clearotron 0.3.2-beta.10 → 0.3.2-beta.12

package/portal-ui/dist/assets/{index-CtvwLCti.css → index-7Lq-dXDV.css}

@@ -254,19 +254,19 @@ html.anon-on [data-anon='mark']:not(.anon-clear) {
   border-bottom: 1px solid var(--border-hairline);
 }
 
-/* THE HEADER'S SECOND ROW: which read you are in, then where you are inside it.
+/* THE HEADER'S LOWER ROWS: which read you are in, then where you are inside it.
    The Reads strip used to sit BELOW this box and the report's own section breadcrumb inside the frame,
    so neither stayed on screen — the frame is sized to its content, which leaves a `position:sticky` bar
    in there pinned to nothing. Both are rows of the pinned header now (owner, 2026-09-18).
-   It scrolls sideways rather than wrapping to a third line: a header that grows taller with the number of
-   sections is a header that eats the document it is heading. */
-.report-nav {
-  display: flex; align-items: center; gap: 10px; margin-top: 9px;
+   THE SECTIONS HAVE A ROW OF THEIR OWN, UNDER THE READS (owner, 2026-09-19). Side by side, sixteen reads
+   wrapped into two ragged columns while the strip floated beside them at mid-height. The reads wrap; the
+   sections scroll sideways rather than wrapping, so the strip stays one line however narrow the screen. */
+.report-nav { display: flex; flex-direction: column; align-items: stretch; gap: 8px; margin-top: 9px; }
+.report-sections {
+  display: flex; align-items: center; gap: 2px;
   overflow-x: auto; scrollbar-width: none;
 }
-.report-nav::-webkit-scrollbar { display: none; }
-.report-nav-sep { flex: none; width: 1px; align-self: stretch; background: var(--border-hairline); }
-.report-sections { display: flex; align-items: center; gap: 2px; }
+.report-sections::-webkit-scrollbar { display: none; }
 .report-section {
   flex: none; display: inline-flex; align-items: center; gap: 7px; white-space: nowrap;
   font: inherit; font-size: 12.5px; font-weight: 600; letter-spacing: .01em;
@@ -277,8 +277,11 @@ html.anon-on [data-anon='mark']:not(.anon-clear) {
 .report-section-dot {
   width: 8px; height: 8px; border-radius: 50%; border: 1.5px solid currentColor; box-sizing: border-box;
 }
+/* PROGRESS: every section reached has a filled dot, the rest stay hollow; the one in view also sits on
+   the sunken pill, so it can be told from the ones behind it. */
+.report-section[data-reached='true'] { color: var(--text-strong); }
+.report-section[data-reached='true'] .report-section-dot { background: var(--accent); border-color: var(--accent); }
 .report-section[aria-current='true'] { color: var(--text-strong); background: var(--surface-sunken); }
-.report-section[aria-current='true'] .report-section-dot { border-color: var(--accent); border-width: 3px; }
 
 /* The breadcrumb above it: one step back as a quiet button, then where the reader is. Compound selectors
    throughout this block, because the button and row rules they adjust are declared later in the file. */

