@oxygen-agent/cli 1.1011.326 → 1.1011.440

package/node_modules/@oxygen/shared/dist/decision-ledger.generated.js

@@ -0,0 +1,717 @@
+export const DECISION_LEDGER_ENTRIES = [
+    {
+        id: "D1",
+        title: "Expensive-tier behavior at approval",
+        answer: "(b) expensive tail named separately in the plan, excluded by default, included only via explicit --include-expensive-tail; default per-hit ceiling 50 credits shown in the plan as a named, liftable policy. No mid-run interruption.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "Plan rendering + flags at T1b; policy enforcement hardening at T3",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D2",
+        title: "Billing on paid-empty attempts",
+        answer: "(a) disclosed cost recovery: bill the customer with an honest billed: true flag and plan-time disclosure (\"each empty Serper page bills 0.25\"). Never bill unreachable / invalid_input.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "Plan-time disclosure at T1b; executor billing semantics at T2",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D3",
+        title: "Free-preflight plan semantics",
+        answer: "(a) live_provider_calls: false means \"no paid provider calls\"; registered freeReadCost preflights auto-run at plan time; estimates default-on.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "T1a",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D4",
+        title: "Probe micro-spend",
+        answer: "(b) zero-spend-without-approval absolute; probe_page stays policy-gated opt-in; estimates degrade honestly to deterministic_guess.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "T1a/T1b estimate ladder",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D5",
+        title: "BYOK hoisting default",
+        answer: "(a) hoist-when-connected with a mandatory third-party-spend disclosure line. Named exception: managed Blitz stays ahead of BYOK Apollo for people-search until org-level provider stats exist.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "T1a availability/order derivation",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D6",
+        title: "Trigger budget default",
+        answer: "Open; spec recommends (a) opt-out 500 cr/day + auto-pause",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "T3",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D7",
+        title: "workflows call --mode live parity",
+        answer: "(a) require approved + max_credits at T0; existing uncapped scripts get typed refusals.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "Shipped [v1.162.19]",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D8",
+        title: "Cache reuse policy",
+        answer: "Open; spec recommends (a) default-on read-through, free hits with credits_saved",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "T2",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D9",
+        title: "BlitzAPI COGS",
+        answer: "Closed 2026-07-25 (moved from Open): customer price 0.5 cr/op stays; the monthly subscription is booked at $625.30/mo in infra-fixed-costs.ts from the vendor pricing audit — it read $0 while actually billing, so Data-layer margin was overstated. D26/D28 concentrate search and hiring volume on Blitz, which makes this figure margin-critical; re-verify against the bank line each quarter.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "Booked in infra-fixed-costs.ts",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D10",
+        title: "Bright Data contract",
+        answer: "Contested, pinned in CI (descriptor reserves 0.75 cr/record vs resolver bills 0.625)",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "Human staff verification",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D11",
+        title: "Firecrawl page price",
+        answer: "(a) at 2 cr/page deliberate wedge, uniform 2 Oxygen credits per Firecrawl provider credit.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "Shipped [v1.162.22]",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D12",
+        title: "parallel / DataForSEO / openwebninja / apify / builtwith rates",
+        answer: "Pull-posture enforced (unpriced ⇒ not routed; Guard 2 fails growth); rates owed before routing",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "Human; runbooks disclose the posture",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D13",
+        title: "Exa identity + premium ops",
+        answer: "(a) managed at dev prices; BYOK only as override; premium ops repriced toward adoption (already at 0.25–1.75 cr since v1.160.7; hints aligned).",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "Shipped [v1.162.22] (hints), runbook claim fixed [v1.163.3]",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D14",
+        title: "One-shot enrich tools",
