@junghanacs/entwurf 0.18.2 → 0.20.0

package/run.sh

@@ -209,7 +209,7 @@ Usage:
 
   ./run.sh install-meta-bridge        # INTERNAL part of `setup` (native-harness plugin) + doctor recovery path — prefer `setup`; stateful GLOBAL install (plugin + USER MCP + settings keyset, honest uninstall state)
   ./run.sh uninstall-meta-bridge      # 1.0.0 meta-bridge Phase 2: stateful GLOBAL uninstall (restore only keys/items captured in install-state)
-  ./run.sh doctor-meta-bridge         # THE RELEASE ORACLE (#51, Linux-certified repair axis). exit 0 = every required layer was MEASURED on this Linux host: toolchain + state + plugin/MCP + resolved-artifact launch-form classification (all 3 owner hooks + doorbell static contract) + synthetic owner join + store scan + hook errors + SessionStart evidence + REQUIRED live MCP↔marker join + writer-version parity. Missing live evidence is NOT CERTIFIED (open a Claude session and re-run), never a pass; Darwin is not yet verified/certified and stays nonzero for this cut (future validation may reopen it). Detection power is held by check-meta-doctor-oracle
+  ./run.sh doctor-meta-bridge         # THE RELEASE ORACLE (#51, Linux-certified repair axis). exit 0 = every required layer was MEASURED on this Linux host: toolchain + state + plugin/MCP + resolved-artifact launch-form classification (all 3 owner hooks + doorbell static contract) + synthetic owner join + store scan + hook errors + SessionStart evidence + REQUIRED live MCP↔marker join + writer-version parity. Missing live evidence is NOT CERTIFIED (open a Claude session and re-run), never a pass; Darwin is NOT CERTIFIED and stays nonzero, on ONE narrowed reason — start-key and ppid are portable there (`ps` fallback, same string the TS core mints), so what holds the lane closed is per-process environment DISCOVERY alone, pending physical-host evidence. Detection power is held by check-meta-doctor-oracle
   ./run.sh copilot [args...]          # #82 RAIL 7: the MANAGED Copilot launch. exec()s the vendor CLI in THIS terminal (cwd/pid/exit preserved) with COPILOT_CLI_ENABLED_FEATURE_FLAGS=EXTENSIONS set for that one invocation — entwurf owns no part of your shell and writes nothing to it, but it owns the process it is about to become. Without that flag Copilot skips the extension scan SILENTLY. Refuses to launch unless the receiver unit is actually installed. Injects `--model auto` when no --model was given and `--yolo` when no explicit permission/surface policy flag was given, both BEFORE any `--`; every argument you pass is forwarded byte-identical. RUNNING THIS IS YOUR CONSENT to that profile — use plain `copilot` for stock vendor behaviour. Not tmux, not fresh-call, mints no citizen (birth is still the first prompt)
   ./run.sh install-copilot-bridge     # #82: GLOBAL install of the Copilot BIRTH plugin (own marketplace root; node+entry baked into the no-argv exec string). MCP wiring and the RECEIVER extension are separate install surfaces (install-copilot-mcp, install-copilot-receive). Also retires the stale Claude unit (--keep-stale-claude-unit opts out)
   ./run.sh uninstall-copilot-bridge   # #86 C3a: honest inverse of install-copilot-bridge from the package-owned install-state (exact qualified id + exact marketplace name/path + recorded assembly only; state deleted LAST; a failing vendor list is UNKNOWN and refuses; never --force, never the stale Claude unit)
@@ -2667,8 +2667,8 @@ check_acp_provider_surface() {
   # provider lib modules AND compiles + drives the REAL entry against a fake pi,
   # asserting: one surface name, the no-auth sentinel shape, full
   # ProviderModelConfig rows on the curated claude anchor, the EXACT curated model
-  # set both adapters contribute (claude 2 + cortex 4 —
-  # [QK:CORTEX-PROVIDER-SIX-ROW-SURFACE], the claim that catches an entry which
+  # set both adapters contribute (claude 3 + cortex 4 —
+  # [QK:CORTEX-PROVIDER-EXACT-ROW-SURFACE], the claim that catches an entry which
   # silently drops a whole backend), and that streamSimple is the real
   # streamShellAcp backend (checked BY NAME, never invoked — invoking spawns an
   # ACP child). Pure, no pi runtime, no API.
@@ -3564,6 +3564,7 @@ _check_pack_install_impl() {
   local loader_ids loader_expected
   loader_ids=$(awk '$1 == "entwurf" { print $2 }' <<<"$loader_out" | LC_ALL=C sort)
   loader_expected=$(printf '%s\n' \
+    claude-fable-5-1 \
     claude-opus-5 \
     claude-sonnet-5 \
     cortex-auto \
@@ -3571,7 +3572,7 @@ _check_pack_install_impl() {
     cortex-claude-sonnet-5 \
     cortex-openai-gpt-5.4 | LC_ALL=C sort)
   if [ "$loader_ids" != "$loader_expected" ]; then
-    fail "[check-pack-install] installed provider model set drifted — expected exactly 6 curated ids (claude 2 + cortex 4):"
+    fail "[check-pack-install] installed provider model set drifted — expected exactly 7 curated ids (claude 3 + cortex 4):"
     echo "  expected:" >&2
     echo "$loader_expected" | sed 's/^/    /' >&2
     echo "  actual (entwurf rows):" >&2
@@ -3582,8 +3583,8 @@ _check_pack_install_impl() {
   fi
   # Name the set on SUCCESS too, not only in the failure branch — same principle as
   # the pinned-pi version assert above: a gate that cannot name what it proved has
-  # proved nothing, and "6 rows" without the ids cannot be audited from a CI log.
-  echo "[check-pack-install] pi loader smoke pass (entwurf registered; exact 6-row curated set: claude 2 + cortex 4):"
+  # proved nothing, and a row COUNT without the ids cannot be audited from a CI log.
+  echo "[check-pack-install] pi loader smoke pass (entwurf registered; exact curated set: claude 3 + cortex 4):"
   echo "$loader_ids" | sed 's/^/    /'
 
