champollion 0.3.3 → 0.4.0

package/shared/metric-registry.json

@@ -14,7 +14,15 @@
       "level": "both",
       "in_composite": true,
       "verifier_reproducible": true,
-      "notes": "Harness core (tester.py), no plugin. Binary predicted == reference; corpus rate = matches/total."
+      "notes": "Harness core (tester.py), no plugin. Binary predicted == reference; corpus rate = matches/total.",
+      "ranking": {
+        "rounding": 4,
+        "ci_columns": null,
+        "segment_level": false,
+        "signature": {
+          "kind": "harness"
+        }
+      }
     },
     "equivalent_match_rate": {
       "category": "surface",
@@ -42,7 +50,19 @@
       "level": "both",
       "in_composite": true,
       "verifier_reproducible": true,
-      "notes": "sacrebleu (word_order=2), harness core. Normalized /100 for the composite (scoring.NORMALIZATIONS)."
+      "notes": "sacrebleu (word_order=2), harness core. Normalized /100 for the composite (scoring.NORMALIZATIONS).",
+      "ranking": {
+        "rounding": 2,
+        "ci_columns": [
+          "chrf_ci_lower",
+          "chrf_ci_upper"
+        ],
+        "segment_level": true,
+        "signature": {
+          "kind": "sacrebleu",
+          "key": "chrf"
+        }
+      }
     },
     "bleu": {
       "category": "surface",
@@ -56,7 +76,16 @@
       "level": "corpus",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "sacrebleu, harness core. Reported for MT-literature compatibility, never composited. Run-card key is top-level 'corpus_bleu' (not scores.bleu) — see _proposed_renames."
+      "notes": "sacrebleu, harness core. Reported for MT-literature compatibility, never composited. Run-card key is top-level 'corpus_bleu' (not scores.bleu) — see _rename_decisions.",
+      "ranking": {
+        "rounding": 2,
+        "ci_columns": null,
+        "segment_level": true,
+        "signature": {
+          "kind": "sacrebleu",
+          "key": "bleu"
+        }
+      }
     },
     "ter": {
       "category": "surface",
@@ -70,7 +99,16 @@
       "level": "both",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "sacrebleu corpus_ter. Excluded from composite (correlates with chrF++)."
+      "notes": "sacrebleu corpus_ter. Excluded from composite (correlates with chrF++).",
+      "ranking": {
+        "rounding": 2,
+        "ci_columns": null,
+        "segment_level": false,
+        "signature": {
+          "kind": "sacrebleu",
+          "key": "ter"
+        }
+      }
     },
     "length_ratio": {
       "category": "surface",
@@ -196,7 +234,16 @@
       "level": "both",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "Harness core (metrics_comet.py); model auto-selected via the card's metricModelSupport. NEURAL — reported in the separate lane, never composited; verifier re-derives fail-closed (recompute_corpus_comet)."
+      "notes": "Harness core (metrics_comet.py); model auto-selected via the card's metricModelSupport. NEURAL — reported in the separate lane, never composited; verifier re-derives fail-closed (recompute_corpus_comet).",
+      "ranking": {
+        "rounding": 4,
+        "ci_columns": null,
+        "segment_level": false,
+        "signature": {
+          "kind": "model",
+          "key": "comet_model"
+        }
+      }
     },
     "qe_score": {
       "category": "neural",
@@ -284,7 +331,7 @@
     },
     "compliance_index": {
       "category": "compliance",
-      "status": "implemented",
+      "status": "planned",
       "display_name": "Double-Pass Compliance",
       "plugin_name": "double_pass_compliance",
       "card_key": null,
@@ -294,11 +341,11 @@
