arkgate 4.8.14 → 4.8.15

package/CHANGELOG.md

@@ -5,6 +5,139 @@ in the immutable pre-2.0 archive linked below.
 
 ## Unreleased
 
+### Added
+- Soft doctor residual when Domain is declared but empty and the UI holds the
+  rules (`noDomainFrontend`). Projects empty Domain + presentation share, or
+  the existing `domain-logic-in-ui` smell. Friendly next step: one Domain file
+  (`/ark-place`) then one small refactor. Not a fail. Silent when there is no
+  frontend, Domain already has files, or the UI bag is too thin. No new skill,
+  schema, smell id, or config key.
+- Narrow opt-in status/transition catalog: when Domain-role code already
+  names a closed status/state vocabulary and a domain doc is in play without
+  a table (or one link), doctor JSON may add `statusTransitionCatalog` with
+  those names. Friendly next step. Not a fail. Silent when Domain has no
+  status vocabulary, or the domain doc is absent, or the map is already
+  present. No new skill, schema, or config key.
+- Doctor residual when a product-domain doc is already in play
+  (`docs/domain.md` or a sibling) and there is no states → transitions table
+  (or one link) yet. Friendly next step. Not a fail. Silent when that doc is
+  absent. No new skill, schema, or status-field sensor.
+- Soft ADR / decision-note presence when `--require-gates` (or
+  `--strict` / `--strict-merge` / doctor adopted-strict) is on and the tree
+  has no `docs/adr/` or `docs/decisions/` note yet. Doctor residual + a
+  friendly next step. Not a fail. Silent when require-gates is off. No new
+  skill, schema, or config key. Policy weaken still uses `--policy-ack`.
+- Optional `layers[].owners` on each layer (GitHub handle or email, same
+  identity as `stewards`) and optional `requireLayerOwners`. Absence is
+  silent. When the require flag is on, doctor names the first house without
+  an owner, `--strict-config` refuses, and the write gate denies a write into
+  that house. Owners are stripped from `policyHash`; the require flag stays
+  in the hash. Invalid identity fails the schema. No new skill or
+  `schemaVersion` bump. Compact starters may omit.
+- Optional `layers[].trustBoundary` on each layer: `public` | `auth` | `admin` |
+  `internal`. Who this folder is for. Schema validates the closed list; a wrong
+  value fails. Absence is silent — never a doctor residual, never
+  `--strict-config`, never a score. Place / prepare-write / MCP / doctor /
+  coverage / HTML show `trust: public` when present. Stripped from `policyHash`
+  like `stewards` and `layers[].description`. No import-rule matrix. Not host/CI
+  TLS. No new skill or `schemaVersion` bump. Compact starters may omit.
+- Doctor residual when `arkRules` is on, Domain has code, and `invariants[]` is
+  empty (`INVARIANT_CATALOG_EMPTY`). Points at the file to fill. Advisory unless
+  a domain structure rule is already enforced — then `--strict-merge` can refuse.
+  No `arkRules` map, or no Domain files, stays silent. Domain starters ship two
+  short phrase templates so the shape is visible. No new skill, schema, or flag.
+
+### Changed
+- Compact `--doctor` names ArkRules only when the `arkRules` map is on
+  (one breath + counts, not a score). Absence stays silent. Reuses
+  `rulesUnderContract` — no new schema, flag, or skill. `--doctor --all`
+  prints the same lines under **ArkRules (not a score)**.
+- PR / CI skill gate: `npm run check:agent-skills` now fails closed when a
+  product plane (Layers, ArkRules, ArkRun, ArkOrder) or Contener · Guiar ·
+  Ordenar drops out of first-class skill bodies or living hubs. Reuses
+  `ARK_SKILL_CAPACITY` via Domain `validateSkillProductCapacity` — no new
+  schema or skill. Deny copy stays plain. Skills never enforce.
