@warmdrift/kgauto-compiler 2.0.0-alpha.83 → 2.0.0-alpha.85

package/dist/index.js

@@ -27,6 +27,8 @@ __export(index_exports, {
   ALT_STRATEGY_IDS: () => ALT_STRATEGY_IDS,
   ARCHETYPE_FAMILY_FITS: () => ARCHETYPE_FAMILY_FITS,
   ARCHETYPE_FLOOR_DEFAULT: () => ARCHETYPE_FLOOR_DEFAULT,
+  BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE: () => BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE,
+  BLOCKED_MODEL_NOT_IN_ROSTER_CODE: () => BLOCKED_MODEL_NOT_IN_ROSTER_CODE,
   BRAIN_READ_ENV_NAMES: () => BRAIN_READ_ENV_NAMES,
   BURST_SPAN_MS: () => BURST_SPAN_MS,
   COACH_CFG: () => COACH_CFG,
@@ -168,6 +170,7 @@ __export(index_exports, {
   resetTokenizer: () => resetTokenizer,
   resolveConventionsForProfile: () => resolveConventionsForProfile,
   resolveGoldenCaptureRate: () => resolveGoldenCaptureRate,
+  resolveModelAlias: () => resolveModelAlias,
   resolvePricingAt: () => resolvePricingAt,
   resolveProviderKey: () => resolveProviderKey,
   rowToAdvisory: () => rowToAdvisory,
@@ -2024,6 +2027,9 @@ function _setProfileBrainHook(hook) {
 function canonicalId(id) {
   return brainHook.resolveAlias?.(id) ?? ALIASES[id] ?? id;
 }
+function resolveModelAlias(id) {
+  return canonicalId(id);
+}
 var PROFILE_INDEX = new Map(
   PROFILES_RAW.map((p) => [p.id, p])
 );
@@ -2523,6 +2529,17 @@ function resolveFamilyEntry(family, ctx) {
   return winner.id;
 }
 
+// src/policy-match.ts
+function canonicalPolicySet(ids) {
+  const set = /* @__PURE__ */ new Set();
+  for (const id of ids ?? []) set.add(resolveModelAlias(id));
+  return set;
+}
+function policySetHas(set, modelId) {
+  if (set.size === 0) return false;
+  return set.has(resolveModelAlias(modelId));
+}
+
 // src/tokenizer.ts
 var tokenizerImpl = defaultCharBasedCounter;
 function defaultCharBasedCounter(text) {
@@ -2918,8 +2935,8 @@ function effectiveConventions(profile) {
 function passScoreTargets(ir, opts) {
   const constraints = ir.constraints ?? {};
   const policy = opts.policy ?? {};
-  const blockedSet = new Set(policy.blockedModels ?? []);
-  const preferredSet = new Set(policy.preferredModels ?? []);
+  const blockedSet = canonicalPolicySet(policy.blockedModels);
+  const preferredSet = canonicalPolicySet(policy.preferredModels);
   const scores = [];
   const policyMutations = [];
   const rawPromotion = opts.promotion;
@@ -2942,7 +2959,7 @@ function passScoreTargets(ir, opts) {
       continue;
     }
     const reasons = [];
-    if (blockedSet.has(modelId)) {
+    if (policySetHas(blockedSet, modelId)) {
       reasons.push(`blocked_by_policy (consumer gated this model \u2014 see CompilePolicy.blockedModels)`);
     }
     if (opts.estimatedInputTokens > profile.maxContextTokens * 0.9) {
@@ -2972,7 +2989,7 @@ function passScoreTargets(ir, opts) {
     const qualityScore = Math.max(0, baseQuality - qualityPenalty);
     const callerOrderBoost = (modelIds.length - modelIds.indexOf(modelId)) * 0.1;
     const costPenalty = estimatedCostUsd * 5;
-    const preferredBoost = preferredSet.has(modelId) ? 0.5 : 0;
+    const preferredBoost = policySetHas(preferredSet, modelId) ? 0.5 : 0;
     let latencyPenalty = 0;
     const maxLatencyMs = constraints.maxLatencyMs;
     if (typeof maxLatencyMs === "number" && maxLatencyMs > 0) {
@@ -3029,7 +3046,7 @@ function passScoreTargets(ir, opts) {
         description: `Model ${modelId} excluded \u2014 estimated cost $${estimatedCostUsd.toFixed(4)} exceeds policy ceiling $${policy.maxCostPerCallUsd.toFixed(4)}`
       });
     }
-    if (preferredSet.has(modelId) && reasons.length === 0) {
+    if (policySetHas(preferredSet, modelId) && reasons.length === 0) {
       policyMutations.push({
         id: `policy-preferred-${modelId}`,
         source: "compile_policy",
@@ -4071,8 +4088,8 @@ function getDefaultFallbackChain(opts) {
     chain = [...starter];
   }
   if (policy?.blockedModels && policy.blockedModels.length > 0) {
-    const blocked = new Set(policy.blockedModels);
-    chain = chain.filter((id) => !blocked.has(id));
+    const blocked = canonicalPolicySet(policy.blockedModels);
+    chain = chain.filter((id) => !policySetHas(blocked, id));
   }
