agentera 3.0.0-dev.7 → 3.0.0-dev.72

package/bundle/references/artifacts/glossary-entry-contract.yaml

@@ -0,0 +1,1254 @@
+schema_version: agentera.glossaryEntryContract.v1
+status: active_authority
+purpose: >-
+  Define glossary entry semantics once, specialize evidence ownership for
+  personal and project entries, and declare one consumer-semantics and caveat
+  lifecycle contract with bounded acquisition and shared advice resolution.
+  Build, Discuss, Plan, and prime consumption are active. Build alone owns
+  durable caveat publication; prime projects only bounded review attention.
+
+authority:
+  source: references/artifacts/glossary-entry-contract.yaml
+  confidence: skills/agentera/protocol.yaml#CONFIDENCE_SCALE
+  personal_history: references/analysis/evidence-tier-authority.yaml
+  permanence_decay: packages/cli/src/capabilities/profile/instructions.ts#Profile-format
+  single_source_rule: >-
+    Producers and consumers derive entry shape from shared_primitive and must
+    not restate confidence bands, decay constants, or provenance variants.
+
+shared_primitive:
+  required_fields: [term, meaning, confidence, permanence, temporal, provenance]
+  fields:
+    term:
+      type: non_empty_string
+    meaning:
+      type: non_empty_string
+    confidence:
+      type: integer
+      range_from: skills/agentera/protocol.yaml#CONFIDENCE_SCALE
+    permanence:
+      type: enum
+      values: [stable, durable, situational]
+      classification_rule: >-
+        Classify expected persistence independently from evidence strength.
+        Confidence changes never reclassify permanence.
+    temporal:
+      type: object
+      required_fields: [observed_at, last_confirmed_at]
+      field_type: iso_date
+    provenance:
+      type: discriminated_union
+      discriminator: kind
+      evidence_field: evidence
+      variants_from: provenance_variants
+
+term_occurrence:
+  runtime: packages/cli/src/registries/glossaryTermOccurrence.ts#containsGlossaryTerm
+  consumers: [audit_evidence, project_publication_revalidation, confirmed_variant_guard]
+  comparison: exact_case_sensitive_literal
+  normalization: none
+  identifier_continuation: unicode_ID_Continue_plus_dollar_ZWNJ_ZWJ
+  rule: >-
+    Match one escaped literal without case folding or Unicode normalization.
+    When a term edge is an identifier-continuation character, reject an
+    occurrence adjacent to Unicode ID_Continue, dollar sign, U+200C ZERO WIDTH
+    NON-JOINER, or U+200D ZERO WIDTH JOINER. These are the ECMAScript identifier
+    continuation characters relevant to source-line terminology boundaries.
+    Literal escaping and fixed-width boundary assertions prevent regex syntax,
+    partial identifier matches, and input-dependent backtracking.
+
+provenance_variants:
+  personal_explicit_definition:
+    owner: personal
+    evidence_count: 1
+    required_evidence_fields: [source_id, evidence_anchor, signal_type]
+    additional_evidence_fields: forbidden
+    allowed_signal_types: [correction, decision, instruction]
+    resolution_rule: >-
+      evidence_anchor resolves to source_id of exactly one retained
+      full-evidence shard through the bounded signal tier. One such distinct
+      retained record is sufficient; unanchored or unresolved evidence fails.
+  personal_inferred_usage:
+    owner: personal
+    evidence_count: 2
+    required_evidence_fields: [source_id, evidence_anchor, source_kind]
+    additional_evidence_fields: forbidden
+    allowed_source_kinds: [instruction_document, project_config_signal]
+    resolution_rule: >-
+      Each evidence_anchor resolves to its source_id in retained full evidence.
+      Both source_id and evidence_anchor must be pairwise distinct, so two
+      signals or anchors resolving to one retained record fail. Both anchors
+      remain exposed on the entry.
+  project_file:
+    owner: project
+    evidence_count: 1
+    required_evidence_fields: [source_path, source_record_sha256]
+    additional_evidence_fields: forbidden
+    resolution_rule: >-
+      source_path is a safe project-relative path and source_record_sha256 is
+      the lowercase SHA-256 of the cited parsed source record. These reuse the
+      repository source-path and record-digest provenance vocabulary from
+      references/artifacts/state-storage-authority.yaml.
+
+ownership_contracts:
+  personal:
+    scope: user
+    implementation:
+      status: active_partial
+      active:
+        - bounded_admission
+        - explicit_classification
+        - inferred_evidence_check
+        - profile_full_rendering
+        - profile_persistence
+      inactive: [lookup]
+    allowed_provenance:
+      - personal_explicit_definition
+      - personal_inferred_usage
+    input:
+      tier: signal
+      authority: references/analysis/evidence-tier-authority.yaml
+      bounded_rule: >-
+        Admit only bounded personal-history signals and resolve qualifying
+        evidence one anchor at a time to retained full-evidence shards. Never
+        scan unbounded history or load a monolithic corpus.
+      excluded_categories:
+        - project_glossary_artifact_identity
+        - project_glossary_path
+        - project_glossary_record
+        - project_file_provenance
+    admission:
+      explicit:
+        candidate_signal_types: [correction, decision]
+        language_rule: >-
+          Admit only a quoted or code-delimited term followed by explicit
+          `means` language, or clarification language that combines `to clarify`
+          with `prefer` and `to mean`. The classifier returns the stated term
+          and meaning; unrelated correction or decision language abstains.
+        evidence_count: 1
+      inferred:
+        candidate_signal_types: [instruction, configuration]
+        source_kinds: [instruction_document, project_config_signal]
+        identity_rule: >-
+          A requested term must occur as a complete case-insensitive token in
+          two pairwise-distinct retained source identities and anchors. Duplicate
+          identities or anchors fail and successful admission exposes both.
+        evidence_count: 2
+      read_rule: >-
+        Read the bounded signal tier once, select only authority-declared signal
+        types and source kinds, and resolve each selected evidence_anchor through
+        direct single-shard retrieval. Never iterate full history or read legacy
+        corpus.json. Missing, legacy, corrupt, or insufficient evidence returns
+        deterministic recovery without a candidate.
+      insufficient_recovery: >-
+        Refresh bounded local-history evidence or provide another distinct
+        qualifying record; no personal glossary candidate was admitted.
+      isolation_rule: >-
+        Admission accepts only the personal tiers directory and optional legacy
+        corpus location. It has no project-glossary identity, path, or record
+        input, and its result is invariant to project-glossary presence.
+    retention_and_decay:
+      retention: Retained entries decay rather than disappearing solely because evidence ages.
+      confidence: Apply the existing profile permanence decay class to integer confidence.
