clearotron 0.3.1-beta.2 → 0.3.1-beta.3

package/driver/publish/render.mjs

@@ -32,7 +32,6 @@ import { registrationSystem } from '../jurisdiction-systems.mjs';
 import { READ_LEAD_RE } from '../report-card-record.mjs';   // D3 — the dedupe gate and the card's acceptance are ONE predicate
 import { REPORT_ROOT, REPORT_ROOT_DARK_EXPLICIT, THEME_INIT_EXPLICIT, FAVICON_LINK, logoLockup, BRAND, confPosture } from '../../shared/brand.mjs';
 import { NAV_CSS } from '../../shared/site-nav.mjs';
-import { mintToken } from '../../shared/scope.mjs';   // mint a scoped read-only USER token for "Ask your AI" (dep-free; no-op fallback when no secret)
 import { isEntrypoint } from "../../shared/is-entrypoint.mjs";   // — realpath both sides, or a symlinked invocation exits 0 silently
 
 const HERE = dirname(fileURLToPath(import.meta.url));
@@ -1745,32 +1744,6 @@ function method(_text) {
 // lawyer signs. The slim internal toolbar that survived it existed ONLY to host the Flag/Etch
 // controls and rendered nothing without them, so took it with them.
 
-// "Ask your AI" launcher (§2.7) — its own collapsible banner under the verdict (a native <details>, default
-// collapsed, no-print). COPY-FIRST, bring-your-own-AI. Same gating as before: rendered only when a mcpUrl is
-// present (internal = shared read-only MCP; client export = OMITTED unless a scoped mcpUrl is given).
-function askAi(fm, { mcpUrl, runId }) {
-  const mark = String(fm.title || fm.matter || 'this mark').trim();
-  const prompt = runId ? `Brief me on trademark clearance run ${runId}.` : `Brief me on the ${mark} trademark clearance.`;
-  const pa = escAttr(prompt);
-  const steps = (label, items) => `<details class="askai-steps"><summary>${label}</summary><ol>${items.map(i => `<li>${i}</li>`).join('')}</ol></details>`;
-  return `<details class="askband no-print">
-    <summary>
-      <div class="askband-ic" aria-hidden="true">💬</div>
-      <div class="askband-main">
-        <div class="askband-title">Ask your AI about this run <span class="askband-exp" aria-hidden="true">▾</span></div>
-        <div class="askband-sub">Connect once and interrogate the findings in the Claude or ChatGPT you already use — read-only.</div>
-      </div>
-    </summary>
-    <div class="askband-body">
-      <button type="button" class="util primary askai-copy" data-copy="${pa}">📋 Copy question</button>
-      <p class="askai-hint">Paste into the Claude or ChatGPT you already use — read-only. New chat: <a href="https://claude.ai/new" target="_blank" rel="noopener">Claude →</a> · <a href="https://chatgpt.com/" target="_blank" rel="noopener">ChatGPT →</a></p>
-      <div class="askai-field"><code class="askai-url">${esc(mcpUrl)}</code><button type="button" class="util askai-copy" data-copy="${escAttr(mcpUrl)}">Copy</button></div>
-      ${steps('Set up Claude <span class="askai-checked">· ✓ Checked 4 September 2026</span>', ['Settings → Connectors → Add custom connector', 'Paste the address above — it already carries your key', 'Set Authentication to None', 'Add. If it warns that authentication is required, that is its own guess — None is correct here'])}
-      ${steps('Set up ChatGPT', ['Settings → Connectors → Advanced → Developer mode', 'Add MCP server, paste the address above', `Sign in when the browser opens (${BRAND.name} email)`])}
-      <p class="askai-hint askai-note">These steps name no button we have not opened ourselves. Your app may word them differently.</p>
-    </div>
-  </details>`;
-}
 
 // Brand :root tokens are sourced from shared/brand.mjs (REPORT_ROOT) and prepended to the
 // report stylesheet, so report.css carries only rules — the palette lives in ONE place across surfaces.
@@ -1808,7 +1781,6 @@ window.addEventListener('hashchange',_cardHashGo);
 window.addEventListener('load',_cardHashGo);
 window.addEventListener('beforeprint',function(){document.querySelectorAll('details').forEach(function(d){d.dataset.o=d.open?'1':'';d.open=true;});});
 window.addEventListener('afterprint',function(){document.querySelectorAll('details').forEach(function(d){d.open=d.dataset.o==='1';});_hidden.forEach(function(c){c.classList.remove('print-hidden');});_hidden=[];});
-document.addEventListener('click',function(e){var cp=e.target.closest('.askai-copy');if(cp){navigator.clipboard&&navigator.clipboard.writeText(cp.getAttribute('data-copy'));}});
 document.addEventListener('click',function(e){var t=e.target.closest('.tb-exp-toggle'),pop=document.querySelector('.tb-exp-pop');if(t){if(pop){pop.hidden=!pop.hidden;t.setAttribute('aria-expanded',String(!pop.hidden));}return;}if(pop&&!pop.hidden&&!e.target.closest('.tb-exp-pop')){pop.hidden=true;var b=document.querySelector('.tb-exp-toggle');if(b)b.setAttribute('aria-expanded','false');}});
 document.addEventListener('keydown',function(e){if(e.key==='Escape'){var pop=document.querySelector('.tb-exp-pop');if(pop&&!pop.hidden){pop.hidden=true;var b=document.querySelector('.tb-exp-toggle');if(b)b.setAttribute('aria-expanded','false');}}});`;
 
