@vostride/agent-qa-agent 0.2.2 → 0.2.4

package/dist/index.js

@@ -61,17 +61,7 @@ var FunctionNotBoundError = class extends Error {
 var AGENT_ASK_FUNCTION_ID = "agent.ask";
 var agentAskSpec = {
   id: AGENT_ASK_FUNCTION_ID,
-  // THE SUMMARY SAYS "ENTRY POINT", and that wording is a fix rather than a flourish (392-09, from
-  // the first live gate run). D-07 projects every registry op 1:1 into the planner's tool set, so
-  // this op is a tool the planner is offered WHILE IT IS INSIDE ONE OF ITS OWN TURNS. Described as
-  // "run one conversational turn", it read to the model as the natural home for any conversational
-  // request: a plain request to list runs was planned as `agent.ask` twice out of two live runs,
-  // and the recursive turn then failed — so a person asking for a capability in prose got a failed
-  // turn instead of the capability. The repair is DESCRIPTION, not exclusion. Hiding a tool would
-  // break the always-send-all law and D-07's registry projection, and it would be the wrong
-  // diagnosis anyway: the tool was not misclassified, it was misdescribed. Every consumer of this
-  // string — the catalogue, `fn --list`, 396's MCP listing, the planner — is better served by the
-  // sentence that says what the op is FOR.
+  // Worded as an entry point, because a summary saying "one turn" made the planner recurse into it.
   summary: "The chat entry point: begin ONE new conversational turn from outside a conversation. Surfaces (a REPL, the ask verb, an MCP client) call this to START a turn \u2014 it is not a way to carry out a request while a turn is already running. It routes the utterance, executes what it resolves to, and answers with per-clause receipts.",
   resultKind: "unary",
   // Bound where a composition assembles a turn engine. A host with no engine lists this
@@ -80,34 +70,9 @@ var agentAskSpec = {
   boundThrough: "chatTurn",
   input: AgentAskInputSchema,
   output: AgentAskResultSchema,
-  // `readOnly: false`, and the honesty matters more here than on any other op in the catalogue: a
-  // turn is a variable-reach capability, so describing it as a read would let a risk ladder treat
-  // the door to every write verb as the cheapest thing in the registry. (2026-10-01, 432-26: the
-  // descriptor is a classification; no gate reads it to ask or deny.)
+  // Not read-only: a turn can reach any write verb.
   risk: { name: `fn:${AGENT_ASK_FUNCTION_ID}`, recognized: true, readOnly: false },
-  /**
-   * A TURN's own report of how it went (2026-08-20, Phase 399.1 D-01/D-02/D-12).
-   *
-   * A TURN IS A COMPOSITION, SO ITS VERDICT IS A FOLD OF ITS CLAUSES' VERDICTS. This used to fold
-   * the turn STATUS alone, on the argument that the per-clause verdicts were already receipts and
-   * reading them here would be a second opinion. That argument is the recorded belief that produced
-   * gap 1: a turn whose only clause was REFUSED by a credential guardrail reported `executed` one
-   * composition layer up, and the person reading the outer line was told a blocked mutation had been
-   * carried out. The receipts are not a second opinion about the turn — they ARE the turn, and the
-   * status is a summary of them. Success is the one claim a fold may never default to (D-03's
-   * asymmetry): where the clauses do not support it, the outer word must say what they do support.
-   *
-   * `fail_closed` IS `failed` AND NOT `refused`. D-02 minted `refused` for a GUARDRAIL declining an
-   * op; a fail-closed turn is the ENGINE abandoning the clauses after one of them broke, which is
-   * an operation that did not complete. Reporting it `refused` would tell a person a control
-   * declined their request when what happened is that something went wrong.
-   *
-   * AND THERE IS DELIBERATELY NO `failed` SCAN OVER THE RECEIPTS HERE (D-12). Post-399.1-09 the
-   * engine derives its aggregate from the same vocabulary, so it can no longer answer `completed`
-   * over a `failed` receipt; a second mechanism second-guessing the first is the redundant-mechanism
-   * failure mode this project has already paid for, and it would hide a regression in the engine
-   * rather than surface it.
-   */
+  // A turn's verdict folds its clauses' receipts, and `fail_closed` is `failed`, never `refused`.
   classify(output) {
     switch (output.status) {
       case "completed": {
@@ -148,7 +113,6 @@ import {
   exercisedAnchors as exercisedAnchors2,
   failingStepOf as failingStepOf4,
   failureFingerprint as failureFingerprint2,
-  projectVerdictMisdirection,
   resolveRunVerdicts as resolveRunVerdicts2,
   slugBranch as slugBranch2
 } from "@vostride/agent-qa-schema";
@@ -280,18 +244,14 @@ function renderVerdictSentence(verdict, parts, provider, query) {
 
 // src/jobs/kinds.ts
 import {
-  asRecordId,
   canonicalJson as canonicalJson3,
   CURRENT_ANALYSIS_SCHEMA_VERSION as CURRENT_ANALYSIS_SCHEMA_VERSION2,
   CurationSnapshotSchema as CurationSnapshotSchema2,
   errorTextOf as errorTextOf2,
   failingStepOf as failingStepOf3,
-  MisdirectionRecordResultSchema,
-  RunNotificationSchemaError as RunNotificationSchemaError2,
   sha256hex,
   slugBranch,
-  stepOutcomeUnproven,
-  validateAnalysisAgainstHandoff as validateAnalysisAgainstHandoff2
+  stepOutcomeUnproven
 } from "@vostride/agent-qa-schema";
 import { deterministicVerdict, UNKNOWN_SIGNAL_RATIONALE } from "@vostride/agent-qa-runner";
 
@@ -517,73 +477,17 @@ function misdirectionPathSteps(verdict, parts, test) {
   if (failing !== void 0) indexes.add(failing.stepIndex);
   return test.steps.filter((step) => indexes.has(step.stepIndex));
 }
-function misdirectionValidationOptions(evidence, rootPosture) {
-  return evidence === void 0 ? {} : { gatedProducerEvidence: true, rootPosture };
-}
-function exposureKey(stepIndex, recordId) {
-  return `${String(stepIndex)}${recordId}`;
-}
-function summarizeCrossCheck(rows, sites) {
-  if (rows.some((row) => row.crossCheck === "flipped")) return "flipped";
-  if (rows.some((row) => row.crossCheck === "inconclusive")) return "inconclusive";
-  const covered = new Set(rows.map((row) => exposureKey(row.stepIndex, String(row.recordId))));
-  const complete = sites.every(
-    (site) => covered.has(exposureKey(site.stepIndex, String(site.recordId)))
-  );
-  return complete && rows.every((row) => row.crossCheck === "held") ? "held" : "not-run";
-}
-function postureReason(posture) {
-  if (posture === "no-eval-root") {
-    return "no evaluation root existed, so no record on this path could be cross-checked";
-  }
-  if (posture === "broken-eval-root") {
-    return "the evaluation root could not be consulted, so no record on this path was cross-checked";
-  }
-  return void 0;
-}
-function stampVerdictMisdirectionEvidence(input) {
-  const { verdict, parts, test, evidence, rootPosture } = input;
-  if (evidence === void 0 || test === void 0) return verdict;
+function stampVerdictMemoryOnPath(input) {
+  const { verdict, parts, test } = input;
+  if (test === void 0) return verdict;
   const steps = misdirectionPathSteps(verdict, parts, test);
-  const sites = deriveMemoryOnPathSites(steps);
-  if (sites.length === 0) {
-    if (verdict.memoryOnPath === void 0 && verdict.misdirectionRuledOut === void 0) {
-      return verdict;
-    }
+  if (deriveMemoryOnPathSites(steps).length === 0) {
+    if (verdict.memoryOnPath === void 0) return verdict;
     const bare = { ...verdict };
     delete bare.memoryOnPath;
-    delete bare.misdirectionRuledOut;
     return bare;
   }
-  const keys = new Set(sites.map((site) => exposureKey(site.stepIndex, String(site.recordId))));
-  const rows = evidence.filter(
-    (row) => row.perTest === verdict.perTest && keys.has(exposureKey(row.stepIndex, String(row.recordId)))
-  );
-  const reason = postureReason(rootPosture);
-  const block = {
-    crossCheck: summarizeCrossCheck(rows, sites),
-    results: rows,
-    ...reason === void 0 ? {} : { reason },
-    // D-19: the ONE exemption is ABSENCE, and only absence. A broken root publishes the same
-    // empty ledger and earns nothing. The `rows.length === 0` clause is not belt-and-braces: the
-    // validator answers on the backing BEFORE it reads the rows, so a marker beside a real ledger
-    // would skip the ledger entirely.
-    ...rootPosture === "no-eval-root" && rows.length === 0 ? { backing: "declared-only" } : {}
-  };
-  return {
-    ...verdict,
-    memoryOnPath: deriveMemoryOnPath(steps),
-    misdirectionRuledOut: block
-  };
-}
-function flippedRecordsOf(verdict) {
-  const rows = verdict.misdirectionRuledOut?.results ?? [];
-  const records = [];
-  for (const row of rows) {
-    if (row.crossCheck !== "flipped") continue;
-    if (!records.includes(String(row.recordId))) records.push(String(row.recordId));
-  }
-  return records;
+  return { ...verdict, memoryOnPath: deriveMemoryOnPath(steps) };
 }
 var GroundingQuoteWire = z2.union([
   z2.object({ stepIndex: z2.number(), quote: z2.string() }),
@@ -700,23 +604,7 @@ function historyLine(pack, history) {
   const window = record.lastOutcomes.map((entry2) => `build ${entry2.buildOrdinal}: ${entry2.passed ? "passed" : "failed"}`).join(", ");
   return `- test ${pack.testIndex} (${pack.testName}): ${record.passes} passes, ${record.failures} failures, ${record.heals} heals, flakeCount ${record.flakeCount}` + (window === "" ? "" : `; recent: ${window}`);
 }
-function crossCheckLine(row) {
-  const samples = row.samples === void 0 ? "" : `; k=${String(row.samples.k)}`;
-  const reason = row.reason === void 0 ? "" : `; ${row.reason}`;
-  return `- test ${String(row.perTest)}, step ${String(row.stepIndex)}, record ${String(row.recordId)}: ${row.crossCheck}${reason}${samples}`;
-}
-function crossCheckTier(packs, evidence) {
-  if (evidence === void 0) return [];
-  const analyzed = new Set(packs.map((pack) => pack.testIndex));
-  const rows = evidence.filter((row) => analyzed.has(row.perTest));
-  return [
-    {
-      title: "Memory misdirection cross-check (reasoning input)",
-      body: "The deterministic removal cross-check already ran for the low-trust records this run served on the failing paths below. `flipped` means removing the record changed the outcome \u2014 the served memory is implicated. `held` means it did not. `inconclusive` and `not-run` mean nothing was established:\n" + (rows.length === 0 ? "- no record on an analyzed test\u2019s failing path was cross-checked" : rows.map(crossCheckLine).join("\n"))
-    }
-  ];
-}
-function contextTier(handoff, packs, history, evidence) {
+function contextTier(handoff, packs, history) {
   return [
     {
       title: "Run facts",
@@ -725,8 +613,7 @@ function contextTier(handoff, packs, history, evidence) {
     {
       title: "Failure history (reasoning input)",
       body: "Recorded outcome history per analyzed test \u2014 evidence for flake-vs-app_bug reasoning, not prose to restate:\n" + packs.map((pack) => historyLine(pack, history)).join("\n")
-    },
-    ...crossCheckTier(packs, evidence)
+    }
   ];
 }
 function volatileTier(packs) {
@@ -788,8 +675,7 @@ function evaluateAttempt(text, pending, input) {
     const reason = "the output was not one parseable JSON object matching the contract: " + (error instanceof Error ? error.message : String(error));
     return {
       accepted: /* @__PURE__ */ new Map(),
-      rejects: [...pending].map((perTest) => ({ perTest, reason })),
-      citedByTest: /* @__PURE__ */ new Map()
+      rejects: [...pending].map((perTest) => ({ perTest, reason }))
     };
   }
   const byTest = /* @__PURE__ */ new Map();
@@ -799,9 +685,7 @@ function evaluateAttempt(text, pending, input) {
   }
   const rejects = [];
   const candidates = /* @__PURE__ */ new Map();
-  const citedByTest = /* @__PURE__ */ new Map();
   const testsByIndex = new Map(handoff.tests.map((test) => [test.testIndex, test]));
-  const rootPosture = input.rootPosture ?? "eval-root";
   for (const perTest of pending) {
     const entry2 = byTest.get(perTest);
     if (entry2 === void 0) {
@@ -809,15 +693,12 @@ function evaluateAttempt(text, pending, input) {
       continue;
     }
     const pair = candidateOf(entry2);
-    citedByTest.set(perTest, [...pair.verdict.evidence.citedSteps]);
     candidates.set(perTest, {
       ...pair,
-      verdict: stampVerdictMisdirectionEvidence({
+      verdict: stampVerdictMemoryOnPath({
         verdict: pair.verdict,
         parts: pair.parts,
-        test: testsByIndex.get(perTest),
-        evidence: input.misdirectionEvidence,
-        rootPosture
+        test: testsByIndex.get(perTest)
       })
     });
   }
@@ -830,8 +711,7 @@ function evaluateAttempt(text, pending, input) {
         verdicts: ordered.map((pair) => pair.verdict),
         parts: ordered.map((pair) => pair.parts)
       },
-      handoff,
-      misdirectionValidationOptions(input.misdirectionEvidence, rootPosture)
+      handoff
     );
     if (!validation.ok) {
       const rejectedTests = new Set(validation.rejects.map((reject) => reject.perTest));
@@ -839,7 +719,7 @@ function evaluateAttempt(text, pending, input) {
       for (const perTest of rejectedTests) candidates.delete(perTest);
     }
   }
-  return { accepted: candidates, rejects, citedByTest };
+  return { accepted: candidates, rejects };
 }
 function repairFeedback(rejects) {
   return [
@@ -865,7 +745,7 @@ async function authorRunAnalysis(model, input) {
   const baseRequest = buildTieredPrompt({
     agent_context: input.agentContext ?? "analyze-run: authoring root-cause verdicts and sentence parts for one completed run",
     stable: stableTier(),
-    context: contextTier(input.handoff, compacted.packs, input.history, input.misdirectionEvidence),
+    context: contextTier(input.handoff, compacted.packs, input.history),
     volatile: volatileTier(compacted.packs)
   });
   const images = collectImages(compacted.packs, input.readEvidenceBlob, model.vision === true);
@@ -873,7 +753,6 @@ async function authorRunAnalysis(model, input) {
   const accepted = /* @__PURE__ */ new Map();
   let pending = new Set(analyzed);
   let lastRejects = [];
-  const lastCited = /* @__PURE__ */ new Map();
   let modelCalls = 0;
   for (let attempt = 0; attempt <= AUTHOR_REPAIR_CAP && pending.size > 0; attempt += 1) {
     const attemptRequest = attempt === 0 ? request : { ...request, prompt: `${request.prompt}
@@ -882,7 +761,6 @@ ${repairFeedback(lastRejects)}` };
     const output = await model.generate(attemptRequest);
     modelCalls += 1;
     const outcome = evaluateAttempt(output.text, pending, input);
-    for (const [perTest, cited] of outcome.citedByTest) lastCited.set(perTest, cited);
     for (const [perTest, pair] of outcome.accepted) accepted.set(perTest, pair);
     pending = new Set([...pending].filter((perTest) => !accepted.has(perTest)));
     lastRejects = outcome.rejects;
@@ -901,7 +779,6 @@ ${repairFeedback(lastRejects)}` };
       estimatedTokens: compacted.estimatedTokens
     },
     degradedTests: analyzed.filter((testIndex) => !accepted.has(testIndex)),
-    degradedPaths: analyzed.filter((testIndex) => !accepted.has(testIndex)).map((perTest) => ({ perTest, citedSteps: lastCited.get(perTest) ?? [] })),
     usage: {
       modelCalls,
       repairCalls: Math.max(0, modelCalls - 1),
@@ -918,22 +795,13 @@ import {
 } from "@vostride/agent-qa-schema";
 var POST_RUN_CHAIN_TERMINAL_KINDS = Object.freeze([
   "analyze-run",
-  "curate-memory",
-  "propose-improvements"
+  "curate-memory"
 ]);
 function chainJobIdsForRun(runId, idSource) {
   const analyzeRun = idSource.jobIdFor("analyze-run", runId);
-  const curateMemory = idSource.jobIdFor(
-    "curate-memory",
-    `${String(analyzeRun)}->curate-memory`
-  );
   return {
     analyzeRun,
-    curateMemory,
-    proposeImprovements: idSource.jobIdFor(
-      "propose-improvements",
-      `${String(curateMemory)}->propose-improvements`
-    )
+    curateMemory: idSource.jobIdFor("curate-memory", `${String(analyzeRun)}->curate-memory`)
   };
 }
 var UNKNOWN_VERDICTS_MARKER = "unknown";
@@ -944,8 +812,7 @@ function isCount(value) {
   return typeof value === "number" && Number.isInteger(value) && value >= 0;
 }
 function readVerdictSummary(payload) {
-  const direct = asRecord(payload.verdictSummary);
-  const summary = isCount(direct.total) ? direct : asRecord(asRecord(payload.upstream).verdictSummary);
+  const summary = asRecord(payload.verdictSummary);
   const byClassSource = asRecord(summary.byClass);
   if (!isCount(summary.total)) return { total: 0, byClass: {} };
   const byClass = {};
@@ -956,11 +823,9 @@ function readVerdictSummary(payload) {
 }
 function buildChainTerminalNotification(input) {
   const payload = asRecord(input.payload);
-  const upstream = asRecord(payload.upstream);
-  const analysisFailed = payload.verdicts === UNKNOWN_VERDICTS_MARKER || asRecord(payload.upstream).analysisStatus === "failed" || input.finishingKind === "analyze-run" && input.finished === "failed";
-  const proposalTerminal = input.finishingKind === "propose-improvements";
-  const committed = proposalTerminal ? asRecord(upstream.curation) : asRecord(input.publishedValues.get("bundle-committed"));
-  const curationSucceeded = proposalTerminal || input.finishingKind === "curate-memory" && input.finished === "done";
+  const analysisFailed = payload.verdicts === UNKNOWN_VERDICTS_MARKER || input.finishingKind === "analyze-run" && input.finished === "failed";
+  const committed = asRecord(input.publishedValues.get("bundle-committed"));
+  const curationSucceeded = input.finishingKind === "curate-memory" && input.finished === "done";
   const snapshot = curationSucceeded && committed.curationSnapshot !== void 0 ? CurationSnapshotSchema.safeParse(committed.curationSnapshot) : void 0;
   if (snapshot !== void 0 && !snapshot.success) {
     throw new RunNotificationSchemaError("its curation snapshot is invalid");
@@ -973,22 +838,14 @@ function buildChainTerminalNotification(input) {
     ...isCount(committed.deprecated) ? { deprecated: committed.deprecated } : {},
     ...snapshot?.success ? { curationSnapshot: snapshot.data } : {}
   } : { status: "failed" };
-  const authored = asRecord(input.publishedValues.get("proposals-authored"));
-  const proposalsSucceeded = proposalTerminal && input.finished === "done";
-  const proposals = !proposalTerminal ? void 0 : proposalsSucceeded ? {
-    status: "done",
-    ...isCount(authored.proposed) ? { proposed: authored.proposed } : {},
-    ...isCount(authored.skipped) ? { skipped: authored.skipped } : {}
-  } : { status: "failed" };
   return {
     schemaVersion: CURRENT_RUN_NOTIFICATION_SCHEMA_VERSION,
     runId: input.runId,
-    outcome: analysisFailed || !curationSucceeded || proposalTerminal && !proposalsSucceeded ? "failed" : "done",
+    outcome: analysisFailed || !curationSucceeded ? "failed" : "done",
     verdictSummary: readVerdictSummary(payload),
     stages: {
       analysis: { status: analysisFailed ? "failed" : "done" },
-      curation,
-      ...proposals === void 0 ? {} : { proposals }
+      curation
     }
   };
 }
@@ -1246,7 +1103,6 @@ function analyzeRunFallback(input) {
   );
 }
 var ANALYZE_RUN_SUCCESSORS = ["curate-memory"];
-var CURATE_MEMORY_SUCCESSORS = ["propose-improvements"];
 function asRecord2(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value) ? value : {};
 }
@@ -1261,51 +1117,9 @@ function readAnalyzeRunPayload(value) {
     handoffSchemaVersion: record.handoffSchemaVersion,
     executionContext: typeof record.executionContext === "string" ? record.executionContext : void 0,
     ...record.gateRun === true ? { gateRun: true } : {},
-    ...record.excludedFromOutcomes === true ? { excludedFromOutcomes: true } : {},
-    ...readCarriedMisdirectionEvidence(record.misdirectionEvidence)
+    ...record.excludedFromOutcomes === true ? { excludedFromOutcomes: true } : {}
   };
 }
-function readCarriedMisdirectionEvidence(value) {
-  if (value === void 0) return {};
-  if (!Array.isArray(value)) return { misdirectionEvidenceUnreadable: true };
-  const rows = [];
-  for (const candidate of value) {
-    const parsed = MisdirectionRecordResultSchema.safeParse(candidate);
-    if (!parsed.success) return { misdirectionEvidenceUnreadable: true };
-    rows.push(parsed.data);
-  }
-  return { misdirectionEvidence: rows };
-}
-function readProposeImprovementsPayload(value) {
-  const record = asRecord2(value);
-  if (typeof record.runId !== "string" || record.runId === "") return void 0;
-  const upstreamSource = asRecord2(record.upstream);
-  const curationSource = asRecord2(upstreamSource.curation);
-  const summary = asRecord2(upstreamSource.verdictSummary);
-  const snapshot = curationSource.curationSnapshot === void 0 ? void 0 : CurationSnapshotSchema2.safeParse(curationSource.curationSnapshot);
-  if (snapshot !== void 0 && !snapshot.success) {
-    throw new RunNotificationSchemaError2("its curation snapshot is invalid");
-  }
-  const curation = {
-    ...isCount2(curationSource.curated) ? { curated: curationSource.curated } : {},
