@almadar/std 16.197.0 → 16.199.0

package/behaviors/lolo/agent/atoms/std-agent-tool-call.lolo

@@ -1,8 +1,8 @@
 app std-agent-tool-call "1.0.0"
 "Wraps llm/call-tools — takes messages + tools, returns tool-call result."
 
-type LlmMessage = { role: string!, content: string!, toolCalls: [object], toolCallId: string }
-type LlmToolDef = { name: string!, description: string!, schema: object }
+type LlmMessage = { role: string!, content: string!, toolCalls: [opaque], toolCallId: string }
+type LlmToolDef = { name: string!, description: string!, schema: opaque }
 
 orbital AgentToolCallOrbital {
 

package/behaviors/lolo/agent/atoms/std-agent-tool-loop.lolo

@@ -1,8 +1,8 @@
 app std-agent-tool-loop "1.0.0"
 "Agent tool-loop molecule — call-tools, check response, emit result for iteration."
 
-type LlmMessage = { role: string!, content: string!, toolCalls: [object], toolCallId: string }
-type LlmToolDef = { name: string!, description: string!, schema: object }
+type LlmMessage = { role: string!, content: string!, toolCalls: [opaque], toolCallId: string }
+type LlmToolDef = { name: string!, description: string!, schema: opaque }
 
 orbital AgentToolLoopOrbital {
 

package/behaviors/lolo/infra/atoms/std-approval-gate.lolo

@@ -16,7 +16,7 @@ orbital ApprovalGateOrbital {
 
     type ApprovalRequestReviewFailed = Event { error : string, code : string } "Fired when the persist fails"
 
-    type ApprovalGranted = Event { requestId : string, payload : object } "Re-emitted on approval; carries the held payload so the downstream listener can replay the gated action without a lookup."
+    type ApprovalGranted = Event { requestId : string, payload : opaque } "Re-emitted on approval; carries the held payload so the downstream listener can replay the gated action without a lookup."
 
     type DenyCommit = { id : string!, notes : string }
 
@@ -46,7 +46,7 @@ orbital ApprovalGateOrbital {
     decidedAt : number @description "Timestamp indicating when a decision was made on the request." @synonyms "decision time, resolved at, completed at" = 0
     escalatedAt : number @description "Timestamp indicating when the request was escalated." @synonyms "escalation time, escalation timestamp, escalated time" = 0
     notes : string @description "The reviewer's written reason, captured by the deny step." @synonyms "comments, remarks, explanation, reason, details" = ""
-    payload : object @description "The held data of the gated action, replayed by the downstream listener when the request is granted." @synonyms "request data, held payload, pending data, gated data" = {}
+    payload : opaque @description "The held data of the gated action, replayed by the downstream listener when the request is granted." @synonyms "request data, held payload, pending data, gated data" = {}
   }
 
   trait LoadingSpinner = Spinner.traits.SpinnerRender -> ApprovalRequest {
@@ -372,7 +372,7 @@ orbital ApprovalGateOrbital {
         @tier "domain"
       ApprovalGranted -> external {
         requestId : string
-        payload : object
+        payload : opaque
       }
         @description "Signals that an approval process has been successfully completed; carries the held payload for the downstream listener to replay. Contract: if the replay fails (access denial, write failure), the host MUST emit APPROVAL_REPLAY_FAILED back so the request reopens."
         @synonyms "approved, authorized, confirmed, validated"