       "level": "both",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "DoublePassCompliancePlugin. Quality GATE (placeholder/quote/casing integrity), not a quality score; lives in plugin_metrics/report only, no run_cards column."
+      "notes": "DoublePassCompliancePlugin. Quality GATE (placeholder/quote/casing integrity), not a quality score; no run_cards column. Planned, not implemented: no run path constructs the plugin (it needs a card with a `rules` field, which the atlas cutover dropped from every card as uncited script-family templates, and no atlas parameter carries quote or letter-case conventions). Passed a card without `rules`, only the 60% variable-integrity term measures anything; quote and casing score a constant 1.0."
     },
     "repair_effectiveness": {
       "category": "compliance",
-      "status": "implemented",
+      "status": "planned",
       "display_name": "Repair Effectiveness",
       "plugin_name": "double_pass_compliance",
       "card_key": null,
@@ -308,7 +355,7 @@
       "level": "corpus",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "Fraction of compliance violations auto-repaired by post-translation hooks; same plugin as compliance_index."
+      "notes": "Fraction of compliance violations auto-repaired by post-translation hooks; same plugin as compliance_index, and planned for the same reason: no run path constructs it."
     },
     "spbleu": {
       "category": "comparator",
@@ -322,7 +369,16 @@
       "level": "corpus",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "Comparability sidecar (FLORES/NLLB lingua-franca tokenizer). JSONB only."
+      "notes": "Comparability sidecar (FLORES/NLLB lingua-franca tokenizer). JSONB only.",
+      "ranking": {
+        "rounding": 2,
+        "ci_columns": null,
+        "segment_level": false,
+        "signature": {
+          "kind": "sacrebleu",
+          "key": "spbleu"
+        }
+      }
     },
     "chrf_plain": {
       "category": "comparator",
@@ -336,7 +392,16 @@
       "level": "corpus",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "The chrF figure FLORES/WMT tables report. JSONB only."
+      "notes": "The chrF figure FLORES/WMT tables report. JSONB only.",
+      "ranking": {
+        "rounding": 2,
+        "ci_columns": null,
+        "segment_level": true,
+        "signature": {
+          "kind": "sacrebleu",
+          "key": "chrf_plain"
+        }
+      }
     },
     "fuse_score": {
       "category": "comparator",
@@ -383,7 +448,7 @@
     "composite": {
       "category": "composite",
       "status": "implemented",
-      "display_name": "Composite Score (experimental)",
+      "display_name": "Legacy composite (retired)",
       "plugin_name": null,
       "card_key": null,
       "db_column": "composite_score",
@@ -392,12 +457,24 @@
       "level": "corpus",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "Derived by scoring.compute_composite_score from the profile weight tables (SSOT: scoring spec §4.3). A convenience sort key, NOT a validated quality measurement."
+      "notes": "RETIRED by scoring standard/1 (2026-10-04): no new run is scored, ranked or labelled with it — new run cards publish composite = null. Runs are ranked by corpus chrF++ with its 95% bootstrap CI; BLEU, spBLEU, TER and COMET are shown beside it, never blended. A card published before the standard keeps its stored composite, re-derivable by scoring.compute_composite_score from the profile weight tables (scoring spec §4.3) and shown only as 'legacy composite (retired)'. It was a convenience sort key, never a validated quality measurement: an untrained model repeating one valid sentence for every input scored 0.6244 ('functional') at chrF++ 5.5.",
