@inerrata-corporation/errata 2.0.16 → 2.0.17-dev.3407

package/errata.mjs

@@ -139,6 +139,7 @@ var init_castalia = __esm({
     ROUTING_REASONS = [
       /** Harness org (CTF lane, e2e battery, canary) — forced org-private. */
       "harness-clamp",
+      "witnessed-vulnerability-private",
       /** A signed gateway write target named the destination. */
       "signed-target-public",
       "signed-target-org",
@@ -1080,6 +1081,12 @@ function identityId(input) {
     }
     case "Claim":
       return canonicalClaimId(input.text, input.scope);
+    case "WitnessedVulnerability":
+      return genericCanonicalId("dvuln", {
+        workspaceId: input.workspaceId,
+        target: input.target.replace(/\\/g, "/").replace(/^\.\//, ""),
+        statement: canonicalClaimId(input.statement.trim())
+      });
     case "DesignProblem":
       return `${DESIGN_PROBLEM_PREFIX}${canonicalClaimId(input.statement.trim())}`.slice(
         0,
@@ -15849,7 +15856,7 @@ var init_edge_rules = __esm({
       // anchor anything at anything, e.g. at a public `Package`, quietly re-creating
       // the code↔collective bridge the membrane exists to prevent.
       ANCHORED_AT: {
-        from: ["Problem", "Solution", "RootCause", "Claim"],
+        from: ["Problem", "Vulnerability", "Solution", "RootCause", "Claim"],
         to: ["Symbol"]
       },
       // ── Security spine (v1 taxonomy.ts SECURITY_FORWARD_ONLY commentary) ──
@@ -15894,7 +15901,7 @@ var init_edge_rules = __esm({
       // `Component` joined the target set with OM-agent-anchors: an agent-named
       // component ("React Router") is the same knowledge→named-unit anchor shape as
       // a Tool — the knowledge is ABOUT it, not dependent on it.
-      CONCERNS: { from: ["Problem", "Solution", "RootCause", "Claim", "Pattern"], to: ["Tool", "Component"] },
+      CONCERNS: { from: ["Problem", "Vulnerability", "Solution", "RootCause", "Claim", "Pattern"], to: ["Tool", "Component"] },
       OPERATES_ON: { from: ["Algorithm"], to: ["DataStructure"] },
       INVOLVES: { from: ["Problem", "Solution"], to: ["DataStructure"] },
       // ── Taxonomy (Track 4 Stream C: MITRE CWE `ChildOf` → `Weakness —IS_A→ Weakness`) ──
@@ -18005,8 +18012,6 @@ function repairSessionEvidence(input, aliases = /* @__PURE__ */ new Map()) {
   const mapping = new Map(aliases);
   const uuid3 = "[a-f0-9]{8}(?:-[a-f0-9]{4}){3}-[a-f0-9]{12}";
   const codex = new RegExp(`^codex:(?:rollout-.*?)?(${uuid3})$`, "i");
-  const arrays = /* @__PURE__ */ new Set(["sources", "recurrenceSources", "contributors", "inferredContributors", "citeSessions"]);
-  const scalars = /* @__PURE__ */ new Set(["discriminatorSource", "originSession", "sessionId", "sourceSession"]);
   const discover = (value, key = "") => {
     if (typeof value === "string" && (arrays.has(key) || scalars.has(key) || key === "citeAnchorHints")) {
       const match2 = value.match(codex);
@@ -18064,9 +18069,13 @@ function repairSessionEvidence(input, aliases = /* @__PURE__ */ new Map()) {
   }
   return repaired;
 }
+var arrays, scalars, SESSION_EVIDENCE_FIELDS;
 var init_session_evidence = __esm({
   "../../packages/local-graph/src/session-evidence.ts"() {
     "use strict";
+    arrays = /* @__PURE__ */ new Set(["sources", "recurrenceSources", "contributors", "inferredContributors", "citeSessions"]);
+    scalars = /* @__PURE__ */ new Set(["discriminatorSource", "originSession", "sessionId", "sourceSession"]);
+    SESSION_EVIDENCE_FIELDS = [...arrays, ...scalars, "citeAnchorHints"];
   }
 });
 
@@ -18146,7 +18155,7 @@ function rowToEdge(r) {
 function openGraphStore(opts) {
   return new SqliteGraphStore(opts);
 }
-var LOCAL_RULE_OVERRIDES, SCHEMA_VERSION, SCHEMA_SQL, TEMPORAL_INDEX_SQL, FINGERPRINT_INDEXED_LABELS, SqliteGraphStore;
+var LOCAL_RULE_OVERRIDES, SCHEMA_VERSION, SESSION_EVIDENCE_PREDICATE, SCHEMA_SQL, TEMPORAL_INDEX_SQL, FINGERPRINT_INDEXED_LABELS, SqliteGraphStore;
 var init_store = __esm({
   "../../packages/local-graph/src/store.ts"() {
     "use strict";
@@ -18177,6 +18186,7 @@ var init_store = __esm({
       REGRESSION_OF: { from: ["Problem"], to: ["Problem"] }
     };
     SCHEMA_VERSION = 6;
+    SESSION_EVIDENCE_PREDICATE = SESSION_EVIDENCE_FIELDS.map((field) => `instr(attrs_json, '${JSON.stringify(field)}') > 0`).join(" OR ");
     SCHEMA_SQL = `
 CREATE TABLE IF NOT EXISTS schema_version (
   version INTEGER PRIMARY KEY
@@ -18269,12 +18279,17 @@ CREATE UNIQUE INDEX IF NOT EXISTS edges_triple ON edges(from_id, type, to_id);
 `;
     TEMPORAL_INDEX_SQL = `
 CREATE INDEX IF NOT EXISTS nodes_live ON nodes(label, valid_to);
+CREATE INDEX IF NOT EXISTS nodes_live_count ON nodes(valid_to);
+CREATE INDEX IF NOT EXISTS nodes_live_recent ON nodes(label, last_updated_at DESC) WHERE valid_to IS NULL;
+CREATE INDEX IF NOT EXISTS nodes_session_evidence ON nodes(id) WHERE ${SESSION_EVIDENCE_PREDICATE};
+CREATE INDEX IF NOT EXISTS edges_session_evidence ON edges(id) WHERE ${SESSION_EVIDENCE_PREDICATE};
 -- Covering + partial index for labelFingerprint over the instance labels: the
 -- live-push probe runs it per workspace on a timer, and each hit used to read
 -- its table row. Partial, so it maintains a few thousand rows instead of adding
 -- a write to every node write. Its label list is FINGERPRINT_INDEXED_LABELS.
 DROP INDEX IF EXISTS nodes_live_fingerprint;
-CREATE INDEX IF NOT EXISTS nodes_instance_fingerprint ON nodes(label, last_updated_at, last_reinforced_at_seq, created_at_seq) WHERE valid_to IS NULL AND label IN ('Problem','Solution','RootCause');
+DROP INDEX IF EXISTS nodes_instance_fingerprint;
+CREATE INDEX IF NOT EXISTS nodes_instance_fingerprint_v2 ON nodes(label, last_updated_at, last_reinforced_at_seq, created_at_seq) WHERE valid_to IS NULL AND label IN ('Problem','Vulnerability','Solution','RootCause');
 CREATE INDEX IF NOT EXISTS nodes_logical ON nodes(logical_id, version);
 CREATE INDEX IF NOT EXISTS edges_live ON edges(valid_to);
 -- Expression index on the per-node relPath (stored in attrs_json) so the
@@ -18288,7 +18303,7 @@ CREATE INDEX IF NOT EXISTS nodes_live_description ON nodes(description, label) W
 -- every edited file of every turn, and a scan parses every Problem's attrs.
 CREATE INDEX IF NOT EXISTS nodes_anchor_hint_path ON nodes(json_extract(attrs_json, '$.anchorHint.path')) WHERE valid_to IS NULL;
 `;
-    FINGERPRINT_INDEXED_LABELS = ["Problem", "Solution", "RootCause"];
+    FINGERPRINT_INDEXED_LABELS = ["Problem", "Vulnerability", "Solution", "RootCause"];
     SqliteGraphStore = class {
       db;
       // Typed edge lookups build their SQL from the number of types asked for, and
@@ -18580,12 +18595,13 @@ CREATE INDEX IF NOT EXISTS nodes_anchor_hint_path ON nodes(json_extract(attrs_js
         });
       }
       repairSessionAliases(canonical, aliases = []) {
+        if (canonical && aliases.length === 0) return 0;
         const mapping = new Map(aliases.map((alias) => [alias, canonical]));
         let changed = 0;
         for (const table of ["nodes", "edges"]) {
           const predicates = canonical ? aliases.map(() => "instr(attrs_json, ?) > 0") : ["instr(attrs_json, 'codex:') > 0", "instr(attrs_json, 'discriminatorSource') > 0"];
           if (!predicates.length) continue;
-          const rows = this.db.prepare(`SELECT id, attrs_json FROM ${table} WHERE ${predicates.join(" OR ")}`).all(...canonical ? aliases : []);
+          const rows = this.db.prepare(`SELECT id, attrs_json FROM ${table} WHERE (${SESSION_EVIDENCE_PREDICATE}) AND (${predicates.join(" OR ")})`).all(...canonical ? aliases.map((alias) => JSON.stringify(alias)) : []);
           const update = this.db.prepare(`UPDATE ${table} SET attrs_json = ?${table === "edges" ? ", type = CASE WHEN type = 'CONFIRMS' AND json_extract(?, '$.provisional') = 1 THEN 'INDICATES' ELSE type END" : ""} WHERE id = ?`);
           for (const row of rows) {
             const attrs = JSON.stringify(repairSessionEvidence(JSON.parse(row.attrs_json), mapping));
@@ -18811,6 +18827,25 @@ CREATE INDEX IF NOT EXISTS nodes_anchor_hint_path ON nodes(json_extract(attrs_js
         const rows = this.db.prepare("SELECT id FROM nodes WHERE label = ? AND valid_to IS NULL ORDER BY last_updated_at DESC LIMIT ?").all(label, Math.max(0, limit));
         return rows.map((r) => r.id);
       }
+      recentOpenProblemCandidates(opts) {
+        if (!Number.isSafeInteger(opts.limit) || opts.limit < 0) {
+          throw new RangeError("candidate limit must be a non-negative safe integer");
+        }
+        return this.db.prepare(`SELECT id, description FROM nodes
+      WHERE label = 'Problem' AND valid_to IS NULL
+        AND json_extract(attrs_json, '$.resolvedAt') IS NULL
+        AND json_type(attrs_json, '$.mergedInto') IS NULL
+        AND (? IS NULL OR id != ?)
+        AND (json_type(attrs_json, '$.workspaceId') IS NULL OR json_extract(attrs_json, '$.workspaceId') = ?)
+        AND COALESCE(json_extract(attrs_json, '$.kind') = 'constraint', 0) = ?
