clearotron 0.3.0-beta.1 → 0.3.0-beta.2

package/driver/publish/office-record-links.mjs

@@ -131,7 +131,6 @@ export function recordLinksFor(findings, recordsByUri, provider) {
   if (!VENDORS_WITHOUT_RECORD_PAGES.includes(clean(provider).toLowerCase())) return null;
   const byUri = new Map();
   const tally = { linked: {}, cited: {}, notRetrieved: 0 };
-  const bump = (o, k) => { o[k] = (o[k] ?? 0) + 1; };
   for (const f of Array.isArray(findings) ? findings : []) {
     for (const r of f?.owner?.registrations ?? []) {
       const key = clean(r?.uri).toLowerCase();
@@ -140,17 +139,26 @@ export function recordLinksFor(findings, recordsByUri, provider) {
       if (!rec) { byUri.set(key, null); tally.notRetrieved += 1; continue; }
       const link = officeRecordLink(rec, key);
       byUri.set(key, link);
-      if (link.href) bump(tally.linked, link.office);
-      else bump((tally.cited[link.office] ??= {}), link.reason);
+      tallyLink(tally, link);
     }
   }
+  return { byUri, tally, summary: summaryOf(tally, `record not retrieved ${tally.notRetrieved}`) };
+}
+
+const bump = (o, k) => { o[k] = (o[k] ?? 0) + 1; };
+function tallyLink(tally, link) {
+  if (link.href) bump(tally.linked, link.office);
+  else bump((tally.cited[link.office] ??= {}), link.reason);
+}
+
+/** The log line for a tally: how many were linked and how many cited by number, per office and reason. */
+function summaryOf(tally, tail) {
   const sum = (xs) => xs.reduce((a, b) => a + b, 0);
   const linked = Object.entries(tally.linked).map(([o, n]) => `${o} ${n}`).join(", ");
   const cited = Object.entries(tally.cited).flatMap(([o, rs]) => Object.entries(rs).map(([r, n]) => `${o} ${n} ${r}`)).join(", ");
-  const summary = `linked ${sum(Object.values(tally.linked))}${linked ? ` (${linked})` : ""}`
+  return `linked ${sum(Object.values(tally.linked))}${linked ? ` (${linked})` : ""}`
     + ` · cited by number ${sum(Object.values(tally.cited).flatMap((rs) => Object.values(rs)))}${cited ? ` (${cited})` : ""}`
-    + ` · record not retrieved ${tally.notRetrieved}`;
-  return { byUri, tally, summary };
+    + ` · ${tail}`;
 }
 
 const nameOf = (office) => OFFICE_RECORD_PAGES[office]?.name ?? office.toUpperCase();
@@ -174,6 +182,26 @@ export function officeReasonSentences(byUri) {
   });
 }
 
+/**
+ * What a linked registration number opens, when one is linked, then the reasons per office, as the
+ * knockout says them under its listed filings. They are the sentences the clearance says in Scope; its
+ * renderer is frozen (render-frozen.test.mjs) and keeps its own copy of the first.
+ */
+export function officeLinkSentences(byUri) {
+  if (!(byUri instanceof Map)) return [];
+  const linked = [...byUri.values()].some((l) => l?.href);
+  return [...(linked ? ["A registration number shown as a link opens the office’s own page for that record."] : []),
+    ...officeReasonSentences(byUri)];
+}
+
+/** Why a registration is cited by number rather than linked, in the workbook's words. */
+export function reasonCellFor(link) {
+  const name = nameOf(link.office);
+  if (link.reason === "no-page") return `No page for a single record at this register (${name}); cited by number`;
+  if (link.reason === "unknown-office") return `No page address held for this register (${name}); cited by number`;
+  return `Number not in the form this register's page address takes (${name}); cited by number`;
+}
+
 /** The workbook's Link cell for a finding: its first linked registration, else the first stated reason. */
 export function linkCellFor(registrations, byUri) {
   if (!(byUri instanceof Map)) return "";
@@ -182,8 +210,31 @@ export function linkCellFor(registrations, byUri) {
   if (linked) return linked.href;
   const first = links[0];
   if (!first) return "";
-  const name = nameOf(first.office);
-  if (first.reason === "no-page") return `No page for a single record at this register (${name}); cited by number`;
-  if (first.reason === "unknown-office") return `No page address held for this register (${name}); cited by number`;
-  return `Number not in the form this register's page address takes (${name}); cited by number`;
+  return reasonCellFor(first);
+}
+
+/**
+ * A knockout's listed filings, each addressed at its office's page, for a listing taken on a register
+ * with no record pages of its own. `doc` is register-records.json, and each filing that carries an office
+ * number gains an `officeLink` in place, as normalizeRegisterRecordLinks rewrites links in place, so the
+ * report, the workbook and report-data.json all state the same link. Returns null for any other
+ * register, whose filings render exactly as before.
+ *
+ * A FILING WITH NO OFFICE NUMBER IS LEFT AS IT WAS, and shows as it always did. Every listing taken
+ * before the numbers were kept is that case, so an archived knockout republishes unchanged. An
+ * `officeLink` found already on the sidecar is dropped first: the link is set here, from the numbers, and
+ * nowhere else.
+ */
+export function addressListedFilings(doc) {
+  const records = (doc?.marks ?? []).flatMap((m) => m?.records ?? []).filter((r) => r && typeof r === "object");
+  for (const r of records) delete r.officeLink;
+  if (!VENDORS_WITHOUT_RECORD_PAGES.includes(clean(doc?.provider).toLowerCase())) return null;
+  const tally = { linked: {}, cited: {}, noNumber: 0 };
+  for (const r of records) {
+    const link = officeRecordLink(r, r.recordId);
+    if (!link?.label) { tally.noNumber += 1; continue; }
+    r.officeLink = link;
+    tallyLink(tally, link);
+  }
+  return { tally, summary: summaryOf(tally, `no office number ${tally.noNumber}`) };
 }

