@equationalapplications/core-llm-wiki 7.5.0 → 7.6.0

package/README.md

@@ -310,6 +310,36 @@ await wiki.promoteDraft(facts[0].id, 'user-1', { by: 'human:alice' }); // → st
 
 `promoteDraft` throws `WikiDraftNotFound` when no live draft with that id exists for the entity. The error is contextless by design. Promotion does not change `updated_at`, so a promoted fact keeps its recency position.
 
+## Grounding
+
+Opt-in, deterministic evidence check for LLM-authored facts. When on, writers you choose must quote the source they were shown. A fact whose quotes are missing or not found is stored as a `draft` (see [Draft Review](#draft-review)), not rejected. A fact whose quotes all check out is stored `stable` with a `process:grounding-check` verifier, so its `trustTier` is `machine-confirmed`. Default off: 7.x write behavior is unchanged.
+
+```ts
+new WikiMemory(db, {
+  llmProvider,
+  config: {
+    grounding: {
+      mode: 'draft',            // 'off' (default) | 'draft'
+      writers: ['ingest'],      // default ['ingest']; also 'librarian', 'heal'
+      minEvidenceChars: 20,     // shorter quotes count as absent
+      maxEvidence: 3,           // quotes asked for per fact
+      maxEvidenceChars: 300,
+    },
+  },
+});
+```
+
+- **What counts as source.**
+  - Ingest: the chunk text.
+  - Librarian: the `summary` of each event in the prompt.
+  - Heal: the `summary` of each recent event in the prompt, plus the bodies of non-draft document anchors. When heal is a writer, anchors are shown with their body clipped to 800 characters.
+  - Instructions, the ontology manifest, existing facts and identifiers never count, so a model cannot ground a claim by quoting them.
+- **The check.** Both sides are normalized with NFKC, whitespace runs collapse to one space, and matching is case-sensitive. A fact with more than 10 quotes, or any quote not found, fails.
+- **Diagnostics.** `grounding_missing` (reasons `no_evidence`, `evidence_too_short`) and `grounding_failed` (reasons `quote_not_found`, `too_many_quotes`), one per fact, with the new fact's `factId`. Quotes are never included.
+- **`upsertGraph`** nodes are host-supplied and never grounded.
+- **Librarian and heal** synthesize across events, so their pass rates are unknown. Measure them on your own event log before opting them in.
+- Evidence quotes are not stored.
+
 ## Pluggable Vector Retrieval
 
 When your entity corpus grows, in-process cosine similarity scoring becomes a bottleneck. The optional **`VectorRanker`** interface lets you delegate semantic ranking to [**sqlite-vec**](https://github.com/asg017/sqlite-vec), [**sqlite-vss**](https://github.com/asg017/sqlite-vss), or an external vector database while `WikiMemory` handles embedding validation, hybrid scoring, and tier-2 row hydration.

package/dist/{chunk-3P7FAKJA.mjs → chunk-YBWE26XR.mjs}

@@ -1513,6 +1513,19 @@ function validateTags(tags) {
   if (!Array.isArray(tags)) return [];
   return tags.filter((t) => typeof t === "string").map((t) => t.trim().toLowerCase()).filter((t) => t.length > 0 && t.length <= 40).slice(0, 6);
 }
+var MAX_EVIDENCE_QUOTES = 10;
+function normalizeEvidence(raw) {
+  if (!Array.isArray(raw)) return void 0;
+  const out = [];
+  for (const entry of raw) {
+    if (typeof entry !== "string") continue;
+    const trimmed = entry.trim();
+    if (!trimmed) continue;
+    out.push(trimmed);
+    if (out.length > MAX_EVIDENCE_QUOTES) break;
+  }
+  return out;
+}
 function validateFact(fact) {
   if (typeof fact?.title !== "string" || typeof fact?.body !== "string") return null;
   const title = clip(fact.title, 80);
@@ -1520,13 +1533,17 @@ function validateFact(fact) {
   if (!title || !body) return null;
   let confidence = fact.confidence;
   if (confidence !== "certain" && confidence !== "tentative") confidence = "inferred";
-  return {
+  const valid = {
     ...fact,
     title,
     body,
     confidence,
     tags: validateTags(fact.tags)
   };
+  const evidence = normalizeEvidence(fact.evidence);
+  if (evidence) valid.evidence = evidence;
+  else delete valid.evidence;
+  return valid;
 }
 function validateTask(task) {
   if (typeof task?.description !== "string") return null;
@@ -1602,17 +1619,94 @@ Return ONLY a valid JSON object matching this schema:
 }
 If no manifest type fits a fact, omit that fact from "classifications" entirely \u2014 do not guess.
