@eir-labs/coltrane 0.9.4 → 0.11.0

package/domain_types/red-spec.json

@@ -1,6 +1,6 @@
 {
   "slug": "red-spec",
-  "version": 1,
+  "version": 2,
   "extends": "Artifact",
   "domain": "spec-drafting",
   "status": "active",
@@ -21,7 +21,9 @@
               "type": "string"
             },
             "patch": {
-              "type": "string"
+              "type": "string",
+              "description": "The unified diff itself, not a description of it. The spec-drafting review chair reads test bodies OUT OF THIS FIELD ('read each red test in the diffs'), so this is the evidence the gate adjudicates, not documentation of the change. Observed on gig 34ff466b: every patch sealed as a one-line summary ('full unified diff captured from git diff --cached ... content present verbatim in the working tree at this path') \u2014 true, and useless as evidence. The reviewer refused, correctly, marking NON-TAUTOLOGY and REDNESS 'NOT RUN'. The gate was not failed, it was STARVED, and the seal accepted that silently because the type asked only for a string.",
+              "pattern": "(^|\\n)[+-]"
             }
           },
           "required": [
@@ -59,7 +61,7 @@
       },
       "uncovered": {
         "type": "array",
-        "description": "Contract invariants with no red test — MUST be empty.",
+        "description": "Contract invariants with no red test \u2014 MUST be empty.",
         "items": {
           "type": "string"
         }

package/domain_types/woodshed-record.json

@@ -0,0 +1,149 @@
+{
+  "slug": "woodshed-record",
+  "version": 1,
+  "extends": "Interpretation",
+  "domain": "learning",
+  "status": "active",
+  "schema": {
+    "type": "object",
+    "description": "The record of solitary practice — one worker, alone, producing nothing shippable, where the only output is that the worker got better. Carries NO acceptance criteria and NO pass field: a practice session with declared criteria is a gig wearing a woodshed costume. Jazz pedagogy states the separation directly — 'leave the woodshed behind and view practice activities as relatively exclusive of performance, trusting that practicing will demonstrate a meaningful effect as it organically evolves' — which is also an instruction NOT to gate practice on demonstrated transfer into later work. The stop-criterion has two halves and both are load-bearing: an objective floor that is necessary and never sufficient (a player drills a phrase through all twelve keys, at several tempos, across the range), and a felt judgment that closes it (the material is in the hands when it can be reached without conscious effort). A floor can be automated; a stop cannot. Above all this type carries FAULT ATTRIBUTION, because routing a correction to the wrong destination is the expensive failure: an engine defect written into a player's ledger becomes permanent superstition, carried at inference cost by a player it never belonged to.",
+    "properties": {
+      "question": {
+        "type": "string",
+        "description": "What was being worked out. A question, not a criterion — nobody knew the answer, which is why this was a woodshed and not a gig."
+      },
+      "iterations": {
+        "type": "array",
+        "description": "The attempts, in order, including and especially the wrong ones. A record that keeps only its final state has thrown away its entire product.",
+        "items": {
+          "type": "object",
+          "properties": {
+            "attempt": {
+              "type": "string"
+            },
+            "outcome": {
+              "type": "string",
+              "description": "What actually happened, measured rather than assumed."
+            },
+            "wrong_because": {
+              "type": "string",
+              "description": "Absent when the attempt held. Present is the normal case and is not a failure of the session."
+            },
+            "cost": {
+              "type": "string",
+              "description": "What the error actually cost — rounds, dollars, wall-clock, a wrong claim made to someone. An error whose cost is unrecorded cannot be prioritized against any other, and cost is the filter that makes improvement self-selecting."
+            }
+          },
+          "required": [
+            "attempt",
+            "outcome"
+          ]
+        }
+      },
+      "corrections": {
+        "type": "array",
+        "description": "The reductions. Many incidents collapse to few corrections, and the collapse IS the work — this is what survives compaction into a player's ledger. The incident list does not travel; the disposition does.",
+        "items": {
+          "type": "object",
+          "properties": {
+            "correction": {
+              "type": "string",
+              "description": "Stated as a disposition the next session can hold, not as a rule to remember."
+            },
+            "from_iterations": {
+              "type": "array",
+              "items": {
+                "type": "number"
+              }
+            },
+            "fault": {
+              "type": "string",
+              "enum": [
+                "player",
+                "engine",
+                "criterion",
+                "encode-this"
+              ],
+              "description": "THE LOAD-BEARING FIELD. player to that player's ledger; engine to an issue against the substrate; criterion to an amendment of the standard that asked for something unsatisfiable; encode-this to a minted skill, because the thing keeps being re-derived."
+            },
+            "attributed_to": {
+              "type": "string"
+            },
+            "routed": {
+              "type": "string",
+              "description": "Where it actually landed — a ledger entry, an issue number, a diff. Absent means the correction has not been delivered and the record is not finished."
+            }
+          },
+          "required": [
+            "correction",
+            "fault"
+          ]
+        }
+      },
+      "encode": {
+        "type": "array",
+        "description": "Techniques worth minting as skills because they were re-derived rather than recalled.",
+        "items": {
+          "type": "object",
+          "properties": {
+            "skill": {
+              "type": "string"
+            },
+            "why": {
+              "type": "string",
+              "description": "What its absence cost in this session."
+            },
+            "code_half": {
+              "type": "string",
+              "description": "The deterministic part, or an honest statement that there is none. A technique that can run without inference should."
+            }
+          },
+          "required": [
+            "skill",
+            "why"
+          ]
+        }
+      },
+      "sufficiency": {
+        "type": "array",
+        "description": "THE OBJECTIVE FLOOR — necessary, never sufficient. The checkable conditions actually met, each with how it was measured. A jazz player's floor is the phrase in all twelve keys at several tempos; a skill's floor is its fixtures passing. Clearing the floor does not end a session, and that asymmetry is the point.",
+        "items": {
+          "type": "object",
+          "properties": {
+            "condition": {
+              "type": "string"
+            },
+            "met": {
+              "type": "boolean"
+            },
+            "measured_by": {
+              "type": "string",
+              "description": "How it was established. An unmeasured condition is a claim."
+            }
+          },
+          "required": [
+            "condition",
+            "met"
+          ]
+        }
+      },
+      "heard_by": {
+        "type": "string",
+        "description": "Who judged the thing was in the hands. A NAME, never a rubric. The stop-criterion of practice is felt — reachable without conscious effort — and formalizing it would turn this into a gig. Absent means the session is still open."
+      },
+      "still_open": {
+        "type": "array",
+        "items": {
+          "type": "string"
+        },
+        "description": "What was not resolved. Required and may be empty, on the same argument as a verdict's inferred_not_run: an absent list is a claim that nothing was left open."
+      }
+    }
+  },
+  "required_fields": [
+    "question",
+    "iterations",
+    "corrections",
+    "still_open"
+  ]
+}

