arkgate 4.8.4 → 4.8.6

package/dist/{types-D95drJ3_.d.ts → types-DrqsOiTY.d.ts}

@@ -862,20 +862,35 @@ type ArkRunInformationPackageComponent = {
     sends: string[];
     extendedInfo?: ArkRunExtendedInfo;
 };
+declare const ARK_RUN_DECISION_TAPE_RESIDUAL_KINDS: readonly ["absorb", "escalate_up", "hold"];
+type ArkRunDecisionTapeResidualKind = (typeof ARK_RUN_DECISION_TAPE_RESIDUAL_KINDS)[number];
+/** Additive Order residual tape (ADR 0034 D6). Not a bus. Not durable. */
+type ArkRunDecisionTapeRecord = {
+    xiHash: string;
+    event: {
+        kind: string;
+        payload?: Record<string, string | number | boolean | null>;
+    };
+    residual: {
+        kind: ArkRunDecisionTapeResidualKind;
+        reasonCode?: string;
+        eventId?: string;
+        target?: string;
+    };
+};
 type DependencyInformationPackage = {
     schemaVersion: typeof ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION;
     kernelInstanceId: string;
     components: ArkRunInformationPackageComponent[];
+    /** Optional; omitted keeps the 4.8.x component snapshot shape. */
+    decisionTape?: ArkRunDecisionTapeRecord[];
 };
-/**
- * Build a JSON-serializable snapshot from unknown component records.
- * Only id, lifetime, the four declaration lists, and optional extendedInfo
- * survive — extra keys (factory, instance, DTO payloads) are dropped.
- */
 declare function buildDependencyInformationPackage(input: {
     kernelInstanceId?: unknown;
     components?: unknown;
+    decisionTape?: unknown;
 }): DependencyInformationPackage;
+declare function appendDecisionTape(pack: DependencyInformationPackage, record: unknown): DependencyInformationPackage;
 
 /**
  * ArkRun requestGraph slices (RN13). Tooling only — never a gate verdict.
@@ -1234,4 +1249,4 @@ interface CreateArkKernelFromConfigOptions extends Omit<CreateArkKernelOptions,
 }
 type ArkKernelConfig = ArkCheckConfig;
 