@@ -2154,21 +2126,6 @@ export function renderHtml(parsed, findings = [], coverage = [], opts = {}) {
 
   // Excel/audit download — lives inside the topbar Export popover (portal-report strips the link at serve time for non-staff).
   const excelBtn2 = !opts.auditFile ? '' : `<a class="util" href="${esc(opts.auditFile)}" download>⬇ Download full audit (Excel)</a>`;
-  // "Ask your AI" target. Explicit opts.mcpUrl wins. Otherwise the staff surface (CLEAROTRON_MCP_URL), with
-  // a run-scoped read-only token embedded when a secret is configured. ONE report: the document always
-  // carries the staff connector; portal-report.mjs strips the whole block (and redacts any surviving MCP
-  // host) for non-staff readers at serve time — the client's connector path is the portal's own
-  // /portal/api/mcp-access, which needs no baked credential. FAIL CLOSED on a missing env: NO placeholder
-  // host — a forgotten env used to render a mcp.example.com connector that looked configured and resolved
-  // nowhere.
-  let mcpUrl = opts.mcpUrl || '';
-  if (!mcpUrl) {
-    const base = process.env.CLEAROTRON_MCP_URL || '';
-    let tok = '';
-    if (base && opts.runId) { try { tok = mintToken({ scope: 'user', runId: opts.runId }); } catch { tok = ''; } }
-    mcpUrl = base ? (tok ? `${base}?token=${tok}` : base) : '';
-  }
-  const askAiHtml = mcpUrl ? askAi(fm, { mcpUrl, runId: opts.runId }) : '';
 
   const cardFor = f => matchCard(f, cards);
   const recordsByUri = opts.recordsByUri || new Map();   // Instance #6 — the run's _records/ set (publishReport loads it)
@@ -2372,8 +2329,6 @@ ${opts.nav || ''}
     findings.some((f) => (f?.owner?.registrations ?? []).some((r) => r?.uri
       && (recordsByUri.size > 0 || !(r.status || r.filed || r.expiry || (r.classes && r.classes.length))))))}
 
-  ${askAiHtml}
-
   <footer>
     <span>${productName ? `${esc(productName)}. ` : ''}${FRAMEWORK
         // TWO SENTENCES, and that count is the ruled shape rather than a consequence of trimming.

package/driver/publish/templates/report.css

@@ -214,22 +214,6 @@
   details.method[open]>summary::after{content:"▴"}
   .method .mbody{padding:0 22px 20px;font-size:13px;color:var(--slate);line-height:1.62}
 
-  /* Ask-your-AI launcher */
-  .askai{position:relative;display:inline-block}
-  .askai-pop{position:absolute;z-index:30;top:calc(100% + 8px);left:0;width:340px;max-width:88vw;background:var(--card);
-    border:1px solid var(--line2);border-radius:14px;box-shadow:var(--shadow);padding:14px}
-  .askai-hint{font-size:11.5px;color:var(--slate);margin:9px 0 8px;line-height:1.45}
-  .askai-field{display:flex;gap:6px;align-items:center;background:var(--bg2);border-radius:9px;padding:6px 8px;margin-bottom:8px}
-  .askai-url{font-family:var(--mono);font-size:11px;flex:1;min-width:0;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
-  .askai-steps>summary{cursor:pointer;font-size:11.5px;font-weight:700;color:var(--crimson);padding:4px 0;list-style:none}
-  .askai-steps>summary::-webkit-details-marker{display:none}
-  .askai-steps ol{margin:4px 0 8px;padding-left:18px;font-size:11.5px;color:var(--slate)}
-  /* The dated stamp on a set-up recipe we have actually driven. Muted on purpose: the recipe's own
-     summary is crimson and bold, and a stamp that shouted as loudly would read as part of the step. */
-  .askai-steps>summary .askai-checked{font-weight:600;color:var(--slate)}
-  /* The note under BOTH recipes. `.askband-body .askai-hint` zeroes the top margin for the hint that
-     opens the body; this one closes it and needs the gap back. */
-  details.askband .askband-body .askai-note{margin-top:10px}
 
   footer{margin-top:54px;padding-top:20px;border-top:2px solid var(--ink);font-size:12px;color:var(--faint);line-height:1.6;display:flex;justify-content:space-between;gap:20px;flex-wrap:wrap}
   footer .wm{font-size:13px}
@@ -282,19 +266,6 @@
   .rv-tag{font-size:9px;font-weight:700;letter-spacing:.1em;text-transform:uppercase;color:#a06aa3}
   .rv-spacer{flex:1;min-width:16px}
 
