@remnic/core 9.3.720 → 9.3.721

package/dist/temporal-validity.d.ts

@@ -1,4 +1,4 @@
-import { k as MemoryFrontmatter } from './types-BSdUWePh.js';
+import { k as MemoryFrontmatter } from './types-DwO1Ot4n.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/threading.d.ts

@@ -1,4 +1,4 @@
-import { u as BufferTurn, am as ConversationThread } from './types-BSdUWePh.js';
+import { u as BufferTurn, am as ConversationThread } from './types-DwO1Ot4n.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/tier-migration.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from './types-BSdUWePh.js';
+import { g as MemoryFile } from './types-DwO1Ot4n.js';
 import { StorageManager } from './storage.js';
 import { MemoryTier } from './tier-routing.js';
 import { SearchBackend } from './search/port.js';

package/dist/tier-routing.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile } from './types-BSdUWePh.js';
+import { g as MemoryFile } from './types-DwO1Ot4n.js';
 import { LifecycleSignals } from './lifecycle.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';

package/dist/topics.d.ts

@@ -1,4 +1,4 @@
-import { g as MemoryFile, an as TopicScore } from './types-BSdUWePh.js';
+import { g as MemoryFile, an as TopicScore } from './types-DwO1Ot4n.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/transcript.d.ts

@@ -1,4 +1,4 @@
-import { P as PluginConfig, T as TranscriptEntry, v as Checkpoint } from './types-BSdUWePh.js';
+import { P as PluginConfig, T as TranscriptEntry, v as Checkpoint } from './types-DwO1Ot4n.js';
 import { SessionIntegrityReport } from './session-integrity.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';

package/dist/transfer/backup.js

@@ -4,11 +4,11 @@ import {
 import "../chunk-765K3SAT.js";
 import "../chunk-X7Y7WX73.js";
 import "../chunk-J4EB7DNW.js";
+import "../chunk-UI3NYK34.js";
+import "../chunk-GCGJW34D.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
-import "../chunk-UI3NYK34.js";
-import "../chunk-GCGJW34D.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-PZ5AY32C.js";
 export {

package/dist/transfer/capsule-export.js

@@ -5,11 +5,11 @@ import {
 import "../chunk-WEHSQBFR.js";
 import "../chunk-X7Y7WX73.js";
 import "../chunk-J4EB7DNW.js";
+import "../chunk-UI3NYK34.js";
+import "../chunk-GCGJW34D.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
-import "../chunk-UI3NYK34.js";
-import "../chunk-GCGJW34D.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-PZ5AY32C.js";
 export {

package/dist/transfer/capsule-import.js

@@ -4,10 +4,10 @@ import {
 import "../chunk-VF4XKTX3.js";
 import "../chunk-WEHSQBFR.js";
 import "../chunk-X7Y7WX73.js";
+import "../chunk-GCGJW34D.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";
 import "../chunk-FP2373TW.js";
-import "../chunk-GCGJW34D.js";
 import "../chunk-A6XUJE5D.js";
 import "../chunk-VS2IYZRU.js";
 import "../chunk-PZ5AY32C.js";

package/dist/trust-score-stage.d.ts

@@ -1,5 +1,5 @@
 import { TrustSignals, TrustScoreResult, TrustBand, TrustScoreComponent } from './trust-score.js';
-import { F as FaithfulnessFrontmatter, ai as ProvenanceSource, ao as TrustWeights } from './types-BSdUWePh.js';
+import { F as FaithfulnessFrontmatter, ai as ProvenanceSource, ao as TrustWeights } from './types-DwO1Ot4n.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/trust-score.d.ts

@@ -1,4 +1,4 @@
-import { ao as TrustWeights } from './types-BSdUWePh.js';
+import { ao as TrustWeights } from './types-DwO1Ot4n.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 

package/dist/{types-BSdUWePh.d.ts → types-DwO1Ot4n.d.ts}

@@ -1451,12 +1451,30 @@ interface PluginConfig {
     judgeTrainingDir: string;
     /** Gate mode: "off" (default, byte-identical pre-feature), "shadow" (record only), "enforce" (route to pending_review). */
     extractionFaithfulnessGate: "off" | "shadow" | "enforce";
-    /** Override model/endpoint; empty string = default routing chain. */
+    /** Override model name; empty string = default routing chain. */
     extractionFaithfulnessModel: string;
+    /**
+     * Base URL of a local openai-compatible endpoint serving a fine-tuned
+     * faithfulness gate (issue #1585 model-lab), e.g.
+     * `http://localhost:11434/v1` (Ollama) or `http://localhost:8000/v1` (vLLM).
+     * Empty string (default) preserves the existing routing chain exactly;
+     * set together with `extractionFaithfulnessModel` to route the gate to the
+     * local model first, falling back to the chain on failure.
+     */
+    extractionFaithfulnessBaseUrl: string;
     /** Context window (chars) around the quote sent to the verifier. Default 400. */
     extractionFaithfulnessContextChars: number;
     /** Per-batch timeout in ms; timeout → tagged error, never blocks writes. Default 8000. */
     extractionFaithfulnessTimeoutMs: number;
+    /**
+     * Correction-intent model-lab pointer (issue #1581 / #1585). When both this
+     * and `correctionIntentBaseUrl` are set, the detection path can route to a
+     * local fine-tuned correction-intent classifier. Empty default keeps the
+     * rule-based passive-correction detector as the sole path (byte-identical).
+     */
+    correctionIntentModel: string;
+    /** Base URL of a local openai-compatible endpoint serving the correction-intent classifier (issue #1585). Empty default = rule-based detection. */
+    correctionIntentBaseUrl: string;
     hourlySummariesEnabled: boolean;
     daySummaryEnabled: boolean;
     /** Timezone override for the day summary cron (issue #1475). */