package/evals/gist-present.json

@@ -0,0 +1,7 @@
+{
+  "slug": "gist-present",
+  "domain": "demo",
+  "on_type": "summary",
+  "non_empty_fields": ["gist"],
+  "asserts": "the summary output has a non-empty gist field"
+}

package/institutions/coltrane.json

@@ -24,7 +24,7 @@
         "deontic": "permitted",
         "aim": "open a pull request proposing a change to the institution's main line",
         "conditions": "the change is committed on a non-main branch and its local verify passed",
-        "or_else": "not applicable — a permission, not an obligation",
+        "or_else": "not applicable \u2014 a permission, not an obligation",
         "check": {
           "predicate": "(=> (and (is-agent actor) (= action \"open-pr\") (not (= source \"main\"))) allow)",
           "inputs": {
@@ -55,7 +55,7 @@
         "deontic": "permitted",
         "aim": "stand deliberately red between the spec merge and the implementation merge on a change-set branch, off the protected line",
         "conditions": "while the target branch is a change-set branch and is not the protected main line",
-        "or_else": "not applicable — a permission, not an obligation",
+        "or_else": "not applicable \u2014 a permission, not an obligation",
         "check": {
           "predicate": "(=> (not (= target_branch \"main\")) allow)",
           "inputs": {
@@ -63,6 +63,54 @@
           }
         },
         "content_hash": "sha256:f465a9f3e76a5288dd993ef1b8228993feea04a47af8f3c99462cc4edcb238a5"
+      },
+      {
+        "attributes": "any seated agent performing a coltrane-shaped operation \u2014 composing a standard, writing a typed output, defining an agent, registering a type",
+        "deontic": "forbidden",
+        "aim": "perform a coltrane-shaped operation through a built-in file or search surface instead of the MCP surface",
+        "conditions": "whenever the operation has a coltrane tool that performs it; reading source and editing engine TypeScript are not coltrane-shaped and are unaffected",
+        "or_else": "the operation is not seen by the genome \u2014 the work does not enter the genome: no content_sha is sealed, no ledger entry is written, no hash updates, so the change is unrecorded however correct its bytes are. Where the seat holds no such grant the surface is absent and the bypass cannot arise; where it does, this is what follows.",
+        "check": {
+          "predicate": "(=> (and (is-agent actor) (= operation \"coltrane-shaped\") (not (= surface \"mcp\"))) deny)",
+          "inputs": {
+            "actor": "principal",
+            "operation": "operation-kind",
+            "surface": "tool-surface"
+          }
+        },
+        "content_hash": "sha256:b3f747e6039cdc1224a39fc0509e4b46f5c2b75c2e8feec2b3459b85a4cc762a"
+      },
+      {
+        "attributes": "any seated agent",
+        "deontic": "forbidden",
+        "aim": "write to core_types/ or domain_types/ directly instead of using type_register or type_extend",
+        "conditions": "at all times",
+        "or_else": "the type is not registered \u2014 the work does not enter the genome: no content_sha is sealed, no ledger entry is written, no hash updates, so the change is unrecorded however correct its bytes are. Where the seat holds no such grant the surface is absent and the bypass cannot arise; where it does, this is what follows.",
+        "check": {
+          "predicate": "(=> (and (is-agent actor) (= action \"direct-write\") (= target \"type-dir\")) deny)",
+          "inputs": {
+            "actor": "principal",
+            "action": "action-kind",
+            "target": "write-target"
+          }
+        },
+        "content_hash": "sha256:d1370d7b356ab529da71576f390d712a3896a85c89a2b9a8300cb729ab99f1ca"
+      },
+      {
+        "attributes": "any seated agent adding an agent definition to the genome",
+        "deontic": "forbidden",
+        "aim": "add an agent DEFINITION by dropping a file under agents/ instead of using agent_define",
+        "conditions": "for the genome agent-definition surface (agents/*.json). NOT the base-player surface: CLAUDE.md ships Claude Code subagents as markdown under agents/players/<name>.md, and those are files by design \u2014 a law that forbade them would forbid the shipped arrangement.",