+        answer: "Open; spec recommends ship at T4",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "T4",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D15",
+        title: "Company structured primary",
+        answer: "Hold Blitz-first until D9 COGS lands, then re-derive from the resolver (intra-tier order is resolver-derived by design). Registry seeds Blitz-first meanwhile. Superseded by D26 (2026-07-25): D9 is closed and Blitz-first is now ratified outright, with Apollo as the named managed alternative.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "T1a seed; re-derivation automatic once D9 numbers land",
+        supersededBy: ["D26"],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D16",
+        title: "ai_ark promotion",
+        answer: "Ratified 2026-07-25 (moved from Open): ai_ark promoted into the default tier-2 slot of both the email and phone chains on the audit's buyable-tier numbers ($0.01/provider credit → 50 cr email / 250 cr phone). Ratified by founder directive without the paid bake-off the original entry required — stated plainly rather than left Open while the promotion ships. Forcing function is now post-launch per-provider net-new yield monitoring; drop any source under ~5% net-new.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "enrichment-capabilities.ts defaults",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D17",
+        title: "Hiring chain head",
+        answer: "TheirStack-first; Signalbase premium-only where it is the sole structured source — pending D18 price verification. Superseded by D28 (2026-07-25): BlitzAPI takes the hiring head on flat-fee unmetered polling; TheirStack becomes the named alternative.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "T1a seed",
+        supersededBy: ["D28"],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D18",
+        title: "Signalbase pricing",
+        answer: "(a) posture: treat as premium verified-events feed until the contract rate is staff-verified; the 5–12× dry-run understatement fixed regardless. Placeholder amounts (125/50) still need verification — see Open. Superseded by D29 (2026-07-25) as a routing posture (SignalBase leaves every default chain); the price-verification obligation survives and gates any future re-routing.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "Posture shipped [v1.162.22]/[v1.163.1]",
+        supersededBy: [],
+        partlySupersededBy: ["D29"],
+    },
+    {
+        id: "D19",
+        title: "Phone-lane ordering + verifier consolidation",
+        answer: "(a) cost-order phone/company lanes; demote prospeo 100 cr/25 cr premium slots behind cheaper verified lanes until org-level provider stats prove the premium; MillionVerifier (0.1 cr) ratified as the single default verifier with a hard cap of 2–3 pattern validations per row. Partially superseded (2026-07-25): the single default verifier clause is replaced by D30's two-step flow; the cost-order rule and PATTERN_VALIDATION_ROW_CAP stand, subject to D25 where the two disagree.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "T1a seeds (8 documented order exceptions from [v1.162.22] re-derive under this rule)",
+        supersededBy: [],
+        partlySupersededBy: ["D30"],
+    },
+    {
+        id: "D20",
+        title: "Standing budget scope",
+        answer: "Open; spec recommends org-level first",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "T3",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D21",
+        title: "Job-change cadence default",
+        answer: "Open; spec recommends monthly-with-weekly-option; verify LeadMagic no_change billing",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "During T1–T2",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D22",
+        title: "Apify posture",
+        answer: "Open; spec recommends managed-vetted-registry + BYOK for arbitrary actors",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "During T1–T2",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D23",
+        title: "AI defaults",
+        answer: "Open; spec recommends the leans; icebreaker tier price is a pure pricing call",
+        status: "open",
+        table: "open",
+        ratifiedOn: null,
+        lands: "During T1–T2",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D24",
+        title: "\"Unlimited trio\" customer pricing",
+        answer: "(a) near-zero-rate RocketReach/blitz/prospeo email ops and keep them front-loaded (\"hit-rate on them costs you near-nothing\"). Revenue-posture call, taken deliberately. Superseded by D25 (2026-07-25): the audit found only BlitzAPI is flat-fee; RocketReach and Prospeo are metered and lose their front-loaded slot.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-06-10",
+        lands: "T1a pricing rows + seed order",
+        supersededBy: ["D25"],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D25",
+        title: "Default provider tier doctrine",
