell"
+      complete -c src -f -n "__src_complete_first_argument_is complete shell; and not __src_complete_has_second_argument_after shell" -a "checkouts shells" -d "Completion kind"
+    FISH
+
+    def self.for(shell)
+      case shell.to_s
+      when "fish"
+        FISH_TEMPLATE.gsub("__SRC_VERSION__", Space::Src::VERSION)
+      else
+        raise "Unsupported shell '#{shell}'. Expected: fish"
+      end
+    end
+
+    def self.completions_for(shell)
+      case shell.to_s
+      when "fish"
+        FISH_COMPLETIONS
+      else
+        raise "Unsupported shell '#{shell}'. Expected: fish"
+      end
+    end
+
+    def self.path_for(shell, env: ENV)
+      case shell.to_s
+      when "fish"
+        Pathname(Paths.new(environment: env).config_home).join("fish", "functions", "src.fish")
+      else
+        raise "Unsupported shell '#{shell}'. Expected: fish"
+      end
+    end
+
+    def self.completions_path_for(shell, env: ENV)
+      case shell.to_s
+      when "fish"
+        Pathname(Paths.new(environment: env).config_home).join("fish", "completions", "src.fish")
+      else
+        raise "Unsupported shell '#{shell}'. Expected: fish"
+      end
+    end
+
+    def self.install(shell, env: ENV, force: false)
+      fn_result = write_managed_file(
+        path: path_for(shell, env:),
+        content: self.for(shell),
+        force: force,
+        description: "fish function"
+      )
+      co_result = write_managed_file(
+        path: completions_path_for(shell, env:),
+        content: completions_for(shell),
+        force: force,
+        description: "fish completions"
+      )
+      fn_result.merge(
+        completions_action: co_result.fetch(:action),
+        completions_path: co_result.fetch(:path)
+      )
+    end
+
+    def self.uninstall(shell, env: ENV, force: false)
+      fn_result = remove_managed_file(
+        path: path_for(shell, env:),
+        content: self.for(shell),
+        force: force,
+        description: "fish function"
+      )
+      co_result = remove_managed_file(
+        path: completions_path_for(shell, env:),
+        content: completions_for(shell),
+        force: force,
+        description: "fish completions"
+      )
+      fn_result.merge(
+        completions_action: co_result.fetch(:action),
+        completions_path: co_result.fetch(:path)
+      )
+    end
+
+    def self.managed_src?(content)
+      content.include?("Generated by space-src")
+    end
+
+    private_class_method def self.write_managed_file(path:, content:, force:, description:)
+      existing = File.read(path) if File.exist?(path)
+
+      if existing && existing != content && !force && !managed_src?(existing)
+        raise "Refusing to overwrite existing #{description} at #{path}. Re-run with --force."
+      end
+
+      if existing == content
+        {action: :unchanged, path: path}
+      else
+        FileUtils.mkdir_p(File.dirname(path))
+        tmp = "#{path}.tmp.#{Process.pid}"
+        begin
+          File.write(tmp, content)
+          File.rename(tmp, path)
+        ensure
+          File.delete(tmp) if File.exist?(tmp)
+        end
+        {action: existing ? :updated : :installed, path: path}
+      end
+    end
+
+    private_class_method def self.remove_managed_file(path:, content:, force:, description:)
+      return {action: :missing, path: path} unless File.exist?(path)
+
+      existing = File.read(path)
+      if existing != content && !force && !managed_src?(existing)
+        raise "Refusing to remove existing #{description} at #{path}. Re-run with --force."
+      end
+
+      FileUtils.rm_f(path)
+      {action: :removed, path: path}
+    end
+  end
+end

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/state/lock.rb

@@ -2,7 +2,7 @@
 
 require "fileutils"
 
-module SpaceArchitect::Pristine
+module Space::Src
   module State
     # Advisory process-level lock on a sidecar file derived from the
     # state file path. Serializes overlapping `sync` runs so the

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/state/store.rb

@@ -5,9 +5,9 @@ require "fileutils"
 require "time"
 require "dry/monads"
 
-module SpaceArchitect::Pristine
+module Space::Src
   module State
-    # Machine-managed state at $XDG_STATE_HOME/repo-tender/state.yaml.
+    # Machine-managed state at $XDG_STATE_HOME/space-src/state.yaml.
     # Never hand-edited (per PRD §3.2). Per-repo + per-org records with
     # a fixed status enum; the store validates the enum and timestamp
     # format on write.