+      permanence: Remains independently classified and is not changed by evidence age or confidence decay.
+      authority: packages/cli/src/capabilities/profile/instructions.ts#Profile-format
+    profile_output:
+      owner: profile_full
+      lifecycle_callable: packages/cli/src/analytics/personalGlossaryProfile.ts#updatePersonalGlossaryProfile
+      command:
+        canonical: npx -y agentera@next report profile-glossary
+        namespace: report
+        input_flag: --input
+        stdin_value: "-"
+        format: json
+        dry_run_flag: --dry-run
+        project_checkout: not_required
+        request:
+          schema_version: agentera.personalGlossaryUpdateRequest.v1
+          required_fields: [schema_version, profile_path, as_of, fresh_entries, retained_history]
+          additional_fields: forbidden
+          profile_path_rule: >-
+            Pass exactly profile_context.profile.path returned by
+            npx -y agentera@next prime --context profile --format json. The command never
+            discovers a profile, project root, or project glossary.
+          retained_history_shape: >-
+            A list of source_id, evidence_anchor, source_kind, and signal_type
+            records sufficient to validate fresh admitted entries. It may be
+            empty when regeneration supplies no fresh entries because retained
+            entries carry persisted provenance.
+        output_statuses: [changed, unchanged_replay, dry_run_candidate]
+        rule: >-
+          The packaged headless command validates the complete request before
+          effects and invokes the lifecycle_callable without duplicating merge,
+          decay, replacement, or persistence behavior. JSON is written to
+          stdout; diagnostics use the shared invalid-input envelope. Dry-run
+          computes the candidate without writing PROFILE.md.
+      section:
+        heading: "## Glossary"
+        start_marker: "<!-- agentera:personal-glossary:start -->"
+        end_marker: "<!-- agentera:personal-glossary:end -->"
+        encoding: deterministic_json_fence
+        document_schema_version: agentera.personalGlossarySection.v1
+        entry_shape: shared_primitive
+        lifecycle_metadata: [as_of, confidence_basis]
+        boundary_rule: >-
+          Add one owned section when absent or replace exactly the bytes from its
+          start marker through its end marker. Reject unmatched markers,
+          duplicate owned sections, or an unowned Glossary heading before any
+          write. Preserve every other profile byte exactly.
+      merge_identity:
+        normalization: unicode_caseless_exact_no_normalization
+        rule: >-
+          One locale-independent Unicode caseless-exact term identity may occur
+          once. Identity performs no Unicode normalization, accent folding, or
+          compatibility folding; canonically distinct strings remain distinct.
+          Preserve the established spelling and observed_at date. Fresh
+          qualifying evidence may refresh an entry only when meaning and
+          provenance kind are unchanged; divergent meaning or provenance kind is
+          a conflict rather than an implicit overwrite.
+      refresh_rule: >-
+        For matching fresh qualifying evidence, set confidence and its
+        confidence_basis to the fresh evidence-based integer, replace only the
+        same-kind personal evidence anchors, and set last_confirmed_at to the
+        injected as_of date. Preserve observed_at and permanence. This rule is
+        stable for identical input and as_of.
+      decay_rule: >-
+        Without matching fresh evidence, retain the entry and permanence. Derive
+        confidence from its unchanged confidence_basis, its permanence-class
+        lambda, and calendar days from last_confirmed_at to injected as_of using
+        the Profile formula; round to the nearest integer after applying the
+        existing floor. The section-level basis prevents same-date drift and
+        repeated compounding from already-decayed confidence. Age alone never
+        removes an entry.
+      isolation_rule: >-
+        The command and callable accept only a PROFILE.md path, fresh personal
+        entries, retained personal-history evidence, and an injected ISO date.
+        They have no project root, project glossary parameter, artifact lookup,
+        or project file read.
+  project:
+    scope: repository
+    implementation:
+      status: active
+      active: [audit_proposal_digest, build_publication, confirmed_variant_guard]
+      inactive: [lookup, precedence, semantic_equivalence_review]
+    allowed_provenance: [project_file]
+    input:
+      authority: repository_files
+      bounded_rule: Admit only the cited project-relative record bound by its record SHA-256.
+      excluded_categories: [personal_history_record, personal_history_anchor]
+    proposal_digest:
+      algorithm: sha256
+      encoding: lowercase_hex
+      canonicalization: >-
+        Hash the complete terminology finding except proposal_digest as canonical
+        JSON with mapping keys sorted recursively. Sort canonical_evidence and
+        each variant evidence by source_path, line, then source_record_sha256;
+        sort variants by case-insensitive term and then exact term. The digest
+        therefore changes when any proposal, confidence, severity, divergence,
+        term, source path, line identity, or source-record digest changes, but not
+        when equivalent evidence or variant arrays arrive in a different order.
+        Locale-independent lowercase ordering is only a deterministic sort key;
+        it does not define term identity.
+    proposal_validation:
+      owner: audit
+      shared_runtime: packages/cli/src/audit/terminologyDrift.ts#validateTerminologyProposal
+      required_rules:
+        - safe_distinct_evidence_identities_per_term
+        - unicode_caseless_exact_unique_term_identities
+        - best_supported_canonical_term_with_lexicographic_tie_break
+        - authority_confidence_floor_and_range
+        - confidence_below_70_forces_info_severity
+        - canonical_evidence_and_variant_order
+        - canonical_proposal_digest
+      publication_rule: >-
+        Build publication accepts only the complete canonical finding that this
+        Audit-owned validator can emit. Publication reuses this validator and
+        must not duplicate or weaken Audit proposal semantics.
+    entry_derivation:
+      term: proposal.proposed_canonical_term
+      meaning: proposal.concept
+      confidence: proposal.confidence
+      permanence: stable
+      temporal.observed_at: confirmation.confirmed_at calendar date
+      temporal.last_confirmed_at: confirmation.confirmed_at calendar date
+      provenance.kind: project_file
+      provenance.evidence: >-
+        Exactly the first canonical_evidence record after proposal-digest
+        canonical ordering, projected to source_path and source_record_sha256.
+        Line identifies and revalidates the source record during publication but
+        is not persisted because it is not part of the shared project_file
+        provenance variant.
+      rejection_rule: >-
+        Reject before effects when any required proposal or derived entry value
+        is absent or invalid; never invent a field or extend the shared entry.