+      ORDER BY last_updated_at DESC, rowid ASC LIMIT ?`).all(
+          opts.excludeId ?? null,
+          opts.excludeId ?? null,
+          opts.workspaceId,
+          opts.constraint ? 1 : 0,
+          opts.limit
+        );
+      }
       hasLiveNodes() {
         const r = this.db.prepare("SELECT EXISTS(SELECT 1 FROM nodes WHERE valid_to IS NULL) AS e").get();
         return r.e === 1;
@@ -18966,8 +19001,8 @@ CREATE INDEX IF NOT EXISTS nodes_anchor_hint_path ON nodes(json_extract(attrs_js
           const r2 = this.db.prepare(
             `SELECT COUNT(*) AS n, MAX(last_updated_at) AS t,
                   MAX(COALESCE(last_reinforced_at_seq, created_at_seq, 0)) AS s
-             FROM nodes INDEXED BY nodes_instance_fingerprint
-            WHERE valid_to IS NULL AND label IN ('Problem','Solution','RootCause')`
+             FROM nodes INDEXED BY nodes_instance_fingerprint_v2
+            WHERE valid_to IS NULL AND label IN ('Problem','Vulnerability','Solution','RootCause')`
           ).get();
           return `${r2.n}:${r2.t ?? 0}:${r2.s ?? 0}`;
         }
@@ -20263,7 +20298,7 @@ function mergeContextEdge(store, from, to, type, ts) {
 function deriveContextFromAnchors(store, problemId, ts, pkgIndex) {
   const report = { languages: [], packages: [] };
   const p = store.getNode(problemId);
-  if (!p || p.label !== "Problem") return report;
+  if (!p || p.label !== "Problem" && p.label !== "Vulnerability") return report;
   const files = store.outEdges(problemId, ["ANCHORED_AT"]).map((e) => store.getNode(e.to)).filter((n) => !!n && n.label === "File");
   if (files.length === 0) return report;
   const idx = pkgIndex ?? buildPackageIndex(store);
@@ -20901,6 +20936,81 @@ function ingestDesignProblem(store, flag, opts) {
     ...reopenedFromRegression ? { reopenedFromRegression } : {}
   };
 }
+function ingestWitnessedVulnerability(store, flag, opts) {
+  const statement = flag.statement.trim();
+  if (isPlaceholderStatement(statement)) return { id: "", created: false, corroborated: false, upgraded: false, rejected: "statement" };
+  const target = flag.target?.trim().replace(/\\/g, "/").replace(/^\.\//, "") ?? "";
+  const file2 = target ? resolveFileNode(store, target, opts.workspaceId) : null;
+  const symbol2 = file2 && flag.line !== void 0 && flag.fileText !== void 0 ? resolveEnclosingSymbol(store, file2.id, flag.line, flag.fileText) : null;
+  const identityTarget = symbol2 ? String(symbol2.attrs["logicalId"] ?? `${target}#${symbol2.attrs["qname"] ?? symbol2.description}`) : target;
+  const compatibleTarget = (n) => !symbol2 || !n.attrs["identityTarget"] || n.attrs["identityTarget"] === target || n.attrs["identityTarget"] === identityTarget;
+  const bound = flag.existingId ? store.getNode(flag.existingId) : null;
+  if (flag.existingId && (!bound || bound.label !== "Vulnerability" || bound.attrs["workspaceId"] !== opts.workspaceId || target && bound.attrs["affectedTarget"] && bound.attrs["affectedTarget"] !== target || !compatibleTarget(bound))) {
+    return { id: "", created: false, corroborated: false, upgraded: false, rejected: "binding-conflict" };
+  }
+  const statementKey = identityId({ kind: "DesignProblem", statement });
+  const restated = bound ? null : store.findNodesByLabel("Vulnerability").find((n) => n.attrs["workspaceId"] === opts.workspaceId && n.attrs["affectedTarget"] === target && compatibleTarget(n) && [n.description, ...n.attrs["statementAliases"] ?? []].some((s) => identityId({ kind: "DesignProblem", statement: s }) === statementKey));
+  const id = bound?.id ?? restated?.id ?? identityId({ kind: "WitnessedVulnerability", workspaceId: opts.workspaceId, target: identityTarget, statement });
+  const existing = bound ?? store.getNode(id);
+  const sources = existing?.attrs["sources"] ?? [];
+  const corroborated = !!existing && !sources.includes(opts.source);
+  const upgraded = !!existing && existing.attrs["assessment"] !== "asserted" && flag.assessment === "asserted";
+  const assessment = existing?.attrs["assessment"] === "asserted" ? "asserted" : flag.assessment;
+  if (!existing) {
+    store.mergeNode(buildNode(store, id, "Vulnerability", statement, opts.ts, {
+      source: "convo",
+      sourceClass: "agent-observation",
+      privateFinding: id,
+      workspaceId: opts.workspaceId,
+      affectedTarget: target,
+      identityTarget,
+      assessment,
+      anchorDisposition: target ? "unresolved" : "absent",
+      provisional: true,
+      sources: [opts.source],
+      corroborations: 0,
+      ...opts.hostHarness ? { hostHarness: opts.hostHarness } : {}
+    }));
+  } else if (corroborated || upgraded || !existing.attrs["affectedTarget"] && target || symbol2 && existing.attrs["identityTarget"] !== identityTarget) {
+    store.updateNode(id, {
+      attrs: {
+        ...existing.attrs,
+        assessment,
+        ...upgraded && existing.description !== statement ? { statementAliases: [...existing.attrs["statementAliases"] ?? [], existing.description].slice(-5) } : {},
+        affectedTarget: existing.attrs["affectedTarget"] || target,
+        ...symbol2 ? { identityTarget } : {},
+        sources: corroborated ? [...sources, opts.source] : sources,
+        corroborations: (Number(existing.attrs["corroborations"]) || 0) + (corroborated ? 1 : 0)
+      },
+      // Assessment strengthens on evidence, but does not certify exploitability.
+      ...upgraded ? { description: statement } : {},
+      ...corroborated ? { cumulativeHits: existing.cumulativeHits + 1 } : {},
+      ...reinforcedSeqAttrs(store, "Vulnerability"),
+      lastUpdatedAt: opts.ts
+    });
+  }
+  return { id, created: !existing, corroborated, upgraded };
+}
+function recordVulnerabilityCause(store, findingId, causes, ts) {
+  const finding = store.getNode(findingId);
+  if (finding?.label !== "Vulnerability") return 0;
+  let from = findingId;
+  let count = 0;
+  for (const description of causes) {
+    if (isPlaceholderStatement(description)) continue;
+    const id = genericCanonicalId("dcause", { findingId, description: description.trim() });
+    if (!store.getNode(id)) store.mergeNode(buildNode(store, id, "RootCause", description.trim(), ts, {
+      source: "convo",
+      privateFinding: findingId,
+      sources: finding.attrs["sources"],
+      assessment: finding.attrs["assessment"]
+    }));
+    mergeEdge(store, from, id, "CAUSED_BY", ts);
+    from = id;
+    count++;
+  }
+  return count;
+}
 function canonicalizePatternText(name2) {
   const stripped = name2.replace(/^\s*pattern(?:\s*[×x]\s*\d+)?\s*(?:\(exemplar\))?\s*[:—–-]\s*/i, "").replace(/\s+/g, " ").trim();
   return stripped.length > 0 ? stripped : name2.replace(/\s+/g, " ").trim();
@@ -21211,6 +21321,7 @@ function findReusableSolution(store, fixText) {
   const key = solutionTextKey(fixText);
   if (!key) return null;
   for (const s of store.findNodesByLabel("Solution")) {
+    if (s.attrs["privateFinding"]) continue;
     if (s.validTo != null) continue;
     if (isAutoMinted(s)) continue;
     if (solutionTextKey(s.description ?? "") === key) return s;
@@ -21235,7 +21346,7 @@ function priorsForFile(store, relPath) {
   for (const e of store.inEdges(file2.id, ["ANCHORED_AT"])) {
     const n = store.getNode(e.from);
     if (!n) continue;
-    if (n.label === "Problem") {
+    if (n.label === "Problem" || n.label === "Vulnerability") {
       if (seenProblem.has(n.id)) continue;
       seenProblem.add(n.id);
       if (!n.attrs["resolvedAt"]) {
@@ -21305,7 +21416,8 @@ function solutionForProblem(store, problemId) {
 }
 function anchorProblemToWorkingFile(store, problemId, relPath, workspaceId2, ts, provenance = "edited", opts = {}) {
   const p = store.getNode(problemId);
-  if (!p || p.label !== "Problem") return false;
+  if (!p || p.label !== "Problem" && p.label !== "Vulnerability") return false;
+  if (p.label === "Vulnerability" && provenance !== "witnessed") return false;
   if (!isAnchorableCodePath(relPath)) return false;
   const file2 = resolveFileNode(store, relPath, workspaceId2);
   if (!file2) return false;
@@ -21484,18 +21596,22 @@ function resolveDesignProblemById(store, id, fixNote, t) {
 }
 function closeDesignProblem(store, problemId, fixNote, t) {
   const p = store.getNode(problemId);
-  if (!p || p.label !== "Problem") return false;
+  if (!p || p.label !== "Problem" && p.label !== "Vulnerability") return false;
   if (p.attrs["resolvedAs"]) return false;
   if (fixNote?.trim() && !isFragmentFixNote(fixNote)) {
     const sols = store.outEdges(problemId, ["SOLVED_BY"]).map((e) => store.getNode(e.to)).filter((n) => n !== null);
     if (sols.every((s) => isAutoMinted(s))) {
-      const reuse = findReusableSolution(store, fixNote);
+      const reuse = p.label === "Vulnerability" ? null : findReusableSolution(store, fixNote);
       if (reuse) {
         mergeEdge(store, problemId, reuse.id, "SOLVED_BY", t);
       } else {
         const solId = `dfix_${digest({ problemId, fix: fixNote })}`.slice(0, 56);
         store.mergeNode(
-          buildNode(store, solId, "Solution", fixNote.trim(), t, { source: "convo", provisional: false })
+          buildNode(store, solId, "Solution", fixNote.trim(), t, {
+            source: "convo",
+            provisional: false,
+            ...p.label === "Vulnerability" ? { privateFinding: problemId, sources: p.attrs["sources"] } : {}
+          })
         );
         mergeEdge(store, problemId, solId, "SOLVED_BY", t);
       }
@@ -21509,6 +21625,7 @@ function closeDesignProblem(store, problemId, fixNote, t) {
     // mints no Solution, and a legacy placeholder beside it reads as
     // all-heuristic either way.
