arkgate 4.8.7 → 4.8.9

package/dist/{types-BK47clMl.d.ts → types-Djbs3KjE.d.ts}

@@ -1,4 +1,4 @@
-import { a as ArkConfigRule, f as ArkConfigLayer, A as ArkConfig } from './configTypes-0eHpocR3.js';
+import { a as ArkConfigRule, f as ArkConfigLayer, A as ArkConfig } from './configTypes-j7so8B4O.js';
 
 /**
  * Policy types for the Ark kernel.

package/dist/{types-CwZ_oz1N.d.ts → types-tGhZUiGX.d.ts}

@@ -1,4 +1,4 @@
-import { i as Policy, P as PolicyViolation, I as IntentName, j as IntentCreator, k as IntentRelationship, b as ArchitectureProfile, D as DomainEvent, E as EventMetadata, h as PolicyEnforcementMode, A as ArchitectureLayer, c as ArchitectureRule, d as ArkCheckConfig } from './types-BK47clMl.js';
+import { i as Policy, P as PolicyViolation, I as IntentName, j as IntentCreator, k as IntentRelationship, b as ArchitectureProfile, D as DomainEvent, E as EventMetadata, h as PolicyEnforcementMode, A as ArchitectureLayer, c as ArchitectureRule, d as ArkCheckConfig } from './types-Djbs3KjE.js';
 
 /**
  * PolicyEngine
@@ -1030,8 +1030,67 @@ declare const ARK_RUN_INSPECTOR_DEFAULT_PORT = 0;
 declare const ARK_RUN_INSPECTOR_SNAPSHOT_PATH = "/snapshot";
 declare const ARK_RUN_INSPECTOR_EVENTS_PATH = "/events";
 declare const ARK_RUN_INSPECTOR_GRAPH_PATH = "/graph";
+declare const ARK_RUN_INSPECTOR_OUTBOX_PATH = "/outbox";
+declare const ARK_RUN_INSPECTOR_WORKFLOWS_PATH = "/workflows";
 declare const ARK_RUN_INSPECTOR_SSE_EVENT = "snapshot";
 declare const ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK: "in-process-local";
+/** Server-side sample cap for outbox/workflows monitors (DoS floor). */
+declare const ARK_RUN_INSPECTOR_MONITOR_SAMPLE_LIMIT = 32;
+/** Outbox statuses the Queues monitor surfaces (dispatched is omitted). */
+declare const ARK_RUN_INSPECTOR_OUTBOX_MONITOR_STATUSES: readonly ["pending", "failed"];
+type ArkRunInspectorOutboxMonitorStatus = (typeof ARK_RUN_INSPECTOR_OUTBOX_MONITOR_STATUSES)[number];
+type ArkRunInspectorStoreDurabilityKind = 'memory' | 'durable';
+type ArkRunInspectorStoreRole = 'outbox' | 'audit' | 'workflow';
+type ArkRunInspectorStoreDurability = {
+    role: ArkRunInspectorStoreRole;
+    id: string;
+    kind: ArkRunInspectorStoreDurabilityKind;
+};
+type ArkRunInspectorHardeningDurability = {
+    stores: ArkRunInspectorStoreDurability[];
+};
+type ArkRunInspectorHardening = {
+    durability: ArkRunInspectorHardeningDurability;
+};
+type ArkRunInspectorOutboxRecordSummary = {
+    id: string;
+    status: ArkRunInspectorOutboxMonitorStatus;
+    attempts: number;
+    intent?: string;
+    error?: string;
+    updatedAt?: string;
+};
+type ArkRunInspectorOutboxMonitor = {
+    available: boolean;
+    pendingCount: number;
+    failedCount: number;
+    pending: ArkRunInspectorOutboxRecordSummary[];
+    failed: ArkRunInspectorOutboxRecordSummary[];
+    /** Cap applied to pending/failed sample arrays (counts remain accurate). */
+    sampleLimit: number;
+};
+type ArkRunInspectorWorkflowSummary = {
+    id: string;
+    name: string;
+    status: string;
+    currentStep?: string;
+    error?: string;
+};
+type ArkRunInspectorWorkflowsMonitor = {
+    available: boolean;
+    total: number;
+    runningCount: number;
+    compensatingCount: number;
+    failedCount: number;
+    pendingCount: number;
+    workflows: ArkRunInspectorWorkflowSummary[];
+    /** Cap applied to workflows sample array (counts remain accurate). */
+    sampleLimit: number;
+};
+type ArkRunInspectorMonitorBuildOptions = {
+    /** Bound samples; clamped to 0…ARK_RUN_INSPECTOR_MONITOR_SAMPLE_LIMIT. Default 32. */
+    sampleLimit?: number;
+};
 declare class ArkRunInspectorProductionError extends Error {
     constructor();
 }
@@ -1060,6 +1119,12 @@ type ArkRunInspectorSnapshot = {
     package: DependencyInformationPackage;
     transport: ArkRunInspectorTransportFacts;
     observability: unknown;
+    /** Explicit store durability facts from real kernel ports (never component-id inference). */
+    hardening: ArkRunInspectorHardening;
+    /** Optional OD04 queue facts when the caller supplies them (endpoints preferred). */
+    outbox?: ArkRunInspectorOutboxMonitor;
+    /** Optional OD04 workflow facts when the caller supplies them (endpoints preferred). */
+    workflows?: ArkRunInspectorWorkflowsMonitor;
 };
 type ArkRunInspectorBindInput = {
     host?: unknown;
@@ -1075,11 +1140,34 @@ type ArkRunInspectorSnapshotInput = {
     observability?: unknown;
     ephemeralDefault?: unknown;
     brokerBound?: unknown;
+    hardening?: unknown;
+    outbox?: unknown;
+    workflows?: unknown;
 };
 declare function isArkRunInspectorProductionEnv(nodeEnv: unknown): boolean;
 declare function isArkRunInspectorLoopbackHost(host: unknown): boolean;
 declare function resolveArkRunInspectorBind(input?: ArkRunInspectorBindInput): ArkRunInspectorBind;
 declare function arkRunInspectorUrl(host: string, port: number, path: string): string;
+/**
+ * Classify a store port by constructor / declared id. `InMemory*` → memory; else durable.
+ */
+declare function classifyArkRunInspectorStoreDurability(id: unknown, role: ArkRunInspectorStoreRole): ArkRunInspectorStoreDurability;
+/**
+ * Build hardening.durability facts from explicit store rows (not package.components).
+ */
+declare function buildArkRunInspectorHardening(input?: unknown): ArkRunInspectorHardening;
+/**
+ * Sanitize EventBufferStore.list rows into pending/failed monitor facts (no payloads).
+ * Counts cover the full input; sample arrays are capped at sampleLimit (≤32).
+ */
+declare function buildArkRunInspectorOutboxMonitor(records?: unknown, options?: ArkRunInspectorMonitorBuildOptions): ArkRunInspectorOutboxMonitor;
+declare function unavailableArkRunInspectorOutboxMonitor(): ArkRunInspectorOutboxMonitor;
+/**
+ * Sanitize WorkflowEngine.list rows into monitor facts (id/name/status/step/error only).
+ * Counts cover the full input; the workflows sample is capped at sampleLimit (≤32).
+ */
+declare function buildArkRunInspectorWorkflowsMonitor(snapshots?: unknown, options?: ArkRunInspectorMonitorBuildOptions): ArkRunInspectorWorkflowsMonitor;
+declare function unavailableArkRunInspectorWorkflowsMonitor(): ArkRunInspectorWorkflowsMonitor;
 declare function buildArkRunInspectorSnapshot(input?: ArkRunInspectorSnapshotInput): ArkRunInspectorSnapshot;
 declare function formatArkRunInspectorSseEvent(snapshot: unknown): string;
 
