0xray 2.0.0 → 2.1.0

package/.opencode/codex.codex

@@ -1,7 +1,7 @@
 {
-  "version": "1.22.67",
+  "version": "2.1.0",
   "terms": [
-    1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60
+     1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, 16, 17, 18, 19, 20, 21, 22, 23, 24, 25, 26, 27, 28, 29, 30, 31, 32, 33, 34, 35, 36, 37, 38, 39, 40, 41, 42, 43, 44, 45, 46, 47, 48, 49, 50, 51, 52, 53, 54, 55, 56, 57, 58, 59, 60, 61, 62, 63, 64, 65, 66, 67, 68
   ],
   "framework": "xray Universal Development Codex",
   "compliance": "99.6% Error Prevention"

package/.opencode/commands/dependency-audit.md

@@ -69,7 +69,7 @@ Comprehensive dependency analysis and security audit for all project dependencie
   "vulnerabilities": [
     {
       "package": "lodash",
-      "version": "1.22.67",
+      "version": "2.0.0",
       "severity": "high",
       "cve": "CVE-2021-23337",
       "description": "Command injection vulnerability"
@@ -85,14 +85,14 @@ Security-focused format for CI/CD integration:
 
 ```json
 {
-  "version": "1.22.67",
+  "version": "2.0.0",
   "$schema": "https://raw.githubusercontent.com/oasis-tcs/sarif-spec/master/Schemata/sarif-schema-2.1.0.json",
   "runs": [
     {
       "tool": {
         "driver": {
           "name": "Dependency Audit",
-          "version": "1.22.67"
+          "version": "2.0.0"
         }
       },
       "results": [...]

package/.opencode/enforcer-config.json

@@ -1,6 +1,6 @@
 {
   "framework": "xray 2.0",
-  "version": "1.22.67",
+  "version": "2.0.0",
   "description": "Codex-compliant framework configuration for Credible UI project",
   "thresholds": {
     "bundleSize": {
@@ -220,7 +220,7 @@
       }
     },
     "codex": {
-      "version": "1.22.67",
+      "version": "2.0.0",
       "terms": [
         1,
         2,

package/.opencode/init.sh

@@ -16,28 +16,28 @@ SOURCE_PACKAGE_JSON="$SCRIPT_DIR/package.json"
 if [ ! -f "$SOURCE_PACKAGE_JSON" ] && [ -f "$PROJECT_ROOT/package.json" ]; then
     SOURCE_PACKAGE_JSON="$PROJECT_ROOT/package.json"
 fi
-NODE_MODULES_PACKAGE_JSON="$PROJECT_ROOT/node_modules/strray-ai/package.json"
+NODE_MODULES_PACKAGE_JSON="$PROJECT_ROOT/node_modules/0xray/package.json"
 
 if [ -f "$SOURCE_PACKAGE_JSON" ]; then
     # Development mode: use source version (project root)
     FRAMEWORK_ROOT="$PROJECT_ROOT"
 elif [ -f "$NODE_MODULES_PACKAGE_JSON" ]; then
     # Consumer mode: use installed version
-    FRAMEWORK_ROOT="$PROJECT_ROOT/node_modules/strray-ai"
+    FRAMEWORK_ROOT="$PROJECT_ROOT/node_modules/0xray"
 else
     FRAMEWORK_ROOT="$PROJECT_ROOT"
 fi
 
 # 0xRay Framework Version - read from FRAMEWORK_ROOT (already resolved above)
 # FRAMEWORK_ROOT correctly picks source in dev mode, node_modules in consumer mode
-STRRAY_VERSION=$(node -e "console.log(require('$FRAMEWORK_ROOT/package.json').version)" 2>/dev/null || echo "unknown")
+FRAMEWORK_VERSION=$(node -e "console.log(require('$FRAMEWORK_ROOT/package.json').version)" 2>/dev/null || echo "unknown")
 