package/portal-ui/dist/assets/{index-DXSRxPV_.js → index-w8GFZftk.js}

@@ -18201,11 +18201,15 @@ function readFrameSections(data, sameSource) {
 	const out = [];
 	for (const raw of msg.sections) {
 		if (typeof raw !== "object" || raw === null) continue;
-		const { id, label } = raw;
+		const { id, label, top } = raw;
 		if (typeof id !== "string" || typeof label !== "string") continue;
 		const trimmed = label.trim().slice(0, 40);
 		if (!id.trim() || !trimmed) continue;
-		out.push({
+		out.push(typeof top === "number" && Number.isFinite(top) && top >= 0 ? {
+			id,
+			label: trimmed,
+			top: Math.round(top)
+		} : {
 			id,
 			label: trimmed
 		});
@@ -18213,6 +18217,16 @@ function readFrameSections(data, sameSource) {
 	}
 	return out;
 }
+function sectionsReached(sections, line, where) {
+	if (where.atTop) return 0;
+	if (where.atFoot) return sections.length;
+	let n = 0;
+	for (const s of sections) {
+		if (typeof s.top !== "number" || s.top > line) break;
+		n += 1;
+	}
+	return n;
+}
 function readFrameTheme(data, sameSource) {
 	if (!sameSource) return null;
 	if (typeof data !== "object" || data === null) return null;
@@ -18243,6 +18257,8 @@ function usePortalTheme() {
 	}, []);
 	return theme;
 }
+var TOPBAR_PX = 56;
+var LANDING_PX = 10;
 function useReportFrame() {
 	const ref = (0, import_react.useRef)(null);
 	const [height, setHeight] = (0, import_react.useState)(FIRST_PAINT);
@@ -18276,7 +18292,7 @@ function useReportFrame() {
 			if (jump !== null) {
 				if (frame) {
 					const head = document.querySelector(".report-head");
-					const chrome = 56 + (head instanceof HTMLElement ? head.offsetHeight : 48) + 10;
+					const chrome = TOPBAR_PX + (head instanceof HTMLElement ? head.offsetHeight : 48) + LANDING_PX;
 					const y = frame.getBoundingClientRect().top + window.scrollY + jump - chrome;
 					window.scrollTo({
 						top: Math.max(0, y),
@@ -18478,10 +18494,45 @@ function Result({ ctx, runId, markSlug }) {
 	const run = (0, import_react.useMemo)(() => runs.find((r) => r.runId === runId) ?? null, [runs, runId]);
 	const reads = (0, import_react.useMemo)(() => run ? readsFor(runs, run) : [], [runs, run]);
 	const frame = useReportFrame();
-	const [atSection, setAtSection] = (0, import_react.useState)(null);
+	const [reached, setReached] = (0, import_react.useState)(0);
+	const sectionList = frame.sections;
+	const frameRef = frame.ref;
 	(0, import_react.useEffect)(() => {
-		setAtSection(null);
-	}, [runId, markSlug]);
+		if (!sectionList || sectionList.length < 2) {
+			setReached(0);
+			return;
+		}
+		let queued = false;
+		const measure = () => {
+			queued = false;
+			const el = frameRef.current;
+			if (!el) return;
+			const head = document.querySelector(".report-head");
+			const lineOnScreen = (head instanceof HTMLElement ? head.getBoundingClientRect().bottom : TOPBAR_PX) + LANDING_PX + 2;
+			const where = {
+				atTop: document.documentElement.scrollHeight > window.innerHeight + 2 && window.scrollY <= 0,
+				atFoot: window.innerHeight + window.scrollY >= document.documentElement.scrollHeight - 2
+			};
+			setReached(sectionsReached(sectionList, lineOnScreen - el.getBoundingClientRect().top, where));
+		};
+		const later = () => {
+			if (!queued) {
+				queued = true;
+				requestAnimationFrame(measure);
+			}
+		};
+		measure();
+		window.addEventListener("scroll", later, { passive: true });
+		window.addEventListener("resize", later);
+		return () => {
+			window.removeEventListener("scroll", later);
+			window.removeEventListener("resize", later);
+		};
+	}, [
+		sectionList,
+		frame.height,
+		frameRef
+	]);
 	const grouped = run !== null && showsAssessment(run, markSlug);
 	const { result: summaryResult } = useLoad(() => grouped ? api.runSummary(runId) : Promise.resolve({ kind: "notFound" }), [runId, grouped]);
 	const assessment = summaryResult?.kind === "ok" ? summaryResult.value : [];
@@ -18612,70 +18663,60 @@ function Result({ ctx, runId, markSlug }) {
 					]
 				}), hasThread(reads) || (frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsxs)("div", {
 					className: "report-nav",
-					children: [
-						hasThread(reads) ? (0, import_jsx_runtime.jsxs)("div", {
-							style: {
-								display: "flex",
-								gap: 8,
-								flexWrap: "wrap",
-								alignItems: "center"
-							},
-							children: [(0, import_jsx_runtime.jsx)("span", {
-								className: "eyebrow",
-								style: { alignSelf: "center" },
-								children: "Reads"
-							}), reads.map((r) => {
-								const active = r.runId === run.runId;
-								return (0, import_jsx_runtime.jsxs)("button", {
-									type: "button",
-									className: "pill",
-									"aria-current": active ? "true" : void 0,
-									onClick: () => ctx.go(resultPath(r.runId)),
+					children: [hasThread(reads) ? (0, import_jsx_runtime.jsxs)("div", {
+						style: {
+							display: "flex",
+							gap: 8,
+							flexWrap: "wrap",
+							alignItems: "center"
+						},
+						children: [(0, import_jsx_runtime.jsx)("span", {
+							className: "eyebrow",
+							style: { alignSelf: "center" },
+							children: "Reads"
+						}), reads.map((r) => {
+							const active = r.runId === run.runId;
+							return (0, import_jsx_runtime.jsxs)("button", {
+								type: "button",
+								className: "pill",
+								"aria-current": active ? "true" : void 0,
+								onClick: () => ctx.go(resultPath(r.runId)),
+								style: {
+									cursor: "pointer",
+									display: "inline-flex",
+									alignItems: "center",
+									gap: 7,
+									background: active ? "var(--accent-wash)" : "var(--surface-sunken)",
+									borderColor: active ? "var(--accent)" : "var(--border-hairline)",
+									color: active ? "var(--text-accent)" : "var(--text-muted)"
+								},
+								children: [r.tone ? (0, import_jsx_runtime.jsx)("span", {
+									className: "dot",
 									style: {
-										cursor: "pointer",
-										display: "inline-flex",
-										alignItems: "center",
-										gap: 7,
-										background: active ? "var(--accent-wash)" : "var(--surface-sunken)",
-										borderColor: active ? "var(--accent)" : "var(--border-hairline)",
-										color: active ? "var(--text-accent)" : "var(--text-muted)"
-									},
-									children: [r.tone ? (0, import_jsx_runtime.jsx)("span", {
-										className: "dot",
-										style: {
-											background: `var(--tone-${r.tone})`,
-											width: 7,
-											height: 7
-										}
-									}) : null, readLabel(r)]
-								}, r.runId);
-							})]
-						}) : null,
-						hasThread(reads) && (frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsx)("span", {
-							className: "report-nav-sep",
-							"aria-hidden": "true"
-						}) : null,
-						(frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsx)("nav", {
-							className: "report-sections",
-							"aria-label": "Sections of this report",
-							children: (frame.sections ?? []).map((sec, i) => {
-								const now = atSection === null ? i === 0 : atSection === sec.id;
-								return (0, import_jsx_runtime.jsxs)("button", {
-									type: "button",
-									className: "report-section",
-									"aria-current": now ? "true" : void 0,
-									onClick: () => {
-										setAtSection(sec.id);
-										frame.send("section", sec.id);
-									},
-									children: [(0, import_jsx_runtime.jsx)("span", {
-										className: "report-section-dot",
-										"aria-hidden": "true"
-									}), sec.label]
-								}, sec.id);
-							})
-						}) : null
-					]
+										background: `var(--tone-${r.tone})`,
+										width: 7,
+										height: 7
+									}
+								}) : null, readLabel(r)]
+							}, r.runId);
+						})]
+					}) : null, (frame.sections?.length ?? 0) > 1 ? (0, import_jsx_runtime.jsx)("nav", {
+						className: "report-sections",
+						"aria-label": "Sections of this report",
+						children: (frame.sections ?? []).map((sec, i) => {
+							return (0, import_jsx_runtime.jsxs)("button", {
+								type: "button",
+								className: "report-section",
+								"data-reached": i < reached ? "true" : void 0,
+								"aria-current": i === reached - 1 ? "true" : void 0,
+								onClick: () => frame.send("section", sec.id),
+								children: [(0, import_jsx_runtime.jsx)("span", {
+									className: "report-section-dot",
+									"aria-hidden": "true"
+								}), sec.label]
+							}, sec.id);
+						})
+					}) : null]
 				}) : null]
 			}),
 			frame.failed ? (0, import_jsx_runtime.jsxs)("div", {

