arkgate 2.12.0 → 3.0.0

package/CHANGELOG.md

@@ -4,6 +4,128 @@ All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are do
 
 ## Unreleased
 
+No changes are scheduled after the prepared stable release.
+
+## 3.0.0 — 2026-07-13
+
+### Added
+
+- **Compact active-host onboarding:** `ark start` now asks for the active host on a TTY (or
+  detects it non-interactively), writes at most five project files / 25 KB, and uses one
+  package/MCP-backed router instead of copied per-host skill packs. It does not alter
+  `package.json` unless `--install` is explicit; host removal and re-addition are previewed,
+  safe, and reversible.
+
+- **Canonical analysis engine bundle:** graph policy, cycle evaluation, and configuration
+  diagnostics now have one Kernel implementation shared by the library, CLI, and MCP. A documented
+  standalone CLI bundle preserves the package's self-hosted boundary and is protected by a CI drift
+  check and Kernel/bundle parity fixtures.
+- **Symbol-aware semantic analysis:** one Kernel extractor now resolves forbidden ambient
+  capabilities through local symbols, aliases, `globalThis`, static keys, and destructuring, and
+  classifies TS/JS dependency forms across ESM, CommonJS, type-only, and unresolved dynamic edges.
+  CLI, safety diagnostics, and AICodeGate consume the same generated implementation. The supported
+  soundness envelope is documented and guarded by a labeled adversarial corpus plus TypeScript
+  5/6/7 and mutation matrices.
+- **Versioned adapter parity:** CLI JSON, MCP structured results, write hooks, ESLint, and the
+  GitHub Action now expose the same `ark.analysis-result` v1 diagnostics. A generated JSON Schema,
+  committed compatibility fixture, exact golden corpus, and mandatory CI parity job prevent
+  adapter drift; source-policy decisions no longer live privately inside ESLint.
+- **Runtime package isolation:** the next-major `arkgate` root now contains only gate APIs. The
+  optional runtime and NestJS adapter build independently as experimental `@arkgate/runtime`;
+  deprecated subpath shims contain no implementation. The non-atomic store is now presented as
+  `InMemoryEventBuffer`, with production recovery and durability requirements made explicit.
+
+### Fixed
+
+- **Deterministic offline setup tests:** `ark start` fixtures that do not exercise installation now
+  pass `--no-install`, preventing a published current version from turning unit tests into registry
+  installs.
+- **Node 26 watch fallback:** `ark-check --watch` falls back to bounded polling when recursive
+  `fs.watch` fails asynchronously with `EMFILE`, instead of crashing the watcher process.
+
+## 2.13.0 — 2026-07-11
+
+- Added the stable, deterministic analysis IR and public in-memory API: `loadContract`,
+  `analyzeProject`, `analyzeChange`, and `explainViolation`.
+
+### Fixed
+
+- **Temp-worktree release verification:** Codex multi-project fixtures now keep the simulated
+  primary project outside temp-root policy even when the repository itself is checked out under
+  `/tmp`, so the release confidence gate is reproducible without weakening fail-closed temp MCP
+  rewrites.
+- **Test and Codex-home isolation:** Vitest now redirects `CODEX_HOME` to a disposable test home,
+  so direct helper calls and spawned CLIs cannot rewrite the developer's real Codex config. Temp
+  project installs also recognize an explicitly exported default `~/.codex` as the real home and
+  skip implicit MCP rewiring unless `--codex-home` is requested.
+- **Workflow retry boundary:** `RetryPolicy` now retries only `step.execute` failures and
+  timeouts. A snapshot-store or completion-audit failure after a successful effect is terminal,
+  enters compensation, and never executes the completed effect again.
+- **Scanner bypass corpus:** forbidden-global checks now use single-file TypeScript symbols, so
+  local `fetch` / `Date` bindings do not false-positive while ambient aliases and
+  `globalThis.Date.now()` remain violations. CLI, AICodeGate, and ESLint share the verdict.
+  TypeScript `import x = require('...')` now creates a dependency edge, and direct
+  `require(expr)` emits `DYNAMIC_REQUIRE_NOT_ALLOWLISTED` (strict profiles fail unless the file
+  is reviewed in `dynamicImportAllowlist`). The scan cache is versioned past the old semantics.
+
+### Added
+
+- **Versioned configuration contract:** `ark.config.json` now carries `$schema` and