+- Write-gate host parity: Cursor hard-write evidence now requires the host-native
+  `failClosed: true` flag (same idea as a file permission — if the checker cannot
+  run, the write must not land). A Write/StrReplace hook without that flag is
+  fail-open: doctor, `--require-write-hook`, and honesty JSON say so and do not
+  claim a hard block. Hosts without a native flag stay as before (deny when the
+  hook runs; hook-crash behavior is host-owned). Soft hosts stay advisory.
+  Required CI is still the shared merge line. No new skill, schema, or host.
+
+### Fixed
+- Write hook and `ark-check` now agree on overlapping layer globs: the hook
+  probes the same specifier extensions as `ark-check` and classifies with
+  `layerForRelativePath` (explicit `money.ts` beats `src/lib/**`). Field
+  case: Persistence importing `@/lib/finance/money` is allowed when the
+  contract says DomainModel, not denied as ApplicationOrchestration
+  (issue [#237](https://github.com/pedroknigge/arkgate/issues/237)).
+  `LEXICAL_EVIDENCE_INCOMPLETE` no longer calls the hook the final verdict —
+  `ark-check` is the authority. No new schema, flag, or skill.
+- An `include` that matches files but classifies none of them no longer prints
+  a green check. `ANALYSIS_COVERS_NO_FILES` already said include **and** layer;
+  the refusal now counts classified files, not only the include walk. The write
+  hook denies those same files (`CONFIG_UNCLASSIFIED_FILES`) so write and
+  `--strict-merge` agree. Partial unclassified stays a warning on a plain check.
+  `--plan` / `--coverage` / `--doctor` still diagnose. No new flag or schema.
+- Library / package-monorepo `arkgate start` no longer writes Next App Router /
+  Pages API / `app/api` layer captions when the tree has no Next
+  (issue [#213](https://github.com/pedroknigge/arkgate/issues/213)). Next-flavored
+  doctor copy still appears when Next is detected. Same start command; no new flag.
+- Cold `--doctor` no longer treats a full governed list as a `--changed` scope
+  (issue [#212](https://github.com/pedroknigge/arkgate/issues/212)). Full-tree
+  status uses the unbounded facts path; import-closure + a second
+  `resolveModuleName` pass stay on `--changed` only. Extra-plane extractors
+  (ArkRun / ArkOrder / class-shape) stay silent when that plane is off. Same
+  compact first screen. No new flag or cache.
+- Fresh `arkgate start --apply` (and every other path that stamps a new
+  `ark.config.json`) now writes `$schema` at `arkgate@4` on unpkg, not the stale
+  `@2` pin (issue [#211](https://github.com/pedroknigge/arkgate/issues/211)).
+  Existing configs keep whatever URL they already have. Editor completion
+  matches the 4.x line you just installed.
+
+## 4.8.15 — 2026-09-13
+
+**Patch** over **4.8.14**. Pre-adoption ship bar: opt-in `--local` /
+`ARK_CHECK_LOCAL` cheap multi-worktree check
+([#251](https://github.com/pedroknigge/arkgate/pull/251)) and dogfood
+honesty
+([#252](https://github.com/pedroknigge/arkgate/pull/252) / [#243](https://github.com/pedroknigge/arkgate/issues/243) /
+[#246](https://github.com/pedroknigge/arkgate/issues/246) /
+[#247](https://github.com/pedroknigge/arkgate/issues/247)).
+**Write. Check. Ship.** **No required config migration.** No
+`schemaVersion` bump. Does not close `K01` / `Z09`. This mother
+`ark.config.json` still does **not** turn `arkOrder` on.
+
+**Status: prepared** (npm `latest` remains **4.8.14** until Actions `publish-npm`
+runs with `tag=v4.8.15` and `dry_run=false`).
+
+### Added
+- Opt-in local / multi-worktree cheap check: `--local` or `ARK_CHECK_LOCAL=1`
+  reuses `--changed` (touched files + import closure) and stays per `--root`.
+  Explicit `--local --strict-merge` is refused so CI Contener stays fail-closed.