   # npm-managed neutral install regression — the README's PRIMARY install path is
@@ -4815,6 +4816,44 @@ setup_result() {  # $1=component $2=PASS|SKIP|FAIL $3=detail
   esac
 }
 
+# ── platform rail certification (#78 D1) ─────────────────────────────────────
+# ONE place answers "are entwurf's HARNESS RAILS certified on this platform?".
+# Every detected-harness branch in setup_all asks it through setup_harness_result
+# below instead of re-deciding it per backend — a verdict that is honest for one
+# harness and cosmetic for the next is its own defect, not half a fix.
+#
+# Today the answer is Linux and nothing else, and that is an EVIDENCE fact, not a
+# taste: every shipped rail proves live ownership by reading the per-process
+# ENVIRONMENT of live harness children, no portable Darwin equivalent has been
+# MEASURED, and BASELINE.md/README record each rail as `NOT CERTIFIED — pending
+# physical host`. The harness doctors own that axis and refuse on Darwin.
+#
+# What moves this line: a physical-host receipt — a real harness doctor exiting 0
+# on that platform, recorded in BASELINE.md. A green INSTALLER never moves it;
+# installation portability and rail/runtime support are separate evidence axes
+# (Hard Rule 17). Do not widen this to make a CI job green.
+harness_rail_certified_platform() {
+  [ "$(uname -s)" = "Linux" ]
+}
+
+# setup_harness_result — the verdict for a detected harness unit whose INSTALL
+# COMPLETED. It exists because "the wiring was written" and "the rail works here"
+# are two different facts and setup measures only the first: setup runs no doctor
+# (that is the doctor commands' own job). On a platform whose rails carry no
+# receipt a completed install is therefore a detected-but-INCOMPLETE integration,
+# which Hard Rule 17 names non-green rather than cosmetic success. setup_result
+# has exactly three verdicts, so FAIL IS that named non-green — and the detail
+# must say so in the operator's own words: nothing failed to install, the rail is
+# simply uncertified here. The wording stays deliberately distinct from the
+# install-failure FAIL each branch keeps for a real refusal.
+setup_harness_result() {  # $1=component $2=what got wired $3=doctor owning the rail axis
+  if harness_rail_certified_platform; then
+    setup_result "$1" PASS "$2 — verify: $3"
+    return 0
+  fi
+  setup_result "$1" FAIL "$2 — the wiring WAS written and nothing failed to install, but this harness rail is NOT CERTIFIED — pending physical host on $(uname -s). setup runs no doctor; the rail axis is owned by '$3', which refuses on this platform. Tracking: #78."
+}
+
 # Installed-vs-source is decided by PACKAGE LOCATION — the same `*/node_modules/*`
 # seam run_ts and the bridge launcher already branch on — never by which of
 # pnpm/pi happens to be missing (an accidental failure is not a mode gate).
@@ -4955,7 +4994,7 @@ setup_all() {
     if ! pi_version_in_range "${pi_ver:-0}" "$pi_range"; then
       setup_result pi FAIL "detected pi ${pi_ver:-<unreadable version>} is outside the supported range $pi_range — Pi wiring not written; align pi, then re-run setup"
     elif (install_local_package "$project_dir"); then
-      setup_result pi PASS "project + user-scope wiring complete (pi $pi_ver in $pi_range) — verify: ./run.sh doctor-pi-provider"
+      setup_harness_result pi "project + user-scope wiring complete (pi $pi_ver in $pi_range)" "./run.sh doctor-pi-provider"
     else
       setup_result pi FAIL "pi wiring did not complete (see above) — repair, then re-run setup"
     fi
@@ -4965,16 +5004,20 @@ setup_all() {
   # setup ALSO wires the native-harness meta-bridge so a relocate/clone needs ONE
   # command. Detection-gated ("있으면 설정, 없으면 담아준다");
   # meta-bridge-install.sh is idempotent and enforces the Claude floor + its own
-  # named prerequisites itself, so a below-floor or refused host lands here as a
-  # detected FAIL, never a cosmetic green. CLAUDE_BIN pins the probe for the
