arkgate 4.6.0 → 4.6.2

package/CHANGELOG.md

@@ -5,6 +5,59 @@ in the immutable pre-2.0 archive linked below.
 
 ## Unreleased
 
+## 4.6.2 — 2026-08-16
+
+**Patch** over **4.6.1**. First-contact copy: a newcomer (human or coding agent) sees what
+to do in a few lines — `arkgate` / `arkgate-check --help`, start wrap-up, doctor light +
+#1, write-gate deny, SessionStart, MCP tool order, and the five doors. Same 13 skill names.
+**No required config migration.**
+
+**Status: prepared** (not yet on npm `latest`; see `docs/releases/4.6.2.md`).
+
+### Changed
+
+- **First-run help:** `arkgate --help` and `arkgate-check --help` are short; encyclopedia
+  text is `--help --all`. `arkgate upgrade --help` is preview vs apply.
+- **Start wrap-up:** doctor → `/ark-adopt` session 0 (not `/ark-autopilot` as step 1).
+- **Doctor:** operating-mode light + primary next action #1 print first.
+- **Write-gate deny:** `blocked {file} — {reason}` then `Next:` (move the import / `/ark-place`).
+  Rule id on a following line. No “call ark_manifest”.
+- **Agents:** SessionStart points at `/ark-adopt` or `arkgate-check --doctor`. `ark_identity`
+  is first. `ark_check` is a scan (pass/fail/incomplete), not a yes/no architecture score.
+  `server.json` first sentence is the layers definition.
+- **Skills:** five doors open with when + steps. Shortcuts are not the first-run menu.
+- **Status:** `nextAction` is `map-leftover-design` when leftover design work remains
+  (never `stay-enforced`).
+- **npm `description`:** `One architecture config. One check. One coach.` (not “co-pilot”).
+- **`docs/use.md`:** Cursor hard-blocks Write/StrReplace when hooks are trusted;
+  Codex/OpenCode stay advisory.
+
+## 4.6.1 — 2026-08-14
+
+**Patch** over **4.6.0**. Five-door autonomy (skills write or map in-turn; CLI is sensor +
+gate) plus team parliament (law vs feature: stewards, mixed-PR deny, ratchet vs the merge
+base, cheap `--changed` check). Same 13 skill names. Steward identity is a GitHub handle or
+email, not git `user.name`. **No required config migration.**
+
+**Status: published** (on npm `latest`; see `docs/releases/4.6.1.md`).
+
+### Added
+
+- **Five-door autonomy (SK01–SK05):** `/ark-adopt`, `/ark-place`, `/ark-autopilot`,
+  `/ark-explore`, `/ark-upgrade` write or map in the same turn. The other eight names stay
+  installed as shortcuts. Invoking a door is the approval; the CLI does not apply the change.
+- **Team parliament (TW01–TW08):** mixed law+product deny; optional `stewards` (GitHub handle
+  or email); `--contract-session` / `--contract-diff` / `--changed --base` / `--against` /
+  `--persona` / `--author`; `ark status --vs`; doctor `stewardNudge` (ask or show list drift).
+  `stewards` is excluded from the policy hash.
+
+### Changed
+
+- Doctor, compact router, and public lanes prefer the five doors. Historical changelogs stay
+  as shipped.
+- Published 4.6.1 tarball `README.md` still banners 4.6.0 (packed at `1eadc96` before the
+  pointer flip). Tree README on `main` is current. No 4.6.2 for that banner.
+
 ## 4.6.0 — 2026-08-12
 
 **Minor** over **4.5.7**. Understandable Ark: doctor, HTML, skills, and public docs use common
@@ -13,7 +66,7 @@ software words (import rules, leftover design work, pre-write block) while **Ark
 “always latest” floor Codex already had. **No required config migration.** JSON field names
 and `ruleId`s stay stable. No new skill names, sensors, or scores.
 
-**Status: prepared** (not yet on npm `latest`; see `docs/releases/4.6.0.md`).
+**Status: published** (on npm `latest`; see `docs/releases/4.6.0.md`).
 
 ### Added
 

package/README.md

@@ -16,8 +16,9 @@ and makes sure a “green” check means something real.
 