package/dist/types.d.ts

@@ -1,3 +1,3 @@
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
-export { av as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, J as AgentAccessAuthToken, b9 as AgentAccessHttpConfig, ba as AgentDefaultsConfig, bb as AgentPersona, j as AgentPersonaModelConfig, bc as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, bd as BehaviorSignalDirection, B as BehaviorSignalEvent, be as BehaviorSignalType, aI as BootstrapOptions, aJ as BootstrapResult, r as BriefingActiveThread, bf as BriefingCalendarSourceError, aV as BriefingConfig, p as BriefingFocus, o as BriefingFollowup, aW as BriefingOpenCommitment, t as BriefingRecentEntity, s as BriefingResult, n as BriefingSections, aX as BriefingWindow, bg as BufferEntryState, aq as BufferState, z as BufferSurpriseEvent, u as BufferTurn, q as CalendarEvent, C as CalendarSource, bh as CaptureMode, bi as ChatConfig, v as Checkpoint, bj as CodexCliReasoningEffort, bk as CodexCompactionFlushMode, aY as CodexCompatConfig, bl as CodexConnectorConfig, aH as CodingContext, bm as CodingKnowledgeConfig, aS as CodingModeConfig, bn as CompressionGuidelineActivationState, N as CompressionGuidelineOptimizerActionSummary, K as CompressionGuidelineOptimizerEventCounts, O as CompressionGuidelineOptimizerRuleUpdate, bo as CompressionGuidelineOptimizerSourceWindow, X as CompressionGuidelineOptimizerState, bp as ConfidenceTier, bq as ConsolidationAction, br as ConsolidationItem, aK as ConsolidationObservation, a1 as ConsolidationResult, a6 as ContinuityImprovementLoop, a4 as ContinuityIncidentCloseInput, a5 as ContinuityIncidentOpenInput, a3 as ContinuityIncidentRecord, bs as ContinuityIncidentState, bt as ContinuityLoopCadence, a7 as ContinuityLoopReviewInput, bu as ContinuityLoopStatus, a8 as ContinuityLoopUpsertInput, bv as ContradictionScanConfig, am as ConversationThread, bw as CronConversationRecallMode, bx as CronRecallMode, aZ as DEFAULT_RECALL_DISCLOSURE, a2 as DaySummaryResult, by as DreamingConfig, bz as DreamingNarrativePromptStyle, bA as DreamsDeepSleepConfig, bB as DreamsLightSleepConfig, aQ as DreamsPhase, bC as DreamsPhaseStatus, bD as DreamsPhasesConfig, bE as DreamsRemConfig, aR as DreamsRunResult, aP as DreamsStatusResult, bF as EngramTraceEvent, au as EntityActivityEntry, E as EntityFile, Y as EntityMention, at as EntityRelationship, Z as EntitySchemaDefinition, _ as EntitySchemaSectionDefinition, $ as EntityStructuredSection, aL as EntityTimelineEntry, a_ as ExtractedFact, bG as ExtractedProcedureStep, bH as ExtractedQuestion, bI as ExtractedReasoningTrace, bJ as ExtractedReasoningTraceStep, bK as ExtractedRelationship, bL as ExtractionPassSource, a0 as ExtractionResult, F as FaithfulnessFrontmatter, as as FileHygieneConfig, G as GatewayConfig, bM as GitHubLiveConnectorConfig, bN as GmailLiveConnectorConfig, bO as GoogleDriveLiveConnectorConfig, bP as HeartbeatConfig, bQ as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, y as ImportanceLevel, a9 as ImportanceScore, w as LifecycleState, L as LiveConnectorsConfig, bR as LlmTraceCallback, bS as LlmTraceEvent, ac as MemoryActionEligibilityContext, a$ as MemoryActionEligibilitySource, W as MemoryActionEvent, bT as MemoryActionOutcome, bU as MemoryActionPolicyDecision, ad as MemoryActionPolicyResult, bV as MemoryActionStatus, U as MemoryActionType, M as MemoryCategory, g as MemoryFile, k as MemoryFrontmatter, aa as