package/behaviors/lolo/infra/atoms/std-audit-capture.lolo

@@ -1,7 +1,7 @@
 app std-audit-capture "1.2.0"
 "std-audit-capture — event-interceptor audit log / audit trail. Use when a user voices that a record's changes must be tracked, logged, or auditable (audit trail, track changes, change history, who edited what, mutation log, record changes, log every edit, edit history, modification log, who did what when, accountability log). Listens for the generic `EntityMutated` sentinel (rename via traitOverrides.events to the real mutation event, e.g. ContactSaved) and persists an AuditEntry row capturing actor, action, entity type/id, before/after snapshots, and timestamp. `captureEventTypes` filters on @payload.data.kind (empty = capture all). Compose with `std-lifecycle` to apply retention. Composable via `extraTraits` to interpose audit logging behind any mutating trait."
 orbital AuditCaptureOrbital {
-    type EntityMutated = Event { data : object } "Rename via traitOverrides.events to the upstream mutation event (e.g. ContactSaved, ContactDeleted)."
+    type EntityMutated = Event { data : @entity @config.captureEntity } "Rename via traitOverrides.events to the upstream mutation event (e.g. ContactSaved, ContactDeleted)."
 
     type AuditRecorded = Event { actor : string, action : string, entityType : string, entityId : string, recordedAt : number } "Re-emitted after the audit row persists; rename to wire downstream listeners (e.g. AuditDashboardAppended)."
 
@@ -11,8 +11,8 @@ orbital AuditCaptureOrbital {
     action : string @description "The specific operation performed on the entity." @synonyms "operation, event, activity, change" = ""
     entityType : string @description "The type of entity that was modified." @synonyms "type, kind, class" = ""
     entityId : string @description "Unique identifier for the entity being audited." @synonyms "entity identifier, record id, item id" = ""
-    before : object @description "The state of the entity prior to the modification." @synonyms "previous, original, old value" = {}
-    after : object @description "The state of the entity after a modification." @synonyms "new, updated, post, subsequent" = {}
+    before : opaque @description "The state of the entity prior to the modification." @synonyms "previous, original, old value" = {}
+    after : opaque @description "The state of the entity after a modification." @synonyms "new, updated, post, subsequent" = {}
     recordedAt : number @description "Timestamp indicating when the audit event was recorded." @synonyms "timestamp, date, time" = 0
   }
 
@@ -50,7 +50,7 @@ orbital AuditCaptureOrbital {
 
     listens {
       EntityMutated {
-        data : object
+        data : @entity @config.captureEntity
       }
     }
 

package/behaviors/lolo/infra/atoms/std-cascade-on-delete.lolo

@@ -1,9 +1,9 @@
 app std-cascade-on-delete "1.1.0"
 "std-cascade-on-delete — relational `owns` cascade. Listens for a parent-deleted sentinel (`ParentDeleted` — rename via traitOverrides.events to the consumer's actual parent-deleted event), then deletes every dependent row whose `foreignKeyField` points at the deleted parent — via a self-driving loop (delete the head of the matching set, re-fetch until none remain). Emits `CascadeRowDeleted` per row and `CascadeCompleted` when done."
 orbital CascadeOnDeleteOrbital {
-    type ParentDeleted = Event { data : object } "Rename via traitOverrides.events to the upstream parent-deleted event (e.g. ContactDeleted). `data.id` carries the parent's primary key."
+    type ParentDeleted = Event { data : @entity @config.parentEntity } "Rename via traitOverrides.events to the upstream parent-deleted event (e.g. ContactDeleted). `data.id` carries the parent's primary key."
 
-    type DepsLoaded = Event { data : [object] } "Internal: dependent rows fetched for the deleted parent."
+    type DepsLoaded = Event { data : [@entity @config.dependentEntity] } "Internal: dependent rows fetched for the deleted parent."
 
     type CascadeStepped = Event { id : string } "Internal: one dependent deleted; drives the next loop pass."
 
@@ -58,7 +58,7 @@ orbital CascadeOnDeleteOrbital {
         parentId : string
       }
       DepsLoaded {
-        data : [object]
+        data : [@entity @config.dependentEntity]
       }
       CascadeStepped {
         id : string
@@ -71,10 +71,10 @@ orbital CascadeOnDeleteOrbital {
 
     listens {
       ParentDeleted {
-        data : object
+        data : @entity @config.parentEntity
       }
       DepsLoaded {
-        data : [object]
+        data : [@entity @config.dependentEntity]
       }
       CascadeStepped {
         id : string

package/behaviors/lolo/infra/atoms/std-cooldown.lolo

@@ -3,7 +3,7 @@ app std-cooldown "1.0.0"
 orbital CooldownOrbital {
     type CooldownReady = Event { entityId : string } "Emitted when the cooldown expires and the action is available again."
 
