amicus 4.7.0 → 4.8.0

package/src/council/report-md.js

@@ -0,0 +1,146 @@
+// src/council/report-md.js
+'use strict';
+
+/**
+ * @module council/report-md
+ * The markdown renderer for the neutral report model. Extracted verbatim from
+ * ./report (v4.8 Phase 1 T1.2) to give that file headroom under the 300-line
+ * gate — it was at 298/300, two lines from blocking its own next edit.
+ * Mirrors ./report-html exactly: one renderer, one exported function, taking
+ * the model ./report's toModel builds, and requiring TIER_ORDER/SYMBOL back
+ * from ./report — safe because buildReport requires this module lazily.
+ */
+
+const { formatCost } = require('../utils/pricing');
+const { formatDuration } = require('../utils/format-duration');
+const { TIER_ORDER, SYMBOL } = require('./report');
+const { formatDegrade } = require('../utils/degrade');
+
+function fmtNum(v) { return (v === null || v === undefined) ? '—' : v.toFixed(2); }
+function fmtDur(ms) { return formatDuration(ms, '—'); }
+
+function renderMd(m) {
+  const h = m.header;
+  const out = [];
+  out.push(`# Council Report — ${h.runType} (${h.runId})`);
+  const meta = [h.date, h.chair ? `chair: ${h.chair}` : null, `council: ${h.council.join(', ')}`,
+    h.claudeInCouncil ? 'Claude in council' : null].filter(Boolean).join(' · ');
+  out.push(`\n_${meta}_\n`);
+
+  out.push('## Verdict summary\n');
+  out.push('| Tier | Count |\n|---|---|');
+  for (const t of TIER_ORDER) { out.push(`| ${t} | ${m.tierCounts[t]} |`); }
+
+  // Heading-over-nothing: emitted ONLY when the run actually degraded, so a
+  // clean verdict's report stays byte-identical to before this section
+  // existed. Losses are headline news, so they sit directly under the
+  // summary, before the reader reaches the adjudication detail.
+  if (m.degrades.length) {
+    out.push('\n## What was lost\n');
+    // ONE voice (Plan 1's formatDegrade) — the report must not grow a dialect.
+    for (const d of m.degrades) { out.push(`- ${formatDegrade(d).trimEnd()}`); }
+  }
+
+  out.push('\n## Adjudication matrix\n');
+  out.push(`| Finding | Sev | Raiser | ${m.judges.join(' | ')} | Tier | Decision |`);
+  out.push(`|---|---|---|${m.judges.map(() => '---').join('|')}|---|---|`);
+  for (const f of m.findings) {
+    const cells = m.judges.map((j) => {
+      const v = f.byJudge[j];
+      return (v ? SYMBOL[v] : ' ') + (j === f.raiser ? '*' : '');
+    });
+    // v4.8 PR5a T6 (R5-10): the R8 marker rides the TIER cell. It qualifies the tier's
+    // implicit claim of independent corroboration, which is exactly what R8 exists to stop
+    // overstating — and the other two candidate placements (the finding row, the raiser
+    // cell) are both pinned by seat-matrix.test.js on the one fixture that carries the flag.
+    const tier = f.sameModelCorroboration ? `${f.tier}†` : f.tier;
+    out.push(`| ${f.id} | ${f.severity} | ${f.raiser} | ${cells.join(' | ')} | ${tier} | ${f.decision || ''} |`);
+  }
+  out.push('\n_Legend: ✓ agree · ✗ dispute · – neutral · `*` raiser\'s own vote_\n');
+  // ⚠️ GATED. Written unconditionally this line shifts every subsequent line of a
+  // unique-alias report, breaking byte-identity on EVERY run and reddening the existing
+  // pins and all four snapshots. Only a twin bench can raise the flag, so only a twin
+  // bench gets the line.
