0xray 4.0.21 → 4.0.22

package/scripts/foundry/plant/skills/inspect/SKILL.md

@@ -17,6 +17,7 @@ Mill **does** these checks (`npx @0xray/foundry inspect`). Mint fails on a costu
 4. **CI.** GitHub mill CI report (`.opencode/logs/ci-cd-monitor-report.json`), not a green check in chat. No token is a skip, not a pass invented.
 5. **Live PUT.** HTTP 200 on the npm `.tgz`. Metadata without a tarball is not shipped.
 6. **Isolated HOME.** Last-mile dest is project `.grok/plugins/0xray`. Isolated HOME may wear `$HOME/.grok/plugins/0xray` and must not write machine `~/.grok/plugins/0xray`. Shared HOME (passwd `$HOME`) does not last-wins clobber the machine plugin. Mill compares `$HOME` to the passwd home (`os.userInfo().homedir`), not `os.homedir()` (which follows `$HOME`).
+7. **Harness (observational).** Bound Cursor/Grok hooks, fastened Repertoire organ, Station card. Profiles: `bare` / `suited` / `partial`. Does **not** fasten. `--go` prints a forge GO receipt so cloud return is mill, not chat. `--require-harness=bare|suited|partial` fails when the live plant disagrees.
 
 ## How to work
 
@@ -28,6 +29,7 @@ Mill **does** these checks (`npx @0xray/foundry inspect`). Mint fails on a costu
 ```bash
 npx @0xray/foundry mint
 npx @0xray/foundry inspect
+npx @0xray/foundry inspect --skip-live --go --require-harness=bare
 npx @0xray/foundry ci --report
 ```
 

package/scripts/foundry/validate-release-docs.mjs

@@ -18,6 +18,7 @@ import {
   DOCS_SITE_HEADER_FILES,
   getFrameworkCounts,
   getReleaseArtifactPaths,
+  patchRefStripRelPaths,
 } from './version-manager.mjs';
 import { isXrayExoRepo, resolveMillRoot } from './mill-root.mjs';
 
@@ -31,30 +32,13 @@ function kernelLineHasPatchStamp(content) {
 
 /**
  * Present-tense cut pins. Keep: package.json, CHANGELOG, stamped JSON,
- * features-since headings. Rip from guides, Station, OP-PROC.
+ * features-since headings. The check set is the stamper set: shipped guides
+ * and shipped OP-PROC, including the mill-gate skill. Seat memory is not in it.
  */
 const PRESENT_TENSE_PATCH_RE =
   /This cut is|Do not republish \d+\.\d+\.\d+|0xray@\d+\.\d+\.\d+|npm is \*\*\d+\.\d+\.\d+\*\*|Product \*\*\d+\.\d+\.\d+\*\* is on npm/;
 
-const NO_PRESENT_TENSE_PATCH = [
-  'README.md',
-  'AGENTS.md',
-  'AGENTS-consumer.md',
-  'SKILLS.md',
-  'llms.txt',
-  'docs-site/docs/architecture/v4-now.md',
-  'docs-site/docs/architecture/v4-vision.md',
-  'docs-site/docs/guides/memory-wake.md',
-  'docs-site/docs/guides/memory-routing.md',
-  'docs-site/docs/guides/repertoire.md',
-  'docs-site/docs/guides/getting-started.md',
-  'docs-site/docs/guides/integrations.md',
-  'docs-site/docs/guides/consumer-migration.md',
-  'docs-site/docs/mcp/README.md',
-  'grok-bot/ops/LEAD-CADENCE.md',
-  'grok-bot/AGENTS.md',
-  'src/skills/orchestrator/SKILL.md',
-];
+const NO_PRESENT_TENSE_PATCH = patchRefStripRelPaths();
 
 function presentTensePatchPinErrors(content) {
   if (PRESENT_TENSE_PATCH_RE.test(content)) {
@@ -70,6 +54,7 @@ const REQUIRED_GUIDES = [
   'docs-site/docs/guides/memory-routing.md',
   'docs-site/docs/guides/aside-context.md',
   'docs-site/docs/guides/repertoire.md',
+  'docs-site/docs/guides/station-vs-repertoire.md',
   'docs-site/docs/guides/integrations.md',
   'docs-site/docs/guides/consumer-migration.md',
   'docs-site/docs/mcp/README.md',
@@ -87,6 +72,18 @@ function millLawLagErrors(content) {
   return errors;
 }
 