+      "ranking": {
+        "rounding": 4,
+        "ci_columns": [
+          "composite_ci_lower",
+          "composite_ci_upper"
+        ],
+        "segment_level": false,
+        "signature": {
+          "kind": "harness"
+        },
+        "retired": "scoring standard/1 (2026-10-04) retired the weighted composite: a NEW contest ranks on corpus chrF++ (the default) or another standard metric. A contest that already recorded primary_metric=composite still ranks on it, labelled legacy composite (retired)."
+      }
     },
     "cost_adjusted": {
       "category": "composite",
       "status": "implemented",
-      "display_name": "Cost-Adjusted Score",
+      "display_name": "Legacy cost-adjusted composite (retired)",
       "plugin_name": null,
       "card_key": null,
       "db_column": null,
@@ -406,12 +483,12 @@
       "level": "corpus",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "scoring.cost_adjusted_score (composite / log2(1 + cost*1000), penalty-only). JSONB only."
+      "notes": "RETIRED with the composite by scoring standard/1 (2026-10-04): new run cards publish cost_adjusted = null. Legacy cards: scoring.cost_adjusted_score (composite / log2(1 + cost*1000), penalty-only). JSONB only."
     },
     "quality_tier": {
       "category": "composite",
       "status": "implemented",
-      "display_name": "Quality Tier",
+      "display_name": "Legacy quality tier (retired)",
       "plugin_name": null,
       "card_key": null,
       "db_column": "quality_tier",
@@ -420,7 +497,7 @@
       "level": "corpus",
       "in_composite": false,
       "verifier_reproducible": true,
-      "notes": "Heuristic label on the composite (scoring.QUALITY_TIERS); only human review confirms usability."
+      "notes": "RETIRED by scoring standard/1 (2026-10-04): new run cards publish quality_tier = null, and no surface labels a new run with a tier. Legacy cards keep the heuristic label they were published with (scoring.QUALITY_TIERS on the retired composite); only human evaluation certifies quality."
     },
     "tokens_per_second": {
       "category": "efficiency",
@@ -591,7 +668,8 @@
       "notes": "clamp0((chrF++ - floor)/(100 - floor)) — removes the orthography-specific chance floor so scores are cross-language comparable; the clamp at 0 doubles as the noise rail (at-or-below-floor = indistinguishable from chance). PARTIAL: implemented today only in the connection-quality lane (arena/mt_eval_harness/connection_quality.py cchrf(); JS twins cli/website/src/utils/connectionQuality.mjs + arcStrength.mjs; constants SSOT shared/connection-quality.json cq-v1) — NOT computed by tester.py and never a leaderboard column. Floors: cli/website/src/data/cchrf-floors.json (196 languages, champollion-derived), regenerated from research/cchrf/results/atlas.json (Monte-Carlo N1-unigram floors over FLORES-200 dev monolingual text; the study + paper live in research/cchrf). Known caveat before any RANKING consumer wires this: N1 undershoots fluent-output chance by ~2.3 chrF++ measured on 24/204 languages (research/cchrf REVIEW_2026-07-11 M1); the N1-vs-N_w estimator choice is an open founder decision recorded in docs/METRICS_RESEARCH_PROGRAM_2026-07-10.md. Forbidden on language cards (card-integrity R3)."
     }
   },
-  "_proposed_renames": [
+  "_proposed_renames": [],
+  "_rename_decisions": [
     {
       "current": "run-card key 'corpus_bleu' (top-level) vs canonical 'bleu' vs db_column 'corpus_bleu'",
       "proposal": "Move BLEU into scores as scores.bleu (spec §9 already shows it there) and keep db_column corpus_bleu; OR rename nothing and let this registry carry the mapping.",