-    ...isCount2(curationSource.deprecated) ? { deprecated: curationSource.deprecated } : {},
-    ...curationSource.complete === true ? { complete: true } : {},
-    ...snapshot?.success ? { curationSnapshot: snapshot.data } : {}
-  };
-  return {
-    runId: record.runId,
-    executionContext: typeof record.executionContext === "string" ? record.executionContext : void 0,
-    candidateIds: Array.isArray(record.candidateIds) ? record.candidateIds.filter((id) => typeof id === "string") : [],
-    upstream: {
-      ...isCount2(summary.total) ? { verdictSummary: summary } : {},
-      ...upstreamSource.analysisStatus === "done" || upstreamSource.analysisStatus === "failed" ? { analysisStatus: upstreamSource.analysisStatus } : {},
-      ...Object.keys(curation).length === 0 ? {} : { curation }
-    }
-  };
-}
-function isCount2(value) {
-  return typeof value === "number" && Number.isInteger(value) && value >= 0;
-}
 function permanently(reason) {
   return { status: "permanent", reason };
 }
@@ -1353,97 +1167,6 @@ function templateSentenceParts(verdict, handoff) {
     links: []
   };
 }
-function readMisdirectionPosture(capabilities, runId) {
-  try {
-    return capabilities.readMisdirectionRootPosture?.(runId) ?? "eval-root";
-  } catch {
-    return "eval-root";
-  }
-}
-function honestUnknownFloor(refused2, test) {
-  const floor = deterministicVerdict(
-    "unknown",
-    UNKNOWN_SIGNAL_RATIONALE,
-    capturedStepsOnly(refused2.evidence.citedSteps, test),
-    refused2.perTest
-  );
-  return { ...floor, memoryMisdirectionRuledOut: false };
-}
-function capturedStepsOnly(cited, test) {
-  if (test === void 0) return [];
-  const captured = new Set(test.steps.map((step) => step.stepIndex));
-  return test.steps.map((step) => step.stepIndex).filter((stepIndex) => captured.has(stepIndex) && cited.includes(stepIndex));
-}
-function widenRefusedFloorPaths(verdicts, degradedPaths, handoff) {
-  if (degradedPaths.length === 0) return [...verdicts];
-  const testsByIndex = new Map(handoff.tests.map((test) => [test.testIndex, test]));
-  return verdicts.map((verdict) => {
-    const refused2 = degradedPaths.find((path) => path.perTest === verdict.perTest);
-    if (refused2 === void 0 || verdict.class !== "unknown") return verdict;
-    const widened = capturedStepsOnly(
-      [...verdict.evidence.citedSteps, ...refused2.citedSteps],
-      testsByIndex.get(verdict.perTest)
-    );
-    if (widened.length === verdict.evidence.citedSteps.length) return verdict;
-    return {
-      ...verdict,
-      evidence: { ...verdict.evidence, citedSteps: widened }
-    };
-  });
-}
-function enforceMisdirectionFloor(input) {
-  const { handoff, runId, evidence, rootPosture, partsOf } = input;
-  const testsByIndex = new Map(handoff.tests.map((test) => [test.testIndex, test]));
-  const stampAll = (verdicts, parts2) => verdicts.map(
-    (verdict, index) => stampVerdictMisdirectionEvidence({
-      verdict,
-      parts: parts2[index],
-      test: testsByIndex.get(verdict.perTest),
-      evidence,
-      rootPosture
-    })
-  );
-  const parts = partsOf(input.verdicts);
-  if (evidence === void 0) return { verdicts: [...input.verdicts], parts };
-  const stamped = stampAll(input.verdicts, parts);
-  const artifact = {
-    schemaVersion: CURRENT_ANALYSIS_SCHEMA_VERSION2,
-    runId,
-    verdicts: stamped,
-    parts
-  };
-  const gated = validateAnalysisAgainstHandoff2(
-    artifact,
-    handoff,
-    misdirectionValidationOptions(evidence, rootPosture)
-  );
-  let downgraded = stamped;
-  if (!gated.ok) {
-    const historical = validateAnalysisAgainstHandoff2(artifact, handoff);
-    const preExisting = new Set(historical.ok ? [] : historical.rejects.map((r) => r.perTest));
-    const newlyRefused = new Set(
-      gated.rejects.map((reject) => reject.perTest).filter((perTest) => !preExisting.has(perTest))
-    );
-    if (newlyRefused.size > 0) {
-      downgraded = input.verdicts.map(
-        (verdict) => newlyRefused.has(verdict.perTest) ? honestUnknownFloor(verdict, testsByIndex.get(verdict.perTest)) : verdict
-      );
-    }
-  }
-  const finalParts = partsOf(downgraded);
-  const finalVerdicts = stampAll(downgraded, finalParts).map(withCausalAttribution);
-  return { verdicts: finalVerdicts, parts: finalParts };
-}
-function withCausalAttribution(verdict) {
-  if (verdict.class !== "unknown") return verdict;
-  const flipped = flippedRecordsOf(verdict);
-  if (flipped.length === 0) return verdict;
-  return {
-    ...verdict,
-    memoryMisdirectionRuledOut: false,
-    attribution: { records: flipped.map((record) => asRecordId(record)), anchors: [] }
-  };
-}
 function realAnalyzeRunHandler(capabilities) {
   return async (context) => {
     const payload = readAnalyzeRunPayload(context.payload);
@@ -1470,26 +1193,9 @@ function realAnalyzeRunHandler(capabilities) {
         `the handoff for ${payload.runId} no longer digests to the bytes this job was enqueued against, so analysing it would answer about a different run`
       );
     }
-    if (payload.misdirectionEvidenceUnreadable === true) {
-      return permanently(
-        `the analyze-run payload for ${payload.runId} carries a circularity ledger this build cannot read, and a claim that cannot be checked is not a claim that may be ignored`
-      );
-    }
-    const publishedEvidence = handoff.misdirectionEvidence;
-    if (payload.misdirectionEvidence !== void 0 && (publishedEvidence === void 0 || canonicalJson3(payload.misdirectionEvidence) !== canonicalJson3(publishedEvidence))) {
-      return permanently(
-        `the analyze-run payload for ${payload.runId} carries circularity evidence that is not the evidence in the analysed handoff bytes; the digest covers the handoff, so a copy that disagrees with it is not about these bytes`
-      );
-    }
-    const rootPosture = readMisdirectionPosture(capabilities, payload.runId);
     const authored = await context.recordLlmAuthorship(
       "verdicts-authored",
-      // The full author (389 plan 04): the model capability arrives ONLY as this
-      // callback's argument. Unknown floor members are authored through
-      // `authorRunAnalysis` — one whole-run call, one repair, per-test degrade — and
-      // everything else passes through byte-identical; a floor with no unknown members
-      // (or no failures at all) reaches no model. Signature, artifact-write position and
-      // returned shape are final from plan 01.
+      // The model arrives only as this argument; a floor with no unknown members reaches no model.
       async (model) => {
         const floor = projectHandoffVerdicts(handoff);
         const limitStopped = new Set(
@@ -1512,37 +1218,33 @@ function realAnalyzeRunHandler(capabilities) {
             floor,
             packs: buildEvidencePacks(handoff, unknownTests, history),
             history,
-            // The ledger reaches the author as DATA and the gate as AUTHORITY (D-20). Absent, it
-            // does neither: the request is byte-identical to the pre-422 one and the author's own
-            // validation runs under the historical options.
-            ...publishedEvidence === void 0 ? {} : { misdirectionEvidence: publishedEvidence, rootPosture },
             ...capabilities.analysisTokenBudget === void 0 ? {} : { tokenBudget: capabilities.analysisTokenBudget },
             // runId-curried so the author sees the plain `(sha) => bytes` shape.
             ...capabilities.readEvidenceBlob === void 0 ? {} : {
               readEvidenceBlob: (sha) => capabilities.readEvidenceBlob?.(payload.runId, sha)
             }
           });
-          verdicts2 = publishedEvidence === void 0 ? result.verdicts : widenRefusedFloorPaths(result.verdicts, result.degradedPaths, handoff);
+          verdicts2 = result.verdicts;
           for (const parts of result.authoredParts) authoredParts.set(parts.perTest, parts);
         }
-        const partsOf = (candidates) => candidates.map(
+        const sentenceParts = verdicts2.map(
           (verdict) => verdict.producer === "analyze-run" ? authoredParts.get(verdict.perTest) ?? templateSentenceParts(verdict, handoff) : templateSentenceParts(verdict, handoff)
         );
-        const guarded = enforceMisdirectionFloor({
-          verdicts: verdicts2,
-          handoff,
-          runId: payload.runId,
-          evidence: publishedEvidence,
-          rootPosture,
-          partsOf
-        });
+        const testsByIndex = new Map(handoff.tests.map((test) => [test.testIndex, test]));
+        const stamped = verdicts2.map(
+          (verdict, index) => stampVerdictMemoryOnPath({
+            verdict,
+            parts: sentenceParts[index],
+            test: testsByIndex.get(verdict.perTest)
+          })
+        );
         capabilities.persistAnalysis({
           schemaVersion: CURRENT_ANALYSIS_SCHEMA_VERSION2,
           runId: payload.runId,
-          verdicts: guarded.verdicts,
-          parts: guarded.parts
+          verdicts: stamped,
+          parts: sentenceParts
         });
-        return { runId: payload.runId, verdicts: guarded.verdicts };
+        return { runId: payload.runId, verdicts: stamped };
       }
     );
     const verdicts = authored.verdicts;
@@ -1553,9 +1255,7 @@ function realAnalyzeRunHandler(capabilities) {
           { kind: "analyze-run", allowedSuccessors: ANALYZE_RUN_SUCCESSORS },
           String(context.job.id),
           {
-            // Pitfall 6: a successor payload without these two is the DAEM-02 bug class — the
-            // daemon resolves a claimed job's posture from `payload.executionContext` (386
-            // D-09/D-12), and curation cannot find a run directory it was never told about.
+            // Without these the daemon misreads the posture and curation misses the run.
             runId: payload.runId,
             executionContext: payload.executionContext ?? handoff.executionContext,
             verdictSummary: summarizeVerdicts(verdicts)
@@ -1592,275 +1292,12 @@ function realCurateMemoryHandler(capabilities) {
       deprecated: counts.deprecated,
       ...curationSnapshot === void 0 ? {} : { curationSnapshot }
     });
-    return {
-      status: "complete",
-      next: [
-        ...successorsOf(
-          { kind: "curate-memory", allowedSuccessors: CURATE_MEMORY_SUCCESSORS },
-          String(context.job.id),
-          {
-            // Pitfall 6 / 386 D-09, one edge further along: without these two the
-            // daemon-claimed successor resolves a drain-scoped posture and cannot address
-            // the run it is proposing about.
-            runId: record.runId,
-            ...record.executionContext === void 0 ? {} : { executionContext: record.executionContext },
-            // Absent when the fold reported none — see the capability's own comment for why the
-            // empty list and the missing field are deliberately not the same answer.
-            ...counts.candidateIds === void 0 ? {} : { candidateIds: [...counts.candidateIds] },
-            upstream: {
-              ...record.verdictSummary === void 0 ? {} : { verdictSummary: record.verdictSummary },
-              // The dead-analysis marker, restated where the next stage will look for it. The
-              // root of THIS payload belongs to the analysis; the root of the next belongs to
-              // the fold, so the fact has to be re-carried or it is lost at this edge.
-              analysisStatus: record.verdicts === UNKNOWN_VERDICTS_MARKER ? "failed" : "done",
-              curation: {
-                curated: counts.curated,
-                deprecated: counts.deprecated,
-                complete: true,
-                ...curationSnapshot === void 0 ? {} : { curationSnapshot }
-              }
-            }
-          }
-        )
-      ]
-    };
-  };
-}
-var PROPOSE_GATE1_ALLOWANCE_CHECKPOINT = "gate1-allowance-reserved";
-var PROPOSE_DEFAULT_MAX_GATE1_PER_JOB = 4;
-var GATE1_EXCLUDED_RECORD_KINDS = ["procedure", "policy"];
-function isPositiveInteger(value) {
-  return typeof value === "number" && Number.isInteger(value) && value > 0;
-}
-function parseProposeGate1Allowance(outcome) {
-  if (!outcome.found) return { kind: "absent" };
-  const value = asRecord2(outcome.payload?.value);
-  const cap = asRecord2(value.cap);
-  const ids = value.selectedCandidateIds;
-  const unreadable = (reason) => ({ kind: "unreadable", reason });
-  if (typeof value.jobId !== "string" || value.jobId === "" || typeof value.runId !== "string" || value.runId === "" || typeof value.product !== "string" || value.product === "" || typeof value.corpusDigest !== "string" || value.corpusDigest === "" || !isPositiveInteger(cap.value) || cap.source !== "config" && cap.source !== "default" || !Array.isArray(ids) || !ids.every((id) => typeof id === "string" && id !== "")) {
-    return unreadable("the persisted Gate-1 allowance is not a readable charge");
-  }
-  if (ids.length > cap.value) {
-    return unreadable("the persisted Gate-1 allowance charges more slots than its own cap");
-  }
-  return {
-    kind: "claimed",
-    allowance: {
-      jobId: value.jobId,
-      runId: value.runId,
-      product: value.product,
-      corpusDigest: value.corpusDigest,
-      cap: { value: cap.value, source: cap.source },
-      selectedCandidateIds: [...ids]
-    }
-  };
-}
-function standingGate1(standing) {
-  for (const receipt of standing) if (receipt.gate === 1) return receipt;
-  return void 0;
-}
-function orderProposalCandidates(bundles, payloadCandidateIds) {
-  const byId = /* @__PURE__ */ new Map();
-  for (const bundle of bundles) if (!byId.has(bundle.bundleId)) byId.set(bundle.bundleId, bundle);
-  const named = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const id of payloadCandidateIds) {
-    if (seen.has(id)) continue;
-    seen.add(id);
-    const row = byId.get(id);
-    if (row !== void 0) named.push(row);
-  }
-  const product = named[0]?.product;
-  if (product === void 0) return { product: void 0, ordered: [] };
-  const sweep = bundles.filter(
-    (bundle) => bundle.product === product && !seen.has(bundle.bundleId) && bundle.status === "candidate"
-  ).sort(
-    (left, right) => left.openedAtOrdinal - right.openedAtOrdinal || (left.bundleId < right.bundleId ? -1 : left.bundleId > right.bundleId ? 1 : 0)
-  );
-  return { product, ordered: [...named, ...sweep] };
-}
-var NO_GATE1_WORK = {
-  reservedGate1: [],
-  screenedGate1: [],
-  recoveredGate1Receipts: [],
-  interruptedGate1: [],
-  ungatedRemaining: [],
-  kindExcluded: [],
-  stale: []
-};
-async function reconcileGate1Allowance(allowance, gateReceiptsFor) {
-  const recovered = [];
-  const interrupted = [];
-  for (const candidateId of allowance.selectedCandidateIds) {
-    let standing;
-    try {
-      const gates = await gateReceiptsFor({ candidateId });
-      standing = gates.kind === "found" ? standingGate1(gates.standing) : void 0;
-    } catch {
-      standing = void 0;
-    }
-    if (standing !== void 0 && standing.corpusVersion.corpusDigest === allowance.corpusDigest) {
-      recovered.push({ candidateId, verdict: standing.verdict });
-    } else {
-      interrupted.push(candidateId);
-    }
-  }
-  return {
-    ...NO_GATE1_WORK,
-    disposition: "resumed",
-    cap: allowance.cap,
-    reservedGate1: [...allowance.selectedCandidateIds],
-    recoveredGate1Receipts: recovered,
-    interruptedGate1: interrupted
-  };
-}
-async function screenGate1(capabilities, context, payload) {
-  const runReplayGate = capabilities.runReplayGate;
-  const readAllowance = capabilities.readProposeGate1Allowance;
-  const listBundles = capabilities.listBundles;
-  const gateReceiptsFor = capabilities.gateReceiptsFor;
-  const readCorpusPosture = capabilities.readProposeCorpusPosture;
-  if (runReplayGate === void 0 || readAllowance === void 0 || listBundles === void 0 || gateReceiptsFor === void 0 || readCorpusPosture === void 0) {
-    return { ...NO_GATE1_WORK, disposition: "unbound" };
-  }
-  const jobId = String(context.job.id);
-  let read;
-  try {
-    read = await readAllowance(jobId);
-  } catch (error) {
-    return {
-      ...NO_GATE1_WORK,
-      disposition: "allowance-unavailable",
-      reason: `the persisted Gate-1 allowance could not be read: ${errorTextOfUnknown(error)}`
-    };
-  }
-  if (read.kind === "unreadable") {
-    return { ...NO_GATE1_WORK, disposition: "allowance-unavailable", reason: read.reason };
-  }
-  if (read.kind === "claimed") {
-    const allowance2 = read.allowance;
-    if (allowance2.jobId !== jobId || allowance2.runId !== payload.runId) {
-      return {
-        ...NO_GATE1_WORK,
-        disposition: "allowance-unavailable",
-        reason: "the persisted Gate-1 allowance was charged for another job or run"
-      };
-    }
-    return await reconcileGate1Allowance(allowance2, gateReceiptsFor);
-  }
-  const cap = isPositiveInteger(capabilities.proposeGate1MaxPerJob) ? { value: capabilities.proposeGate1MaxPerJob, source: "config" } : { value: PROPOSE_DEFAULT_MAX_GATE1_PER_JOB, source: "default" };
-  const { product, ordered } = orderProposalCandidates(await listBundles(), payload.candidateIds);
-  if (product === void 0) {
-    return { ...NO_GATE1_WORK, disposition: "no-candidates" };
-  }
-  const posture = await readCorpusPosture({ product });
-  if (posture.kind !== "resolved") {
-    return {
-      ...NO_GATE1_WORK,
-      disposition: "posture-unavailable",
-      cap,
-      reason: posture.kind === "no-root" ? "no committed corpus root, so nothing can be screened against one" : posture.reason
-    };
-  }
-  const kindExcluded = [];
-  const stale = [];
-  const ungated = [];
-  for (const row of ordered) {
-    if (GATE1_EXCLUDED_RECORD_KINDS.includes(row.kind)) {
-      kindExcluded.push(row.bundleId);
-      continue;
-    }
-    if (row.status !== "candidate") continue;
-    const gates = await gateReceiptsFor({ candidateId: row.bundleId });
-    if (gates.kind !== "found") continue;
-    if (GATE1_EXCLUDED_RECORD_KINDS.includes(gates.recordKind)) {
-      kindExcluded.push(row.bundleId);
-      continue;
-    }
-    const standing = standingGate1(gates.standing);
-    if (standing !== void 0 && standing.corpusVersion.corpusDigest === posture.corpusDigest) {
-      continue;
-    }
-    if (standing !== void 0) stale.push(row.bundleId);
-    ungated.push(row.bundleId);
-  }
-  const selected = ungated.slice(0, cap.value);
-  const remaining = ungated.slice(cap.value);
-  if (selected.length === 0) {
-    return {
-      ...NO_GATE1_WORK,
-      disposition: "claimed",
-      cap,
-      ungatedRemaining: remaining,
-      kindExcluded,
-      stale
-    };
-  }
-  const allowance = {
-    jobId,
-    runId: payload.runId,
-    product,
-    corpusDigest: posture.corpusDigest,
-    cap,
-    selectedCandidateIds: selected
-  };
-  await context.publishCheckpoint(PROPOSE_GATE1_ALLOWANCE_CHECKPOINT, allowance);
-  const screened = [];
-  const interrupted = [];
-  for (const candidateId of selected) {
-    try {
-      const receipt = await runReplayGate(asRecordId(candidateId));
-      screened.push({ candidateId, verdict: receipt.verdict });
-    } catch {
-      interrupted.push(candidateId);
-    }
-  }
-  return {
-    disposition: "claimed",
-    cap,
-    reservedGate1: [...selected],
-    screenedGate1: screened,
-    recoveredGate1Receipts: [],
-    interruptedGate1: interrupted,
-    ungatedRemaining: remaining,
-    kindExcluded,
-    stale
-  };
-}
-function errorTextOfUnknown(error) {
-  return error instanceof Error ? error.message : String(error);
-}
-function realProposeImprovementsHandler(capabilities) {
-  return async (context) => {
-    const payload = readProposeImprovementsPayload(context.payload);
-    if (payload === void 0) {
-      return permanently(
-        "the propose-improvements payload names no run, so there is no curated run to propose improvements about"
-      );
-    }
-    const gate1 = await screenGate1(capabilities, context, payload);
-    const staged = capabilities.stageAdversarialProposal === void 0 ? void 0 : await capabilities.stageAdversarialProposal({
-      runId: payload.runId,
-      executionContext: payload.executionContext,
-      candidateIds: payload.candidateIds,
-      upstream: payload.upstream
-    });
-    const checkpoint = {
-      runId: payload.runId,
-      candidateIds: [...payload.candidateIds],
-      ...staged === void 0 ? {} : { proposed: staged.proposed, skipped: staged.skipped },
-      ...gate1.disposition === "unbound" ? {} : { gate1 }
-    };
-    await context.publishCheckpoint("proposals-authored", checkpoint);
     return { status: "complete", next: [] };
   };
 }
 function declarationsFor(capabilities) {
   return {
-    // JOBQ-04 / C9. Chat is NOT a checkpointed job and never becomes one: its state of record
-    // is the append-only session log, and the queue's checkpoint discipline covers background
-    // work only. One attempt, because there is no durable progress for a second one to resume.