-  /* Ask-AI banner (collapsible) */
-  details.askband{display:block;background:var(--card);border:1px solid var(--line);border-left:4px solid var(--crimson);border-radius:14px;padding:16px 18px;margin:20px 0 0;box-shadow:var(--shadow)}
-  details.askband>summary{cursor:pointer;list-style:none;display:flex;gap:14px;align-items:flex-start}
-  details.askband>summary::-webkit-details-marker{display:none}
-  .askband-ic{flex:none;width:38px;height:38px;border-radius:11px;background:var(--high-soft);color:var(--high-tx);display:flex;align-items:center;justify-content:center;font-size:18px}
-  .askband-main{flex:1;min-width:0}
-  .askband-title{font-weight:900;font-size:16px;letter-spacing:-.01em;margin:0 0 3px}
-  .askband-sub{font-size:13px;color:var(--slate);line-height:1.5;margin:0}
-  .askband-exp{display:inline-block;transition:.15s;color:var(--faint);font-size:12px;margin-left:4px}
-  details.askband[open] .askband-exp{transform:rotate(180deg)}
-  details.askband .askband-body{margin-top:12px;padding-left:52px;max-width:560px}
-  details.askband .askband-body .askai-hint{margin-top:0}
-  @media(max-width:560px){details.askband .askband-body{padding-left:0}}
 
   /* cross-region rights-holder rows (.rrow) + secondary region groups (.rgroup) */
   .keypanel{overflow-y:auto}
@@ -334,7 +305,7 @@
   @media (min-width:760px){.rn-why{flex:1 1 46%;min-width:280px}}
 
   @media print{
-    .topbar,.no-print,.review,.askband,.int-note{display:none!important}
+    .topbar,.no-print,.review,.int-note{display:none!important}
     body{background:#fff}
     .panel,.card,.land,.firstUp,.method{box-shadow:none}
     /* Only PURE TOGGLES hide their summary line in print — the drill toggles ("The read" / "Full detail

package/driver/skills/knockout-assess/SKILL.md

@@ -16,7 +16,8 @@ there is no other value: a band that needs sharpening is the band above it, stat
 ## Per mark — the mandatory sequence
 
 1. **Context framing FIRST** (from the plan; correct it only if plainly wrong): coined vs common
-   phrase vs cultural echo — the rating hangs off this.
+   phrase vs cultural echo. It frames what the name READS as, and the evidence bullets draw on it.
+   The band does not: no framing raises or lowers a rating (calibration rule 3, retired).
 2. **Parody / evocation check**: does the name echo a famous mark or property even without identical
    ownership ("Free Range 1s" echoes "Air Force 1s")? Flag it even when nobody owns the echoed form.
 3. **Band per the framework ladder**, applying the calibration rules below.
@@ -58,11 +59,21 @@ there is no other value: a band that needs sharpening is the band above it, stat
    read." It was the only instruction in this seat's context licensing that move, and the readiest
    explanation for a Disney hit rating Very High and an EA hit rating High against a lawyer's Medium and
    Manageable. The rest of the rule stands and is doctrine.)*
-3. **Never rate the lowest band for common English phrases — DO rate it for coined/fanciful terms.**
-   Common word or phrase → second-lowest band minimum even on a clean sweep, plus the purple
-   register-pending note. Coined/invented word with a clean sweep → the lowest band is correct.
-   The test: could a reasonable person use this word in everyday speech without reference to the
-   proposed mark? No → coined. Yes → common phrase → floor applies.
+3. **RETIRED — how ordinary the words are is a note for the reviewing lawyer, never a band.**
+   This forbade the lowest band for a common English phrase and put a floor a band above it. On a
+   scale that ends in Low it kept an everyday name off "no issues found"; on a client scale with no
+   Low band the floor landed one band higher still, and three names went out rated above every
+   conflict card on their own pages — twelve cards, all at the bottom band, under three names a band
+   above them, with nothing on the page to explain it. The reviewing lawyer rated the cards right and
+   the names wrong.
+   **Removed for every client, not only where it misfired** (owner, 2026-09-15). Keeping it on scales
+   that have a Low band was considered and rejected; so was explaining the gap on the report, because
+   a report that explains a wrong rating is still wrong.
+   Say what the words are in the reading — coined, compound, everyday phrase, cultural echo — and let
+   it inform the evidence bullets. It does not set, floor or lift a band. A risk that belongs to the
+   NAME rather than to one user is written as its own `findings[]` record and rated there; Famous
+   Brand and Cultural Reference are already card types for exactly that.
+   *The number is kept and not reused*, for the reason rule 4 gives below.
 4. **RETIRED — the caveat is conditional now, and it is not this file's to state.**
    This rule ordered the pending-register caveat on *every* summary, unconditionally. When the register
    ran and surfaced live filings, that sentence tells a client its ratings are common-law only while the
@@ -77,6 +88,24 @@ there is no other value: a band that needs sharpening is the band above it, stat
    at its "(low)" qualifier.
 7. **Client's prior use mitigates, doesn't eliminate.** Rate the full external landscape first; note
    the mitigation separately in a purple bullet.
+8. **A NAME IS NEVER RATED ABOVE THE WORST CARD ON ITS PAGE.** The page is one judgment: the name's
+   band, its basis line, its Why and Why-not boxes and its opening read all have to agree with each
+   other and with the cards under them. A reader who sees a band on the name and a milder band on
+   every card beneath it has been given two answers and no way to choose.
+   **Cards means every rated item on this name's page** — each `findings[]` record, and each
+   `registerReads[]` row that carries a band. A row with no band is not a card and does not count.
+   **A name with no rated cards takes the bottom band of the client's own ladder.** Nothing was found
+   against it; that is what the bottom band is for. It is not a reason to reach up a band.
+   **Rating BELOW the worst card is allowed and needs a sentence**, because it is a real judgment:
+   the worst card's holder may touch only the edge of the request. Say which card and why it does not
+   carry the name.
+   **Anything that should lift a name is a card of its own** — a famous-mark echo, a cultural
+   reading, a risk that belongs to the NAME rather than to one user. Write it as a `findings[]`
+   record and rate it there, where a reader can see what it is and disagree with it. A band lifted
+   without a card is a conclusion with its evidence left out.
+   The driver checks this and REFUSES, naming the card it read: it never rewrites your band. A
+   corrected band you reasoned is the product; a band a script lowered under prose that still argues
+   for the old one is worse than the defect it replaced.
 
