@wipcomputer/wip-ldm-os 0.4.87-alpha.1 → 0.4.87-alpha.3

package/scripts/ldm-backup-policy.json

@@ -0,0 +1,1420 @@
+{
+  "schema_version": 1,
+  "rule_version": "slice1-2026-07-11",
+  "evidence_status_values": [
+    "complete",
+    "deferred-after-write-failure"
+  ],
+  "disk_floors": {
+    "warning_percent": 15,
+    "critical_percent": 10,
+    "emergency_percent": 5,
+    "start_reserve_percent": 10
+  },
+  "sources": [
+    {
+      "id": "ldm-crystal",
+      "root": "LDM_HOME",
+      "path": "memory/crystal.db",
+      "display_path": "$LDM_HOME/memory/crystal.db",
+      "destination": "ldm/memory/crystal.db",
+      "type": "sqlite",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-agents",
+      "root": "LDM_HOME",
+      "path": "agents",
+      "display_path": "$LDM_HOME/agents/",
+      "destination": "ldm/agents",
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": [
+        {"pattern": "**/*.lock", "reason": "transient lock", "reconstruction_source": "agent restart", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "ldm-shared",
+      "root": "LDM_HOME",
+      "path": "shared",
+      "display_path": "$LDM_HOME/shared/",
+      "destination": "ldm/shared",
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-hooks",
+      "root": "LDM_HOME",
+      "path": "hooks",
+      "display_path": "$LDM_HOME/hooks/",
+      "destination": "ldm/hooks",
+      "type": "tree",
+      "classification": ["required", "rebuildable"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-library",
+      "root": "LDM_HOME",
+      "path": "library",
+      "display_path": "$LDM_HOME/library/",
+      "destination": "ldm/library",
+      "type": "tree",
+      "classification": ["required", "rebuildable"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-templates",
+      "root": "LDM_HOME",
+      "path": "templates",
+      "display_path": "$LDM_HOME/templates/",
+      "destination": "ldm/templates",
+      "type": "tree",
+      "classification": ["required", "one-time-archive"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-catalog",
+      "root": "LDM_HOME",
+      "path": "catalog.json",
+      "display_path": "$LDM_HOME/catalog.json",
+      "destination": "ldm/catalog.json",
+      "type": "file",
+      "classification": ["required", "rebuildable"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-change-dependencies",
+      "root": "LDM_HOME",
+      "path": "change-dependencies.json",
+      "display_path": "$LDM_HOME/change-dependencies.json",
+      "destination": "ldm/change-dependencies.json",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-config-dependencies",
+      "root": "LDM_HOME",
+      "path": "config-dependencies.json",
+      "display_path": "$LDM_HOME/config-dependencies.json",
+      "destination": "ldm/config-dependencies.json",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-doc-dependencies",
+      "root": "LDM_HOME",
+      "path": "doc-dependencies.json",
+      "display_path": "$LDM_HOME/doc-dependencies.json",
+      "destination": "ldm/doc-dependencies.json",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-extension-registry",
+      "root": "LDM_HOME",
+      "path": "extensions/registry.json",
+      "display_path": "$LDM_HOME/extensions/registry.json",
+      "destination": "ldm/extensions/registry.json",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-config",
+      "root": "LDM_HOME",
+      "path": "config.json",
+      "display_path": "$LDM_HOME/config.json",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required while FileVault is off",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-state",
+      "root": "LDM_HOME",
+      "path": "state",
+      "display_path": "$LDM_HOME/state/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "field classification or artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-secrets",
+      "root": "LDM_HOME",
+      "path": "secrets",
+      "display_path": "$LDM_HOME/secrets/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "approved encrypted capture or tested reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-sessions",
+      "root": "LDM_HOME",
+      "path": "sessions",
+      "display_path": "$LDM_HOME/sessions/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-messages",
+      "root": "LDM_HOME",
+      "path": "messages",
+      "display_path": "$LDM_HOME/messages/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-local-git",
+      "root": "LDM_HOME",
+      "path": ".git",
+      "display_path": "$LDM_HOME/.git/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "one-time-archive"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "repo-aware Git refs, working-tree, and linked-worktree evidence generator is not implemented in Slice 2",
+      "exclusions": []
+    },
+    {
+      "id": "ldm-legacy-backups",
+      "root": "LDM_HOME",
