@almadar/core 10.129.0 → 11.0.0

package/dist/language/validation-codes.json

@@ -1,2042 +1,2032 @@
 [
   {
-    "code": "ORB_E_MISSING_NAME",
-    "category": "entity",
-    "description": "Entity is missing a name"
-  },
-  {
-    "code": "ORB_E_NO_FIELDS",
-    "category": "entity",
-    "description": "Entity has no fields defined"
-  },
-  {
-    "code": "ORB_E_INVALID_FIELD_TYPE",
-    "category": "entity",
-    "description": "Field has an invalid type"
-  },
-  {
-    "code": "ORB_E_DUPLICATE_FIELD",
-    "category": "entity",
-    "description": "Duplicate field name in entity"
-  },
-  {
-    "code": "ORB_E_INVALID_FIELD_NAME",
-    "category": "entity",
-    "description": "Field name doesn't match camelCase pattern"
-  },
-  {
-    "code": "ORB_E_MISSING_COLLECTION",
-    "category": "entity",
-    "description": "Persistent entity missing collection property"
-  },
-  {
-    "code": "ORB_E_LOCAL_REQUIRES_PERSISTENT",
-    "category": "entity",
-    "description": "`browser` on a non-persistent entity (ORB_E_LOCAL_REQUIRES_PERSISTENT)"
-  },
-  {
-    "code": "ORB_E_IDENTITY_LOCAL",
-    "category": "entity",
-    "description": "`[identity]` entity declared `browser` (ORB_E_IDENTITY_LOCAL)"
-  },
-  {
-    "code": "ORB_E_INSTANCE_INVALID",
-    "category": "entity",
-    "description": "A written-out row with an unknown field, a missing required field, or (local) no id (ORB_E_INSTANCE_INVALID)"
-  },
-  {
-    "code": "ORB_E_LOCALE_INSTANCES_NOT_LOCAL",
-    "category": "entity",
-    "description": "`instances <lang>` on an entity whose rows are not browser-stored (ORB_E_LOCALE_INSTANCES_NOT_LOCAL)"
-  },
-  {
-    "code": "ORB_E_LOCALE_INSTANCES_UNKNOWN_LOCALE",
-    "category": "entity",
-    "description": "`instances <lang>` for a locale the app does not declare, or for its default locale (ORB_E_LOCALE_INSTANCES_UNKNOWN_LOCALE)"
-  },
-  {
-    "code": "ORB_E_LOCALE_INSTANCES_INCOMPLETE",
-    "category": "entity",
-    "description": "Locale rows written without the default `instances`, or missing a declared locale (ORB_E_LOCALE_INSTANCES_INCOMPLETE)"
-  },
-  {
-    "code": "ORB_E_INVALID_RELATION",
-    "category": "entity",
-    "description": "Relation target entity doesn't exist"
+    "code": "ORB_T_MISSING_RENDER_UI",
+    "category": "trait",
+    "description": "Interaction trait missing render_ui effects"
   },
   {
-    "code": "ORB_E_EMPTY_ENUM_VALUES",
-    "category": "entity",
-    "description": "Enum field has no values"
+    "code": "ORB_T_BEHAVIOR_REF_UNRESOLVED",
+    "category": "trait",
+    "description": "A trait-value literal (`<spec>.traits.<Trait>`) whose behavior or trait does not resolve against the installed behavior packages."
   },
   {
-    "code": "ORB_E_SEMANTIC_VALUE_INVALID",
-    "category": "entity",
-    "description": "A literal default on a semantic-domain field does not satisfy that domain (`email : email = \"not-an-email\"`)."
+    "code": "ORB_T_BEHAVIOR_REF_NOT_LITERAL",
+    "category": "trait",
+    "description": "A `behavior/ref` whose argument is computed at run time: a behavior from data must arrive as a `behavior` value, never re-parsed from text."
   },
   {
-    "code": "ORB_E_MOCK_NOT_IN_ENUM",
-    "category": "entity",
-    "description": "An enum field's `@mock` names a candidate that is not one of its values."
+    "code": "ORB_T_UNQUOTE_OUTSIDE_QUASIQUOTE",
+    "category": "trait",
+    "description": "An `[\"unquote\", …]` call outside a quasiquote body in an `.orb` input."
   },
   {
-    "code": "ORB_E_LITERAL_UNION_DEFAULT_MISMATCH",
-    "category": "entity",
-    "description": "Phase F.3: an entity field declares `values: [...]` (literal-union) AND `default: <X>`, but X is not one of the declared values. Error."
+    "code": "ORB_T_EVENT_REF_UNRESOLVED",
+    "category": "trait",
+    "description": "An event-typed config value addresses a trait the program does not have."
   },
   {
-    "code": "ORB_E_DEFAULT_TYPE_MISMATCH",
-    "category": "entity",
-    "description": "An entity field's `default` is structurally incompatible with its declared type — a relation field defaulting to a whole row (`seedRow : Note = {}`) instead of an id/absent, a number/boolean default on a string/enum field, etc. Rung-2 prevention: `check_field_def_shape` (`config_type.rs`) owns the one shape-vs-type check, reused here for entity defaults. Skips the string-vs-enum-membership case, which `LiteralUnionDefaultMismatch` already reports."
+    "code": "ORB_T_EVENT_REF_NOT_EXTERNAL_INPUT",
+    "category": "trait",
+    "description": "An event-typed config value addresses an event its trait does not declare as an external input."
   },
   {
-    "code": "ORB_T_UNDEFINED_TRAIT",
+    "code": "ORB_T_CONFIG_SHAPE_MISMATCH",
     "category": "trait",
-    "description": "Trait reference not found"
+    "description": "Config field's default value doesn't match its declared structural shape (array vs scalar, object vs string, missing required, etc.). Fires after the typed-config carriers (`items` / `properties` / `values`) make the declared shape concrete enough to check against."
   },
   {
-    "code": "ORB_T_INVALID_FORMAT",
+    "code": "ORB_T_TYPE_UNKNOWN",
     "category": "trait",
-    "description": "Trait has invalid format"
+    "description": "A type reference names no declared type, entity or primitive"
   },
   {
-    "code": "ORB_T_NO_INITIAL_STATE",
+    "code": "ORB_T_TYPE_CYCLE",
     "category": "trait",
-    "description": "State machine has no initial state"
+    "description": "A type composition chain refers back to itself"
   },
   {
-    "code": "ORB_T_MULTIPLE_INITIAL_STATES",
+    "code": "ORB_T_TYPE_KIND_MISMATCH",
     "category": "trait",
-    "description": "State machine has multiple initial states"
+    "description": "Composed types do not share a kind (all Entity, all Trait, …)"
   },
   {
-    "code": "ORB_T_DUPLICATE_STATE",
+    "code": "ORB_T_TYPE_COMPOSITION_CONFLICT",
     "category": "trait",
-    "description": "Duplicate state name in state machine"
+    "description": "A field is declared in more than one composed entity"
   },
   {
-    "code": "ORB_T_EMPTY_EVENT_NAME",
+    "code": "ORB_T_TYPE_ANNOTATION_MISMATCH",
     "category": "trait",
-    "description": "An event declared, emitted or transitioned on has an empty name"
+    "description": "A type body does not match its `::` type annotation"
   },
   {
-    "code": "ORB_T_INVALID_TRANSITION",
+    "code": "ORB_T_TYPE_UNKNOWN_PARAM",
     "category": "trait",
-    "description": "Transition references non-existent state"
+    "description": "A type alias body uses a type parameter the alias does not declare"
   },
   {
-    "code": "ORB_T_DUPLICATE_TRANSITION",
+    "code": "ORB_T_TYPE_WRONG_ARG_COUNT",
     "category": "trait",
-    "description": "Duplicate transition (same from/event without guard)"
+    "description": "A type alias is applied with the wrong number of type arguments"
   },
   {
-    "code": "ORB_T_MISSING_INIT_TRANSITION",
+    "code": "ORB_T_EVENT_TYPE_WRONG_KIND",
     "category": "trait",
-    "description": "Missing INIT transition on initial state"
+    "description": "An `emits` entry names a declared type that is not an Event type"
   },
   {
-    "code": "ORB_T_STATE_UNREACHABLE",
-    "category": "trait",
-    "description": "A declared state is unreachable from the trait's initial state via any transition path. BFS from the initial state over `transitions` (skipping `from == \"*\"` wildcards and the boot `INIT` self-loop on the initial state) never reaches it — dead topology. Surfaces only as a generic \"uncovered\" in the verifier today; caught here at author time. Worked example: std-booking-system ScheduleDisplay's `displaying`/`refreshing` cluster."
+    "code": "ORB_P_UNKNOWN_PROTOCOL",
+    "category": "page",
+    "description": "A page names a protocol that is no row of the protocol table"
   },
   {
-    "code": "ORB_T_INIT_MISSING_FETCH",
-    "category": "trait",
-    "description": "INIT transition missing fetch effect for linked entity"
+    "code": "ORB_P_ENDPOINT_GRANT_MISSING",
+    "category": "page",
+    "description": "An `http` endpoint has no covering `net` listen grant"
   },
   {
-    "code": "ORB_T_MISSING_RENDER_UI",
-    "category": "trait",
-    "description": "Interaction trait missing render_ui effects"
+    "code": "ORB_P_ADDRESS_INVALID",
+    "category": "page",
+    "description": "A protocol page's address does not type-check against the protocol's address record"
   },
   {
-    "code": "ORB_T_ENDPOINT_TRAIT_RENDERS",
-    "category": "trait",
-    "description": "A trait mounted only on protocol endpoints renders"
+    "code": "ORB_RUI_UNKNOWN_ITEM_ACTION_PROP",
+    "category": "render_ui",
+    "description": "Unknown itemAction prop (e.g., hallucinated 'condition')"
   },
   {
-    "code": "ORB_T_TRAIT_ON_ROUTE_AND_ENDPOINT",
-    "category": "trait",
-    "description": "One trait is listed on both a route page and a protocol endpoint"
+    "code": "ORB_RUI_BINDING_TYPE_MISMATCH",
+    "category": "render_ui",
+    "description": "L2.1 keystone: render-ui prop bound to a `@payload.X` / `@entity.X` / `@config.X` / SExpression operator whose resolved type doesn't match any of the prop's declared `types` in the patterns registry. Distinct from `RenderUIPropTypeMismatch` (literal-only); this rule uses the F3 binding resolver to walk through bindings and SExpression operator return types (sharpened by F2's `returnSemantics` for input-dependent operators). Gap #6 in `docs/Almadar_Std_Verification.md`."
   },
   {
-    "code": "ORB_T_TRAIT_UNMOUNTED",
-    "category": "trait",
-    "description": "A program trait is listed on no page"
+    "code": "ORB_RUI_EVENT_BINDING_PAYLOAD_MISMATCH",
+    "category": "render_ui",
+    "description": "L2.2: render-ui prop with `kind: \"event-ref\"` or `kind: \"callback\"` bound to an event-name string whose declared payload schema in the trait's `emits {}` block doesn't match the component's documented bus emit shape (registry's `emitPayloadSchema` for event-ref props; `callbackArgs` for callback props). Gap #32 in `docs/Almadar_Std_Verification.md`."
   },
   {
-    "code": "ORB_T_DEPRECATED_UI",
-    "category": "trait",
-    "description": "Deprecated ui property used"
+    "code": "ORB_CANCEL_CALL_NO_KEYED_CALL",
+    "category": "effect",
+    "description": "the app runs `cancel-call` but no `call-service` anywhere carries a `key`"
   },
   {
-    "code": "ORB_T_DUPLICATE_NAME",
-    "category": "trait",
-    "description": "Duplicate trait name across orbitals"
+    "code": "ORB_CANCEL_CALL_KEY_NEVER_CALLED",
+    "category": "effect",
+    "description": "`--final`: a `cancel-call` on a `CallKey` (or a list of them) in a finished program where no keyed call has a `CallKey`-typed `key:`, so nothing the program runs is named by a key made with `as`"
   },
   {
-    "code": "ORB_T_UNDEFINED_EVENT",
-    "category": "trait",
-    "description": "Event not defined but used in transition"
+    "code": "ORB_PAGE_FACTS_UNREQUESTED_READ",
+    "category": "effect",
+    "description": "an event reads a page fact the `browser/page-facts` call did not request"
   },
   {
-    "code": "ORB_T_BEHAVIOR_REF_UNRESOLVED",
-    "category": "trait",
-    "description": "A trait-value literal (`<spec>.traits.<Trait>`) whose behavior or trait does not resolve against the installed behavior packages."
+    "code": "ORB_TAB_REQUEST_REFUSED",
+    "category": "effect",
+    "description": "a literal `browser/tab-*` request whose keys the op declares but whose values the kernel's tab-call parser refuses"
   },
   {
-    "code": "ORB_T_BEHAVIOR_REF_NOT_LITERAL",
-    "category": "trait",
-    "description": "A `behavior/ref` whose argument is computed at run time: a behavior from data must arrive as a `behavior` value, never re-parsed from text."
+    "code": "ORB_X_DISPATCH_MIXED_RESIDENCE",
+    "category": "effect",
+    "description": "one dispatch's delegated effects reach browser-stored rows and server work"
   },
   {
-    "code": "ORB_T_UNQUOTE_OUTSIDE_QUASIQUOTE",
-    "category": "trait",
-    "description": "An `[\"unquote\", …]` call outside a quasiquote body in an `.orb` input."
+    "code": "ORB_EFF_SLOT_CONFLICT",
+    "category": "effect",
+    "description": "Multiple render_ui effects targeting same slot"
   },
   {
-    "code": "ORB_T_INVALID_SLOT_DEFAULT",
-    "category": "trait",
-    "description": "Config field typed `slot` has a default value not in `VALID_SLOTS`"
+    "code": "ORB_EFF_NOTIFY_RETIRED",
+    "category": "effect",
+    "description": "`notify` is sugar for `render-ui toast { type: alert, … }`, desugared at `.lolo` lowering (owner ruling 2026-09-11) — the `.orb` IR never carries a `notify` effect kind. A `notify` tuple reaching L2 means a hand-authored `.orb` or a registry not yet re-emitted."
   },
   {
-    "code": "ORB_T_INVALID_PATTERN_DEFAULT",
-    "category": "trait",
-    "description": "Config field typed `pattern` has a default value not in `PATTERN_TYPES`"
+    "code": "ORB_EMIT_DECLARED_BUT_UNFIRED",
+    "category": "effect",
+    "description": "Trait declares an event in its `emits[]` block but no transition fires it via `(emit X)` or operator emit-config success/failure. Usually a copy-paste leftover or a stale declaration after a rename; gap #2 defense in `docs/Almadar_Std_Verification.md`."
   },
   {
-    "code": "ORB_T_SECRET_DEFAULT_NOT_STRING",
-    "category": "trait",
-    "description": "Config field typed `secret` has a non-string default — the value is a credential REFERENCE (env-var key name), never secret material (I-29)"
+    "code": "ORB_EFF_MISSING_REQUIRED_EMIT",
+    "category": "effect",
+    "description": "Operator declares `requiresEmitSuccess: true` in canonical-operators.json but the effect call site is missing the trailing options object or its `emit.success` event key. Applies to fetch / persist / call-service by default; any future operator can opt in via the same JSON flag."
   },
   {
-    "code": "ORB_T_INVALID_EVENT_DEFAULT",
-    "category": "trait",
-    "description": "Config field typed `event` holds a value that is not a member of the trait's post-rename event set (SCAN-EVENT-KNOB-1). Definer-position knobs (A-UNIFY) skip this membership check — their value CREATES the event name — but still land here if the default isn't a plain string."
+    "code": "SEXPR_ARITY_MISMATCH",
+    "category": "sexpr",
+    "description": "Wrong number of arguments for operator"
   },
   {
-    "code": "ORB_T_EVENT_REF_UNRESOLVED",
-    "category": "trait",
-    "description": "An event-typed config value addresses a trait the program does not have."
+    "code": "SEXPR_LAMBDA_ARG_POSITION",
+    "category": "sexpr",
+    "description": "A `(fn …)` form in an argument position the operator does not take its lambda in — decidable wrong argument order, e.g. `(array/reduce arr (fn …) init)`"
   },
   {
-    "code": "ORB_T_EVENT_REF_NOT_EXTERNAL_INPUT",
-    "category": "trait",
-    "description": "An event-typed config value addresses an event its trait does not declare as an external input."
+    "code": "SEXPR_EFFECT_IN_GUARD",
+    "category": "sexpr",
+    "description": "Effect operator used in guard context"
   },
   {
-    "code": "ORB_T_EXTERNAL_INPUT_NOT_RESTING",
-    "category": "trait",
-    "description": "A declared external input (`listens { EVENT -> external { … } }`) has no transition from the trait's initial state: inputs are complete commands."
+    "code": "ORB_X_UNRESOLVED_PATTERN_FIELD_REF",
+    "category": "cross",
+    "description": "A pattern prop tagged `kind: 'field-ref'` (scalar) or `itemKind: 'field-ref'` (array element) carries a value that does not resolve to any field on the linked entity. Error severity. See Phase 3.2/3.3 in docs/Almadar_Agent_Behaviors_Plan.md."
   },
   {
-    "code": "ORB_T_CONFIG_SHAPE_MISMATCH",
-    "category": "trait",
-    "description": "Config field's default value doesn't match its declared structural shape (array vs scalar, object vs string, missing required, etc.). Fires after the typed-config carriers (`items` / `properties` / `values`) make the declared shape concrete enough to check against."
+    "code": "ORB_CONFIG_FIELD_REF_UNKNOWN",
+    "category": "binding",
+    "description": "A `field @entity` config knob names something that is not a field of the trait's bound entity"
   },
   {
-    "code": "ORB_T_CONFIG_OBJECT_ARRAY_FORBIDDEN",
-    "category": "trait",
-    "description": "Config field uses `[object]` as its declared type. Banned because it lowers to an untyped `Array { inner: Json }` — the same shape the strict-lint floor catches as `Record<string, FieldValue | undefined>[]`. Authors should declare a named struct alias (e.g. `type FieldConfig = { name: string, label: string, ... }`) and use `[FieldConfig]` so the catalog + codegen carry real types."
+    "code": "ORB_CONFIG_FIELD_REF_TYPE_MISMATCH",
+    "category": "binding",
+    "description": "A `field @entity T` config knob names a field whose type is not `T`"
   },
   {
-    "code": "ORB_T_GENERIC_TYPE_DEPRECATED",
-    "category": "trait",
-    "description": "A declaration uses a generic type — bare `json`, `object` (without declared `properties`), or `any` — in an entity field, config knob, type-alias member, or event payload field. Generic types are being eliminated from the language: renderable content belongs in `node`, structured data in inline `{ k: T }` shapes / named aliases / `Map K V`, and genuinely polymorphic atoms in declared type parameters. Hard error since 2026-09-01 (both behavior packages report zero occurrences)."
+    "code": "ORB_BINDING_INVALID_PATH",
+    "category": "binding",
+    "description": "Invalid binding path"
   },
   {
-    "code": "ORB_T_TYPE_UNKNOWN",
-    "category": "trait",
-    "description": "A type reference names no declared type, entity or primitive"
+    "code": "ORB_X_SET_VALUE_TYPE_MISMATCH",
+    "category": "effect",
+    "description": "`(set @entity.X ?payloadField)` writes a payload field whose declared type does not match the target entity field's declared type. The lolo crate catches this at author time for `.lolo`; this is the raw-`.orb` defense-in-depth backstop. Payload field types are sourced from the trait's `emits[].payload_schema` and `listens` payload metadata."
   },
   {
-    "code": "ORB_T_TYPE_CYCLE",
-    "category": "trait",
-    "description": "A type composition chain refers back to itself"
+    "code": "ORB_X_SET_RETURN_TYPE_MISMATCH",
+    "category": "effect",
+    "description": "`(set @entity.X (op …))` assigns an operator/expression value whose inferred result type is incompatible with the target field's declared type (e.g. `(set @entity.count (str/concat …))` into a `number` field). The value's type is inferred *through* the S-expression via the canonical operator `return_semantics` lattice; an unknowable result (`Json`) never rejects (Gap G-LOLO-SET-OP-RETURN)."
   },
   {
-    "code": "ORB_T_TYPE_KIND_MISMATCH",
-    "category": "trait",
-    "description": "Composed types do not share a kind (all Entity, all Trait, …)"
+    "code": "ORB_X_COMPARISON_OPERAND_TYPE_MISMATCH",
+    "category": "effect",
+    "description": "An ordering comparison (`<`, `<=`, `>`, `>=`) whose operands infer to a number on one side and a string on the other. The JS runtime coerces, the compiled TypeScript does not typecheck, and Rust compares kinds — the paths disagree. Convert one side so both are the same kind."
   },
   {
-    "code": "ORB_T_TYPE_COMPOSITION_CONFLICT",
-    "category": "trait",
-    "description": "A field is declared in more than one composed entity"
+    "code": "ORB_X_OPERATOR_ARG_TYPE_MISMATCH",
+    "category": "effect",
+    "description": "An operator argument whose static type contradicts the type the operator table declares for its position — `(str/upper @entity.count)` with `count: number`, `(+ \"a\" 1)`. Both evaluators raise the same typed mismatch at run time (D-12), so the program can never do what it says."
   },
   {
-    "code": "ORB_T_TYPE_ANNOTATION_MISMATCH",
-    "category": "trait",
-    "description": "A type body does not match its `::` type annotation"
+    "code": "ORB_X_OPERATOR_ARG_UNDETERMINED",
+    "category": "effect",
+    "description": "A value handed to an operator has no determined type — an unresolved expression, an expression value, json, a loose union, a list whose items share no type — so it cannot be checked against the type the operator declares (or, at a type variable, what the variable stands for and the type of the result are unknown). Narrow it with `(as value T)` (checked, null on a misfit), or give it a real type (a declared payload or entity shape, a named union alias for a list of differently-shaped items)."
   },
   {
-    "code": "ORB_T_TYPE_UNKNOWN_PARAM",
-    "category": "trait",
-    "description": "A type alias body uses a type parameter the alias does not declare"
+    "code": "ORB_X_ORDERING_OPTIONAL_OPERAND",
+    "category": "effect",
+    "description": "An ordering comparison (`<`, `<=`, `>`, `>=`) over an operand that can be missing or null — an optional entity field with no default, an optional payload field — that the program neither guards with a presence check (`(and (validate/required x) (< x 3))`, an `if`/`when` on presence) nor declares a default for. Both evaluators read a missing value as below any number; every push-down store fails the comparison, so the meaning is the program's to state."
   },
   {
-    "code": "ORB_T_TYPE_WRONG_ARG_COUNT",
-    "category": "trait",
-    "description": "A type alias is applied with the wrong number of type arguments"
+    "code": "ORB_X_OPERATOR_NULL_OPERAND",
+    "category": "effect",
+    "description": "An operand that can be missing or null — an optional entity field with no default, an optional payload field — handed to a position the kernel raises on when it is null (`rejectsNull` in the operator table), with no presence check or default in front of it. The program says what a missing value means: a guard, a default, or a required field."