-  entity CooldownRecord [persistent: cooldown_states] {
+  entity CooldownRecord [runtime] {
     id : string!
     remainingMs : number @description "Milliseconds remaining on the active cooldown." @synonyms "time left, remaining, countdown, ms left" = 0
     active : boolean @description "Whether the cooldown is currently counting down." @synonyms "cooling, on cooldown, busy, in progress" = false

package/behaviors/lolo/infra/atoms/std-game-clock.lolo

@@ -3,7 +3,7 @@ app std-game-clock "1.0.0"
 orbital GameClockOrbital {
     type GameClockTicked = Event { elapsedMs : number } "Broadcast each tick while the clock is running."
 
-  entity GameClockRecord [persistent: game_clock_states] {
+  entity GameClockRecord [runtime] {
     id : string!
     elapsedMs : number @description "Total milliseconds elapsed since the clock started." @synonyms "elapsed, time, ms, total time" = 0
     running : boolean @description "Whether the clock is currently ticking." @synonyms "active, playing, started" = true

package/behaviors/lolo/infra/atoms/std-lifecycle.lolo

@@ -1,7 +1,7 @@
 app std-lifecycle "1.1.0"
 "std-lifecycle — age-based status lifecycle for a target entity. A periodic tick scans the target for records in `fromStatus` whose `dateField` is older than `ageDays`, and transitions each one to `toStatus` — every matching record, via a self-driving scan loop (process the head of a filtered fetch, persist the status, re-fetch until the set drains). Compose onto any orbital and bind `targetEntity` + the status/date knobs."
 orbital LifecycleOrbital {
-    type ScanRecordsLoaded = Event { data : [object] } "Internal: target records matching the lifecycle filter."
+    type ScanRecordsLoaded = Event { data : [@entity @config.targetEntity] } "Internal: target records matching the lifecycle filter."
 
     type ScanFailed = Event { error : string, code : string } "Internal: scan fetch / persist failed."
 
@@ -59,7 +59,7 @@ orbital LifecycleOrbital {
         status : string
       }
       ScanRecordsLoaded {
-        data : [object]
+        data : [@entity @config.targetEntity]
       }
       ScanFailed {
         error : string
@@ -72,7 +72,7 @@ orbital LifecycleOrbital {
 
     listens {
       ScanRecordsLoaded {
-        data : [object]
+        data : [@entity @config.targetEntity]
       }
       ScanFailed {
         error : string

package/behaviors/lolo/infra/atoms/std-migration-job.lolo

@@ -2,18 +2,23 @@ app std-migration-job "1.0.0"
 "std-migration-job — one import run of external data into the host system, modeled as a persistent MigrationJob row with a lifecycle state machine: idle → fetching → mapping → reviewing → committing → done | failed. All source access goes through the migration service (call-service \"migration\" listDocuments / fetchDocument / commit) — the atom never talks to a source directly, and the host-injected service handler resolves credentials from the connectionRef knob (a reference, never the secret). Staging/mapping is host work (deterministic pipeline or agent): the atom fetches, the host stages and emits MIGRATION_STAGED with stats and, optionally, the staged units/skipped/validationErrors rows themselves — when the rows are supplied, reviewing renders an ImportPreviewTree so the user can see what will commit before approving. The user approves (MIGRATION_APPROVED) and only then does commit run. Terminal runs persist the job row for provenance. Rebind the entity to a host-owned job entity via linkedEntity; target, connectionRef and reviewSlot are config knobs."
 orbital MigrationJobOrbital {
 