     attrs: { ...p.attrs, provisional: false, resolvedAt: t, resolutionWitnessed: true },
+    ...reinforcedSeqAttrs(store, p.label),
     lastUpdatedAt: t
   });
   return true;
@@ -23860,7 +23977,7 @@ function detectLocalCommunities(store, opts = {}) {
   const ids = /* @__PURE__ */ new Set();
   for (const label of JOINT_COMMUNITY_LABELS) {
     for (const n of store.findNodesByLabel(label)) {
-      if (label === "Problem" && n.attrs["resolvedAs"] === PROBLEM_RESOLUTION.FALSE_POSITIVE) continue;
+      if (n.attrs["resolvedAs"] === PROBLEM_RESOLUTION.FALSE_POSITIVE) continue;
       ids.add(n.id);
     }
   }
@@ -23997,6 +24114,7 @@ var init_community2 = __esm({
     init_src4();
     JOINT_COMMUNITY_LABELS = [
       "Problem",
+      "Vulnerability",
       "Solution",
       "RootCause",
       "Pattern"
@@ -24041,10 +24159,12 @@ function markFoldCandidate(store, problemId, targetId, info2) {
 }
 function findWorkspaceFoldCandidate(store, workspaceId2, statement, kind, opts) {
   const stmtVec = embed(statement);
-  const wantConstraint = kind === "constraint";
-  const open2 = store.findNodesByLabel("Problem").filter(
-    (p) => p.attrs["resolvedAt"] == null && p.attrs["mergedInto"] === void 0 && p.id !== opts?.excludeId && (p.attrs["workspaceId"] === void 0 || p.attrs["workspaceId"] === workspaceId2) && isConstraintProblem(p) === wantConstraint
-  ).sort((a, b) => (b.lastUpdatedAt ?? b.createdAt) - (a.lastUpdatedAt ?? a.createdAt)).slice(0, opts?.scanCap ?? WORKSPACE_SCAN_CAP);
+  const open2 = store.recentOpenProblemCandidates({
+    workspaceId: workspaceId2,
+    constraint: kind === "constraint",
+    limit: opts?.scanCap ?? WORKSPACE_SCAN_CAP,
+    ...opts?.excludeId !== void 0 ? { excludeId: opts.excludeId } : {}
+  });
   let best = null;
   for (const p of open2) {
     const c = cosine(stmtVec, embed(p.description));
@@ -24858,6 +24978,7 @@ __export(src_exports2, {
   induceAbstractions: () => induceAbstractions,
   induceTriage: () => induceTriage,
   ingestDesignProblem: () => ingestDesignProblem,
+  ingestWitnessedVulnerability: () => ingestWitnessedVulnerability,
   isConstraintProblem: () => isConstraintProblem,
   isFragmentFixNote: () => isFragmentFixNote,
   isPlaceholderStatement: () => isPlaceholderStatement,
@@ -24905,6 +25026,7 @@ __export(src_exports2, {
   recordMisreadPrior: () => recordMisreadPrior,
   recordRenderLedger: () => recordRenderLedger,
   recordTriageObservation: () => recordTriageObservation,
+  recordVulnerabilityCause: () => recordVulnerabilityCause,
   reinforceSameAnchorProblem: () => reinforceSameAnchorProblem,
   relateClaims: () => relateClaims,
   reopenAutoClosedProblems: () => reopenAutoClosedProblems,
@@ -24974,7 +25096,7 @@ function isPassiveInjectable(node2, atCommit) {
   return false;
 }
 function buildSnapshot(opts) {
-  const problems = opts.store.findNodesByLabel("Problem").filter((p) => p.attrs["mergedInto"] === void 0 && historyReadPolicy(p, { mode: "passive", atCommit: opts.atCommit }).allow);
+  const problems = [...opts.store.findNodesByLabel("Problem"), ...opts.store.findNodesByLabel("Vulnerability")].filter((p) => p.attrs["mergedInto"] === void 0 && historyReadPolicy(p, { mode: "passive", atCommit: opts.atCommit }).allow);
   const stillOpen = problems.filter((p) => p.attrs["resolvedAt"] == null);
   const allProblems = stillOpen.filter((p) => !isConstraintProblem(p));
   allProblems.sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt);
@@ -25129,11 +25251,11 @@ function sliceForFile(store, relPath, atCommit) {
   const priors = fp ? {
     openProblems: fp.openProblems.slice(0, 3).map((p) => ({
       id: p.id,
-      description: p.description,
+      description: p.label === "Vulnerability" ? `Vulnerability (${p.attrs["assessment"] ?? "unassessed"}): ${p.description}` : p.description,
       ...typeof p.attrs["fixCandidateFile"] === "string" ? { fixCandidateFile: p.attrs["fixCandidateFile"] } : {}
     })),
     constraints: fp.constraints.slice(0, 2).map((c) => ({ id: c.id, description: c.description })),
-    resolvedProblems: fp.resolvedProblems.slice(0, 3).map((p) => ({ id: p.id, description: p.description })),
+    resolvedProblems: fp.resolvedProblems.slice(0, 3).map((p) => ({ id: p.id, description: p.label === "Vulnerability" ? `Vulnerability (${p.attrs["assessment"] ?? "unassessed"}): ${p.description}` : p.description })),
     related: fp.related.slice(0, 4).map((n) => ({ id: n.id, label: n.label, description: n.description })),
     solutionsByProblem: Object.fromEntries(
       [...fp.openProblems.slice(0, 3), ...fp.resolvedProblems.slice(0, 3)].map((p) => [
@@ -25251,7 +25373,8 @@ function renderSnapshot(s) {
     if (s.recentProblems.length > 0) {
       lines.push("_Open \u2014 recently observed here, derived from your work (a recency slice, not an inventory \u2014 burst an id for its full neighborhood):_");
       for (const r of s.recentProblems) {
-        lines.push(`- **${r.node.description}** \u2014 \`${r.node.id}\`${tagOf(r.node)}`);
+        const badge = r.node.label === "Vulnerability" ? `Vulnerability (${r.node.attrs["assessment"] ?? "unassessed"}): ` : "";
+        lines.push(`- **${badge}${r.node.description}** \u2014 \`${r.node.id}\`${tagOf(r.node)}`);
         const hits = r.node.cumulativeHits ?? 0;
         const surprise = (r.node.cumulativeSurprise ?? 0).toFixed(2);
         lines.push(`  - observed ${hits}\xD7 \xB7 cumulativeSurprise ${surprise}`);
@@ -25292,7 +25415,8 @@ function renderSnapshot(s) {
     if (s.recentResolved.length > 0) {
       lines.push("_Recently resolved \u2014 solved here; jumping-off points, not live defects:_");
       for (const r of s.recentResolved) {
-        lines.push(`- \u2713 **${r.node.description}** \u2014 \`${r.node.id}\`${tagOf(r.node)}`);
+        const badge = r.node.label === "Vulnerability" ? `Vulnerability (${r.node.attrs["assessment"] ?? "unassessed"}): ` : "";
+        lines.push(`- \u2713 **${badge}${r.node.description}** \u2014 \`${r.node.id}\`${tagOf(r.node)}`);
         if (r.solution) {
           lines.push(`  - solved: ${r.solution.description.slice(0, 160)} \u2014 \`${r.solution.id}\`${tagOf(r.solution)}`);
         }
@@ -27152,8 +27276,8 @@ var init_config = __esm({
     "use strict";
     init_paths();
     LEGACY_CLOUD_URL = "https://inerrata-gateway.onrender.com";
-    DEFAULT_CLOUD_URL = true ? "https://inerrata.dev" : DEV_CLOUD_URL;
-    DEFAULT_UPDATE_CHANNEL = true ? "latest" : "dev";
+    DEFAULT_CLOUD_URL = true ? "https://dev.inerrata.dev" : DEV_CLOUD_URL;
+    DEFAULT_UPDATE_CHANNEL = false ? "latest" : "dev";
   }
 });
 
@@ -31713,7 +31837,7 @@ var init_src8 = __esm({
 
 // src/agent-signals.ts
 function buildFileRecallInstruction(referent = "\u2026") {
-  return `Touching one? paste its token: ${TAG_EXAMPLE.fix(referent)} resolved \xB7 ${TAG_EXAMPLE.prior(referent)} leaned-on \xB7 ${TAG_EXAMPLE.problem()} new. We harvest it.`;
+  return `Touching one? paste its token: ${TAG_EXAMPLE.fix(referent)} resolved \xB7 ${TAG_EXAMPLE.prior(referent)} leaned-on \xB7 ${TAG_EXAMPLE.problem()} new \xB7 ${TAG_EXAMPLE.vulnerability()} security. We harvest it.`;
 }
 function triageBullet(ref) {
   return [
@@ -31749,15 +31873,15 @@ function attemptBullet() {
   ].join("\n");
 }
 function buildAgentInstruction(opts = {}) {
-  const signals = opts.signals ?? ["prior", "problem", "domain", "fix", "constraint", "triage", "attempt", "link"];
+  const signals = opts.signals ?? ["prior", "problem", "vulnerability", "domain", "fix", "constraint", "triage", "attempt", "link"];
   const ref = opts.referent ?? "its-handle";
   const token = (s) => s === "problem" ? TAG_EXAMPLE.problem() : s === "constraint" ? TAG_EXAMPLE.constraint() : s === "attempt" ? TAG_EXAMPLE.tried() : s === "domain" ? TAG_EXAMPLE.domain() : s === "link" ? TAG_EXAMPLE.pattern() : s === "verdict" ? TAG_EXAMPLE.confirm(ref) : TAG_EXAMPLE[s](ref);
-  const head2 = `We tag the priors we show you with a short handle like [${opts.handleExample ?? "chokidar-glob"}]. Untagged prose is silently lost. Put each tag inline in prose (no fences or backticks). Requested errata-* answer blocks are the exception: keep their fences in your turn-final reply. Tag everything, we filter downstream:`;
-  const tail = "Mid-turn text (between tool calls) can be dropped by the harness \u2014 RESTATE every tag in your turn-final message; the final message is what reliably survives \u2014 EXCEPT one already shown above with an id: that is captured, so cite `[its-handle]` rather than retyping it (drift mints a duplicate).";
+  const head2 = "Tag inline (no fences or backticks). Untagged findings are silently lost. Cite short handles; tag everything, we filter downstream. Requested errata-* answer blocks are the exception: keep their fences in your turn-final reply:";
+  const tail = "Restate mid-turn tags in your final reply; the harness can drop mid-turn text. EXCEPT one already shown with an id: cite [its-handle] instead of retyping (drift mints a duplicate).";
   return [
     head2,
     ...signals.map(
-      (s) => s === "triage" ? triageBullet(ref) : s === "attempt" ? attemptBullet() : s === "link" ? linkBullet(ref) : s === "verdict" ? verdictBullet(ref) : `  \u2022 ${GLOSS[s]} \u2192 ${token(s)}`
+      (s) => s === "triage" ? triageBullet(ref) : s === "vulnerability" ? `  \u2022 ${GLOSS.vulnerability} \u2192 ${TAG_EXAMPLE.vulnerability()}. Uncertain? ${TAG_EXAMPLE.suspectedVulnerability()}. Code review counts, even if immediately fixed. No CVE/exploit needed. For fixes: ${TAG_EXAMPLE.vulnerabilityThread()} ${TAG_EXAMPLE.fixThread("v")}.` : s === "attempt" ? attemptBullet() : s === "link" ? linkBullet(ref) : s === "verdict" ? verdictBullet(ref) : `  \u2022 ${GLOSS[s]} \u2192 ${token(s)}`
     ),
     tail
   ].join("\n");
@@ -31769,6 +31893,9 @@ var init_agent_signals = __esm({
     TAG_EXAMPLE = {
       prior: (ref) => `([${ref}])`,
       problem: () => `[!one line on what's wrong]`,
+      vulnerability: () => `[!vuln: who can do what; observed basis @ path:line]`,
+      suspectedVulnerability: () => `[?vuln: consequence; missing check]`,
+      vulnerabilityThread: () => `[!#v vuln: finding here]`,
       fix: (ref) => `(fix:[${ref}])`,
       // CONSTRAINT — the native capture path for a DIFFUSE problem (a constraint/tension/
       // conflict that shaped a decision). Free text, attaches to the decision sentence the
@@ -31789,7 +31916,7 @@ var init_agent_signals = __esm({
       // tags never need one — the id is for diagnoses that unfold over distance.
       problemThread: () => `[!#slug one line on what's wrong]`,
       causeThread: () => `(cause:#slug the mechanism)`,
-      fixThread: () => `(fix:#slug what you changed)`,
+      fixThread: (thread = "slug") => `(fix:#${thread} what you changed)`,
       // ATTEMPT arc — what's being tried and what didn't work. A failed attempt is a
       // witnessed NEGATIVE result: it saves the next agent the same dead end.
       tried: () => `(tried: the approach you're attempting)`,
@@ -31831,8 +31958,9 @@ var init_agent_signals = __esm({
       // problems, and narrated them as progress (a pick-best-before-scoring bug lost).
