@remnic/core 9.3.725 → 9.3.726

package/dist/search/lancedb-backend.js

@@ -1,8 +1,8 @@
 import {
   LanceDbBackend
-} from "../chunk-TAPSNIMA.js";
-import "../chunk-CINZGPSJ.js";
+} from "../chunk-5CEJH5ZN.js";
 import "../chunk-AER6MT24.js";
+import "../chunk-CINZGPSJ.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-5GPPACXK.js";
 import "../chunk-VS2IYZRU.js";

package/dist/search/meilisearch-backend.js

@@ -1,8 +1,8 @@
 import {
   MeilisearchBackend
-} from "../chunk-YQGHW5ML.js";
-import "../chunk-CINZGPSJ.js";
+} from "../chunk-WRFKZEO6.js";
 import "../chunk-AER6MT24.js";
+import "../chunk-CINZGPSJ.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-5GPPACXK.js";
 import "../chunk-VS2IYZRU.js";

package/dist/search/orama-backend.js

@@ -1,9 +1,9 @@
 import {
   OramaBackend,
   resolveOramaCollectionDbFilePath
-} from "../chunk-LD53WPMU.js";
-import "../chunk-CINZGPSJ.js";
+} from "../chunk-LQ6JI4VH.js";
 import "../chunk-AER6MT24.js";
+import "../chunk-CINZGPSJ.js";
 import "../chunk-YNQ6DFSV.js";
 import "../chunk-5GPPACXK.js";
 import "../chunk-VS2IYZRU.js";

package/dist/semantic-consolidation.js

@@ -7,24 +7,24 @@ import {
   materializeAfterSemanticConsolidation,
   parseConsolidationResponse,
   parseOperatorAwareConsolidationResponse
-} from "./chunk-JJJCVCCQ.js";
-import "./chunk-ZK2L72VN.js";
+} from "./chunk-JPUT5NGH.js";
+import "./chunk-UQSVUEN2.js";
 import "./chunk-UUH4YQOF.js";
 import {
   resolveExtensionsRoot
 } from "./chunk-JLNBQWZ2.js";
 import "./chunk-3UXOZBHV.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-4R3CGCI5.js";
-import "./chunk-L2B3EE7B.js";
+import "./chunk-MQVKHFIU.js";
 import "./chunk-M7XQSUBB.js";
+import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-7AG54AF3.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -43,6 +43,7 @@ import {
   isValidDerivedFromEntry
 } from "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
+import "./chunk-W5H6ZRPT.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";

package/dist/semantic-rule-promotion.js

@@ -1,17 +1,17 @@
 import {
   promoteSemanticRuleFromMemory,
   setSemanticRulePromotionTestHooks
-} from "./chunk-FACTVMXQ.js";
-import "./chunk-4R3CGCI5.js";
-import "./chunk-L2B3EE7B.js";
+} from "./chunk-FO3HO52S.js";
+import "./chunk-MQVKHFIU.js";
 import "./chunk-M7XQSUBB.js";
+import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-7AG54AF3.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -25,6 +25,7 @@ import "./chunk-6OIDDKAA.js";
 import "./chunk-XGTBNVIU.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
+import "./chunk-W5H6ZRPT.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";

package/dist/semantic-rule-verifier.js

@@ -1,18 +1,18 @@
 import {
   compareVerifiedSemanticRuleResults,
   searchVerifiedSemanticRules
-} from "./chunk-T55EGZSJ.js";
+} from "./chunk-BB57OZWC.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-4R3CGCI5.js";
-import "./chunk-L2B3EE7B.js";
+import "./chunk-MQVKHFIU.js";
 import "./chunk-M7XQSUBB.js";
+import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-7AG54AF3.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -26,6 +26,7 @@ import "./chunk-6OIDDKAA.js";
 import "./chunk-XGTBNVIU.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
+import "./chunk-W5H6ZRPT.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";

package/dist/storage.d.ts

@@ -351,9 +351,9 @@ declare class ContentHashIndex {
      * Not part of the public API — prefer `add(content)` for external callers.
      */
     addByHash(hash: string): void;
-    /** Normalize content and compute SHA-256 hash. */
+    /** Normalize content (delegates to content-hash.ts for a single source of truth). */
     static normalizeContent(content: string): string;
-    /** Normalize content and compute SHA-256 hash. */
+    /** Compute SHA-256 hash (delegates to content-hash.ts for a single source of truth). */
     static computeHash(content: string): string;
 }
 