+  `schemaVersion: "1.0"`. One canonical loader validates and migrates the contract for CLI, MCP,
+  and ESLint with path-specific diagnostics and a fail-closed unknown-key policy. The generated
+  JSON Schema ships at the stable `arkgate/schema` subpath; unversioned configs from the previous
+  major migrate deterministically in memory.
+- **Active-host enforcement capabilities:** doctor and adoption checks now project
+  `hard-write`, `advisory-write`, `merge-gate`, and `repair-payload` from the active host only,
+  with evidence paths and a separate repo-wide inventory. Claude/Grok hooks can no longer make
+  Codex, Cursor, or an unknown host appear hard-enforced; human doctor output names the host and
+  separates advisory MCP checks from the shared CI check and its external required-status policy.
+- **Host-compatible enforcement profiles:** generated CI now uses `--strict-merge`, while
+  `--strict` remains a compatibility alias; neither depends on an editor hook. The optional
+  `--require-write-hook <host>` check verifies Claude/Grok explicitly, reports Cursor/Codex as
+  advisory-write plus the shared CI check only, and makes `ark start` reject impossible,
+  mismatched, or preserved-incompatible requests before writing project files.
+- **Executable regression confidence gate:** `npm run test:confidence` now combines the existing
+  broad Vitest coverage thresholds with real Stryker mutation testing over write-path detection,
+  dependency extraction, forbidden-global detection, baseline keys, and workflow retry logic.
+  CI and both npm release paths invoke the same gate; mutation score fails below 90%.
+- **Q2 repair dogfood closed:** deny → `ARK_REPAIR_JSON`/`autoPatch` → host re-inject →
+  revalidation allow proven via shipped `bin/ark-mcp.mjs` (Claude/Grok hooks already
+  `--hook-repair`; `doctor.writePath.mode = repair`).
+- **Q3 weakest-link sensors:** `bin/lib/weakest-link.mjs` + doctor adoption gaps
+  (`enforcement-ci-*`, config drift, pre-commit missing); maintained
+  `templates/hooks/pre-commit-ark`; optional `ARK_DOCTOR_GITHUB=1` branch-protection
+  report (honest unavailable / not-protected — never fake green).
+- **Q5 scale bench:** `scripts/ark-scale-bench.mjs` / `npm run bench:scale` (real
+  ark-check cold/warm p50/p95 on generated trees).
+- **Q6 module budgets:** `scripts/check-module-budgets.mjs` / `npm run check:module-budgets`.
+- **Q8 fault-injection tests:** compensation failure audit, cancellation-ignoring timeout,
+  outbox retry attempts + clear (durability boundary).
+- **Q9 threat model + package allowlist:** `docs/threat-model.md`,
+  `scripts/verify-package-files.mjs` / `npm run check:package-files`.
+
+### Changed
+
+- **Product identity retained:** ArkGate, `arkgate`, the `arkgate*` / `ark*` commands,
+  `ark.config.json`, `ark://`, `ARK_*`, the existing GitHub repository, and `arkgate.online` remain
+  canonical. The unpublished local rename experiment was reversed before any external cutover.
+- **Truthful host support matrix and runtime status:** one capability-backed matrix now drives
+  README and generated `AGENTS.md` guarantees for Claude, Grok, Cursor, and Codex. Doctor exposes
+  both the supported host profile and repository evidence; public docs distinguish hard local
+  hooks, advisory MCP, CI checks, and required-status merge blocking. The optional runtime/Nest
+  surface is explicitly experimental and is not required for architecture-gate adoption.
+- **Active host vs deferred Codex on upgrade/doctor:** `/ark-upgrade` greens the
+  **session host** first; Codex `$CODEX_HOME` prompts/MCP multi-project debt is
+  **deferred** when the session host is **known and not Codex** (Grok/Claude/Cursor).
+  Unknown host (CI/plain shell) keeps original severity. Doctor marks deferred gaps
+  `deferred: true` (severity `info`), prefixes the message, and omits them from Top
+  actions. Temp/upgrade MCP `--root` stays urgent (fail-closed). New helpers:
+  `detectActiveAgentHost`, `codexConcernIsActive` (do not treat `CODEX_HOME` alone
+  as Codex). `ark-check` advisory for stale Codex-home skills notes the deferral.
+  Completion contract adds **Active host** / **Deferred hosts**.
+- **ROADMAP Track Q:** Q2 `done`; Q3/Q5/Q6/Q8/Q9 `doing` with residual external/DoD
+  items listed; Q4/Q7/Q10 remain `todo` (no false complete).
+
 ## 2.12.0 — 2026-07-10
 
