@kungfu-tech/buildchain 4.0.2 → 4.0.3-alpha.0

package/architecture/{v4-architecture-constitution.md → architecture-constitution.md}

@@ -19,7 +19,7 @@ ai_provenance:
 # Buildchain v4 Architecture Constitution
 
 This constitution governs the `dev/v4/v4.0` release line. The executable
-authority is [`v4-capability-state-machine-manifest.json`](v4-capability-state-machine-manifest.json),
+authority is [`capability-state-machine-manifest.json`](capability-state-machine-manifest.json),
 validated by `buildchain architecture validate`. This document explains that
 contract; it cannot override it.
 
@@ -27,7 +27,7 @@ contract; it cannot override it.
 
 The first v4 line was created from the exact protected v3 merge that contains
 this constitution and
-[`v4-bootstrap-authority.json`](v4-bootstrap-authority.json). The exact source,
+[`bootstrap-authority.json`](bootstrap-authority.json). The exact source,
 bootstrap revision, N-1 qualification, protection, and merge-queue evidence are
 recorded there under the state `qualified-protected-v4-bootstrap`; a local
 branch or unrecorded candidate commit is not release-line authority.
@@ -87,7 +87,7 @@ second hand-maintained architecture list is authoritative.
 The v4 line owns Delivery Warrant, Release Transaction, activation,
 publication, propagation, and release-tail state. Its production domain is the
 tracked artifact governed by
-[`v4-rust-wasm-production-authority.json`](v4-rust-wasm-production-authority.json):
+[`rust-wasm-production-authority.json`](rust-wasm-production-authority.json):
 Node verifies the artifact digest and ABI before use and fails closed without a
 JavaScript semantic fallback. This does not introduce a daemon, a service
 database, provider SDKs in contracts or Rust domain code, or a second writer.
@@ -97,7 +97,7 @@ regain production authority without a new reviewed cutover.
 ## 7. Wave 0 host boundary
 
 The bounded Rust/libnode bridge spike is recorded in
-[`v4-rust-libnode-bridge-spike.md`](v4-rust-libnode-bridge-spike.md). Wave 0
+[`rust-libnode-bridge-spike.md`](rust-libnode-bridge-spike.md). Wave 0
 uses a replaceable subprocess host behind a closed byte-oriented contract; the
 Rust trunk owns process lifecycle and transport, while existing TypeScript
 remains the only production writer. This selection is evidence for later
@@ -106,7 +106,7 @@ qualification, not a final ABI or consumer migration.
 ## 8. Wave 2 Stage Capsule contract
 
 The executable Stage Capsule architecture contract is
-[`v4-stage-capsule-contract.json`](v4-stage-capsule-contract.json). It fixes one
+[`stage-capsule-contract.json`](stage-capsule-contract.json). It fixes one
 schema authority, one TypeScript v3 writer, validation-only Rust, and zero
 provider imports or production write-authority changes. Identity, retention
 promise, current availability, qualification, content roots, and rooted
@@ -115,7 +115,7 @@ reconciliation work must consume this contract rather than create competing
 identity or writer authority.
 
 The successor storage slice is governed by
-[`v4-stage-capsule-store-contract.json`](v4-stage-capsule-store-contract.json).
+[`stage-capsule-store-contract.json`](stage-capsule-store-contract.json).
 It adds provider-neutral output-manifest, retention-state, transport, and store
 receipt roots plus a deterministic no-network local filesystem reference
 store. GitHub Artifact and S3-compatible adapters remain effect-disabled or
@@ -124,7 +124,7 @@ and qualification evidence stay separate facts; none becomes Capsule identity,
 qualification authority, or a production writer.
 
