arkgate 4.8.11 → 4.8.13

package/docs/README.md

@@ -71,8 +71,9 @@ These are **not** the day-to-day product path. They stay in the repo for evidenc
 | Field adoption kit (scaffolding, not closed) | [field/](field/) |
 | Runtime hardening (experimental) | [production-hardening.md](production-hardening.md) |
 
-Prepared: [releases/4.8.11.md](releases/4.8.11.md) (`arkgate@4.8.11`; not published).
-Current published: [releases/4.8.10.md](releases/4.8.10.md) (`arkgate@4.8.10` on npm `latest`; does not close `K01`).
+Prepared: [CHANGELOG](../CHANGELOG.md) (`arkgate@4.8.13`; not published).
+Current published: [releases/4.8.11.md](releases/4.8.11.md) (`arkgate@4.8.11` on npm `latest`; does not close `K01`).
+Prior published: [releases/4.8.10.md](releases/4.8.10.md) (`arkgate@4.8.10`).
 Prior published: [releases/4.8.9.md](releases/4.8.9.md) (`arkgate@4.8.9`).
 Prior: [releases/4.8.6.md](releases/4.8.6.md) · [releases/4.8.5.md](releases/4.8.5.md) · [releases/4.8.4.md](releases/4.8.4.md) · [releases/4.8.3.md](releases/4.8.3.md) · [releases/4.8.2.md](releases/4.8.2.md) · [releases/4.8.1.md](releases/4.8.1.md) · [4.8.0](releases/4.8.0.md) · [4.7.6](releases/4.7.6.md) · [4.7.5](releases/4.7.5.md) · [4.7.4](releases/4.7.4.md) · [4.7.3](releases/4.7.3.md) · [4.7.2](releases/4.7.2.md) · [4.7.1](releases/4.7.1.md) · [4.7.0](releases/4.7.0.md) · [4.6.7](releases/4.6.7.md) · [4.6.6](releases/4.6.6.md) · [4.6.5](releases/4.6.5.md) · [4.6.4](releases/4.6.4.md) · [4.6.3](releases/4.6.3.md) · [4.6.2](releases/4.6.2.md) · [4.6.1](releases/4.6.1.md) · [4.6.0](releases/4.6.0.md).
 Older notes: [releases/](releases/). Config: [configuration.md](configuration.md).
@@ -85,4 +86,4 @@ Older notes: [releases/](releases/). Config: [configuration.md](configuration.md
 2. **One primary flow** — `start` → doctor → optional guided work.
 3. **Honest hardness** — host write guarantees differ; a **required GitHub status context** running the merge CLI is the shared hard boundary.
 4. **History is not the product** — version archaeology lives under `releases/` and `plans/`, not the front door.
-5. **Common language** — first-contact copy uses ordinary software words (import rules, the write doesn’t land, required CI). ArkGate is import rules; ArkRules is policies; ArkRun is an experimental runtime; ArkOrder stops the agent rewriting the few slow product decisions as CRUD. Voice: [product-voice.md](product-voice.md).
+5. **Common language** — first-contact copy uses ordinary software words (import rules, the write doesn’t land, required CI). ArkGate is import rules; ArkRules is policies; ArkRun is an experimental runtime; ArkOrder stops rewriting a big product choice (like billing plan) as if it were a seat count. Voice: [product-voice.md](product-voice.md).

package/docs/agent-guide.md

@@ -536,7 +536,8 @@ npx ark-check --promote <ruleId> --apply      # write mode "enforced" into that
 ArkOrder — with its plane, its tier and whether it can *ever* be enforced, so
 Tier-2 shows up before you write the rule rather than after you wait for a run.
 ArkOrder: `proposeRelease` then `apply`; `refreshSigma`; ingest residual;
-capacity pack; `ReleaseStore`; ArkRun `decisionTape`. No `/ark-order` skill.
+capacity pack; `ReleaseStore`; ArkRun `decisionTape`. Extras door:
+`/ark-adopt`. First contact: doctor + `[ArkOrder]` on the check.
 It also says *how*: only the ArkRules plane is promoted per rule; ArkRun and
 ArkOrder are switched by the plane-level `arkRun.mode` / `arkOrder.mode`, and
 `--promote --apply` writes ArkRules documents only.