+  if (m.findings.some(f => f.sameModelCorroboration)) {
+    out.push('_`†` corroborated only by another seat running the SAME model — concurrence, not independent support._\n');
+  }
+
+  out.push('## Street-cred (peers-only; lower = better)\n');
+  out.push('| Model | peers-only | with-self |\n|---|---|---|');
+  // v4.8 SI-22.4 rider (R22.4-6): key the row by its SEAT, falling back to the
+  // alias — the same `s.seat || s.model` fallback SI-25 used at the chair
+  // packet's rendering sites. A twin bench emits one street-cred row PER SEAT
+  // (street-cred.js :: computeStreetCred), each with its own numbers, so keying
+  // on `s.model` printed two DIFFERENT numbers under one identical label with
+  // nothing to say which seat was which. `seat` is emit-when-DIFFERENT, so a
+  // unique-alias bench has no `seat` KEY AT ALL and this line is byte-identical
+  // to what it wrote before — which is what keeps the report snapshots green.
+  // ⚠️ The key's absence comes from `street-cred.js :: computeStreetCred`'s
+  // row literal (`...(seat ? { seat } : {})`), NOT from `credSeats`. This
+  // comment used to cite `credSeats: seat: id === m ? null : id`, which is a
+  // real expression but the wrong mechanism: credSeats emits `seat: null` —
+  // the property PRESENT and null — and computeStreetCred is what drops it.
+  // The pin asserts absence (`'seat' in r === false`), so cite the producer
+  // that actually makes it absent.
+  // Named mutant: tests/council/preset-trim-mutants.js :: ROWSEATDROP.
+  for (const s of m.streetCred) { out.push(`| ${s.seat || s.model} | ${fmtNum(s.peersOnly)} | ${fmtNum(s.withSelf)} |`); }
+
+  out.push('\n## Findings by tier\n');
+  // LC-10 fast-follow (review minor M3): m.findings can legitimately be EMPTY
+  // (every seat honestly reported nothing) — TIER_ORDER's four groups are then
+  // all empty too, and the loop below emits nothing, leaving this heading with
+  // no content beneath it before '## Cost'. Same heading-over-nothing class
+  // Task 3 closed in the Stage-2 prompts (buildJudgeBundle/buildChairPacket),
+  // human-facing here rather than model-facing. State the clean bench instead
+  // of leaving the heading to dangle.
+  if (!m.findings.length) {
+    out.push('_No findings were raised on this bench — a clean review is a valid review._\n');
+  } else {
+    for (const t of TIER_ORDER) {
+      const group = m.findings.filter(f => f.tier === t);
+      if (!group.length) { continue; }
+      out.push(`### ${t}`);
+      for (const f of group) {
+        const dec = f.decision ? ` — ${f.decision}${f.applied ? ' (applied)' : ''}` : '';
+        out.push(`- **${f.id}** (${f.severity}, raiser ${f.raiser}) — a${f.basis.a}/d${f.basis.d}/n${f.basis.n}${dec}`);
+      }
+      out.push('');
+    }
+  }
+
+  // Defensive: never emit the heading unless at least one grouping has
+  // content — a heading over nothing is worse than no heading.
+  if (m.debate.present && (m.debate.withdrawn.length || m.debate.movements.length || m.debate.noResponse.length)) {
+    out.push('\n## Debate round\n');
+    if (m.debate.withdrawn.length) {
+      out.push('**Withdrawn by raiser:**');
+      for (const w of m.debate.withdrawn) {
+        const arrow = w.previousTier && w.previousTier !== w.tier ? `${w.previousTier} → ${w.tier}` : (w.previousTier || w.tier);
+        out.push(`- ${w.id}: ${arrow} (withdrawn — no longer live)`);
+      }
+      out.push('');
+    }
+    if (m.debate.movements.length) {
+      out.push('**Tier movements after re-vote:**');
+      for (const mv of m.debate.movements) { out.push(`- ${mv.id}: ${mv.previousTier} → ${mv.tier} (${mv.action})`); }
+      out.push('');
+    }
+    if (m.debate.noResponse.length) {
+      out.push('**No response (raiser did not defend):**');
+      for (const nr of m.debate.noResponse) {
+        const arrow = nr.previousTier && nr.previousTier !== nr.tier ? `${nr.previousTier} → ${nr.tier}` : (nr.previousTier || nr.tier);
+        out.push(`- ${nr.id}: ${arrow} (no response — original stands)`);
+      }
+      out.push('');
+    }
+  }
+
+  out.push('## Cost\n');
+  out.push('| Model | Status | Duration | Cost |\n|---|---|---|---|');
+  for (const r of m.cost.rows) { out.push(`| ${r.model} | ${r.status} | ${fmtDur(r.durationMs)} | ${formatCost(r.cost)} |`); }
+  out.push(`| **Wave total** | | | ${formatCost(m.cost.total)} |`);
+
+  return out.join('\n') + '\n';
+}
+
+module.exports = { renderMd };

package/src/council/report.js

@@ -7,14 +7,106 @@
  * verdict.json (+ optional wave.json for the cost total) and produces a single
  * self-contained Markdown or HTML string. Renders deterministic data only — no
  * scoring, anonymization, or synthesis (that stays in Claude).