+        "or_else": "the agent is not defined \u2014 the work does not enter the genome: no content_sha is sealed, no ledger entry is written, no hash updates, so the change is unrecorded however correct its bytes are. Where the seat holds no such grant the surface is absent and the bypass cannot arise; where it does, this is what follows.",
+        "check": {
+          "predicate": "(=> (and (is-agent actor) (= action \"file-drop\") (= target \"agent-definition\")) deny)",
+          "inputs": {
+            "actor": "principal",
+            "action": "action-kind",
+            "target": "write-target"
+          }
+        },
+        "content_hash": "sha256:cc778a9b25e6914cf9c8e70d63539dd7563f3be8c3c7b4f6a693de5bae5496f2"
       }
     ],
     "sovereign": true,
@@ -72,7 +120,7 @@
     {
       "slug": "eir-labs",
       "name": "Eir Labs",
-      "charter": "The organization that develops Coltrane through Coltrane's own governed pipeline. Its charter is to carry every change to the engine and its genome through a reviewed pull request a human governor merges on green continuous integration — never a direct write to the protected main line. It ships no capability it has not been granted and lands no change its checks have not passed.",
+      "charter": "The organization that develops Coltrane through Coltrane's own governed pipeline. Its charter is to carry every change to the engine and its genome through a reviewed pull request a human governor merges on green continuous integration \u2014 never a direct write to the protected main line. It ships no capability it has not been granted and lands no change its checks have not passed.",
       "parent_org": null
     }
   ],
@@ -86,6 +134,16 @@
       "status": "active",
       "named_from_forebear": null,
       "auth_user_id": null
+    },
+    {
+      "slug": "bandleader",
+      "name": "Bandleader",
+      "kind": "steve",
+      "is_institution": false,
+      "skill_slugs": [],
+      "status": "named",
+      "named_from_forebear": "blakey-art",
+      "auth_user_id": null
     }
   ],
   "org_members": [
@@ -132,7 +190,7 @@
       "role": "human-governor",
       "human": true,
       "function": "JUDGE",
-      "mission": "Hold the merge authority for Coltrane's protected main line. This chair is held by a person, never a model agent: the governor reviews an open pull request and its continuous-integration result and merges it under their own name, or refuses it. Nothing lands on main without this office's yes. The office ships unassigned — the adopting organization seats a person here as its first governance act.",
+      "mission": "Hold the merge authority for Coltrane's protected main line. This chair is held by a person, never a model agent: the governor reviews an open pull request and its continuous-integration result and merges it under their own name, or refuses it. Nothing lands on main without this office's yes. The office ships unassigned \u2014 the adopting organization seats a person here as its first governance act.",
       "required_skills": [],
       "caps": [],
       "obligations": [
@@ -161,6 +219,120 @@
       "witnessed_by": null
     }
   ],
-  "forebears": [],
-  "lineage_edges": []
+  "forebears": [
+    {
+      "slug": "crawford-ostrom-adico",
+      "institution_slug": "coltrane",
+      "name": "Crawford, S.E.S. & Ostrom, E. (1995), \"A Grammar of Institutions\"",
+      "domain": "institutional analysis",
+      "kind": "work",
+      "what_taken": "The ADICO grammar \u2014 Attribute, Deontic, aIm, Condition, Or-else \u2014 which InstitutionalLawSchema takes as the shape of a law. Cited with a DOI at src/genome_schema.ts:356, the tree's one explicit \"Descends from\" declaration."
+    },
+    {
+      "slug": "makinson-vandertorre-io-logic",
+      "institution_slug": "coltrane",
+      "name": "Makinson, D. & van der Torre, L. (2000), \"Input/Output Logics\"",
+      "domain": "deontic logic",
+      "kind": "work",
+      "what_taken": "The obligation as a norm-PAIR (condition, consequent) rather than a modal operator over a proposition \u2014 why a law here carries a predicate and an or_else instead of a truth value."
