@isaacriehm/cairn-core 0.1.0

package/dist/voice/transcribe.js

@@ -0,0 +1,43 @@
+import { logger } from "../logger.js";
+import { getWhisper } from "./model.js";
+import { audioToPcm } from "./pipe.js";
+const log = logger("voice.transcribe");
+export async function transcribeBuffer(audio, opts = {}) {
+    const startedAt = Date.now();
+    const pcm = await audioToPcm(audio);
+    const language = opts.language ?? "en";
+    const whisper = getWhisper();
+    const task = await whisper.transcribe(pcm, {
+        language,
+        format: "detail",
+        no_timestamps: false,
+        print_progress: false,
+        print_realtime: false,
+        print_special: false,
+        print_timestamps: false,
+        suppress_blank: true,
+        ...(opts.initialPrompt !== undefined ? { initial_prompt: opts.initialPrompt } : {}),
+    });
+    const detailed = await task.result;
+    const segments = detailed.map((d) => ({
+        from: d.from,
+        to: d.to,
+        text: d.text.trim(),
+        confidence: typeof d.confidence === "number" ? d.confidence : 0,
+    }));
+    const text = segments.map((s) => s.text).join(" ").trim();
+    const avgLogprob = segments.length > 0
+        ? segments.reduce((sum, s) => sum + s.confidence, 0) / segments.length
+        : 0;
+    const durationMs = Date.now() - startedAt;
+    log.info({ chars: text.length, segments: segments.length, avgLogprob, durationMs }, "transcribed");
+    return { text, avgLogprob, segments, language, durationMs };
+}
+export async function transcribeUrl(attachmentUrl, opts = {}) {
+    const res = await fetch(attachmentUrl);
+    if (!res.ok)
+        throw new Error(`attachment fetch ${res.status} for ${attachmentUrl}`);
+    const buf = Buffer.from(await res.arrayBuffer());
+    return transcribeBuffer(buf, opts);
+}
+//# sourceMappingURL=transcribe.js.map

package/dist/voice/transcribe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transcribe.js","sourceRoot":"","sources":["../../src/voice/transcribe.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AACxC,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAOvC,MAAM,GAAG,GAAG,MAAM,CAAC,kBAAkB,CAAC,CAAC;AAEvC,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAa,EACb,OAA0B,EAAE;IAE5B,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IAC7B,MAAM,GAAG,GAAG,MAAM,UAAU,CAAC,KAAK,CAAC,CAAC;IACpC,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC;IACvC,MAAM,OAAO,GAAG,UAAU,EAAE,CAAC;IAC7B,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,UAAU,CAAC,GAAG,EAAE;QACzC,QAAQ;QACR,MAAM,EAAE,QAAQ;QAChB,aAAa,EAAE,KAAK;QACpB,cAAc,EAAE,KAAK;QACrB,cAAc,EAAE,KAAK;QACrB,aAAa,EAAE,KAAK;QACpB,gBAAgB,EAAE,KAAK;QACvB,cAAc,EAAE,IAAI;QACpB,GAAG,CAAC,IAAI,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC,CAAC;IACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC;IACnC,MAAM,QAAQ,GAA2B,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5D,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE;QACnB,UAAU,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;KAChE,CAAC,CAAC,CAAC;IACJ,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,UAAU,GACd,QAAQ,CAAC,MAAM,GAAG,CAAC;QACjB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM;QACtE,CAAC,CAAC,CAAC,CAAC;IACR,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;IAC1C,GAAG,CAAC,IAAI,CACN,EAAE,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,EAAE,QAAQ,CAAC,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,EACzE,aAAa,CACd,CAAC;IACF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAC;AAC9D,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,aAAqB,EACrB,OAA0B,EAAE;IAE5B,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,aAAa,CAAC,CAAC;IACvC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,GAAG,CAAC,MAAM,QAAQ,aAAa,EAAE,CAAC,CAAC;IACpF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,OAAO,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AACrC,CAAC"}