-export { ARK_RUN_INSPECTOR_GRAPH_PATH as $, type ArkKernel as A, type OutboxRecord as B, type CreateArkKernelOptions as C, type DefineIntentOptions as D, type EventContractRegistry as E, type ObservabilityDriftReport as F, type GraphEdge as G, ARK_RUN_COMPONENT_LIFETIMES as H, IntentRegistry as I, ARK_RUN_EPHEMERAL_DEFAULT as J, ARK_RUN_GRAPH_DEFAULT_SLICE as K, ARK_RUN_GRAPH_NODE_KINDS as L, type MetadataRegistry as M, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as N, type ObservabilityReporter as O, type ProjectionRegistry as P, ARK_RUN_GRAPH_SCHEMA_VERSION as Q, type ReadModelStore as R, type SagaContext as S, type TraceRecordType as T, ARK_RUN_GRAPH_SLICES as U, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as V, type WorkflowStore as W, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as X, ARK_RUN_INSPECTOR_DEFAULT_HOST as Y, ARK_RUN_INSPECTOR_DEFAULT_PORT as Z, ARK_RUN_INSPECTOR_EVENTS_PATH as _, type DependencyGraph as a, InvalidArkRunSendOptionError as a$, ARK_RUN_INSPECTOR_SCHEMA_VERSION as a0, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as a1, ARK_RUN_INSPECTOR_SSE_EVENT as a2, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as a3, ARK_RUN_TRANSPORT_KINDS as a4, type ArkManifestArchitecture as a5, type ArkManifestData as a6, type ArkManifestEntityLink as a7, type ArkManifestGraph as a8, type ArkManifestIntent as a9, type ArkRunInspectorSource as aA, type ArkRunInspectorTransportFacts as aB, type ArkRunPublisher as aC, type ArkRunRegisterOptions as aD, type ArkRunRegistrationHandle as aE, type ArkRunSendOptions as aF, type ArkRunSendPlan as aG, type ArkRunSendPlanInput as aH, type ArkRunSendResult as aI, type ArkRunTransportKind as aJ, type AuditRecordInput as aK, type AuditRecordType as aL, type DependencyInformationPackage as aM, type EntityMeta as aN, type EventContractIssue as aO, type EventHandler as aP, type EventInterceptionInfo as aQ, type EventInterceptor as aR, type EventInterceptorContext as aS, type EventPayloadPatch as aT, type EventPayloadSchema as aU, type EventPublisher as aV, type EventSchemaField as aW, type EventSchemaFieldType as aX, type FieldMeta as aY, type GraphNode as aZ, InvalidArkRunGraphQueryError as a_, type ArkManifestPolicy as aa, type ArkManifestProjection as ab, type ArkRunBrokerAdapter as ac, type ArkRunComponentLifetime as ad, type ArkRunDeliveredVia as ae, type ArkRunExtendedInfo as af, type ArkRunGraph as ag, type ArkRunGraphEdge as ah, type ArkRunGraphEdgeKind as ai, type ArkRunGraphMatch as aj, type ArkRunGraphMatchInput as ak, type ArkRunGraphNode as al, type ArkRunGraphNodeKind as am, type ArkRunGraphProcessEdgeKind as an, type ArkRunGraphQuery as ao, type ArkRunGraphResolvedQuery as ap, type ArkRunGraphSlice as aq, type ArkRunGraphTechnicalEdgeKind as ar, type ArkRunInformationPackageComponent as as, type ArkRunInspectorBind as at, ArkRunInspectorBindError as au, type ArkRunInspectorBindInput as av, type ArkRunInspectorHandle as aw, ArkRunInspectorProductionError as ax, type ArkRunInspectorSnapshot as ay, type ArkRunInspectorSnapshotInput as az, type AuditStore as b, type ObservabilityFlow as b0, type ObservedLayerFlowMode as b1, type OutboxStore as b2, type PolicyEvaluationResult as b3, type ProjectionCheckpoint as b4, type ProjectionDefinition as b5, type PublishedEventRecord as b6, type RetryPolicy as b7, type SagaStatus as b8, type SagaStep as b9, type StartArkRunInspectorOptions as ba, type TraceSink as bb, type Unsubscribe as bc, type WorkflowDefinition as bd, type WorkflowStatus as be, type WorkflowStep as bf, arkRunGraphQueryFromSearchParams as bg, arkRunInspectorUrl as bh, buildArkRunInspectorSnapshot as bi, buildDependencyInformationPackage as bj, closeArkRunGraphQuery as bk, closedArkRunEphemeral as bl, closedArkRunTransportKind as bm, formatArkRunGraphMermaid as bn, formatArkRunInspectorSseEvent as bo, isArkRunInspectorLoopbackHost as bp, isArkRunInspectorProductionEnv as bq, requestArkRunGraph as br, resolveArkRunInspectorBind as bs, resolveArkRunSendPlan as bt, startArkRunInspector as bu, type AuditRecord as c, type AuditQuery as d, type CreateAuditTrailOptions as e, type AuditTrail as f, type EventContract as g, type EventContractValidationResult as h, type CreateProjectionRegistryOptions as i, type EventBufferStore as j, type EventBufferRecord as k, type EventBufferStatus as l, type EventBusOptions as m, type EventBus as n, type CreateObservabilityReporterOptions as o, PolicyEngine as p, type ArkManifest as q, type WorkflowSnapshot as r, type SagaDefinition as s, type CreateWorkflowEngineOptions as t, type SagaInstance as u, type WorkflowEngine as v, type ArkKernelConfig as w, type CreateArkKernelFromConfigOptions as x, type TraceRecord as y, type OutboxStatus as z };
+export { ARK_RUN_INSPECTOR_EVENTS_PATH as $, type ArkKernel as A, type OutboxStatus as B, type CreateArkKernelOptions as C, type DefineIntentOptions as D, type EventContractRegistry as E, type OutboxRecord as F, type GraphEdge as G, type ObservabilityDriftReport as H, IntentRegistry as I, ARK_RUN_COMPONENT_LIFETIMES as J, ARK_RUN_EPHEMERAL_DEFAULT as K, ARK_RUN_GRAPH_DEFAULT_SLICE as L, type MetadataRegistry as M, ARK_RUN_GRAPH_NODE_KINDS as N, type ObservabilityReporter as O, type ProjectionRegistry as P, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as Q, type ReadModelStore as R, type SagaContext as S, type TraceRecordType as T, ARK_RUN_GRAPH_SCHEMA_VERSION as U, ARK_RUN_GRAPH_SLICES as V, type WorkflowStore as W, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as X, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as Y, ARK_RUN_INSPECTOR_DEFAULT_HOST as Z, ARK_RUN_INSPECTOR_DEFAULT_PORT as _, type DependencyGraph as a, InvalidArkRunSendOptionError as a$, ARK_RUN_INSPECTOR_GRAPH_PATH as a0, ARK_RUN_INSPECTOR_SCHEMA_VERSION as a1, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as a2, ARK_RUN_INSPECTOR_SSE_EVENT as a3, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as a4, ARK_RUN_TRANSPORT_KINDS as a5, type ArkManifestArchitecture as a6, type ArkManifestData as a7, type ArkManifestEntityLink as a8, type ArkManifestGraph as a9, type ArkRunInspectorSnapshotInput as aA, type ArkRunInspectorSource as aB, type ArkRunInspectorTransportFacts as aC, type ArkRunPublisher as aD, type ArkRunRegisterOptions as aE, type ArkRunRegistrationHandle as aF, type ArkRunSendOptions as aG, type ArkRunSendPlan as aH, type ArkRunSendPlanInput as aI, type ArkRunSendResult as aJ, type ArkRunTransportKind as aK, type AuditRecordInput as aL, type AuditRecordType as aM, type EntityMeta as aN, type EventContractIssue as aO, type EventHandler as aP, type EventInterceptionInfo as aQ, type EventInterceptor as aR, type EventInterceptorContext as aS, type EventPayloadPatch as aT, type EventPayloadSchema as aU, type EventPublisher as aV, type EventSchemaField as aW, type EventSchemaFieldType as aX, type FieldMeta as aY, type GraphNode as aZ, InvalidArkRunGraphQueryError as a_, type ArkManifestIntent as aa, type ArkManifestPolicy as ab, type ArkManifestProjection as ac, type ArkRunBrokerAdapter as ad, type ArkRunComponentLifetime as ae, type ArkRunDeliveredVia as af, type ArkRunExtendedInfo as ag, type ArkRunGraph as ah, type ArkRunGraphEdge as ai, type ArkRunGraphEdgeKind as aj, type ArkRunGraphMatch as ak, type ArkRunGraphMatchInput as al, type ArkRunGraphNode as am, type ArkRunGraphNodeKind as an, type ArkRunGraphProcessEdgeKind as ao, type ArkRunGraphQuery as ap, type ArkRunGraphResolvedQuery as aq, type ArkRunGraphSlice as ar, type ArkRunGraphTechnicalEdgeKind as as, type ArkRunInformationPackageComponent as at, type ArkRunInspectorBind as au, ArkRunInspectorBindError as av, type ArkRunInspectorBindInput as aw, type ArkRunInspectorHandle as ax, ArkRunInspectorProductionError as ay, type ArkRunInspectorSnapshot as az, type AuditStore as b, type ObservabilityFlow as b0, type ObservedLayerFlowMode as b1, type OutboxStore as b2, type PolicyEvaluationResult as b3, type ProjectionCheckpoint as b4, type ProjectionDefinition as b5, type PublishedEventRecord as b6, type RetryPolicy as b7, type SagaStatus as b8, type SagaStep as b9, type StartArkRunInspectorOptions as ba, type TraceSink as bb, type Unsubscribe as bc, type WorkflowDefinition as bd, type WorkflowStatus as be, type WorkflowStep as bf, appendDecisionTape as bg, arkRunGraphQueryFromSearchParams as bh, arkRunInspectorUrl as bi, buildArkRunInspectorSnapshot as bj, buildDependencyInformationPackage as bk, closeArkRunGraphQuery as bl, closedArkRunEphemeral as bm, closedArkRunTransportKind as bn, formatArkRunGraphMermaid as bo, formatArkRunInspectorSseEvent as bp, isArkRunInspectorLoopbackHost as bq, isArkRunInspectorProductionEnv as br, requestArkRunGraph as bs, resolveArkRunInspectorBind as bt, resolveArkRunSendPlan as bu, startArkRunInspector as bv, type AuditRecord as c, type AuditQuery as d, type CreateAuditTrailOptions as e, type AuditTrail as f, type EventContract as g, type EventContractValidationResult as h, type CreateProjectionRegistryOptions as i, type EventBufferStore as j, type EventBufferRecord as k, type EventBufferStatus as l, type EventBusOptions as m, type EventBus as n, type CreateObservabilityReporterOptions as o, PolicyEngine as p, type ArkManifest as q, type WorkflowSnapshot as r, type SagaDefinition as s, type CreateWorkflowEngineOptions as t, type SagaInstance as u, type WorkflowEngine as v, type DependencyInformationPackage as w, type ArkKernelConfig as x, type CreateArkKernelFromConfigOptions as y, type TraceRecord as z };