   },
   {
-    "code": "ORB_T_EVENT_TYPE_WRONG_KIND",
-    "category": "trait",
-    "description": "An `emits` entry names a declared type that is not an Event type"
+    "code": "ORB_X_OPERATOR_OPTION_NEWER",
+    "category": "effect",
+    "description": "A call states an operator option that the installed operator table introduces in an orb release newer than the one running (`optionSince`), so this orb would refuse or ignore it at the host. Upgrade orb, or drop the option."
   },
   {
-    "code": "ORB_RUI_NODE_FIELD_UNCHECKED_CONTENT",
-    "category": "trait",
-    "description": "A `node`-typed entity field receives a value the validator cannot statically check (a computed expression rather than a pattern-tree literal). Non-blocking: computed renderable content is legitimate, but its callback wiring is unchecked — prefer literal fragments (optionally via `let` bindings, which ARE resolved and checked)."
+    "code": "ORB_X_SET_REQUIRED_FIELD_FROM_OPTIONAL_KNOB",
+    "category": "effect",
+    "description": "`(set @entity.X @config.<knob>)` where the value is STILL the literal `@config.<knob>` token post-inline (no default resolved it, no call-site override supplied one) and `X` is a REQUIRED entity field. The emitter has nothing honest to assign — a required TS slot gets `undefined`. Give the knob a default or make the field optional."
   },
   {
-    "code": "ORB_RUI_RENDERABLE_IN_GENERIC_FIELD",
-    "category": "trait",
-    "description": "A render-ui pattern literal is assigned to a field NOT typed `node` — renderable content hiding in a generic/structured field escapes every render-ui check. Type the field `node` (or `[node]`). Error severity."
+    "code": "ORB_EMIT_PAYLOAD_MISSING_REQUIRED",
+    "category": "binding",
+    "description": "`(emit EVT {...})` literal payload is missing a field the event's declared payload marks as required. Error severity."
   },
   {
-    "code": "ORB_T_CONFIG_TIER_INVALID",
-    "category": "trait",
-    "description": "Config field's `@tier \"...\"` annotation uses a value outside the allowed set. Allowed values: `essential`, `customization`, `advanced`, `internal`. Defense-in-depth — the parser allowlists the four values today; this L2 rule catches future regressions and any malformed `.orb` IR that bypasses the parser."
+    "code": "ORB_EMIT_PAYLOAD_EXTRA_FIELD",
+    "category": "binding",
+    "description": "`(emit EVT {...})` literal carries a field that is not declared on the event's payload schema. Error severity."
   },
   {
-    "code": "ORB_T_ENTITY_NOT_REBINDABLE",
-    "category": "trait",
-    "description": "A trait imported from an atom carries a `linkedEntity` rebind, but the atom's binding is not marked `@rebindable`. The binding is fixed and the consumer may not redirect it. See `@rebindable` in `.lolo`."
+    "code": "ORB_EMIT_PAYLOAD_FIELD_TYPE_MISMATCH",
+    "category": "binding",
+    "description": "`(emit EVT {...})` literal provides a value whose primitive type does not match the declared `PayloadField.field_type`. Error severity."
   },
   {
-    "code": "ORB_T_REBIND_MISSING_FIELDS",
-    "category": "trait",
-    "description": "A `@rebindable` rebind points at an entity that lacks fields the trait reads (its inferred `entityContract.requires`). The target would break the behavior."
+    "code": "ORB_EMIT_REPEATS_IDENTICALLY",
+    "category": "binding",
+    "description": "An `emit` repeats an earlier one of the same transition identically: the dispatch loop collapses the second."
   },
   {
-    "code": "ORB_T_REBIND_TARGET_UNRESOLVED",
-    "category": "trait",
-    "description": "A `linkedEntity` rebind names something that is not any orbital's primary or auxiliary entity anywhere in the schema — the §52 rebind-merge (`phases::inline::entity::merge_into_named_entity`) has nowhere to land the imported trait's fields. Retired 2026-09-19: this used to fall back to the caller's primary entity silently; it is now a hard error instead of a wrong-entity merge."
+    "code": "ORB_X_ENTITY_PROP_CONTRACT",
+    "category": "render_ui",
+    "description": "A render-ui pattern prop typed `EntityWith<K>` declares required entity fields (`requiredFields` in the registry), but the bound entity does not provide them and no remap/field-map supplies them. The component would render blank rows. Remap-aware (runs post-inline). Error severity."
   },
   {
-    "code": "ORB_T_UNRESOLVED_TYPE_PARAM",
-    "category": "trait",
-    "description": "A `.lolo` event alias's `(E : Entity)` type parameter — lowered to the `\"$E\"` payload sentinel by `orbital-lolo` (increment 3-I, `docs/Almadar_LOLO.md` ~line 315/1387) — survived the inline phase's substitution pass because the trait carrying the sentinel has no `linkedEntity` to monomorphize it against. Fix: bind the trait to an entity (or, once explicit application ships, apply the alias with a concrete argument)."
+    "code": "ORB_EMIT_PAYLOAD_NOT_PRODUCED",
+    "category": "binding",
+    "description": "**The payload invariant.** An event's declared payload type IS its access path: declaring `Survey` means the payload is the row (read `?name`); declaring `{ row : Survey }` means read `?row.name`. This fires when an event declares a field that the effect firing it does not actually emit — so every read of that field is `undefined` at runtime, even though `orb validate` and `orb verify` otherwise pass. Checked as width subtyping (`declared ⊆ produced`): declaring FEWER fields than are emitted is legal, declaring one that is never emitted is not. Replaces the narrower `EmitSuccessPayloadWrapped` (persist-only) and `EmitSuccessPayloadReturnMismatch` (empty-payload-only) checks. Error severity."
   },
   {
-    "code": "ORB_T_EVENT_RENAME_UNKNOWN_KEY",
-    "category": "trait",
-    "description": "A call-site `events: { OLD: NEW }` rename names an OLD source key that does not exist in the imported trait's event set (its `emits[].event` ∪ `state_machine.transitions[].event`). The rename silently no-ops: nothing is renamed and the author's intent is lost. Surfaced from the inline phase where the imported trait's pre-rename event set is still visible."
+    "code": "ORB_EFFECT_IN_LAMBDA",
+    "category": "binding",
+    "description": "An effect (`emit`, `persist`, `set`, `notify`, …) inside the `fn` body of a collection operator: a lambda is evaluated for its value, an effect there never runs. Error severity."
   },
   {
-    "code": "ORB_T_CONFIG_UNKNOWN_CALL_SITE_KEY",
-    "category": "trait",
-    "description": "A trait Reference's call-site `config` block supplies a key that matches no declared config knob on the referenced trait — the override silently no-ops (e.g. a stale `entity=` left over from a generator regression, or a knob the atom never declared)."
+    "code": "CIRCUIT_DEAD_END_COMPONENT",
+    "category": "circuit",
+    "description": "Interactive component missing itemActions"
   },
   {
-    "code": "ORB_T_CONFIG_MISSING_REQUIRED_KEY",
-    "category": "trait",
-    "description": "A trait Reference's call site omits a key for a knob the referenced trait declares `!` (required). Any value form (literal, `@config.X` forward, `@entity.*`, payload ref) satisfies the requirement — only a fully missing key fires. The atom's own page binding is exempt."
+    "code": "ORB_GEN_INVALID_REFERENCE",
+    "category": "generic",
+    "description": "Generic invalid reference format"
   },
   {
-    "code": "ORB_T_LOCAL_TRAIT_TOUCHES_SERVER",
-    "category": "trait",
-    "description": "A `[client]` trait's transitions contain a server-bound effect (`fetch`/`persist`/`call-service`/`ref`/`deref`/`swap`/`watch`/ `atomic`/`fetch-stream`), or a guard reading `@user.*`. `[client]` declares client-only dispatch (`OirTrait::dispatch_mode`) — a trait that actually touches the server or reads viewer identity is mis-tagged; its transitions would never await the round trip they depend on. Wave 2. Error severity."
+    "code": "ORB_GEN_MISSING_FIELD",
+    "category": "generic",
+    "description": "Generic missing required field"
   },
   {
-    "code": "ORB_T_CLIENT_TICK_SERVER_EFFECT",
-    "category": "trait",
-    "description": "A tick that runs in the browser (its trait is not server-awaited; the tick is not `[background]`) carries a server effect — a server-owned data effect, or a `runsOn: server` operator. Nothing replays a tick on the server, so the effect would be dropped. Server work goes through an emitted event a server-side trait handles."
+    "code": "ORB_GEN_DUPLICATE",
+    "category": "generic",
+    "description": "Generic duplicate entity/item"
   },
   {
-    "code": "ORB_T_LOCAL_ON_NON_SHARED_PERSISTENT",
-    "category": "trait",
-    "description": "`[client]` on a trait whose linked entity is neither `[shared]` nor `[runtime]`. `[client]` is only legal on an entity multiple traits co-mutate client-side (`[shared]`) or one that is never persisted at all (`[runtime]`) — on an ordinary persistent entity it would silently hide server-gated writes behind client-only dispatch. Wave 2. Error severity."
+    "code": "CIRCUIT_ACTION_COMPONENT_MISMATCH",
+    "category": "circuit",
+    "description": "An item action is used on a component type that does not support that action"
   },
   {
-    "code": "ORB_AUTH_GUARD_CLIENT_ONLY",
-    "category": "dispatch",
-    "description": "A transition guard reads `@user.*` while the trait's `OirTrait::dispatch_mode()` is `RuntimeOptimistic` or `HybridClientOnly` — evaluated client-side only. An identity check that never reaches the server is not an authorization boundary: the client can construct any `@user` value it likes. Wave 2. Warning severity (the guard may still be a legitimate UX precondition; it is never a security boundary)."
+    "code": "CIRCUIT_DEAD_END_STATE",
+    "category": "circuit",
+    "description": "A state has no outgoing transitions, so it is a dead end"
   },
   {
-    "code": "ORB_P_MISSING_NAME",
-    "category": "page",
-    "description": "Page is missing a name"
+    "code": "CIRCUIT_DEAD_HANDLER",
+    "category": "circuit",
+    "description": "An item action fires an event into a state where no transition handles that event"
   },
   {
-    "code": "ORB_P_MISSING_PATH",
-    "category": "page",
-    "description": "Page is missing a path"
+    "code": "CIRCUIT_DUPLICATE_EVENT",
+    "category": "circuit",
+    "description": "The same event is emitted by more than one action within a single render-ui effect"
   },
   {
-    "code": "ORB_P_INVALID_PATH",
-    "category": "page",
-    "description": "Page path is invalid (must start with /)"
+    "code": "CIRCUIT_MODAL_EXIT_INCOMPLETE",
+    "category": "circuit",
+    "description": "A transition leaving a modal state does not close the modal overlay it opened"
   },
   {
-    "code": "ORB_P_DUPLICATE_PATH",
-    "category": "page",
-    "description": "Duplicate page path"
+    "code": "CIRCUIT_NO_OVERLAY_EXIT",
+    "category": "circuit",
+    "description": "A state renders into an overlay slot but has no exit transition, leaving users stuck"
   },
   {
-    "code": "ORB_P_INDEX_REQUIRES_PUBLIC",
-    "category": "page",
-    "description": "`indexing: index` without `access: public`, a title, a description or an app `origin`"
+    "code": "CIRCUIT_ORPHAN_EVENT",
+    "category": "circuit",
+    "description": "An action or emit raises an event that has no transition handler"
   },
   {
-    "code": "ORB_P_INDEX_PARAM_ROUTE",
-    "category": "page",
-    "description": "`indexing: index` on a `:param` route (concrete URL inputs are not declarable yet)"
+    "code": "CIRCUIT_UNREACHABLE_STATE",
+    "category": "circuit",
+    "description": "A state has no incoming transitions and cannot be reached"
   },
   {
-    "code": "ORB_P_AUTH_NO_SIGN_IN",
-    "category": "page",
-    "description": "`access: authenticated` page in an app that declares no `signIn` route"
+    "code": "LINT_NODE_UNCHECKED",
+    "category": "lint",
+    "description": "A lint rule met a schema node of an unexpected shape and could not check it"
   },
   {
-    "code": "ORB_P_SIGN_IN_UNKNOWN_ROUTE",
-    "category": "page",
-    "description": "The app's `signIn` route is no page, or is itself `access: authenticated`"
+    "code": "ORB_A11Y_UNNAMED",
+    "category": "a11y",
+    "description": "A render-ui control has no accessible name, so screen readers announce it as unlabeled"
   },
   {
-    "code": "ORB_P_HOST_RESERVED_ROUTE",
-    "category": "page",
-    "description": "A page is declared on the host's own sign-in route (`/login`)"
+    "code": "ORB_ASSET_INLINE_URL",
+    "category": "asset",
+    "description": "A literal http(s) url sits in the config defaults or seed rows of an orbital that composes std-asset-pack."
   },
   {
-    "code": "ORB_P_UNKNOWN_PROTOCOL",
-    "category": "page",
-    "description": "A page names a protocol that is no row of the protocol table"
+    "code": "ORB_AUTH_GUARD_CLIENT_ONLY",
+    "category": "auth",
+    "description": "A transition guards on @user but its trait dispatches client-only, so the UI transition advances before the server evaluates the guard"
   },
   {
-    "code": "ORB_P_ENDPOINT_GRANT_MISSING",
-    "category": "page",
-    "description": "An `http` endpoint has no covering `net` listen grant"
+    "code": "ORB_BEACON_OPTION_UNKNOWN",
+    "category": "beacon",
+    "description": "A browser beacon request carries an option key that is not a known beacon request key"
   },
   {
-    "code": "ORB_P_ADDRESS_INVALID",
-    "category": "page",
-    "description": "A protocol page's address does not type-check against the protocol's address record"
+    "code": "ORB_BEACON_TEXT_REQUIRED",
+    "category": "browser",
+    "description": "browser/beacon needs a request carrying a text field"
   },
   {
-    "code": "ORB_P_TRANSLATION_DUPLICATE_LOCALE",
-    "category": "page",
-    "description": "One locale holds two pages of the same `translationOf` group"
+    "code": "ORB_BEACON_URL_NOT_ABSOLUTE",
+    "category": "browser",
+    "description": "A browser beacon effect targets a URL that is not an absolute http(s) URL"
   },
   {
-    "code": "ORB_P_MISSING_TRAITS",
-    "category": "page",
-    "description": "Page is missing traits array"
+    "code": "ORB_BINDING_DISPATCH_ROOT_IN_TICK",
+    "category": "binding",
+    "description": "A dispatch-only binding root is read inside a tick, where a firing has no delivery"
   },
   {
-    "code": "ORB_P_EMPTY_TRAITS",
-    "category": "page",
-    "description": "Page traits array is empty"
+    "code": "ORB_BINDING_EMBED_READS_ARM_WRITE",
+    "category": "binding",
+    "description": "A transition writes a value and renders a child that reads it on mount, so the child shows the stale value"
   },
   {
-    "code": "ORB_O_DUPLICATE_NAME",
-    "category": "page",
-    "description": "Two orbitals of one program share a name"
+    "code": "ORB_BINDING_ENTITY_FIELD_NEVER_SET",
+    "category": "binding",
+    "description": "A trait reads an entity binding field but no transition ever sets it, so it stays undefined"
   },
   {
-    "code": "ORB_O_CONFIG_UNKNOWN_KEY",
-    "category": "page",
-    "description": "An `orbital X = Alias.orbitals.Y { config { … } } }` call-site override names a key the upstream orbital's declared `config {}` does not have (`Almadar_Orbital_Import.md` §4.5)."
+    "code": "ORB_BINDING_ENTITY_FIELD_NOT_FOUND",
+    "category": "binding",
+    "description": "An @entity binding names a field that the linked entity does not declare"
   },
   {
-    "code": "ORB_O_OMIT_EMBEDDED_TRAIT",
-    "category": "page",
-    "description": "An `orbital X = Alias.orbitals.Y { omit { … } } }` call site drops a trait that a surviving trait still embeds via `@trait.<X>` — the embed token has nothing left to render."
+    "code": "ORB_BINDING_EVENT_INVALID_PATH",
+    "category": "binding",
+    "description": "An @event binding path does not follow the shape of the delivery record"
   },
   {
-    "code": "ORB_O_CONFIG_DEAD_KNOB",
-    "category": "page",
-    "description": "A declared `Orbital.config` or `OrbitalSchema.config` knob (`Almadar_Orbital_Import.md` §4.5) that no trait in the schema forwards (`config[*].default == \"@config.<knob>\"`) — dead: nothing publishes it, so no call site can ever reach it."
+    "code": "ORB_BINDING_FROM_ENTITY_OUTSIDE_ENSURES",
+    "category": "binding",
+    "description": "@fromEntity is the row before a transition and may only be used inside an @ensures"
   },
   {
-    "code": "ORB_O_ROLE_TARGET_NOT_MEMBER",
-    "category": "page",
-    "description": "An `orbital X = Alias.orbitals.Y { roles { … } } }` target is not a member of the CONSUMER roster's vocabulary (`identity_entities` on the importing schema, post-inline)."
+    "code": "ORB_BINDING_INVALID_FORMAT",
+    "category": "binding",
+    "description": "A binding string is not in a valid binding format"
   },
   {
-    "code": "ORB_O_ROLE_UNKNOWN_UPSTREAM",
-    "category": "page",
-    "description": "An `orbital X = Alias.orbitals.Y { roles { … } } }` key names no value in any UPSTREAM identity field's vocabulary (or the upstream alias declares no roster at all)."
+    "code": "ORB_BINDING_NOW_NO_PATH",
+    "category": "binding",
+    "description": "The @now binding is given a path, but it returns the current timestamp directly"
   },
   {
-    "code": "ORB_O_ENTITY_UNMAPPED",
-    "category": "page",
-    "description": "A kept trait/relation/page references an out-of-orbital entity that `obj.entities {}` never maps — the import splice has nothing to rebind it to."
+    "code": "ORB_BINDING_PAYLOAD_FIELD_UNDECLARED",
+    "category": "binding",
+    "description": "A @payload binding reads a field that the triggering event does not declare in its payload"
   },
   {
-    "code": "ORB_O_ENTITY_UNKNOWN_KEY",
-    "category": "page",
-    "description": "An `obj.entities {}` key names no entity in the upstream closure's out-of-orbital universe."
+    "code": "ORB_BINDING_PAYLOAD_IN_TICK",
+    "category": "binding",
+    "description": "A binding reads @payload inside a tick, where a firing has no delivery"
   },
   {
-    "code": "ORB_O_ENTITY_EXPECT_AMBIGUOUS",
-    "category": "page",
-    "description": "An entity an imported orbital expects of a sibling is provided by several sibling imports and no `entities {}` entry names which one it binds to."
+    "code": "ORB_BINDING_PERSIST_ROW_ID_NEVER_SET",
+    "category": "binding",
+    "description": "A persist update or delete runs on an event but no transition sets the row id, so the write never touches a row"
   },
   {
-    "code": "ORB_O_ENTITY_TARGET_UNKNOWN",
-    "category": "page",
-    "description": "An `obj.entities {}` value names no entity the consumer schema declares."
+    "code": "ORB_BINDING_ROOT_NO_PATH",
+    "category": "binding",
+    "description": "A binding root that takes no path is written with a path"
   },
   {
-    "code": "ORB_O_PAGE_UNKNOWN_PATH",
-    "category": "page",
-    "description": "An `obj.pages {}` / `obj.mounts {}` key names no page path the imported orbital declares."
+    "code": "ORB_BINDING_SET_TARGET_MISSING_PATH",
+    "category": "binding",
+    "description": "A set effect targets a binding root without a field path"
   },
   {
-    "code": "ORB_O_EXTEND_FIELD_COLLISION",
-    "category": "page",
-    "description": "An `orbital X = Alias.orbitals.Y { extend { … } } }` field name is already declared on the upstream primary entity (after `fields {}` renames), or equals a `fields {}` rename TARGET (Stage C)."
+    "code": "ORB_BINDING_STATE_NO_PATH",
+    "category": "binding",
+    "description": "A binding root that returns a bare value, such as @state, is given a path"
   },
   {
-    "code": "ORB_O_EXTEND_FIELD_UNREAD",
-    "category": "page",
-    "description": "An `extend { … }` field no kept trait reads/sets/renders and no orbital-level config knob value forwards (Stage C, warning — rung 2)."
+    "code": "ORB_BINDING_TRAIT_CYCLE",
+    "category": "binding",
+    "description": "A cycle exists in @trait references"
   },
   {
-    "code": "ORB_O_FIELD_RENAME_UNAPPLIED",
-    "category": "page",
-    "description": "A `fields { OLD: NEW }` rename on an `orbital X = Alias.orbitals.Y { … }` reference left a structurally-recognized field-reference position (a config default's bare/list field-name value) still naming the pre-rename upstream field — the rename silently failed to reach it (G3, `docs/Almadar_Compiler_Gaps.md` §82, rung 2: what used to validate 0/0 with a dead reference now errors instead)."
+    "code": "ORB_BINDING_TRAIT_INVALID_FORMAT",
+    "category": "binding",
+    "description": "A trait binding or trait-typed config default is not a valid trait reference"
   },
   {
-    "code": "ORB_O_MOCK_UNKNOWN_FIELD",
-    "category": "page",
-    "description": "A `mock { … }` key names no field of the imported primary entity."
+    "code": "ORB_BINDING_TRAIT_INVALID_POSITION",
+    "category": "binding",
+    "description": "A @trait binding appears in a position other than a children array or a node-typed prop"
   },
   {
-    "code": "ORB_O_RETYPE_UNKNOWN_FIELD",
-    "category": "page",
-    "description": "A `retype { … }` field the upstream primary entity does not declare (after `fields {}` renames)."
+    "code": "ORB_BINDING_TRAIT_MISSING_NAME",
+    "category": "binding",
+    "description": "A @trait binding does not name the trait it refers to"
   },
   {
-    "code": "ORB_O_RETYPE_FIELD_CONFLICT",
-    "category": "page",
-    "description": "A `retype { … }` field also added by `extend {}`, or retyped twice."
+    "code": "ORB_BINDING_TRAIT_OUTSIDE_RENDER_UI",
+    "category": "binding",
+    "description": "An @trait binding appears outside a render-ui effect, where it is the only place trait references are allowed"
   },
   {
-    "code": "ORB_O_ENTITY_PERSISTENCE_LOCKED",
-    "category": "page",
-    "description": "An `entity [persistent: …]` override on an upstream entity whose persistence mode does not allow overrides (the factory-runtime rule)."
+    "code": "ORB_BINDING_TRAIT_SELF_REFERENCE",
+    "category": "binding",
+    "description": "A trait references itself through a trait binding"
   },
   {
-    "code": "ORB_O_TRAITS_UNKNOWN_TRAIT",
-    "category": "page",
-    "description": "A `traits { T { … } }` key naming no trait of the upstream orbital."
