clearotron 0.3.2-beta.11 → 0.3.2-beta.13

package/docs/architecture/05-config-governance.md

@@ -97,7 +97,7 @@ product doc.
 | **Allowlist** (`{version, grants:[{email, customer}]}`) | T2 | git + PR on the `CLIENT_ACCESS_MAP` file | see §2 row 4 | LIVE, file-only; surfaced read-only at `admin.access` |
 | **Ops tokens** (scope ops/user, verbs, companies, TTL) | T4 | `mint-token.mjs` CLI; jti denylist file | operator-held tokens | LIVE, CLI |
 
-## 4b. The install surface names ()
+## 4b. The install surface names
 
 The variables a **user or installer** ever types carry the product’s own prefix. They are listed
 by name in §5 below and in the upgrade table in INSTALL.md.
@@ -123,14 +123,14 @@ has taken it.
 
 **`CLEAROTRON_JX_LANES` was held back from the August 2026 rename** — it was RETIRED 2026-07-27
 (`pipeline.mjs` `RETIRED_ENV`, `jx-units.mjs`) and nothing reads it, so renaming a dead name looked like
-handing an operator a name that warns about nothing. The owner's 2026-09-04 ruling reversed that: the
+handing an operator a name that warns about nothing. A decision of 2026-09-04 reversed that: the
 whole namespace carries one prefix, dead names included, because a tree spelled two ways costs more
 than a retired row spelled consistently. The per-lane `CLEAROTRON_NATIVE_LANGUAGE_<code>` switch in the same row **is** live and is
-fail-OPEN: unset means ON (§5.5,).
+fail-OPEN: unset means ON (§5.5).
 
 Variables outside the install surface were left alone by the August rename — `CLEAROTRON_ENGINE_MAX_BUFFER`
-and its siblings were never in that window. **That separate decision was taken on 2026-09-04**: the owner
-ruled the rename global and pre-cut, so the internals carry the house prefix too and the public tree never
+and its siblings were never in that window. **That separate decision was taken on 2026-09-04**: the rename
+became global and pre-cut, so the internals carry the house prefix too and the public tree never
 shows the old namespace. No compatibility layer, no alias reading, no migration — greenfield, and our own
 boxes rebuild.
 
@@ -207,10 +207,10 @@ move once the same window has been read across more runs.
 `CLEAROTRON_BAND_TRUTH_GATE` (**never disable in prod — restores the fabrication**),
 `CLEAROTRON_FRAME_REOPEN` (+`CLEAROTRON_FRAME_REOPEN_MAX`=1, `CLEAROTRON_REOPEN_MAX_FETCH`=150),
 `CLEAROTRON_REGISTER_GAP_CLAMP`, `CLEAROTRON_RECALL_PROBES`, `CLEAROTRON_RECALL_TRIPWIRE`, `CLEAROTRON_WARM_RETRY`,
-`CLEAROTRON_MODEL_WIRE_CHECK` ( — fails a turn whose
+`CLEAROTRON_MODEL_WIRE_CHECK` (fails a turn whose
 provider reports a different model FAMILY than the driver asked for; disarming it silences the refusal
 and never the record: `modelActual`/`modelMismatch` keep landing on every dispatch row), `CLEAROTRON_FORM_REPAIR`
-( — repairs a form-class stage failure inside the dispatch, up to twice; disarmed, the defect
+(repairs a form-class stage failure inside the dispatch, up to twice; disarmed, the defect
 falls through to the retry ladder exactly as it did before, visibly, and is never swallowed as
 "validated fine"). Policy knob: `CLEAROTRON_UNREACHABLE_SENIOR`
 (open-item|clamp). Enumerate: `CLEAROTRON_ENUMERATE_CEILING` (600/OR-stack),
@@ -359,7 +359,7 @@ systemd, writes no heartbeat, and must keep saying "waiting to start" rather tha
 repo** — `git grep process.env.CLIENT_ACCESS` here returns nothing, so they are governed here and
 never appear in the audit).
 
-**Which identity source the portal runs () — T4, and it is chosen by name, never inferred.**
+**Which identity source the portal runs — T4, and it is chosen by name, never inferred.**
 `PORTAL_AUTH_MODE` selects the door: unset or `auth-proxy` (the default for a hosted deployment) means
 any login system in front that authenticates in the browser and forwards a verifiable JWT per request.
 **Any OIDC or JWT proxy is a choice per deployment** — for example Cloudflare Access, which is not a
@@ -367,7 +367,7 @@ special case in the code; `local` means one address and one passphrase on loopba
 exactly the same thing** — normalised where the mode is read rather than by an alias row, because
 `shared/env-aliases.mjs` maps variable NAMES and there is no value-alias mechanism.
 
-**Bringing your own login provider ( item 1, completed by) — T4.**`PORTAL_OIDC_ISSUER`,
+**Bringing your own login provider — T4.**`PORTAL_OIDC_ISSUER`,
 `PORTAL_JWKS_URL`, `PORTAL_EMAIL_CLAIM` and `PORTAL_AUTH_HEADER` are the portal-side spelling of the four
 values the staff MCP face already reads as `TRADEMARK_MCP_OIDC_ISSUER`, `TRADEMARK_MCP_JWKS_URL`,
 `TRADEMARK_MCP_EMAIL_CLAIM` and `TRADEMARK_MCP_AUTH_HEADER`. `makeAccessVerifier` has always accepted them; the portal
@@ -432,7 +432,7 @@ synthetic identity would answer before the mandatory key ever ran. The mode is l
 travels in a header or the query string), requires `TRADEMARK_MCP_ALLOWED_HOSTS` exactly as the
 authenticated door does, and mirrors its mandatory `CLEAROTRON_ACCESS_FILE`.
 