+      "path": "backups",
+      "display_path": "$LDM_HOME/backups/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["one-time-archive", "excluded"],
+      "required": false,
+      "action": "exclude",
+      "exclusions": [
+        {"pattern": "backups/**", "reason": "prevent recursive backup", "reconstruction_source": "separate verified migration", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "ldm-trash",
+      "root": "LDM_HOME",
+      "path": "_trash",
+      "display_path": "$LDM_HOME/_trash/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["one-time-archive"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "_trash/**", "reason": "one-time archive required before recurring exclusion", "reconstruction_source": "verified Vault archival copy", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "ldm-logs",
+      "root": "LDM_HOME",
+      "path": "logs",
+      "display_path": "$LDM_HOME/logs/",
+      "destination": "ldm/logs",
+      "type": "tree",
+      "classification": ["required", "incident-evidence"],
+      "required": true,
+      "action": "capture",
+      "exclusions": [
+        {"pattern": "**/*.rotated", "reason": "bounded current evidence only after audit-bearing logs are named", "reconstruction_source": "verified bounded log archive", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "ldm-runtime-bin",
+      "root": "LDM_HOME",
+      "path": "bin",
+      "display_path": "$LDM_HOME/bin/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["rebuildable"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "bin/**", "reason": "immutable installed runtime is reconstructed from pinned packages; local deltas remain required", "reconstruction_source": "pinned LDM OS installer and extension registry", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "ldm-transient-runtime",
+      "root": "LDM_HOME",
+      "path": ".",
+      "display_path": "$LDM_HOME/[named caches, locks, sockets, and temp files]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["transient", "rebuildable"],
+      "required": false,
+      "action": "exclude",
+      "exclusions": [
+        {"pattern": "**/*.lock", "reason": "transient lock after mixed-content classification", "reconstruction_source": "owning process restart", "rule_version": "slice1-2026-07-11"},
+        {"pattern": "**/*.sock", "reason": "transient socket after mixed-content classification", "reconstruction_source": "owning process restart", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "openclaw-memory-main",
+      "root": "OPENCLAW_HOME",
+      "path": "memory/main.sqlite",
+      "display_path": "$OPENCLAW_HOME/memory/main.sqlite",
+      "destination": "openclaw/memory/main.sqlite",
+      "type": "sqlite",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-context-embeddings",
+      "root": "OPENCLAW_HOME",
+      "path": "memory/context-embeddings.sqlite",
+      "display_path": "$OPENCLAW_HOME/memory/context-embeddings.sqlite",
+      "destination": "openclaw/memory/context-embeddings.sqlite",
+      "type": "sqlite",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-workspace",
+      "root": "OPENCLAW_HOME",
+      "path": "workspace",
+      "display_path": "$OPENCLAW_HOME/workspace/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "encrypted compact capture is required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-agents",
+      "root": "OPENCLAW_HOME",
+      "path": "agents",
+      "display_path": "$OPENCLAW_HOME/agents/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-config",
+      "root": "OPENCLAW_HOME",
+      "path": "openclaw.json",
+      "display_path": "$OPENCLAW_HOME/openclaw.json",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-credentials",
+      "root": "OPENCLAW_HOME",
+      "path": "credentials",
+      "display_path": "$OPENCLAW_HOME/credentials/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-secrets",
+      "root": "OPENCLAW_HOME",
+      "path": "secrets",
+      "display_path": "$OPENCLAW_HOME/secrets/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-identity",
+      "root": "OPENCLAW_HOME",
+      "path": "identity",
+      "display_path": "$OPENCLAW_HOME/identity/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-devices",
+      "root": "OPENCLAW_HOME",
+      "path": "devices",
+      "display_path": "$OPENCLAW_HOME/devices/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-state",
+      "root": "OPENCLAW_HOME",
+      "path": "state",
+      "display_path": "$OPENCLAW_HOME/state/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "mutable state requires file-type classification",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-legacy-sqlite",
+      "root": "OPENCLAW_HOME",
+      "path": ".",