+    publication:
+      owner: build
+      command: npx -y agentera@next state glossary publish --input REQUEST --format json
+      request:
+        schema_version: agentera.glossaryPublicationRequest.v1
+        required_fields: [schema_version, proposal, confirmation]
+        additional_fields: forbidden
+        proposal_shape: complete_terminology_drift_finding_with_proposal_digest
+        confirmation:
+          required_fields: [proposal_digest, confirmed_by, confirmed_at]
+          additional_fields: forbidden
+          confirmed_by: user
+          confirmed_at: iso_8601_timestamp
+          binding: >-
+            proposal_digest must equal the digest recomputed from proposal and
+            therefore binds the exact finding, every cited source record, and
+            the user's timestamped confirmation.
+      persisted_document:
+        schema_version: agentera.projectGlossary.v1
+        required_fields: [schema_version, approvals, entries]
+        additional_fields: forbidden
+        approvals:
+          type: list
+          immutable_record_fields: [proposal_digest, proposal, confirmation]
+          additional_record_fields: forbidden
+        entries:
+          type: list
+          item: shared_primitive
+          approval_fields: forbidden
+        terminology_set_identity:
+          normalization: unicode_caseless_exact_no_normalization
+          members: [paired_entry.term, paired_approval.proposal.variants.term]
+          uniqueness: global_across_complete_document
+          rule: >-
+            Every Unicode caseless-exact canonical or variant term belongs to
+            exactly one approval-entry pair. Identity performs no Unicode
+            normalization, accent folding, or compatibility folding. Reject
+            duplicate variants and every cross-set canonical/variant collision
+            before effects. An exact replay compares against its existing pair
+            and remains a no-op.
+      transaction: >-
+        Under the established project writer lock, resolve the registered
+        project path, safely re-read every cited project-relative source line,
+        recompute its SHA-256 and the proposal digest, validate the complete
+        candidate bytes, then atomically replace the single glossary document.
+        Creation follows the same path. Dry-run performs all validation without
+        publication.
+      merge_and_replay: >-
+        Preserve unrelated valid approvals and entries semantically unchanged.
+        Canonical and variant identity is case-insensitive and globally unique
+        across confirmed canonical sets. An exact approval and derived-entry
+        replay is a no-op. An approval without its matching entry, a matching
+        term with changed entry or proposal, reuse of an old confirmation for
+        changed proposal content, duplicate identity, cross-set terminology
+        collision, or malformed existing state is a conflict and must never be
+        repaired or overwritten implicitly.
+    confirmed_variant_guard:
+      owner: packages/cli/src/validate/v1LegacyCruft.ts#scanPost30CruftViolations
+      validation_surface: packages/cli/test/cli/v1LegacyCruft.test.ts
+      loader: packages/cli/src/state/write/glossaryPublication.ts#loadProjectGlossaryDocument
+      source_rule: >-
+        Resolve the glossary through the canonical artifact registry and consume
+        only complete validated approval-entry pairs. Derive each forbidden
+        variant from approval.proposal.variants and its canonical replacement
+        from the paired entry.term; never infer equivalence or consume personal
+        glossary state.
+      matching: exact_case_sensitive_boundary_aware_literal
+      approved_evidence_rule: >-
+        The exact source_path, line, and source_record_sha256 retained by the
+        immutable proposal is historical evidence and does not self-trigger.
+        Changed bytes at that location or a matching variant elsewhere fail.
+      exclusions:
+        - generated_output
+        - vendor_and_dependency_state
+        - cache_state
+        - repository_metadata
+        - historical_agentera_state
+        - project_glossary_document
+        - unrelated_agentera_state
+      excluded_directory_names:
+        - .agentera
+        - .agentera-generated
+        - .cache
+        - .git
+        - .next
+        - .pnpm
+        - .turbo
+        - .venv
+        - .vite
+        - build
+        - bundle
+        - coverage
+        - dist
+        - node_modules
+        - target
+        - vendor
+      exclusion_rule: >-
+        Skip a directory only when its basename exactly equals one declared
+        name. The validator and fixtures consume this list directly; prefixes,
+        suffixes, substrings, and nearby ordinary source names remain scanned.
+      failure_rule: >-
+        Emit one deterministic violation per variant location with the canonical
+        term, confirmed proposal evidence, offending source location, and the
+        runnable validation command. A malformed present glossary fails closed;
+        an absent glossary leaves the pre-existing legacy checks unchanged.
+
+consumer_boundary:
+  contract_status: active
+  implementation:
+    acquisition: active
+    advice_resolution: active
+    capability_integrations:
+      build: active
+      discuss: active
+      plan: active
+      prime: active
+  forbidden_persisted_entry_fields: [precedence, collision, review]
+  deterministic_judgments:
+    term_identity: unicode_caseless_exact_no_normalization
+    term_identity_runtime: packages/cli/src/registries/glossaryTermIdentity.ts#unicodeCaselessExact
+    meaning_identity: exact_string
+    project_state_validity: schema_and_bound_validation
+    project_gap: valid_project_state_without_exact_term_identity
+    forbidden_semantic_heuristics: [scores, thresholds, embeddings, automatic_merge]
+  host_reviewed_judgments:
+    inferred_semantic_equivalence: >-
+      The host may identify a possible equivalence only from the current
+      meaning-sensitive input and bounded candidate meanings. It never selects
+      authority, merges entries, or resolves the review itself.
+  project_state:
+    gap_proving_states: [canonically_absent, valid_empty, valid_nonmatching]
+    invalid_states: [malformed, unreadable, ambiguous_path, over_bound]
+    invalid_rule: >-
+      An invalid project state cannot prove a project gap. Abstain rather than
+      falling back to a personal meaning, repairing state, or guessing authority.
+  acquisition:
+    implementation: active
+    runtime: packages/cli/src/analytics/glossaryInputAcquisition.ts#acquireGlossaryInputs
+    mutation: forbidden
+    bounds:
+      authority: consumer_boundary.profile_grounding.max_profile_utf8_bytes
+      max_source_utf8_bytes: 65536
+      max_entries: 100
+      rule: >-
+        Apply the existing bounded profile-read byte ceiling to each source and
+        admit at most 100 entries from either owned glossary. The entry ceiling
+        is declared only here and consumed by the runtime and schema validator.
+        Reject raw bytes above the source ceiling before decoding, decode UTF-8
+        fatally, and reject a parsed document above the entry ceiling; never
+        replacement-decode, truncate, or partially admit input. Exactly 65,536
+        raw bytes and 100 entries are permitted.
+    availability:
+      states:
+        - absent
+        - valid_empty
+        - valid_present
+        - malformed
+        - unreadable
+        - ambiguous
+        - over_bound
+      valid: [absent, valid_empty, valid_present]
+      invalid: [malformed, unreadable, ambiguous, over_bound]
+      project_gap_proving: [absent, valid_empty]
+      rule: >-
+        Classify the two sources independently. Project absence means the
+        canonical artifact does not exist; personal absence means PROFILE.md or
+        its owned Glossary section does not exist. A present empty owned document
+        is valid_empty. Invalid states expose no entries and cannot prove a
+        project gap. Dual invalid or absent input exposes no glossary entries;
+        valid project entries remain available when personal input is invalid.