package/dist/voice/types.d.ts

@@ -0,0 +1,26 @@
+/**
+ * Voice transcription contract.
+ *
+ * Audio NEVER touches disk per L12. Buffers flow:
+ *   discord attachment → fetch → Buffer → ffmpeg pipe → Float32Array (16k mono)
+ *   → smart-whisper → TranscriptionResult.
+ */
+export interface TranscriptionSegment {
+    from: number;
+    to: number;
+    text: string;
+    /** smart-whisper's "confidence" — average per-token probability. */
+    confidence: number;
+}
+export interface TranscriptionResult {
+    text: string;
+    /** Average per-segment confidence. Used as `avg_logprob`-equivalent gate. */
+    avgLogprob: number;
+    segments: TranscriptionSegment[];
+    language: string;
+    durationMs: number;
+}
+export interface TranscribeOptions {
+    language?: string;
+    initialPrompt?: string;
+}

package/dist/voice/types.js

@@ -0,0 +1,9 @@
+/**
+ * Voice transcription contract.
+ *
+ * Audio NEVER touches disk per L12. Buffers flow:
+ *   discord attachment → fetch → Buffer → ffmpeg pipe → Float32Array (16k mono)
+ *   → smart-whisper → TranscriptionResult.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/voice/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/voice/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG"}

package/package.json

@@ -0,0 +1,54 @@
+{
+  "name": "@isaacriehm/cairn-core",
+  "version": "0.1.0",
+  "description": "Cairn core — state + context layer. Curated `.cairn/ground/` (decisions, §V invariants, canonical-map, brand, quality-grades), MCP server, init wizard, hook runners, sensors, GC drift sweep.",
+  "author": "Isaac Riehm",
+  "license": "MIT",
+  "homepage": "https://github.com/isaacriehm/cairn",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/isaacriehm/cairn.git"
+  },
+  "bugs": {
+    "url": "https://github.com/isaacriehm/cairn/issues"
+  },
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "templates",
+    "README.md"
+  ],
+  "dependencies": {
+    "@inquirer/prompts": "^8.4.2",
+    "@modelcontextprotocol/sdk": "^1.29.0",
+    "chalk": "^5.6.2",
+    "cli-progress": "^3.12.0",
+    "ora": "^9.0.0",
+    "pino": "^9.5.0",
+    "simple-git": "^3.36.0",
+    "yaml": "^2.8.4",
+    "zod": "^4.4.2"
+  },
+  "devDependencies": {
+    "@types/cli-progress": "^3.11.6",
+    "@types/node": "^25.6.0",
+    "tsx": "^4.21.0",
+    "typescript": "^6.0.3"
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "typecheck": "tsc -b",
+    "clean": "rm -rf dist *.tsbuildinfo"
+  }
+}

package/templates/.archive/README.md

@@ -0,0 +1,67 @@
+---
+type: rule
+status: accepted
+audience: dual
+generated: 2026-05-02T13:19:00Z
+verified-at: 2026-05-02T13:19:00Z
+source-commits:
+  - manual
+---
+
+# `.archive/` — quarantine zone
+
+This directory holds files that were once canonical but are no longer current. **It is committed history, not deletion.** Per `docs/FILESYSTEM_LAYOUT.md` §2 it is Cairn's `historical` zone.
+
+## What lives here
+
+- Pre-Cairn state files moved out at adoption (e.g. `2026-05-pre-cairn/STATE.md`)
+- Documents superseded by an ADR (the new ADR cites the archived path)
+- Stale generated artifacts whose source has been removed
+- Completed runs' terminal artifacts (auto-moved by Cairn)
+
+## What does NOT live here
+
+- Files marked `[STALE]` in canonical paths — Cairn rejects this pattern. Stale files are MOVED here, never banner-flagged in place. (See `docs/PRIMER.md` §11 anti-patterns.)
+- Branches or tagged refs — `.archive/` is filesystem-only.
+- Secrets — `.env*` patterns stay in `.gitignore` regardless.
+
+## Layout convention
+
+```
+.archive/
+├── README.md
+├── 2026-05-pre-cairn/      ← one bucket per migration / adoption / cleanup wave
+│   └── <original-path>       ← preserves the file's prior path inside the bucket
+└── <YYYY-MM-DD>/             ← daily quarantine drops
+    └── <original-path>
+```
+
+## Reading from `.archive/`
+
+Agents do **not** read this directory directly. Soft enforcement, three layers:
+
+1. The `cairn hook session-start` SessionStart hook injects a reminder instructing the agent that historical paths are off-default.
+2. Cairn walkers (manifest build, GC sweep, sensor scans) exclude `.archive/` from canonical-zone reads.
+3. The only sanctioned read path is the MCP tool:
+
+```
+cairn_query_history(scope, question)
+```
+
+`cairn_query_history` walks `.archive/` (matched by `path_hint` + `since`/`until`), runs a Tier-1 Haiku summarizer, and returns structured per-claim records with source citations and supersedes-pointers. The agent receives only the summary — raw stale content never enters its context.
+
+PreToolUse-style interception is **not** used (operator decision 2026-05-04). The combination of SessionStart instruction + walker exclusion + `cairn_query_history` is sufficient and avoids the brittleness of a hot-path tool-call hook.
+
+## Writing to `.archive/`
+
+Only via `cairn_archive(path, reason)`. Direct moves are accepted but discouraged because they bypass the audit log. The MCP tool records the reason, the operator who issued the move (frontend-adapter user-id), and the timestamp.
+
+## Why we don't delete
+
+1. Decisions cite archived paths. Deletion breaks the audit trail.
+2. The init script's mapper agent learns from prior moves what's project-specific.
+3. Historical context is occasionally re-needed (e.g. confirming an old decision's premise). Quarantine preserves that without polluting canonical reads.
+
+## Restoring an archived file
+
+`cairn restore <path>` (CLI subcommand, future) — moves a file out of `.archive/<bucket>/` back to its original location and writes a `cairn_record_run_event` of the restoration. Use sparingly.