package/driver/publish/render-knockout.mjs

@@ -45,6 +45,7 @@ import {
 import { SUMMARY_BLOCK_LINE, parseSummaryBlocks } from '../../shared/summary-blocks.mjs';
 import { COUNT_BASIS, COUNT_PREDICATES, countsForMark, countLine, variantFormsLine } from '../register-count.mjs';
 import { RECORD_BASIS, recordsForMark, recordsLine } from '../register-records.mjs';
+import { officeLinkSentences } from './office-record-links.mjs';
 import { knockoutFindingViews, splitKnockoutNotes } from '../findings-model.mjs';
 import { demoBannerHtml } from './render.mjs';   // — the SAME banner the clearance template renders, not a second wording
 // — the two facts the register card is allowed to read off a raw record, and NEITHER is minted
@@ -78,6 +79,16 @@ const isHttpUrl = (u) => /^https?:\/\//i.test(String(u ?? '').trim());
 // beside it — noopener severs window.opener, noreferrer withholds the run's URL from the evidence host.
 const linkOrText = (u) => (isHttpUrl(u) ? `<a href="${escAttr(u)}" target="_blank" rel="noopener noreferrer">${esc(u)}</a>` : esc(u));
 
+// A listed filing's record as its office publishes it, where the run's register has no page of its own:
+// publish sets `officeLink` from the filing's own numbers (office-record-links.mjs). The label is the
+// office and the number, linked where the office has a page. The handle names the vendor's record, not
+// the office's, and a reader can look it up nowhere. A filing with no number shows `fallback`, as before.
+const officeRecordCell = (r, fallback) => {
+  const l = r?.officeLink;
+  if (!l?.label) return fallback;
+  return l.href ? `<a href="${escAttr(l.href)}" target="_blank" rel="noopener noreferrer">${esc(l.label)}</a>` : esc(l.label);
+};
+
 // Minimal inline markdown, escaped FIRST. The old renderer ran esc() and nothing else, so a batch
 // summary reading `BRIMSTONE rates **High (Classes 9, 28, 41)**.` rendered its asterisks verbatim —
 // the model writes markdown because every other surface it feeds renders markdown.
@@ -189,7 +200,6 @@ const KO_CSS = `
   /* The reviewer-notes legend. NOT .ko-legend — that name is taken by the framework attribution row
      above, and reusing it would restyle the caption. It names the purple convention report.css already
      draws for .internal, so the colour is stated once and never re-specified. */
-  .ko-refnote{margin:0;padding:11px 24px 0;font-size:12px;color:#6a2b6e;font-style:italic}
   /* The notes sit inside a mark's column, so the shared .internal block's bullets keep the column's
      own list indent and do not fight the paragraph above them. */
   .ko-row .internal .ko-bul{margin:0 0 4px}
@@ -603,7 +613,7 @@ function filingsSection(marks, registerRecords) {
       <td>${esc(r.status ?? '—')}</td>
       <td>${esc((r.classes ?? []).join(', ') || '—')}</td>
       <td>${esc(r.territory ?? '—')}</td>
-      <td class="ko-findev">${r.url ? linkOrText(r.url) : esc(r.recordId ?? '—')}</td>
+      <td class="ko-findev">${officeRecordCell(r, r.url ? linkOrText(r.url) : esc(r.recordId ?? '—'))}</td>
     </tr>`).join('');
     // "First N" WAS TRUE AND IS NOT ANY MORE, and saying it of a ranked table would be worse than the
     // cap: it invites the reader to take the sample for the top of the provider's list. Say the count
@@ -620,7 +630,15 @@ function filingsSection(marks, registerRecords) {
       <p class="ko-basis">${esc(line ?? '')}${esc(more)}</p>
     </div>`;
   }).join('');