+      "display_path": "$OPENCLAW_HOME/[legacy top-level *.sqlite]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "legacy SQLite locations require exact path inventory and SQLite-safe capture",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-approval-state",
+      "root": "OPENCLAW_HOME",
+      "path": "approvals",
+      "display_path": "$OPENCLAW_HOME/approvals/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption and approval-state classification are required",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-cron",
+      "root": "OPENCLAW_HOME",
+      "path": "cron",
+      "display_path": "$OPENCLAW_HOME/cron/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "scheduled state requires file-type classification",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-tasks",
+      "root": "OPENCLAW_HOME",
+      "path": "tasks",
+      "display_path": "$OPENCLAW_HOME/tasks/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "task continuity state requires file-type classification",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-subagents",
+      "root": "OPENCLAW_HOME",
+      "path": "subagents",
+      "display_path": "$OPENCLAW_HOME/subagents/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "subagent continuity state requires file-type classification",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-delivery-queue",
+      "root": "OPENCLAW_HOME",
+      "path": "delivery-queue",
+      "display_path": "$OPENCLAW_HOME/delivery-queue/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "queue capture requires schema-aware acknowledged-state classification",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-plugin-mutable-data",
+      "root": "OPENCLAW_HOME",
+      "path": "extensions",
+      "display_path": "$OPENCLAW_HOME/extensions/[plugin-owned mutable data]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "mutable plugin data must be separated from rebuildable code",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-media",
+      "root": "OPENCLAW_HOME",
+      "path": "media",
+      "display_path": "$OPENCLAW_HOME/media/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "remote reconstruction and local-artifact deltas must be proven",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-local-git",
+      "root": "OPENCLAW_HOME",
+      "path": ".git",
+      "display_path": "$OPENCLAW_HOME/.git/ and .worktrees/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "one-time-archive"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "repo-aware Git refs, working-tree, and linked-worktree evidence generator is not implemented in Slice 2",
+      "exclusions": []
+    },
+    {
+      "id": "openclaw-installed-code",
+      "root": "OPENCLAW_HOME",
+      "path": "extensions",
+      "display_path": "$OPENCLAW_HOME/extensions/[immutable code]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["rebuildable"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "extensions/**", "reason": "immutable code reconstructed from pinned packages", "reconstruction_source": "pinned ldm install and OpenClaw package versions", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "openclaw-transient-runtime",
+      "root": "OPENCLAW_HOME",
+      "path": ".",
+      "display_path": "$OPENCLAW_HOME/[logs, caches, browser cache, sockets, and locks]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["transient", "incident-evidence"],
+      "required": false,
+      "action": "exclude",
+      "exclusions": [
+        {"pattern": "**/*.lock", "reason": "transient lock after audit evidence is separated", "reconstruction_source": "OpenClaw restart", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "openclaw-legacy-artifacts",
+      "root": "OPENCLAW_HOME",
+      "path": ".",
+      "display_path": "$OPENCLAW_HOME/[_trash, _snapshots, config backups, workspace copy]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["one-time-archive"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "_trash/**", "reason": "one-time archive pending disposition", "reconstruction_source": "verified archive and migration inventory", "rule_version": "slice1-2026-07-11"},
+        {"pattern": "_snapshots/**", "reason": "one-time archive pending disposition", "reconstruction_source": "verified archive and migration inventory", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "claude-projects",
+      "root": "CLAUDE_HOME",
+      "path": "projects",
+      "display_path": "$CLAUDE_HOME/projects/",
+      "destination": "claude/projects",
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": [
+        {"pattern": "**/*.lock", "reason": "transient lock", "reconstruction_source": "Claude restart", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "claude-history",
+      "root": "CLAUDE_HOME",
+      "path": "history.jsonl",
+      "display_path": "$CLAUDE_HOME/history.jsonl",
+      "destination": "claude/history.jsonl",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "claude-file-history",