MemoryIntent, m as MemoryLifecycleEvent, ae as MemoryLifecycleEventType, af as MemoryLifecycleStateSummary, ap as MemoryLink, bW as MemoryLinkType, b0 as MemoryObservation, bX as MemoryOsPresetName, l as MemoryProjectionCurrentState, b1 as MemoryScope, f as MemoryStatus, aw as MemorySummary, ar as MetaState, bY as ModelApi, bZ as ModelDefinitionConfig, b_ as ModelProviderAuthMode, ag as ModelProviderConfig, b$ as NamespacePolicy, ah as NativeKnowledgeConfig, c0 as NativeKnowledgeFolderRuleConfig, c1 as NativeKnowledgeObsidianVaultConfig, c2 as NativeKnowledgeOpenClawWorkspaceConfig, c3 as NotionLiveConnectorConfig, P as PluginConfig, x as PolicyClass, c4 as PrincipalFromSessionKeyMode, c5 as PrincipalRule, c6 as ProceduralConfig, aj as ProvenanceConfig, ai as ProvenanceSource, ab as QmdSearchExplain, Q as QmdSearchResult, c7 as QuestionEntry, b2 as RECALL_DISCLOSURE_LEVELS, c8 as ReasoningEffort, i as RecallDisclosure, c9 as RecallPipelineConfig, h as RecallPlanMode, ca as RecallSectionConfig, R as RecallTierExplain, cb as RecallTraceEvent, cc as RelevanceFeedback, ak as RetrievalTier, cd as SPECULATIVE_TTL_DAYS, ce as ScopeProfileAutoPromoteConfig, aO as ScopeProfileConfig, aM as ScopeProfileLayerId, aN as ScopeProfilePromotionTarget, cf as ScopeProfileTeamProjectConfig, cg as ScopeTeamConfig, ch as ScoredEntity, D as SecretRef, ci as SemanticChunkingConfigShape, S as SessionObserverBandConfig, cj as SignalLevel, al as SignalScanResult, ck as SlotBehaviorConfig, cl as SlotMismatchMode, an as TopicScore, T as TranscriptEntry, cm as TriggerMode, ao as TrustWeights, V as VerificationState, cn as confidenceTier, b8 as isRecallDisclosure } from './types-BSdUWePh.js';
+export { av as AccessTrackingEntry, A as ActiveRecallChatType, d as ActiveRecallModelFallbackPolicy, b as ActiveRecallPromptStyle, a as ActiveRecallQueryMode, c as ActiveRecallThinking, J as AgentAccessAuthToken, b9 as AgentAccessHttpConfig, ba as AgentDefaultsConfig, bb as AgentPersona, j as AgentPersonaModelConfig, bc as BehaviorLoopAdjustment, e as BehaviorLoopPolicyState, bd as BehaviorSignalDirection, B as BehaviorSignalEvent, be as BehaviorSignalType, aI as BootstrapOptions, aJ as BootstrapResult, r as BriefingActiveThread, bf as BriefingCalendarSourceError, aV as BriefingConfig, p as BriefingFocus, o as BriefingFollowup, aW as BriefingOpenCommitment, t as BriefingRecentEntity, s as BriefingResult, n as BriefingSections, aX as BriefingWindow, bg as BufferEntryState, aq as BufferState, z as BufferSurpriseEvent, u as BufferTurn, q as CalendarEvent, C as CalendarSource, bh as CaptureMode, bi as ChatConfig, v as Checkpoint, bj as CodexCliReasoningEffort, bk as CodexCompactionFlushMode, aY as CodexCompatConfig, bl as CodexConnectorConfig, aH as CodingContext, bm as CodingKnowledgeConfig, aS as CodingModeConfig, bn as CompressionGuidelineActivationState, N as CompressionGuidelineOptimizerActionSummary, K as CompressionGuidelineOptimizerEventCounts, O as CompressionGuidelineOptimizerRuleUpdate, bo as CompressionGuidelineOptimizerSourceWindow, X as CompressionGuidelineOptimizerState, bp as ConfidenceTier, bq as ConsolidationAction, br as ConsolidationItem, aK as ConsolidationObservation, a1 as ConsolidationResult, a6 as ContinuityImprovementLoop, a4 as ContinuityIncidentCloseInput, a5 as ContinuityIncidentOpenInput, a3 as ContinuityIncidentRecord, bs as ContinuityIncidentState, bt as ContinuityLoopCadence, a7 