+    },
+    {
+      "slug": "xacml-3-decision-model",
+      "institution_slug": "coltrane",
+      "name": "OASIS eXtensible Access Control Markup Language (XACML) 3.0",
+      "domain": "access control",
+      "kind": "work",
+      "what_taken": "The multi-verdict decision algebra \u2014 permit / deny / not-applicable / indeterminate \u2014 that the admissibility result descends from, rather than a boolean. Named in the schema prose WITHOUT a locator: attestation, not archive."
+    },
+    {
+      "slug": "gasb-54-encumbrance",
+      "institution_slug": "coltrane",
+      "name": "GASB Statement No. 54, Fund Balance Reporting and Governmental Fund Type Definitions",
+      "domain": "governmental accounting",
+      "kind": "work",
+      "what_taken": "The encumbrance \u2014 a commitment recorded between an appropriation ceiling and an expenditure \u2014 which the committed-work objects (Tour / Booking / Resource) take as the binding middle place. Named in docs/specs/the-binding-middle-place.md WITHOUT a locator: attestation, not archive."
+    },
+    {
+      "slug": "blakey-art",
+      "institution_slug": "coltrane",
+      "name": "Art Blakey",
+      "domain": "modern jazz (drums, bandleading)",
+      "kind": "musician",
+      "what_taken": "Born 11 October 1919 in Pittsburgh, Pennsylvania; died 16 October 1990 in New York City (Scott DeVeaux/Gary Giddins record the dates; the American National Biography entry is titled \"Blakey, Art (1919-1990), jazz drummer and bandleader\", doi:10.1093/anb/9780198606697.article.1802592, retrieved 2026-08-20). What the BANDLEADER chair takes is the documented practice of running a band as an INSTITUTION THAT OUTLIVES ITS PLAYERS. From 1954 until his death Blakey led the Jazz Messengers through roughly two dozen lineups, seating young players, developing them, and releasing them onward \u2014 Horace Silver, Clifford Brown, Lee Morgan, Wayne Shorter, Freddie Hubbard, Keith Jarrett, Wynton Marsalis among them \u2014 while the band itself persisted as the durable thing. The disposition the chair takes is that of the seat rather than the incumbent: the leader calls the tune, counts it off, seats the players, judges the take, and stops the band when it is wrong, and does not play the horn. Grove Music Online's entry (Lewis Porter, 2003, doi:10.1093/gmo/9781561592630.article.j046400, retrieved 2026-08-20) records the Messengers as the defining vehicle of that practice. Nothing of the man's biography beyond this working disposition is claimed or carried."
+    }
+  ],
+  "lineage_edges": [
+    {
+      "institution_slug": "coltrane",
+      "edge_type": "descends-from",
+      "from_node": "law:coltrane",
+      "to_node": "forebear:crawford-ostrom-adico",
+      "kind": "attribution",
+      "source": {
+        "doi": "10.2307/2082975",
+        "evidence_grade": "attestation",
+        "locator": "src/genome_schema.ts:356",
+        "note": "cited in the genome source; the primary was not fetched in this run, so the grade is attestation and not archive"
+      }
+    },
+    {
+      "institution_slug": "coltrane",
+      "edge_type": "descends-from",
+      "from_node": "law:coltrane",
+      "to_node": "forebear:makinson-vandertorre-io-logic",
+      "kind": "attribution",
+      "source": {
+        "doi": "10.1023/A:1004748624537",
+        "evidence_grade": "attestation",
+        "locator": "src/genome_schema.ts (InstitutionalLawSchema)",
+        "note": "cited in the genome source; the primary was not fetched in this run, so the grade is attestation and not archive"
+      }
+    },
+    {
+      "institution_slug": "coltrane",
+      "edge_type": "descends-from",
+      "from_node": "type:admissibility-result",
+      "to_node": "forebear:xacml-3-decision-model",
+      "kind": "attribution",
+      "source": {
+        "evidence_grade": "attestation",
+        "locator": "src/genome_schema.ts (AdmissibilityResult)",
+        "note": "named in prose without a doi or url. Under system.coltrane.institutional-model the citation rule refuses a citation carrying neither \u2014 recorded here as an attestation so the gap is visible, never laundered upward to archive"