package/portal-ui/dist/index.html

@@ -49,8 +49,8 @@
     -->
     <link rel="preconnect" href="https://api.fontshare.com" crossorigin />
     <link href="https://api.fontshare.com/v2/css?f[]=satoshi@400,500,700,900&display=swap" rel="stylesheet" />
-    <script type="module" crossorigin src="/portal/assets/index-DXSRxPV_.js"></script>
-    <link rel="stylesheet" crossorigin href="/portal/assets/index-CtvwLCti.css">
+    <script type="module" crossorigin src="/portal/assets/index-w8GFZftk.js"></script>
+    <link rel="stylesheet" crossorigin href="/portal/assets/index-7Lq-dXDV.css">
   </head>
   <body>
     <div id="root"></div>

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.3.2-beta.10",
+  "version": "0.3.2-beta.12",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/jx/README.md

@@ -4,14 +4,14 @@ Three pure modules, **one non-agentic structured turn each, per mark × lane**,
 configured for. Not an agent: no tools, no MCP, no skills, no resume — one prompt in, one JSON object out,
 validated at parse.
 
-## What these lanes ARE, and what runs them ( /)
+## What these lanes are, and what runs them
 
 **One vendor, one billing mode, decided by the run and not by this directory.** The lanes go through
 `engine.runTurn()` — the same door all fourteen agentic stages use — via
 [`../../driver/engine/jx-turn.mjs`](../../driver/engine/jx-turn.mjs). Whatever program the customer configured
 (`CLEAROTRON_AI`) and whatever billing mode the run is on (subscription, API key or, for Claude, a cloud account)
 carries these calls too.
-That is the owner's standing rule — *one LLM provider only ever, API or auth, no mix* — and until 2026-08-20
+That is the product's rule — *one reasoning provider per run, API or subscription, never a mix* — and until 2026-08-20
 these three lanes were the one place in the product that broke it: they POSTed to the Anthropic Messages API on
 `ANTHROPIC_API_KEY` at a hardcoded cheap tier no matter what the rest of the run was doing.
 

package/providers/jx-subclass/README.md

@@ -72,7 +72,7 @@ class 44) and `351918` (cosmetics retail, class 35). A class-3 search finds neit
 goods that have a Nice basic number (609), so validating a relation's target group against it would drop
 real relations without a word. The authority is `tw/tw-group-codes.json`, taken from TIPO's group headers.
 