+        answer: "(a) every default chain orders tier 0 free (no_bill preflights/counts) → tier 1 unlimited/flat-fee ($0 marginal) → tier 2 cheap managed per-credit → tier 3 external waterfall aggregator on the residual only. Supersedes D24(a): UNLIMITED_EMAIL_ENRICHMENT_PROVIDERS narrows to [\"blitzapi\"]. Where this disagrees with D19(a)'s cost-order rule, D25 wins.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "enrichment-capabilities.ts defaults + registry tiering",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D26",
+        title: "Search primary + paid alternative",
+        answer: "BlitzAPI is the default primary for people and company/account search; Apollo is the paid alternative and runs MANAGED (our APOLLO_API_KEY, customer billed Oxygen credits), switchable via --provider. Explicitly overrides the audit's BYOK-Apollo recommendation — founder call, accepting that Apollo API access is Custom-plan-only with unpublished rate limits. Supersedes D15's \"hold Blitz-first until D9 COGS lands\" (D9 is now closed). D5's BLITZ_BEFORE_BYOK_APOLLO exception stands for BYOK-connected orgs.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "L1 planners + registry seeds",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D27",
+        title: "Hard prune of default chains",
+        answer: "Email blitzapi → icypeas → ai_ark → leadmagic → bettercontact; phone blitzapi → ai_ark → leadmagic → bettercontact. Search defaults blitzapi → apollo. Every other provider stays wired and selectable (--provider-order, --provider); only the DEFAULTS shrink — pruning is never deletion. Named carve-outs: tier-0 free counts (Forager totals, Dropleads/ContactOut/Icypeas people_count, TheirStack catalog_keywords), ContactOut for reachable_persona (only provider enforcing --require-phone), ContactOut on the phone-from-email profile (only cheap email-keyed lane), and MoltSets as a $0 BYOK head where it can run.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "DEFAULT_* arrays + profiles + planners",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D28",
+        title: "Signals defaults",
+        answer: "BlitzAPI first for hiring + job search (flat-fee, unmetered polling; requires wiring /v2/search/jobs + /v2/search/company-jobs). PredictLeads primary for funding, news, and tech. TheirStack is the named alternative to PredictLeads for hiring and tech. Supersedes D17 (TheirStack-first hiring head).",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "routing-registry/signals.ts",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D29",
+        title: "SignalBase + Crustdata cut from signal defaults",
+        answer: "Both leave every default signal chain; both stay wired and selectable. Supersedes D18(a) as a routing posture — the price-verification obligation survives as a precondition for ever re-routing SignalBase. Accepted coverage loss, recorded deliberately: market-wide acquisitions lose acquirer identity, deal amount, and true close date; market-wide job change has no substitute and becomes a typed no_default_provider_chain refusal rather than a thinner chain that would emit rows its own person_linkedin_url upsert key cannot key; funding events lose SignalBase's verification flag. Per-row job-change tracking survives on the watch-list chain.",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "routing-registry/signals.ts",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D30",
+        title: "Email verification is a fixed two-step flow",
+        answer: "MillionVerifier on every found email; any catch-all/accept-all escalates to bounceban.verify_single_waterfall. Both verdicts recorded on the cell and in provenance. Supersedes only D19(a)'s \"single default verifier\" clause; D19(a)'s cost-order rule and the pattern-validation row cap stand. Verification attaches to all three email profiles (including linkedin_url, which had none); the pattern pre-step stays off linkedin_url because it would spend verifier credits ahead of the $0-marginal Blitz lane. Extended (2026-07-29, v1.507.0): the same two-step flow now also serves the STANDALONE verify_email intent — verifying an address you already have, via oxygen verify email / oxygen_verify_email / POST /api/cli/verify/run — through one shared leg runner, so a found-then-verified address and a directly-verified address cannot get different verdicts or prices. zerobounce.validate_email is REMOVED from the chain (cut at 22x MillionVerifier) and recorded in the chain's excluded_tools; catch_all is modelled as a separate catch_all_escalation target rather than an ordinary chain step, because advance_policy conflates \"provider missed\" with \"provider answered catch-all\". Both providers repriced to exactly 5x COGS (MillionVerifier 2.245, BounceBan 17).",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: "2026-07-25",