package/dist/storage.js

@@ -8,18 +8,18 @@ import {
   normalizeEntityName,
   parseEntityFile,
   serializeEntityFile
-} from "./chunk-4R3CGCI5.js";
-import "./chunk-L2B3EE7B.js";
+} from "./chunk-MQVKHFIU.js";
 import "./chunk-M7XQSUBB.js";
+import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
-import "./chunk-TKZ3AL5V.js";
-import "./chunk-6CIAGZ6X.js";
-import "./chunk-J6A3CX5N.js";
 import {
   stripAttributesSuffix
 } from "./chunk-SVOZFLIQ.js";
 import "./chunk-LTJAMRGI.js";
+import "./chunk-TKZ3AL5V.js";
+import "./chunk-6CIAGZ6X.js";
+import "./chunk-J6A3CX5N.js";
 import "./chunk-7AG54AF3.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -33,6 +33,7 @@ import "./chunk-6OIDDKAA.js";
 import "./chunk-XGTBNVIU.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
+import "./chunk-W5H6ZRPT.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";

package/dist/transfer/backup.js

@@ -1,8 +1,8 @@
 import {
   backupMemoryDir
-} from "../chunk-2NLLXCJG.js";
+} from "../chunk-OWHERGF2.js";
 import "../chunk-765K3SAT.js";
-import "../chunk-X7Y7WX73.js";
+import "../chunk-UVYI6VIX.js";
 import "../chunk-J4EB7DNW.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";

package/dist/transfer/capsule-export.js

@@ -1,9 +1,9 @@
 import {
   exportCapsule,
   isValidCapsuleSince
-} from "../chunk-KQAFEZQX.js";
+} from "../chunk-5W7CTZ2E.js";
+import "../chunk-UVYI6VIX.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-X7Y7WX73.js";
 import "../chunk-J4EB7DNW.js";
 import "../chunk-UI3NYK34.js";
 import "../chunk-GCGJW34D.js";

package/dist/transfer/capsule-import.js

@@ -1,9 +1,9 @@
 import {
   importCapsule
-} from "../chunk-ARV3AUOM.js";
+} from "../chunk-UNNDFYUX.js";
 import "../chunk-VF4XKTX3.js";
+import "../chunk-UVYI6VIX.js";
 import "../chunk-WEHSQBFR.js";
-import "../chunk-X7Y7WX73.js";
 import "../chunk-GCGJW34D.js";
 import "../chunk-BJMBJZ2Y.js";
 import "../chunk-UKJAGEXH.js";

package/dist/verified-recall.js

@@ -1,19 +1,19 @@
 import {
   compareVerifiedEpisodeResults,
   searchVerifiedEpisodes
-} from "./chunk-FXCIOLRB.js";
+} from "./chunk-NPL7VDM6.js";
 import "./chunk-7FL4CNPV.js";
 import "./chunk-ZBJMUXZH.js";
-import "./chunk-4R3CGCI5.js";
-import "./chunk-L2B3EE7B.js";
+import "./chunk-MQVKHFIU.js";
 import "./chunk-M7XQSUBB.js";
+import "./chunk-L2B3EE7B.js";
 import "./chunk-5UZXUTVO.js";
 import "./chunk-5GPPACXK.js";
+import "./chunk-SVOZFLIQ.js";
+import "./chunk-LTJAMRGI.js";
 import "./chunk-TKZ3AL5V.js";
 import "./chunk-6CIAGZ6X.js";
 import "./chunk-J6A3CX5N.js";
-import "./chunk-SVOZFLIQ.js";
-import "./chunk-LTJAMRGI.js";
 import "./chunk-7AG54AF3.js";
 import "./chunk-AWJ2FHCF.js";
 import "./chunk-42JKGUFJ.js";
@@ -27,6 +27,7 @@ import "./chunk-6OIDDKAA.js";
 import "./chunk-XGTBNVIU.js";
 import "./chunk-G7D6GZ5J.js";
 import "./chunk-VF4XKTX3.js";
+import "./chunk-W5H6ZRPT.js";
 import "./chunk-VUA4S7P6.js";
 import "./chunk-IQVQJJL7.js";
 import "./chunk-L2EXJQJP.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remnic/core",
-  "version": "9.3.725",
+  "version": "9.3.726",
   "description": "Framework-agnostic Remnic memory engine — orchestrator, storage, extraction, search, trust zones",
   "type": "module",
   "main": "dist/index.js",
@@ -2966,7 +2966,7 @@
     "core"
   ],
   "peerDependencies": {
-    "@remnic/coding-graph": "^9.3.725"
+    "@remnic/coding-graph": "^9.3.726"
   },
   "peerDependenciesMeta": {
     "@remnic/coding-graph": {