package/templates/.cairn/JOIN.md

@@ -0,0 +1,87 @@
+# JOIN — bootstrapping a new clone of this project
+
+This project is Cairn-adopted. Every developer who touches it must run
+Cairn locally so that decisions, invariants, and sensor results stay in
+sync across clones.
+
+If you just cloned, run **one** of the bootstrap paths below before
+attempting your first commit. The local pre-commit hook will refuse to run
+otherwise; the CI gate on every PR will refuse to merge otherwise.
+
+## Path A — Claude Code users (recommended)
+
+If you opened this project with Claude Code and the Cairn plugin is
+enabled, the SessionStart hook detects an unbootstrapped clone and surfaces
+an inline `[a]` bootstrap prompt. Pick `[a]` once and you are done.
+
+If the plugin isn't installed yet:
+
+```bash
+# Inside Claude Code
+/plugin install cairn@isaacriehm-cairn
+```
+
+…then reopen the project. The SessionStart prompt will fire.
+
+## Path B — CLI bootstrap
+
+If you don't use Claude Code, run the CLI command:
+
+```bash
+npm install -g @isaacriehm/cairn   # only if Cairn isn't already installed
+cairn join                          # idempotent; safe to re-run
+```
+
+`cairn join` does three things:
+
+1. Checks the `cairn` CLI version is compatible with this project's
+   `.cairn/config.yaml` `cairn_version` constraint.
+2. Sets `git config core.hooksPath .cairn/git-hooks` on this clone so the
+   versioned pre-commit / post-commit / commit-msg hooks run.
+3. Creates `.cairn/sessions/` for this clone if missing.
+
+## Path C — `package.json` `prepare` (Node projects only)
+
+For Node projects the adoption flow already wires
+`prepare: cairn join || true` into `package.json`. Running
+`npm install` / `pnpm install` runs `cairn join` for you. The `|| true`
+lets the install succeed even if Cairn isn't yet on PATH; the failure
+surfaces at first commit attempt instead.
+
+## Verifying
+
+```bash
+git config --get core.hooksPath
+# Expected output: .cairn/git-hooks
+```
+
+```bash
+cairn doctor
+# Should print: "core.hooksPath = .cairn/git-hooks ✓"
+```
+
+## Why this is required
+
+Without bootstrap:
+
+- **Local commits** — pre-commit hook isn't on the path; you can commit code
+  that violates project decisions or invariants.
+- **PR merges** — CI gate catches it but the round-trip is wasteful.
+- **MCP write tools** — the Claude Code plugin enters degraded mode (read-
+  only) and refuses to record DECs from your clone, because there's no
+  attestation layer to flag bypassed commits.
+
+The bootstrap step is one-time per clone and takes < 5 seconds. If you
+genuinely want to opt the project out of Cairn entirely, delete
+`.cairn/` and the next commit will succeed (no hooks, no CI). That is a
+project-level decision, not a per-clone one — discuss with the team first.
+
+## Troubleshooting
+
+- **`cairn: command not found`** — install the CLI first via the npm
+  command above, or open the project in Claude Code with the plugin.
+- **`pre-commit hook failed`** — read the sensor output. The hook never
+  fails silently. If you genuinely need to bypass once, `git commit
+  --no-verify` works locally but the CI gate on the PR will still block.
+- **`cairn join` reports a version mismatch** — upgrade your CLI:
+  `npm install -g @isaacriehm/cairn@latest`.