+    // Chat is never checkpointed: its record is the session log, so one attempt.
     chat: {
       kind: "chat",
       checkpointed: false,
@@ -1883,25 +1320,21 @@ function declarationsFor(capabilities) {
       onPermanentFailure: analyzeRunFallback,
       handler: capabilities === void 0 ? standInHandler("analyze-run", ["verdicts-authored"], ANALYZE_RUN_SUCCESSORS) : realAnalyzeRunHandler(capabilities)
     },
-    // Two checkpoints, mirroring the v51 curation lifecycle: candidates are authored, then the
-    // bundle is committed. The second is the one whose recovery actually matters.
+    // Two checkpoints: candidates are authored, then the bundle is committed.
     //
-    // 422 D-13: it now chains onward to the proposal stage, and `halt-chain` survives that
-    // unchanged — deliberately. A fold that gave up permanently committed no bundle, so there is
-    // nothing for a proposal stage to propose about; handing it a successor would mint a job whose
-    // whole premise is a fold that did not happen.
+    // It declares no successor: its finish is the chain's terminal.
     "curate-memory": {
       kind: "curate-memory",
       checkpointed: true,
       checkpointSchedule: ["candidates-authored", "bundle-committed"],
-      allowedSuccessors: CURATE_MEMORY_SUCCESSORS,
+      allowedSuccessors: [],
       maxAttempts: 3,
       backoff: { kind: "exponential", initialDelayMs: 1e3, factor: 2, maxDelayMs: 3e4 },
       onPermanentFailure: "halt-chain",
       handler: capabilities === void 0 ? standInHandler(
         "curate-memory",
         ["candidates-authored", "bundle-committed"],
-        CURATE_MEMORY_SUCCESSORS
+        []
       ) : realCurateMemoryHandler(capabilities)
     },
     consolidate: {
@@ -1913,28 +1346,6 @@ function declarationsFor(capabilities) {
       backoff: { kind: "fixed", delayMs: 5e3 },
       onPermanentFailure: "halt-chain",
       handler: standInHandler("consolidate", ["consolidation-authored"], [])
-    },
-    // The chain's tail since 422 D-13. It declares NO successor — a fourth stage would be one
-    // nothing derives an id for — and halts its chain on permanent failure, which here means only
-    // that nothing further is enqueued: the curation behind it is committed and stays committed.
-    //
-    // 422 D-14 adds `gate1-allowance-reserved` AHEAD of `proposals-authored`, and the order is the
-    // contract rather than a listing convention: the charge is what a resumed attempt reads to
-    // learn what a previous one may already have spent, so it has to be durable before any call
-    // is made and therefore before the checkpoint that reports the result.
-    "propose-improvements": {
-      kind: "propose-improvements",
-      checkpointed: true,
-      checkpointSchedule: [PROPOSE_GATE1_ALLOWANCE_CHECKPOINT, "proposals-authored"],
-      allowedSuccessors: [],
-      maxAttempts: 2,
-      backoff: { kind: "fixed", delayMs: 5e3 },
-      onPermanentFailure: "halt-chain",
-      handler: capabilities === void 0 ? standInHandler(
-        "propose-improvements",
-        [PROPOSE_GATE1_ALLOWANCE_CHECKPOINT, "proposals-authored"],
-        []
-      ) : realProposeImprovementsHandler(capabilities)
     }
   };
 }
@@ -2000,12 +1411,7 @@ function toRunTestDetail(test, resolved) {
     filePath: test.filePath,
     testIndex: test.testIndex,
     outcome: test.outcome,
-    // Step evidence stays in the handoff document; 389's evidence links address it by
-    // runId + testIndex. Projecting it here would make the cheapest read the most expensive.
-    // The same law covers sentences (389 D-11): this projection carries class/producer/
-    // confidence from the resolved verdict and NEVER a rendered sentence — an unbound
-    // analysis port answers as artifact-absent (the deterministic floor), so the cheapest
-    // read stays cheap in every composition.
+    // Step evidence and sentences stay out, so the cheapest read stays cheap in every composition.
     stepCount: test.steps.length,
     ...resolved === void 0 ? {} : {
       rootCause: {
@@ -2044,12 +1450,7 @@ var runsGetSpec = {
   input: RunsGetInputSchema,
   output: RunDetailSchema,
   risk: { name: `fn:${RUNS_GET_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A run that came back is a run that was found (399.1 D-01).
-   *
-   * Absence is `RunNotFoundError`, a throw, which already reaches the engine's `failed` mapping.
-   * The verdict a run ENDED with is not this clause's verdict: a failing run is a successful read.
-   */
+  // A failing run is a successful read; absence throws `RunNotFoundError`.
   classify(output) {
     return {
       status: "executed",
@@ -2086,20 +1487,12 @@ var analysisGetSpec = {
   id: ANALYSIS_GET_FUNCTION_ID,
   summary: "Read one run's resolved verdicts, rendered sentences and failure clusters.",
   resultKind: "unary",
-  // Bound exactly where a composition supplies the artifact reader (D-16 idiom). The
-  // OPTIONAL `recurrence` dep is deliberately NOT the binding key: a host without history
-  // still serves sentences — the renderer answers the explicit no-history clause — so tying
-  // the binding to it would refuse a capability this host can honestly run.
+  // `recurrence` is not the binding key, because a host without history still serves sentences.
   boundThrough: "analysis",
   input: AnalysisGetInputSchema,
   output: AnalysisGetOutputSchema,
   risk: { name: `fn:${ANALYSIS_GET_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * An analysis is an ANSWER, and its verdicts are what it answered (399.1 D-01).
-   *
-   * COUNTS AND THE RUN REF, never a sentence out of the artifact: the receipt is a map (392's
-   * charter) and every verdict sentence is on `results[]`, which D-04 renders in full beside it.
-   */
+  // Counts and the run ref only; verdict sentences ride on `results[]`.
   classify(output) {
     return {
       status: "executed",
@@ -2125,8 +1518,7 @@ var analysisGetSpec = {
       const sentence = renderVerdictSentence(
         verdict,
         partsFor(verdict, artifact, document),
-        // Recurrence is a LIVE join through the D-08 seam, per call — an absent dep renders
-        // the explicit no-history clause, never a dropped section.
+        // Recurrence is a live join per call; an absent dep renders the no-history clause.
         deps.recurrence,
         {
           product,
@@ -2142,15 +1534,10 @@ var analysisGetSpec = {
     const sentenceByPerTest = new Map(sentences.map((entry2) => [entry2.perTest, entry2.sentence]));
     return {
       runId,
-      // The verdict's OWN evidence, projected (406 D-01) — cited steps and cited artifacts as the
-      // resolved verdict already held them, so the failure view's links are this op's refs and not
-      // a second join over `analysis.json`. Presence is consulted OPPORTUNISTICALLY through the
-      // optional blob port: `boundThrough` stays `analysis`, because a host with no runtime root
-      // still serves a complete analysis — it simply cannot say whether the screenshots survive.
+      // Presence is optional enrichment, so a host with no runtime root still serves the analysis.
       verdicts: await Promise.all(resolved.map(async (verdict) => {
         const test = document.tests.find((candidate) => candidate.testIndex === verdict.perTest);
         const cited = verdict.evidence.citedArtifacts;
-        const misdirection = projectVerdictMisdirection(verdict);
         return {
           perTest: verdict.perTest,
           testId: test?.testId ?? "",
@@ -2161,13 +1548,16 @@ var analysisGetSpec = {
             citedSteps: [...verdict.evidence.citedSteps],
             citedArtifacts: await annotatePresence(deps.evidenceBlobs, input.runId, cited)
           },
-          ...misdirection === void 0 ? {} : { misdirection }
+          ...verdict.memoryOnPath === void 0 ? {} : {
+            memoryOnPath: verdict.memoryOnPath.map((entry2) => ({
+              recordId: String(entry2.recordId),
+              trust: entry2.trust
+            }))
+          }
         };
       })),
       sentences,
-      // Render-time clustering through the ONE pure fold (D-14); the representative carries
-      // its already-composed sentence (D-15) — looked up, never re-rendered, so cluster and
-      // per-test presentation cannot drift.
+      // The representative's sentence is looked up, never re-rendered, so it cannot drift.
       clusters: clusterVerdicts(resolved, document).map((cluster) => ({
         fingerprint: cluster.fingerprint,
         count: cluster.count,
@@ -2375,7 +1765,7 @@ function addsValueGate(input) {
     return {
       pass: true,
       finding: { novelElements: [...new Set(input.draftElements)], comparedTests: [] },
-      reason: "the suite is empty \u2014 no fingerprint coverage and no comparable text, so every element is uncovered (D-16)"
+      reason: "the suite is empty \u2014 no fingerprint coverage and no comparable text, so every element is uncovered"
     };
   }
   const novelElements = novelElementsOf(input.draftElements, union);
@@ -2419,22 +1809,22 @@ function addsValueGate(input) {
 }
 function gateReason(input) {
   if (input.pass && input.unionSize > 0) {
-    const decided = `${input.novelElements.length} element(s) absent from the suite union of ${input.unionSize} \u2014 the fingerprint lane decided (D-14)`;
+    const decided = `${input.novelElements.length} element(s) absent from the suite union of ${input.unionSize} \u2014 the fingerprint lane decided`;
     if (input.textCovered.length === 0) {
-      return `${decided}, and no evidence-less suite test resembles the draft (D-16)`;
+      return `${decided}, and no evidence-less suite test resembles the draft`;
     }
-    return `${decided}; ${input.textCovered.length} evidence-less suite test(s) resemble the draft on the degraded text lane and are recorded per compared test without deciding (D-16)`;
+    return `${decided}; ${input.textCovered.length} evidence-less suite test(s) resemble the draft on the degraded text lane and are recorded per compared test without deciding`;
   }
   if (input.pass) {
-    return "the suite fingerprint index is empty, so the degraded text lane decided: no evidence-less suite test resembles the draft (D-16)";
+    return "the suite fingerprint index is empty, so the degraded text lane decided: no evidence-less suite test resembles the draft";
   }
   if (input.unionSize === 0 && input.textCovered.length > 0) {
-    return "the text fallback lane matched " + input.textCovered.map((entry2) => `${entry2.filePath}::${entry2.testName}`).join(", ") + ` at or above ${TEXT_FALLBACK_SIMILARITY_THRESHOLD} similarity \u2014 an evidence-less suite test this draft resembles, flagged toward already-covered (D-16)`;
+    return "the text fallback lane matched " + input.textCovered.map((entry2) => `${entry2.filePath}::${entry2.testName}`).join(", ") + ` at or above ${TEXT_FALLBACK_SIMILARITY_THRESHOLD} similarity \u2014 an evidence-less suite test this draft resembles, flagged toward already-covered`;
   }
   if (input.draftElementCount === 0) {
     return "the draft produced no fingerprint elements, so nothing could be shown to be novel \u2014 not a finding that it duplicates the suite (check gate 1 first)";
   }
-  return `every element the draft exercised (${input.draftElementCount}) is already in the suite union of ${input.unionSize} (D-14)`;
+  return `every element the draft exercised (${input.draftElementCount}) is already in the suite union of ${input.unionSize}`;
 }
 
 // src/authoring/dedup.ts
@@ -3398,26 +2788,18 @@ async function compileDraft(input, brief, shelf, read) {
         title: "Role",
         body: "You author agent-qa test documents. Emit ONE complete YAML test document and nothing else \u2014 no prose, no fences, no partial edit. Steps are natural language, one per line, and at least one of them must assert concrete expected content. " + REQUEST_WINS_INSTRUCTION
       },
-      // The document schema, on the same placement argument and for WINDOWS 111's reason: a brief
-      // serving no exemplars must still teach the format. See the constant's own header.
+      // The document format sits in the stable tier, so a brief with no exemplars still teaches it.
       {
         title: TEST_DOCUMENT_FORMAT_BLOCK_TITLE,
         body: TEST_DOCUMENT_FORMAT_INSTRUCTION
       },
-      // D-17's syntactic half, in the STABLE tier beside the role it qualifies. It is a standing
-      // rule about how any step is written rather than a fact about this intent, so it belongs
-      // where the byte prefix is shared across invocations.
+      // Stable tier: a standing rule about writing any step, shared across invocations.
       { title: "Procedures", body: PROCEDURE_BY_REFERENCE_INSTRUCTION }
     ],
     context: [
       { title: "Intent", body: input.intent },
       { title: "Scope", body: `${input.scope.tier}:${input.scope.key}` },
-      // WR-07, AND IT RIDES BESIDE THE BLOCK IT CORRECTS. `Scope` renders `${tier}:${key}` and
-      // that key is a PRODUCT — `deriveDefaultAuthoringScope` answers `target.product ??
-      // targetName` — so a stage asked for a `target` while served only the Scope block was being
-      // asked to guess on every project where the two differ. CONTEXT tier and not stable: these
-      // names are per-project facts, and the stable tier's shared byte prefix must stay
-      // project-independent for the prompt cache the tier law exists to enable.
+      // `Scope` renders a product, not a target name, so the configured targets ride beside it.
       {
         title: CONFIGURED_TARGETS_BLOCK_TITLE,
         body: configuredTargetsBlockBody(targetNames)
@@ -3710,28 +3092,13 @@ var authoringDraftEditSpec = {
   boundThrough: "draftShelf",
   input: AuthoringDraftEditInputSchema,
   output: AuthoringDraftEditOutputSchema,
-  // `mutating-local`, and the contrast with `authoring.draft.write` is deliberate. That op declares
-  // `mutating-shared` because it spends up to nine child `agent-qa run` processes of a person's
-  // compute (D-10). This op takes ONE model call, starts zero runs, and writes one file — the test
-  // it edited, over the exact bytes it read (432 D-06). 2026-10-01 (432-19/432-24, D-12/D-15): the
-  // tiers once decided who was asked and where an unanswerable ask denied; nothing asks or denies
-  // on a tier now, and the tier stays the honest classification of what the op touches.
-  //
-  // The mechanics: `recognized: true` with no `readOnly` puts the classifier's floor at
-  // mutating-local, `declaredTier` states that tier rather than relying on the floor, and the name
-  // tokens (fn · authoring · draft · edit) hit neither destructive lexicon.
+  // This op takes one model call, starts zero runs, and writes one file: the test it edited, over
+  // the exact bytes it read.
   risk: {
     name: `fn:${AUTHORING_DRAFT_EDIT_FUNCTION_ID}`,
-    recognized: true,
-    declaredTier: "mutating-local"
+    recognized: true
   },
-  /**
-   * An edit that returned STAGED a draft — there is no arm where it did not (399.1 D-01).
-   *
-   * Every refusal this op can make is a THROW (the never-guess binder, the region fence, the
-   * parser), which already reaches the engine's own `failed` mapping. What returns is one shape,
-   * and the honest report of it is what was edited and how much changed.
-   */
+  // Every refusal throws, so a returned value always staged a draft.
   classify(output) {
     const file = output.written;
     if (file.kind === "not-written") {
@@ -3854,7 +3221,7 @@ function projectStop(outcome) {
       ...point.verdictSource === void 0 ? {} : { verdictSource: String(point.verdictSource) }
     },
     evidenceRefs: outcome.route.evidenceRefs,
-    // ONE SPREAD, so the kind and the spend are present on exactly the same payloads (411 D-08).
+    // One spread, so the kind and the spend appear on exactly the same payloads.
     ...outcome.abandonment === void 0 ? {} : {
       repairAbandonment: outcome.abandonment.kind,
       repairIterations: outcome.abandonment.iterations
@@ -3871,97 +3238,14 @@ var authoringDraftWriteSpec = {
   boundThrough: "draftShelf",
   input: AuthoringDraftWriteInputSchema,
   output: AuthoringDraftWriteOutputSchema,
-  // `mutating-shared`, AND THE CONTRAST WITH `authoring.draft.verify` IS THE POINT (394-08, D-03).
-  //
-  // The mechanics first: `recognized: true` with no `readOnly` puts the classifier's floor at
-  // mutating-local, `declaredTier` raises it from there, and the name tokens (fn · authoring ·
-  // draft · write) hit neither destructive lexicon — so the declared tier is what the gate sees.
-  //
-  // `authoring-verify-draft.ts` chose `mutating-local` and its argument was correct FOR IT: an
-  // ask-tier op denies in every fail-closed context, and an evaluator that cannot verify a draft in
-  // CI is a keep-filter that stops working exactly where it needs to run unattended. Verifying is
-  // all cost and no consequence — gate-runs are `excludedFromOutcomes`, so they leave no trace a
-  // colleague reads.
-  //
-  // THIS OP IS GENUINELY DIFFERENT, and it differs in the two ways that decide a tier. It SPENDS a
-  // person's compute and model budget on their own machine — up to nine full child `agent-qa run`
-  // processes against their application (D-10) — and since 432 D-06 the artifact it produces is
-  // written straight into their suite.
-  //
-  // 2026-10-01 (432-19/432-23, 432 D-12/D-14/D-15): THE TIER NO LONGER ASKS. It was raised so a
-  // dispatch confirm would show the fan-out before the loop started, and so a fail-closed context
-  // (CI, the daemon) denied it with the gate's ways out (the session trust flag, a trust credential,
-  // a standing approval). The gate, its confirm and those ways out are deleted: every door runs this
-  // op without a prompt, and WTST-08's honest report on the verdict below is the control that
-  // remains. One call starts a loop that runs to its end; there is no mid-loop approval state and
-  // no approval token threaded through the stages.
-  //
-  // DO NOT HARMONISE THE TWO TIERS. They are different classifications because the ops differ;
-  // the tier still says honestly which one shares more.