+    "code": "ORB_BINDING_TRAIT_UNKNOWN",
+    "category": "binding",
+    "description": "A @trait binding references a trait that is not declared in this orbital"
   },
   {
-    "code": "ORB_O_TRAITS_OMITTED_TRAIT",
-    "category": "page",
-    "description": "A `traits { T { … } }` key naming a trait `omit {}` / `only {}` dropped."
+    "code": "ORB_BINDING_UNKNOWN_ENTITY",
+    "category": "binding",
+    "description": "A binding refers to an entity that is not declared in the program"
   },
   {
-    "code": "ORB_P_SECTIONS_FORBIDDEN",
-    "category": "page",
-    "description": "Static sections are forbidden (use render_ui)"
+    "code": "ORB_BINDING_UNKNOWN_ROOT",
+    "category": "binding",
+    "description": "A binding names a root the context does not provide"
   },
   {
-    "code": "ORB_P_INVALID_TRAIT_REF",
-    "category": "page",
-    "description": "Invalid trait reference on page"
+    "code": "ORB_CALL_KEY_UNUSED",
+    "category": "effect",
+    "description": "A literal (as 'k' CallKey) names a key that no keyed call in the program runs under"
   },
   {
-    "code": "ORB_P_INVALID_VIEW_TYPE",
-    "category": "page",
-    "description": "Invalid view type"
+    "code": "ORB_CALL_SERVICE_CANCELLED_WITHOUT_KEY",
+    "category": "call_service",
+    "description": "A call-service declares emit.cancelled but has no key, so nothing can cancel an unkeyed call"
   },
   {
-    "code": "ORB_PAGE_UNREACHABLE",
-    "category": "page",
-    "description": "A declared inline page is not the target of any `navigate` effect, any literal `href` value, and is not the root page or a parameterized page — nothing in the schema can ever route a viewer to it. Ported from the JS wiring lint's `page-absent-from-nav`, generalised: no navItems-array opt-in gate, and scalar `href` values count (not only object-array entries)."
+    "code": "ORB_CALL_SERVICE_KEY_DUPLICATE",
+    "category": "effect",
+    "description": "Two call-service effects in one transition use the same key"
   },
   {
-    "code": "ORB_PAGE_SECOND_CONTENT_BODY",
-    "category": "page",
-    "description": "A page's content owner (`page_content_owner`'s `channel`/`ambiguous`) leaves a SECOND page-declared, inline, content-main-writing trait unclaimed: not an owner itself, not embedded by any client-bound trait, and not kin to the owner through either the config-channel or embed-containment relation (`reduce_to_owners({owner, this}).len() == 1` would mean related, not a rival). Two content bodies stacking into one page's `main`. Ported from the JS wiring lint's `unclaimed-main-writer` (warning there; error here per the owner's Q3 ruling)."
+    "code": "ORB_CALL_SERVICE_KEY_TYPE",
+    "category": "call_service",
+    "description": "A keyed call-service effect has a key that is not a non-empty string"
   },
   {
-    "code": "ORB_PAGE_CONTROL_OUTSIDE_SHELL",
-    "category": "page",
-    "description": "A page whose `main` a shell owns through a config channel (`contentTrait` …) also mounts a trait that paints a control into `main` which neither the owner nor anything it embeds references: the control stacks outside the shell's layout instead of inside it."
+    "code": "ORB_CALL_SERVICE_RESULT_HAS_KEY",
+    "category": "effect",
+    "description": "A keyed call-service returns a record that already has a key field, so the call key would collide with it"
   },
   {
-    "code": "ORB_COMPOSED_STATE_UNREACHABLE",
+    "code": "ORB_CIRCUIT_ASYNC_RESULT_DEAF_TARGET",
     "category": "circuit",
-    "description": "A composed trait (`sourceBehavior` set) has a state no event the program can produce leads to: every transition into it waits on an event nothing routes in, no control or effect fires, and the host is not declared to send (`external`). An atom's own inputs are its offer; a composition that never wires one leaves that part of it dead."
+    "description": "A transition declares async result events but its target state has no arm handling them, so the requester cannot hear its own result"
   },
   {
-    "code": "ORB_COMPOSED_TRANSITION_UNREACHABLE",
+    "code": "ORB_CIRCUIT_DEAD_BODILESS_ACTION",
     "category": "circuit",
-    "description": "A composed trait (`sourceBehavior` set) has a live transition, from a reachable state, on an event the program cannot produce under its resolved config: no listens route, control or effect fires it, it is not a lifecycle event and not declared `external` (G-CROSS-144)."
+    "description": "A transition changes state but carries no effects, so the screen keeps its paint and affordances routed to it are dead"
   },
   {
-    "code": "ORB_CONTROL_VALUE_DISCARDED",
+    "code": "ORB_CIRCUIT_FAILURE_ARM_MISSING",
     "category": "circuit",
-    "description": "A composed trait's rendered control fires an event carrying a value that no other trait hears and whose own handling reads none of it: the value the user entered is discarded (a form submission nothing keeps)."
+    "description": "A transition starting an asynchronous client call has no failure arm to handle its error"
   },
   {
-    "code": "ORB_PAGE_AMBIGUOUS_CONTENT_OWNER",
-    "category": "page",
-    "description": "A page whose content owner is ambiguous: two or more page-declared `main` writers, none composing the others, no shell channel naming one. Renders stacked alone, but any shell that designates one `contentTrait` turns the rest into second bodies (G-ORB-128)."
+    "code": "ORB_CIRCUIT_FAILURE_ARM_RENDERS_NOTHING",
+    "category": "circuit",
+    "description": "A state handles a failure event but its arm neither renders nor emits a declared event, so the failure reaches no one"
   },
   {
-    "code": "ORB_SLOT_MAIN_NOT_COVERED",
-    "category": "slot",
-    "description": "Main slot not covered by any trait"
+    "code": "ORB_CIRCUIT_INIT_UNCOVERED_STATE",
+    "category": "circuit",
+    "description": "A page trait handles INIT in its initial state but not in another reachable state, so revisiting the page from there does nothing"
   },
   {
-    "code": "ORB_SLOT_CONTENTION",
-    "category": "slot",
-    "description": "Multiple traits rendering to same slot (INIT state)"
+    "code": "ORB_CIRCUIT_LIFECYCLE_EMIT_UNDELIVERED",
+    "category": "circuit",
+    "description": "A transition emits a lifecycle event that the event bus never delivers"
   },
   {
-    "code": "ORB_SLOT_CONTENTION_RUNTIME",
-    "category": "slot",
-    "description": "Multiple traits rendering to same slot in a reachable post-INIT state (emitted as a warning; INIT-state case still errors via `SlotContention`)"
+    "code": "ORB_CIRCUIT_MODAL_SHELL_CLOSE_DEAF",
+    "category": "circuit",
+    "description": "A state mounting an overlay-slot pattern has no CLOSE or CANCEL transition to dismiss it"
   },
   {
-    "code": "ORB_SLOT_CONTENTION_TICK",
-    "category": "slot",
-    "description": "Two or more traits mounted on one page repaint the same slot from inside a `ticks` block, with no guard proving either one dead. Tick bodies run every frame, so they paint together rather than alternating."
+    "code": "ORB_CIRCUIT_OWN_EMIT_UNREACHABLE",
+    "category": "circuit",
+    "description": "A transition emits an event its own trait handles only from other states, so the same-trait cascade never delivers it from the target state"
   },
   {
-    "code": "ORB_SLOT_INVALID_NESTING",
-    "category": "slot",
-    "description": "Invalid slot nesting (e.g., modal in modal)"
+    "code": "ORB_CIRCUIT_SELF_EMIT_LOOP",
+    "category": "circuit",
+    "description": "A transition re-emits its own trigger event with a constant payload and a same-event arm is reachable, so it loops forever"
   },
   {
-    "code": "ORB_RUI_INVALID_SLOT",
-    "category": "render_ui",
-    "description": "Invalid slot in render_ui effect"
+    "code": "ORB_CIRCUIT_SELF_OVERLAY_IN_SHELL",
+    "category": "circuit",
+    "description": "A self-overlaying pattern is rendered inside an overlay slot payload, stacking two overlay chromes"
   },
   {
-    "code": "ORB_RUI_INVALID_PATTERN",
-    "category": "render_ui",
-    "description": "Invalid pattern type"
+    "code": "ORB_CIRCUIT_VIEWER_STRANDED",
+    "category": "circuit",
+    "description": "A page's content owner repaints its region on a user-triggered event with a body that offers no way on"
   },
   {
-    "code": "ORB_RUI_MISSING_PATTERN_TYPE",
-    "category": "render_ui",
-    "description": "Pattern missing type property"
+    "code": "ORB_COMPOSED_STATE_UNREACHABLE",
+    "category": "circuit",
+    "description": "A composed trait can never enter some states because nothing in the program sends the events that enter them"
   },
   {
-    "code": "ORB_RUI_INVALID_PROP",
-    "category": "render_ui",
-    "description": "Invalid prop for pattern"
+    "code": "ORB_COMPOSED_TRANSITION_UNREACHABLE",
+    "category": "composed",
+    "description": "A composed trait handles events that nothing in the program ever sends"
   },
   {
-    "code": "ORB_RUI_CHILD_NOT_DRAWABLE",
-    "category": "render_ui",
-    "description": "A non-drawable child composed under a canvas draw-host. A draw-host paints only neutral drawable descriptors (draw-sprite / draw-shape / draw-text / draw-*-layer); DOM chrome belongs in a `hud`/`overlay` slot."
+    "code": "ORB_CONFIG_DANGLING_REF",
+    "category": "binding",
+    "description": "An @config key is not declared by any config schema reachable from the trait chain"
   },
   {
-    "code": "ORB_RUI_MISSING_REQUIRED_PROP",
-    "category": "render_ui",
-    "description": "Missing required prop for pattern"
+    "code": "ORB_CONTROL_NO_CONSEQUENCE",
+    "category": "emit",
+    "description": "A rendered control fires an event whose handlers change nothing the app or the viewer can observe."
   },
   {
-    "code": "ORB_RUI_INVALID_ITEM_ACTION",
-    "category": "render_ui",
-    "description": "Invalid itemAction configuration"
+    "code": "ORB_CONTROL_VALUE_DISCARDED",
+    "category": "circuit",
+    "description": "A composed trait's rendered control fires an event carrying a value that no other trait hears and whose own handling reads none of it: the value the user entered is discarded (a form submission nothing keeps)."
   },
   {
-    "code": "ORB_RUI_UNKNOWN_ITEM_ACTION_PROP",
-    "category": "render_ui",
-    "description": "Unknown itemAction prop (e.g., hallucinated 'condition')"
+    "code": "ORB_CREDENTIAL_REQUEST_INVALID",
+    "category": "credential",
+    "description": "A credential request host effect carries options other than the ones it declares"
   },
   {
-    "code": "ORB_RUI_MISSING_ACTION",
-    "category": "render_ui",
-    "description": "Button/link missing action prop"
+    "code": "ORB_DERIVED_FIELD_WRITTEN",
+    "category": "entity_mutation",
+    "description": "A set or persist writes an @derived field that the kernel computes on every write"
   },
   {
-    "code": "ORB_A11Y_UNNAMED",
-    "category": "render_ui",
-    "description": "A pattern that declares `@accessibleName` props has none of them, no `aria-label`/`aria-labelledby`, and is not `aria-hidden`"
+    "code": "ORB_EFFECT_OPTION_DROPPED",
+    "category": "effect",
+    "description": "An effect carries options that depend on a key echo, but the effect has no key so the options are dropped"
   },
   {
-    "code": "ORB_RUI_INVALID_FIELD_PATH",
-    "category": "render_ui",
-    "description": "Nested field path references invalid relation or field"
+    "code": "ORB_EFF_CALL_SERVICE_MISSING_ACTION",
+    "category": "effect",
+    "description": "A call-service effect has no string action"
   },
   {
-    "code": "ORB_RUI_FORM_FIELD_INTRINSIC",
-    "category": "render_ui",
-    "description": "A `form`-contract pattern offers an input for an `@intrinsic` entity field — intrinsic fields are never persisted, so the input is discarded."
+    "code": "ORB_EFF_CALL_SERVICE_MISSING_PARAM",
+    "category": "effect",
+    "description": "A call-service effect omits a parameter the service action requires"
   },
   {
-    "code": "ORB_RUI_PROP_TYPE_MISMATCH",
-    "category": "render_ui",
-    "description": "Prop value type doesn't match expected type from registry"
+    "code": "ORB_EFF_CALL_SERVICE_MISSING_SERVICE",
+    "category": "effect",
+    "description": "A call_service effect is missing its service name or action"
   },
   {
-    "code": "ORB_RUI_BINDING_TYPE_MISMATCH",
-    "category": "render_ui",
-    "description": "L2.1 keystone: render-ui prop bound to a `@payload.X` / `@entity.X` / `@config.X` / SExpression operator whose resolved type doesn't match any of the prop's declared `types` in the patterns registry. Distinct from `RenderUIPropTypeMismatch` (literal-only); this rule uses the F3 binding resolver to walk through bindings and SExpression operator return types (sharpened by F2's `returnSemantics` for input-dependent operators). Gap #6 in `docs/Almadar_Std_Verification.md`."
+    "code": "ORB_EFF_CALL_SERVICE_PARAM_TYPE",
+    "category": "effect",
+    "description": "A call-service parameter has a value whose type does not match the type the service action declares"
   },
   {
-    "code": "ORB_RUI_ELEMENT_SHAPE_MISMATCH",
-    "category": "render_ui",
-    "description": "L2.4: render-ui binds an array literal to a prop whose pattern declares per-element required fields (`items.properties.<field>.required`), and one or more elements omit a required field. Catches the landing-page/about-page/showcase class of bugs where the lolo `[StepCard]` type omits `id` but the consuming `step-flow-organism` pattern requires it — surfaced at codegen as TS2322 before this rule. Walks `OirValue::Array` element-by-element against `items.properties` from `patterns-registry.json`. Discovery context: `docs/Almadar_Std_Gaps.md` §13."
+    "code": "ORB_EFF_CALL_SERVICE_UNKNOWN_PARAM",
+    "category": "effect",
+    "description": "A call-service passes a param that the service action does not declare"
   },
   {
-    "code": "ORB_T_ENTITY_NAME_SHADOWS_TRAIT_UNION",
-    "category": "entity",
-    "description": "Entity name collides with a sibling trait's generated `<TraitName>State` or `<TraitName>Event` union type. The TS codegen emits both `import type { <EntityName> } from '@app/shared'` and `type <TraitName>State = '...'` / `type <TraitName>Event = '...'` in every server-handler / client-hook / view file — when the entity name equals one of those generated unions, the import collides with the local declaration and tsc raises TS2440 \"Import declaration conflicts with local declaration\".  Defense-in-depth pair with the lolo lowering check `LowerError::EntityNameShadowsTraitUnion`: the lolo rule catches hand-authored `.lolo`, this validator rule catches `.orb` mutated directly by an agent or factory that bypassed the lolo parse path. Convention fix: rename the entity (e.g. `<TraitName>Data`)."
+    "code": "ORB_EFF_CALL_SERVICE_UNKNOWN_SERVICE",
+    "category": "effect",
+    "description": "A call-service effect names a service that is not a registered integrator or declared service"
   },
   {
-    "code": "ORB_RUI_EVENT_BINDING_PAYLOAD_MISMATCH",
-    "category": "render_ui",
-    "description": "L2.2: render-ui prop with `kind: \"event-ref\"` or `kind: \"callback\"` bound to an event-name string whose declared payload schema in the trait's `emits {}` block doesn't match the component's documented bus emit shape (registry's `emitPayloadSchema` for event-ref props; `callbackArgs` for callback props). Gap #32 in `docs/Almadar_Std_Verification.md`."
+    "code": "ORB_EFF_EMIT_INVALID_NAME",
+    "category": "effect",
+    "description": "The event name inside an emit effect is not a valid string event name"
   },
   {
-    "code": "ORB_X_RENDER_UI_EVENT_LITERAL_STALE",
-    "category": "render_ui",
-    "description": "L2.3: render-ui pattern carries a string literal that matches an event name no longer in the trait's event set after the inline phase applies an `events: { OLD: NEW }` override. Detects the stale literal that the compiler's events-rewrite pass should have rewritten — defense-in-depth for C1 (the compiler fix). Gap #30 in `docs/Almadar_Std_Verification.md`."
+    "code": "ORB_EFF_EMIT_KEY_INVALID",
+    "category": "effect",
+    "description": "An emit config carries a key that the operator does not support"
   },
   {
-    "code": "ORB_EFF_CALL_SERVICE_MISSING_SERVICE",
+    "code": "ORB_EFF_EMIT_UNDECLARED_EVENT",
     "category": "effect",
-    "description": "call_service missing service name"
+    "description": "An event named in emit is not declared in the trait's emits array"
   },
   {
-    "code": "ORB_EFF_CALL_SERVICE_UNKNOWN_SERVICE",
+    "code": "ORB_EFF_FETCH_BY_ID_PAYLOAD_LIST",
     "category": "effect",
-    "description": "call_service names a service in neither schema.services nor the services registry. Error severity."
+    "description": "A fetch by id effect takes its id from a payload that is a list rather than a single value"
   },
   {
-    "code": "ORB_EFF_CALL_SERVICE_MISSING_ACTION",
+    "code": "ORB_EFF_FETCH_INVALID_ENTITY",
     "category": "effect",
-    "description": "call_service missing action"
+    "description": "A fetch effect is missing an entity name or references an invalid entity"
   },
   {
-    "code": "ORB_EFF_CALL_SERVICE_MISSING_HANDLERS",
+    "code": "ORB_EFF_FETCH_INVALID_INCLUDE",
     "category": "effect",
-    "description": "call_service missing onSuccess/onError handlers"
+    "description": "A fetch includes a relation that the fetched entity has no relation field for"
   },
   {
-    "code": "ORB_EFF_CALL_SERVICE_UNKNOWN_PARAM",
+    "code": "ORB_EFF_FETCH_INVALID_OPTION",
     "category": "effect",
-    "description": "call_service params carry a key the action's registry contract does not declare (I-13 — the `recipient` vs `to` class)"
+    "description": "A fetch deliver option is not one of the allowed values rows or ids"
   },
   {
-    "code": "ORB_EFF_CALL_SERVICE_MISSING_PARAM",
+    "code": "ORB_EFF_MISSING_FETCH_FOR_ENTITY",
     "category": "effect",
-    "description": "call_service params omit a key the action's registry contract requires"
+    "description": "A render-ui references an entity but no fetch effect for it exists in this or any predecessor transition"
   },
   {
-    "code": "ORB_EFF_CALL_SERVICE_PARAM_TYPE",
+    "code": "ORB_EFF_NAVIGATE_MISSING_PAYLOAD",
     "category": "effect",
-    "description": "call_service literal param value contradicts the contract's param type"
+    "description": "A navigate effect omits a payload field the target page requires for its INIT event"
   },
   {
-    "code": "ORB_CALL_SERVICE_CANCELLED_WITHOUT_KEY",
+    "code": "ORB_EFF_NAVIGATE_TARGET_UNREACHABLE",
     "category": "effect",
-    "description": "call-service declares `emit.cancelled` but no `key` — nothing can cancel an unkeyed call"
+    "description": "A navigate target path does not resolve to any declared page"
   },
   {
-    "code": "ORB_CALL_SERVICE_KEY_TYPE",
+    "code": "ORB_EFF_PROGRAM_EVAL_FAILURE_MISSING",
     "category": "effect",
-    "description": "call-service `key` is a non-string literal (number/bool/object/array)"
+    "description": "program/eval carries no emit.failure event, so validator errors would be dropped"
   },
   {
-    "code": "ORB_CANCEL_CALL_NO_KEYED_CALL",
+    "code": "ORB_EFF_RETIRED_FORM",
     "category": "effect",
-    "description": "the app runs `cancel-call` but no `call-service` anywhere carries a `key`"
+    "description": "An effect is written in a retired object form instead of the array form"
   },
   {
-    "code": "ORB_CALL_KEY_UNUSED",
+    "code": "ORB_EFF_SET_INVALID_BINDING",
     "category": "effect",
-    "description": "a literal `(as \"k\" CallKey)` in a program whose keyed calls are all keyed by literals, none of them `\"k\"`"
+    "description": "A set effect is missing its binding or its value"
   },
   {
-    "code": "ORB_EFFECT_OPTION_DROPPED",
+    "code": "ORB_EFF_SET_PAYLOAD_NOT_ALLOWED",
     "category": "effect",
-    "description": "an emit-options `key` on an effect that carries no key, so its completion could never echo it"
+    "description": "A set effect targets @payload, which is read-only; it should target @entity"
   },
   {
-    "code": "ORB_CANCEL_CALL_KEY_NEVER_CALLED",
+    "code": "ORB_EFF_UNKNOWN_TYPE",
     "category": "effect",
-    "description": "`--final`: a `cancel-call` on a `CallKey` (or a list of them) in a finished program where no keyed call has a `CallKey`-typed `key:`, so nothing the program runs is named by a key made with `as`"
+    "description": "An effect has an unknown type or is malformed"
   },
   {
-    "code": "ORB_CALL_SERVICE_KEY_DUPLICATE",
+    "code": "ORB_EFF_UNSIGNED_NOT_ENV_GUARDED",
     "category": "effect",
-    "description": "two `call-service` effects of one transition carry the same literal `key`"
+    "description": "A jws/verify call with a literal allowUnsigned true sits in a transition that is not env-guarded"
   },
   {
-    "code": "ORB_CALL_SERVICE_RESULT_HAS_KEY",
-    "category": "effect",
-    "description": "a keyed call-service whose registry responseShape already has a `key` field"
+    "code": "ORB_EMBED_CONFIG_FORWARD_MULTI_REFERRER",
+    "category": "embed",
+    "description": "A trait that forwards @config is embedded by more than one referrer, so the forwarded value is ambiguous"
   },
   {
-    "code": "ORB_HTTP_EGRESS_UNDECLARED",
+    "code": "ORB_EMIT_CONFIG_REF_INVALID",
     "category": "effect",
-    "description": "an `http` origin, `tokenUrl` origin, or `url` knob default is not in `egress`"
+    "description": "An emit config reference is invalid"
   },
   {
-    "code": "ORB_HTTP_EGRESS_ENTRY_INVALID",
-    "category": "effect",
-    "description": "an `egress` entry is not `scheme://host[:port]`"
+    "code": "ORB_EMIT_CONTROL_UNHANDLED",
+    "category": "emit",
+    "description": "A rendered control fires an event nothing handles or routes."