   const seen = /* @__PURE__ */ new Set();
   const deduped = [];
@@ -4175,8 +4192,8 @@ function getDefaultFallbackChainWithGrounding(opts) {
     chain = [...starter];
   }
   if (policy?.blockedModels && policy.blockedModels.length > 0) {
-    const blocked = new Set(policy.blockedModels);
-    chain = chain.filter((e) => !blocked.has(e.id));
+    const blocked = canonicalPolicySet(policy.blockedModels);
+    chain = chain.filter((e) => !policySetHas(blocked, e.id));
   }
   const seen = /* @__PURE__ */ new Set();
   const deduped = [];
@@ -5053,6 +5070,67 @@ function advisorRuleCrossFamilyFit(ctx) {
   ];
 }
 
+// src/advisor-rules/blocked-model-drift.ts
+var BLOCKED_MODEL_NOT_IN_ROSTER_CODE = "blocked-model-not-in-roster";
+var BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE = "blocked-model-family-sibling-served";
+var DOCS_URL = "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#best-practice-advisories";
+function familyOf2(modelId, profile) {
+  return profile?.family ?? deriveFamilyFromModelId(modelId);
+}
+function isOnTheWayOut(status) {
+  return status === "legacy" || status === "deprecated";
+}
+function advisorRuleBlockedModelDrift(ctx) {
+  const blocked = ctx.policy?.blockedModels;
+  if (!blocked || blocked.length === 0) return [];
+  const resolve = ctx.resolveProfile ?? tryGetProfile;
+  const out = [];
+  const entries = [...new Set(blocked)].sort();
+  const selectedProfile = resolve(ctx.selectedModelId);
+  const selectedFamily = familyOf2(ctx.selectedModelId, selectedProfile);
+  const orphans = entries.filter((e) => resolve(e) === void 0);
+  if (orphans.length > 0) {
+    const list = orphans.map((o) => `\`${o}\``).join(", ");
+    const plural = orphans.length === 1 ? "entry" : "entries";
+    const verb = orphans.length === 1 ? "matches" : "match";
+    out.push({
+      level: "warn",
+      code: BLOCKED_MODEL_NOT_IN_ROSTER_CODE,
+      message: `CompilePolicy.blockedModels ${plural} ${list} ${verb} no model in the current roster, so ${orphans.length === 1 ? "it is" : "they are"} inert \u2014 \`blockedModels\` is matched by exact model id, and nothing kgauto can select carries ${orphans.length === 1 ? "that id" : "those ids"}. The block will never fire.`,
+      suggestion: `Check for a typo, or for an id that was retired from the roster since the block was written. This is how a block goes quiet without an error: tt-intel (2026-07-29) carried \`KGAUTO_BLOCKED_MODELS="claude-sonnet-4-6"\` across a roster retarget and the block stopped covering the traffic they believed it covered. Resolve the intended model id against the live roster \u2014 \`getRecommendedPrimary({ family, fallback })\` returns the id the family currently resolves to \u2014 and block that id, or drop the entry if it is no longer needed.`,
+      docsUrl: DOCS_URL
+    });
+  }
+  if (selectedFamily !== null) {
+    const siblings = entries.filter((e) => {
+      if (resolveModelAlias(e) === resolveModelAlias(ctx.selectedModelId)) return false;
+      const p = resolve(e);
+      if (familyOf2(e, p) !== selectedFamily) return false;
+      if (p && selectedProfile && p.provider !== selectedProfile.provider) {
+        return false;
+      }
+      return true;
+    });
+    if (siblings.length > 0) {
+      const list = siblings.map((s) => `\`${s}\``).join(", ");
+      const plural = siblings.length === 1 ? "" : "s";
+      const retargetShaped = siblings.some((s) => {
+        const p = resolve(s);
+        return isOnTheWayOut(p?.status) && selectedProfile?.status === "current";
+      });
+      const retargetNote = retargetShaped ? ` The blocked id${plural} ${siblings.length === 1 ? "is" : "are"} legacy/deprecated while \`${ctx.selectedModelId}\` is current \u2014 that is the signature of a roster lifecycle move rather than a deliberate per-generation block, so this is more likely to be drift than intent.` : "";
+      out.push({
+        level: "warn",
+        code: BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE,