+    project:
+      identity: glossary
+      discovery: packages/cli/src/registries/artifactRegistry.ts#loadArtifactRecord
+      path_resolution: packages/cli/src/registries/artifactRegistry.ts#resolveArtifactPath
+      docs_override: canonical_GLOSSARY.md_mapping_only
+      docs_override_read: bounded_no_follow_regular_file
+      project_root: packages/cli/src/state/projectRoot.ts#validateRealProjectRoot
+      boundary_rule: >-
+        Resolve only the registered glossary identity and its canonical docs
+        override under one validated real project root. Missing canonical
+        artifacts are absent. Unsafe overrides, path escapes, symlink ambiguity,
+        or unavailable registry identity classify ambiguous; malformed present
+        docs mappings or glossary documents fail closed and never fall back to a
+        default path.
+      filesystem_guarantee: >-
+        Open the canonical .agentera/docs.yaml and resolved glossary target with
+        O_NOFOLLOW after lstat snapshots of every existing project-relative path
+        component. Match the opened regular-file descriptor to the snapshotted
+        device and inode, read raw bytes from that descriptor, and require its
+        size, mtime, ctime, device, and inode plus every snapshotted parent path
+        identity to remain unchanged through the read. For an absent target,
+        require the first missing component to remain missing while all existing
+        parent identities remain unchanged. The descriptor pins accepted bytes;
+        a symlink, parent swap, changed identity, unsupported no-follow boundary,
+        or failed stability check is ambiguous. This does not claim detection of
+        an identity swapped away and restored between observations, because such
+        a swap cannot change bytes already pinned to the verified descriptor.
+      external_docs_rule: >-
+        A symlinked, escaped, changed, unreadable, malformed, over-bound, or
+        non-UTF-8 docs mapping is ambiguous and never selects a glossary target.
+      document_validation: ownership_contracts.project.publication
+      approval_output: forbidden
+      raw_source_provenance_output: forbidden
+    personal:
+      owner: ownership_contracts.personal.profile_output.owner
+      profile_path_input: >-
+        The caller passes exactly the profile path already returned by canonical
+        profile context. Acquisition does not discover or return that path and
+        accepts no project identity, root, glossary path, or project record.
+      section: ownership_contracts.personal.profile_output.section
+      parser: packages/cli/src/analytics/personalGlossaryProfile.ts#personalGlossaryConsumerEntries
+      grounding_parser_isolation: >-
+        profile-grounding continues to remove the owned section and never
+        exposes it. Consumer acquisition separately parses exactly the existing
+        single owned marker range and returns no bytes outside that range.
+      provenance_output: forbidden
+      producer_invariance: >-
+        Personal parsing accepts only profile bytes and therefore returns the
+        same result regardless of project glossary presence.
+    output:
+      entry_fields: [term, meaning, owner]
+      owners: [personal, project]
+      source_fields: [owner, availability, entries, gap_proving, diagnostic]
+      diagnostic_fields: [class, recovery]
+      diagnostic_rule: >-
+        Diagnostics name only the availability class and a public recovery.
+        They never contain profile paths, artifact paths, raw bytes, sections,
+        definitions, entries, anchors, approval records, or provenance.
+      entry_rule: >-
+        Return only validated term and meaning plus source ownership. Do not
+        return confidence, permanence, temporal metadata, personal anchors,
+        profile paths, unrelated profile sections, project approval records, or
+        project source provenance. Acquisition does not select precedence,
+        fallback, tension, review, or a primary outcome.
+  advice_resolution:
+    implementation: active
+    runtime: packages/cli/src/analytics/glossaryAdviceResolution.ts#resolveGlossaryAdvice
+    mutation: forbidden
+    invocation:
+      command: npx -y agentera@next report glossary-advice --input REQUEST --format json
+      request_schema_version: agentera.glossaryAdviceRequest.v1
+      request_fields: [schema_version, requested_term, host_review]
+      max_request_utf8_bytes: 131072
+      acquisition: internal_bounded_owned_sources
+      project_root: current_working_directory
+      profile_path: canonical_registry_resolution
+      output_envelope_fields: [schemaVersion, command, status, advice]
+      rule: >-
+        Consumers send the requested term and optional host review through one
+        structured stdin or file request. The CLI acquires both owned sources;
+        callers never read raw project glossary or profile files. The command is
+        read-only, headless, JSON-only, and never refreshes either source.
+    input:
+      fields: [requested_term, acquired, host_review]
+      requested_term_utf8_bound: consumer_boundary.acquisition.bounds.max_source_utf8_bytes
+      acquired_contract: consumer_boundary.acquisition.output
+      host_review:
+        optional: true
+        fields: [relation, candidate_owner, candidate_term]
+        relations: [inferred_equivalence]
+        candidate_owners: [personal]
+        rule: >-
+          A host may report only one explicit inferred-equivalence relation to
+          one differently named, valid acquired personal candidate. Omission
+          means no inferred candidate. Unknown relations, owners, fields, or
+          candidates fail before selection and never echo input content.
+      additional_fields: forbidden
+    output:
+      schema_version: agentera.glossaryAdvice.v1
+      fields: [outcome, applicable_meaning, applicable_owner, review, tension, advisory]
+      owners: [personal, project]
+      advisory_fields: [reason, ownership_state]
+      advisory_reasons: [personal_input_unavailable, inferred_equivalence]
+      advisory_ownership_states: [project_governs_exact]
+      rule: >-
+        Return exactly one matrix outcome and its authority-declared semantics.
+        Include only the selected meaning and owner. An orthogonal advisory may
+        expose only its bounded reason and ownership state. Never return the
+        requested or candidate term, acquisition diagnostics, source content,
+        paths, anchors, approvals, provenance, unrelated entries, or conflict
+        state.
+    failure:
+      classes: [invalid_request, invalid_acquisition, invalid_host_review]
+      rule: >-
+        Fail once before selection with only a bounded class and public recovery;
+        never quote or serialize an input term, meaning, diagnostic, path, raw
+        entry, profile or project content, approval, anchor, or provenance.
+  primary_selection:
+    dimensions:
+      project_input: [invalid, valid_gap, valid_exact]
+      personal_input: [invalid, valid_without_exact, valid_exact]
+      exact_meaning: [not_applicable, equivalent, divergent]
+      inferred_candidate: [absent, present]
+    valid_state_rule: >-
+      exact_meaning is equivalent or divergent exactly when both inputs have an
+      exact term; otherwise it is not_applicable. inferred_candidate is
+      considered only when no personal exact term exists.