 When echoing an existing fact's title verbatim into "target_title", preserve every JSON escape sequence (\\", \\n, \\\\, \\/) exactly as it appeared in the input body \u2014 do not strip backslashes, do not add unescaped quotes. Do not return markdown, just raw JSON.`;
+var GROUNDING_SOURCE = {
+  ingest: { key: "facts", source: "the document chunk" },
+  librarian: { key: "facts", source: 'the "summary" text of the events' },
+  heal: { key: "newFacts", source: 'the "summary" text of the recent events or the "body" text of the document anchors' }
+};
+function groundingEvidenceBlock(writer, cfg) {
+  const { key, source } = GROUNDING_SOURCE[writer];
+  return `EVIDENCE REQUIREMENT: every object in "${key}" must also carry an "evidence" array of 1 to ${cfg.maxEvidence} quotes. Each quote must be an exact substring copied character-for-character from ${source} (the SOURCE section), at least ${cfg.minEvidenceChars} characters long. Do not paraphrase. Do not quote these instructions, the ontology manifest, or any existing fact. A fact whose quotes cannot be found in the SOURCE section is stored as an unreviewed draft.
+"evidence": ["exact substring copied from the SOURCE section"]`;
+}
 
 // src/utils/healConstants.ts
 var HEAL_MAX_ANCHORS = 50;
 var HEAL_ANCHORS_PER_CANDIDATE = 4;
 var HEAL_MAX_FACT_BODY_CHARS_L3 = 4e3;
 var HEAL_MAX_TASKS = 50;
+var HEAL_ANCHOR_BODY_CHARS = 800;
+
+// src/utils/grounding.ts
+var GROUNDING_VERIFIER = "process:grounding-check";
+var WRITERS = ["ingest", "librarian", "heal"];
+function positiveInt(value, fallback) {
+  return typeof value === "number" && Number.isFinite(value) && value >= 1 ? Math.floor(value) : fallback;
+}
+function resolveGrounding(config) {
+  if (!config || config.mode !== "draft") return null;
+  const writers = Array.isArray(config.writers) ? config.writers.filter((w) => WRITERS.includes(w)) : ["ingest"];
+  return {
+    writers: new Set(writers),
+    minEvidenceChars: positiveInt(config.minEvidenceChars, 20),
+    // Never ask for more quotes than checkGrounding accepts (MAX_EVIDENCE_QUOTES).
+    maxEvidence: Math.min(MAX_EVIDENCE_QUOTES, positiveInt(config.maxEvidence, 3)),
+    maxEvidenceChars: positiveInt(config.maxEvidenceChars, 300)
+  };
+}
+function normalizeForGrounding(text) {
+  return text.normalize("NFKC").replace(/\s+/g, " ").trim();
+}
+function buildGroundingCorpus(parts) {
+  return parts.filter((p) => typeof p === "string").map(normalizeForGrounding);
+}
+function checkGrounding(evidence, normalizedCorpus, cfg) {
+  const quotes = evidence ?? [];
+  if (quotes.length > MAX_EVIDENCE_QUOTES) return { status: "failed", reason: "too_many_quotes" };
+  if (quotes.length === 0) return { status: "missing", reason: "no_evidence" };
+  const qualifying = quotes.map(normalizeForGrounding).filter((q) => q.length >= cfg.minEvidenceChars);
+  if (qualifying.length === 0) return { status: "missing", reason: "evidence_too_short" };
+  if (qualifying.some((q) => !normalizedCorpus.some((part) => part.includes(q)))) {
+    return { status: "failed", reason: "quote_not_found" };
+  }
+  return {
+    status: "grounded",
+    retained: qualifying.slice(0, cfg.maxEvidence).map((q) => safeSlice(q, 0, cfg.maxEvidenceChars))
+  };
+}
+function groundingOutcome(verdict, now) {
+  if (verdict.status === "grounded") {
+    return {
+      trust: {
+        lifecycle_status: "stable",
+        okf_verified: [{ by: GROUNDING_VERIFIER, at: new Date(now).toISOString() }],
+        last_verified_at: now,
+        last_verified_by: GROUNDING_VERIFIER
+      }
+    };
+  }
+  return {
+    trust: { lifecycle_status: "draft" },
+    diagnostic: { code: verdict.status === "missing" ? "grounding_missing" : "grounding_failed", reason: verdict.reason }
+  };
+}
 
 // src/services/PromptService.ts
 var PromptService = class {
-  constructor(globalOverrides) {
+  constructor(globalOverrides, grounding = null) {
     this.globalOverrides = globalOverrides;
+    this.grounding = grounding;
+  }
+  /** The resolved grounding config when `writer` is in `grounding.writers`; otherwise null (spec §6.2). */
+  groundingFor(writer) {
+    return this.grounding?.writers.has(writer) ? this.grounding : null;
+  }
+  /** Appended after any override and after ontology context, so it is always last. */
+  appendGrounding(systemPrompt, writer) {
+    const cfg = this.groundingFor(writer);
+    return cfg ? `${systemPrompt}
+
+${groundingEvidenceBlock(writer, cfg)}` : systemPrompt;
   }
   hydrate(template, variables) {
     return template.replace(/\{\{\s*(\w+)\s*\}\}/g, (_match, key) => {
@@ -1642,13 +1736,13 @@ ${ctx.ontologyModeInstructions}`;