 # Dedup guard — prevent duplicate runs during startup
 # Uses a TTL lockfile (10s window) since OpenCode may trigger config hook
 # from multiple plugin copies in quick succession
 # Key by PROJECT_ROOT (md5) so all invocations in the same project share one lock
 LOCK_KEY=$(echo -n "$PROJECT_ROOT" | md5 | cut -c1-16)
-LOCK_FILE="/tmp/strray-init-${LOCK_KEY}.lock"
+LOCK_FILE="/tmp/xray-init-${LOCK_KEY}.lock"
 LOCK_TTL=10
 if [ -f "$LOCK_FILE" ]; then
     LOCK_AGE=$(( $(date +%s) - $(stat -f %m "$LOCK_FILE" 2>/dev/null || stat -c %Y "$LOCK_FILE" 2>/dev/null || echo 0) ))
@@ -49,7 +49,7 @@ echo $$ > "$LOCK_FILE"
 
 START_TIME=$(date +%s)
 
-LOG_FILE="$PROJECT_ROOT/.opencode/logs/strray-init-$(date +%Y%m%d-%H%M%S).log"
+LOG_FILE="$PROJECT_ROOT/.opencode/logs/xray-init-$(date +%Y%m%d-%H%M%S).log"
 mkdir -p "$PROJECT_ROOT/.opencode/logs"
 
 log() {
@@ -70,7 +70,7 @@ echo -e "${PURPLE}//      ╚█████╔╝██╔╝ ██╗██
 echo -e "${PURPLE}//       ╚════╝ ╚═╝  ╚═╝╚═╝  ╚═╝╚═╝  ╚═╝   ╚═╝           //${NC}" && sleep 0.1
 echo -e "${PURPLE}//                                                       //${NC}" && sleep 0.1
 echo -e "${PURPLE}//      ⚡ 0xRay: Self-Healing AI Governance OS          //${NC}" && sleep 0.1
-echo -e "${PURPLE}//          Platform • 99.6% Error Prevention            //${NC}" && sleep 0.1
+echo -e "${PURPLE}//      42 agents · 44 skills · 41 MCP servers           //${NC}" && sleep 0.1
 echo -e "${PURPLE}//═══════════════════════════════════════════════════════//${NC}" && sleep 0.2
 echo -e "${PURPLE}//              🚀 Initializing...                          //${NC}" && sleep 0.3
 echo -e "${PURPLE}//═══════════════════════════════════════════════════════//${NC}" && sleep 0.2
@@ -81,13 +81,13 @@ HOOKS_COUNT=$(ls -1 "$PROJECT_ROOT/.opencode/commands/"*.md 2>/dev/null | wc -l
 # MCP servers - check dist, then node_modules
 MCPS_COUNT=$(ls -1 "$PROJECT_ROOT/dist/mcps/"*.server.js 2>/dev/null | wc -l | tr -d ' ')
 if [ "$MCPS_COUNT" -eq 0 ]; then
-    MCPS_COUNT=$(ls -1 "$PROJECT_ROOT/node_modules/strray-ai/dist/mcps/"*.server.js 2>/dev/null | wc -l | tr -d ' ')
+    MCPS_COUNT=$(ls -1 "$PROJECT_ROOT/node_modules/0xray/dist/mcps/"*.server.js 2>/dev/null | wc -l | tr -d ' ')
 fi
 
 # Agents - check .opencode/agents (.yml files), then node_modules
 AGENTS_COUNT=$(ls -1 "$PROJECT_ROOT/.opencode/agents/"*.yml 2>/dev/null | wc -l | tr -d ' ')
 if [ "$AGENTS_COUNT" -eq 0 ]; then
-    AGENTS_COUNT=$(ls -1 "$PROJECT_ROOT/node_modules/strray-ai/.opencode/agents/"*.yml 2>/dev/null | wc -l | tr -d ' ')
+    AGENTS_COUNT=$(ls -1 "$PROJECT_ROOT/node_modules/0xray/.opencode/agents/"*.yml 2>/dev/null | wc -l | tr -d ' ')
 fi
 
 # Skills - check .opencode/skills, then .strray/skills (Hermes), then node_modules
@@ -96,18 +96,21 @@ if [ "$SKILLS_COUNT" -eq 0 ]; then
     SKILLS_COUNT=$(ls -1d "$PROJECT_ROOT/.strray/skills/"* 2>/dev/null | wc -l | tr -d ' ')
 fi
 if [ "$SKILLS_COUNT" -eq 0 ]; then
-    SKILLS_COUNT=$(ls -1d "$PROJECT_ROOT/node_modules/strray-ai/.opencode/skills/"* 2>/dev/null | wc -l | tr -d ' ')
+    SKILLS_COUNT=$(ls -1d "$PROJECT_ROOT/node_modules/0xray/.opencode/skills/"* 2>/dev/null | wc -l | tr -d ' ')
 fi
 
-# Plugin status (check both dev and consumer paths)