package/docs/README.md

@@ -36,6 +36,7 @@ Product site: [arkgate.online](https://www.arkgate.online/) · npm: [`arkgate`](
 | [agent-guide.md](agent-guide.md) | Agent, CLI, and MCP reference (incl. `ark status --json` / MCP `ark_status`) |
 | [diagnostics.md](diagnostics.md) | Public diagnostic `ruleId` catalog (why / fix anchors) |
 | [configuration.md](configuration.md) | `ark.config.json` contract |
+| [arkorder.md](arkorder.md) | Optional ArkOrder extra: library + sensors, not a service |
 | [brownfield-adoption.md](brownfield-adoption.md) | Existing messy repos |
 | [package-surface.md](package-surface.md) | Stable vs experimental package surface |
 | [typescript-support.md](typescript-support.md) | TS 5 / 6 / 7 analysis boundary |
@@ -45,7 +46,7 @@ Product site: [arkgate.online](https://www.arkgate.online/) · npm: [`arkgate`](
 |-----|------------|
 | [CONTRIBUTING.md](../CONTRIBUTING.md) | Setup, rules, PR/release |
 | [ROADMAP.md](../ROADMAP.md) | Live implementation queue (one `doing` at a time). History: [archive/roadmap-history.md](archive/roadmap-history.md) |
-| [adr/](adr/README.md) | Architecture decisions ([0032](adr/0032-writes-via-aggregate-sensor.md) writes-via-aggregate) |
+| [adr/](adr/README.md) | Architecture decisions ([0032](adr/0032-writes-via-aggregate-sensor.md) writes-via-aggregate · [0033](adr/0033-arkorder-runtime-half-is-arkrun.md) ArkOrder runtime half · [0034](adr/0034-arkorder-valved-loop.md) valved loop) |
 | [SECURITY.md](../SECURITY.md) · [threat-model.md](threat-model.md) | Security |
 
 ---
@@ -57,13 +58,14 @@ These are **not** the day-to-day product path. They stay in the repo for evidenc
 | Area | Path |
 |------|------|
 | Release notes (by version) | [releases/](releases/) · npm [CHANGELOG.md](../CHANGELOG.md) (Unreleased + 4.6.x) · [pre-4.6 archive](archive/CHANGELOG-pre-4.6.md) |
-| Epic plans | [plans/](plans/) — maintainer seeds, not required to use the package. Live: [alive-in-six-months](plans/alive-in-six-months/README.md) (`AL01`–`AL04` done; `AL05` parked). [arkrun](plans/arkrun/README.md) (Phase RN; `RN01`–`RN17` done; shipped **4.7.0** + companion **4.7.4**; ADRs [0020](adr/0020-arkrun-gated-extra-plane.md)–[0024](adr/0024-arkrun-transport-ports.md) accepted). [one-catalog-one-root](plans/one-catalog-one-root/README.md) (Phase HS; `HS01`–`HS05` done; shipped **4.7.1**). [arkorder](plans/arkorder/README.md) (Phase OR; `OR01`–`OR07` done; shipped **4.8.0**; extra **inside** package `arkgate` as `arkgate/order`; ADRs [0027](adr/0027-arkorder-gated-extra-plane.md)–[0031](adr/0031-one-package-extras-deprecate-companion.md)). |
+| Epic plans | [plans/](plans/) — maintainer seeds, not required to use the package. Live: [alive-in-six-months](plans/alive-in-six-months/README.md) (`AL01`–`AL04` done; `AL05` parked). [arkrun](plans/arkrun/README.md) (Phase RN; `RN01`–`RN17` done; shipped **4.7.0** + companion **4.7.4**; ADRs [0020](adr/0020-arkrun-gated-extra-plane.md)–[0024](adr/0024-arkrun-transport-ports.md) accepted). [one-catalog-one-root](plans/one-catalog-one-root/README.md) (Phase HS; `HS01`–`HS05` done; shipped **4.7.1**). [arkorder](plans/arkorder/README.md) (Phase OR; `OR01`–`OR07` done; shipped **4.8.0**; extra **inside** package `arkgate` as `arkgate/order`; ADRs [0027](adr/0027-arkorder-gated-extra-plane.md)–[0031](adr/0031-one-package-extras-deprecate-companion.md)). [arkorder-arkrun](plans/arkorder-arkrun/README.md) (Phase XP; `XP01`–`XP08` done; shipped **4.8.5**; ADR [0033](adr/0033-arkorder-runtime-half-is-arkrun.md)). [arkorder-valve-loop](plans/arkorder-valve-loop/README.md) (Phase LV; `LV01`–`LV09` done on tree; **4.8.6** prepared; [ADR 0034](adr/0034-arkorder-valved-loop.md); does not close K01). |
 | Claims audit | [audit/claims-matrix.md](audit/claims-matrix.md) |
 | Field adoption kit (scaffolding, not closed) | [field/](field/) |
 | Runtime hardening (experimental) | [production-hardening.md](production-hardening.md) |
 
-Current published: [releases/4.8.3.md](releases/4.8.3.md) (`arkgate@4.8.3` on npm `latest`; does not close `K01`). Current tree: [releases/4.8.4.md](releases/4.8.4.md) (pending publish).
-Prior: [releases/4.8.2.md](releases/4.8.2.md) · [releases/4.8.1.md](releases/4.8.1.md) · [4.8.0](releases/4.8.0.md) · [4.7.6](releases/4.7.6.md) · [4.7.5](releases/4.7.5.md) · [4.7.4](releases/4.7.4.md) · [4.7.3](releases/4.7.3.md) · [4.7.2](releases/4.7.2.md) · [4.7.1](releases/4.7.1.md) · [4.7.0](releases/4.7.0.md) · [4.6.7](releases/4.6.7.md) · [4.6.6](releases/4.6.6.md) · [4.6.5](releases/4.6.5.md) · [4.6.4](releases/4.6.4.md) · [4.6.3](releases/4.6.3.md) · [4.6.2](releases/4.6.2.md) · [4.6.1](releases/4.6.1.md) · [4.6.0](releases/4.6.0.md).
+Current published: [releases/4.8.5.md](releases/4.8.5.md) (`arkgate@4.8.5` on npm `latest`; does not close `K01`).
+Tree: [releases/4.8.6.md](releases/4.8.6.md) (`arkgate@4.8.6` prepared).
+Prior: [releases/4.8.4.md](releases/4.8.4.md) · [releases/4.8.3.md](releases/4.8.3.md) · [releases/4.8.2.md](releases/4.8.2.md) · [releases/4.8.1.md](releases/4.8.1.md) · [4.8.0](releases/4.8.0.md) · [4.7.6](releases/4.7.6.md) · [4.7.5](releases/4.7.5.md) · [4.7.4](releases/4.7.4.md) · [4.7.3](releases/4.7.3.md) · [4.7.2](releases/4.7.2.md) · [4.7.1](releases/4.7.1.md) · [4.7.0](releases/4.7.0.md) · [4.6.7](releases/4.6.7.md) · [4.6.6](releases/4.6.6.md) · [4.6.5](releases/4.6.5.md) · [4.6.4](releases/4.6.4.md) · [4.6.3](releases/4.6.3.md) · [4.6.2](releases/4.6.2.md) · [4.6.1](releases/4.6.1.md) · [4.6.0](releases/4.6.0.md).
 Older notes: [releases/](releases/). Config: [configuration.md](configuration.md).
 