+        message: `\`${ctx.selectedModelId}\` was selected for this call. It is in the same family (\`${selectedFamily}\`) as blocked entr${siblings.length === 1 ? "y" : "ies"} ${list}, but its exact id differs \u2014 and \`CompilePolicy.blockedModels\` matches by exact id, so the block does not cover it.${retargetNote}`,
+        suggestion: `Two readings, and kgauto cannot tell them apart: (1) intentional \u2014 you meant to gate that specific id and \`${ctx.selectedModelId}\` is fine, in which case nothing needs doing and you can filter this code; (2) drift \u2014 you meant to gate the family, and a roster change moved traffic to a sibling your block never named. This happened to tt-intel: when the \`claude-sonnet\` family primary retargeted from \`claude-sonnet-4-6\` to \`claude-sonnet-5\`, their literal-id gate stopped matching the family's routed traffic (their fix was local family resolution). If you meant the family, add \`${ctx.selectedModelId}\` to \`blockedModels\` \u2014 kgauto deliberately does NOT widen exact-id blocks into family globs, because that would silently change what every existing block covers.`,
+        docsUrl: DOCS_URL
+      });
+    }
+  }
+  return out;
+}
+
 // src/advisor.ts
 var QUALITY_FLOOR_FOR_RECOMMENDATION = 6;
 var TIER_DOWN_COST_RATIO = 0.5;
@@ -5071,6 +5149,12 @@ function runAdvisor(ir, result, profile, policy, phase2) {
   out.push(...detectToolBloat(ir, result));
   out.push(...detectHistoryUncached(ir, profile));
   out.push(...detectSingleModelArray(ir, policy));
+  out.push(
+    ...advisorRuleBlockedModelDrift({
+      policy,
+      selectedModelId: profile.id
+    })
+  );
   if (policy?.posture !== "locked") {
     out.push(...detectCostMismatchedArchetype(ir, profile, phase2));
     out.push(...detectModelStaleEvidence(ir, profile));
@@ -5182,18 +5266,27 @@ function detectHistoryUncached(ir, profile) {
 function detectSingleModelArray(ir, policy) {
   if (ir.models.length !== 1) return [];
   if (policy?.posture === "locked") return [];
-  const only = ir.models[0];
+  const entry = ir.models[0];
+  const only = typeof entry === "string" ? entry : `family:${entry.family}`;
+  const blocked = canonicalPolicySet(policy?.blockedModels);
+  let alternatives = [];
+  try {
+    alternatives = getDefaultFallbackChain({
+      archetype: ir.intent.archetype,
+      primary: only,
+      posture: "preferred",
+      policy
+    }).filter((id) => resolveModelAlias(id) !== resolveModelAlias(only)).filter((id) => !policySetHas(blocked, id)).filter((id) => getModelCompatibility(id, { archetype: ir.intent.archetype }).status !== "reject");
+  } catch {
+  }
+  const hasAlternative = alternatives.length > 0;
+  const remedy = "Widen the chain AND pin your primary: `compile({ ...ir, models: getDefaultFallbackChain({ archetype: ir.intent.archetype, primary: '" + only + "', posture: 'preferred' }) }, { policy: { preferredModels: ['" + only + "'] } })`. The chain is a CANDIDATE SET \u2014 compile() scores it and does not honour its order, so without the `preferredModels` pin the extra entries can retarget your primary (and with it your cost profile). With the pin, `" + only + "` stays primary and the added entries serve only as the safety net. Note `posture` has no effect once `primary` is passed. If you gate models by spend, re-verify `policy.blockedModels` against the widened set before shipping. If single-model is intentional (compliance/brand promise), set `policy.posture = 'locked'` to silence this rule.";
   return [
     {
-      level: "warn",
+      level: hasAlternative ? "critical" : "warn",
       code: "single-model-array",
-      message: `\`ir.models\` has length 1 (only "${only}") and posture is not 'locked'. A single-model chain has no safety net \u2014 the first 429 / 5xx / cliff hits the user as a failure. Master plan \xA71.2 closes the reliability gap with a 2-step minimum.`,
-      // alpha.80: `posture: 'preferred'` keeps the consumer's current model at
-      // position 0 and is therefore cost-neutral; `'open'` re-picks the
-      // primary and is NOT. This rule is about reliability, not cost, so both
-      // stay on offer — but the cost consequence of the second is now stated,
-      // since a reliability fix should not silently become a repricing.
