0xray 4.0.41 → 4.1.0

package/dist/skills/orchestrator/SKILL.md

@@ -72,6 +72,18 @@ The hold lasts for the work that named the plane. A sentence that does not say l
 
 Config: `features.json` → `multi_agent_orchestration.lead_dev_mode`
 
+## Confer
+
+The TUI that is wearing the suit already spawned the MCP servers. Confer uses those servers. It does not start a private server and it does not run `hermes -z`.
+
+When `.xray/state/confer-ask-s.1.json`, `confer-ask-s.2.json`, and `confer-ask-s.3.json` are on disk:
+
+1. Call the server and tool named in each ask. Researcher and code-review return evidence. Architect returns the assessment with `Verdict: UNREVIEWED`.
+2. Write one verdict line from this TUI's model: `Verdict: PASS`, `Verdict: CONDITIONAL`, or `Verdict: FAIL`, plus top risks and a hardening note.
+3. Call `record_confer_receipt` on `xray-governance` with `todoId`, `subagent`, `sessionId`, and that text.
+
+Only `Verdict: PASS` completes the todo. FAIL, CONDITIONAL, and UNREVIEWED stay open. A session id that does not match the plan does not complete the todo. Grok, OpenCode, Hermes, and OpenClaw use these same three steps. Hermes is a voter only when Hermes is the TUI, and then only as that TUI's own model.
+
 ## Lead cadence (syncopation)
 
 The seven rules are the engine. The cadence is the time signature. Disk SSOT: `grok-bot/OP-PROC.md` (team specifics live in `house/`).

package/docs-site/docs/plates/activity-log.md

@@ -35,4 +35,4 @@ Today those writers append `logs/framework/activity.log`. The features default s
 
 When: on the tool hook, on framework logger flush, and on boot when file logging is on. Why: the report and the pulse read one tail, not a pile of copies.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/bifrost.md

@@ -0,0 +1,48 @@
+---
+title: Bifrost
+sidebar_label: Bifrost
+plate_type: pipeline
+---
+
+# Bifrost
+
+Bifrost is an autonomous AI fleet management system. Every PR, issue and comment becomes a card on one board and a line in the right seat's inbox, and the seat is woken to act on it.
+
+```
+┌────────────────────────────────────────────────────────────┐
+│ INPUT LAYER                                                │
+│   ┌──────────────┐ ┌──────────────┐ ┌───────────────────┐  │
+│   │ GitHub       │ │ seat         │ │ Railway deploys,  │  │
+│   │ PR / issue / │ │ presence +   │ │ /healthz probes   │  │
+│   │ comment      │ │ activity     │ │                   │  │
+│   └──────┬───────┘ └──────┬───────┘ └─────────┬─────────┘  │
+│          └────────────────┴───────────────────┘            │
+└─────────────────────────────┬──────────────────────────────┘
+                              v
+┌─────────────────────────────┼──────────────────────────────┐
+│ PROCESSING LAYER            v                              │
+│   ┌────────────────────────────────────────────────────┐   │
+│   │ collector board (live_mesh.py) on Railway          │   │
+│   │ PR, issue, review, push, and merge → beats         │   │
+│   │ inbox lines use routing/inbox-roles.json           │   │
+│   └──────────────────────────┬─────────────────────────┘   │
+└──────────────────────────────┼─────────────────────────────┘
+                               v
+┌──────────────────────────────┼─────────────────────────────┐
+│ OUTPUT LAYER                 v                             │
+│   ┌──────────────┐ ┌──────────────────┐ ┌───────────────┐  │
+│   │ the board    │ │ seat inboxes +   │ │ seat presence │  │
+│   │ (cards)      │ │ wake webhooks    │ │ + archive     │  │
+│   └──────────────┘ └──────────────────┘ └───────────────┘  │
+└────────────────────────────────────────────────────────────┘
+```
+
+The governor runs inside the server (`house/live/app/server.mjs`). When nothing on the board moves for `BIFROST_TRIPWIRE_MINUTES` (default 30), the tripwire starts a timed run. On a stalled board, every seat with open work is woken with a deadline, and the CoS role is told. On an empty board, the CoS role is woken to pull the next work. The CoS role can start the same run with `POST /clock`. A seat's move clears the clock.
+
+`evalNudges` is the one nudge path. A live card with no beat for `NUDGE_L1_S` (default 3600) sends L1 to the next owner, or else the card owner. L2 goes to the CoS role after `NUDGE_L2_S` (default 1800). L3 repeats to that L1 seat after `NUDGE_L3_S` (default 7200), and the CoS role is woken once to reassign. An unacked inbox line steps L1, L2, and L3 on that same seat, `NUDGE_LINE_S` apart (default 900), and the CoS role is woken at L3. A missing handoff nudges the owing seat at L1, again at L2, and again at L3, and the CoS role is woken once at L3. Seats with no route, and seats whose wake has gone quiet, each hold one nudge to the CoS role.
+
+A cloud agent is its own board row (`cloud_agents`, also copied onto `board.cloud_agents`): `bcId`, owning seat, linked card, and state `running`, `finished`, or `failed`. The Cursor webhook and seat activity `kind: cloud_agent` feed that row.
+
+Code lives under `house/live/` (collector, board, inbox routing, server). `house/live/feed/live_mesh.py` runs the collector and the board. `house/live-mesh/fetch_feed.py` is the upstream feed the deploy assembles. Deploy only via `house/live/app/deploy.sh`. A Railway build straight from git stops in the Dockerfile with `ERROR: collector/ is not assembled`. The plate that belongs here is house.
+
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/boot.md