+      "root": "CLAUDE_HOME",
+      "path": "file-history",
+      "display_path": "$CLAUDE_HOME/file-history/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-settings",
+      "root": "CLAUDE_HOME",
+      "path": "settings.json",
+      "display_path": "$CLAUDE_HOME/settings.json",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-sessions",
+      "root": "CLAUDE_HOME",
+      "path": "sessions",
+      "display_path": "$CLAUDE_HOME/sessions/",
+      "destination": "claude/sessions",
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "claude-plans",
+      "root": "CLAUDE_HOME",
+      "path": "plans",
+      "display_path": "$CLAUDE_HOME/plans/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-tasks",
+      "root": "CLAUDE_HOME",
+      "path": "tasks",
+      "display_path": "$CLAUDE_HOME/tasks/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-jobs",
+      "root": "CLAUDE_HOME",
+      "path": "jobs",
+      "display_path": "$CLAUDE_HOME/jobs/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-session-environment",
+      "root": "CLAUDE_HOME",
+      "path": "session-env",
+      "display_path": "$CLAUDE_HOME/session-env/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "recoverable session environment requires field classification and encryption",
+      "exclusions": []
+    },
+    {
+      "id": "claude-primary-instructions",
+      "root": "CLAUDE_HOME",
+      "path": "CLAUDE.md",
+      "display_path": "$CLAUDE_HOME/CLAUDE.md",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-repo-instructions",
+      "root": "CLAUDE_HOME",
+      "path": "REPO.md",
+      "display_path": "$CLAUDE_HOME/REPO.md",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-readme",
+      "root": "CLAUDE_HOME",
+      "path": "README.md",
+      "display_path": "$CLAUDE_HOME/README.md",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "claude-mcp-config",
+      "root": "CLAUDE_HOME",
+      "path": ".mcp.json",
+      "display_path": "$CLAUDE_HOME/.mcp.json",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "authority-bearing MCP configuration requires encryption",
+      "exclusions": []
+    },
+    {
+      "id": "claude-rules",
+      "root": "CLAUDE_HOME",
+      "path": "rules",
+      "display_path": "$CLAUDE_HOME/rules/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "local rules require encrypted capture",
+      "exclusions": []
+    },
+    {
+      "id": "claude-skills",
+      "root": "CLAUDE_HOME",
+      "path": "skills",
+      "display_path": "$CLAUDE_HOME/skills/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "local skills and deltas require encrypted capture",
+      "exclusions": []
+    },
+    {
+      "id": "claude-plugin-manifests",
+      "root": "CLAUDE_HOME",
+      "path": "plugins",
+      "display_path": "$CLAUDE_HOME/plugins/[manifests and selections]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "plugin selections, pins, and local changes require classification",
+      "exclusions": []
+    },
+    {
+      "id": "claude-local-git",
+      "root": "CLAUDE_HOME",
+      "path": ".git",
+      "display_path": "$CLAUDE_HOME/.git/ and .worktrees/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "repo-aware Git refs, working-tree, and linked-worktree evidence generator is not implemented in Slice 2",
+      "exclusions": []
+    },
+    {
+      "id": "claude-transient-runtime",
+      "root": "CLAUDE_HOME",
+      "path": ".",
+      "display_path": "$CLAUDE_HOME/[download, paste, browser, debug, telemetry, cache, shell snapshots]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["transient", "blocked"],
+      "required": false,
+      "action": "blocked",
+      "block_reason": "mixed-content classifier must rule out user-authored content before exclusion",
+      "exclusions": []
+    },
+    {
+      "id": "claude-backups",
+      "root": "CLAUDE_HOME",
+      "path": "backups",
+      "display_path": "$CLAUDE_HOME/backups/ and old settings copies",
+      "destination": null,
+      "type": "tree",
+      "classification": ["one-time-archive"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "backups/**", "reason": "one-time archive before recurring exclusion", "reconstruction_source": "verified archive inventory", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "codex-sessions",
+      "root": "CODEX_HOME",
+      "path": "sessions",
+      "display_path": "$CODEX_HOME/sessions/",
+      "destination": "codex/sessions",
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-session-index",
+      "root": "CODEX_HOME",
+      "path": "session_index.jsonl",
+      "display_path": "$CODEX_HOME/session_index.jsonl",
+      "destination": "codex/session_index.jsonl",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-history",
+      "root": "CODEX_HOME",
+      "path": "history.jsonl",