   },
   {
-    "code": "ORB_INBOUND_UNDECLARED",
-    "category": "effect",
-    "description": "an inbound handler (`listens { EVENT -> inbound \"name\" … }`) is reachable in a program whose app does not declare `name` in `inbound`"
+    "code": "ORB_EMIT_UNROUTED_TO_HANDLER",
+    "category": "trait_event",
+    "description": "A trait emits an event another trait has an arm for, but no declared listens route delivers it"
   },
   {
-    "code": "ORB_INBOUND_ENTRY_INVALID",
-    "category": "effect",
-    "description": "an `inbound` entry is not one lower-case hook name (letters, digits, `-`), or is listed twice"
+    "code": "ORB_ENTITY_INTRINSIC_FIELD_PERSISTED",
+    "category": "entity_mutation",
+    "description": "A persist data literal names an @intrinsic field, which is trait-owned view-state and never a persisted column"
   },
   {
-    "code": "ORB_INBOUND_DUPLICATE",
-    "category": "effect",
-    "description": "two traits handle the same inbound hook name"
+    "code": "ORB_ENTITY_OWNER_COLUMN_UNSCOPED",
+    "category": "entity",
+    "description": "An entity declares owner columns but has no access policy scoping rows to the owner"
   },
   {
-    "code": "ORB_INBOUND_ANSWER_UNDECLARED",
-    "category": "effect",
-    "description": "an inbound handler answers with an event its trait does not declare in `emits`"
+    "code": "ORB_ENTITY_SPLIT_MUTATION",
+    "category": "entity_mutation",
+    "description": "A runtime entity is mutated by several traits on isolated per-trait copies while another trait reads a field it never writes"
   },
   {
-    "code": "ORB_INBOUND_ANSWER_FOREIGN",
-    "category": "effect",
-    "description": "a trait other than an inbound handler emits the handler's answer event and the handler does not relay it: only the handler's own emit answers"
+    "code": "ORB_E_DUPLICATE_FIELD",
+    "category": "entity",
+    "description": "An entity declares the same field name more than once"
   },
   {
-    "code": "ORB_INBOUND_VERIFY_INVALID",
-    "category": "effect",
-    "description": "an inbound `verifies` header is not a lower-case header name, or its credential is not a credential name"
+    "code": "ORB_E_EMPTY_ENUM_VALUES",
+    "category": "entity",
+    "description": "An enum field declares no values"
   },
   {
-    "code": "ORB_OS_GRANT_MISSING",
-    "category": "effect",
-    "description": "an `os/` call needs something the calling orbital's grants do not cover"
+    "code": "ORB_E_IDENTITY_LOCAL",
+    "category": "entity",
+    "description": "An identity entity is declared as browser-stored, but the viewer directory is never browser-resident"
   },
   {
-    "code": "ORB_OS_TARGET_NOT_STATIC",
-    "category": "effect",
-    "description": "an `os/` call's target (path, command, host, port, variable, flags) is not a literal"
+    "code": "ORB_E_INSTANCE_INVALID",
+    "category": "entity",
+    "description": "An entity instance row sets a key that is not a field of the entity"
   },
   {
-    "code": "ORB_OS_GRANT_UNUSED",
-    "category": "effect",
-    "description": "a declared `os/` grant entry that no `os/` call of the orbitals holding it uses (warning)"
+    "code": "ORB_E_INVALID_FIELD_NAME",
+    "category": "entity",
+    "description": "An entity field or entity name is empty or not in the required naming form"
   },
   {
-    "code": "ORB_OS_GRANT_ENTRY_INVALID",
-    "category": "effect",
-    "description": "a declared `os/` grant entry whose shape cannot match anything"
+    "code": "ORB_E_INVALID_FIELD_TYPE",
+    "category": "entity",
+    "description": "An entity field declares a type that is not a valid field type"
   },
   {
-    "code": "ORB_PLACEMENT_ORBITAL_UNKNOWN",
-    "category": "effect",
-    "description": "a `deployment` unit lists an orbital the program does not declare"
+    "code": "ORB_E_INVALID_RELATION",
+    "category": "entity",
+    "description": "A relation field is missing its relation configuration or points at an entity that does not exist"
   },
   {
-    "code": "ORB_PLACEMENT_ORBITAL_DUPLICATE",
-    "category": "effect",
-    "description": "an orbital is listed in more than one `deployment` unit, or twice in one"
+    "code": "ORB_E_LITERAL_UNION_DEFAULT_MISMATCH",
+    "category": "entity",
+    "description": "A field default is not one of the values of its declared literal union"
   },
   {
-    "code": "ORB_PLACEMENT_ORBITAL_UNPLACED",
-    "category": "effect",
-    "description": "a `deployment` is declared and an orbital is in none of its units"
+    "code": "ORB_E_LOCALE_INSTANCES_INCOMPLETE",
+    "category": "entity",
+    "description": "An entity writes rows per locale but has no default instances block for its default locale"
   },
   {
-    "code": "ORB_PLACEMENT_UNIT_EMPTY",
-    "category": "effect",
-    "description": "a `deployment` unit lists no orbital"
+    "code": "ORB_E_LOCALE_INSTANCES_NOT_LOCAL",
+    "category": "entity",
+    "description": "An entity writes rows per locale but its rows are not browser-stored, so every viewer shares them"
   },
   {
-    "code": "ORB_HTTP_ORIGIN_NOT_STATIC",
-    "category": "effect",
-    "description": "an `http` origin is neither a string literal nor a `url`-typed `@config` knob"
+    "code": "ORB_E_LOCALE_INSTANCES_UNKNOWN_LOCALE",
+    "category": "entity",
+    "description": "An entity writes locale instances for a locale that is not among the declared locales"
   },
   {
-    "code": "ORB_HTTP_METHOD_UNKNOWN",
-    "category": "effect",
-    "description": "an `http` method is not one of GET POST PUT PATCH DELETE"
+    "code": "ORB_E_LOCAL_REQUIRES_PERSISTENT",
+    "category": "entity",
+    "description": "A runtime entity declares a browser storage location, which only applies to persistent entities"
   },
   {
-    "code": "ORB_HTTP_PATH_INVALID",
-    "category": "effect",
-    "description": "an `http` path violates the kernel's absolute-path contract"
+    "code": "ORB_E_MERGED_FIELD_UNREFERENCED",
+    "category": "entity",
+    "description": "A field merged into an entity is never read, written, fetch-included or persisted by any trait of the orbital"
   },
   {
-    "code": "ORB_HTTP_OPTION_UNKNOWN",
-    "category": "effect",
-    "description": "an `http` request/auth/paginate object carries a key outside its closed set"
+    "code": "ORB_E_MISSING_COLLECTION",
+    "category": "entity",
+    "description": "A persistent entity does not declare a collection name"
   },
   {
-    "code": "ORB_HTTP_AUTH_SCHEME_UNKNOWN",
-    "category": "effect",
-    "description": "`http` `auth.scheme` is not in the closed scheme set"
+    "code": "ORB_E_MISSING_NAME",
+    "category": "entity",
+    "description": "An entity is missing its required name"
   },
   {
-    "code": "ORB_HTTP_AUTH_INVALID",
-    "category": "effect",
-    "description": "An HTTP auth, grant-cache, presign, or webpush configuration violates its contract."
+    "code": "ORB_E_MOCK_NOT_IN_ENUM",
+    "category": "entity",
+    "description": "Mock candidate values are not values of the enum field they belong to"
   },
   {
-    "code": "ORB_HTTP_TOKEN_ROTATE_INVALID",
-    "category": "effect",
-    "description": "A token-exchange `rotate` is not a `{ field, credential }` rotation of the body's `refresh_token` slot."
+    "code": "ORB_E_NO_FIELDS",
+    "category": "entity",
+    "description": "An entity declares no fields and must have at least one"
+  },
+  {
+    "code": "ORB_E_SEMANTIC_VALUE_INVALID",
+    "category": "entity",
+    "description": "A semantically typed field has a default value that is invalid for its kind, such as an empty string"
+  },
+  {
+    "code": "ORB_FETCH_DELIVER_IDS_ENTITY_REFS",
+    "category": "fetch",
+    "description": "A fetch using deliver ids also asks for included relations, but ids delivers no rows to carry them"
   },
   {
-    "code": "ORB_HTTP_HEADER_INVALID",
+    "code": "ORB_FETCH_DELIVER_IDS_NO_SUCCESS",
     "category": "effect",
-    "description": "An HTTP request/auth header name is not a token, or its value is not a single-line string."
+    "description": "A fetch with deliver ids has no emit.success, so nothing carries the reference"
   },
   {
-    "code": "ORB_HTTP_REQUEST_OPTION_INVALID",
+    "code": "ORB_FETCH_DELIVER_IDS_ROWS_READ",
     "category": "effect",
-    "description": "An HTTP request's `timeoutMs`, `delayMs` or `retry` is not a value of its declared kind."
+    "description": "A fetch with deliver ids delivers a row-set reference as the success event's data; any use other than passing it whole as a render-ui prop value reads rows that were never delivered"
   },
   {
-    "code": "ORB_HTTP_AUTH_ON_CLIENT",
+    "code": "ORB_FETCH_NEEDS_COMPOSITE_INDEX",
     "category": "effect",
-    "description": "an `http` with `auth` sits where its trait runs on the client (a `[client]` trait, a browser-run tick)"
+    "description": "A fetch query needs a composite index that the store driver does not create and no index declaration covers"
   },
   {
-    "code": "ORB_HTTP_BODY_CONFLICT",
+    "code": "ORB_FETCH_TOTAL_NONE_READ",
     "category": "effect",
-    "description": "an `http` request has more than one body kind, or a body on GET"
+    "description": "A fetch with total none skips the count, so the success event's totalCount is never set and may not be read"
+  },
+  {
+    "code": "ORB_FETCH_UNINDEXED",
+    "category": "query",
+    "description": "A fetch filter cannot be pushed down by the store driver and no @index covers it, so the kernel scans every row"
+  },
+  {
+    "code": "ORB_GEN_INVALID_VALUE",
+    "category": "generic",
+    "description": "A value is invalid for the position it is written in"
+  },
+  {
+    "code": "ORB_GUARD_ON_FRAME_FIELD_AUTHORIZES",
+    "category": "guard",
+    "description": "A guard reads an intrinsic frame field of an entity to authorize, but intrinsic fields are not trustworthy for access"
+  },
+  {
+    "code": "ORB_GUEST_VIEW_NOT_CLIENT",
+    "category": "trait",
+    "description": "A trait that does not run on the client paints a guest-view, so the kernel cannot route a click inside the guest"
   },
   {
     "code": "ORB_HOST_EFFECT_ARITY",
     "category": "effect",
-    "description": "`random-bytes`, `credential-status` or `credential-forget` with the wrong number of arguments"
+    "description": "A host effect is called with the wrong number of arguments"
+  },
+  {
+    "code": "ORB_HOST_EFFECT_OPTION_UNKNOWN",
+    "category": "host_effect",
+    "description": "A host effect is given an option outside the set of options it accepts"
+  },
+  {
+    "code": "ORB_HTTP_EGRESS_ENTRY_INVALID",
+    "category": "http",
+    "description": "An egress allowlist entry is not of the form scheme://host[:port]"
+  },
+  {
+    "code": "ORB_HTTP_EGRESS_UNDECLARED",
+    "category": "http",
+    "description": "An outbound request targets an origin that is not declared in the program egress list"
+  },
+  {
+    "code": "ORB_HTTP_ORIGIN_NOT_STATIC",
+    "category": "http",
+    "description": "An http origin is not a string literal or a url-typed config knob, so egress cannot be checked"
+  },
+  {
+    "code": "ORB_ID_AUTHORED_WITHOUT_LEDGER",
+    "category": "id",
+    "description": "An id is authored in source without a matching ledger entry, so it is replaced on load"
   },
   {
-    "code": "ORB_HOST_EFFECT_OPTION_UNKNOWN",
-    "category": "effect",
-    "description": "a key other than `emit`, or a non-object, as the options of a host effect"
+    "code": "ORB_ID_DUPLICATE_EVENT_ID",
+    "category": "id",
+    "description": "An event id is declared by more than one trait, but ids must be document-unique"
   },
   {
-    "code": "ORB_RANDOM_BYTES_COUNT",
-    "category": "effect",
-    "description": "a literal `random-bytes` count that is not an integer from 1 to 1024"
+    "code": "ORB_ID_KIND_MISMATCH",
+    "category": "id",
+    "description": "An id of one kind is used in a position that requires an id of a different kind"
   },
   {
-    "code": "ORB_CREDENTIAL_REQUEST_INVALID",
-    "category": "effect",
-    "description": "a literal request of a `credential-*` administration effect that is not an object of its declared parameters, or leaves one out"
+    "code": "ORB_ID_LEDGER_ORPHAN",
+    "category": "id",
+    "description": "An id ledger row is carried by no node in the schema and is stale"
   },
   {
-    "code": "ORB_REDIS_CALL_INVALID",
-    "category": "effect",
-    "description": "a `redis` call whose origin is not `redis://` or `rediss://`, whose command is not a non-empty list of text, or whose connection options are malformed"
+    "code": "ORB_ID_NAME_MISMATCH",
+    "category": "id",
+    "description": "A name in the source disagrees with the current name the ledger records for the same id"
   },
   {
-    "code": "ORB_POSTGRES_CALL_INVALID",
-    "category": "effect",
-    "description": "a `postgres` call whose origin is not `postgres://` or `postgresql://`, whose literal statement is not a single read-only SELECT, whose params are not a list, or whose connection options are malformed or lack a user"
+    "code": "ORB_ID_UNKNOWN_REF",
+    "category": "id",
+    "description": "An id reference matches no arena node or ledger entry"
   },
   {
-    "code": "ORB_OAUTH_CLIENT_INVALID",
-    "category": "effect",
-    "description": "an OAuth client object with an unknown or missing key, both or neither of `issuer`/`endpoints`, or a bad word"
+    "code": "ORB_INBOUND_ANSWER_FOREIGN",
+    "category": "inbound",
+    "description": "A trait other than an inbound handler emits the handler's answer event, so the answer never reaches the caller"
   },
   {
-    "code": "ORB_OAUTH_OP_UNKNOWN",
-    "category": "effect",
-    "description": "an `oauth-client` `op` outside the closed set, or an input the op does not take or requires"
+    "code": "ORB_INBOUND_ANSWER_UNDECLARED",
+    "category": "inbound",
+    "description": "An inbound hook event answers with an event the trait does not declare in emits"
   },
   {
-    "code": "ORB_OAUTH_ENDPOINT_MISMATCH",
-    "category": "effect",
-    "description": "`oauth-endpoint` without an `oauth-client` auth, or a target word or method that does not serve the op"
+    "code": "ORB_INBOUND_DUPLICATE",
+    "category": "inbound",
+    "description": "An inbound hook has more than one handler"
   },
   {
-    "code": "ORB_OAUTH_REQUEST_CONFLICT",
-    "category": "effect",
-    "description": "an `oauth-client` request that carries anything but `auth`"
+    "code": "ORB_INBOUND_ENTRY_INVALID",
+    "category": "inbound",
+    "description": "An inbound entry is not a valid hook name"
   },
   {
-    "code": "ORB_OAUTH_PROVIDER_UNKNOWN",
-    "category": "effect",
-    "description": "a provider word outside `google | github | auth0`"
+    "code": "ORB_INBOUND_UNDECLARED",
+    "category": "inbound",
+    "description": "An event handles an inbound hook that the program's inbound block does not declare"
   },
   {
-    "code": "ORB_OAUTH_OPTION_UNKNOWN",
-    "category": "effect",
-    "description": "an unknown key, or a missing `redirectUri`, in `oauth-authorize` options"
+    "code": "ORB_INBOUND_VERIFY_INVALID",
+    "category": "inbound",
+    "description": "An inbound hook verifies a header against a credential, but the header is not a lower-case header name or the credential is not a credential name"
   },
   {
-    "code": "ORB_HTTP_PAGINATE_MAX_MISSING",
-    "category": "effect",
-    "description": "`http` `paginate` without `max`"
+    "code": "ORB_INDEX_PATH_DUPLICATE",
+    "category": "index",
+    "description": "The same index path, with the same ordering, is declared more than once on an entity"
   },
   {
-    "code": "ORB_HTTP_STREAM_WITHOUT_ON_MESSAGE",
-    "category": "effect",
-    "description": "`http` `stream` without `emit.onMessage`"
+    "code": "ORB_INDEX_PATH_INVALID",
+    "category": "entity",
+    "description": "An index path names a field that the entity does not declare"
   },
   {
-    "code": "ORB_PAGE_FACTS_FIELD_INVALID",
-    "category": "effect",
-    "description": "`browser/page-facts` fields: an unknown word, an empty list or a duplicate"
+    "code": "ORB_JSON_ROUNDTRIP",
+    "category": "lint",
+    "description": "json/parse re-parses what json/stringify just serialized; a stringify→parse round trip launders a value's type past the checker (owner hard rule, CLAUDE.md). Narrow with `as`."
   },
   {
-    "code": "ORB_PAGE_FACTS_UNREQUESTED_READ",
-    "category": "effect",
-    "description": "an event reads a page fact the `browser/page-facts` call did not request"
+    "code": "ORB_LINT_FINDING_CODE_UNDECLARED",
+    "category": "lint",
+    "description": "A lint rule names a finding code that its declared codes record does not carry."
   },
   {
-    "code": "ORB_BEACON_OPTION_UNKNOWN",
-    "category": "effect",
-    "description": "a `browser/beacon` request or option key outside its closed set"
+    "code": "ORB_LINT_INPUT_UNREAD",
+    "category": "lint",
+    "description": "A lint input file could not be read or lowered, so the lint rules did not run"
   },
   {
-    "code": "ORB_BEACON_TEXT_REQUIRED",
-    "category": "effect",
-    "description": "a `browser/beacon` request without `text`"
+    "code": "ORB_LINT_LANGUAGE_FACTS_UNREAD",
+    "category": "lint",
+    "description": "The installed language facts could not be read, so the lint rule could not check what it needs"
   },
   {
-    "code": "ORB_BEACON_URL_NOT_ABSOLUTE",
-    "category": "effect",
-    "description": "a literal `browser/beacon` URL that is not an absolute http(s) URL"
+    "code": "ORB_LINT_OPERATOR_SHAPES_UNREAD",
+    "category": "lint",
+    "description": "The installed operator table could not be read or does not match the operator shape type, so a lint cannot run"
   },
   {
-    "code": "ORB_ON_DEVICE_EFFECT_ON_SERVER",
-    "category": "effect",
-    "description": "a `browser/prompt` or `browser/embed` where the server runs the transition: a `[background]` tick"
+    "code": "ORB_LINT_RULE_COUNT_MISMATCH",
+    "category": "lint",
+    "description": "A lint engine's rules or programOnlyRules names differ from the rule names its routed rule traits answer LINT_FOUND with"
   },
   {
-    "code": "ORB_ON_DEVICE_SCHEMA_INVALID",
-    "category": "effect",
-    "description": "a literal `browser/prompt` response schema that is not a JSON object"
+    "code": "ORB_LINT_RULE_FAILED",
+    "category": "lint",
+    "description": "A lint rule met an input its own preconditions exclude and could not check it"
   },
   {
-    "code": "ORB_TAB_REQUEST_INVALID",
-    "category": "effect",
-    "description": "a `browser/tab-*` request that is not an object of the op's closed keys, or whose literal values the kernel refuses"
+    "code": "ORB_LINT_SERVICE_REGISTRY_UNREAD",
+    "category": "lint",
+    "description": "The installed services registry could not be read, so call-service services cannot be checked"
   },
   {
-    "code": "ORB_TAB_EFFECT_ON_SERVER",
-    "category": "effect",
-    "description": "a `browser/tab-*` effect where the server runs the transition: a `[background]` tick"
+    "code": "ORB_LINT_UI_VOCAB_UNREAD",
+    "category": "lint",
+    "description": "The installed @almadar/core declares no readable UI vocabulary, so a UI lint check cannot run"
   },
   {
-    "code": "ORB_EFF_SET_INVALID_BINDING",
-    "category": "effect",
-    "description": "set effect using invalid binding"
+    "code": "ORB_LISTEN_REDUNDANT_EMBED_ROUTE",
+    "category": "listen",
+    "description": "A listens route is redundant because the embedded trait already receives that event"
   },
   {
-    "code": "ORB_EFF_SET_PAYLOAD_NOT_ALLOWED",
-    "category": "effect",
-    "description": "set effect using @payload (should use @entity)"
+    "code": "ORB_LISTEN_ROUTE_STARVES_REQUIRED_FIELD",
+    "category": "trait_event",
+    "description": "A listens route requires a payload field that the source event contract never produces"
   },
   {
-    "code": "ORB_EFF_FETCH_INVALID_ENTITY",
-    "category": "effect",
-    "description": "fetch effect referencing invalid entity"
+    "code": "ORB_LISTEN_WILDCARD_UNKEYED",
+    "category": "trait_event",
+    "description": "A wildcard listens route hears every caller's event but its guard never reads the call key in the payload"
   },
   {
-    "code": "ORB_EFF_FETCH_INVALID_INCLUDE",
-    "category": "effect",
-    "description": "fetch effect include references non-existent or non-relation field"
+    "code": "ORB_MEM_ALIAS",
+    "category": "mem",
+    "description": "An exclusive borrow of a block while another borrow of it is live, or a borrow while an exclusive one is live"
   },
   {
-    "code": "ORB_PERSIST_BATCH_OPS_NOT_ARRAY",
-    "category": "effect",
-    "description": "`persist batch` ops expression is not array-typed"
+    "code": "ORB_MEM_DOUBLE_FREE",
+    "category": "mem",
+    "description": "A handle is freed, dropped or released a second time on some path"
   },
   {
-    "code": "ORB_PERSIST_BATCH_BAD_OP",
-    "category": "effect",
-    "description": "`persist batch` op tuple with an unknown action or the wrong arity"
+    "code": "ORB_MEM_LEAK",
+    "category": "mem",
+    "description": "An arena reaches a resting state on some path without being dropped"
   },
   {
-    "code": "ORB_PERSIST_BATCH_MIXED_PLACEMENT",
-    "category": "effect",
-    "description": "`persist batch` ops name both browser-stored and server-stored entities"
+    "code": "ORB_MEM_USE_AFTER_FREE",
+    "category": "mem",
+    "description": "A mem/ call takes a handle after it was freed, dropped or released on some path"
   },
   {
-    "code": "ORB_EFF_SLOT_CONFLICT",
-    "category": "effect",
-    "description": "Multiple render_ui effects targeting same slot"
+    "code": "ORB_NAV_TARGET_UNDECLARED",
+    "category": "page",
+    "description": "A navigation target stated as a literal path (a navigate effect, a navItems or link href, a navigatesTo) names no page the finished program declares"
   },
   {
-    "code": "ORB_EFF_UNKNOWN_TYPE",
-    "category": "effect",
-    "description": "Unknown effect type"
+    "code": "ORB_OAUTH_CLIENT_INVALID",
+    "category": "oauth",
+    "description": "An OAuth client block uses a key that is not a valid OAuth client key"
   },
   {
-    "code": "ORB_EFF_NOTIFY_RETIRED",
-    "category": "effect",
-    "description": "`notify` is sugar for `render-ui toast { type: alert, … }`, desugared at `.lolo` lowering (owner ruling 2026-09-11) — the `.orb` IR never carries a `notify` effect kind. A `notify` tuple reaching L2 means a hand-authored `.orb` or a registry not yet re-emitted."