-## Korea — done, and round-2 research had the mechanism wrong
+## Korea
 
 KIPO publishes 「유사상품 심사기준(니스 제13판)」 as a direct download: **21.8 MB, 1,011 pages, full text
 layer** (`kpoContFileDown.do?seq=30&fileNum=25`, Referer header required).

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,13 @@
 # trademark-oauth-mcp-bridge
 
+## 0.3.2-beta.12
+
+No changes in this release.
+
+## 0.3.2-beta.11
+
+No changes in this release.
+
 ## 0.3.2-beta.10
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.3.2-beta.10",
+  "version": "0.3.2-beta.12",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/scripts/README.md

@@ -13,7 +13,7 @@ The axis is *what the script assumes exists*, not where it happens to be run.
 | Script | What it does |
 |---|---|
 | `test-run.mjs` | Gives a test run its own `TMPDIR` and deletes it at exit. **Load-bearing** — every workspace's `npm test` shells out to it, so `scripts/` can never be dropped wholesale. |
-| `render-check.mjs` | Renders a published report **inside the portal's iframe** in a real browser — the height bridge, the scrollbar loop, the sticky topbar. Needs a published run: point it at a pool with `--pool`, or pass `--fixture-pool` to replay `demo/` into a throwaway one. **Runs nowhere yet** — but its three interior assertions now MEASURE, deterministically: real time plus an explicit readiness signal, and `--plant-overflow` proves it still catches a broken report. What is left is a membership decision, not a defect.. |
+| `render-check.mjs` | Renders a published report **inside the portal's iframe** in a real browser — the height bridge, the scrollbar loop, the sticky topbar. Needs a published run: point it at a pool with `--pool`, or pass `--fixture-pool` to replay `demo/` into a throwaway one. Run by CI on a fixture pool. Its interior assertions measure deterministically: real time plus an explicit readiness signal, and `--plant-overflow` proves it still catches a broken report. |
 | `home-render-check.mjs` | Draws the portal Home in a real browser, every state, both themes. Run by CI. |
 | `composer-render-check.mjs` | Lays out the New Clearance composer and checks the levers reach the wire. Run by CI. |
 | `clearances-render-check.mjs` | Checks the `/portal/clearances` columns hold together. Run by CI. |
@@ -80,15 +80,10 @@ settling on the first try every time, and the slack figures that looked like a l
 147px against a 15-24 band) turned out to be the stale probe too. The sandbox is byte-identical to
 `Result.tsx`'s and `allow-same-origin` was never added.
 
-**It is still not in CI, and that is now a decision rather than a defect** — nobody has run it on a
-runner since the rewrite, and wiring a blocking browser step on the strength of one developer box is the
-mistake the membership guard exists to stop. That call is 's.
-
-Read the other six with that in mind: they are outer-document measurements — does the page scroll, is
-the header pinned, is Export reachable — and every one would pass against **an iframe that loaded
-nothing**, because the frame is styled to a fixed height. A green from this check would have meant
-almost nothing. The step is backed out and the script is declared, with the measurement, rather than
-quietly dropped.
+**CI runs it**, on a pool replayed from `demo/` into a throwaway directory:
+`node scripts/render-check.mjs --fixture-pool`. Its outer-document assertions — does the page scroll, is
+the header pinned, is Export reachable — would pass against an iframe that loaded nothing, because the
+frame is styled to a fixed height; the interior ones above are what make a green mean something.
 
 **Which check runs where is now checked, not just written here.** A test in the driver suite
 reads `.github/workflows/ci.yml` and requires every `scripts/*-check.mjs` to be either invoked by a job