 ### Fixed

package/README.md

@@ -16,6 +16,9 @@ and makes sure a “green” check means something real.
 
 </div>
 
+> **ArkGate 3.0** passed its independent beta-exit audit. The npm badge reports the version
+> currently available in the registry.
+
 ---
 
 ## The only flow (humans and agents)
@@ -23,8 +26,10 @@ and makes sure a “green” check means something real.
 If you remember nothing else:
 
 ```text
-1.  npx arkgate start          ← walk tree → contract → **day-zero origin** → gates
-2.  /ark-autopilot             ← explore first, dual plan, safe fixes, leave gates on
+1.  npx arkgate start          ← read-only preview: files + commands + projected coverage
+    npx arkgate start --apply  ← apply exactly the previewed mutations
+2.  Compact router             ← MCP/AGENTS routes place, validate, and architecture checks
+    /ark-autopilot             ← optional full guided workflow after its skill pack is installed
 3.  npx arkgate-check --doctor ← “where am I?” anytime (one status screen)
 ```
 
@@ -36,22 +41,26 @@ If you remember nothing else:
 | New ArkGate version | `/ark-upgrade` |
 
 **Everything else is optional.** You do not need to learn “modes”, 11 skills, or the runtime
-kernel to get value. Agents that are unsure should **only** run `/ark-autopilot` (or the three
-commands above).
+kernel to get value. The compact router is enough for normal work; install `/ark-autopilot` only
+when you want the full guided workflow.
 
 ---
 
 ## What it is (30 seconds)
 
-**ArkGate** = a machine-readable architecture file (`ark.config.json`) enforced in two places
-you always care about:
+**ArkGate** = a machine-readable architecture file (`ark.config.json`) enforced at CI, with
+host-specific protection while an agent writes:
+
+**Name note:** this is the TypeScript architecture-enforcement package published as `arkgate`.
+It is not affiliated with the separate Archgate CLI project.
 
 | When | Tool |
 |------|------|
-| **While the AI writes** | `arkgate-mcp` write gate (blocks bad edits) |
-| **Before merge** | `arkgate-check` CI |
+| **While the AI writes** | Hard PreToolUse block on Claude/Grok; advisory MCP on Cursor/Codex |
+| **Before merge** | `arkgate-check` CI check; merge blocking requires it as a required status |
 
-Optional later: runtime kernel (`createArkKernel`) if you want event/intent governance.
+Optional later: the **experimental** runtime kernel (`createArkKernel`) if you want to evaluate
+event/intent governance. It is not required for gate adoption.
 
 It is **not** a web framework, ORM, or job runner.
 
@@ -61,12 +70,13 @@ It is **not** a web framework, ORM, or job runner.
 
 ## Who it’s for
 
-Same start for almost everyone: **`npx arkgate start` → `/ark-autopilot`**.
+Same start for almost everyone: **`npx arkgate start` → compact router** (then
+`/ark-autopilot` when you opt into the full skill pack).
 
 | You are… | Same start, then… |
 |----------|-------------------|
-| Builder with AI | Stay on autopilot until doctor is happy |
-| Tech lead on a messy monorepo | Autopilot (or deeper `/ark-adopt` if you want a focused brownfield pass) |
+| Builder with AI | Use the compact router and doctor; add autopilot when you want guided remediation |
+| Tech lead on a messy monorepo | Add autopilot (or deeper `/ark-adopt` for a focused brownfield pass) |
 | Power user | Same flow; use `ark-check --plan` / `--coverage` when you want the raw sensor |
 