package/shared/schemas/champollion-plugin.schema.json

@@ -42,6 +42,10 @@
       "format": "uri",
       "description": "Required for type 'api'. The server-side translation endpoint URL."
     },
+    "acceptsInstructions": {
+      "type": "boolean",
+      "description": "api plugins: whether the endpoint follows per-key instructions (the plural forms a key needs, a quality-gate retry's feedback). false — a trained NMT model that only translates text (e.g. nmt-forge serve): the CLI never asks it twice for the same text (it would answer the same) and sends what it refuses to the pair's fallback. true — requests carry an \"instructions\" object (key → text) beside \"keys\". Omitted — unknown: the CLI asks once more without feedback and says so."
+    },
     "config": {
       "type": "object",
       "description": "Method configuration — canonical MethodConfig shape.",

package/shared/schemas/corpora-card.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://champollion.dev/schemas/corpora-card.schema.json",
   "title": "Champollion Corpora Card",
-  "description": "Schema for corpora cards — SSOT metadata for reference corpora, pair-specific evaluation sets, and multi-way parallel corpora. Reference corpora (ref-*) catalogue external datasets for development use. Evaluation sets (eval-*) are community-curated, pair-specific benchmarks with optional secret test splits, steward-controlled authorization, and OCAP®-aspirant sovereignty metadata. Multi-way corpora (multiway type with eval-* id) represent sentence-aligned parallel datasets covering many languages — a single card expands into N×(N-1) directional pairs at registry build time. Sovereignty fields record governance facts — who governs this data, what they've said about it, and what frameworks they've invoked. See DATA-SOVEREIGNTY.md for field reference.",
+  "description": "Schema for corpora cards — SSOT metadata for reference corpora, pair-specific evaluation sets, and multi-way parallel corpora. Reference corpora (ref-*) catalogue external datasets for development use. Evaluation sets (eval-*) are community-curated, pair-specific benchmarks with optional secret test splits, steward-controlled authorization, and sovereignty-aspirant metadata. Multi-way corpora (multiway type with eval-* id) represent sentence-aligned parallel datasets covering many languages — a single card expands into N×(N-1) directional pairs at registry build time. Sovereignty fields record governance facts — who governs this data, what they've said about it, and what frameworks they've invoked. See DATA-SOVEREIGNTY.md for field reference.",
   "type": "object",
   "required": ["id", "type", "name", "version", "description", "source", "license", "contamination", "_provenance"],
   "properties": {
@@ -536,7 +536,7 @@
 