-PLUGIN_DEV="$PROJECT_ROOT/.opencode/plugin/strray-codex-injection.js"
-PLUGIN_DEV_PLURAL="$PROJECT_ROOT/.opencode/plugins/strray-codex-injection.js"
-PLUGIN_CONSUMER="$PROJECT_ROOT/node_modules/strray-ai/.opencode/plugin/strray-codex-injection.js"
-PLUGIN_CONSUMER_PLURAL="$PROJECT_ROOT/node_modules/strray-ai/.opencode/plugins/strray-codex-injection.js"
+# Plugin status (check dev dist, then .opencode, then consumer)
+PLUGIN_DEV_DIST="$PROJECT_ROOT/dist/plugin/xray-codex-injection.js"
+PLUGIN_DEV_OPENCODE="$PROJECT_ROOT/.opencode/plugin/xray-codex-injection.js"
+PLUGIN_DEV_OPENCODE_PLURAL="$PROJECT_ROOT/.opencode/plugins/xray-codex-injection.js"
+PLUGIN_CONSUMER="$PROJECT_ROOT/node_modules/0xray/.opencode/plugin/xray-codex-injection.js"
+PLUGIN_CONSUMER_PLURAL="$PROJECT_ROOT/node_modules/0xray/.opencode/plugins/xray-codex-injection.js"
 
-if [ -f "$PLUGIN_DEV" ]; then
+if [ -f "$PLUGIN_DEV_DIST" ]; then
     PLUGIN_STATUS="✅"
-elif [ -f "$PLUGIN_DEV_PLURAL" ]; then
+elif [ -f "$PLUGIN_DEV_OPENCODE" ]; then
+    PLUGIN_STATUS="✅"
+elif [ -f "$PLUGIN_DEV_OPENCODE_PLURAL" ]; then
     PLUGIN_STATUS="✅"
 elif [ -f "$PLUGIN_CONSUMER" ]; then
     PLUGIN_STATUS="✅"
@@ -124,16 +127,16 @@ if [ ! -f "$PROJECT_ROOT/.opencode/enforcer-config.json" ]; then
 fi
 
 echo ""
-echo "⚡ 0xRay v$STRRAY_VERSION"
+echo "⚡ 0xRay v$FRAMEWORK_VERSION"
 echo "🤖 Agents: $AGENTS_COUNT | ⚙️ MCPs: $MCPS_COUNT | 💡 Skills: $SKILLS_COUNT"
 
 # BootOrchestrator check (check dev and consumer paths)
 BOOT_ORCHESTRATOR_FOUND=false
 if [ -f "$PROJECT_ROOT/src/core/boot-orchestrator.ts" ]; then
     BOOT_ORCHESTRATOR_FOUND=true
-elif [ -f "$PROJECT_ROOT/node_modules/strray-ai/src/core/boot-orchestrator.ts" ]; then
+elif [ -f "$PROJECT_ROOT/node_modules/0xray/src/core/boot-orchestrator.ts" ]; then
     BOOT_ORCHESTRATOR_FOUND=true
-elif [ -f "$PROJECT_ROOT/node_modules/strray-ai/dist/mcps/boot-orchestrator.server.js" ]; then
+elif [ -f "$PROJECT_ROOT/node_modules/0xray/dist/mcps/boot-orchestrator.server.js" ]; then
     BOOT_ORCHESTRATOR_FOUND=true
 fi
 

package/AGENTS.md

@@ -1,12 +1,12 @@
 # xray Agents
 
-Quick reference for xray AI orchestration framework (v2 MCP-centric three-subsystem).
+Quick reference for xray AI orchestration framework (v16 MCPs-centric three-subsystem).
 
 ## What is xray?
 
 xray provides intelligent multi-agent orchestration with automatic delegation and Codex compliance validation under the pure v2 three-subsystem model (Inference + External Governance via Dynamo + Autonomous Engine via thinDispatch 7-flow in MCP orchestrator). Agents operate via `.opencode/agents/*.yml` YML surfaces and 3 dedicated MCP skill servers — no manual setup needed.
 
-## v2 MCP-Centric Architecture
+## v16 MCPs-Centric Architecture
 
 The v2 release centers on **MCP (Model Context Protocol)** as the primary surface for agent skills. Three agent MCP servers handle governance deliberation:
 
@@ -84,14 +84,14 @@ The Autonomous Engine routes via complexity:
 
 xray enforces the Universal Development Codex (60 terms) via Dynamo governance. The codex lives in `.opencode/xray/codex.json`.
 
-Pure v2 MCP. Clean. Complete.