       // Every example here was diagnosis-framed, so nothing contradicted that sorting.
       // Kept to 29 chars: the instruction sits at the 2600 passive-budget ceiling.
-      problem: "a problem you notice or report \u2014 any bug, finding, or thing wrong, even in code you just wrote; about specific code? name the file: [!what's wrong @ src/file.ts:42]",
-      fix: "your edit fixed a PROBLEM we showed you; for one you flagged yourself: (fix: what you changed) \u2014 a fix resolves a stated problem, completing routine work is not a fix",
+      problem: "any bug or finding, even in code you just wrote; name affected code: [!what's wrong @ path:42]",
+      vulnerability: "unauthorized actions, data exposure, or execution/disruption an attacker can trigger",
+      fix: "you fixed a shown finding; for your own non-security finding: (fix: what changed) \u2014 a fix resolves a stated problem, completing routine work is not a fix",
       constraint: "a design decision forced by conflicting requirements or constraints \u2014 tag the tension, especially when your fix makes it 'only look' resolved",
       triage: "you diagnosed a cause \u2014 fold the chain into the flag with <- (caused-by), deepest sure mechanism rightmost",
       attempt: "attempting an approach / an attempt failed \u2014 a failed attempt is knowledge, it rules out a path",
@@ -31854,7 +31982,7 @@ var init_agent_signals = __esm({
       // Sim note (2026-08-02 shrink): domain emission held 4/4 with just the trigger
       // clause; the pattern convergence hook now rides here too (it fell 0/4 when it
       // only appeared in the link bullet's tail).
-      domain: "a problem with no single file \u2014 name the area it's about (Title Case). Also name the general shape it instantiates: (pattern: the shape) \u2014 needs no code anchor, and two agents naming the same shape converge on one node",
+      domain: "no single file? name the area (Title Case), and (pattern: the shape). No code anchor needed; two agents naming the same shape converge on one node",
       link: "the problem you flagged is an instance of priors/abstractions you can name \u2014 (instance:[h1],[h2],\u2026) / (pattern: \u2026) / (aids:[h]); rendered whole via linkBullet",
       verdict: "you can judge a prior we SHOWED you \u2014 confirm it if it held, refute it (with why) if it didn't; rendered whole via verdictBullet"
     };
@@ -32095,7 +32223,7 @@ function readContextCard(root, hash2) {
 function openProblems(store, now = Date.now()) {
   const hit = openProblemsCache.get(store);
   if (hit && now - hit.at < OPEN_PROBLEMS_TTL_MS) return hit.nodes;
-  const nodes = store.findNodesByLabel("Problem").filter((p) => live(p) && !p.attrs["resolvedAt"] && p.attrs["mergedInto"] === void 0 && !isConstraintProblem(p));
+  const nodes = [...store.findNodesByLabel("Problem"), ...store.findNodesByLabel("Vulnerability")].filter((p) => live(p) && !p.attrs["resolvedAt"] && p.attrs["mergedInto"] === void 0 && !isConstraintProblem(p));
   openProblemsCache.set(store, { at: now, nodes });
   return nodes;
 }
@@ -43482,47 +43610,9 @@ var init_mcp = __esm({
     init_reconcile();
     init_agent_signals();
     INSTRUCTIONS = [
-      // KEEP THIS UNDER THE CLIENT'S ~2 KB instruction-injection budget (the client
-      // truncates `instructions` on connect, ~2008 chars observed). Capture no longer
-      // depends on a standing emit-instruction block: the daemon derives problems/fixes
-      // from your WORK deterministically, and the one thing it asks of the agent — a
-      // one-line root cause at a fix — rides INLINE on the next tool response (the ⚡
-      // errata line; see the dispatch's enrichment piggyback) instead of a fenced
-      // protocol the agent has to remember. So this stays short: tool-routing steering
-      // plus a single line about the inline nudge. Per-tool routing lives in each tool's
-      // own `description` (delivered via tools/list). Don't re-add a tool table here.
-      "errata is a LIVE, bi-temporal code graph of this workspace, kept current by a",
-      "file watcher \u2014 a SEPARATE DIAGNOSTIC AXIS to run ALONGSIDE grep/glob/read, not",
-      "instead of them. For STRUCTURAL questions (callers of callers, blast-radius,",
-      "rename lineage) prefer it: faster, more complete, and it reaches relationships",
-      "grep can't. Each tool's description says when to reach for it. Fall back to",
-      'grep/read when a tool returns found:false (ESPECIALLY reason:"unresolved" \u2014 the',
-      "name was not recognized, NOT an empty answer; an empty list like callers:[] is a",
-      'confident "none" \u2014 trust it), when you need EXACT bytes before a high-stakes',
-      "edit, or for an unindexed file/language. Always confirm exact bytes with a read",
-      "before editing.",
-      "",
-      "errata is a cloud knowledge substrate \u2014 AND ALSO this workspace's code graph.",
-      "The problems you hit and the fixes you make become shared knowledge other agents",
-      "recall. That capture is automatic: derived from your edits/commands/commits \u2014 no",
-      "emit needed. Just after you resolve something a tool result may carry a one-line",
-      "\u26A1 errata note asking the ROOT CAUSE; answer via errata.annotate_resolution when",
-      "you know it, skip it otherwise.",
-      "",
-      "Two things it CAN'T derive \u2014 only you witness them, and this is a CAPTURE",
-      "PROTOCOL, not optional formatting: a problem or fix you state only in prose, a",
-      "list, or your own numbering is SILENTLY LOST \u2014 the tag is the ONLY thing recorded.",
-      "So the moment you state one, wrap it inline (no fence, no extra call):",
-      // Signal tokens come from the single source (agent-signals.ts) so this always-on
-      // block can't teach a grammar the parser rejects. Referent is "its-id" here — the
-      // raw MCP channel has no primed handles, so the agent cites a tool-result id.
-      `  \u2022 ${TAG_EXAMPLE.problem()}  \u2014 EVERY problem you notice or report ([?\u2026] = TODO)`,
-      `  \u2022 ${TAG_EXAMPLE.fix("its-id")}               \u2014 your edit fixed a problem errata showed you`,
-      "Tag every one you state \u2014 we filter downstream, so don't self-censor or batch.",
-      "",
-      "Graph-as-files: the graph is ALSO a virtual FS \u2014 Read (or `cat`)",
-      ".errata/g/<verb>/<seed> to run a query as a file read (e.g. .errata/g/burst/",
-      "<symbol>, /why/<sym>, /trace/<a>..<b>). Read .errata/g/index for the vocabulary."
+      "errata is a live code and knowledge graph, a SEPARATE DIAGNOSTIC AXIS alongside grep/read for callers, blast radius, rename lineage and prior fixes. Fall back to read/search on found:false (unresolved is not an empty answer), or for unindexed code. Confirm exact bytes before editing.",
+      buildAgentInstruction({ signals: ["prior", "problem", "vulnerability", "fix"], referent: "its-id" }),
+      "Read .errata/g/index for graph-as-files query paths. A tool result may ask for a root cause; answer via errata.annotate_resolution when known."