+        lands: "verifyEmailCandidate + runEmailVerificationWaterfall + profile config",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D31",
+        title: "Charge-on-success is not per-lane spend",
+        answer: "find_email/find_phone bill on hit and stop on first success, so a miss costs nothing. The premium-lane gate must not pre-skip a bill-on-hit lane on its nominal per-call price, and the credit estimate must not sum every lane in the chain — it estimates the expected billed cost of a converting row. Real spend stays bounded by charge-on-success plus the run's credit ceiling (which must also count verifier legs).",
+        status: "ratified",
+        table: "ratified",
+        ratifiedOn: null,
+        lands: "Premium gate + table-action-credit-estimates.ts + provider-cascade.ts",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D32",
+        title: "find_personal_email GA (shipped 2026-09-16 without a ledger id)",
+        answer: "Ratify retroactively as a default intent with its shipped chain (contactout → leadmagic → forager), personal mailboxes graded but never catch-all-escalated.",
+        status: "proposed",
+        table: "proposed",
+        ratifiedOn: null,
+        lands: null,
+        supersededBy: ["D43"],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D33",
+        title: "Catalogue doctrine",
+        answer: "Five statuses (default, selectable, no_default, coming_soon, rejected); region bands per default-chain step marked claimed until measured; labels are data types and providers are metadata (visible in --json, previews, provenance); vendor cost structure is never projected; pruning is never deletion — rejected rows stay in the taxonomy with this id.",
+        status: "proposed",
+        table: "proposed",
+        ratifiedOn: null,
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D34a",
+        title: "Revenue",
+        answer: "\"Revenue (estimate)\" ships on the managed estimate sources in this order: Apollo organization_enrich (annual_revenue) → PDL company_enrich (inferred_revenue range) → Prospeo enrich_company (revenue_range, customer key only). Label says estimate; \"reported revenue\" stays no_default.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: "lanes ship in the follow-up engineering slice (OXP task)",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D34b",
+        title: "Website traffic",
+        answer: "coming_soon; only a keyword-derived SEO estimate (Adyntel) is wired — buy decision for a visits-grade source.",
+        status: "proposed",
+        table: "proposed",
+        ratifiedOn: null,
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D34c",
+        title: "Headcount growth",
+        answer: "coming_soon; Apollo, PDL, SignalBase and Crustdata document it — founder picks the default.",
+        status: "proposed",
+        table: "proposed",
+        ratifiedOn: null,
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D34d",
+        title: "EU/DACH mobile vendor",
+        answer: "Open buy decision (Forager wired, Cognism not integrated); the catalogue reports non-US phone bands as unknown (no vendor statement) until then.",
+        status: "proposed",
+        table: "proposed",
+        ratifiedOn: null,
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D34e",
+        title: "Work vs mobile phone",
+        answer: "Merged: one Phone column with mobile + work/direct-dial outputs.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D35",
+        title: "Company chain head (funding + shared firmographics)",
+        answer: "Apollo organization_enrich (managed per D26, 125 cr/hit, schema-declared; funding, revenue, headcount, growth, industry, technologies in one call) becomes the managed tier-1 head for funding, revenue and headcount growth; PredictLeads company_financing_events is the lane for dated round events with source URLs; LeadMagic company_funding stays as fallback; Prospeo stays selectable on a customer key; Crustdata leaves the default company lanes (D29 scope extended to enrichment). Basis: docs-based response-detail comparison (docs/gtm-program/evidence/2026-09-provider-opinionation/rankings-draft.md).",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: "registry/runtime lane change ships in the follow-up engineering slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D36",
+        title: "enrich_person_profile head",
+        answer: "scraper.linkedin_profile as the single managed lane (the shipped person_enrich preset), seeded 2026-09-19.",
+        status: "proposed",
+        table: "proposed",
+        ratifiedOn: null,
+        lands: null,
+        supersededBy: ["D47"],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D37",
+        title: "Golden expected.input_shape",
+        answer: "Allow per-shape golden cases for enrich_company field chains (schema addition to GoldenCase).",
+        status: "proposed",