 Final Wave 2 qualification is governed by
-[`v4-stage-capsule-qualification.json`](v4-stage-capsule-qualification.json).
+[`stage-capsule-qualification.json`](stage-capsule-qualification.json).
 It consumes the existing Capsule, store, checkpoint, and resume authorities for
 six real-runner shadow campaigns and one exact terminal reconciliation. A
 qualification root is evidence only: TypeScript v3 remains production
@@ -134,7 +134,7 @@ effects, release effects, and public cutover remain outside this transition.
 ## 9. Wave 3 provider operation journal
 
 The executable provider operation journal contract is
-[`v4-provider-operation-journal-contract.json`](v4-provider-operation-journal-contract.json).
+[`provider-operation-journal-contract.json`](provider-operation-journal-contract.json).
 It freezes one closed schema authority and one Rust v4 state-fold authority
 for append-only intent, attempt, rooted observation, confirmation, and
 reconciliation records. The Node v4 plane performs provider adaptation and
@@ -161,7 +161,7 @@ closed with typed faults.
 ## 10. Release activation production domain
 
 The executable release activation boundary is
-[`v4-release-activation-shadow-domain.json`](v4-release-activation-shadow-domain.json).
+[`release-activation-shadow-domain.json`](release-activation-shadow-domain.json).
 It consumes an explicit qualification root, dependency graph, compensation
 boundaries, provider-operation identities, and append-only journal facts to
 derive one deterministic activation plan and resume state. Rust/WASM is the
@@ -180,7 +180,7 @@ rooted readback before confirmation or retry.
 ## 11. Stable publication production fence
 
 The stable-candidate production publication boundary is governed by
-[`v4-stable-publication-fence.json`](v4-stable-publication-fence.json). It
+[`stable-publication-fence.json`](stable-publication-fence.json). It
 binds one exact candidate root to source, metadata, provider-operation journal,
 protected ancestry, provider confirmations, and an independently sealed
 qualification before a production publication plan can exist.
@@ -196,7 +196,7 @@ targets, and it must read them back before completion.
 ## 12. Wave 3 partial-mutation recovery qualification
 
 The executable recovery qualification boundary is
-[`v4-partial-mutation-recovery-qualification.json`](v4-partial-mutation-recovery-qualification.json).
+[`partial-mutation-recovery-qualification.json`](partial-mutation-recovery-qualification.json).
 It consumes retained Stage Capsule resume evidence and release-activation journal
 state only after exact source, policy, platform, qualification, plan, state,
 operation, journal, and compensation-boundary roots agree.

package/architecture/{v3-core-mechanism-inventory.md → baseline-core-mechanism-inventory.md}

@@ -19,7 +19,7 @@ ai_provenance:
 # v3 Core Mechanism Inventory
 
 This is the human projection of
-[`v3-core-mechanism-inventory.json`](v3-core-mechanism-inventory.json).
+[`baseline-core-mechanism-inventory.json`](baseline-core-mechanism-inventory.json).
 The JSON inventory is authoritative and validated by
 `scripts/check-core-mechanism-inventory.mjs`.
 

package/architecture/{v4-bootstrap-authority.json → bootstrap-authority.json}

@@ -36,9 +36,9 @@
     "verifiedAt": "2026-08-07T02:20:03Z"
   },
   "authorityFiles": [
-    "architecture/v4-bootstrap-authority.json",
-    "architecture/v4-capability-state-machine-manifest.json",
-    "architecture/v4-exception-ledger.json"
+    "architecture/bootstrap-authority.json",
+    "architecture/capability-state-machine-manifest.json",
+    "architecture/exception-ledger.json"
   ],
   "bootstrapRule": {
     "authorityRevision": "the exact protected dev/v3/v3.0 merge containing this contract",

package/architecture/{v3-v4-capability-closure.md → capability-parity-closure.md}

@@ -19,7 +19,7 @@ ai_provenance:
 # Buildchain v3 to v4 live capability inventory
 
 The machine-readable inventory in
-[`v3-v4-live-capability-inventory.json`](v3-v4-live-capability-inventory.json)
+[`capability-parity-live-capability-inventory.json`](capability-parity-live-capability-inventory.json)
 binds the previous absorption-family v3 cut, the execution-time protected v3
 head, and the execution-time protected v4 head. It is an auditable cache of
 Git objects and generated registries, not an assertion that branch names remain
@@ -36,14 +36,14 @@ previous family capture. Each capability has exactly one disposition:
 Run the fail-closed check with:
 
 ```sh
-node scripts/check-v3-v4-capability-inventory.mjs
+node scripts/check-capability-parity-inventory.mjs
 ```
 