as ContinuityLoopReviewInput, bu as ContinuityLoopStatus, a8 as ContinuityLoopUpsertInput, bv as ContradictionScanConfig, am as ConversationThread, bw as CronConversationRecallMode, bx as CronRecallMode, aZ as DEFAULT_RECALL_DISCLOSURE, a2 as DaySummaryResult, by as DreamingConfig, bz as DreamingNarrativePromptStyle, bA as DreamsDeepSleepConfig, bB as DreamsLightSleepConfig, aQ as DreamsPhase, bC as DreamsPhaseStatus, bD as DreamsPhasesConfig, bE as DreamsRemConfig, aR as DreamsRunResult, aP as DreamsStatusResult, bF as EngramTraceEvent, au as EntityActivityEntry, E as EntityFile, Y as EntityMention, at as EntityRelationship, Z as EntitySchemaDefinition, _ as EntitySchemaSectionDefinition, $ as EntityStructuredSection, aL as EntityTimelineEntry, a_ as ExtractedFact, bG as ExtractedProcedureStep, bH as ExtractedQuestion, bI as ExtractedReasoningTrace, bJ as ExtractedReasoningTraceStep, bK as ExtractedRelationship, bL as ExtractionPassSource, a0 as ExtractionResult, F as FaithfulnessFrontmatter, as as FileHygieneConfig, G as GatewayConfig, bM as GitHubLiveConnectorConfig, bN as GmailLiveConnectorConfig, bO as GoogleDriveLiveConnectorConfig, bP as HeartbeatConfig, bQ as HeartbeatDetectionMode, H as HourlySummary, I as IdentityInjectionMode, y as ImportanceLevel, a9 as ImportanceScore, w as LifecycleState, L as LiveConnectorsConfig, bR as LlmTraceCallback, bS as LlmTraceEvent, ac as MemoryActionEligibilityContext, a$ as MemoryActionEligibilitySource, W as MemoryActionEvent, bT as MemoryActionOutcome, bU as MemoryActionPolicyDecision, ad as MemoryActionPolicyResult, bV as MemoryActionStatus, U as MemoryActionType, M as MemoryCategory, g as MemoryFile, k as MemoryFrontmatter, aa as MemoryIntent, m as MemoryLifecycleEvent, ae as MemoryLifecycleEventType, af as MemoryLifecycleStateSummary, ap as MemoryLink, bW as MemoryLinkType, b0 as MemoryObservation, bX as MemoryOsPresetName, l as MemoryProjectionCurrentState, b1 as MemoryScope, f as MemoryStatus, aw as MemorySummary, ar as MetaState, bY as ModelApi, bZ as ModelDefinitionConfig, b_ as ModelProviderAuthMode, ag as ModelProviderConfig, b$ as NamespacePolicy, ah as NativeKnowledgeConfig, c0 as NativeKnowledgeFolderRuleConfig, c1 as NativeKnowledgeObsidianVaultConfig, c2 as NativeKnowledgeOpenClawWorkspaceConfig, c3 as NotionLiveConnectorConfig, P as PluginConfig, x as PolicyClass, c4 as PrincipalFromSessionKeyMode, c5 as PrincipalRule, c6 as ProceduralConfig, aj as ProvenanceConfig, ai as ProvenanceSource, ab as QmdSearchExplain, Q as QmdSearchResult, c7 as QuestionEntry, b2 as RECALL_DISCLOSURE_LEVELS, c8 as ReasoningEffort, i as RecallDisclosure, c9 as RecallPipelineConfig, h as RecallPlanMode, ca as RecallSectionConfig, R as RecallTierExplain, cb as RecallTraceEvent, cc as RelevanceFeedback, ak as RetrievalTier, cd as SPECULATIVE_TTL_DAYS, ce as ScopeProfileAutoPromoteConfig, aO as ScopeProfileConfig, aM as ScopeProfileLayerId, aN as ScopeProfilePromotionTarget, cf as ScopeProfileTeamProjectConfig, cg as ScopeTeamConfig, ch as ScoredEntity, D as SecretRef, ci as SemanticChunkingConfigShape, S as SessionObserverBandConfig, cj as SignalLevel, al as SignalScanResult, ck as SlotBehaviorConfig, cl as SlotMismatchMode, an as TopicScore, T as TranscriptEntry, cm as TriggerMode, ao as TrustWeights, V as VerificationState, cn as confidenceTier, b8 as isRecallDisclosure } from './types-DwO1Ot4n.js';