 **Not for:** no TypeScript, “just one lint rule”, or looking for an app framework.
@@ -82,7 +92,7 @@ mode you configure:
 |-------|--------|-----------|
 | **Suggest** | New/thin project | Finish `start` + autopilot |
 | **Adapt** | Not fully protected yet | Keep autopilot / adopt until clean |
-| **Enforce** | Gates can honestly protect you | Build features; fix with `/ark-fix` if blocked |
+| **Enforce** | Contract coverage is honest and checked edges are clean | Keep the host-appropriate write path; require the CI status if it must block merges |
 
 You **arrive** at Enforce. You never “turn on Enforce”.
 
@@ -106,8 +116,9 @@ Full checklist (CI, MCP, Codex, imports): **[docs/migrate-from-ark-runtime-kerne
 
 ```bash
 npm install -D arkgate typescript
-npx arkgate start                 # contract → day-zero origin → gates + plan
-# in agent:
+npx arkgate start                 # read-only preview: exact mutations + projected coverage
+npx arkgate start --apply         # apply the compact contract → active-host router → CI plan
+# optional, after installing the full skill pack:
 #   /ark-autopilot
 npx arkgate-check --doctor        # status light + next action
 ```
@@ -117,7 +128,7 @@ Aliases `ark` / `ark-check` / `ark-mcp` still work. **npm / pnpm / yarn**. No in
 <details>
 <summary>What <code>/ark-autopilot</code> does under the hood (optional detail)</summary>
 
-1. Setup if needed (`ark start` — contract, then **day-zero origin**, then gates).
+1. Setup if needed (`ark start` — compact contract + active-host router + CI gate; create an HTML/origin report explicitly when you need one).
 2. **Explore pass** (decision-grade map of *this* product; field path when demos exist).
 3. **Dual plan:** **A** remediation from `--plan` (mechanical-safe only by default); **B** pattern/evolution bets (never auto-applied as mechanical-safe). Empty plan ≠ “healthy” without explore/B.
 4. Apply A → re-check; judgment only when you ask for full apply.
@@ -143,11 +154,12 @@ npx arkgate-check --coverage
 
 ## Other skills (only when you need them)
 
-Install once: `npx arkgate-check --install-agent-gates`  
+Install once: `npx arkgate-check --install-agent-gates`
 (`--tools claude,cursor,codex,grok` to pick hosts.)
 
-**Default is always `/ark-autopilot`.** The rest are escapes, not a second curriculum.
-Generated `AGENTS.md` includes a **skill routing table** (trigger → skill). Skills are
+**The compact router is the default; `/ark-autopilot` is the full guided option.** The rest are
+escapes, not a second curriculum. Full-install `AGENTS.md` includes a **skill routing table**
+(trigger → skill). Skills are
 **dual-engine** (CLI sensor + read real source) and end with a fixed **completion contract**;
 critical handoffs say **STOP** and name the next skill (hosts must follow — markdown cannot chain calls).
 When the host allows it, skills may **fan out parallel subagents** (disjoint scopes);
@@ -155,8 +167,9 @@ otherwise they **fall back to sequential**.
 
 **Write path (Track W):** Prefer MCP **`ark_prepare_write`** when you have a snippet (place +
 constrain + validate + optional `autoPatch` + `judgmentBrief`). PreToolUse hooks with
-`--hook-repair` emit machine-readable repair payloads on deny (still hard block; never silent
-write). See [docs/ai-gates.md](docs/ai-gates.md).
+`--hook-repair` on Claude/Grok emit machine-readable repair payloads on deny (still hard block;
+never silent write). Cursor/Codex MCP calls remain advisory. See
+[docs/ai-gates.md](docs/ai-gates.md).
 
