arkgate 4.8.24 → 4.8.25

package/dist/{types-DRinG-vT.d.cts → types-CnauMQQL.d.cts}

@@ -175,10 +175,19 @@ type ArkConfigChildSlices = {
      * `to` is the universe id plus one child segment.
      */
     sliceAliases?: ArkConfigSliceAlias[];
+    /**
+     * Filename at each child slice root. `<Layer>` is the only token.
+     * Example: `arkrules.<Layer>.json`.
+     */
+    arkRulesFile?: string;
 };
 type ArkConfigSliceAlias = {
     from: string;
     to: string;
+    /** True: the path stays. It is not an owed move and does not clear other honesty debt. */
+    pinned?: boolean;
+    /** Doctor label, such as `framework-route`. A label alone does not pin. */
+    reason?: string;
 };
 type ArkConfigCrossSliceEdge = {
     from: string;
@@ -213,7 +222,9 @@ type ArkConfigCoverage = {
  * ADR 0012 — optional map of layer name → project-relative ArkRules file path.
  * Absence changes no inter-layer verdict.
  */
-type ArkConfigArkRulesRefs = Record<string, string>;
+/** One path, or several paths merged into that layer's catalog. */
+type ArkConfigArkRulesRef = string | string[];
+type ArkConfigArkRulesRefs = Record<string, ArkConfigArkRulesRef>;
 /** ADR 0020 — advisory never adds merge teeth; enforced is the extra's merge plane. */
 type ArkConfigArkRunMode = 'advisory' | 'enforced';
 /**
@@ -1624,6 +1635,24 @@ type ArkRunRegisterOptions<T = unknown> = {
 };
 type ArkRunRegistrationHandle = ArkRunInformationPackageComponent;
 
+type ArkRunInspectorListenSource = {
+    getInspectorSnapshot(bind: ArkRunInspectorBind): ArkRunInspectorSnapshot;
+    requestGraph(query?: ArkRunGraphQuery): ArkRunGraph;
+    /** OD04: pending/failed outbox summaries (EventBufferStore.list). */
+    listInspectorOutbox?(): Promise<ArkRunInspectorOutboxMonitor>;
+    /** OD04: workflow/saga summaries (WorkflowEngine.list). */
+    listInspectorWorkflows?(): Promise<ArkRunInspectorWorkflowsMonitor>;
+    /** Duck-typed kernel ports when explicit list* helpers are absent. */
+    outbox?: {
+        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
+    };
+    eventBuffer?: {
+        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
+    };
+    workflowEngine?: {
+        list(workflowName?: string): Promise<unknown[]>;
+    };
+};
 type ArkRunInspectorHandle = {
     host: string;
     port: number;
@@ -1636,11 +1665,6 @@ type ArkRunInspectorHandle = {
     close(): Promise<void>;
 };
 
-/**
- * Opt-in ArkRun inspector. HTTP is dynamically imported so constructing a
- * kernel does not bind a port or load `node:http`.
- */
-
 type StartArkRunInspectorOptions = {
     host?: string;
     port?: number;
@@ -1648,24 +1672,8 @@ type StartArkRunInspectorOptions = {
     nodeEnv?: string;
     sseIntervalMs?: number;
 };
-type ArkRunInspectorSource = {
-    getInspectorSnapshot(bind: ArkRunInspectorBind): ArkRunInspectorSnapshot;
-    requestGraph(query?: ArkRunGraphQuery): ArkRunGraph;
-    /** OD04: pending/failed outbox summaries (EventBufferStore.list). */
-    listInspectorOutbox?(): Promise<ArkRunInspectorOutboxMonitor>;
-    /** OD04: workflow/saga summaries (WorkflowEngine.list). */
-    listInspectorWorkflows?(): Promise<ArkRunInspectorWorkflowsMonitor>;
-    /** Duck-typed kernel ports when explicit list* helpers are absent. */
-    outbox?: {
-        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
-    };
-    eventBuffer?: {
-        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
-    };
-    workflowEngine?: {
-        list(workflowName?: string): Promise<unknown[]>;
-    };
-};
+/** What the inspector reads: snapshot, graph, and optional outbox / workflow monitors. */
+type ArkRunInspectorSource = ArkRunInspectorListenSource;
 declare function startArkRunInspector(source: ArkRunInspectorSource, options?: StartArkRunInspectorOptions): Promise<ArkRunInspectorHandle>;
 
 /**
@@ -1789,4 +1797,4 @@ interface CreateArkKernelFromConfigOptions extends Omit<CreateArkKernelOptions,
 }
 type ArkKernelConfig = ArkCheckConfig;
 