 ## Degraded marks (research unavailable or null — never inflate)
 

package/driver/skills/knockout-frame/SKILL.md

@@ -35,7 +35,8 @@ mark) and the assessment turn; nothing you write here searches anything.
    integers only. Scope expansion is NEVER silent.
 4. **Context framing** per mark (MANDATORY): what does this name read as in THIS context — coined,
    compound, common phrase, cultural echo? ("Coop" = chicken coop for a poultry brand, not a
-   cooperative.) The assessor's rating hangs off this framing.
+   cooperative.) It tells the assessor what the name reads as. It does not set the band — a framing
+   never raises or lowers a rating, and a risk belonging to the name is a finding of its own.
 5. **Prior knowledge** from the request/instructions: anything the forwarder said about a mark
    ("client loves this one", known history) — folded in verbatim, never invented.
 6. **Execution order**: common-word / known-problem marks first (they surface the batch's hard calls

package/driver/skills/prelim-search/risk-framework-triage.md

@@ -23,17 +23,17 @@
 
 ### Manageable
 
-- **Triage read.** Minor findings, no strong claims. Flag major competitors/brand owners if relevant. The floor for any common English phrase.
+- **Triage read.** Minor findings, no strong claims. Flag major competitors/brand owners if relevant.
 
 ### Low
 
-- **Triage read.** No issues found. Available only for coined/fanciful terms (calibration rule 3).
+- **Triage read.** No issues found.
 
 ## Calibration rules (they override gut instinct — reviewer-derived)
 
 1. **Class-specific ratings are mandatory at Medium and above** — "Medium (Classes 9, 25, 28, 41)", never a bare band.
 2. **Crowded field = diluted risk, not amplified** — many small non-enforcing players typically caps risk at Medium.
-3. **Common English phrases never rate Low** (Manageable floor + a purple register-pending note); **coined/fanciful terms CAN be Low**. The test: could a reasonable person use this word in everyday speech without reference to the proposed mark? No → coined → Low available. Yes → common phrase → Manageable floor.
+3. **RETIRED — an everyday name with nothing serious found can reach the bottom band** (owner, 2026-09-15). This read "common English phrases never rate Low"; it decided a band from how ordinary the words were, which no evidence supports and which the clearance lane's own instruction forbids in terms — the applicant's own-mark read is advisory and never moves a band. How ordinary or ownable the words are is a note for the reviewing lawyer. Anything that should lift a name is a finding of its own, rated as one.
 4. **Every rating is pending register overlay** — the standing caveat rides every summary.
 5. **Enforcer profiling matters** at Medium+ — portfolio brand? opposition history? institutional filer? "No assertive enforcers" can cap a Medium at "Medium (low)".
 6. **Client's prior use mitigates, never overrides** — rate the full external landscape first; note the mitigation in a purple bullet.