+Pure v16 MCPs. Clean. Complete.
 
-## Session: v2.0.0 Release Polish
+## Session: v2.1.0 Release Polish
 
 - Package: `0xray` (npm), `github.com/0xRayAI/xray`. Version `2.0.0`.
 - Renamed `strray-ai` → `0xray` across 60+ source files, CLI help text, grok plugin, hermes-agent bridge (Python + JS), docusaurus config.
 - **12 stale docs git-rm'd**: AGENTS-consumer.md, AGENTS-full.md, CHANGELOG-v1.15.x.md, 7 docs/ files.
-- **AGENTS.md + README.md**: Rewritten v2 MCP-centric.
+- **AGENTS.md + README.md**: Rewritten v16 MCPs-centric.
 - **CLI help text**: `npx 0xray` — removed dead `dashboard` command, stale examples.
 - `.npmignore`: removed `src/` (conflicted with `files` field — was silently dropping published sources).
 - `.gitignore`: cleaned stale `.strray/` entries, `strray-ai-*.tgz` → `0xray-*.tgz`.
@@ -107,4 +107,4 @@ Pure v2 MCP. Clean. Complete.
   - `status.ts` CLI command wired into `index.ts`
   - Orphaned files analyzed (not deleted): `security-audit.ts`, `src/security/` (11 files), `session-capture-processor.ts`, `activate-kernel-pipeline.ts`
 - **Hermes-agent bridge backward compat**: all JS/Python bridge files check for both `strray-ai` (old) and `0xray` (new). Default paths updated to `0xray`.
-- **Test suite**: 158 files, 2822 tests, 0 failures. Build passes clean.
+- **Test suite**: 158 files, 2290 tests, 0 failures. Build passes clean.

package/README.md

@@ -1,126 +1,326 @@
-# xray — MCP-Centric AI Governance OS
+# 0xRay — Self-Healing AI Governance OS
 
-**v2.0.0** — 9 agents · 44 skills · 3 MCP governance servers · 66 codex terms · 2,822 tests
+**v2.0.0** — 42 agents · 44 skills · 16 MCPs servers · 68 codex terms · 2,2290 tests
 
-xray is the pure v2 three-subsystem AI orchestration framework, now **MCP-centric** with dedicated skill servers for governance deliberation:
+[![Docs](https://img.shields.io/badge/docs-0xRayAI.github.io/xray-10b981?style=flat-square)](https://0xrayai.github.io/xray/)
 
-- **Inference** — reasoning, execution, and agent intelligence
-- **External Governance** — Dynamo Solar SSOT for proposal evaluation, resonance/isotopic signals, coherence, and Codex enforcement before any action
-- **Autonomous Engine** — thinDispatch 7-flow in the MCP orchestrator for automatic delegation, routing, and end-to-end coordination
+0xRay prevents AI coding mistakes before they happen. It's an intelligent governance layer that sits between you and your AI coding tools — intercepting bad proposals, enforcing code quality rules, and orchestrating multi-agent workflows automatically.
 
-3 dedicated MCP servers (`code-review`, `security-audit`, `researcher`) deliberate governance proposals. Agents are declared in `.opencode/agents/*.yml` — the YML SSOT. Zero manual setup. Automatic discovery and activation.
+Every code change is checked against a **68-term Codex** (coding constitution), deliberated by specialized AI agents, and either approved, revised, or blocked before it ever touches your codebase.
+
+Think of it as an **AI supervisor for your AI coders**: catch hallucinations, prevent slop, enforce standards — automatically.
+
+---
 
 ## Quick Start
 