+    order:
+      - invalid_or_unavailable_project
+      - equivalent_exact_collision
+      - divergent_exact_collision
+      - project_only
+      - proven_project_gap
+      - inferred_equivalence
+      - invalid_or_unavailable_personal
+      - no_applicable_entry
+    rule: >-
+      Evaluate rows in this order and select exactly the first matching primary
+      outcome. The declared valid input state space must match exactly one row;
+      availability and inferred-equivalence advisories never compete with a
+      usable exact project meaning.
+  outcome_matrix:
+    invalid_or_unavailable_project:
+      when: project input is malformed, unreadable, ambiguous, or over bound
+      match:
+        project_input: [invalid]
+        personal_input: [invalid, valid_without_exact, valid_exact]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [absent, present]
+      judgment: deterministic
+      selected_owner: none
+      selected_meaning: none
+      review: unavailable
+      tension: authority_unavailable
+    equivalent_exact_collision:
+      when: valid personal and project entries have exact term identity and exact meaning identity
+      match:
+        project_input: [valid_exact]
+        personal_input: [valid_exact]
+        exact_meaning: [equivalent]
+        inferred_candidate: [absent, present]
+      judgment: deterministic
+      selected_owner: project
+      selected_meaning: project
+      review: none
+      tension: none
+    divergent_exact_collision:
+      when: valid personal and project entries have exact term identity but not exact meaning identity
+      match:
+        project_input: [valid_exact]
+        personal_input: [valid_exact]
+        exact_meaning: [divergent]
+        inferred_candidate: [absent, present]
+      judgment: deterministic
+      selected_owner: project
+      selected_meaning: project
+      review: none
+      tension: divergent_exact_collision
+    project_only:
+      when: >-
+        valid project input has an exact term and personal input is invalid,
+        unavailable, valid without an exact term, or only a differently named
+        inferred-equivalence candidate
+      match:
+        project_input: [valid_exact]
+        personal_input: [invalid, valid_without_exact]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [absent, present]
+      judgment: deterministic
+      selected_owner: project
+      selected_meaning: project
+      review: none_for_primary
+      tension: none
+    proven_project_gap:
+      when: project state is gap-proving and one valid personal exact term exists
+      match:
+        project_input: [valid_gap]
+        personal_input: [valid_exact]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [absent, present]
+      judgment: deterministic
+      selected_owner: personal
+      selected_meaning: personal
+      review: none
+      tension: none
+    inferred_equivalence:
+      when: >-
+        project state is gap-proving, personal input is valid without an exact
+        term, and the host identifies a possible semantic-equivalence candidate
+      match:
+        project_input: [valid_gap]
+        personal_input: [valid_without_exact]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [present]
+      judgment: host_reviewed
+      selected_owner: none_until_review
+      selected_meaning: none_until_review
+      review: required_when_meaning_sensitive
+      tension: inferred_equivalence
+    invalid_or_unavailable_personal:
+      when: >-
+        project state is gap-proving and personal input is malformed,
+        unavailable, or over bound, so no fallback can be proven
+      match:
+        project_input: [valid_gap]
+        personal_input: [invalid]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [absent, present]
+      judgment: deterministic
+      selected_owner: none
+      selected_meaning: none
+      review: unavailable
+      tension: input_unavailable
+    no_applicable_entry:
+      when: >-
+        project state is gap-proving, personal input is valid without an exact
+        term, and no inferred-equivalence candidate is present
+      match:
+        project_input: [valid_gap]
+        personal_input: [valid_without_exact]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [absent]
+      judgment: deterministic
+      selected_owner: none
+      selected_meaning: none
+      review: none
+      tension: none
+  orthogonal_advisories:
+    personal_input_unavailable_with_project_exact:
+      primary_outcome: project_only
+      when: personal_input is invalid and project_input is valid_exact
+      match:
+        project_input: [valid_exact]
+        personal_input: [invalid]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [absent, present]
+      caveat_reason: personal_input_unavailable
+      ownership_state: project_governs_exact
+      rule: >-
+        Preserve the exact project meaning. The bounded availability caveat may
+        report only reason and ownership state; it never becomes another primary
+        outcome or exposes personal content.
+    inferred_equivalence_with_project_exact:
+      primary_outcome: project_only
+      when: >-
+        personal_input is valid_without_exact, project_input is valid_exact, and
+        inferred_candidate is present
+      match:
+        project_input: [valid_exact]
+        personal_input: [valid_without_exact]
+        exact_meaning: [not_applicable]
+        inferred_candidate: [present]
+      review: required_when_the_inferred_relation_is_meaning_sensitive
+      caveat_reason: inferred_equivalence
+      ownership_state: project_governs_exact
+      rule: >-
+        Project authority remains the usable primary meaning. Host review governs
+        only the possible differently named relation and cannot displace, merge,
+        or suppress the exact project entry.
+  refresh_events:
+    required:
+      - initial_meaning_sensitive_input
+      - later_user_requirement_change_that_can_change_meaning
+      - later_user_intent_change_that_can_change_meaning
+      - later_acceptance_change_that_can_change_meaning
+      - later_deliberation_premise_change_that_can_change_meaning
+      - later_cycle_intent_change_that_can_change_meaning
+      - clarification_answer_for_a_reviewed_term
+    not_required:
+      - unrelated_conversation_turn
+      - unchanged_input_replay
+      - background_state_reread
+      - status_or_progress_render
+      - tool_output_without_requirement_or_intent_change
+      - artifact_rendering
+      - evaluator_text_without_user_change
+      - control_only_continuation
+    rule: >-
+      Refresh only at a governed event whose changed input can alter the meaning
+      used by the capability. Rereads and incidental turns do not refresh advice.
+  discuss_integration:
+    implementation: active
+    invocation: consumer_boundary.advice_resolution.invocation
+    governed_events: consumer_boundary.refresh_events
+    outcome_authority: consumer_boundary.outcome_matrix
+    disclosure: consumer_boundary.disclosure.transient_advice
+    interaction:
+      scope: current_user_authored_meaning_sensitive_input
+      transcript_scan: forbidden
+      done_only_control: no_refresh
+      review_rule: >-
+        Before meaning-sensitive reasoning or decision framing relies on an
+        inferred relation, ask one focused clarification question under the
+        existing one-question-per-turn and Done contract. The clarification may
+        identify a host-reviewed relation for a fresh advice request but is not
+        decision confirmation, approval, or publication consent.
+      exact_collision_rule: >-
+        Use an applicable project meaning for a divergent exact collision and
+        surface the bounded divergence as a concise scratchpad tension or Crux.