 </div>
 
-> **ArkGate 4.6.0** is prepared — clearer language + shared agent home skills.
-> [4.6.0 notes](docs/releases/4.6.0.md) · [4.5.7](docs/releases/4.5.7.md) (npm `latest`) · [4.5.6](docs/releases/4.5.6.md) · [Docs hub](docs/README.md) · [Product voice](docs/product-voice.md)
+> **ArkGate 4.6.1** is on npm `latest` — five doors + a lock on the constitution.
+> **4.6.2** is prepared on this tree (first-contact copy; not yet `latest`).
+> [4.6.2 notes](docs/releases/4.6.2.md) · [4.6.1](docs/releases/4.6.1.md) · [4.6.0](docs/releases/4.6.0.md) · [Docs hub](docs/README.md) · [Product voice](docs/product-voice.md)
 
 ---
 
@@ -48,10 +49,13 @@ dependency inversion — **not a score**). Leftover lenses mean design work may
 imports are green. Details: [use.md — Improvement compass](docs/use.md#improvement-compass-not-a-score).
 
 ```text
-start → doctor (+ compass) → day-to-day (place + gate)
-                         ↘ optional /ark-autopilot after skill pack
+start → doctor (+ compass) → /ark-adopt (session 0) → day-to-day /ark-place
+                         ↘ /ark-explore then /ark-autopilot when leftover design remains
 ```
 
+Teams: keep the constitution out of product PRs. Local gate
+`ark-check --changed --base origin/dev`. Steward law PRs use `--contract-session`.
+
 Aliases `ark` / `ark-check` / `ark-mcp` still work. npm / pnpm / yarn. No install lifecycle scripts.
 
 ![Write gate: agent blocked, then self-corrects](docs/assets/ark-write-gate.svg)
@@ -210,7 +214,9 @@ for real systems. Details: [docs/production-hardening.md](docs/production-harden
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Current release (4.5.7 on npm `latest`) | [docs/releases/4.5.7.md](docs/releases/4.5.7.md) · [CHANGELOG](CHANGELOG.md) |
+| Current release (4.6.1 on npm `latest`) | [docs/releases/4.6.1.md](docs/releases/4.6.1.md) · [CHANGELOG](CHANGELOG.md) |
+| Prepared (4.6.2 — not yet `latest`) | [docs/releases/4.6.2.md](docs/releases/4.6.2.md) |
+| Prior (4.5.7) | [docs/releases/4.5.7.md](docs/releases/4.5.7.md) |
 | Prior (4.5.0) | [docs/releases/4.5.0.md](docs/releases/4.5.0.md) |
 | Prior (4.4.0) | [docs/releases/4.4.0.md](docs/releases/4.4.0.md) |
 | Prior (4.3.0) | [docs/releases/4.3.0.md](docs/releases/4.3.0.md) |