     "submission": {
       "type": ["object", "null"],
-      "description": "Terms for submitting a method for prize evaluation. Defines what transfers to the governance org, what the researcher retains, and what methods are admissible. The core OCAP deal: you want the prize, you transfer the complete self-hostable method to the language trust. See method-submission-agreement.md.",
+      "description": "Terms for submitting a method for prize evaluation. Defines what transfers to the governance org, what the researcher retains, and what methods are admissible. The core sovereignty deal: you want the prize, you transfer the complete self-hostable method to the language trust. See method-submission-agreement.md.",
       "properties": {
         "acceptanceThreshold": {
           "type": ["string", "null"],
@@ -544,7 +544,7 @@
         },
         "transfer": {
           "type": ["object", "null"],
-          "description": "What transfers to the governance org upon acceptance. Each field is a scoped right. Maps to OCAP Ownership and Possession.",
+          "description": "What transfers to the governance org upon acceptance. Each field is a scoped right. Maps to community ownership and possession of the method.",
           "properties": {
             "sourceCode": {
               "type": "boolean",
@@ -586,7 +586,7 @@
         },
         "admissibility": {
           "type": ["object", "null"],
-          "description": "What methods are eligible for prize evaluation. The sandbox is air-gapped (no network access), so all methods must be fully self-contained. This is a technical constraint, not a policy choice — OCAP Possession requires the community to own every byte needed to run the method.",
+          "description": "What methods are eligible for prize evaluation. The sandbox is air-gapped (no network access), so all methods must be fully self-contained. This is a technical constraint, not a policy choice — community possession of the method requires the community to own every byte needed to run the method.",
           "properties": {
             "selfHostable": {
               "type": "boolean",
@@ -599,7 +599,7 @@
             },
             "notes": {
               "type": ["string", "null"],
-              "description": "Rationale for admissibility constraints. Should reference OCAP Possession and the air-gapped sandbox architecture."
+              "description": "Rationale for admissibility constraints. Should reference community possession of the method and the air-gapped sandbox architecture."
             }
           },
           "additionalProperties": false
@@ -639,8 +639,8 @@
       "properties": {
         "risk": {
           "type": "string",
-          "enum": ["NONE", "LOW", "MEDIUM", "HIGH"],
-          "description": "NONE = private/unpublished. LOW = niche/recent. MEDIUM = public but not widely used. HIGH = known to be in major training sets."
+          "enum": ["NONE", "LOW", "MEDIUM", "HIGH", "UNCHECKED"],
+          "description": "NONE = private/unpublished. LOW = niche/recent. MEDIUM = public but not widely used. HIGH = known to be in major training sets. UNCHECKED = not graded: written by `champollion network register-corpus` when the file could not be compared with the public corpora (no corpora cards, public catalogue unreachable) and no grade was stated. Like every grade but LOW, it keeps a corpus in the relative-comparison-only lane."
         },
         "reasoning": {
           "type": "string",
@@ -678,6 +678,10 @@
       "type": "string",
       "description": "Human-readable reason a card is quarantined (e.g. 'gamayun-parallel builder not yet implemented'). Required whenever quarantine is true so the exclusion is never unexplained."
     },
+    "fixture": {
+      "type": "boolean",
+      "description": "If true, this card is a synthetic SCHEMA FIXTURE (placeholder consent/steward/sha values) kept to exercise the schema. build_registry skips fixture cards loudly: they never enter any registry, so they never reach champollion.dev/registry.json, the harness, or the prod datasets mirror. Pair with quarantine: true and a quarantineReason that says 'fixture'."
+    },
     "transmissionPolicy": {
       "type": "string",
       "enum": ["no-train", "consent-required"],
@@ -710,13 +714,19 @@
     "exposureTier": {
       "type": "string",
       "enum": ["local-only", "private", "public", "sealed"],
-      "description": "Exposure tier chosen by the corpus author at registration (champollion register-corpus). Records the author's intent about how far this corpus travels. 'local-only' = never registered or uploaded — the card and the text stay entirely on the author's machine (cards with this value live OUTSIDE this tracked directory). 'private' = a sovereign / WMT-style held-out set: metadata is registered here but the text is NEVER uploaded or hosted; the author keeps custody (paired with quarantine=true so it is catalogued but not publicly runnable). 'public' = a fetch-from-source pointer + metadata card is published; the text is NEVER hosted by Champollion — it is fetched from source.repo_url on demand by the declared builder. 'sealed' = a community-controlled secret test set encrypted CLIENT-SIDE under the custodian group's threshold key before anything leaves the author's device; Champollion holds only ciphertext (in an off-git store) + a content-free card and cannot decrypt it (no single party can — M-of-N custodian approval is required). Paired with quarantine=true and a 'sealed' block; see the sealed property and docs/governance/OCAP_MULTISIG_PLAN.md. Public is gated by cli/lib/license-gate.mjs: NC / no-redistribute / unconfirmed-license sets may not use the public tier. Champollion never hosts corpus PLAINTEXT in ANY tier. Defaults to the most private tier (local-only) when unspecified.",
+      "description": "Exposure tier chosen by the corpus author at registration (champollion register-corpus). Records the author's intent about how far this corpus travels. 'local-only' = never registered or uploaded — the card and the text stay entirely on the author's machine (cards with this value live OUTSIDE this tracked directory). 'private' = a sovereign / WMT-style held-out set: metadata is registered here but the text is NEVER uploaded or hosted; the author keeps custody (paired with quarantine=true so it is catalogued but not publicly runnable). 'public' = a fetch-from-source pointer + metadata card is published; the text is NEVER hosted by Champollion — it is fetched from source.repo_url on demand by the declared builder. 'sealed' = a community-controlled secret test set encrypted CLIENT-SIDE under the custodian group's threshold key before anything leaves the author's device; Champollion holds only ciphertext (in an off-git store) + a content-free card and cannot decrypt it (no single party can — M-of-N custodian approval is required). Paired with quarantine=true and a 'sealed' block; see the sealed property and the community-custodian multisig plan (docs/governance). Public is gated by cli/lib/license-gate.mjs: NC / no-redistribute / unconfirmed-license sets may not use the public tier. Champollion never hosts corpus PLAINTEXT in ANY tier. Defaults to the most private tier (local-only) when unspecified.",
       "default": "local-only"
     },
 