@@ -5,7 +5,7 @@ sidebar_label: Boot
 
 # Boot
 
-`BootOrchestrator.executeBootSequence` brings the framework up. Processor registration here is the legacy boot list. The live tool gate is the suit pipeline, drawn on the processor plate.
+`BootOrchestrator.executeBootSequence` brings the engine up. Processor registration here is the legacy boot list. The live tool gate is the suit pipeline, drawn on the processor plate.
 
 ```
 ┌────────────────────────────────────────────────────────────┐
@@ -66,4 +66,4 @@ sidebar_label: Boot
 └────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/centrifuge.md

@@ -27,4 +27,4 @@ JUDGEMENT│   LOOP                   STATE      │PAYMENTS
 
 Loop, domain, state, foundry, and memory ride that turn. Judgement and payments stay off the rotor. Goggles looks on and does not spin. The next turn waits for the next session or compact.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/cursor-compact.md

@@ -32,4 +32,4 @@ Cursor preCompact writes the station card and cannot block the compact.
 
 The file is `src/integrations/cursor/hooks/pre-compact.js`. The message tells the seat to read STATION.md. The plates that belong here are payload-heat and station-heat.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/glossary.md

@@ -15,12 +15,16 @@ What the words mean.
   │ suit · what the agent wears                                │
   │ power · memory, judgment, or payments                      │
   │ where it runs · the tool you already open                  │
+  │ wake · the next session has the job                        │
   │ goggles · it views one plane                               │
   │ house · shared rules, one board, memory that sticks        │
-  │ mill · the shop that builds and ships                      │
+  │ foundry · mills and hangars                                │
+  │ mill · builds and ships the plant                          │
+  │ hangar · the shop on that foundry                          │
   │ plane · one view, not the whole job                        │
   │ plate · the drawing, not the live run                      │
-  │ grok-bot · the package you install                         │
+  │ 0xray · the suit you wear                                  │
+  │ grok-bot · the house companion                             │
   └────────────────────────────────────────────────────────────┘
 ```
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/goggles.md

@@ -6,7 +6,7 @@ plate_type: domain model
 
 # Goggles
 
-It views one plane.
+It views one plane. The lens check is the one look that spans planes.
 
 ```
   ┌────────────────────────────────────────────────────────────┐
@@ -14,9 +14,20 @@ It views one plane.
   ├────────────────────────────────────────────────────────────┤
   │ · it views one plane                                       │
   │ · not every plane at once                                  │
+  │ · the lens check sweeps every card plane for shipped files │
+  │ · it names the first drift, or stays quiet on a match      │
+  ├────────────────────────────────────────────────────────────┤
+  │ REFUSED                                                    │
+  │ · an empty look                                            │
+  │ · kind and outer together                                  │
+  │ · a plane on an outer that has no card                     │
   └────────────────────────────────────────────────────────────┘
 ```
 
+A card views one plane. The lens check reads every card plane, but only the files the package ships (`package.json` `files`), so a packed install and the repo read the same. A file that does not ship is triage's job, one plane at a time.
+
+The refusals read: `Name a kind, one outer, or one plane.` · `Send kind or outer, not both.` · `plane goes with digest or triage only.`
+
 A checkout named `0xray` records `scripts/mjs/run-goggles-mcp.mjs`. Any other project records `node_modules/0xray/scripts/mjs/run-goggles-mcp.mjs`.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/governance.md

@@ -50,4 +50,4 @@ A proposal is deliberated inside the suit, filtered by Dynamo Solar, then merged
 └────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/grok-compact.md

@@ -32,4 +32,4 @@ Grok PreCompact runs session-start.js with the pre_compact event.
 