-  return `<div class="panel ko-glance">${blocks}<p class="ko-basis">${esc(RECORD_BASIS)}</p></div>`;
+  return `<div class="panel ko-glance">${blocks}<p class="ko-basis">${esc(RECORD_BASIS)}${officeLinkNote(registerRecords)}</p></div>`;
+}
+
+// Once, under the filings: what a linked number opens and, per office, why the rest are cited by number.
+// The clearance's own sentences, said once for the reason it says them once: a note repeated beside every
+// filing reads as a broken report. Empty unless a filing carries an office number.
+function officeLinkNote(registerRecords) {
+  const links = (registerRecords?.marks ?? []).flatMap((m) => m?.records ?? []).map((r) => r?.officeLink).filter(Boolean);
+  return officeLinkSentences(new Map(links.map((l, i) => [i, l]))).map((s) => ` ${esc(s)}`).join('');
 }
 
 // The tier-absence line ( part 2). A knockout whose product bought no register step used to render
@@ -1069,7 +1087,6 @@ function sourceChips(v) {
 // already defines — the same one the clearance report uses for this material — so a reader can see whose
 // voice a line is in. Merging them into the client-voiced body would make the reviewer's asides read as
 // findings about the mark, which is the one way this ruling could produce a worse document.
-const REVIEWER_NOTES_LEGEND = 'Purple notes are for the reviewing lawyer. Remove them before this goes to the client.';
 
 // The clearance lane's own label, copied rather than re-worded. One spelling across
 // both products is the point: a reader who has seen it on a clearance report knows what it means here.
@@ -1155,7 +1172,7 @@ function registerFindingBlock(v, markIndex, reads = null, framework = null, owne
   const useCheckSource = useCheck?.source ?? null;
   const meta = [r.owner ? esc(r.owner) : 'proprietor not stated', r.territory ? esc(r.territory) : null]
     .filter(Boolean).join(' · ');
-  const receipt = isHttpUrl(r.url) ? linkOrText(r.url) : esc(r.recordId ?? 'no record address supplied');
+  const receipt = officeRecordCell(r, isHttpUrl(r.url) ? linkOrText(r.url) : esc(r.recordId ?? 'no record address supplied'));
   return `<div class="card ko-find" data-ko-mark="${Number(markIndex)}" data-ko-ord="${Number(v.ordinal)}">
         <div class="top">
           <div class="rail" style="background:var(${stop ?? '--faint'})"></div>
@@ -1425,12 +1442,12 @@ function analysisSection(marks, framework, { registerCounts = null, probeRan = f
       </div>
     </div>`;
   }).join('');
-  // The legend rides the panel and only when a note is actually on it — a standing sentence explaining a
-  // colour no reader can see would be the report describing a convention it did not use.
-  const anyNotes = marks.some((m) => (Array.isArray(m?.purpleNotes) ? m.purpleNotes : [])
-    .some((n) => String(n ?? '').trim()));
-  const legend = anyNotes ? `<p class="ko-refnote">${esc(REVIEWER_NOTES_LEGEND)}</p>` : '';
-  return `<div class="panel ko-glance">${legend}${cards}</div>`;
+  // NO LEGEND. A standing line saying "remove these before this goes to the client" was an instruction
+  // to the reader printed on the document itself, and the owner ruled it out: a report that explains its
+  // own conventions in a caveat is telling the reader how to handle it rather than what was found. The
+  // notes and their "For the reviewing lawyer" label stay — that label names a reader, which is a fact
+  // about the note; the legend told somebody what to do about it, which is not.
+  return `<div class="panel ko-glance">${cards}</div>`;
 }
 