+  type MigrationFile = { name : string, size : number, type : string, lastModified : number }
+  type ImportSourceOption = { id : string!, kind : string!, label : string!, event : string }
+  type ImportUnit = { ref : string!, targetEntity : string!, fields : Map string scalar, parentRef : string }
+  type ImportSkip = { ref : string!, reason : string! }
+
   entity MigrationJob [persistent: migration_jobs] {
     id : string!
-    source : object @description "ImportSource descriptor of the run (kind + options), supplied by the host." = {}
-    files : [object] @description "Client-side file metadata for upload sources (name/size/type/lastModified)." = []
+    source : ImportSourceOption @description "ImportSource descriptor of the run (kind + options), supplied by the host." = {}
+    files : [MigrationFile] @description "Client-side file metadata for upload sources (name/size/type/lastModified)." = []
     target : string @description "Name of the host entity this import writes into." = ""
     status : "idle" | "fetching" | "mapping" | "reviewing" | "committing" | "done" | "failed" @description "Lifecycle position of the run." = idle
-    documents : [object] @description "Document metadata listed from the source." = []
-    document : object @description "Most recently fetched document content." = {}
-    stats : object @description "Staged/committed/failed/skipped counts." = {}
-    units : [object] @description "Staged ImportUnits ready for review (ref/targetEntity/fields/parentRef), when the host stages the full rows rather than aggregate stats only." @synonyms "staged units, preview rows, import rows, staged rows" = []
-    skipped : [object] @description "Source elements skipped during staging with a reason each, when the host stages the full rows rather than aggregate stats only." @synonyms "skipped rows, skipped elements, staging skips" = []
-    validationErrors : [object] @description "Validation errors surfaced during staging, when the host stages the full rows rather than aggregate stats only." @synonyms "staging errors, validation issues, import errors" = []
+    documents : [opaque] @description "Document metadata listed from the source — migration.listDocuments service result, never destructured by the atom." = []
+    document : opaque @description "Most recently fetched document content — migration.fetchDocument service result, never destructured by the atom." = {}
+    stats : opaque @description "Staged/committed/failed/skipped counts — merged from host staging and migration.commit service results, never destructured by the atom." = {}
+    units : [ImportUnit] @description "Staged ImportUnits ready for review (ref/targetEntity/fields/parentRef), when the host stages the full rows rather than aggregate stats only." @synonyms "staged units, preview rows, import rows, staged rows" = []
+    skipped : [ImportSkip] @description "Source elements skipped during staging with a reason each, when the host stages the full rows rather than aggregate stats only." @synonyms "skipped rows, skipped elements, staging skips" = []
+    validationErrors : [opaque] @description "Validation errors surfaced during staging, when the host stages the full rows rather than aggregate stats only." @synonyms "staging errors, validation issues, import errors" = []
     error : string @description "Failure detail when status is failed." = ""
     createdAt : number @description "Run start timestamp." = 0
   }
@@ -195,18 +200,18 @@ orbital MigrationJobOrbital {
 
     emits {
       DOCUMENTS_LISTED {
-        documents : [object]!
+        documents : [opaque]!
       }
         @description "migration.listDocuments service result, flattened onto the payload by the call-service effect executor"
         @tier "secondary"
       DOCUMENT_FETCHED {
-        document : object!
+        document : opaque!
       }
         @description "migration.fetchDocument service result, flattened onto the payload by the call-service effect executor"
         @tier "secondary"
       COMMITTED {
         committed : number!
-        failed : [object]!
+        failed : [opaque]!
       }
         @description "migration.commit service result — committed count plus per-unit failures"
         @tier "secondary"
@@ -216,28 +221,28 @@ orbital MigrationJobOrbital {
         @description "migration service call failure signal — lands the run in failed, never a silent swallow"
         @tier "secondary"
       MIGRATION_FETCHED -> external {
-        documents : [object]!
+        documents : [opaque]!
       }
         @description "Source documents are listed and the run is ready for staging (deterministic pipeline or agent)"
         @synonyms "import fetched, source listed, documents ready"
         @tier "domain"
       MIGRATION_DOCUMENT -> external {
-        document : object!
+        document : opaque!
       }
         @description "A single fetched document's content, for the host staging layer to map into target units"
         @synonyms "document loaded, content fetched"
         @tier "domain"
       MIGRATION_REVIEW_READY -> external {
-        stats : object!
-        units : [object]
-        skipped : [object]
-        validationErrors : [object]
+        stats : opaque!
+        units : [ImportUnit]
+        skipped : [ImportSkip]
+        validationErrors : [opaque]
       }
         @description "Staging is complete; the preview is ready for the approval gate. units/skipped/validationErrors forward the full staged rows when the host staged them, for a review-before-commit UI; stats-only hosts leave them empty."
         @synonyms "preview ready, staging complete, review import"
         @tier "domain"
       MIGRATION_COMPLETED -> external {
-        stats : object!
+        stats : opaque!
       }
         @description "The commit drained through the host sink; stats carry committed and per-unit failed counts"
         @synonyms "import done, migration complete, data imported"
@@ -252,8 +257,8 @@ orbital MigrationJobOrbital {
 