+  The env var is ignored under `--strict-merge` and under `--doctor` /
+  `--coverage` / `--plan` / `--report` / `--promote`. JSON may add `local`,
+  `scope: "changed"`, `analysisRoot`. Write hooks stay lexical. No new schema,
+  cache, skill, or second analysis engine. Design:
+  [docs/plans/local-check-worktree-dx/README.md](docs/plans/local-check-worktree-dx/README.md).
+
+### Fixed
+- Publish confidence gate: retarget drifted critical mutation islands
+  (`config-loading`, `empty-analysis-refusal`, host fail-open / none-gap)
+  after owners + classified-file growth, and add tests that kill those
+  mutants. Threshold stays 90% with zero NoCoverage. Does not change
+  runtime behavior.
+- Dogfood honesty: type-only `LAYER_IMPORT_VIOLATION` prints `⚠` (not `✖`)
+  when the check still exits 0 ([#243](https://github.com/pedroknigge/arkgate/issues/243));
+  one-minute `start --apply` copy and the start preview footer name the
+  deliberate lock flags (`--archetype`, `--preset`, `--force`,
+  `ark-check --recommend`) without softening the refuse gate
+  ([#246](https://github.com/pedroknigge/arkgate/issues/246)); start,
+  `--recommend`, and doctor share one `computeCoverage` definition of
+  projected governed coverage
+  ([#247](https://github.com/pedroknigge/arkgate/issues/247)).
+
 ## 4.8.14 — 2026-09-06
 
 **Patch** over **4.8.13**. Catch npm `latest` up to `main`: first-class

package/README.md

@@ -39,7 +39,7 @@ Works with Cursor, Claude, Codex, and Grok.
 
 </div>
 
-> **ArkGate 4.8.14** is prepared on this tree; npm `latest` remains **4.8.13** until `publish-npm` for `v4.8.14`.
+> **ArkGate 4.8.15** is prepared on this tree; npm `latest` remains **4.8.14** until `publish-npm` for `v4.8.15`.
 > Write. Check. Ship. Adopted = required GitHub
 > status running `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
 > Status is compact (`arkgate-check --doctor`; `--all` for Details). Optional **ArkRun**
@@ -47,7 +47,7 @@ Works with Cursor, Claude, Codex, and Grok.
 > (`arkgate/order`) stops rewriting a big product choice — like the billing plan —
 > as if it were a seat count. Change those choices through a valve, not a generic update.
 > `@arkgate/runtime` is deprecated.
-> [4.8.14 prepared](CHANGELOG.md) · [4.8.11 published](docs/releases/4.8.11.md) · [4.8.10](docs/releases/4.8.10.md) · [4.8.9](docs/releases/4.8.9.md) · [4.8.8](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
+> [4.8.15 prepared](CHANGELOG.md) · [4.8.11 published](docs/releases/4.8.11.md) · [4.8.10](docs/releases/4.8.10.md) · [4.8.9](docs/releases/4.8.9.md) · [4.8.8](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
 
 ---
 
@@ -73,6 +73,11 @@ npx arkgate-check --doctor        # status — one next step
 npx arkgate-check --doctor --all  # full details
 ```
 
+`start --apply` refuses when projected governed coverage is below 50% or
+shape confidence is weak (below 0.6 with coverage under 80%). That lock is
+deliberate. Lock the shape with `--archetype <id>`, `--preset <name>`, or
+`--force`, or inspect ranked shapes with `npx arkgate-check --recommend`.
+
 That is the product. Stuck? Run status (`--doctor`) and do action **#1**.
 
 ```text
@@ -81,7 +86,8 @@ start → doctor → new files in the right folder
 ```
 
 Keep the rules file out of product PRs. Local check:
-`ark-check --changed --base origin/dev`. Changing the rules themselves uses `--contract-session`.
+`ark-check --local --base origin/dev` (same as `--changed`; refused with
+`--strict-merge`). Changing the rules themselves uses `--contract-session`.