     const hasDocumentChunk = /\{\{\s*documentChunk\s*\}\}/.test(template);
     if (hasDocumentChunk || this.hasOntologyPlaceholders(template)) {
       return {
-        systemPrompt: this.buildSystemPrompt(template, { documentChunk }, ontologyContext),
+        systemPrompt: this.appendGrounding(this.buildSystemPrompt(template, { documentChunk }, ontologyContext), "ingest"),
         userPrompt: hasDocumentChunk ? "Please extract the facts." : `Document Chunk:
 ${documentChunk}`
       };
     }
     return {
-      systemPrompt: this.appendOntology(template, ontologyContext),
+      systemPrompt: this.appendGrounding(this.appendOntology(template, ontologyContext), "ingest"),
       userPrompt: `Document Chunk:
 ${documentChunk}`
     };
@@ -1657,23 +1751,27 @@ ${documentChunk}`
     const template = runtimeOverride ?? this.globalOverrides?.librarianSystemPrompt ?? LIBRARIAN_SYSTEM_PROMPT;
     const hasEvents = /\{\{\s*events\s*\}\}/.test(template);
     const hasCurrentFacts = /\{\{\s*currentFacts\s*\}\}/.test(template);
+    const eventsShown = hasEvents || !hasCurrentFacts;
+    const corpusField = this.groundingFor("librarian") ? { groundingCorpus: buildGroundingCorpus(eventsShown ? events.map(summaryOf) : []) } : {};
     if (hasEvents || hasCurrentFacts || this.hasOntologyPlaceholders(template)) {
       return {
-        systemPrompt: this.buildSystemPrompt(template, { events, currentFacts }, ontologyContext),
+        systemPrompt: this.appendGrounding(this.buildSystemPrompt(template, { events, currentFacts }, ontologyContext), "librarian"),
         userPrompt: hasEvents || hasCurrentFacts ? "Please synthesize the context." : `Events:
 ${JSON.stringify(events, null, 2)}
 
 Current Facts:
-${JSON.stringify(currentFacts, null, 2)}`
+${JSON.stringify(currentFacts, null, 2)}`,
+        ...corpusField
       };
     }
     return {
-      systemPrompt: this.appendOntology(template, ontologyContext),
+      systemPrompt: this.appendGrounding(this.appendOntology(template, ontologyContext), "librarian"),
       userPrompt: `Events:
 ${JSON.stringify(events, null, 2)}
 
 Current Facts:
-${JSON.stringify(currentFacts, null, 2)}`
+${JSON.stringify(currentFacts, null, 2)}`,
+      ...corpusField
     };
   }
   /**
@@ -1703,40 +1801,54 @@ ${JSON.stringify(currentFacts, null, 2)}`
     const effectiveEvents = attemptLevel >= 2 ? [] : recentEvents;
     const maxAnchors = Math.max(1, Math.min(HEAL_MAX_ANCHORS, healCandidates.length * HEAL_ANCHORS_PER_CANDIDATE));
     const effectiveAnchors = documentAnchors.slice(0, maxAnchors);
+    const template = runtimeOverride ?? this.globalOverrides?.healSystemPrompt ?? HEAL_SYSTEM_PROMPT;
+    const hasRecentEvents = /\{\{\s*recentEvents\s*\}\}/.test(template);
+    const hasDocumentAnchors = /\{\{\s*documentAnchors\s*\}\}/.test(template);
+    const usesPlaceholders = /\{\{\s*healCandidates\s*\}\}/.test(template) || hasDocumentAnchors || /\{\{\s*allTasks\s*\}\}/.test(template) || hasRecentEvents;
+    const healGrounding = this.groundingFor("heal");
+    const promptAnchors = healGrounding ? effectiveAnchors.map(toGroundingAnchor) : effectiveAnchors;
+    const eventsShown = !usesPlaceholders || hasRecentEvents;
+    const anchorsShown = !usesPlaceholders || hasDocumentAnchors;
+    const groundingCorpus = healGrounding ? buildGroundingCorpus([
+      ...eventsShown ? effectiveEvents.map(summaryOf) : [],
+      ...anchorsShown ? effectiveAnchors.map((a, i) => ({ status: a?.lifecycle_status, shown: promptAnchors[i] })).filter((x) => x.status !== "draft").map((x) => x.shown?.body) : []
+    ]) : null;
     const { shapedCandidates, degraded } = applyBodyTruncation(
       healCandidates,
       attemptLevel,
       bodyTruncationChars
     );
-    const template = runtimeOverride ?? this.globalOverrides?.healSystemPrompt ?? HEAL_SYSTEM_PROMPT;
-    if (/\{\{\s*healCandidates\s*\}\}/.test(template) || /\{\{\s*documentAnchors\s*\}\}/.test(template) || /\{\{\s*allTasks\s*\}\}/.test(template) || /\{\{\s*recentEvents\s*\}\}/.test(template)) {
+    const corpusField = groundingCorpus !== null ? { groundingCorpus } : {};
+    if (usesPlaceholders) {
       return {
         prompts: {
-          systemPrompt: this.hydrate(template, {
+          systemPrompt: this.appendGrounding(this.hydrate(template, {
             healCandidates: shapedCandidates,
-            documentAnchors: effectiveAnchors,
+            documentAnchors: promptAnchors,
             allTasks: effectiveTasks,
             recentEvents: effectiveEvents
-          }),
+          }), "heal"),
           userPrompt: "Please heal the memory graph."