package/driver/stages.mjs

@@ -3042,7 +3042,7 @@ export const STAGES = {
       // therapeutic-goods discipline, no-use ≠ safety (pipelines run 5-10y), practitioner/pharmacist
       // confusion. Conditional read (frameworkFor pattern); doctrine TABLES live elsewhere, untouched.
       reads(synthesisSkillReads({ profile, job })),
-      `Produce the joint synthesis narrative (dominant-element spine, cross-pollination Option-D cap N=10, actual-use check, owner workup on high-risk findings, rate each conflict net of merits defences UNDER THE FRAMEWORK YOU JUST READ — state the likelihood of confusion in plain words, then give the band those words require under the framework's own definitions (the prose and the band are one judgment and may not disagree), coverage honesty).`,
+      `Produce the joint synthesis narrative (dominant-element spine, cross-pollination Option-D cap N=10, actual-use check, owner workup on high-risk findings, rate each conflict net of merits defences UNDER THE FRAMEWORK YOU JUST READ — state the likelihood of confusion in plain words, then give the band those words require under the framework's own definitions (the prose and the band are one judgment and may not disagree), coverage honesty). WHERE THE MATTER RATIFIED MORE THAN ONE FORM OF THE NAME — a second spelling the instruction told you to read as a variant of the same candidate — REASON EACH FORM THROUGH THE FRAMEWORK ON ITS OWN, then say in the narrative which conflicts move between them and why, naming the form each read belongs to. A conflict that turns on one form exactly is not the same exposure for the other, and a reader choosing between the forms cannot act on a single undifferentiated read. Where every conflict lands the same on both, say so in one line — "the reads are the same for both forms" — as an asserted finding rather than a silence: a reader must be able to tell a matter where the forms do not differ from one where nobody looked. This changes the NARRATIVE and nothing about the report's shape: one overall band as today, and never a second one.`,
       // — the prose rung. Empty on a one-country run, and `lines` drops it.
       proseRungDirective(depth, framework?.bands ?? null),
       // doc 50 — THE RATING AUTHORITY: the framework read above (the customer's own, or the Generic default)
@@ -3702,7 +3702,7 @@ export const STAGES = {
       `Hand the shell back by calling the \`record_report_overview\` tool. There is no file to write and no front-matter to type: the driver renders the shell — every front-matter key it already holds, the \`# Actions\` section and the optional \`# Methodology\` note — from the values you send, and assembles the cards around it. Do NOT author any \`## <owner> — <MARK>\` card and do not think about a \`# Marks\` heading; each card is rendered separately. Risk scoring is unchanged.`,
       // TRANSFORM, NOT FREE-GENERATION (Fix B1 — carried from main's report-synthesis): the shell RESHAPES the
       // settled synthesis, it never re-derives. Applied here to overall_caption + # Actions.
-      `TRANSFORM, NOT FREE-GENERATION: overall_caption and # Actions draw ONLY on the settled synthesis narrative ${P.narrative} (and findings.json ${P.findings}) — introduce NO finding, owner, or claim that is not already there, NEVER re-compute a band, and never let a claim outrun its evidence (a verified-from-record fact stays fact; an inferred-from-signal claim reads AS an inference — "on the available signals…" — never flattened to bald fact).`,
+      `TRANSFORM, NOT FREE-GENERATION: overall_caption and # Actions draw ONLY on the settled synthesis narrative ${P.narrative} (and findings.json ${P.findings}) — introduce NO finding, owner, or claim that is not already there, NEVER re-compute a band, and never let a claim outrun its evidence (a verified-from-record fact stays fact; an inferred-from-signal claim reads AS an inference — "on the available signals…" — never flattened to bald fact). WHERE THE SETTLED NARRATIVE REASONED MORE THAN ONE RATIFIED FORM OF THE NAME, CARRY ITS PER-FORM READ THROUGH — the overall_caption says which form the decisive conflicts turn on, or that the reads are the same for both, in the narrative's own words. Do not flatten two reads into one undifferentiated statement: that loses the distinction the client ratified both forms to get. This is a transform of what the narrative already settled, not a second rating, and the band is unchanged — one overall band as today.`,
       // — the D2 case-law line is RETIRED HERE (it stays on `report-card`, which is where
       // enforcement-history and opposition-likelihood are actually written). Two reasons, and the second
       // is the general one:

package/driver/suite-census.json

@@ -471,6 +471,12 @@
           "skips": 1,
           "todos": 0
         },
+        "a-name-is-never-rated-above-its-worst-card.test.mjs": {
+          "tests": 4,
+          "asserts": 15,
+          "skips": 0,
+          "todos": 0
+        },
         "a-name-the-wizard-returns-is-a-setup-name.test.mjs": {
           "tests": 5,
           "asserts": 9,
@@ -2439,9 +2445,15 @@
           "skips": 0,
           "todos": 0
         },
+        "giving-access-to-everything-is-a-switch-not-a-point.test.mjs": {
+          "tests": 1,
+          "asserts": 4,
+          "skips": 0,
+          "todos": 0
+        },
         "grant-command.test.mjs": {
           "tests": 19,
-          "asserts": 75,
+          "asserts": 76,
           "skips": 0,
           "todos": 0
         },
@@ -3142,8 +3154,8 @@
           "todos": 0
         },
         "portal-service.test.mjs": {
-          "tests": 124,
-          "asserts": 673,
+          "tests": 127,
+          "asserts": 683,
           "skips": 1,
           "todos": 0
         },
@@ -3665,7 +3677,7 @@
         },
         "render.test.mjs": {
           "tests": 154,
-          "asserts": 630,
+          "asserts": 632,
           "skips": 0,
           "todos": 0
         },
@@ -4377,6 +4389,12 @@
           "skips": 0,
           "todos": 0
         },
+        "taking-access-away-is-the-editor-that-gave-it.test.mjs": {
+          "tests": 9,
+          "asserts": 30,
+          "skips": 0,
+          "todos": 0
+        },
         "teardown-leaves-nothing-claimable.test.mjs": {
           "tests": 4,
           "asserts": 19,
@@ -4815,6 +4833,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-people-page-can-change-and-remove-a-person.test.mjs": {
+          "tests": 16,
+          "asserts": 80,
+          "skips": 0,
+          "todos": 0
+        },
         "the-person-who-installs-is-a-person-not-a-domain.test.mjs": {
           "tests": 18,
           "asserts": 86,
@@ -5151,6 +5175,12 @@
           "skips": 0,
           "todos": 0
         },
+        "two-ratified-forms-get-reasoned-apart.test.mjs": {
+          "tests": 7,
+          "asserts": 17,
+          "skips": 0,
+          "todos": 0
+        },
         "two-word-annotated-variant-is-refused.test.mjs": {
           "tests": 6,
           "asserts": 21,
@@ -5450,6 +5480,18 @@
           "skips": 0,
           "todos": 0
         },
+        "a-removed-person-loses-their-assistant-too.test.mjs": {
+          "tests": 4,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
+        "a-run-list-names-its-client.test.mjs": {
+          "tests": 4,
+          "asserts": 29,
+          "skips": 0,
+          "todos": 0
+        },
         "account-audit-chain.test.mjs": {
           "tests": 10,
           "asserts": 46,
@@ -5720,6 +5762,12 @@
           "skips": 0,
           "todos": 0
         },
+        "the-portal-can-tell-who-has-connected-an-assistant.test.mjs": {
+          "tests": 10,
+          "asserts": 28,
+          "skips": 0,
+          "todos": 0
+        },
         "token-door-boot.test.mjs": {
           "tests": 7,
           "asserts": 8,
@@ -5744,8 +5792,8 @@
           "todos": 0
         },
         "askAi.test.ts": {
-          "tests": 5,
-          "asserts": 12,
+          "tests": 11,
+          "asserts": 34,
           "skips": 0,
           "todos": 0
         },
@@ -5815,6 +5863,12 @@
           "skips": 0,
           "todos": 0
         },
+        "decodePersonCarriesEveryField.test.ts": {
+          "tests": 4,
+          "asserts": 17,
+          "skips": 0,
+          "todos": 0
+        },
         "effortModelParity.test.ts": {
           "tests": 7,
           "asserts": 31,
@@ -5865,7 +5919,7 @@
         },
         "home.test.ts": {
           "tests": 51,
-          "asserts": 169,
+          "asserts": 177,
           "skips": 0,
           "todos": 0
         },
@@ -5941,6 +5995,12 @@
           "skips": 0,
           "todos": 0
         },
+        "oneHeaderPerPage.test.ts": {
+          "tests": 4,
+          "asserts": 15,
+          "skips": 0,
+          "todos": 0
+        },
         "ownerNames.test.ts": {
           "tests": 9,
           "asserts": 23,
@@ -5977,6 +6037,12 @@
           "skips": 0,
           "todos": 0
         },
+        "proseIsStrippedOnce.test.ts": {
+          "tests": 3,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "readiness.test.ts": {
           "tests": 6,
           "asserts": 19,
@@ -6062,8 +6128,8 @@
           "todos": 0
         },
         "useYourAI.test.ts": {
-          "tests": 13,
-          "asserts": 41,
+          "tests": 12,
+          "asserts": 38,
           "skips": 0,
           "todos": 0
         },

package/driver/verify-knockout.mjs

@@ -668,12 +668,70 @@ export function validateMergedFindings(runDir, merged, plan) {
     // would put a field in the artifact the stage never emitted.
     try { const ranked = validateKnockoutFindings(m.findings, { manifest }); if (Array.isArray(m.findings)) m.findings = ranked; }
     catch (e) { failures.push(`mark "${m.name}": ${e.message}`); }
+    const above = markRatedAboveItsCards(manifest, m);
+    if (above) failures.push(above);
   }
   const receipts = knockoutReceipts(runDir, marks);
   failures.push(...receipts.failures);
   return { ok: failures.length === 0, failures, receipts: receipts.checked };
 }
 