-**The local install sets all of the above itself.**`npx clearotron start` (`bin/start.mjs`) is a supervisor:
+**The local install sets all of the above itself.**`clearotron start` (`bin/start.mjs`) is a supervisor:
 it resolves one set of ports, derives `PORTAL_MCP_URL` and `TRADEMARK_MCP_ALLOWED_HOSTS` from them, mints
 the ops key in memory, and hands each child an explicit environment carrying `CLEAROTRON_NO_ENV_FILE=1`. So
 exactly one process in that tree reads `<repo>/.env` — the supervisor — and nothing a laptop runs needs

package/docs/architecture/06-operations-runbook.md

@@ -73,7 +73,7 @@ properties below, each of which was learned the expensive way:
    mid-run feeds one expensive run two different skill versions. **Call
    check that nothing is in flight and abort if anything is** — read every queue this
    deployment would drain plus the run-slot locks, and refuse on any of them. `--override
-   "<reason>"` is the owner-ordered exception; the reason is printed into the deploy output, and a
+   "<reason>"` is the operator's deliberate exception; the reason is printed into the deploy output, and a
    blank one exits 2 rather than passing. This step used to be a line of prose asking a human to
    check, which is not a guard on the night it matters. Then **stop the four trigger units** for
    the deploy window and install an **EXIT trap that restarts them on every exit path**, success or
@@ -184,7 +184,7 @@ rather than stage compute. That gateway is no longer part of the product, so the
 to probe and the file went with them. Nothing invoked it: not `package.json`, not `bin/`, not
 `scripts/`, not a unit, not CI. It was run by hand, and it spent real money when it was.
 
-What replaces each half: the free path check is `npx clearotron doctor` plus the runner's own preflights
+What replaces each half: the free path check is `clearotron doctor` plus the runner's own preflights
 (`preflightEngineBinary`, `preflightCredentials`, `preflightDeploymentUrls`), each of which refuses by
 name before a run dir exists. The billable half has no replacement and needs none — stage compute is
 exercised by real runs and the A/B harness, which is what its own note already said.
@@ -289,7 +289,7 @@ Copy it, point `CLEAROTRON_ACCESS_FILE` at your copy, sign in as one of its addr
 exactly that organisation's companies. Then delete it and write your own — it names nobody real, which also
 means it grants nothing you have.
 
-`npx clearotron start` (§6) writes an empty roster (`{"tenants": {}}`) into its state directory: your own staff
+`clearotron start` (§6) writes an empty roster (`{"tenants": {}}`) into its state directory: your own staff
 address is admitted, nobody else is enrolled, and enforcement is already on.
 
 ### Ops tokens — a credential for the verbs that spend

package/docs/architecture/07-quality-and-audit.md

@@ -269,7 +269,7 @@ write nothing and 7 that do:
   `what_if_run` → one sandboxed stage; `what_if_result` → collect a queued one) — **executing** is
   local stdio only, never remote, for any principal. The confirmation token is a deliberate-action
   handshake, not a crypto boundary; the security boundary is ops scope + local-only execution.
-  Since the owner's 2026-08-27 ruling an `account` principal reaches all three, and `what_if_run` on that
+  Since 2026-08-27 an `account` principal reaches all three, and `what_if_run` on that
   path ENQUEUES into `<runDir>/_experiments/_queue/` rather than shelling — `driver/whatif-worker.mjs`,
   drained by the runner, is what spawns the sandbox. Because the token is unsigned, a call on that path must
   also name its `runId` so the grant check fires, and the enqueue refuses a token naming another run.

package/docs/architecture/08-development-guide.md

@@ -88,7 +88,7 @@ These are the things a well-meaning refactor breaks. Each is enforced somewhere;
 
 Mechanically a config change ([04](04-configuration-reference.md#model-tiers-and-resolution)); two
 traps and one law. Traps: an alias not registered in the engine's model map now **refuses the
-dispatch by name** ( — it used to run sonnet silently and log the alias you asked for, which is
+dispatch by name** (it used to run sonnet silently and log the alias you asked for, which is
 the `fable` lesson turned into an error), and `CLEAROTRON_SYNTHESIS_MODEL` is read at module load (fine
 for the oneshot service, stale in long-lived processes). The law: any grade-moving
 change — family, effort, tier remap — ships only through the paid A/B against the reference
@@ -221,7 +221,7 @@ Four realities to respect:
 
 - **Exclusion is by filename convention only.** Anything named `*.test.mjs` runs in CI; billable or
   manual harnesses must not match the glob (historical one-off proofs with hard-coded dev paths are
-  not kept; the last billable hand-run harness, `selftest.mjs`, was deleted at).
+  not kept; the last billable hand-run harness, `selftest.mjs`, was deleted).
 - **The `||=` env guards leak**: a shell exporting a real register credential or
   `CLEAROTRON_PLAN_DISPATCH=on` is *not* overridden by the harness — run the suite in a clean env.
   (CI is safe.)