         },
-        degraded
+        degraded,
+        ...corpusField
       };
     }
     return {
       prompts: {
-        systemPrompt: template,
+        systemPrompt: this.appendGrounding(template, "heal"),
         userPrompt: `Heal Candidates:
 ${JSON.stringify(shapedCandidates, null, 2)}
 Document Anchors (DO NOT MODIFY OR DELETE):
-${JSON.stringify(effectiveAnchors, null, 2)}
+${JSON.stringify(promptAnchors, null, 2)}
 All Tasks:
 ${JSON.stringify(effectiveTasks, null, 2)}
 Recent Events:
 ${JSON.stringify(effectiveEvents, null, 2)}
 The following document anchors are provided for contradiction detection only. Do not include them in \`downgraded\`, \`deleted\`, or \`newFacts\`.`
       },
-      degraded
+      degraded,
+      ...corpusField
     };
   }
   buildOntologyBackfillPrompt(facts, runtimeOverride, ontologyContext) {
@@ -1786,6 +1898,19 @@ function applyBodyTruncation(candidates, attemptLevel, bodyTruncationChars) {
   }
   return { shapedCandidates, degraded };
 }
+function summaryOf(event) {
+  return event?.summary;
+}
+function toGroundingAnchor(anchor) {
+  if (typeof anchor !== "object" || anchor === null) return anchor;
+  const a = anchor;
+  return {
+    id: a.id,
+    title: a.title,
+    source_ref: a.source_ref,
+    body: typeof a.body === "string" ? safeSlice(a.body, 0, HEAL_ANCHOR_BODY_CHARS) : ""
+  };
+}
 
 // src/utils/chunkingDefaults.ts
 var DEFAULT_MAX_CHUNK_LENGTH = 12e3;
@@ -1913,7 +2038,7 @@ var IngestionService = class {
     this.jobManager = jobManager;
     this.embeddingService = embeddingService;
     this.ontologyService = ontologyService;
-    this.promptService = promptService ?? new PromptService(this.options.config?.prompts);
+    this.promptService = promptService ?? new PromptService(this.options.config?.prompts, resolveGrounding(this.options.config?.grounding));
   }
   async ingestDocument(entityId, params, opts) {
     const sourceRef = normalizeSourceRef(params.sourceRef);
@@ -1946,6 +2071,7 @@ var IngestionService = class {
       const { chunks, truncated } = chunkText(params.documentChunk, maxChunkLength, chunkOverlap);
       if (chunks.length === 0) return zeroChunkResult();
       const ontologyContext = await this.ontologyService?.buildPromptContext(entityId) ?? null;
+      const ingestGrounding = this.promptService.groundingFor("ingest");
       const chunkResults = await withConcurrency(
         chunks.map((chunk, chunkIndex) => async () => {
           const { systemPrompt, userPrompt } = this.promptService.buildIngestPrompt(
@@ -1969,11 +2095,16 @@ var IngestionService = class {
                 rejected.push({ itemIndex, reason: factRejectionReason(raw) });
               }
             });
+            const verdicts = ingestGrounding ? (() => {
+              const corpus = buildGroundingCorpus([chunk]);
+              return facts.map((f) => checkGrounding(f.evidence, corpus, ingestGrounding));
+            })() : [];
             return {
               status: "ok",
               facts,
               itemIndexes,
               rejected,
+              verdicts,
               ontology_updates: result2.ontology_updates
             };
           } catch (e) {
@@ -2018,6 +2149,7 @@ var IngestionService = class {
       const failures = [];
       const seen = /* @__PURE__ */ new Set();
       const orderedChunkFacts = [];
+      const groundingLedger = /* @__PURE__ */ new Map();
       const diagBuffer = new DiagnosticBuffer();
       const diagBase = { entityId, operation: "ingest", trigger: "call" };
       for (const [chunkIndex, slot] of chunkResults.entries()) {
@@ -2036,6 +2168,7 @@ var IngestionService = class {
           if (!seen.has(normalizedTitle)) {
             seen.add(normalizedTitle);
             dedupedFacts.push(fact);
+            if (ingestGrounding) groundingLedger.set(fact, { verdict: slot.verdicts[k], chunkIndex, itemIndex: slot.itemIndexes[k] });