-  # hermetic smoke; production leaves it unset.
+  # named prerequisites itself, so a below-floor host lands here as a detected
+  # FAIL. It no longer REFUSES ON PLATFORM NAME (0.20.0 opened Darwin: the
+  # installer's own mechanism is portable), so the other half of that old
+  # guarantee — "never a cosmetic green" — is now carried by setup_harness_result:
+  # an install that completes where the RAIL has no receipt is the named
+  # non-green, never a PASS pointing at a doctor that would refuse. CLAUDE_BIN
+  # pins the probe for the hermetic smoke; production leaves it unset.
   local claude_bin="${CLAUDE_BIN:-claude}"
   if ! command -v "$claude_bin" >/dev/null 2>&1; then
     setup_result claude SKIP "claude not on PATH — zero meta-bridge wiring written"
   else
     section "meta-bridge install (native harness detected: Claude Code)"
     if (cd "$REPO_DIR" && bash scripts/meta-bridge-install.sh); then
-      setup_result claude PASS "meta-bridge wired — verify: ./run.sh doctor-meta-bridge"
+      setup_harness_result claude "meta-bridge wired" "./run.sh doctor-meta-bridge"
     else
       setup_result claude FAIL "detected Claude Code, but the meta-bridge integration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5017,19 +5060,19 @@ setup_all() {
   else
     agy_rc=0; wire_agy_bridge || agy_rc=$?
     if [ "$agy_rc" -eq 0 ]; then
-      setup_result agy-bridge PASS "MCP bridge wired — verify: ./run.sh doctor-agy-bridge"
+      setup_harness_result agy-bridge "MCP bridge wired" "./run.sh doctor-agy-bridge"
     else
       setup_result agy-bridge FAIL "detected agy, but the MCP bridge integration did not complete (reason above) — repair, then re-run setup"
     fi
     agy_rc=0; wire_agy_statusline || agy_rc=$?
     if [ "$agy_rc" -eq 0 ]; then
-      setup_result agy-statusline PASS "statusLine wired — verify: ./run.sh doctor-agy-statusline"
+      setup_harness_result agy-statusline "statusLine wired" "./run.sh doctor-agy-statusline"
     else
       setup_result agy-statusline FAIL "detected agy, but the statusLine integration did not complete (reason above) — repair, then re-run setup"
     fi
     agy_rc=0; wire_agy_hooks || agy_rc=$?
     if [ "$agy_rc" -eq 0 ]; then
-      setup_result agy-hooks PASS "birth imprint wired — verify: ./run.sh doctor-agy-hooks"
+      setup_harness_result agy-hooks "birth imprint wired" "./run.sh doctor-agy-hooks"
     else
       setup_result agy-hooks FAIL "detected agy, but the birth-imprint integration did not complete (reason above) — repair, then re-run setup"
     fi
@@ -5053,13 +5096,13 @@ setup_all() {
     section "copilot units (native harness detected: GitHub Copilot CLI)"
     copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-bridge-install.sh) || copilot_rc=$?
     if [ "$copilot_rc" -eq 0 ]; then
-      setup_result copilot-birth PASS "birth plugin installed — verify: ./run.sh doctor-copilot-bridge"
+      setup_harness_result copilot-birth "birth plugin installed" "./run.sh doctor-copilot-bridge"
     else
       setup_result copilot-birth FAIL "detected copilot, but the birth plugin install did not complete (see above) — repair, then re-run setup"
     fi
     copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-mcp-bridge.sh install) || copilot_rc=$?
     if [ "$copilot_rc" -eq 0 ]; then
-      setup_result copilot-mcp PASS "MCP server registered — verify: ./run.sh doctor-copilot-mcp"
+      setup_harness_result copilot-mcp "MCP server registered" "./run.sh doctor-copilot-mcp"
     else
       setup_result copilot-mcp FAIL "detected copilot, but the MCP registration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5077,14 +5120,14 @@ setup_all() {
     else
       copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-receive-bridge.sh install) || copilot_rc=$?
       if [ "$copilot_rc" -eq 0 ]; then
-        setup_result copilot-receive PASS "receiver extension installed — verify: ./run.sh doctor-copilot-receive"