package/scripts/ask-ai-render-check.mjs

@@ -133,6 +133,10 @@ let deck = 'connected'
 // travels the real injected script to the real listener. Two cards at fixed places: a numbered finding,
 // and an "Also considered" card, which carries the button and no number.
 let reportDoc = 'stub'
+// A SLOW RUNNER, ON DEMAND. The finding's document is held back this long before it is served, which is
+// how a CI runner that loaded it late is reproduced: the press below has to wait for the document, not
+// for a fixed time. Zero, the default, serves it at once.
+const FRAME_DELAY_MS = Number(process.env.ASK_AI_CHECK_FRAME_DELAY_MS ?? 0) || 0
 const FINDING_DOC = () => prepareReportForEmbed(`<!doctype html><html><head><meta charset="utf-8"><title>report</title></head>
 <body style="margin:0;font-family:sans-serif;background:#fff;height:400px">
 <div class="card" id="c3" style="position:absolute;top:40px;left:20px"><div class="cardhead"><span class="fnum">3</span>
@@ -159,7 +163,8 @@ const server = createServer((req, res) => {
   // the height a published report's bridge announces, so the header draws the Export menu a reader meets.
   if (p.startsWith('/portal/report/') && reportDoc === 'finding') {
     res.writeHead(200, { 'content-type': 'text/html' })
-    return res.end(FINDING_DOC())
+    const doc = FINDING_DOC()
+    return FRAME_DELAY_MS ? setTimeout(() => res.end(doc), FRAME_DELAY_MS) : res.end(doc)
   }
   if (p.startsWith('/portal/report/')) {
     res.writeHead(200, { 'content-type': 'text/html' })
@@ -433,9 +438,29 @@ const arrived = await value(PROBE)
 // null origin and the point is the whole path — the injected script hears the press, posts it, and the
 // report screen opens its control. The cards sit at fixed places in the document, so the frame's own
 // position on the page is all that has to be measured.
+// READY, NOT A FIXED WAIT. The press lands on a finding's button, and it does something only once the
+// document in the frame has loaded and its bridge is listening. A fixed pause after navigating was not
+// always that on a CI runner: the press arrived first and opened nothing (measured on beta-12, 2026-09-19,
+// with no change to the portal or the bridge since a green run). The bridge posts the document's height
+// from the same script that listens for the press, so a frame that has left its first-paint height has a
+// listener. The Ask AI control must be on the header too, since the press opens it. Both are waited for,
+// and the frame's place must hold still across two reads, so the press is aimed where the button is.
+const FIRST_PAINT = Number(/export const FIRST_PAINT = (\d+)/.exec(readFileSync(join(DIST, '..', 'src', 'contract', 'reportFrame.ts'), 'utf8'))?.[1] ?? NaN)
+const frameReady = async () => {
+  let last = null
+  for (let i = 0; i < 200; i++) {
+    const now = await value(`(() => { const f = document.querySelector('iframe'); if (!f || !document.querySelector('[data-ask-ai] > button')) return null;
+      const r = f.getBoundingClientRect(); return Math.round(r.top) + ':' + Math.round(r.height) })()`)
+    if (now && now === last && !now.endsWith(`:${FIRST_PAINT}`)) return true
+    last = now
+    await new Promise((r) => setTimeout(r, 100))
+  }
+  return false
+}
 const pressInFrame = async (top) => {
   await value('(() => { window.scrollTo(0, 0); return true })()')
   await new Promise((r) => setTimeout(r, 200))
+  if (!(await frameReady())) return false
   const at = await value(`(() => { const f = document.querySelector('iframe'); if (!f) return null; const r = f.getBoundingClientRect(); return { x: r.left, y: r.top } })()`)
   if (!at) return false
   const x = Math.round(at.x + 140), y = Math.round(at.y + top + 16)