+      "display_path": "$CODEX_HOME/history.jsonl",
+      "destination": "codex/history.jsonl",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-memories",
+      "root": "CODEX_HOME",
+      "path": "memories",
+      "display_path": "$CODEX_HOME/memories/",
+      "destination": "codex/memories",
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-memory-index",
+      "root": "CODEX_HOME",
+      "path": "memories_1.sqlite",
+      "display_path": "$CODEX_HOME/memories_1.sqlite",
+      "destination": "codex/memories_1.sqlite",
+      "type": "sqlite",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-config",
+      "root": "CODEX_HOME",
+      "path": "config.toml",
+      "display_path": "$CODEX_HOME/config.toml",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "codex-auth",
+      "root": "CODEX_HOME",
+      "path": "auth.json",
+      "display_path": "$CODEX_HOME/auth.json",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "approved encrypted capture or tested credential reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "codex-agents-instructions",
+      "root": "CODEX_HOME",
+      "path": "AGENTS.md",
+      "display_path": "$CODEX_HOME/AGENTS.md",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "codex-rules",
+      "root": "CODEX_HOME",
+      "path": "rules",
+      "display_path": "$CODEX_HOME/rules/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "codex-skills",
+      "root": "CODEX_HOME",
+      "path": "skills",
+      "display_path": "$CODEX_HOME/skills/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required",
+      "exclusions": []
+    },
+    {
+      "id": "codex-plugins",
+      "root": "CODEX_HOME",
+      "path": "plugins",
+      "display_path": "$CODEX_HOME/plugins/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "plugin selections, pins, and local deltas require encrypted capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-global-state",
+      "root": "CODEX_HOME",
+      "path": "state",
+      "display_path": "$CODEX_HOME/state/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "global state requires file-type classification and encryption",
+      "exclusions": []
+    },
+    {
+      "id": "codex-state-databases",
+      "root": "CODEX_HOME",
+      "path": ".",
+      "display_path": "$CODEX_HOME/[state SQLite databases]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "exact SQLite paths require inventory and SQLite backup capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-goals-databases",
+      "root": "CODEX_HOME",
+      "path": ".",
+      "display_path": "$CODEX_HOME/[goals SQLite databases]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "exact SQLite paths require inventory and SQLite backup capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-logs-databases",
+      "root": "CODEX_HOME",
+      "path": ".",
+      "display_path": "$CODEX_HOME/[logs SQLite databases]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "exact SQLite paths require inventory and SQLite backup capture",
+      "exclusions": []
+    },
+    {
+      "id": "codex-pets",
+      "root": "CODEX_HOME",
+      "path": "pets",
+      "display_path": "$CODEX_HOME/pets/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "remote reconstruction and artifact delta classification are required",
+      "exclusions": []
+    },
+    {
+      "id": "codex-generated-artifacts",
+      "root": "CODEX_HOME",
+      "path": ".",
+      "display_path": "$CODEX_HOME/[generated images and user-created artifacts]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "duplicate proof and local-artifact delta capture are required",
+      "exclusions": []
+    },
+    {
+      "id": "codex-transient-runtime",
+      "root": "CODEX_HOME",
+      "path": ".",
+      "display_path": "$CODEX_HOME/[app-server controls, locks, temp files, model and vendor caches]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["transient", "rebuildable"],
+      "required": false,
+      "action": "exclude",
+      "exclusions": [
+        {"pattern": "**/*.lock", "reason": "transient app-server control", "reconstruction_source": "Codex restart", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "codex-local-git",
+      "root": "CODEX_HOME",
+      "path": ".git",
+      "display_path": "$CODEX_HOME/.git/ if tracked",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": ".git/**", "reason": "remote proof and local delta policy required if tracked", "reconstruction_source": "verified remote refs plus encrypted delta", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "home-ssh",
+      "root": "HOME",
+      "path": ".ssh",
+      "display_path": "$HOME/.ssh/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "approved encrypted capture or tested SSH reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "home-gnupg",
+      "root": "HOME",