+// ── A NAME IS NEVER RATED ABOVE THE WORST CARD ON ITS PAGE ───────────────────────────────────────────
+//
+// Three names went out rated a band above every conflict card on their own pages. Twelve cards across
+// the three, all at the client's bottom band; three names a band above them; nothing on any page
+// explaining the gap. The reviewing lawyer read the cards as right and the names as wrong.
+//
+// Nothing tied the two together. The name's band is the model's own `rating` and no check compared it
+// with the bands underneath it — a gap the full clearance does not have, where the headline is computed
+// from the worst live finding. The doctrine that produced the lift (the everyday-words floor) is retired
+// in this change; this is the floor under it, so the same shape cannot arrive by another route.
+//
+// IT REFUSES AND ASKS AGAIN. It never lowers the band itself, and that restraint is the point: a page
+// whose badge a script moved while its basis line still argues for the old band gives a reader a
+// Manageable chip over a Medium argument, which is worse than the defect. The corrective ladder this
+// failure list feeds re-dispatches the mark with the reason, and the model reasons the band again.
+//
+// A CARD IS A RATED ITEM ON THIS NAME'S PAGE — a `findings[]` record, or a `registerReads[]` row that
+// carries a band. A register row's band is optional by design (a read with no band prints no chip), so
+// a row without one is not a card and does not count; including it would invent a floor out of silence.
+// There is no withdrawn state on a knockout finding — that is the clearance lane's concept and it does
+// not exist here, so nothing is filtered for it. Whoever brings it over adds the filter with it.
+//
+// RATING BELOW THE WORST CARD STAYS ALLOWED. It has happened, and the one that was checked was reasoned
+// — the worst card's holder touched only the edge of the request. This refuses one direction only.
+//
+// INDEX 0 IS THE WORST BAND, as `worstBand` below says in its own comment, so "above" is a SMALLER
+// index. Written the other way round this check would pass on the exact production run it was written
+// for and fire on correct ones; the arms assert the direction against a real four-band ladder rather
+// than trusting this sentence.
+const cardBands = (m) => [
+  ...(Array.isArray(m?.findings) ? m.findings : []).map((f) => f?.band),
+  ...(Array.isArray(m?.registerReads) ? m.registerReads : []).map((r) => r?.band),
+].filter((b) => b != null && String(b).trim());
+
+export function markRatedAboveItsCards(framework, m) {
+  const ladder = ladderOf(framework);
+  if (!ladder.length) return null;                       // no frozen ladder — the band checks above own that
+  const mine = bandIdx(ladder, m?.rating);
+  if (mine < 0) return null;                             // an unknown band is knockout_band_unknown's to name
+  const idxs = cardBands(m).map((b) => bandIdx(ladder, b)).filter((i) => i >= 0);
+  // NO CARDS, NOTHING TO BE ABOVE — and the code stops here deliberately.
+  //
+  // The doctrine says a name with nothing found against it takes the bottom band, and that belongs in
+  // the reasoning where it is written (calibration rule 8). Enforcing it HERE would be a second rule in
+  // code: a floor that forces a band down, which is what the ruling forbids in terms — "do not replace
+  // the removed rule with another floor, cap or word list. The two rulings are the whole requirement."
+  //
+  // The first draft of this function did enforce it, and the e2e batch is what said so: a mark with no
+  // cards, correctly rated Manageable on a five-band ladder, was refused because the bottom of that
+  // ladder is Low. That is the retired rule's own shape — a band decided by something other than the
+  // evidence on the page — arriving from the opposite direction.
+  if (!idxs.length) return null;
+  const worst = Math.min(...idxs);
+  return mine < worst ? `knockout_rating_above_cards:${m?.name}: rated "${m?.rating}", above every card on its page — the worst is "${ladder[worst]}". Rate the name from its cards, or write the risk that lifts it as a finding of its own and rate it there. Rating BELOW the worst card is allowed and wants a sentence saying which card does not carry the name.` : null;
+}
+
 // worst band across the batch, in the frozen ladder's own order (index 0 = worst)
 export function worstBand(framework, marks) {
   const ladder = ladderOf(framework);

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,12 @@
 # trademark-artifacts-mcp
 
+## 0.3.1-beta.3
+
+### Patch Changes
+
+- 56a760f: Fixed: Removing somebody's access now ends their assistant's connection on its next request. Until now an assistant that had already connected kept the access it started with for up to half an hour.
+- c05e0a7: Fixed: Ask your assistant for a client's recent searches by the client's name and it finds them. Every search in the list now says which client it was for, and which project. A search whose own record cannot be read says so, instead of appearing to belong to nobody.
+
 ## 0.3.1-beta.2
 
 ### Patch Changes

package/mcp-server/lib/audit.mjs

@@ -6,7 +6,7 @@
 // name + runId/uri), never the full request body or any artifact content. Best-effort: a write failure must
 // never break a request.
 
-import { appendFileSync, mkdirSync, existsSync } from "node:fs";
+import { appendFileSync, mkdirSync, existsSync, statSync, openSync, readSync, closeSync } from "node:fs";
 import { dirname, join } from "node:path";
 import { homedir } from "node:os";
 