+        setup_harness_result copilot-receive "receiver extension installed" "./run.sh doctor-copilot-receive"
       else
         setup_result copilot-receive FAIL "detected copilot, but the receiver extension install did not complete (see above) — repair, then re-run setup"
       fi
     fi
     copilot_rc=0; (cd "$REPO_DIR" && bash scripts/copilot-statusline-bridge.sh install) || copilot_rc=$?
     if [ "$copilot_rc" -eq 0 ]; then
-      setup_result copilot-statusline PASS "visible footer wired — verify: ./run.sh doctor-copilot-statusline"
+      setup_harness_result copilot-statusline "visible footer wired" "./run.sh doctor-copilot-statusline"
     else
       setup_result copilot-statusline FAIL "detected copilot, but the visible-footer integration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5107,13 +5150,13 @@ setup_all() {
     section "omp units (native harness detected: oh-my-pi)"
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-bridge-install.sh) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-birth PASS "birth extension installed — verify: ./run.sh doctor-omp-bridge"
+      setup_harness_result omp-birth "birth extension installed" "./run.sh doctor-omp-bridge"
     else
       setup_result omp-birth FAIL "detected omp, but the birth extension install did not complete (see above) — repair, then re-run setup"
     fi
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-mcp-bridge.sh install) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-mcp PASS "MCP server registered — verify: ./run.sh doctor-omp-mcp"
+      setup_harness_result omp-mcp "MCP server registered" "./run.sh doctor-omp-mcp"
     else
       setup_result omp-mcp FAIL "detected omp, but the MCP registration did not complete (see above) — repair, then re-run setup"
     fi
@@ -5124,13 +5167,13 @@ setup_all() {
     # shipping a citizen whose tools nobody can call.
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-config-xdev.sh install) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-config PASS "tools.xdev: false written — verify: ./run.sh doctor-omp-mcp"
+      setup_harness_result omp-config "tools.xdev: false written" "./run.sh doctor-omp-mcp"
     else
       setup_result omp-config FAIL "detected omp, but the tools.xdev operator setting did not land (see above) — resolve it, then re-run setup"
     fi
     omp_rc=0; (cd "$REPO_DIR" && bash scripts/omp-receive-install.sh) || omp_rc=$?
     if [ "$omp_rc" -eq 0 ]; then
-      setup_result omp-receive PASS "receiver extension installed — verify: ./run.sh doctor-omp-receive"
+      setup_harness_result omp-receive "receiver extension installed" "./run.sh doctor-omp-receive"
     else
       setup_result omp-receive FAIL "detected omp, but the receiver extension install did not complete (see above) — repair, then re-run setup"
     fi
@@ -6202,10 +6245,12 @@ case "$cmd" in
     # XDG data dir ($XDG_DATA_HOME/entwurf/meta-bridge/.assembled — dev clone and
     # installed package alike, never the checkout) and runs marketplace add +
     # install --scope user, so every native Claude Code session auto-loads it.
-    # Idempotent; Linux is the only currently certified axis for the #51 repair cut.
-    # Darwin fails loud as not-yet-verified because the strict doctor cannot currently
-    # certify its live owner join; future validation may reopen it. Uninstall permits Darwin
-    # so an older macOS install is not stranded without an honest inverse.
+    # Idempotent. Install accepts Linux | Darwin — the fence that remains inside the
+    # installer is the toolchain check (python3/node/claude presence), not the platform
+    # name. Rail certification stays with doctor-meta-bridge: Darwin is NOT CERTIFIED —
+    # pending physical host, reason = per-process environment DISCOVERY. Uninstall
+    # permits Darwin so an older macOS install is not stranded without an honest
+    # inverse.
     (cd "$REPO_DIR" && bash scripts/meta-bridge-install.sh "$@")
     ;;
   uninstall-meta-bridge)