package/dist/types.js

@@ -4,7 +4,7 @@ import {
   SPECULATIVE_TTL_DAYS,
   confidenceTier,
   isRecallDisclosure
-} from "./chunk-ZW5I3UNP.js";
+} from "./chunk-ILFSEIRT.js";
 import "./chunk-PZ5AY32C.js";
 export {
   DEFAULT_RECALL_DISCLOSURE,

package/dist/utility-runtime.d.ts

@@ -1,5 +1,5 @@
 import { TierRoutingPolicy } from './tier-routing.js';
-import './types-BSdUWePh.js';
+import './types-DwO1Ot4n.js';
 import './types-gb_SNtjR.js';
 import './message-parts/index.js';
 import './lifecycle.js';

package/dist/verified-recall.js

@@ -1,10 +1,10 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-H2AGJ5SV.js";
+} from "./chunk-EBDA5TYA.js";
 import "./chunk-7FL4CNPV.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-422TIKIH.js";
+import "./chunk-EVPNWN7Z.js";
 import "./chunk-L2B3EE7B.js";
 import "./chunk-M7XQSUBB.js";
 import "./chunk-5UZXUTVO.js";
@@ -14,29 +14,31 @@ import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
 import "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
-import "./chunk-ZW5I3UNP.js";
+import "./chunk-ILFSEIRT.js";
+import "./chunk-AWJ2FHCF.js";
+import "./chunk-42JKGUFJ.js";
 import "./chunk-RULE4VG5.js";
 import "./chunk-SCU65EZI.js";
 import "./chunk-MB5RSUW6.js";
 import "./chunk-6KYMPV2O.js";
-import "./chunk-AWJ2FHCF.js";
-import "./chunk-42JKGUFJ.js";
 import "./chunk-DM2T26WE.js";
 import "./chunk-LDXUBPMO.js";
-import "./chunk-FEB7W5JG.js";
+import "./chunk-6OIDDKAA.js";
+import "./chunk-XGTBNVIU.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
-import "./chunk-5J4OL7TJ.js";
+import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
-import "./chunk-VL7DP3OW.js";
 import "./chunk-L2EXJQJP.js";
+import "./chunk-VL7DP3OW.js";
 import "./chunk-RGMVMVMF.js";
 import "./chunk-N7RWREIQ.js";
 import "./chunk-J2HSAU72.js";
 import "./chunk-A6XUJE5D.js";
 import "./chunk-P7FMDTKL.js";
 import "./chunk-VS2IYZRU.js";
-import "./chunk-RVLB4E6N.js";
+import "./chunk-MDBZTH7N.js";
+import "./chunk-PHK3HARR.js";
 import "./chunk-5GKPFL3S.js";
 import "./chunk-4DJQYKMN.js";
 import "./chunk-EYIEWJNI.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.720",
+  "version": "9.3.721",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2966,7 +2966,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.720"
+    "@remnic/coding-graph": "^9.3.721"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/config.ts

@@ -49,6 +49,7 @@ import { parseWearablesConfig } from "./wearables/config.js";
 import { parseProvenanceConfig } from "./provenance.js";
 import { parseCodingKnowledgeConfig } from "./coding/coding-knowledge-config.js";
 import { parseChatConfig } from "./chat/chat-config.js";
+import { parseCorrectionIntentConfig, parseFaithfulnessGateConfig } from "./faithfulness-config.js";
 const DEFAULT_MEMORY_DIR = path.join(
   resolveHomeDir(),
   ".openclaw",
@@ -3018,36 +3019,14 @@ export function parseConfig(
     collectJudgeTrainingPairs: coerceBool(cfg.collectJudgeTrainingPairs) === true,
     judgeTrainingDir:
       typeof cfg.judgeTrainingDir === "string" ? cfg.judgeTrainingDir : "",
-    // Extraction faithfulness gate (issue #1576). Entailment-verification of
-    // extracted facts against verified source spans (#1575). Default "off"
-    // (rule 39: byte-identical pre-feature pipeline). Invalid values are
-    // rejected listing valid options (rule 51).
-    extractionFaithfulnessGate: (() => {
-      const v = cfg.extractionFaithfulnessGate;
-      if (v === undefined || v === null) return "off";
-      // Present-but-invalid (true/1/{}) must reject, not silently disable the gate (Ob4RQ).
-      const raw = typeof v === "string" ? v.trim().toLowerCase() : v;
-      if (raw === "off" || raw === "shadow" || raw === "enforce") return raw;
-      throw new Error(
-        `extractionFaithfulnessGate must be one of "off" | "shadow" | "enforce" (got ${JSON.stringify(v)})`,
-      );
-    })(),
-    extractionFaithfulnessModel:
-      typeof cfg.extractionFaithfulnessModel === "string"
-        ? cfg.extractionFaithfulnessModel
-        : "",
-    // Issue #1634 (#1576 follow-up): strict-integer validation via
-    // parseIntegerAtLeast — reject non-numeric, <=0, non-integer, NaN,
-    // Infinity, booleans, objects (gotcha #51). Mirrors qmdDaemonTimeoutMs.
-    // Valid CLI-string integers still coerce and clamp to the budget cap.
-    extractionFaithfulnessContextChars: Math.min(
-      parseIntegerAtLeast(cfg.extractionFaithfulnessContextChars, 400, 1, "extractionFaithfulnessContextChars"),
-      4000,
-    ),
-    extractionFaithfulnessTimeoutMs: Math.min(
-      parseIntegerAtLeast(cfg.extractionFaithfulnessTimeoutMs, 8000, 1, "extractionFaithfulnessTimeoutMs"),
-      60_000,
-    ),
+    // Extraction faithfulness gate (issue #1576) + model-lab pointer
+    // `extractionFaithfulnessBaseUrl` (issue #1585), and the correction-intent
+    // model-lab pointer (issue #1581 / #1585). Parsed in faithfulness-config.ts
+    // (extracted from this god file so the block can grow without tripping the
+    // ratchet). Defaults preserve the byte-identical pre-feature pipeline
+    // (rule 39); invalid values reject (rule 51 / #1634).
+    ...parseFaithfulnessGateConfig(cfg),
+    ...parseCorrectionIntentConfig(cfg),
     // Inline source attribution (issue #369). Opt-in to preserve
     // backwards compatibility with existing downstream consumers.
     inlineSourceAttributionEnabled: cfg.inlineSourceAttributionEnabled === true,