+/** Opt-out is features.json, not package-absence. */
+function repertoireOptOutErrors(content) {
+  const errors = [];
+  if (/\(no @0xray\/repertoire\)/.test(content)) {
+    errors.push('opt-out must not teach package-absence (no @0xray/repertoire)');
+  }
+  if (/memory_routing stays off/.test(content)) {
+    errors.push('opt-out must not teach memory_routing stays off on npm install');
+  }
+  return errors;
+}
+
 function millPlantMentionErrors(content) {
   if (!content.includes('mill') || !content.includes('inspect')) {
     return ['missing mill+inspect plant'];
@@ -357,6 +354,13 @@ export function validateReleaseDocs(rootDir = resolveMillRoot()) {
     }
   }
 
+  const stationVs = readFile(rootDir, 'docs-site/docs/guides/station-vs-repertoire.md');
+  if (stationVs) {
+    for (const e of repertoireOptOutErrors(stationVs)) {
+      errors.push(`docs-site/docs/guides/station-vs-repertoire.md: ${e}`);
+    }
+  }
+
   const docusaurus = readFile(rootDir, 'docs-site/docusaurus.config.ts');
   if (!docusaurus) {
     errors.push('docs-site/docusaurus.config.ts: missing');

package/scripts/foundry/version-manager.mjs

@@ -1,10 +1,12 @@
 #!/usr/bin/env node
 
 /**
- * Foundry stamper — JSON version fields + CHANGELOG only.
+ * Foundry stamper — JSON version fields, CHANGELOG, and the present-tense patch-pin strip.
  *
- * Does NOT bump package.json (reconcile-version.mjs is the one bumper).
- * Does NOT rewrite markdown prose (validate-release-docs.mjs verifies).
+ * Does NOT bump package.json (reconcile-version.mjs advances the next cut).
+ * Does NOT publish.
+ * Strips every present-tense patch pin from shipped guides and shipped OP-PROC.
+ * Does NOT edit Station, NOTES, dest, or node_modules.
  *
  * Usage:
  *   npx @0xray/foundry stamp
@@ -285,7 +287,7 @@ function updateChangelog(newVersion, changeDescription) {
   console.log(`✅ Updated CHANGELOG.md`);
 }
 
-/** Markdown prose is verified, not rewritten. */
+/** Kernel headers stay era text. Patch refs are stripped from the shipped set below. */
 
 export const DOCS_SITE_HEADER_FILES = [
   'docs-site/docs/index.md',
@@ -328,6 +330,7 @@ function updateJsonVersionField(relPath, newVersion) {
 
 function updateFeaturesJsonVersion(newVersion) {
   updateJsonVersionField('xray/features.json', newVersion);
+  updateJsonVersionField('.xray/features.json', newVersion);
 }
 
 function updateOpenclawPluginVersion(newVersion) {
@@ -339,6 +342,117 @@ function getCurrentVersion() {
   return pkg.version;
 }
 