 The hook is `session-start.js --hook-event=pre_compact`. It calls `buildSessionBootPayload`, writes the station card, and prints nothing. It does not match the conversation. Grok ignores hook stdout. The plates that belong here are payload-heat, cursor-compact, and work-fresh.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/grokbot.md

@@ -38,4 +38,6 @@ Give your bots a house: shared rules, one board for the work, and memory that st
   code links: suit → memory, house → doctor, memory → station. Other lines show reading order only.
 ```
 
-stamped · 0xray 4.0.41 · @0xray/grok-bot 0.1.8
+The fleet's board, seat inboxes and wake webhooks run on [Bifrost](./bifrost.md), an autonomous AI fleet management system.
+
+stamped · 0xray 4.1.0 · @0xray/grok-bot 0.1.8

package/docs-site/docs/plates/host-pack.md

@@ -31,4 +31,4 @@ Run it in the tool you already open. Same suit. No new app.
 
 These six already run.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/house.md

@@ -50,4 +50,4 @@ A state flow plate: the stages a house goes through before doctor says House: PA
   └──────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.41 · @0xray/grok-bot 0.1.8
+stamped · 0xray 4.1.0 · @0xray/grok-bot 0.1.8

package/docs-site/docs/plates/index.md

@@ -7,6 +7,8 @@ sidebar_label: Overview
 
 A plate is one pipeline, drawn as a stamp. The drawing is the thing a person reads: an input layer, a processing layer, an output layer, and the arrows between them.
 
+0xRay is a three-subsystem autonomous engine. The suit is the wear. Inference remembers. External Governance judges. The Autonomous Engine runs the work. A foundry is mills and hangars. When the window closes, the next session wakes with the job.
+
 These files are the canonical stamps. The Docusaurus sidebar publishes them, and the npm package ships this directory. The worn reader walks up from `dist/integrations/hooks/plates.cjs` to `docs-site/docs/plates/`. One plate, one file.
 
 The station card stays the short subsystem table. That table is the index still on disk after compaction. When the current intent names one pipeline, the card adds a single stock line, `Plate: <id> — .xray/state/plates/<id>.md`. Recall returns that one plate, and a compact can carry its schematic. Lessons stay episodes on signals. A plate is the machine. A lesson is what happened.
@@ -21,7 +23,7 @@ Plates have a type. A domain model plate shows how named parts fit. A state flow
 
 ## State flow
 
-[House](./house.md) · [Live mesh](./live-mesh.md) · [Review](./review.md)
+[House](./house.md) · [Bifrost](./bifrost.md) · [Review](./review.md)
 
 ## Pipeline
 
@@ -51,4 +53,4 @@ These eight are the pages the file ref names. Each one is a search lens. Each le
 
 These five are the compact path that was opened. Each one is a search lens. Each lens lists one skill and the plates that belong with it.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/inference-files.md

@@ -32,4 +32,4 @@ Inference cycle state already lives under .xray/inference.
 
 Cycle state, history, graded ids, and governance state are already there. Session files still fall back to `docs/inference` until the writers move.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/kept-line.md

@@ -32,4 +32,4 @@ A station rewrite keeps one Fresh line and drops the copies.
 
 mergeStationMarkdown in src/integrations/hooks/station-hook-runtime.cjs treats a Fresh line as stock. Copies are not preserved. When the new card has no Fresh line, the latest one is kept. The plates that belong here are station-card and work-fresh.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/kits.md

@@ -27,4 +27,4 @@ Add a power. Memory, judgment, or payments.
 
 Three. That's the set.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/lens-gate.md

@@ -32,4 +32,6 @@ A search names one plane or it stops.
 
 lensBeforeResearch in src/integrations/hooks/goggles-pipeline.mjs returns null when the call is not research, and when the spoken text names exactly one card plane. Zero names, or more than one, deny with Name one plane. A shell that reads a project source file is research. The first open of a source file that no lens lists is allowed and remembered. The next search stops until that file is on a lens and the plate is on disk. The hook does not author the plate. The plate that belongs here is pre-tool.
 
-stamped · 0xray 4.0.41
+Only the lens check spans planes. It reads, it does not search, so this gate does not stop it. Every other look and every search names one plane.
+
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/lens-page.md

@@ -32,4 +32,4 @@ The lens page is the card for one plane.
 
 `formatCardPane` in `src/integrations/hooks/goggles-pipeline.mjs` draws the card. Read the card instead of searching the tree. The plates that belong here are record-map and lens-gate.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/memory-recall.md

@@ -41,4 +41,4 @@ Intent names one plate. Equal top scores recall nothing. A missing worn copy is
 
 A look returns the named plane, the matched law names, and the current lines from the session-note index. It does not write a law.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/notes-page.md

@@ -30,7 +30,7 @@ Notes are the body the station card cannot hold.
 └────────────────────────────────────────────────────────────┘
 ```
 