package/src/config.test.ts

@@ -2092,3 +2092,53 @@ test("parseConfig rejects invalid correction.enabled instead of silently enablin
   assert.equal(parseConfig({ correctionEnabled: "0" }).correctionEnabled, false);
   assert.equal(parseConfig({}).correctionEnabled, true);
 });
+
+test("parseConfig rejects invalid correction.planTtlHours instead of silently defaulting (#1678)", () => {
+  // Nested form: correction.planTtlHours.
+  for (const value of [0, -1, 0.5, "0", "-5", "abc", true, null]) {
+    assert.throws(
+      () => parseConfig({ correction: { planTtlHours: value } } as Record<string, unknown>),
+      /Invalid correction\.planTtlHours/,
+      `nested planTtlHours=${JSON.stringify(value)} should throw`,
+    );
+  }
+  // Flat form: correctionPlanTtlHours.
+  for (const value of [0, -3, "abc", true]) {
+    assert.throws(
+      () => parseConfig({ correctionPlanTtlHours: value } as Record<string, unknown>),
+      /Invalid correction\.planTtlHours/,
+      `flat correctionPlanTtlHours=${JSON.stringify(value)} should throw`,
+    );
+  }
+  // Valid values resolve (no regression on the happy path).
+  assert.equal(parseConfig({ correction: { planTtlHours: 48 } }).correctionPlanTtlHours, 48);
+  assert.equal(parseConfig({ correctionPlanTtlHours: 12 }).correctionPlanTtlHours, 12);
+  assert.equal(parseConfig({}).correctionPlanTtlHours, 24, "absent → documented default");
+});
+
+test("parseConfig correction.maxAffected rejects non-integers (Number.isInteger, #1678)", () => {
+  // The error message says "integer" — 3.7 must be rejected, not silently floored to 3.
+  for (const value of [3.7, 2.5, "1.5", 0.99]) {
+    assert.throws(
+      () => parseConfig({ correction: { maxAffected: value } } as Record<string, unknown>),
+      /Invalid correction\.maxAffected/,
+      `maxAffected=${JSON.stringify(value)} should throw (non-integer)`,
+    );
+  }
+  for (const value of [0, -1, "abc"]) {
+    assert.throws(
+      () => parseConfig({ correction: { maxAffected: value } } as Record<string, unknown>),
+      /Invalid correction\.maxAffected/,
+      `maxAffected=${JSON.stringify(value)} should throw`,
+    );
+  }
+  // Flat form.
+  assert.throws(
+    () => parseConfig({ correctionMaxAffected: 4.2 } as Record<string, unknown>),
+    /Invalid correction\.maxAffected/,
+  );
+  // Valid integers resolve.
+  assert.equal(parseConfig({ correction: { maxAffected: 5 } }).correctionMaxAffected, 5);
+  assert.equal(parseConfig({ correctionMaxAffected: 20 }).correctionMaxAffected, 20);
+  assert.equal(parseConfig({}).correctionMaxAffected, 10, "absent → documented default");
+});