+  // Every door runs this op without a prompt. One call starts a loop that runs to its end, spending
+  // up to nine child `agent-qa run` processes against the person's application, and writes the
+  // draft straight into their suite; there is no mid-loop approval state.
   risk: {
     name: `fn:${AUTHORING_DRAFT_WRITE_FUNCTION_ID}`,
-    recognized: true,
-    declaredTier: "mutating-shared"
+    recognized: true
   },
-  // 2026-10-02 (432-42, D-14/D-15): the per-invocation `disclose` method is deleted. It rendered the
-  // fan-out preview for the dispatch confirm, which 432-19 deleted, and nothing called it since; the
-  // fan-out report on the verdict below is what a caller reads.
-  /**
-   * This op's own outcome enum, folded into a clause verdict (2026-08-20, Phase 399.1 D-01/D-02),
-   * carrying the invocation's FAN-OUT REPORT (394-14 · WTST-08 · D-18's one exception).
-   *
-   * `refused` IS THE MEASURED WITNESS. 399's live acceptance recorded this op returning its stage-2
-   * dedup refusal while chat printed `executed  authoring.draft.write completed`: the screen declined
-   * to author, nothing was written, and the person was told it had been. The screen WORKED, so the
-   * honest word is `refused` and not `failed` — the same reading D-02 minted the status for.
-   *
-   * THE OUTCOME CARRIES THE REFERENCE, because 394 D-04's requirement is refuse AND LINK: a person
-   * told only "duplicate" has nothing to open, and `matchedRef` is precisely the string
-   * `entities.resolve` takes. The refusal payload is optional on the contract, so an arm that says
-   * `refused` without one still says `refused` — the status is the claim that must not be lost, and
-   * a missing link degrades the sentence rather than the verdict.
-   *
-   * THE OTHER THREE ARMS RAN TO COMPLETION. `drafted`, `repaired` and `stopped` all end with a draft
-   * and a receipt — a correctly-failing draft is a VERDICT about the application, not a failure of
-   * this op — so each is `executed`, and the outcome names the test that was authored. A `stopped`
-   * invocation therefore renders `stopped <testName> — <fan-out sentence>` under a status chat and
-   * the parity walk already read: a spelling, never a shape (411 D-11).
-   *
-   * ---- the fan-out, migrated here from `turn-engine.ts` by 399.1-03 -----------------------------
-   *
-   * IT ARRIVES ON THE VERDICT AND NOT ON A RENDER FOLD, and the choice is load-bearing rather than
-   * incidental. 394-14's second cell requires the sentence to reach the APPEND-ONLY LOG — "the
-   * return value is what one caller sees; the log is the triage report several surfaces render" —
-   * and the log carries `ClauseReceipt.outcome`, not the turn's answer. A `renderResult` fold would
-   * have put this disclosure on the answer channel only, silently costing it the half that is
-   * readable after the fact. `summariseOutcome` composed a RECEIPT LINE, so the seat it vacates is
-   * this one; `explainAnswerLines` composed ANSWER TEXT, so its seat is `renderResult`. The two
-   * hardcodes were never the same kind of thing.
-   *
-   * IT IS ADMITTED BY THE CHARTER RATHER THAN EXCEPTED FROM IT. D-18 says the receipt is a MAP, and
-   * `FanOutReport` is counts, run REFERENCES and one boolean — no draft body, no receipt payload, no
-   * step evidence. The written file and its receipt ride the op's `written` field, not this line.
-   *
-   * IT IS ONE FIELD ON ONE OP, AND NOW BY CONSTRUCTION. That used to be enforced by an id
-   * comparison inside a shared function — a claim a later edit could widen by deleting one line. It
-   * is a member of THIS spec now: no other op's line is touched, because no other op declares this.
-   *
-   * WHY THE DISCLOSURE IS THE WHOLE CONTROL. WTST-08's owner decision was preview plus honest
-   * reporting with NO enforced budget, so the number a person is shown is all there is. The same
-   * surface rendered the dispatch confirm they approved; a receipt omitting what was actually spent
-   * would be the half that makes the other half checkable, missing. They agreed to nine runs and
-   * had no way to learn eleven were taken.
-   *
-   * PARSED, NEVER CAST, AND THE PARSE CANNOT MOVE THE STATUS. `FanOutReportSchema` is `.strict()`,
-   * so a malformed result cannot smuggle prose into a file several surfaces render; an unparsable
-   * report costs the SENTENCE and never the verdict, which is `classify`'s fail-closed contract read
-   * correctly — the disclosure degrades, the claim about what happened does not.
-   *
-   * THE SENTENCE IS `renderFanOutReport`'S AND NOTHING ELSE. A line composed here would be a second
-   * prose form of one report, free to drift from the confirm's own wording the moment a phrase
-   * moves — and mutation R of the phase's mutation driver (since removed) was the differential
-   * that caught it.
-   */
+  // A refused dedup is `refused` with its matched ref; every other arm is `executed`.
   classify(output) {
     const report = FanOutReportSchema.safeParse(output.fanOut);
     const spent = report.success ? ` \u2014 ${renderFanOutReport(report.data)}` : "";
@@ -4007,10 +3291,7 @@ var authoringDraftWriteSpec = {
         intent: input.intent,
         scope,
         ...input.draftMode === void 0 ? {} : { draftMode: input.draftMode },
-        // 394-17 / D-12: handed on exactly as supplied, and this op invents nothing. The session
-        // is a fact about the SURFACE that dispatched the call — the chat engine stamps its own
-        // id at the invoke boundary — so a default here would attribute a CLI draft to a session
-        // that never asked for it.
+        // Passed as supplied: the dispatching surface stamps its own session, so no default here.
         ...input.sessionRef === void 0 ? {} : { sessionRef: input.sessionRef }
       },
       { read, shelf }
@@ -4101,23 +3382,12 @@ var authoringFunnelGetSpec = {
   id: AUTHORING_FUNNEL_GET_FUNCTION_ID,
   summary: "Report the authoring funnel for a window \u2014 built, passed stably, added value, write-eligible \u2014 and flag a keep rate above the ceiling as the loop failing to filter.",
   resultKind: "unary",
-  // Bound exactly where a composition supplies the receipts store (the proposals inbox left in 432-17).
-  // An unbound host answering an all-zero funnel would say "this session authored nothing" about
-  // a store it has never been able to read — and worse, it would say the loop filtered
-  // everything, which is the one reading of a zero funnel that flatters the loop. So it refuses
-  // by name instead (D-09).
+  // An unbound host refuses rather than answer a zero funnel that flatters the loop.
   boundThrough: "authoringFunnel",
   input: AuthoringFunnelGetInputSchema,
   output: AuthoringFunnelGetOutputSchema,
   risk: { name: `fn:${AUTHORING_FUNNEL_GET_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * The funnel's OWN one line, not a second one composed here (399.1 D-01 · WTST-05).
-   *
-   * `line` is the single rendered sentence every surface prints, and it is screened against the
-   * forbidden phrasings before the contract will carry it. Composing a receipt line out of the
-   * counters instead would be a second funnel rendering — unscreened, and free to call a high keep
-   * rate an achievement, which is the exact misreading D-13 exists to prevent.
-   */
+  // The receipt carries the funnel's own screened line, never one composed from the counters.
   classify(output) {
     return { status: "executed", outcome: output.line };
   },
@@ -4356,7 +3626,7 @@ function classifyDraftSteps(steps) {
 function gateReason2(rows) {
   const assertions = rows.filter((row) => row.role === "assertion");
   if (assertions.length === 0) {
-    return "no step classifies as an assertion: the draft records what it did, never what should be true (D-09 clause (i))";
+    return "no step classifies as an assertion: the draft records what it did, never what should be true";
   }
   if (assertions.some((row) => row.falsifiable)) {
     return `${assertions.filter((row) => row.falsifiable).length} of ${assertions.length} assertion steps reference concrete expected content`;
@@ -4375,7 +3645,7 @@ function gateReason2(rows) {
       "no quoted expected value, and no element noun this gate knows stands before an expected-state term with only function words between them"
     );
   }
-  return `${assertions.length} assertion step(s), none falsifiable: ${[...causes].sort().join("; ")} (D-09 clause (ii))`;
+  return `${assertions.length} assertion step(s), none falsifiable: ${[...causes].sort().join("; ")}`;
 }
 function assertionStrengthGate(draft) {
   const table = classifyDraftSteps(draft.steps);
@@ -4407,7 +3677,7 @@ import { DRAFT_STABILITY_RUNS_N as DRAFT_STABILITY_RUNS_N2 } from "@vostride/age
 var GateRunNotFlaggedError = class extends Error {
   constructor(runId, acknowledged) {
     super(
-      `runs.start accepted ${runId} without both gate-run markers (gateRun=${String(acknowledged.gateRun)}, excludedFromOutcomes=${String(acknowledged.excludedFromOutcomes)}): an unflagged gate-run pollutes the outcome projection and the suite fingerprint union the draft is later compared against (WTST-06).`
+      `runs.start accepted ${runId} without both gate-run markers (gateRun=${String(acknowledged.gateRun)}, excludedFromOutcomes=${String(acknowledged.excludedFromOutcomes)}): an unflagged gate-run pollutes the outcome projection and the suite fingerprint union the draft is later compared against.`
     );
     this.runId = runId;
     this.acknowledged = acknowledged;
@@ -4435,39 +3705,39 @@ function classifyGateRun(member) {
   if (!DEFINITIVE_MEMBER_OUTCOMES.has(member.outcome)) {
     return {
       definitive: false,
-      reason: `member outcome '${member.outcome}' is not a final pass or fail (D-17)`
+      reason: `member outcome '${member.outcome}' is not a final pass or fail`
     };
   }
   for (const step of member.steps) {
     if (step.planningFailure !== void 0) {
       return {
         definitive: false,
-        reason: `planning failed structurally on step ${step.stepIndex}: the draft was never executed to a verdict, so the enum below describes the attempt, not the app (D-17)`
+        reason: `planning failed structurally on step ${step.stepIndex}: the draft was never executed to a verdict, so the enum below describes the attempt, not the app`
       };
     }
     if (step.limitStop !== void 0) {
       const { limit, used, configured } = step.limitStop;
       return {
         definitive: false,
-        reason: `step ${step.stepIndex} stopped at its ${limit} limit (${used} of ${configured} used): the run ran out of limit, not into an answer (D-12)`
+        reason: `step ${step.stepIndex} stopped at its ${limit} limit (${used} of ${configured} used): the run ran out of limit, not into an answer`
       };
     }
     if (step.cycle !== void 0) {
       return {
         definitive: false,
-        reason: `a cycle was flagged on step ${step.stepIndex} (${step.cycle.reason}): the run stopped revisiting state rather than reaching an answer (D-17)`
+        reason: `a cycle was flagged on step ${step.stepIndex} (${step.cycle.reason}): the run stopped revisiting state rather than reaching an answer`
       };
     }
     if (step.termination !== void 0) {
       return {
         definitive: false,
-        reason: `step ${step.stepIndex} terminated '${step.termination.kind}' (${step.termination.reason}) \u2014 indefinitive despite member outcome '${member.outcome}', which reads definitive on its own (393-01 F1)`
+        reason: `step ${step.stepIndex} terminated '${step.termination.kind}' (${step.termination.reason}) \u2014 indefinitive despite member outcome '${member.outcome}', which reads definitive on its own`
       };
     }
   }
   return {
     definitive: true,
-    reason: `member outcome '${member.outcome}' with no planning failure, limit stop, cycle flag or termination on any step \u2014 a final answer about the draft` + (member.outcome === "healed" ? "; a healed pass IS a pass (393-01 F3)" : "")
+    reason: `member outcome '${member.outcome}' with no planning failure, limit stop, cycle flag or termination on any step \u2014 a final answer about the draft` + (member.outcome === "healed" ? "; a healed pass is a pass" : "")
   };
 }
 function gateRunStartInput(draft) {
@@ -4518,8 +3788,7 @@ async function runStabilityGates(input) {
   const distinctOutcomes = [...new Set(observedVerdicts)];
   return {
     executesDefinitive: gateRuns.length > 0 && gateRuns.every((row) => row.definitive),
-    // An evaluation that observed no verdict at all has not shown stability; it has shown nothing.
-    // D-12's tune-toward-reject applies — a gate with no evidence behind it is not a pass.
+    // No observed verdict shows nothing, so the gate does not pass.
     stableVerdict: distinctOutcomes.length === 1,
     gateRuns,
     runsCompleted: gateRuns.length,
@@ -4630,7 +3899,7 @@ async function evaluateDraft(input, ports) {
   return receipt;
 }
 function stabilityGateOneReason(pass, runCount) {
-  return pass ? `all ${runCount} gate-run(s) reached a final verdict about the draft (D-17)` : `${runCount} gate-run(s) taken; at least one reached no final verdict \u2014 see gateRuns[].reason`;
+  return pass ? `all ${runCount} gate-run(s) reached a final verdict about the draft` : `${runCount} gate-run(s) taken; at least one reached no final verdict \u2014 see gateRuns[].reason`;
 }
 async function consultSuiteStability(draft, targetSuitePath, distinctOutcomes, ports) {
   if (distinctOutcomes.length <= 1) return void 0;
@@ -4656,7 +3925,7 @@ function stabilityGateTwoReason(distinctOutcomes, earlyStopped, suiteStability)
   if (distinctOutcomes.length <= 1) {
     return `one verdict across the completed runs: ${distinctOutcomes[0] ?? "none observed"}`;
   }
-  return `the verdict flipped across runs (${distinctOutcomes.join(" -> ")})` + (earlyStopped ? " \u2014 remaining runs skipped, the flip is already proven (D-17)" : "") + (suiteStability === void 0 ? "" : ` \u2014 ${suiteStability.message}`);
+  return `the verdict flipped across runs (${distinctOutcomes.join(" -> ")})` + (earlyStopped ? " \u2014 remaining runs skipped, the flip is already proven" : "") + (suiteStability === void 0 ? "" : ` \u2014 ${suiteStability.message}`);
 }
 
 // src/functions/ops/authoring-verify-draft.ts
@@ -4711,40 +3980,18 @@ function hasDraftExtension(draftPath) {
 var authoringVerifyDraftSpec = {
   id: AUTHORING_DRAFT_VERIFY_FUNCTION_ID,
   summary: "Evaluate a draft test against the four keep-gates and return its receipt.",
-  // 2026-10-01 (432-23, D-12): no scopes. The evaluation STARTS runs and READS the completed
-  // records back, and the composition invokes those sibling ops on a caller it mints (D-02,
-  // op-calls-op). The `run` + `read` pair once declared here kept a nested call from widening a
-  // grant; with no grants to widen, every door can call this op and its siblings alike.
   resultKind: "unary",
   boundThrough: "draftEvaluation",
   input: AuthoringVerifyDraftInputSchema,
   output: DraftReceiptSchema2,
-  // The `runs.start` tier rationale, adapted — and it is the same argument because this op's whole
-  // effect is the runs it takes:
-  //   `recognized: true` with NO `readOnly` puts the classifier's floor at mutating-local;
-  //   `declaredTier` states that tier explicitly rather than relying on the floor alone;
-  //   the name tokens (fn · authoring · draft · verify) hit neither destructive lexicon, so
-  //   nothing raises the tier above what is declared.
-  // The tier was chosen when `mutating-shared` would have ASKED, and an ask in a fail-closed
-  // context denied, leaving 394's authoring loop unable to verify a draft in CI, the one context
-  // where the keep-filter most needs to run unattended. 2026-10-01 (432-19/432-23, D-12/D-15):
-  // nothing asks or denies on a tier any more; the tier stays the honest classification.
-  // Verifying a draft really is local: it spends this machine's resources, writes into this
-  // project's run directory and its gitignored receipts store, and — because every gate-run is
-  // flagged `excludedFromOutcomes` (WTST-06) — deliberately leaves no trace in the shared signals
-  // a colleague reads.
+  // Verifying a draft spends this machine's resources, writes into this project's run directory and
+  // its gitignored receipts store, and leaves no trace in the shared signals a colleague reads,
+  // because every gate-run is flagged `excludedFromOutcomes`.
   risk: {
     name: `fn:${AUTHORING_DRAFT_VERIFY_FUNCTION_ID}`,
-    recognized: true,
-    declaredTier: "mutating-local"
+    recognized: true
   },
-  /**
-   * A RECEIPT'S VERDICT ABOUT A DRAFT IS AN ANSWER, not a refusal (399.1 D-01, plan 03's razor).
-   *
-   * `rejected` here is the gate saying what it found about somebody's draft — the verification ran
-   * and produced its finding. `refused` is for a control declining an act it would otherwise have
-   * carried out, and nothing was declined: the act WAS carrying out the verification.
-   */
+  // A rejection is the verification's finding, an answer, never `refused`.
   classify(output) {
     return {
       status: "executed",
@@ -4822,8 +4069,6 @@ import {
   CROSS_BOUNDARY_REASONS,
   isSecretAdjacentConfigField
 } from "@vostride/agent-qa-schema";
-var ALLOW_PRODUCTION_PATH = "allowProduction";
-var TARGET_ENVIRONMENT_PATH = /^registry\.targets\.[^.]+\.environment$/;
 function originOf(value) {
   if (typeof value !== "string") return void 0;
   let parsed;
@@ -4841,12 +4086,6 @@ function computeCrossBoundary(facts) {
     if (isSecretAdjacentConfigField(edit.configPath)) found.add("secret-adjacent-field");
     const newOrigin = originOf(edit.newValue);
     if (newOrigin !== void 0 && newOrigin !== originOf(edit.oldValue)) found.add("new-origin");
-    if (edit.configPath === ALLOW_PRODUCTION_PATH && edit.newValue === true && edit.oldValue !== true) {
-      found.add("production-opt-in");
-    }
-    if (TARGET_ENVIRONMENT_PATH.test(edit.configPath) && edit.oldValue === "production" && edit.newValue !== "production") {
-      found.add("production-declassified");
-    }
   }
   if (facts.addsHook) found.add("hook-added");
   const pinned = new Set(facts.pinnedFileSet);
@@ -4947,9 +4186,7 @@ async function changeConfigField(input, deps) {
       ...edit.previousValue === void 0 ? {} : { oldValue: edit.previousValue },
       newValue: input.value
     }],
-    // A field set writes a config value; it does not add a hook. `config.hook.add` is its own op and
-    // supplies this fact itself. Stated rather than inferred, because inferring "a hook was added"
-    // from a path would be the per-op map D-02 refused.
+    // Stated, not inferred: a field set adds no hook; `config.hook.add` states its own.
     addsHook: false,
     candidate: candidateSet(set, [{ path: target.path, bytes: edit.bytes }])
   }, {
@@ -5129,7 +4366,7 @@ async function addConfigHook(input, deps) {
     subject: `add hook ${input.name}`,
     summaryLine: `add ${input.runtime} hook ${input.name} running ${input.file}`,
     fieldEdits: flattenScalarEdits(`${HOOKS_PATH}.${at}`, entry2, void 0),
-    // STATED, NOT INFERRED (D-02). This is the op that adds hooks; nothing has to guess.
+    // Stated, not inferred: this op adds hooks.
     addsHook: true,
     candidate: candidateSet(set, [{ path: hooksMember.path, bytes: written.bytes }])
   }, { kind: "files" }, set, deps);
@@ -5167,8 +4404,7 @@ async function scaffoldConfigProject(input, deps) {
     targetName: verdict.targetName,
     baseUrl: verdict.baseUrl,
     ...gitignore?.bytes === void 0 ? {} : { existingGitignore: gitignore.bytes },
-    // MERGE MODE, AND ONLY WHEN THERE ARE BYTES TO MERGE INTO. Absent here is the from-zero road,
-    // whose rendered bytes are byte-identical to what 395-08 shipped and what the goldens pin.
+    // Merge mode only when there are bytes to merge into; goldens pin the from-zero output.
     ...existingConfig.bytes === void 0 ? {} : {
       existingConfig: {
         path: existingConfig.path,
@@ -5190,9 +4426,7 @@ async function scaffoldConfigProject(input, deps) {
         { configPath: `${TARGETS_PATH}.${verdict.targetName}.platform`, newValue: "web" },
         { configPath: `${TARGETS_PATH}.${verdict.targetName}.url`, newValue: verdict.baseUrl }
       ],
-      // The scaffolded hooks file declares one hook, which is code this project would then run.
-      // Stated by the op, as D-02 requires, and true exactly when the file did not exist a moment
-      // ago — see `addsHook`'s derivation above.