 ---

package/docs/agent-guide.md

@@ -507,6 +507,8 @@ npx ark-check --promote <ruleId> --apply      # write mode "enforced" into that
 **`--sensors`** lists every sensor ArkGate ships — ArkRules, ArkRun and
 ArkOrder — with its plane, its tier and whether it can *ever* be enforced, so
 Tier-2 shows up before you write the rule rather than after you wait for a run.
+ArkOrder: `proposeRelease` then `apply`; `refreshSigma`; ingest residual;
+capacity pack; `ReleaseStore`; ArkRun `decisionTape`. No `/ark-order` skill.
 It also says *how*: only the ArkRules plane is promoted per rule; ArkRun and
 ArkOrder are switched by the plane-level `arkRun.mode` / `arkOrder.mode`, and
 `--promote --apply` writes ArkRules documents only.
@@ -809,7 +811,7 @@ npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok,antigra
 | Cursor | `.cursor/mcp.json` + `.cursor/rules/ark.mdc` | **Repo:** `.agents/skills/<name>/SKILL.md` (same catalog as Codex). Do not also copy into `.cursor/commands/` or `$CODEX_HOME/skills` — Cursor lists every path it scans. |
 | OpenAI Codex | `.codex/config.toml` (project primary, relative `--root .`; configured on disk is not runtime-active until restart + `ark_identity` match); optional legacy `$CODEX_HOME/config.toml` fallback uses absolute roots and scoped secondaries — see [ai-gates.md](ai-gates.md) | **Repo:** `.agents/skills/<name>/SKILL.md`; **home:** `$CODEX_HOME/skills/<name>/SKILL.md` (`--codex-home`) |
 | **Grok Build** | `.grok/hooks/ark-write-gate.json` + `.grok/config.toml` / `.mcp.json` | **Repo:** `.grok/skills/<name>/SKILL.md`; **home:** `$GROK_HOME/skills` (default `~/.grok/skills`, `--grok-home`) |
-| Google Antigravity | `.agents/hooks.json` + `.agents/mcp_config.json` (+ `GEMINI.md` for shared Gemini consumers) | `.agents/skills/<name>/SKILL.md` |
+| Google Antigravity | `.agents/hooks.json` + `.agents/mcp_config.json` (+ `GEMINI.md` for shared Gemini consumers) | **Repo:** `.agents/skills/<name>/SKILL.md`; **home:** `$ANTIGRAVITY_HOME/skills` (default `~/.gemini/config/skills`, `--antigravity-home`) |
 | OpenCode | `opencode.json` MCP (`type: local`; advisory) | `.opencode/skills/<name>/SKILL.md` |
 
 This is a path reference, not a guarantee table. Full copy-paste setups:
@@ -817,12 +819,12 @@ This is a path reference, not a guarantee table. Full copy-paste setups:
 [README](../README.md#other-skills-only-when-you-need-them).
 When several repositories share one machine, repo catalogs stay pinned and isolated; unchanged
 skill bodies are not rewritten for a version stamp. Shared **home** catalogs (Codex since 4.2;
-Claude/Grok since 4.6) are the machine floor: always latest additive, never downgrade. Refresh
-with `--agent-homes` (or `--claude-home` / `--grok-home` / `--codex-home`). Absent home trees
+Claude/Grok since 4.6; Antigravity since 4.8.5) are the machine floor: always latest additive, never downgrade. Refresh
+with `--agent-homes` (or `--claude-home` / `--grok-home` / `--antigravity-home` / `--codex-home`). Absent home trees
 are normal — doctor stays quiet until `ark-*` skills exist there. Pre-4.2 binaries ignore Codex
 home metadata and lock, so upgrade legacy repos before they write the optional Codex home
 catalog. See [AI gates — Codex skill catalog](ai-gates.md#codex-skill-catalog-skillmd-not-flat-prompts)
-and [shared Claude/Grok homes](ai-gates.md#shared-claude--grok-home-skills).
+and [shared Claude/Grok/Antigravity homes](ai-gates.md#shared-claude--grok-home-skills).
 
 ### Install skills — Ark and ecosystem {#install-skills-ark-and-ecosystem}
 

package/docs/ai-gates.md

@@ -33,8 +33,11 @@ Prefer fail-closed honesty over fake hard guarantees on advisory hosts.
 Everything below uses the same `ark.config.json` as `arkgate-check` / `ark-check` (CI) — one
 rules file shared by every surface. From **4.0**, optional **ArkRules** (`arkRules` map +
 `arkrules/*.json`) ride the **same** write path, doctor, and CI adapter; absence of ArkRules
-does not change inter-layer verdicts. Label residual **`[Layer]`** vs **`[ArkRules]`**. See
-[configuration — ArkRules](configuration.md#arkrules-intra-layer-opt-in).
+does not change inter-layer verdicts. Optional ArkRun / ArkOrder extras ride that envelope
+when on (`proposeRelease` then `apply`). Absence is silent. Label residual **`[Layer]`** vs
+**`[ArkRules]`** vs **`[ArkRun]`** vs **`[ArkOrder]`**. See
+[configuration — ArkRules](configuration.md#arkrules-intra-layer-opt-in) ·
+[ArkOrder](arkorder.md).
 
 Generate the layer contract once:
 
@@ -465,7 +468,7 @@ severity **info**, marked `deferred: true`, and omitted from doctor **Primary ne
 `/ark-upgrade` on Grok/Claude is not Incomplete because of them. **Temp/upgrade primary roots**
 stay fail-closed urgent (rewritten, not multi-project).
 