@@ -1107,6 +1195,8 @@ type ArkRunInspectorHandle = {
     snapshotUrl: string;
     eventsUrl: string;
     graphUrl: string;
+    outboxUrl: string;
+    workflowsUrl: string;
     close(): Promise<void>;
 };
 
@@ -1125,6 +1215,20 @@ type StartArkRunInspectorOptions = {
 type ArkRunInspectorSource = {
     getInspectorSnapshot(bind: ArkRunInspectorBind): ArkRunInspectorSnapshot;
     requestGraph(query?: ArkRunGraphQuery): ArkRunGraph;
+    /** OD04: pending/failed outbox summaries (EventBufferStore.list). */
+    listInspectorOutbox?(): Promise<ArkRunInspectorOutboxMonitor>;
+    /** OD04: workflow/saga summaries (WorkflowEngine.list). */
+    listInspectorWorkflows?(): Promise<ArkRunInspectorWorkflowsMonitor>;
+    /** Duck-typed kernel ports when explicit list* helpers are absent. */
+    outbox?: {
+        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
+    };
+    eventBuffer?: {
+        list(status?: 'pending' | 'dispatched' | 'failed'): Promise<unknown[]>;
+    };
+    workflowEngine?: {
+        list(workflowName?: string): Promise<unknown[]>;
+    };
 };
 declare function startArkRunInspector(source: ArkRunInspectorSource, options?: StartArkRunInspectorOptions): Promise<ArkRunInspectorHandle>;
 
@@ -1249,4 +1353,4 @@ interface CreateArkKernelFromConfigOptions extends Omit<CreateArkKernelOptions,
 }
 type ArkKernelConfig = ArkCheckConfig;
 