package/bin/ark-check-runtime.mjs

@@ -95,6 +95,7 @@ import {
   writeArkRulesTemplates,
 } from './lib/presets.mjs';
 import { loadArkConfigContract, parseArkConfigJson } from './lib/config-contract.mjs';
+import { checkUsage, checkUsageAll } from './lib/first-run-help.mjs';
 import { createAdapterResult } from './lib/adapter-contract.mjs';
 import { collectGovernedFiles, normalize, walk } from './lib/scan-files.mjs';
 import { configWarning } from './lib/config-warnings.mjs';
@@ -103,6 +104,13 @@ import { ANALYSIS_COMPLETENESS, analysisIncompleteStatement } from './lib/analys
 import { reportUnavailableAnalysis } from './lib/unavailable-analysis.mjs';
 import { validateHardWriteRequest } from './lib/enforcement-profiles.mjs';
 import { analyzePolicyTransition } from './lib/policy-delta-io.mjs';
+import {
+  applyAgainstRatchet,
+  bindTeamBaseRefs,
+  filterChangedGovernedFiles,
+  runTeamPreflight,
+  ungovernedDumpMessage,
+} from './lib/team-parliament-io.mjs';
 import { tryResidentDoctor } from './lib/resident-doctor-client.mjs';
 import { createDesignDeltaCheck } from './lib/design-delta.mjs';
 import {
@@ -134,6 +142,14 @@ function parseArgs(argv) {
     policyBase: undefined,
     policyBaseRef: undefined,
     policyAck: undefined, failOnNewSmells: false, baseRef: undefined,
+    contractSession: false,
+    contractDiff: false,
+    changed: false,
+    against: undefined,
+    base: undefined,
+    persona: undefined,
+    author: undefined,
+    failUngoverned: false,
     updateBaseline: false,
     noCache: false,
     resident: false,
@@ -151,12 +167,13 @@ function parseArgs(argv) {
     noOpenReport: false,
     version: false,
     help: false,
+    all: false,
     followConfigRoot: false,
   };
   const requireValue = (flag, index) => {
     const value = argv[index + 1];
     if (value === undefined || value.startsWith('-')) {
-      throw new Error(`Missing value for ${flag}. Run ark-check --help for usage.`);
+      throw new Error(`Missing value for ${flag}. Run arkgate-check --help for usage.`);
     }
     return value;
   };
@@ -241,14 +258,22 @@ function parseArgs(argv) {
     else if (arg === '--policy-base') args.policyBase = requireValue(arg, i++);
     else if (arg === '--policy-base-ref') args.policyBaseRef = requireValue(arg, i++);
     else if (arg === '--policy-ack') args.policyAck = requireValue(arg, i++); else if (arg === '--fail-on-new-smells') args.failOnNewSmells = true; else if (arg === '--base-ref') args.baseRef = requireValue(arg, i++);
+    else if (arg === '--contract-session') args.contractSession = true;
+    else if (arg === '--contract-diff') args.contractDiff = true;
+    else if (arg === '--changed') args.changed = true;
+    else if (arg === '--against') args.against = requireValue(arg, i++);
+    else if (arg === '--base') args.base = requireValue(arg, i++);
+    else if (arg === '--persona') args.persona = requireValue(arg, i++);
+    else if (arg === '--author') args.author = requireValue(arg, i++);
     else if (arg === '--root') args.root = path.resolve(requireValue(arg, i++));
     else if (arg === '--config') args.config = requireValue(arg, i++);
     else if (arg === '--manifest') args.manifest = requireValue(arg, i++);
     else if (arg === '--print-config') args.printConfig = requireValue(arg, i++);
     else if (arg === '--tsconfig') args.tsconfig = requireValue(arg, i++);
     else if (arg === '--help' || arg === '-h') args.help = true;
+    else if (arg === '--all') args.all = true;
     else if (arg === '--version' || arg === '-V') args.version = true;
-    else throw new Error(`Unknown argument: ${arg}. Run ark-check --help for usage.`);
+    else throw new Error(`Unknown argument: ${arg}. Run arkgate-check --help for usage.`);
   }
   return args;
 }
@@ -261,111 +286,6 @@ function displayPathFromRoot(root, absPath) {
   }
   return rel.split(path.sep).join('/');
 }
-function usage() {
-  return [
-    'Usage: arkgate-check | ark-check  (identical bins; product name ArkGate)',
-    '       ark-check --version',
-    '       ark-check --root <project> --config <ark.config.json> [--manifest <ark.manifest.json>] [--tsconfig <tsconfig.json>] [--strict-merge | --strict | --strict-config] [--policy-base <file> | --policy-base-ref <git-ref>] [--policy-ack <file>] [--fail-on-new-smells --base-ref <git-ref>] [--require-gates] [--require-write-hook <host>] [--json] [--baseline [file]] [--report [file.html]] [--no-cache]',
-    '       ark-check --doctor [--json] [--resident] [--fail-on-new-smells --base-ref <git-ref>]  read-only diagnosis; resident JSON falls back cold',
-    '       ark-check --coverage [--json]          per-layer file counts + full unclassified list (report only, exit 0)',
-    '       ark-check --plan [--json]              classified remediation plan (mechanical-safe / judgment / deferred) + goal; report only',
-    '       ark-check --rules-inventory [--json]   brownfield rules inventory (AR13; deterministic candidates, not a score)',
-    '       ark-check --recommend [--json] [--write-plan]  application-shape plan; --write-plan emits ark-adoption-plan.json',
-    '       ark-check --list-policy-packs            enthusiast packs (hexagonal, layered, feature-sliced, monorepo, ui-surface, vertical-slice, ddd-bounded-contexts)',
-    '       ark-check --apply-policy-pack <id> [--force]  write ark.config.json from templates/policy-packs/ (uses preset factory)',
-    '       ark-check --suggest-include [--json]   propose include roots (TS packages / workspaces)',
-    '       ark-check --adopt-contract [--write]   expand include + layer patterns from ungoverned dirs (never bare lib→Presentation)',
-    '       ark-check --migrate-contract [--write] additive P0-A retrofit: inject app/api/** → Application when missing',
-    '       ark-check --ratchet-cores              when raw graph is green (0 violations; baseline ignored), set optional:false on populated cores only (writes ark.config.json)',
-    '       ark-check --watch                      re-run the check when governed files change (debounced)',
-    '       ark-check --report [file.html] [--beginner] [--reset-origin] [--no-archive] [--open|--no-open]',
-    '           HTML report + snapshots under .ark/reports/ (origin once, latest each run, history JSON)',