+    "code": "ORB_OAUTH_OPTION_UNKNOWN",
+    "category": "oauth",
+    "description": "An oauth-authorize call passes an option that is not recognized"
   },
   {
-    "code": "ORB_EFF_NAVIGATE_MISSING_PAYLOAD",
-    "category": "effect",
-    "description": "Navigate effect missing required payload for target page"
+    "code": "ORB_OAUTH_PROVIDER_UNKNOWN",
+    "category": "oauth",
+    "description": "The OAuth clients map is keyed by something other than a known provider tag"
   },
   {
-    "code": "ORB_EFF_NAVIGATE_TARGET_UNREACHABLE",
-    "category": "effect",
-    "description": "Navigate effect references a path that doesn't resolve to any declared `pages[].path` across the resolved schema. Post-inline backstop for L1.2 — catches navigate calls injected by molecule- level `effects: { ... }` overrides AND navigate calls that targeted imported pages from `uses` refs that L1 couldn't see."
+    "code": "ORB_ON_DEVICE_EFFECT_ON_SERVER",
+    "category": "browser",
+    "description": "An on-device model effect runs in a background tick on the server, which has no on-device model"
   },
   {
-    "code": "ORB_EMIT_DECLARED_BUT_UNFIRED",
-    "category": "effect",
-    "description": "Trait declares an event in its `emits[]` block but no transition fires it via `(emit X)` or operator emit-config success/failure. Usually a copy-paste leftover or a stale declaration after a rename; gap #2 defense in `docs/Almadar_Std_Verification.md`."
+    "code": "ORB_ON_DEVICE_SCHEMA_INVALID",
+    "category": "browser",
+    "description": "A browser prompt response schema is not valid JSON Schema text describing a JSON object"
   },
   {
-    "code": "ORB_EMIT_CONTROL_UNHANDLED",
-    "category": "effect",
-    "description": "`orb validate --final`: a rendered control fires an event no trait handles — not the rendering trait, an embedder of it, nor a `listens` route (G-ORB-187)."
+    "code": "ORB_OP_INVALID_TIME_UNIT",
+    "category": "operator",
+    "description": "A time operator is given a unit that is not an accepted time unit"
   },
   {
-    "code": "ORB_EMIT_CONFIG_REF_INVALID",
-    "category": "effect",
-    "description": "`emits { @config.<knob> -> ... }` references a knob that isn't a DECLARED string-typed config field with a default (Option B contract). Left unresolved by the inline phase; surfaces here with the specific clause that failed."
+    "code": "ORB_OS_EGRESS_SCHEME_UNUSED",
+    "category": "os",
+    "description": "An egress entry whose scheme (redis, rediss, postgres, postgresql) no operator or fetch uses since the TCP protocol-target grants were retired; its net-grant replacement is named"
   },
   {
-    "code": "ORB_EFF_MISSING_FETCH_FOR_ENTITY",
-    "category": "effect",
-    "description": "render-ui has entity prop but no fetch effect for that entity in the same transition"
+    "code": "ORB_OS_GRANT_ENTRY_INVALID",
+    "category": "os",
+    "description": "A declared grant entry that can match nothing"
   },
   {
-    "code": "ORB_EFF_EMIT_KEY_INVALID",
-    "category": "effect",
-    "description": "`emit:` config carries a key the operator doesn't support (e.g. `on_message` on `fetch`, `failure` on `set`)."
+    "code": "ORB_OS_GRANT_MISSING",
+    "category": "os",
+    "description": "An os/ call that the grants of its orbital (app level plus its own) do not cover"
   },
   {
-    "code": "ORB_EFF_EMIT_INVALID_NAME",
-    "category": "effect",
-    "description": "Event name inside `emit:` isn't UPPER_SNAKE_CASE."
+    "code": "ORB_OS_GRANT_UNUSED",
+    "category": "os",
+    "description": "A granted entry that no os/ call of the orbital (or of the program, at app level) uses; a warning"
   },
   {
-    "code": "ORB_EFF_EMIT_UNDECLARED_EVENT",
-    "category": "effect",
-    "description": "Event in `emit:` isn't declared in the trait's `emits` array."
+    "code": "ORB_OS_TARGET_NOT_STATIC",
+    "category": "os",
+    "description": "An os/ call target that is computed, so its grant cannot be checked at build time"
   },
   {
-    "code": "ORB_EFF_PROGRAM_EVAL_FAILURE_MISSING",
-    "category": "effect",
-    "description": "`program/eval` carries no `emit.failure` event: the validator's errors come back through the failure arm, so without one they are dropped."
+    "code": "ORB_O_CONFIG_DEAD_KNOB",
+    "category": "orbital",
+    "description": "A declared app-level config knob is not forwarded by any trait config default, so it has no effect"
   },
   {
-    "code": "ORB_EFF_MISSING_REQUIRED_EMIT",
-    "category": "effect",
-    "description": "Operator declares `requiresEmitSuccess: true` in canonical-operators.json but the effect call site is missing the trailing options object or its `emit.success` event key. Applies to fetch / persist / call-service / ref by default; any future operator can opt in via the same JSON flag."
+    "code": "ORB_O_CONFIG_UNKNOWN_KEY",
+    "category": "orbital_ref",
+    "description": "A call-site config key matches no config knob declared by the upstream orbital"
   },
   {
-    "code": "ORB_EFF_FETCH_BY_ID_PAYLOAD_LIST",
-    "category": "effect",
-    "description": "A success event only `(fetch X { id: … })` produces declares `data` as a list; a by-id fetch delivers one row (G-ORB-185)."
+    "code": "ORB_O_DUPLICATE_NAME",
+    "category": "orbital",
+    "description": "Two or more orbitals in a program share the same name"
   },
   {
-    "code": "ORB_EFF_FETCH_INVALID_OPTION",
-    "category": "effect",
-    "description": "A `fetch` option outside its closed enum (`deliver: rows | ids`, `total: exact | none`)."
+    "code": "ORB_O_DUPLICATE_USE_ALIAS",
+    "category": "orbital",
+    "description": "Two uses imports share the same alias"
   },
   {
-    "code": "ORB_FETCH_DELIVER_IDS_ROWS_READ",
-    "category": "effect",
-    "description": "`deliver: ids` makes the success event's `data` a row-set reference; any use other than passing it whole as a `render-ui` prop value reads rows that were never delivered."
+    "code": "ORB_O_ENTITY_EXPECT_AMBIGUOUS",
+    "category": "orbital_ref",
+    "description": "An entity an imported orbital expects of a sibling is provided by several sibling imports and no entities entry binds it"
   },
   {
-    "code": "ORB_FETCH_DELIVER_IDS_ENTITY_REFS",
-    "category": "effect",
-    "description": "`deliver: ids` with `include`: included relations are row content."
+    "code": "ORB_O_ENTITY_PERSISTENCE_LOCKED",
+    "category": "orbital",
+    "description": "An entity persistence or collection override on an orbital reference has no effect because the primary entity locks it"
   },
   {
-    "code": "ORB_FETCH_DELIVER_IDS_NO_SUCCESS",
-    "category": "effect",
-    "description": "`deliver: ids` with no `emit.success`: the reference is only ever passed whole to a `render-ui` prop, and nothing can reference a result that no event carries."
+    "code": "ORB_O_ENTITY_TARGET_UNKNOWN",
+    "category": "orbital_ref",
+    "description": "An entities value names no entity the consumer schema declares"
   },
   {
-    "code": "ORB_FETCH_TOTAL_NONE_READ",
-    "category": "effect",
-    "description": "`total: none` skips the count, so the success event's `totalCount` is never set."
+    "code": "ORB_O_ENTITY_UNKNOWN_KEY",
+    "category": "orbital_ref",
+    "description": "An entities key names no entity in the upstream out-of-orbital closure"
   },
   {
-    "code": "SEXPR_INVALID_OPERATOR",
-    "category": "sexpr",
-    "description": "Unknown operator in S-expression"
+    "code": "ORB_O_ENTITY_UNMAPPED",
+    "category": "orbital_ref",
+    "description": "A kept trait, relation or page references an out-of-orbital entity that entities {} never maps"
   },
   {
-    "code": "SEXPR_ARITY_MISMATCH",
-    "category": "sexpr",
-    "description": "Wrong number of arguments for operator"
+    "code": "ORB_O_EXTEND_FIELD_COLLISION",
+    "category": "orbital_ref",
+    "description": "An extend field collides with a field already declared on the upstream primary entity"
   },
   {
-    "code": "SEXPR_LAMBDA_ARG_POSITION",
-    "category": "sexpr",
-    "description": "A `(fn …)` form in an argument position the operator does not take its lambda in — decidable wrong argument order, e.g. `(array/reduce arr (fn …) init)`"
+    "code": "ORB_O_EXTEND_FIELD_UNREAD",
+    "category": "orbital",
+    "description": "A field added by an extend block is never read, set, rendered or forwarded by a config knob"
   },
   {
-    "code": "SEXPR_EFFECT_IN_GUARD",
-    "category": "sexpr",
-    "description": "Effect operator used in guard context"
+    "code": "ORB_O_FIELD_RENAME_UNAPPLIED",
+    "category": "orbital_ref",
+    "description": "A fields rename left the pre-rename field name in a config default position the rewrite does not reach"
   },
   {
-    "code": "SEXPR_INVALID_BINDING",
-    "category": "sexpr",
-    "description": "Invalid binding reference"
+    "code": "ORB_O_MOCK_UNKNOWN_FIELD",
+    "category": "orbital",
+    "description": "A mock block names a field the entity materialized from the referenced orbital does not declare"
   },
   {
-    "code": "SEXPR_INVALID_BINDING_PATH",
-    "category": "sexpr",
-    "description": "Invalid binding path syntax"
+    "code": "ORB_O_OMIT_EMBEDDED_TRAIT",
+    "category": "orbital",
+    "description": "An orbital reference omits a trait that another kept trait embeds"
   },
   {
-    "code": "SEXPR_UNKNOWN_ENTITY",
-    "category": "sexpr",
-    "description": "Unknown entity in binding"
+    "code": "ORB_O_PAGE_UNKNOWN_PATH",
+    "category": "orbital_ref",
+    "description": "A pages or mounts key names a page path that the upstream orbital does not declare"
   },
   {
-    "code": "SEXPR_PARSE_ERROR",
-    "category": "sexpr",
-    "description": "Parse error in S-expression"
+    "code": "ORB_O_RETYPE_FIELD_CONFLICT",
+    "category": "orbital",
+    "description": "A field is both retyped and added by extend in the same orbital reference"
   },
   {
-    "code": "ORB_X_DUPLICATE_ENTITY",
-    "category": "cross",
-    "description": "Duplicate entity name across orbitals"
+    "code": "ORB_O_RETYPE_UNKNOWN_FIELD",
+    "category": "orbital",
+    "description": "A retype block names a field the entity materialized from the referenced orbital does not declare"
   },
   {
-    "code": "ORB_X_MIXED_RESIDENCE",
-    "category": "cross",
-    "description": "One transition's data effects touch both browser-stored and server-stored entities (ORB_X_MIXED_RESIDENCE)"
+    "code": "ORB_O_ROLE_TARGET_NOT_MEMBER",
+    "category": "orbital_ref",
+    "description": "A roles target is not a member of the consumer roster field vocabulary"
   },
   {
-    "code": "ORB_X_ORPHAN_LISTENER",
-    "category": "cross",
-    "description": "Event listener without matching emitter"
+    "code": "ORB_O_ROLE_UNKNOWN_UPSTREAM",
+    "category": "orbital_ref",
+    "description": "A roles key names no value in any upstream identity field vocabulary"
   },
   {
-    "code": "ORB_X_UNUSED_EMISSION",
-    "category": "cross",
-    "description": "Event emitted but never listened to"
+    "code": "ORB_O_TRAITS_OMITTED_TRAIT",
+    "category": "orbital",
+    "description": "A traits override names a trait that omit or only drops from the imported orbital"
   },
   {
-    "code": "ORB_EMIT_UNROUTED_TO_HANDLER",
-    "category": "cross",
-    "description": "A trait emits an event (an `(emit …)` effect or an operator emit-config result) that a SIBLING trait in the same orbital has an arm for, but no declared `listens` route delivers it from that emitter. Events reach another trait only through declared routes, so the intent terminates in nothing (std-pong's PADDLE_MOVE, 2026-09-24)."
+    "code": "ORB_O_TRAITS_UNKNOWN_TRAIT",
+    "category": "orbital_ref",
+    "description": "A traits key names a trait that the upstream orbital does not have"
   },
   {
-    "code": "ORB_T_CLIENT_TICK_NOT_LOCAL",
-    "category": "cross",
-    "description": "A trait writing a client-held `[runtime]` frame from client ticks (or bound to a `[shared]` one another trait ticks) is not `[client]`: its dispatches post to a stateful host whose stale copy folds back."
+    "code": "ORB_PAGE_AMBIGUOUS_CONTENT_OWNER",
+    "category": "page",
+    "description": "Several traits each render a content body into the main slot and none composes the others, so the page has no single content owner"
   },
   {
-    "code": "ORB_X_CIRCULAR_DEPENDENCY",
-    "category": "cross",
-    "description": "Circular dependency in event wiring"
+    "code": "ORB_PAGE_CONTROL_OUTSIDE_SHELL",
+    "category": "page",
+    "description": "A trait paints a control into the main slot of a page whose shell shows another trait as its content, and nothing there embeds it"
   },
   {
-    "code": "ORB_X_MISSING_ORBITAL_NAME",
-    "category": "cross",
-    "description": "Orbital missing name"
+    "code": "ORB_PAGE_FACTS_FIELD_INVALID",
+    "category": "page",
+    "description": "A browser/page-facts effect declares no facts"
   },
   {
-    "code": "ORB_X_PAYLOAD_MISMATCH",
-    "category": "cross",
-    "description": "Payload mismatch between emitter and listener"
+    "code": "ORB_PAGE_NOT_FOUND_DUPLICATE",
+    "category": "page",
+    "description": "A program declares more than one [notFound] page."
   },
   {
-    "code": "ORB_X_LISTEN_SOURCE_UNRESOLVED",
-    "category": "cross",
-    "description": "`listens` references a source trait or event that doesn't exist in the resolved IR. Defense-in-depth backstop for the L1 (`orbital-lolo`) `LowerError::ListenSourceUnresolved` check; surfaces the same defect after `use`-imports inline so atoms/molecules pulled into an orbital can't accidentally introduce dangling listens."
+    "code": "ORB_PAGE_NOT_FOUND_MISSING",
+    "category": "page",
+    "description": "A program with route pages declares no [notFound] page."
   },
   {
-    "code": "ORB_X_LISTEN_SOURCE_NEVER_PRODUCES",
-    "category": "cross",
-    "description": "A `listens { S.E -> TRIGGER }` route whose source trait S DOES declare event E in its `emits[]` contract, but nothing in the schema currently produces E live — no effect emit, no rendered `action:`/ event prop, no structured `itemActions` entry, and no trait embedded (directly or transitively) inside S produces it either. The contract permits it; a config override (an itemActions/browseItemActions narrowed at this call site, say) removed the only producer, so the route is a live wire with nothing behind it — fires whatever the emit's declared `scope` is (`external` included: a cross-orbital broadcast still needs a live broadcaster). Ported from the JS wiring lint's `listener-affordance-removed-by-config`."
+    "code": "ORB_PAGE_SECOND_CONTENT_BODY",
+    "category": "page",
+    "description": "More than one trait on a page renders a content body into the main slot"
   },
   {
-    "code": "ORB_X_LISTEN_TRIGGER_UNMATCHED",
-    "category": "cross",
-    "description": "A `listens { Src.EVENT -> TRIGGER }` entry names an internal TRIGGER that no transition in the SAME trait reacts to. The bus would deliver the event but the state machine has no handler — the wire silently drops. Runs post-inline so the `events: { OLD: NEW }`-rename variant (where the rewrite renamed the transition event but the listen trigger drifted) is caught too. Defense-in-depth for the L1 (`orbital-lolo`) author-time check on hand-authored `.lolo`."
+    "code": "ORB_PAGE_UNREACHABLE",
+    "category": "page",
+    "description": "A page is declared but appears in no link, navItems entry or navigate effect"
   },
   {
-    "code": "ORB_X_INTERNAL_EVENT_EXPOSED",
-    "category": "cross",
-    "description": "Composing trait's override map touches an event declared `scope: 'internal'`. Error severity. See COMP-7 in docs/Almadar_Agent_Behaviors_Plan.md."
+    "code": "ORB_PERSIST_BATCH_BAD_OP",
+    "category": "persist",
+    "description": "A persist batch contains an operation that is not valid in a batch"
   },
   {
-    "code": "ORB_X_FILTER_FIELD_NEVER_WRITTEN",
-    "category": "cross",
-    "description": "A `fetch`'s `filter` compares a LITERAL `(object/get @entity <field>)` against a value, but no `persist create`/`update` anywhere in the schema (own trait, sibling trait, or a `persistent:`-collection-mate entity) ever supplies that field — the filter can never match a real row. Cross-orbital because the persistor routinely lives in a sibling orbital (the modal + persistor idiom). `[identity]`-roster entities and `@intrinsic` fields are exempt; a declared default only exempts the field when it folds, under the trait's resolved config, to the SAME literal the filter's comparand folds to — an undecidable (payload/entity/user-bound) comparand stays silent rather than guessing. Ported from `filter-field-never-written`. Error severity."
+    "code": "ORB_PERSIST_BATCH_MIXED_PLACEMENT",
+    "category": "persist",
+    "description": "A persist batch writes both browser-stored and server-stored entities in one effect, which no single executor can hold"
   },
   {
-    "code": "ORB_X_UNRESOLVED_RELATION_TARGET",
-    "category": "cross",
-    "description": "A `type: 'relation'` field's `relation.entity` does not resolve to any entity declared in the same schema. Error severity; the entity-scope validator also emits `ORB_E_INVALID_RELATION` for the same condition. See COMP-9 in docs/Almadar_Agent_Behaviors_Plan.md."
+    "code": "ORB_PERSIST_BATCH_OPS_NOT_ARRAY",
+    "category": "persist",
+    "description": "A persist batch operations expression is missing or not array-typed"
   },
   {
-    "code": "ORB_X_UNRESOLVED_PATTERN_FIELD_REF",
-    "category": "cross",
-    "description": "A pattern prop tagged `kind: 'field-ref'` (scalar) or `itemKind: 'field-ref'` (array element) carries a value that does not resolve to any field on the linked entity. Error severity. See Phase 3.2/3.3 in docs/Almadar_Agent_Behaviors_Plan.md."
+    "code": "ORB_PERSIST_CREATE_LITERAL_ID",
+    "category": "persist",
+    "description": "A persist create names a literal id, so a second run fails with a duplicate id"
   },
   {
-    "code": "ORB_LISTEN_ROUTE_STARVES_REQUIRED_FIELD",
-    "category": "cross",
-    "description": "A `listens { Src.EVENT -> TRIGGER }` route's TRIGGER declares a required leaf payload field the route never produces: no `with { }` mapping supplies it, and (pass-through, no mapping) the source trait's declared `emits { EVENT { ... } }` contract never declares it at the same dotted path either. The consumer's transition reads `?payload.<field>` as `undefined` at runtime."
+    "code": "ORB_PERSIST_CREATE_MISSING_POLICY_FIELD",
+    "category": "persist",
+    "description": "A persist create data literal omits a field its entity's create access policy compares, so the row can never satisfy the policy"
   },
   {
-    "code": "ORB_LISTEN_REDUNDANT_EMBED_ROUTE",
-    "category": "cross",
-    "description": "A host trait's `listens { Child.EV -> EV }` route where `Child` is a trait the host embeds (directly or transitively), `EV` is fired by a control inside `Child`'s subtree, and the host already has a transition on `EV`. The control's emit bubbles to every scope on the embed chain, so the host already hears it directly; the route is a second delivery of the same physical event."
+    "code": "ORB_PERSIST_ID_NOT_A_PATH",
+    "category": "persist",
+    "description": "A persist effect names its row id with an expression instead of a binding path or literal id, so no row key resolves"
   },
   {
-    "code": "ORB_LISTEN_WILDCARD_UNKEYED",
-    "category": "cross",
-    "description": "A `*.EVENT` route on an event whose payload carries a `CallKey`-typed `key`, with a guard that never reads it."