 
 Aliases `ark` / `ark-check` / `ark-mcp` still work. npm / pnpm / yarn. No install lifecycle scripts
 — and none on pack or prepare either, so `pnpm add git+https://github.com/pedroknigge/arkgate`
@@ -188,7 +194,9 @@ Details: [docs/use.md](docs/use.md).
 **Read the CI column:** for every host, the repository-wide hard guarantee is a **required**
 GitHub **status context** that runs the CLI — not “CI file present,” and not the CLI binary name alone.
 Codex hard write covers only a complete local `apply_patch`; Cursor covers only listed
-`preToolUse` ops. In both cases the project hook must be installed + trusted, while shell/direct
+`preToolUse` ops with `failClosed: true`. A Cursor hook without that flag is fail-open
+(if the checker cannot run, the write still lands). In both cases the project hook must be
+installed + trusted, while shell/direct
 filesystem writes, hosted or specialized opt-out paths, and human edits still rely on CI.
 
 This table describes the supported profile **after its files are installed and the host loads/trusts them**. A hard local boundary covers only the listed hook operations; alternate tools, direct filesystem writes, and human edits still rely on CI. MCP validation is advisory because the agent must call it. The CI check blocks a merge only when the repository makes that status required. Repair **envelopes** may be emitted without reinjection being guaranteed; silent auto-apply never happens. Run `arkgate-check --doctor` (or `ark-check --doctor`) for the evidence actually detected in the current repository.
@@ -334,7 +342,7 @@ Compact starters leave the extra off. Details: [ArkOrder](docs/arkorder.md).
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Prepared (4.8.14; not published) | [CHANGELOG](CHANGELOG.md) |
+| Prepared (4.8.15; not published) | [CHANGELOG](CHANGELOG.md) |
 | Current published (4.8.11 on npm `latest`) | [docs/releases/4.8.11.md](docs/releases/4.8.11.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.10) | [docs/releases/4.8.10.md](docs/releases/4.8.10.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.9) | [docs/releases/4.8.9.md](docs/releases/4.8.9.md) · [CHANGELOG](CHANGELOG.md) |

package/bin/ark-check-runtime.mjs

@@ -12,17 +12,13 @@ import {
   DEFAULT_RULES,
   applyFrameworkLayoutOverlays,
   arkCommand,
-  ADOPTION_PLAN_FILENAME,
-  buildArchitectureRecommendation,
   createElevenLayerConfig,
   enrichViolationWithFixClass,
   listPolicyPackIds,
   loadPolicyPackMeta,
-  writeAdoptionPlan,
   detectWorkspaces,
   detectTsPackageRoots,
   resolveIncludeRoots,
-  formatArchitectureRecommendationHuman,
   installDevHint,
   layerForFile,
 } from './ark-shared.mjs';
@@ -67,6 +63,7 @@ import {
   runCoverage,
   runPlan,
   runDoctor,
+  printAdrPresenceHint,
 } from './lib/doctor-plan.mjs';
 import { runRatchetCores } from './lib/core-ratchet.mjs';
 import {
@@ -113,7 +110,7 @@ import { runArchitectureScan } from './lib/architecture-scan.mjs';
 import {
   ANALYSIS_COMPLETENESS,
   analysisIncompleteStatement,
-  emptyAnalysisRefusal,
+  emptyAnalysisRefusal, classifiedCountFromFiles,
 } from './lib/analysis-completeness.mjs';
 import { reportUnavailableAnalysis } from './lib/unavailable-analysis.mjs';
 import { validateHardWriteRequest } from './lib/enforcement-profiles.mjs';
@@ -137,7 +134,7 @@ import {
   resolveEffectiveProjectRoot,
 } from './lib/project-root.mjs';
 import { demoteArkRuleTeethUnderClassificationFloor } from './lib/rules-under-contract.mjs';
-import { parseArgs, resolveDesignDeltaBaseRef } from './lib/check-args.mjs';
+import { localCheckEnvelope, parseArgs, resolveDesignDeltaBaseRef } from './lib/check-args.mjs';
 import { detectConfig, proposeForUncovered } from './lib/check-config-detect.mjs';
 import { runWatchMode } from './lib/check-watch.mjs';
 