+/**
+ * Shipped guides whose present-tense patch ref the stamper removes.
+ * Historical headings (features-since) stay. Seat memory is not in this list.
+ */
+export const SHIPPED_GUIDE_STRIP_FILES = [
+  'README.md',
+  'AGENTS.md',
+  'AGENTS-consumer.md',
+  'SKILLS.md',
+  'llms.txt',
+  'docs-site/docs/index.md',
+  'docs-site/docs/introduction.md',
+  'docs-site/docs/full-reference.md',
+  'docs-site/docs/architecture/v4-now.md',
+  'docs-site/docs/architecture/v4-vision.md',
+  'docs-site/docs/guides/memory-wake.md',
+  'docs-site/docs/guides/memory-routing.md',
+  'docs-site/docs/guides/repertoire.md',
+  'docs-site/docs/guides/station-vs-repertoire.md',
+  'docs-site/docs/guides/getting-started.md',
+  'docs-site/docs/guides/integrations.md',
+  'docs-site/docs/guides/consumer-migration.md',
+  'docs-site/docs/guides/aside-context.md',
+  'docs-site/docs/mcp/README.md',
+  'docs-site/docs/agents/README.md',
+  'grok-bot/AGENTS.md',
+];
+
+/** Shipped OP-PROC. Station, NOTES, and dest are not procedure files the stamper may edit. */
+export const SHIPPED_OP_PROC_STRIP_FILES = [
+  'grok-bot/ops/LEAD-CADENCE.md',
+  'src/skills/orchestrator/SKILL.md',
+  'grok-bot/skills/ship-ready-mill-gate/SKILL.md',
+];
+
+export function patchRefStripRelPaths() {
+  return [...SHIPPED_GUIDE_STRIP_FILES, ...SHIPPED_OP_PROC_STRIP_FILES];
+}
+
+/** Seat-local memory and installed trees. The stamper never writes these. */
+export function isPatchRefStripRefused(relPath) {
+  const norm = path.posix.normalize(String(relPath).replace(/\\/g, '/')).replace(/^\.\//, '');
+  const parts = norm.split('/').filter((part) => part !== '' && part !== '.');
+  if (parts[parts.length - 1] === 'NOTES.md') return true;
+  if (parts.includes('node_modules')) return true;
+  const xrayAt = parts.indexOf('.xray');
+  if (xrayAt !== -1 && parts[xrayAt + 1] === 'state') return true;
+  return false;
+}
+
+/**
+ * Remove every present-tense patch pin from prose. Stamps in CHANGELOG
+ * headings stay, because this does not match `## [x.y.z]`.
+ * `version` must be semver or the call is a no-op. The pins removed are
+ * not limited to that version.
+ * @param {string} content
+ * @param {string} version
+ */
+export function stripPatchRefText(content, version) {
+  if (typeof version !== 'string' || !/^\d+\.\d+\.\d+$/.test(version)) return content;
+  const semver = '\\d+\\.\\d+\\.\\d+';
+  const patterns = [
+    new RegExp(`0xray@${semver}\\b`, 'g'),
+    new RegExp(`npm is \\*\\*${semver}\\*\\*`, 'g'),
+    new RegExp(`Product \\*\\*${semver}\\*\\* is on npm`, 'g'),
+    new RegExp(`Do not republish ${semver}\\b`, 'g'),
+    new RegExp(`This cut is \\*\\*${semver}\\*\\*`, 'g'),
+    new RegExp(`This cut is ${semver}\\b`, 'g'),
+  ];
+  let next = content;
+  for (const re of patterns) next = next.replace(re, '');
+  return next.replace(/[ \t]{2,}/g, ' ');
+}
+
+/**
+ * @param {string} baseDir
+ * @param {string} rel
+ * @param {string} version
+ * @returns {boolean} true when the file changed
+ */
+export function stripPatchRefFile(baseDir, rel, version) {
+  if (isPatchRefStripRefused(rel)) return false;
+  const full = path.resolve(baseDir, rel);
+  const relToBase = path.relative(baseDir, full);
+  if (relToBase.startsWith('..') || path.isAbsolute(relToBase)) return false;
+  if (isPatchRefStripRefused(relToBase.split(path.sep).join('/'))) return false;
+  if (!fs.existsSync(full) || !fs.statSync(full).isFile()) return false;
+  const before = fs.readFileSync(full, 'utf8');
+  const after = stripPatchRefText(before, version);
+  if (after === before) return false;
+  fs.writeFileSync(full, after);
+  return true;
+}
+
+/**
+ * Strip every present-tense patch pin from shipped guides and shipped OP-PROC under baseDir.
+ * `version` must be semver or the call is a no-op.
+ * Refuses `.xray/state/**`, NOTES, dest curated_signals.json, and node_modules.
+ * Does not bump. Does not publish.
+ * @param {string} baseDir
+ * @param {string} version
+ * @returns {string[]} relative paths that changed
+ */
+export function stripLivePatchRefs(baseDir, version) {
+  const changed = [];
+  for (const rel of patchRefStripRelPaths()) {
+    if (stripPatchRefFile(baseDir, rel, version)) changed.push(rel);
+  }
+  return changed;
+}
+
 /** Paths written by release artifact updates (existing files only). */
 export function getReleaseArtifactPaths(baseDir = resolveMillRoot()) {
   const candidates = [
@@ -374,16 +488,20 @@ export function getReleaseArtifactPaths(baseDir = resolveMillRoot()) {
   return candidates.filter((rel) => fs.existsSync(path.join(baseDir, rel)));
 }
 