 | Need | Skill |
 |------|--------|
@@ -170,11 +183,24 @@ write). See [docs/ai-gates.md](docs/ai-gates.md).
 | Edit `ark.config.json` safely | `/ark-contract` |
 | Plain-language tour of the report | `/ark-explain` |
 | Deep coverage + opportunities audit | `/ark-coverage` |
-| Migrate hand-rolled bus/outbox (TS) | `/ark-runtime` |
-| Bump ArkGate + refresh all agent hosts | `/ark-upgrade` |
+| Evaluate the experimental runtime against hand-rolled bus/outbox (TS) | `/ark-runtime` |
+| Bump ArkGate + refresh active host (defer Codex when not on Codex) | `/ark-upgrade` |
+
+### Host enforcement support
+
+<!-- arkgate-host-support:start -->
+| Host | Local write boundary | MCP validation | CI / merge path | Repair payload |
+|------|----------------------|----------------|-----------------|----------------|
+| Claude Code | Hard block for PreToolUse `Write` / `Edit` / `MultiEdit` | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | Emitted on hook deny; host must re-inject |
+| Grok Build | Hard block for PreToolUse `write` / `search_replace` (plus aliases) | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | Emitted on hook deny; host must re-inject |
+| Cursor | No hard hook; MCP/rules are advisory | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | No hard-boundary payload |
+| OpenAI Codex | No hard hook; MCP/rules are advisory | Advisory; the agent must call it | Available `arkgate-check --strict-merge` check | No hard-boundary payload |
+
+This table describes the supported profile **after its files are installed and the host loads/trusts them**. A hard local boundary covers only the listed hook operations; alternate tools, direct filesystem writes, and human edits still rely on CI. MCP validation is advisory because the agent must call it. The CI check blocks a merge only when the repository makes that status required. Repair payloads never write code silently: the host must re-inject the candidate and ArkGate revalidates it. Run `arkgate-check --doctor` for the evidence actually detected in the current repository.
+<!-- arkgate-host-support:end -->
+
+Detailed setup: [docs/ai-gates.md](docs/ai-gates.md).
 
-Hosts with full MCP/hooks: **Claude Code**, **Cursor**, **Codex**, **Grok Build**.  
-More: [docs/ai-gates.md](docs/ai-gates.md). Health: **`npx arkgate-check --doctor`**.
 ---
 
 ## How it works (short)
@@ -182,22 +208,29 @@ More: [docs/ai-gates.md](docs/ai-gates.md). Health: **`npx arkgate-check --docto
 ```
 ark.config.json
       │
-      ├─► Write gate (arkgate-mcp)  — agent PreToolUse / MCP tools
-      ├─► CI gate (arkgate-check)   — PR / main
-      └─► Runtime kernel (opt-in)   — only if you call it
+      ├─► Write path (arkgate-mcp)  — hard hook or advisory MCP, by host
+      ├─► CI check (arkgate-check)  — merge block only when status is required
+      └─► Runtime kernel            — experimental opt-in; gates do not need it
 ```
 