-      suggestion: "Use `getDefaultFallbackChain({ archetype: ir.intent.archetype, primary: '" + only + "', posture: 'preferred' })` for a user-anchored chain \u2014 this keeps `" + only + "` as your primary and only adds fallbacks, so your cost profile is unchanged. `getDefaultFallbackChain({ archetype, posture: 'open' })` instead lets the library pick the PRIMARY, ordered by archetype performance rather than cost \u2014 check what it returns before adopting it. If single-model is intentional (compliance/brand promise), set `policy.posture = 'locked'` to silence this rule.",
+      message: hasAlternative ? `\`ir.models\` has length 1 (only "${only}") for archetype "${ir.intent.archetype}" and posture is not 'locked'. A single-model chain has no safety net \u2014 the first 429 / 5xx / cliff hits the user as a failure \u2014 and a compatible, non-blocked alternative exists in the roster today (${alternatives[0]}), so this is critical: the missing safety net is adoptable now.` : `\`ir.models\` has length 1 (only "${only}") for archetype "${ir.intent.archetype}" and posture is not 'locked'. A single-model chain has no safety net \u2014 the first 429 / 5xx / cliff hits the user as a failure. No compatible non-blocked alternative is visible in the roster for this archetype, so this stays a warning.`,
+      suggestion: remedy,
       docsUrl: "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#single-model-array"
     }
   ];
@@ -5747,6 +5840,15 @@ function compile(ir, opts = {}) {
       sectionRewritesApplied
     }
   );
+  if (ir["policy"] !== void 0 && opts.policy === void 0) {
+    rawAdvisories.push({
+      level: "critical",
+      code: "policy-in-ir-ignored",
+      message: "The IR passed to compile() carries a `policy` field. `policy` belongs in the SECOND argument \u2014 `compile(ir, { policy })` \u2014 and inside the IR it is an unknown field that is completely ignored. If that policy names blockedModels, no block is being enforced on this call.",
+      suggestion: "Move it: `compile(ir, { policy: { ... } })`. If you also configure policy correctly elsewhere on this path, remove the IR copy so the next reader is not misled.",
+      docsUrl: "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#public-api"
+    });
+  }
   const advisories = rawAdvisories.map((a) => ({
     ...a,
     kgautoRequestId: handle,
@@ -5865,7 +5967,7 @@ function validateFinalFit(ir, profile, tokens) {
 }
 
 // src/version.ts
-var LIBRARY_VERSION = "2.0.0-alpha.83";
+var LIBRARY_VERSION = "2.0.0-alpha.85";
 
 // src/pricing-brain.ts
 function isPricingRow(x) {
@@ -7820,11 +7922,11 @@ async function call(ir, opts = {}) {
   }
   let policyBlockedFiltered;
   if (opts.policy?.blockedModels && opts.policy.blockedModels.length > 0) {
-    const blocked = new Set(opts.policy.blockedModels);
+    const blocked = canonicalPolicySet(opts.policy.blockedModels);
     const filtered = [];
     const dropped = [];
     for (const t of targetsToTry) {
-      if (blocked.has(t)) {
+      if (policySetHas(blocked, t)) {
         dropped.push(t);
       } else {
         filtered.push(t);
@@ -7864,10 +7966,18 @@ async function call(ir, opts = {}) {
   const failedProviders = /* @__PURE__ */ new Map();
   const sameModelRetryEnabled = opts.sameModelRetry ?? isSameModelRetryEnabledFromEnv();
   let retriedSameModel = false;
+  const pushAttempt = (attempt) => {
+    attempts.push(attempt);
+    if (attempt.status === "success") return;
+    try {
+      opts.onFailedAttempt?.(attempt);
+    } catch {
+    }
+  };
   for (let i = 0; i < targetsToTry.length; i++) {
     const targetModel = targetsToTry[i];
     if (opts.abortSignal?.aborted) {
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: "terminal",
         errorCode: "aborted",
@@ -7878,7 +7988,7 @@ async function call(ir, opts = {}) {
     const targetProfile = tryGetProfile(targetModel);
     const providerFailReason = targetProfile ? failedProviders.get(targetProfile.provider) : void 0;
     if (targetProfile && providerFailReason && !opts.noFallback) {
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: "terminal",