-export { type OutboxRecord as $, type ArkKernel as A, type EventBus as B, type CreateArkKernelOptions as C, type DependencyGraph as D, type EventContractRegistry as E, type CreateObservabilityReporterOptions as F, type GraphEdge as G, PolicyEngine as H, IntentRegistry as I, type ArkManifest as J, type WorkflowSnapshot as K, type SagaDefinition as L, type MetadataRegistry as M, type CreateWorkflowEngineOptions as N, type ObservabilityReporter as O, type ProjectionRegistry as P, type SagaInstance as Q, type ReadModelStore as R, type SagaContext as S, type WorkflowEngine as T, type DependencyInformationPackage as U, type ArkKernelConfig as V, type WorkflowStore as W, type CreateArkKernelFromConfigOptions as X, type TraceRecordType as Y, type TraceRecord as Z, type OutboxStatus as _, type AuditStore as a, type ArkRunInspectorSource as a$, type ObservabilityDriftReport as a0, type ArkConfig as a1, type ArkConfigLoadResult as a2, ARK_RUN_COMPONENT_LIFETIMES as a3, ARK_RUN_EPHEMERAL_DEFAULT as a4, ARK_RUN_GRAPH_DEFAULT_SLICE as a5, ARK_RUN_GRAPH_NODE_KINDS as a6, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as a7, ARK_RUN_GRAPH_SCHEMA_VERSION as a8, ARK_RUN_GRAPH_SLICES as a9, type ArkRunDeliveredVia as aA, type ArkRunExtendedInfo as aB, type ArkRunGraph as aC, type ArkRunGraphEdge as aD, type ArkRunGraphEdgeKind as aE, type ArkRunGraphMatch as aF, type ArkRunGraphMatchInput as aG, type ArkRunGraphNode as aH, type ArkRunGraphNodeKind as aI, type ArkRunGraphProcessEdgeKind as aJ, type ArkRunGraphQuery as aK, type ArkRunGraphResolvedQuery as aL, type ArkRunGraphSlice as aM, type ArkRunGraphTechnicalEdgeKind as aN, type ArkRunInformationPackageComponent as aO, type ArkRunInspectorBind as aP, ArkRunInspectorBindError as aQ, type ArkRunInspectorBindInput as aR, type ArkRunInspectorHandle as aS, type ArkRunInspectorHardening as aT, type ArkRunInspectorHardeningDurability as aU, type ArkRunInspectorMonitorBuildOptions as aV, type ArkRunInspectorOutboxMonitor as aW, type ArkRunInspectorOutboxRecordSummary as aX, ArkRunInspectorProductionError as aY, type ArkRunInspectorSnapshot as aZ, type ArkRunInspectorSnapshotInput as a_, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as aa, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as ab, ARK_RUN_INSPECTOR_DEFAULT_HOST as ac, ARK_RUN_INSPECTOR_DEFAULT_PORT as ad, ARK_RUN_INSPECTOR_EVENTS_PATH as ae, ARK_RUN_INSPECTOR_GRAPH_PATH as af, ARK_RUN_INSPECTOR_MONITOR_SAMPLE_LIMIT as ag, ARK_RUN_INSPECTOR_OUTBOX_PATH as ah, ARK_RUN_INSPECTOR_SCHEMA_VERSION as ai, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as aj, ARK_RUN_INSPECTOR_SSE_EVENT as ak, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as al, ARK_RUN_INSPECTOR_WORKFLOWS_PATH as am, ARK_RUN_TRANSPORT_KINDS as an, type ArchitectureLayer as ao, type ArchitectureLayerConfig as ap, type ArchitectureRule as aq, type ArkManifestArchitecture as ar, type ArkManifestData as as, type ArkManifestEntityLink as at, type ArkManifestGraph as au, type ArkManifestIntent as av, type ArkManifestPolicy as aw, type ArkManifestProjection as ax, type ArkRunBrokerAdapter as ay, type ArkRunComponentLifetime as az, type AuditRecord as b, formatArkRunInspectorSseEvent as b$, type ArkRunInspectorStoreDurability as b0, type ArkRunInspectorStoreDurabilityKind as b1, type ArkRunInspectorStoreRole as b2, type ArkRunInspectorTransportFacts as b3, type ArkRunInspectorWorkflowSummary as b4, type ArkRunInspectorWorkflowsMonitor as b5, type ArkRunPublisher as b6, type ArkRunRegisterOptions as b7, type ArkRunRegistrationHandle as b8, type ArkRunSendOptions as b9, type OutboxStore as bA, type PolicyEvaluationResult as bB, type ProjectionCheckpoint as bC, type ProjectionDefinition as bD, type PublishedEventRecord as bE, type RetryPolicy as bF, type SagaStatus as bG, type SagaStep as bH, type StartArkRunInspectorOptions as bI, type TraceSink as bJ, type Unsubscribe as bK, type WorkflowDefinition as bL, type WorkflowStatus as bM, type WorkflowStep as bN, appendDecisionTape as bO, arkRunGraphQueryFromSearchParams as bP, arkRunInspectorUrl as bQ, buildArkRunInspectorHardening as bR, buildArkRunInspectorOutboxMonitor as bS, buildArkRunInspectorSnapshot as bT, buildArkRunInspectorWorkflowsMonitor as bU, buildDependencyInformationPackage as bV, classifyArkRunInspectorStoreDurability as bW, closeArkRunGraphQuery as bX, closedArkRunEphemeral as bY, closedArkRunTransportKind as bZ, formatArkRunGraphMermaid as b_, type ArkRunSendPlan as ba, type ArkRunSendPlanInput as bb, type ArkRunSendResult as bc, type ArkRunTransportKind as bd, type AuditRecordInput as be, type AuditRecordType as bf, type CorrelationId as bg, type EntityMeta as bh, type EventContractIssue as bi, type EventHandler as bj, type EventInterceptionInfo as bk, type EventInterceptor as bl, type EventInterceptorContext as bm, type EventMetadata as bn, type EventPayloadPatch as bo, type EventPayloadSchema as bp, type EventPublisher as bq, type EventSchemaField as br, type EventSchemaFieldType as bs, type FieldMeta as bt, type GraphNode as bu, type IntentRelationshipKind as bv, InvalidArkRunGraphQueryError as bw, InvalidArkRunSendOptionError as bx, type ObservabilityFlow as by, type ObservedLayerFlowMode as bz, type AuditQuery as c, isArkRunInspectorLoopbackHost as c0, isArkRunInspectorProductionEnv as c1, requestArkRunGraph as c2, resolveArkRunInspectorBind as c3, resolveArkRunSendPlan as c4, startArkRunInspector as c5, unavailableArkRunInspectorOutboxMonitor as c6, unavailableArkRunInspectorWorkflowsMonitor as c7, type CreateAuditTrailOptions as d, type AuditTrail as e, type CreateArchitectureProfileOptions as f, type ArchitectureProfile as g, type ArkCheckConfig as h, type CreateArchitectureProfileFromArkConfigOptions as i, type CreateElevenLayerArkConfigOptions as j, type EventContract as k, type DomainEvent as l, type EventContractValidationResult as m, type IntentName as n, type DefineIntentOptions as o, type IntentCreator as p, type CreateProjectionRegistryOptions as q, type PolicyViolation as r, type PolicySeverity as s, type PolicyEnforcementMode as t, type Policy as u, type IntentRelationship as v, type EventBufferStore as w, type EventBufferRecord as x, type EventBufferStatus as y, type EventBusOptions as z };