-/** Update CHANGELOG + README + AGENTS (+ consumer/docs) for current package.json version (no bump). */
+/** Stamp JSON + CHANGELOG, then strip every present-tense patch pin from shipped guides and OP-PROC. No bump. No publish. */
 function updateReleaseArtifactsOnly(changeDescription = '') {
   const current = getCurrentVersion();
   const counts = getFrameworkCounts();
-  process.stdout.write(`Release artifacts for v${current} (JSON + CHANGELOG only)\n`);
+  process.stdout.write(`Release artifacts for v${current} (JSON + CHANGELOG; strip shipped guides and OP-PROC)\n`);
   process.stdout.write(`counts: ${counts.agents} agents, ${counts.mcps} MCPs, ${counts.skills} skills\n`);
   updateChangelog(current, changeDescription);
   updatePluginJsonVersion(current);
   updateFeaturesJsonVersion(current);
   updateOpenclawPluginVersion(current);
+  const stripped = stripLivePatchRefs(rootDir, current);
+  if (stripped.length > 0) {
+    process.stdout.write(`Stripped present-tense patch pins from ${stripped.join(', ')}\n`);
+  }
   runReleaseDocsValidation();
   process.stdout.write(`Release artifacts updated for v${current}\n`);
 }
@@ -415,7 +533,9 @@ function main() {
   if (args.includes('--help') || args.includes('-h')) {
     process.stdout.write(`Current version: ${getCurrentVersion()}\n`);
     process.stdout.write('Usage: npx @0xray/foundry stamp\n');
-    process.stdout.write('Bump is refused. Use reconcile-version.mjs --apply, then this stamper.\n');
+    process.stdout.write('Bump is refused. Reconcile advances the next cut, then this stamper runs.\n');
+    process.stdout.write('The stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC.\n');
+    process.stdout.write('It does not edit Station, NOTES, dest, or node_modules. It does not publish.\n');
     process.exit(0);
   }
 

package/scripts/mjs/test-consumer-readiness.mjs

@@ -17,9 +17,16 @@ const __dirname = path.dirname(__filename);
 class ConsumerReadinessCheck {
   constructor() {
     this.checks = [];
-    // Check if we're running from a consumer environment (not the source directory)
+    // Mill = this repo (package name 0xray + src/). Consumer = installed tarball.
     const cwd = process.cwd();
-    this.isConsumerEnvironment = !cwd.includes("dev/stringray") && cwd.includes("dev/jelly");
+    let isDevMill = false;
+    try {
+      const pkg = JSON.parse(fs.readFileSync(path.join(cwd, "package.json"), "utf8"));
+      isDevMill = pkg.name === "0xray" && fs.existsSync(path.join(cwd, "src"));
+    } catch {
+      isDevMill = false;
+    }
+    this.isConsumerEnvironment = !isDevMill;
   }
 
   async runChecks() {
@@ -78,7 +85,7 @@ class ConsumerReadinessCheck {
       if (fs.existsSync(".mcp.json")) {
         const mcpConfig = JSON.parse(fs.readFileSync(".mcp.json", "utf8"));
         const serverCount = Object.keys(mcpConfig.mcpServers || {}).length;
-        const hasServers = serverCount >= 16; // At least 16 servers
+        const hasServers = serverCount >= 7; // consumer mill: 7 0xRay MCP servers
 
         this.checks.push({
           name: "MCP server configuration",

package/src/integrations/openclaw/plugin/xray-pre-tool/package.json

@@ -1,6 +1,6 @@
 {
   "name": "xray-pre-tool",
-  "version": "4.0.21",
+  "version": "4.0.22",
   "private": true,
   "type": "module",
   "description": "0xRay constitution + temperament PreToolUse for OpenClaw",

package/src/skills/hermes-agent/SKILL.md

@@ -64,7 +64,7 @@ Returns: pass/fail with per-file results and violations.
 