-export { ARK_RUN_INSPECTOR_EVENTS_PATH as $, type ArkKernel as A, type OutboxStatus as B, type CreateArkKernelOptions as C, type DefineIntentOptions as D, type EventContractRegistry as E, type OutboxRecord as F, type GraphEdge as G, type ObservabilityDriftReport as H, IntentRegistry as I, ARK_RUN_COMPONENT_LIFETIMES as J, ARK_RUN_EPHEMERAL_DEFAULT as K, ARK_RUN_GRAPH_DEFAULT_SLICE as L, type MetadataRegistry as M, ARK_RUN_GRAPH_NODE_KINDS as N, type ObservabilityReporter as O, type ProjectionRegistry as P, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as Q, type ReadModelStore as R, type SagaContext as S, type TraceRecordType as T, ARK_RUN_GRAPH_SCHEMA_VERSION as U, ARK_RUN_GRAPH_SLICES as V, type WorkflowStore as W, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as X, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as Y, ARK_RUN_INSPECTOR_DEFAULT_HOST as Z, ARK_RUN_INSPECTOR_DEFAULT_PORT as _, type DependencyGraph as a, InvalidArkRunSendOptionError as a$, ARK_RUN_INSPECTOR_GRAPH_PATH as a0, ARK_RUN_INSPECTOR_SCHEMA_VERSION as a1, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as a2, ARK_RUN_INSPECTOR_SSE_EVENT as a3, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as a4, ARK_RUN_TRANSPORT_KINDS as a5, type ArkManifestArchitecture as a6, type ArkManifestData as a7, type ArkManifestEntityLink as a8, type ArkManifestGraph as a9, type ArkRunInspectorSnapshotInput as aA, type ArkRunInspectorSource as aB, type ArkRunInspectorTransportFacts as aC, type ArkRunPublisher as aD, type ArkRunRegisterOptions as aE, type ArkRunRegistrationHandle as aF, type ArkRunSendOptions as aG, type ArkRunSendPlan as aH, type ArkRunSendPlanInput as aI, type ArkRunSendResult as aJ, type ArkRunTransportKind as aK, type AuditRecordInput as aL, type AuditRecordType as aM, type EntityMeta as aN, type EventContractIssue as aO, type EventHandler as aP, type EventInterceptionInfo as aQ, type EventInterceptor as aR, type EventInterceptorContext as aS, type EventPayloadPatch as aT, type EventPayloadSchema as aU, type EventPublisher as aV, type EventSchemaField as aW, type EventSchemaFieldType as aX, type FieldMeta as aY, type GraphNode as aZ, InvalidArkRunGraphQueryError as a_, type ArkManifestIntent as aa, type ArkManifestPolicy as ab, type ArkManifestProjection as ac, type ArkRunBrokerAdapter as ad, type ArkRunComponentLifetime as ae, type ArkRunDeliveredVia as af, type ArkRunExtendedInfo as ag, type ArkRunGraph as ah, type ArkRunGraphEdge as ai, type ArkRunGraphEdgeKind as aj, type ArkRunGraphMatch as ak, type ArkRunGraphMatchInput as al, type ArkRunGraphNode as am, type ArkRunGraphNodeKind as an, type ArkRunGraphProcessEdgeKind as ao, type ArkRunGraphQuery as ap, type ArkRunGraphResolvedQuery as aq, type ArkRunGraphSlice as ar, type ArkRunGraphTechnicalEdgeKind as as, type ArkRunInformationPackageComponent as at, type ArkRunInspectorBind as au, ArkRunInspectorBindError as av, type ArkRunInspectorBindInput as aw, type ArkRunInspectorHandle as ax, ArkRunInspectorProductionError as ay, type ArkRunInspectorSnapshot as az, type AuditStore as b, type ObservabilityFlow as b0, type ObservedLayerFlowMode as b1, type OutboxStore as b2, type PolicyEvaluationResult as b3, type ProjectionCheckpoint as b4, type ProjectionDefinition as b5, type PublishedEventRecord as b6, type RetryPolicy as b7, type SagaStatus as b8, type SagaStep as b9, type StartArkRunInspectorOptions as ba, type TraceSink as bb, type Unsubscribe as bc, type WorkflowDefinition as bd, type WorkflowStatus as be, type WorkflowStep as bf, appendDecisionTape as bg, arkRunGraphQueryFromSearchParams as bh, arkRunInspectorUrl as bi, buildArkRunInspectorSnapshot as bj, buildDependencyInformationPackage as bk, closeArkRunGraphQuery as bl, closedArkRunEphemeral as bm, closedArkRunTransportKind as bn, formatArkRunGraphMermaid as bo, formatArkRunInspectorSseEvent as bp, isArkRunInspectorLoopbackHost as bq, isArkRunInspectorProductionEnv as br, requestArkRunGraph as bs, resolveArkRunInspectorBind as bt, resolveArkRunSendPlan as bu, startArkRunInspector as bv, type AuditRecord as c, type AuditQuery as d, type CreateAuditTrailOptions as e, type AuditTrail as f, type EventContract as g, type EventContractValidationResult as h, type CreateProjectionRegistryOptions as i, type EventBufferStore as j, type EventBufferRecord as k, type EventBufferStatus as l, type EventBusOptions as m, type EventBus as n, type CreateObservabilityReporterOptions as o, PolicyEngine as p, type ArkManifest as q, type WorkflowSnapshot as r, type SagaDefinition as s, type CreateWorkflowEngineOptions as t, type SagaInstance as u, type WorkflowEngine as v, type DependencyInformationPackage as w, type ArkKernelConfig as x, type CreateArkKernelFromConfigOptions as y, type TraceRecord as z };
+export { ARK_RUN_INSPECTOR_EVENTS_PATH as $, type ArkKernel as A, type OutboxStatus as B, type CreateArkKernelOptions as C, type DefineIntentOptions as D, type EventContractRegistry as E, type OutboxRecord as F, type GraphEdge as G, type ObservabilityDriftReport as H, IntentRegistry as I, ARK_RUN_COMPONENT_LIFETIMES as J, ARK_RUN_EPHEMERAL_DEFAULT as K, ARK_RUN_GRAPH_DEFAULT_SLICE as L, type MetadataRegistry as M, ARK_RUN_GRAPH_NODE_KINDS as N, type ObservabilityReporter as O, type ProjectionRegistry as P, ARK_RUN_GRAPH_PROCESS_EDGE_KINDS as Q, type ReadModelStore as R, type SagaContext as S, type TraceRecordType as T, ARK_RUN_GRAPH_SCHEMA_VERSION as U, ARK_RUN_GRAPH_SLICES as V, type WorkflowStore as W, ARK_RUN_GRAPH_TECHNICAL_EDGE_KINDS as X, ARK_RUN_INFORMATION_PACKAGE_SCHEMA_VERSION as Y, ARK_RUN_INSPECTOR_DEFAULT_HOST as Z, ARK_RUN_INSPECTOR_DEFAULT_PORT as _, type DependencyGraph as a, type EventContractIssue as a$, ARK_RUN_INSPECTOR_GRAPH_PATH as a0, ARK_RUN_INSPECTOR_MONITOR_SAMPLE_LIMIT as a1, ARK_RUN_INSPECTOR_OUTBOX_PATH as a2, ARK_RUN_INSPECTOR_SCHEMA_VERSION as a3, ARK_RUN_INSPECTOR_SNAPSHOT_PATH as a4, ARK_RUN_INSPECTOR_SSE_EVENT as a5, ARK_RUN_INSPECTOR_TRANSPORT_FALLBACK as a6, ARK_RUN_INSPECTOR_WORKFLOWS_PATH as a7, ARK_RUN_TRANSPORT_KINDS as a8, type ArkManifestArchitecture as a9, type ArkRunInspectorHandle as aA, type ArkRunInspectorHardening as aB, type ArkRunInspectorHardeningDurability as aC, type ArkRunInspectorMonitorBuildOptions as aD, type ArkRunInspectorOutboxMonitor as aE, type ArkRunInspectorOutboxRecordSummary as aF, ArkRunInspectorProductionError as aG, type ArkRunInspectorSnapshot as aH, type ArkRunInspectorSnapshotInput as aI, type ArkRunInspectorSource as aJ, type ArkRunInspectorStoreDurability as aK, type ArkRunInspectorStoreDurabilityKind as aL, type ArkRunInspectorStoreRole as aM, type ArkRunInspectorTransportFacts as aN, type ArkRunInspectorWorkflowSummary as aO, type ArkRunInspectorWorkflowsMonitor as aP, type ArkRunPublisher as aQ, type ArkRunRegisterOptions as aR, type ArkRunRegistrationHandle as aS, type ArkRunSendOptions as aT, type ArkRunSendPlan as aU, type ArkRunSendPlanInput as aV, type ArkRunSendResult as aW, type ArkRunTransportKind as aX, type AuditRecordInput as aY, type AuditRecordType as aZ, type EntityMeta as a_, type ArkManifestData as aa, type ArkManifestEntityLink as ab, type ArkManifestGraph as ac, type ArkManifestIntent as ad, type ArkManifestPolicy as ae, type ArkManifestProjection as af, type ArkRunBrokerAdapter as ag, type ArkRunComponentLifetime as ah, type ArkRunDeliveredVia as ai, type ArkRunExtendedInfo as aj, type ArkRunGraph as ak, type ArkRunGraphEdge as al, type ArkRunGraphEdgeKind as am, type ArkRunGraphMatch as an, type ArkRunGraphMatchInput as ao, type ArkRunGraphNode as ap, type ArkRunGraphNodeKind as aq, type ArkRunGraphProcessEdgeKind as ar, type ArkRunGraphQuery as as, type ArkRunGraphResolvedQuery as at, type ArkRunGraphSlice as au, type ArkRunGraphTechnicalEdgeKind as av, type ArkRunInformationPackageComponent as aw, type ArkRunInspectorBind as ax, ArkRunInspectorBindError as ay, type ArkRunInspectorBindInput as az, type AuditStore as b, type EventHandler as b0, type EventInterceptionInfo as b1, type EventInterceptor as b2, type EventInterceptorContext as b3, type EventPayloadPatch as b4, type EventPayloadSchema as b5, type EventPublisher as b6, type EventSchemaField as b7, type EventSchemaFieldType as b8, type FieldMeta as b9, buildDependencyInformationPackage as bA, classifyArkRunInspectorStoreDurability as bB, closeArkRunGraphQuery as bC, closedArkRunEphemeral as bD, closedArkRunTransportKind as bE, formatArkRunGraphMermaid as bF, formatArkRunInspectorSseEvent as bG, isArkRunInspectorLoopbackHost as bH, isArkRunInspectorProductionEnv as bI, requestArkRunGraph as bJ, resolveArkRunInspectorBind as bK, resolveArkRunSendPlan as bL, startArkRunInspector as bM, unavailableArkRunInspectorOutboxMonitor as bN, unavailableArkRunInspectorWorkflowsMonitor as bO, type GraphNode as ba, InvalidArkRunGraphQueryError as bb, InvalidArkRunSendOptionError as bc, type ObservabilityFlow as bd, type ObservedLayerFlowMode as be, type OutboxStore as bf, type PolicyEvaluationResult as bg, type ProjectionCheckpoint as bh, type ProjectionDefinition as bi, type PublishedEventRecord as bj, type RetryPolicy as bk, type SagaStatus as bl, type SagaStep as bm, type StartArkRunInspectorOptions as bn, type TraceSink as bo, type Unsubscribe as bp, type WorkflowDefinition as bq, type WorkflowStatus as br, type WorkflowStep as bs, appendDecisionTape as bt, arkRunGraphQueryFromSearchParams as bu, arkRunInspectorUrl as bv, buildArkRunInspectorHardening as bw, buildArkRunInspectorOutboxMonitor as bx, buildArkRunInspectorSnapshot as by, buildArkRunInspectorWorkflowsMonitor as bz, type AuditRecord as c, type AuditQuery as d, type CreateAuditTrailOptions as e, type AuditTrail as f, type EventContract as g, type EventContractValidationResult as h, type CreateProjectionRegistryOptions as i, type EventBufferStore as j, type EventBufferRecord as k, type EventBufferStatus as l, type EventBusOptions as m, type EventBus as n, type CreateObservabilityReporterOptions as o, PolicyEngine as p, type ArkManifest as q, type WorkflowSnapshot as r, type SagaDefinition as s, type CreateWorkflowEngineOptions as t, type SagaInstance as u, type WorkflowEngine as v, type DependencyInformationPackage as w, type ArkKernelConfig as x, type CreateArkKernelFromConfigOptions as y, type TraceRecord as z };