+      "path": ".gnupg",
+      "display_path": "$HOME/.gnupg/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "approved encrypted capture or tested OpenPGP reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "home-config",
+      "root": "HOME",
+      "path": ".config",
+      "display_path": "$HOME/.config/[mixed-sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "per-application classification and encrypted capture are required",
+      "exclusions": []
+    },
+    {
+      "id": "home-npmrc",
+      "root": "HOME",
+      "path": ".npmrc",
+      "display_path": "$HOME/.npmrc",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "approved encrypted capture or tested npm credential reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "home-gitconfig",
+      "root": "HOME",
+      "path": ".gitconfig",
+      "display_path": "$HOME/.gitconfig",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "encrypted capture or tested dotfile reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "home-zshrc",
+      "root": "HOME",
+      "path": ".zshrc",
+      "display_path": "$HOME/.zshrc",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "encrypted capture or tested shell reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "home-keychains",
+      "root": "HOME",
+      "path": "Library/Keychains",
+      "display_path": "$HOME/Library/Keychains/[sensitive]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "approved encrypted capture or tested Keychain reconstruction is required",
+      "exclusions": []
+    },
+    {
+      "id": "launchagent-backup",
+      "root": "HOME",
+      "path": "Library/LaunchAgents/ai.openclaw.ldm-backup.plist",
+      "display_path": "$HOME/Library/LaunchAgents/ai.openclaw.ldm-backup.plist",
+      "destination": "system/LaunchAgents/ai.openclaw.ldm-backup.plist",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "launchagent-healthcheck",
+      "root": "HOME",
+      "path": "Library/LaunchAgents/ai.openclaw.healthcheck.plist",
+      "display_path": "$HOME/Library/LaunchAgents/ai.openclaw.healthcheck.plist",
+      "destination": "system/LaunchAgents/ai.openclaw.healthcheck.plist",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "launchagent-gateway",
+      "root": "HOME",
+      "path": "Library/LaunchAgents/ai.openclaw.gateway.plist",
+      "display_path": "$HOME/Library/LaunchAgents/ai.openclaw.gateway.plist",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "sensitive", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "artifact encryption is required for authority-bearing arguments",
+      "exclusions": []
+    },
+    {
+      "id": "workspace-local-state",
+      "root": "WORKSPACE",
+      "path": ".",
+      "display_path": "$WORKSPACE/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "Git remote proof and local-delta classification are required",
+      "exclusions": [
+        {"pattern": "**/node_modules/**", "reason": "package dependency", "reconstruction_source": "project lockfile and declared package manager", "rule_version": "slice1-2026-07-11"},
+        {"pattern": "**/.git/objects/**", "reason": "remote-clean Git objects only", "reconstruction_source": "recorded remote commit after object proof", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "workspace-repo-inventory",
+      "root": "WORKSPACE",
+      "path": "repos/repos-manifest.json",
+      "display_path": "$WORKSPACE/repos/repos-manifest.json plus discovered repos",
+      "destination": null,
+      "type": "file",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "manifest reconciliation and discovered-repo inventory are required",
+      "exclusions": []
+    },
+    {
+      "id": "workspace-remote-tracked",
+      "root": "WORKSPACE",
+      "path": ".",
+      "display_path": "$WORKSPACE/[remote-confirmed tracked files]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["rebuildable"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "**/.git/objects/**", "reason": "remote-confirmed tracked objects are rebuildable", "reconstruction_source": "recorded remote URL and commit after object proof", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "workspace-uncommitted-state",
+      "root": "WORKSPACE",
+      "path": ".",
+      "display_path": "$WORKSPACE/[uncommitted, untracked, ignored-user-owned, stashed, and unpushed state]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "repo-aware delta classifier is required",
+      "exclusions": []
+    },
+    {
+      "id": "workspace-worktrees",
+      "root": "WORKSPACE",
+      "path": ".worktrees",
+      "display_path": "$WORKSPACE/.worktrees/ and linked worktrees",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "parent repo, branch, HEAD, dirty state, and delta capture are required",
+      "exclusions": []
+    },
+    {
+      "id": "workspace-dependency-caches",