 ```bash
 npm install 0xray
 
-# CLI
+# Verify installation
+npx 0xray status
+
+# Install for your AI coding platform
+npx 0xray opencode install      # OpenCode (most common)
+npx 0xray grok install          # Grok CLI
+npx 0xray hermes install        # Hermes Agent
+
+# Install starter skills (recommended)
+npx 0xray skill:install
+
+# See all available commands
 npx 0xray --help
-npx 0xray grok install          # Install Grok CLI plugin
-npx 0xray hermes bridge         # Hermes Agent bridge
 ```
 
-The installation seeds YML surfaces and MCP servers. Place agent definitions in `.opencode/agents/` — they are live immediately.
+**Requirements:** Node.js 18+, npm 9+, macOS or Linux.
 
-## Three-Subsystem Architecture
+---
+
+## What Problem Does 0xRay Solve?
+
+AI coding assistants are powerful but unreliable. They hallucinate APIs, introduce security vulnerabilities, violate project conventions, and make conflicting changes across files. 0xRay solves this by:
+
+| Problem | How 0xRay Fixes It |
+|---------|-------------------|
+| AI hallucinates bad code | **Governance gate** blocks non-compliant proposals before execution |
+| No code quality enforcement | **68-rule Codex** checks every change against your standards |
+| Single-agent blindspots | **3 specialized reviewers** (code, security, research) debate each proposal |
+| Scattered, conflicting edits | **Multi-agent orchestrator** coordinates work across specialists |
+| Repeating the same mistakes | **Inference engine** learns patterns and prevents regressions |
+
+---
+
+## How It Works
+
+0xRay uses a three-layer architecture that operates **before any code change is made**:
 