package/docs/architecture/09-security-and-data.md

@@ -83,7 +83,7 @@ are no root units; everything is `systemd --user`.
     are stripped), and **`account`** (a signed-in person on the client face — the runs of the
     companies they are granted, reached either by the CF sign-in with no token, or by a per-person API
     key, `scope: account`, whose companies are re-read from the grants file on every request rather than
-    baked into it. Wider *reach* than a report link and, since the owner's 2026-08-27 ruling, more
+    baked into it. Wider *reach* than a report link and, since a decision of 2026-08-27, more
     *depth* too: the audit chain — the audit trail, the reasoning narrative, the record artifacts, a
     register axis, and the `get_run` / `trace` / `decision_timeline` decision walk. Model identity
     and billed counts stay sealed (`get_telemetry`, `get_provider_usage`), as does the reviewers'

package/docs/decisions/0002-no-dark-functionality.md

@@ -60,7 +60,7 @@ Every `CLEAROTRON_*` name read by shipping code declares an effect class, and an
   whatever the declaration test enforces. Do not re-derive it by hand; that is how 172, 159 and 352 all
   came to describe the same repository.
 
-## Addendum — 2026-08-20, on implementation ( item 8)
+## Addendum — 2026-08-20, on implementation
 
 All four switches are deleted, as ruled. One consequence above is narrowed by what the code turned out
 to be, and it is recorded here rather than in a pull request body, because this document is what the

package/docs/decisions/0006-what-the-public-repository-carries.md

@@ -1,6 +1,6 @@
 # 0006 — What the public repository carries
 
-**Accepted 2026-08-17, by the owner.**
+**Accepted 2026-08-17.**
 
 ## Context
 
@@ -74,7 +74,7 @@ announces which mode it is in, once, so a reader of any run can tell which colum
 "change the code" is the clause it answers to and this repository's working practice is that agents change
 the code. `CLAUDE.md` is not carried: it was only ever a one-line pointer at `AGENTS.md`, a second copy of
 one subject is a future contradiction ([ADR-0004](0004-documentation-structure.md)), and the de-identified
-public cut names that file specifically. Ruled by the owner 2026-08-19, on the question raised against the
+public cut names that file specifically. Decided 2026-08-19, on the question raised against the
 recovery — where the two files had been held back because the revert that stripped them recorded no
 decision either way, and `shared/withheld-paths.mjs` did not cover them.
 
@@ -89,7 +89,7 @@ vendor-branded duplicate of it does not, however small.
   citations across code, comments, env examples and docs; all but six were rewritten, and the six declared
   are this record's own, where naming what is dropped is the content.
 - **A binding to a withheld document is retired.** `driver/doc-constants.mjs` pinned four prose figures in
-  `docs/KNOCKOUT.md` and `docs/REGISTER-HIT-COUNTS.md`; those rows are gone, and the test pinning 's
+  `docs/KNOCKOUT.md` and `docs/REGISTER-HIT-COUNTS.md`; those rows are gone, and the test pinning the
   one-file-states-it-twice case now anchors to the shape rather than to a named document.
 - **Withholding is reversible**, which is why this is a list rather than a `git rm`. This repository keeps
   every word.

package/driver/CHANGELOG.md

@@ -1,5 +1,34 @@
 # clearotron-driver
 
+## 0.3.2-beta.13
+
+### Patch Changes
+
+- Fixed: A conditional verdict whose conditions are all kept in the run record no longer shows an empty "conditional on" line. The rating word stands alone.
+- Fixed: A running clearance's card and row show the stage it is in now, including a step back during a correction pass.
+- Fixed: The portal's health check no longer includes an internal error message when the instructions store cannot be read. The message goes to the service log instead.
+- Fixed: `doctor` no longer describes another program on the client door's port as this install's door. It says only that a process holds the port.
+- Fixed: The connect lines name the exact Node your install runs on, and an older Node gets one plain line instead of a crash.
+- Fixed: The demo no longer leaves copies of its samples in your temp directory, including when it is stopped mid-way.
+- Fixed: Running the test suite no longer leaves demo copies in the machine's temporary directory.
+- Fixed: On WSL, the Windows connect line names your Linux distribution, or says plainly to fill it in, instead of leaving it out.
+
+## 0.3.2-beta.12
+
+### Patch Changes
+
+- Fixed: A demo started in the background with `npx` now stops completely when that `npx` is stopped, freeing its three ports and removing its folder.
+- Fixed: The demo lists the door an assistant uses first, and a key refused at the wrong door is told the right door's address.
+- Fixed: A knockout no longer asks the model what to do with each name, so each name's read keeps to the findings and the rating.
+- Fixed: A knockout's per-name read no longer carries a next-step section the model wrote. It is removed before delivery instead of the batch being sent back to rewrite it, so knockouts finish sooner.
+- Fixed: A report produced before this version no longer shows a second section menu inside the portal, unreadable in the dark theme.
+- New: `clearotron connect --base <folder>` connects an assistant to a running demo, minting its key and naming its door in one step.
+- Fixed: `doctor` now says the client door's access log has entries, instead of claiming it is being written.
+- Fixed: The sign-in page names the install's one user, and the passphrase reset, key issue and doctor each say what they are for.
+- Fixed: Once the client's own registered element is set aside, searches added later in the run no longer search it again.
+- Fixed: Running the test suite on a clone whose portal build is out of date no longer rebuilds it and fails the first run.
+- Fixed: Running the test suite no longer writes an access-log line under your home folder, and a stopped demo leaves no empty folders behind.
+
 ## 0.3.2-beta.11
 