 Refresh the checked-in matrix only after intentionally updating all three exact
 cuts and reviewing every newly discovered gap:
 
 ```sh
-node scripts/check-v3-v4-capability-inventory.mjs --write
+node scripts/check-capability-parity-inventory.mjs --write
 ```
 
 The extractor rejects a new missing capability unless its exact stable identity

package/architecture/{v3-v4-live-capability-inventory.json → capability-parity-live-capability-inventory.json}

@@ -68690,7 +68690,7 @@
       "disposition": "v4-native",
       "id": "platform-branch:linux",
       "negativeProbe": "removing or substituting the declared v4 route fails validation",
-      "ownerAssignment": "2026-08-26-buildchain-v4-cross-platform-adopter-qualification",
+      "ownerAssignment": "2026-08-26-buildchain-cross-platform-adopter-qualification",
       "positiveProbe": "the exact v4 cut contains the declared route evidence",
       "residual": null,
       "sourceEvidence": {
@@ -68712,7 +68712,7 @@
       "disposition": "v4-native",
       "id": "platform-branch:macos",
       "negativeProbe": "removing or substituting the declared v4 route fails validation",
-      "ownerAssignment": "2026-08-26-buildchain-v4-cross-platform-adopter-qualification",
+      "ownerAssignment": "2026-08-26-buildchain-cross-platform-adopter-qualification",
       "positiveProbe": "the exact v4 cut contains the declared route evidence",
       "residual": null,
       "sourceEvidence": {
@@ -68734,7 +68734,7 @@
       "disposition": "v4-native",
       "id": "platform-branch:self-hosted",
       "negativeProbe": "removing or substituting the declared v4 route fails validation",
-      "ownerAssignment": "2026-08-26-buildchain-v4-cross-platform-adopter-qualification",
+      "ownerAssignment": "2026-08-26-buildchain-cross-platform-adopter-qualification",
       "positiveProbe": "the exact v4 cut contains the declared route evidence",
       "residual": null,
       "sourceEvidence": {
@@ -68756,7 +68756,7 @@
       "disposition": "v4-native",
       "id": "platform-branch:windows",
       "negativeProbe": "removing or substituting the declared v4 route fails validation",
-      "ownerAssignment": "2026-08-26-buildchain-v4-cross-platform-adopter-qualification",
+      "ownerAssignment": "2026-08-26-buildchain-cross-platform-adopter-qualification",
       "positiveProbe": "the exact v4 cut contains the declared route evidence",
       "residual": null,
       "sourceEvidence": {

package/architecture/{v4-capability-state-machine-manifest.json → capability-state-machine-manifest.json}

@@ -3,7 +3,7 @@
   "contract": "kungfu-buildchain-v4-capability-state-machine-manifest",
   "releaseLine": {
     "branch": "dev/v4/v4.0",
-    "bootstrapAuthority": "architecture/v4-bootstrap-authority.json",
+    "bootstrapAuthority": "architecture/bootstrap-authority.json",
     "productionAuthority": "v4-native",
     "productionFallback": null,
     "rollbackRef": "release/v3/v3.0",
@@ -549,5 +549,5 @@
       }
     }
   ],
-  "exceptionLedger": "architecture/v4-exception-ledger.json"
+  "exceptionLedger": "architecture/exception-ledger.json"
 }

package/architecture/{v4-capability-state-machine-manifest.schema.json → capability-state-machine-manifest.schema.json}