 ### xray_codex_check
 
-Validate code against the 60-term Universal Development Codex. Checks error-handling, type-safety, performance, security, architecture.
+Validate code against the 69-term Universal Development Codex. Checks error-handling, type-safety, performance, security, architecture.
 
 ```
 xray_codex_check(code="const x: any = foo()", operation="create")

package/src/skills/orchestrator/SKILL.md

@@ -64,6 +64,10 @@ Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
 
 The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/ops/LEAD-CADENCE.md`.
 
+Jargon is not the job. Review and cadence ask whether the change works. Do not spend the loop reciting dest names, mill liturgy, or host mantras.
+
+- **Feat rebase:** when the mandated work turns into mantra, or the job has split across planes that no longer share one present, stop. Go up a level and answer the original message again from this seat. Do not continue the side thread and call that the job.
+
 - **Peer test:** another instance with only worn 0xRay continues the ticket. No command stream.
 - **Wear first:** Read `.xray/state/STATION.md`. Same cloud. Same critic (resume only). Dummy Reads Station.
 - **Dummy tests `SKILLS.md`:** a suited dummy proves the worn catalog. Same-sess bodies keep context and hold a Station card.
@@ -73,6 +77,24 @@ The seven rules are the engine. The cadence is the time signature. Disk SSOT: `g
 - **Live tick, not pacer:** `/loop` runs work now. Keep workstreams moving. Do not idle-wait 12 minutes. **Clean ticks every cycle** — unsubscribe then resubscribe so the prompt matches metal. Name-dedupe does not rewrite. A stale prompt (waiting URL after live, Hold after strip) is dirty: rewrite, do not act. **If the card and WAVEBOARD are idle, unsubscribe and do not resubscribe.**
 - **Board clock:** PR events + resume the same critic. Not two idle pacers. Merge after PASS+CI (gate A). Publish only after mill-gate D + `foundry gate`.
 - **Dispatch:** ticket + PR URLs + “Wear, then review.” The critic Reads `SEATS.md` Reviewer. Do not paste a command novel. When a law is spoken twice, encode it this wake.
+- **Cascade:** Chat is not the brain. A cascade that must survive compaction is a named repertoire signal on the stack overlay, hydrated onto the project law list. NOTES holds the same cascade for the second Read. Station stays the ticket. A reflection is not this capture. Capture priority: a law is an invariant you would otherwise re-read the source to relearn. One law per subsystem bone. Heat touches last_seen and does not append a confidence sample, so more hits do not raise conviction. Heat touches last_seen only when the diary contains that signal's name; two definition words are not a hit; a weak session score is not lifted to 0.55 and a sample below 0.55 is not recorded. Constructing the organ does not append workspace samples. Hero names: `heat-is-not-conviction`, `inference-cycle-invariant`, `governance-vote-invariant`, `thin-dispatch-invariant`. Repertoire mergeStackOverlay refreshes a changed stack definition and keeps observation stats.
+- **Cold brief:** a new critic or any new subagent that does not already have this thread gets the latest commit SHA on the branch under review (fetch it; do not reuse an earlier SHA from a previous pass) and the Station card (`.xray/state/STATION.md`: intent, plan, git). If the card is missing, give branch + HEAD + what just changed. If the branch moves after you brief them, send the new SHA before they verdict.
+- **Control:** The lead keeps control. Do not assume the subagent has the context. Give the duty, the latest SHA, the Station card, and the laws that apply. The subagent wears the applicable 0xRay suit before it works: the tree under review, built and installed. An older published package is not that suit. The lead checks the result.
+
+### Engine cadence
+
+This suite is the engine that builds the engine. When a seat sees OP-PROC, write it onto these existing surfaces in the same wake. Do not open a new skill.
+
+1. Change the engine with precision.
+2. Ship it local: build and install the tree. A live npm version stays live. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish.
+3. Test the change.
+4. Run another deep review of the diff you just made.
+5. Monitor long-term memory (dest name count and whether observations are the only growth) and short-term memory (Station: intent, plan, git).
+6. Ship the PR.
+
+### Planes
+
+Operating planes: code, OP-PROC, model, suit, mill, host, and test/ship. Test/ship is the critical OP-PROC plane. Test then ship is the hero. Ship without that proof is the catastrophe. Long-term memory is the project law list. Each wake refreshes a changed stack definition and keeps observation stats. Heat writes the matched names onto Station, the short-term card that survives compaction. Reactive decisions move out of TypeScript into OP-PROC as the model improves. That move is why the mill and the suit exist. It is not fully proved. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish. Do not freeze the live cut.
 - **Close:** loop until Station is done. Compact: Station survives the cut. Overlay dest names are OP-PROC — reload `repertoire-working.json` `opProcNames`, not Station.