 ### Patch Changes

package/driver/ask-ledger.mjs

@@ -170,7 +170,7 @@ function endingForQids(qids, join, ts) {
   return null;
 }
 
-/** The {ending, handoff} pair for one cross-check directive. Only `recall` is subject to 's
+/** The {ending, handoff} pair for one cross-check directive. Only `recall` is subject to the
  *  discharge rule; every other net keeps the ending it always had. PURE. */
 function recallEnding(name, qid, join, ts) {
   const ending = endingForQids([qid], join, ts);

package/driver/band-shape.mjs

@@ -769,7 +769,7 @@ export function buildBandShape(band, { targets = [], inScopeClasses = [], crowdC
 }
 
 const fmtN = (n) => Number(n ?? 0).toLocaleString("en-US");
-const cell = (v) => String(v ?? "").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim() || "—";
+const cell = (v) => String(v ?? "").replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim() || "—";
 
 // Bounded aggregate table: top rows by count, one honest remainder line — never for the floors.
 function topTable(md, title, cols, entries, cap = 30) {

package/driver/bundled-demos.mjs

@@ -3,8 +3,8 @@
 // bundled-demos.mjs — WHICH client bundles this repo ships, read from the directory that ships them.
 //
 // This was a hand-maintained triple. The directory grew a fourth bundle, the triple did not, and the
-// set-equality it feeds could no longer match anything — so the #83 detector, whose whole job is to
-// notice a door that has silently fallen back to the bundled roster, returned PASS on the #83
+// set-equality it feeds could no longer match anything — so the roster-fallback detector, whose whole job is to
+// notice a door that has silently fallen back to the bundled roster, returned PASS on exactly that
 // condition. A guard that cannot match reports that it found nothing wrong.
 //
 // The same shape had already produced two FALSE REFUSALS on this check, both from an exact match

package/driver/card-budget.mjs

@@ -74,13 +74,13 @@ function insertBulletAtSectionHead(text, headingRe, headingLine, bullet, { paren
   const m = text.match(headingRe);
   if (m) {
     const at = m.index + m[0].length;
-    return `${text.slice(0, at)}\n${bullet}\n${text.slice(at).replace(/^\n/, "\n")}`;
+    return `${text.slice(0, at)}\n${bullet}\n${text.slice(at)}`;
   }
   if (parentHeadingRe) {
     const p = text.match(parentHeadingRe);
     if (p) {
       const at = p.index + p[0].length;
-      return `${text.slice(0, at)}\n${headingLine}\n\n${bullet}\n${text.slice(at).replace(/^\n/, "\n")}`;
+      return `${text.slice(0, at)}\n${headingLine}\n\n${bullet}\n${text.slice(at)}`;
     }
     return `${text.replace(/\s*$/, "")}\n\n${parentHeadingLine}\n\n${headingLine}\n\n${bullet}\n`;
   }

package/driver/case-law-ledger.mjs

@@ -114,8 +114,8 @@ export function parseCaseLawLedger(raw) {
 /**
  * The census a reader (and a scenario) asks the ledger for. PURE, and it never judges.
  *
- * `readByTerritory` is the one that answers the depth-dive condition: a dive names ONE territory
- * (/), so "did this dive read anything in its own territory" is a lookup, not an inference.
+ * `readByTerritory` is the one that answers the depth-dive condition: a dive names ONE territory,
+ * so "did this dive read anything in its own territory" is a lookup, not an inference.
  */
 export function caseLawRetrievalCensus(ledger) {
   const queries = ledger?.queries ?? [];

package/driver/connotation-search.mjs

@@ -1363,7 +1363,7 @@ export function parseDispositionForm(raw) {
 // EVERY OBLIGATION SHIPS. No head(), no slice(), no "…and N more". The register-digest sibling
 // (gateway.mjs deferredSlicesRequiredRows) printed the first six qids per axis and elided the rest, and its
 // own doc block records what that cost: "Under advice that is an economy; under a requirement it makes
-// compliance impossible." Same rule here, and 's: a value a model must copy is complete, or it is
+// compliance impossible." Same rule here: a value a model must copy is complete, or it is
 // visibly marked as cut. Nothing below is cut, so nothing below is marked.
 /**
  * The obligation set as the seat's own to-do list, for the tool result. Returns "" when nothing is owed —
@@ -1375,7 +1375,7 @@ export function renderConnotationObligations(ob, { ledgerPath = "your half ledge
   // ── — THE PAGE IS NUMBERED OFF THE SAME FUNCTION THAT RESOLVES THE NUMBER ─────────────────
   //
   // `obligationRows` is the driver's row list, and a `row_index` is a position into it. Numbering this
-  // page with its own counter would be two derivations of one ordering, which is the mistake 's
+  // page with its own counter would be two derivations of one ordering, which is the mistake the
   // segment display already names in its own comment: "the display and the check cannot disagree, which
   // they would the moment either recomputed its own split". So the numbers come from the list itself.
   //
@@ -1610,7 +1610,7 @@ export function renderDispositionTable(rows, ob) {
   for (const e of ob?.queries ?? []) for (const r of e.results) if (r.id) byId.set(normId(r.id), r);
   // — the rows are the FORM's, and a row the seat never ruled on has nothing to render: it is
   // outstanding work, which the gate reports as a count, not a table row reading "—".
-  const cell = (s) => String(s ?? "").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim();
+  const cell = (s) => String(s ?? "").replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim();
   const usable = (rows ?? []).filter((d) => d?.receipt_id && d?.ruling);
   // ── — A PARKED ROW IS NOT AN OUTSTANDING ROW, AND THE FILTER ABOVE STOPPED BEING SAFE ─────────
   //
@@ -1683,7 +1683,7 @@ const NO_POLICED_SECTION = "(no PR / reputational / connotation section)";
 //     id that is not among THAT row's own candidates — the driver wrote those ids, so this is a damaged
 //     form, not outstanding work, and its remedy is different.
 //   undisposed_cite_too_short   deleted — cannot occur; nothing is retyped.
-//   recurrent_uncited_form      deleted — the form has no shape for the seat to get wrong. 's
+//   recurrent_uncited_form      deleted — the form has no shape for the seat to get wrong. The old
 //     cited-but-unbound state was a property of PROSE (right page, wrong query string on the line); a
 //     form row IS its binding, so the state has no representative.
 //   no_source_cite              deleted — advisory, prose-only, never reached a token.
@@ -1786,7 +1786,7 @@ export const CONNOTATION_FORM_REASONS = Object.freeze(
  *
  * `quote_unbound` and `form_damaged` are deliberately absent: those rows ARE ruled.
  *
- * `parked` (/) is absent for the opposite reason and it is the load-bearing one: a parked row
+ * `parked` is absent for the opposite reason and it is the load-bearing one: a parked row
  * is NOT ruled, and it is not outstanding either. Outstanding means "the seat still owes this", and the
  * whole point of the park is that the seat has been told to stop — leaving it here would keep the stage
  * failing forever on a row nobody may re-send, which is the deterministic death the park introduced.