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/sync/engine.rb

@@ -6,16 +6,16 @@ require "async"
 require "async/barrier"
 require "async/semaphore"
 require "dry/monads"
-require "space_architect/pristine/config/model"
-require "space_architect/pristine/scm/git"
-require "space_architect/pristine/forge/github"
-require "space_architect/pristine/state/store"
-require "space_architect/pristine/state/lock"
-require "space_architect/pristine/paths"
-require "space_architect/pristine/sync/repo_plan"
-require "space_architect/pristine/ui/reporter"
-
-module SpaceArchitect::Pristine
+require "space_src/config/model"
+require "space_src/scm/git"
+require "space_src/forge/github"
+require "space_src/state/store"
+require "space_src/state/lock"
+require "space_src/paths"
+require "space_src/sync/repo_plan"
+require "space_src/ui/reporter"
+
+module Space::Src
   module Sync
     # The sync engine: one run that brings every tracked repo to the
     # evergreen invariant (PRD §3.3). Splits observation (RepoPlan)
@@ -68,7 +68,7 @@ module SpaceArchitect::Pristine
 
       def initialize(scm: SCM::Git.new, forge: Forge::GitHub.new,
         clock: -> { Time.now }, url_builder: DEFAULT_URL_BUILDER,
-        reporter: SpaceArchitect::Pristine::UI::NullReporter.new)
+        reporter: Space::Src::UI::NullReporter.new)
         @scm = scm
         @forge = forge
         @clock = clock
@@ -160,7 +160,7 @@ module SpaceArchitect::Pristine
           end
 
           if lock_result == State::Lock::NOT_ACQUIRED
-            warn "repo-tender: skipped — another sync in progress"
+            warn "src: skipped — another sync in progress"
             Dry::Monads::Success(State::Store.load(paths.state_file).success)
           else
             lock_result

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/sync/repo_plan.rb

@@ -2,10 +2,10 @@
 
 require "time"
 require "dry/monads"
-require "space_architect/pristine/scm/client"
-require "space_architect/pristine/scm/status"
+require "space_src/scm/client"
+require "space_src/scm/status"
 
-module SpaceArchitect::Pristine
+module Space::Src
   module Sync
     # Pure-ish evergreen evaluation. Given a RepoRef + on-disk path +
     # SCM client + refresh_interval, observe the repo and decide an

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/ui/interactive_reporter.rb

@@ -3,7 +3,7 @@
 require "pastel"
 require "tty-cursor"
 
-module SpaceArchitect::Pristine
+module Space::Src
   module UI
     # Compact, single-line live progress renderer for `sync`.
     # Driven by one render-loop fiber spawned as a child of the engine task

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/ui/json_reporter.rb

@@ -3,7 +3,7 @@
 require "json"
 require "time"
 
-module SpaceArchitect::Pristine
+module Space::Src
   module UI
     # Emits one JSON object per event line (12-factor style) to `out`.
     # Every object carries at minimum: "event", "t" (ISO8601 timestamp),

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/ui/mode.rb

@@ -3,7 +3,7 @@
 require "dry/struct"
 require "dry/types"
 
-module SpaceArchitect::Pristine
+module Space::Src
   module UI
     Types = Dry.Types()
 

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/ui/plain_reporter.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-module SpaceArchitect::Pristine
+module Space::Src
   module UI
     # Emits one tab-separated line per terminal repo event, ANSI-free always.
     # repo_finished → "ref\tstatus"; repo_failed → "ref\tFAILED\terror".