+      }
+    },
+    {
+      "institution_slug": "coltrane",
+      "edge_type": "descends-from",
+      "from_node": "type:tour",
+      "to_node": "forebear:gasb-54-encumbrance",
+      "kind": "attribution",
+      "source": {
+        "evidence_grade": "attestation",
+        "locator": "docs/specs/the-binding-middle-place.md",
+        "note": "named in prose without a doi or url. Under system.coltrane.institutional-model the citation rule refuses a citation carrying neither \u2014 recorded here as an attestation so the gap is visible, never laundered upward to archive"
+      }
+    },
+    {
+      "institution_slug": "coltrane",
+      "edge_type": "descends-from",
+      "from_node": "agent:bandleader",
+      "to_node": "forebear:blakey-art",
+      "kind": "attribution",
+      "source": {
+        "figure": "Art Blakey",
+        "lifespan": "11 October 1919 - 16 October 1990",
+        "recordings": [
+          "A Night at Birdland (Blue Note BLP 5037/5038, recorded 21 February 1954)",
+          "Moanin' (Blue Note BLP 4003, recorded 30 October 1958)"
+        ],
+        "reference_works": [
+          "American National Biography, \"Blakey, Art (1919-1990), jazz drummer and bandleader\", doi:10.1093/anb/9780198606697.article.1802592 (retrieved 2026-08-20)",
+          "Grove Music Online, Lewis Porter, \"Blakey, Art (jazz)\", doi:10.1093/gmo/9781561592630.article.j046400 (retrieved 2026-08-20)"
+        ],
+        "attributed_disposition": "running a band as an institution that outlives its players: seating them, developing them, releasing them onward across roughly two dozen Jazz Messengers lineups from 1954 to 1990, while the band itself persisted as the durable thing. The seat calls the tune, judges the take and stops the band; it does not play.",
+        "evidence_grade": "attestation",
+        "note": "The two reference-work DOIs were dereferenced through api.crossref.org on 2026-08-20 and returned matching author, year and title. The recording details are carried from the standard Blue Note discography and were NOT independently dereferenced, so this edge is graded attestation rather than archive."
+      }
+    }
+  ]
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@eir-labs/coltrane",
-  "version": "0.9.4",
-  "description": "A methodology engine — a typed substrate for defining agents, composing multi-phase standards, dispatching gigs, and sealing every output to a content-addressed ledger. Ships as an MCP server.",
+  "version": "0.11.0",
+  "description": "A methodology engine \u2014 a typed substrate for defining agents, composing multi-phase standards, dispatching gigs, and sealing every output to a content-addressed ledger. Ships as an MCP server.",
   "type": "module",
   "license": "Apache-2.0",
   "author": "Eir",
@@ -63,6 +63,8 @@
     "domain_types",
     "core_types",
     "institutions",
+    "tours",
+    "evals",
     "README.md",
     "LICENSE"
   ],
@@ -76,12 +78,13 @@
     "test": "vitest run",
     "test:watch": "vitest",
     "typecheck": "tsc --noEmit",
-    "verify": "tsc --noEmit && vitest run && npm run test:failure-modes && npm run test:honest-broker && npm run test:security && npm run e2e:offline",
+    "verify": "tsc --noEmit && vitest run && npm run test:failure-modes && npm run test:honest-broker && npm run test:security && npm run e2e:offline && npm run test:room",
     "e2e": "npm run build && vitest run --config tests/e2e/vitest.config.ts",
     "e2e:offline": "npm run build && vitest run --config tests/e2e/vitest.offline.config.ts",
     "test:failure-modes": "vitest run --config tests/failure_modes/vitest.config.ts",
     "test:honest-broker": "vitest run --config tests/honest_broker/vitest.config.ts",
     "test:security": "vitest run --config tests/security/vitest.config.ts",
+    "test:room": "vitest run --config tests/venue_live/vitest.config.ts",
     "lint:imports": "git ls-files 'src/**/*.ts' 'src/**/*.tsx' 'src/**/*.js' 'src/**/*.mjs' 'src/**/*.cjs' 'tests/**/*.ts' 'tests/**/*.tsx' 'tests/**/*.js' 'tests/**/*.mjs' 'tests/**/*.cjs' | bash scripts/check_imports.sh"
   },
   "dependencies": {