     listens {
       MIGRATION_START {
-        source : object!
-        files : [object]
+        source : ImportSourceOption!
+        files : [MigrationFile]
       }
         @description "Starts an import run. source is the ImportSource descriptor; files carries client file metadata for upload sources. Also reached via a sibling std-import's IMPORT_REQUESTED."
         @synonyms "start import, run migration, import data"
@@ -264,15 +269,15 @@ orbital MigrationJobOrbital {
         @description "Fetch one document's full content from the source during staging"
         @tier "internal"
       MIGRATION_STAGED {
-        stats : object!
-        units : [object]
-        skipped : [object]
-        validationErrors : [object]
+        stats : opaque!
+        units : [ImportUnit]
+        skipped : [ImportSkip]
+        validationErrors : [opaque]
       }
         @description "Host staging finished — units are staged and validated; stats summarize staged/skipped counts for the preview. units/skipped/validationErrors optionally carry the full staged rows (server ImportPreview shape) so reviewing can render an ImportPreviewTree instead of staying headless."
         @tier "internal"
       MIGRATION_APPROVED {
-        units : [object]
+        units : [ImportUnit]
       }
         @description "The user approved the preview; units are the staged ImportUnits to commit through the host sink. Optional — the ImportPreviewTree's onConfirm fires with no payload, so commit falls back to the units already staged on the entity via MIGRATION_STAGED."
         @synonyms "approve import, confirm migration"

package/behaviors/lolo/infra/atoms/std-notify-on-event.lolo

@@ -4,7 +4,7 @@ type PrefRow = { userId : string, eventType : string, mode : string, channel : s
 type AuditRow = { recipient : string, channel : string, dispatched : boolean, recordedAt : number }
 type SubRow = { userId : string, endpoint : string, p256dh : string, auth : string }
 orbital NotifyOnEventOrbital {
-    type EventOccurred = Event { data : object, status : string } "Rename via traitOverrides.events to the upstream event (e.g. ContactSaved). The atom listens on this sentinel and dispatches a notification. The optional `status` field lets `triggerStatus` gate dispatch to a single status-change value."
+    type EventOccurred = Event { data : opaque, status : string } "Rename via traitOverrides.events to the upstream event (e.g. ContactSaved). The atom listens on this sentinel and dispatches a notification. The optional `status` field lets `triggerStatus` gate dispatch to a single status-change value."
 
     type NotificationDispatched = Event { recipient : string, channel : string, message : string, severity : string } "Re-emitted after dispatch; rename to wire downstream observers (e.g. NotificationLogAppended)."
 