@@ -1153,42 +1150,8 @@ async function main() {
   }
 
   if (args.recommend) {
-    try {
-      const recommendation = buildArchitectureRecommendation(args.root);
-      let planWritten;
-      if (args.writePlan) {
-        const result = writeAdoptionPlan(args.root, recommendation);
-        planWritten = result.path;
-      }
-      if (args.json) {
-        console.log(
-          JSON.stringify(
-            {
-              ...recommendation,
-              ...(planWritten
-                ? { adoptionPlanPath: path.relative(args.root, planWritten) || ADOPTION_PLAN_FILENAME }
-                : {}),
-            },
-            null,
-            2
-          )
-        );
-      } else {
-        console.log(formatArchitectureRecommendationHuman(recommendation));
-        if (planWritten) {
-          console.log('');
-          console.log(`Wrote ${path.relative(args.root, planWritten) || ADOPTION_PLAN_FILENAME}`);
-        }
-      }
-    } catch (error) {
-      const message = error instanceof Error ? error.message : String(error);
-      if (args.json) {
-        console.log(JSON.stringify({ ok: false, error: message }, null, 2));
-      } else {
-        console.error(`ark-check --recommend failed: ${message}`);
-      }
-      process.exitCode = 2;
-    }
+    const { runRecommend } = await import('./lib/recommend-cli.mjs');
+    runRecommend(args);
     return;
   }
 
@@ -1209,9 +1172,11 @@ async function main() {
   let governedCache = null;
   const loadGovernedFiles = () => (governedCache ??= collectGovernedFiles(root, loadConfig()));
   const emptyAnalysisRefusalNow = () => {
-    const governedCount = loadGovernedFiles().length;
+    const governedFiles = loadGovernedFiles();
+    const governedCount = governedFiles.length;
     return emptyAnalysisRefusal({
       governedFileCount: governedCount,
+      classifiedFileCount: classifiedCountFromFiles(governedFiles, loadConfig().layers, layerForFile, root),
       // Probed only when nothing is governed, and never through the contract's own
       // exclude: the config under suspicion must not get to answer the question about
       // itself (`exclude: ["**"]` would otherwise read as greenfield and pass).
@@ -1349,7 +1314,7 @@ async function main() {
             (compactHost
               ? `AGENTS.md, compact host registration (${compactHost})`
               : REQUIRED_GATE_FILES.join(', '))
-        );
+        ); printAdrPresenceHint(args.root, (line) => console.log(line));
       }
       if (writeRequest?.host) {
         console.log(`Ark hard-write hook present for ${writeRequest.host}.`);
@@ -1384,7 +1349,7 @@ async function main() {
         JSON.stringify(
           {
             ok: preflight.halt.exitCode === 0,
-            ...(preflight.halt.cheap ? { cheap: true } : {}),
+            ...(preflight.halt.cheap ? { cheap: true } : {}), ...localCheckEnvelope(args, root),
             teamParliament: preflight.halt.teamParliament,
             ...(policyDelta ? { policyDelta } : {}),
           },
@@ -1407,7 +1372,7 @@ async function main() {
   }
   const manifest = readManifest(root, args.manifest);
   const rules = manifest?.architecture?.rules ?? config.rules;
-  if (verdictPath && !args.changed) {
+  if (verdictPath && !args.changed && !isMutatingCliCommand(args)) {
     const refusal = emptyAnalysisRefusalNow();
     if (refusal) {
       reportEmptyAnalysis(refusal);
@@ -1473,7 +1438,10 @@ async function main() {
     config,
     manifest,
     rules,
-    files,
+    // Full-tree callers already have the governed list. Passing it as `files`
+    // used to trigger the --changed scoped path (import-closure + a second
+    // resolveModuleName pass) on every doctor/check (#212). Empty = unbounded.