 - **Board:** critic Strict comments; forge implements; lead stays main thread.
 - **Codex 69:** rewire this skill and existing ops. Do not add a new `SKILL.md` to hold the cadence.

package/vendor/@0xray/repertoire/data/stack-overlay.json

@@ -1,6 +1,6 @@
 {
   "description": "Stack-language overlay for 0xRay 4.0 memory routing. Additive to the 8-name factory seed. Not a plant diary and not the 0.1.8 brain.",
-  "last_updated": "2026-09-20T00:00:00.000Z",
+  "last_updated": "2026-09-23T00:00:00.000Z",
   "source": "stack-overlay-4.0",
   "schema_version": "1.1",
   "implementation_guidance": {
@@ -745,6 +745,159 @@
         "last_seen": "2026-09-21T00:00:00.000Z",
         "governance_forced_count": 0
       }
+    },
+    {
+      "name": "feat-rebase",
+      "definition": "When the mandated work turns into mantra, or the job has split across planes that no longer share one present, stop. Go up a level and answer the original message again from this seat. Do not continue the side thread and call that the job.",
+      "tags": [
+        "cadence",
+        "rebase",
+        "lead"
+      ],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Reply answers the original message from this seat instead of continuing a side thread.",
+      "validation_experiment": "A seat keeps answering notifications after the human asked for the original job \u2014 treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "LEAD-CADENCE.md Feat rebase. Not a new skill.",
+      "example_inference_snippet": "Go up a level and answer the original message again from this seat.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "operating-planes",
+      "definition": "Operating planes are code, OP-PROC, model, suit, mill, host, and test/ship. Test/ship is the critical OP-PROC plane: test then ship is the hero; ship without that proof is the catastrophe. Long-term memory is the project law list. Each wake copies stack laws onto that list, keeps observation stats, and refreshes a changed definition. Heat writes the matched names onto Station, the short-term card that survives compaction. As the model improves, reactive decisions move out of code into OP-PROC. That move is not fully proved. Once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut. The stamper does not edit Station, NOTES, dest, or node_modules. It does not publish. Do not freeze the live cut.",
+      "tags": [
+        "planes",
+        "op-proc",
+        "test-ship",
+        "version-manager"
+      ],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Reply names test/ship as the hero or the catastrophe, and treats a live cut as the stamper stripping shipped guides and shipped OP-PROC.",
+      "validation_experiment": "A seat ships without the test, or wakes after compact without the test/ship plane — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "LEAD-CADENCE.md Planes. Not a new skill. Patch stamps stay in package.json, CHANGELOG, and stamped JSON. The stamper strips shipped guides and shipped OP-PROC. It does not edit Station, NOTES, dest, or node_modules. It does not publish.",
+      "example_inference_snippet": "Test then ship is the hero. Ship without that proof is the catastrophe.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "wake-cascade",
+      "definition": "Chat is not the brain. Compaction drops the seat. Short-term memory is Station. Long-term memory is the project repertoire law list. NOTES is the deep cut: the pickup line cadences onto Station, and the body holds the cascade the card cannot. Capture a cascade by writing a named signal on the stack overlay and hydrating it onto dest. Observation counts are not capture. A reflection is not this capture. This wake, sorted: planes are code, OP-PROC, model, suit, mill, host, and test/ship; test then ship is the hero and ship without that proof is the catastrophe; each wake refreshes a changed stack definition and keeps observation stats, then heat writes matched names onto Station; the lead keeps control and a subagent gets the duty, the latest SHA, the Station card, the laws, and the suit built from the tree under review; when the work becomes mantra or the planes no longer share one present, answer the original message from this seat; once a version is live, the stamper strips every present-tense patch pin from shipped guides and shipped OP-PROC, or reconcile advances the next cut; the stamper does not edit Station, NOTES, dest, or node_modules; it does not publish; engine cadence is change, ship local, test, review the diff, monitor dest against Station, ship the PR; missing moral fusion is not an isotopic reject, vote confidence is a clamped weighted mean, thinDispatch strategy follows the adjusted level, and an empty inference cycle saves state.",
+      "tags": [
+        "cascade",
+        "memory",
+        "repertoire"
+      ],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "After compact the seat can state the cascade from the repertoire name and from NOTES, without the chat.",
+      "validation_experiment": "A seat wakes blank and rebuilds the planes from the thread summary — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "NOTES body is the same cascade for the second Read. Not a reflection. Not a new skill.",
