arkgate 4.8.2 → 4.8.3

package/CHANGELOG.md

@@ -3,13 +3,25 @@
 All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are documented here or
 in the immutable pre-2.0 archive linked below.
 
+## 4.8.3 — 2026-08-30
+
+**Patch** over **4.8.2**. Persistence writes in a use-case skip the aggregate (`writes-via-aggregate`). ArkOrder **`xiKeys`** names the slow product decisions; a managed-layer Prisma/pg write of those keys is `ARKORDER_XI_FIELD_WRITE`. Dead sensors (`too-many-params`, `ingest-writes-xi`) now emit. No new skill names. Does not close `K01` / `Z09`. **No required config migration.**
+
+**Status: published** (on npm `latest`; see `docs/releases/4.8.3.md`).
+
+### Added
+- **`writes-via-aggregate`:** tier-1 structure sensor (ADR 0032). Direct evidence = persistence driver import **and** a write token (`.insert` / `.create` / `INSERT INTO` / …). Default advisory; promotable. Absence of the rule is silent.
+- Application + vertical-slice Features starter rules ship the sensor advisory. `/ark-place` `/ark-adopt` `/ark-contract` name the skip. No `Externals/` / `admission.ts` folder religion.
+- **`arkOrder.xiKeys`:** optional 3–5 slow names. Empty stays silent. A use-case that persists a named key is `ARKORDER_XI_FIELD_WRITE`. Copy billing, rename the keys. Membership ids are not keys.
+- ArkOrder sensors `ARKORDER_TOO_MANY_PARAMS` and `ARKORDER_INGEST_WRITES_XI` now emit (they were catalog-only).
+
 ## 4.8.2 — 2026-08-30
 
 **Patch** over **4.8.1**. Frozen 13 skills match four-plane honesty: ArkOrder on
 adopt / place / autopilot; ArkRun `kernelRoots`; kernel import `arkgate/runtime`.
 No `/ark-order` / `/ark-run`. Does not close `K01` / `Z09`. **No required config migration.**
 
-**Status: published** (on npm `latest`; see `docs/releases/4.8.2.md`).
+**Status: published** (see `docs/releases/4.8.2.md`).
 
 ### Changed
 - **Skills four-plane honesty:** existing 13 names teach Layers, ArkRules, ArkRun, and ArkOrder. Adopt (session-0: schema `1.3+`, `planeRoots`, `maxXiKeys`) and Autopilot (grind) name ArkOrder; Place hands ArkOrder grind to Autopilot. ArkRun `kernelRoots` is preferred (`compositionRoots` alias). Kernel import is `arkgate/runtime` (companion deprecated). Skills never enforce.
@@ -18,7 +30,7 @@ No `/ark-order` / `/ark-run`. Does not close `K01` / `Z09`. **No required config
 
 **Patch** over **4.8.0**. ArkRules invariant coverage reads tests first and retains only files that mention a declared invariant id, so large repos no longer report `INVARIANT_UNCOVERED` / `never-had-tests` while covering tests sit on disk. Does not close `K01` / `Z09`. **No required config migration.**
 
-**Status: published** (on npm `latest`; see `docs/releases/4.8.1.md`).
+**Status: published** (see `docs/releases/4.8.1.md`).
 
 ### Fixed
 - **INVARIANT_UNCOVERED on large trees:** `loadInvariantCoverageInputs` spent `MAX_COVERAGE_FILES` (400) on production facts before walking tests. Any repo with more than 400 governed files got `testGlobsMissing: true` and a false *never-had-tests* claim. Tests walk first; with `invariantIds`, a test is retained only if it mentions a catalog id. Doctor and policy-delta use the same ids. When the file budget is exhausted, the diagnostic says so instead of claiming the suite never existed.
@@ -30,7 +42,7 @@ No `/ark-order` / `/ark-run`. Does not close `K01` / `Z09`. **No required config
 the same tarball. `@arkgate/runtime` is **deprecated**. Does not close `K01` / `Z09`.
 ArkRules unchanged.
 
-**Status: published** (on npm `latest`; see `docs/releases/4.8.0.md`).
+**Status: published** (see `docs/releases/4.8.0.md`).
 
 ### Added
 - **ArkOrder extra (`arkOrder`):** optional, silent when absent. Enforced skip: missing plane, Domain import of `arkgate/order`, generic `update` of ξ.

package/README.md

@@ -29,11 +29,13 @@ Works with Cursor, Claude, Codex, and Grok.
 