+export { type TraceRecord as $, type ArkKernel as A, type EventBus as B, type CreateArkKernelOptions as C, type DependencyGraph as D, type EventContractRegistry as E, type CreateObservabilityReporterOptions as F, type GraphEdge as G, PolicyEngine as H, IntentRegistry as I, type ArkManifest as J, type WorkflowSnapshot as K, type SagaDefinition as L, type MetadataRegistry as M, type CreateWorkflowEngineOptions as N, type ObservabilityReporter as O, type ProjectionRegistry as P, type SagaInstance as Q, type ReadModelStore as R, type SagaContext as S, type WorkflowEngine as T, type ArkConfig as U, type ArkConfigLoadResult as V, type WorkflowStore as W, type DependencyInformationPackage as X, type ArkKernelConfig as Y, type CreateArkKernelFromConfigOptions as Z, type TraceRecordType as _, type AuditStore as a, type ArkRunInspectorSource as a$, type OutboxStatus as a0, type OutboxRecord as a1, type ObservabilityDriftReport as a2, ARK_RUN_COMPONENT_LIFETIMES as a3, ARK_RUN_EPHEMERAL_DEFAULT as a4, ARK_RUN_GRAPH_DEFAULT_SLICE as a5, ARK_RUN_GRAPH_NODE_KINDS as a6, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as a7, ARK_RUN_GRAPH_SCHEMA_VERSION as a8, ARK_RUN_GRAPH_SLICES as a9, type ArkRunDeliveredVia as aA, type ArkRunExtendedInfo as aB, type ArkRunGraph as aC, type ArkRunGraphEdge as aD, type ArkRunGraphEdgeKind as aE, type ArkRunGraphMatch as aF, type ArkRunGraphMatchInput as aG, type ArkRunGraphNode as aH, type ArkRunGraphNodeKind as aI, type ArkRunGraphProcessEdgeKind as aJ, type ArkRunGraphQuery as aK, type ArkRunGraphResolvedQuery as aL, type ArkRunGraphSlice as aM, type ArkRunGraphTechnicalEdgeKind as aN, type ArkRunInformationPackageComponent as aO, type ArkRunInspectorBind as aP, ArkRunInspectorBindError as aQ, type ArkRunInspectorBindInput as aR, type ArkRunInspectorHandle as aS, type ArkRunInspectorHardening as aT, type ArkRunInspectorHardeningDurability as aU, type ArkRunInspectorMonitorBuildOptions as aV, type ArkRunInspectorOutboxMonitor as aW, type ArkRunInspectorOutboxRecordSummary as aX, ArkRunInspectorProductionError as aY, type ArkRunInspectorSnapshot as aZ, type ArkRunInspectorSnapshotInput as a_, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as aa, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as ab, ARK_RUN_INSPECTOR_DEFAULT_HOST as ac, ARK_RUN_INSPECTOR_DEFAULT_PORT as ad, ARK_RUN_INSPECTOR_EVENTS_PATH as ae, ARK_RUN_INSPECTOR_GRAPH_PATH as af, ARK_RUN_INSPECTOR_MONITOR_SAMPLE_LIMIT as ag, ARK_RUN_INSPECTOR_OUTBOX_PATH as ah, ARK_RUN_INSPECTOR_SCHEMA_VERSION as ai, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as aj, ARK_RUN_INSPECTOR_SSE_EVENT as ak, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as al, ARK_RUN_INSPECTOR_WORKFLOWS_PATH as am, ARK_RUN_TRANSPORT_KINDS as an, type ArchitectureLayer as ao, type ArchitectureLayerConfig as ap, type ArchitectureRule as aq, type ArkManifestArchitecture as ar, type ArkManifestData as as, type ArkManifestEntityLink as at, type ArkManifestGraph as au, type ArkManifestIntent as av, type ArkManifestPolicy as aw, type ArkManifestProjection as ax, type ArkRunBrokerAdapter as ay, type ArkRunComponentLifetime as az, type AuditRecord as b, formatArkRunInspectorSseEvent as b$, type ArkRunInspectorStoreDurability as b0, type ArkRunInspectorStoreDurabilityKind as b1, type ArkRunInspectorStoreRole as b2, type ArkRunInspectorTransportFacts as b3, type ArkRunInspectorWorkflowSummary as b4, type ArkRunInspectorWorkflowsMonitor as b5, type ArkRunPublisher as b6, type ArkRunRegisterOptions as b7, type ArkRunRegistrationHandle as b8, type ArkRunSendOptions as b9, type OutboxStore as bA, type PolicyEvaluationResult as bB, type ProjectionCheckpoint as bC, type ProjectionDefinition as bD, type PublishedEventRecord as bE, type RetryPolicy as bF, type SagaStatus as bG, type SagaStep as bH, type StartArkRunInspectorOptions as bI, type TraceSink as bJ, type Unsubscribe as bK, type WorkflowDefinition as bL, type WorkflowStatus as bM, type WorkflowStep as bN, appendDecisionTape as bO, arkRunGraphQueryFromSearchParams as bP, arkRunInspectorUrl as bQ, buildArkRunInspectorHardening as bR, buildArkRunInspectorOutboxMonitor as bS, buildArkRunInspectorSnapshot as bT, buildArkRunInspectorWorkflowsMonitor as bU, buildDependencyInformationPackage as bV, classifyArkRunInspectorStoreDurability as bW, closeArkRunGraphQuery as bX, closedArkRunEphemeral as bY, closedArkRunTransportKind as bZ, formatArkRunGraphMermaid as b_, type ArkRunSendPlan as ba, type ArkRunSendPlanInput as bb, type ArkRunSendResult as bc, type ArkRunTransportKind as bd, type AuditRecordInput as be, type AuditRecordType as bf, type CorrelationId as bg, type EntityMeta as bh, type EventContractIssue as bi, type EventHandler as bj, type EventInterceptionInfo as bk, type EventInterceptor as bl, type EventInterceptorContext as bm, type EventMetadata as bn, type EventPayloadPatch as bo, type EventPayloadSchema as bp, type EventPublisher as bq, type EventSchemaField as br, type EventSchemaFieldType as bs, type FieldMeta as bt, type GraphNode as bu, type IntentRelationshipKind as bv, InvalidArkRunGraphQueryError as bw, InvalidArkRunSendOptionError as bx, type ObservabilityFlow as by, type ObservedLayerFlowMode as bz, type AuditQuery as c, isArkRunInspectorLoopbackHost as c0, isArkRunInspectorProductionEnv as c1, requestArkRunGraph as c2, resolveArkRunInspectorBind as c3, resolveArkRunSendPlan as c4, startArkRunInspector as c5, unavailableArkRunInspectorOutboxMonitor as c6, unavailableArkRunInspectorWorkflowsMonitor as c7, type CreateAuditTrailOptions as d, type AuditTrail as e, type CreateArchitectureProfileOptions as f, type ArchitectureProfile as g, type ArkCheckConfig as h, type CreateArchitectureProfileFromArkConfigOptions as i, type CreateElevenLayerArkConfigOptions as j, type EventContract as k, type DomainEvent as l, type EventContractValidationResult as m, type IntentName as n, type DefineIntentOptions as o, type IntentCreator as p, type CreateProjectionRegistryOptions as q, type PolicyViolation as r, type PolicySeverity as s, type PolicyEnforcementMode as t, type Policy as u, type IntentRelationship as v, type EventBufferStore as w, type EventBufferRecord as x, type EventBufferStatus as y, type EventBusOptions as z };