+      "example_inference_snippet": "Chat is not the brain. The cascade is the repertoire name wake-cascade.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "heat-is-not-conviction",
+      "definition": "Heat touches last_seen on names the kernel diary already matches. Heat touches last_seen only when the diary contains that signal's name; two definition words are not a hit; a weak session score is not lifted to 0.55 and a sample below 0.55 is not recorded. Constructing the organ does not append workspace samples. It does not append a confidence sample, so a second heat does not raise observation_count and does not move avg_confidence. More hits do not raise conviction. Promotion still flips a proposed law to validated at two observations and confidence 0.55. Conviction moves on feedback, not on heat. Kernel diary text is logs/framework/activity.log, routing outcomes, pattern metrics, and .xray/inference/latest-workflow.json plus workflow-status.json. Heat matches that text onto existing names and does not mint a law. A missing session file or a stale inference-state timestamp is telemetry, not a law. Repertoire mergeStackOverlay refreshes a changed stack definition and keeps observation stats. It does not pass fleshGeneric. Subject overlay still fleshes only a generic field-observed stub.",
+      "tags": ["memory", "heat", "kernel"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "A rising observation count at 0.55 is not treated as learning.",
+      "validation_experiment": "A seat reads observation mass as conviction — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "heatKernelDiary calls touchLastSeen. recordPrimitiveObservations still appends samples for session and field ingest. promoteQualifiedSignals uses DEFAULT_PROMOTION_MIN_CONFIDENCE 0.55 and min observations 2. mergeStackOverlay in repertoire src/paths.ts refreshes stack law fields and keeps observation_stats. It does not pass fleshGeneric.",
+      "example_inference_snippet": "Heat touches last_seen and does not append a confidence sample. A changed stack definition refreshes and the observation count stays.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "inference-cycle-invariant",
+      "definition": "An inference cycle that generates no proposals still writes inference-cycle-state.json. Without that write the one-day trigger never starts and the next call repeats. InferenceCycle.getInstance applies later options, including force and skipApply. Governance failure rejects the proposals. Proposal text is a keyword map over session problem strings. generateProposals also emits recurring-pattern titles.",
+      "tags": ["inference", "invariant"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Empty cycles persist state, and later getInstance options apply.",
+      "validation_experiment": "An empty cycle returns without a state file — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "src/inference/inference-cycle.ts and inference-proposal-generator.ts. generateProposals maps session problem strings through a keyword map and also emits recurring-pattern titles. Not a new skill.",
+      "example_inference_snippet": "An empty inference cycle still saves state. Proposal text is a keyword map over session problem strings. generateProposals also emits recurring-pattern titles.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "governance-vote-invariant",
+      "definition": "PHI 1.666 and TAU 0.865 are unused constants. The matrix cutoffs are the literals 0.92, 0.95, 0.82, 0.88, 0.75, and 0.80. Reason text does not claim TAU. mergeVotes averageConfidence is the weighted mean of confidence, sum of weight times confidence over sum of weight, clamped to 0..1. That number is resonance. isotopicRatio is compared only when it is a finite number. moralFusion is not defaulted to 0.5. A missing fusion number does not force reject. Critical moral tension does reject. Without moral fields the three-skill vote stands.",
+      "tags": ["governance", "invariant"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "A vote with no moral fusion is not an isotopic reject, and average confidence stays in 0..1.",
+      "validation_experiment": "Reason text names TAU, or average confidence exceeds 1 — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "src/governance/governance-core.ts and governance-service.ts. Not a new skill.",
+      "example_inference_snippet": "No moral fusion is not an isotopic reject. Average confidence is a clamped weighted mean.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
+    },
+    {
+      "name": "thin-dispatch-invariant",
+      "definition": "scoreComplexity applies the thresholds it is given. After Repertoire adjusts the score, level, recommendedStrategy, and estimatedAgents follow the adjusted level. A high-confidence trap with an adjusted score of at least 26 forces architect. A provenance-failure tag with an adjusted score under 51 forces bug-triage-specialist. On a frontier host the spawn gate warns and allows a spawn with no plan. Guided and strict hosts deny. The lead-dev plan builder is on.",
+      "tags": ["engine", "invariant", "thin-dispatch"],