package/docs/README.md

@@ -6,6 +6,14 @@
 Not an API Gateway. Not a folder linter. If the check is not required on the PR, the config
 is just documentation.
 
+AI can build fast—and make a mess just as fast.
+
+Keep the product easy to understand, change, and trust.
+
+ArkGate stops bad shortcuts. ArkRules protects how each part should behave. ArkRun keeps work moving. ArkOrder protects the few big choices that should not change by accident.
+
+Safer changes, fewer surprises, and extra protection only when you choose it.
+
 Pick your path. Skip everything else.
 
 | You are… | Start here |
@@ -58,14 +66,15 @@ These are **not** the day-to-day product path. They stay in the repo for evidenc
 | Area | Path |
 |------|------|
 | Release notes (by version) | [releases/](releases/) · npm [CHANGELOG.md](../CHANGELOG.md) (Unreleased + 4.6.x) · [pre-4.6 archive](archive/CHANGELOG-pre-4.6.md) |
-| Epic plans | [plans/](plans/) — maintainer seeds, not required to use the package. Live: [alive-in-six-months](plans/alive-in-six-months/README.md) (`AL01`–`AL04` done; `AL05` parked). [arkrun](plans/arkrun/README.md) (Phase RN; `RN01`–`RN17` done; shipped **4.7.0** + companion **4.7.4**; ADRs [0020](adr/0020-arkrun-gated-extra-plane.md)–[0024](adr/0024-arkrun-transport-ports.md) accepted). [one-catalog-one-root](plans/one-catalog-one-root/README.md) (Phase HS; `HS01`–`HS05` done; shipped **4.7.1**). [arkorder](plans/arkorder/README.md) (Phase OR; `OR01`–`OR07` done; shipped **4.8.0**; extra **inside** package `arkgate` as `arkgate/order`; ADRs [0027](adr/0027-arkorder-gated-extra-plane.md)–[0031](adr/0031-one-package-extras-deprecate-companion.md)). [arkorder-arkrun](plans/arkorder-arkrun/README.md) (Phase XP; `XP01`–`XP08` done; shipped **4.8.5**; ADR [0033](adr/0033-arkorder-runtime-half-is-arkrun.md)). [arkorder-valve-loop](plans/arkorder-valve-loop/README.md) (Phase LV; `LV01`–`LV09` done; shipped **4.8.6**; [ADR 0034](adr/0034-arkorder-valved-loop.md); does not close K01). [layer-description-projection](plans/layer-description-projection/README.md) (Phase LD; `LD01`–`LD06` done on tree; **4.8.7** prepared; [ADR 0035](adr/0035-layer-description-projection.md); project `layers[].description`; no schema bump). |
+| Epic plans | [plans/](plans/) — maintainer seeds, not required to use the package. Live: [alive-in-six-months](plans/alive-in-six-months/README.md) (`AL01`–`AL04` done; `AL05` parked). [arkrun](plans/arkrun/README.md) (Phase RN; `RN01`–`RN17` done; shipped **4.7.0** + companion **4.7.4**; ADRs [0020](adr/0020-arkrun-gated-extra-plane.md)–[0024](adr/0024-arkrun-transport-ports.md) accepted). [one-catalog-one-root](plans/one-catalog-one-root/README.md) (Phase HS; `HS01`–`HS05` done; shipped **4.7.1**). [arkorder](plans/arkorder/README.md) (Phase OR; `OR01`–`OR07` done; shipped **4.8.0**; extra **inside** package `arkgate` as `arkgate/order`; ADRs [0027](adr/0027-arkorder-gated-extra-plane.md)–[0031](adr/0031-one-package-extras-deprecate-companion.md)). [arkorder-arkrun](plans/arkorder-arkrun/README.md) (Phase XP; `XP01`–`XP08` done; shipped **4.8.5**; ADR [0033](adr/0033-arkorder-runtime-half-is-arkrun.md)). [arkorder-valve-loop](plans/arkorder-valve-loop/README.md) (Phase LV; `LV01`–`LV09` done; shipped **4.8.6**; [ADR 0034](adr/0034-arkorder-valved-loop.md); does not close K01). [layer-description-projection](plans/layer-description-projection/README.md) (Phase LD; `LD01`–`LD06` done; shipped **4.8.7**; [ADR 0035](adr/0035-layer-description-projection.md); project `layers[].description`; no schema bump). [observability-tui](plans/observability-tui/README.md) (`OD01`–`OD04` done; shipped **4.8.8**; in-memory honesty retained). |
 | Claims audit | [audit/claims-matrix.md](audit/claims-matrix.md) |
 | Field adoption kit (scaffolding, not closed) | [field/](field/) |
 | Runtime hardening (experimental) | [production-hardening.md](production-hardening.md) |
 