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/ui/reporter.rb

@@ -1,6 +1,6 @@
 # frozen_string_literal: true
 
-module SpaceArchitect::Pristine
+module Space::Src
   module UI
     # The reporter event interface. Every implementation must respond to:
     #

data/{vendor/repo-tender/lib/space_architect/pristine → lib/space_src}/version.rb

@@ -1,7 +1,7 @@
 # frozen_string_literal: true
 
-module SpaceArchitect
-  module Pristine
+module Space
+  module Src
     VERSION = "0.1.0"
   end
 end

data/lib/space_src.rb

@@ -0,0 +1,37 @@
+# frozen_string_literal: true
+
+require "space_src/version"
+
+# space-src — keep local git clones evergreen.
+# (clean · on the remote's default branch · fetched within refresh_interval)
+#
+# Slice 1 surface: Paths, Shell, Config::{Model,Contract,Store},
+# State::Store, SCM::{Client,Git,Status}, Forge::{Client,GitHub}.
+# Later slices build sync orchestration, CLI, and launchd on top.
+
+module Space::Src
+end
+
+require "space_src/paths"
+require "space_src/shell"
+require "space_src/config/model"
+require "space_src/config/contract"
+require "space_src/config/store"
+require "space_src/state/store"
+require "space_src/state/lock"
+require "space_src/scm/client"
+require "space_src/scm/status"
+require "space_src/scm/git"
+require "space_src/forge/client"
+require "space_src/forge/github"
+require "space_src/sync/repo_plan"
+require "space_src/sync/engine"
+require "space_src/config/duration"
+require "space_src/log_rotator"
+require "space_src/launchd/plist"
+require "space_src/launchd/agent"
+require "space_src/ui/reporter"
+require "space_src/ui/mode"
+require "space_src/ui/plain_reporter"
+require "space_src/ui/json_reporter"
+require "space_src/cli"

data/skill/architect/SKILL.md

@@ -126,8 +126,8 @@ loop.
   an iteration index pointing at each iteration file; per-iteration detail lives
   in the iteration file, never duplicated into the handoff. `architect status`
   prints mission state (iterations, freeze_shas, lanes, verdicts) at any point.
-- **Space setup (first time):** `architect space new "Mission Name" org/repo …`
-  (repos are variadic positionals after the title), then `architect init` inside
+- **Space setup (first time):** `architect space new "Mission Name" -r org/repo -r …`
+  (each repo is a repeatable `-r` flag after the title), then `architect init` inside
   the space to scaffold `architecture/ARCHITECT.md`.
 - Scale to the task: trivial fixes don't need the loop — say so and let the
   human do it inline or in a normal session. The loop is for iteration-sized

data/skill/architect/research.md

@@ -1,10 +1,13 @@
 # Research fan-out reference
 
-Read this only when a research trigger fires (see SKILL.md step 3). The
-fan-out uses `claude -p` (Sonnet 4.6) as parallel web-research subagents —
-read-only (no `Edit`/`Write`/`Bash`), built-in `WebSearch`/`WebFetch` — and
-the architect keeps all judgment: it verifies the load-bearing claims and writes
-the iteration's **Grounds** section itself.
+Read this only when a research trigger fires (see SKILL.md step 3). The fan-out
+uses `architect research dispatch` to launch parallel read-only `claude -p`
+researchers (Sonnet 4.6, no Edit/Write/Bash) and `architect research wait` to
+collect their results. The architect keeps all judgment: it verifies
+load-bearing claims and writes the iteration's **Grounds** section itself.
+
+**Note:** the `~/.claude/skills/architect-research/` copy of this skill is
+synced separately and is NOT updated by this repo.
 
 ## Fan out
 
@@ -13,41 +16,42 @@ Cover different angles, not the same angle five times — typical split:
 official docs/reference, changelog/breaking changes, community failure reports,
 alternatives/comparisons, security/operational constraints.
 