     ].join("\n");
     AUDIT_RUN_THRESHOLD = 5;
     AUDIT_NUDGE_COOLDOWN = 12;
@@ -44114,7 +44204,7 @@ var init_mcp = __esm({
       },
       {
         name: "errata.problems",
-        description: "List the workspace's Problem backlog \u2014 the triage view that search/why/impact can't give because they need a seed. status: 'open' (default) | 'resolved' (a real fix) | 'retracted' (false alarms \u2014 false_positive/dissolution) | 'constraint' (design TENSIONS captured via `(constraint: \u2026)` \u2014 standing context, not open work, so they're excluded from 'open') | 'all'. Also returns a `retracted` breakdown so the false-positive rate stays visible.",
+        description: "List the workspace's Problem and Vulnerability backlog \u2014 the triage view that search/why/impact can't give because they need a seed. status: 'open' (default) | 'resolved' (a real fix) | 'retracted' (false alarms \u2014 false_positive/dissolution) | 'constraint' (design TENSIONS captured via `(constraint: \u2026)` \u2014 standing context, not open work, so they're excluded from 'open') | 'all'. Also returns a `retracted` breakdown so the false-positive rate stays visible.",
         inputSchema: {
           type: "object",
           properties: {
@@ -44126,13 +44216,15 @@ var init_mcp = __esm({
           const want = String(args2["status"] ?? "open");
           const limit = Math.max(1, Math.min(200, Number(args2["limit"] ?? 50)));
           const RETRACTIONS = /* @__PURE__ */ new Set(["false_positive", "invalid", "duplicate"]);
-          const rows = store.findAllVersionsByLabel("Problem").map((p) => {
+          const rows = [...store.findAllVersionsByLabel("Problem"), ...store.findAllVersionsByLabel("Vulnerability")].map((p) => {
             const ra = p.attrs["resolvedAs"];
             const status = ra && RETRACTIONS.has(ra) ? ra : p.attrs["resolvedAt"] != null ? "resolved" : isConstraintProblem(p) ? "constraint" : "open";
             const anchorEdge = store.outEdges(p.id, ["ANCHORED_AT"])[0];
             const anchor = anchorEdge ? store.getNode(anchorEdge.to)?.description : void 0;
             return {
               id: p.id,
+              label: p.label,
+              ...p.label === "Vulnerability" ? { assessment: p.attrs["assessment"] } : {},
               problem: p.description,
               status,
               createdAt: p.createdAt,
@@ -52697,7 +52789,8 @@ function errorRecallTerms(errorText) {
 }
 function recallLine(n, token) {
   const desc = (n.description ?? "").replace(/\s+/g, " ").slice(0, 120);
-  return `- [${n.label}] ${desc}  \u2192  ${token}`;
+  const label = n.label === "Vulnerability" ? `Vulnerability; ${n.attrs["assessment"] ?? "unassessed"}` : n.label;
+  return `- [${label}] ${desc}  \u2192  ${token}`;
 }
 function recallForFile(store, relPath) {
   return fileRecall(store, relPath)?.context ?? null;
@@ -52718,7 +52811,7 @@ function fileRecall(store, relPath) {
   const shownRelated = priors.related.slice(0, 4);
   for (const p of shownProblems) {
     const hasCause = store.outEdges(p.id, ["CAUSED_BY"]).some((e) => store.getNode(e.to)?.label === "RootCause");
-    const causeCue = hasCause ? "" : ` \xB7 ${TAG_EXAMPLE.triageMint()} to diagnose its cause`;
+    const causeCue = hasCause ? "" : ` \xB7 ${p.label === "Vulnerability" ? `(cause:#${p.id} the mechanism)` : TAG_EXAMPLE.triageMint()} to diagnose its cause`;
     lines.push(
       recallLine(p, `${TAG_EXAMPLE.fix(p.id)} if you resolved it \xB7 ${TAG_EXAMPLE.prior(p.id)} to cite${causeCue}`)
     );
@@ -75988,7 +76081,7 @@ init_src5();
 import { readFileSync as readFileSync17, writeFileSync as writeFileSync13 } from "node:fs";
 var NEG = /n['']t|\b(?:not|never|no|none|neither|nor|unrelated|irrelevant|would|might|could|if)\b/i;
 var CITE_GROUP_RE = /\(((?:[^()\n]|\([^()\n]*\)){1,200})\)/g;
-var HANDLE_RE = /\[([a-z0-9][\w-]{0,80})\]|((?:pat|sol|drc|dcause|dfix|dprob|prob|claim|err)_[0-9a-f]{6,})/gi;
+var HANDLE_RE = /\[([a-z0-9][\w-]{0,80})\]|((?:pat|sol|drc|dcause|dfix|dprob|dvuln|prob|claim|err)_[0-9a-f]{6,})/gi;
 var PLACEHOLDER_HANDLES = /* @__PURE__ */ new Set([
   "handle",
   "its-handle",
@@ -76003,7 +76096,7 @@ var PLACEHOLDER_HANDLES = /* @__PURE__ */ new Set([
   "b"
 ]);
 var isPlaceholderHandle = (h) => PLACEHOLDER_HANDLES.has(h.toLowerCase());
-var FLAG_BODY_HANDLE_RE = /^(?:[a-z0-9]+(?:-[a-z0-9]+){2,}-(?=[0-9a-f]{0,3}\d)[0-9a-f]{4}|(?:pat|sol|drc|dcause|dfix|dprob|prob|claim|err)_[0-9a-f]{6,})$/i;
+var FLAG_BODY_HANDLE_RE = /^(?:[a-z0-9]+(?:-[a-z0-9]+){2,}-(?=[0-9a-f]{0,3}\d)[0-9a-f]{4}|(?:pat|sol|drc|dcause|dfix|dprob|dvuln|prob|claim|err)_[0-9a-f]{6,})$/i;
 var FIX_PREFIX = /^\s*fix:(?:#([a-z][\w-]{0,63}))?\s*/i;
 var CONSTRAINT_RE = /\(\s*constraint:\s*([^()\n]{8,}?)\s*\)/gi;
 var CAUSE_PREFIX = /^\s*cause:(?:#([a-z][\w-]{0,63}))?\s*/i;
@@ -76028,7 +76121,7 @@ var DOMAIN_RE = /\(\s*domain:\s*([^()\n]{3,}?)\s*\)/gi;
 var PACKAGE_RE = /\(\s*package:\s*([^()\n]{2,}?)\s*\)/gi;
 var COMPONENT_RE = /\(\s*component:\s*([^()\n]{2,}?)\s*\)/gi;
 var CAUSE_TEXT_MIN = 8;
-var FLAG_RE = /\[([!?])(?:#([a-z][\w-]{0,63})\s+)?\s*((?:\[[^\]\n]*\]|[^\]\n]){8,}?)\s*(?:@\s*([^\s\]]+?)(?::(\d+))?\s*)?\]/g;
+var FLAG_RE = /\[([!?])(?:#([a-z][\w-]{0,63})\s+)?\s*((?:\[[^\]\n]*\]|[^\]\n])*?)\s*(?:@\s*([^\s\]]+?)(?::(\d+))?\s*)?\]/g;
 var CONSTRAINT_MIN = 8;
 function clauseBefore(sentence, idx) {
   const win = sentence.slice(Math.max(0, idx - 80), idx);
@@ -76172,6 +76265,7 @@ function cleanEmittedTags(tags) {
 }
 function emptyTagDispositions() {
   return {
+    invalidVulnerability: 0,
     oversizeSegments: 0,
     codeSpanNeutralized: 0,
     refuteTooShort: 0,
@@ -76184,6 +76278,7 @@ function emptyTagDispositions() {
   };
 }
 function addTagDispositions(a, b) {
+  a.invalidVulnerability += b.invalidVulnerability;
   a.oversizeSegments += b.oversizeSegments;
   a.codeSpanNeutralized += b.codeSpanNeutralized;
   a.refuteTooShort += b.refuteTooShort;
@@ -76197,12 +76292,31 @@ function addTagDispositions(a, b) {
 function parseInlineTags(text) {
   return parseInlineTagsWithDispositions(text).tags;
 }
+function* captureSentences(text) {
+  for (const line of text.split(/\n+/)) {
+    if (line.length > 2e4) {
+      yield line;
+      continue;
+    }
+    const flags2 = [...line.matchAll(new RegExp(FLAG_RE.source, FLAG_RE.flags))].map((m) => ({ start: m.index, end: m.index + m[0].length }));
+    let flag = 0;
+    let start2 = 0;
+    for (const boundary of line.matchAll(/(?<=[.!?])\s+(?!\(fix:)/g)) {
+      const index = boundary.index;
+      while (flags2[flag] && flags2[flag].end <= index) flag++;
+      if (flags2[flag] && flags2[flag].start < index) continue;
+      yield line.slice(start2, index);
+      start2 = index + boundary[0].length;
+    }
+    yield line.slice(start2);
+  }
+}
 function parseInlineTagsWithDispositions(text) {
   const out2 = [];
   const dispositions = emptyTagDispositions();
   const deFenced = text.replace(/```[\s\S]*?```/g, " ");
   let seqNo = -1;
-  for (const raw2 of deFenced.split(/(?<=[.!?])\s+(?!\(fix:)|\n+/)) {
+  for (const raw2 of captureSentences(deFenced)) {
     seqNo++;
     if (raw2.length > 2e4) {
       dispositions.oversizeSegments++;
@@ -76428,6 +76542,29 @@ function parseInlineTagsWithDispositions(text) {
     while ((f = FLAG_RE.exec(sentence)) !== null) {
       const flagThread = f[2];
       const raw3 = f[3].trim();
+      if (/^vuln\b/i.test(raw3)) {
+        const typed = /^vuln:\s*([\s\S]*)$/i.exec(raw3);
+        const body2 = typed?.[1]?.trim() ?? "";
+        const parts2 = body2.split(CAUSE_ARROW).map((s) => s.trim());
+        const symptom = f[1] === "!" && parts2.length > 1 && !f[4] ? new RegExp(FLAG_RE.source, "i").exec(`[!${parts2[0]}]`) : null;
+        const statement = f[1] === "?" ? body2 : symptom?.[3]?.trim() ?? parts2[0];
+        if (statement.length < 8 || /^<[^>]*>$/.test(statement)) {
+          dispositions.invalidVulnerability++;
+          continue;
+        }
+        const path2 = (f[4] ?? symptom?.[4])?.trim();
+        const line = f[5] ?? symptom?.[5];
+        out2.push({
+          kind: "vulnerability",
+          statement,
+          assessment: f[1] === "!" ? "asserted" : "suspected",
+          ...f[1] === "!" && parts2.length > 1 ? { vulnerabilityCauses: parts2.slice(1).filter((s) => s.length >= CAUSE_TEXT_MIN) } : {},
+          ...path2 ? { location: { path: path2, ...line ? { line: Number(line) } : {} } } : {},
+          ...flagThread ? { threadId: flagThread } : {},
+          sentence: sfield
+        });
+        continue;
+      }
       if (FLAG_BODY_HANDLE_RE.test(raw3) && !f[4]) {
         dispositions.flagAsHandle++;
         out2.push({ kind: "prior", handle: raw3, sentence: sfield });
@@ -76798,7 +76935,7 @@ function harvestInlineTags(store, text, opts) {
   const parsed = parseInlineTagsWithDispositions(text);
   const tags = parsed.tags;
   plan.dispositions = parsed.dispositions;
-  const symptomSeqs = tags.filter((t) => (t.kind === "problem" || t.kind === "todo") && t.statement).map((t) => ({ seq: t.seq ?? -1, statement: t.statement, threadId: t.threadId })).sort((a, b) => a.seq - b.seq);
+  const symptomSeqs = tags.filter((t) => (t.kind === "problem" || t.kind === "todo" || t.kind === "vulnerability") && t.statement).map((t) => ({ seq: t.seq ?? -1, statement: t.statement, threadId: t.threadId, kind: t.kind })).sort((a, b) => a.seq - b.seq);
   const bindSymptom = (seq, threadId) => {
     if (threadId) {
       const hit = symptomSeqs.find((s) => s.threadId === threadId);
@@ -76811,6 +76948,7 @@ function harvestInlineTags(store, text, opts) {
     if (seq == null) return { evidence: "inferred" };
     let best;
     for (const s of symptomSeqs) {
+      if (s.kind === "vulnerability") continue;
       if (s.seq <= seq) best = s;
       else break;
     }
@@ -76825,10 +76963,13 @@ function harvestInlineTags(store, text, opts) {
     return id;
   };
   for (const tag of tags) {
-    if (tag.kind === "problem" || tag.kind === "todo") {
+    if (tag.kind === "problem" || tag.kind === "todo" || tag.kind === "vulnerability") {
       plan.problems.push({
         statement: tag.statement,
         kind: tag.kind,
+        ...tag.assessment ? { assessment: tag.assessment } : {},
+        ...tag.vulnerabilityCauses ? { vulnerabilityCauses: tag.vulnerabilityCauses } : {},
+        ...tag.kind === "vulnerability" && tag.seq !== void 0 ? { seq: tag.seq } : {},
         ...tag.location ? { location: tag.location } : {},
         ...tag.threadId ? { threadId: tag.threadId } : {}
       });
@@ -76851,7 +76992,7 @@ function harvestInlineTags(store, text, opts) {
         } else if (tag.threadId && !b.statement) {