         errorCode: `${providerFailReason}_inferred`,
@@ -7897,7 +8007,7 @@ async function call(ir, opts = {}) {
           opts
         );
       } catch (err) {
-        attempts.push({
+        pushAttempt({
           model: targetModel,
           status: "terminal",
           errorCode: "compile_error",
@@ -7935,7 +8045,7 @@ async function call(ir, opts = {}) {
     }
     if (!validated.ok && isStructuredContractViolation(validated.errorCode) && sameModelRetryEnabled && !retriedSameModel && !retrySuppressionNote) {
       retriedSameModel = true;
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: validated.errorType,
         errorCode: validated.errorCode,
@@ -7950,7 +8060,7 @@ async function call(ir, opts = {}) {
       servedByRetry = true;
     }
     if (validated.ok) {
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: "success",
         ...servedByRetry ? { sameModelRetry: true } : {}
@@ -8068,7 +8178,7 @@ async function call(ir, opts = {}) {
         advisories: activeCompile.advisories
       };
     }
-    attempts.push({
+    pushAttempt({
       model: targetModel,
       status: validated.errorType,
       errorCode: validated.errorCode,
@@ -10588,6 +10698,8 @@ function compile2(ir, opts) {
   ALT_STRATEGY_IDS,
   ARCHETYPE_FAMILY_FITS,
   ARCHETYPE_FLOOR_DEFAULT,
+  BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE,
+  BLOCKED_MODEL_NOT_IN_ROSTER_CODE,
   BRAIN_READ_ENV_NAMES,
   BURST_SPAN_MS,
   COACH_CFG,
@@ -10729,6 +10841,7 @@ function compile2(ir, opts) {
   resetTokenizer,
   resolveConventionsForProfile,
   resolveGoldenCaptureRate,
+  resolveModelAlias,
   resolvePricingAt,
   resolveProviderKey,
   rowToAdvisory,

package/dist/index.mjs

@@ -19,7 +19,7 @@ import {
   LIBRARY_VERSION,
   createKeyHealthRoute,
   keyFingerprint
-} from "./chunk-QEFIAAE7.mjs";
+} from "./chunk-WXN7FNXP.mjs";
 import {
   ABSOLUTE_FLOOR,
   ARCHETYPE_FLOOR_DEFAULT,
@@ -27,6 +27,7 @@ import {
   COST_RANKING_REFERENCE_SHAPE,
   MEASURED_GROUNDING_MIN_N,
   PROVIDER_ENV_KEYS,
+  canonicalPolicySet,
   chainProviderSpread,
   configureBrainQuery,
   createBrainQueryCache,
@@ -52,9 +53,10 @@ import {
   loadArchetypePerfFromBrain,
   loadArchetypePerfNFromBrain,
   loadChainsFromBrain,
+  policySetHas,
   readBrainReadEnv,
   resolveProviderKey
-} from "./chunk-XPD4I3Q5.mjs";
+} from "./chunk-LO2JXTGG.mjs";
 import {
   ALIASES,
   LATENCY_TIER_MS,
@@ -64,8 +66,9 @@ import {
   getProfile,
   latencyTierOf,
   profilesByProvider,
+  resolveModelAlias,
   tryGetProfile
-} from "./chunk-VVRDFE6T.mjs";
+} from "./chunk-FD3NFXDC.mjs";
 import {
   emitAdvisoryFired,
   emitCompileDone,
@@ -767,8 +770,8 @@ function effectiveConventions(profile) {
 function passScoreTargets(ir, opts) {
   const constraints = ir.constraints ?? {};
   const policy = opts.policy ?? {};
-  const blockedSet = new Set(policy.blockedModels ?? []);
-  const preferredSet = new Set(policy.preferredModels ?? []);
+  const blockedSet = canonicalPolicySet(policy.blockedModels);
+  const preferredSet = canonicalPolicySet(policy.preferredModels);
   const scores = [];
   const policyMutations = [];
   const rawPromotion = opts.promotion;
@@ -791,7 +794,7 @@ function passScoreTargets(ir, opts) {
       continue;
     }
     const reasons = [];
-    if (blockedSet.has(modelId)) {
+    if (policySetHas(blockedSet, modelId)) {
       reasons.push(`blocked_by_policy (consumer gated this model \u2014 see CompilePolicy.blockedModels)`);
     }
     if (opts.estimatedInputTokens > profile.maxContextTokens * 0.9) {
@@ -821,7 +824,7 @@ function passScoreTargets(ir, opts) {
     const qualityScore = Math.max(0, baseQuality - qualityPenalty);
     const callerOrderBoost = (modelIds.length - modelIds.indexOf(modelId)) * 0.1;
     const costPenalty = estimatedCostUsd * 5;
-    const preferredBoost = preferredSet.has(modelId) ? 0.5 : 0;
+    const preferredBoost = policySetHas(preferredSet, modelId) ? 0.5 : 0;
     let latencyPenalty = 0;
     const maxLatencyMs = constraints.maxLatencyMs;
     if (typeof maxLatencyMs === "number" && maxLatencyMs > 0) {