-One fresh `claude -p` per question, each launched as its own **background Bash
-tool call** (`run_in_background`) — one call per researcher, not a shell `&`
-loop (a `&` launcher orphans the researchers and the harness reaps them all at
-once; same trap as builder dispatch). The researcher toolset is read-only
-(`Read,Grep,Glob`) plus the web tools (`WebSearch,WebFetch`) — no
-`Edit`/`Write`/`Bash`, so it cannot touch the repo. Capture the final report
-by redirecting stdout (the report *is* the text result in the default `text`
-output format):
+Write each research prompt to its own file, then dispatch and wait:
 
 ```bash
-claude -p --model claude-sonnet-4-6 \
-  --allowedTools 'Read,Grep,Glob,WebSearch,WebFetch' \
-  --max-turns 40 \
-  < build/research/<NN>-<topic>.prompt.md \
-  > build/research/<NN>-<topic>.md
+# 1. Write one prompt file per research question (use Write tool — do NOT shell-redirect)
+#    Filenames: <NN>-<topic>.prompt.md  e.g. 01-official-api.prompt.md
+
+# 2. Dispatch all lanes at once (non-blocking — returns PIDs immediately)
+architect research dispatch \
+  01-official-api.prompt.md \
+  02-changelog.prompt.md
+
+# 3. Wait for all lanes to complete (tails run.jsonl streams; exits non-zero if any lane fails)
+architect research wait
+
+# 4. Read each report
+cat build/research/01-official-api/report.md
+cat build/research/02-changelog/report.md
 ```
 
-Write each research-prompt to a `.prompt.md` file and feed it on stdin, never
-as a shell argument — a quote-mangling shell will corrupt a big prompt; the
-stdin redirect injects it verbatim.
-
-- Read-only by toolset: with only `Read,Grep,Glob,WebSearch,WebFetch` on the
-  allow list and nothing else granted, any write/bash call is denied — the
-  researcher can't touch the repo. Its report is the redirected stdout.
-- Web comes from the built-in `WebSearch` and `WebFetch` tools — no extension
-  or key. Launch ONE canary researcher and confirm it actually fetches live URLs
-  before fanning out. Restrict domains with `WebFetch(domain:…)` allow rules in
-  prompt-injection-sensitive repos.
-- Thinking budget: keep research at a modest level (a plain block, or "think
-  hard") — research is coverage work; deep thinking buys nothing here. Synthesis
-  happens on the architect's side.
-- Scope each researcher to ≤5 subjects and put hard context rules in the
-  research-prompt (snippet over page; quote ≤2 sentences; stop the moment you
-  can answer) — a researcher that fills its context window dies without emitting
-  its report. Bisect and re-dispatch dead lanes; don't re-run as-is.
+The id for each lane is derived from the prompt filename:
+`01-official-api.prompt.md` → id `01-official-api` →
+directory `build/research/01-official-api/`.
+
+Verbosity flags for `wait`:
+- default (L1): per-lane lifecycle + terminal outcome line
+- `--level 2`: + assistant text
+- `--level 3`: + tool call names
+- `--level 4`: + tool call inputs and results
+- `--quiet`: suppress all output; exit status alone signals outcome
+- `--thinking`: reveal assistant thinking blocks
+- `--jsonl`: emit raw lane-tagged JSONL instead of human text
+
+The researchers are READ-ONLY by toolset (`Read,Grep,Glob,WebSearch,WebFetch`
+with no Edit/Write/Bash) so they cannot touch the repo. Their final report
+is extracted from the terminal `result` event in the stream-json log and
+written to `build/research/<id>/report.md` automatically by `wait`.
 
 ## Research-prompt template
 
@@ -70,9 +74,14 @@ OUTPUT FORMAT — a markdown report:
 - End with: the 2-3 findings most likely to change an implementation decision.
 ```
 
+Keep each researcher scoped to ≤5 subjects and put hard context rules in the
+prompt (snippet over page; quote ≤2 sentences; stop the moment you can answer)
+— a researcher that fills its context window dies without emitting its report.
+Bisect and re-dispatch dead lanes; don't re-run as-is.
+
 ## Gather (architect — this is your work, not another agent's)
 
-1. Read every findings file in `build/research/`.
+1. Read every `build/research/<id>/report.md`.
 2. Identify the **load-bearing claims** — facts the spec will depend on
    (an API shape, a version constraint, a limit, a deprecation). Adversarially
    verify each: cross-check against a second independent source or the live