@@ -333,7 +333,7 @@ orbital NotifyOnEventOrbital {
 
     listens {
       EventOccurred {
-        data : object
+        data : opaque
         status : string
       }
       NOTIFY_PREFS_LOADED {

package/behaviors/lolo/infra/atoms/std-reminder-scheduler.lolo

@@ -1,7 +1,7 @@
 app std-reminder-scheduler "1.1.0"
 "std-reminder-scheduler — deadline reminders for a target entity. A periodic tick scans the target for records whose `dateField` deadline (a ms-epoch number or an ISO datetime string) is within `offsetHours` of now and that have not been reminded yet, and emits `ReminderDue` for each — every matching record, via a self-driving scan loop. Marks each record `remindedAt` so it isn't reminded twice. Compose alongside std-notify-on-event to deliver the reminder."
 orbital ReminderSchedulerOrbital {
-    type ScanRecordsLoaded = Event { data : [object] } "Internal: target records due for a reminder."
+    type ScanRecordsLoaded = Event { data : [@entity @config.targetEntity] } "Internal: target records due for a reminder."
 
     type ScanFailed = Event { error : string, code : string } "Internal: scan fetch / persist failed."
 
@@ -66,7 +66,7 @@ orbital ReminderSchedulerOrbital {
         template : string
       }
       ScanRecordsLoaded {
-        data : [object]
+        data : [@entity @config.targetEntity]
       }
       ScanFailed {
         error : string
@@ -79,7 +79,7 @@ orbital ReminderSchedulerOrbital {
 
     listens {
       ScanRecordsLoaded {
-        data : [object]
+        data : [@entity @config.targetEntity]
       }
       ScanFailed {
         error : string

package/behaviors/lolo/ml/atoms/std-data-collector.lolo

@@ -3,7 +3,7 @@ app std-data-collector "1.0.0"
 orbital MlDataCollectorOrbital {
 
   entity DataBuffer [runtime] {
-    buffer : [any] @description "Data points accumulated in the current cycle." = []
+    buffer : [opaque] @description "Data points accumulated in the current cycle." = []
     count : int @description "Number of points currently in the buffer." = 0
     status : "idle" | "collecting" = idle
   }
@@ -33,14 +33,14 @@ orbital MlDataCollectorOrbital {
     }
 
     emits {
-      BUFFER_READY -> external { buffer : [any]!, count : int! }
+      BUFFER_READY -> external { buffer : [opaque]!, count : int! }
         @description "Fired when the buffer reaches config.bufferSize; carries the full accumulated buffer and its count, then the buffer resets for the next cycle."
         @tier "primary"
     }
 
     listens {
       COLLECT {
-        point : any!
+        point : opaque!
       }
     }
 

package/behaviors/lolo/ml/atoms/std-graph-builder.lolo

@@ -2,10 +2,11 @@ app std-graph-builder "1.0.0"
 "Graph construction atom — builds node/edge structures from an entity collection for downstream GNN pipelines; pure array/object transform, no ML compute."
 
 orbital GraphBuilderOrbital {
+    type GraphBuilderEdge = { source : string!, target : string! }
 
   entity GraphStructure [runtime] {
-    nodes     : [object] = []
-    edges     : [object] = []
+    nodes     : [Map string scalar] = []
+    edges     : [GraphBuilderEdge] = []
     nodeCount : int = 0
     edgeCount : int = 0
     status    : "idle" | "built" = idle
@@ -70,8 +71,8 @@ orbital GraphBuilderOrbital {
 
     emits {
       GRAPH_READY -> external {
-        nodes : [object]!
-        edges : [object]!
+        nodes : [Map string scalar]!
+        edges : [GraphBuilderEdge]!
         nodeCount : int!
         edgeCount : int!
       }
@@ -81,7 +82,7 @@ orbital GraphBuilderOrbital {
 
     listens {
       BUILD_GRAPH {
-        entities : [object]!
+        entities : [opaque]!
       }
     }
   }

package/behaviors/lolo/ml/atoms/std-ml-classify.lolo

@@ -3,13 +3,22 @@ app std-ml-classify "1.0.0"
 
 orbital MlClassifyOrbital {
 
+  ;; The caller-supplied request bag, echoed untouched through CLASSIFY/CLASSIFIED
+  ;; so a composing ladder (e.g. std-escalating-decision) can project its own inputs out of it.
+  type DecisionRequest = {
+    candidate  : scalar!
+    key        : scalar!
+    accepted   : [scalar]!
+    categories : [string]!
+  }
+
   entity ClassifierVerdict [runtime] {
     text         : string   = ""
     category     : string   = ""
     confidence   : float    = 0
     reasoning    : string   = ""
     errorMessage : string   = ""
-    request      : object   = {}
+    request      : DecisionRequest = {}
     status       : "idle" | "classifying" | "done" = idle
   }
 