+        Never ask the user to choose project versus personal authority.
+      unavailable_rule: >-
+        Continue without glossary grounding when advice is unavailable, invalid,
+        or has no applicable entry. Ask ordinary clarification only when the term
+        is necessary and ambiguous, without fabricating glossary facts.
+    output_rule: >-
+      Use only the transient applicable meaning and owner needed for the current
+      deliberation, and never quote unrelated glossary content.
+    mutation: forbidden
+    forbidden_effects:
+      - glossary_write
+      - glossary_approval
+      - publication_consent
+      - progress_caveat
+      - plan_conflict
+      - decision_conflict
+  plan_integration:
+    implementation: active
+    invocation: consumer_boundary.advice_resolution.invocation
+    governed_events: consumer_boundary.refresh_events
+    outcome_authority: consumer_boundary.outcome_matrix
+    disclosure: consumer_boundary.disclosure.transient_advice
+    mode:
+      precedence:
+        - explicit_delegated_or_orchestrated_no_pause
+        - direct_user_invocation_with_available_clarification_turn
+        - unknown_or_ambiguous
+      signals:
+        explicit_delegated_or_orchestrated_no_pause:
+          result: autonomous
+        direct_user_invocation_with_available_clarification_turn:
+          result: interactive
+        unknown_or_ambiguous:
+          result: interactive_waiting
+      silence_or_timeout: never_autonomous
+      rule: >-
+        Use the first matching signal. Unknown or conflicting mode evidence waits
+        for interactive clarification; silence and elapsed time never imply
+        autonomous execution.
+    interaction:
+      scope: current_user_authored_meaning_sensitive_input
+      transcript_scan: forbidden
+      control_only_continuation: no_refresh
+      review:
+        interactive_sequence:
+          - emit_one_focused_clarification
+          - wait_for_user_answer
+          - refresh_advice_for_affected_term
+          - finalize_affected_scope_requirements_tasks_acceptance
+        autonomous_sequence:
+          - abstain_from_disputed_meaning
+          - defer_affected_scope_requirements_tasks_acceptance
+          - emit_transient_handoff_intent
+        clarification_effects:
+          - not_plan_approval
+          - not_decision_confirmation
+          - not_glossary_approval
+          - not_publication_consent
+      exact_collision_rule: >-
+        Use an applicable project meaning for a divergent exact collision. Where
+        the divergence materially affects planning, represent only the bounded
+        tension and never disclose the personal definition.
+      unavailable_rule: >-
+        Continue without glossary grounding when advice is unavailable, invalid,
+        or has no applicable entry. In interactive Plan, ask ordinary focused
+        clarification only when the term is necessary and meaning-critical.
+    autonomous_handoff_intent:
+      status: transient_emitted_not_delivered
+      caller_fields: [event, reason, ownership_state]
+      fixed_values:
+        event: current
+      accepted_writer_flags:
+        [--input]
+      input: one progress cycle YAML/JSON mapping whose glossary_caveat contains the three caller fields
+      writer_owned_fields: [caveat_id, capability, transition_id]
+      forbidden_fields: [caveat_id, capability, transition_id]
+      forbidden_claims: [delivered, stored, persisted, published, durable_envelope]
+      durable_writer: build
+      writer_interface: npx -y agentera@next state progress explain --verb append --format json
+      writer_result: authoritative_identity_and_six_field_envelope
+      allowed_reason_state_pairs: consumer_boundary.autonomous_caveat.allowed_current_pairs
+      rule: >-
+        Emit one intent only when autonomous meaning-sensitive work has unresolved
+        review or unavailable authority. The emitted-only intent contains exactly
+        event=current, reason, and ownership_state, the three caller inputs accepted
+        by the Build writer in one bounded structured record input. It is not delivered, stored, persisted, or published.
+        The writer creates caveat_id, capability=build, and transition_id=null to
+        complete the authoritative current envelope.
+    exact_project_personal_unavailable:
+      primary_outcome: project_only
+      advisory_reason: personal_input_unavailable
+      advisory_ownership_state: project_governs_exact
+      plan_action: ground_exact_project_meaning
+      autonomous_handoff_intent: none
+      durable_unresolved_caveat: none
+      rule: >-
+        Unavailable personal input does not make exact project authority
+        unresolved. Keep the advisory transient and never emit or publish it as
+        an autonomous unresolved handoff.
+    unavailable:
+      invalid_project:
+        interactive: clarify_or_wait_when_meaning_critical
+        autonomous: abstain_defer_and_emit_authority_unavailable
+        handoff_pair: [authority_unavailable, authority_unavailable]
+      invalid_personal_after_project_gap:
+        interactive: clarify_or_wait_when_meaning_critical
+        autonomous: abstain_defer_and_emit_personal_input_unavailable
+        handoff_pair: [personal_input_unavailable, authority_unavailable]
+    behavior_matrix:
+      interactive_review_required:
+        mode: interactive
+        plan_action: clarify_refresh_then_finalize
+        handoff_intent: none
+      autonomous_review_required:
+        mode: autonomous
+        plan_action: abstain_and_defer
+        handoff_intent: emitted
+      exact_project_personal_unavailable:
+        mode: any
+        plan_action: ground_exact_project_meaning
+        handoff_intent: none
+      unavailable_unresolved:
+        mode: autonomous
+        plan_action: abstain_and_defer
+        handoff_intent: emitted
+      divergent_exact_collision:
+        mode: any
+        plan_action: ground_project_and_bound_tension
+        handoff_intent: none
+      irrelevant_or_no_applicable_entry:
+        mode: any
+        plan_action: leave_unaffected_planning_unchanged
+        handoff_intent: none
+    output_rule: >-
+      Use only the transient applicable meaning and owner needed for affected
+      planning. An autonomous handoff intent is emitted, not delivered or stored,
+      and contains exactly event=current, reason, and ownership_state for a later
+      Build write.
+    handoff: consumer_boundary.autonomous_caveat.handoff.plan
+    mutation: forbidden
+    forbidden_effects:
+      - glossary_write
+      - glossary_approval
+      - publication_consent
+      - progress_caveat
+      - plan_conflict
+      - decision_conflict
+  disclosure:
+    transient_advice:
+      allowed: [outcome, applicable_meaning, applicable_owner, review, tension, advisory]
+      minimum_rule: >-
+        Include a meaning only when that meaning is selected by the matrix and
+        needed for the current meaning-sensitive work. Never include unrelated entries.