+    files: args.changed ? files : [],
     ts,
     args,
   });
@@ -1534,7 +1502,7 @@ async function main() {
       configWalkedUp: args.configWalkedUp === true,
       safety, designDelta,
       ts, parseHealth, completeness,
-      all: args.all === true,
+      all: args.all === true, requireGates: args.requireGates === true,
     });
     if (designDelta) process.exitCode = !designDelta.complete ? 2 : designDelta.valid ? 0 : 1; return;
   }
@@ -1946,7 +1914,7 @@ async function main() {
     });
     console.log(JSON.stringify({
       ...adapterResult,
-      ok,
+      ok, ...localCheckEnvelope(args, root),
       violations: activeViolations.map(enrichViolationWithFixClass),
       suppressedViolations: suppressed.length,
       staleBaselineKeys,

package/bin/ark-mcp-runtime.mjs

@@ -82,7 +82,10 @@ import {
   codexPatchWrites,
   proposedSource,
   emitHostAllow,
+  emitHostDeny,
   formatWriteGateDeny,
+  unclassifiedIncludedWriteDeny,
+  requiredOwnerWriteDeny,
 } from './lib/mcp-hook-payload.mjs';
 import {
   canonicalizeCandidateChanges,
@@ -257,6 +260,13 @@ function inferLayer(filePath, config, root) {
   return layerForFile(root, filePath, config.layers);
 }
 
+/** Pattern match only — layer.exclude is an intentional ungoverned hole, not a miss. */
+function layerPatternClaimsFile(filePath, config, root) {
+  if (!filePath) return false;
+  const layers = (config.layers ?? []).map((layer) => ({ ...layer, exclude: [] }));
+  return Boolean(layerForFile(root, filePath, layers));
+}
+
 async function loadArk() {
   const url = new URL('../dist/index.js', import.meta.url);
   if (!fs.existsSync(url)) {
@@ -472,6 +482,55 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
     const governedWrites = canonicalSourceWrites.filter((change) =>
       isCandidateSourceInScope(config, change.path)
     );
+    const layerlessWrites = governedWrites.filter(
+      (change) =>
+        change.delete !== true &&
+        !inferLayer(change.path, config, args.root) &&
+        !layerPatternClaimsFile(change.path, config, args.root)
+    );
+    if (layerlessWrites.length > 0) {
+      const first = layerlessWrites[0];
+      const deny = unclassifiedIncludedWriteDeny(first.path);
+      const message = formatWriteGateDeny({
+        file: first.path,
+        reason: deny.message,
+        ruleId: deny.ruleId,
+        nextAction: deny.nextAction,
+      });
+      emitHostDeny(output, {
+        antigravityStyle,
+        cursorStyle,
+        grokStyle,
+        message,
+        file: first.path,
+      });
+      output.status(2);
+      return;
+    }
+    const unownedWrite = governedWrites.find((change) => {
+      if (change.delete === true) return false;
+      const house = inferLayer(change.path, config, args.root);
+      return Boolean(requiredOwnerWriteDeny(config, house, change.path));
+    });
+    if (unownedWrite) {
+      const house = inferLayer(unownedWrite.path, config, args.root);
+      const deny = requiredOwnerWriteDeny(config, house, unownedWrite.path);
+      const message = formatWriteGateDeny({
+        file: unownedWrite.path,
+        reason: deny.message,
+        ruleId: deny.ruleId,
+        nextAction: deny.nextAction,
+      });
+      emitHostDeny(output, {
+        antigravityStyle,
+        cursorStyle,
+        grokStyle,
+        message,
+        file: unownedWrite.path,
+      });
+      output.status(2);
+      return;
+    }
     const changes = governedWrites.map(({ path: relativePath, content, delete: deleted }) =>
       deleted ? { path: relativePath, delete: true } : { path: relativePath, content }
     );
@@ -608,6 +667,46 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
   }
 
   const layer = inferLayer(filePath, config, args.root);
+  if (
+    !layer &&