+    "transmission": {
+      "type": "string",
+      "enum": ["local-only"],
+      "description": "The steward's transmission mark — SEPARATE from the licence. 'local-only' = only a model on the steward's own machine may see the text; every remote model API is refused. Written by `champollion network register-corpus` for a local-only set (and kept when a file it registers was already marked), mirroring the <file>.champollion.json sidecar the harness reads (mt_eval_harness.corpus_loader.read_steward_sidecar). It is not a licence term: license.* says what others may do with the text under its licence; this mark says where the steward lets it travel. Absent = no steward mark (the licence decides which model services may see it)."
+    },
+
     "sealed": {
       "type": ["object", "null"],
-      "description": "Sealed-tier crypto metadata (exposureTier='sealed'). CONTENT-FREE: records how a community-controlled secret test set was encrypted client-side, never the plaintext. The ciphertext lives in an off-git, off-allowlist store; this block only names the cipher suite, the custodian group, the ciphertext digest, and the AAD binding, plus the paired public qualifier a method must clear before a sealed run can be proposed. The decryption key exists only as M-of-N custodian shares — Champollion cannot decrypt. See cli/lib/seal.mjs and docs/governance/OCAP_MULTISIG_PLAN.md (M1).",
+      "description": "Sealed-tier crypto metadata (exposureTier='sealed'). CONTENT-FREE: records how a community-controlled secret test set was encrypted client-side, never the plaintext. The ciphertext lives in an off-git, off-allowlist store; this block only names the cipher suite, the custodian group, the ciphertext digest, and the AAD binding, plus the paired public qualifier a method must clear before a sealed run can be proposed. The decryption key exists only as M-of-N custodian shares — Champollion cannot decrypt. See cli/lib/seal.mjs and the community-custodian multisig plan (docs/governance) (M1).",
       "required": ["cipher", "custodianGroupId", "ciphertextDigest", "aad"],
       "properties": {
         "cipher": {
@@ -782,7 +792,7 @@
           "type": "array",
           "items": {
             "type": "string",
-            "enum": ["OCAP", "CARE", "Te-Mana-Raraunga", "FAIR", "IEEE-2890"]
+            "enum": ["community-ownership-control", "CARE", "Te-Mana-Raraunga", "FAIR", "IEEE-2890"]
           },
           "description": "Data sovereignty frameworks that the data creators or governing body have explicitly invoked. Only list frameworks where there is documented evidence of adoption — do not infer from language vitality, geography, or ethnicity."
         },

package/shared/schemas/human-services.schema.json

@@ -69,7 +69,7 @@
         },
         "sovereignty_flags": {
           "type": ["object", "null"],
-          "description": "Data-handling constraints: off-community processing, attribution requirements, OCAP® notes. Free-form JSON."
+          "description": "Data-handling constraints: off-community processing, attribution requirements, data-sovereignty notes. Free-form JSON."
         },
         "nc_terms": {
           "type": ["string", "null"],
@@ -77,7 +77,7 @@
         },
         "consent_attested": {
           "type": "boolean",
-          "description": "OCAP® consent gate: the provider has explicitly consented to be listed. Public read requires this true."
+          "description": "Consent gate (community control of listing): the provider has explicitly consented to be listed. Public read requires this true."
         },
         "status": {
           "type": "string",

package/shared/schemas/language-card.schema.json

@@ -515,7 +515,7 @@
     },
     "taxonomyNotes": {
       "type": ["string", "null"],
-      "description": "Free-text affordance for known taxonomy disputes affecting this language: cases where ISO 639-3 and Glottolog disagree on splitting/lumping, contested language-vs-dialect status, or naming disputes. Policy (docs/LANGUAGE_TAXONOMY.md): display both authorities' positions, never adjudicate between them; communities name themselves (OCAP). Null when no dispute is documented — null means 'no note recorded', not 'no dispute exists'."
+      "description": "Free-text affordance for known taxonomy disputes affecting this language: cases where ISO 639-3 and Glottolog disagree on splitting/lumping, contested language-vs-dialect status, or naming disputes. Policy (docs/LANGUAGE_TAXONOMY.md): display both authorities' positions, never adjudicate between them; communities name themselves — community ownership and control of language data. Null when no dispute is documented — null means 'no note recorded', not 'no dispute exists'."
     },
     "classification": {
       "type": ["object", "null"],