package/templates/.cairn/config/sensors.yaml

@@ -0,0 +1,185 @@
+# Cairn sensor registry.
+#
+# Sensors are mechanical checks the orchestrator runs against an agent's diff.
+# Listed here are the GENERIC kinds that ship with the Cairn package. Stack
+# profiles (typescript-next-nest, python-fastapi, rails, go, rust, unknown — see
+# INTEGRATION_PLAN.md §16.1) propose profile-specific sensors at adoption; the
+# operator confirms each one. Project-specific sensors live in the adopting
+# project's extension block (see workflow.md).
+#
+# Per operator answer S1: Cairn package code does NOT hardcode any specific
+# project's sensor names. All concrete sensor identifiers below are
+# stack-profile-agnostic primitives.
+
+version: 1
+
+# ──────────────────────────────────────────────────────────────────────────────
+# Generic (stack-profile-agnostic) sensors.
+# ──────────────────────────────────────────────────────────────────────────────
+
+sensors:
+
+  # ── Layer A — mechanical stub catalog ─────────────────────────────────────
+  - id: stub-pattern-catalog
+    layer: A
+    kind: regex_catalog
+    description: "Mechanical scan of diff against .cairn/config/stub-patterns.yaml. Layer A of the honest-agent invariants stack."
+    catalog: .cairn/config/stub-patterns.yaml
+    triggers:
+      - every_run
+    fail_severity: hard
+
+  # ── Layer B — attestation cross-check ─────────────────────────────────────
+  - id: attestation-cross-check
+    layer: B
+    kind: attestation
+    description: "Cross-checks agent's attestation.yaml against the actual diff. Mismatches (lying about completeness, files-touched count, todos/stubs introduced) fail the run."
+    triggers:
+      - every_run_completion
+    fail_severity: hard
+
+  # ── Layer D — project structural / contract sensors ──────────────────────
+  - id: route-handler-non-empty
+    layer: D
+    kind: structural
+    description: "For every route/controller method, body must contain non-trivial implementation (not just `return null` / empty / throw not-implemented)."
+    triggers:
+      - diff_touches_glob
+    glob_keys:
+      - route_handler_globs
+    fail_severity: hard
+
+  - id: dto-no-fake-fields
+    layer: D
+    kind: structural
+    description: "DTO/schema fields that are declared optional and always evaluate undefined fail this sensor — they look thorough without doing work."
+    triggers:
+      - diff_touches_glob
+    glob_keys:
+      - dto_globs
+    fail_severity: hard
+
+  # ── Generator-drift sensors (profile-driven) ──────────────────────────────
+  - id: generator-drift
+    layer: D
+    kind: generator_drift
+    description: "Re-runs the project's declared generator commands (e.g. openapi:generate, db:generate, sqlc generate, alembic check). Any non-empty diff = source out of sync with artifact."
+    triggers:
+      - diff_touches_glob
+    glob_keys:
+      - generator_source_globs
+    profile_hook: profile.generators
+    fail_severity: hard
+
+  # ── Decision-assertion sensor ─────────────────────────────────────────────
+  - id: decision-assertions
+    layer: decisions
+    kind: assertion_evaluator
+    description: "For every accepted decision whose scope_globs overlap the diff, evaluate machine-readable assertions (schema_must_contain, text_must_*, index_must_exist, ast_pattern, file_must_not_be_modified, query_must_filter_by, route_must_have_guard, event_must_emit, service_method_must_call, human_review_hint). Failure quotes the assertion id + decision id + the contradicting line."
+    triggers:
+      - every_run
+    fail_severity: hard
+
+  # ── §V invariant sensors (auto-registered by backprop) ───────────────────
+  - id: invariant-suite
+    layer: invariants
+    kind: invariant_runner
+    description: "Runs every active §V invariant's linked sensor script (see backprop protocol — PRIMER §13). Active invariants accumulate over time; superseded ones are skipped."
+    triggers:
+      - every_run
+    sources:
+      - .cairn/ground/invariants/
+    fail_severity: hard
+
+  # ── Reviewer subagent (Layer C) ───────────────────────────────────────────
+  - id: reviewer-subagent
+    layer: C
+    kind: inferential