+        table: "proposed",
+        ratifiedOn: null,
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D38",
+        title: "Work-email default order after measurement",
+        answer: "Keep the D27 order (Blitz → Icypeas → AI Ark → LeadMagic → BetterContact); publish the measured chain-position rates (Blitz 50.5% n=27,103; AI Ark 23.6% n=1,650; LeadMagic email_finder 25.8% n=120; profile_to_email 3.6% n=959) through the catalogue; Icypeas (0% before the v1.930.0 extractor fix) and BetterContact (0/615, spend-cap refusals) are re-measured in two weeks before any reorder.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D39",
+        title: "Enrich.so",
+        answer: "Integrate as a BYOK-only provider (email finder, email validation, reverse email lookup, phone finder) — customer key, no managed spend, no resale-terms exposure; the managed work-email tier-2 slot is not changed.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: "integration slice filed",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D40",
+        title: "Chain order for single-output, high-scale rows",
+        answer: "LinkedIn URL, work email, personal email, phone and email verification order cheapest to most expensive: every surviving step sits in tier 1 so the price-derived resolver order is the whole order; no order_exceptions. Quality-sensitive rows (D41) keep tier curation. One exception since 2026-09-29 (D60): the LinkedIn URL chain keeps the managed lookup ahead of Icypeas until the repricing date.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D41",
+        title: "Quality rows show the output difference per lane",
+        answer: "Person profile, company identity/headcount/industry/profile, funding, tech stack and revenue project each lane's documented output fields (default_chain.lanes[].output_fields) so the agent or user sees what a pricier lane returns before choosing it.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D42",
+        title: "Vendor docs are fetched live at implementation time",
+        answer: "Every descriptor input, output, price or coverage claim is re-read from the vendor's official API docs when the code changes and the descriptor records docs_checked: <date>; the 2026-09-19 evidence cards and the wiki are a worklist, never a source. Worked example: Blitz has no name-to-LinkedIn endpoint (every documented endpoint + changelog to 2026-09-17 checked).",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D43",
+        title: "Personal email chain",
+        answer: "leadmagic.personal_email_finder is the only managed lane; ContactOut and Forager leave the default (stay selectable by name). Supersedes the D32 chain.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D44",
+        title: "Phone chain",
+        answer: "blitzapi.phone_enrich → leadmagic.mobile_finder → bettercontact.enrich_lead (all three already managed); every other phone lane leaves the default. Email shape starts at LeadMagic; name+company reaches BetterContact only.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D45",
+        title: "Email verification chain",
+        answer: "MillionVerifier on every email, BounceBan on catch-all escalation only (D30 shape); Icypeas, Dropleads and Hunter verifiers leave the chain.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D46",
+        title: "LinkedIn URL chain",
+        answer: "New managed composite scraper.linkedin_profile_lookup (company lookup by domain → first/last-name people search inside it; 2 credits, 1 on a company miss) heads; icypeas.profile_url_search is the fallback. Blitz cannot head it: no Blitz endpoint accepts a person's name (verified live 2026-09-19).",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D47",
+        title: "Person profile chain",
+        answer: "blitzapi.person_profile_enrich (vendor endpoint added 2026-09-15; 1 credit) heads ahead of the managed LinkedIn rail scraper.linkedin_profile (1 credit). Supersedes D36.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D48",
+        title: "Company identity, headcount, industry, profile",
+        answer: "Managed LinkedIn rail (scraper.linkedin_company) then Blitz (domain_to_linkedin / linkedin_to_domain / company_profile_enrich) only. Crustdata's free identify pre-step, Prospeo, LeadMagic and AI Ark leave these lanes; identity resolution now starts at the 1-credit scraper call.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: ["D55"],
+    },
+    {
+        id: "D49",
+        title: "Funding and tech stack",
+        answer: "Funding: apollo.organization_enrich → peopledatalabs.company_enrich → leadmagic.company_funding (applies D35; Prospeo customer-key only, Crustdata out per D29). Tech stack: theirstack.technographics (job-posting-derived, confidence + first/last seen, 3 vendor credits = 30 credits at $0.01) → leadmagic.technographics (website-derived).",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D50",