package/driver/contract-e3-backlog.mjs

@@ -456,7 +456,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3182",
     surface: "stage-message",
     evidence: "MACHINE FINDINGS (MANDATORY): … a JSON OBJECT {\"schema_version\":<FINDINGS_SCHEMA_VERSION>,\"rated_under_framework\":\"…\",\"findings\":[...],\"coverage\":[...],\"context_notes\":[...],\"actions\":[...],\"ask_answers\":[...]} … Each finding object has EXACTLY these keys: {\"ordinal\",\"mark\",\"owner\",\"band\",\"net\",\"bor",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson via validators.narrative",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson via validators.narrative",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   // RETIRED 2026-08-16 — synthesis's dictated disposition list, and I am the one who left it standing.
@@ -479,7 +479,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3219",
     surface: "stage-message",
     evidence: "- manageable …: {\"category\":\"<EXACTLY one of large-competitor / commercial-partner / troll / well-known-enforcer>\",\"reason\":\"<one-two lines…>\"}",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -488,7 +488,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3235",
     surface: "stage-message",
     evidence: "- meters: {\"mark_similarity\":{...},\"goods_proximity\":{...},\"use\":{...},\"enforcer\":{...}} — all four present, each {\"token\",\"basis\",\"source\"}. … mark_similarity = high | medium | low. goods_proximity = high | medium | low. enforcer = high | medium | low | unknown. use = confirmed | not-confirmed | un",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson; driver/verify.mjs:1171 checkFindingsSibling gates meters.*.source; finding_basis_source_missing",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson; driver/verify.mjs:1171 checkFindingsSibling gates meters.*.source; finding_basis_source_missing",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -497,7 +497,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3236",
     surface: "stage-message",
     evidence: "- quadrant: {\"x\",\"y\"} numbers in [0,1]. x = goods/services proximity (0 = distant, 1 = identical). y = mark similarity (0 = distinct, 1 = identical).",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -506,7 +506,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3237",
     surface: "stage-message",
     evidence: "- source: {\"source_type\",\"resolved_link\"}. source_type EXACTLY one of: register-vendor / register-euipo / common-law-marketplace / common-law-web / case-law",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson",
     removedByMove: "M1 removes the opaque `resolved_link` URI (ordinal / record-handle selection); the object shape and the source_type enum survive",
   },
   {
@@ -515,7 +515,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3238",
     surface: "stage-message",
     evidence: "coverage[]: ONE object per coverage AREA, EXACTLY {\"area\",\"state\",\"note\"}. … state EXACTLY one of: confirmed-clean / coverage-limited / open / not-searched / note.",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson; the render owns the coverage panel from these typed states",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson; the render owns the coverage panel from these typed states",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -533,7 +533,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3304",
     surface: "stage-message",
     evidence: "MARK ASSESSMENT … STRUCTURED FORM …: either field may instead be an OBJECT {\"read\":\"…\",\"spectrum\":\"…\",\"per_class\":[{\"class\":\"5\",\"note\":\"…\"}],\"per_market\":[{\"market\":\"CN\",\"note\":\"…\"}],\"counter_registrations\":[{\"mark\":\"…\",\"uri\":\"/mark/…\",\"note\":\"…\"}],\"acquired\":\"<optional>\",\"note\":\"<optional residual>",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson; the report collapses the rows behind toggles and the audit workbook renders them",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson; the report collapses the rows behind toggles and the audit workbook renders them",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -542,7 +542,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3310",
     surface: "stage-message",
     evidence: "FOUR ANSWERS …: \"four_answers\": {\"third_party_rights\":{...},\"objection_likelihood\":{...},\"registrability\":{...},\"client_enforceability\":{...}} … Each answer … is {\"read\":\"…\",\"token\":\"…\",\"basis\":\"…\",\"ordinals\":[…]}. Tokens (closed enums …): third_party_rights = strong|moderate|weak; objection_likelih",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -551,7 +551,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3221",
     surface: "stage-message",
     evidence: "ACTIONS REGISTER …: emit \"actions\": [...] — ONE object per forward step …, each EXACTLY {\"id\",\"kind\",\"text\",\"ordinals\"} plus an OPTIONAL \"deadline\" and an OPTIONAL \"condition\". … kind: EXACTLY one of — consent / coexistence-agreement / territorial-delimitation / goods-amendment / mark-modification /",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson; pipeline applyCoverageFloor legalActions arm derives the delivered disposition from the closed kind enum",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson; pipeline applyCoverageFloor legalActions arm derives the delivered disposition from the closed kind enum",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -560,7 +560,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3317",
     surface: "stage-message",
     evidence: "COVERAGE JUDGMENT …: emit \"coverage_judgment\": {\"sufficient\":<bool>, \"reason\":\"<one line…>\"} — EXACTLY those two keys. Do NOT emit \"rows\": the driver writes that register itself … anything you type there is replaced wholesale.",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson. The \"Do NOT emit rows\" clause is the purest E3 case in the tree — the prompt names a field, dictates its shape and states in the same breath that code overwrites it",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson. The \"Do NOT emit rows\" clause is the purest E3 case in the tree — the prompt names a field, dictates its shape and states in the same breath that code overwrites it",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -575,7 +575,7 @@ export const E3_BACKLOG = [
     // in E3_EVIDENCE_UNRESOLVED instead would have grown the not-checked slice for a row that is
     // perfectly checkable, which is the avoidable coverage loss conversion 9's note names one row up.
     evidence: "SEND ONE \"ask_answers\" ENTRY PER ASK, as a TOP-LEVEL field of the findings record you hand to the call (never as a narrative section — the driver renders the labelled line",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson (finding_ask_answer_answer_missing); assembleReportMd · buildAskAnswersSection joins on the retyped ask string",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson (finding_ask_answer_answer_missing); assembleReportMd · buildAskAnswersSection joins on the retyped ask string",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   // DELETED at conversion 10, recorded rather than absorbed — E3's own rule for a
@@ -611,7 +611,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3296",
     surface: "stage-message",
     evidence: "add it to the top-level \"context_notes\" array — each object EXACTLY {\"type\":\"famous-neighbour-ungrounded\",\"mark\",\"owner\",\"context\"}",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -620,7 +620,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3184",
     surface: "stage-message",
     evidence: "- owner: {\"name\",\"country\",\"registrations\":[...]}. … Each registration: {\"uri\", optionally \"classes\":[\"9\",\"41\"],\"status\",\"filed\",\"expiry\",\"jurisdiction\"}. The \"uri\" is the ONLY field that matters: the driver BINDS classes/status/filed/expiry/jurisdiction AND the owner name from the FETCHED record ke",
-    reparsedBy: "driver/findings-model.mjs:813 parseFindingsJson + the record-binding join. Six of the seven keys are stated in the prompt and overwritten by code in the same sentence",
+    reparsedBy: "driver/findings-model.mjs:844 parseFindingsJson + the record-binding join. Six of the seven keys are stated in the prompt and overwritten by code in the same sentence",
     removedByMove: "M1 removes the opaque `uri` (ordinal / record-handle selection against the band); the object skeleton and the five overwritten keys survive",
   },
   {