           } else {
             diagBuffer.push({
               ...diagBase,
@@ -2072,7 +2205,7 @@ var IngestionService = class {
       try {
         if (failedChunks === 0) {
           const fullResult = await this.db.withTransactionAsync(async (tx) => {
-            return await this.runFullUpsertGraph(entityId, sourceRef, sourceHash, orderedChunkFacts, tx, diagBuffer);
+            return await this.runFullUpsertGraph(entityId, sourceRef, sourceHash, orderedChunkFacts, tx, diagBuffer, groundingLedger);
           });
           deletedSourceFactIds.push(...fullResult.deletedSourceFactIds);
           insertedFacts.push(...fullResult.insertedFacts);
@@ -2080,7 +2213,7 @@ var IngestionService = class {
           const partialResult = await this.db.withTransactionAsync(async (tx) => {
             const flat = [];
             for (const slot of orderedChunkFacts) flat.push(...slot.facts);
-            return await this.appendPartialFacts(entityId, sourceRef, flat, tx, diagBuffer);
+            return await this.appendPartialFacts(entityId, sourceRef, flat, tx, diagBuffer, groundingLedger);
           });
           insertedFacts.push(...partialResult.insertedDescriptors);
         }
@@ -2222,7 +2355,8 @@ var IngestionService = class {
         last_accessed_at: null,
         access_count: 0,
         deleted_at: null,
-        okf_type: normalized.okf_type
+        okf_type: normalized.okf_type,
+        ...opts?.nodeTrust?.get(node.id)
       };
       wikiFacts.push(wikiFact);
     }
@@ -2313,9 +2447,10 @@ var IngestionService = class {
    * On the partial path the caller never invokes this method; the empty
    * arrays stay empty.
    */
-  async runFullUpsertGraph(entityId, sourceRef, sourceHash, orderedChunkFacts, tx, diagBuffer) {
+  async runFullUpsertGraph(entityId, sourceRef, sourceHash, orderedChunkFacts, tx, diagBuffer, groundingLedger = /* @__PURE__ */ new Map()) {
     const deletedSourceFactIds = [];
     const insertedFacts = [];
+    const nodeTrust = /* @__PURE__ */ new Map();
     deletedSourceFactIds.push(...await this.entryRepo.findIdsBySource(entityId, sourceRef, null, tx, false));
     const titleIndex = /* @__PURE__ */ new Map();
     const existingFacts = await this.entryRepo.findRecentByEntityId(entityId, 500, tx, sourceRef);
@@ -2359,6 +2494,20 @@ var IngestionService = class {
           tags: fact.tags,
           confidence: fact.confidence
         });
+        const grounding = groundingLedger.get(fact);
+        if (grounding) {
+          const outcome = groundingOutcome(grounding.verdict, now);
+          nodeTrust.set(id, outcome.trust);
+          if (outcome.diagnostic) {
+            diagBuffer.push({
+              entityId,
+              operation: "ingest",
+              trigger: "call",
+              code: outcome.diagnostic.code,
+              detail: { factId: id, sourceRef, chunkIndex: grounding.chunkIndex, itemIndex: grounding.itemIndex, reason: outcome.diagnostic.reason }
+            });
+          }
+        }
         insertedFacts.push({ id, entity_id: entityId, title: fact.title, body: fact.body, tags: JSON.stringify(fact.tags) });
         titleIndex.set(normalizeTitleKey(fact.title), { id, okf_type: normalized.okf_type });
         if (normalized.edges.length > 0) {
@@ -2390,7 +2539,7 @@ var IngestionService = class {
       entityId,
       { sourceRef, sourceHash, nodes: hostNodes, edges: hostEdges },
       tx,
-      { strict: false, diag: { buffer: diagBuffer, operation: "ingest" } }
+      { strict: false, diag: { buffer: diagBuffer, operation: "ingest" }, ...nodeTrust.size > 0 ? { nodeTrust } : {} }
     );
     return { deletedSourceFactIds, insertedFacts };
   }
@@ -2414,7 +2563,7 @@ var IngestionService = class {
    * Runs INSIDE the caller's `tx`. Does not open a nested transaction.
    * Returns `{ inserted, skippedDuplicate }` for observability.