@@ -112,7 +121,7 @@ orbital MlClassifyOrbital {
     listens {
       CLASSIFY {
         text : string!
-        request : object
+        request : DecisionRequest
       }
     }
   }

package/behaviors/lolo/ml/atoms/std-ml-exact-check.lolo

@@ -62,16 +62,16 @@ orbital MlExactCheckOrbital {
 
     emits {
       EXACT_MATCHED -> external {
-        candidate : any!
-        key : any!
+        candidate : scalar!
+        key : scalar!
       }
         @description "Fired when the candidate exactly equals the key under the configured normalization"
         @tier "primary"
 
       EXACT_UNMATCHED -> external {
-        candidate : any!
-        key : any!
-        request : object
+        candidate : scalar!
+        key : scalar!
+        request : opaque
       }
         @description "Abstain — candidate does not equal the key; the next rung should take over. request echoes the originating request untouched so the next rung can project its own inputs out of it"
         @tier "primary"
@@ -79,9 +79,9 @@ orbital MlExactCheckOrbital {
 
     listens {
       CHECK {
-        candidate : any!
-        key : any!
-        request : object
+        candidate : scalar!
+        key : scalar!
+        request : opaque
       }
     }
   }

package/behaviors/lolo/ml/atoms/std-ml-infer.lolo

@@ -3,16 +3,20 @@ app std-ml-infer "1.0.0"
 
 type Range = { min: float!, max: float! }
 type OutputContract = { shape: [int], ranges: Map string Range }
+type ShapeMismatchViolation = { type: "shape_mismatch", expected: [int]!, actual: [int]! }
+type RangeViolationDetail = { type: "range_violation", dim: int!, min: float!, max: float!, actualMin: float!, actualMax: float! }
+type NotATensorViolation = { type: "not_a_tensor", actualType: string! }
+type ContractViolation = ShapeMismatchViolation | RangeViolationDetail | NotATensorViolation
 
 orbital MlInferOrbital {
 
   entity Inference [runtime] {
-    input      : object   = {}
+    input      : opaque   = {}
     output     : [float]  = []
     confidence : float    = 0
-    violations : [object] = []
+    violations : [ContractViolation] = []
     reason     : string   = ""
-    request    : object   = {}
+    request    : opaque   = {}
     status     : "idle" | "inferring" | "resolved" = idle
   }
 
@@ -115,15 +119,15 @@ orbital MlInferOrbital {
       INFERRED -> external {
         output     : [float]!
         confidence : float!
-        violations : [object]!
+        violations : [ContractViolation]!
       }
         @description "The service answered, the output satisfies outputContract, and confidence clears confidenceFloor — output already clamped"
         @tier "primary"
 
       INFER_ABSTAINED -> external {
         reason     : string!
-        violations : [object]!
-        request    : object
+        violations : [ContractViolation]!
+        request    : opaque
       }
         @description "The abstain — reason is one of: low confidence, contract violation, unavailable. violations is populated only on the contract violation path. request echoes the originating request untouched so the next rung can project its own inputs out of it"
         @tier "primary"
@@ -131,8 +135,8 @@ orbital MlInferOrbital {
 
     listens {
       INFER {
-        input : object!
-        request : object
+        input : opaque!
+        request : opaque
       }
     }
   }