 // The method line names EXACTLY what ran, and its wording is doctrine — with counts on the page, "register
@@ -1885,6 +1902,9 @@ export function knockoutReportData(findings, framework, { runId, codename, overa
               mark: r.mark, owner: r.owner, status: r.status, classes: r.classes ?? [],
               territory: r.territory, matchedForm: r.matchedForm, matchedBasis: r.matchedBasis,
               recordId: r.recordId, url: r.url,
+              // The office's page for the filing, or its office and number and why it is not a link: the
+              // report's own cell, as data. Only where the run's register has no record pages of its own.
+              ...(r.officeLink ? { officeRecord: { label: r.officeLink.label, href: r.officeLink.href, reason: r.officeLink.reason } } : {}),
             })),
             // Which searches did NOT answer, by name. A consumer that lists only `records` would report
             // a partial listing as a complete one.

package/driver/publish/xlsx.mjs

@@ -283,7 +283,7 @@ export function searchRows(auditParsed, { findings = [], joinedTerms = null, reg
 
   const rows = [];
   let i = 0;
-  const push = r => rows.push({ '#': ++i, ...r });
+  const push = r => rows.push({ '#': ++i, ...r, Result: readerWords(r.Result), Note: readerWords(r.Note) }); // plain words, after each branch below has classified its row from the engine's own
 
   if (reg.length) {
     push({ 'Search term / variant': 'REGISTER  —  vendor register, worldwide', Scope: '', Result: '', Outcome: '', Note: '', _section: true });
@@ -640,6 +640,38 @@ export async function buildAudit(contract, auditParsed, outPath, mark = '', fm =
   };
 }
 
+// READER_WORDS — the plain word a reader of "What was searched" gets in place of each engine word BANNED
+// names. That sheet's Result and Note cells carry the search log's own prose, model-authored and already
+// written on every archived run, so the words are put right where each row is written (`push` in
+// `searchRows()`) instead of being left to the advisory gate. The gate still runs; a hit on this sheet is
+// now a name, or a word this table is missing.
+//
+// Lower case only. In these cells a capitalised or upper-case word is a name — a mark, an owner, a
+// platform — and a rewritten name misstates what was searched, so names stay as written. HTTP keeps to
+// that rule with one exception, which is never a name: before a status code it goes in any case, so
+// "provider-rejected (HTTP 429)" reads "provider-rejected (429)" while a mark called HTTP HOUSE keeps its
+// name. A web address loses its scheme in any case and keeps its host and path. has_more is plainNote's.
+//
+// Kept down here, below every line the rest of the tree cites in this file by number.
+export const READER_WORDS = Object.freeze({
+  receipt: 'record', receipts: 'records',
+  lint: 'check', tripwire: 'check', tripwires: 'checks',
+  composite: 'combined', scatter: 'chart', cache: 'stored copy',
+  quadrant: 'position', quadrants: 'positions', coordinate: 'position', coordinates: 'positions',
+  meter: 'measure', meters: 'measures',
+});
+const READER_WORD = new RegExp(`\\b(?:${Object.keys(READER_WORDS).join('|')})\\b`, 'gi');
+
+function readerWords(s) {
+  return String(s ?? '')
+    .replace(/\bhttps?:\/\//gi, '')
+    .replace(/\bhttps?\s+(?=\d{3}\b)/gi, '')
+    .replace(/\bhttps?\b\s*/g, '')
+    .replace(READER_WORD, (w) => (w === w.toLowerCase() ? READER_WORDS[w] : w))
+    .replace(/\s+/g, ' ')
+    .trim();
+}
+
 /**
  * validateAudit — the build gate. Reads the assembled workbook back and asserts the spec's MUST-BE-TRUE list.
  * Returns { ok, violations[] }. Exported so tests assert the same contract the build enforces.