    */
-  async appendPartialFacts(entityId, sourceRef, dedupedFacts, tx, diagBuffer) {
+  async appendPartialFacts(entityId, sourceRef, dedupedFacts, tx, diagBuffer, groundingLedger = /* @__PURE__ */ new Map()) {
     const liveIds = await this.entryRepo.findIdsBySource(entityId, sourceRef, null, tx, false);
     const liveFacts = liveIds.length === 0 ? [] : await this.entryRepo.findByIds(liveIds, void 0, tx);
     const liveTitles = new Set(liveFacts.map((f) => normalizeTitleKey(f.title)));
@@ -2437,6 +2586,17 @@ var IngestionService = class {
       }
       liveTitles.add(normalizedTitle);
       const id = generateId("fact_");
+      const grounding = groundingLedger.get(fact);
+      const outcome = grounding ? groundingOutcome(grounding.verdict, now) : null;
+      if (grounding && outcome?.diagnostic) {
+        diagBuffer.push({
+          entityId,
+          operation: "ingest",
+          trigger: "call",
+          code: outcome.diagnostic.code,
+          detail: { factId: id, sourceRef, chunkIndex: grounding.chunkIndex, itemIndex: grounding.itemIndex, reason: outcome.diagnostic.reason }
+        });
+      }
       const wikiFact = {
         id,
         entity_id: entityId,
@@ -2455,7 +2615,8 @@ var IngestionService = class {
         last_accessed_at: null,
         access_count: 0,
         deleted_at: null,
-        okf_type: null
+        okf_type: null,
+        ...outcome?.trust
       };
       await this.entryRepo.upsert(wikiFact, tx);
       insertedDescriptors.push({
@@ -2809,7 +2970,7 @@ async function runBatched(args) {
     }
     let result;
     try {
-      result = parse(responseText, batch);
+      result = parse(responseText, batch, prompts);
     } catch (err) {
       await onFailure(batch, err, attemptLevel, false);
       return;
@@ -2890,7 +3051,7 @@ var MaintenanceService = class {
     this.jobManager = jobManager;
     this.embeddingService = embeddingService;
     this.ontologyService = ontologyService;
-    this.promptService = promptService ?? new PromptService(this.options.config?.prompts);
+    this.promptService = promptService ?? new PromptService(this.options.config?.prompts, resolveGrounding(this.options.config?.grounding));
   }
   async runPrune(entityId, options) {
     this.jobManager.acquireLock("prune", entityId);
@@ -3195,8 +3356,10 @@ var MaintenanceService = class {
       };
     });
     const ontologyContext = await this.ontologyService?.buildPromptContext(entityId) ?? null;
-    const { systemPrompt, userPrompt } = this.promptService.buildLibrarianPrompt(
-      events.reverse(),
+    const promptEvents = events.reverse();
+    const librarianGrounding = this.promptService.groundingFor("librarian");
+    const { systemPrompt, userPrompt, groundingCorpus: librarianCorpus = [] } = this.promptService.buildLibrarianPrompt(
+      promptEvents,
       currentFacts,
       promptOverride,
       ontologyContext
@@ -3265,6 +3428,10 @@ var MaintenanceService = class {
         const validationDrops = [];
         const normalized = this.ontologyService?.validateAndNormalizeFact(ontologyFact, manifest, { strict: false, drops: validationDrops }) ?? { okf_type: null, edges: [] };
         for (const drop of validationDrops) diagBuffer.push(edgeDropDiagnostic(drop, { ...diagBase, factId: id }));
+        const grounding = librarianGrounding ? groundingOutcome(checkGrounding(fact.evidence, librarianCorpus, librarianGrounding), now) : null;
+        if (grounding?.diagnostic) {
+          diagBuffer.push({ ...diagBase, code: grounding.diagnostic.code, detail: { factId: id, itemIndex: validFactItemIndexes[k], reason: grounding.diagnostic.reason } });
+        }
         const factObj = {
           id,
           entity_id: entityId,
@@ -3280,7 +3447,8 @@ var MaintenanceService = class {
           last_accessed_at: null,
           access_count: 0,
           deleted_at: null,
-          okf_type: normalized.okf_type
+          okf_type: normalized.okf_type,
+          ...grounding?.trust
         };
         await this.entryRepo.upsert(factObj, tx);
         insertedFacts.push({ id, entity_id: entityId, title: fact.title, body: fact.body, tags: JSON.stringify(fact.tags) });
@@ -3396,11 +3564,14 @@ var MaintenanceService = class {
     }
     const allTasks = await this.taskRepo.findAllPending([entityId], HEAL_MAX_TASKS);
     const recentEvents = await this.eventRepo.getRecent(entityId, 20);
+    const healGrounding = this.promptService.groundingFor("heal");
     const toPromptShape = (f) => {
       const { embedding: _embedding, embedding_blob: _blob, ...rest } = f;
-      return { ...rest, tags: typeof rest.tags === "string" ? JSON.parse(rest.tags) : rest.tags };
+      const shown = healGrounding ? (({ lifecycle_status: _l, okf_verified: _v, last_verified_at: _a, last_verified_by: _b, ...r }) => r)(rest) : rest;
+      return { ...shown, tags: typeof shown.tags === "string" ? JSON.parse(shown.tags) : shown.tags };
     };
     const anchorCache = /* @__PURE__ */ new Map();
+    const corpusByPrompt = /* @__PURE__ */ new WeakMap();
     const degraded = [];
     const outcome = await runBatched({
       items: healCandidates,
@@ -3413,9 +3584,10 @@ var MaintenanceService = class {
           // not overfetch the same 200 keyword hits a 25-fact batch once did.