package/scripts/agy-bridge.sh

@@ -233,7 +233,7 @@ doctor_static_one() {
       # entwurf does NOT repair a failed launcher here: it may be owned by a foreign file.
       log "  $label: configured → '$cmd' does NOT serve MCP with its configured args/env$link_note"
       log "        $BOOT_DETAIL"
-      log "        Identify the launcher: command -v '$cmd'; readlink -f \"\$(command -v '$cmd')\""
+      log "        Identify the launcher: command -v '$cmd'; ls -l \"\$(command -v '$cmd')\""
       log "        If it is entwurf's managed dev link, restore it with ./run.sh expose-dev-bin (it REFUSES a foreign link)."
       log "        If a foreign launcher owns the name, repair/remove it yourself or put a working one earlier on PATH."
       return 1 ;;

package/scripts/agy-imprint.sh

@@ -1,13 +1,16 @@
 #!/usr/bin/env bash
 # Stable bin wrapper for Antigravity PreInvocation birth imprint.
 set -euo pipefail
-SELF="${BASH_SOURCE[0]}"
-if command -v readlink >/dev/null 2>&1; then
-  RESOLVED="$(readlink -f "$SELF" 2>/dev/null || printf '%s' "$SELF")"
-else
-  RESOLVED="$SELF"
-fi
-HERE="$(cd "$(dirname "$RESOLVED")" && pwd)"
+SOURCE="${BASH_SOURCE[0]}"
+while [ -L "$SOURCE" ]; do
+  DIR="$(cd -P "$(dirname "$SOURCE")" && pwd)"
+  TARGET="$(readlink "$SOURCE")"
+  case "$TARGET" in
+    /*) SOURCE="$TARGET" ;;
+    *) SOURCE="$DIR/$TARGET" ;;
+  esac
+done
+HERE="$(cd -P "$(dirname "$SOURCE")" && pwd)"
 ROOT="$(cd "$HERE/.." && pwd)"
 
 # Node refuses --experimental-strip-types for raw .ts below node_modules. Dev

package/scripts/check-acp-carrier-augment.ts

@@ -31,8 +31,9 @@ import { loadEngraving } from "../pi-extensions/lib/acp/engraving.ts";
 import { bridgeConfigSignature, contextMessageSignatures } from "../pi-extensions/lib/acp/session-store.ts";
 import { buildClaudeSessionMeta } from "../pi-extensions/lib/acp/tool-surface.ts";
 import { ENTWURF_PROJECT_CONTEXT_OPEN_TAG } from "../protocol.js";
+import { reclaimOnExit } from "./lib/reclaim-on-exit.ts";
 