+ *
+ * Since v4.8 Phase 1 T1.2 this file renders NOTHING itself: it builds the
+ * neutral model (`toModel`) and `buildReport` dispatches to `./report-md` or
+ * `./report-html`, which own the two string formats. That description of
+ * `buildReport`'s API above is still exactly true from the outside — it is the
+ * file's own job that narrowed.
  */
 
-const { formatCost, sumWaveUsage } = require('../utils/pricing');
-const { formatDuration } = require('../utils/format-duration');
-const { formatDegrade } = require('../utils/degrade');
+const { sumWaveUsage } = require('../utils/pricing');
 
 const TIER_ORDER = ['Disputed', 'Contested', 'Confirmed', 'Singleton'];
-const SYMBOL = { agree: '✓', dispute: '✗', neutral: '–' };
+// __proto__: null — an inherited/unknown vote key (e.g. "toString") must fold as unrecognized, never resolve off Object.prototype.
+const SYMBOL = { __proto__: null, agree: '✓', dispute: '✗', neutral: '–' };
+// v4.8 T-C1 (SI-22.5, ruling R18): the ONE column every vote whose key names no
+// column folds into. Deliberately NOT exported: R17 took the narrow option —
+// src/workspace/matrix-model.js gets the same rule as a SEPARATE implementation
+// in its own task, so nothing is extracted or shared for it here.
+const UNATTRIBUTED = 'UNATTRIBUTED';
+
+/**
+ * Is a document in SEAT SPACE — does it carry a USABLE seat table?
+ *
+ * v4.8 PR4c §3.6 (R4c-8): ONE flag decides THREE readers of the seat space —
+ * the roster, the vote key, and the RAISER. Gating any two of them ships a
+ * self-contradicting artifact: gate the roster and the vote key only and the
+ * star vanishes (`'deepseek' === 'deepseek#1'` is false for both columns);
+ * gate the raiser only and the Raiser cell renders a seat id while every
+ * column header renders the alias. `verdict.seats` is NEW in PR4c while
+ * `adjudications[].seat` shipped in PR3, so independent fallbacks would leave
+ * EVERY vote cell blank on the twin verdicts already on disk.
+ *
+ * `Array.isArray`, not `?.`/`??`: `[]` is not nullish, so `??` would delete
+ * every judge column, and a non-array `seats` throws where HEAD renders. The
+ * per-element check exists because every path that reaches a renderer with an
+ * on-disk document is schema-free — `council report <verdict.json>` and
+ * `council verdict <tally.json> --render` are raw JSON.parse, and
+ * `amicus_verdict` takes `record: z.record(z.any())` — while R4c-5 widened the
+ * MCP tally schema to `z.array(z.any()).nullable()` on purpose. So
+ * `seats: [null,…]` and `seats: ["deepseek#1",…]` both arrive: the first makes
+ * `s.id` THROW where HEAD renders, the second yields `undefined` columns. A
+ * malformed table falls back to alias space WHOLE instead.