+      // True exactly when the hooks file did not exist; see `addsHook`'s derivation above.
       addsHook,
       candidate: candidateSet(set, [...rendered])
     }, { kind: "files" }, set, deps);
@@ -5459,14 +4693,7 @@ var configAuthSetSpec = {
     recognized: true,
     readOnly: false
   },
-  /**
-   * This op's own union, folded into a clause verdict (2026-08-20, Phase 399.1 D-01/D-02).
-   *
-   * THE FOLD IS SHARED BECAUSE THE UNION IS. Six ops answer with `ConfigChangeOutput` (432-11), and a
-   * per-op copy of the mapping would be a guardrail refusal that reports `refused` on some doors
-   * and `executed` on others the first time one copy is edited. See `config-propose-verdict.ts`
-   * for why `blocked` and `refused` are the same status and different words.
-   */
+  // Shared, so every door reports a guardrail refusal alike; see `config-propose-verdict.ts`.
   classify: classifyConfigChangeOutput,
   async invoke(input, deps) {
     const { configFiles, configValidate, configWrite } = deps;
@@ -5495,15 +4722,7 @@ var configFieldSetSpec = {
     recognized: true,
     readOnly: false
   },
-  /**
-   * This op's own union, folded into a clause verdict (2026-08-20, Phase 399.1 D-01/D-02).
-   *
-   * THE MAPPING MOVED TO `config-propose-verdict.ts` IN 399.1-03, unchanged, when the other six ops
-   * answering with this same union got classifiers of their own. It was written here first because
-   * this op was the tracer; leaving a private copy behind would have made a guardrail refusal report
-   * `refused` on this door and `executed` on the next one the first time somebody edited one copy.
-   * The arms, and the reasoning for which of them is `refused`, are documented at the fold.
-   */
+  // Shared, so every door reports a guardrail refusal alike; see `config-propose-verdict.ts`.
   classify: classifyConfigChangeOutput,
   async invoke(input, deps) {
     const { configFiles, configValidate, configWrite } = deps;
@@ -5532,14 +4751,7 @@ var configHookAddSpec = {
     recognized: true,
     readOnly: false
   },
-  /**
-   * This op's own union, folded into a clause verdict (2026-08-20, Phase 399.1 D-01/D-02).
-   *
-   * THE FOLD IS SHARED BECAUSE THE UNION IS. Six ops answer with `ConfigChangeOutput` (432-11), and a
-   * per-op copy of the mapping would be a guardrail refusal that reports `refused` on some doors
-   * and `executed` on others the first time one copy is edited. See `config-propose-verdict.ts`
-   * for why `blocked` and `refused` are the same status and different words.
-   */
+  // Shared, so every door reports a guardrail refusal alike; see `config-propose-verdict.ts`.
   classify: classifyConfigChangeOutput,
   async invoke(input, deps) {
     const { configFiles, configValidate, configWrite } = deps;
@@ -5563,13 +4775,7 @@ var configGetSpec = {
   input: ConfigGetInputSchema,
   output: MaskedResolvedConfigSchema,
   risk: { name: `fn:${CONFIG_GET_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A read that answered — the count of what it resolved, and nothing out of it (399.1 D-01).
-   *
-   * NOT ONE ENTRY'S VALUE, ever. This op's result carries a person's configuration, placeholder-
-   * masked; the receipt is a map and the masked payload travels on `results[]` where the surface's
-   * own unmasker decides what a human may see (D-04's boundary, not this fold's).
-   */
+  // Counts only, never an entry's value; the masked payload travels on `results[]`.
   classify(output) {
     const count = output.entries.length;
     return {
@@ -5597,14 +4803,7 @@ var configTargetCreateSpec = {
     recognized: true,
     readOnly: false
   },
-  /**
-   * This op's own union, folded into a clause verdict (2026-08-20, Phase 399.1 D-01/D-02).
-   *
-   * THE FOLD IS SHARED BECAUSE THE UNION IS. Six ops answer with `ConfigChangeOutput` (432-11), and a
-   * per-op copy of the mapping would be a guardrail refusal that reports `refused` on some doors
-   * and `executed` on others the first time one copy is edited. See `config-propose-verdict.ts`
-   * for why `blocked` and `refused` are the same status and different words.
-   */
+  // Shared, so every door reports a guardrail refusal alike; see `config-propose-verdict.ts`.
   classify: classifyConfigChangeOutput,
   async invoke(input, deps) {
     const { configFiles, configValidate, configWrite } = deps;
@@ -5633,14 +4832,7 @@ var configProjectScaffoldSpec = {
     recognized: true,
     readOnly: false
   },
-  /**
-   * This op's own union, folded into a clause verdict (2026-08-20, Phase 399.1 D-01/D-02).
-   *
-   * THE FOLD IS SHARED BECAUSE THE UNION IS. Six ops answer with `ConfigChangeOutput` (432-11), and a
-   * per-op copy of the mapping would be a guardrail refusal that reports `refused` on some doors
-   * and `executed` on others the first time one copy is edited. See `config-propose-verdict.ts`
-   * for why `blocked` and `refused` are the same status and different words.
-   */
+  // Shared, so every door reports a guardrail refusal alike; see `config-propose-verdict.ts`.
   classify: classifyConfigChangeOutput,
   async invoke(input, deps) {
     const { configFiles, configValidate, configWrite, scaffoldContent } = deps;
@@ -5669,14 +4861,7 @@ var configTargetEditSpec = {
     recognized: true,
     readOnly: false
   },
-  /**
-   * This op's own union, folded into a clause verdict (2026-08-20, Phase 399.1 D-01/D-02).
-   *
-   * THE FOLD IS SHARED BECAUSE THE UNION IS. Six ops answer with `ConfigChangeOutput` (432-11), and a
-   * per-op copy of the mapping would be a guardrail refusal that reports `refused` on some doors
-   * and `executed` on others the first time one copy is edited. See `config-propose-verdict.ts`
-   * for why `blocked` and `refused` are the same status and different words.
-   */
+  // Shared, so every door reports a guardrail refusal alike; see `config-propose-verdict.ts`.
   classify: classifyConfigChangeOutput,
   async invoke(input, deps) {
     const { configFiles, configValidate, configWrite } = deps;
@@ -5776,13 +4961,7 @@ var knowledgeBriefWhySpec = {
   input: BriefWhyInputSchema,
   output: BriefWhyResultSchema,
   risk: { name: `fn:${KNOWLEDGE_BRIEF_WHY_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * `no-trace` IS THE HONEST ABSENCE THIS VERB EXISTS FOR (399.1 D-01).
-   *
-   * KREV-02's whole posture is that a brief whose trace is gone must be SAID to be gone rather than
-   * re-derived; the op that answers it is given no serving capability at all. That is an answer the
-   * verb is proud of, not a control declining, so the arm is `executed` with the store's own reason.
-   */
+  // `no-trace` is the honest absence, so it folds to `executed` with the store's reason.
   classify(output) {
     switch (output.kind) {
       case "answered":
@@ -5812,9 +4991,7 @@ var knowledgeRecordShowSpec = {
   input: KnowledgeRecordShowInputSchema,
   output: KnowledgeRecordShowResultSchema,
   risk: { name: `fn:${KNOWLEDGE_RECORD_SHOW_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * "Absence is a RESULT rather than a refusal" — the contract's own words (399.1 D-01).
-   */
+  // Absence is a result, not a refusal.
   classify(output) {
     switch (output.kind) {
       case "found":
@@ -5867,27 +5044,14 @@ var runsStartSpec = {
   boundThrough: "runInvocation",
   input: RunsStartInputSchema,
   output: RunStartAcknowledgementSchema,
-  // Pitfall 10, and every field here is load-bearing:
-  //   `recognized: true` with NO `readOnly` puts the classifier's floor at mutating-local;
-  //   `declaredTier` states that tier explicitly rather than relying on the floor alone;
-  //   the name tokens (fn · runs · start) hit neither destructive lexicon, so nothing
-  //   raises the tier above what is declared.
-  // The tier was chosen when `mutating-shared` would have asked, and an ask in a fail-closed
-  // context denied, leaving the authoring loop unable to start a run in CI. 2026-10-01 (432-19/
-  // 432-23, D-12/D-15): nothing asks or denies on a tier any more; the tier stays the honest
-  // classification. Starting a run really is local: it spends this machine's resources and
-  // writes into this project's run directory. It touches nothing another party shares.
   risk: {
     name: `fn:${RUNS_START_FUNCTION_ID}`,
-    recognized: true,
-    declaredTier: "mutating-local"
+    recognized: true
   },
   /**
-   * AN ACKNOWLEDGEMENT IS A START, NOT AN OUTCOME (399.1 D-01).
-   *
-   * This op returns when the run has been ACCEPTED, long before it has a verdict — so the outcome
-   * names the run a person can follow and how much it took on, and says nothing about how it went.
-   * A refusal to start is a throw and already reaches the engine's `failed` mapping.
+   * The op answers when the run has its verdict. The outcome line names the run, how many tests it
+   * ran and its scope, and leaves how it went to the run's own record. A refusal to start is a
+   * throw.
    */
   classify(output) {
     return {
@@ -5951,12 +5115,7 @@ var ENTITY_ACTION_TABLES = {
       inputSeed: { recordId: descriptor.machineId }
     },
     {
-      // D-11's table completion (387-08). 2026-09-30, 432-12 (D-05/D-09): forget is the explicit
-      // removal and it applies in the call, so the action says what it does. The record is
-      // tombstoned, never destroyed, and the card at this address then reads `tombstoned`. The
-      // seed addresses the RECORD grain because a descriptor carries the machine id it was
-      // sighted under, and the bundle grain takes a short-ID whose resolution is the writer's job
-      // rather than the card's.
+      // Forget tombstones the record in the call; the seed addresses the record grain.
       functionId: KNOWLEDGE_FORGET_FUNCTION_ID,
       label: "Forget this record",
       inputSeed: { target: { grain: "record", recordId: descriptor.machineId } }
@@ -6054,7 +5213,7 @@ function projectKeyFacts(input) {
 var ForgetReceiptKindError = class extends TypeError {
   constructor(kind) {
     super(
-      `a forget receipt describes a MEM knowledge bundle (D-19); it cannot render a ${kind} card`
+      `a forget receipt describes a MEM knowledge bundle; it cannot render a ${kind} card`
     );
     this.kind = kind;
     this.name = "ForgetReceiptKindError";
@@ -6122,13 +5281,7 @@ var entitiesGetSpec = {
   input: EntitiesGetInputSchema,
   output: EntityCardSchema2,
   risk: { name: `fn:${ENTITIES_GET_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A card that came back is a card that was found (399.1 D-01).
-   *
-   * Absence is a THROW here (`EntityNotFoundError`), not an arm, so the one returning shape is a
-   * hit. THE ADDRESS AND NOTHING ELSE: `kind` and `id` are the card's own name, and every fact on
-   * it travels on `results[]`.
-   */
+  // Absence throws, so the only returning shape is a hit.
   classify(output) {
     return { status: "executed", outcome: `found ${output.kind} ${output.id}` };
   },
@@ -6315,61 +5468,22 @@ function abstainAndRecord(port, query, rows) {
 }
 var explainSpec = {
   id: EXPLAIN_FUNCTION_ID,
-  // One line, and it is the line the catalog RENDERS for this row — descriptions live on the spec
-  // so one source feeds chat, MCP and the catalogue (396 D-16 / 398 D-08).
+  // The line the catalog renders for this row.
   summary: "Answer a question about what this product can do by citing the capability catalog, or say plainly that the catalog does not ground an answer.",
-  // 2026-10-01 (432-26, D-12): no scope. This op once declared `read` alone so that it stayed
-  // listable in safe mode; safe mode and scopes are deleted, and every caller lists and calls it.
   resultKind: "unary",
-  // D-09: the catalog reaches this op through a port bound at `composeLocalAgent()` (385 D-15). A
-  // composition without one lists the capability `unbound` BY NAME rather than degrading to a
-  // model-only answer — an explain that silently lost its catalog is precisely an explain that
-  // answers from model memory, which is the one behaviour XPLN-02 exists to forbid.
+  // Unbound without a catalog, so an explain never answers from model memory.
   boundThrough: "capabilityCatalog",
   input: ExplainInputSchema,
   output: ExplainOutputSchema,
   // Read-only and recognized: it starts nothing, writes nothing a caller can address, and the one
   // byte it appends is a local coverage line about a question it was asked.
   risk: { name: `fn:${EXPLAIN_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * The answer lines this op composed, on their way to the turn's `answer` field (398-13 · D-21).
-   *
-   * MIGRATED FROM `turn-engine.ts` BY 399.1-03, ARGUMENT INTACT. It lived there as
-   * `explainAnswerLines`, an explicit comparison of the running clause's `functionId` against this
-   * op's id — a render rule in the engine, which by construction could only ever render what
-   * somebody had thought to name there. D-04's promote decision moved it here: this op knows what
-   * its own result deserves to have said about it, and the engine no longer knows this op exists.
-   *
-   * THE RECEIPT CHARTER IS UNTOUCHED, and that is still the whole reason these lines take THIS
-   * channel rather than the receipt's. The receipt stays the MAP — the plain `agent.explain
-   * completed` line — and the territory travels on the field `renderTurn` already prints and `ask`
-   * already shares. A second carrier on the receipt would put the answer inside the map.
-   *
-   * PARSED, NEVER CAST, and a parse failure renders NOTHING extra: the fold fails OPEN by contract
-   * (`foldFunctionResult`), so an unreadable result costs a person legibility and never the record.
-   * Every character of `renderedLines` was quoted out of a committed catalog row by the renderer
-   * (D-10), so nothing a model wrote can ride this channel — which is why the parse is here and not
-   * a cast: a doctored result must not become a door for prose.
-   *
-   * BOTH ARMS RENDER. An abstention's lines are the honest "the catalog does not ground an answer",
-   * and XPLN-02's whole claim is that saying so plainly is an ANSWER a person is owed, not a silence.
-   */
+  // Parsed, never cast, so a doctored result cannot carry prose; a parse failure adds nothing.
   renderResult(output) {
     const parsed = ExplainOutputSchema.safeParse(output);
     return parsed.success ? parsed.data.renderedLines : [];
   },
-  /**
-   * AN ABSTENTION IS AN HONEST ANSWER, NOT A CONTROL DECLINING (399.1 D-01/D-02, plan 03's razor).
-   *
-   * XPLN-02's whole claim is that "the catalog does not ground an answer" is a result this op is
-   * PROUD of. Folding it to `refused` would tell a person a guardrail stopped their question when
-   * what happened is that the question was answered truthfully.
-   *
-   * COUNTS AND NO TERRITORY, and here that is load-bearing rather than stylistic. The answer text
-   * is this op's `renderResult` output and reaches the turn's `answer` field; a receipt outcome
-   * carrying a cited row's description would put the territory back inside the map, which is the
-   * one thing `explain.test.ts`'s receipt-charter cell exists to red on.
-   */
+  // An abstention is an answer, never `refused`; the receipt carries counts only.
   classify(output) {
     switch (output.kind) {
       case "answer":
@@ -6450,14 +5564,7 @@ var entitiesResolveSpec = {
   input: EntitiesResolveInputSchema,
   output: EntityCardResolutionSchema,
   risk: { name: `fn:${ENTITIES_RESOLVE_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * THREE ARMS, ALL ANSWERS (399.1 D-01, plan 03's razor).
-   *
-   * `ambiguous` and `none` are the resolver refusing to GUESS, which is the never-guess contract
-   * doing exactly what it promises — a resolution it will not invent is the answer to the question
-   * asked, not a control declining an act. Reporting either as `refused` would send a person
-   * looking for a guardrail that never fired.
-   */
+  // `ambiguous` and `none` are answers, never `refused`; no guardrail fired.
   classify(output) {
     switch (output.kind) {
       case "resolved":
@@ -6477,9 +5584,7 @@ var entitiesResolveSpec = {
     const resolution = await deps.entities.resolve(input.ref);
     return renderResolution(
       resolution,
-      // The descriptors this render is ABOUT to produce cards for — every arm of them, so an
-      // ambiguous set containing one test reads the ledger once and every candidate is rendered
-      // against the same fold (390). A `none` arm renders nothing and reads nothing.
+      // Every arm's descriptors, so an ambiguous set reads the ledger once and shares one fold.
       await readEntityCardContext(deps, descriptorsOf(resolution))
     );
   }
@@ -6514,7 +5619,7 @@ var knowledgeAcceptSpec = {
   output: KnowledgeChangeOutputSchema,
   boundThrough: "knowledgeReview",
   risk: { name: `fn:${KNOWLEDGE_ACCEPT_FUNCTION_ID}`, recognized: true, readOnly: false },
-  // The fold the three knowledge changes share (2026-10-03, quick 261003-cpv, 432 review IN-04).
+  // The fold every knowledge change op shares.
   classify: classifyKnowledgeChangeOutput,
   invoke({ operationId, ...input }, deps) {
     return deps.knowledgeReview.change({
@@ -6538,9 +5643,7 @@ var knowledgeBundlesListSpec = {
   input: KnowledgeBundlesListInputSchema,
   output: KnowledgeBundlesListOutputSchema,
   risk: { name: `fn:${KNOWLEDGE_BUNDLES_LIST_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A listing that answered — the count, and nothing out of a bundle (399.1 D-01).
-   */
+  // The count only, nothing out of a bundle.
   classify(output) {
     return { status: "executed", outcome: `${output.length} knowledge bundle(s)` };
   },
@@ -6564,7 +5667,7 @@ var KnowledgeGatesUnboundError = class extends Error {
 };
 var knowledgeGatesListSpec = {
   id: KNOWLEDGE_GATES_LIST_FUNCTION_ID,
-  summary: "Read a knowledge record\u2019s gate history, standing receipts and current promotion verdict.",
+  summary: "Read a knowledge record\u2019s mark and approval receipts, promotion lines and live promotion verdict.",
   resultKind: "unary",
   input: KnowledgeGatesListInputSchema,
   output: KnowledgeGatesListResultSchema,
@@ -6592,7 +5695,7 @@ var knowledgeForgetSpec = {
   output: KnowledgeChangeOutputSchema2,
   boundThrough: "knowledgeReview",
   risk: { name: `fn:${KNOWLEDGE_FORGET_FUNCTION_ID}`, recognized: true, readOnly: false },
-  // The fold the three knowledge changes share (2026-10-03, quick 261003-cpv, 432 review IN-04).
+  // The fold every knowledge change op shares.
   classify: classifyKnowledgeChangeOutput,
   invoke({ operationId, ...input }, deps) {
     return deps.knowledgeReview.change({
@@ -6619,13 +5722,7 @@ var knowledgeRecordsDiffSpec = {
   input: KnowledgeRecordsDiffInputSchema,
   output: KnowledgeRecordsDiffOutputSchema,
   risk: { name: `fn:${KNOWLEDGE_RECORDS_DIFF_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A diff that answered, WITH ITS BASELINE (399.1 D-01).
-   *
-   * The ordinal rides the outcome for the contract's own reason: "a change list with no baseline is
-   * a list whose meaning depends on remembering the question", and a receipt line is exactly the
-   * artifact that gets pasted somewhere the question is gone.
-   */
+  // The ordinal rides the outcome, because a change list without its baseline loses its meaning.
   classify(output) {
     return {
       status: "executed",
@@ -6661,9 +5758,7 @@ var knowledgeRecordsInspectSpec = {
   input: KnowledgeRecordsInspectInputSchema,
   output: KnowledgeRecordsInspectOutputSchema,
   risk: { name: `fn:${KNOWLEDGE_RECORDS_INSPECT_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * An inspection that answered — the count, and no record content (399.1 D-01).
-   */
+  // The count only, no record content.
   classify(output) {
     return { status: "executed", outcome: `${output.records.length} record(s) inspected` };
   },
@@ -6689,7 +5784,7 @@ var knowledgeRejectSpec = {
   output: KnowledgeChangeOutputSchema3,
   boundThrough: "knowledgeReview",
   risk: { name: `fn:${KNOWLEDGE_REJECT_FUNCTION_ID}`, recognized: true, readOnly: false },
-  // The fold the three knowledge changes share (2026-10-03, quick 261003-cpv, 432 review IN-04).