package/docs/arkorder.md

@@ -1,15 +1,15 @@
 # ArkOrder
 
-**Write. Check. Ship.** Layers can be green while an agent still PATCHes the
-billing plan as if it were a seat count. ArkOrder is the extra that names the
-few slow product decisions and stops that write.
+**Layers stop a bad import. ArkOrder stops rewriting a big product choice —
+like the billing plan — as if it were a seat count. Change those choices
+through a valve, not a generic update.**
 
 Import: `arkgate/order` (same npm package `arkgate`). Off until you add
-`arkOrder` on schema `1.3`. Absence is silent. In-memory. Not durable. It is
-a library plus sensors, not a service. Does **not** replace ArkRun.
+`arkOrder`. Absence is silent. In-memory. Not durable. A library plus
+sensors, not a service. Does **not** replace ArkRun.
 
-First-contact copy: freeze through a valve / no `update`. Haken (ξ vs s) lives
-below. **ArkOrder freezes the pattern through a valve. ArkRun is how the residual travels.**
+Turn the extra on with `/ark-adopt`. First contact is doctor + `[ArkOrder]`
+on the check. Names like ξ live below, in the valve and sensor tables.
 
 Canonical plan seed: [plans/arkorder/README.md](plans/arkorder/README.md).
 ADRs: [0027](adr/0027-arkorder-gated-extra-plane.md)–[0030](adr/0030-opt-in-extras-same-npm-package.md),
@@ -189,8 +189,9 @@ one axis: the factory root.
 Do not rename `planeRoots` to `kernelRoots`. They name different factories.
 List both on `ark-check --sensors` (same table, same tier vocabulary).
 
-Turn extras on with `/ark-adopt`. Place new files with `/ark-place`. There is
-no `/ark-order` skill.
+Turn extras on with `/ark-adopt`. Place new files with `/ark-place`. First
+contact is doctor + the `[ArkOrder]` check label — same envelope as a bad
+import. A dedicated `/ark-order` skill is not required for that.
 
 ---
 
@@ -247,10 +248,26 @@ cash received against amount due, not a key to freeze or change with
 
 The valved loop ships in **4.8.6** ([ADR 0034](adr/0034-arkorder-valved-loop.md)).
 In-memory `ReleaseStore` is **not** durable. Doctor / status `arkOrder` stays
-`notAScore`. This does **not** close `K01` / `Z09`. No `/ark-order` skill.
+`notAScore`. This does **not** close `K01` / `Z09`. The extras door stays
+`/ark-adopt`.
 
 ---
 
+## Doctor / start / status
+
+`--doctor` always emits an ArkOrder row (`notAScore`). Absence is a silent
+line. When the extra is on, the first human line is the one-breath:
+
+**Layers stop a bad import. ArkOrder stops rewriting a big product choice —
+like the billing plan — as if it were a seat count. Change those choices
+through a valve, not a generic update.**
+
+`ark start` leaves extras off (`Optional extras stay off. This start is
+layers only — they stop bad imports.`).
+`ark status` projects a thin `arkOrder` slice (present / mode / leftover
+count). A deny prints `[ArkOrder]` next to `ARKORDER_*`, the same envelope
+as a bad import.
+
 ## Next step
 
 ```bash
@@ -258,4 +275,5 @@ npx arkgate-check --doctor
 # gallery (not in the npm tarball):
 # https://github.com/pedroknigge/arkgate/tree/main/examples/arkorder-billing
 # /ark-adopt to turn arkOrder on advisory
+# Proof deny: skip corpus trees/xi-field-write (Prisma PATCH of plan)
 ```

package/docs/package-surface.md

@@ -266,7 +266,8 @@ production deployment would need to satisfy; it is not a readiness certification
 ## Release notes (maintainers)
 
 Ship notes for a version live under [releases/](https://github.com/pedroknigge/arkgate/tree/main/docs/releases)
-(current published: [4.8.10.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.8.10.md);
+(current published: [4.8.11.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.8.11.md);
+prior published: [4.8.10.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.8.10.md);
 prior published: [4.8.9.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.8.9.md);
 prior published: [4.8.8.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.8.8.md);
 prior published: [4.8.7.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.8.7.md);

package/docs/product-voice.md

@@ -21,9 +21,10 @@ The same check fails the pull request.
 **ArkRun** is an optional runtime (`arkgate/runtime`). Experimental. In-memory.
 Not Postgres.
 