package/driver/contract-vocabulary.mjs

@@ -21,7 +21,7 @@
 //   D4 verify.mjs  parseCoverageLedgerJson, same shape
 //   D5 verify.mjs:1504  fail(`${unaccounted[0].token}:…`)    — token minted in a DATA ROW
 //   D6 verify.mjs:1567  fail(`${violations[0].token}…`)      — validatePlanFeasibility in register-plan.mjs
-//   D7 verify.mjs:1558  fail(`${v2[0].token}${detail}…`)     — register-plan.mjs:2183 disclosureTextByAxis
+//   D7 verify.mjs:1558  fail(`${v2[0].token}${detail}…`)     — register-plan.mjs:2270 disclosureTextByAxis
 //   D8 verify.mjs:2470 caseLawLedgerFail  fail(caseLawLedgerFail(…))  — token built in case-law-ledger.mjs:195 caseLawLedgerFail
 //
 // A partition built on the 60 tokens a regex CAN see would run green while blind to the rest, which is
@@ -139,10 +139,10 @@ export const VOCABULARY = [
   { token: "coverage_form_missing", stages: ["register-digest"], site: "driver/verify.mjs" },
   { token: "coverage_form_empty", stages: ["register-digest"], site: "driver/verify.mjs" },
   { token: "coverage_status_offenum", stages: ["register-digest"], site: "driver/verify.mjs:2050" },
-  { token: "coverage_deferred_unaccounted", stages: ["register-digest"], site: "driver/verify.mjs coverageFormFail", family: "driver/register-plan.mjs:1860 PROVIDER_HARD_ERROR_PREFIX — token on a data row", dynamic: "D5" },
-  { token: "coverage_clean_unexecuted", stages: ["register-digest"], site: "driver/verify.mjs, the matterContext validator", family: "driver/register-plan.mjs:1594 validatePlanFeasibility", dynamic: "D6" },
-  { token: "coverage_clean_skipped", stages: ["register-digest"], site: "driver/verify.mjs, the matterContext validator", family: "driver/register-plan.mjs:1955 searchedJurisdictionsFromPlan", dynamic: "D6" },
-  { token: "coverage_clean_unverified_incomplete", stages: ["register-digest"], site: "driver/verify.mjs, the matterContext validator", family: "driver/register-plan.mjs:2183 disclosureTextByAxis", dynamic: "D7" },
+  { token: "coverage_deferred_unaccounted", stages: ["register-digest"], site: "driver/verify.mjs coverageFormFail", family: "driver/register-plan.mjs:1947 PROVIDER_HARD_ERROR_PREFIX — token on a data row", dynamic: "D5" },
+  { token: "coverage_clean_unexecuted", stages: ["register-digest"], site: "driver/verify.mjs, the matterContext validator", family: "driver/register-plan.mjs:1681 validatePlanFeasibility", dynamic: "D6" },
+  { token: "coverage_clean_skipped", stages: ["register-digest"], site: "driver/verify.mjs, the matterContext validator", family: "driver/register-plan.mjs:2042 searchedJurisdictionsFromPlan", dynamic: "D6" },
+  { token: "coverage_clean_unverified_incomplete", stages: ["register-digest"], site: "driver/verify.mjs, the matterContext validator", family: "driver/register-plan.mjs:2270 disclosureTextByAxis", dynamic: "D7" },
   { token: "coverage_clean_tainted", stages: ["register-digest"], site: "driver/verify.mjs" },
   { token: "coverage_ledger_", stages: ["register-digest"], site: "driver/verify.mjs", family: "driver/coverage-ledger.mjs (parseCoverageLedgerJson token-first throws)", dynamic: "D4" },
   { token: "coverage_key_unknown", stages: ["register-digest"], site: "driver/verify.mjs", family: "driver/coverage-ledger.mjs", dynamic: "D4" },