+  // The fold every knowledge change op shares.
   classify: classifyKnowledgeChangeOutput,
   invoke({ operationId, ...input }, deps) {
     return deps.knowledgeReview.change({
@@ -6714,12 +5809,7 @@ var quarantineAddSpec = {
   input: QuarantineAddInputSchema,
   output: QuarantineAddOutputSchema,
   risk: { name: `fn:${QUARANTINE_ADD_FUNCTION_ID}`, recognized: true, readOnly: false },
-  /**
-   * `renewed` IS IDEMPOTENCY, AND THE CONTRACT CALLS IT INFORMATION (399.1 D-01).
-   *
-   * "Already quarantined is information an operator acts on, not an error" — so both arms are
-   * `executed` and the outcome says which gesture the ledger recorded.
-   */
+  // Already quarantined is information, so both arms are `executed`.
   classify(output) {
     switch (output.kind) {
       case "entered":
@@ -6749,17 +5839,12 @@ var quarantineListSpec = {
   id: QUARANTINE_LIST_FUNCTION_ID,
   summary: "List every quarantined test with its owner, expiry and lifecycle state.",
   resultKind: "unary",
-  // Bound exactly where a composition supplies the quarantine port. Listing quarantine state
-  // is not something a host can approximate: an unbound host answering `[]` would say "nothing
-  // is quarantined" about a ledger it has never been able to read, which is a wrong answer
-  // wearing a correct one's clothes. So it refuses by name instead (D-09).
+  // An unbound host refuses rather than answer `[]` about a ledger it cannot read.
   boundThrough: "quarantine",
   input: QuarantineListInputSchema,
   output: QuarantineListOutputSchema,
   risk: { name: `fn:${QUARANTINE_LIST_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A ledger listing that answered — the count, and no entry's identity legs (399.1 D-01).
-   */
+  // The count only, no entry's identity legs.
   classify(output) {
     const count = output.entries.length;
     return {
@@ -6790,9 +5875,7 @@ var quarantineReleaseSpec = {
   input: QuarantineReleaseInputSchema,
   output: QuarantineReleaseOutputSchema,
   risk: { name: `fn:${QUARANTINE_RELEASE_FUNCTION_ID}`, recognized: true, readOnly: false },
-  /**
-   * `no-entry` IS "an ordinary answer to an ordinary question" — the contract's words (399.1 D-01).
-   */
+  // `no-entry` is an ordinary answer, not a refusal.
   classify(output) {
     switch (output.kind) {
       case "released":
@@ -6842,26 +5925,7 @@ var runsEventsSpec = {
   input: RunsEventsInputSchema,
   output: RunEventEnvelopeSchema,
   risk: { name: `fn:${RUNS_EVENTS_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A STREAM'S VERDICT IS ABOUT THE ACQUISITION, AND IT MUST NOT READ AN ELEMENT (399.1 D-01/D-03).
-   *
-   * WHAT THIS OP CAN HONESTLY SAY. Every refusal it makes is a THROW before the iterable exists —
-   * `StreamReplayFloorError` when the requested resume point is below what the log can still serve,
-   * which is the whole reason the spec's header insists the stream is ACQUIRED inside `invoke`
-   * rather than lazily on first iteration. So a stream that came back is a replay that opened, and
-   * that is the fact this fold reports.
-   *
-   * IT DELIBERATELY IGNORES ITS ARGUMENT. Reading an element would mean CONSUMING the caller's
-   * stream — a side effect, on a member both this file and {@link FunctionSpec.classify} contract as
-   * pure, and one that would silently eat the first event of every replay. The argument is named
-   * `_stream` so the intent is legible at the signature rather than in a comment somebody may not
-   * reach.
-   *
-   * IT IS DECLARED HERE AND NOT INHERITED. `registry.ts` registers this spec through
-   * `runsEventsSpec as FunctionSpec`, and an `as`-cast satisfies `tsc` while shipping an op with no
-   * fold — which is precisely the hole the conformance census (`classifier-census.test.ts`) exists
-   * to close, and precisely why the required member alone is not the whole enforcement.
-   */
+  // Must not read an element: consuming the stream would eat the caller's first event.
   classify(_stream) {
     return { status: "executed", outcome: "replay opened \u2014 the recorded events are streaming" };
   },
@@ -7024,17 +6088,7 @@ var runsLiveUrlSpec = {
   input: RunsLiveUrlInputSchema,
   output: RunsLiveUrlResultSchema,
   risk: { name: `fn:${RUNS_LIVE_URL_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * THE OUTCOME SENTENCE NEVER CONTAINS THE TOKEN OR THE URL (LIVE-02, D-04).
-   *
-   * A clause verdict is a thing surfaces PRINT — into chat transcripts, receipts and the audit
-   * sink — so interpolating the result here would put a live credential into every durable record
-   * this op touches, from one line of "helpful" formatting. What a person needs to know is that a
-   * link was minted and for which handle; the link itself is already in the result they asked for.
-   *
-   * Declared explicitly rather than inherited: `registry.ts` registers this through a
-   * `FunctionSpec` cast, and the classifier census is what makes a missing fold red.
-   */
+  // The outcome never holds the token or URL, because surfaces print it into durable records.
   classify(result) {
     return { status: "executed", outcome: `liveUrl minted for handle ${result.handle}` };
   },
@@ -7176,8 +6230,7 @@ async function readNoVerdictSkipped(runId, deps) {
 function projectStageDetails(state, mask) {
   const rows = {
     analysis: state?.analyzeRun,
-    curation: state?.curateMemory,
-    proposals: state?.proposeImprovements
+    curation: state?.curateMemory
   };
   const details = {};
   for (const stage of POST_PROCESSING_DETAIL_STAGES) {
@@ -7260,9 +6313,7 @@ var runsPostProcessingSpec = {
   id: RUNS_POST_PROCESSING_FUNCTION_ID,
   summary: "Read one run's post-processing chip statuses from durable job state.",
   resultKind: "unary",
-  // Bound exactly where a composition supplies durable queue storage (D-16 idiom). A host that
-  // cannot see the queue lists this by name as `unbound` rather than answering all-pending
-  // about a chain it has no way to observe.
+  // Bound where the composition supplies durable queue storage; otherwise listed `unbound`.
   boundThrough: "postProcessing",
   input: RunsPostProcessingInputSchema,
   output: PostProcessingStatusSchema,
@@ -7369,13 +6420,7 @@ var runsDigestSpec = {
   input: RunsDigestInputSchema,
   output: RunDigestSchema,
   risk: { name: `fn:${RUNS_DIGEST_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * REFS AND COUNTS, which is this op's own law rather than a house style (399.1 D-01 · 391 D-18).
-   *
-   * The digest's `lines` are its rendered territory and they travel on `results[]`, which D-04
-   * prints in full. A receipt line reaching into them would put a run's story inside the map — the
-   * exact thing D-18 pinned this op's whole shape around.
-   */
+  // Refs and counts only; the digest's lines travel on `results[]`.
   classify(output) {
     return {
       status: "executed",
@@ -7394,12 +6439,10 @@ var runsDigestSpec = {
     const skipped = status === void 0 ? projectPostProcessingSkipped(document) : status.skipped;
     const sections = {
       runId,
-      // VERBATIM — the same cluster views, carrying the same already-composed representative
-      // sentences the one renderer produced inside `analysis.get` (389 D-05/D-15).
+      // Verbatim cluster views, with the representative sentences `analysis.get` composed.
       verdictClusters: analysis?.clusters ?? [],
       chain: {
-        // `undefined` answers exactly as an empty chain does: nothing was enqueued for this
-        // run, which is what a host with no queue database can honestly say (388's own note).
+        // `undefined` answers as an empty chain: nothing was enqueued for this run.
         ...projectPostProcessingChips(void 0),
         ...status === void 0 ? {} : status.chips,
         ...status?.notification === void 0 ? {} : { outcome: status.notification.outcome },
@@ -7407,19 +6450,14 @@ var runsDigestSpec = {
       },
       ...markChanges === void 0 ? {} : { markChanges },
       candidates: {
-        // Absent counts read as zero HERE and only here: the row omits them when curation never
-        // committed a bundle (388 D-11), and a digest section is a place a person reads a
-        // number rather than a place a distinction between "none" and "not yet" survives — the
-        // chain chips one line up already carry that distinction.
+        // Absent counts read as zero only here; the chain chips carry none versus not yet.
         curated: curation?.curated ?? 0,
         deprecated: curation?.deprecated ?? 0
       },
       quarantine: {
         quarantined: quarantine.filter((entry2) => entry2.state === "quarantined").length,
         expired: quarantine.filter((entry2) => entry2.state === "expired").length,
-        // `released` entries are deliberately absent from both the counts and the refs: a
-        // released test is one somebody already dealt with, and listing it every run would be
-        // the graveyard 390 legislated against, one surface later.
+        // Released entries stay out of counts and refs; somebody already dealt with them.
         refs: quarantine.filter((entry2) => entry2.state === "quarantined").map(quarantineRef)
       }
     };
@@ -7645,19 +6683,12 @@ var runsDetailSpec = {
   id: RUNS_DETAIL_FUNCTION_ID,
   summary: "Read one run's durable members, steps and sub-actions as the dashboard projected them.",
   resultKind: "unary",
-  // Bound exactly where a composition owns the dashboard's projection database (the D-16 idiom). A
-  // host that holds no such database lists this by name as `unbound` rather than answering an
-  // empty run about a projection it has no way to observe.
+  // Bound where the composition owns the projection database; otherwise listed `unbound`.
   boundThrough: "runDetail",
   input: RunsDetailInputSchema,
   output: RunDetailProjectionSchema,
   risk: { name: `fn:${RUNS_DETAIL_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * The three counts, which are what a receipt can honestly say about a read like this one.
-   *
-   * NOT THE TOKEN SUM: a receipt line quoting a number the caller is about to render would be a
-   * second place that number is stated, and D-06 exists because two producers of one total drift.
-   */
+  // Counts only, not the token sum, so the total has one producer.
   classify(output) {
     return {
       status: "executed",
@@ -7795,7 +6826,7 @@ var runsEvidenceSpec = {
   boundThrough: "runDetail",
   input: RunsEvidenceInputSchema,
   output: RunsEvidenceResultSchema,
-  // 431-03 (D-03/D-07): the declared output is the canonical document; validation stays `output`.
+  // The declared output is the canonical document; validation stays on `output`.
   outputRepresentation: RunsEvidenceOutputContract,
   risk: { name: `fn:${RUNS_EVIDENCE_FUNCTION_ID}`, recognized: true, readOnly: true },
   classify(output) {
@@ -7997,9 +7028,7 @@ function projectStep(testId, testIndex, evidence) {
       channel3: evidence.servedBrief.channel3.map(cautionLine)
     },
     trace: traceArmOf(evidence),
-    // PICKED, not spread (CR-01) — see `planSourceOf`. Spread-away absence, never a `null` and
-    // never a zero-fill: a step that replayed no procedure carries NO `planSource` key, which is
-    // a different byte from one that carries an empty source (the layer's own idiom).
+    // Picked, not spread: a step that replayed nothing carries no `planSource` key.
     ...evidence.planSource === void 0 ? {} : { planSource: planSourceOf(evidence.planSource) },
     ...rung === void 0 ? {} : { retrievalRung: rung }
   };
@@ -8074,16 +7103,7 @@ var runsKnowledgeSpec = {
   input: RunsKnowledgeInputSchema,
   output: RunKnowledgeProjectionSchema,
   risk: { name: `fn:${RUNS_KNOWLEDGE_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * COUNTS, NOT CONTENT (399.1 D-01 · 391 D-18's rule applied here).
-   *
-   * A receipt line names how much a run used and learned; the brief summaries, step text and
-   * record ids themselves stay in `results[]` where a reader asked for them. Interpolating a
-   * served summary here would put producer prose — possibly masked material — into an audit map.
-   *
-   * `evidence-incomplete` is `executed` and not a refusal, on `knowledge.brief.why`'s reasoning:
-   * a pruned handoff is an answer this verb is proud of, not a control declining.
-   */
+  // Counts only, so no served summary or masked material reaches an audit map.
   classify(output) {
     if (output.kind === "evidence-incomplete") {
       return {
@@ -8191,8 +7211,7 @@ var runsKnowledgeSpec = {
       ...runRung === void 0 ? {} : { retrievalRung: runRung },
       steps: joinedSteps,
       curation: {
-        // `undefined` answers exactly as an empty chain does — nothing was enqueued for this run
-        // — which is what a host with no queue database can honestly say (388's own note).
+        // `undefined` answers as an empty chain: nothing was enqueued for this run.
         status: status?.chips.curation ?? projectPostProcessingChips(void 0).curation,
         ...countsPresent && curationRow !== void 0 ? {
           counts: {
@@ -8200,8 +7219,7 @@ var runsKnowledgeSpec = {
             deprecated: curationRow.deprecated
           }
         } : {},
-        // 2026-10-18 (444-26, D-61): the run's own handoff says why its chain was never enqueued,
-        // by the fold runs.postprocessing calls, so it holds on a host with no queue database too.
+        // The handoff's own skip reason, so it holds on a host with no queue database.
         ...skipped === void 0 ? {} : { skipped: { reason: skipped.reason } }
       },
       learned: {
@@ -8261,20 +7279,12 @@ var runsListSpec = {
   summary: "List completed runs, newest finished first (20 by default, at most 200), each naming its tests; filter by verdict, test id or title, recorded target, or completion time.",
   resultKind: "unary",
   input: RunsListInputSchema,
-  // 2026-08-16 (396-04, D-16): the NAMED array schema, not `z.array(RunSummarySchema)` composed
-  // here. The two are the same shape; only one of them is an object a surface can also name, and
-  // D-16's whole claim is that the advertised schema and the validated schema are one object.
+  // The named array schema, so the advertised and validated schema are one object.
   output: RunsListOutputSchema,
-  // 431-03 (D-03, A1): the canonical companion, tied to `output` above. It changes only what a
-  // declaration publishes; `output` is still what `invokeFunction` validates with.
+  // The canonical companion changes only what a declaration publishes; `output` still validates.
   outputRepresentation: RunsListOutputContract,
-  // Read ops declare `readOnly` so the static classifier lands them on the read-only
-  // tier — allow in every execution context. The verdict is still computed and audited
-  // (D-11): there is no read bypass, only a read classification.
   risk: { name: `fn:${RUNS_LIST_FUNCTION_ID}`, recognized: true, readOnly: true },
-  /**
-   * A listing that answered — the count, and nothing out of a run (399.1 D-01).
-   */
+  // The count only, nothing out of a run.
   classify(output) {
     return { status: "executed", outcome: `${output.length} completed run(s)` };
   },
@@ -8299,20 +7309,17 @@ import { RunsMarkInputSchema, RunsMarkOutcomeSchema } from "@vostride/agent-qa-s
 var RUNS_MARK_FUNCTION_ID = "runs.mark";
 var runsMarkSpec = {
   id: RUNS_MARK_FUNCTION_ID,
-  summary: "Mark a run or step false-fail / false-pass / confirmed-bug: freeze the marked decision as gold, triage, and apply the fix (a knowledge change or a test edit) in the call.",
+  summary: "Mark a run or step false-fail / false-pass / confirmed-bug: triage it and apply the fix (a knowledge change or a test edit) in the call.",
   resultKind: "unary",
   boundThrough: "feedback",
   input: RunsMarkInputSchema,
   output: RunsMarkOutcomeSchema,
-  // D-13: a mark writes the committed eval root and, since 432-09, applies its fix to knowledge or
-  // a test file. mutating-local would understate its risk.
-  // No requiresHumanOrigin and, since 432-21 (D-12), no bearer: every caller on every door reaches it.
-  // 2026-10-01 (432-24, D-12): the `knowledge-write` scope it declared is gone too.
+  // A mark applies its fix to committed knowledge or a test file. No requiresHumanOrigin, bearer or
+  // scope: every caller on every door reaches it.
   risk: {
     name: `fn:${RUNS_MARK_FUNCTION_ID}`,
     recognized: true,
-    readOnly: false,
-    declaredTier: "mutating-shared"
+    readOnly: false
   },
   classify(output) {
     switch (output.kind) {
@@ -8328,8 +7335,6 @@ var runsMarkSpec = {
         return { status: "refused", outcome: `step ${output.stepIndex} not found at member ${output.testIndex}` };
       case "ambiguous-address":
         return { status: "refused", outcome: "ambiguous run address: specify a member" };
-      case "ambiguous-correction":
-        return { status: "refused", outcome: "executable correction requires exactly one recorded decision" };
       default:
         return output;
     }
@@ -8358,17 +7363,12 @@ function maskResult(result, mask) {
           effects: record.evidence.effects.map((effect) => effect.direction === "confirm" ? effect : { ...effect, overturnsEvidenceToken: mask(effect.overturnsEvidenceToken) })
         }
       }))
-    },
-    groundTruth: result.groundTruth.map((item) => ({
-      ...item,
-      recordedVerdict: { ...item.recordedVerdict, reasoning: mask(item.recordedVerdict.reasoning) },
-      ...item.correctedExpectation === void 0 ? {} : { correctedExpectation: mask(item.correctedExpectation) }
-    }))
+    }
   };
 }
 var runsMarkPreviewSpec = {
   id: RUNS_MARK_PREVIEW_FUNCTION_ID,
-  summary: "Preview what runs.mark would do for this exact input: its refusals, resolved step, labels, the knowledge records it reaches with their content and evidence effects, and the fix it would apply, without writing.",
+  summary: "Preview what runs.mark would do for this exact input: its refusals, resolved step, the knowledge records it reaches with their content and evidence effects, and the fix it would apply, without writing.",
   resultKind: "unary",
   boundThrough: "feedbackReads",
   input: RunsMarkInputSchema2,
@@ -8377,7 +7377,7 @@ var runsMarkPreviewSpec = {
   classify(output) {
     switch (output.kind) {
       case "consequences":
-        return { status: "executed", outcome: `preview: ${output.markKind} would apply ${output.draft.kind} over ${output.markedDecisionCount} ${output.markedDecisionCount === 1 ? "decision" : "decisions"} (nothing written)` };
+        return { status: "executed", outcome: `preview: ${output.markKind} would apply ${output.draft.kind} at step ${output.resolvedStep.stepIndex} (nothing written)` };
       case "quarantined":
         return { status: "executed", outcome: `preview: ${output.markKind} would be quarantined as ${output.class} (nothing written)` };
       case "already-marked":
@@ -8386,7 +7386,6 @@ var runsMarkPreviewSpec = {
       case "member-not-found":
       case "step-not-found":
       case "ambiguous-address":
-      case "ambiguous-correction":
         return runsMarkSpec.classify(output);
       default:
         return output;
@@ -8426,16 +7425,11 @@ function projectEntry(receipt, changedRecords, supersededBy, mask) {
     ordinal: receipt.ordinal,
     markedAt: receipt.markedAt,
     ...receipt.note === void 0 ? {} : { note: mask(receipt.note) },
-    corrected: {
-      expectation: receipt.correctedExpectation !== void 0,
-      action: receipt.correctedAction !== void 0
-    },
     ...receipt.rootCause === void 0 ? {} : {
       rootCause: { class: receipt.rootCause.class, producer: mask(receipt.rootCause.producer) }
     },
     ...receipt.isRerun === void 0 ? {} : { isRerun: receipt.isRerun },
     disposition: receipt.disposition,
-    gold: receipt.gold,
     evidence: receipt.evidence,
     ...receipt.supersedes === void 0 ? {} : { supersedes: receipt.supersedes },
     active: supersededBy === void 0,
@@ -8701,8 +7695,7 @@ function projectLearned(knowledge, document) {
     curation: {
       status: curation.status,
       ...curation.counts === void 0 ? {} : { counts: { ...curation.counts } },
-      // 2026-10-18 (444-26, D-61): the run's own handoff says why its chain was never enqueued, by
-      // the fold runs.postprocessing serves; an ordinary run carries no key.
+      // The handoff's own skip reason; an ordinary run carries no key.
       ...skipped === void 0 ? {} : { skipped: { reason: skipped.reason } }
     },
     snapshot,
@@ -8788,237 +7781,75 @@ var BUILT_IN_FUNCTION_SPECS = [
   runsListSpec,
   runsGetSpec,
   runsEventsSpec,
-  // 403 D-03: the ONE producer of live-view capability tokens. Bound through the OPTIONAL
-  // `liveView` dep, so a host with no served origin lists it `unbound` BY NAME rather than
-  // handing back a URL that resolves to nothing.
+  // Bound through optional `liveView`; a host with no served origin lists it `unbound`.
   runsLiveUrlSpec,
-  // 2026-09-25 (428 D-07): the editor subject's minter, through the same `liveView` dep; a host
-  // that serves no live editor refuses it by name. Unprojected from MCP by ruling.