package/src/config.ts

@@ -2130,17 +2130,34 @@ export function parseConfig(
       const raw = rawNested !== undefined ? rawNested : cfg.correctionMaxAffected;
       if (raw === undefined || raw === null) return 10;
       const n = coerceNumber(raw);
-      if (n === undefined || !Number.isFinite(n) || n < 1) {
+      // #1678 (thread Oiup6): the error message says "integer" — enforce it
+      // with Number.isInteger so 3.7 is rejected rather than silently floored.
+      if (n === undefined || !Number.isFinite(n) || n < 1 || !Number.isInteger(n)) {
         throw new Error(`Invalid correction.maxAffected: expected an integer >= 1, got ${JSON.stringify(raw)}`);
       }
-      return Math.floor(n);
+      return n;
     })(),
     correctionPlanTtlHours: (() => {
       const nested = (cfg.correction as Record<string, unknown> | undefined)?.planTtlHours;
       const fromNested = nested !== undefined ? coerceNumber(nested) : undefined;
-      if (fromNested !== undefined && fromNested > 0) return fromNested;
+      if (fromNested !== undefined && fromNested >= 1) return fromNested;
+      // #1678 (threads Ohtvi/Ohyvf): reject invalid (0/negative/non-numeric)
+      // instead of silently defaulting to 24h — completes the config-reject
+      // class already enforced for enabled/applyRequiresConfirm/maxAffected.
+      if (nested !== undefined && fromNested === undefined) {
+        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(nested)}`);
+      }
+      if (fromNested !== undefined && fromNested < 1) {
+        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(nested)}`);
+      }
       const fromFlat = coerceNumber(cfg.correctionPlanTtlHours);
-      if (fromFlat !== undefined && fromFlat > 0) return fromFlat;
+      if (fromFlat !== undefined && fromFlat >= 1) return fromFlat;
+      if (cfg.correctionPlanTtlHours !== undefined && fromFlat === undefined) {
+        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(cfg.correctionPlanTtlHours)}`);
+      }
+      if (fromFlat !== undefined && fromFlat < 1) {
+        throw new Error(`Invalid correction.planTtlHours: expected a number >= 1, got ${JSON.stringify(cfg.correctionPlanTtlHours)}`);
+      }
       return 24;
     })(),
     // Passive correction capture (issue #1581). Parsed from

package/src/content-hash.ts

@@ -0,0 +1,24 @@
+/**
+ * content-hash.ts — standalone content normalization + SHA-256 hashing.
+ *
+ * Extracted from `ContentHashIndex` (storage.ts) so correction modules and
+ * other consumers can hash content WITHOUT importing the storage god file
+ * (issue #1533 directStorageImports ratchet). The static methods on
+ * `ContentHashIndex` delegate here to guarantee identical results.
+ */
+
+import { createHash } from "node:crypto";
+
+/** Normalize content: lowercase, strip non-alphanumerics, collapse whitespace. */
+export function normalizeContent(content: string): string {
+  return content
+    .toLowerCase()
+    .replace(/[^a-z0-9\s]/g, " ")
+    .replace(/\s+/g, " ")
+    .trim();
+}
+
+/** Normalize content and compute SHA-256 hash. */
+export function computeContentHash(content: string): string {
+  return createHash("sha256").update(normalizeContent(content)).digest("hex");
+}