+ *
+ * ⚠️ EXPORTED AND SHARED, not copied (council A3/B1). `workspace/matrix-model.js`
+ * makes the identical decision over `tally.meta.seats`, and two verbatim copies
+ * are a maintenance coupling: edit one and the two renderers disagree about
+ * which space a document is in. This is NOT `ledger.js :: CONFORMANCE_RANK`'s
+ * documented-copy case — that copy is paid for because `ledger.js` (plus its two
+ * extractions) never reaches findings/anonymize/seats, while its sibling pulls
+ * all three. Measured here: requiring `workspace/matrix-model.js` already loads
+ * four first-party modules (v4.8 Phase 1 T1.2 moved renderMd's own
+ * pricing/format-duration/degrade requires out to report-md.js, which this path
+ * never reaches — report-md is required lazily from inside buildReport, not at
+ * module load) and THIS file is one of them (it has imported SYMBOL since v4.4,
+ * for the same single-source reason), so sharing costs ZERO new require edges.
+ * Guarded by tests/council/seat-matrix.test.js's A3/B1 table.
+ */
+function isSeatSpace(seats) {
+  return Array.isArray(seats) && seats.length > 0
+    && seats.every(s => s && typeof s.id === 'string');
+}
+
+/**
+ * A finding's adjudications AS AN ARRAY, whatever the document actually carries.
+ *
+ * ⚠️ ONE expression, TWO readers, and that is the whole reason it exists.
+ * `toModel`'s pre-pass and its per-finding map both walk this list, and for one
+ * commit they disagreed about the type: `.some` is Array-only while `for...of`
+ * takes any iterable, so `adjudications: "abc"` RENDERED at c8867b48 and THREW at
+ * 774dcdc2. Measured at c8867b48: the string rendered
+ * `| A1 | major | gpt |   |  * | Contested |  |` with a junk `"undefined"` key in
+ * `byJudge`; `{}` and `42` threw there too.
+ *
+ * `Array.isArray` refuses all three the same way — a malformed value contributes
+ * no votes — which renders the string case BYTE-IDENTICALLY to c8867b48 in both
+ * formats (measured) and WIDENS `{}`/`42` from throw to that same vote-less
+ * render. The widening is deliberate: it is the direction this file already
+ * points. `isSeatSpace` above answers a malformed seats table by falling back
+ * WHOLE rather than throwing, for the same reason — the three schema-free
+ * `JSON.parse` entry points can deliver any shape. Pinned, all three shapes, in
+ * tests/council/seat-matrix.test.js.
+ *
+ * ⚠️ `.filter(Boolean)` is v4.8 T-C4, and it is `matrix-model.js`'s `!adj` guard
+ * spelled a SECOND time rather than shared — R17 keeps the rule in two places.
+ * A falsy ELEMENT has no `.seat` and no `.judge`, so `columnFor` called it
+ * unattributable and grew a column whose cell — `adj.verdict` — was `undefined`
+ * too, i.e. blank: a column announcing a vote it could not show. `matrix-model.js`
+ * skipped the same element and grew no column, so ONE document rendered two ways.
+ * Measured at ed5c0c02: no column on either side, so that desync arrived with
+ * this release rather than being inherited.
+ * ⚠️ It also drops `null`/`undefined`, which THREW here in both phases. Same
+ * throw -> render widening as the container above, named on purpose.
+ * ⚠️ `Boolean`, NOT `a && typeof a === 'object'`. Measured over ten element types
+ * against the live `matrix-model.js`: this predicate disagrees on 0 of 10, that
+ * one on 3 of 10 — it drops TRUTHY non-objects (`42`, `'x'`, `true`) which the
+ * other consumer keeps, closing one divergence by opening three. Those shapes
+ * still grow a blank column on BOTH consumers; that is filed, and pinned here as
+ * the agreement it is, not fixed by one-sided strictness.
+ * Named mutant, with its measured red set: tests/council/seat-matrix.test.js :: ELEMKEEP.