-const tmp = mkdtempSync(join(tmpdir(), "acp-carrier-augment-"));
+const tmp = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-carrier-augment-")));
 const REPO_DIR = fileURLToPath(new URL("..", import.meta.url));
 const BRIDGE_MARK = "operating through entwurf";
 
@@ -241,8 +242,8 @@ function ctxWith(firstUser: string): Context {
 //          absent → keep it. Home AGENTS.md always survives.
 // ===========================================================================
 {
-	const home = mkdtempSync(join(tmpdir(), "acp-home-"));
-	const proj = mkdtempSync(join(tmpdir(), "acp-proj-"));
+	const home = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-home-")));
+	const proj = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-proj-")));
 	writeFileSync(join(home, "AGENTS.md"), "HOME-AGENTS-CONTENT");
 	writeFileSync(join(proj, "AGENTS.md"), "CWD-AGENTS-CONTENT");
 
@@ -295,7 +296,7 @@ function ctxWith(firstUser: string): Context {
 	assert.match(dateLine as string, /^Current date: \d{4}-\d{2}-\d{2}$/, "date is day-granularity only (no clock time)");
 
 	// > 50KB cwd AGENTS.md → augment truncated with the marker.
-	const bigHome = mkdtempSync(join(tmpdir(), "acp-big-"));
+	const bigHome = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-big-")));
 	writeFileSync(join(bigHome, "AGENTS.md"), "X".repeat(80 * 1024));
 	const big = buildPiContextAugment({ backend: "claude", cwd: tmp, mcpServerNames: [], homeDir: bigHome });
 	assert.ok(Buffer.byteLength(big, "utf8") <= 50 * 1024, "augment is truncated to the 50KB cap");
@@ -313,7 +314,7 @@ function ctxWith(firstUser: string): Context {
 //    remains an honest fallback; the maintained package prompt must not hit it.
 // ===========================================================================
 {
-	const budgetHome = mkdtempSync(join(tmpdir(), "acp-budget-home-"));
+	const budgetHome = reclaimOnExit(mkdtempSync(join(tmpdir(), "acp-budget-home-")));
 	writeFileSync(join(budgetHome, "AGENTS.md"), "H".repeat(12 * 1024));
 	const actual = buildPiContextAugment({
 		backend: "claude",

package/scripts/check-acp-cortex.ts

@@ -323,6 +323,47 @@ const enrichedServers: AcpMcpServer[] = [
 			/absolute realHome/,
 			"a non-absolute realHome must refuse (the child must never re-derive it)",
 		);
+		assert.throws(
+			() =>
+				ensureCortexDualHomeOverlay({
+					scopeKey: "pi:sess-empty",
+					mcpServers: [],
+					realHome: "",
+					overlaysRoot,
+					isPidAlive: () => true,
+				}),
+			/absolute realHome/,
+			"an empty realHome must refuse — the contract sentence is 'absolute', and '' is not",
+		);
+		// …and the guard states PATH-FLAVOR absoluteness, not the host it runs on:
+		// a drive/UNC realHome is absolute in the win32 flavor, so a POSIX host must
+		// NOT read it as relative. (This asserts nothing about native-Windows support
+		// — only that the refusal rule is decided by the path, not by process.platform.)
+		// realSnowflakeHome is pinned under tmp so the positive cells exercise the
+		// GUARD alone: the win32-flavored realHome never reaches a POSIX join for fs
+		// work, and every path the overlay materializes stays under overlaysRoot.
+		for (const winFlavored of ["C:\\Users\\x", "\\\\server\\share"]) {
+			let winOverlay: ReturnType<typeof ensureCortexDualHomeOverlay> | undefined;
+			assert.doesNotThrow(
+				() => {
+					winOverlay = ensureCortexDualHomeOverlay({
+						scopeKey: `pi:sess-win-${winFlavored.length}`,
+						mcpServers: [],
+						realHome: winFlavored,
+						realSnowflakeHome: realSnowflake,
+						overlaysRoot,
+						isPidAlive: () => true,
+					});
+				},
+				`a win32-flavored absolute realHome (${JSON.stringify(winFlavored)}) must PASS the guard — absoluteness is judged by PATH FLAVOR, never by the host the gate runs on [QK:CORTEX-REALHOME-PLATFORM-NEUTRAL]`,
+			);
+			assert.ok(
+				winOverlay !== undefined &&
+					winOverlay.scopeDir.startsWith(overlaysRoot) &&
+					existsSync(join(winOverlay.snowflakeHome, "cortex")),
+				"the accepted win32-flavored realHome must still materialize entirely under the overlays root (the guard is the only thing the flavor cell widens)",
+			);
+		}
 	} finally {
 		rmSync(root, { recursive: true, force: true });
 	}