+      "root": "WORKSPACE",
+      "path": ".",
+      "display_path": "$WORKSPACE/[node_modules, package stores, dependency caches]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["rebuildable"],
+      "required": false,
+      "action": "exclude",
+      "exclusions": [
+        {"pattern": "**/node_modules/**", "reason": "rebuildable dependency", "reconstruction_source": "project lockfile and declared package manager", "rule_version": "slice1-2026-07-11"},
+        {"pattern": "**/.pnpm-store/**", "reason": "rebuildable dependency cache", "reconstruction_source": "project lockfile and declared package manager", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "workspace-compiled-output",
+      "root": "WORKSPACE",
+      "path": ".",
+      "display_path": "$WORKSPACE/[compiled output]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["rebuildable", "blocked"],
+      "required": false,
+      "action": "blocked",
+      "block_reason": "source, toolchain, and build command proof are required before exclusion",
+      "exclusions": []
+    },
+    {
+      "id": "workspace-third-party-clones",
+      "root": "WORKSPACE",
+      "path": "repos/third-party-repos",
+      "display_path": "$WORKSPACE/repos/third-party-repos/[remote-clean clones]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["rebuildable"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "**/.git/objects/**", "reason": "remote-clean third-party objects are rebuildable", "reconstruction_source": "recorded upstream URL and commit", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "workspace-temp-roots",
+      "root": "WORKSPACE",
+      "path": ".",
+      "display_path": "$WORKSPACE/[_tmp and temp-named roots]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["transient", "blocked"],
+      "required": false,
+      "action": "blocked",
+      "block_reason": "path inspection must prove no user state before exclusion",
+      "exclusions": []
+    },
+    {
+      "id": "workspace-trash",
+      "root": "WORKSPACE",
+      "path": "_trash",
+      "display_path": "$WORKSPACE/_trash/ and historical backup roots",
+      "destination": null,
+      "type": "tree",
+      "classification": ["one-time-archive"],
+      "required": false,
+      "action": "manifest",
+      "exclusions": [
+        {"pattern": "_trash/**", "reason": "one-time verified archive required", "reconstruction_source": "verified Vault archive and migration record", "rule_version": "slice1-2026-07-11"}
+      ]
+    },
+    {
+      "id": "workspace-root-git",
+      "root": "WORKSPACE",
+      "path": ".git",
+      "display_path": "$WORKSPACE/.git/ and root .worktrees/",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "blocked"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "remote proof, local refs, and root worktree delta capture are required",
+      "exclusions": []
+    },
+    {
+      "id": "system-installed-versions",
+      "root": "LDM_HOME",
+      "path": "extensions/registry.json",
+      "display_path": "$LDM_HOME/[extension registry, package manifests, lockfiles, installed versions]",
+      "destination": "system/installed-versions/registry.json",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    },
+    {
+      "id": "system-macos-manifest",
+      "root": "HOME",
+      "path": ".",
+      "display_path": "[macOS version, architecture, hostname role, volume UUIDs, filesystem, encryption]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "macOS system-profile evidence generator is not implemented in Slice 2",
+      "exclusions": []
+    },
+    {
+      "id": "system-onepassword-bootstrap",
+      "root": "HOME",
+      "path": ".",
+      "display_path": "[out-of-band 1Password bootstrap authority]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["required", "sensitive"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "out-of-band 1Password bootstrap proof generator is not implemented in Slice 2",
+      "exclusions": []
+    },
+    {
+      "id": "system-package-inventories",
+      "root": "HOME",
+      "path": ".",
+      "display_path": "[Homebrew, npm, Python, and other package inventories]",
+      "destination": null,
+      "type": "tree",
+      "classification": ["rebuildable"],
+      "required": true,
+      "action": "blocked",
+      "block_reason": "package inventory evidence generator is not implemented in Slice 2",
+      "exclusions": []
+    },
+    {
+      "id": "system-reconstruction-runbook",
+      "root": "LDM_HOME",
+      "path": "library/documentation/how-backup-works.md",
+      "display_path": "$LDM_HOME/library/documentation/how-backup-works.md",
+      "destination": "system/reconstruction/how-backup-works.md",
+      "type": "file",
+      "classification": ["required"],
+      "required": true,
+      "action": "capture",
+      "exclusions": []
+    }
+  ]
+}