 ```
 ┌─────────────────────────────────────────────────┐
 │                  Inference                       │
-│  Proposals · Reflection · Execution             │
+│  Reasoning · Pattern learning · Execution       │
 ├─────────────────────────────────────────────────┤
 │           External Governance (Dynamo)           │
-│  Codex enforcement · Resonance/Isotopic · SSOT  │
-│  3 MCP skill servers deliberate proposals       │
+│  Codex enforcement · Multi-agent review · SSOT  │
+│  16 MCPs skill servers deliberate proposals       │
 ├─────────────────────────────────────────────────┤
 │          Autonomous Engine (thinDispatch)        │
-│  7-flow MCP · Delegation · Governance gate      │
+│  Task routing · Multi-agent coordination        │
+│  Complexity-based delegation (7-flow MCP)       │
 └─────────────────────────────────────────────────┘
 ```
 
-### Inference
-Proposal generation, reflection cycles, and execution planning. Produces structured proposals that enter the governance gate.
+### 1. Inference Layer
+Generates proposals, runs reflection cycles, and plans execution. Everything produced here enters the governance gate before any code is written.
+
+### 2. Governance Layer (The "Gate")
+Every proposal is reviewed by **3 specialized AI servers** — code review, security audit, and research — using a weighted voting system (PHI/TAU matrix) to reach a consensus. Non-compliant proposals are blocked or sent back for revision. This is powered by **Dynamo**, a neural network that evaluates codex compliance, structural coherence, and risk before any action executes.
 
-### External Governance (Dynamo Solar SSOT)
-Mandatory governance filter powered by Dynamo — a neural net based on solar physics and temporal first principles. Evaluates proposals for Codex compliance, resonance alignment, and isotopic coherence before any action is taken.
+### 3. Autonomous Engine
+Routes tasks to the right agents based on complexity (simple tasks go to a single agent, enterprise-grade work triggers a full multi-agent team). Handles dependency ordering, conflict resolution, and parallel execution.
 
-- 3 real MCP skill servers deliberate: `code-review`, `security-audit`, `researcher`
-- Weighted voting via PHI (1.666) / TAU (0.865) matrix
-- External Dynamo integration required (not optional)
-- CodexPolicyService — single source of truth for Codex loading
-- Active codex snapshot available via `get_active_codex` MCP tool
+---
 
-### Autonomous Engine (thinDispatch 7-flow)
-MCP orchestrator with 7-flow dispatch for automatic delegation, routing, and coordination. Handles complex multi-step tasks with automatic complexity-based routing.
+## Platform Installation
 
-## CLI
+0xRay integrates with all major AI coding platforms:
 
-```bash
-0xray <command>
-
-Commands:
-  install         Install xray framework
-  grok            Grok CLI plugin management
-  hermes          Hermes Agent bridge
-  integration     Integration management
-  validate        Validate installation
-  version         Show version
+| Platform | Install Command | What It Does |
+|----------|----------------|--------------|
+| **OpenCode** | `npx 0xray opencode install` | Installs as native plugin, seeds YML agent surfaces, merges configuration |
+| **Grok CLI** | `npx 0xray grok install` | Registers plugin + 16 MCPs servers (governance, skills, orchestrator, enforcer) |
+| **Hermes Agent** | `npx 0xray hermes install` | Copies bridge plugin to `~/.hermes/plugins/` |
+| **OpenClaw** | `npx 0xray openclaw install` | Creates integration config at `.strray/config/openclaw.json` |
+
+Postinstall automatically registers MCP servers with Grok CLI when `grok` is available on your PATH.
+
+---
+
+## CLI Reference
+
+### Core Commands
+
+| Command | Description |
+|---------|-------------|
+| `install` | Install 0xRay framework in current project |
+| `setup` | Full setup: hooks, Hermes, symlinks, MCP paths |
+| `init` | Install + setup (one command) |
+| `status` | Show framework health and configuration |
+| `health` / `check` | Run health checks on all subsystems |
+| `validate` | Verify installation is complete |
+| `report` | Generate activity and health reports |
+| `fix` | Auto-repair common issues |
+| `doctor` | Diagnose issues (read-only) |
+| `debug` | Print all framework paths |
+
+### Skills
+
+| Command | Description |
+|---------|-------------|
+| `skill:install` | Browse and install starter skill packs |
+| `skill:install <source>` | Install skills from registry or any GitHub repo |
+| `skill:registry list` | List all configured skill sources |
+| `skill:registry add --name X --url Y` | Add a custom skill source |
+| `skill:registry remove --name X` | Remove a skill source |
+
+### MCP Servers
+
+| Command | Description |
+|---------|-------------|
+| `mcp:list` | Browse available community MCP servers |
+| `mcp:status` | Show installed MCP servers |
+| `mcp:install <name>` | Install an MCP server from the registry |
+| `mcp:remove <name>` | Remove an installed MCP server |
+
+### Platform Integration
+
+| Command | Description |
+|---------|-------------|
+| `opencode install` | Install as OpenCode plugin |
+| `grok install` | Install as Grok CLI plugin |
+| `hermes install` | Install as Hermes Agent plugin |
+| `openclaw install` | Install OpenClaw integration |
+
+### Plugins
+
+| Command | Description |
+|---------|-------------|
+| `plugin list` | List all installed plugins |
+| `plugin install <name>` | Install a new plugin |
+| `plugin enable <name>` | Enable a disabled plugin |
+| `plugin disable <name>` | Disable a plugin without uninstalling |
+| `plugin uninstall <name>` | Remove a plugin completely |
+
+### Inference & Self-Improvement
+
+| Command | Description |
+|---------|-------------|
+| `inference:run` | Run full self-improvement cycle: collect → propose → govern → verify |
+| `inference:improve` | Run inference improvement cycle |
+| `inference:tuner` | Start/stop the autonomous inference tuner |
+
+### Other Commands
+
+| Command | Description |
+|---------|-------------|
+| `analytics` | Pattern analysis, insights, and consent management |
+| `antigravity status` | Show status of all installed skills |
+| `storyteller [type]` | Generate reflections, sagas, or narratives |
+| `publish-agent` | Package agents for the AgentStore |
+| `credible init` | Initialize Credible Pod infrastructure (planned) |
+
+---
+
+## Configuration
+
+### Feature Flags (`features.json`)
+
+Every subsystem is configurable via `features.json` (located at `.opencode/xray/features.json` or `xray/features.json` after installation):
+
+```json
+{
+  "version": "2.0.0",
+  "token_optimization": {
+    "enabled": true,
+    "max_context_tokens": 20000,
+    "context_compression": { "enabled": true, "threshold_tokens": 15000, "compression_ratio": 0.4 }
+  },
+  "multi_agent_orchestration": { "enabled": true, "max_concurrent_agents": 3 },
+  "autonomous_reporting": { "enabled": true, "interval_minutes": 60 },
+  "security": { "enabled": true, "vulnerability_scanning": true },
+  "analytics": { "enabled": true, "default_limit": 100 },
+  "pattern_learning": { "enabled": true, "learning_interval_ms": 3600000 },
+  "complexity_thresholds": { "simple": 15, "moderate": 25, "complex": 50, "enterprise": 100 }
+}
+```
+
+Toggle any feature on/off with `enabled: true/false`. The framework reloads configuration automatically.
+
+### Governance Setup
+
+Governance is your quality gate. Configure it under `inference_governance` in `features.json`:
+
+```json
+{
+  "inference_governance": {
+    "enabled": true,
+    "endpoint_url": "https://your-governance-endpoint/governance",
+    "request_timeout_ms": 10000,
+    "min_confidence_threshold": 0.5,
+    "decision_logic": {
+      "pass_confidence_min": 0.9,
+      "revision_confidence_max": 0.89
+    }
+  }
+}
 ```
 