           plan.fixes.push({ inScope: true, fixNote: tag.fixRationale, threadId: tag.threadId });
         } else if (b.statement && b.evidence === "witnessed") {
-          plan.fixes.push({ inScope: true, fixNote: tag.fixRationale, boundStatement: b.statement });
+          plan.fixes.push({ inScope: true, fixNote: tag.fixRationale, boundStatement: b.statement, ...tag.threadId ? { threadId: tag.threadId } : {} });
         } else {
           plan.fixes.push({ inScope: true, fixNote: tag.fixRationale, ambiguous: true });
         }
@@ -77054,6 +77195,7 @@ function harvestInlineTags(store, text, opts) {
 }
 var CORROBORATABLE_LABELS = /* @__PURE__ */ new Set([
   "Problem",
+  "Vulnerability",
   "Solution",
   "RootCause",
   "Pattern",
@@ -77746,6 +77888,15 @@ var PassWorker = class {
   nightly() {
     return this.call("nightly");
   }
+  semanticMaintenance() {
+    return this.call("semanticMaintenance");
+  }
+  liveness(invocations) {
+    return this.call("liveness", [...invocations]);
+  }
+  retrievalInputs(repoLocator) {
+    return this.call("retrievalInputs", repoLocator);
+  }
   /** Reindex stale/drifted files on the worker; resolves to the count reindexed. */
   reconcile() {
     return this.call("reconcile");
@@ -78873,6 +79024,13 @@ function scanManifests(root) {
 function readManifestDependencies(root) {
   return scanManifests(root).deps;
 }
+function readRetrievalInputs(root, repoLocator) {
+  return {
+    direct: readDirectDependencies(root),
+    manifestDeps: readManifestDependencies(root),
+    registry: loadRegistryPolicy(root, process.env, repoLocator)
+  };
+}
 
 // src/git-sensor.ts
 import { existsSync as existsSync23, readFileSync as readFileSync23, watch as fsWatch } from "node:fs";
@@ -80832,9 +80990,9 @@ function partitionReplayable(queue, channel, isShipped) {
 function retireWitnesses(queue, channel, settledKeys) {
   return queue.filter((w) => !(w.channel === channel && settledKeys.has(w.witnessKey)));
 }
-var WIRE_SHIPPED_LABELS = /* @__PURE__ */ new Set(["Problem", "Solution", "RootCause"]);
+var WIRE_SHIPPED_LABELS = /* @__PURE__ */ new Set(["Problem", "Vulnerability", "Solution", "RootCause"]);
 var MOTIF_ID_PREFIX = "motif_community_";
-var CANONICAL_ID_RE = /^(?:pat|sol|drc|dcause|dfix|dprob|prob|claim|err)_[0-9a-f]{6,}$/i;
+var CANONICAL_ID_RE = /^(?:pat|sol|drc|dcause|dfix|dprob|dvuln|prob|claim|err)_[0-9a-f]{6,}$/i;
 function classifyWitnessTarget(nodeId, getNode) {
   if (nodeId.startsWith(MOTIF_ID_PREFIX)) {
     const exemplar = nodeId.slice(MOTIF_ID_PREFIX.length);
@@ -81241,11 +81399,13 @@ function saveAlarmState(configDir, state) {
 }
 function createLivenessWatch(deps) {
   let lastRunAt = 0;
+  let running = false;
   const lastAlarmedAt = loadAlarmState(deps.configDir);
   return {
-    maybeRun(nowMs = Date.now()) {
-      if (nowMs - lastRunAt < LIVENESS_WATCH_INTERVAL_MS) return null;
+    async maybeRun(nowMs = Date.now()) {
+      if (running || nowMs - lastRunAt < LIVENESS_WATCH_INTERVAL_MS) return null;
       lastRunAt = nowMs;
+      running = true;
       try {
         const started2 = Date.now();
         const invocations = /* @__PURE__ */ new Map();
@@ -81259,7 +81419,7 @@ function createLivenessWatch(deps) {
             lastTotals: s.lastTotals
           });
         }
-        const rows = evaluateMechanisms(deps.store, invocations);
+        const rows = deps.evaluate ? await deps.evaluate(invocations) : evaluateMechanisms(deps.store, invocations);
         const workspaceActive = invocations.has("capture") || invocations.has("render");
         const bad = workspaceActive ? rows.filter((r) => hasStarvedMechanism([r])) : [];
         const watch3 = watchCensus();
@@ -81296,13 +81456,42 @@ function createLivenessWatch(deps) {
           }
         }
         return rows;
-      } catch {
+      } catch (err2) {
+        console.warn("[errata] liveness watch failed:", err2 instanceof Error ? err2.message : String(err2));
         return null;
+      } finally {
+        running = false;
       }
     }
   };
 }
 
+// src/workspace-maintenance.ts
+init_src8();
+init_src5();
+function runWorkspaceMaintenance(store, workspaceId2) {
+  const seqBefore = store.currentIngestSeq();
+  const report = runSemanticMaintenance(store);
+  let hintUpgrade = { upgraded: 0, standing: 0, unresolvable: 0, blocked: 0 };
+  try {
+    hintUpgrade = upgradeAnchorHints(store, workspaceId2, Date.now());
+  } catch {
+  }
+  let calibration = null;
+  const calibrationStarted = Date.now();
+  try {
+    calibration = wmCalibrationCells(store);
+  } catch {
+  }
+  return {
+    report,
+    hintUpgrade,
+    seqAdvanced: store.currentIngestSeq() - seqBefore,
+    calibration,
+    calibrationMs: Date.now() - calibrationStarted
+  };
+}
+
 // src/watch-breaker.ts
 function numEnv3(key, fallback) {
   const n = Number(process.env[key]);
@@ -81404,7 +81593,7 @@ function createWatchBreaker(deps) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.16" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.17-dev.3407" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -81791,6 +81980,7 @@ function createWorkspaceEngine(opts) {
   const livenessWatch = createLivenessWatch({
     configDir: paths.configDir,
     store,
+    ...passWorker ? { evaluate: (invocations) => passWorker.liveness(invocations) } : {},
     onAlarm: (id, line) => {
       console.warn(`[errata] mechanism not working: ${line}`);
       notifyEvent("mechanism-stalled", line, { key: id });
@@ -81956,21 +82146,22 @@ function createWorkspaceEngine(opts) {
     contextDirty = false;
     notifyDigest("recall");
   };
-  const outboundStack = () => retrievalStackTokens({
-    direct: readDirectDependencies(opts.workspaceRoot),
-    manifestDeps: readManifestDependencies(opts.workspaceRoot),
-    profileStack: profile?.stack ?? [],
-    // Languages ride the stack list: the cloud's context-affinity matcher
-    // resolves each token against both the Package and Language namespaces,
-    // and the profile keeps them in separate fields.
-    languages: profile?.languages ?? [],
-    contributePackages: consentNow().contributePackages,
-    // `repoLocator` feeds the Maven self-disclosure rule ONLY: a groupId
-    // carrying this project's own owner/repo token is the project naming
-    // itself, not a library it depends on.
-    registry: loadRegistryPolicy(opts.workspaceRoot, process.env, profile?.repoLocator),
-    ignorePatterns: loadClaimIgnorePatterns(opts.workspaceRoot)
-  }).tokens;
+  const outboundStack = async () => {
+    const inputs = passWorker ? await passWorker.retrievalInputs(profile?.repoLocator) : readRetrievalInputs(opts.workspaceRoot, profile?.repoLocator);
+    return retrievalStackTokens({
+      ...inputs,
+      profileStack: profile?.stack ?? [],
+      // Languages ride the stack list: the cloud's context-affinity matcher
+      // resolves each token against both the Package and Language namespaces,
+      // and the profile keeps them in separate fields.
+      languages: profile?.languages ?? [],
+      contributePackages: consentNow().contributePackages,
+      // `repoLocator` feeds the Maven self-disclosure rule ONLY: a groupId
+      // carrying this project's own owner/repo token is the project naming
+      // itself, not a library it depends on.
+      ignorePatterns: loadClaimIgnorePatterns(opts.workspaceRoot)
+    }).tokens;
+  };
   const maybeRefreshRemotePriors = () => {
     if (opts.skipContextWriter || remoteInFlight) return;
     const now = Date.now();
@@ -81980,11 +82171,12 @@ function createWorkspaceEngine(opts) {
     if (typeof cloud.search !== "function") return;
     remoteInFlight = true;
     lastRemoteAt = now;
-    try {
+    void outboundStack().then((stack) => {
+      if (!(opts.syncConsent ?? consentNow().sync)) return;
       const norm = normStackTokens;
       const seed = store.recentNodeIds("Problem", 6);
       const q = {
-        stack: outboundStack(),
+        stack,
         domains: norm(profile.domains),
         kinds: ["Pattern", "Technique", "AntiPattern"],
         ...seed.length ? { seed } : {},
@@ -81994,7 +82186,7 @@ function createWorkspaceEngine(opts) {
         channel: "priming",
         limit: 8
       };
-      cloud.search(q).then((res) => {
+      return cloud.search(q).then((res) => {
         remotePriors = res.nodes ?? [];
         const contributorLabels = [];
         for (const n of remotePriors) {
@@ -82004,13 +82196,11 @@ function createWorkspaceEngine(opts) {
         }
         if (contributorLabels.length > 0) registerRenderedContributorLabels(contributorLabels);
         contextDirty = true;
-      }).catch(() => {
-      }).finally(() => {
-        remoteInFlight = false;
       });
-    } catch {
+    }).catch(() => {
+    }).finally(() => {
       remoteInFlight = false;
-    }
+    });
   };
   const maybeRefreshIntentPriors = (liveIntent) => {
     if (!liveIntent || opts.skipContextWriter || intentRemoteInFlight) return;
@@ -82019,22 +82209,26 @@ function createWorkspaceEngine(opts) {
     if (!syncOk) return;
     if (typeof cloud.search !== "function") return;
     intentRemoteInFlight = true;
-    cloud.search({
-      // VS-context-affinity: the intent lane used to send an empty context
-      // while the priming lane sent the profile — opposite postures on the
-      // same method. Under "union derived + stated, canonicalize once"
-      // (VS-intent-fence) the stated intent IS the query and the derived
-      // stack rides along as structured relevanceContext: the cloud no
-      // longer concatenates these tokens into the embedding string, it
-      // re-weights anchored hits with them (stated beats derived — the
-      // intent text drives entry search, the stack only re-ranks).
-      stack: outboundStack(),
-      domains: normStackTokens(profile?.domains ?? []),
-      kinds: ["Pattern", "Technique", "AntiPattern", "Problem", "Solution"],
-      q: liveIntent,
-      channel: "intent",
-      limit: 6
+    void outboundStack().then((stack) => {
+      if (!(opts.syncConsent ?? consentNow().sync)) return;
+      return cloud.search({
+        // VS-context-affinity: the intent lane used to send an empty context
+        // while the priming lane sent the profile — opposite postures on the
+        // same method. Under "union derived + stated, canonicalize once"
+        // (VS-intent-fence) the stated intent IS the query and the derived
+        // stack rides along as structured relevanceContext: the cloud no
+        // longer concatenates these tokens into the embedding string, it
+        // re-weights anchored hits with them (stated beats derived — the
+        // intent text drives entry search, the stack only re-ranks).