           // buildHealPrompt applies the matching cap on its side — values must match.
           Math.min(HEAL_MAX_ANCHORS, batch.length * HEAL_ANCHORS_PER_CANDIDATE),
-          anchorCache
+          anchorCache,
+          healGrounding !== null
         );
-        const { prompts, degraded: batchDegraded } = await this.promptService.buildHealPrompt(
+        const { prompts, degraded: batchDegraded, groundingCorpus } = await this.promptService.buildHealPrompt(
           batch.map(toPromptShape),
           documentAnchors,
           allTasks,
@@ -3425,16 +3597,18 @@ var MaintenanceService = class {
           bodyTruncationChars
         );
         degraded.push(...batchDegraded);
+        if (groundingCorpus !== void 0) corpusByPrompt.set(prompts, groundingCorpus);
         return prompts;
       },
       call: (prompts) => this.options.llmProvider.generateText(prompts),
-      parse: (responseText, batch) => {
+      parse: (responseText, batch, prompts) => {
         const result = parseJsonResponse(responseText);
         return {
           batch,
           downgraded: Array.isArray(result.downgraded) ? result.downgraded : [],
           deleted: Array.isArray(result.deleted) ? result.deleted : [],
-          newFacts: Array.isArray(result.newFacts) ? result.newFacts : []
+          newFacts: Array.isArray(result.newFacts) ? result.newFacts : [],
+          corpus: corpusByPrompt.get(prompts) ?? null
         };
       },
       maxOutputTokens: this.options.llmProvider.maxOutputTokens,
@@ -3449,6 +3623,7 @@ var MaintenanceService = class {
     const safeDeletedSet = /* @__PURE__ */ new Set();
     const newFacts = [];
     const newFactItemIndexes = [];
+    const newFactCorpora = [];
     for (const batchResult of outcome.results) {
       const mutableIds = new Set(batchResult.batch.map((f) => f.id));
       for (const id of batchResult.downgraded) if (mutableIds.has(id)) safeDowngradedSet.add(id);
@@ -3456,6 +3631,7 @@ var MaintenanceService = class {
       batchResult.newFacts.forEach((raw, itemIndex) => {
         newFacts.push(raw);
         newFactItemIndexes.push(itemIndex);
+        newFactCorpora.push(batchResult.corpus);
       });
     }
     const safeDowngraded = Array.from(safeDowngradedSet);
@@ -3463,12 +3639,14 @@ var MaintenanceService = class {
     const diagBuffer = new DiagnosticBuffer();
     const validNewFacts = [];
     const validNewFactItemIndexes = [];
+    const validNewFactCorpora = [];
     newFacts.forEach((raw, k) => {
       const itemIndex = newFactItemIndexes[k];
       const valid = validateFact(raw);
       if (valid) {
         validNewFacts.push(valid);
         validNewFactItemIndexes.push(itemIndex);
+        validNewFactCorpora.push(newFactCorpora[k]);
       } else {
         diagBuffer.push({ ...diagBase, code: "fact_rejected", detail: { itemIndex, reason: factRejectionReason(raw) } });
       }
@@ -3498,6 +3676,10 @@ var MaintenanceService = class {
           continue;
         }
         const id = generateId("fact_");
+        const grounding = healGrounding ? groundingOutcome(checkGrounding(fact.evidence, validNewFactCorpora[k] ?? [], healGrounding), now) : null;
+        if (grounding?.diagnostic) {
+          diagBuffer.push({ ...diagBase, code: grounding.diagnostic.code, detail: { factId: id, itemIndex: validNewFactItemIndexes[k], reason: grounding.diagnostic.reason } });
+        }
         const factObj = {
           id,
           entity_id: entityId,
@@ -3512,7 +3694,8 @@ var MaintenanceService = class {
           updated_at: now,
           last_accessed_at: null,
           access_count: 0,
-          deleted_at: null
+          deleted_at: null,
+          ...grounding?.trust
         };
         await this.entryRepo.upsert(factObj, tx);
         insertedFacts.push({ id, entity_id: entityId, title: fact.title, body: fact.body, tags: JSON.stringify(fact.tags) });
@@ -3876,7 +4059,7 @@ var MaintenanceService = class {
    * batches that reduce to the same query share one lookup. Caller-owned and
    * per-pass — see the call site in doRunHeal.