package/driver/coverage-form.mjs

@@ -13,7 +13,7 @@
 // PASS; ~86% of emitted tokens landed in no artifact, and the attempt that passed is the one that
 // PATCHED). A cold ladder never patches.
 //
-// THE CURE IS 's, one gate over: the driver writes the row and the model fills in the judgment. The
+// THE CURE IS THE ONE APPLIED ONE GATE OVER: the driver writes the row and the model fills in the judgment. The
 // axis, the coverage unit, the open crowd blocks with their qids and hit counts, and the deferred slices
 // with their per-qid receipt reasons are all facts the driver holds BEFORE the stage dispatches. It
 // writes them. The seat sets `status` and `reason`, and nothing else in the file is the seat's to write.
@@ -856,7 +856,7 @@ export function findCoverageFormViolations(rows, formError = null) {
 // kind and nothing in it is a string the model had to copy. parseCoverageLedgerFull survives, but only as
 // the ARCHIVED-RUN reader (loadCoverageLedger's prose fallback): no gate parses this table any more.
 
-const cell = (s) => String(s ?? "").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim();
+const cell = (s) => String(s ?? "").replace(/\\/g, "\\\\").replace(/\|/g, "\\|").replace(/\s+/g, " ").trim();
 
 /** The `## Coverage ledger` section, rendered from the form's rows. "" when nothing is settled. PURE. */
 export function renderCoverageLedgerSection(rows) {

package/driver/demo-container.mjs

@@ -97,6 +97,30 @@ export function prepareSample(dir, { repoRoot, tmp } = {}) {
 }
 
 
+/**
+ * THE COPIES GO WHEN THEIR PUBLISH IS DONE, AND AT EXIT WHATEVER HAPPENED.
+ *
+ * Every copy below is made in the system temp directory and nothing removed it: four per `demo --once`,
+ * one per demo start, some a full replayed run of about 1,850 files, and 36 GB of them on one machine
+ * (measured 2026-09-19). Each root is recorded as it is made. A caller releases them the moment its
+ * publish is done, and an exit hook removes whatever is left, on success and on failure. A caller that
+ * can be stopped by a signal turns the signal into an exit, so the hook runs then too.
+ */
+const copies = new Set();
+let exitHooked = false;
+function tracked(root) {
+  copies.add(root);
+  if (!exitHooked) { exitHooked = true; process.once("exit", releaseDemoCopies); }
+  return root;
+}
+/** Remove every copy made so far. Safe to call more than once. */
+export function releaseDemoCopies() {
+  for (const d of [...copies]) {
+    try { rmSync(d, { recursive: true, force: true }); } catch { /* going anyway; the exit hook tries again */ }
+    copies.delete(d);
+  }
+}
+
 /**
  * The directory a frozen demo should be PUBLISHED from — itself, or a copy when it is part of this tree.
  *
@@ -117,7 +141,7 @@ export function publishSource(dir, { repoRoot, tmp = tmpdir() } = {}) {
   const root = resolve(repoRoot ?? "");
   const here = resolve(dir);
   if (!root || !(here === root || here.startsWith(root + sep))) return dir;
-  const copy = join(mkdtempSync(join(tmp, "clearotron-demo-")), "sample");
+  const copy = join(tracked(mkdtempSync(join(tmp, "clearotron-demo-"))), "sample");
   cpSync(here, copy, { recursive: true });
   return copy;
 }
@@ -135,7 +159,7 @@ export function publishContainer(root, { repoRoot, tmp = tmpdir() } = {}) {
   const repo = resolve(repoRoot ?? "");
   const here = resolve(root);
   if (!repo || !(here === repo || here.startsWith(repo + sep))) return { dir: root, unusable: demoInventory(root).unusable };
-  const copy = join(mkdtempSync(join(tmp, "clearotron-demo-")), "sample");
+  const copy = join(tracked(mkdtempSync(join(tmp, "clearotron-demo-"))), "sample");
   mkdirSync(copy, { recursive: true });
   const { children, unusable } = demoInventory(here);
   const left = [...unusable];

package/driver/disposition-tool.mjs

@@ -288,8 +288,8 @@ export function callsSoFar(dispositionsPath) {
 export { PARK_AFTER_REFUSALS };
 