package/scripts/citation-line-check.mjs

@@ -79,10 +79,10 @@ export const EXEMPT_TARGETS = [
   { target: /^driver\/(x|a|f|nope)\.mjs$/, why: "planted names in contract-audit.test.mjs — the test feeds the auditor a citation to a file that does not exist ON PURPOSE" },
   { target: /^driver\/skills\/[ab]\/(rules|SKILL)\.md$/, why: "planted skill paths in contract-audit.test.mjs, same shape" },
   { target: /^planted\//, why: "THE NAMESPACE for a fixture path that must not exist. publication-scrub.test.mjs plants an undeclared path to prove the scrubber sees it, and cut-vendor-keys.test.mjs plants one to prove the record-key detector reports a location. Unlike the namespaced entries below, this one is deliberately shared: `planted/` names the class rather than one test's fixtures, so a new test planting a non-existent path uses it instead of inventing a second convention — and a bare invented name is what reports as a dangling citation to a file nobody meant to create" },
-  { target: /^diffcase-[a-z]+\.mjs$/, why: "SYNTHETIC DIFF FIXTURE FILENAMES in pushed-content-guard.test.mjs (tracker issue 1941). That test feeds `addedLines` a hand-written unified diff, so `keep.mjs:4` is a line of DIFF DATA the guard must parse, not a citation to anything. Same class as the contract-audit planted names directly above: a test that must contain a file reference to a file that does not exist, on purpose. NAMESPACED `diffcase-` deliberately: a first cut exempted the bare names `keep|dropped|gone|zz` and SWALLOWED two of this file's own controls, which plant `gone.mjs:12` — an exemption wide enough to cover somebody else's known-bad turns their arm green while it proves nothing" },
+  { target: /^diffcase-[a-z]+\.mjs$/, why: "SYNTHETIC DIFF FIXTURE FILENAMES in pushed-content-guard.test.mjs. That test feeds `addedLines` a hand-written unified diff, so line 4 of `keep.mjs` is DIFF DATA the guard must parse, not a citation to anything. Same class as the contract-audit planted names directly above: a test that must contain a file reference to a file that does not exist, on purpose. NAMESPACED `diffcase-` deliberately: a first cut exempted the bare names `keep|dropped|gone|zz` and SWALLOWED two of this file's own controls, which plant line 12 of `gone.mjs` — an exemption wide enough to cover somebody else's known-bad turns their arm green while it proves nothing" },
   { target: /^driver\/engine\/mcp\/planted-server\.mjs$/, why: "a planted server module name in contract-audit.test.mjs" },
   { target: /^srv\/app\//, why: "SYNTHETIC DEPLOYMENT STACK TRACES. The house rule for fixtures is to use a `/srv/…` path and never a real `/home/<name>/` one (deployment-hostnames.test.mjs polices the other half), so a hand-written trace like \"TypeError: x is not a function at /srv/app/driver/pipeline.mjs:2411:9\" is test DATA the parser under test must read — the line number is the datum, not a claim about our tree. It passed for as long as it did by luck: this resolver strips the prefix and lands on the real driver/pipeline.mjs, so the fixture went green while whatever line it happened to name was real code, and reported BLANK the first time an unrelated edit made that line a brace. NAMESPACED to `srv/app/` for the reason the diffcase- entry gives — nothing in this repo ships under srv/, and a wider prefix would swallow a genuine citation someone writes tomorrow" },
-  { target: /^(?:driver\/)?driftcase-[a-z-]+\.mjs$/, why: "SYNTHETIC DRIFT FIXTURE FILENAMES in citation-drift-at-the-diff.test.mjs (tracker issue 1950). That test feeds the drift report a hand-built corpus in which `driftcase-target.mjs:40` is the DATUM being classified — the thing whose movement is measured — not a citation to anything. Same class as the planted names above, and NAMESPACED under `driver/` for the reason the `diffcase-` entry gives: an exemption wide enough to cover another test's known-bad turns their arm green while it proves nothing. The directory prefix is OPTIONAL because one arm cites the BARE BASENAME on purpose: that is the exact shape that made `resolveCited` short-circuit on an always-true `exists` and print a clean tick, so the arm cannot be written any other way. `driftcase-` carries the namespacing on its own — nothing else in this tree uses the prefix" },
+  { target: /^(?:driver\/)?driftcase-[a-z-]+\.mjs$/, why: "SYNTHETIC DRIFT FIXTURE FILENAMES in citation-drift-at-the-diff.test.mjs. That test feeds the drift report a hand-built corpus in which line 40 of `driftcase-target.mjs` is the DATUM being classified — the thing whose movement is measured — not a citation to anything. Same class as the planted names above, and NAMESPACED under `driver/` for the reason the `diffcase-` entry gives: an exemption wide enough to cover another test's known-bad turns their arm green while it proves nothing. The directory prefix is OPTIONAL because one arm cites the BARE BASENAME on purpose: that is the exact shape that made `resolveCited` short-circuit on an always-true `exists` and print a clean tick, so the arm cannot be written any other way. `driftcase-` carries the namespacing on its own — nothing else in this tree uses the prefix" },
   { target: /^common-law-findings\.md$/, why: "a RUN ARTIFACT, written into a run directory at execution time. It is cited by name in doubt-ledger and audit-from-spine tests because that is what the artifact is called; it is not and never will be a tracked file" },
   // ✕ REMOVED: `codex/dist/(helper|cli).js` — a captured CODEX stack trace in
   // exit-cause-survives-the-digest.test.mjs. Both of its citations carry a COLUMN, so `citationsIn`

package/scripts/dead-names.mjs

@@ -6,8 +6,8 @@
 //   node scripts/dead-names.mjs            report; exit 1 if a dead name is back
 //   node scripts/dead-names.mjs --json     the same, as JSON
 //
-// ruled Lore and Aughra dead names that may appear nowhere, and the purge is done: the issue's
-// own pattern returned 58 files when it was written and returns ONE now, which is a dictionary snippet
+// The owner ruled Lore and Aughra dead names that may appear nowhere, and the purge is done: the issue's
+// own pattern returned 58 files when it was written and ONE when this guard landed, a dictionary snippet
 // about hunting inside captured search results. What does not exist is anything to keep it that way. A
 // name published once stays published, so the cost of a re-introduction is not a revert — it is a name
 // in the history of a repository that is about to be cut in public.
@@ -42,37 +42,38 @@ export const GUARD = "dead-names (#853)";
 // the issue names as deployed surfaces, and `_` is a word character, so a trailing `\b` would miss the
 // environment variable while catching the prose. No English word begins with those six letters, so the
 // leading boundary is all the protection the arm needs — measured: zero hits in the tree either way.
-// `clawdi-lisa` and `clawdi-lidia` are 's, not 's, and they are here rather than in a second
-// scanner because the mechanism is identical: a name that must never reappear. They were per-person
-// agent identities for individuals at this firm, shipped in an operator script's default roster, in a
-// systemd unit watching their queues, and in two test fixtures. That out-of-scope note ruled `alex`
-// and `sam` INVENTED, which is why those stay; these two were never covered by that ruling.
-export const DEAD_NAME_RE = /lorestar|lore_(pool|url|flags)|clearance_lore|lorectl|loreurl|lorecontrols|trademark-lore|\blore\b|\baughra|clawdi-(lisa|lidia)/i;
+// A PER-PERSON IDENTITY IS THE SAME KIND OF NAME, AND IT IS NOT WRITTEN HERE. An agent identity named
+// after a real person must never reappear either, and the mechanism is identical. But a public guard
+// that spells out a person's name publishes the name it exists to keep out, so no such arm is written
+// into this file: `deadNameHits` takes its pattern as an argument, and the test drives the mechanism
+// with an invented identity. The names the tests give agents and requesters are invented too.
+export const DEAD_NAME_RE = /lorestar|lore_(pool|url|flags)|clearance_lore|lorectl|loreurl|lorecontrols|trademark-lore|\blore\b|\baughra/i;
 