+        title: "Revenue",
+        answer: "One row company_revenue_estimate (\"Revenue (estimate)\"), status default, new company field revenue on apollo.organization_enrich (annual_revenue) → peopledatalabs.company_enrich (inferred_revenue range). company_revenue_exact merged into it (rejected row kept). Amends D34a (Prospeo dropped).",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D51",
+        title: "Long tail parked coming_soon",
+        answer: "Competitors, corporate structure, acquisitions, news, web presence, domain status, headcount growth, website traffic, reachable people, audience size, lookalikes and all seven signal rows are coming_soon: no add path, no runtime lane, candidate providers recorded. preset:domain_check leaves the picker.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-19",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D52",
+        title: "Managed web rail is three wallets",
+        answer: "serper (keyword/URL recall at 0.5 cr, and the only priced local/maps shape — openwebninja is D12-unpriced), exa (the only semantic engine, category filters, cited answers, and the 0.5 cr cached-index page read) and firecrawl (managed on the SCRAPING rail only: JS/anti-bot scrape, site map, crawl, batch, and PDFs under a page cap) stay managed. parallel and linkup go BYOK-only (managedKeyEnvVar: null); firecrawl.search and crustdata.web_search_live leave every web-search chain. Neither removal is a quality judgement: parallel's managed wallet was never funded (HTTP 402 on all 838 managed calls, 2026-07-30 to 2026-09-17, zero successes ever) and Serper covers its recall niche at the identical 0.5 cr; linkup served 9 calls from ONE org in 120 days and its only exclusive lane (flat-rate PDF) moved to Firecrawl; firecrawl.search costs 8 cr at 5 results for what serper does at 0.5. The rule being enforced is a default cascade may contain only funded, managed-credential lanes, asserted in routing-conformance.test.ts. The Doppler secrets PARALLEL_API_KEY / LINKUP_API_KEY stay declared in ops/env/doppler.manifest.json (required: false) so the env audit does not read a live value as unexpected — removing them is a human step.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-20",
+        lands: "shipped in the same slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D53",
+        title: "AI research column grounds by discover-then-read",
+        answer: "The default column runs serper.search (0.5) for URLs, then ONE additive page read of the top result (exa.contents, 0.5) that turns a ~160-char SERP teaser into real page text. Additive is load-bearing: the row is already grounded on its snippets, so a failed read costs a thinner answer and nothing else — which is why the read carries no fallback lane and cannot multiply the reserved ceiling. Typical row drops from 5.0 to 2.5 credits (model 1.5 + grounding 1.0) while the evidence gets richer; the reserve is 6 because the ceiling still covers the exa.search fallback. PDF reading moves from Linkup's flat-rate lane to Firecrawl under a per-column page budget (webSearch.pdfMaxPages, default off, ceiling 8): Firecrawl bills one credit per parsed page (vendor docs, docs_checked 2026-09-20), so a global 8-page ceiling would have held ~6x what an ordinary HTML fetch row spends. AI_COLUMN_WEB_SEARCH_TYPICAL_CREDITS 3.5 → 1 and ..._RESERVED_CREDITS 4 → 4.5, both resolver-derived and pinned.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-20",
+        lands: "shipped in the same slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D54",
+        title: "A dedicated lookalike engine heads the lookalike chain",
+        answer: "ocean.company_lookalike_preview becomes the free tier-0 preflight (D25 doctrine: free previews run before spend), a dedicated lookalike search becomes the paid head, and exa.find_similar leaves the chain — a general semantic search is not a lookalike engine. leadmagic.company_lookalike is healthy (3,350/3,368 ok, 37 orgs) and stays; whether Ocean leads or follows is a quality call, and Ocean's free preview makes that comparison free to run. Closes the routing-spec.md §5 Ocean/PredictLeads deferral that the current find_lookalikes exclusion cites — Ocean has been managed, priced and never called (0 managed calls in 120 days) purely because that chain excluded it. Discolike gets the same standard applied to parallel: it earns a chain step or it leaves managed (managed, priced, routed in NO chain, 6 calls / 0 successes).",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-20",
+        lands: "chain + the built-in Lookalike companies column ship in the follow-up slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D55",
+        title: "Blitz heads person and company enrichment, the managed LinkedIn rail backs it",