package/driver/register-records.mjs

@@ -143,6 +143,12 @@ function toRecord(row, { term, basis, provider }) {
     territory,
     applicationDate: row?.application_date ?? null,
     registrationDate: row?.registration_date ?? null,
+    // The office's own numbers, where the provider hands them over. On a register with no record pages of
+    // its own, publish addresses the office's page for the filing from these (office-record-links.mjs).
+    applicationNumber: row?.application_number ?? null,
+    registrationNumber: row?.registration_number ?? null,
+    irNumber: row?.ir_number ?? null,
+    filingRoute: row?.filing_route ?? null,
     // WHICH QUESTION FOUND IT. Without this a reader cannot tell a filing on the name from a filing on
     // a generated variant, and the two mean very different things to the person deciding on the name.
     matchedForm: term,

package/driver/run-requirements.mjs

@@ -186,7 +186,7 @@ export function missingRequirements(env = {}, tables = {}) {
  *
  * Returns null when nothing blocks, so a caller cannot mistake "configured" for "could not look".
  */
-export function orderTimeRefusal(env = {}, tables = {}, { envFile = null, readFile = null } = {}) {
+export function orderTimeRefusal(env = {}, tables = {}, { envFile = null, readFile = null, startFile = null } = {}) {
   const missing = missingRequirements(env, tables).atOrder;
   if (!missing.length) return null;
   const names = missing.map((r) => r.name);
@@ -197,12 +197,21 @@ export function orderTimeRefusal(env = {}, tables = {}, { envFile = null, readFi
   // was told to create a file nothing on that box reads — and the one actually read went unnamed.
   // `readFile` is the file THIS process loaded at start; it is null under a unit, where the unit's own
   // EnvironmentFile is the only configuration and `envFile` alone is the true answer.
+  //
+  // AND A RUNNER THAT `clearotron start` STARTED READ NO FILE EITHER. The supervisor read the install's own
+  // file and handed its values down with CLEAROTRON_NO_ENV_FILE=1, so `readFile` is null there exactly as
+  // it is under a unit, and this sentence named the units' file: on a box with no units, a file that does
+  // not exist, while the file the values came from went unnamed. Measured on a fresh install, 2026-09-10.
+  // `startFile` is the file that supervisor read. It reaches the runner as a command-line flag that a unit's
+  // fixed ExecStart never carries, so it is set exactly when `clearotron start` is the parent.
   const cmd = "`clearotron install` in a terminal, which writes them for you";
   const both = readFile && envFile && readFile !== envFile;
   const one = readFile || envFile;
   const where = both
     ? ` Set them in either of these — both reach a run:\n      ${readFile} — the file this runner read when it started\n`
       + `      ${envFile} — the file background units read\n  then restart, or run ${cmd}.`
+    : !readFile && startFile
+      ? ` Set them in ${startFile} — the file \`clearotron start\` read when it started this runner — then restart it, or run ${cmd}.`
     : one
       ? ` Set them in ${one} and restart, or run ${cmd}.`
       : " Run `clearotron install` in a terminal to configure them, or set them in the file this install's units read.";
@@ -217,3 +226,17 @@ export function orderTimeRefusal(env = {}, tables = {}, { envFile = null, readFi
       + "nothing has been charged. Please contact whoever administers it.",
   };
 }
+
+// THE ENV FILE `clearotron start` READ, when it started this runner: the one file a refusal can honestly
+// name for a runner that read none itself (`startFile` above). A command-line flag rather than a variable,
+// for two reasons. A unit's ExecStart is fixed at `--watch` and never carries it, so a runner holding it
+// was started by that command. And a variable read by product code belongs in the environment catalogue,
+// which describes settings an operator makes, and this is not one. `bin/start.mjs` puts it on the
+// worker's command line, and `driver/runner.mjs` reads it off its own.
+export const START_ENV_FILE_FLAG = "--start-env-file=";
+
+/** The path `argv` carries in `--start-env-file=<path>`, or null when it carries none or an empty one. PURE. */
+export function startEnvFileOf(argv = []) {
+  const flag = argv.find((t) => String(t).startsWith(START_ENV_FILE_FLAG));
+  return flag ? flag.slice(START_ENV_FILE_FLAG.length) || null : null;
+}