-### Shared Claude / Grok home skills {#shared-claude--grok-home-skills}
+### Shared Claude / Grok / Antigravity home skills {#shared-claude--grok-home-skills}
 
 Project catalogs follow that checkout’s ArkGate pin (they may lag). Shared user-home catalogs
 are the **machine floor**:
@@ -474,11 +477,19 @@ are the **machine floor**:
 |-------|------|------|
 | Claude home | `$CLAUDE_HOME/skills` (default `~/.claude/skills`) | `--claude-home` |
 | Grok home | `$GROK_HOME/skills` (default `~/.grok/skills`) | `--grok-home` |
-| All three + Codex | same monotonic protocol | `--agent-homes` |
+| Antigravity home | `$ANTIGRAVITY_HOME/skills` (default `~/.gemini/config/skills`) | `--antigravity-home` |
+| All four + Codex | same monotonic protocol | `--agent-homes` |
+
+Antigravity’s official global catalog is `~/.gemini/config/skills` (workspace catalog remains
+`.agents/skills`). Claude/Grok home copies override or duplicate the project catalog in the same
+session, so `--agent-homes` skips those homes when `.agents/skills` already exists. The Antigravity
+global catalog is the machine floor for **every** workspace, so `--antigravity-home` still writes
+it. `--prune-home-duplicates` does **not** delete `~/.gemini/config/skills/ark-*`.
 
 Doctor reports `agentHomeGaps` only when those catalogs already contain `ark-*` skills and
 lag the installed package. Temp/upgrade `--root` never mutates default user homes. Cursor
 sessions treat a stale Claude home as urgent because Cursor loads `~/.claude/skills`.
+Antigravity sessions treat a stale `~/.gemini/config/skills` catalog as urgent.
 
 ```bash
 npx arkgate-check --install-agent-gates --skills-only --agent-homes --force
@@ -589,6 +600,8 @@ Install:
 npx ark-check --install-agent-gates --tools antigravity
 # alias:
 npx ark-check --install-agent-gates --tools agy
+# refresh the official global catalog (all workspaces):
+npx ark-check --install-agent-gates --skills-only --antigravity-home --force
 ```
 
 | File | Role |
@@ -597,6 +610,7 @@ npx ark-check --install-agent-gates --tools agy
 | `.agents/mcp_config.json` | Official workspace MCP (`mcpServers.ark` stdio) |
 | `GEMINI.md` | Instruction rule for Gemini CLI / legacy consumers sharing the tree |
 | `.agents/skills/*/SKILL.md` | Agent Skills catalog (shared path with Codex) |
+| `~/.gemini/config/skills/*/SKILL.md` | Official Antigravity **global** catalog (`--antigravity-home` / `--agent-homes`) |
 | `AGENTS.md` + `.mcp.json` + CI | Shared with other hosts (`.mcp.json` is not the Antigravity MCP path) |
 