package/skills/non-vacuity-probe/fixtures/fixture-001.json

@@ -0,0 +1,17 @@
+{
+  "id": "finds-the-known-hollow",
+  "description": "Non-vacuity of the probe ITSELF: run it against a file known to contain all-negative laws and it must find them. A probe that returns a clean verdict on a hollow suite is the defect it exists to detect, one level up.",
+  "input": {
+    "path": "tests/spec_venue_realization_substrate.test.ts"
+  },
+  "assertions": [
+    {
+      "path": "total_laws",
+      "op": "is_number"
+    },
+    {
+      "path": "hollow_count",
+      "op": "is_number"
+    }
+  ]
+}

package/skills/non-vacuity-probe/meta.json

@@ -0,0 +1,12 @@
+{
+  "slug": "non-vacuity-probe",
+  "version": 1,
+  "skill_type": "verification",
+  "input_type": "test-target",
+  "output_type": "test-verdict",
+  "determinism_ratio": 0.85,
+  "permission": {
+    "tier": 0
+  },
+  "description": "Ask whether a suite of laws can be fooled by an implementation that produces NOTHING. Earned, not theorised: a committed suite of 40 laws governing what a generated configuration must never contain was measured against a function returning an empty object, and 32 passed — including every one of the six laws its own specification called the sharpest. Every assertion was real; the thing they asserted about was absent. Two hollow-passable shapes, and this finds both: a law whose assertions are ALL negative, since an absence over an empty document is satisfied by producing nothing; and an assertion INSIDE a loop over a discovered collection with no non-empty guard, since an empty collection runs the body zero times and reports a pass having examined nothing. The second is the one that hides. The code half counts; the model half is consulted only for remedies and for borderline calls, which is why the iterables are always reported rather than only a classification."
+}