    */
-  async _selectHealAnchors(entityId, batch, cap = HEAL_MAX_ANCHORS, cache) {
+  async _selectHealAnchors(entityId, batch, cap = HEAL_MAX_ANCHORS, cache, withBodies = false) {
     const query = batch.map((f) => f.title).join(" ").trim();
     if (!query) return [];
     const cached = cache?.get(query);
@@ -3889,7 +4072,7 @@ var MaintenanceService = class {
     const hitIds = hits.map((h) => h.id);
     const anchors = [];
     if (hitIds.length > 0) {
-      const rows = await this.entryRepo.findAnchorRowsByIds(entityId, hitIds);
+      const rows = withBodies ? await this.entryRepo.findAnchorRowsByIds(entityId, hitIds, void 0, { withBody: true }) : await this.entryRepo.findAnchorRowsByIds(entityId, hitIds);
       const byId = new Map(rows.map((r) => [r.id, r]));
       for (const id of hitIds) {
         const row = byId.get(id);
@@ -5423,6 +5606,6 @@ var WriteService = class {
   }
 };
 
-export { BaseRepository, DEFAULT_CHUNK_OVERLAP, DEFAULT_MAX_CHUNK_LENGTH, DEFAULT_MAX_EMBED_CHARS, DiagnosticBuffer, EMBED_CHARS_CEILING, EmbeddingService, HEAL_ANCHORS_PER_CANDIDATE, HEAL_BATCH_SIZE, HEAL_MAX_FACT_BODY_CHARS_L3, HEAL_MAX_TASKS, HEAL_RECHECK_MS, HOOK_TIMEOUT_MARKER, ImportExportService, IngestionService, JobManager, MaintenanceService, MetadataRepository, ONTOLOGY_BACKFILL_BATCH_SIZE, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, ONTOLOGY_BACKFILL_RECHECK_MS, ONTOLOGY_BACKFILL_SYSTEM_PROMPT, PromptService, PrunePartialFailureError, RetrievalService, SearchService, WikiBusyError, WikiDraftNotFound, WikiDuplicateHashError, WikiGraphNodeOwnershipConflict, WikiIngestEmptyError, WikiInvalidReadOptions, WikiParseError, WikiSourceRefHashCollision, WikiStrictOntologyViolation, WikiTransactionError, WriteService, __privateAdd, __privateGet, __privateSet, chunkText, configureRandomSource, emptyManifest, entitySummaryMetaKey, extractSqliteCode, generateId, normalizeSourceHash, normalizeSourceRef, normalizeTitleKey, parseEmbedding, resolveEdgeDefinitions, resolveNodeType, safeSlice, typeSatisfies, validateInlineEdges, validateManifest };
-//# sourceMappingURL=chunk-3P7FAKJA.mjs.map
-//# sourceMappingURL=chunk-3P7FAKJA.mjs.map
+export { BaseRepository, DEFAULT_CHUNK_OVERLAP, DEFAULT_MAX_CHUNK_LENGTH, DEFAULT_MAX_EMBED_CHARS, DiagnosticBuffer, EMBED_CHARS_CEILING, EmbeddingService, HEAL_ANCHORS_PER_CANDIDATE, HEAL_BATCH_SIZE, HEAL_MAX_FACT_BODY_CHARS_L3, HEAL_MAX_TASKS, HEAL_RECHECK_MS, HOOK_TIMEOUT_MARKER, ImportExportService, IngestionService, JobManager, MaintenanceService, MetadataRepository, ONTOLOGY_BACKFILL_BATCH_SIZE, ONTOLOGY_BACKFILL_MAX_PROMPT_CHARS, ONTOLOGY_BACKFILL_RECHECK_MS, ONTOLOGY_BACKFILL_SYSTEM_PROMPT, PromptService, PrunePartialFailureError, RetrievalService, SearchService, WikiBusyError, WikiDraftNotFound, WikiDuplicateHashError, WikiGraphNodeOwnershipConflict, WikiIngestEmptyError, WikiInvalidReadOptions, WikiParseError, WikiSourceRefHashCollision, WikiStrictOntologyViolation, WikiTransactionError, WriteService, __privateAdd, __privateGet, __privateSet, chunkText, configureRandomSource, emptyManifest, entitySummaryMetaKey, extractSqliteCode, generateId, normalizeSourceHash, normalizeSourceRef, normalizeTitleKey, parseEmbedding, resolveEdgeDefinitions, resolveGrounding, resolveNodeType, safeSlice, typeSatisfies, validateInlineEdges, validateManifest };
+//# sourceMappingURL=chunk-YBWE26XR.mjs.map
+//# sourceMappingURL=chunk-YBWE26XR.mjs.map