@@ -36,7 +36,7 @@
       "minItems": 1,
       "items": { "$ref": "#/$defs/stateMachine" }
     },
-    "exceptionLedger": { "const": "architecture/v4-exception-ledger.json" }
+    "exceptionLedger": { "const": "architecture/exception-ledger.json" }
   },
   "$defs": {
     "stringArray": {
@@ -58,7 +58,7 @@
       "properties": {
         "branch": { "const": "dev/v4/v4.0" },
         "bootstrapAuthority": {
-          "const": "architecture/v4-bootstrap-authority.json"
+          "const": "architecture/bootstrap-authority.json"
         },
         "productionAuthority": { "const": "v4-native" },
         "productionFallback": { "type": "null" },

package/architecture/ci-lane-change-budget.json

@@ -608,6 +608,23 @@
         "expectedContributionSeconds": 180,
         "rationale": "Only successful same-repository version PRs regenerate from the protected base and read completed publication evidence; ordinary source PRs skip the lane. Native queue checks remain final merge authority."
       }
+    },
+    {
+      "laneId": ".github/workflows/public-release-oci-compose-preview.yml#promote",
+      "authorityClass": "release",
+      "triggerClass": "reusable",
+      "concurrencyPolicy": {
+        "mode": "serialized",
+        "cancelInProgress": false
+      },
+      "expectedRunnerMinutes": 8,
+      "cancellationBehavior": "finish-started",
+      "sloImpact": {
+        "mergeCritical": false,
+        "metric": "qualified Compose preview promotion",
+        "expectedContributionSeconds": 0,
+        "rationale": "Runs only after completed exact-source public installation qualification; no merge-critical runner lane is added."
+      }
     }
   ],
   "declarationFamilies": [
@@ -657,6 +674,7 @@
         ".github/workflows/patrol-monthly.yml#universal-bootstrap",
         ".github/workflows/patrol-observed-evidence.yml#universal-bootstrap",
         ".github/workflows/patrol-weekly.yml#universal-bootstrap",
+        ".github/workflows/public-release-oci-compose-preview.yml#universal-bootstrap",
         ".github/workflows/publication-artifact.yml#universal-bootstrap",
         ".github/workflows/release-candidate-promote.yml#universal-bootstrap",
         ".github/workflows/release-propagation.yml#universal-bootstrap",

package/architecture/{v4-cross-platform-adopter-qualification.json → cross-platform-adopter-qualification.json}

@@ -1,9 +1,9 @@
 {
   "schemaVersion": 1,
   "contract": "kungfu-buildchain-v4-cross-platform-adopter-qualification",
-  "inventoryAuthority": "architecture/v3-v4-live-capability-inventory.json",
-  "implementation": "packages/core/v4-cross-platform-adopter-qualification.js",
-  "runner": "scripts/v4-cross-platform-adopter-qualification.mjs",
+  "inventoryAuthority": "architecture/capability-parity-live-capability-inventory.json",
+  "implementation": "packages/core/cross-platform-adopter-qualification.js",
+  "runner": "scripts/cross-platform-adopter-qualification.mjs",
   "publicWorkflow": ".github/workflows/public-build-adopter-qualification.yml",
   "sourceBinding": {
     "runtime": "job.workflow_sha",

package/architecture/{v4-delivery-authority-parity.json → delivery-authority-parity.json}