 - **Presets:** hexagonal, layered, feature-sliced, monorepo, ui-surface, vertical-slice, ddd-bounded-contexts (+ aliases clean-architecture / onion-architecture). Layers start optional; doctor suggests tightening populated cores. Cross-slice / cross-context bans use optional `peerIsolation` rules.
+- **Versioned config:** generated contracts include `$schema` + `schemaVersion`; CLI, MCP, and
+  ESLint validate through the same loader. Unknown keys fail with their JSON path. See the
+  [configuration and editor guide](docs/configuration.md).
 - **Frameworks:** Nest / Next / express / library layouts get sensible globs on init so day-one coverage is real.
 - **Brownfield:** baseline ratchet, refuse to freeze a wrong contract, `/ark-adopt` for mature trees.
-- **Agents:** skills install into Claude / Cursor / Codex / Grok; `ark start` freezes **day-zero origin** under `.ark/reports/` **before** agent docs/CI templates.
+- **Agents:** `ark start` asks for (or detects) one active host and writes one compact router, not copied skill packs, in at most five project files and 25 KB. Use `ark-check --install-agent-gates --skills-only --tools <host>` later when you explicitly want the full `/ark-*` skill set. Reports are opt-in with `ark-check --report`.
 - **Write protocol (2.10 / Track W):** mechanical-safe **autoPatch** on the write gate (`import type`); MCP **`ark_prepare_write`** (place + validate + patch + judgmentBrief); opt-in hook **`--hook-repair`** (`ARK_REPAIR_JSON`); doctor **`writePath`** (repair vs reject-only); loop-cost eval (`npm run eval:loop-cost`). Port-proof inject is **judgment** (arity change), not silent auto-apply.
-- **Fail-closed CI (2.11):** `--strict` combines config coverage, required CI/MCP/write gates,
-  PreToolUse hook presence, and bypass diagnostics for dynamic imports, TypeScript suppressions,
-  explicit `any` casts, InMemory runtime defaults, and disabled peer isolation.
-- **Trust / coverage (2.12):** package unit-test floors on the broad product surface
+- **Fail-closed CI (2.11):** `--strict-merge` combines config coverage, shared gate-file
+  presence, and bypass diagnostics for dynamic imports, TypeScript suppressions, explicit `any`
+  casts, InMemory runtime defaults, and disabled peer isolation. `--strict` is a compatibility
+  alias. Neither requires an editor hook; use `--require-write-hook claude|grok` when that local
+  guarantee is part of the check.
+- **Trust / coverage (3.0 release baseline):** package unit-test floors on the broad product surface
   (statements/lines **≥80%**, branches/functions **≥85%**; enforcement-critical modules **≥95%**
-  branch). Explore dual-plan + day-zero origin first (see above). Roadmap next: Q2 repair dogfood matrix.
+  branch). The V05 beta-exit audit passed with 12 pinned public adoptions, 97% median governed
+  coverage, and zero P0/P1 findings. Stable publication remains the signed-tag, GitHub Release,
+  and provenance-backed npm workflow documented in [the 3.0.0 release notes](docs/releases/3.0.0.md).
 - **TypeScript:** project compilers 5.x / 6.x / 7.x — gate falls back to a nested JS-API TypeScript when TS 7’s main export is version-only ([docs/typescript-support.md](docs/typescript-support.md)).
 
 ### Why not only ESLint / dependency-cruiser / Nx?
@@ -205,7 +238,7 @@ ark.config.json
 | | ArkGate | Typical boundary linter |
 |--|:---:|:---:|
 | CI import rules | ✅ | ✅ |
-| Block **AI writes** before they land | ✅ | ❌ |
+| Hard-block supported-host AI writes before they land | ✅ (Claude/Grok hooks) | ❌ |
 | Contract agents can read (`ark://manifest`) | ✅ | ❌ |
 | Placement tools (`ark_place`, …) | ✅ | ❌ |
 | Honest governed % + adoption path | ✅ | ❌ |
@@ -219,13 +252,17 @@ ark.config.json
 ## Common commands
 
 ```bash
-npx arkgate start                         # guided setup: contract → origin → gates → plan
+npx arkgate start                         # guided read-only preview
+npx arkgate start --apply                 # apply the compact active-host setup (≤5 files)
+npx arkgate start --tools codex --apply   # select the host explicitly
+npx arkgate start --install --apply       # also add arkgate to package.json (explicit only)
+npx arkgate start --remove-host codex     # preview compact-host removal; add --apply to confirm
 npx arkgate-check --doctor                # health + Adoption gaps (not just fitness)
 npx arkgate-check --doctor --json         # machine-readable doctor.adoption
 npx arkgate-check --strict                # fail-closed CI + installed-gate/safety checks
 npx arkgate-check --plan                  # safe-to-auto-fix vs your call
 npx arkgate-check --coverage              # Governed: N%
-npx arkgate-check --report ark-report.html  # showcase HTML + Adoption card + origin/latest
+npx arkgate-check --report ark-report.html  # showcase HTML (opens in browser on local TTY; --no-open to skip)
 npx arkgate-check --baseline              # only NEW violations fail
 npx arkgate upgrade                       # package + gates/skills + MCP/Codex normalize
 ```
@@ -239,24 +276,25 @@ CI (example):
 