+    "code": "ORB_PERSIST_WHERE_NOT_A_PREDICATE",
+    "category": "persist",
+    "description": "A persist where clause is not a valid row predicate"
   },
   {
-    "code": "ORB_BINDING_INVALID_FORMAT",
-    "category": "binding",
-    "description": "Binding has invalid format"
+    "code": "ORB_PLACEMENT_ORBITAL_DUPLICATE",
+    "category": "placement",
+    "description": "An orbital is placed more than once in the deployment"
   },
   {
-    "code": "ORB_BINDING_UNKNOWN_ROOT",
-    "category": "binding",
-    "description": "Unknown binding root"
+    "code": "ORB_PLACEMENT_ORBITAL_UNKNOWN",
+    "category": "placement",
+    "description": "A deployment unit lists an orbital name that is not an orbital of the program"
   },
   {
-    "code": "ORB_CONFIG_DANGLING_REF",
-    "category": "binding",
-    "description": "`@config.<key>` literal whose key no reachable config schema declares"
+    "code": "ORB_PLACEMENT_ORBITAL_UNPLACED",
+    "category": "placement",
+    "description": "A deployment is declared but an orbital belongs to none of its units"
   },
   {
-    "code": "ORB_CONFIG_FIELD_REF_UNKNOWN",
-    "category": "binding",
-    "description": "A `field @entity` config knob names something that is not a field of the trait's bound entity"
+    "code": "ORB_PLACEMENT_UNIT_EMPTY",
+    "category": "placement",
+    "description": "A deployment unit lists no orbital"
   },
   {
-    "code": "ORB_CONFIG_FIELD_REF_TYPE_MISMATCH",
-    "category": "binding",
-    "description": "A `field @entity T` config knob names a field whose type is not `T`"
+    "code": "ORB_P_AUTH_NO_SIGN_IN",
+    "category": "page",
+    "description": "A page requires authenticated access but the app declares no signIn route"
   },
   {
-    "code": "ORB_BINDING_INVALID_PATH",
-    "category": "binding",
-    "description": "Invalid binding path"
+    "code": "ORB_P_DUPLICATE_PATH",
+    "category": "page",
+    "description": "Two pages declare the same path after normalization"
   },
   {
-    "code": "ORB_BINDING_STATE_NO_PATH",
-    "category": "binding",
-    "description": "@state binding should not have path"
+    "code": "ORB_P_EMPTY_TRAITS",
+    "category": "page",
+    "description": "A page declares an empty traits array"
   },
   {
-    "code": "ORB_BINDING_NOW_NO_PATH",
-    "category": "binding",
-    "description": "@now binding should not have path"
+    "code": "ORB_P_HOST_RESERVED_ROUTE",
+    "category": "page",
+    "description": "A page is declared on the host's reserved sign-in route"
   },
   {
-    "code": "ORB_BINDING_PAYLOAD_IN_TICK",
-    "category": "binding",
-    "description": "@payload not available in tick context"
+    "code": "ORB_P_INDEX_PARAM_ROUTE",
+    "category": "page",
+    "description": "A parameter-route page is marked indexing index although its concrete URLs are not declared"
   },
   {
-    "code": "ORB_BINDING_DISPATCH_ROOT_IN_TICK",
-    "category": "binding",
-    "description": "`@event`/`@prevEvents`/`@prevStates`/`@fromState`/`@toState` in a tick, which has no delivery"
+    "code": "ORB_P_INDEX_REQUIRES_PUBLIC",
+    "category": "page",
+    "description": "A page declares indexing: index but lacks the public access it requires"
   },
   {
-    "code": "ORB_BINDING_FROM_ENTITY_OUTSIDE_ENSURES",
-    "category": "binding",
-    "description": "`@fromEntity` (the row before a transition) outside an `@ensures`"
+    "code": "ORB_P_INVALID_PATH",
+    "category": "page",
+    "description": "A page or navigate path does not start with a slash"
   },
   {
-    "code": "ORB_BINDING_ROOT_NO_PATH",
-    "category": "binding",
-    "description": "`@fromState`/`@toState`/`@prevStates`/`@prevEvents` written with a path"
+    "code": "ORB_P_INVALID_TRAIT_REF",
+    "category": "page",
+    "description": "A page's inline trait reference has no name"
   },
   {
-    "code": "ORB_BINDING_EVENT_INVALID_PATH",
-    "category": "binding",
-    "description": "`@event.<path>` that does not follow the `{ event, payload, source }` record"
+    "code": "ORB_P_INVALID_VIEW_TYPE",
+    "category": "page",
+    "description": "A page declares a view type that is not a valid view type"
   },
   {
-    "code": "ORB_BINDING_UNKNOWN_ENTITY",
-    "category": "binding",
-    "description": "Unknown entity in @EntityName binding"
+    "code": "ORB_P_MISSING_NAME",
+    "category": "page",
+    "description": "A page does not declare a name"
   },
   {
-    "code": "ORB_BINDING_INVALID_FIELD_NAME",
-    "category": "binding",
-    "description": "Invalid field name in binding path"
+    "code": "ORB_P_MISSING_PATH",
+    "category": "page",
+    "description": "A page is missing its required path"
   },
   {
-    "code": "ORB_BINDING_SET_TARGET_MISSING_PATH",
-    "category": "binding",
-    "description": "Set target missing field path"
+    "code": "ORB_P_MISSING_TRAITS",
+    "category": "page",
+    "description": "A page has no traits array for trait-driven UI"
   },
   {
-    "code": "ORB_BINDING_PAYLOAD_FIELD_UNDECLARED",
-    "category": "binding",
-    "description": "@payload.field references a field not declared in event payload schema"
+    "code": "ORB_P_SIGN_IN_UNKNOWN_ROUTE",
+    "category": "page",
+    "description": "The app's signIn route names a path that is no page of the app"
   },
   {
-    "code": "ORB_BINDING_PAYLOAD_TYPE_INCOMPATIBLE",
-    "category": "binding",
-    "description": "@payload.field is declared but its type does not match the operator argument or comparison it appears in (e.g. string used where a number was expected). Warn-only in V2 Phase 0 rollout; escalates to error in the Phase 5 cleanup. Wired up in a follow-up pass over operator signatures; the class is declared here so the code path can reference it and emit warnings incrementally."
+    "code": "ORB_P_TRANSLATION_DUPLICATE_LOCALE",
+    "category": "page",
+    "description": "A translation group holds more than one page in the same locale"
   },
   {
-    "code": "ORB_X_SET_VALUE_TYPE_MISMATCH",
-    "category": "effect",
-    "description": "`(set @entity.X ?payloadField)` writes a payload field whose declared type does not match the target entity field's declared type. The lolo crate catches this at author time for `.lolo`; this is the raw-`.orb` defense-in-depth backstop. Payload field types are sourced from the trait's `emits[].payload_schema` and `listens` payload metadata."
+    "code": "ORB_RANDOM_BYTES_COUNT",
+    "category": "random",
+    "description": "A random-bytes count argument is outside the allowed integer range"
   },
   {
-    "code": "ORB_X_ENUM_VALUE_NOT_MEMBER",
-    "category": "effect",
-    "description": "`(set @entity.X literal)` assigns a string literal that is not a member of the target field's declared enum (`values: [...]`). The declared union was previously validated + emitted but never enforced — an out-of-set value passed silently. The lolo crate catches this at author time for `.lolo`; this is the raw-`.orb` defense-in-depth backstop."
+    "code": "ORB_RENDER_ACTION_LIFECYCLE_EVENT",
+    "category": "render_ui",
+    "description": "A rendered pattern prop targets a lifecycle event that the bus never delivers"
   },
   {
-    "code": "ORB_X_SET_RETURN_TYPE_MISMATCH",
-    "category": "effect",
-    "description": "`(set @entity.X (op …))` assigns an operator/expression value whose inferred result type is incompatible with the target field's declared type (e.g. `(set @entity.count (str/concat …))` into a `number` field). The value's type is inferred *through* the S-expression via the canonical operator `return_semantics` lattice; an unknowable result (`Json`) never rejects (Gap G-LOLO-SET-OP-RETURN)."
+    "code": "ORB_RENDER_GROUPBY_ENUM_COLUMN_GAP",
+    "category": "render_ui",
+    "description": "A groupBy column set omits enum values of the field, so rows with those values match no column and disappear"
   },
   {
-    "code": "ORB_X_COMPARISON_OPERAND_TYPE_MISMATCH",
-    "category": "effect",
-    "description": "An ordering comparison (`<`, `<=`, `>`, `>=`) whose operands infer to a number on one side and a string on the other. The JS runtime coerces, the compiled TypeScript does not typecheck, and Rust compares kinds — the paths disagree. Convert one side so both are the same kind."
+    "code": "ORB_RENDER_ORBITAL_VALUE_EMBEDDED",
+    "category": "render_ui",
+    "description": "A render-ui embeds an orbital value, but only trait values can be rendered"
   },
   {
-    "code": "ORB_X_OPERATOR_ARG_TYPE_MISMATCH",
-    "category": "effect",
-    "description": "An operator argument whose static type contradicts the type the operator table declares for its position — `(str/upper @entity.count)` with `count: number`, `(+ \"a\" 1)`. Both evaluators raise the same typed mismatch at run time (D-12), so the program can never do what it says."
+    "code": "ORB_RENDER_UNBOUND_TRAIT_KNOB_EMBEDDED",
+    "category": "render_ui",
+    "description": "A render-ui embeds a trait-typed value that may be unbound without a guard, so it renders nothing"
   },
   {
-    "code": "ORB_X_OPERATOR_ARG_UNDETERMINED",
-    "category": "effect",
-    "description": "A value handed to an operator's type variable has no determined type — an unresolved expression, an expression value, json, a list whose items share no type — so what the variable stands for, and the type of the call's result, is unknown. There are no generic types: give the value a real type (a declared payload or entity shape, a named union alias for a list of differently-shaped items)."
+    "code": "ORB_RUI_CHILD_NOT_DRAWABLE",
+    "category": "render_ui",
+    "description": "A non-drawable child is composed under a canvas draw-host, which paints only neutral drawable descriptors"
   },
   {
-    "code": "ORB_X_ORDERING_OPTIONAL_OPERAND",
-    "category": "effect",
-    "description": "An ordering comparison (`<`, `<=`, `>`, `>=`) over an operand that can be missing or null — an optional entity field with no default, an optional payload field — that the program neither guards with a presence check (`(and (validate/required x) (< x 3))`, an `if`/`when` on presence) nor declares a default for. Both evaluators read a missing value as below any number; every push-down store fails the comparison, so the meaning is the program's to state."
+    "code": "ORB_RUI_ELEMENT_SHAPE_MISMATCH",
+    "category": "render_ui",
+    "description": "An element of a pattern prop is missing a field required by the pattern's element shape"
   },
   {
-    "code": "ORB_X_OPERATOR_NULL_OPERAND",
-    "category": "effect",
-    "description": "An operand that can be missing or null — an optional entity field with no default, an optional payload field — handed to a position the kernel raises on when it is null (`rejectsNull` in the operator table), with no presence check or default in front of it. The program says what a missing value means: a guard, a default, or a required field."
+    "code": "ORB_RUI_FORM_FIELD_INTRINSIC",
+    "category": "render_ui",
+    "description": "A form pattern offers an input for an intrinsic entity field, which is never persisted so the input is discarded"
   },
   {
-    "code": "ORB_X_SET_REQUIRED_FIELD_FROM_OPTIONAL_KNOB",
-    "category": "effect",
-    "description": "`(set @entity.X @config.<knob>)` where the value is STILL the literal `@config.<knob>` token post-inline (no default resolved it, no call-site override supplied one) and `X` is a REQUIRED entity field. The emitter has nothing honest to assign — a required TS slot gets `undefined`. Give the knob a default or make the field optional."
+    "code": "ORB_RUI_INVALID_FIELD_PATH",
+    "category": "render_ui",
+    "description": "A nested field path references an invalid relation or field"
   },
   {
-    "code": "ORB_EMIT_PAYLOAD_MISSING_REQUIRED",
-    "category": "binding",
-    "description": "`(emit EVT {...})` literal payload is missing a field the event's declared payload marks as required. Error severity."
+    "code": "ORB_RUI_INVALID_ITEM_ACTION",
+    "category": "render_ui",
+    "description": "An itemAction configuration on a rendered pattern is invalid"
   },
   {
-    "code": "ORB_EMIT_PAYLOAD_EXTRA_FIELD",
-    "category": "binding",
-    "description": "`(emit EVT {...})` literal carries a field that is not declared on the event's payload schema. Error severity."
+    "code": "ORB_RUI_INVALID_PATTERN",
+    "category": "render_ui",
+    "description": "A render-ui pattern type is not in the pattern registry"
   },
   {
-    "code": "ORB_EMIT_PAYLOAD_FIELD_TYPE_MISMATCH",
-    "category": "binding",
-    "description": "`(emit EVT {...})` literal provides a value whose primitive type does not match the declared `PayloadField.field_type`. Error severity."
+    "code": "ORB_RUI_INVALID_PROP",
+    "category": "render_ui",
+    "description": "A render-ui pattern is given a prop that the pattern does not define"
   },
   {
-    "code": "ORB_USER_INTO_REQUIRED_SLOT",
-    "category": "binding",
-    "description": "The whole `@user` record fills a required slot (an emit payload `X!`, a required entity field) with no guard on its presence: a dispatch with no viewer (an os/ completion, a tick) has a null `@user`. Error severity."
+    "code": "ORB_RUI_INVALID_SLOT",
+    "category": "render_ui",
+    "description": "A render-ui effect targets an invalid slot"
   },
   {
-    "code": "ORB_EMIT_REPEATS_IDENTICALLY",
-    "category": "binding",
-    "description": "An `emit` repeats an earlier one of the same transition identically: the dispatch loop collapses the second."
+    "code": "ORB_RUI_MISSING_ACTION",
+    "category": "render_ui",
+    "description": "A render-ui pattern that needs an interaction target has no action, onClick, event or href"
   },
   {
-    "code": "ORB_X_PAYLOAD_FIELD_NAME",
-    "category": "binding",
-    "description": "An event/emit `payloadSchema` field name is not a valid TypeScript identifier (contains a dot, space, or leading digit). Codegen turns each field into a struct member, so `row.category` would emit broken TS. Validate-layer defense-in-depth for the lowering pass that flattens nested payload field names. Error severity."
+    "code": "ORB_RUI_MISSING_PATTERN_TYPE",
+    "category": "render_ui",
+    "description": "A render-ui pattern has no type property"
   },
   {
-    "code": "ORB_X_UNTYPED_ARRAY",
-    "category": "entity",
-    "description": "An array field (entity or payload-schema) declares no element type."
+    "code": "ORB_RUI_MISSING_REQUIRED_PROP",
+    "category": "render_ui",
+    "description": "A render-ui pattern is missing a prop that the pattern requires"
   },
   {
-    "code": "ORB_X_ENTITY_PROP_CONTRACT",
+    "code": "ORB_RUI_PROP_TYPE_MISMATCH",
     "category": "render_ui",
-    "description": "A render-ui pattern prop typed `EntityWith<K>` declares required entity fields (`requiredFields` in the registry), but the bound entity does not provide them and no remap/field-map supplies them. The component would render blank rows. Remap-aware (runs post-inline). Error severity."
+    "description": "A render-ui pattern prop has a value that is not one of its allowed values"
   },
   {
-    "code": "ORB_EMIT_SUCCESS_PAYLOAD_RETURN_MISMATCH",
-    "category": "binding",
-    "description": "**RETIRED (2026-08-30) — superseded by `EmitPayloadNotProduced`, which checks the full shape rather than only the empty-payload case.** No longer raised anywhere; the variant is kept so external tooling matching on the wire string `ORB_EMIT_SUCCESS_PAYLOAD_RETURN_MISMATCH` does not break on an unknown code.  `emit: { success: \"X\" }` config on a data operator declares success event X but X's declared payload does not match the operator's `effect.produces` at this call site. Warn-only."
+    "code": "ORB_RUI_RENDERABLE_IN_GENERIC_FIELD",
+    "category": "render_ui",
+    "description": "A render-ui pattern literal is passed to a field not typed node, hiding renderable content from render-ui checks"
   },
   {
-    "code": "ORB_EMIT_PAYLOAD_NOT_PRODUCED",
-    "category": "binding",
-    "description": "**The payload invariant.** An event's declared payload type IS its access path: declaring `Survey` means the payload is the row (read `?name`); declaring `{ row : Survey }` means read `?row.name`. This fires when an event declares a field that the effect firing it does not actually emit — so every read of that field is `undefined` at runtime, even though `orb validate` and `orb verify` otherwise pass. Checked as width subtyping (`declared ⊆ produced`): declaring FEWER fields than are emitted is legal, declaring one that is never emitted is not. Replaces the narrower `EmitSuccessPayloadWrapped` (persist-only) and `EmitSuccessPayloadReturnMismatch` (empty-payload-only) checks. Error severity."
+    "code": "ORB_SET_COLUMN_WITHOUT_ROW",
+    "category": "entity_mutation",
+    "description": "A set writes an entity column with no row in scope and no persist create or update that could land it"
   },
   {
-    "code": "ORB_EMIT_SUCCESS_PAYLOAD_WRAPPED",
-    "category": "binding",
-    "description": "**RETIRED (2026-08-30) — superseded by `EmitPayloadNotProduced`.** This check only recognised a wrapper on `persist create`/`update` whose type named that exact entity; the general rule catches the same defect at any operator and in shapes this one was blind to (a wrapper naming a different entity, a field the operator never emits at all). Kept so external tooling matching `ORB_EMIT_SUCCESS_PAYLOAD_WRAPPED` still resolves.  A `persist create`/`persist update` call's `emit: { success: \"X\" }` names an event X whose declared payload wraps the persisted entity under a single field (`type X = Event { row: EntityName }`), but `persist create`/`update` emits the persisted row directly (flat, unwrapped) on success in both @almadar/runtime and orbital-core — verified live 2026-08-30 (std-thread's `ThreadPostCreated`): a wrapped declaration validates and compiles clean but every `?row.<field>` read silently returns undefined at runtime. Warn-only."
+    "code": "ORB_SHARED_ENTITY_FIELD_CONFLICT",
+    "category": "entity_mutation",
+    "description": "A field of a shared entity is written by more than one trait"
   },
   {
-    "code": "ORB_X_CROSS_EMITTER_DECLARED_PAYLOAD_MISMATCH",
-    "category": "cross",
-    "description": "Phase F.2: two or more traits declare the same external event name in their `emits` arrays but disagree on the declared payload field list. Consumers that listen on the event will see one shape from one emitter and a different shape from another. Error severity."
+    "code": "ORB_SHARED_ENTITY_RENDER_AUTHORITY",
+    "category": "entity_mutation",
+    "description": "A shared entity is render-ui-read by more than one trait, but only one render authority is allowed per entity and slot"
   },
   {
-    "code": "ORB_X_DUPLICATE_TRAIT_ID",
-    "category": "cross",
-    "description": "Two traits of one program carry the same trait id; listens match sources by id, so each hears the other's emits."
+    "code": "ORB_SLOT_CONTENTION",
+    "category": "slot",
+    "description": "Multiple traits on a page render into the same slot"
   },
   {
-    "code": "ORB_BINDING_ENTITY_FIELD_NOT_FOUND",
-    "category": "binding",
-    "description": "@entity.field references a field not present on the linked entity"
+    "code": "ORB_SLOT_CONTENTION_RUNTIME",
+    "category": "slot",
+    "description": "Several traits render to the same slot in the same state, so they contend for it"
   },
   {
-    "code": "ORB_BINDING_ENTITY_FIELD_NEVER_SET",
-    "category": "binding",
-    "description": "@entity.field is referenced by render-ui / guard / effect but no transition in the same trait runs `(set @entity.field <value>)`. Per the explicit-binding rule, every `@entity.X` read must be backed by at least one explicit setter; otherwise the value is undefined and the component renders empty. Surfaces post-inline so atoms imported via `uses` get checked too. Defense-in-depth backstop for the L1 `LowerError::EntityFieldNeverSet` check."
+    "code": "ORB_SLOT_CONTENTION_TICK",
+    "category": "slot",
+    "description": "Several traits on a page render into the same slot from ticks, so their output contends"
   },
   {
-    "code": "ORB_BINDING_PERSIST_ROW_ID_NEVER_SET",
-    "category": "binding",
-    "description": "`(persist update|delete <Entity> @entity)` passes the WHOLE row, so the row key never appears as an `@entity.id` read and `BindingEntityFieldNeverSet` cannot see it. An unbound `id` resolves empty and the runtime refuses the write outright."
+    "code": "ORB_SLOT_INVALID_NESTING",
+    "category": "slot",
+    "description": "A slot is nested in an invalid way"
   },
   {
-    "code": "ORB_BINDING_EMBED_READS_ARM_WRITE",
-    "category": "binding",
-    "description": "A transition writes `@entity.F` (or its whole row) and renders an embedded trait (`@trait.X`, incl. a hoisted inline `<A.traits.T/>`) whose call-site value reads that field of the same PERSISTENT entity. The embed resolves `@entity` against its own frame at its own render (its mount), so it shows the value from before this transition. Read the value the transition used instead (a call-site capture, `?row.F`), or route the host event to the embed's INIT."
+    "code": "ORB_SLOT_MAIN_NOT_COVERED",
+    "category": "slot",
+    "description": "No trait on a page renders anything into the main slot"
   },
   {
-    "code": "ORB_PERSIST_CREATE_MISSING_POLICY_FIELD",
-    "category": "binding",
-    "description": "`persist create E { ... }` with an explicit data literal whose key set lacks a field that `E.@create` compares (e.g. `@create sender == @user.id` and the literal has no `sender`). The access policy will never be satisfied by a row this transition itself creates — every future `@update`/`@delete`/`@read` gated on that field locks the creator out of their own row. A bare `persist create @entity` (whole frame) is not a hit. Wave 2. Error severity."
+    "code": "ORB_STORE_DRIVER_CONTRACT",
+    "category": "store",
+    "description": "A store driver has no trait handling one or more verbs required by the row-store driver contract"
   },
   {
-    "code": "ORB_PERSIST_CREATE_LITERAL_ID",
-    "category": "binding",
-    "description": "`persist create E { id: \"literal\", … }`: the row names a string-literal id, so the second run creates a row that already exists and fails with `duplicate-id`. A seed or singleton re-save is an authored `persist upsert` (create-or-replace by id). Error severity."
+    "code": "ORB_STORE_DRIVER_NOT_CONDITIONAL",
+    "category": "store",
+    "description": "A conditional persist op is bound to a store driver that cannot execute conditional writes"
   },
   {
-    "code": "ORB_PERSIST_ID_NOT_A_PATH",
-    "category": "binding",
-    "description": "`persist delete E <expression>` / `persist update E <expression> data`: the single forms take the row id as a binding path or a literal, so an expression resolves no row key at run time. Error severity."
+    "code": "ORB_STORE_ON_NON_PERSISTENT",
+    "category": "store",
+    "description": "An entity binds a store but its rows live in no store"
   },
   {
-    "code": "ORB_PERSIST_WHERE_NOT_A_PREDICATE",
-    "category": "binding",
-    "description": "`persist … { where: … }`: the guard is a one-param `fn` over the stored row that never reads the frame (`@entity`), on a single `delete` or `update` only (EXEC-STEP-8). Error severity."
+    "code": "ORB_STORE_UNKNOWN_ORBITAL",
+    "category": "store",
+    "description": "A store binding names an orbital that is not part of the program"
   },
   {
-    "code": "ORB_EFFECT_IN_LAMBDA",
-    "category": "binding",
-    "description": "An effect (`emit`, `persist`, `set`, `notify`, …) inside the `fn` body of a collection operator: a lambda is evaluated for its value, an effect there never runs. Error severity."
+    "code": "ORB_STORE_VERB_OUTSIDE_SEAM",
+    "category": "store",
+    "description": "A trait emits a row-store verb directly, but a store driver may be asked only by the store seam"
   },
   {
-    "code": "ORB_BINDING_TRAIT_MISSING_NAME",
-    "category": "binding",
-    "description": "`@trait` binding with no trait name — bare `@trait` is not resolvable."
+    "code": "ORB_S_ACCESS_POLICY_INVALID_BINDING",
+    "category": "schema",
+    "description": "An access directive uses a binding other than the ones legal there"
   },
   {
-    "code": "ORB_BINDING_TRAIT_INVALID_FORMAT",
-    "category": "binding",
-    "description": "`@trait.X` trait name doesn't match the `PascalCase` identifier pattern."
+    "code": "ORB_S_ACCESS_POLICY_REQUIRES_IDENTITY",
+    "category": "schema",
+    "description": "An access directive reads @user but the program declares no identity entity"
   },
   {
-    "code": "ORB_BINDING_TRAIT_UNKNOWN",
-    "category": "binding",
-    "description": "`@trait.X` references a trait not declared in the current orbital."
+    "code": "ORB_S_ACCESS_POLICY_UNKNOWN_ENTITY_FIELD",
+    "category": "schema",
+    "description": "An access policy references a name that is not a field of its entity, so it resolves to null and denies everyone"
   },
   {
-    "code": "ORB_BINDING_TRAIT_SELF_REFERENCE",
-    "category": "binding",
-    "description": "A trait's render-ui references itself via `@trait.<self>`."