+    !layerPatternClaimsFile(filePath, config, args.root) &&
+    isCandidateSourceInScope(config, normalizedRel)
+  ) {
+    const deny = unclassifiedIncludedWriteDeny(normalizedRel);
+    const message = formatWriteGateDeny({
+      file: normalizedRel,
+      reason: deny.message,
+      ruleId: deny.ruleId,
+      nextAction: deny.nextAction,
+    });
+    emitHostDeny(output, {
+      antigravityStyle,
+      cursorStyle,
+      grokStyle,
+      message,
+      file: normalizedRel,
+    });
+    output.status(2);
+    return;
+  }
+  const ownerDeny = requiredOwnerWriteDeny(config, layer, normalizedRel);
+  if (ownerDeny) {
+    const message = formatWriteGateDeny({
+      file: normalizedRel,
+      reason: ownerDeny.message,
+      ruleId: ownerDeny.ruleId,
+      nextAction: ownerDeny.nextAction,
+    });
+    emitHostDeny(output, {
+      antigravityStyle,
+      cursorStyle,
+      grokStyle,
+      message,
+      file: normalizedRel,
+    });
+    output.status(2);
+    return;
+  }
   const validateOnce = (src) =>
     validateSnippetAnalysis({
       gate,
@@ -713,6 +812,10 @@ function runHookPayload(payload, gate, config, args, ts, attemptContext, output
     ruleId: firstDiagnostic?.ruleId,
     nextAction: firstDiagnostic?.nextAction,
     extraLines: [
+      ...((result.completenessReasons ?? [])
+        .filter((reason) => reason.code === 'LEXICAL_EVIDENCE_INCOMPLETE')
+        .map((reason) => reason.message)
+        .filter(Boolean)),
       ...adapterResult.diagnostics.slice(1).map(
         (diagnostic) =>
           `[${diagnostic.ruleId}] ${diagnostic.message}${diagnostic.location.line ? ` (line ${diagnostic.location.line})` : ''}`
@@ -952,7 +1055,9 @@ function createResidentDoctorSession(args, config, ts) {
     config,
     manifest: args.projectManifest,
     rules,
-    files: before.files,
+    // Resident doctor is a full-tree snapshot. Do not pass the governed list
+    // as a --changed envelope (#212).
+    files: [],
     ts,
     args,
   });
@@ -1927,6 +2032,8 @@ export async function runArkMcp({ hookInput } = {}) {
         'Returns layer, mayImport / mustNotImport, forbiddenGlobals, and goldenPattern ' +
         '(load-bearing for NEW code when .ark/golden-pattern.json exists — adopt generates it). ' +
         'When the matched layer has layers[].description, the JSON includes description; the field is omitted when absent. ' +
+        'When the matched layer has layers[].trustBoundary (public|auth|admin|internal), the JSON includes trustBoundary; omitted when absent. ' +
+        'When the matched layer has layers[].owners, the JSON includes owners; omitted when absent. ' +
         'Call BEFORE writing a new file. ' +
         'Prefer ark_prepare_write when you already have the source snippet (place+validate+autoPatch in one call).',
       inputSchema: {
@@ -1953,7 +2060,9 @@ export async function runArkMcp({ hookInput } = {}) {
         'Also returns the versioned new/worsened designDelta for the proposed full file. ' +
         'Composes ark_place + write-gate — call BEFORE Write/Edit when you have the snippet. ' +
         'When the matched layer has layers[].description, the JSON includes description; the field is omitted when absent. ' +
-        'Returns { filePath, layer, description?, valid, violations?, autoPatch?, judgmentBrief?, contentHash, ... }.',
+        'When the matched layer has layers[].trustBoundary (public|auth|admin|internal), the JSON includes trustBoundary; omitted when absent. ' +
+        'When the matched layer has layers[].owners, the JSON includes owners; omitted when absent. ' +
+        'Returns { filePath, layer, description?, trustBoundary?, owners?, valid, violations?, autoPatch?, judgmentBrief?, contentHash, ... }.',
       inputSchema: {
         type: 'object',
         properties: {