 /**
  * Where a true match is somebody else's word rather than our dead name. NAMED, with the reason, and
  * scoped to the file — never a blanket pattern, because a blanket would re-admit the name everywhere.
+ * The first exemption was a dictionary snippet in the demo's captured common-law results; the demo was
+ * re-captured without it, so that exemption was deleted rather than carried.
  */
 export const EXEMPTIONS = [
   {
-    file: "demo/multi-country-focus-search/run/common-law-grid.json",
-    why: "captured third-party search results. The hit is a Collins English Dictionary definition of "
-      + "hunting — \"the art, sport, lore, or practice of hunting\" — inside a snippet the common-law "
-      + "sweep fetched and the driver saved VERBATIM. Editing it would corrupt a machine receipt to "
-      + "satisfy a lint, which is the one thing a receipt may never be.",
+    file: "driver/wordlists/en.txt",
+    why: "the engine's list of ordinary English words, the dictionary of the one-letter neighbourhood "
+      + "filter. `lore` is an ordinary English word and sits on it. The list only ever removes queries, "
+      + "so taking the word out would change which searches a run makes, to satisfy a lint.",
   },
 ];
 
 const exemptionFor = (file) => EXEMPTIONS.find((e) => e.file === file) ?? null;
 
-/** Every dead-name hit in a corpus of {file, text}. PURE. */
-export function deadNameHits(corpus) {
+/** Every dead-name hit in a corpus of {file, text}, against DEAD_NAME_RE unless a pattern is given. PURE. */
+export function deadNameHits(corpus, pattern = DEAD_NAME_RE) {
   const out = [];
   for (const { file, text } of corpus ?? []) {
     if (exemptionFor(file)) continue;
     const lines = String(text ?? "").split("\n");
     for (let i = 0; i < lines.length; i++) {
-      if (DEAD_NAME_RE.test(lines[i])) out.push({ file, line: i + 1, text: lines[i].trim().slice(0, 160) });
+      if (pattern.test(lines[i])) out.push({ file, line: i + 1, text: lines[i].trim().slice(0, 160) });
     }
   }
   return out;

package/scripts/e2e.mjs

@@ -922,7 +922,7 @@ export async function enqueueViaMcp(job, { clientPrincipal = false, forwarder =
 // harness named the door that BEHAVED as the defect. Two hours later the codex arm hit no 429 and the
 // same case was clean — so the finding also reads as a flake, which is the worst of both.
 //
-// The rule the asymmetry check encodes (#98) is sound: for a case both doors should refuse, the one
+// The rule the door-asymmetry check encodes is sound: for a case both doors should refuse, the one
 // that accepted is the bug. It rests on an assumption nobody wrote down — that a refusal is a
 // PRODUCT-SCOPE JUDGMENT. A 429 or a 5xx is not a judgment. The request died in the transport, before
 // `start_run` ran a single scope check, so that door holds no opinion about this case at all.
@@ -945,7 +945,7 @@ export function doorAnswerClass(answer) {
 }
 
 /**
- * The #98 asymmetry verdict, over the doors that actually answered.
+ * The door-asymmetry verdict, over the doors that actually answered.
  * Returns { agreed, compared, unavailable, reducedCoverage } — `agreed` is TRUE when fewer than two
  * doors answered, because one opinion is not a disagreement and must never be reported as one.
  */
@@ -2141,7 +2141,7 @@ async function cmdRun(id) {
 
   const jobs = s.job ? [{ id: s.id, job: s.job, kase: {} }] : (s.cases ?? []).map((c) => ({ id: c.id, job: c.job, what: c.what, oneMatterAcrossDoors: c.oneMatterAcrossDoors === true, expectTerminal: (c.expect ?? {}).terminal ?? null, kase: c }));
 