package/dist/{types-DRinG-vT.d.ts → types-CnauMQQL.d.ts}

@@ -175,10 +175,19 @@ type ArkConfigChildSlices = {
      * `to` is the universe id plus one child segment.
      */
     sliceAliases?: ArkConfigSliceAlias[];
+    /**
+     * Filename at each child slice root. `<Layer>` is the only token.
+     * Example: `arkrules.<Layer>.json`.
+     */
+    arkRulesFile?: string;
 };
 type ArkConfigSliceAlias = {
     from: string;
     to: string;
+    /** True: the path stays. It is not an owed move and does not clear other honesty debt. */
+    pinned?: boolean;
+    /** Doctor label, such as `framework-route`. A label alone does not pin. */
+    reason?: string;
 };
 type ArkConfigCrossSliceEdge = {
     from: string;
@@ -213,7 +222,9 @@ type ArkConfigCoverage = {
  * ADR 0012 — optional map of layer name → project-relative ArkRules file path.
  * Absence changes no inter-layer verdict.
  */
-type ArkConfigArkRulesRefs = Record<string, string>;
+/** One path, or several paths merged into that layer's catalog. */
+type ArkConfigArkRulesRef = string | string[];
+type ArkConfigArkRulesRefs = Record<string, ArkConfigArkRulesRef>;
 /** ADR 0020 — advisory never adds merge teeth; enforced is the extra's merge plane. */
 type ArkConfigArkRunMode = 'advisory' | 'enforced';
 /**
@@ -1624,6 +1635,24 @@ type ArkRunRegisterOptions<T = unknown> = {
 };
 type ArkRunRegistrationHandle = ArkRunInformationPackageComponent;
 
+type ArkRunInspectorListenSource = {
+    getInspectorSnapshot(bind: ArkRunInspectorBind): ArkRunInspectorSnapshot;
+    requestGraph(query?: ArkRunGraphQuery): ArkRunGraph;
+    /** OD04: pending/failed outbox summaries (EventBufferStore.list). */
+    listInspectorOutbox?(): Promise<ArkRunInspectorOutboxMonitor>;
+    /** OD04: workflow/saga summaries (WorkflowEngine.list). */
+    listInspectorWorkflows?(): Promise<ArkRunInspectorWorkflowsMonitor>;
+    /** Duck-typed kernel ports when explicit list* helpers are absent. */
+    outbox?: {
+        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
+    };
+    eventBuffer?: {
+        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
+    };
+    workflowEngine?: {
+        list(workflowName?: string): Promise<unknown[]>;
+    };
+};
 type ArkRunInspectorHandle = {
     host: string;
     port: number;
@@ -1636,11 +1665,6 @@ type ArkRunInspectorHandle = {
     close(): Promise<void>;
 };
 
-/**
- * Opt-in ArkRun inspector. HTTP is dynamically imported so constructing a
- * kernel does not bind a port or load `node:http`.
- */
-
 type StartArkRunInspectorOptions = {
     host?: string;
     port?: number;
@@ -1648,24 +1672,8 @@ type StartArkRunInspectorOptions = {
     nodeEnv?: string;
     sseIntervalMs?: number;
 };
-type ArkRunInspectorSource = {
-    getInspectorSnapshot(bind: ArkRunInspectorBind): ArkRunInspectorSnapshot;
-    requestGraph(query?: ArkRunGraphQuery): ArkRunGraph;
-    /** OD04: pending/failed outbox summaries (EventBufferStore.list). */
-    listInspectorOutbox?(): Promise<ArkRunInspectorOutboxMonitor>;
-    /** OD04: workflow/saga summaries (WorkflowEngine.list). */
-    listInspectorWorkflows?(): Promise<ArkRunInspectorWorkflowsMonitor>;
-    /** Duck-typed kernel ports when explicit list* helpers are absent. */
-    outbox?: {
-        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
-    };
-    eventBuffer?: {
-        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
-    };
-    workflowEngine?: {
-        list(workflowName?: string): Promise<unknown[]>;
-    };
-};
+/** What the inspector reads: snapshot, graph, and optional outbox / workflow monitors. */
+type ArkRunInspectorSource = ArkRunInspectorListenSource;
 declare function startArkRunInspector(source: ArkRunInspectorSource, options?: StartArkRunInspectorOptions): Promise<ArkRunInspectorHandle>;
 