package/src/extraction-faithfulness.test.ts

@@ -1254,3 +1254,178 @@ test("parseFaithfulnessResponse: object-wrapped arrays unwrap (results/verdicts/
   // A wrapper object with no recognized array key still returns null (no over-match).
   assert.equal(parseFaithfulnessResponse('{"data": {"nested": []}}', 1), null);
 });
+
+// ---------------------------------------------------------------------------
+// Issue #1585 model-lab pointer: local fine-tuned endpoint path
+// ---------------------------------------------------------------------------
+
+/**
+ * Build a fake fetch that responds for a specific base URL with a canned
+ * openai-compatible chat-completions body. Records the request body so tests
+ * can assert the gate routed to the local model.
+ */
+function fakeFetchFor(
+  baseUrl: string,
+  responder: (body: Record<string, unknown>) => unknown,
+): { fetch: typeof fetch; requests: Array<{ url: string; body: Record<string, unknown> }> } {
+  const requests: Array<{ url: string; body: Record<string, unknown> }> = [];
+  const fake = ((url: string, init: RequestInit) => {
+    requests.push({ url, body: JSON.parse(String(init.body)) });
+    const body = JSON.parse(String(init.body));
+    const payload = responder(body);
+    return Promise.resolve(
+      new Response(JSON.stringify(payload), {
+        status: 200,
+        headers: { "content-type": "application/json" },
+      }),
+    );
+  }) as typeof fetch;
+  return { fetch: fake, requests };
+}
+
+test("checkFaithfulnessBatch: local model-lab endpoint is tried first when configured (#1585)", async () => {
+  const inputs = [{ factText: "Fact", quote: "Quote" }];
+  const config = parseConfig({
+    extractionFaithfulnessModel: "remnic-faithfulness-gate-v1",
+    extractionFaithfulnessBaseUrl: "http://localhost:11434/v1",
+    extractionFaithfulnessTimeoutMs: 5000,
+  });
+  const fallbackCalls: Array<{ messages: unknown; options: unknown }> = [];
+  const { fetch: fakeFetch, requests } = fakeFetchFor("http://localhost:11434/v1", (body) => ({
+    model: body.model,
+    choices: [{ message: { content: JSON.stringify([{ index: 0, verdict: "contradicted" }]) } }],
+  }));
+  const result = await checkFaithfulnessBatch(
+    inputs,
+    config,
+    null,
+    stubFallbackLlm("[]", fallbackCalls),
+    fakeFetch,
+  );
+  assert.equal(requests.length, 1, "local model-lab endpoint must be called");
+  assert.equal(requests[0]?.url, "http://localhost:11434/v1/chat/completions");
+  assert.equal(requests[0]?.body.model, "remnic-faithfulness-gate-v1");
+  assert.equal(fallbackCalls.length, 0, "gateway fallback must NOT run when the local endpoint succeeds");
+  assert.equal(result.results[0]?.ok, true);
+  if (result.results[0]?.ok) {
+    assert.equal(result.results[0].verdict, "contradicted", "local model verdict is used");
+    assert.equal(result.results[0].model, "remnic-faithfulness-gate-v1");
+  }
+});
+
+test("checkFaithfulnessBatch: local endpoint failure falls back to the configured chain (#1585 graceful)", async () => {
+  const inputs = [{ factText: "Fact", quote: "Quote" }];
+  const config = parseConfig({
+    extractionFaithfulnessModel: "remnic-faithfulness-gate-v1",
+    extractionFaithfulnessBaseUrl: "http://localhost:11434/v1",
+    extractionFaithfulnessTimeoutMs: 5000,
+  });
+  const fallbackCalls: Array<{ messages: unknown; options: unknown }> = [];
+  // Local endpoint returns 500 → caller returns null → gate falls through to fallback.
+  const failingFetch = (() =>
+    Promise.resolve(new Response("err", { status: 500 }))) as unknown as typeof fetch;
+  const result = await checkFaithfulnessBatch(
+    inputs,
+    config,
+    null,
+    stubFallbackLlm(JSON.stringify([{ index: 0, verdict: "entailed" }]), fallbackCalls),
+    failingFetch,
+  );
+  assert.equal(fallbackCalls.length, 1, "must fall back to the configured chain on local-endpoint failure");
+  assert.equal(result.results[0]?.ok, true);
+  if (result.results[0]?.ok) {
+    assert.equal(result.results[0].verdict, "entailed", "fallback chain verdict is used");
+  }
+});
+
+test("checkFaithfulnessBatch: a wedged local endpoint falls back to the chain BEFORE the batch timeout (codex P2 — probe budget)", async () => {