-## Integrations
+The governance pipeline works in three stages:
+1. **3 AI reviewers** (`code-review`, `security-audit`, `researcher`) analyze each proposal independently
+2. **Dynamo** cross-checks against the 68-term Codex for compliance, security, and coherence
+3. **Weighted voting** (PHI/TAU matrix) produces a final decision: approve, revise, or reject
+
+**Options:** `requireExternalDynamo`, `minConfidence`, `enableSolarAdjustment`, `timeoutMs`, `maxAbstentionThreshold`.
+
+---
+
+## Included Agents (42)
+
+0xRay ships with specialized agents for every engineering domain:
+
+| Agent | Role |
+|-------|------|
+| **Architect** | System design, technical decisions, architecture reviews |
+| **Bug Triage Specialist** | Error investigation, root cause analysis |
+| **Code Reviewer** | Code quality, best practices, style compliance |
+| **Security Auditor** | Vulnerability detection, threat modeling |
+| **Researcher** | Codebase exploration, pattern discovery |
+| **Testing Lead** | Test strategy, coverage planning |
+| **Refactorer** | Technical debt elimination, code simplification |
+| **Frontend Engineer** | React, CSS, responsive design |
+| **Backend Engineer** | APIs, microservices, server architecture |
+| **DevOps Engineer** | CI/CD, infrastructure, deployment automation |
+| **Database Engineer** | SQL/NoSQL, query optimization, data modeling |
+| **Performance Engineer** | Profiling, benchmarking, optimization |
+| **Mobile Developer** | iOS, Android, React Native, Flutter |
+| **Content Creator** | Technical writing, docs, marketing copy |
+| **Growth Strategist** | Analytics, user acquisition, conversion |
+| **SEO Consultant** | Search optimization, keyword strategy |
+| **Strategy Analyst** | System design, technical roadmaps |
+| **Multimodal Looker** | Image, diagram, visual content analysis |
+| **Code Analyzer** | Code metrics, complexity analysis |
+| **Log Monitor** | Diagnostics, error pattern detection |
+
+Plus 22 domain-specialist subagents for full-stack, database, mobile, UI/UX, and more. All agents are declared declaratively in `.opencode/agents/*.yml` — add or customize without touching code.
+
+---
+
+## Included MCP Servers (41)
+
+Model Context Protocol servers provide the skill infrastructure:
 
-| Platform | Status | Description |
-|----------|--------|-------------|
-| **OpenClaw** | ✅ | API server, client, config, hooks — full integration |
-| **Hermes Agent** | ✅ | Python bridge, plugin YAML, tools, schemas |
-| **Grok CLI** | ✅ | Plugin install via `0xray grok install --force`, user-level plugin hooks |
-| **OpenCode** | ✅ | Native YML agent surfaces, E2E 42/42 solo, 34/34 orchestrator |
+**Governance & Review (5):** code-review, security-audit, researcher, enforcer-tools, governance
 
-## MCP Server Ecosystem
+**Core Framework (12):** architect-tools, boot-orchestrator, estimation, framework-compliance-audit, framework-help, lint, model-health-check, orchestrator, performance-analysis, processor-pipeline, state-manager, auto-format
 
-xray ships MCP servers for all governance deliberation and framework capabilities:
+**Knowledge Skills (24):** api-design, architecture-patterns, bug-triage-specialist, code-analyzer, content-creator, database-design, devops-deployment, git-workflow, growth-strategist, log-monitor, mobile-development, multimodal-looker, performance-optimization, project-analysis, refactoring-strategies, security-scan, seo-consultant, session-management, skill-invocation, strategist, tech-writer, testing-best-practices, testing-strategy, ui-ux-design
 
-**Governance Deliberation:** code-review, security-audit, researcher, enforcer-tools, governance
+---
+
+## Included Skills (44)
 