-Current published: [releases/4.8.6.md](releases/4.8.6.md) (`arkgate@4.8.6` on npm `latest`; does not close `K01`).
-Tree: [releases/4.8.7.md](releases/4.8.7.md) (`arkgate@4.8.7` prepared).
-Prior: [releases/4.8.5.md](releases/4.8.5.md) · [releases/4.8.4.md](releases/4.8.4.md) · [releases/4.8.3.md](releases/4.8.3.md) · [releases/4.8.2.md](releases/4.8.2.md) · [releases/4.8.1.md](releases/4.8.1.md) · [4.8.0](releases/4.8.0.md) · [4.7.6](releases/4.7.6.md) · [4.7.5](releases/4.7.5.md) · [4.7.4](releases/4.7.4.md) · [4.7.3](releases/4.7.3.md) · [4.7.2](releases/4.7.2.md) · [4.7.1](releases/4.7.1.md) · [4.7.0](releases/4.7.0.md) · [4.6.7](releases/4.6.7.md) · [4.6.6](releases/4.6.6.md) · [4.6.5](releases/4.6.5.md) · [4.6.4](releases/4.6.4.md) · [4.6.3](releases/4.6.3.md) · [4.6.2](releases/4.6.2.md) · [4.6.1](releases/4.6.1.md) · [4.6.0](releases/4.6.0.md).
+Prepared: [releases/4.8.9.md](releases/4.8.9.md) (`arkgate@4.8.9`; not published).
+Current published: [releases/4.8.8.md](releases/4.8.8.md) (`arkgate@4.8.8` on npm `latest`; does not close `K01`).
+Prior published: [releases/4.8.7.md](releases/4.8.7.md) (`arkgate@4.8.7`).
+Prior: [releases/4.8.6.md](releases/4.8.6.md) · [releases/4.8.5.md](releases/4.8.5.md) · [releases/4.8.4.md](releases/4.8.4.md) · [releases/4.8.3.md](releases/4.8.3.md) · [releases/4.8.2.md](releases/4.8.2.md) · [releases/4.8.1.md](releases/4.8.1.md) · [4.8.0](releases/4.8.0.md) · [4.7.6](releases/4.7.6.md) · [4.7.5](releases/4.7.5.md) · [4.7.4](releases/4.7.4.md) · [4.7.3](releases/4.7.3.md) · [4.7.2](releases/4.7.2.md) · [4.7.1](releases/4.7.1.md) · [4.7.0](releases/4.7.0.md) · [4.6.7](releases/4.6.7.md) · [4.6.6](releases/4.6.6.md) · [4.6.5](releases/4.6.5.md) · [4.6.4](releases/4.6.4.md) · [4.6.3](releases/4.6.3.md) · [4.6.2](releases/4.6.2.md) · [4.6.1](releases/4.6.1.md) · [4.6.0](releases/4.6.0.md).
 Older notes: [releases/](releases/). Config: [configuration.md](configuration.md).
 
 ---

package/docs/agent-guide.md

@@ -2,8 +2,20 @@
 
 **Write. Check. Ship.**
 **When the agent writes a bad import, the write doesn’t land. The same check fails the pull request.**
+
+Not an API Gateway. Not a folder linter. If the check is not required on the PR, the config
+is just documentation.
+
+AI can build fast—and make a mess just as fast.
+
+Keep the product easy to understand, change, and trust.
+
+ArkGate stops bad shortcuts. ArkRules protects how each part should behave. ArkRun keeps work moving. ArkOrder protects the few big choices that should not change by accident.
+
+Safer changes, fewer surprises, and extra protection only when you choose it.
+
 This guide is the **develop** reference for agents and codegen: write hooks, advisory MCP tools,
-CI, and `/ark-*` skills. Not an API Gateway. Not a folder linter.
+CI, and `/ark-*` skills.
 