@@ -31,7 +31,7 @@
         "tests/dev-delivery-two-phase.test.mjs",
         "tests/dev-delivery-two-phase-run.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-01"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-01"
     },
     {
       "id": "DA-02",
@@ -45,7 +45,7 @@
         "tests/dev-delivery-two-phase.test.mjs",
         "tests/dev-delivery-native-run.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-02"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-02"
     },
     {
       "id": "DA-03",
@@ -70,7 +70,7 @@
         "tests/dev-delivery-provider-heartbeat.test.mjs",
         "tests/build-surface.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-03"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-03"
     },
     {
       "id": "DA-04",
@@ -84,7 +84,7 @@
         "tests/dev-delivery-two-phase.test.mjs",
         "tests/dev-delivery-two-phase-run.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-04"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-04"
     },
     {
       "id": "DA-05",
@@ -95,7 +95,7 @@
         "packages/core/dev-delivery-warrant.js"
       ],
       "verificationEvidence": ["tests/dev-delivery-two-phase.test.mjs"],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-05"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-05"
     },
     {
       "id": "DA-06",
@@ -109,7 +109,7 @@
         "tests/dev-delivery-warrant.test.mjs",
         "tests/dev-delivery-two-phase.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-06"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-06"
     },
     {
       "id": "DA-07",
@@ -124,7 +124,7 @@
         "tests/dev-delivery-warrant.test.mjs",
         "tests/dev-pr-auto-merge.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-07"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-07"
     },
     {
       "id": "DA-08",
@@ -135,7 +135,7 @@
         "packages/core/dev-delivery-authority-state.js"
       ],
       "verificationEvidence": ["tests/dev-delivery-authority.test.mjs"],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-08"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-08"
     },
     {
       "id": "DA-09",
@@ -148,7 +148,7 @@
         "contracts/dev-delivery-authority-v2.schema.json"
       ],
       "verificationEvidence": ["tests/dev-delivery-authority.test.mjs"],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-09"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-09"
     },
     {
       "id": "DA-10",
@@ -159,7 +159,7 @@
         "packages/core/dev-delivery-authority-landing.js"
       ],
       "verificationEvidence": ["tests/dev-delivery-authority.test.mjs"],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-10"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-10"
     },
     {
       "id": "DA-11",
@@ -172,7 +172,7 @@
         "packages/core/dev-delivery-landing-readback.js"
       ],
       "verificationEvidence": ["tests/dev-delivery-authority.test.mjs"],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-11"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-11"
     },
     {
       "id": "DA-12",
@@ -186,7 +186,7 @@
         "tests/dev-delivery-authority.test.mjs",
         "tests/dev-delivery-warrant-command.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-12"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-12"
     },
     {
       "id": "DA-13",
@@ -197,7 +197,7 @@
         "scripts/dev-delivery-authority.mjs"
       ],
       "verificationEvidence": ["tests/dev-delivery-authority.test.mjs"],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-13"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-13"
     },
     {
       "id": "DA-14",
@@ -212,7 +212,7 @@
         "tests/dev-delivery-authority.test.mjs",
         "tests/dev-delivery-two-phase.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-14"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-14"
     },
     {
       "id": "DA-15",
@@ -236,7 +236,7 @@
         "tests/dev-pr-auto-merge.test.mjs",
         "tests/build-surface.test.mjs"
       ],
-      "behavioralProof": "tests/v4-delivery-authority-parity.test.mjs#DA-15"
+      "behavioralProof": "tests/delivery-authority-parity.test.mjs#DA-15"
     },
     {
       "id": "DA-16",
@@ -246,5 +246,5 @@
       "verificationEvidence": []
     }
   ],
-  "matrixRoot": "sha256:85fc624f09abb2014601a9857dbcd07a59750b6dd6d77ab240ed037d3169ac69"
+  "matrixRoot": "sha256:7cda843562e9cc3d9de0434bab8b3570c1ed793b6c91eaf7aa675bbcdcc60715"
 }

package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.json → delivery-warrant-shadow-bootstrap-plan.json}

@@ -4,8 +4,8 @@
   "releaseLine": "dev/v4/v4.0",
   "sourceCut": {
     "revision": "3fd14c7a6237c3a1709ce29fc9fcb4ac150a0e5d",
-    "inventory": "architecture/v3-core-mechanism-inventory.json",
-    "manifest": "architecture/v4-capability-state-machine-manifest.json",
+    "inventory": "architecture/baseline-core-mechanism-inventory.json",
+    "manifest": "architecture/capability-state-machine-manifest.json",
     "legacyCore": "packages/core/dev-delivery-warrant.js",
     "legacyStore": "scripts/dev-delivery-warrant.mjs",
     "legacyWorkflows": [
@@ -361,7 +361,7 @@
     }
   ],
   "shadow": {
-    "fixtureContract": "architecture/v4-delivery-warrant-shadow-fixtures.json",
+    "fixtureContract": "architecture/delivery-warrant-shadow-fixtures.json",
     "inputs": "the same canonical fixture bytes are passed to JavaScript v3 and Rust v4",
     "comparison": [
       "decision kind and typed error",

package/architecture/{v4-delivery-warrant-shadow-bootstrap-plan.md → delivery-warrant-shadow-bootstrap-plan.md}