+    description: "Same model as implementer; fresh context. Reads only spec.tightened.md + diff + decisions ledger + in-scope assertions. Anti-completionist framing. For high-stakes runs, also enforces query-scope completeness (Codex audit Q1)."
+    model_strategy: same_as_implementer
+    triggers:
+      - all_layer_d_sensors_passed
+    fail_severity: soft   # produces verdict; orchestrator gates on operator override or auto-fail
+
+  # ── Layer E — high-stakes E2E / demo ─────────────────────────────────────
+  - id: e2e-real-db
+    layer: E
+    kind: e2e
+    description: "Runs the project's E2E suite against a real database (no mocks). High-stakes UAT MUST include a cross-tenant negative fixture (Codex audit Q1) — a request from user/org B against a resource owned by user/org A returning the expected denial."
+    triggers:
+      - high_stakes_glob_match
+    profile_hook: profile.e2e_command
+    fail_severity: hard
+    requires:
+      cross_tenant_fixture: true   # per L43
+
+  # ── Layer U — UAT-on-phone ───────────────────────────────────────────────
+  - id: uat-headless-chrome
+    layer: U
+    kind: uat
+    description: "Headless Chrome via Playwright captures GIF + screenshots + console + network. Evidence-file gate: .uat-passed contains SHA256 of bundle. Bare touch rejected."
+    triggers:
+      - code_class_or_high_stakes
+    fail_severity: hard
+
+  # ── Frontmatter freshness (nightly GC pass) ──────────────────────────────
+  - id: frontmatter-freshness
+    layer: gc
+    kind: frontmatter_check
+    description: "Walks load-bearing markdown in canonical zone. Flags files with verified-at older than 30 days; blocks reads via hook on > 60 days."
+    triggers:
+      - nightly_cron
+    fail_severity: soft
+
+  # ── Local-dirty-overlap gate (per Codex audit Q3) ─────────────────────────
+  - id: local-dirty-overlap
+    layer: pre_dispatch
+    kind: working_tree_check
+    description: "Before dispatch AND before push, check user's working tree for un-pushed dirty files that overlap the run's target_path_globs. If overlap, pause run and offer A/B/C resolution (stash / cancel / wait)."
+    triggers:
+      - pre_dispatch
+      - pre_push
+    fail_severity: soft   # operator decides resolution
+
+# ──────────────────────────────────────────────────────────────────────────────
+# Scoped-glob keys.
+#
+# Each adopting project fills these in its `<project_name>:` block. Sensors that
+# trigger on `glob_keys` resolve them at dispatch from the project block.
+# ──────────────────────────────────────────────────────────────────────────────
+
+required_glob_keys:
+  - route_handler_globs        # e.g. core/src/**/*.controller.ts (NestJS) | app/controllers/**/*.rb (Rails)
+  - dto_globs                  # e.g. core/src/**/*.dto.ts | apps/api/schemas/**/*.py
+  - generator_source_globs     # files that, when changed, mean the generator should re-run
+  - high_stakes_globs          # paths whose changes require Layer E + cross-tenant fixture
+
+# ──────────────────────────────────────────────────────────────────────────────
+# Copy-safety configuration (write guardian + Layer D sensor)
+#
+# The write guardian (PostToolUse hook on Write/Edit) and the Layer D
+# copy-safety sensor both consume this block. Globs default to common frontend
+# file extensions; extend per-project as needed. allowlist holds verbatim
+# strings that match a pattern but are intentional (technical error codes,
+# product names, etc.).
+# ──────────────────────────────────────────────────────────────────────────────
+
+copy_safety:
+  enabled: true
+  globs:
+    - "src/**/*.tsx"
+    - "src/**/*.jsx"
+    - "src/**/*.vue"
+    - "src/**/*.svelte"
+    - "**/*.html"
+    - "src/**/i18n/**/*.json"
+    - "src/**/locales/**/*.json"
+  allowlist: []
+
+# ──────────────────────────────────────────────────────────────────────────────
+# Disable list — sensors known to false-positive at >50% on a given project.
+# Default empty; populated per-project via /oops dialog (PRIMER §11 anti-pattern:
+# we DO NOT mock or stub sensor results to make them pass).
+# ──────────────────────────────────────────────────────────────────────────────
+
+disabled_per_project: []