package/skills/non-vacuity-probe/skill.md

@@ -0,0 +1,27 @@
+# Non-vacuity probe
+
+A green suite is evidence only if it could have gone red. Before trusting one, try to fool it.
+
+## The measurement that produced this
+
+A committed suite of 40 laws pinned what a generated container configuration must never contain — no runtime socket, no host networking, no host PID namespace, no privileged flag, no added capabilities, no underived mount. Each was its own law with a real assertion. The suite was green.
+
+Replacing the function that generates the configuration with one returning `{}` left **32 of the 40 still passing**, including all six escape laws.
+
+Nothing was faked. Every assertion ran. They asserted absences over a document that did not exist.
+
+## The two shapes
+
+**All-negative laws.** A law whose every assertion is `.not.*` is satisfied by producing nothing at all. The fix is a presence anchor in the same block: establish that the thing being examined exists, *then* ask what is missing from it. Anchor structurally — a rendered document has services and the room is one of them — not on an incidental string.
+
+**Loop assertions with no guard.** The sharper one, because it hides. An assertion inside a `for` over a discovered collection never executes when the collection is empty, and the law reports a pass having examined nothing. Assert the collection is non-empty first.
+
+## Reading the output
+
+`hollow_passable` is a classification and `iterables` is the evidence. Check the evidence. A loop over an inline array or a SCREAMING_CASE fixture is statically non-empty and safe; a loop over a `matchAll`, a `filter`, or a variable assigned from a call is not. The probe exempts the first two and reports what it iterated either way, so a borderline call is settled by looking rather than by trusting.
+
+## Use it on a suite you believe is correct
+
+That is the point of it. This probe was itself wrong five times — it counted only in-block assertions and missed anchors reached through helpers; its guard window was too narrow to clear a sentence-length assertion message; it counted literal loops with a non-global regex. Each version was found by running it against laws that were already right and reading every hit.
+
+A tool with a high false-positive rate is worse than no tool, because it teaches the reader to skip it — which is how the original vacuity survived a whole specification cycle.

package/skills/non-vacuity-probe/skill.mjs

@@ -0,0 +1,81 @@
+import { readFileSync } from "node:fs";
+
+const POSITIVE = /\.(toContain|toBe|toEqual|toMatch|toThrow|toBeTruthy|toBeDefined|toBeInstanceOf|toBeTypeOf|toBeGreaterThan|toBeGreaterThanOrEqual|toBeLessThan|toHaveLength|toHaveProperty)\b/;
+const NEGATIVE = /\.not\./;
+// The window must clear an assertion MESSAGE, which in a well-commented suite is a full sentence.
+// A 60-char window missed a guard that was actually there — a false positive on an already-fixed
+// law, which is the worst kind for a tool meant to be trusted.
+const NONEMPTY = /\.length\b[\s\S]{0,400}?(toBeGreaterThan|toBeGreaterThanOrEqual)|not\.toHaveLength\(\s*0\s*\)|toHaveLength\(\s*[1-9]|\.length\s*[>!]==?\s*0/;
+// A loop over an INLINE ARRAY or a SCREAMING_CASE fixture cannot run zero times, so it is not a
+// vacuity risk. Only a DISCOVERED collection is. Both GLOBAL: a law may hold several statically
+// safe loops, and a non-global match counts at most one.
+const LITERAL_LOOP = /\bfor\s*\((?:const|let|var)\s+\w+\s+of\s*\[/g;
+const FIXTURE_LOOP = /\bfor\s*\((?:const|let|var)\s+\w+\s+of\s+[A-Z][A-Z0-9_]*\b/g;
+
+// A law may anchor through a HELPER rather than inline — `const doc = await rendered();` where
+// `rendered()` asserts the document exists. Counting only in-block assertions marks every such law
+// a false positive, and ten false positives train a reader to ignore the tool.
+function anchoringHelpers(src) {
+  const names = new Set();
+  const re = /(?:const|function)\s+([A-Za-z_$][\w$]*)\s*(?:=|\()/g;
+  let m;
+  while ((m = re.exec(src))) {
+    const slice = src.slice(m.index, m.index + 1400);
+    const end = slice.search(/\n(?:const|function|describe|it)\b/);
+    const body = end > 0 ? slice.slice(0, end) : slice;
+    if (POSITIVE.test(body) && /expect\(/.test(body)) names.add(m[1]);
+  }
+  return names;
+}
+
+export default function run(input) {
+  const path = input && input.path ? String(input.path) : "";
+  let src = "";
+  try { src = readFileSync(path, "utf-8"); }
+  catch { return { laws: [], total_laws: 0, hollow_count: 0, error: `cannot read ${path}` }; }
+
+  const helpers = anchoringHelpers(src);
+  const helperCall = helpers.size ? new RegExp("\\b(" + [...helpers].join("|") + ")\\s*\\(") : null;
+
+  const laws = [];
+  let cur = null;
+  for (const line of src.split("\n")) {
+    const m = line.match(/\bit\(\s*["'`](.+?)["'`]/);
+    if (m) { if (cur) laws.push(finish(cur)); cur = { name: m[1], positive: 0, negative: 0, body: [] }; continue; }
+    if (!cur) continue;
+    cur.body.push(line);
+    if (helperCall && helperCall.test(line)) cur.positive++;
+    if (/expect\(/.test(line) || /\.(to[A-Z])/.test(line)) {
+      if (NEGATIVE.test(line)) cur.negative++;
+      else if (POSITIVE.test(line)) cur.positive++;
+    }
+  }
+  if (cur) laws.push(finish(cur));
+
+  const hollow = laws.filter((l) => l.hollow_passable);
+  return {
+    path,
+    laws,
+    total_laws: laws.length,
+    hollow_count: hollow.length,
+    verdict: hollow.length === 0
+      ? "no law in this file is satisfied by an implementation that produces nothing"
+      : `${hollow.length} of ${laws.length} laws pass against an implementation that produces nothing`,
+  };
+}
+
+function finish(l) {
+  const text = l.body.join("\n");
+  const loops = (text.match(/\bfor\s*\(|\.forEach\(/g) || []).length;
+  const safe = (text.match(LITERAL_LOOP) || []).length + (text.match(FIXTURE_LOOP) || []).length;
+  const loop = loops > safe;
+  const guard = NONEMPTY.test(text);
+  const iterables = (text.match(/\bfor\s*\((?:const|let|var)\s+\w+\s+of\s+([^)]{0,48})/g) || [])
+    .map((x) => x.replace(/^.*\bof\s+/, "").trim());
+  const reasons = [];
+  if (l.positive === 0 && l.negative > 0) reasons.push("all assertions are negative — an absence over nothing is satisfied");
+  if (loop && !guard) reasons.push("assertion inside a loop with no non-empty guard — an empty collection examines nothing");
+  // Always report what it iterates, so a reader settles a borderline call in one glance instead of
+  // trusting the classifier.
+  return { name: l.name, positive: l.positive, negative: l.negative, iterables, hollow_passable: reasons.length > 0, why: reasons.join("; ") || null };
+}