package/shared/schemas/method-card.schema.json

@@ -389,7 +389,7 @@
           "type": "array",
           "items": {
             "type": "string",
-            "enum": ["OCAP", "CARE", "maori-data-sovereignty", "UNDRIP", "other"]
+            "enum": ["community-ownership-control", "CARE", "maori-data-sovereignty", "UNDRIP", "other"]
           },
           "description": "Data sovereignty frameworks this method respects."
         },

package/shared/schemas/method-index-record.schema.json

@@ -0,0 +1,67 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "$id": "https://champollion.dev/schemas/method-index-record.schema.json",
+  "title": "Champollion Method Index Record",
+  "description": "The public index record of a contest method: a deterministic projection of its bundle manifest (arena/mt_eval_harness/method_index.py) that keeps what the method is, who owns it, under what licence and how it decodes, plus the bundle's sha256 — and drops the contest binding, the qualifier receipt and the developer email. The record's canonical bytes (sorted keys, no whitespace, UTF-8) are minted once, by the harness; a node's signed score manifest carries their sha256 as indexEntrySha256. Consumers verify that sha over the bytes they are given; they never re-serialize.",
+  "type": "object",
+  "required": ["indexRecordVersion", "lane", "method", "owner", "licence", "languagePair", "methodSha256"],
+  "additionalProperties": false,
+  "properties": {
+    "indexRecordVersion": { "const": 1 },
+    "lane": {
+      "type": "string",
+      "enum": ["declarative-model", "method-execution"],
+      "description": "declarative-model = Lane A (weights run by the node's trusted engine, no participant code); method-execution = Lane B (code run in a --network=none sandbox)."
+    },
+    "method": {
+      "type": "object",
+      "required": ["name", "version"],
+      "additionalProperties": false,
+      "properties": {
+        "name": { "type": "string", "minLength": 1 },
+        "version": { "type": "string", "minLength": 1 },
+        "class": { "type": ["string", "null"] },
+        "paradigm": { "type": ["string", "null"] }
+      }
+    },
+    "owner": {
+      "type": "object",
+      "required": ["name"],
+      "additionalProperties": false,
+      "description": "Display identity only. Never an email.",
+      "properties": {
+        "name": { "type": ["string", "null"], "not": { "type": "string", "pattern": "@" } },
+        "affiliation": { "type": ["string", "null"] }
+      }
+    },
+    "licence": { "type": "string", "minLength": 1, "description": "The weights/code licence the participant declared (SPDX id or LicenseRef-*)." },
+    "weightsPublic": { "type": ["boolean", "null"] },
+    "parameterCount": { "type": ["integer", "null"], "minimum": 1 },
+    "track": { "type": ["string", "null"], "enum": ["constrained", "unconstrained", null] },
+    "trainingData": { "type": ["string", "null"], "maxLength": 2000 },
+    "languagePair": {
+      "type": "object",
+      "required": ["source", "target"],
+      "additionalProperties": false,
+      "description": "The pair measured. Index entries are keyed to the variety measured and never compared across test sets.",
+      "properties": {
+        "source": { "type": "string", "minLength": 1 },
+        "target": { "type": "string", "minLength": 1 }
+      }
+    },
+    "methodSha256": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "model": {
+      "type": "object",
+      "description": "Lane A only: the decoding the node's engine applies.",
+      "additionalProperties": false,
+      "properties": {
+        "architecture": { "type": ["string", "null"] },
+        "srcLang": { "type": ["string", "null"] },
+        "tgtLang": { "type": ["string", "null"] },
+        "generation": { "type": "object" }
+      }
+    },
+    "requirements": { "type": "object", "description": "Lane B only: the resources the method declared." },
+    "imageDigest": { "type": ["string", "null"], "description": "Lane B only: the built image the node ran." }
+  }
+}