 </div>
 
-> **ArkGate 4.8.2** is on npm `latest`. Write. Check. Ship. Adopted = required GitHub
+> **ArkGate 4.8.3** is on npm `latest`. Write. Check. Ship. Adopted = required GitHub
 > status running `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
 > Status is compact (`arkgate-check --doctor`; `--all` for Details). Optional **ArkRun**
-> (`arkgate/runtime`) is an in-memory runtime — not Postgres. `@arkgate/runtime` is deprecated.
-> [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
+> (`arkgate/runtime`) is an in-memory runtime — not Postgres. Optional **ArkOrder**
+> (`arkgate/order`) stops the agent rewriting the few slow product decisions as CRUD.
+> `@arkgate/runtime` is deprecated.
+> [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
 
 ---
 
@@ -90,7 +92,7 @@ Aliases `ark` / `ark-check` / `ark-mcp` still work. npm / pnpm / yarn. No instal
 
 When the agent writes a bad import, the write doesn’t land.
 The same check fails the pull request. That is **ArkGate** — import rules, always on
-once you adopt. The other two are optional.
+once you adopt. The other three are optional.
 
 | | Role | When |
 |--|------|------|
@@ -98,13 +100,17 @@ once you adopt. The other two are optional.
 | **Before merge** | `arkgate-check` as a **required** CI status | Always (ArkGate) |
 | **ArkRules** | Optional policies *inside* a layer | When you ask |
 | **ArkRun** | Optional experimental runtime (`arkgate/runtime`) | Off unless you turn it on |
+| **ArkOrder** | Stops the agent rewriting the few slow product decisions as CRUD (`arkgate/order`) | Off unless you turn it on |
 
-Layers (who may import whom) always run. ArkRules and ArkRun change no inter-layer
-verdict when absent. Label leftovers **`[Layer]`** vs **`[ArkRules]`**.
+Layers (who may import whom) always run. ArkRules, ArkRun, and ArkOrder change no
+inter-layer verdict when absent. Label leftovers **`[Layer]`** vs **`[ArkRules]`** vs
+**`[ArkRun]`** vs **`[ArkOrder]`**.
 Details: [configuration](docs/configuration.md) · [use](docs/use.md).
 
 **Not** an API Gateway, a folder linter, a web framework, ORM, or job runner.
-ArkRun is in-memory — local and tests, not Postgres.
+ArkRun is in-memory — local and tests, not Postgres. ArkOrder does not replace
+import rules: layers can be green while the agent still PATCHes the billing plan
+like a seat count.
 
 **Name note:** npm package `arkgate` — not affiliated with the separate Archgate CLI project.
 
@@ -211,6 +217,7 @@ expectation.
 | Placement + preflight for multi-file changes | ✅ | ❌ |
 | Honest governed % + dual plan (edges vs shape) | ✅ | ❌ |
 | Opt-in intra-layer ArkRules (structure + invariants) | ✅ | ❌ |
+| Stops agents rewriting slow product decisions as CRUD (ArkOrder) | ✅ | ❌ |
 | Incomplete analysis cannot look green | ✅ | varies |
 
 ---
@@ -254,6 +261,29 @@ interfaces for production. Details: [docs/production-hardening.md](docs/producti
 
 ---
 
+## Optional ArkOrder
+
+Layers stop a bad import. They do not stop a *legal* import that overwrites the
+billing plan.
+
+If the product can name a few slow decisions in an afternoon — plan, cycle,
+tenancy; a clinical protocol; match rules — an agent will still ship one PUT
+that changes them together with seats and invoices. The write gate stays green
+because “what may be the plan” was never a rule.
+
+**ArkOrder** (`arkgate/order`) is that rule. Off unless you add `arkOrder`.
+Name the slow keys (`xiKeys`: plan, protocol, cost-code bound — not `projectId`).
+Posting an invoice is absorbed. Changing plan is a new release, with a blast
+radius. A generic `update` of the plan does not land. A use-case that PATCHes
+those keys through Prisma is named. Same npm package.
+In-memory. Not durable. Does not replace ArkRun.
+
+Copy [examples/arkorder-billing/](examples/arkorder-billing/) and rename the
+three keys. Compact starters leave it off. Details:
+[configuration](docs/configuration.md) · [package surface](docs/package-surface.md).
+
+---
+
 ## Documentation
 
 | Audience | Link |
@@ -266,7 +296,8 @@ interfaces for production. Details: [docs/production-hardening.md](docs/producti
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Current published (4.8.2 on npm `latest`) | [docs/releases/4.8.2.md](docs/releases/4.8.2.md) · [CHANGELOG](CHANGELOG.md) |
+| Current published (4.8.3 on npm `latest`) | [docs/releases/4.8.3.md](docs/releases/4.8.3.md) · [CHANGELOG](CHANGELOG.md) |
+| Prior published (4.8.2) | [docs/releases/4.8.2.md](docs/releases/4.8.2.md) |
 | Prior published (4.8.1) | [docs/releases/4.8.1.md](docs/releases/4.8.1.md) |
 | Prior published (4.8.0) | [docs/releases/4.8.0.md](docs/releases/4.8.0.md) |
 | Prior published (4.7.6) | [docs/releases/4.7.6.md](docs/releases/4.7.6.md) |