-The page is `.xray/state/NOTES.md`. The pickup line equals the station intent. The default depth is the working notes: the point, the coverage, the library, the open pull requests, the rituals, and the next cut. A pickup line alone does not survive a compact. PreCompact calls `stampNotesPickup`, which updates only that line and leaves the body alone. The hook does not check the body. The seat writes it before the compact. Do not commit this file. Do not feed it to Repertoire.
+The page is `.xray/state/NOTES.md`. The pickup line equals the station intent. The default depth is the working notes: the point, the coverage, the library, the open pull requests, the rituals, and the next cut. A pickup line alone does not survive a compact. Where a PreCompact hook exists it calls `stampNotesPickup`, which updates only that line and leaves the body alone. On Grok there is no pre-compact signal, so the seat writes the body after every beat, with evidence. A compaction is a wake: read the station, then the notes, then resume. Do not commit this file. Do not feed it to Repertoire.
 
 The station module writes this page. Heat keeps the current lines in `.xray/state/repertoire/session-notes.json` beside the laws. The wake cascade reads that index and does not write a law. A replaced note stays in that index as history. The short index returns the current line.
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/orchestration.md

@@ -58,4 +58,4 @@ Each tool is its own call. `spawnAside` opens around `orchestrate-task`, `analyz
 └────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/package-face.md

@@ -32,4 +32,4 @@ A release writes the package face, and the agent reads it.
 
 The face is `README.md`, `package.json`, `AGENTS.md`, `llms.txt`, `CHANGELOG.md`, and `SKILLS.md`. Do not hand-bump the version.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/payload-heat.md

@@ -32,4 +32,4 @@ buildSessionBootPayload calls applyStationHeat and writes the station card.
 
 The function is in `src/integrations/grok/hooks/grok-hook-utils.js`. The plates that belong here are station-heat and pickup-stamp.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/pickup-stamp.md

@@ -32,4 +32,4 @@ stampNotesPickup writes one pickup line and leaves the rest of NOTES.md alone.
 
 The comment on the function is one pickup line. There is no check that the working notes are present. The plate that belongs here is notes-page.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/pre-tool.md

@@ -32,4 +32,4 @@ The tool hook is where the lens gate runs.
 
 pre-tool-use.js joins the command, the written content, and the paths, then calls lensBeforeResearch. A deny ends the hook. The plate that belongs here is lens-gate.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/processor.md

@@ -43,4 +43,4 @@ sidebar_label: Processor
 └──────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/record-map.md

@@ -39,4 +39,4 @@ Trail: state and logs under `.xray`. Codex is already loaded. This plate is the
 The published manual is `docs-site/docs/`. The rule sheet is `grok-bot/OP-PROC.md`. Neither is one of the five pages.
 
 Goggles plane `record-map` is the lens over this map. Station and the notes page belong to the station module. Repertoire laws stay in the law file. The session-note index sits beside that file.
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/reflection-page.md

@@ -32,4 +32,4 @@ A reflection is one episode written under docs/reflections.
 
 The loader is `loadReflectionInferences` in `src/inference/inference-accumulator.ts`. A reflection is not a repertoire law.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/reporting.md

@@ -36,4 +36,4 @@ Logs become a report. A valid cache returns the formatted report and does not wr
 └────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/review.md

@@ -54,4 +54,4 @@ A state flow plate: one critic pass, one fix, one re-review, then stop.
 
 A FAIL names the file and a test that fails on the old code. One author fixes that hole. A second session waits while the verdict is open. Re-review that new head. A hole the new test did not lock returns to ONE FIX. A PASS ends the plate. A note stays a note and does not open another lap.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/routing.md