-**Core Framework:** architect-tools, boot-orchestrator, estimation, framework-compliance-audit, framework-help, lint, model-health-check, orchestrator, performance-analysis, processor-pipeline, state-manager, auto-format
+api-design, architect-tools, architecture-patterns, auto-format, backend-engineer, boot-orchestrator, bug-triage, code-analyzer, code-review, content-creator, database-engineer, devops-engineer, enforcer, framework-compliance-audit, frontend-engineer, frontend-ui-ux-engineer, git-workflow, growth-strategist, hermes-agent, inference-improve, lint, log-monitor, mobile-developer, model-health-check, multimodal-looker, orchestrator, performance-analysis, performance-engineer, performance-optimization, processor-pipeline, project-analysis, refactoring-strategies, researcher, security-audit, security-scan, seo-consultant, session-management, state-manager, storyteller, strategist, tech-writer, testing-best-practices, testing-strategy, ui-ux-design
 
-**Knowledge Skills:** api-design, architecture-patterns, bug-triage-specialist, code-analyzer, content-creator, database-design, devops-deployment, git-workflow, growth-strategist, log-monitor, mobile-development, multimodal-looker, performance-optimization, project-analysis, refactoring-strategies, seo-consultant, session-management, skill-invocation, strategist, tech-writer, testing-best-practices, testing-strategy, ui-ux-design
+Install more skills anytime: `npx 0xray skill:install`
 
-## Governance & Codex
+---
 
-Codex enforcement is integrated at every level:
+## Testing & Reliability
 
-- **60 terms** across categories: core, architecture, testing, performance, security, operations, governance
-- CodexPolicyService — canonical Governance-owned SSOT for Codex loading
-- Pre-governance gate blocks non-compliant proposals before execution
-- 3 MCP skill servers deliberate each proposal
-- frameworkLogger structured logging throughout (never console.*)
-- Active codex snapshot available via `get_active_codex` MCP tool
+0xRay is battle-tested with **2,2290 tests** across every subsystem:
 
-## Testing (2,822 tests)
+| Suite | Tests | Status |
+|-------|-------|--------|
+| Unit & Integration | 158 files | All pass |
+| Performance | 2290 tests | All pass |
+| Infrastructure | 2290 tests | All pass |
+| Consumer E2E | 4 platforms | All pass |
+| OpenCode E2E | 42 solo + 34 orchestrator | All pass |
+| OpenClaw E2E | 2290 tests | All pass |
+| Hermes E2E | 2290 tests | All pass |
+| Grok CLI E2E | 60 solo + 59 orchestrator | All pass |
 
-| Suite | Status |
-|-------|--------|
-| Unit / Integration | 158 files, all pass |
-| Performance | 14 tests, all pass |
-| Infrastructure | 19 tests, all pass |
-| Consumer E2E | 4 platforms, all pass |
-| OpenCode E2E | 42/42 solo, 34/34 orchestrator, all pass |
-| OpenClaw E2E | 96 tests, all pass |
-| Hermes E2E | 48 tests, all pass |
-| Grok CLI E2E | 60/60 solo, 59/59 orchestrator, all pass |
+---
 
-## Release
+## Next Steps
 
 ```bash
-npm run release              # patch bump
-npm run release minor        # minor bump
-npm run release major        # major bump
-npm run release -- --dry-run # preview
+# 1. Check your installation
+npx 0xray status
+
+# 2. Install skill packs (adds agent expertise)
+npx 0xray skill:install
+
+# 3. Configure governance (optional)
+# Edit .opencode/xray/features.json
+
+# 4. View full agent documentation
+less AGENTS.md
+
+# 5. Run a health check
+npx 0xray health
 ```
 
-The release pipeline: test → version:sync → build → commit → publish → push.
+---
+
+## Resources
+
+- **[AGENTS.md](AGENTS.md)** — Full agent reference, subsystem deep dive, operating model
+- **[CHANGELOG.md](CHANGELOG.md)** — Version history and release notes
+- **[docs/](docs/)** — Architecture docs, governance model, integration guides
+- **[Docs](https://0xrayai.github.io/xray/)** — Full documentation site
+- **[Dynamo Governance](https://dynamo.rippel.ai/vortex)** — Mint governance proposals for donations
+- **[GitHub](https://github.com/0xRayAI/xray)** — Source code, issues, discussions
+- **[npm](https://www.npmjs.com/package/0xray)** — Package registry
 
 ## License
 
@@ -128,4 +328,4 @@ MIT — see [LICENSE](LICENSE)
 
 ---
 
-*xray — MCP-centric, governed, autonomous. Pure v2 three-subsystem.*
+*0xRay — self-healing, governed, autonomous. Catch AI mistakes before they ship.*