 - Product path (anyone): [use.md](use.md)  
 - Integration overview: [develop.md](develop.md)  
@@ -346,7 +358,8 @@ into orchestration/persistence), `contract-lateral-adapter-allow` (adapter layer
 sibling adapter layer; X03 — an adapter into its OWN family's infra base, e.g.
 `PaymentsAdapters -> PaymentsInfra`, is the sanctioned direction and does not fire),
 `contract-dead-rule` (rule references an empty or unknown layer, or is a
-same-layer no-op; `optional: true` layers are exempt). Advisory only: it never changes the
+same-layer allow / classic same-layer deny; a same-layer `peerIsolation: true`
++ `allowed: false` wall is live, not this smell; `optional: true` layers are exempt). Advisory only: it never changes the
 verdict, `designFitness`, or `patternBets` — layer roles come from name heuristics, so treat a
 miss as a warning to read, not a defect to silence. A deliberate edge is acknowledged in
 `.ark/contract-smell-acks.json` (`{ acks: [{ id, edge, reason, reviewBy? }] }`); `acknowledged` counts
@@ -1413,3 +1426,26 @@ doctor → compact router (and `/ark-autopilot` only after the skill pack).
 6. **Wire** relationships via `registry.define(..., { dependsOn, produces })`
 7. **Register** event contracts before publishing in strict mode
 8. **Observe** runtime via `bus.getTrace()`, `auditTrail.query()`, outbox records, projection checkpoints, and `ark.observability.report()`
+9. **Optional loopback inspector** via `ark.startInspector()` — JSON facts only (see below); poll with `ark-dashboard` / `arkgate-dashboard` when you want a terminal view
+
+### Dev inspector queue endpoints and dashboard bins
+
+`startInspector()` / `startArkRunInspector()` bind loopback only, refuse
+`NODE_ENV=production`, and lazy-load HTTP. The kernel exposes JSON monitor facts
+(snapshot / graph / queue endpoints) — not a TUI.
+
+| Method + path | Role |
+|---------------|------|
+| `GET /snapshot` (also `/`) | Information package + transport + observability snapshot |
+| `GET /events` | SSE of the same snapshot |
+| `GET /graph` | `requestGraph` slice (+ Mermaid helper) |
+| `GET /outbox` | Outbox monitor: `available`, `pendingCount`, `failedCount`, `pending[]` / `failed[]` row summaries (`id`, `status`, `attempts`, optional `intent` / `error` / `updatedAt`) — **no event payloads** |
+| `GET /workflows` | Workflows monitor: counts + `workflows[]` summaries (`id`, `name`, `status`, optional `currentStep` / `error`) |
+
+Dual package bins **`ark-dashboard`** and **`arkgate-dashboard`**
+(`bin/ark-dashboard.mjs`) poll `--url` (default `http://127.0.0.1:3000/snapshot`)
+and sibling `/outbox` + `/workflows` on an interval (`--interval`, 200–60000 ms).
+ANSI escape sequences + polling only — no React, Ink, or Blessed. Use
+`ark dashboard` / `arkgate dashboard` (passthrough to `bin/ark-dashboard.mjs`) or the
+dual bins `ark-dashboard` / `arkgate-dashboard`.
+Presentation stays in Tooling (`bin/`); do not couple a TUI into `src/kernel`.

package/docs/ai-gates.md

@@ -2,7 +2,19 @@
 
 **Write. Check. Ship.**
 **When the agent writes a bad import, the write doesn’t land. The same check fails the pull request.**
-This page is host install depth (hooks / MCP / CI). Not an API Gateway. Not a folder linter.
+
+Not an API Gateway. Not a folder linter. If the check is not required on the PR, the config
+is just documentation.
+
+AI can build fast—and make a mess just as fast.
+
+Keep the product easy to understand, change, and trust.
+
+ArkGate stops bad shortcuts. ArkRules protects how each part should behave. ArkRun keeps work moving. ArkOrder protects the few big choices that should not change by accident.
+
+Safer changes, fewer surprises, and extra protection only when you choose it.
+
+This page is host install depth (hooks / MCP / CI).
 
 This page is **develop** depth (install hooks/MCP/CI per host). Product path: [use.md](use.md) ·
 overview: [develop.md](develop.md) · hub: [README.md](README.md).

package/docs/arkorder.md

@@ -25,7 +25,7 @@ Config: [configuration.md](configuration.md). Surface:
 | Is | Is not |
 |----|--------|
 | A **library** (`createOrderPlane`) plus **static sensors** | A running service, daemon, or hosted plane |
-| Valved verbs: `release` / `project` / `ingest` / `proposeRelease` / `apply` / `refreshSigma` | A generic `update` / `patch` / `set` |
+| Valved verbs: `release` / `project` / `ingest` / `proposeRelease` / `apply` / `refreshSigma` / `restore` | A generic `update` / `patch` / `set` |
 | Opt-in extra on `ark.config.json` | Always-on; compact starters leave it off |
 | Consumer-named slow keys (`xiKeys`) | A construction OS, BIM, or FirmPack |
 | Same npm tarball | not `@arkgate/order` |
@@ -66,6 +66,9 @@ They already exist:
 | Capacity as data | `ConstraintPack.capacity` (`kind` / `sigmaKey` / `payloadKey` / `op`) | 4.8.6 |
 | Store port | `ReleaseStore` / `createMemoryReleaseStore` in-memory default — not durable, not K01 | 4.8.6 |
 | Thin travel helper | `ingestTravelAction` absorb→`send` / escalate_up human→`raises` | 4.8.6 |
+| Verify a stored `Release.hash` | `hashOf(ξ, σ)` alias of `hashReleasePayload` — no `release()` side effect | 4.8.9 |
+| Reinstall a frozen Release | `restore(release)` — process-local; hash is identity; not durable; does not close K01 | 4.8.9 |
+| Default clock | omitted `clocks` is Kernel `Date.now()`; Domain must not call `Date.now` | 4.8.9 |
 
 Nothing here is a hosted runtime. Nothing here can be “down”. A degraded-mode
 contract would defend against an outage that cannot happen.
@@ -77,13 +80,13 @@ contract would defend against an outage that cannot happen.
 **ArkOrder freezes the pattern through a valve. ArkRun is how the residual travels.**
 
 ```ts
-import { createOrderPlane } from 'arkgate/order';
+import { createOrderPlane, hashOf, hashReleasePayload } from 'arkgate/order';
 
 const plane = createOrderPlane({
   projector,          // consumer: (release, sigma) => { allowedKinds, invalidated }
   xiSchema,           // JSON Schema object; additionalProperties false
   maxXiKeys,          // default 7
-  clocks,             // injected; Domain must not call Date.now
+  clocks,             // optional; default Kernel Date.now(); Domain must not call Date.now
   packs,              // data, not user predicates (capacity is kind/sigmaKey/payloadKey/op)
   informationBudget,  // optional { cannotObserve: ['ledger'] } — not a config key
   sigmaMaxAgeMs,      // optional σ freshness; never on ξ — not a config key
@@ -97,6 +100,8 @@ plane.ingest(event);           // residual absorb | escalate_up | hold. Never a
 plane.proposeRelease(delta);   // blast radius. Empty blast = domain error
 plane.apply(proposal);         // valve: later ξ change
 plane.refreshSigma(sigma);     // saldo / clocks; xiHash unchanged
+plane.restore(release);        // process-local install; hash is identity; not durable; not K01
+hashOf(xi, sigma);             // same bytes as hashReleasePayload; no freeze side effect
 ```
 