+        stack,
+        domains: normStackTokens(profile?.domains ?? []),
+        kinds: ["Pattern", "Technique", "AntiPattern", "Problem", "Solution"],
+        q: liveIntent,
+        channel: "intent",
+        limit: 6
+      });
     }).then((res) => {
+      if (!res) return;
       intentRemote = {
         forIntent: liveIntent,
         hits: res.nodes ?? [],
@@ -82094,7 +82288,7 @@ function createWorkspaceEngine(opts) {
         if (isWorkerOom(err2)) {
           console.warn("[errata] nightly worker hit its heap ceiling \u2014 heavy pass skipped this fire");
           appendPassLedger(paths.configDir, "graph-rescore", 0, { oomSkipped: 1 });
-          const sem = runSemanticMaintenance(store);
+          const { report: sem } = await passWorker.semanticMaintenance();
           return {
             report: {
               scoredNodes: 0,
@@ -82296,6 +82490,9 @@ function createWorkspaceEngine(opts) {
   const harvestTextsInner = async (sessionId, items) => {
     let minted = 0;
     let tagsSeen = 0;
+    let vulnerabilitiesSeen = 0;
+    let vulnerabilitiesMinted = 0;
+    let vulnerabilitiesSuspected = 0;
     let tagsRejected = 0;
     let tagsRestated = 0;
     let resolved = 0;
@@ -82526,10 +82723,73 @@ function createWorkspaceEngine(opts) {
         if ((toolRuns.get(sessionId)?.size ?? 0) > 0) touchedToolTurns++;
         const wf = workingFiles.get(sessionId);
         let inScopeProblemId;
+        const findingIds = /* @__PURE__ */ new Map();
+        const conflictingThreads = /* @__PURE__ */ new Set();
         const threads = sessionThreads.get(sessionId) ?? /* @__PURE__ */ new Map();
         sessionThreads.set(sessionId, threads);
         for (const p of plan.problems) {
           tagsSeen++;
+          if (p.kind === "vulnerability") {
+            vulnerabilitiesSeen++;
+            if (p.assessment === "suspected") vulnerabilitiesSuspected++;
+            let fileText;
+            let anchorReadFailed = false;
+            if (p.location) {
+              try {
+                fileText = readFileSync31(join35(opts.workspaceRoot, p.location.path), "utf8");
+              } catch {
+                anchorReadFailed = true;
+              }
+            }
+            const result = ingestWitnessedVulnerability(store, {
+              statement: p.statement,
+              assessment: p.assessment,
+              target: p.location?.path,
+              line: p.location?.line,
+              fileText,
+              existingId: p.threadId ? threads.get(p.threadId) ?? handleMap[p.threadId]?.id ?? store.getNode(p.threadId)?.id : void 0
+            }, { workspaceId: profile.id, source: sessionId, ts: t, hostHarness: turn.hostHarness });
+            let anchorDisposition = p.location ? "unresolved" : "absent";
+            if (result.rejected) {
+              tagsRejected++;
+              if (p.threadId) conflictingThreads.add(p.threadId);
+            } else {
+              findingIds.set(p.statement, result.id);
+              if (p.threadId) threads.set(p.threadId, result.id);
+              if (result.created || result.corroborated || result.upgraded) minted++;
+              else tagsRestated++;
+              if (result.created) vulnerabilitiesMinted++;
+              if (p.location) {
+                try {
+                  const anchored = anchorProblemToWorkingFile(store, result.id, p.location.path, profile.id, t, "witnessed", { line: p.location.line, fileText });
+                  anchorDisposition = anchored ? "resolved" : anchorReadFailed ? "error" : "unresolved";
+                  if (anchored) deriveContextFromAnchors(store, result.id, t);
+                } catch {
+                  anchorDisposition = "error";
+                }
+              }
+              const node2 = store.getNode(result.id);
+              store.updateNode(result.id, { attrs: { ...node2.attrs, anchorDisposition } });
+              if (p.vulnerabilityCauses) triaged += recordVulnerabilityCause(store, result.id, p.vulnerabilityCauses, t);
+            }
+            log.append({
+              kind: "vulnerability.witness",
+              workspaceId: profile.id,
+              ts: t,
+              digest: digest({ kind: "vulnerability.witness", workspaceId: profile.id, sessionId, turnId: turn.uuid, statement: p.statement, assessment: p.assessment, location: p.location }),
+              sessionId,
+              turnId: turn.uuid,
+              harness: turn.hostHarness,
+              findingId: result.id,
+              statement: p.statement,
+              assessment: p.assessment,
+              location: p.location,
+              seq: p.seq,
+              anchorDisposition,
+              disposition: result.rejected ?? (result.created ? "created" : result.upgraded ? "upgraded" : result.corroborated ? "corroborated" : "restated")
+            });
+            continue;
+          }
           const anchorPath = p.location?.path ?? editedTurnFile;
           const anchorProvenance = p.location?.path ? "witnessed" : "edited";
           const hintPath = anchorPath ? void 0 : turnFile ?? wf;
@@ -82624,10 +82884,10 @@ function createWorkspaceEngine(opts) {
           if (r.created || r.corroborated) {
             minted++;
             if (p.kind !== "constraint") {
-              sessionLastProblem.set(sessionId, designProblemId(p.statement));
-              inScopeProblemId = designProblemId(p.statement);
+              sessionLastProblem.set(sessionId, r.problemId);
+              inScopeProblemId = r.problemId;
             }
-            if (p.threadId) threads.set(p.threadId, designProblemId(p.statement));
+            if (p.threadId) threads.set(p.threadId, r.problemId);
             try {
               if (anchorPath) {
                 let enclosing = {};
@@ -82664,7 +82924,8 @@ function createWorkspaceEngine(opts) {
           );
         }
         for (const fx of plan.fixes) {
-          const pid = fx.problemId ?? (fx.threadId ? threads.get(fx.threadId) : void 0) ?? (fx.boundStatement ? designProblemId(fx.boundStatement) : void 0);
+          if (fx.threadId && conflictingThreads.has(fx.threadId)) continue;
+          const pid = fx.problemId ?? (fx.threadId ? threads.get(fx.threadId) : void 0) ?? (fx.boundStatement ? findingIds.get(fx.boundStatement) ?? designProblemId(fx.boundStatement) : void 0);
           if (!pid) {
             if (fx.inScope) {
               console.warn(
@@ -82676,7 +82937,7 @@ function createWorkspaceEngine(opts) {
           const closed = resolveDesignProblemById(store, pid, fx.fixNote, t);
           if (!closed) {
             const n = store.getNode(pid);
-            if (!n || n.label !== "Problem" || n.attrs["resolvedAs"] != null) {
+            if (!n || n.label !== "Problem" && n.label !== "Vulnerability" || n.attrs["resolvedAs"] != null) {
               console.warn(
                 `[errata] fix tag went nowhere: ${!n ? `id ${pid.slice(0, 32)} unknown` : n.label !== "Problem" ? `${pid.slice(0, 32)} is a ${n.label}, not a Problem` : "the problem was retracted \u2014 a retraction is not fixable"} \u2014 the fix was NOT recorded`
               );
@@ -82695,10 +82956,23 @@ function createWorkspaceEngine(opts) {
             }
           }
         }
+        const vulnerabilityTriages = /* @__PURE__ */ new Set();
+        for (const tr of plan.triages) {
+          if (tr.threadId && conflictingThreads.has(tr.threadId)) {
+            vulnerabilityTriages.add(tr);
+            continue;
+          }
+          const id = tr.symptomProblemId ?? (tr.threadId ? threads.get(tr.threadId) : void 0) ?? (tr.symptomStatement ? findingIds.get(tr.symptomStatement) : void 0);
+          if (id && store.getNode(id)?.label === "Vulnerability") {
+            vulnerabilityTriages.add(tr);
+            if (tr.evidence === "witnessed" && tr.causeDescription) triaged += recordVulnerabilityCause(store, id, [tr.causeDescription], t);
+          }
+        }
         if (opts.sharedStore && plan.triages.length > 0) {
           const fallbackId = sessionLastProblem.get(sessionId);
           const fallbackStatement = fallbackId ? store.getNode(fallbackId)?.description : void 0;
           for (const tr of plan.triages) {
+            if (vulnerabilityTriages.has(tr)) continue;
             let presentingStatement = tr.symptomStatement;
             let evidence = tr.evidence;
             if (!presentingStatement && tr.threadId) {
@@ -82716,7 +82990,7 @@ function createWorkspaceEngine(opts) {
               evidence = "inferred";
             }
             if (!presentingStatement) continue;
-            const presentingId = tr.symptomProblemId ?? designProblemId(presentingStatement);
+            const presentingId = tr.symptomProblemId ?? (tr.threadId ? threads.get(tr.threadId) : void 0) ?? designProblemId(presentingStatement);
             if (tr.causeId === presentingId) continue;
             try {
               recordTriageObservation(
@@ -82774,7 +83048,7 @@ function createWorkspaceEngine(opts) {
           }
         }
         for (const at of plan.attempts) {
-          const pid = at.problemId ?? (at.threadId ? threads.get(at.threadId) : void 0) ?? (at.boundStatement ? designProblemId(at.boundStatement) : void 0);
+          const pid = at.problemId ?? (at.threadId ? threads.get(at.threadId) : void 0) ?? (at.boundStatement ? findingIds.get(at.boundStatement) ?? designProblemId(at.boundStatement) : void 0);
           const node2 = pid ? store.getNode(pid) : void 0;
           if (!pid || !node2) continue;
           try {
@@ -82790,7 +83064,7 @@ function createWorkspaceEngine(opts) {
           }
         }
         const bindPid = (tag) => {
-          const pid = tag.problemId ?? (tag.threadId ? threads.get(tag.threadId) : void 0) ?? (tag.boundStatement ? designProblemId(tag.boundStatement) : void 0) ?? inScopeProblemId ?? sessionLastProblem.get(sessionId);
+          const pid = tag.problemId ?? (tag.threadId ? threads.get(tag.threadId) : void 0) ?? (tag.boundStatement ? findingIds.get(tag.boundStatement) ?? designProblemId(tag.boundStatement) : void 0) ?? inScopeProblemId ?? sessionLastProblem.get(sessionId);
           return pid && store.getNode(pid) ? pid : void 0;
         };
         const mintCiteEdge = (from, to, type, confidence, extraAttrs) => {
@@ -82944,7 +83218,12 @@ function createWorkspaceEngine(opts) {
           for (const [session, items2] of groups) {
             if (items2.length === 0) continue;
             try {
-              const raw2 = await send(items2, session);
+              const wireItems = items2.map(({ nodeId, witnessKey }) => {
+                const node2 = store.getNode(nodeId);
+                const cloudId = node2?.attrs["privateFinding"] ? node2.attrs["cloudNodeId"] : void 0;
+                return { nodeId: typeof cloudId === "string" ? cloudId : nodeId, witnessKey };
+              });
+              const raw2 = await send(wireItems, session);
               const d = {
                 recorded: raw2?.recorded ?? 0,
                 unmatched: raw2?.unmatched ?? 0,
@@ -82957,8 +83236,8 @@ function createWorkspaceEngine(opts) {
               duplicate += d.duplicate;
               selfGated += d.selfGated;
               const missing = new Set(d.unmatchedIds);
-              for (const it of items2) {
-                if (missing.has(it.nodeId)) stillUnmatched.push({ channel, ...it, sessionKey: session, counted: isShipped(it.nodeId) });
+              for (const [index, it] of items2.entries()) {
+                if (missing.has(wireItems[index].nodeId)) stillUnmatched.push({ channel, ...it, sessionKey: session, counted: isShipped(it.nodeId) });
                 else settled.add(it.witnessKey);
               }
             } catch (err2) {
@@ -83128,6 +83407,10 @@ function createWorkspaceEngine(opts) {
         // but nothing judgeable was cited.