package/driver/runner.mjs

@@ -27,8 +27,8 @@ import { driverDir, ensureDriverDir } from "../shared/driver-dir.mjs";   // —
 // claim-sidecar names, because a harness check retyped four of them from memory and false-alarmed on the
 // other nine. Behaviour here is unchanged: the same object and the same three suffixes, sourced.
 import { isLiveQueueMarker, PROSE_PARTS, CLAIM_SIDECAR_SUFFIXES, TERMINAL_QUEUE_SUFFIXES } from "./queue-markers.mjs";
-import { matterLedgerPath } from "./usage-ledger.mjs";   // ONE ledger-path calculation, shared with the portal pre-check
-import { orderTimeRefusal } from "./run-requirements.mjs";   // one authority for what a run needs, and when it is asked for
+import { matterLedgerPath, DEFAULT_CLIENT_DAILY_RUNS } from "./usage-ledger.mjs";   // ONE ledger-path calculation, shared with the portal pre-check
+import { orderTimeRefusal, START_ENV_FILE_FLAG, startEnvFileOf } from "./run-requirements.mjs";   // one authority for what a run needs, and when it is asked for
 import { unitEnvPath, envFileRead } from "../shared/env-local.mjs";   // the file the units read, named by its one author
 import { fileURLToPath } from "node:url";
 import { config, preflightDeploymentUrls } from "./driver.config.mjs";
@@ -235,7 +235,11 @@ function recordMatter(qdir, entry) {
 // which reads as the product being broken rather than as a fair-use wall. The risk this exists to stop is
 // unbounded spend by an unconfigured account, and 20 stops that just as completely. It is the DEFAULT, so
 // any account that needs a different number says so in its own runCaps block.
-export const DEFAULT_CLIENT_DAILY_RUNS = 20;
+//
+// ONE DECLARATION. The number lives in usage-ledger.mjs, the leaf a request path imports without pulling
+// the runner in, and is re-exported here for the gate and its tests. Two declarations held equal by a
+// test is how the screen comes to advertise one allowance while the gate enforces another.
+export { DEFAULT_CLIENT_DAILY_RUNS };
 
 export function checkRunCaps({ account, caps, queueDirs, inHandTagged = true, now = Date.now(), clientRun = false, organisation = null }) {
   // GENERIC IS CAPPED LIKE ANY COMPANY, one lane per organisation (ruling 2026-09-10: "every
@@ -768,6 +772,7 @@ async function backstopFailureNotice({ res, job, agentId, base, codename, studio
 // WHAT IT MUST NEVER DO is what F41 did: fail at the first stage and tell the client "Clearotron has
 // been notified" on a box with no outbox. `failAtIntake` writes the honest refusal and the run never
 // starts, so nothing is spent and nothing is promised.
+
 let __runTables = null;
 async function runTables() {
   // AT CALL TIME, never a static import. `driver/run-requirements.mjs`'s header states the reason and it
@@ -856,7 +861,7 @@ async function claimAndPrep(jsonFile, qdir, agentId) {
   }
   // ── IS THIS BOX CONFIGURED TO SEARCH AT ALL? See the header above claimAndPrep.
   {
-    const refusal = orderTimeRefusal(process.env, await runTables(), { envFile: unitEnvPath(), readFile: envFileRead() });
+    const refusal = orderTimeRefusal(process.env, await runTables(), { envFile: unitEnvPath(), readFile: envFileRead(), startFile: startEnvFileOf(process.argv) });
     if (refusal) {
       note(`[runner] ${base} REFUSED at order time — this install is not configured to run a search: ${refusal.names.join(", ")}`);
       await failAtIntake(procPath, qdir, base, agentId, job,
@@ -2404,7 +2409,7 @@ if (isEntrypoint(import.meta.url)) {
   // the exact silence this whole change exists to remove. (pipeline.mjs's RETIRED_FLAGS table makes the same
   // argument about a switch that degrades quietly into whatever the remaining arguments mean.)
   const argv = process.argv.slice(2);
-  const unknown = argv.filter((t) => t !== "--watch");
+  const unknown = argv.filter((t) => t !== "--watch" && !t.startsWith(START_ENV_FILE_FLAG));   // the second is start's own, see startEnvFileOf
   if (unknown.length) {
     console.error(`error: unknown argument ${unknown[0]}\nusage: node runner.mjs [--watch]\n  --watch  keep polling instead of draining once — the substitute for the systemd .path/.timer units\n           on a machine that has none. Without it this drains the queue once and exits, which is what\n           systemd invokes.`);
     process.exit(2);

package/driver/skills/knockout-assess/SKILL.md

@@ -310,7 +310,7 @@ line, which describes the card and claims nothing about the rating. So:
                "degraded": null } ] }
 ```
 
-**The finding record — closed keys, all eight, no others.** A key this list does not name is refused
+**The finding record — closed keys, all nine, no others.** A key this list does not name is refused
 (the validator is `findings-model.mjs validateKnockoutFinding`, and it runs at the chunk and again on
 the merged artifact):