package/scripts/check-acp-provider-surface.ts

@@ -138,19 +138,22 @@ try {
 	// Set comparison (sorted, exact) — not `includes`: a substring/anchor probe
 	// cannot see a row that VANISHED, and the cortex ids contain the claude ids as
 	// substrings. Expected is derived from the two source id constants so there is
-	// one SSOT; the literal 6 below is the independent floor that catches a
-	// curation list mutated to empty (which would move expected and captured
-	// together).
+	// one SSOT; the literal 7 below is the independent floor that catches a
+	// curation list that SHRANK — expected derives from the same constants, so a
+	// dropped row moves expected and captured together and the set comparison
+	// stays green. That is why the count is asserted separately and carries its
+	// own claim: the cortex list has `CORTEX-CURATED-FOUR-ROWS` for exactly this
+	// failure, and the claude list needs its own oracle rather than borrowing it.
 	const expectedIds = [...SUPPORTED_ANTHROPIC_MODEL_IDS, ...SUPPORTED_CORTEX_MODEL_IDS].slice().sort();
 	assert.equal(
 		expectedIds.length,
-		6,
-		`curated id constants must total 6 rows (claude 2 + cortex 4) — got ${expectedIds.length}: ${expectedIds.join(", ")}`,
+		7,
+		`[QK:CLAUDE-CURATED-THREE-ROWS] curated id constants must total 7 rows (claude 3 + cortex 4) — got ${expectedIds.length}: ${expectedIds.join(", ")}`,
 	);
 	assert.deepEqual(
 		capIds.slice().sort(),
 		expectedIds,
-		`[QK:CORTEX-PROVIDER-SIX-ROW-SURFACE] compiled entry must register the EXACT curated set of both adapters (claude 2 + cortex 4) — got: ${capIds.join(", ") || "none"}`,
+		`[QK:CORTEX-PROVIDER-EXACT-ROW-SURFACE] compiled entry must register the EXACT curated set of both adapters (claude 3 + cortex 4) — got: ${capIds.join(", ") || "none"}`,
 	);
 	assert.equal(typeof cap.cfg.streamSimple, "function", "entry streamSimple must be a function");
 	// Regression guard: the entry must wire the REAL backend (streamShellAcp),

package/scripts/check-copilot-birth-hook.ts

@@ -52,6 +52,7 @@ import { resolveFactList } from "../pi-extensions/lib/entwurf-facts.ts";
 import { nativePushSupported } from "../pi-extensions/lib/entwurf-v2-contract.ts";
 import { META_SENDER_BACKENDS, resolveTrustedMetaSenderIdentity } from "../pi-extensions/lib/meta-sender-identity.ts";
 import { listAllMetaIdentitiesDir, processStartKey } from "../pi-extensions/lib/meta-session.ts";
+import { reclaimOnExit } from "./lib/reclaim-on-exit.ts";
 
 const REPO = path.resolve(path.dirname(fileURLToPath(import.meta.url)), "..");
 const PLUGIN = "entwurf-meta-receive-copilot";
@@ -63,7 +64,8 @@ function ok(label: string, cond: boolean): void {
 	passed++;
 }
 
-const root = mkdtempSync(path.join(tmpdir(), "entwurf-copilot-birth."));
+const root = reclaimOnExit(mkdtempSync(path.join(tmpdir(), "entwurf-copilot-birth.")));
+
 const asm = path.join(root, "asm");
 
 // ── 1. the real assembler ────────────────────────────────────────────────────