+ */
+function adjOf(f) { return Array.isArray(f.adjudications) ? f.adjudications.filter(Boolean) : []; }
 
 /** Build a neutral, render-agnostic model from a verdict (+ optional wave). */
 function toModel(verdict, wave) {
@@ -23,9 +115,9 @@ function toModel(verdict, wave) {
   }
   const council = verdict.council || [];
   // 'council' (verdict.council / meta.models) is the street-cred universe and
-  // legitimately includes 'claude' on a --claude-review run (run-assemble.js:
-  // 123-125, docs/council.md:326). 'judges' is the adjudication-matrix column
-  // set: SKILL.md:482 / run-stages.js:162-163 guarantee Claude is judged but
+  // legitimately includes 'claude' on a --claude-review run (buildTallyInput's
+  // run-assemble.js:226, docs/council.md:326). 'judges' is the matrix column
+  // set: SKILL.md:448 / run-stage2.js:61-62 guarantee Claude is judged but
   // never judges, so its reserved seat must never grow a matrix column — filter
   // it out ONLY when claudeInCouncil is true. This is name+flag gated, not
   // vote-derived: a bench judge that cast zero adjudications (dead/unstructured
@@ -33,15 +125,90 @@ function toModel(verdict, wave) {
   // its (blank) column — deriving the roster from "who actually voted" would
   // silently delete that column too and break the byte-unchanged-artifact
   // contract for degraded v4.0.1-shaped runs.
-  const judges = verdict.claudeInCouncil === true ? council.filter(j => j !== 'claude') : council;
+  const aliasJudges = verdict.claudeInCouncil === true ? council.filter(j => j !== 'claude') : council;
+  // v4.8 PR4c §3.6 (R4c-8): ONE flag, THREE readers below — the roster, the
+  // vote key, and the RAISER. Shared with workspace/matrix-model.js; the whole
+  // rationale (and why `??` is wrong) lives on isSeatSpace above.
+  const seatSpace = isSeatSpace(verdict.seats);
+  // No claude filter needed in seat space: seats[] is bench-only (seats.js
+  // excludes the reserved claude seat), so it can never grow a claude column.
+  const bench = seatSpace ? verdict.seats.map(s => s.id) : aliasJudges;
+  const columns = new Set(bench);
+  // v4.8 T-C1 (SI-22.5): REFUSE a key that identifies nothing. PR4c wrote
+  // `byJudge[(seatSpace && adj.seat) || adj.judge]` whatever that expression
+  // produced, and six shapes were measured at c8867b48 landing as a key no
+  // column reads: an orphaned seat id, `''` and an absent `judge` in either
+  // space — the absent one arriving as the STRING "undefined", a JS coercion
+  // artifact and never a name — and a non-string judge. The three conjuncts
+  // refuse, in that order, a non-string, the empty string, and a string naming
+  // no column; `columns.has` is the whole orphan test, because the roster is
+  // the only thing that makes a key mean a column. A key that survives all
+  // three is written exactly where PR4c wrote it: this is a refusal, not a
+  // re-key, and ruling R3 leaves the vote counted in `basis` either way.
+  // ⚠️ `typeof key === 'string'` does not refuse only junk, and the one shape it
+  // COSTS is disclosed rather than discovered: a NUMERIC key coerced to a column
+  // at c8867b48 — `council: [42,'gpt']` with `judge: 42` put a ✓ in the `42`
+  // column — and now folds instead, leaving that column blank. Brief class 3 says
+  // "any non-string" unconditionally; this is that, measured.
+  // ⚠️ `key !== ''` is NOT redundant with `columns.has`, and is not asserted from
+  // structure: `isSeatSpace` accepts `{id: ''}`, so a roster CAN hold `''`, and on
+  // `seats: [{id:''},…]` with `judge: ''` the two spellings measurably diverge —
+  // with the conjunct the vote folds, without it `byJudge['']` takes it.
+  // Named mutants, with their measured red sets:
+  // tests/council/seat-matrix.test.js :: JUNKKEY and
+  // tests/council/seat-matrix.test.js :: EMPTYOK.