package/standards/lineage-adopt-v0.json

@@ -0,0 +1,37 @@
+{
+  "slug": "lineage-adopt-v0",
+  "domain": "lineage",
+  "status": "active",
+  "description": "A LINEAGE ADOPTION brings an already-composed lineage-record to a human seat and nowhere else. It runs no scout, draws no edge, and composes nothing: its single chair is the approval office, seeded directly with the record under review. It exists because the approve office was reachable only as the tail of lineage-pass-v1, which meant a record composed by any other route could never be promoted. lineage-reweave-v0 is exactly that route \u2014 it re-draws the synthesis over reused and deepened seeds and seals a lineage-record with no human chair anywhere in its phase graph, so the strongest record a lineage effort produces was structurally unadoptable. A composition standard should not have to carry an approval office to make its output signable, and an approval office should not have to re-run a synthesis to reach a record. This standard is that seam, held once.",
+  "agent_slugs": [],
+  "phases": [
+    {
+      "name": "approve",
+      "chairs": [
+        {
+          "role": "approve",
+          "agent_slug": "",
+          "human": true,
+          "depends_on": [],
+          "input_contract": [
+            "lineage-record",
+            "lineage-adoption-target"
+          ],
+          "output_contract": [
+            "lineage-verdict"
+          ],
+          "optional_outputs": [],
+          "required_skills": []
+        }
+      ],
+      "intent": "A human approval office, and the only seat in this standard. The incumbent reviews the seeded lineage-record and either seals a passing lineage-verdict \u2014 which is what promotes the record to first-class lineage attached to an institution \u2014 or refuses it. An ENTRY chair (depends_on []): the record is supplied by the dispatch payload rather than produced upstream, which is the whole point \u2014 a record composed anywhere, by a pass or by a reweave, can be brought here without re-running the work that made it. The chair is seeded with BOTH the record under review and the adoption target naming which institution it would ground \u2014 the attachment is a property of this act, not of the record or the verdict, so it arrives here and nowhere else. A run that reaches this office unapproved PARKS awaiting the seal; nothing is adopted on an absent yes, and a refusal is a decision that gets recorded rather than a silence that gets forgotten."
+    }
+  ],
+  "input_types": [
+    "lineage-record",
+    "lineage-adoption-target"
+  ],
+  "output_types": [
+    "lineage-verdict"
+  ]
+}