         tagsVerdictNoHandle: dispositions.verdictNoHandle,
         tagsFlagAsHandle: dispositions.flagAsHandle,
+        tagsInvalidVulnerability: dispositions.invalidVulnerability,
+        vulnerabilitiesSeen,
+        vulnerabilitiesMinted,
+        vulnerabilitiesSuspected,
         unresolvedHandles,
         priorEdgesFlagOff,
         priorEdgesNoSource,
@@ -83525,15 +83808,7 @@ B: ${b}`,
       return report;
     },
     async semanticMaintenance() {
-      const yieldLoop = () => new Promise((r) => setImmediate(r));
-      const seqBefore = store.currentIngestSeq();
-      const report = runSemanticMaintenance(store);
-      await yieldLoop();
-      let hintUpgrade = { upgraded: 0, standing: 0, unresolvable: 0, blocked: 0 };
-      try {
-        hintUpgrade = upgradeAnchorHints(store, profile.id, Date.now());
-      } catch {
-      }
+      const { report, hintUpgrade, seqAdvanced, calibration, calibrationMs } = passWorker ? await passWorker.semanticMaintenance() : runWorkspaceMaintenance(store, profile.id);
       appendPassLedger(paths.configDir, "semantic-maintenance", report.durationMs, {
         revisitsCleared: report.revisitsCleared,
         revisitsStanding: report.revisitsStanding,
@@ -83544,7 +83819,7 @@ B: ${b}`,
         fixCandidatesStanding: report.fixCandidates.standing,
         designResolved: report.designResolved,
         claimsEvaluated: report.claimsEvaluated,
-        seqAdvanced: store.currentIngestSeq() - seqBefore,
+        seqAdvanced,
         anchorHintsUpgraded: hintUpgrade.upgraded,
         anchorHintsStanding: hintUpgrade.standing,
         anchorHintsUnresolvable: hintUpgrade.unresolvable,
@@ -83553,19 +83828,15 @@ B: ${b}`,
       if (report.revisitsCleared > 0 || report.fixCandidatesSettled > 0 || report.designResolved > 0) {
         refreshContextNow();
       }
-      await yieldLoop();
-      try {
-        const t0 = Date.now();
+      if (calibration) {
         appendPassLedger(
           paths.configDir,
           "wm-calibration",
-          Date.now() - t0,
-          wmCalibrationCells(store)
+          calibrationMs,
+          calibration
         );
-      } catch {
       }
-      await yieldLoop();
-      livenessWatch.maybeRun();
+      await livenessWatch.maybeRun();
       return report;
     },
     async nightly() {
@@ -84465,7 +84736,7 @@ function internalSymbolsFor(description, lexiconHas, publicIndex) {
 
 // src/instance-ingest.ts
 init_generalize_graph();
-var INSTANCE_LABELS = ["Problem", "Solution", "RootCause"];
+var INSTANCE_LABELS = ["Problem", "Vulnerability", "Solution", "RootCause"];
 var INSTANCE_EDGES = ["CAUSED_BY", "SOLVED_BY"];
 var ANCHOR_EDGES = ["OCCURS_IN", "DEPENDS_ON", "PERTAIN_TO", "CONCERNS"];
 var ANCHOR_TARGET_LABELS = ["Language", "Package", "Domain", "Component"];
@@ -84475,7 +84746,7 @@ function stripCodebaseScope(scope) {
   return s;
 }
 function compositionCounters(c) {
-  const { sidecarDropReasons, ...scalars } = c;
+  const { sidecarDropReasons, ...scalars2 } = c;
   const buckets = [
     "empty",
     "too_long",
@@ -84485,7 +84756,7 @@ function compositionCounters(c) {
     "other"
   ];
   return {
-    ...scalars,
+    ...scalars2,
     ...Object.fromEntries(buckets.map((b) => [`sidecarDrop_${b}`, sidecarDropReasons[b] ?? 0]))
   };
 }
@@ -84600,6 +84871,10 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       attrs: {
         scope: stripCodebaseScope(n.attrs["scope"]),
         ...n.attrs["kind"] ? { kind: n.attrs["kind"] } : {},
+        ...n.attrs["privateFinding"] ? { privateFinding: true } : {},
+        ...n.attrs["assessment"] ? { assessment: n.attrs["assessment"] } : {},
+        ...n.attrs["sourceClass"] ? { sourceClass: n.attrs["sourceClass"] } : {},
+        ...n.attrs["resolutionWitnessed"] ? { resolutionWitnessed: true, resolvedAt: n.attrs["resolvedAt"] } : {},
         ...n.attrs["resolvedAs"] ? { resolvedAs: n.attrs["resolvedAs"] } : {},
         ...preserved.length > 0 ? { preservedSymbols: preserved } : {},
         ...internal.length > 0 ? { internalSymbols: internal } : {}
@@ -84614,6 +84889,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   const semanticEndpoints = /* @__PURE__ */ new Map();
   const includedByLabel = /* @__PURE__ */ new Map();
   const composition = {
+    privateTargetMissing: 0,
     candidates: 0,
     shipped: 0,
     cloudSourced: 0,
@@ -84659,11 +84935,15 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       if (walked.has(n.id)) continue;
       walked.add(n.id);
       composition.candidates++;
+      if ((n.attrs["privateFinding"] || n.label === "Vulnerability") && !opts.project) {
+        composition.privateTargetMissing++;
+        continue;
+      }
       if (n.attrs["source"] === "cloud") {
         composition.cloudSourced++;
         continue;
       }
-      if (label === "Problem" && n.attrs["resolvedAs"] === PROBLEM_RESOLUTION.FALSE_POSITIVE) {
+      if (n.attrs["resolvedAs"] === PROBLEM_RESOLUTION.FALSE_POSITIVE) {
         composition.falsePositive++;
         continue;
       }
@@ -84686,7 +84966,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
         composition.terminalRefused++;
         continue;
       }
-      if (!noveltyAgainst(n, ref, noveltyOpts).ready) {
+      if (!n.attrs["privateFinding"] && !noveltyAgainst(n, ref, noveltyOpts).ready) {
         composition.notNovel++;
         continue;
       }
@@ -84729,7 +85009,7 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     }
     if (targets.length === 0) continue;
     const shipped = shippedById.get(sourceId);
-    if (shipped) {
+    if (shipped && !shipped.attrs["privateFinding"]) {
       const anchors = (label) => targets.filter((x) => x.t.label === label).map(
         (x) => label === "Language" ? langAnchor(x.t) : label === "Component" ? `component:${x.wireId}` : x.wireId
       ).filter((a) => a != null).sort();
@@ -85511,38 +85791,41 @@ function classifyAnchorVersion(cloudAttrs, localSymbol) {
   if (typeof seen !== "string" || typeof have !== "string") return "unverified";
   return seen === have ? "current" : "pre-change";
 }
-function buildReverseSymbolMap(opts) {
-  return collectFirstWins(reverseSymbolEntries(opts));
+async function buildReverseSymbolMap(opts) {
+  return collectFirstWinsYielding(reverseSymbolEntries(opts));
 }
 function* reverseSymbolEntries(opts) {
   const { store, salt, projectId } = opts;
   for (const kind of ANCHOR_SYMBOL_KINDS2) {
     for (const n of store.iterateNodeIdentitiesByLabel(kind)) {
       const { relPath, qname } = n;
-      if (relPath === null || qname === null) continue;
+      if (relPath === null || qname === null) {
+        yield null;
+        continue;
+      }
       const sym = projectSymbolId(salt, projectId, relPath, qname, kind);
       yield [sym, n.id];
       yield [projectSaltedNodeId(sym, salt), n.id];
     }
   }
   for (const n of store.iterateNodeIdentitiesByLabel("File")) {
-    if (n.relPath === null) continue;
+    if (n.relPath === null) {
+      yield null;
+      continue;
+    }
     const sym = projectSymbolId(salt, projectId, n.relPath, FILE_ANCHOR_QNAME, "File");
     yield [sym, n.id];
     yield [projectSaltedNodeId(sym, salt), n.id];
   }
 }
-function collectFirstWins(entries) {
-  const m = /* @__PURE__ */ new Map();
-  for (const [k, v] of entries) if (!m.has(k)) m.set(k, v);
-  return m;
-}
 var MAP_BUILD_BATCH = 2e3;
 async function collectFirstWinsYielding(entries) {
   const m = /* @__PURE__ */ new Map();
   let i2 = 0;
-  for (const [k, v] of entries) {
+  for (const entry of entries) {
     if (++i2 % MAP_BUILD_BATCH === 0) await new Promise((r) => setImmediate(r));
+    if (entry === null) continue;
+    const [k, v] = entry;
     if (!m.has(k)) m.set(k, v);
   }
   return m;
@@ -85634,7 +85917,7 @@ async function reanchorProject(opts) {
   if (!profile.projectId) return { reanchored: false, reason: "no-project" };
   if (profile.projectReanchoredAt) return { reanchored: false, reason: "already-reanchored" };
   if (!profile.projectHydratedAt) return { reanchored: false, reason: "not-hydrated" };
-  const reverse = buildReverseSymbolMap({ store, salt, projectId: profile.projectId });
+  const reverse = await buildReverseSymbolMap({ store, salt, projectId: profile.projectId });
   if (reverse.size === 0) return { reanchored: false, reason: "no-local-symbols" };
   try {
     const res = await cloud.getProjectPriors(profile.projectId, opts.limit ?? DEFAULT_LIMIT);
@@ -85696,7 +85979,7 @@ async function syncProjectAnchors(opts) {
     reverseCache,
     store,
     key,
-    () => collectFirstWinsYielding(reverseSymbolEntries({ store, salt, projectId }))
+    () => buildReverseSymbolMap({ store, salt, projectId })
   );
   const own = cachedMap(ownCache, store, salt, () => collectLastWinsYielding(ownKnowledgeEntries({ store, salt })));
   const limit = opts.limit ?? SYNC_PAGE;
@@ -85869,11 +86152,11 @@ async function syncHistoryRevisionPage(opts) {
   const sweepCommit = after ? oldCursor.atCommit : atCommit;
   const page = await cloud.getHistoryOccurrences(projectId, atCommit, after);
   if (!Array.isArray(page.occurrences) || page.occurrences.length > 50 || page.occurrences.some((o, i2) => o.occurrenceId <= (page.occurrences[i2 - 1]?.occurrenceId ?? after ?? "")) || page.cursor !== null && page.cursor !== page.occurrences.at(-1)?.occurrenceId) throw new Error("invalid history occurrence page");
-  const parents = (await git3(["rev-list", "--parents", "--max-count=8192", atCommit])).trim().split("\n").filter(Boolean).map((row) => {
+  const parents = page.occurrences.length ? (await git3(["rev-list", "--parents", "--max-count=8192", atCommit])).trim().split("\n").filter(Boolean).map((row) => {
     const [commit, ...parents2] = row.trim().split(/\s+/);
     return { commit, parents: parents2 };
-  });
-  const reverse = buildReverseSymbolMap({ store, projectId, salt });
+  }) : [];
+  const reverse = page.occurrences.length ? await buildReverseSymbolMap({ store, projectId, salt }) : /* @__PURE__ */ new Map();
   const ignore2 = loadRepoIgnore(root, profile.ignoreExtra ?? []);
   const providers = defaultProviders();
   const parsedFiles = /* @__PURE__ */ new Map();