+    "code": "ORB_S_COLLECTION_POLICY_CONFLICT",
+    "category": "schema",
+    "description": "Entities bound to the same collection declare different access directives"
   },
   {
-    "code": "ORB_BINDING_TRAIT_CYCLE",
-    "category": "binding",
-    "description": "Cycle detected in the `@trait.X` reference graph (e.g. A → B → A)."
+    "code": "ORB_S_EMPTY_VERSION",
+    "category": "schema",
+    "description": "The schema version is empty"
   },
   {
-    "code": "ORB_BINDING_TRAIT_INVALID_POSITION",
-    "category": "binding",
-    "description": "`@trait.X` appears outside a `children:` array or a `node`-typed pattern prop — valid positions are where a subtree can be substituted."
+    "code": "ORB_S_EXPECTATION_FIELD_UNDECLARED",
+    "category": "schema",
+    "description": "An effect persists a field that the orbital's expects entity shape does not declare"
   },
   {
-    "code": "ORB_BINDING_TRAIT_OUTSIDE_RENDER_UI",
-    "category": "binding",
-    "description": "`@trait.X` (a render-only, client-side binding) appears outside a `render-ui` effect entirely — in a guard, a non-render effect (`fetch`/`set`/`persist`/`ref`/`call-service`), or a tick. Trait references are render-time composition primitives and have no meaning in data/effects/control flow."
+    "code": "ORB_S_EXPECTATION_PROVIDER_MISMATCH",
+    "category": "schema",
+    "description": "An expectation requires a field to be marked as a key but the providing entity declares it without that mark"
   },
   {
-    "code": "ORB_RENDER_UNBOUND_TRAIT_KNOB_EMBEDDED",
-    "category": "render_ui",
-    "description": "A render-ui payload embeds `@config.<knob>` (as a child or inside a `children` entry) where `<knob>` is a `trait`-typed config field whose resolved value is `none` (unbound), and the render-ui is not guarded by an `(if @config.<knob> ...)` wrapping it in the same effect list. An unbound trait knob's embed renders nothing — the closed-circuit rule that no wire may terminate in nothing (owner ruling 2026-09-13: a `trait`-typed config knob may be `none`)."
+    "code": "ORB_S_EXPECTATION_UNSATISFIED",
+    "category": "schema",
+    "description": "An orbital expects an entity, trait, event, or config default that nothing in the program provides"
   },
   {
-    "code": "ORB_RENDER_ORBITAL_VALUE_EMBEDDED",
-    "category": "render_ui",
-    "description": "A render-ui payload embeds an `orbital`-typed field: an orbital value is data (an import body) and never renders — only trait values embed."
+    "code": "ORB_S_EXPECTED_FIELD_NOT_PROVIDED",
+    "category": "schema",
+    "description": "A rebound entity does not provide a field that the trait expects it to have"
   },
   {
-    "code": "ORB_EMBED_BRIDGE_LISTENS_UNSENT",
-    "category": "render_ui",
-    "description": "A bridged embed delivers an event nothing in the program sends."
+    "code": "ORB_S_EXPECTED_FIELD_TYPE_MISMATCH",
+    "category": "schema",
+    "description": "The provider has the expected field or knob but with an incompatible type"
   },
   {
-    "code": "ORB_EMBED_BRIDGE_EMITS_UNHEARD",
-    "category": "render_ui",
-    "description": "A bridged embed re-emits an event nothing in the program handles."
+    "code": "ORB_S_IDENTITY_NOT_UNIQUE",
+    "category": "schema",
+    "description": "More than one entity is tagged identity, making every @user field reference ambiguous"
   },
   {
-    "code": "ORB_ENTITY_SPLIT_MUTATION",
-    "category": "entity_mutation",
-    "description": "A non-`[shared]`, `Runtime`-persistence entity is mutated (via `set` or a tick write) by ≥2 distinct traits. Each mutator gets an isolated per-trait copy, so if one of the mutators' render-ui also reads the entity, it only ever sees its own trait's writes — never the others'. Error severity: add `[shared]` to the entity, or isolate the mutators."
+    "code": "ORB_S_INVARIANT_UNPROVED",
+    "category": "spec",
+    "description": "A spec proposition the prover cannot decide, so the program is not shown to keep it"
   },
   {
-    "code": "ORB_SHARED_ENTITY_FIELD_CONFLICT",
-    "category": "entity_mutation",
-    "description": "A `[shared]` entity has ≥2 distinct traits writing the SAME field. Coupled mechanics writing one field must be one ordered pipeline, not parallel writers — undefined last-write-wins ordering otherwise."
+    "code": "ORB_S_INVARIANT_VIOLATED",
+    "category": "spec",
+    "description": "A spec proposition (invariant, holds, ensures) is broken by a write, with a counterexample the evaluator confirms"
   },
   {
-    "code": "ORB_SHARED_ENTITY_RENDER_AUTHORITY",
-    "category": "entity_mutation",
-    "description": "A `[shared]` entity is render-ui-read by more than one distinct trait. Exactly one render authority is allowed per shared entity, mirroring `SlotContention`'s single-owner rule."
+    "code": "ORB_S_MISSING_NAME",
+    "category": "schema",
+    "description": "The schema does not declare a name"
   },
   {
-    "code": "ORB_E_MERGED_FIELD_UNREFERENCED",
-    "category": "entity_mutation",
-    "description": "Post-inline: an entity field carrying `mergedFrom` (added by the rebind-merge auto-merge, `merge_imported_entity_fields`) that no trait of the consuming orbital reads, writes, fetch-includes, or persists — R-ENTITY-FIELD-UNION-ACROSS-SAME-NAMED-ENTITY. The merge already narrows to referenced fields at compose time; this catches drift when a later edit removes the trait/effect that used to justify the merge. Error severity."
+    "code": "ORB_S_NO_ORBITALS",
+    "category": "schema",
+    "description": "The schema declares no orbitals"
   },
   {
-    "code": "ORB_TICK_REQUIRES_RUNTIME",
-    "category": "entity_mutation",
-    "description": "A trait runs a non-`Cron` tick (frame/duration interval) against a `Persistent` linked entity. Corpus-facing backstop mirroring the lolo L1 tick guards. Error severity."
+    "code": "ORB_S_OWNER_FIELD_NOT_IDENTITY_TYPED",
+    "category": "schema",
+    "description": "An access directive compares a field to @user.id but the field is not a relation to the identity entity"
   },
   {
-    "code": "ORB_TICK_ASYNC_EFFECT",
-    "category": "entity_mutation",
-    "description": "A non-`Cron` tick effect calls a server-async operator (the canonical registry's `std-agent` category — `agent/generate`, `agent/invoke`, etc.). Repeated per-tick LLM/agent calls can pile up faster than they resolve. Error severity."
+    "code": "ORB_S_ROLE_LITERAL_NOT_MEMBER",
+    "category": "schema",
+    "description": "A literal compared against an @user field with a closed vocabulary is not a member of that vocabulary, so the branch can never be taken"
   },
   {
-    "code": "ORB_ENTITY_INTRINSIC_FIELD_PERSISTED",
-    "category": "entity_mutation",
-    "description": "An explicit `persist create`/`persist update` data LITERAL (an `OirExpr::Object`, never a bare whole-frame `@entity`) names an `@intrinsic` field of the target entity. Intrinsic fields are trait-owned view-state/machinery (`OirEntity::frame_fields`'s ONLY allow-list) — never a persisted column — so writing one into the database is a category error the author almost certainly meant as a domain field. Wave 2. Error severity."
+    "code": "ORB_S_SHARED_WITHOUT_PERSISTENCE_MODE",
+    "category": "schema",
+    "description": "A shared entity declares no persistence mode, and none may be inferred"
   },
   {
-    "code": "ORB_GUARD_ON_FRAME_FIELD_AUTHORIZES",
-    "category": "entity_mutation",
-    "description": "An `@intrinsic` field is used as an AUTHORIZATION input: it appears in an access policy (`@create`/`@read`/`@update`/`@delete`), or in a transition guard that also reads `@user.*`/role/identity AND the transition performs `persist`/`call-service`. Intrinsic fields are trait-computed view-state the runtime never seeds or persists — using one to gate a mutation means the gate is trivially bypassable (the caller controls the \"intrinsic\" value directly). A plain precondition guard with no identity comparison is not a hit. Wave 2. Error severity."
+    "code": "ORB_S_UNKNOWN_IDENTITY_FIELD",
+    "category": "schema",
+    "description": "A read of a field of the signed-in user names a field the declared identity entity does not have"
   },
   {
-    "code": "ORB_SET_COLUMN_WITHOUT_ROW",
-    "category": "entity_mutation",
-    "description": "`(set @entity.<f> ...)` writes a non-`@intrinsic` column of a `[persistent]` entity in a transition with no row binding (no `id`/`?row`-bearing event payload, no `entityId` in scope) AND the owning trait never runs `persist create`/`persist update` on that entity anywhere — so the write can never land: it is not framed to an identified row, and nothing ever persists it. A draft form that sets columns across several transitions before a final `persist create` is legitimate (the write eventually lands); this only fires when the trait has no landing transition at all. Wave 2. Error severity."
+    "code": "ORB_TAB_EFFECT_ON_SERVER",
+    "category": "tab",
+    "description": "A browser tab effect is used in a transition that runs on the server, which holds no tabs"
   },
   {
-    "code": "CIRCUIT_ORPHAN_EVENT",
-    "category": "circuit",
-    "description": "Action emits event with no transition handler"
+    "code": "ORB_TAB_REQUEST_INVALID",
+    "category": "browser",
+    "description": "A browser/tab request is not an object of the operation's closed keys or has refused literal values"
   },
   {
-    "code": "CIRCUIT_DUPLICATE_EVENT",
-    "category": "circuit",
-    "description": "Same event emitted multiple times in same context"
+    "code": "ORB_THEME_PIN_CONTRADICTS_APP",
+    "category": "theme",
+    "description": "An orbital pins a theme that differs from the theme the app declares at app level"
   },
   {
-    "code": "CIRCUIT_DEAD_END_COMPONENT",
-    "category": "circuit",
-    "description": "Interactive component missing itemActions"
+    "code": "ORB_THEME_UNDECLARED",
+    "category": "theme",
+    "description": "A frame is shown in a literal theme that the program does not declare, so no stylesheet ships for it"
   },
   {
-    "code": "CIRCUIT_UNREACHABLE_STATE",
-    "category": "circuit",
-    "description": "State has no incoming transitions"
+    "code": "ORB_TICK_ASYNC_EFFECT",
+    "category": "tick",
+    "description": "A tick calls a server-async operator, which ticks cannot run"
   },
   {
-    "code": "CIRCUIT_DEAD_END_STATE",
-    "category": "circuit",
-    "description": "State has no outgoing transitions"
+    "code": "ORB_TICK_REQUIRES_RUNTIME",
+    "category": "trait",
+    "description": "A non-cron tick mutates a persistent entity, which should usually be runtime"
   },
   {
-    "code": "CIRCUIT_ACTION_COMPONENT_MISMATCH",
-    "category": "circuit",
-    "description": "Action-component mismatch"
+    "code": "ORB_T_CLIENT_TICK_NOT_LOCAL",
+    "category": "trait",
+    "description": "A trait writes a frame entity ticked on the client but declares no dispatch mode, so a server step overwrites the live frame"
   },
   {
-    "code": "CIRCUIT_NO_OVERLAY_EXIT",
-    "category": "circuit",
-    "description": "Overlay slot (modal/drawer) missing exit transition"
+    "code": "ORB_T_CLIENT_TICK_SERVER_EFFECT",
+    "category": "trait",
+    "description": "A tick that runs in the browser has effects that reach the server, and nothing replays a tick there"
   },
   {
-    "code": "CIRCUIT_MODAL_EXIT_INCOMPLETE",
-    "category": "circuit",
-    "description": "Modal-to-inline transition missing render-ui(\"main\", ...) alongside render-ui(\"modal\", null)"
+    "code": "ORB_T_CONFIG_MISSING_REQUIRED_KEY",
+    "category": "trait",
+    "description": "A trait reference does not supply a config knob that the referenced trait declares as required"
   },
   {
-    "code": "CIRCUIT_DEAD_HANDLER",
-    "category": "circuit",
-    "description": "Render-ui handler fires event with no matching transition from the rendering state"
+    "code": "ORB_T_CONFIG_OBJECT_ARRAY_FORBIDDEN",
+    "category": "trait",
+    "description": "A config field uses a banned bare object or array type instead of a named struct alias"
   },
   {
-    "code": "ORB_RENDER_ACTION_LIFECYCLE_EVENT",
-    "category": "circuit",
-    "description": "A rendered affordance's event-bearing prop (`action`, `itemActions[].event`, `submitEvent`, `onChange`, …) targets a lifecycle event (`orbital_core::events::BUS_EXCLUDED_EVENTS`). The bus never re-delivers `INIT`/`LOAD`/`$MOUNT`, so the control is dead on click."
+    "code": "ORB_T_CONFIG_TIER_INVALID",
+    "category": "trait",
+    "description": "A config field declares a tier value outside domain, policy, infra, presentation and internal"
   },
   {
-    "code": "ORB_CIRCUIT_FAILURE_ARM_MISSING",
-    "category": "circuit",
-    "description": "A transition's effects (`fetch`/`persist`/`call-service`) declare an `emit.failure` event, but no arm at the destination state (`from === to || from === '*'`) handles it — the async result contract's failure half is a live wire terminating in nothing. Ported from the JS wiring lint's `failure-arm-missing` (client-bound traits only). Error severity."
+    "code": "ORB_T_CONFIG_UNKNOWN_CALL_SITE_KEY",
+    "category": "trait",
+    "description": "A call-site config key matches no config knob declared on the referenced trait"
   },
   {
-    "code": "ORB_CIRCUIT_FAILURE_ARM_RENDERS_NOTHING",
-    "category": "circuit",
-    "description": "The failure-handling arm found for [`CircuitFailureArmMissing`]'s contract exists but paints nothing (no `render-ui <slot> <non-null>` anywhere in its effects, including through `if`/`do`) — the failure is caught but never shown to the user. A trait declared `[integration]` is headless, so its arm also handles the failure by emitting an event some trait in the program listens to, or one it declares `-> external`; an emit nobody hears still reports. Ported from `failure-arm-renders- nothing`. Error severity."
+    "code": "ORB_T_DUPLICATE_NAME",
+    "category": "trait",
+    "description": "The same trait name is defined in more than one orbital"
   },
   {
-    "code": "ORB_CIRCUIT_MODAL_SHELL_CLOSE_DEAF",
-    "category": "circuit",
-    "description": "A transition renders a non-self-overlaying pattern into an overlay slot (`modal`/`drawer`/`overlay`), but the destination state has no `CLOSE`/`CANCEL` arm — the generic portal shell's own dismiss control (X / Escape / overlay-click) fires an event nothing handles. Ported from `modal-shell-close-deaf`. Error severity."
+    "code": "ORB_T_DUPLICATE_STATE",
+    "category": "trait",
+    "description": "A trait declares the same state name more than once"
   },
   {
-    "code": "ORB_CIRCUIT_SELF_OVERLAY_IN_SHELL",
-    "category": "circuit",
-    "description": "A transition renders a SELF-overlaying pattern (`slideOver: true` anywhere in the payload tree) into an overlay slot — the generic portal shell wraps it too, producing two stacked overlay chromes. Ported from `self-overlay-inside-modal-shell`. Error severity."
+    "code": "ORB_T_DUPLICATE_TRANSITION",
+    "category": "trait",
+    "description": "Two transitions share the same source state and event without guards"
   },
   {
-    "code": "ORB_CIRCUIT_LIFECYCLE_EMIT_UNDELIVERED",
-    "category": "circuit",
-    "description": "A transition's own effects list contains a top-level `(emit <event>)` naming a lifecycle event (`orbital_core::events::BUS_EXCLUDED_EVENTS`) — the bus never re-delivers it, so this half of the closed circuit is written but can never run. Sibling production site to [`RenderActionLifecycleEvent`](ErrorCode::RenderActionLifecycleEvent) (an explicit effect instead of a rendered affordance prop). Ported from the JS wiring lint's `dead-lifecycle-emit`. Error severity."
+    "code": "ORB_T_EMPTY_EVENT_NAME",
+    "category": "trait",
+    "description": "An event name is empty"
   },
   {
-    "code": "ORB_CIRCUIT_SELF_EMIT_LOOP",
-    "category": "circuit",
-    "description": "A transition arm re-emits its OWN trigger event (`X --X--> Y` whose effects contain `(emit X ...)`), the `to` state has another arm on X, and the re-emitted payload does not derive from `@payload` — the runtime path re-enters an arm on the same event with unchanged payload and loops forever (G-RUNTIME-020). Payloads derived from `@payload` (sentinel fan-out counters) make progress per hop and are not flagged; neither is a self-emit whose target state has no same-event arm (a dead-end broadcast). Error severity."
+    "code": "ORB_T_ENDPOINT_TRAIT_RENDERS",
+    "category": "trait",
+    "description": "A trait mounted only on protocol endpoints renders UI, which endpoints cannot show"
   },
   {
-    "code": "ORB_CIRCUIT_INIT_UNCOVERED_STATE",
-    "category": "circuit",
-    "description": "A page trait that initializes on `INIT` has a reachable state with no `INIT` arm: trait state survives unmount, so revisiting the page from that state does nothing (G-ORB-186)."
+    "code": "ORB_T_ENTITY_NAME_SHADOWS_TRAIT_UNION",
+    "category": "trait",
+    "description": "An entity name collides with a trait's generated state union type"
   },
   {
-    "code": "ORB_CIRCUIT_DEAD_BODILESS_ACTION",
-    "category": "circuit",
-    "description": "A transition moves `from -> to` (not a self-transition) with NO effects at all, out of a `from` state some OTHER arm already painted into a main slot (`orbital_core::slots::MAIN_SLOTS`) — the machine leaves that state but the screen keeps its old paint standing, so every affordance routed here is dead. Client-bound gated (an unbound trait's arms never run in the shipped client at all). Ported from the JS wiring lint's `dead-bodiless-action`. Error severity."
+    "code": "ORB_T_ENTITY_NOT_REBINDABLE",
+    "category": "trait",
+    "description": "A trait is bound to an entity it cannot be rebound to"
   },
   {
-    "code": "ORB_CIRCUIT_ASYNC_RESULT_DEAF_TARGET",
-    "category": "circuit",
-    "description": "A state-CHANGING transition (`from != to`) whose `fetch`/`persist` effects declare async-result events (`collect_async_result_events`: EVERY value of the `emit` map, recursing through `if`/`do`) that the destination state's own arms (`from === to-state || from === \"*\"`) don't handle — the requester departs before it can hear its own operation's result, so the cascade lands on a machine deaf to it and wedges. NOT client-bound gated (the JS predicate has none here, unlike its `failure-arm-missing` sibling). Ported from the JS wiring lint's `async-result-deaf-target` (warning there; error here per the 0/0 ruling). Error severity."
+    "code": "ORB_T_EVENT_RENAME_UNKNOWN_KEY",
+    "category": "trait",
+    "description": "An events rename key names no event declared by the referenced trait"
   },
   {
-    "code": "ORB_CIRCUIT_VIEWER_STRANDED",
-    "category": "circuit",
-    "description": "The trait that OWNS a page's content region (`page_content_owner`'s `channel`/`sole-writer`) has a user-triggered arm that repaints its own main-slot body with something offering no way on: no content-body pattern, no registry event-kind prop bound to a live (non-lifecycle) event or an unresolved binding, and no `@trait.X` embed. \"User- triggered\" means the event is reachable from a rendered affordance or a `listens` route, transitively, minus async-result and lifecycle events. Exempt: an arm running its own `fetch`/`persist` (its result arm repaints); a non-self-transition escaping to a state with another producible, non-lifecycle arm. Ported from the JS wiring lint's `viewer-stranded`, predicate revised 2026-09-12 per the F31 live probe (`play_scene` on `ui-minigolf-board`/`std-chem-titration`): the JS's labelled-control test and `@`/`?` sigil branch were both heuristics and are dropped — a registry event-kind prop is the only test. Error severity."
+    "code": "ORB_T_EVT_EXTERNAL_MISSING_PAYLOAD",
+    "category": "trait",
+    "description": "An external event does not declare a typed payload"
   },
   {
-    "code": "ORB_UI_ICON_INVALID_FORMAT",
-    "category": "icon",
-    "description": "Icon name has invalid format"
+    "code": "ORB_T_EVT_INVALID_NAME",
+    "category": "trait",
+    "description": "An event name is not a valid UPPER_SNAKE_CASE identifier"
   },
   {
-    "code": "ORB_UI_ICON_EMPTY",
-    "category": "icon",
-    "description": "Icon name is empty"
+    "code": "ORB_T_EVT_UNDECLARED",
+    "category": "trait",
+    "description": "An event is emitted but not declared in the trait's emits array"
   },
   {
-    "code": "ORB_UI_ICON_NOT_FOUND",
-    "category": "icon",
-    "description": "Icon may not exist in Lucide"
+    "code": "ORB_T_EXTERNAL_INPUT_NOT_RESTING",
+    "category": "trait",
+    "description": "An external input is not accepted from the trait's initial state"
   },
   {
-    "code": "ORB_OP_INVALID_TIME_UNIT",
-    "category": "operator",
-    "description": "A `time/*` operator was given a unit literal outside the vocabulary. Unchecked, it throws at evaluation time — and inside a read predicate that means rows are dropped fail-closed while the run still reports PASS (`S-CALENDAR-RANGE-FILTER-USES-UNSUPPORTED-TIME-UNITS`)."