-    '           Best-effort open in browser (local TTY). No-op if open fails. --no-open / ARK_NO_OPEN_REPORT=1 to skip; --open forces open.',
-    '       ark-check --init [--preset hexagonal|layered|feature-sliced|monorepo|ui-surface|vertical-slice|ddd-bounded-contexts|vite-vercel-spa|clean-architecture|onion-architecture] [--force] [--follow-config-root]',
-    '       --follow-config-root  On writes (init/install-agent-gates/migrate --write/…), adopt walked-up monorepo config root (default: keep explicit --root)',
-    '       ark-check --install-agent-gates [--tools claude,cursor,codex,grok] [--require-write-hook <host>] [--skills-only] [--codex-home] [--claude-home] [--grok-home] [--agent-homes] [--force]',
-    '       ark-check --update-baseline [file]     freeze current violations (default .ark-baseline.json)',
-    '       ark-check --print-config eleven-layer',
-    '',
-    'Adopting Ark in an existing codebase? Run --update-baseline once to freeze existing',
-    'violations, commit the baseline file, and gate CI with --baseline: only NEW violations',
-    'fail the check, so the ratchet only moves toward zero.',
-    '',
-    '--init scans the project for the built-in layer directory conventions (src/domain,',
-    'src/application, src/adapters/persistence, ...) and writes an ark.config.json covering',
-    'only the layers that actually exist, with the default rules filtered to those layers.',
-    'Undetected profile layers are printed as suggestions with their conventional',
-    'directories. When nothing is detected, the full 11-layer starter profile is written',
-    'instead (all layers optional, anchored at src/), so the strict check passes today and',
-    'each layer starts being enforced as soon as its directory gains source files.',
-    '',
-    'Resolves relative, tsconfig path-alias, and package imports via the TypeScript',
-    'module resolver, then checks each resolved cross-layer import against the rules.',
-    'Path aliases resolve against the NEAREST tsconfig.json above each source file, so',
-    'monorepo packages with per-package configs work under a single --root. Pass',
-    '--tsconfig to force one config for every file. If no tsconfig is found, path',
-    'aliases are unavailable but relative/package imports still resolve.',
-    '',
-    'The correctness path resolves and parses one complete candidate on every invocation.',
-    'Legacy node_modules/.cache/ark-check.json files are ignored. --no-cache remains an',
-    'accepted compatibility no-op; the identity-keyed warm snapshot is introduced in Z07.',
-    '',
-    'Config shape:',
-    '{',
-    '  "include": ["src"],',
-    '  // optional: "exclude": ["**/vendor/**"], "excludeGenerated": false  (default skips *.gen.ts / *.generated.ts)',
-    '  "layers": [',
-    '    { "name": "DomainModel", "patterns": ["src/domain/**"], "intentPrefixes": ["Domain."],',
-    '      "forbiddenGlobals": ["fetch", "process", "Date.now", "Math.random"] }',
-    '  ],',
-    '  "rules": [{ "from": "DomainModel", "to": "PersistenceAdapters", "allowed": false }]',
-    '}',
-    '',
-    'Config warnings are advisory by default and are included in JSON output.',
-    'Use --strict-config to make config warnings fail the check.',
-    'Use --strict-merge for the fail-closed CI profile: --strict-config + --require-gates',
-    'plus the security diagnostics surfaced by doctor. --strict is a compatibility alias.',
-    'This merge profile never depends on an editor/agent hook.',
-    'When a Git merge base is available, --strict-merge classifies the ark.config.json',
-    'transition. Weakening or judgment-required findings fail unless --policy-ack names',
-    'every finding and is bound to both policy hashes. Use --policy-base/--policy-base-ref',
-    'for an explicit comparison; ARK_POLICY_BASE_REF is the CI environment equivalent.',
-    'Add --require-write-hook claude|grok|antigravity|cursor to validate a hard local write',
-    'boundary for that specific host. Codex and OpenCode expose advisory MCP (plus best-effort',
-    'hooks where applicable) and the shared CI check; merge blocking requires repository policy',
-    'to make that status required.',
-    '',
-    '--require-gates implies --strict-config and fails when the Ark contract in AGENTS.md,',
-    'the project-rooted Ark server in .mcp.json, or fail-closed CI is missing/invalid.',
-    'Included but unclassified source files therefore stay red instead of false-green.',
-    '',
-    '--install-agent-gates writes AGENTS.md, .mcp.json, and the CI workflow for every',
-    'project, plus tool-specific templates. Known tools: claude, cursor, codex, grok',
-    '(Claude/Grok/Antigravity/Cursor hard-write hooks when covered; Codex advisory MCP;',
-    'shared CI check for all) and',
-    'windsurf, cline, copilot, kiro, roo, continue, gemini',
-    '(instruction-tier rule files derived from the same contract).',
-    'It also installs the /ark-* skills shipped in templates/skills/ into each',
-    'detected tool\'s command location (.claude/skills/, .cursor/commands/,',
-    '.agents/skills/ (Codex REPO catalog), .grok/skills/, .windsurf/workflows/,',
-    '.clinerules/workflows/, .github/prompts/).',
-    'Kiro, Roo, Continue, and Gemini have no command mechanism and receive only their',
-    'rule file. Existing files are never overwritten without --force, so re-running',
-    'after an update only adds what is missing. --skills-only restricts the write to',
-    'just the /ark-* skills (safe to --force-refresh — it leaves a customized AGENTS.md,',
-    'settings, and CI workflow untouched).',
-    'Pass --tools to pick which tool configs to write; otherwise they are auto-detected',
-    'from their config directories (.claude/, .cursor/, .codex/, .grok/, .windsurf/,',
-    '.clinerules/, .kiro/, .roo/, .continue/, .gemini/; copilot is explicit-only).',
-    'claude+cursor+codex+grok are written when nothing is detected.',
-    '',
-    'Generate a starter 11-layer config:',
-    '  ark-check --print-config eleven-layer > ark.config.json',
-    '',
-    'Install agent + CI enforcement templates:',
-    '  ark-check --install-agent-gates',
-  ].join('\n');
-}
 