 There is no `update()`. Calling `update` / `patch` / `set` on the plane throws
@@ -112,9 +117,24 @@ There is no `update()`. Calling `update` / `patch` / `set` on the plane throws
 | Change plan / protocol / cost-code bound | `proposeRelease` then `apply` |
 | PATCH the slow key through Prisma/Drizzle | `ARKORDER_XI_FIELD_WRITE` |
 
-Copy [examples/arkorder-billing/](../examples/arkorder-billing/) and rename the
-three keys. Membership ids (`projectId`) are not keys: a `proposeRelease` that
-does not change `h(ξ)` fails closed (`ARKORDER_EMPTY_BLAST`).
+Gallery (not in the npm tarball):
+[examples/arkorder-billing](https://github.com/pedroknigge/arkgate/tree/main/examples/arkorder-billing).
+Rename the three keys. Membership ids (`projectId`) are not keys: a
+`proposeRelease` that does not change `h(ξ)` fails closed (`ARKORDER_EMPTY_BLAST`).
+
+---
+
+## Ingest kinds vs payload (deliberate)
+
+`classifyIngest` uses `event.kind` for `escalateKinds` and `allowedKinds`.
+`ConstraintPack` is data-only: a function in the pack is `hold` with
+`reasonCode: pack` ([ADR 0016](adr/0016-arkrules-no-executable-core.md) /
+[ADR 0034](adr/0034-arkorder-valved-loop.md) D5). Capacity already compares
+numeric `payload[payloadKey]` against `sigma[sigmaKey]`.
+
+A payload-dependent story such as "second week failing a goal" is domain /
+projector work (a new kind, or that kind in `allowedKinds` when ξ says so).
+It is not a pack predicate. Do not add user functions to `ConstraintPack`.
 
 ---
 
@@ -139,12 +159,18 @@ does not change `h(ξ)` fails closed (`ARKORDER_EMPTY_BLAST`).
 | `managedLayers` | Layers whose persistence writes of `xiKeys` are the skip |
 | `planeRoots` | Files allowed to call `createOrderPlane` |
 | `maxXiKeys` | Cap on ξ (default 7). Haken: few slow modes |
-| `xiKeys` | Optional 3–5 slow names. Empty → `ARKORDER_XI_FIELD_WRITE` silent |
+| `xiKeys` | Optional 3–5 slow names chosen by the modeller. Empty → `ARKORDER_XI_FIELD_WRITE` silent |
 
 Unknown keys fail closed. Empty `planeRoots` in `enforced` fails
 `ARKORDER_MISSING_PLANE`. Demotion or deletion is a policy-delta **weakening**.
 This library’s 4-layer authoring contract does **not** turn the extra on.
 
+The modeller names the keys. Empty blast is a mechanical rejection, but a large
+blast does not make `paid` independent of current state. Whether a candidate is
+entailed by current state remains a modeller and skill obligation. Invoices stay
+on ingest. A `paid` flag is not a fourth slow key: derive it from cash received
+against the invoice amount.
+
 ---
 
 ## Activation (same shape as ArkRun)
@@ -198,6 +224,8 @@ package, inspector, in-memory compare). ArkOrder does not grow a bus, outbox,
 or hosted replay. [ADR 0033](adr/0033-arkorder-runtime-half-is-arkrun.md).
 
 Durability (`K01`) stays parked. In-memory is the honesty line.
+`restore(release)` reinstalls a frozen Release in this process. It is not a
+store. It does not close `K01`.
 
 ---
 
@@ -212,6 +240,10 @@ Durability (`K01`) stays parked. In-memory is the honesty line.
 - a degraded-mode contract (nothing can be down)
 
 If a “slow parameter” changes with every click, it is not an order parameter.
+A status you can recompute from data you already have is not a slow decision. Derive it. Do not freeze it. The check remains silent on semantic entailment.
+For example, cash arrives through ingest; `paid` is a conclusion derived from
+cash received against amount due, not a key to freeze or change with
+`proposeRelease`.
 
 The valved loop ships in **4.8.6** ([ADR 0034](adr/0034-arkorder-valved-loop.md)).
 In-memory `ReleaseStore` is **not** durable. Doctor / status `arkOrder` stays
@@ -223,6 +255,7 @@ In-memory `ReleaseStore` is **not** durable. Doctor / status `arkOrder` stays
 
 ```bash
 npx arkgate-check --doctor
-# copy examples/arkorder-billing/ and rename the three keys
+# gallery (not in the npm tarball):
+# https://github.com/pedroknigge/arkgate/tree/main/examples/arkorder-billing
 # /ark-adopt to turn arkOrder on advisory
 ```

package/docs/configuration.md

@@ -126,16 +126,23 @@ Top-level fields:
   preflight / CI verdict and arm only when the layer plane is classified (same ≥50%
   governed and ≥1 populated-layer floor as ArkRules).
 - **`arkOrder`** (optional, schema `1.3+`) — inline ArkOrder extra (`mode`, `planeRoots`,
-  `managedLayers`, `maxXiKeys`, **`xiKeys`**). Absence is silent. Unknown keys fail closed.
-  Import `createOrderPlane` from `arkgate/order` (same package). Empty `planeRoots` in
-  `enforced` mode fails closed (`ARKORDER_MISSING_PLANE`). `xiKeys` are the 3–5 slow
-  names the product already knows (plan, protocol, cost-code bound). Empty `xiKeys`
-  leaves `ARKORDER_XI_FIELD_WRITE` silent. Membership ids are not keys. Factory options
-  `informationBudget`, `sigmaMaxAgeMs`, `store` (`ReleaseStore`), and capacity packs
-  belong on `createOrderPlane`, not this extra object. Later ξ is `proposeRelease`
-  then `apply`; `refreshSigma`; ingest residual `absorb | escalate_up | hold`.
-  Demotion or deletion is a policy-delta **weakening**. Field ingest never mints
-  a pattern.
+  `managedLayers`, `maxXiKeys`, **`xiKeys`**, optional **`appliesTo`**). Absence is silent.
+  Unknown keys fail closed. Import `createOrderPlane` from `arkgate/order` (same package).
+  Empty `planeRoots` in `enforced` mode fails closed (`ARKORDER_MISSING_PLANE`).
+  `xiKeys` is a repo-wide watchlist of slow names the product already knows (plan,
+  protocol, cost-code bound). Empty `xiKeys` leaves `ARKORDER_XI_FIELD_WRITE` silent.
+  `maxXiKeys` (default 7) is the Haken cap on one `release()` / `assertXiKeyCap`, not
+  a cap on watchlist length: eight named `xiKeys` with `maxXiKeys` 7 is valid.
+  `ARKORDER_TOO_MANY_PARAMS` fires when `release()` `keyCount` exceeds `maxXiKeys`.
+  Optional `appliesTo` uses the same glob engine as `layers[].patterns`. Absence or
+  empty keeps current behavior (every file in `managedLayers`). Non-empty emits
+  `ARKORDER_XI_FIELD_WRITE` only when the layer is managed **and** the file matches
+  at least one glob. Membership ids and recomputable statuses such as `paid` /
+  `overdue` are not keys. Factory options `informationBudget`, `sigmaMaxAgeMs`,
+  `store` (`ReleaseStore`), and capacity packs belong on `createOrderPlane`, not this
+  extra object. Later ξ is `proposeRelease` then `apply`; `refreshSigma`; ingest
+  residual `absorb | escalate_up | hold`. Demotion or deletion is a policy-delta
+  **weakening**. Field ingest never mints a pattern.
 