+        answer: "Person profile: oxygen.person_profile, a composite tool that runs blitzapi.person_profile_enrich and falls back to scraper.linkedin_profile only when Blitz returns no match. Before this change the person_enrich bundle ran the scraper alone, and nothing executed the D47 chain. Company identity, headcount, industry and profile now run Blitz (linkedin_to_domain / domain_to_linkedin / company_profile_enrich) first and scraper.linkedin_company second, reversing D48's order. A domain or LinkedIn URL the row already holds is written from the input for 0 credits. Blitz legs bill only on a hit (found: true); a miss costs nothing. Funding stage and latest round leave the default company bundle for the Funding details group, because Blitz's company profile carries no funding data. In the web add-column panel, Person enrichment, Company enrichment and Tech stack are configured before they are created: the user picks the input column, the Work-email style replaces checkboxes, and auto-detection only preselects. Personal email leaves the add-column catalog (it is LeadMagic, reachable under Integrations). Website contacts becomes the template website_contacts_v1. Consequence: a default company row costs about 2 credits instead of about 1, which is margin because Blitz is flat-rate. Supersedes D48's order; D47 now executes.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-24",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: ["D56"],
+    },
+    {
+        id: "D56",
+        title: "Company enrichment is one profile lookup, like person enrichment",
+        answer: "The company_enrich bundle runs oxygen.company_profile, a composite tool: blitzapi.company_profile_enrich first (a domain-only row first resolves its LinkedIn URL with blitzapi.domain_to_linkedin, which is never billed), then scraper.linkedin_company only when Blitz has no match. Both lanes land in one merged schema, the managed rail's response.raw.element, kept whole in the JSON column, and free stored columns (domain, LinkedIn URL, name, headcount, industry, description, founded year, HQ country) fill in the same write. About 1 credit per company found, at most 2 reserved; the previous per-field waterfall quoted up to 10 because it priced each field's lanes separately. The opt-in field groups leave the bundle on every surface: --preset-fields on company_enrich refuses and points to find company --fields and the Tech stack bundle, which keeps its own waterfall. The web add-column step asks only for the input columns: no providers list, no field list, no toggles (\"we just handle this in the backend for the user\"). Existing company columns are not converted. Supersedes D55's company half for the bundle; the per-field company waterfall (find company, Tech stack) keeps D55's Blitz-first order.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-24",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D57",
+        title: "Managed roster after the 2026-09-27 live matrix",
+        answer: "Crustdata, Findymail, RocketReach, ScaleList, Forager, DiscoLike, SignalBase and Lusha leave the managed rail: BYOK-only (managedKeyEnvVar: null), off every default chain, price rows kept, still selectable with a customer's own key. Each was dead in production as well as dev: Crustdata's managed wallet empty and benched since 2026-09-19 (934 managed calls/577 ok in 120 days); Findymail HTTP 402 since 2026-08-05; RocketReach 788 managed calls with 0 successes in 120 days; ScaleList HTTP 402 since 2026-09-01; Forager's FORAGER_API_KEY is empty in dev and prod Doppler (it never had a working managed key); DiscoLike 0 successes ever (key inactive, 403); SignalBase subscription expired (403 on 2026-09-27, same key in dev and prod, last prod success 2026-09-17); Lusha 0 successes ever (key rejected). BounceBan (the D45 catch-all escalation) and ScrapeLi stay managed and are funded by Philipp; PredictLeads stays managed (its prod key works; only the dev key needs renewal, OXP-1.14.2). Rule applied: D52/D54 — a managed provider earns a default-chain step and a funded wallet, or it leaves managed. The chains lose Forager's free count preflights (company, job and person totals), Crustdata's free autocomplete preflight and the Crustdata, RocketReach, Forager, Findymail and ScaleList email/people fallbacks; each is recorded as a D57 excluded_tools entry, and linkup.fetch leaves the scrape chain under D52's rule. routing-conformance.test.ts now fails when any default-chain step, verifier, escalation, poll or free-count tool belongs to a provider with no managed key, unless the tool itself runs only on a customer key. The Doppler declarations stay (required: false); deleting the secrets is a human step.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-29",
+        lands: "shipped in the same slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D58",