package/src/correction/correction-access-wiring.ts

@@ -21,10 +21,14 @@
  */
 
 import path from "node:path";
+import { createHash } from "node:crypto";
 import { mkdir, writeFile } from "node:fs/promises";
 import type { Orchestrator } from "../orchestrator.js";
 import type { MemoryFile, MemoryStatus, PluginConfig } from "../types.js";
 import { stripAttributesSuffix } from "../structured-attributes.js";
+import { supersessionKeysForFact } from "../temporal-supersession.js";
+import { computeContentHash } from "../content-hash.js";
+import { sanitizeMemoryContent } from "../sanitize.js";
 import {
   CorrectionContractError,
   validateCorrectionAction,
@@ -168,7 +172,7 @@ async function searchMemories(
     const storage = await wiring.orchestrator.getStorage(ns);
     const all = await storage.readAllMemories();
     for (const m of all) {
-      if (m.frontmatter.status && m.frontmatter.status !== "active") continue;
+      if (!isEligibleCorrectionCandidate(m)) continue;
       const hay = `${m.content} ${m.frontmatter.tags?.join(" ") ?? ""}`.toLowerCase();
       let hits = 0;
       for (const tok of tokens) {
@@ -265,7 +269,7 @@ async function expandEntityNeighbors(
     for (const m of all) {
       if (out.length >= limit) break;
       if (seen.has(m.frontmatter.id)) continue;
-      if (m.frontmatter.status && m.frontmatter.status !== "active") continue;
+      if (!isEligibleCorrectionCandidate(m)) continue;
       if (m.frontmatter.entityRef && seedRefs.has(m.frontmatter.entityRef)) {
         out.push(toCandidate(m, ns, 0.5));
         seen.add(m.frontmatter.id);
@@ -427,9 +431,22 @@ async function applyEditMemory(
   // The StorageManager's writeMemoryFrontmatter snapshots the prior version
   // internally when page-versioning is configured (issue #371), so every edit
   // is revertable without the correction layer forking versioning logic.
+  //
+  // #1672 item 3: recompute the contentHash from the patched body so the
+  // dedup index + tombstone exact tier match the NEW content. writeMemory
+  // computes this at write time, but writeMemoryFrontmatter preserves the
+  // prior frontmatter hash — without this the hash no longer matches the
+  // patched body and a later re-extraction of the same fact dedup-misses.
+  const contentHashForPatch =
+    existing.frontmatter.category === "fact"
+      ? computeContentHash(sanitizeMemoryContent(patch).text)
+      : undefined;
   await storage.writeMemoryFrontmatter(
     { ...existing, content: patch },
-    { updated: new Date().toISOString() },
+    {
+      updated: new Date().toISOString(),
+      ...(contentHashForPatch ? { contentHash: contentHashForPatch } : {}),
+    },
   );
   return memoryId;
 }
@@ -535,6 +552,8 @@ async function appendTombstoneFn(
     rawContent: string;
     entityRef?: string;
     supersessionKey?: string;
+    supersessionKeys?: string[];
+    contentHash?: string;
   },
 ): Promise<string | null> {
   const storage = await wiring.orchestrator.getStorage(namespace);
@@ -550,20 +569,46 @@ async function appendTombstoneFn(
     typeof storage.isTombstonesEnabled === "function"
       ? storage.isTombstonesEnabled()
       : true;
-  const result = await storage.appendTombstone({
-    reason: input.reason,
-    createdBy: "user_correction",
-    sourceMemoryId: input.sourceMemoryId,
-    rawContent: input.rawContent,
-    ...(input.entityRef ? { entityRef: input.entityRef } : {}),
-    ...(input.supersessionKey ? { supersessionKey: input.supersessionKey } : {}),
-  });
-  if (result === null && enabled) {
-    throw new CorrectionContractError(
-      `tombstone persistence failed for memory ${input.sourceMemoryId} (tombstones enabled but store returned null — I/O error swallowed)`,
-    );
+  // #1672 item 4: emit one tombstone per derived supersession key (mirrors
+  // temporal-supersession / forget / pattern-reinforcement) so a paraphrased
+  // re-observation placing the attribute at a different key position is still
+  // blocked at the keyed tier. When no keys are derived, emit a single
+  // content-only tombstone. Each carries the canonical contentHash so the
+  // exact tier also matches re-extraction.
+  const keys =
+    input.supersessionKeys && input.supersessionKeys.length > 0
+      ? input.supersessionKeys
+      : input.supersessionKey
+        ? [input.supersessionKey]
+        : [undefined];
+  const writtenIds: string[] = [];
+  let firstId: string | null = null;
+  for (const key of keys) {
+    const result = await storage.appendTombstone({
+      reason: input.reason,
+      createdBy: "user_correction",
+      sourceMemoryId: input.sourceMemoryId,
+      rawContent: input.rawContent,
+      ...(input.entityRef ? { entityRef: input.entityRef } : {}),
+      ...(key ? { supersessionKey: key } : {}),
+      ...(input.contentHash ? { contentHash: input.contentHash } : {}),
+    });
+    if (result === null && enabled) {
+      // Rollback already-written tombstones so a partial multi-key failure
+      // does not leave incomplete resurrection blocking for the still-active
+      // memory (review thread #1). Best-effort — a dangling tombstone is the
+      // safer failure mode (false-positive block vs. false-negative leak).
+      for (const id of writtenIds) {
+        try { await storage.revokeTombstone(id, "user_correction"); } catch { /* best-effort */ }
+      }
+      throw new CorrectionContractError(
+        `tombstone persistence failed for memory ${input.sourceMemoryId} (tombstones enabled but store returned null — I/O error swallowed)`,
+      );
+    }
+    if (firstId === null) firstId = result;
+    if (result) writtenIds.push(result);
   }
-  return result;
+  return firstId;
 }
 