 ---
 
-## Optional: runtime kernel
+## Optional experimental runtime kernel
 
-Gates need **no app code changes**. If you also want runtime intent/event contracts,
-use the **opt-in** subpath (preferred):
+Gates need **no app code changes**. The runtime API is currently **experimental** and is not a
+production-readiness claim. If you want to evaluate runtime intent/event contracts, use the
+separate experimental package:
 
 ```ts
-import { createStrictArkKernelFromConfig } from 'arkgate/runtime';
+import { createStrictArkKernelFromConfig } from '@arkgate/runtime';
 // see docs/production-hardening.md and docs/package-surface.md
 ```
 
-Root `import { … } from 'arkgate'` still re-exports kernel symbols for compatibility
-in this major; prefer `arkgate/runtime` for new code.
+The stable `arkgate` package does not bundle runtime implementation. The deprecated
+`arkgate/runtime` forwarding shim requires `@arkgate/runtime` and is removed in ArkGate 4.
 
-NestJS: `arkgate/nestjs` (optional peer `@nestjs/common`).
+NestJS: `@arkgate/runtime/nestjs` (optional peer `@nestjs/common`).
 
 ### Durability stance (built-in stores)
 
-The kernel’s default stores (`InMemoryOutboxStore`, `InMemoryAuditStore`,
+The kernel’s default stores (`InMemoryEventBuffer`, `InMemoryAuditStore`,
 `InMemoryReadModelStore`, `InMemoryWorkflowStore`) are **reference in-memory only**:
 fine for tests, demos, and single-process local work — they **do not** survive restarts
 and are **not** production durability. Implement the store interfaces (or inject your own)
@@ -269,7 +307,7 @@ for real systems. Details: [docs/production-hardening.md](docs/production-harden
 | Audience | Link |
 |----------|------|
 | New builders (plain language) | [docs/enthusiast/](docs/enthusiast/README.md) |
-| **Package surface (stable vs opt-in)** | [docs/package-surface.md](docs/package-surface.md) |
+| **Package surface (stable vs experimental)** | [docs/package-surface.md](docs/package-surface.md) |
 | Wire Claude / Cursor / Codex / Grok + **ESLint (CI-parity)** | [docs/ai-gates.md](docs/ai-gates.md) |
 | **TypeScript 5 / 6 / 7 support** | [docs/typescript-support.md](docs/typescript-support.md) |
 | Migrate from `ark-runtime-kernel` | [docs/migrate-from-ark-runtime-kernel.md](docs/migrate-from-ark-runtime-kernel.md) |
@@ -277,6 +315,7 @@ for real systems. Details: [docs/production-hardening.md](docs/production-harden
 | Agent / MCP tools | [docs/agent-guide.md](docs/agent-guide.md) |
 | Demos | [docs/demos/](docs/demos/) |
 | Examples | [examples/](examples/README.md) |
+| Release 3.0.0 | [release notes and publication checklist](docs/releases/3.0.0.md) |
 | Roadmap | [ROADMAP.md](ROADMAP.md) · [Changelog](CHANGELOG.md) |
 
 ---
@@ -290,11 +329,11 @@ npm run typecheck
 npm run check:architecture   # Ark gates itself
 ```
 
-**Website:** [arkgate.online](https://www.arkgate.online/)  
-**npm:** [`arkgate`](https://www.npmjs.com/package/arkgate) · formerly `ark-runtime-kernel`  
-**Product:** **ArkGate** — architecture co-pilot / gate for AI TypeScript (not a runtime kernel).  
-CLI: `arkgate` · `arkgate-check` · `arkgate-mcp` (aliases `ark` / `ark-check` / `ark-mcp` still work for one major).  
-MCP registry: `io.github.pedroknigge/arkgate`.  
+**Website:** [arkgate.online](https://www.arkgate.online/)
+**npm:** [`arkgate`](https://www.npmjs.com/package/arkgate) · formerly `ark-runtime-kernel`
+**Product:** **ArkGate** — architecture co-pilot / gate for AI TypeScript (not a runtime kernel).
+CLI: `arkgate` · `arkgate-check` · `arkgate-mcp` (aliases `ark` / `ark-check` / `ark-mcp` still work for one major).
+MCP registry: `io.github.pedroknigge/arkgate`.
 **Source:** [github.com/pedroknigge/arkgate](https://github.com/pedroknigge/arkgate)
 
 Node ≥ 18 · **MIT**.