-**ArkOrder** is the extra that stops the agent from rewriting the few slow
-product decisions as CRUD (`arkgate/order`). Off unless you turn it on. Same
-npm package. In-memory. Not durable. Does not replace ArkRun.
+**ArkOrder** is the extra that stops rewriting a big product choice — like
+the billing plan — as if it were a seat count (`arkgate/order`). Change those
+choices through a valve, not a generic update. Off unless you turn it on.
+Same npm package. In-memory. Not durable. Does not replace ArkRun.
 
 ```text
 Write.   the agent writes
@@ -35,7 +36,7 @@ Ship.    required GitHub check, then merge
 ArkGate   always     import rules (write + required CI)
 ArkRules  optional   policies inside a layer
 ArkRun    optional   experimental runtime — in-memory, not Postgres
-ArkOrder  optional   the few slow product decisions the agent must not CRUD
+ArkOrder  optional   big product choices (billing plan, not seat counts)
 ```
 
 Status first (`arkgate-check --doctor`). One next step. CLI flag `--doctor` stays;
@@ -53,7 +54,7 @@ On the eight canonical public openings — `README.md`, `docs/use.md`,
 2. **Deny:** `When the agent writes a bad import, the write doesn’t land. The same check fails the pull request.`
 3. **Not-that (below the fold, one line):** `Not an API Gateway. Not a folder linter. If the check is not required on the PR, the config is just documentation.`
 4. **Story:** the exact four-paragraph introduction below, with no visible heading or labels.
-5. **Technical nouns (below the introduction):** ArkGate is import rules. ArkRules is optional policies. ArkRun is an optional experimental runtime. ArkOrder is the extra that stops the agent from rewriting the few slow product decisions (plan, protocol) as CRUD — named when the consumer opts in, never as the first noun.
+5. **Technical nouns (below the introduction):** ArkGate is import rules. ArkRules is optional policies. ArkRun is an optional experimental runtime. ArkOrder stops rewriting a big product choice (like billing plan) as if it were a seat count — named when the consumer opts in, never as the first noun. No ξ / Haken / slaving on the first screen.
 
 Do not lead with folders, `ark.config.json`, “contract”, “gate”, “house”, or “doctor”
 as the first noun. Historical: `If the AI writes an illegal import, the write is rejected`
@@ -80,7 +81,7 @@ Safer changes, fewer surprises, and extra protection only when you choose it.
 
 Do not add technical terms to these four paragraphs. In the next section, explain that
 ArkGate checks imports, ArkRules is optional, ArkRun is experimental and in-memory,
-and ArkOrder is optional and for a few slow product decisions.
+and ArkOrder is optional and stops rewriting a big product choice like the billing plan.
 
 ---
 
@@ -113,7 +114,7 @@ Three beats when a line teaches:
 | `arkgate-check --doctor` — **status**, one next step | control plane, coach, doctor as the product name |
 | optional policies inside a layer | dual plane, intra-layer sensors, Saturday tidy |
 | experimental runtime / in-memory / not Postgres | production kernel, durable runtime, training wheels |
-| the few slow product decisions / billing plan vs seats / that PUT doesn’t land / `proposeRelease` then `apply` | four verbs, freeze a pattern, Haken, slaving, ξ vs s, extra plane, construction OS |
+| Layers stop a bad import. ArkOrder stops rewriting a big product choice (like billing plan) as if it were a seat count. Change those choices through a valve, not a generic update. | four verbs, freeze a pattern, Haken, slaving, ξ vs s, extra plane, construction OS, Prisma PATCH of a named slow key |
 