+  // The local probe must use a SMALLER budget than the outer batch timeout so a
+  // hanging endpoint returns null and the configured chain runs before the batch
+  // timer fires. extractionFaithfulnessTimeoutMs: 1000 → probe budget = 500ms.
+  const inputs = [{ factText: "Fact", quote: "Quote" }];
+  const config = parseConfig({
+    extractionFaithfulnessModel: "remnic-faithfulness-gate-v1",
+    extractionFaithfulnessBaseUrl: "http://localhost:11434/v1",
+    extractionFaithfulnessTimeoutMs: 1000,
+  });
+  const fallbackCalls: Array<{ messages: unknown; options: unknown }> = [];
+  // A fetch that hangs forever on its own but HONORS the probe's AbortSignal —
+  // the probe's controller aborts it at 500ms (half the batch budget), the call
+  // returns null, and the gate falls through to the configured chain.
+  const wedgedFetch = ((_url: string, init: RequestInit) =>
+    new Promise<Response>((_resolve, reject) => {
+      const sig = init.signal;
+      if (!sig) return;
+      if (sig.aborted) reject(new Error("aborted"));
+      else sig.addEventListener("abort", () => reject(new Error("aborted")), { once: true });
+    })) as unknown as typeof fetch;
+  const result = await checkFaithfulnessBatch(
+    inputs,
+    config,
+    null,
+    stubFallbackLlm(JSON.stringify([{ index: 0, verdict: "entailed" }]), fallbackCalls),
+    wedgedFetch,
+  );
+  assert.equal(
+    fallbackCalls.length,
+    1,
+    "a wedged local probe must reach the configured chain before the batch budget elapses",
+  );
+  assert.equal(result.results[0]?.ok, true);
+  if (result.results[0]?.ok) {
+    assert.equal(result.results[0].verdict, "entailed", "fallback chain verdict is used");
+  }
+});
+
+test("checkFaithfulnessBatch: no local endpoint pointer → byte-identical routing (regression guard)", async () => {
+  // Default config (no baseUrl) must never attempt a local-endpoint fetch.
+  const inputs = [{ factText: "Fact", quote: "Quote" }];
+  const config = baseConfig();
+  let fetchCalled = false;
+  const spyFetch = (() => {
+    fetchCalled = true;
+    return Promise.resolve(new Response("{}", { status: 200 }));
+  }) as unknown as typeof fetch;
+  await checkFaithfulnessBatch(
+    inputs,
+    config,
+    null,
+    stubFallbackLlm(JSON.stringify([{ index: 0, verdict: "entailed" }])),
+    spyFetch,
+  );
+  assert.equal(fetchCalled, false, "no local-endpoint fetch when pointer is unset");
+});
+
+
+test("checkFaithfulnessBatch: local-endpoint failure does NOT leak the local model name into the fallback chain (codex P2 PRRT_kwDORJXyws6Otp-L)", async () => {
+  // extractionFaithfulnessModel is the LOCAL served model's name. When the
+  // local endpoint is configured but fails, that name must NOT be forwarded to
+  // the gateway/fallback as options.model — otherwise the configured chain is
+  // forced onto an unavailable local-only model and a local outage becomes
+  // backend_unavailable instead of graceful fallback to the configured chain.
+  const inputs = [{ factText: "Fact", quote: "Quote" }];
+  const config = parseConfig({
+    extractionFaithfulnessModel: "remnic-faithfulness-gate-v1",
+    extractionFaithfulnessBaseUrl: "http://localhost:11434/v1",
+    extractionFaithfulnessTimeoutMs: 5000,
+  });
+  const fallbackCalls: Array<{ messages: unknown; options: unknown }> = [];
+  // Local endpoint returns 500 -> caller returns null -> gate falls through.
+  const failingFetch = (() =>
+    Promise.resolve(new Response("err", { status: 500 }))) as unknown as typeof fetch;
+  const result = await checkFaithfulnessBatch(
+    inputs,
+    config,
+    null,
+    stubFallbackLlm(JSON.stringify([{ index: 0, verdict: "entailed" }]), fallbackCalls),
+    failingFetch,
+  );
+  assert.equal(fallbackCalls.length, 1, "fallback chain must run on local-endpoint failure");
+  const opts = fallbackCalls[0]?.options as Record<string, unknown>;
+  assert.equal(
+    opts?.model,
+    undefined,
+    "local-only model name must NOT leak into the fallback chain on endpoint failure",
+  );
+  assert.equal(result.results[0]?.ok, true);
+});