+  // Same `liveView` dep; not projected to MCP.
   editorLiveUrlSpec,
-  // Bound exactly in the compositions that supply a `runInvocation` port (D-16); listed
-  // either way, so a host that cannot start a run reports a visible `unbound` rather than a
-  // hole in the catalog, and `invokeFunction` refuses it by name. `composeLocalAgent()` in
-  // `@vostride/agent-qa-agent-local` is the binding site.
+  // Bound where a composition supplies `runInvocation`; `composeLocalAgent()` is the binding site.
   runsStartSpec,
-  // 388 D-14: THE chip-truth read. Registered here rather than beside a surface because it is
-  // the single producer three surfaces share — the CLI's exit summary line, 392's chat and M5's
-  // dashboard are all thin clients of this one op, and the 397 parity suite inherits it by
-  // being in the catalogue. Bound through the OPTIONAL `postProcessing` dep, so a host with no
-  // durable queue lists it `unbound` BY NAME instead of answering all-pending about a chain it
-  // cannot see.
+  // Bound through optional `postProcessing`, so a host with no durable queue lists it `unbound`.
   runsPostProcessingSpec,
-  // 2026-08-27 (405 D-03): THE durable run-detail read — members, steps, sub-actions and the D-06
-  // token sum in ONE result. Registered here rather than beside the dashboard because it is the
-  // fourth-door law applied to the page that used to read SQLite from inside a route handler: the
-  // browser, the CLI, MCP and chat now ask one registry the same question. Bound through the
-  // OPTIONAL `runDetail` dep, so a host that owns no dashboard projection database lists it
-  // `unbound` BY NAME instead of answering an empty run about a projection it cannot see.
+  // Bound through optional `runDetail`, so a host with no projection database lists it `unbound`.
   runsDetailSpec,
-  // 423 D-04: parsed evidence uses the existing detail and blob readers together.
+  // Parsed evidence uses the detail and blob readers together.
   runsEvidenceSpec,
-  // 419 GATE3-01: the sovereign mark write binds only where the host supplies feedback.
+  // The mark write binds only where the host supplies feedback.
   runsMarkSpec,
-  // 423 D-19: the mark history read binds through feedbackReads, never through the writer above.
+  // Binds through `feedbackReads`, never through the writer above.
   runsMarksHistorySpec,
-  // 423 D-16: the consequence preview reads runs.mark's shared plan through feedbackReads, never the writer.
+  // Reads `runs.mark`'s shared plan through `feedbackReads`, never the writer.
   runsMarkPreviewSpec,
-  // 2026-08-27 (405-05 D-12/D-13): THE ref-resolving read — one run's content-addressed evidence
-  // blob, by sha, with the content type sniffed from the bytes themselves. Registered beside
-  // `runs.detail` because the two are the halves of one claim: the projection carries an
-  // `artifactRef`, and this is how that ref becomes an image on a page. It is here rather than in
-  // a route for `runs.detail`'s reason — a route constructing the evidence store would be a
-  // private store read no roster row covers, and 408's embed and MCP would each need their own.
-  // Bound through the OPTIONAL `evidenceBlobs` dep, so a host with no runtime root lists it
-  // `unbound` BY NAME instead of reporting every artifact in the product as absent.
+  // Bound through optional `evidenceBlobs`, so a host with no runtime root lists it `unbound`.
   runsArtifactSpec,
-  // 389 D-11: THE analysis read — resolved verdicts, rendered sentences, clusters, one
-  // producer for the CLI print, the run page and chat. Bound through the OPTIONAL `analysis`
-  // dep (the artifact reader), so a host that cannot see run directories lists it `unbound`
-  // BY NAME; the optional `recurrence` dep only enriches the sentence's recurrence clause
-  // and never gates the binding.
+  // Bound through optional `analysis`; `recurrence` only enriches the sentence, never the binding.
   analysisGetSpec,
   knowledgeBundlesListSpec,
-  // 416 D-17: gate-and-promotion history, through the required knowledge port's
-  // optional member; missing bindings answer with a named refusal.
+  // Gate history through the knowledge port's optional member; an absent one is a named refusal.
   knowledgeGatesListSpec,
-  // 387 KREV-01: the read half of the review-verb family. All three bind through the REQUIRED
-  // `knowledge` port, so — unlike the mutating half 387-08 registers through the optional
-  // `knowledgeReview` dep — there is no composition that lists these and cannot run them.
+  // Bound through the required `knowledge` port, so every composition can run these.
   knowledgeRecordsInspectSpec,
   knowledgeRecordsDiffSpec,
   knowledgeRecordShowSpec,
-  // KREV-02: the honest verb. Read-tier like its four siblings, and bound everywhere for the
-  // same reason — its substrate is the RUNS port, which is required.
+  // Bound everywhere, because its substrate is the required runs port.
   knowledgeBriefWhySpec,
-  // 2026-08-29 (407 D-05/D-06): the Knowledge panel's ONE read — what a run USED (served brief
-  // channels, serve-time trace arms, procedure replay/hint, the recorded retrieval rung) and what
-  // it LEARNED (curation counts, the record changes attributable to it, canary outcomes). Placed
-  // directly after `knowledge.brief.why` because it is that verb widened from one step to a whole
-  // run, and BOUND EVERYWHERE for the identical reason: its substrate is the RUNS port, which is
-  // required. The three optional deps it consults only enrich the Learned half, so binding
-  // through any of them would leave a host with no queue database unable to see what its own runs
-  // used. A pruned handoff answers `evidence-incomplete` — a result the page renders, never a
-  // refusal it has to catch (D-06).
+  // Bound everywhere on the runs port; its optional deps only enrich the Learned half.
   runsKnowledgeSpec,
-  // 431 D-06: one completed run's address map, composed from the handoff, the run-detail rows and
-  // the runs.knowledge projection. Bound through `runDetail`, so a host with no projection lists
-  // it `unbound` BY NAME instead of mapping a run it cannot see.
+  // Bound through `runDetail`, so a host with no projection lists it `unbound`.
   runsOverviewSpec,
-  // 387 KREV-01 D-17: the MUTATING half. Registered here and bound only where a composition
-  // supplies `knowledgeReview`, so a read-only host lists all three as `unbound` BY NAME rather
-  // than omitting them: a capability that is absent from a catalogue is indistinguishable from one
-  // that never existed, and D-09 requires the two to look different.
-  // 2026-09-30, 432-12 (D-05): the three changes apply in the call; the `.propose` ids are gone
-  // with no alias. 2026-10-01, 432-17 (D-05/D-22): `knowledge.proposal.apply` is deleted with the
-  // inbox; old proposal files are never read again.
+  // Bound only where a composition supplies `knowledgeReview`; otherwise listed `unbound`.
   knowledgeAcceptSpec,
   knowledgeRejectSpec,
   knowledgeForgetSpec,
   configGetSpec,
-  // 395 D-01/D-03 · CFGM-01: the config editor's first action. Registered as a SIBLING of
-  // `config.get` rather than in a family of its own, because it is the write half of a story whose
-  // read half already ships here — and registering it is what makes it chat-reachable (392 D-07),
-  // projectable over MCP (396) and walkable by the parity suite (397) with no harness change.
-  //
-  // 2026-09-30, 432-11 (D-05/D-07): the config ops write in the call through the direct writer.
-  // 2026-10-01, 432-17 (D-05/D-09): `config.proposal.apply` and `config.undo.propose` are deleted
-  // with the inbox; a written change is reverted with git.
-  //
-  // They bind through OPTIONAL deps, so a host with no config files lists them `unbound` BY NAME
-  // rather than answering about a project it cannot read.
+  // Config ops write in the call through optional deps; a host with no config lists them `unbound`.
   configFieldSetSpec,
-  // 395-05 D-01: the rest of the closed action class, registered as SIBLINGS on exactly the footing
-  // above. One op per action is what makes the class legible in the registry itself — the planner
-  // picks an action by tool name, 396 projects each one as its own MCP tool, and 397's parity walk
-  // enumerates them — where a single union op carrying a mode string would have projected as one
-  // tool whose real vocabulary lives inside a field nothing validates.
+  // One op per action, because the planner and MCP pick actions by tool name.
   configAuthSetSpec,
   configHookAddSpec,
   configTargetCreateSpec,
   configTargetEditSpec,
-  // 395-08 D-13/D-15 · CFGM-05: the sixth config op, and the only one that configures a project
-  // that has no configuration. Registered rather than folded into `config.target.create` because
-  // the two refuse each other's case by name — a create is never an upsert, and a scaffold is
-  // never an overwrite — and because the planner picks actions by tool name.
+  // Not folded into `config.target.create`: a create never upserts and a scaffold never overwrites.
   configProjectScaffoldSpec,
-  // 390 D-12/D-13: a new `quarantine.` domain — a taxonomy extension exactly as `entities.`
-  // was, because quarantine state is neither a run, a memory nor an analysis. All three bind
-  // through the OPTIONAL `quarantine` dep, so a host with no knowledge root lists them
-  // `unbound` BY NAME rather than answering an empty list about a ledger it cannot read.
-  // `list` is read-tier; `release` and `add` are DIRECT gated writes (no propose+apply pair —
-  // that idiom is for learned-knowledge mutations, and this is operational state).
+  // Bound through optional `quarantine`; `release` and `add` write directly.
   quarantineListSpec,
   quarantineReleaseSpec,
   quarantineAddSpec,
-  // 391 PROP-03 / D-15 added a `proposals.` domain (list, show, reject, accept). 2026-10-01, 432-17
-  // (D-05/D-22): the domain is deleted with the inbox, with no alias and no hidden follow-up; old
-  // proposal files are never read again.
-  // 391 PROP-01 / D-03 added a `grants.` domain (list, revoke) over the committed standing-grant
-  // ledger. 2026-10-01, 432-18 (D-14/D-15/D-22): the domain is deleted with the ledger; an old
-  // `grants.jsonl` is never read again.
-  // 391 PROP-04 / D-16: the per-run digest. Filed under `runs.` beside `runs.postprocessing`
-  // because what it answers is a fact about a RUN. Read-tier, and it registers NO new dep: the
-  // projection composes from capabilities this catalogue already had (since 432-09 its substrate
-  // is the required runs port, and since 432-17 there is no proposals inbox to read).
+  // Filed under `runs.` because it answers a fact about a run; it adds no dep.
   runsDigestSpec,
-  // 387 D-09: a new `entities.` domain, a taxonomy extension exactly as `knowledge.` was.
-  // Both read-tier, both bound in every composition — the directory is a REQUIRED dep, so
-  // there is no host that lists these and cannot run them.
+  // The directory is a required dep, so every composition can run these.
   entitiesResolveSpec,
   entitiesGetSpec,
-  // 392 D-24: a new `agent.` domain, and the taxonomy extension that matters most — the chat turn
-  // entry is itself a catalogued, gated capability rather than a power the REPL holds privately
-  // (§3's L10 law). It binds through the OPTIONAL `chatTurn` dep, so a host with no engine lists
-  // it `unbound` BY NAME rather than answering an empty turn about a request it understood.
-  //
-  // `agent.chat`, the session-stateful sibling the milestone also names, is deliberately absent
-  // until a consumer exists: a registered entry nothing drives would still oblige 397's parity
-  // suite to stub it on every surface.
+  // Bound through optional `chatTurn`, so a host with no engine lists it `unbound`.
   agentAskSpec,
-  // 2026-08-17 (398 D-09 · XPLN-02): the SECOND member of the `agent.` domain, and the first op
-  // this project has added since the 397 conformance suite closed. Registering it is the decision
-  // rather than a filing choice: "what can you do" is a question every surface wants to answer, and
-  // a surface that answered it privately would be a capability the catalogue does not list — the
-  // private-power pattern §3's L10 law abolishes and the census exists to make impossible. As a
-  // registered op it is chat-reachable through the 1:1 planner binding and `/fn` with no harness
-  // change, adjudicated in `mapping.ts` like every op, and walked by the parity suite for free.
-  //
-  // Bound through the OPTIONAL `capabilityCatalog` port, whose binding site is `composeLocalAgent()`
-  // (385 D-15 — therefore both the CLI and the daemon). A host with no catalog lists it `unbound` BY
-  // NAME rather than answering from model memory, which is the exact failure XPLN-02 exists to
-  // forbid: an explain that quietly lost its grounding data still SOUNDS like an explain.
+  // Bound through optional `capabilityCatalog`, so a host never explains from model memory.
   explainSpec,
-  // 2026-08-10 (393 D-01): a new `authoring.` domain, and the keep-filter's entry point. The four
-  // gates that decide whether a generated test is worth keeping are a CATALOGUED capability rather
-  // than a private power of whatever writes tests — so 393's corpus proof drives the real gated
-  // entry point (the produced-not-literal law), 396's MCP projection and 397's parity suite inherit
-  // it from this census with no harness change, and the standalone question ("is this existing test
-  // worth keeping?") is answerable from every surface.
-  //
-  // Bound through the OPTIONAL `draftEvaluation` bundle, whose binding site is `composeLocalAgent()`
-  // in `@vostride/agent-qa-agent-local` (385 D-15 — one composition root, therefore both the CLI and
-  // the daemon). The bundle is supplied only where the host can BOTH parse a test file and start a
-  // run, so a host missing either half lists this capability `unbound` BY NAME rather than leaving a
-  // hole in the catalogue — and rather than returning a receipt whose four booleans were computed
-  // from no runs at all, which is the one answer that could get a draft kept on the strength of
-  // nothing.
-  //
-  // Registering it does NOT flip 392's `write_test` fail-closed scenario: that tool name stays
-  // absent from the catalogue until 394 (D-01), and nothing here mints it.
+  // Bound where a host can both parse a test and start a run; otherwise listed `unbound`.
   authoringVerifyDraftSpec,
-  // 2026-08-11 (394 D-01 · WTST-01): the authoring LOOP's one public entry, beside the evaluator
-  // it composes. All six stages — brief, dedup, compile, verify, route, compound — run INSIDE this
-  // op, because the stage order is an invariant and registering a stage each would make it a hope
-  // about the plan the chat planner happened to make rather than a property of the code. Everything
-  // under the surface still crosses the function layer: stage 4 dispatches `authoring.draft.verify`
-  // through `invokeFunction` on a caller minted with exactly that op's declared scopes.
-  //
-  // Bound through the OPTIONAL `draftShelf` bundle — the model and the shelf — whose binding site
-  // is `composeLocalAgent()` in `@vostride/agent-qa-agent-local` (385 D-15, therefore both the CLI
-  // and the daemon). The read half (`authoringRead`) is supplied with it or not at all and the
-  // invoke refuses on either by the same name, so a host that cannot serve an authoring brief says
-  // `unbound` BY NAME rather than compiling a test against an empty one — a plausible draft
-  // authored against nothing this project knows, which is the failure that looks most like success.
-  //
-  // Inverting the entry above: registering THIS one DOES flip 392's `write_test` fail-closed chat
-  // scenarios, because the tool name they were waiting on now exists in the catalogue the planner
-  // binds 1:1. Plan 11 performs the flip and pins planned == executed.
+  // Every stage runs inside this op, so a planner cannot reorder or skip one.
   authoringDraftWriteSpec,
-  // 2026-08-11 (394-07 D-12/D-13 · WTST-05): the honesty funnel's ONE read, beside the loop it
-  // measures. It is registered rather than left a private computation for the same reason the two
-  // entries above it are: the number that says whether the keep-filter is filtering must be the
-  // SAME number in chat, in the CLI and in the per-run digest, and a projection reachable only
-  // from whichever surface owned it would become three answers the moment the second surface
-  // wanted one. Read-tier and `readOnly` — it starts nothing and writes nothing, which is D-14
-  // expressed as a risk descriptor rather than as a promise.
-  //
-  // Bound through the OPTIONAL `authoringFunnel` bundle, whose binding site is
-  // `composeLocalAgent()` in `@vostride/agent-qa-agent-local` (385 D-15 — therefore both the CLI
-  // and the daemon). A host with no runtime root lists it `unbound` BY NAME rather than answering
-  // an all-zero funnel: zero built with zero write-eligible does not read as "nothing happened", it
-  // reads as a loop that filtered everything, which is the one wrong answer that would make the
-  // acceptance-failure flag unable to fire on the very hosts that most need it.
+  // An unbound host refuses rather than answer a zero funnel that reads as filtering everything.
   authoringFunnelGetSpec,
-  // 2026-08-11 (394-09 D-21 · WTST-07): the user-facing edit, and the patch contract's SECOND real
-  // consumer. Until this op existed, `applyPatchSetToTestDoc` and the RFC-6902 vocabulary had one
-  // caller — the repair loop — and a contract with one consumer is a contract shaped like its one
-  // caller. That is not a style objection: this project has twice paid for a one-sided contract
-  // that looked correct because only one side ever exercised it (the two-sided contract law).
-  //
-  // It is NOT a stage of `authoring.draft.write`, which is the argument `loop-ordering.test.ts`
-  // requires beside a new `authoring.` id. That pin forbids promoting a loop stage to its own
-  // registered op, because a planner holding one could reorder or skip the rest. This verb takes an
-  // existing COMMITTED test and a change to make to it; it has no position in the six-stage order,
-  // and invoking it before, during or after a loop invocation answers the same question.
-  //
-  // `mutating-local` and NOT the write op's `mutating-shared`: it takes one model call, starts zero
-  // runs, and writes only to the gitignored draft shelf. The consent that matters for an edit is
-  // the inbox accept that turns the proposal into a commit, which 391 already owns.
-  //
-  // Bound through the OPTIONAL `draftShelf` bundle; `draftEvaluation` is checked by the same name
-  // inside the invoke, because resolving the target's bytes and applying the patch set are two
-  // halves of one capability and a host that had only one of them would list this op `bound` and
-  // then fail far from whichever half was missing.
+  // Not a loop stage: it edits a committed test; `draftEvaluation` is checked inside the invoke.
   authoringDraftEditSpec
 ];
 var REGISTRY_INTERNALS = /* @__PURE__ */ new WeakMap();
@@ -9040,16 +7871,7 @@ function declarationView(spec, deps) {
   return Object.freeze({
     id: spec.id,
     summary: spec.summary,
-    // 2026-10-01 (432-20, D-10/D-12): no `requiredScopes` and no `requiresHumanOrigin`. Both were
-    // projected here so a listing and the dispatch checks read one field; the checks are deleted,
-    // and 432-39 deleted both members from the metadata type. The view is built field by field, so
-    // an old key smuggled onto a spec object still cannot ride through by accident.
-    // 2026-10-02 (432-42, D-14): no `discloses` column; the per-op disclosure is deleted.
-    // 399.1 D-01/D-04: the two 399.1 folds, projected as conditional spreads so absent stays
-    // absent — the callables stay on the spec, and what crosses to a listing is the
-    // boolean fact that this op folds its own result. The golden ledger reads both columns off
-    // here, so "which ops classify their own refusals" is a census over produced facts rather than
-    // over somebody's reading of forty-three op files.
+    // Conditional spreads keep absent absent; only the boolean fact crosses to a listing.
     ...spec.classify === void 0 ? {} : { classifies: true },
     ...spec.renderResult === void 0 ? {} : { rendersResult: true },
     resultKind: spec.resultKind,
@@ -9356,24 +8178,12 @@ var CHAT_RESOLVER_TABLE = Object.freeze([
   }),
   rule({
     alias: "status",
-    // ADJUDICATION (the plan asks for it recorded here): the candidates were `runs.list` and
-    // `runs.get`. `runs.get` addresses exactly one run BY ID and refuses without one, so it
-    // cannot answer a person who typed a bare word — the id is the very thing they did not
-    // supply. `runs.list` takes `{}`, answers the 20 most recently finished runs newest first
-    // (431 D-08), and is the only read in the registry whose contract answers "what has happened
-    // here lately" without being told what to look at. `status <run>` is not minted:
-    // `digest <run>` already owns "tell me about that one run", and two verbs for it would be
-    // two answers.
+    // `runs.list` takes `{}` and answers recent runs; `runs.get` refuses without the run id.
     resolve: (clause) => isExactly("status")(clause) ? { kind: "op", functionId: RUNS_LIST_FUNCTION_ID, input: {} } : void 0
   }),
   rule({
     alias: "test-ref",
-    // 387 D-05's never-guess ladder does the resolving, and the ref it receives is WHAT THE
-    // PERSON TYPED, verbatim. `entities.resolve` accepts "any reference at all — short-ID, URI,
-    // or free text", so pre-chewing `test 42` into `42` here would be this file inventing a
-    // second resolution grammar in front of the one that exists to be the only one. Two forms
-    // match: the `test <n>` phrase and a bare well-formed short-ID, the latter recognised through
-    // the schema's own parser rather than a regex spelled here.