+        title: "Company funding, revenue and hiring are table columns",
+        answer: "The three default catalogue rows that had no table add path (only find company --fields) become table presets company_funding, company_revenue and company_hiring, each running its ratified chain with bill-on-hit pricing — funding Apollo → PDL → LeadMagic (D49), revenue Apollo → PDL (D50), hiring Blitz jobs → LeadMagic jobs — on CLI, MCP and the web add-column menu, like company_tech_stack. company_enrich stays the D56 one-lookup bundle. Found by the 2026-09-29 blind baseline, which could not add funding to a table and fell back to an AI research template.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-29",
+        lands: null,
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D59",
+        title: "One email column: work email, with personal email as an option",
+        answer: "The opinionated catalogue offers one email column, work email. Personal email stops being its own default row and becomes an optional selection on the work-email column on CLI, MCP and web: it runs the D43 lane (leadmagic.personal_email_finder, needs the person's LinkedIn URL), is quoted only when selected and bills on hit at that lane's existing price; existing personal-email columns keep working. The address a provider returns for the contact is written and charged even when its domain differs from the row's company domain: Blitz keys its email lookup on the LinkedIn URL and answers the person's current employer (Patrick Collison's profile now shows Arc Institute, so a stripe.com row gets an @arcinstitute.org address). This reverts the domain-mismatch refusal PR #2343 added the same day, which wrote nothing while the Blitz hit was still charged; #2343's public-LinkedIn-URL fixes stay. Phone verification (verify_phone, selectable with no surface of its own) becomes coming_soon with no add path. Recommended options declined: restoring the separate personal-email picker row, and picking a row-domain all_emails[] address or charging nothing on a mismatch. Quoted: \"NO email should be just work email with an additional select to add personal email ; phone verification stays coming soon\" and \"just give the user the email it returend for the contact , keep charge\".",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-29",
+        lands: "lands with the work-email option slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D60",
+        title: "Opaque LinkedIn member ids are resolved inside the lookup",
+        answer: "When the people search inside scraper.linkedin_profile_lookup (D46) returns only an opaque member id (/in/ACwAA…), the lookup resolves it to the public profile URL through Up2Data's profile read, at most one extra call per row: +1 Up2Data credit (about $0.002), billed only when the read runs and returns a profile. Before the repricing effective date an affected row settles 3 credits instead of 2; after it OXYGEN absorbs the read inside the flat 5 credits per URL. A failed or empty resolution keeps today's fall-through to icypeas.profile_url_search at no extra charge. Evidence: in the 2026-09-27 dev live matrix 3 of 3 LinkedIn URLs were member ids; PR #2343 stopped writing member-id URLs. Declined: keeping the Icypeas fall-through (name-only match, about $0.005 a call). Implementation: before the repricing date the lookup quotes and reserves 3, the ceiling that lets it bill the read, and a row settles 1, 2 or 3. That quote is above Icypeas's 2.494, so D40's price-derived order alone would run Icypeas first; the chain keeps the D46 order through one order_exceptions entry citing D46, which goes stale at the repricing date, when both lanes cost a flat 5 per URL found. Asked the same day, Philipp left the order open; the agent kept the existing D46 order (no behaviour change) pending his ratification.",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-29",
+        lands: "lands with the member-id resolution slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+    {
+        id: "D61",
+        title: "RocketReach and Lusha get a native own-key connect",
+        answer: "D57 made both BYOK-only, but neither could take a customer's key: RocketReach routed to Composio and Lusha had no integration definition, so integrations connect answered byok_connect_unavailable and nobody could run them. Both get a native API-key connect on web, CLI and MCP, validated at connect time against a zero-credit authenticated vendor endpoint where the vendor documents one, and their tools run on the customer's key under the existing BYOK pricing. Both stay off every default chain (D57). Declined: marking them unavailable. Quoted: \"Build own-key connect\".",
+        status: "ratified",
+        table: "proposed",
+        ratifiedOn: "2026-09-29",
+        lands: "lands with the own-key connect slice",
+        supersededBy: [],
+        partlySupersededBy: [],
+    },
+];