+  const columnFor = (adj) => {
+    const key = (seatSpace && adj.seat) || adj.judge;
+    return (typeof key === 'string' && key !== '' && columns.has(key)) ? key : UNATTRIBUTED;
+  };
+  // ⚠️ TWO-PHASE, and it cannot be one: the roster is what CLASSIFIES a vote,
+  // and whether any vote was refused is what decides the roster. Phase 1 is the
+  // bench roster plus this pre-pass over every finding; phase 2 is the map
+  // below, which seeds `byJudge` from the FINAL roster. Deciding inside that map
+  // would seed the column onto some findings and not others — which is only
+  // OBSERVABLE on a MULTI-finding document, so the pin that separates the two
+  // shapes carries two findings on purpose.
+  // Named mutant, with its measured red set: tests/council/seat-matrix.test.js :: PERFINDING.
+  // ⚠️ CONDITIONAL, the same shape as T2.3's emit-only-when-`> 0`: added
+  // unconditionally it grows a column on every report that has no such vote and
+  // breaks the byte-unchanged-artifact contract.
+  // ⚠️ `concat`, never `push`. In alias space with `claudeInCouncil !== true`,
+  // `bench` IS `verdict.council` BY REFERENCE (measured at c8867b48:
+  // `toModel(v).judges === v.council` reads true), so appending in place would
+  // write the label into the caller's own document and into `header.council` —
+  // which both renderers print as `council: …` on the meta line.
+  // ⚠️ `!columns.has(...)`: a bench model literally aliased UNATTRIBUTED already
+  // owns that column and R18 says ONE column. It then SHARES its cell with the
+  // folded votes — disclosed, not fixed, because the roster entry is also the
+  // `byJudge` key and separating them needs a renderer change.
+  // Named mutant, with its measured red set: tests/council/seat-matrix.test.js :: ALWAYSCOL.
+  const folded = verdict.findings.some(f => adjOf(f).some(a => columnFor(a) === UNATTRIBUTED));
+  const judges = folded && !columns.has(UNATTRIBUTED) ? bench.concat(UNATTRIBUTED) : bench;
   const findings = verdict.findings.map((f) => {
     const byJudge = {};
     for (const j of judges) { byJudge[j] = null; }
-    for (const adj of (f.adjudications || [])) { byJudge[adj.judge] = adj.verdict; }
+    // LAST-WINS, and still is: two votes sharing one column overwrite each
+    // other. Before PR4c (b9a98a0f) this key was the bare alias, which is what
+    // collapsed a twin bench — still pinned, on a seat-table-less document, by
+    // seat-matrix.test.js's T21 block. T-C1 changed only WHICH key a REFUSED
+    // vote gets: every refusal folds into the single UNATTRIBUTED column, so two
+    // refused votes on one finding show ONE verdict. Measured, and pinned as
+    // measured rather than claimed to be more. `basis` is untouched either way.
+    for (const adj of adjOf(f)) { byJudge[columnFor(adj)] = adj.verdict; }
     return {
-      id: f.id, severity: f.severity, raiser: f.raiser, tier: f.tier,
+      // The raiser re-key IS the star fix, and it is why report-html.js needs
+      // zero edits: renderMd's cell map and report-html.js's both test
+      // `j === f.raiser` against THIS field, so both become seat-correct at
+      // once — and the Raiser column follows instead of contradicting them.
+      id: f.id, severity: f.severity, raiser: seatSpace ? (f.raiserSeat || f.raiser) : f.raiser, tier: f.tier,
       basis: f.basis || { a: 0, d: 0, n: 0 }, decision: f.decision || null,
       applied: f.applied === true, byJudge, debate: f.debate || null,
+      // ⚠️ v4.8 PR5a T6: this literal is CLOSED — it names every key it copies off `f` and
+      // copies nothing else, so a field added upstream is invisible to BOTH renderers until
+      // it is named here. tally.js has stamped R8's sameModelCorroboration since PR4c and
+      // verdict.js carries it, but no renderer could see it. Emit-when-true, matching the
+      // producer: it is never written as `false`.