 /**
@@ -1789,4 +1797,4 @@ interface CreateArkKernelFromConfigOptions extends Omit<CreateArkKernelOptions,
 }
 type ArkKernelConfig = ArkCheckConfig;
 
-export { type OutboxRecord as $, type ArkKernel as A, type EventBus as B, type CreateArkKernelOptions as C, type DependencyGraph as D, type EventContractRegistry as E, type CreateObservabilityReporterOptions as F, type GraphEdge as G, PolicyEngine as H, IntentRegistry as I, type ArkManifest as J, type WorkflowSnapshot as K, type SagaDefinition as L, type MetadataRegistry as M, type CreateWorkflowEngineOptions as N, type ObservabilityReporter as O, type ProjectionRegistry as P, type SagaInstance as Q, type ReadModelStore as R, type SagaContext as S, type WorkflowEngine as T, type DependencyInformationPackage as U, type ArkKernelConfig as V, type WorkflowStore as W, type CreateArkKernelFromConfigOptions as X, type TraceRecordType as Y, type TraceRecord as Z, type OutboxStatus as _, type AuditStore as a, type ArkRunInspectorSource as a$, type ObservabilityDriftReport as a0, type ArkConfig as a1, type ArkConfigLoadResult as a2, ARK_RUN_COMPONENT_LIFETIMES as a3, ARK_RUN_EPHEMERAL_DEFAULT as a4, ARK_RUN_GRAPH_DEFAULT_SLICE as a5, ARK_RUN_GRAPH_NODE_KINDS as a6, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as a7, ARK_RUN_GRAPH_SCHEMA_VERSION as a8, ARK_RUN_GRAPH_SLICES as a9, type ArkRunDeliveredVia as aA, type ArkRunExtendedInfo as aB, type ArkRunGraph as aC, type ArkRunGraphEdge as aD, type ArkRunGraphEdgeKind as aE, type ArkRunGraphMatch as aF, type ArkRunGraphMatchInput as aG, type ArkRunGraphNode as aH, type ArkRunGraphNodeKind as aI, type ArkRunGraphProcessEdgeKind as aJ, type ArkRunGraphQuery as aK, type ArkRunGraphResolvedQuery as aL, type ArkRunGraphSlice as aM, type ArkRunGraphTechnicalEdgeKind as aN, type ArkRunInformationPackageComponent as aO, type ArkRunInspectorBind as aP, ArkRunInspectorBindError as aQ, type ArkRunInspectorBindInput as aR, type ArkRunInspectorHandle as aS, type ArkRunInspectorHardening as aT, type ArkRunInspectorHardeningDurability as aU, type ArkRunInspectorMonitorBuildOptions as aV, type ArkRunInspectorOutboxMonitor as aW, type ArkRunInspectorOutboxRecordSummary as aX, ArkRunInspectorProductionError as aY, type ArkRunInspectorSnapshot as aZ, type ArkRunInspectorSnapshotInput as a_, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as aa, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as ab, ARK_RUN_INSPECTOR_DEFAULT_HOST as ac, ARK_RUN_INSPECTOR_DEFAULT_PORT as ad, ARK_RUN_INSPECTOR_EVENTS_PATH as ae, ARK_RUN_INSPECTOR_GRAPH_PATH as af, ARK_RUN_INSPECTOR_MONITOR_SAMPLE_LIMIT as ag, ARK_RUN_INSPECTOR_OUTBOX_PATH as ah, ARK_RUN_INSPECTOR_SCHEMA_VERSION as ai, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as aj, ARK_RUN_INSPECTOR_SSE_EVENT as ak, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as al, ARK_RUN_INSPECTOR_WORKFLOWS_PATH as am, ARK_RUN_TRANSPORT_KINDS as an, type ArchitectureLayer as ao, type ArchitectureLayerConfig as ap, type ArchitectureRule as aq, type ArkManifestArchitecture as ar, type ArkManifestData as as, type ArkManifestEntityLink as at, type ArkManifestGraph as au, type ArkManifestIntent as av, type ArkManifestPolicy as aw, type ArkManifestProjection as ax, type ArkRunBrokerAdapter as ay, type ArkRunComponentLifetime as az, type AuditRecord as b, formatArkRunInspectorSseEvent as b$, type ArkRunInspectorStoreDurability as b0, type ArkRunInspectorStoreDurabilityKind as b1, type ArkRunInspectorStoreRole as b2, type ArkRunInspectorTransportFacts as b3, type ArkRunInspectorWorkflowSummary as b4, type ArkRunInspectorWorkflowsMonitor as b5, type ArkRunPublisher as b6, type ArkRunRegisterOptions as b7, type ArkRunRegistrationHandle as b8, type ArkRunSendOptions as b9, type OutboxStore as bA, type PolicyEvaluationResult as bB, type ProjectionCheckpoint as bC, type ProjectionDefinition as bD, type PublishedEventRecord as bE, type RetryPolicy as bF, type SagaStatus as bG, type SagaStep as bH, type StartArkRunInspectorOptions as bI, type TraceSink as bJ, type Unsubscribe as bK, type WorkflowDefinition as bL, type WorkflowStatus as bM, type WorkflowStep as bN, appendDecisionTape as bO, arkRunGraphQueryFromSearchParams as bP, arkRunInspectorUrl as bQ, buildArkRunInspectorHardening as bR, buildArkRunInspectorOutboxMonitor as bS, buildArkRunInspectorSnapshot as bT, buildArkRunInspectorWorkflowsMonitor as bU, buildDependencyInformationPackage as bV, classifyArkRunInspectorStoreDurability as bW, closeArkRunGraphQuery as bX, closedArkRunEphemeral as bY, closedArkRunTransportKind as bZ, formatArkRunGraphMermaid as b_, type ArkRunSendPlan as ba, type ArkRunSendPlanInput as bb, type ArkRunSendResult as bc, type ArkRunTransportKind as bd, type AuditRecordInput as be, type AuditRecordType as bf, type CorrelationId as bg, type EntityMeta as bh, type EventContractIssue as bi, type EventHandler as bj, type EventInterceptionInfo as bk, type EventInterceptor as bl, type EventInterceptorContext as bm, type EventMetadata as bn, type EventPayloadPatch as bo, type EventPayloadSchema as bp, type EventPublisher as bq, type EventSchemaField as br, type EventSchemaFieldType as bs, type FieldMeta as bt, type GraphNode as bu, type IntentRelationshipKind as bv, InvalidArkRunGraphQueryError as bw, InvalidArkRunSendOptionError as bx, type ObservabilityFlow as by, type ObservedLayerFlowMode as bz, type AuditQuery as c, isArkRunInspectorLoopbackHost as c0, isArkRunInspectorProductionEnv as c1, requestArkRunGraph as c2, resolveArkRunInspectorBind as c3, resolveArkRunSendPlan as c4, startArkRunInspector as c5, unavailableArkRunInspectorOutboxMonitor as c6, unavailableArkRunInspectorWorkflowsMonitor as c7, type CreateAuditTrailOptions as d, type AuditTrail as e, type CreateArchitectureProfileOptions as f, type ArchitectureProfile as g, type ArkCheckConfig as h, type CreateArchitectureProfileFromArkConfigOptions as i, type CreateElevenLayerArkConfigOptions as j, type EventContract as k, type DomainEvent as l, type EventContractValidationResult as m, type IntentName as n, type DefineIntentOptions as o, type IntentCreator as p, type CreateProjectionRegistryOptions as q, type PolicyViolation as r, type PolicySeverity as s, type PolicyEnforcementMode as t, type Policy as u, type IntentRelationship as v, type EventBufferStore as w, type EventBufferRecord as x, type EventBufferStatus as y, type EventBusOptions as z };