-  // door: "all" is the point of R0 — a rule enforced in one door and not another is exactly the #98
+  // door: "all" is the point of R0 — a rule enforced in one door and not another is exactly the door
   // asymmetry. Every case goes through EVERY drivable door and the answers are compared. runner.mjs's
   // claimAndPrep is the wall they all land on, so they must agree; if they ever do not, the door that
   // admits is the bug, not the door that refuses. A case that declares `doors` goes through those alone
@@ -2662,7 +2662,7 @@ function printPreviousRoundNotice(s) {
 }
 
 // `run` records what each door answered, because `report` runs later in a different process and cannot
-// otherwise know. A rule enforced in one door and waved through by another is exactly the #98 asymmetry,
+// otherwise know. A rule enforced in one door and waved through by another is exactly the door asymmetry,
 // and it is invisible unless the answers are compared.
 //
 // — the receipt's PATH and FORMAT moved to driver/e2e-rounds.mjs (`receiptPath`, `readReceipt`),
@@ -2686,7 +2686,7 @@ function printPreviousRoundNotice(s) {
 export function doorRefusal(receipt, ref, expect = null) {
   const rc = (receipt?.cases ?? []).find((c) => c.ref === ref) ?? null;
   const recorded = rc?.answers ?? [];
-  // — ONLY THE DOORS THAT ANSWERED. `doorAsymmetry` has excluded unavailable doors from the #98
+  // — ONLY THE DOORS THAT ANSWERED. `doorAsymmetry` has excluded unavailable doors from the door
   // comparison since, but this function did not, and it is the one that prints
   // "refused at the door by cli, ops-mcp". A door that was never asked was listed there as a refuser,
   // so a case where one door refused correctly and the other did not exist read EXACTLY like a case
@@ -3175,7 +3175,7 @@ async function cmdReport(id, { round: requestedToken = null } = {}) {
         // notice is OWED depends on the terminal, and the terminal is what could not be established.
         const owesNotice = q.terminal === "clarify" || q.terminal === "duplicate" || q.terminal === "failed" || q.undetermined;
         if (owesNotice) {
-          // The contract from #92: a refusal must PARK *and NOTIFY*, never fail silently.
+          // The contract: a refusal must PARK *and NOTIFY*, never fail silently.
           console.log(`      requester notified: ${
             q.packets.length ? q.packets.join(", ")
             : q.packetsUnreadable ? `CANNOT TELL — ${q.packetsUnreadable}`
@@ -3342,7 +3342,7 @@ async function cmdReport(id, { round: requestedToken = null } = {}) {
     // CASE-level asserts are evaluated too. They were declared and never reached: this loop read only
     // `s.expect.assert`, and `kase` was consulted solely for `terminal` and `reasonMatches`. R0 has no
     // scenario-level asserts at all, so R0 ran ZERO assertions — and R0e's `profileKey == "generic"`,
-    // the only substantive check in the whole scenario and the entire point of the #83 roster-blindness
+    // the only substantive check in the whole scenario and the entire point of the roster-blindness
     // case, was silently dead. Same class of defect as the artifacts key above: declared, never asked.
     for (const a of [...(s.expect?.assert ?? []), ...(kase?.expect?.assert ?? [])]) {
       const r = evalAssertion(a, runDir);
@@ -3405,7 +3405,7 @@ async function cmdReport(id, { round: requestedToken = null } = {}) {
   }
   // ── did every door give the same answer? ────────────────────────────────────────────────────────────
   // Only R0 drives more than one door. A rule enforced at one door and waved through by another is the
-  // #98 asymmetry, and it is invisible unless the answers are compared — so `run` records them and this
+  // door asymmetry, and it is invisible unless the answers are compared — so `run` records them and this
   // reads the receipt. No receipt is reported as "cannot tell", never as agreement.
   if (s.door === "all") {
     // — read THIS ROUND's answers, and distinguish the three ways they can be missing: no receipt

package/scripts/env-audit.mjs

@@ -310,6 +310,12 @@ export function isProductFile(rel) {
   if (/\.test\.mjs$/.test(rel)) return false;
   if (/^e2e\//.test(rel)) return false;
   if (/^scripts\/(e2e|test-run|ci-)/.test(rel)) return false;
+  // THE BROWSER CHECKS. CI and a developer run them against a fixture portal; no install runs one. A switch
+  // one of them reads, such as the delay that reproduces a slow runner, belongs to the check, and a row
+  // for it in `.env.example` would hand an operator a setting that changes nothing they run. Measured
+  // when this was added: HOME, PATH, TMPDIR and that delay were all the checks read, and the first three
+  // stay product, because shipping code reads them too.
+  if (/^scripts\/[a-z0-9-]+-render-check\.mjs$/.test(rel)) return false;
   return true;
 }