+      ...(f.sameModelCorroboration ? { sameModelCorroboration: true } : {}),
     };
   });
   // 'movements' is deliberately re-vote-only (defended/amended): a withdrawn or
@@ -82,8 +249,13 @@ function toModel(verdict, wave) {
   ROLE_SUFFIX['chair-attempt'] = 'chair-attempt';
   ROLE_SUFFIX.repair = 'repair';
   ROLE_SUFFIX.superseded = 'superseded';
+  // v4.8 PR5a T5: name the row by its SEAT when it has one. On a twin bench the four
+  // seat/judge rows were previously indistinguishable. Depends on T4 — with T5 alone only
+  // the two seat rows separate, because judge rows carried no seat until then.
+  // ⚠️ Only seat and judge rows carry one: repair, superseded and debate rows still
+  // collapse on a twin, and the chair row is not a bench seat at all. Disclosed, not fixed.
   const costRows = runStats.map(r => ({
-    model: ROLE_SUFFIX[r.role] ? `${r.model} (${ROLE_SUFFIX[r.role]})` : r.model,
+    model: ROLE_SUFFIX[r.role] ? `${r.seat || r.model} (${ROLE_SUFFIX[r.role]})` : (r.seat || r.model),
     status: r.status, durationMs: r.durationMs,
     cost: r.usage && r.usage.cost ? r.usage.cost : null,
   }));
@@ -107,105 +279,6 @@ function toModel(verdict, wave) {
   };
 }
 
-function fmtNum(v) { return (v === null || v === undefined) ? '—' : v.toFixed(2); }
-function fmtDur(ms) { return formatDuration(ms, '—'); }
-
-function renderMd(m) {
-  const h = m.header;
-  const out = [];
-  out.push(`# Council Report — ${h.runType} (${h.runId})`);
-  const meta = [h.date, h.chair ? `chair: ${h.chair}` : null, `council: ${h.council.join(', ')}`,
-    h.claudeInCouncil ? 'Claude in council' : null].filter(Boolean).join(' · ');
-  out.push(`\n_${meta}_\n`);
-
-  out.push('## Verdict summary\n');
-  out.push('| Tier | Count |\n|---|---|');
-  for (const t of TIER_ORDER) { out.push(`| ${t} | ${m.tierCounts[t]} |`); }
-
-  // Heading-over-nothing: emitted ONLY when the run actually degraded, so a
-  // clean verdict's report stays byte-identical to before this section
-  // existed. Losses are headline news, so they sit directly under the
-  // summary, before the reader reaches the adjudication detail.
-  if (m.degrades.length) {
-    out.push('\n## What was lost\n');
-    // ONE voice (Plan 1's formatDegrade) — the report must not grow a dialect.
-    for (const d of m.degrades) { out.push(`- ${formatDegrade(d).trimEnd()}`); }
-  }
-
-  out.push('\n## Adjudication matrix\n');
-  out.push(`| Finding | Sev | Raiser | ${m.judges.join(' | ')} | Tier | Decision |`);
-  out.push(`|---|---|---|${m.judges.map(() => '---').join('|')}|---|---|`);
-  for (const f of m.findings) {
-    const cells = m.judges.map((j) => {
-      const v = f.byJudge[j];
-      return (v ? SYMBOL[v] : ' ') + (j === f.raiser ? '*' : '');
-    });
-    out.push(`| ${f.id} | ${f.severity} | ${f.raiser} | ${cells.join(' | ')} | ${f.tier} | ${f.decision || ''} |`);
-  }
-  out.push('\n_Legend: ✓ agree · ✗ dispute · – neutral · `*` raiser\'s own vote_\n');
-
-  out.push('## Street-cred (peers-only; lower = better)\n');
-  out.push('| Model | peers-only | with-self |\n|---|---|---|');
-  for (const s of m.streetCred) { out.push(`| ${s.model} | ${fmtNum(s.peersOnly)} | ${fmtNum(s.withSelf)} |`); }
-
-  out.push('\n## Findings by tier\n');
-  // LC-10 fast-follow (review minor M3): m.findings can legitimately be EMPTY
-  // (every seat honestly reported nothing) — TIER_ORDER's four groups are then
-  // all empty too, and the loop below emits nothing, leaving this heading with
-  // no content beneath it before '## Cost'. Same heading-over-nothing class
-  // Task 3 closed in the Stage-2 prompts (buildJudgeBundle/buildChairPacket),
-  // human-facing here rather than model-facing. State the clean bench instead
-  // of leaving the heading to dangle.