 function readConfig(root, configPath) {
   const fullPath = path.isAbsolute(configPath)
@@ -546,7 +466,7 @@ function runApplyPolicyPack(args) {
 
   if (fs.existsSync(configPath) && !args.force) {
     console.error(
-      `${configPath} already exists. Re-run with --force to overwrite, or use /ark-contract to evolve it.`
+      `${configPath} already exists. Re-run with --force to overwrite, or use /ark-adopt to evolve it.`
     );
     process.exitCode = 2;
     return;
@@ -1030,7 +950,7 @@ function runInit(args) {
       console.log('A green check ignores this code; it is not "clean", it is unchecked.');
       if (recognized.length > 0) {
         console.log('');
-        console.log('Proposed layer for each (from the 11-layer profile + presets — apply via /ark-contract):');
+        console.log('Proposed layer for each (from the 11-layer profile + presets — apply via /ark-adopt):');
         for (const p of recognized) {
           const alt = p.alternatives?.length ? ` (or ${p.alternatives.join(' / ')} — confirm)` : '';
           console.log(`  ${p.dir}/ → ${p.layer}${alt}`);
@@ -1121,7 +1041,7 @@ async function main() {
     process.exit(0);
   }
   if (args.help) {
-    console.log(usage());
+    console.log(args.all ? checkUsageAll() : checkUsage());
     return;
   }
   if (args.init) {
@@ -1281,19 +1201,71 @@ async function main() {
   }
 