@@ -59,4 +59,4 @@ Task text becomes an agent. `scoreAndRoute` scores the work, then `routeToAgent`
 └──────────────────────────────────────────────────────────────┘
 ```
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/session-capture.md

@@ -35,4 +35,4 @@ Today that file is `docs/inference/latest-session.json`. The home is `.xray/infe
 
 Station reads the file for heat. The inference accumulator reads `session-*.json` beside it. Do not mint a `session-<date>-<sha>` file for the station note.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/site-manual.md

@@ -32,4 +32,4 @@ The published manual is docs-site/docs.
 
 Guides, architecture, and introduction live here. Factory notes under `docs/` are a different set. Reflections stay in `docs/reflections/`.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/stamp-plate.md

@@ -32,4 +32,4 @@ A stamped plate is one drawing for one plane.
 
 The file is `docs-site/docs/plates/<id>.md`. Each opened segue gets its own plate. The hook does not author this file. The plate that belongs here is review.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/station-card.md

@@ -35,4 +35,4 @@ Read it after a compact. Leave Intent alone. The plan is the next cut. The long
 The station module writes this card. Heat adds `Cascade: record-map · notes N current`. The count is the current index. The body stays on the notes page.
 
 The card keeps the named plane. `Sleeve: on` means the previous ticket came back, the worn plate matched the package, the previous ticket matched the working record, and inspect passed. Judgement is continue, retry N, stop, or start. The same miss keeps its retry. A different ticket stops. Payments is on only when the ticket is a payment.
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/station-heat.md

@@ -32,4 +32,4 @@ On a compact event applyStationHeat stamps the notes pickup line.
 
 `isCompactHook` is true when the hook name contains compact. The body of NOTES.md is left alone. The plates that belong here are pickup-stamp and notes-page.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit-organs.md

@@ -35,4 +35,4 @@ Reporting reads the activity log and may write a report. Station reads `latest-s
 
 Repertoire already keeps `inference-state.json` and the day log under `.xray/state/repertoire/`. Goggles does not write these files. It reads a plate when one plane is named.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit-settings.md

@@ -32,4 +32,4 @@ Suit settings are features, config, and codex.
 
 There is no settings.json. The files are `.xray/features.json`, `.xray/config.json`, and `.xray/codex.json`. The package copies live under `xray/`.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit-wear.md

@@ -36,4 +36,4 @@ A worn project is a consumer. Its writes go to its own `.xray/logs` and `.xray/i
 
 A fresh wear fastens mill and inspect. Grok's Goggles launcher stays on that install: the checkout script when the package name is `0xray`, and `node_modules/0xray` for every other project.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/suit.md

@@ -14,7 +14,7 @@ Give your agent a suit. The rules stay on, you add powers, and it runs in the to
   ├────────────────────────────────────────────────────────────┤
   │ · the rules stay on                                        │
   │ · you put it on once                                       │
-  │ · it builds the factories                                  │
+  │ · it builds the foundries                                  │
   └────────────────────────────────────────────────────────────┘
                                 │
                           you add powers
@@ -37,6 +37,6 @@ Give your agent a suit. The rules stay on, you add powers, and it runs in the to
     goggles views one plane
 ```
 
-Same rules in the repo. You are not locked into one app.
+A foundry is mills and hangars. The mill builds and ships. The hangar is the shop. Same rules in the repo. You are not locked into one app.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/trail-state.md

@@ -32,4 +32,4 @@ The suit writes its trail under .xray.
 
 Session boot, the lens match line, and the station card are state. The agent reads them. Do not commit `.xray/state`.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/work-fresh.md

@@ -32,4 +32,4 @@ Refresh writes one Fresh line from git and the published package.
 
 refreshFreshness in src/nucleus/work-freshness.mjs fetches origin, reads npm view 0xray version, and returns that one line. A compact hook does not call it. The plate that belongs here is station-card.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/docs-site/docs/plates/write-home.md

@@ -35,4 +35,4 @@ The path table is `src/integrations/hooks/write-home.cjs`. Writers use it. Reade
 
 Still on the old path until each caller is rewired: the activity logger, the framework logger, the pipeline hook, the Grok hook, the Hermes bridge, station capture, `saveSessionInference`, reporting, pulse, monitor, and `features.json` `log_path`.
 
-stamped · 0xray 4.0.41
+stamped · 0xray 4.1.0

package/llms.txt

@@ -1,19 +1,25 @@
 # 0xray
 
-> Exo for coding agents. A suit that survives the context window. Not a catalog of 45 skills.
+> A three-subsystem autonomous engine. The suit is the wear. The next session wakes with the job.
 
-**4.0** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
+**4.1** — mill+inspect plant, 7 MCPs, Codex 69. Constitution always on.
+
+Confer votes. Burst runs the swarm.
+
+**4.1** — a suit that survives the context window
+
+0xRay is a three-subsystem autonomous engine. The suit is the wear. Inference remembers. External Governance judges. The Autonomous Engine runs the work. The host you already run wears it: Grok, OpenCode, Hermes, OpenClaw, or Cursor. Memory, judgement, and payments come on with the suit. When the window closes, the next session wakes with the job, the page, and the laws. Confer votes: the agents on a decision vote, and only a real yes carries the work. Burst runs the swarm, so the agents are in the work as it happens. A foundry is built from mills and hangars.
 