 async function registerRedactionRuleFn(
@@ -576,9 +621,14 @@ async function registerRedactionRuleFn(
   const storage = await wiring.orchestrator.getStorage(namespace);
   const dir = path.join(storage.dir, "state", "corrections", "redaction-rules");
   await mkdir(dir, { recursive: true });
-  // Idempotent: filename is a slug of the pattern so re-registering the same
-  // pattern overwrites rather than duplicates.
-  const slug = pattern.replace(/[^a-zA-Z0-9]+/g, "-").slice(0, 64) || "rule";
+  // Idempotent: filename is a slug + short hash of the full pattern so
+  // re-registering the same pattern overwrites rather than duplicates, while
+  // distinct patterns that slug identically (e.g. "abc+def" vs "abc.def" →
+  // "abc-def") no longer collide and silently remove each other's enforcement
+  // (review thread P1).
+  const slugBase = pattern.replace(/[^a-zA-Z0-9]+/g, "-").slice(0, 48) || "rule";
+  const patternHash = createHash("sha256").update(pattern).digest("hex").slice(0, 16);
+  const slug = `${slugBase}-${patternHash}`;
   await writeFile(
     path.join(dir, `${slug}.json`),
     `${JSON.stringify({ pattern, namespace, createdAt: new Date().toISOString() })}\n`,
@@ -686,6 +736,22 @@ function toCandidate(m: MemoryFile, namespace: string, score: number): PlannerCa
   } satisfies PlannerCandidate & { namespace?: string };
 }
 
+/**
+ * Lifecycle-aware eligibility for a correction candidate (#1672 item 2). A
+ * memory is eligible only when it is `status: "active"` AND not archived.
+ * Planning a correction against a memory that was archived via the
+ * `archivedAt`/archive path but still marked active would surface stale
+ * content the user already set aside — and apply would reject the rescope
+ * (non-active source) or supersede a fact the user intended gone. Both the
+ * status flip and the archive timestamp are checked so the candidate set
+ * stays consistent with the rescope/retire apply-time guards.
+ */
+function isEligibleCorrectionCandidate(m: MemoryFile): boolean {
+  if (m.frontmatter.status && m.frontmatter.status !== "active") return false;
+  if (typeof m.frontmatter.archivedAt === "string" && m.frontmatter.archivedAt.length > 0) return false;
+  return true;
+}
+
 function toExecutorMemory(m: MemoryFile): ExecutorMemory {
   const fm = m.frontmatter;
   // The tombstone hash must use the ORIGINAL unsuffixed body: writeMemory
@@ -693,12 +759,27 @@ function toExecutorMemory(m: MemoryFile): ExecutorMemory {
   // hashing m.content would never match the pre-suffix content hash (thread
   // OhX2N, rule 23). Strip the suffix when attributes are present.
   const rawBody = fm.structuredAttributes ? stripAttributesSuffix(m.content) : m.content;
+  // #1672 item 4: derive the full supersession-key set from the memory's
+  // structuredAttributes so the tombstone's keyed tier blocks paraphrased
+  // re-observations that place the attribute at a different key position
+  // (mirrors temporal-supersession's per-key emission). Also forward the
+  // canonical contentHash so the exact tier matches re-extraction without
+  // recomputing from a citation-annotated body.
+  const supersessionKeys = supersessionKeysForFact({
+    entityRef: fm.entityRef,
+    structuredAttributes: fm.structuredAttributes,
+  });
   return {
     memoryId: fm.id,
     content: m.content,
     category: fm.category,
     rawContent: rawBody,
     ...(fm.entityRef ? { entityRef: fm.entityRef } : {}),
+    ...(supersessionKeys.length > 0 ? { supersessionKeys } : {}),
+    ...(supersessionKeys.length > 0 ? { supersessionKey: supersessionKeys[0] } : {}),
+    ...(typeof fm.contentHash === "string" && fm.contentHash.length > 0
+      ? { contentHash: fm.contentHash }
+      : {}),
   } satisfies ExecutorMemory;
 }
 
@@ -884,4 +965,8 @@ export {
   buildClassifyPrompt,
   CLASSIFY_SYSTEM_PROMPT,
   parseClassifyResponse,
+  // #1672: exported for focused storage-integration regression tests.
+  isEligibleCorrectionCandidate,
+  applyEditMemory,
+  appendTombstoneFn,
 };