@@ -878,7 +881,7 @@ function passScoreTargets(ir, opts) {
         description: `Model ${modelId} excluded \u2014 estimated cost $${estimatedCostUsd.toFixed(4)} exceeds policy ceiling $${policy.maxCostPerCallUsd.toFixed(4)}`
       });
     }
-    if (preferredSet.has(modelId) && reasons.length === 0) {
+    if (policySetHas(preferredSet, modelId) && reasons.length === 0) {
       policyMutations.push({
         id: `policy-preferred-${modelId}`,
         source: "compile_policy",
@@ -2361,6 +2364,67 @@ function advisorRuleCrossFamilyFit(ctx) {
   ];
 }
 
+// src/advisor-rules/blocked-model-drift.ts
+var BLOCKED_MODEL_NOT_IN_ROSTER_CODE = "blocked-model-not-in-roster";
+var BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE = "blocked-model-family-sibling-served";
+var DOCS_URL = "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#best-practice-advisories";
+function familyOf2(modelId, profile) {
+  return profile?.family ?? deriveFamilyFromModelId(modelId);
+}
+function isOnTheWayOut(status) {
+  return status === "legacy" || status === "deprecated";
+}
+function advisorRuleBlockedModelDrift(ctx) {
+  const blocked = ctx.policy?.blockedModels;
+  if (!blocked || blocked.length === 0) return [];
+  const resolve = ctx.resolveProfile ?? tryGetProfile;
+  const out = [];
+  const entries = [...new Set(blocked)].sort();
+  const selectedProfile = resolve(ctx.selectedModelId);
+  const selectedFamily = familyOf2(ctx.selectedModelId, selectedProfile);
+  const orphans = entries.filter((e) => resolve(e) === void 0);
+  if (orphans.length > 0) {
+    const list = orphans.map((o) => `\`${o}\``).join(", ");
+    const plural = orphans.length === 1 ? "entry" : "entries";
+    const verb = orphans.length === 1 ? "matches" : "match";
+    out.push({
+      level: "warn",
+      code: BLOCKED_MODEL_NOT_IN_ROSTER_CODE,
+      message: `CompilePolicy.blockedModels ${plural} ${list} ${verb} no model in the current roster, so ${orphans.length === 1 ? "it is" : "they are"} inert \u2014 \`blockedModels\` is matched by exact model id, and nothing kgauto can select carries ${orphans.length === 1 ? "that id" : "those ids"}. The block will never fire.`,
+      suggestion: `Check for a typo, or for an id that was retired from the roster since the block was written. This is how a block goes quiet without an error: tt-intel (2026-07-29) carried \`KGAUTO_BLOCKED_MODELS="claude-sonnet-4-6"\` across a roster retarget and the block stopped covering the traffic they believed it covered. Resolve the intended model id against the live roster \u2014 \`getRecommendedPrimary({ family, fallback })\` returns the id the family currently resolves to \u2014 and block that id, or drop the entry if it is no longer needed.`,
+      docsUrl: DOCS_URL
+    });
+  }
+  if (selectedFamily !== null) {
+    const siblings = entries.filter((e) => {
+      if (resolveModelAlias(e) === resolveModelAlias(ctx.selectedModelId)) return false;
+      const p = resolve(e);
+      if (familyOf2(e, p) !== selectedFamily) return false;
+      if (p && selectedProfile && p.provider !== selectedProfile.provider) {
+        return false;
+      }
+      return true;
+    });
+    if (siblings.length > 0) {
+      const list = siblings.map((s) => `\`${s}\``).join(", ");
+      const plural = siblings.length === 1 ? "" : "s";
+      const retargetShaped = siblings.some((s) => {
+        const p = resolve(s);
+        return isOnTheWayOut(p?.status) && selectedProfile?.status === "current";
+      });
+      const retargetNote = retargetShaped ? ` The blocked id${plural} ${siblings.length === 1 ? "is" : "are"} legacy/deprecated while \`${ctx.selectedModelId}\` is current \u2014 that is the signature of a roster lifecycle move rather than a deliberate per-generation block, so this is more likely to be drift than intent.` : "";
+      out.push({
+        level: "warn",
+        code: BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE,
+        message: `\`${ctx.selectedModelId}\` was selected for this call. It is in the same family (\`${selectedFamily}\`) as blocked entr${siblings.length === 1 ? "y" : "ies"} ${list}, but its exact id differs \u2014 and \`CompilePolicy.blockedModels\` matches by exact id, so the block does not cover it.${retargetNote}`,