 Command names stay command names (`--doctor` is a flag). If a word is not here,
 cut it or put it below the fold (develop, JSON, ADRs).
@@ -201,7 +202,7 @@ Invoking a command **is** the approval. CLI checks; it does not silently rewrite
 - [ ] **Write. Check. Ship.** is on first-contact.
 - [ ] Deny is `When the agent writes a bad import, the write doesn’t land.`
 - [ ] One next action is obvious.
-- [ ] ArkGate / ArkRules / ArkRun / ArkOrder are import rules / policies / experimental runtime / the extra that stops slow product decisions being CRUD.
+- [ ] ArkGate / ArkRules / ArkRun / ArkOrder are import rules / policies / experimental runtime / the extra that stops a big product choice being rewritten like a seat count.
 - [ ] ArkRun is never implied durable / Postgres.
 - [ ] ArkOrder is never implied durable, a second install, or a replacement for ArkRun.
 - [ ] Status lights read Setup / In progress / Ready to humans.

package/docs/use.md

@@ -89,7 +89,7 @@ The config only binds when the write doesn’t land and CI is required.
 | **ArkGate** (layers) | Import rules. The write doesn’t land. The PR fails. | Always — this is the product |
 | **ArkRules** | Optional policies *inside* a layer. | Off until you turn it on (start may ship advisory templates) |
 | **ArkRun** | Optional experimental runtime (`arkgate/runtime`) | Off. In-memory. Not Postgres. |
-| **ArkOrder** | Stops the agent rewriting the few slow product decisions as CRUD (`arkgate/order`). Library + sensors, [not a service](arkorder.md). Valve: `proposeRelease` then `apply`; `refreshSigma`; ingest residual; capacity pack; `ReleaseStore`; ArkRun `decisionTape`. ArkOrder freezes the pattern through a valve. ArkRun is how the residual travels. | Off. Name `xiKeys` (plan / protocol, not `projectId`). Derive recomputable statuses; invoices and seats still flow. In-memory. Not durable. |
+| **ArkOrder** | Stops rewriting a big product choice (like billing plan) as if it were a seat count. Change it through a valve, not a generic update. Library + sensors, [not a service](arkorder.md). | Off. Same npm package (`arkgate/order`). Name the few choices (`xiKeys`). Invoices and seats still flow. In-memory. Not durable. |
 
 Start always gives you **layers**. Compact starters do **not** turn on ArkRun or
 ArkOrder. No extras is fine — only ArkGate runs. Leftovers are labeled

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "arkgate",
-  "version": "4.8.11",
+  "version": "4.8.13",
   "description": "When the agent writes a bad import, the write doesn’t land. The same check fails the pull request.",
   "type": "module",
   "main": "./dist/index.cjs",

package/schemas/ark.status-manifest.schema.json

@@ -390,6 +390,53 @@
           ]
         }
       }
+    },
+    "arkOrder": {
+      "type": "object",
+      "description": "ArkOrder extra residual (notAScore). present/mode from config; residual is a finding-id count (null = unknown, not green). extraMergeTeeth is honesty, never a score.",
+      "additionalProperties": false,
+      "required": [
+        "notAScore",
+        "present",
+        "mode",
+        "extraMergeTeeth",
+        "residual"
+      ],
+      "properties": {
+        "notAScore": {
+          "const": true
+        },
+        "present": {
+          "type": "boolean"
+        },
+        "mode": {
+          "anyOf": [
+            {
+              "enum": [
+                "advisory",
+                "enforced"
+              ]
+            },
+            {
+              "type": "null"
+            }
+          ]
+        },
+        "extraMergeTeeth": {
+          "type": "boolean"
+        },
+        "residual": {
+          "anyOf": [
+            {
+              "type": "integer",
+              "minimum": 0
+            },
+            {
+              "type": "null"
+            }
+          ]
+        }
+      }
     }
   }
 }

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/pedroknigge/arkgate",
     "source": "github"
   },
-  "version": "4.8.11",
+  "version": "4.8.13",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "arkgate",
-      "version": "4.8.11",
+      "version": "4.8.13",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"