@@ -21,9 +21,9 @@ ai_provenance:
 This plan makes the current Delivery Warrant behavior implementable as a
 provider-free Rust domain without changing production authority. The normative
 machine-readable plan is
-[`v4-delivery-warrant-shadow-bootstrap-plan.json`](./v4-delivery-warrant-shadow-bootstrap-plan.json).
+[`delivery-warrant-shadow-bootstrap-plan.json`](./delivery-warrant-shadow-bootstrap-plan.json).
 The shared traces and frozen JavaScript projection roots are in
-[`v4-delivery-warrant-shadow-fixtures.json`](./v4-delivery-warrant-shadow-fixtures.json).
+[`delivery-warrant-shadow-fixtures.json`](./delivery-warrant-shadow-fixtures.json).
 
 ## Decision
 
@@ -51,12 +51,12 @@ inventory rather than reconstructing it from workflow prose.
 
 | Concern                                          | Source of record                                                                   | Result                                                                       |
 | ------------------------------------------------ | ---------------------------------------------------------------------------------- | ---------------------------------------------------------------------------- |
-| Current states, events, writers, stores, effects | `v3-core-mechanism-inventory.json` and `v4-capability-state-machine-manifest.json` | Nine states, seven manifest events, TypeScript v3 sole writer                |
+| Current states, events, writers, stores, effects | `baseline-core-mechanism-inventory.json` and `capability-state-machine-manifest.json` | Nine states, seven manifest events, TypeScript v3 sole writer                |
 | Queue roots, generation, selection, leases       | `packages/core/dev-delivery-warrant.js`                                            | Rooted successors, bounded FIFO/aging, one active fence                      |
 | Terminal behavior                                | settlement and cancellation modules plus Warrant tests                             | Active fenced close, exact queued cancellation, terminal/no-authority no-ops |
 | Durable compare-and-set                          | `scripts/dev-delivery-warrant.mjs`                                                 | Immutable Git commit plus expected commit/root readback                      |
 | Protected effects                                | Buildchain dev delivery, close, and cancel workflows                               | GitHub admission occurs after exact state readback                           |
-| Bootstrap and N-1                                | `v4-bootstrap-authority.json` and `v4-architecture.mjs`                            | v3 bootstrap authority, protected v4 handoff, no self-qualification          |
+| Bootstrap and N-1                                | `bootstrap-authority.json` and `architecture.mjs`                            | v3 bootstrap authority, protected v4 handoff, no self-qualification          |
 
 Public state-ref observations at the source audit showed an idle v4 queue at
 generation 9/fencing counter 3 and an idle v3 queue at generation 103/fencing
@@ -213,9 +213,9 @@ removal remain explicit future gates.
 Run the focused contract and fixture checks with:
 
 ```sh
-node scripts/v4-warrant-shadow-plan.mjs validate
-node --test tests/v4-warrant-shadow-plan.test.mjs
-node scripts/v4-architecture.mjs validate
+node scripts/warrant-shadow-plan.mjs validate
+node --test tests/warrant-shadow-plan.test.mjs
+node scripts/architecture.mjs validate
 ```
 
 The repository `check` command runs the plan validator and the unit suite. A

package/architecture/{v4-floating-consumer-policy.md → floating-consumer-policy.md}

@@ -27,6 +27,6 @@ requires that certification to match the caller source and actual runtime.
 Missing, rejected, stale, root-mismatched, or old-runtime evidence fails closed.
 
 The normative machine declaration is
-[`v4-floating-consumer-policy.json`](v4-floating-consumer-policy.json). v3
+[`floating-consumer-policy.json`](floating-consumer-policy.json). v3
 behavior, provider effects, credentials, and production mutation authority are
 outside this decision.