package/src/extraction-faithfulness.ts

@@ -34,6 +34,10 @@ import { log } from "./logger.js";
 import type { PluginConfig, MemoryFrontmatter, FaithfulnessFrontmatter } from "./types.js";
 import type { LocalLlmClient } from "./local-llm.js";
 import { type FallbackLlmClient, gatewayTaskChainOptions } from "./fallback-llm.js";
+import {
+  callOpenAiCompatibleChat,
+  resolveFaithfulnessGateEndpoint,
+} from "./local-model-endpoint.js";
 import { extractJsonCandidates } from "./json-extract.js";
 
 // Re-export for callers importing from this module.
@@ -280,13 +284,54 @@ async function callFaithfulnessLlm(
   fallbackLlm: FallbackLlmClient | null,
   timeoutMs: number,
   signal?: AbortSignal,
+  fetchImpl: typeof fetch = fetch,
 ): Promise<LlmCallResult> {
   const messages: Array<{ role: "system" | "user"; content: string }> = [
     { role: "system", content: systemPrompt },
     { role: "user", content: userPrompt },
   ];
 
-  const modelOverride = config.extractionFaithfulnessModel || undefined;
+  // Issue #1585 model-lab pointer: when an explicit local fine-tuned endpoint
+  // is configured (base URL + model name), try it FIRST — it is the cheapest,
+  // deterministic path the operator opted into by setting
+  // extractionFaithfulnessBaseUrl. Unset (the default) skips this entirely,
+  // preserving byte-identical pre-feature routing (rule 39). Any failure
+  // (network, non-2xx, malformed body, timeout) returns null and falls through
+  // to the configured chain (checklist §4 graceful degradation).
+  const localEndpoint = resolveFaithfulnessGateEndpoint(config);
+  if (localEndpoint) {
+    // Give the local probe a SMALLER budget than the outer batch timeout so a
+    // wedged local model returns null (and falls through to the configured
+    // chain) before the batch timer fires. The local endpoint is meant to be
+    // the fast path; if it cannot answer within half the budget (min 500ms),
+    // abandon it and let the fallback chain use the remainder (codex P2 — the
+    // advertised graceful fallback must actually reach the chain, not be starved
+    // by a hanging probe sharing the full batch budget).
+    const probeBudgetMs = Math.max(500, Math.floor(timeoutMs / 2));
+    const result = await callOpenAiCompatibleChat(
+      localEndpoint,
+      messages,
+      { temperature: 0.1, maxTokens: 2048, responseFormatJson: true, timeoutMs: probeBudgetMs },
+      fetchImpl,
+    );
+    if (result?.content) {
+      return { content: result.content, modelUsed: result.modelUsed };
+    }
+    log.debug(
+      "extraction-faithfulness: local model-lab endpoint unavailable, trying configured chain",
+    );
+  }
+
+  // extractionFaithfulnessModel is the LOCAL served model's name (e.g.
+  // remnic-faithfulness-gate-v1). When a local endpoint is configured it
+  // belongs to that endpoint ONLY — it must NOT leak into the fallback chain
+  // as a gateway/local-LLM override, or a local outage forces the configured
+  // chain onto an unavailable local-only model and turns graceful fallback
+  // into backend_unavailable (codex P2 PRRT_kwDORJXyws6Otp-L). Decouple: the
+  // override reaches the fallback chain only when NO local endpoint is
+  // configured (the pre-feature model-override contract, preserved
+  // byte-identical — rule 39).
+  const modelOverride = localEndpoint ? undefined : (config.extractionFaithfulnessModel || undefined);
 
   // Skip the local backend when (a) modelSource is "gateway", or (b) a
   // faithfulness model override is set. The local client always sends
@@ -415,6 +460,12 @@ export async function checkFaithfulnessBatch(
   config: PluginConfig,
   localLlm: LocalLlmClient | null,
   fallbackLlm: FallbackLlmClient | null,
+  /**
+   * Optional fetch injection (issue #1585). The orchestrator does not pass it
+   * (uses global fetch); tests pass a stub to exercise the local model-lab
+   * endpoint path without a live server. See callFaithfulnessLlm.
+   */
+  fetchImpl?: typeof fetch,
 ): Promise<FaithfulnessBatchResult> {
   const timeoutMs =
     typeof config.extractionFaithfulnessTimeoutMs === "number" &&
@@ -486,6 +537,7 @@ export async function checkFaithfulnessBatch(
       fallbackLlm,
       timeoutMs,
       controller.signal,
+      fetchImpl,
     );
     const settled = await Promise.race([
       callPromise.then(