+    "code": "ORB_T_GENERIC_TYPE_DEPRECATED",
+    "category": "trait",
+    "description": "A declaration uses a generic type such as bare json, object without properties, or any, which the language no longer allows"
   },
   {
-    "code": "ORB_QUERY_MISSING_SEARCH",
-    "category": "query",
-    "description": "Query singleton missing search field"
+    "code": "ORB_T_INIT_MISSING_FETCH",
+    "category": "trait",
+    "description": "No trait fetches a persistent entity on INIT, so interaction traits read data nothing loads"
   },
   {
-    "code": "ORB_QUERY_MISSING_RECOMMENDED",
-    "category": "query",
-    "description": "Query singleton missing recommended fields"
+    "code": "ORB_T_INVALID_EVENT_DEFAULT",
+    "category": "trait",
+    "description": "A config field typed event holds a value that is not a valid event name or member of the trait's event set"
   },
   {
-    "code": "ORB_QUERY_UNSUPPORTED_PATTERN",
-    "category": "query",
-    "description": "Pattern doesn't support query prop"
+    "code": "ORB_T_INVALID_FORMAT",
+    "category": "trait",
+    "description": "A trait reference has neither a ref nor a name property"
   },
   {
-    "code": "ORB_QUERY_UNKNOWN_SINGLETON",
-    "category": "query",
-    "description": "Query references unknown singleton"
+    "code": "ORB_T_INVALID_PATTERN_DEFAULT",
+    "category": "trait",
+    "description": "A pattern-typed config knob has a default that is not a known pattern type"
   },
   {
-    "code": "ORB_QUERY_UNUSED_SINGLETON",
-    "category": "query",
-    "description": "Query singleton is unused"
+    "code": "ORB_T_INVALID_SLOT_DEFAULT",
+    "category": "trait",
+    "description": "A slot-typed config field has a default that is not a valid slot"
   },
   {
-    "code": "ORB_T_EVT_UNDECLARED",
-    "category": "trait_event",
-    "description": "Event emitted but not declared in trait.emits"
+    "code": "ORB_T_INVALID_TRANSITION",
+    "category": "trait",
+    "description": "A transition references a source or target state that does not exist"
   },
   {
-    "code": "ORB_T_EVT_INVALID_NAME",
-    "category": "trait_event",
-    "description": "Event name not UPPER_SNAKE_CASE"
+    "code": "ORB_T_LOCAL_ON_NON_SHARED_PERSISTENT",
+    "category": "trait",
+    "description": "A client-dispatch trait is linked to an entity that is neither shared nor client-resident, hiding server-gated writes behind optimism"
   },
   {
-    "code": "ORB_T_EVT_TICK_UNDECLARED",
-    "category": "trait_event",
-    "description": "Tick emits undeclared event"
+    "code": "ORB_T_LOCAL_TRAIT_TOUCHES_SERVER",
+    "category": "trait",
+    "description": "A client trait transition guards on or touches server-only state"
   },
   {
-    "code": "ORB_T_EVT_SCOPE_MISMATCH",
-    "category": "trait_event",
-    "description": "Listener scope mismatch"
+    "code": "ORB_T_MISSING_INIT_TRANSITION",
+    "category": "trait",
+    "description": "A route trait has no INIT transition on its initial state"
   },
   {
-    "code": "ORB_T_EVT_EXTERNAL_MISSING_PAYLOAD",
-    "category": "trait_event",
-    "description": "External emit missing payload definition"
+    "code": "ORB_T_MULTIPLE_INITIAL_STATES",
+    "category": "trait",
+    "description": "A trait state machine declares more than one initial state"
   },
   {
-    "code": "ORB_S_MISSING_NAME",
-    "category": "schema",
-    "description": "Schema missing name"
+    "code": "ORB_T_NO_INITIAL_STATE",
+    "category": "trait",
+    "description": "A state machine declares no states and so has no initial state"
   },
   {
-    "code": "ORB_S_NO_ORBITALS",
-    "category": "schema",
-    "description": "Schema has no orbitals"
+    "code": "ORB_T_REBIND_MISSING_FIELDS",
+    "category": "trait",
+    "description": "A trait is rebound to an entity that lacks fields the trait requires"
   },
   {
-    "code": "ORB_S_EMPTY_VERSION",
-    "category": "schema",
-    "description": "Schema version is empty"
+    "code": "ORB_T_REBIND_TARGET_UNRESOLVED",
+    "category": "trait",
+    "description": "A trait rebind target cannot be resolved"
   },
   {
-    "code": "ORB_S_IDENTITY_NOT_UNIQUE",
-    "category": "schema",
-    "description": "More than one differently-named `[identity]` entity in one composed program. `@user` is a single root resolving to a single viewer, so two declarations make every `@user.x` ambiguous. (Same-name duplicates are already rejected upstream by `validate_entity_uniqueness`.)"
+    "code": "ORB_T_SECRET_DEFAULT_NOT_STRING",
+    "category": "trait",
+    "description": "A config field typed secret does not default to a string credential reference"
   },
   {
-    "code": "ORB_S_ROLE_LITERAL_NOT_MEMBER",
-    "category": "schema",
-    "description": "A literal compared against an `@user.<field>` whose declared type is a closed vocabulary is not one of that vocabulary's members — a branch that can never be taken. The bug class that let std-healthcare's `\"patient\"` and std-lms's `\"student\"` ship green."
+    "code": "ORB_T_STATE_UNREACHABLE",
+    "category": "trait",
+    "description": "A state is unreachable from the initial state through any transition path"
   },
   {
-    "code": "ORB_S_UNKNOWN_IDENTITY_FIELD",
-    "category": "schema",
-    "description": "`@user.<field>` names a field the declared `[identity]` entity does not have. Resolves to null at runtime, so the guard silently takes its negative branch."
+    "code": "ORB_T_TRAIT_ON_ROUTE_AND_ENDPOINT",
+    "category": "trait",
+    "description": "A trait is mounted on both a route page and a protocol endpoint"
   },
   {
-    "code": "ORB_S_ACCESS_POLICY_UNKNOWN_ENTITY_FIELD",
-    "category": "schema",
-    "description": "`@entity.<field>` (or `(object/get @entity field)`) inside an `@read`/`@create`/`@update`/`@delete` directive names a field the OWNING entity does not have."
+    "code": "ORB_T_TRAIT_UNMOUNTED",
+    "category": "trait",
+    "description": "A trait owns a state machine but is listed on no page and reached by no embed"
   },
   {
-    "code": "ORB_S_OWNER_FIELD_NOT_IDENTITY_TYPED",
-    "category": "schema",
-    "description": "An access directive compares an `@entity.<field>` against `@user.id`, but `<field>` is not a relation to the `[identity]` entity. The comparison is then between a free-text scalar and a roster id — it type-checks, reads like ownership, and matches nothing, because the seeder only stamps viewer ids onto DECLARED relations. This is the `customerEmail` trap: a policy that silently denies everyone while looking correct."
+    "code": "ORB_T_UNDEFINED_EVENT",
+    "category": "trait",
+    "description": "A transition uses an event that is not defined in the trait's events array"
   },
   {
-    "code": "ORB_ENTITY_OWNER_COLUMN_UNSCOPED",
-    "category": "entity",
-    "description": "An entity declares ≥1 owner column (a declared relation to the `[identity]` entity, via `owner_fields_from_schema` — never by field name) but no `read_policy` and no stated `access_waivers.read` reason. An undeclared policy is ALLOW-ALL, not deny-all, so every viewer reads every row. L3 port of JS `unscoped-owned-entity`."
+    "code": "ORB_T_UNDEFINED_TRAIT",
+    "category": "trait",
+    "description": "A trait reference does not give a trait name"
   },
   {
-    "code": "ORB_STORE_UNKNOWN_ORBITAL",
-    "category": "entity",
-    "description": "`store: X` (entity or app header) names no orbital of the program (EXEC-STORE-4). Error severity."
+    "code": "ORB_T_UNRESOLVED_TYPE_PARAM",
+    "category": "trait",
+    "description": "A declaration uses a type variable that no trait parameter binds"
   },
   {
-    "code": "ORB_STORE_DRIVER_CONTRACT",
-    "category": "entity",
-    "description": "A store driver orbital has no trait handling one of ROW_READ / ROW_LIST / ROWS_QUERY / ROWS_WRITE (`spec/store/row-store.lolo`). Error severity."
+    "code": "ORB_UI_ICON_EMPTY",
+    "category": "icon",
+    "description": "An icon name is empty"
   },
   {
-    "code": "ORB_STORE_ON_NON_PERSISTENT",
-    "category": "entity",
-    "description": "`store:` on an entity whose rows live in no store (`[runtime]` or browser-stored). Error severity."
+    "code": "ORB_UI_ICON_INVALID_FORMAT",
+    "category": "icon",
+    "description": "An icon name has an invalid format"
   },
   {
-    "code": "ORB_STORE_VERB_OUTSIDE_SEAM",
-    "category": "entity",
-    "description": "A trait outside a store driver orbital emits a row verb: the store seam alone asks a driver, one frame per ask (EXEC-STORE-4). Error severity."
+    "code": "ORB_UI_ICON_NOT_FOUND",
+    "category": "icon",
+    "description": "An icon name does not exist in the icon set"
   },
   {
-    "code": "ORB_STORE_DRIVER_NOT_CONDITIONAL",
-    "category": "entity",
-    "description": "A single `persist delete|update` on an entity whose driver declares `writeCapabilities.conditional` false: the take is one conditional op (EXEC-STEP-8). Error severity."
+    "code": "ORB_U_CONFIG_UNKNOWN_KEY",
+    "category": "uses",
+    "description": "A uses config override names a knob the imported behavior app-level config never declared"
   },
   {
-    "code": "ORB_RENDER_GROUPBY_ENUM_COLUMN_GAP",
-    "category": "render_ui",
-    "description": "A trait's `config.groupByField` + `config.columns[].key` bucket rows of the linked entity by strict key equality, but the field's declared enum allows a value no column key names — those rows match no column and silently disappear. L3 port of JS `groupby-enum-column-gap`."
+    "code": "ORB_W_LOOP_INVARIANT_PARSE",
+    "category": "lint",
+    "description": "A parse inside a lambda re-parses the same value for every element and should be bound once outside"
   },
   {
-    "code": "ORB_EMBED_CONFIG_FORWARD_MULTI_REFERRER",
+    "code": "ORB_X_CIRCULAR_DEPENDENCY",
     "category": "cross",
-    "description": "A trait embedded via `@trait.X` by ≥2 referrers that itself declares an `@config.<key>` forward. One declaration serves one embedder (its forwards chain to the first referrer only), so the second embedder's call-site config never takes effect. L3 port of JS `embedded-sibling-single-referrer`."
-  },
-  {
-    "code": "ORB_THEME_PIN_CONTRADICTS_APP",
-    "category": "schema",
-    "description": "A trait pins `config.theme` to a non-empty literal that isn't a binding (`@…`) and doesn't match the schema's app-level `theme` declaration. `\"\"` and bindings are unpinned — an orbital riding the ambient default is silent. L3 port of the app-level branch of JS `app-theme-divergent`; the dominant-vote branch is a name/plurality heuristic and is retired, not ported."
+    "description": "Traits form a circular event dependency"
   },
   {
-    "code": "ORB_THEME_UNDECLARED",
-    "category": "schema",
-    "description": "A `data-theme` resolves to a literal theme the program does not declare (app or orbital `theme`, or the app's `themes`), so the compiled client ships no stylesheet for it (G-UI-106)."
+    "code": "ORB_X_CROSS_EMITTER_DECLARED_PAYLOAD_MISMATCH",
+    "category": "cross",
+    "description": "An event declared by several emitters has conflicting payload fields across them"
   },
   {
-    "code": "ORB_S_ACCESS_POLICY_INVALID_BINDING",
-    "category": "schema",
-    "description": "An access directive reads a binding root other than `@entity`/`@user` — the directive has no call site, so `@payload`/`@config`/`@state` are not meaningful there."
+    "code": "ORB_X_DUPLICATE_ENTITY",
+    "category": "cross",
+    "description": "The same entity name is defined in more than one orbital"
   },
   {
-    "code": "ORB_S_ACCESS_POLICY_REQUIRES_IDENTITY",
-    "category": "schema",
-    "description": "An access directive reads `@user` in a program declaring no `[identity]` entity. Unlike a bare pre-existing `@user` read (which falls back to the implicit default shape), a NEW authorization construct must have a real roster — that is what makes personas switchable."
+    "code": "ORB_X_DUPLICATE_TRAIT_ID",
+    "category": "cross",
+    "description": "Two or more traits carry the same trait id, so listens match each other's emits"
   },
   {
-    "code": "ORB_S_COLLECTION_POLICY_CONFLICT",
-    "category": "schema",
-    "description": "Two entity declarations bind the same `persistent:` collection and declare DIFFERENT access directives. One table cannot honestly have two visibility rules, and the runtime's collection-level inheritance has no principled way to choose (`R-SHADOW-ENTITY-SHARES-COLLECTION-DIRECTIVES-DONT-APPLY`)."
+    "code": "ORB_X_ENUM_VALUE_NOT_MEMBER",
+    "category": "cross",
+    "description": "A set effect assigns a string literal that is not a declared member of the target field's enum"
   },
   {
-    "code": "ORB_S_EXPECTATION_UNSATISFIED",
-    "category": "schema",
-    "description": "Compose link-check: an orbital's `expects entity X` / `expects entity X [identity]` names a requirement no orbital in the program provides. The message names WHO ASKED — the consumer orbital — so the repair is attributable."
+    "code": "ORB_X_FILTER_FIELD_NEVER_WRITTEN",
+    "category": "cross",
+    "description": "A fetch filters on a field that no persist create or update of that entity supplies, so it always returns empty"
   },
   {
-    "code": "ORB_S_EXPECTATION_PROVIDER_MISMATCH",
-    "category": "schema",
-    "description": "Compose link-check: the named provider entity exists but lacks the expected kind (e.g. `expects entity Customer [identity]` where `Customer` carries no `[identity]` tag)."
+    "code": "ORB_X_LISTEN_PER_ENTITY",
+    "category": "trait_event",
+    "description": "A trait that listens per a key does not link a [runtime] entity declaring an id : string field"
   },
   {
-    "code": "ORB_S_EXPECTED_FIELD_NOT_PROVIDED",
-    "category": "schema",
-    "description": "Compose link-check: the provider entity declares no field with an expected shape name. Names consumer, provider, and field."
+    "code": "ORB_X_LISTEN_PER_ROUTED_PAGE",
+    "category": "trait_event",
+    "description": "A trait that listens per a key is placed on a route page"
   },
   {
-    "code": "ORB_S_EXPECTED_FIELD_TYPE_MISMATCH",
-    "category": "schema",
-    "description": "Compose link-check: the provider has the expected field but with an incompatible type (per orbital-core's `type_compat`; literal unions use subset semantics — every expected member must be a provider member)."
+    "code": "ORB_X_LISTEN_SOURCE_NEVER_PRODUCES",
+    "category": "cross",
+    "description": "A listens route names a source whose emits contract never produces the listened event"
   },
   {
-    "code": "ORB_S_EXPECTATION_FIELD_UNDECLARED",
-    "category": "schema",
-    "description": "Standalone AND compose self-consistency: the consumer uses a field it did not declare — an `@user.<field>` read outside its `expects identity` shape, or a `persist` payload field outside its `expects entity` shape. The consumer's declaration is its own source of truth."
+    "code": "ORB_X_LISTEN_SOURCE_UNRESOLVED",
+    "category": "cross",
+    "description": "A listen entry references a source trait event that the source does not declare"
   },
   {
-    "code": "ORB_S_INVARIANT_VIOLATED",
-    "category": "schema",
-    "description": "A spec proposition (`@invariant` on `expects entity`, `@holds` on an `expects trait` state) is broken: a write or transition of the program falsifies it on a counterexample the evaluator confirms."
+    "code": "ORB_X_LISTEN_TRIGGER_UNMATCHED",
+    "category": "cross",
+    "description": "A listens entry triggers an event that no transition in the same trait reacts to"
   },
   {
-    "code": "ORB_S_INVARIANT_UNPROVED",
-    "category": "schema",
-    "description": "A spec proposition the prover could not decide (an expression outside the decidable fragment, or a write whose effect on the proposition is over-approximated). Never a pass."
+    "code": "ORB_X_LLM_WIRE_UNROUTED",
+    "category": "cross",
+    "description": "A composed std-llm trait can emit a wire event that no trait in the program listens to"
   },
   {
-    "code": "ORB_U_CONFIG_UNKNOWN_KEY",
-    "category": "schema",
-    "description": "A `uses A from \"…\" { config { … } }` call-site override names a key the imported behavior's app-level `config {}` (`OrbitalSchema.config`, `Almadar_Orbital_Import.md` §4.5) does not declare."
+    "code": "ORB_X_MISSING_ORBITAL_NAME",
+    "category": "cross",
+    "description": "An orbital does not declare a name"
   },
   {
-    "code": "ORB_S_SHARED_WITHOUT_PERSISTENCE_MODE",
-    "category": "schema",
-    "description": "L2 twin of `orbital-lolo`'s `LowerError::SharedEntityWithoutPersistenceMode` (`ORB_S_SHARED_WITHOUT_PERSISTENCE_MODE`): `EntityDefinition.shared && persistence.is_none()` on the input schema. Nothing about a `[shared]` entity may be inferred — it must say `persistent: <collection>` or `runtime` explicitly. Catches a `.orb` mutated directly (factory edits, agent rewrites) that bypasses the `.lolo` parse path. Runs before any persistence defaulting. Wave 2. Error severity."
+    "code": "ORB_X_ORPHAN_LISTENER",
+    "category": "cross",
+    "description": "A trait listens for an event that no trait emits"
   },
   {
-    "code": "ORB_ID_UNKNOWN_REF",
-    "category": "identity",
-    "description": "A populated dual-carry id field points at an id that is neither a node declared in the schema's arena (orbital/entity/trait/page/emit-event) nor a `schema.ledger` entry. The edge is dangling."
+    "code": "ORB_X_PARALLEL_LAMBDA_IMPURE",
+    "category": "parallel",
+    "description": "The lambda of array/pmap or array/preduce is not a literal fn or is not provably pure"
   },
   {
-    "code": "ORB_ID_NAME_MISMATCH",
-    "category": "identity",
-    "description": "Both a reference's name field and its id sibling are populated, but the ledger's `curName` for that id disagrees with the name (dual-carry drift)."
+    "code": "ORB_X_PAYLOAD_FIELD_NAME",
+    "category": "cross",
+    "description": "A payload field name is not a valid TypeScript identifier"
   },
   {
-    "code": "ORB_ID_KIND_MISMATCH",
-    "category": "identity",
-    "description": "An id's kind prefix (`identity::id_kind_of`) disagrees with the reference position it occupies (e.g. an `ent_` id sitting in a trait `refId`)."
+    "code": "ORB_X_PAYLOAD_MISMATCH",
+    "category": "cross",
+    "description": "An external emit is missing a payload field required by the event's declaration"
   },
   {
-    "code": "ORB_ID_LEDGER_ORPHAN",
-    "category": "identity",
-    "description": "A ledger row whose id no node in the schema carries — a stale row left behind after its node was removed. Error severity."
+    "code": "ORB_X_RENDER_UI_EVENT_LITERAL_STALE",
+    "category": "cross",
+    "description": "A render-ui prop references an event literal that no longer matches a declared event"
   },
   {
-    "code": "ORB_ID_DUPLICATE_EVENT_ID",
-    "category": "identity",
-    "description": "One event id is declared by two or more DIFFERENT traits in the same orbital (`stateMachine.events[].id` / `emits[].eventId`). Ids are the durable node keys of the identity graph; a shared id makes every id→name resolution (identity normalize, id-primary dispatch) ambiguous. Inline's event-id hygiene derives per-instance ids at expansion, so this fires only on an artifact produced outside that path."
+    "code": "ORB_X_ROW_LITERAL_FIELD_TYPE_MISMATCH",
+    "category": "effect",
+    "description": "A record literal written into an entity carries a value whose type the declared field does not admit."
   },
   {
-    "code": "ORB_ID_AUTHORED_WITHOUT_LEDGER",
-    "category": "identity",
-    "description": "A ledger-less `.orb` carries an authored declaration id that loading re-mints (`stamp::ensure_stamped`). Warning severity."
+    "code": "ORB_X_ROW_LITERAL_MISSING_REQUIRED",
+    "category": "effect",
+    "description": "A `persist create` data literal omits a column the entity requires (no default, not framework-stamped)."
   },
   {
-    "code": "ORB_BEHAVIOR_PACKAGE_NOT_INSTALLED",
-    "category": "behavior_package",
-    "description": "`<prefix>/<name>` names a prefix no installed behavior package declares."
+    "code": "ORB_X_ROW_LITERAL_UNKNOWN_FIELD",
+    "category": "effect",
+    "description": "A record literal written into an entity (a `persist` data literal, or a `set` into a relation field) names a key the entity does not declare."
   },
   {
-    "code": "ORB_BEHAVIOR_NOT_FOUND",
-    "category": "behavior_package",
-    "description": "The prefix resolved to an installed package, but it has no behavior by that name (or `std/behaviors/<name>` matched neither the std source nor any other installed package)."
+    "code": "ORB_X_UNKNOWN_THEME",
+    "category": "cross",
+    "description": "A theme reference is neither a built-in theme key nor an orbital-declared inline theme"
   },
   {
-    "code": "ORB_BEHAVIOR_AMBIGUOUS",
-    "category": "behavior_package",
-    "description": "`std/behaviors/<name>` matched the same behavior name in two or more non-std installed packages."
+    "code": "ORB_X_UNRESOLVED_RELATION_TARGET",
+    "category": "cross",
+    "description": "A relation field points at an entity that is not declared in the schema"
   },
   {
-    "code": "ORB_BEHAVIOR_PREFIX_CONFLICT",
-    "category": "behavior_package",
-    "description": "Two different installed packages declare the same `orb.prefix`."
+    "code": "ORB_X_UNTYPED_ARRAY",
+    "category": "cross",
+    "description": "An array field declares no element type"
   },
   {
-    "code": "ORB_BEHAVIOR_NAME_DUPLICATE",
-    "category": "behavior_package",
-    "description": "A behavior name is duplicated within or across installed package sources."
+    "code": "ORB_X_UNUSED_EMISSION",
+    "category": "cross",
+    "description": "A trait emits an event that no trait listens for"
   },
   {
-    "code": "ORB_BEHAVIOR_PACKAGE_INVALID",
-    "category": "behavior_package",
-    "description": "An installed behavior package's registry cannot be read or indexed."
+    "code": "SEXPR_INVALID_BINDING",
+    "category": "sexpr",
+    "description": "An s-expression contains an invalid binding"
   },
   {
-    "code": "ORB_GEN_INVALID_VALUE",
-    "category": "generic",
-    "description": "Generic invalid value"
+    "code": "SEXPR_INVALID_OPERATOR",
+    "category": "sexpr",
+    "description": "An S-expression uses an operator that is not in the operator registry"
   },
   {
-    "code": "ORB_GEN_INVALID_REFERENCE",
-    "category": "generic",
-    "description": "Generic invalid reference format"
+    "code": "SEXPR_UNKNOWN_ENTITY",
+    "category": "sexpr",
+    "description": "An entity named in a binding may not exist in the program"
   },
   {
-    "code": "ORB_X_UNKNOWN_THEME",
-    "category": "generic",
-    "description": "Theme reference names a theme not in the valid set (built-in `@almadar-ui/themes/` registry ∪ orbital-declared inline themes)"
+    "code": "inbound-hook-duplicate",
+    "category": "lint",
+    "description": "Two cli hooks declare the same inbound name"
   },
   {
-    "code": "ORB_GEN_MISSING_FIELD",
-    "category": "generic",
-    "description": "Generic missing required field"
+    "code": "shared-type-drift",
+    "category": "lint",
+    "description": "A type shared between behaviors has drifted from its canonical declaration"
   },
   {
-    "code": "ORB_GEN_DUPLICATE",
-    "category": "generic",
-    "description": "Generic duplicate entity/item"
+    "code": "unread",
+    "category": "lint",
+    "description": "The file the rule reads could not be read or listed"
   }
 ]