+export { type TraceRecord as $, type ArkKernel as A, type EventBus as B, type CreateArkKernelOptions as C, type DependencyGraph as D, type EventContractRegistry as E, type CreateObservabilityReporterOptions as F, type GraphEdge as G, PolicyEngine as H, IntentRegistry as I, type ArkManifest as J, type WorkflowSnapshot as K, type SagaDefinition as L, type MetadataRegistry as M, type CreateWorkflowEngineOptions as N, type ObservabilityReporter as O, type ProjectionRegistry as P, type SagaInstance as Q, type ReadModelStore as R, type SagaContext as S, type WorkflowEngine as T, type ArkConfig as U, type ArkConfigLoadResult as V, type WorkflowStore as W, type DependencyInformationPackage as X, type ArkKernelConfig as Y, type CreateArkKernelFromConfigOptions as Z, type TraceRecordType as _, type AuditStore as a, type ArkRunInspectorSource as a$, type OutboxStatus as a0, type OutboxRecord as a1, type ObservabilityDriftReport as a2, ARK_RUN_COMPONENT_LIFETIMES as a3, ARK_RUN_EPHEMERAL_DEFAULT as a4, ARK_RUN_GRAPH_DEFAULT_SLICE as a5, ARK_RUN_GRAPH_NODE_KINDS as a6, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as a7, ARK_RUN_GRAPH_SCHEMA_VERSION as a8, ARK_RUN_GRAPH_SLICES as a9, type ArkRunDeliveredVia as aA, type ArkRunExtendedInfo as aB, type ArkRunGraph as aC, type ArkRunGraphEdge as aD, type ArkRunGraphEdgeKind as aE, type ArkRunGraphMatch as aF, type ArkRunGraphMatchInput as aG, type ArkRunGraphNode as aH, type ArkRunGraphNodeKind as aI, type ArkRunGraphProcessEdgeKind as aJ, type ArkRunGraphQuery as aK, type ArkRunGraphResolvedQuery as aL, type ArkRunGraphSlice as aM, type ArkRunGraphTechnicalEdgeKind as aN, type ArkRunInformationPackageComponent as aO, type ArkRunInspectorBind as aP, ArkRunInspectorBindError as aQ, type ArkRunInspectorBindInput as aR, type ArkRunInspectorHandle as aS, type ArkRunInspectorHardening as aT, type ArkRunInspectorHardeningDurability as aU, type ArkRunInspectorMonitorBuildOptions as aV, type ArkRunInspectorOutboxMonitor as aW, type ArkRunInspectorOutboxRecordSummary as aX, ArkRunInspectorProductionError as aY, type ArkRunInspectorSnapshot as aZ, type ArkRunInspectorSnapshotInput as a_, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as aa, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as ab, ARK_RUN_INSPECTOR_DEFAULT_HOST as ac, ARK_RUN_INSPECTOR_DEFAULT_PORT as ad, ARK_RUN_INSPECTOR_EVENTS_PATH as ae, ARK_RUN_INSPECTOR_GRAPH_PATH as af, ARK_RUN_INSPECTOR_MONITOR_SAMPLE_LIMIT as ag, ARK_RUN_INSPECTOR_OUTBOX_PATH as ah, ARK_RUN_INSPECTOR_SCHEMA_VERSION as ai, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as aj, ARK_RUN_INSPECTOR_SSE_EVENT as ak, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as al, ARK_RUN_INSPECTOR_WORKFLOWS_PATH as am, ARK_RUN_TRANSPORT_KINDS as an, type ArchitectureLayer as ao, type ArchitectureLayerConfig as ap, type ArchitectureRule as aq, type ArkManifestArchitecture as ar, type ArkManifestData as as, type ArkManifestEntityLink as at, type ArkManifestGraph as au, type ArkManifestIntent as av, type ArkManifestPolicy as aw, type ArkManifestProjection as ax, type ArkRunBrokerAdapter as ay, type ArkRunComponentLifetime as az, type AuditRecord as b, formatArkRunInspectorSseEvent as b$, type ArkRunInspectorStoreDurability as b0, type ArkRunInspectorStoreDurabilityKind as b1, type ArkRunInspectorStoreRole as b2, type ArkRunInspectorTransportFacts as b3, type ArkRunInspectorWorkflowSummary as b4, type ArkRunInspectorWorkflowsMonitor as b5, type ArkRunPublisher as b6, type ArkRunRegisterOptions as b7, type ArkRunRegistrationHandle as b8, type ArkRunSendOptions as b9, type OutboxStore as bA, type PolicyEvaluationResult as bB, type ProjectionCheckpoint as bC, type ProjectionDefinition as bD, type PublishedEventRecord as bE, type RetryPolicy as bF, type SagaStatus as bG, type SagaStep as bH, type StartArkRunInspectorOptions as bI, type TraceSink as bJ, type Unsubscribe as bK, type WorkflowDefinition as bL, type WorkflowStatus as bM, type WorkflowStep as bN, appendDecisionTape as bO, arkRunGraphQueryFromSearchParams as bP, arkRunInspectorUrl as bQ, buildArkRunInspectorHardening as bR, buildArkRunInspectorOutboxMonitor as bS, buildArkRunInspectorSnapshot as bT, buildArkRunInspectorWorkflowsMonitor as bU, buildDependencyInformationPackage as bV, classifyArkRunInspectorStoreDurability as bW, closeArkRunGraphQuery as bX, closedArkRunEphemeral as bY, closedArkRunTransportKind as bZ, formatArkRunGraphMermaid as b_, type ArkRunSendPlan as ba, type ArkRunSendPlanInput as bb, type ArkRunSendResult as bc, type ArkRunTransportKind as bd, type AuditRecordInput as be, type AuditRecordType as bf, type CorrelationId as bg, type EntityMeta as bh, type EventContractIssue as bi, type EventHandler as bj, type EventInterceptionInfo as bk, type EventInterceptor as bl, type EventInterceptorContext as bm, type EventMetadata as bn, type EventPayloadPatch as bo, type EventPayloadSchema as bp, type EventPublisher as bq, type EventSchemaField as br, type EventSchemaFieldType as bs, type FieldMeta as bt, type GraphNode as bu, type IntentRelationshipKind as bv, InvalidArkRunGraphQueryError as bw, InvalidArkRunSendOptionError as bx, type ObservabilityFlow as by, type ObservedLayerFlowMode as bz, type AuditQuery as c, isArkRunInspectorLoopbackHost as c0, isArkRunInspectorProductionEnv as c1, requestArkRunGraph as c2, resolveArkRunInspectorBind as c3, resolveArkRunSendPlan as c4, startArkRunInspector as c5, unavailableArkRunInspectorOutboxMonitor as c6, unavailableArkRunInspectorWorkflowsMonitor as c7, type CreateAuditTrailOptions as d, type AuditTrail as e, type CreateArchitectureProfileOptions as f, type ArchitectureProfile as g, type ArkCheckConfig as h, type CreateArchitectureProfileFromArkConfigOptions as i, type CreateElevenLayerArkConfigOptions as j, type EventContract as k, type DomainEvent as l, type EventContractValidationResult as m, type IntentName as n, type DefineIntentOptions as o, type IntentCreator as p, type CreateProjectionRegistryOptions as q, type PolicyViolation as r, type PolicySeverity as s, type PolicyEnforcementMode as t, type Policy as u, type IntentRelationship as v, type EventBufferStore as w, type EventBufferRecord as x, type EventBufferStatus as y, type EventBusOptions as z };

package/docs/README.md

@@ -73,7 +73,8 @@ These are **not** the day-to-day product path. They stay in the repo for evidenc
 | Field adoption kit (scaffolding, not closed) | [field/](field/) |
 | Runtime hardening (experimental) | [production-hardening.md](production-hardening.md) |
 