 **Write tools covered:** `write_to_file`, `replace_file_content`, `multi_replace_file_content`.

package/docs/arkorder.md

@@ -0,0 +1,228 @@
+# ArkOrder
+
+**Write. Check. Ship.** Layers can be green while an agent still PATCHes the
+billing plan as if it were a seat count. ArkOrder is the extra that names the
+few slow product decisions and stops that write.
+
+Import: `arkgate/order` (same npm package `arkgate`). Off until you add
+`arkOrder` on schema `1.3`. Absence is silent. In-memory. Not durable. It is
+a library plus sensors, not a service. Does **not** replace ArkRun.
+
+First-contact copy: freeze through a valve / no `update`. Haken (ξ vs s) lives
+below. **ArkOrder freezes the pattern through a valve. ArkRun is how the residual travels.**
+
+Canonical plan seed: [plans/arkorder/README.md](plans/arkorder/README.md).
+ADRs: [0027](adr/0027-arkorder-gated-extra-plane.md)–[0030](adr/0030-opt-in-extras-same-npm-package.md),
+[0033](adr/0033-arkorder-runtime-half-is-arkrun.md) (runtime half is ArkRun),
+[0034](adr/0034-arkorder-valved-loop.md) (valved loop; public verbs in 4.8.6).
+Config: [configuration.md](configuration.md). Surface:
+[package-surface.md](package-surface.md#experimental-opt-in-surfaces).
+
+---
+
+## What it is (and is not)
+
+| Is | Is not |
+|----|--------|
+| A **library** (`createOrderPlane`) plus **static sensors** | A running service, daemon, or hosted plane |
+| Valved verbs: `release` / `project` / `ingest` / `proposeRelease` / `apply` / `refreshSigma` | A generic `update` / `patch` / `set` |
+| Opt-in extra on `ark.config.json` | Always-on; compact starters leave it off |
+| Consumer-named slow keys (`xiKeys`) | A construction OS, BIM, or FirmPack |
+| Same npm tarball | not `@arkgate/order` |
+
+If the extra is off, every ArkOrder sensor is silent. If it is on, the same
+write gate / CI / ESLint envelope as Layers applies. Domain stays plane-free:
+`createOrderPlane` lives in `arkOrder.planeRoots`.
+
+ArkRun is **how the app talks** (intents, transport, information package).
+ArkOrder is **what the app may treat as pattern**. Two extras. One activation
+shape (`mode` + `managedLayers`). Roots keep different names because they
+point at different factories: `arkRun.kernelRoots` vs `arkOrder.planeRoots`.
+`compositionRoots` remains an alias of `kernelRoots`. See
+[activation](#activation-same-shape-as-arkrun).
+
+---
+
+## Already shipped (named APIs)
+
+Adopters kept redesigning this extra because the names were not on one page.
+They already exist:
+
+| Ask | API | Since |
+|-----|-----|-------|
+| Escalation as a first-class concept | `IngestResult` residual `absorb \| escalate_up \| hold` (`reasonCode`, `IngestEscalate.target`) | 4.8.0 / 4.8.6 |
+| Projection at the boundary | `Projector = (release, sigma) => Projection` | 4.8.0 |
+| Cap on badly designed slow parameters | `DEFAULT_MAX_XI_KEYS = 7`, `maxXiKeys`, `ARKORDER_TOO_MANY_PARAMS`, `ARKORDER_EMPTY_XI`, `ARKORDER_NESTED_XI` | 4.8.0 |
+| Valved proposals, never direct mutation | `ProposeResult` then `apply` (`ARKORDER_UNVALVED_RELEASE`) | 4.8.0 / 4.8.6 |
+| Typed cell schema | `XiSchema` / `XiPropertySchema` | 4.8.0 |
+| Named slow keys on the write path | `arkOrder.xiKeys`; `ARKORDER_XI_FIELD_WRITE` | 4.8.3 |
+| Factory isolation | `createOrderPlane` from `arkgate/order` only | 4.8.0 |
+| Information budget | `informationBudget.cannotObserve`; `ARKORDER_INFORMATION_BUDGET` | 4.8.5 |
+| σ freshness, never ξ | `sigmaMaxAgeMs` / `σ.freshUntil`; `ARKORDER_XI_TTL`, `ARKORDER_STALE_SIGMA` | 4.8.5 |
+| Escalate to a person | `IngestEscalate.target` including `human` | 4.8.5 |
+| Shadow / replay / compare | ArkRun `shadowInformationPackage` / `compareInformationPackages` / `replayInformationPackages` | 4.8.5 |
+| Decision tape | ArkRun information package `decisionTape` `{ xiHash, event, residual }` | 4.8.6 |
+| σ vs ξ identity | `xiHash` / `sigmaHash` / `refreshSigma` | 4.8.6 |
+| Capacity as data | `ConstraintPack.capacity` (`kind` / `sigmaKey` / `payloadKey` / `op`) | 4.8.6 |
+| Store port | `ReleaseStore` / `createMemoryReleaseStore` in-memory default — not durable, not K01 | 4.8.6 |
+| Thin travel helper | `ingestTravelAction` absorb→`send` / escalate_up human→`raises` | 4.8.6 |
+
+Nothing here is a hosted runtime. Nothing here can be “down”. A degraded-mode
+contract would defend against an outage that cannot happen.
+
+---
+
+## Valved loop
+
+**ArkOrder freezes the pattern through a valve. ArkRun is how the residual travels.**
+
+```ts
+import { createOrderPlane } from 'arkgate/order';
+
+const plane = createOrderPlane({
+  projector,          // consumer: (release, sigma) => { allowedKinds, invalidated }
+  xiSchema,           // JSON Schema object; additionalProperties false
+  maxXiKeys,          // default 7
+  clocks,             // injected; Domain must not call Date.now
+  packs,              // data, not user predicates (capacity is kind/sigmaKey/payloadKey/op)
+  informationBudget,  // optional { cannotObserve: ['ledger'] } — not a config key
+  sigmaMaxAgeMs,      // optional σ freshness; never on ξ — not a config key
+  store,              // optional ReleaseStore; default in-memory is not durable
+  catalogDigest,      // optional; keyed by ξ.catalogReleaseId — SKU set does not enter the hash
+});
+
+plane.release(xi, sigma);      // first freeze only
+plane.project();               // derive allowed s + invalidations
+plane.ingest(event);           // residual absorb | escalate_up | hold. Never a Release
+plane.proposeRelease(delta);   // blast radius. Empty blast = domain error
+plane.apply(proposal);         // valve: later ξ change
+plane.refreshSigma(sigma);     // saldo / clocks; xiHash unchanged
+```
+
+There is no `update()`. Calling `update` / `patch` / `set` on the plane throws
+`ARKORDER_FORBIDDEN_METHOD` and, on the write path, emits
+`ARKORDER_GENERIC_UPDATE`. A second `release()` whose ξ differs fails
+`ARKORDER_UNVALVED_RELEASE`.
+
+| Field write | Verb |
+|-------------|------|
+| Invoice, seat within cap, timesheet, daily log | `ingest` → absorb (`ingestTravelAction` may `send`) |
+| Over cap (capacity pack) / stale σ | `ingest` → hold |
+| Kind not in h(ξ) | `ingest` → escalate_up (`target: human`; `ingestTravelAction` may `raises`) |
+| Change plan / protocol / cost-code bound | `proposeRelease` then `apply` |
+| PATCH the slow key through Prisma/Drizzle | `ARKORDER_XI_FIELD_WRITE` |
+
+Copy [examples/arkorder-billing/](../examples/arkorder-billing/) and rename the
+three keys. Membership ids (`projectId`) are not keys: a `proposeRelease` that
+does not change `h(ξ)` fails closed (`ARKORDER_EMPTY_BLAST`).
+
+---
+
+## Config
+
+```json
+{
+  "schemaVersion": "1.3",
+  "arkOrder": {
+    "mode": "advisory",
+    "planeRoots": ["src/composition/order-plane.ts"],
+    "managedLayers": ["Application"],
+    "maxXiKeys": 7,
+    "xiKeys": ["plan", "cycle", "tenancy"]
+  }
+}
+```
+
+| Field | Meaning |
+|-------|---------|
+| `mode` | `advisory` (default) or `enforced`. Same word as ArkRun / ArkRules |
+| `managedLayers` | Layers whose persistence writes of `xiKeys` are the skip |
+| `planeRoots` | Files allowed to call `createOrderPlane` |
+| `maxXiKeys` | Cap on ξ (default 7). Haken: few slow modes |
+| `xiKeys` | Optional 3–5 slow names. Empty → `ARKORDER_XI_FIELD_WRITE` silent |
+
+Unknown keys fail closed. Empty `planeRoots` in `enforced` fails
+`ARKORDER_MISSING_PLANE`. Demotion or deletion is a policy-delta **weakening**.
+This library’s 4-layer authoring contract does **not** turn the extra on.
+
+---
+
+## Activation (same shape as ArkRun)
+
+Both extras already share **`mode`** and **`managedLayers`**. They diverge on
+one axis: the factory root.
+
+| | ArkOrder | ArkRun |
+|--|----------|--------|
+| Extra key | `arkOrder` | `arkRun` |
+| Schema | `1.3+` | `1.2+` |
+| Factory | `createOrderPlane` from `arkgate/order` | `createStrictArkKernel` from `arkgate/runtime` |
+| Roots | `planeRoots` | `kernelRoots` (`compositionRoots` alias) |
+| Silence | absence of the extra | absence of the extra |
+
+Do not rename `planeRoots` to `kernelRoots`. They name different factories.
+List both on `ark-check --sensors` (same table, same tier vocabulary).
+
+Turn extras on with `/ark-adopt`. Place new files with `/ark-place`. There is
+no `/ark-order` skill.
+
+---
+
+## Sensors (closed)
+
+Direct evidence blocks. Inference never does. Default advisory; promotable
+except withdrawn heuristics.
+
+| Diagnostic | Skip |
+|------------|------|
+| `ARKORDER_MISSING_PLANE` | Extra on, no `createOrderPlane` in `planeRoots` |
+| `ARKORDER_KERNEL_IN_DOMAIN` | Domain-role layer imports `arkgate/order` |
+| `ARKORDER_GENERIC_UPDATE` | `update` / `patch` / `set` on the plane |
+| `ARKORDER_TOO_MANY_PARAMS` | ξ keys > `maxXiKeys` |
+| `ARKORDER_INGEST_WRITES_XI` | `ingest` result assigned into a Release / ξ store |
+| `ARKORDER_XI_FIELD_WRITE` | Managed-layer driver import **and** write token **and** a declared `xiKeys` name |
+| `ARKORDER_INFORMATION_BUDGET` | `h(ξ)` allows a kind in `informationBudget.cannotObserve` |
+| `ARKORDER_XI_TTL` | ξ named ttl/freshUntil/maxAge — freshness is σ |
+| `ARKORDER_STALE_SIGMA` | ingest after σ.freshUntil, or after `release.releasedAt` + `sigmaMaxAgeMs` |
+
+Why / fix: [diagnostics.md](diagnostics.md#ARKORDER_MISSING_PLANE).
+`ark-check --sensors` lists every extra sensor with plane, tier, and whether
+it can ever be enforced.
+
+---
+
+## Runtime half
+
+Shadow, replay, provenance, and compare belong to **ArkRun** (information
+package, inspector, in-memory compare). ArkOrder does not grow a bus, outbox,
+or hosted replay. [ADR 0033](adr/0033-arkorder-runtime-half-is-arkrun.md).
+
+Durability (`K01`) stays parked. In-memory is the honesty line.
+
+---
+
+## What we will not build here
+
+- another event bus
+- a general workflow engine
+- a permissions engine
+- a central store holding operational state
+- a DSL that duplicates domain / DB / ArkRules
+- a coordinator required on every request
+- a degraded-mode contract (nothing can be down)
+
+If a “slow parameter” changes with every click, it is not an order parameter.
+
+The valved loop ships in **4.8.6** ([ADR 0034](adr/0034-arkorder-valved-loop.md)).
+In-memory `ReleaseStore` is **not** durable. Doctor / status `arkOrder` stays
+`notAScore`. This does **not** close `K01` / `Z09`. No `/ark-order` skill.
+
+---
+
+## Next step
+
+```bash
+npx arkgate-check --doctor
+# copy examples/arkorder-billing/ and rename the three keys
+# /ark-adopt to turn arkOrder on advisory
+```