-  if (!m.findings.length) {
-    out.push('_No findings were raised on this bench — a clean review is a valid review._\n');
-  } else {
-    for (const t of TIER_ORDER) {
-      const group = m.findings.filter(f => f.tier === t);
-      if (!group.length) { continue; }
-      out.push(`### ${t}`);
-      for (const f of group) {
-        const dec = f.decision ? ` — ${f.decision}${f.applied ? ' (applied)' : ''}` : '';
-        out.push(`- **${f.id}** (${f.severity}, raiser ${f.raiser}) — a${f.basis.a}/d${f.basis.d}/n${f.basis.n}${dec}`);
-      }
-      out.push('');
-    }
-  }
-
-  // Defensive: never emit the heading unless at least one grouping has
-  // content — a heading over nothing is worse than no heading.
-  if (m.debate.present && (m.debate.withdrawn.length || m.debate.movements.length || m.debate.noResponse.length)) {
-    out.push('\n## Debate round\n');
-    if (m.debate.withdrawn.length) {
-      out.push('**Withdrawn by raiser:**');
-      for (const w of m.debate.withdrawn) {
-        const arrow = w.previousTier && w.previousTier !== w.tier ? `${w.previousTier} → ${w.tier}` : (w.previousTier || w.tier);
-        out.push(`- ${w.id}: ${arrow} (withdrawn — no longer live)`);
-      }
-      out.push('');
-    }
-    if (m.debate.movements.length) {
-      out.push('**Tier movements after re-vote:**');
-      for (const mv of m.debate.movements) { out.push(`- ${mv.id}: ${mv.previousTier} → ${mv.tier} (${mv.action})`); }
-      out.push('');
-    }
-    if (m.debate.noResponse.length) {
-      out.push('**No response (raiser did not defend):**');
-      for (const nr of m.debate.noResponse) {
-        const arrow = nr.previousTier && nr.previousTier !== nr.tier ? `${nr.previousTier} → ${nr.tier}` : (nr.previousTier || nr.tier);
-        out.push(`- ${nr.id}: ${arrow} (no response — original stands)`);
-      }
-      out.push('');
-    }
-  }
-
-  out.push('## Cost\n');
-  out.push('| Model | Status | Duration | Cost |\n|---|---|---|---|');
-  for (const r of m.cost.rows) { out.push(`| ${r.model} | ${r.status} | ${fmtDur(r.durationMs)} | ${formatCost(r.cost)} |`); }
-  out.push(`| **Wave total** | | | ${formatCost(m.cost.total)} |`);
-
-  return out.join('\n') + '\n';
-}
-
 /**
  * @param {{verdict:object, wave?:object, tallyRecord?:object}} sources
  * @param {{format:'md'|'html'}} opts
@@ -213,8 +286,11 @@ function renderMd(m) {
  */
 function buildReport(sources, opts = {}) {
   const model = toModel(sources.verdict, sources.wave);
+  // ⚠️ Both requires MUST stay lazy — nothing lints this. Each renderer requires ./report back at
+  // load for TIER_ORDER/SYMBOL; hoisting either resolves that back-require against THIS file's
+  // not-yet-assigned module.exports, so the sibling gets undefined and renders a TypeError.
   if (opts.format === 'html') { return require('./report-html').renderHtml(model); }
-  return renderMd(model);
+  return require('./report-md').renderMd(model);
 }
 
-module.exports = { buildReport, toModel, TIER_ORDER, SYMBOL };
+module.exports = { buildReport, toModel, TIER_ORDER, SYMBOL, isSeatSpace };