+      "priority": "high",
+      "status": "proposed",
+      "first_seen": "2026-09-23",
+      "evaluation_criteria": "Strategy follows the adjusted level, and the trap routes are architect at 26 and bug-triage under 51.",
+      "validation_experiment": "Strategy stays on the pre-adjust level after Repertoire moves the score — treat as fail.",
+      "master_index_integration": "Project-local curated_signals after hydrateWritableSignals merges data/stack-overlay.json. Never write the factory tarball.",
+      "implementation_notes": "src/nucleus/thin-dispatch.ts and RepertoireOrchestratorBridge.resolveThinDispatchAgent. Not a new skill.",
+      "example_inference_snippet": "After Repertoire adjusts the score, strategy follows the adjusted level. A trap at 26 forces architect.",
+      "observation_stats": {
+        "observation_count": 1,
+        "avg_confidence": 0.55,
+        "max_confidence": 0.55,
+        "last_seen": "2026-09-23T00:00:00.000Z",
+        "governance_forced_count": 0
+      }
     }
   ]
 }

package/vendor/@0xray/repertoire/dist/RepertoireService.js

@@ -39,7 +39,6 @@ export class RepertoireService {
         }
         if (shouldAutoSyncXray(options.syncXray)) {
             this.syncXrayMemory();
-            this.syncWorkspaceRepos();
             this.heatKernelDiary();
         }
     }
@@ -126,6 +125,10 @@ export class RepertoireService {
     }
     /**
      * Heat existing dest names from kernel diary text. No new names.
+     * Touches last_seen only when the diary contains that signal's id,
+     * or the id with hyphens read as spaces. Does not append a confidence sample.
+     * Two definition words are not a hit. Heat must not mint and must not
+     * change observation_count or avg_confidence.
      * Colon pattern ids like `architect:architect_skill` never become dest keys.
      */
     heatKernelDiary(collected) {
@@ -134,11 +137,9 @@ export class RepertoireService {
             return { heated: [], sources: diary.sources };
         }
         const hits = this.signalsManager.matchByText(diary.text, 2);
-        const matches = hits.map((hit) => ({
-            name: hit.signal.name,
-            confidence: 0.55,
-        }));
-        const heated = matches.length > 0 ? this.signalsManager.recordPrimitiveObservations(matches) : [];
+        const heated = hits.length > 0
+            ? this.signalsManager.touchLastSeen(hits.map((hit) => hit.signal.name))
+            : [];
         return { heated, sources: diary.sources };
     }
     reloadOpProc() {

package/vendor/@0xray/repertoire/dist/ingestion/xray-session-ingester.js

@@ -36,7 +36,7 @@ export class XraySessionIngester {
                 const entry = this.sessionToInferenceEntry(session);
                 const targetFile = join(this.targetDir, `${session.timestamp.split('T')[0]}.jsonl`);
                 appendFileSync(targetFile, JSON.stringify(entry) + '\n');
-                this.recordObservations(session, entry);
+                this.recordObservations(session);
                 if (this.stateManager && session.sessionId) {
                     this.stateManager.markProcessed([session.sessionId], 'session');
                 }
@@ -50,13 +50,13 @@ export class XraySessionIngester {
         const promoted = imported > 0 ? this.signalsManager.promoteQualifiedSignals() : [];
         return { imported, skipped, promoted };
     }
-    recordObservations(session, entry) {
-        const matches = this.extractMatches(session, entry);
+    recordObservations(session) {
+        const matches = this.extractMatches(session);
         if (matches.length === 0)
             return;
         this.signalsManager.recordPrimitiveObservations(matches);
     }
-    extractMatches(session, entry) {
+    extractMatches(session) {
         const matches = [];
         const seen = new Set();
         const add = (name, confidence) => {
@@ -70,20 +70,19 @@ export class XraySessionIngester {
         for (const pattern of session.patterns ?? []) {
             const raw = pattern.name || pattern.type || '';
             const slug = slugFieldPrimitiveName(raw);
-            const confidence = typeof pattern.confidence === 'number' ? pattern.confidence : DEFAULT_PROMOTION_MIN_CONFIDENCE;
-            if (slug)
-                add(slug, Math.max(confidence, DEFAULT_PROMOTION_MIN_CONFIDENCE));
+            if (!slug || typeof pattern.confidence !== 'number')
+                continue;
+            add(slug, pattern.confidence);
         }
         for (const name of session.matched_primitives ?? []) {
-            const confidence = session.match_confidence?.[name] ?? DEFAULT_PROMOTION_MIN_CONFIDENCE;
+            const confidence = session.match_confidence?.[name];
+            if (typeof confidence !== 'number')
+                continue;
             add(name, confidence);
         }
         if (this.repoPrimitive) {
             add(this.repoPrimitive, DEFAULT_PROMOTION_MIN_CONFIDENCE);
         }
-        for (const hit of this.signalsManager.matchByText(entry.inference, 2)) {
-            add(hit.signal.name, DEFAULT_PROMOTION_MIN_CONFIDENCE);
-        }
         return matches;
     }
     sessionToInferenceEntry(session) {