package/docs/configuration.md

@@ -116,8 +116,8 @@ Top-level fields:
 - **`arkRules`** (optional, schema `1.1+`) — map of layer name → project-relative path to an
   ArkRules file (e.g. `"DomainModel": "arkrules/DomainModel.json"`). Keys must match a declared
   layer. Missing/invalid referenced files **fail closed**.
-- **`arkRun`** (optional, schema `1.2+`) — inline ArkRun extra (`mode`, `compositionRoots`,
-  `managedLayers`, `requireDeclarations`). Absence is silent. Unknown keys fail closed.
+- **`arkRun`** (optional, schema `1.2+`) — inline ArkRun extra (`mode`, `kernelRoots`
+  (`compositionRoots` alias), `managedLayers`, `requireDeclarations`). Absence is silent. Unknown keys fail closed.
   `managedLayers` must name existing `layers[].name` values. Empty `compositionRoots` in
   `enforced` mode fails closed (`ARKRUN_MISSING_ROOT`); empty `managedLayers` in `enforced`
   mode also fails closed (direct-new / undeclared / transport-bypass would otherwise no-op).
@@ -130,8 +130,17 @@ Top-level fields:
   Import `createOrderPlane` from `arkgate/order` (same package). Empty `planeRoots` in
   `enforced` mode fails closed (`ARKORDER_MISSING_PLANE`). `xiKeys` are the 3–5 slow
   names the product already knows (plan, protocol, cost-code bound). Empty `xiKeys`
-  leaves `ARKORDER_XI_FIELD_WRITE` silent. Membership ids are not keys. Demotion or
-  deletion is a policy-delta **weakening**. Field ingest never mints a pattern.
+  leaves `ARKORDER_XI_FIELD_WRITE` silent. Membership ids are not keys. Factory options
+  `informationBudget`, `sigmaMaxAgeMs`, `store` (`ReleaseStore`), and capacity packs
+  belong on `createOrderPlane`, not this extra object. Later ξ is `proposeRelease`
+  then `apply`; `refreshSigma`; ingest residual `absorb | escalate_up | hold`.
+  Demotion or deletion is a policy-delta **weakening**. Field ingest never mints
+  a pattern.
+
+**Activation is one shape.** ArkRun and ArkOrder both use `mode` + `managedLayers`.
+Absence of either extra is silent. They keep different *root* names because they
+name different factories: `arkRun.kernelRoots` (`compositionRoots` alias) vs
+`arkOrder.planeRoots`. Do not fold them. Canonical: [arkorder.md](arkorder.md#activation-same-shape-as-arkrun).
 
 Layer fields:
 
@@ -239,7 +248,7 @@ See [brownfield adoption](brownfield-adoption.md#nextjs-honesty-default-overlays
 | **Structure sensors** | Intra-layer heuristics | Only `mode: "enforced"` |
 | **Invariants** | Catalog + coverage evidence (not a business runtime) | Only enforced + proven-uncovered |
 | **ArkRun** (opt-in extra) | Kernel usage + complete declarations | Only `arkRun.mode: "enforced"` when classified |
-| **ArkOrder** (opt-in extra) | Frozen pattern + four verbs (no `update`) | Only `arkOrder.mode: "enforced"` when classified |
+| **ArkOrder** (opt-in extra) | Frozen pattern; first freeze `release()`, later ξ is `proposeRelease` then `apply` (no `update`) | Only `arkOrder.mode: "enforced"` when classified |
 
 Absence of `arkRules`, `arkRun`, or `arkOrder` adds **no** extra merge teeth. **Advisory** structure sensors, advisory
 invariants, advisory ArkRun, and advisory ArkOrder also add **no** merge teeth (FG-ARKRULES-ADVISORY-ONLY / ADR 0020 / ADR 0027) — packing every starter

package/docs/develop.md

@@ -10,7 +10,8 @@ request. Not an API Gateway. Not a folder linter. Without a required CI status,
 and ArkOrder are optional — policies, an experimental runtime, and the extra that
 stops slow product decisions being CRUD. Not a second install.
 
-If you only want the happy path, start at [use.md](use.md).
+If you only want the happy path, start at [use.md](use.md). Optional ArkOrder
+(library + sensors, not a service): [arkorder.md](arkorder.md).
 