 **Activation is one shape.** ArkRun and ArkOrder both use `mode` + `managedLayers`.
 Absence of either extra is silent. They keep different *root* names because they
@@ -190,8 +197,36 @@ Rule fields:
 - `from`, `to`, `allowed`, `message`, `peerIsolation`, `sliceFolders`, `sharedRoots`,
   `allowedCrossSlice`
 - `peerIsolation: true` + `allowed: false`: deny only when slice ids differ; same-slice allows
-  when both paths classify. Missing paths, empty slice folders, or unclassifiable slices
-  **fail closed** (deny — cannot prove same-slice).
+  when both paths classify. Applies to **any** declared `from`→`to` pair, not only self-edges.
+  Missing paths, empty slice folders, or unclassifiable slices **fail closed** (deny — cannot
+  prove same-slice).
+
+#### Cross-layer slice walls (already in the engine)
+
+A slice wall on a cross-layer edge is a `peerIsolation` rule on that `from`/`to` pair
+(`allowed: false`). There is no slice-wide engine mode, no new config key, and no new skill
+name. `findDeniedEdgeDecision` already applies `peerIsolation` to any declared pair
+(same-layer or cross-layer) — locked on `EdgeRule` and `findDeniedEdgeDecision` in
+[`src/domain/layerMatch.ts`](../src/domain/layerMatch.ts). There is no dedicated ADR to add.
+
+A feature slice is often cross-layer. Classic Application→Domain is allowed by omission, so
+`ApplicationOrchestration/management` importing `DomainModel/projects` is invisible to an
+Application→Application wall. Declare the cross-layer pair with the same `sliceFolders` /
+`sharedRoots` as the same-layer wall:
+
+```jsonc
+{
+  "from": "ApplicationOrchestration",
+  "to": "DomainModel",
+  "allowed": false,
+  "peerIsolation": true,
+  "sliceFolders": ["features"],
+  "sharedRoots": ["ui", "hooks"]
+}
+```
+
+Domain files that do not resolve to a slice **fail closed** unless they sit under a declared
+`sharedRoots` entry. Do not invent a sixth rule shape for this.
 
 #### Declared peerIsolation exceptions (4.8.4)
 

package/docs/develop.md

@@ -2,13 +2,20 @@
 
 **Write. Check. Ship.**
 
-For **developers** integrating ArkGate into a product repo: agents, CI, config, brownfield, and power tools.
+**When the agent writes a bad import, the write doesn’t land. The same check fails the pull request.**
+
+Not an API Gateway. Not a folder linter. If the check is not required on the PR, the config
+is just documentation.
+
+AI can build fast—and make a mess just as fast.
+
+Keep the product easy to understand, change, and trust.
 
-When the agent writes a bad import, the write doesn’t land. The same check fails the pull
-request. Not an API Gateway. Not a folder linter. Without a required CI status,
-`ark.config.json` is just documentation. ArkGate is import rules. ArkRules, ArkRun,
-and ArkOrder are optional — policies, an experimental runtime, and the extra that
-stops slow product decisions being CRUD. Not a second install.
+ArkGate stops bad shortcuts. ArkRules protects how each part should behave. ArkRun keeps work moving. ArkOrder protects the few big choices that should not change by accident.
+
+Safer changes, fewer surprises, and extra protection only when you choose it.
+
+For **developers** integrating ArkGate into a product repo: agents, CI, config, brownfield, and power tools.
 
 If you only want the happy path, start at [use.md](use.md). Optional ArkOrder
 (library + sensors, not a service): [arkorder.md](arkorder.md).
@@ -207,8 +214,10 @@ First freeze is `release()`. Later pattern change is `proposeRelease` then
 `absorb | escalate_up | hold` + `reasonCode`; capacity pack as data;
 `createMemoryReleaseStore`; `ingestTravelAction`; ArkRun `decisionTape`.
 
-Copy [examples/arkorder-billing/](../examples/arkorder-billing/) (`plan` / `cycle` /
-`tenancy`) and rename the keys. Posting an invoice is absorbed; changing plan is
+The billing gallery (`plan` / `cycle` / `tenancy`) lives on GitHub, not in the
+npm tarball:
+[examples/arkorder-billing](https://github.com/pedroknigge/arkgate/tree/main/examples/arkorder-billing).
+Rename the keys. Posting an invoice is absorbed; changing plan is
 `proposeRelease` then `apply`. See [configuration.md](configuration.md) and
 [package-surface.md](package-surface.md).
 

package/docs/enthusiast/README.md

@@ -1,8 +1,19 @@
 # ArkGate — enthusiast track
 
 **Write. Check. Ship.**
-When the agent writes a bad import, the write doesn’t land. The same check fails the pull
-request. Not an API Gateway. Not a folder linter.
+
+**When the agent writes a bad import, the write doesn’t land. The same check fails the pull request.**
+
+Not an API Gateway. Not a folder linter. If the check is not required on the PR, the config
+is just documentation.
+
+AI can build fast—and make a mess just as fast.
+
+Keep the product easy to understand, change, and trust.
+
+ArkGate stops bad shortcuts. ArkRules protects how each part should behave. ArkRun keeps work moving. ArkOrder protects the few big choices that should not change by accident.
+
+Safer changes, fewer surprises, and extra protection only when you choose it.
 
 Plain-language onboarding for builders who use AI agents but are not professional
 developers. This track follows [Diátaxis](https://diataxis.fr/): tutorial, how-to,