 Default consumer wear is **mill plant** (`mill` + `inspect`), not a 45-skill / 42-agent costume dump. `foundry.json` `"costume": true` is the opt-in dump. Do not use costume to land hangar shops. Fasten is **foundry-plant/0**: builtin plant is mill+inspect only. `foundry.json` `"plant": "@0xray/blip"` (aliases `"plant": "blip"` / `"plant": "sound"`) fastens whatever that mill package declares. Organs (looker, vibe, mixer) live in the mill — adding an organ is a mill publish, not an xray catalog PR. CLI shims `foundry blip|sound` still exist on foundry 0.1.11+; fasten is the new cut. Inspect reports the last bed or blip receipt the mill exported. Nested mill `@0xray/foundry` 0.1.12. Not costume.
 
 ## Wear (what a stranger gets)
 
-- `npm install 0xray` — postinstall fastens mill+inspect, writes 7 MCP `.mcp.json`, four host bridges (OpenCode, Grok, Hermes, OpenClaw) plus Cursor `.cursor/hooks.json`, overlays their plant. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`. Lead cadence: `grok-bot/OP-PROC.md` (team specifics live in `house/`) — a peer continues from Station + Repertoire; dummy tests `SKILLS.md`; same-sess wear; branch/PR; OTP then poll; loop until Station; live ticks, not idle pacers.
+- `npm install 0xray` links vendored `@0xray/repertoire` and prints `npx 0xray wear`. It does not write `.mcp.json` or the chat bridges. `npx 0xray wear` writes the consumer suit: managed `AGENTS.md`, `.xray` config, seven MCP servers, and the OpenCode, Grok, Hermes, and OpenClaw bridges. Inside a git checkout, wear also fastens Cursor project hooks. Grok last-mile dest is project `.grok/plugins/0xray`. Shared HOME does not last-wins clobber machine `~/.grok/plugins/0xray`. Isolated HOME must not write the machine plugin. Does **not** write consumer-root `SKILLS.md`. Lead cadence: `grok-bot/OP-PROC.md` (team specifics live in `house/`) — a peer continues from Station + Repertoire; dummy tests `SKILLS.md`; same-sess wear; branch/PR; OTP then poll; loop until Station; live ticks, not idle pacers.
 - Memory scoring rules: [docs/memory-scoring.md](docs/memory-scoring.md). The orchestrator links that file. It does not copy the rules.
 - Host `preCompact` writes the hook line and per-session receipt on the suit mill and on nested consumer wear roots (a bench with local `node_modules/0xray`). A counted cut needs a non-empty generation id and a numeric usage percent.
 - `@0xray/grok-bot`: the general page is `grok-bot/OP-PROC.md`. The team overlay is `house/` and is not in that npm pack. `templates/house/` ships. `grok-bot house init` copies the template and refuses to overwrite. Doctor uses `GROK_BOT_HOUSE` when set, otherwise walks up from the working directory for `house/HOUSE.md`.
 - MCP servers start through `scripts/node/mcp-launch.cjs`. They see PATH, HOME, and XRAY_ROOT, plus the names on their keep list. Tokens such as NPM_TOKEN are not inherited. User env values stay out of argv. Postinstall keeps user edits to AGENTS.md, `.mcp.json`, and `opencode.json`. `house init` does not copy EXAMPLE.md. Doctor FAILs while `house/EXAMPLE.md` exists. Inspect has a machinePlugin check. The Cursor hook defaults XRAY_ROOT to the suit directory.
-- `npm install` only creates the relative `node_modules/@0xray/repertoire` link to the vendored repertoire and prints `npx 0xray wear`. Run `npx 0xray wear` after install; it writes only the consumer project's `.cursor/hooks.json`. `npx 0xray unwear` restores the pre-wear snapshot.
+- `npx 0xray unwear` restores the pre-wear snapshot. Outside a git checkout, wear still writes the suit and skips only the Cursor hooks, with one warning.
 - 4.0.30: `npx 0xray wear` and `setup` also work outside a git checkout. They write the 4.0.28 project setup and skip only Cursor hooks, with one warning. In a git checkout they write the 4.0.28 project setup plus Cursor hooks.
 