-Current release: [CHANGELOG](../CHANGELOG.md) (`arkgate@4.8.24`; confirm npm with `npm view arkgate@4.8.24 version`; does not close `K01`).
+Current release: [CHANGELOG](../CHANGELOG.md) (`arkgate@4.8.25`; confirm npm with `npm view arkgate@4.8.25 version`; does not close `K01`).
+Prior published: [CHANGELOG](../CHANGELOG.md) (`arkgate@4.8.24`).
 Prior published: [CHANGELOG](../CHANGELOG.md) (`arkgate@4.8.23`).
 Prior published: [CHANGELOG](../CHANGELOG.md) (`arkgate@4.8.22`).
 Prior published: [CHANGELOG](../CHANGELOG.md) (`arkgate@4.8.21`).

package/docs/agent-guide.md

@@ -41,7 +41,7 @@ the project API is unusable. See the distribution and completeness boundary in
 ark start → ark start --apply → ark-check --doctor
   day to day: compact router / MCP place + validate + check
   guided work: install skill pack → /ark-autopilot
-  optional: arkRules map + arkrules/*.json (intra-layer; starts advisory)
+  optional: arkRules map (one path or a list) + arkrules/*.json, or childSlices.arkRulesFile at a slice root (intra-layer; starts advisory)
 ```
 
 `arkgate-check --doctor` shows what's wrong and what to do first. From **4.0.0**, doctor may
@@ -621,6 +621,9 @@ block a promotion, and the surface names which one fired:
 - **`no-coverage-evidence`** — an invariant whose evidence does not support
   promotion. The text is `canPromoteInvariant`'s own, so this surface can never
   promise a promotion the gate then refuses.
+- **`probe-survived`** — the committed invariant probe shows the covering tests
+  still pass with the rule broken, or never call it. Same judge; named apart
+  because the fix is a stronger test. See [Probe an invariant](#probe-an-invariant).
 
 It needs no TypeScript and runs no analysis: the contract, the ArkRules
 documents it points at, and the coverage evidence walk (a filesystem walk plus a
@@ -675,6 +678,63 @@ than a targeted text edit. Exit 0 for a preview or a successful write, 1 for an
 unknown rule id or a refused write, 2 for bad arguments or ArkRules references
 that will not load.
 
+### Probe an invariant
+
+A test title that names an invariant counts as coverage. That proves the test
+exists, not that it would fail if the rule broke. The probe checks that, on
+request:
+
+```bash
+npx arkgate-check --probe-invariants                 # every invariant with a coverage.symbol
+npx arkgate-check --probe-invariants=INV-REFUND-WINDOW
+npx arkgate-check --probe-invariants --write         # save .ark/invariant-probe.json
+npx arkgate-check --probe-invariants --runner vitest # only when the runner is unclear
+```
+
+```text
+INV-REFUND-WINDOW: the tests still pass when the guard is negated (src/domain/refunds/refundPolicy.ts:14).
+The test names the rule but does not pin it. Next: add a case that fails when the rule is broken, then re-run with --write.
+```
+
+For each invariant with a `coverage.symbol`, it copies the project to a
+temporary folder, then runs only the covering tests (titles that name the id,
+and tests that import the symbol's file), with your own runner (vitest, jest or
+`node --test`):
+
+1. unchanged — they must pass;
+2. with the file throwing on load — a test must fail, or the copy is not the one
+   the tests load (`inconclusive`);
+3. with the symbol throwing when called — a test must fail, or the tests never
+   call it (`not-reached`);
+4. with at most three small changes inside the symbol (negate a guard, drop a
+   `throw`, flip or shift a comparison, shift a constant) — each must make a test
+   fail, or the change went unnoticed (`survived`).
+
+Every row reads `killed`, `survived`, `not-reached`, `inconclusive` or
+`unprobeable` (no symbol, a type or interface, no covering test — a declaration
+is not a test). It is not a score.
+
+**Your files are never changed.** Every change happens in the copy, which is
+removed when the run ends, including on Ctrl-C. `--write` adds only
+`.ark/invariant-probe.json`. Exit 0 when nothing survived or went unreached,
+1 when something did, 2 when it could not run (`reasonCode` in the JSON).
+
+**What the result can do.** Only refuse. When the committed file has a fresh
+`survived` or `not-reached` row, `--promote` and the policy delta refuse to
+promote that invariant to `enforced` (blocker `probe-survived`). Fresh means
+the symbol file, every covering test and the invariant are unchanged since the
+run; anything else is stale and changes nothing, like `killed`, `inconclusive`
+or no file at all. Status and `--rules-inventory` show the state per invariant
+(`INVARIANT_PROBE_SURVIVED` when it refuses). CI sees the refusal only if you
+commit the file.
+
+**Trust.** Running the probe runs your tests, exactly like `npm test`; you start
+it, nothing else does. It never runs from the write hook, MCP, ESLint, the
+GitHub Action or `--strict-merge`, and refuses to combine with them. The runner
+gets a short list of environment variables (no tokens, proxies pointed at a
+dead port, `HOME` and the temp folder inside the copy). That is best effort,
+not a sandbox.
+
 ### Literal path drift after a rename (`--path-drift`)
 
 A repo path written inside a **string, a comment or a docstring** is invisible to
@@ -747,6 +807,78 @@ TS/TSX gate the type-aware passes use, because a comment is not code and the
 class was first found in a `.css` file. Generated files are skipped, and every
 file the walk refuses is counted by reason in the output.
 
+### Files nothing imports
+
+A rewrite often lands next to the old file, and the old one stays. Nothing
+imports it. Status reads that from the import edges the check already resolved,
+so it costs no second analysis and never changes the check.
+
+```bash
+npx arkgate-check --doctor            # one dim count line at most
+npx arkgate-check --doctor --all      # the list, plus exports nothing imports by name
+npx arkgate-check --doctor --json     # doctor.orphanModules
+```
+
+```text
+Nothing imports src/lib/legacy-pricing.ts, and no entry point covers it.
+Next: Delete it through the write gate, or add it to .ark/entry-points.json if a framework loads it.
+```
+
+A file is listed only when no governed file, no test, no project script and no
+known entry point imports it. Entry points come from `package.json` (`main`,
+`exports`, `bin`, scripts — built `dist/` paths map back to source), CI workflow
+run steps, framework conventions (Next routes and `middleware`, Vite
+`index.html`, Nest `main`, Vercel `api/`, Storybook stories), the arkRun /
+arkOrder roots in `ark.config.json`, config and setup files, ambient declaration
+files, and `.ark/entry-points.json`. A file only tests import is counted, not
+listed.
+
+When a dynamic import, `import.meta.glob`, `new URL(…, import.meta.url)`, a
+quoted path, or an import that did not resolve could still reach a file, the
+item says so (`maybe-dynamic`, `maybe-unresolved`) and the section is
+`partial`. Read those before deleting. A framework or loader ArkGate does not
+know goes in the sidecar, with a reason and an optional review date:
+
+```json
+{
+  "schemaVersion": "1",
+  "entryPoints": [
+    { "glob": "src/plugins/**", "reason": "loaded by name from the plugin manifest", "reviewBy": "2027-01-01" }
+  ]
+}
+```
+
+Delete one file at a time through the write gate (`/ark-fix`), then run status
+again. Never delete a `maybe-*` item without reading what may load it.
+
+### Copies across a wall
+
+A slice wall denies the import. The cheapest way around it is to copy the code,
+and a copy is not an import, so the check cannot see it. Status details can.
+
+```bash
+npx arkgate-check --doctor --all            # the list, with a place the shared code could live
+npx arkgate-check --doctor --all --json     # doctor.crossWallDuplication
+```
+
+```text
+This code is copied between src/features/billing and src/features/invoices (34 of 35 names match).
+The wall stops the import, not the copy. Next: move it to src/shared/ with /ark-place.
+```
+
+A copy is listed only when its two files sit on two sides of a wall the check
+would enforce — two slices, two child slices of one universe — or in two
+layers. Copies inside one slice are counted, never listed: the slice may
+import its own code. The suggested home comes from your config: the declared
+`sharedRoots`, the universe common folder (`childSlices.commonFolders`), or the
+lower layer both sides may import. When none fits, it says `/ark-place`.
+
+Compact status never runs this; its JSON says `not-run` and names the command.
+Tests, `.d.ts`, generated files and files over 256 KB are never read for it. The
+thresholds are fixed (at least 50 tokens and 5 lines, and most names matching);
+there is no config key. Move one copy at a time through the write gate
+(`/ark-fix`), import it from both sides, then run status again.
+
 ### Presets
 
 - `hexagonal` / `layered` / `feature-sliced` / `monorepo` / **`ui-surface`** (UI/Vite/Remotion-style) / **`vertical-slice`** (features/* + peerIsolation) / **`ddd-bounded-contexts`** (contexts/*/domain|application|infra + shared kernel)
@@ -1421,7 +1553,7 @@ The server exposes these thirteen tools. Every tool accepts the additive
 | `ark_manifest` | No non-project args: return the machine-readable architecture contract with an authoritative binding after the identity handshake. |
 | `validate_code` | `{ source, layer?, filePath? }`: single-file lexical check (layer plane plus the enforced ArkRun / ArkRules structure / ArkOrder sensors CI runs on that file); infer the layer from `filePath` when possible. Always partial: `valid:false` / `isError:true` until complete-candidate preflight — read `lexicalValid` for the one-file verdict. Not a hook; hard blocking is `arkgate-mcp --hook`. |
 | `ark_check` | `{ strict?, baseline? }`: run the full project architecture check. `verdict` separates `identity`, `completeness`, `graph`, `coverage`, `gates`, and `overallOk`; no individual green fact substitutes for the combined verdict. |
-| `ark_policy_delta` | `{ baseConfig, candidateConfig?, baseArkRuleFiles?, candidateArkRuleFiles?, acknowledgement? }`: classify a complete contract transition, ArkRules included; never edits the contract. `baseArkRuleFiles` (`{ "<path from baseConfig.arkRules>": <file JSON> }`) is required when `baseConfig` maps `arkRules`. Weakening / new layer / new allow edge needs `adrPath` on the acknowledgement. |
+| `ark_policy_delta` | `{ baseConfig, candidateConfig?, baseArkRuleFiles?, candidateArkRuleFiles?, acknowledgement? }`: classify a complete contract transition, ArkRules included; never edits the contract. `baseArkRuleFiles` (`{ "<path from baseConfig.arkRules>": <file JSON> }`) is required when `baseConfig` maps `arkRules`. Include each `childSlices.arkRulesFile` path in that map when the wall discovers one. Weakening / new layer / new allow edge needs `adrPath` on the acknowledgement. |
 | `ark_coverage` | No args: report per-layer counts, every unclassified file, unmatched layers, and missing rule edges. |
 | `ark_place` | `{ filePath, description? }`: resolve the governed home for `filePath` (fail-closed without it; never invents a path) and return its import/global constraints. |
 | `ark_prepare_write` | `{ source, filePath, description?, layer? }`: compose placement and snippet validation, with hashes and a mechanical-safe patch when available. `filePath` is required (fail-closed). Partial like `validate_code`: read `lexicalValid`. |

package/docs/ai-gates.md

@@ -941,13 +941,27 @@ but stays advisory.
 **command**. The hard merge boundary is making that job a **required GitHub status context** —
 not “workflow file present.”
 
+**Skipped jobs and `needs:`:** GitHub reports a skipped job as a status that satisfies branch
+protection. Doctor therefore counts an Ark job as fail-closed only when nothing can skip it on
+purpose:
+
+| Ark job shape | Workflow evidence | Required-status verdict (`ARK_DOCTOR_GITHUB=1`) |
+|---------------|-------------------|--------------------------------------------------|
+| No `if:`, or `if: true` / `always()` | fail-closed | required when its context is required |
+| `needs:` jobs with no conditional `if:` anywhere up the chain | fail-closed (it only skips when a needed job fails) | required only when every needed job is also required; otherwise `unverified` plus gap `enforcement-ark-check-upstream-not-required` |
+| Job-level `if:` on a profile output (or any other condition), or a conditional job in its `needs:` chain | not fail-closed (the skip reports success) | not counted |
+| `continue-on-error: true` on the job or the Ark step | not fail-closed | not counted |
+
+A required check bound to the GitHub Actions app counts. A check bound to another app stays
+`unverified`. Doctor queries branch protection only with `ARK_DOCTOR_GITHUB=1` and a working `gh`.
+
 Or use the repository's composite Action at a pinned release or commit. Pin the tag (or commit
 SHA) that matches the `arkgate` version in your `package.json` and write hook. The Action runs the
 checker from the ref you pin, so an older ref runs an older checker, and that checker rejects newer
 config keys (for example `schemaVersion` 1.3, `childSlices`, `sliceIdentity`) with exit 2:
 