+    // The ref passes verbatim to `entities.resolve`, which owns the only resolution grammar.
     resolve: (clause) => {
       const trimmed = clause.trim();
       const named = argumentAfter("test", clause);
@@ -9395,8 +8205,6 @@ var CHAT_RESOLVER_TABLE = Object.freeze([
       return { kind: "op", functionId: RUNS_DIGEST_FUNCTION_ID, input: { runId: reference } };
     }
   }),
-  // 432-13 (D-05/D-14): the `proposals` inbox alias is gone. Changes apply in the call, so there is
-  // no pending-decision inbox to route a bare word to. 432-17 deleted the inbox and its ops too.
   rule({
     alias: "model",
     resolve: (clause) => {
@@ -9406,10 +8214,7 @@ var CHAT_RESOLVER_TABLE = Object.freeze([
   }),
   rule({
     alias: "fn",
-    // THE PASSTHROUGH (D-06). The op id is NOT validated here — deliberately. `invokeFunction`'s
-    // step 1 raises `UnknownFunctionError` naming the id before any dependency is touched, so a
-    // typo and a capability that has not shipped yet both come back named, for free, from the one
-    // place that knows what is registered. A check here would be a second catalogue.
+    // The op id is unchecked here: `invokeFunction` names an unknown id before touching anything.
     resolve: (clause) => {
       const rest = argumentAfter("/fn", clause);
       if (rest === void 0) return void 0;
@@ -9444,11 +8249,7 @@ var CHAT_HELP_ENTRIES = Object.freeze([
   Object.freeze({ alias: "run", syntax: "run <test>", summary: "start a run for a test" }),
   Object.freeze({ alias: "status", syntax: "status", summary: "the recent runs" }),
   Object.freeze({ alias: "test-ref", syntax: "test <n>", summary: "show a test by reference" }),
-  // 2026-08-17 (398 plan 09): this line used to read `digest` / "the latest run digest", and both
-  // halves were false. The rule fifteen lines up requires a reference and treats a bare `digest` as
-  // a near-miss precisely so the table never guesses which run somebody meant — so the help text
-  // was advertising a guess the resolver refuses to make. The argument-contract cell in
-  // `help-census.test.ts` is what now holds the two together.
+  // `digest` needs a run reference: the resolver treats a bare `digest` as a near-miss.
   Object.freeze({ alias: "digest", syntax: "digest <run>", summary: "that run's digest" }),
   Object.freeze({
     alias: "fn",
@@ -9472,26 +8273,6 @@ var CHAT_HELP_TEXT = [
   "Anything else is planned by the model and reconciled against the table before anything runs."
 ].join("\n");
 
-// src/chat/retired-chat-verbs.ts
-var RETIRED_PIN = "/pin";
-var RETIRED_INBOX = "proposals";
-function isRetiredPin(lowered) {
-  if (lowered === RETIRED_PIN) return true;
-  if (!lowered.startsWith(RETIRED_PIN)) return false;
-  const next = lowered.charAt(RETIRED_PIN.length);
-  return next === " " || next === "	";
-}
-function retiredChatVerbReason(clause) {
-  const lowered = clause.trim().toLowerCase();
-  if (isRetiredPin(lowered)) {
-    return "/pin was retired in this version: nothing asks before an operation runs, so there is nothing to pin. Nothing in this request was run.";
-  }
-  if (lowered === RETIRED_INBOX) {
-    return "the proposals inbox was retired in this version: changes apply when they are made, so nothing waits for a decision. Nothing in this request was run.";
-  }
-  return void 0;
-}
-
 // src/chat/session-repair.ts
 import { guardChatSessionEvent } from "@vostride/agent-qa-schema";
 var TURN_CLOSING_KINDS = ["turn_complete", "aborted"];
@@ -9598,11 +8379,6 @@ function refusalName(error) {
 function refusalMessage(error) {
   return error instanceof Error && error.message !== "" ? error.message : refusalName(error);
 }
-function refusalSentenceOf(error) {
-  if (typeof error !== "object" || error === null) return void 0;
-  const sentence = error.neutralReason;
-  return typeof sentence === "string" && sentence.trim() !== "" ? sentence : void 0;
-}
 function crossBoundaryLines(answer) {
   if (answer.crossBoundary !== true) return [];
   const reasons = answer.crossBoundaryReasons ?? [];
@@ -9742,12 +8518,6 @@ async function runTurnThrough(deps, opened, input) {
     // make "stage 1 did not recognise this" and "this build cannot do it" the same bytes.
     outcome: mapped.length + directives.length === clauses.length ? "resolved" : "unresolved"
   });
-  for (const clause of clauses) {
-    if (mapped.some((resolved) => resolved.clause.index === clause.index)) continue;
-    if (directives.some((entry2) => entry2.clause.index === clause.index)) continue;
-    const retired = retiredChatVerbReason(clause.text);
-    if (retired !== void 0) return refuse(clause.text, retired);
-  }
   for (const entry2 of directives) {
     const notBound = directiveBindingRefusal(directiveHandlers, entry2);
     if (notBound !== void 0) return refuse(entry2.clause.text, notBound);
@@ -9791,15 +8561,7 @@ async function runTurnThrough(deps, opened, input) {
       turnId,
       at: deps.now(),
       stage: "planner",
-      // The stage RESOLVED when the model produced something to reconcile — a plan, or an
-      // answer. It did not when the model was unreachable or said nothing. Whether what it
-      // produced survives reconciliation is the next stage's question, and answering it in
-      // this field would make "the model proposed nothing" and "the reconciler refused the
-      // proposal" the same bytes for every reader of the log.
-      //
-      // ONE TERM, NOT TWO: an `answer_only` call IS a tool call, so the disjunction this used to
-      // spell (`|| planned.answer !== undefined`) named the same set twice through a projection
-      // that no longer exists (392-14).
+      // Resolved when the model produced a plan or an answer, whatever reconciliation decides.
       outcome: planned.failure === void 0 && planned.toolCalls.length > 0 ? "resolved" : "unresolved"
     });
   }
@@ -9932,8 +8694,6 @@ async function runTurnThrough(deps, opened, input) {
           status: "failed",
           outcome: refusalName(error)
         };
-        const refusal = refusalSentenceOf(error);
-        if (refusal !== void 0) answerLines.push(refusal);
       }
     }
     if (receipt.status === "failed") failed = true;
@@ -10313,82 +9073,46 @@ function ceilingExceeded(counts) {
 var SCENARIO_CORPUS_VERSION = 10;
 var entry = (value) => value;
 var SCENARIO_CORPUS = Object.freeze([
-  // --- deterministic: the ten canon aliases (392-02) -------------------------------------------
+  // Deterministic: the canon aliases.
   entry({ id: "run", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
   entry({ id: "status", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
   entry({ id: "test-ref", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
   entry({ id: "digest", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
-  // 432-13: the inbox alias is retired; the cell is its measured absence (v10).
+  // `proposals` is an ordinary clause stage 1 does not resolve, so the hermetic turn refuses it.
   entry({ id: "proposals", class: "deterministic", lane: "hermetic", kind: "fail_closed" }),
   entry({ id: "fn", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
   // The directives. `executed: 0` on a `should_execute` arm is the SHAPE, not a compromise: a
   // directive names no capability, so it crosses the function layer zero times on a turn that did
-  // exactly what was asked (392-08's flip). 432-13 retired `/pin`; its cell is its absence (v10).
+  // exactly what was asked. `/pin` is not a directive but an ordinary clause stage 1 does not
+  // resolve, so the hermetic turn refuses it.
   entry({ id: "model", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
   entry({ id: "pin", class: "deterministic", lane: "hermetic", kind: "fail_closed" }),
   entry({ id: "help", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
   entry({ id: "quit", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
-  // --- deterministic: the three stage-1 edge scenarios (392-02) ---------------------------------
+  // Deterministic: the stage-1 edge scenarios.
   entry({ id: "quoted-conjunction", class: "deterministic", lane: "hermetic", kind: "should_execute" }),
   entry({ id: "near-miss-alias", class: "deterministic", lane: "hermetic", kind: "fail_closed" }),
-  // DID NOT FLIP, and the reason is a measurement rather than an oversight (394-11). This line was
-  // written to flip when the authoring loop registered `write_test`. 394 registered the loop as
-  // `authoring.draft.write` — `write_test` is the spec's noun for the capability and is not a
-  // function id anywhere in the registry — so the utterance still carries an id nothing registers,
-  // and the cell still proves the one thing it was admitted for: `/fn` validates no op id, and
-  // `invokeFunction` names an unknown one before any dependency is touched. A phase that registers
-  // ops can make an unknown-op test pass for the wrong reason; this one did not.
+  // `write_test` is not a registered id, so `/fn` reaches `invokeFunction` with an unknown op.
   entry({ id: "fn-unknown-op", class: "deterministic", lane: "hermetic", kind: "fail_closed" }),
-  // --- planner: natural language, live lane (392-09) --------------------------------------------
+  // Planner: natural language, live lane.
   entry({ id: "list-recent-runs", class: "planner", lane: "live", kind: "should_execute" }),
   entry({ id: "explain-flaky", class: "planner", lane: "live", kind: "should_execute" }),
-  // D-08's LIVE arm, FLIPPED (394-11). It was admitted as the cell proving the planner could not
-  // invent an authoring capability out of prose; the loop shipping makes the same prose routable,
-  // and the flip is what says so. Its file pins planned == executed, so a turn that planned the
-  // capability without reaching it reds here rather than reading as arrival.
+  // Pins planned equals executed, so a turn that planned authoring without reaching it fails.
   entry({ id: "write-test-for-checkout", class: "planner", lane: "live", kind: "should_execute" }),
-  // --- planner: 395's config arrival, ADMITTED (395-09) ------------------------------------------
-  // The first member this corpus has ever gained for a capability rather than for a defect. 392
-  // D-08 designed this as a flip and there was nothing to flip: no config cell was ever admitted,
-  // which 395's research established by enumerating every file above. So the handoff is executed as
-  // an ADMISSION — the size moves as well as the denominator, and the pair of pins in
-  // `scenario-manifest.test.ts` is what makes the two movements distinguishable after the fact.
-  // The cell pins planned == executed == 1 on `config.field.set`, the propose op D-03 gave any
-  // schema-addressable path; it deliberately stops short of `config.proposal.apply`, which is the
-  // verb that changes a person's git history and the only one in the family that is gated.
+  // Pins one planned and executed `config.field.set`, the propose op for any schema path.
   entry({ id: "config-edit-timeout", class: "planner", lane: "live", kind: "should_execute" }),
-  // --- planner: 398's explain arrival, ADMITTED (398-07) -----------------------------------------
-  // The corpus's second admission for a capability rather than for a defect, and the first pair.
-  // `agent.explain` answers a question about what this product can do BY CITING the committed
-  // capability catalog, so these two cells are what make "never from model memory" checkable at the
-  // routing level: a turn that answered either utterance in prose completes without executing
-  // anything, and `planned == executed == 1` on the op id is what tells the two apart.
+  // A prose answer executes nothing, so one executed `agent.explain` proves the catalog was cited.
   entry({ id: "what-can-you-do", class: "planner", lane: "live", kind: "should_execute" }),
   entry({ id: "how-do-i-explain", class: "planner", lane: "live", kind: "should_execute" }),
-  // --- compound: the canon pair, live lane (392-02) ---------------------------------------------
+  // Compound: the canon pair, live lane.
   entry({ id: "run-42-and-digest", class: "compound", lane: "live", kind: "should_execute" }),
-  // The spec's own example, FLIPPED (394-11). Both clauses are routable now, so D-10's pre-flight
-  // atomicity has a plan it can admit instead of a whole turn it must refuse.
+  // Both clauses route, so pre-flight atomicity has a plan it can admit.
   entry({ id: "write-test-2fa-and-run", class: "compound", lane: "live", kind: "should_execute" }),
-  // --- compound: the two gap-round regression cells (392-11) -------------------------------------
-  // The verifier's own probes, admitted so neither defect can return silently. Both are
-  // `fail_closed`, so neither enters the ceiling denominator: what they add is the ability to SEE a
-  // refused turn that carried something out, which `executed == 0` alone never could.
+  // Fail-closed cells that see a refused turn which carried something out.
   entry({ id: "run-42-and-delete-root", class: "compound", lane: "live", kind: "fail_closed" }),
-  // STAYS REFUSING THROUGH 394's FLIP (394-11). Its second clause is a write-test request, so a
-  // reader who found the other two write-test cells flipped could reasonably take this one for an
-  // oversight. It is not. What this cell measures is CR-04 — a refused turn that had ALREADY
-  // recorded a pin and an `approval_decision` row — and its refusal comes from the hermetic lane's
-  // tripwire model, not from the authoring capability being absent. Flipping it would remove the
-  // corpus's only cell naming a directive on a turn that fails, to prove something two live cells
-  // already prove.
+  // Its refusal comes from the hermetic lane's tripwire model, not from authoring being absent.
   entry({ id: "pin-and-write-test", class: "compound", lane: "hermetic", kind: "fail_closed" }),
-  // --- compound: the second gap round's two cells (392-14) ---------------------------------------
-  // What the round-2 verification found the corpus still could not see: a directive BATCH whose
-  // later entry refuses (the earlier one's pin and its `approval_decision` row survived), and the
-  // empty-prose `answer_only` that erased a clause on a `completed` turn. Both `fail_closed`, both
-  // HERMETIC — the lanes are named exceptions in `scenario-manifest.test.ts`, and the denominators
-  // are unmoved at 11 hermetic / 3 live.
+  // A refused later directive in a batch, and an empty-prose `answer_only`.
   entry({
     id: "run-42-and-delete-root-empty-answer",
     class: "compound",
@@ -10396,10 +9120,7 @@ var SCENARIO_CORPUS = Object.freeze([
     kind: "fail_closed"
   }),
   entry({ id: "pin-and-pin-nonsense", class: "compound", lane: "hermetic", kind: "fail_closed" }),
-  // --- compound: the third gap round's cell (392-15) ---------------------------------------------
-  // The mixed-mapping configuration NO cell in either lane had: a table-mapped clause beside a
-  // planner-bound one on a turn that completed, with the model making an extra call about the
-  // mapped clause (CR-01). `fail_closed` and hermetic, so the denominators are unmoved again.
+  // A table-mapped clause beside a planner-bound one, plus a model call about the mapped one.
   entry({
     id: "run-42-and-summarise-extra-call",
     class: "compound",
@@ -10420,10 +9141,7 @@ var ROLE_BLOCK = {
 var PLANNING_BLOCK = {
   title: "How to answer",
   body: (
-    // "OF THE LIST BELOW", not "of the request". The `Request` block carries the WHOLE utterance
-    // while `Clauses to answer` carries only what stage 1 could not bind, so a count scoped to the
-    // request asks for calls about clauses that are already resolved — and every one of those is a
-    // call reconciliation cannot attribute to anything (392-VERIFICATION round 3).
+    // Scoped to the list, because the request also holds clauses stage 1 already bound.
     "Call one action tool per clause of the list below, in utterance order. Order is meaning: later clauses routinely depend on earlier ones, so the sequence you emit is the sequence that will be considered.\n\nUse `answer_only` ONLY when no tool you were offered can produce what was asked for. You have no knowledge of this project beyond what the tools return, so a question a tool can answer must be routed to that tool: answering it yourself would put a plausible-looking invention where the project data belongs. A turn answered this way performs zero actions and returns your text. Name the clause you are answering in `clause`, copied verbatim from the list above: the call covers that clause and no other, so a request with two clauses needs one call per clause you answer.\n\nUse `mark_unhandled` when no available tool can carry out a clause, naming that clause and saying which capability would be needed. This refuses the whole turn without performing any of it, and that is the correct outcome. Never substitute a tool that looks close: a request nobody can satisfy and a request satisfied by the wrong action are not the same event, and the person can only recover from the first one.\n\nA tool's required inputs are exactly the `required` list in its schema. Never mark a clause unhandled because a field outside that list is missing: omit the field, or fill it from the person's own words when they name it.\n\nBind arguments only from what the person actually supplied. If a clause needs an identifier and none was given, that clause is unhandled \u2014 do not invent one."
   )
 };
@@ -10500,18 +9218,11 @@ function createPlannerStage(deps) {
 import { jsonSchema, tool } from "ai";
 import { z as z3 } from "zod";
 var ANSWER_ONLY_INPUT_SCHEMA = z3.object({
-  // NON-EMPTY for the same reason `text` is, one field over (392-15, WR-01). `reconcile.ts` has
-  // rejected `clause: ""` since the field was required — a claim that names nothing covers nothing
-  // — while the contract the model was SHOWN still admitted it. The two halves of one field cannot
-  // be allowed to disagree in the direction that lets the model emit a call the reader will refuse.
+  // Non-empty, matching the reader in `reconcile.ts`, so the model is not shown a call it refuses.
   clause: z3.string().min(1).describe(
     "The part of the request, quoted verbatim from the clauses you were given, that this answer is about."
   ),
-  // NON-EMPTY, and that is the model-facing half of the coverage predicate (392-14). `z.string()`
-  // admitted `""`, so the one call that erases a clause — naming it, answering nothing — was
-  // inside the contract the model was shown. The reader in `reconcile.ts` moved in the SAME commit
-  // and is deliberately one notch stricter (it also rejects whitespace-only prose): the two halves
-  // of a claim's meaning cannot be allowed to disagree in the direction that completes more.
+  // Non-empty; the reader in `reconcile.ts` is one notch stricter and rejects whitespace-only text.
   text: z3.string().min(1).describe("The answer, in prose, for a turn that asks for information.")
 });
 var MARK_UNHANDLED_INPUT_SCHEMA = z3.object({
@@ -10603,18 +9314,6 @@ function projectPlannerTools(source, caller) {
   return tools;
 }
 
-// src/ports/gates.ts
-var Gate1ReceiptNotPersistedError = class extends Error {
-  constructor(candidateId, recorded) {
-    super(
-      `Gate 1 for candidate ${candidateId} produced a receipt the writer did not acknowledge (${recorded}). The replay work was spent and nothing was persisted, so this call establishes no screening result for that candidate.`
-    );
-    this.candidateId = candidateId;
-    this.recorded = recorded;
-  }
-  name = "Gate1ReceiptNotPersistedError";
-};
-
 // src/ports/job-store.ts
 var StaleJobStoreEpochError = class extends Error {
   constructor(heldEpoch, observedEpoch) {
@@ -10742,10 +9441,7 @@ function createAgentJobQueue(options) {
     const ids = chainJobIdsForRun(runId, idSource);
     return {
       dedupeKey: runId,
-      // All THREE derived ids since 422 D-13. The store's rule is stated over the candidates that
-      // EXIST, so a chain halted at the fold — whose proposal row was never written — still
-      // terminates, while a chain that enqueued the proposal job cannot notify before it lands.
-      candidateJobIds: [ids.analyzeRun, ids.curateMemory, ids.proposeImprovements],
+      candidateJobIds: [ids.analyzeRun, ids.curateMemory],
       payloadJson: canonicalJson4(
         buildChainTerminalNotification({
           runId,
@@ -11027,7 +9723,6 @@ export {
   EvidenceBlobAbsentError,
   FunctionInputError,
   FunctionNotBoundError,
-  Gate1ReceiptNotPersistedError,
   IncompleteJobKindDeclarationError,
   InconsistentJobKindDeclarationError,
   JobCancellationNotRequestedError,
@@ -11041,8 +9736,6 @@ export {
   MARK_UNHANDLED_CEILING,
   MissingIdempotencyKeyError,
   OPTIONAL_FUNCTION_DEP_KEYS,
-  PROPOSE_DEFAULT_MAX_GATE1_PER_JOB,
-  PROPOSE_GATE1_ALLOWANCE_CHECKPOINT,
   QUARANTINE_ADD_FUNCTION_ID,
   QUARANTINE_LIST_FUNCTION_ID,
   QUARANTINE_RELEASE_FUNCTION_ID,
@@ -11102,7 +9795,6 @@ export {
   liveUrlOf,
   maybeCompact,
   mintLiveUrlToken,
-  parseProposeGate1Allowance,
   parseScenario,
   projectAuthoringFunnel,
   projectPlannerTools,