 - `npx @0xray/foundry mint --skip-live` — re-fasten mill plant, then inspect.
@@ -41,7 +47,7 @@ Registered in `.mcp.json` as `npx -y 0xray mcp <cmd>`:
 | `xray-code-review` | Proposal quality |
 | `xray-architect-tools` | System design |
 
-Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.9 ships on (`npx @0xray/repertoire mcp`). Dest is named laws, not hangar `repo-*` or git slugs. Survive compact is **Station** (Read `.xray/state/STATION.md`). Station is the ticket, not a substitute for Repertoire. Do not pin 0.1.8.
+Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.9 ships on (`npx @0xray/repertoire mcp`). Dest is named laws, not hangar `repo-*` or git slugs. The wake ticket is **Station** (Read `.xray/state/STATION.md`). Station is the ticket, not a substitute for Repertoire. Do not pin 0.1.8.
 
 ## Codex 69 (always on)
 
@@ -56,10 +62,14 @@ Not an 8th `xray-*` server. **Repertoire is preferred** — vendored 0.2.9 ships
 - **Hangar** — plants factory shops on the four floors. Coexists with mill plant via shop plant allowlist.
 - **42 YML / 45 SKILL.md** — exo catalog in this repo. Not default consumer wear.
 
+## Live board (Bifrost)
+
+The board seats see is the collector board. `house/live/feed/live_mesh.py` runs the collector and the board every `LIVE_WATCH_S` seconds (default 45). A cloud agent is a board row (`bcId`, owning seat, linked card, state `running`, `finished`, or `failed`). `live-inbox` requires `LIVE_URL`, `SEAT_KEYS_DIR`, and `LIVE_CURSORS`, and exits 2 when one is missing. The seat wake is `grok-bot/templates/house/fleet/WAKE-ROUTINE.md`: turn start on every turn, turn end on every exit. A stuck card sends L1 to the next owner or the card owner, and L2 to the CoS role. Plate: `docs-site/docs/plates/bifrost.md`. Lexicon: `grok-bot/LEXICON.md`, including **button up**.
+
 ## Docs
 
 - [README.md](README.md) — exo landing
-- [AGENTS.md](AGENTS.md) — framework card
+- [AGENTS.md](AGENTS.md) — suit card
 - [AGENTS-consumer.md](AGENTS-consumer.md) — consumer card (copied to `AGENTS.md` on install)
 - [SKILLS.md](SKILLS.md) — catalog (costume / self-plant, not default sync)
 - [Foundry](docs-site/docs/architecture/v4-foundry.md) — mill vs exo, foundry-plant/0, shopPlant

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "0xray",
-  "version": "4.0.41",
-  "description": "Multi-agent orchestration and Codex governance for OpenCode, Hermes, Grok Build, and OpenClaw",
+  "version": "4.1.0",
+  "description": "Three-subsystem autonomous engine. The suit powers the agent you already run: memory, judgement, payments, and the wake.",
   "readme": "README.md",
   "license": "MIT",
   "repository": {
@@ -73,14 +73,14 @@
     "test": "vitest run",
     "test:batch": "npm test",
     "test:unit": "npm test -- src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts src/__tests__/unit/state-manager-persistence.test.ts src/__tests__/unit/context-loader.test.ts src/__tests__/unit/pattern-analyzer.test.ts src/__tests__/unit/complexity-calibrator.test.ts",
-    "test:core-framework": "npm test -- src/__tests__/unit/v2-deletion-protection.test.ts",
+    "test:core-framework": "npm test -- src/__tests__/unit/v2-deletion-protection.test.ts src/__tests__/unit/confer.test.ts src/__tests__/unit/local-confer.test.ts src/__tests__/unit/synthesis-consult-receipt.test.ts src/__tests__/unit/governance-nollm-merge.test.ts",
     "test:security": "npm test -- src/__tests__/unit/security/security-hardener.test.ts src/__tests__/unit/security/security-headers.test.ts src/__tests__/unit/security/security-auditor.test.ts",
     "test:performance": "npm test -- src/__tests__/unit/monitoring.test.ts src/__tests__/unit/benchmark.test.ts src/__tests__/unit/analytics.test.ts",
     "test:session-management": "npm test -- src/__tests__/unit/session-state-manager.test.ts src/__tests__/unit/session-security-validator.test.ts src/__tests__/unit/session-coordination-validator.test.ts src/__tests__/unit/session-migration-validator.test.ts src/__tests__/unit/session-migration-logic.test.ts",
     "test:code-analysis": "npm test -- src/__tests__/unit/codebase-context-analyzer.test.ts src/__tests__/unit/dependency-graph-builder.test.ts src/__tests__/unit/rule-enforcer.test.ts src/__tests__/unit/codex-parser.test.ts src/__tests__/unit/codex-injector.test.ts",
     "test:processors": "npm test -- src/__tests__/unit/processor-activation.test.ts src/__tests__/unit/typescript-compilation-processor.test.ts",
     "test:miscellaneous": "npm test -- src/__tests__/unit/blocked-test.test.ts",
-    "test:grok-bot": "npm test -- src/__tests__/unit/grok-bot-seat-doctor.test.ts src/__tests__/unit/grok-bot-op-proc-map.test.ts src/__tests__/unit/lead-cadence.test.ts src/__tests__/unit/grok-bot-auto-review-policy.test.ts",
+    "test:grok-bot": "npm test -- src/__tests__/unit/grok-bot-seat-doctor.test.ts src/__tests__/unit/grok-bot-house-migrate.test.ts src/__tests__/unit/grok-bot-house-template.test.ts src/__tests__/unit/grok-bot-op-proc-map.test.ts src/__tests__/unit/lead-cadence.test.ts src/__tests__/unit/grok-bot-auto-review-policy.test.ts",
     "test:quick": "npm test -- src/__tests__/integration/boot-orchestrator.integration.test.ts src/__tests__/unit/config-loader.test.ts src/__tests__/unit/state-manager.test.ts",
     "test:comprehensive": "npm run typecheck && npm run test:unit && npm run test:core-framework && npm run test:security && npm run test:performance && npm run test:session-management && npm run test:code-analysis && npm run test:processors && npm run test:miscellaneous && npm test -- src/__tests__/unit/llm-governance-provider.test.ts src/__tests__/unit/mcp-server-smoke.test.ts src/__tests__/unit/cursor-hooks.test.ts src/__tests__/unit/host-vs-mill-score.test.ts src/__tests__/unit/wear-pack-file-list.test.ts && npm run test:grok-bot",
     "test:integration-all": "npm test -- src/__tests__/integration/",