@@ -40,9 +40,102 @@ export function summarize(body) {
   return out;
 }
 
-export function appendAudit({ email, sub, body, status, path = DEFAULT_AUDIT_PATH }) {
+export function appendAudit({ email, sub, body, status, transport, path = DEFAULT_AUDIT_PATH }) {
   // `sub` = the inner-token PRINCIPAL (ops-token issuance, INSTALL.md §8) — distinguishes
   // two automations sharing a transport identity. null for internal/user sessions without a sub claim.
-  const line = JSON.stringify({ ts: new Date().toISOString(), email: email ?? null, sub: sub ?? null, ...summarize(body), status: status ?? null }) + "\n";
+  //
+  // `transport` is written only where it changes an answer: "stdio" marks a call that arrived over the
+  // local route, which has no signed-in identity to record and therefore no email. Omitted on the HTTP
+  // doors, whose records are identified by the email they already carry.
+  const line = JSON.stringify({ ts: new Date().toISOString(), email: email ?? null, sub: sub ?? null, ...summarize(body), status: status ?? null, ...(transport ? { transport } : {}) }) + "\n";
   try { mkdirSync(dirname(path), { recursive: true }); appendFileSync(path, line); } catch { /* best-effort */ }
 }
+
+// ── READING THE LOG BACK ────────────────────────────────────────────────────────────────────────────
+//
+// The portal asks one question of this log: has this reader's assistant ever called a connector on this
+// installation? It is the only signal either process has — enrolment says a person MAY connect, not that
+// they DID — and the Ask-AI control on a report is drawn from the answer.
+//
+// THE PORTAL MUST NOT COMPUTE THIS PATH ITSELF. `DEFAULT_AUDIT_PATH` resolves at import, in the writing
+// process, from that process's `TRADEMARK_MCP_AUDIT_LOG` and its `homedir()`. A reader that re-ran that
+// branch would be the portal-reads-the-connector's-environment defect in a new place. It agrees today —
+// on every shipped shape the portal and the connector are units of the SAME login reading the SAME
+// `%h/.env`, and the override name is set nowhere — but `existsSync(LEGACY_AUDIT_PATH)` is evaluated at
+// import in two processes that start at different times, so a legacy file appearing between those two
+// imports would give them different answers with nothing in either log to say so.
+//
+// So: read BOTH candidates and take the union. A reader that has connected appears in one of them; which
+// one is not a question worth asking, and asking it is the part that can be wrong.
+
+/**
+ * Every file a connector on this installation could be appending to.
+ *
+ * AN OVERRIDE IS AN ANSWER, NOT A PREFERENCE. `TRADEMARK_MCP_AUDIT_LOG` exists to relocate this log, and
+ * `appendAudit` writes there and nowhere else — so a reader that went on to consult the default homes
+ * would report readers from a log the connector on this box is not writing to. It is only where the name
+ * is UNSET that there are two candidates to union, because that is the only case where the two processes
+ * resolve it themselves.
+ */
+export function auditPaths() {
+  const override = String(process.env.TRADEMARK_MCP_AUDIT_LOG ?? "").trim();
+  if (override) return [override];
+  const seen = new Set();
+  const out = [];
+  for (const p of [LEGACY_AUDIT_PATH, join(homedir(), "trademark", "telemetry", "trademark-mcp-access.jsonl")]) {
+    if (!seen.has(p)) { seen.add(p); out.push(p); }
+  }
+  return out;
+}
+
+const TAIL_BYTES = 256 * 1024;
+
+/**
+ * Who has called a connector on this installation, from the tail of the access log.
+ *
+ * BOUNDED AND FALLIBLE BY DESIGN. The log is append-only and unrotated, so it is read from the end and
+ * never whole; `truncated` says the window did not reach the start of the file. A reader further back
+ * than the window reads as absent, which is the same answer as a reader who has genuinely never called,
+ * and the control's own escape ("Already connected? Ask anyway") is what makes that survivable.
+ *
+ * `available: false` IS NOT "NOBODY HAS CONNECTED". No log, an unreadable one, a directory where a file
+ * should be — every one of those is a could-not-look, and a caller that renders it as "never connected"
+ * is asserting something it did not measure. It is returned separately so a caller can say so.
+ */
+export function readConnections({ paths = auditPaths(), maxBytes = TAIL_BYTES } = {}) {
+  const emails = new Set();
+  let local = false;
+  let available = false;
+  let truncated = false;
+  const notes = [];
+
+  for (const path of paths) {
+    let fd = null;
+    try {
+      const size = statSync(path).size;
+      fd = openSync(path, "r");
+      const from = size > maxBytes ? size - maxBytes : 0;
+      if (from > 0) truncated = true;
+      const buf = Buffer.allocUnsafe(size - from);
+      readSync(fd, buf, 0, buf.length, from);
+      available = true;
+      const lines = buf.toString("utf8").split("\n");
+      // A window that starts mid-file starts mid-line: that first fragment is not a record.
+      if (from > 0) lines.shift();
+      for (const line of lines) {
+        if (!line.trim()) continue;
+        let rec = null;
+        try { rec = JSON.parse(line); } catch { continue; }
+        if (!rec || typeof rec !== "object") continue;
+        if (typeof rec.email === "string" && rec.email.trim()) emails.add(rec.email.trim().toLowerCase());
+        if (rec.transport === "stdio") local = true;
+      }
+    } catch (e) {
+      if (e?.code !== "ENOENT") notes.push(`${path}: ${e?.code ?? e?.message ?? e}`);
+    } finally {
+      if (fd !== null) { try { closeSync(fd); } catch { /* best-effort */ } }
+    }
+  }
+
+  return { available, emails, local, truncated, note: notes.length ? notes.join("; ") : null };
+}