 /**
- * Which rows have been refused past the bound. PURE, and counted PER ROW ACROSS CALLS — the unit 's
- * own banner records an earlier investigation dying on, when it joined per-row-final-state instead.
+ * Which rows have been refused past the bound. PURE, and counted PER ROW ACROSS CALLS — the unit this
+ * module's own banner records an earlier investigation dying on, when it joined per-row-final-state instead.
  *
  * A row that is ruled later is never re-parked, because the union only parks rows that are not ruled.
  * @returns {string[]} row_ids, sorted, so the same ledger always yields the same answer.

package/driver/engine/CONTRACT.md

@@ -145,7 +145,7 @@ Stages must name **abstract tiers**, not provider aliases. Per-engine maps:
 | `sweep` | register-unit, case-law, skeptic, report-overview, report-card | `sonnet` | `$CLEAROTRON_OPENAI_MODEL_SWEEP` |
 | `cheap` | saturation-probe | `haiku` | `$CLEAROTRON_OPENAI_MODEL_CHEAP` |
 
-**AN UNHONOURED OVERRIDE IS AN ERROR, NOT A SUBSTITUTION** ( corruption 3, 2026-08-03). This
+**AN UNHONOURED OVERRIDE IS AN ERROR, NOT A SUBSTITUTION** (2026-08-03). This
 section used to declare two further tiers — `skeptic` → `google/gemini-3-flash-preview` and
 `refutation` → `together/deepseek-ai/DeepSeek-V4-Pro` — each substituting an anthropic model on the
 anthropic engine, "grade-moving, validated only in the paid A/B". The substitution never was validated
@@ -191,7 +191,7 @@ disarms the refusal and never the record.
 | `max` | `max` | `xhigh` |
 
 `off` used to map to `minimal` on codex and `low` on claude — a whole rung apart at the bottom, so a
-cross-engine effort comparison at `off` was off by one ( corruption 4a).`low` is the anthropic
+cross-engine effort comparison at `off` was off by one. `low` is the anthropic
 floor, so codex came up to it and codex's `minimal` is deliberately unreachable from the driver's tier
 vocabulary. `max` is the one sanctioned divergence: it means "this engine's top rung", and codex has no
 `max`. `engine.anthropic.test.mjs` pins the two tables together and asserts that single exception.
@@ -200,7 +200,7 @@ vocabulary. `max` is the one sanctioned divergence: it means "this engine's top
 (`assertEffectiveTier`), on the EFFECTIVE tier rather than the declared one: Haiku 4.5 rejects adaptive
 thinking and the request bounces to sonnet, so the pairing measures sonnet and records haiku. Both ways
 it can arise are runtime overrides that never touch the stage table (`CLEAROTRON_STAGE_THINKING`, an
-`--experiment --model`), which is why the start-of-run scan alone could not see it ( corruption 4b).
+`--experiment --model`), which is why the start-of-run scan alone could not see it.
 
 ## 4. `claude -p` invocation (anthropic-agent)
 

package/driver/engine/mcp/gather-config.mjs

@@ -212,7 +212,7 @@ const RECORDING = Object.freeze({
   // SECOND — skeptic, same shape ( is the template). Its OWN key, so blind-frame's seat is never
   // handed record_skeptic and skeptic is never handed record_blind_frame.
   //
-  // skeptic's key carries a SECOND tool: search_run_artifacts, the sanctioned read surface ('s
+  // skeptic's key carries a SECOND tool: search_run_artifacts, the sanctioned read surface (the
   // ratification hold, unlock path 1). A READ over the run's own tree, not retrieval — it dials nothing,
   // writes nothing, and is bounded to CLEAROTRON_BAND_RUN_DIR by construction (skeptic-search.mjs). It
   // replaces the artifact half of the Bash reads O3c measured; the skill-doc half was already the seeded

package/driver/engine/mcp/recording-server.mjs

@@ -1132,7 +1132,7 @@ serve({
               factors: { type: "array", minItems: 2, maxItems: 4, items: { type: "string" }, description: "2–4 one-line load-bearing observations behind the band." },
               counterFactors: { type: "array", minItems: 1, maxItems: 3, items: { type: "string" }, description: "1–3 one-line statements of what holds this name at this band rather than the next, either way." },
               mitigation: { type: "string", description: "May be \"\" when nothing would move the band — but SEND THE KEY, so a considered \"none\" is not confusable with an omission." },
-              assessment: { type: "string", description: "The opening paragraph a reader of THIS MARK'S own report sees first: what the name is, what the landscape looks like, what drives the rating, what to do with it." },
+              assessment: { type: "string", description: "The opening paragraph a reader of THIS MARK'S own report sees first: what the name is, what the landscape looks like, what drives the rating." },
               contextFraming: { type: "string" },
               registerEstimate: { type: "string" },
               parodyNote: { type: ["string", "null"] },