package/scripts/foundry/README.md

@@ -17,7 +17,7 @@ npx @0xray/foundry reconcile [patch|minor|major] [--apply] [--check]
 npx @0xray/foundry stamp
 npx @0xray/foundry docs-check
 npx @0xray/foundry docs-build
-npx @0xray/foundry gate [--verify-only]
+npx @0xray/foundry gate [--verify-only|--prove-published]
 npx @0xray/foundry release [patch|minor|major] --dry-run
 npx @0xray/foundry release [patch|minor|major] --i-mean-it
 npx @0xray/foundry release --publish-only --dry-run
@@ -39,7 +39,7 @@ npx @0xray/foundry hooks
 
 `FOUNDRY_ROOT` overrides cwd (the repo being milled).
 
-`gate` is build + test + docs-check. `docs-build` runs Docusaurus on the 0xray exo (`docs-site/`); stranger mills skip. `inspect` runs the six mill checks (diff, plant vs worn, receipt, CI, live tarball GET, isolated HOME) plus observational harness (Cursor/Grok hooks bound, Repertoire fastened, Station present). `--go` emits a shop-style forge GO receipt; `--require-harness=bare|suited|partial` turns that observation into a gate. Mint fails on a costume dump. Isolated HOME skips machine `~/.grok`. Shared HOME last-mile dest is project `.grok/plugins/0xray` (no last-wins machine plugin). `ci` reports GitHub Actions (no auto-push). `hooks` installs git pre/post hooks. GitHub `0xRay CI/CD` is the mill gate on `main`. `Deploy Docs` is the mill Pages put.
+`gate` is build + test + docs-check. `--skip-docs` fails the gate. `--prove-published` is Gate D and does not publish: npm lists the version, the annotated tag points at HEAD, and the GitHub Release page exists. A local gate pass is not Gate D. `docs-build` runs Docusaurus on the 0xray exo (`docs-site/`); stranger mills skip. `inspect` runs the six mill checks (diff, plant vs worn, receipt, CI, live tarball GET, isolated HOME) plus observational harness (Cursor/Grok hooks bound, Repertoire fastened, Station present). `--go` emits a shop-style forge GO receipt; `--require-harness=bare|suited|partial` turns that observation into a gate. Mint fails on a costume dump. Isolated HOME skips machine `~/.grok`. Shared HOME last-mile dest is project `.grok/plugins/0xray` (no last-wins machine plugin). `ci` reports GitHub Actions (no auto-push). `hooks` installs git pre/post hooks. GitHub `0xRay CI/CD` is the mill gate on `main`. `Deploy Docs` is the mill Pages put.
 
 `docs-check` and `gate` run **full** 0xRay corpus only when the milled `package.json` name is `0xray` and `docs-site/` exists. Otherwise **light**: `package.json` + CHANGELOG.