package/behaviors/lolo/ml/atoms/std-ml-label-capture.lolo

@@ -4,10 +4,10 @@ orbital MlLabelCaptureOrbital {
 
   entity LabeledExample [persistent: ml_labels] {
     id : string! @key
-    input : json @description "The input that was judged." = null
-    verdict : json @description "The verdict/output produced by the rung." = null
+    input : opaque @description "The input that was judged." = null
+    verdict : opaque @description "The verdict/output produced by the rung." = null
     source : string @description "Which rung produced the verdict." = ""
-    outcome : json @description "The observed ground-truth outcome, once known." = null
+    outcome : opaque @description "The observed ground-truth outcome, once known." = null
     sink : string @description "Named destination this example is attributed to." = ""
     recordedAt : number = 0
   }
@@ -52,10 +52,10 @@ orbital MlLabelCaptureOrbital {
 
     listens {
       CAPTURE {
-        input : json!
-        verdict : json!
+        input : opaque!
+        verdict : opaque!
         source : string!
-        outcome : json
+        outcome : opaque
       }
     }
 

package/behaviors/lolo/ml/atoms/std-ml-lookup.lolo

@@ -56,15 +56,15 @@ orbital MlLookupOrbital {
 
     emits {
       KEY_HIT -> external {
-        candidate : any!
-        entry : any!
+        candidate : scalar!
+        entry : opaque!
       }
         @description "Fired when the candidate matches an entry in the accepted list"
         @tier "primary"
 
       KEY_MISS -> external {
-        candidate : any!
-        request : object
+        candidate : scalar!
+        request : opaque
       }
         @description "Abstain — candidate matches nothing in the accepted list; the next rung should take over. request echoes the originating request untouched so the next rung can project its own inputs out of it"
         @tier "primary"
@@ -72,9 +72,9 @@ orbital MlLookupOrbital {
 
     listens {
       LOOKUP {
-        candidate : any!
-        accepted : [any]!
-        request : object
+        candidate : scalar!
+        accepted : [opaque]!
+        request : opaque
       }
     }
   }

package/behaviors/lolo/ml/atoms/std-ml-similarity.lolo

@@ -3,6 +3,15 @@ app std-ml-similarity "1.0.0"
 
 orbital MlSimilarityOrbital {
 
+  ;; The caller-supplied request bag, echoed untouched through COMPARE/SIMILARITY_ABSTAINED
+  ;; so a composing ladder (e.g. std-escalating-decision) can project its own inputs out of it.
+  type DecisionRequest = {
+    candidate  : scalar!
+    key        : scalar!
+    accepted   : [scalar]!
+    categories : [string]!
+  }
+
   entity SimilarityComparison [runtime] {
     query            : string    = ""
     candidates       : [string]  = []
@@ -13,7 +22,7 @@ orbital MlSimilarityOrbital {
     matchScore       : float     = 0
     matchMargin      : float     = 0
     reason           : string    = ""
-    request          : object    = {}
+    request          : DecisionRequest = {}
     status           : "idle" | "embedding" | "resolved" = idle
   }
 
@@ -147,7 +156,7 @@ orbital MlSimilarityOrbital {
 
       SIMILARITY_ABSTAINED -> external {
         reason : string!
-        request : object
+        request : DecisionRequest
       }
         @description "No confident match — reason is one of: empty candidate list, below floor, thin margin, embedding unavailable. request echoes the originating request untouched so the next rung can project its own inputs out of it"
         @tier "primary"
@@ -157,7 +166,7 @@ orbital MlSimilarityOrbital {
       COMPARE {
         query : string!
         candidates : [string]!
-        request : object
+        request : DecisionRequest
       }
     }
   }

package/behaviors/lolo/ml/atoms/std-tokenizer.lolo

@@ -8,7 +8,7 @@ orbital MlTokenizerOrbital {
     tokens     : [string] = []
     tokenIds   : [int]    = []
     tokenCount : int      = 0
-    request    : object   = {}
+    request    : opaque   = {}
     status     : "idle" | "checked" = idle
   }
 
@@ -99,7 +99,7 @@ orbital MlTokenizerOrbital {
     listens {
       TOKENIZE {
         text : string!
-        request : object
+        request : opaque
       }
     }
   }