 ```yaml
-- uses: pedroknigge/arkgate@v4.8.24 # same version as the arkgate devDependency
+- uses: pedroknigge/arkgate@v4.8.25 # same version as the arkgate devDependency
   with:
     root: .
     config: ark.config.json

package/docs/configuration.md

@@ -132,12 +132,24 @@ Top-level fields:
   `enforced`. Declaring nothing stays silent unless any invariant is already enforced — then
   missing roots fail closed (`INVARIANT_COVERAGE_ROOTS_MISSING`), because otherwise coverage can
   certify a test the project never declared a runner root for.
-- **`arkRules`** (optional, schema `1.1+`) — map of layer name → project-relative path to an
-  ArkRules file (e.g. `"DomainModel": "arkrules/DomainModel.json"`). Keys must match a declared
-  layer. Missing/invalid referenced files **fail closed**. A `arkrules/*.json` file the map
-  does not reference (or any such file when the map is absent) is advisory drift:
-  `ARKRULE_FILE_UNREFERENCED` in check `warnings`, `rulesUnderContract.unreferencedFiles` in
-  doctor, and `arkRulesCatalog.unreferencedFiles` in MCP `ark_manifest`. It never fails the check.
+
+  ArkGate never executes tests — except the opt-in `arkgate-check --probe-invariants`, which
+  you run yourself: it breaks an invariant's `coverage.symbol` on purpose in a temporary copy
+  and runs only its covering tests with your own runner. Its committed result
+  (`.ark/invariant-probe.json`) can only **refuse** a promotion, never grant one, and it is
+  never part of a check or the merge gate. No config key. See
+  [Probe an invariant](agent-guide.md#probe-an-invariant).
+- **`arkRules`** (optional, schema `1.1+`) — map of layer name → one project-relative path, or a
+  list of paths merged into that layer's catalog (`"DomainModel": "arkrules/DomainModel.json"`
+  or `"DomainModel": ["arkrules/DomainModel.json", "arkrules/DomainModel.shared.json"]`). A
+  string keeps today's behaviour. Keys must match a declared layer. The same effective id in
+  two files is `ARKRULE_DUPLICATE_ID` and config load fails closed. Missing or invalid
+  referenced files **fail closed**. A `arkrules/*.json` file the map does not reference, and a
+  slice file named `arkrules.<Layer>.json` beside governed code that discovery did not read,
+  is advisory drift: `ARKRULE_FILE_UNREFERENCED` in check `warnings`,
+  `rulesUnderContract.unreferencedFiles` in doctor, and `arkRulesCatalog.unreferencedFiles` in
+  MCP `ark_manifest`. It never fails the check. Doctor `rulesUnderContract.bySlice` lists the
+  rules a child slice contributed. `ark_place` shows those ids as `sliceRules` next to the layer.
 - **`arkRun`** (optional, schema `1.2+`) — inline ArkRun extra (`mode`, `kernelRoots`
   (`compositionRoots` alias), `managedLayers`, `requireDeclarations`). Absence is silent. Unknown keys fail closed.
   `managedLayers` must name existing `layers[].name` values. Empty `compositionRoots` in
@@ -290,6 +302,8 @@ Rule fields:
   when both paths classify. Applies to **any** declared `from`→`to` pair, not only self-edges.
   Missing paths, empty slice folders, or unclassifiable slices **fail closed** (deny — cannot
   prove same-slice).
+  The wall denies imports; status details (`--doctor --all`) list code copied across it
+  (`doctor.crossWallDuplication`, advisory, no config key).
 - `sliceFolders` is a bare name or a starred prefix. A bare name (`features`) stays an
   unanchored one-segment match: `src/lib/features/projects/rfi/x.ts` with `["features"]` is
   `features/projects`. The next segment is never a filename, so
@@ -429,9 +443,23 @@ Rule fields:
   universe is `CROSS_PARENT_SLICE` and an import into another child of the same
   universe is `CROSS_SIBLING_SLICE`. Same-child imports and imports into that
   universe's common folders follow the existing child wall. Doctor lists every
-  alias as an owed move: the source glob, the target slice, the destination
-  folder, and the files. The section says the files are not finished. Aliases
-  are debt. `productHonesty.finished` stays false while any alias is set.
+  unpinned alias as an owed move: the source glob, the target slice, the destination
+  folder, and the files. The section says those files are not finished.
+  `"pinned": true` lists the alias under pinned instead. `reason` (for example
+  `"framework-route"`) is the label doctor prints. A reason alone does not pin.
+  A pinned route is not `slice-alias-debt` and does not clear any other honesty
+  reason, so `productHonesty.finished` stays false while real debt remains.
+  `childSlices.arkRulesFile` is a filename at each child root the wall already
+  resolved (`"arkrules.<Layer>.json"`). `<Layer>` is the only token. The file is
+  law: it enters `policyHash`, and a path added or removed is one
+  `arkrules-ref-added` or `arkrules-ref-removed`. The effective id is
+  `<childId>#<localId>`. Omitting `appliesTo` scopes the rule to the slice
+  directory. An explicit `appliesTo` outside that directory is
+  `ARKRULE_SCOPE_ESCAPES_SLICE` and config load fails closed. A filename
+  `arkrules.<Layer>.json` is a law path for mixed-law classification. An older
+  build rejects the array form, `arkRulesFile`, `pinned`, and `reason` at config
+  load. Aliases
+  are debt while any unpinned alias remains. `productHonesty.finished` stays false while that debt, or any other honesty reason, remains.
   Adding aliases is a strengthening policy delta (unclassified files come under
   the walls). Removing them is weakening (those files leave the walls) and needs
   the same hash-bound acknowledgement as any other weakening. Additions and
@@ -653,7 +681,7 @@ Each `arkrules/<Layer>.json` may declare:
 
 | Section | Purpose | Modes | What it really enforces |
 |---------|---------|--------|-------------------------|
-| `structure[]` | Closed sensor ids (e.g. `orchestration-only`, `thin-adapter`, `writes-via-aggregate`, `aggregate-private-state`, `always-valid-factory`, `domain-event-on-mutation`, `no-anemic-model`) | `advisory` (default) or `enforced` | **Heuristics of module shape** — not proof that logic was extracted to Domain. `writes-via-aggregate` is driver-import + write-token in the declaring layer (ADR 0032). Tier-2 sensors (`no-anemic-model`) stay advisory-only (cannot promote to enforced). Class shapes come from a tokenizer that skips strings, comments, template literals and regex literals; a class it cannot walk to its end is reported as `shape analysed until character N` (an error under an enforced sensor), never passed in silence. |
+| `structure[]` | Closed sensor ids (e.g. `orchestration-only`, `thin-adapter`, `writes-via-aggregate`, `aggregate-private-state`, `always-valid-factory`, `domain-event-on-mutation`, `no-anemic-model`) | `advisory` (default) or `enforced` | **Heuristics of module shape** — not proof that logic was extracted to Domain. `writes-via-aggregate` is a driver import plus a write token, or a SQL write head inside a tagged template, in the declaring layer (ADR 0032). Tier-2 sensors (`no-anemic-model`) stay advisory-only (cannot promote to enforced). Class shapes come from a tokenizer that skips strings, comments, template literals and regex literals; a class it cannot walk to its end is reported as `shape analysed until character N` (an error under an enforced sensor), never passed in silence. |
 | `invariants[]` | Stable ids + description + `coverage` (`test` / `symbol`) + optional `appliesTo` globs | `advisory` or `enforced` | **Named policy + evidence.** `coverage.symbol` means a declaration of that identifier in a non-test file (witness path `symbolEvidenceFile`, project-relative; additive `shape`: `function`, `class`, `const`, `method`, `type`, `interface`, or `enum`). A `Class.member` symbol (e.g. `Order.ensureInvariants`) requires a member with that name inside the body of `class Class`, a `const Class = class { … }` expression, a `namespace Class { … }` (function or const), or a top-level key of a `const Class = { … }` object literal; a member of another container, a nested object key, a free function, or a file that only mentions the class name does not count. The search is not restricted to the invariant's layer. `coverage.test: false` without a `coverage.symbol` declares no evidence: it is advisory-only (an enforced invariant with that shape reports `INVARIANT_UNCOVERED` and fails strict; the rest of the catalog still evaluates) and cannot be promoted. Imports and test calls do not count. A `describe` / `it` / `test` / `context` title may also name the invariant id. A comment, string, or other bare mention does not. Does **not** execute tests or business logic and does **not** replace behavior/property tests. Doctor and `--rules-inventory` print the witness path and discard counts on green runs too. A declaration match is not “the tests pass.” |
 
 **Reporting:** diagnostics carry `evidence.arkruleId` + `evidence.arkruleSource`. Label residual
@@ -817,7 +845,8 @@ MCP clients can call `ark_policy_delta` with the previous `baseConfig`, an optio
 contract (the current project contract is the default), and the same optional acknowledgement.
 When `baseConfig` maps `arkRules`, pass the base catalog as data in `baseArkRuleFiles`
 (`{ "<path from baseConfig.arkRules>": <ArkRules file JSON> }`); without it the call is refused
-instead of returning a config-only verdict. The candidate catalog is read from disk when the
+instead of returning a config-only verdict. When `childSlices.arkRulesFile` is set, include each
+discovered slice file in that same map, keyed by its project-relative path. The candidate catalog is read from disk when the
 candidate is omitted or maps the same `arkRules` files as the project contract (after the loader's
 normalisation, so the project `ark.config.json` passed verbatim counts); otherwise pass
 `candidateArkRuleFiles` in the same shape.