   const root = args.root;
+  const bound = bindTeamBaseRefs(args, root);
+  Object.assign(args, bound.args);
   const config = readConfig(root, args.config);
   const policyDelta = analyzePolicyTransition({
     root,
     configPath: args.config,
     candidateConfig: config,
-    strictMerge: args.strictMerge,
+    strictMerge: args.strictMerge || args.contractDiff,
     basePath: args.policyBase,
     baseRef: args.policyBaseRef,
     acknowledgementPath: args.policyAck,
   });
+  const preflight = runTeamPreflight({
+    root,
+    args,
+    config,
+    policyDelta,
+    teamBase: bound.teamBase,
+  });
+  const teamParliament = preflight.teamParliament;
+  const changedPaths = preflight.changedPaths;
+  if (preflight.halt) {
+    if (args.json) {
+      console.log(
+        JSON.stringify(
+          {
+            ok: preflight.halt.exitCode === 0,
+            ...(preflight.halt.cheap ? { cheap: true } : {}),
+            teamParliament: preflight.halt.teamParliament,
+            ...(policyDelta ? { policyDelta } : {}),
+          },
+          null,
+          2
+        )
+      );
+    } else if (preflight.halt.exitCode === 0) {
+      console.log('✔ Ark check passed (no governed source or constitution files in the diff).');
+    } else {
+      console.error(preflight.halt.message);
+    }
+    process.exitCode = preflight.halt.exitCode;
+    return;
+  }
   const manifest = readManifest(root, args.manifest);
   const rules = manifest?.architecture?.rules ?? config.rules;
-  const files = collectGovernedFiles(root, config);
+  const allGovernedFiles = collectGovernedFiles(root, config);
+  if (args.failUngoverned && teamParliament?.changeSet?.productPaths?.length) {
+    const governedRel = new Set(
+      allGovernedFiles.map((abs) => normalize(path.relative(root, abs)))
+    );
+    const dumped = teamParliament.changeSet.productPaths.filter((rel) => !governedRel.has(rel));
+    if (dumped.length > 0) {
+      const message = ungovernedDumpMessage(dumped);
+      if (args.json) {
+        console.log(JSON.stringify({ ok: false, teamParliament: { ...teamParliament, ungoverned: dumped }, message }, null, 2));
+      } else {
+        console.error(message);
+      }
+      process.exitCode = 1;
+      return;
+    }
+  }
+  const files = args.changed
+    ? filterChangedGovernedFiles(allGovernedFiles, root, changedPaths, normalize)
+    : allGovernedFiles;
 
   // --coverage is a pure glob/report view (no TypeScript resolver), so serve it BEFORE the
   // TS import: the report must work — and exit 0 — even when typescript isn't installed.
@@ -1381,7 +1353,7 @@ async function main() {
       printViolationBreakdown(summary, { toStderr: true });
       console.error('');
       console.error('Freezing this would bury a likely CONTRACT bug as "debt". Fix the contract');
-      console.error('first (/ark-contract), then re-run. To freeze anyway: --update-baseline --force.');
+      console.error('first (/ark-adopt), then re-run. To freeze anyway: --update-baseline --force.');
       process.exitCode = 2;
       return;
     }
@@ -1430,7 +1402,18 @@ async function main() {
   let suppressed = [];
   let activeViolations = violations;
   let staleBaselineKeys = 0;
-  if (args.baseline) {
+  if (args.against) {
+    const ratcheted = applyAgainstRatchet({
+      violations,
+      againstRef: args.against,
+      root,
+      changed: args.changed,
+      changedPaths,
+      occurrenceKeys: baselineOccurrenceKeys(violations),
+    });
+    activeViolations = ratcheted.activeViolations;
+    suppressed = ratcheted.suppressed;
+  } else if (args.baseline) {
     const baseline = readBaseline(root, args.baseline);
     if (baseline.exists) {
       const occurrenceKeys = baselineOccurrenceKeys(violations);
@@ -1616,20 +1599,23 @@ async function main() {
                 }),
           }
         : null;
-    const currentSnapshot = buildReportSnapshot({
-      root,
-      config,
-      coverage,
-      violations: activeViolations,
-      ok,
-      suppressed: suppressed.length,
-      version: arkPackageVersion(),
-      fileCountByLayer,
-      enforcement: enforcementForReport,
-      score: fitness.score,
-      mode: fitness.mode,
-      improvementCompass: reportCompass,
-    });
+    const currentSnapshot = {
+      ...buildReportSnapshot({
+        root,
+        config,
+        coverage,
+        violations: activeViolations,
+        ok,
+        suppressed: suppressed.length,
+        version: arkPackageVersion(),
+        fileCountByLayer,
+        enforcement: enforcementForReport,
+        score: fitness.score,
+        mode: fitness.mode,
+        improvementCompass: reportCompass,
+      }),
+      leftoverDesignWork: designDepth?.designFitness?.designWeak === true,
+    };
     const reportPayload = {
       root,
       config,
@@ -1755,6 +1741,7 @@ async function main() {
           }
         : {}),
       ...(codexRepoSkillGap ? { codexRepoSkillGap } : {}), ...(policyDelta ? { policyDelta } : {}), ...(designDelta ? { edgeValid: edgeOk, designDelta } : {}),
+      ...(teamParliament ? { teamParliament } : {}),
     }, null, 2));
   } else {
     for (const warning of warnings) {