package/shared/schemas/method-registry.schema.json

@@ -60,6 +60,10 @@
           "description": "When true, ALL credential_env vars must be set for 'ready' — key-pair auth (e.g. AWS access-key id + secret; Lara id + secret). Default false = any one suffices (alias lists). Only meaningful alongside credential_env."
         },
         "default_base_url": { "type": "string" },
+        "keyless": {
+          "type": "boolean",
+          "description": "True when the default endpoint needs no credential at all — a server on the user's own machine (local) or a free public API (apertium). Its env vars only POINT ELSEWHERE, so availability surfaces report it ready with no key set. Hosted APIs with a default_base_url are NOT keyless."
+        },
         "homepage": { "type": "string" },
         "license": { "type": "string" },
         "commercialReady": { "type": "boolean" },

package/shared/schemas/metric-registry.schema.json

@@ -32,6 +32,21 @@
           "decision": { "type": "string", "enum": ["founder-pending", "accepted", "rejected"] }
         }
       }
+    },
+    "_rename_decisions": {
+      "type": "array",
+      "description": "Rename proposals the FOUNDER has already decided, moved out of _proposed_renames with the decision recorded verbatim (dated wording such as KEEP or DEFER, which the pending-proposal enum does not express). Advisory — not consumed by code.",
+      "items": {
+        "type": "object",
+        "required": ["current", "proposal", "impact", "decision"],
+        "additionalProperties": false,
+        "properties": {
+          "current": { "type": "string" },
+          "proposal": { "type": "string" },
+          "impact": { "type": "string" },
+          "decision": { "type": "string", "minLength": 1 }
+        }
+      }
     }
   },
   "$defs": {
@@ -89,7 +104,46 @@
           "type": "boolean",
           "description": "True iff the verifier can deterministically re-derive it from the sha-pinned corpus + stored entries (+ card-pinned FST / pinned neural model under the fail-closed contract). Speed/cost/style metrics are false."
         },
-        "notes": { "type": "string" }
+        "notes": { "type": "string" },
+        "ranking": { "$ref": "#/$defs/ranking" }
+      }
+    },
+    "ranking": {
+      "type": "object",
+      "description": "Present iff a contest may rank on this metric (contests.metadata.primary_metric). Absent = not rankable. Adding a metric to the rankable set is a data change here plus a rankable_metrics row (migration 076 pattern), never a code change.",
+      "required": ["rounding", "ci_columns", "segment_level", "signature"],
+      "additionalProperties": false,
+      "properties": {
+        "rounding": {
+          "type": "integer", "minimum": 0, "maximum": 6,
+          "description": "Display rounding; also the precision of the point-equality tie rung."
+        },
+        "ci_columns": {
+          "description": "The run_cards bootstrap-CI column pair [lower, upper] for the CI-overlap tie rung, or null when the metric has no CI columns.",
+          "oneOf": [
+            { "type": "null" },
+            { "type": "array", "items": { "type": "string" }, "minItems": 2, "maxItems": 2 }
+          ]
+        },
+        "segment_level": {
+          "type": "boolean",
+          "description": "True iff the harness has a corpus function over per-segment rows (significance.py) so a paired test (approximate randomization / paired bootstrap) can compare two entries on this metric."
+        },
+        "retired": {
+          "type": "string",
+          "minLength": 1,
+          "description": "Present iff the metric is RETIRED as a ranking choice for NEW contests (the reason, said to whoever tries). A contest that already recorded it as metadata.primary_metric still ranks on it, labelled legacy; the block stays so the rankable_metrics table (migration 076) keeps its row and existing contests keep passing contest_lifecycle_guard()."
+        },
+        "signature": {
+          "type": "object",
+          "description": "How this metric's computation is identified, so a contest can freeze it as a promise (contests.metadata.metric_signature). sacrebleu: the run card's scores.sacrebleu_signatures[key]; model: the run card's scores[key] (the neural model id) plus the harness version; harness: the harness version alone.",
+          "required": ["kind"],
+          "additionalProperties": false,
+          "properties": {
+            "kind": { "type": "string", "enum": ["sacrebleu", "model", "harness"] },
+            "key": { "type": "string", "minLength": 1 }
+          }
+        }
       }
     }
   }