+      forbidden:
+        - personal_evidence_anchor
+        - personal_profile_path
+        - raw_personal_glossary_section
+        - unrelated_entry
+        - provenance
+        - project_source_path
+    durable_surfaces:
+      surfaces: [progress_evidence, prime_attention, diagnostics, errors]
+      allowed: [caveat_id, event, capability, reason, ownership_state, transition_id]
+      forbidden:
+        - personal_definition
+        - project_definition
+        - personal_evidence_anchor
+        - personal_profile_path
+        - raw_personal_glossary_section
+        - raw_project_glossary_section
+        - unrelated_entry
+        - provenance
+        - project_source_path
+      failure_rule: >-
+        Errors identify only the invalid input class and a public recovery command;
+        they never quote private bytes, definitions, paths, anchors, or provenance.
+    plan_artifacts:
+      surfaces:
+        [
+          scope,
+          requirements,
+          constraints,
+          tasks,
+          task_acceptance,
+          overall_acceptance,
+          diagnostics,
+          handoff,
+        ]
+      allowed_sources:
+        [user_authored_term, user_authored_clarification, derived_behavioral_requirement]
+      forbidden_content:
+        - profile_derived_definition
+        - personal_glossary_definition
+        - personal_evidence_anchor
+        - personal_profile_path
+        - raw_personal_glossary_section
+        - raw_project_glossary_section
+        - unrelated_entry
+        - provenance
+        - project_source_path
+      user_term_rule: >-
+        A term already supplied by the user may remain in the plan. Never copy or
+        quote a profile-derived or personal glossary definition; express only the
+        derived behavioral requirement needed by the plan.
+  autonomous_caveat:
+    durable_owner: build
+    durable_channel: progress
+    authority: skills/agentera/schemas/artifacts/progress.yaml#ENTITY_AUTHORITY
+    publication_command: npx -y agentera@next state progress append
+    publication_boundary: progress_cycle.glossary_caveat
+    publication_status: active_build
+    writer_runtime: packages/cli/src/state/progressEntities.ts#appendProgressEntity
+    writer_interface: npx -y agentera@next state progress explain --verb append --format json
+    envelope_validator: packages/cli/src/state/progressGlossaryCaveat.ts#validateProgressGlossaryCaveat
+    lifecycle_validator: packages/cli/src/state/progressGlossaryCaveat.ts#glossaryCaveatLifecycleInvalidEntities
+    allowed_current_pairs:
+      - reason: inferred_equivalence
+        ownership_state: review_required
+      - reason: inferred_equivalence
+        ownership_state: project_governs_exact
+      - reason: authority_unavailable
+        ownership_state: authority_unavailable
+      - reason: personal_input_unavailable
+        ownership_state: authority_unavailable
+    identity:
+      field: caveat_id
+      type: opaque_non_content_id
+      alphabet: abcdefghijklmnopqrstuvwxyz
+      length: 10
+      pattern: "^[a-z]{10}$"
+      rule: >-
+        Assign a fresh opaque ID for a current caveat and carry it unchanged to
+        its matching terminal event. The ID must not encode a term, meaning,
+        anchor, path, provenance, or project identity.
+    envelope:
+      schema_version: agentera.glossaryConsumerCaveat.v1
+      fields: [caveat_id, event, capability, reason, ownership_state, transition_id]
+      additional_fields: forbidden
+      max_string_utf8_bytes: 64
+      events: [current, resolved, superseded]
+      capabilities: [build]
+      reasons: [inferred_equivalence, authority_unavailable, personal_input_unavailable]
+      ownership_states: [project_governs_exact, review_required, authority_unavailable]
+      transition_rule: >-
+        current and resolved require null transition_id. Superseded requires one
+        different opaque successor caveat_id. Every field is required; only
+        transition_id may be null.
+      current_append:
+        caller_fields: [event, reason, ownership_state]
+        caller_fixed_values:
+          event: current
+        writer_fields: [caveat_id, capability, transition_id]
+        writer_fixed_values:
+          capability: build
+          transition_id: null
+        rule: >-
+          A current append requires the caller to submit event=current, reason,
+          and ownership_state. The writer creates the opaque identity, Build
+          capability, and null current-transition field; it never defaults event.
+    lifecycle:
+      current: >-
+        Append current once when autonomous meaning-sensitive work cannot pause
+        and review or authority remains unresolved.
+      resolved: >-
+        Append resolved with the same caveat_id after explicit clarification or
+        a governed refresh proves the caveat no longer applies.
+      superseded: >-
+        Append superseded with the old caveat_id and the fresh successor ID as
+        transition_id when a governed refresh replaces, rather than resolves,
+        the caveat.
+      matching_rule: >-
+        The latest valid event for one caveat_id determines whether it is current.
+        A terminal event affects only its matching identity. Supersession is valid
+        only when a matching current successor event also exists.
+      expiration: none
+      expiration_rule: >-
+        Time alone never resolves or hides a caveat. Only an explicit matching
+        resolved or valid superseded transition makes it noncurrent.
+    prime_projection:
+      status: active
+      runtime: packages/cli/src/state/progressGlossaryCaveat.ts#projectCurrentGlossaryCaveats
+      retrieval: canonical_validated_progress_entities
+      attention_text: "normal: glossary review required before meaning-sensitive work"
+      max_attention_entries: 1
+      source:
+        artifact: progress
+        boundary: progress_cycle
+        capability: build
+      capacity:
+        public_attention_limit: 6
+        reserved_glossary_slots: 1
+        policy: reserve_final_slot_when_current
+        unrelated_retention: first_five_in_existing_order
+      insertion: reserved_final_slot_when_current
+      rule: >-
+        Reconstruct current caveats by opaque identity from validated canonical
+        progress entities. A matching resolved event or valid superseded event
+        removes only that identity. Invalid, orphan, mismatched, or duplicate
+        terminal evidence is omitted and cannot suppress a valid current event.
+        Emit at most the declared generic attention text when one or more current
+        caveats remain; preserve the relative order of every unrelated attention
+        entry and do not change next-action selection.
+      expiration: none
+      forbidden_sources:
+        - timestamp
+        - recency
+        - plan_state
+        - transient_plan_handoff
+        - profile_presence
+        - unrelated_progress
+      forbidden_output:
+        - caveat_id
+        - transition_id
+        - reason
+        - ownership_state
+        - definition
+        - meaning
+        - anchor
+        - path
+        - raw_section
+        - provenance
+        - source_bytes
+      malformed_evidence:
+        prime: omit
+        direct_progress_retrieval: fail_closed_generic_corrupt_entity
+        allowed_diagnostic: canonical progress evidence is corrupt; run state validation
+        forbidden_diagnostic_content:
+          [stored_filename, stored_path, parser_text, raw_value, raw_bytes, provenance]
+    handoff:
+      plan: >-
+        Plan cannot write progress. In autonomous mode it emits at most one
+        transient intent containing exactly event=current, reason, and
+        ownership_state and stores no caveat or conflict in plan state. It never
+        emits identity, capability, transition_id, or a purported complete or
+        delivered durable envelope.