+        suggestion: `Two readings, and kgauto cannot tell them apart: (1) intentional \u2014 you meant to gate that specific id and \`${ctx.selectedModelId}\` is fine, in which case nothing needs doing and you can filter this code; (2) drift \u2014 you meant to gate the family, and a roster change moved traffic to a sibling your block never named. This happened to tt-intel: when the \`claude-sonnet\` family primary retargeted from \`claude-sonnet-4-6\` to \`claude-sonnet-5\`, their literal-id gate stopped matching the family's routed traffic (their fix was local family resolution). If you meant the family, add \`${ctx.selectedModelId}\` to \`blockedModels\` \u2014 kgauto deliberately does NOT widen exact-id blocks into family globs, because that would silently change what every existing block covers.`,
+        docsUrl: DOCS_URL
+      });
+    }
+  }
+  return out;
+}
+
 // src/advisor.ts
 var QUALITY_FLOOR_FOR_RECOMMENDATION = 6;
 var TIER_DOWN_COST_RATIO = 0.5;
@@ -2379,6 +2443,12 @@ function runAdvisor(ir, result, profile, policy, phase2) {
   out.push(...detectToolBloat(ir, result));
   out.push(...detectHistoryUncached(ir, profile));
   out.push(...detectSingleModelArray(ir, policy));
+  out.push(
+    ...advisorRuleBlockedModelDrift({
+      policy,
+      selectedModelId: profile.id
+    })
+  );
   if (policy?.posture !== "locked") {
     out.push(...detectCostMismatchedArchetype(ir, profile, phase2));
     out.push(...detectModelStaleEvidence(ir, profile));
@@ -2490,18 +2560,27 @@ function detectHistoryUncached(ir, profile) {
 function detectSingleModelArray(ir, policy) {
   if (ir.models.length !== 1) return [];
   if (policy?.posture === "locked") return [];
-  const only = ir.models[0];
+  const entry = ir.models[0];
+  const only = typeof entry === "string" ? entry : `family:${entry.family}`;
+  const blocked = canonicalPolicySet(policy?.blockedModels);
+  let alternatives = [];
+  try {
+    alternatives = getDefaultFallbackChain({
+      archetype: ir.intent.archetype,
+      primary: only,
+      posture: "preferred",
+      policy
+    }).filter((id) => resolveModelAlias(id) !== resolveModelAlias(only)).filter((id) => !policySetHas(blocked, id)).filter((id) => getModelCompatibility(id, { archetype: ir.intent.archetype }).status !== "reject");
+  } catch {
+  }
+  const hasAlternative = alternatives.length > 0;
+  const remedy = "Widen the chain AND pin your primary: `compile({ ...ir, models: getDefaultFallbackChain({ archetype: ir.intent.archetype, primary: '" + only + "', posture: 'preferred' }) }, { policy: { preferredModels: ['" + only + "'] } })`. The chain is a CANDIDATE SET \u2014 compile() scores it and does not honour its order, so without the `preferredModels` pin the extra entries can retarget your primary (and with it your cost profile). With the pin, `" + only + "` stays primary and the added entries serve only as the safety net. Note `posture` has no effect once `primary` is passed. If you gate models by spend, re-verify `policy.blockedModels` against the widened set before shipping. If single-model is intentional (compliance/brand promise), set `policy.posture = 'locked'` to silence this rule.";
   return [
     {
-      level: "warn",
+      level: hasAlternative ? "critical" : "warn",
       code: "single-model-array",
-      message: `\`ir.models\` has length 1 (only "${only}") and posture is not 'locked'. A single-model chain has no safety net \u2014 the first 429 / 5xx / cliff hits the user as a failure. Master plan \xA71.2 closes the reliability gap with a 2-step minimum.`,
-      // alpha.80: `posture: 'preferred'` keeps the consumer's current model at
-      // position 0 and is therefore cost-neutral; `'open'` re-picks the
-      // primary and is NOT. This rule is about reliability, not cost, so both
-      // stay on offer — but the cost consequence of the second is now stated,
-      // since a reliability fix should not silently become a repricing.