 ### Why it exists
 
@@ -60,7 +61,7 @@ Full matrix and install commands: [ai-gates.md](ai-gates.md) · canonical table
 
 ```bash
 # All common hosts (examples)
-npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok
+npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok,antigravity
 npx arkgate-check --install-agent-gates --tools antigravity   # alias: agy
 npx arkgate-check --install-agent-gates --tools opencode
 # Full /ark-* skill pack (optional expert depth)
@@ -201,9 +202,14 @@ The plane is `arkgate/order` in package `arkgate`, not a second install.
 stays plane-free. Empty `planeRoots` in `enforced` mode fails closed
 (`ARKORDER_MISSING_PLANE`). In-memory. Not durable. Does not replace ArkRun.
 
+First freeze is `release()`. Later pattern change is `proposeRelease` then
+`apply` (`ARKORDER_UNVALVED_RELEASE`). `refreshSigma`; ingest residual
+`absorb | escalate_up | hold` + `reasonCode`; capacity pack as data;
+`createMemoryReleaseStore`; `ingestTravelAction`; ArkRun `decisionTape`.
+
 Copy [examples/arkorder-billing/](../examples/arkorder-billing/) (`plan` / `cycle` /
-`tenancy`) and rename the keys. Posting an invoice is absorbed; changing plan is a
-new release. See [configuration.md](configuration.md) and
+`tenancy`) and rename the keys. Posting an invoice is absorbed; changing plan is
+`proposeRelease` then `apply`. See [configuration.md](configuration.md) and
 [package-surface.md](package-surface.md).
 
 ---

package/docs/diagnostics.md

@@ -57,6 +57,7 @@ Link form for agents: `docs/diagnostics.md#RULE_ID` (exact-case HTML anchors bel
 | [`ARKORDER_GENERIC_UPDATE`](#ARKORDER_GENERIC_UPDATE) | arkorder | Generic update of ξ |
 | [`ARKORDER_TOO_MANY_PARAMS`](#ARKORDER_TOO_MANY_PARAMS) | arkorder | Too many slow keys |
 | [`ARKORDER_INGEST_WRITES_XI`](#ARKORDER_INGEST_WRITES_XI) | arkorder | ingest assigned into ξ |
+| [`ARKORDER_UNVALVED_RELEASE`](#ARKORDER_UNVALVED_RELEASE) | arkorder | Unvalved second freeze of ξ |
 | [`INVALID_CHANGE_PATH`](#INVALID_CHANGE_PATH) | preflight | Unsafe change path |
 | [`DUPLICATE_CHANGE_PATH`](#DUPLICATE_CHANGE_PATH) | preflight | Duplicate path in change set |
 | [`DELETE_TARGET_MISSING`](#DELETE_TARGET_MISSING) | preflight | Delete target missing |
@@ -395,7 +396,7 @@ Haken slaving: few slow keys (ξ) determine derived fast state. Field ingest nev
 **Generic update of ξ**
 
 - **Why:** A call to update/patch/set on the order plane rewrites the slow pattern. Haken slaving forbids generic ξ mutation.
-- **Fix:** Use release() to freeze ξ or proposeRelease() for a pattern change with blast radius, then preflight again. Never mechanical-safe.
+- **Fix:** Use release() for the first freeze of ξ. Later pattern change is proposeRelease then apply(ProposeResult). Never update/patch/set. Never mechanical-safe.
 
 <a id="ARKORDER_TOO_MANY_PARAMS"></a>
 
@@ -412,8 +413,8 @@ Haken slaving: few slow keys (ξ) determine derived fast state. Field ingest nev
 
 **ingest assigned into ξ**
 
-- **Why:** An ingest() result is written into a Release or ξ store. ingest may absorb or escalate; it never mints a pattern.
-- **Fix:** Keep ingest results as absorb/escalate only. Change ξ with proposeRelease + release. Never mechanical-safe.
+- **Why:** An ingest() result is written into a Release or ξ store. ingest may absorb, escalate_up, or hold; it never mints a pattern.
+- **Fix:** Keep ingest results as absorb/escalate_up/hold only. Change ξ with proposeRelease then apply(ProposeResult). Never mechanical-safe.
 
 <a id="ARKORDER_XI_FIELD_WRITE"></a>
 
@@ -422,7 +423,43 @@ Haken slaving: few slow keys (ξ) determine derived fast state. Field ingest nev
 **Slow key written around the order plane**
 
 - **Why:** A managed-layer file imports a persistence driver and writes a declared arkOrder.xiKeys name. Field events absorb or escalate; they do not PATCH the slow pattern.
-- **Fix:** Keep invoices, seats, hours, and logs on ingest. Change the slow key with proposeRelease + release, then preflight again. Never mechanical-safe.
+- **Fix:** Keep invoices, seats, hours, and logs on ingest. Change the slow key with proposeRelease then apply(ProposeResult), then preflight again. Never mechanical-safe.
+
+<a id="ARKORDER_INFORMATION_BUDGET"></a>
+
+### `ARKORDER_INFORMATION_BUDGET`
+
+**Projection observes a forbidden kind**
+
+- **Why:** h(ξ) allowedKinds includes a kind listed in informationBudget.cannotObserve. A scale may not look at what it was told not to see.
+- **Fix:** Cut that kind from the projector or from cannotObserve, then preflight again. Never mechanical-safe.
+
+<a id="ARKORDER_XI_TTL"></a>
+
+### `ARKORDER_XI_TTL`
+
+**Slow key carries a freshness field**
+
+- **Why:** ξ named ttl/freshUntil/maxAge. Freshness belongs on σ. A slow parameter that expires per transaction is not slow.
+- **Fix:** Move freshness onto σ (freshUntil) and keep ξ stable, then preflight again. Never mechanical-safe.
+
+<a id="ARKORDER_STALE_SIGMA"></a>
+
+### `ARKORDER_STALE_SIGMA`
+
+**σ is stale**
+
+- **Why:** ingest ran after σ.freshUntil (or sigmaMaxAgeMs). ξ does not TTL.
+- **Fix:** Call refreshSigma and ingest again, or proposeRelease then apply(ProposeResult) if the pattern changed. Never mechanical-safe.
+
+<a id="ARKORDER_UNVALVED_RELEASE"></a>
+
+### `ARKORDER_UNVALVED_RELEASE`
+
+**Unvalved second freeze of ξ**
+
+- **Why:** release() ran after a pattern was already frozen and the new ξ differs. First freeze is release(); later pattern change is proposeRelease then apply.
+- **Fix:** Change ξ with proposeRelease then apply(ProposeResult). release() is only the first freeze. Never mechanical-safe.
 
 ## Atomic preflight and change sets
 

package/docs/enthusiast/how-to-agent-gates.md

@@ -2,7 +2,7 @@
 
 ```bash
 npx arkgate-check --install-agent-gates
-npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok
+npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok,antigravity
 # aliases: ark-check …
 ```