+      discuss: >-
+        Discuss pauses for clarification; it does not persist caveat evidence or
+        turn review into decision approval.
+      build: >-
+        Build is the sole durable writer and may later pass all three emitted
+        intent inputs to the typed progress writer. The writer preserves the
+        caller-owned event, reason, and ownership_state and creates authoritative
+        identity, capability, and transition_id fields. Advice never invokes
+        glossary publication.
+  publication_isolation:
+    rule: >-
+      Advice, tension, review, clarification, caveat publication, resolution, and
+      supersession never invoke glossary publication, authorize a proposal, reuse
+      confirmation, satisfy a decision, or approve plan state.
+    project_publication_authority: ownership_contracts.project.publication
+  downstream_gate:
+    status: blocked_until_contract_valid
+    validator: packages/cli/src/registries/glossaryEntryContract.ts#validateGlossaryEntryContract
+    command: npx -y agentera@next check validate vocabularyAuthority --format json
+    required_sections:
+      - consumer_boundary.acquisition
+      - consumer_boundary.advice_resolution
+      - consumer_boundary.primary_selection
+      - consumer_boundary.outcome_matrix
+      - consumer_boundary.orthogonal_advisories
+      - consumer_boundary.refresh_events
+      - consumer_boundary.discuss_integration
+      - consumer_boundary.plan_integration
+      - consumer_boundary.disclosure
+      - consumer_boundary.autonomous_caveat
+      - consumer_boundary.publication_isolation
+    failure_rule: >-
+      Discuss, Plan, Build, advice, and prime integration remain blocked when
+      validation reports a missing or contradictory section. Acquisition itself
+      fails closed. Each issue names the invalid section and required correction.
+  profile_grounding:
+    implementation: active_exclusion_only
+    capabilities: [discuss, plan, build]
+    command: npx -y agentera@next report profile-grounding --format json
+    schema_version: agentera.profileGrounding.v1
+    parser: packages/cli/src/analytics/personalGlossaryProfile.ts#personalProfileGrounding
+    max_profile_utf8_bytes: 65536
+    validity:
+      statuses: [absent, valid, repair_needed]
+      classes: [absent, valid, malformed, ambiguous, unreadable, unsafe, oversized, invalid_utf8]
+    freshness:
+      states: [current, stale, unknown]
+      rule: Freshness is computed only after one source passes validity and never changes validity.
+    recovery:
+      repair: >-
+        Use the Profile capability to repair or regenerate PROFILE.md, then retry `npx -y agentera@next report profile-grounding --format json`; no profile bytes were changed.
+      absent: >-
+        Use the Profile capability to generate PROFILE.md, then retry npx -y agentera@next report profile-grounding --format json.
+    raw_profile_read: forbidden
+    content_rule: >-
+      Return the complete profile with exactly the validated owned personal
+      Glossary marker range removed. Preserve every byte outside that range.
+      This is profile grounding only and performs no glossary lookup, project
+      glossary read, precedence, matching, review, collision, or advisory work.
+      Profile Full retains access to the complete stored profile for regeneration.
+    failure_rule: >-
+      Absent and repair-needed profiles return nonzero with the shared validity
+      object, exact advancing recovery, unknown freshness, and no profile
+      content. Oversized, unsafe, unreadable, invalid UTF-8, and malformed or
+      ambiguous owned Glossary sources fail closed without path or byte leaks.
+  exact_collision:
+    behavior: project_precedence_at_consumption
+    persistence: forbidden
+    personal_entry_suppression: forbidden
+  inferred_semantic_equivalence:
+    behavior: user_review
+    automatic_merge: forbidden
+    suppression: forbidden
+    precedence: forbidden
+  rule: >-
+    Audit remains mutation-free and Build project-glossary publication is active.
+    Build, Discuss, Plan, and prime bounded glossary consumption are active, and
+    Build progress caveat publication is active. Personal Profile Full rendering
+    and persistence are active. Project-driven personal-profile mutation and
+    docs-mapping mutation remain deferred.
+
+deferred_capability_contracts:
+  profile:
+    capabilities: [profile]
+    implementation: active_partial
+    intended_behavior: personal_glossary_synthesis
+    active_behavior:
+      - ownership_contracts.personal.admission
+      - ownership_contracts.personal.profile_output
+    inactive_behavior: [lookup]
+    contracts:
+      admission: ownership_contracts.personal.input
+      provenance: ownership_contracts.personal.allowed_provenance
+      confidence: shared_primitive.fields.confidence
+      retention_and_decay: ownership_contracts.personal.retention_and_decay
+    forbidden_current_claims: [lookup, project_glossary_consumption]
+  audit:
+    capabilities: [audit]
+    implementation: active_partial
+    active_behavior: terminology_drift_finding_generation
+    finding_family:
+      status: implemented
+      mutation: forbidden
+      evidence: ownership_contracts.project.input
+      confidence: skills/agentera/protocol.yaml#CONFIDENCE_SCALE
+      filtering: skills/agentera/capabilities/audit/schemas/validation.yaml
+      canonical_proposal_rule: >-
+        Propose the term with the most distinct verified project-file anchors;
+        break ties lexicographically. A proposal is an audit finding, never a
+        decision or persisted glossary entry.
+      personal_comparison_rule: >-
+        A supplied personal-profile term may annotate divergence for the same
+        assessed concept. Missing profile evidence adds no divergence and never
+        invents a personal term.
+    proposal_output:
+      implementation: active
+      intended_output: read_only_terminology_drift_finding
+      digest: ownership_contracts.project.proposal_digest
+    inputs:
+      personal_history: ownership_contracts.personal.input
+      project_file: ownership_contracts.project.input
+      project_file_history_classification: forbidden
+    forbidden_current_claims: [persistence, approval, docs_mapping_mutation, lookup]
+  build_publication:
+    capabilities: [build]
+    implementation: active
+    active_behavior: ownership_contracts.project.publication
+    output: skills/agentera/schemas/artifacts/glossary.yaml
+    inactive_behavior:
+      [
+        lookup,
+        precedence,
+        semantic_equivalence_review,
+        personal_profile_mutation,
+        docs_mapping_mutation,
+      ]
+    forbidden_current_claims:
+      [lookup, precedence, review, personal_profile_mutation, docs_mapping_mutation]
+  consumers:
+    capabilities: [discuss, plan, build, prime]
+    implementation:
+      build: active
+      discuss: active
+      plan: active
+      prime: active
+    behavior: consumer_boundary
+    forbidden_current_claims: []