-      suggestion: "Use `getDefaultFallbackChain({ archetype: ir.intent.archetype, primary: '" + only + "', posture: 'preferred' })` for a user-anchored chain \u2014 this keeps `" + only + "` as your primary and only adds fallbacks, so your cost profile is unchanged. `getDefaultFallbackChain({ archetype, posture: 'open' })` instead lets the library pick the PRIMARY, ordered by archetype performance rather than cost \u2014 check what it returns before adopting it. If single-model is intentional (compliance/brand promise), set `policy.posture = 'locked'` to silence this rule.",
+      message: hasAlternative ? `\`ir.models\` has length 1 (only "${only}") for archetype "${ir.intent.archetype}" and posture is not 'locked'. A single-model chain has no safety net \u2014 the first 429 / 5xx / cliff hits the user as a failure \u2014 and a compatible, non-blocked alternative exists in the roster today (${alternatives[0]}), so this is critical: the missing safety net is adoptable now.` : `\`ir.models\` has length 1 (only "${only}") for archetype "${ir.intent.archetype}" and posture is not 'locked'. A single-model chain has no safety net \u2014 the first 429 / 5xx / cliff hits the user as a failure. No compatible non-blocked alternative is visible in the roster for this archetype, so this stays a warning.`,
+      suggestion: remedy,
       docsUrl: "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#single-model-array"
     }
   ];
@@ -3055,6 +3134,15 @@ function compile(ir, opts = {}) {
       sectionRewritesApplied
     }
   );
+  if (ir["policy"] !== void 0 && opts.policy === void 0) {
+    rawAdvisories.push({
+      level: "critical",
+      code: "policy-in-ir-ignored",
+      message: "The IR passed to compile() carries a `policy` field. `policy` belongs in the SECOND argument \u2014 `compile(ir, { policy })` \u2014 and inside the IR it is an unknown field that is completely ignored. If that policy names blockedModels, no block is being enforced on this call.",
+      suggestion: "Move it: `compile(ir, { policy: { ... } })`. If you also configure policy correctly elsewhere on this path, remove the IR copy so the next reader is not misled.",
+      docsUrl: "https://github.com/stue/command-center/blob/main/interfaces/kgauto.md#public-api"
+    });
+  }
   const advisories = rawAdvisories.map((a) => ({
     ...a,
     kgautoRequestId: handle,
@@ -4824,11 +4912,11 @@ async function call(ir, opts = {}) {
   }
   let policyBlockedFiltered;
   if (opts.policy?.blockedModels && opts.policy.blockedModels.length > 0) {
-    const blocked = new Set(opts.policy.blockedModels);
+    const blocked = canonicalPolicySet(opts.policy.blockedModels);
     const filtered = [];
     const dropped = [];
     for (const t of targetsToTry) {
-      if (blocked.has(t)) {
+      if (policySetHas(blocked, t)) {
         dropped.push(t);
       } else {
         filtered.push(t);
@@ -4868,10 +4956,18 @@ async function call(ir, opts = {}) {
   const failedProviders = /* @__PURE__ */ new Map();
   const sameModelRetryEnabled = opts.sameModelRetry ?? isSameModelRetryEnabledFromEnv();
   let retriedSameModel = false;
+  const pushAttempt = (attempt) => {
+    attempts.push(attempt);
+    if (attempt.status === "success") return;
+    try {
+      opts.onFailedAttempt?.(attempt);
+    } catch {
+    }
+  };
   for (let i = 0; i < targetsToTry.length; i++) {
     const targetModel = targetsToTry[i];
     if (opts.abortSignal?.aborted) {
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: "terminal",
         errorCode: "aborted",
@@ -4882,7 +4978,7 @@ async function call(ir, opts = {}) {
     const targetProfile = tryGetProfile(targetModel);
     const providerFailReason = targetProfile ? failedProviders.get(targetProfile.provider) : void 0;
     if (targetProfile && providerFailReason && !opts.noFallback) {
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: "terminal",
         errorCode: `${providerFailReason}_inferred`,
@@ -4901,7 +4997,7 @@ async function call(ir, opts = {}) {
           opts
         );
       } catch (err) {
-        attempts.push({
+        pushAttempt({
           model: targetModel,
           status: "terminal",
           errorCode: "compile_error",
@@ -4939,7 +5035,7 @@ async function call(ir, opts = {}) {
     }
     if (!validated.ok && isStructuredContractViolation(validated.errorCode) && sameModelRetryEnabled && !retriedSameModel && !retrySuppressionNote) {
       retriedSameModel = true;
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: validated.errorType,
         errorCode: validated.errorCode,
@@ -4954,7 +5050,7 @@ async function call(ir, opts = {}) {
       servedByRetry = true;
     }
     if (validated.ok) {
-      attempts.push({
+      pushAttempt({
         model: targetModel,
         status: "success",
         ...servedByRetry ? { sameModelRetry: true } : {}
@@ -5072,7 +5168,7 @@ async function call(ir, opts = {}) {
         advisories: activeCompile.advisories
       };
     }
-    attempts.push({
+    pushAttempt({
       model: targetModel,
       status: validated.errorType,
       errorCode: validated.errorCode,
@@ -7216,6 +7312,8 @@ export {
   ALT_STRATEGY_IDS,
   ARCHETYPE_FAMILY_FITS,
   ARCHETYPE_FLOOR_DEFAULT,
+  BLOCKED_MODEL_FAMILY_SIBLING_SERVED_CODE,
+  BLOCKED_MODEL_NOT_IN_ROSTER_CODE,
   BRAIN_READ_ENV_NAMES,
   BURST_SPAN_MS,
   COACH_CFG,
@@ -7357,6 +7455,7 @@ export {
   resetTokenizer,
   resolveConventionsForProfile,
   resolveGoldenCaptureRate,
+  resolveModelAlias,
   resolvePricingAt,
   resolveProviderKey,
   rowToAdvisory,