clearotron 0.3.2-beta.8 → 0.3.2-beta.9

package/driver/contract-e3-backlog.mjs

@@ -101,17 +101,17 @@ export const E3_DATA_INPUT_EXEMPTIONS = [
 ];
 
 export const E3_BACKLOG = [
-  // ── prelim-variants: FOUR ROWS RETIRED BY CONVERSION 3 ──────────────────────────────────────────
+  // ── clearance-variants: FOUR ROWS RETIRED BY CONVERSION 3 ──────────────────────────────────────────
   //
   // Two `literal-json-skeleton` and two `exactly-these-keys`, all four stamped "NOTHING ON THE PLAN
   // REMOVES THIS". The conversion removed them:
   //
   //   stages.mjs:922            the dispatch dictated variant-manifest.json key by key and enum by enum;
-  //                             `record_prelim_variants`'s schema IS that shape now, so the key-set and
+  //                             `record_clearance_variants`'s schema IS that shape now, so the key-set and
   //                             enum families are unreachable from a typed call rather than caught after
   //                             the file is written.
   //   stages.mjs:774-808        the same skeleton's category enum, same fate.
-  //   prelim-variants SKILL.md  the `### Scope ledger` markdown table and its column contract. The rows
+  //   clearance-variants SKILL.md  the `### Scope ledger` markdown table and its column contract. The rows
   //                             arrive typed; the driver renders the table AND serialises
   //                             scope-ledger.json from them through one shared function.
   //
@@ -185,14 +185,14 @@ export const E3_BACKLOG = [
     // it one: authored once in renderConnotationObligations, and reaching the seat through the perplexity
     // MCP server (driver/engine/mcp/perplexity-server.mjs:111) rather than a stage message. Three rows
     // pointing at one block would fabricate two authored sites the surface does not have.
-    where: "driver/connotation-search.mjs:1480-1493 (renderConnotationObligations; delivered to the seat via driver/engine/mcp/perplexity-server.mjs:111 — a TOOL RESPONSE, no longer a stage message)",
+    where: "driver/connotation-search.mjs:1480-1493, renderConnotationObligations() in connotation-search.mjs (delivered to the seat via driver/engine/mcp/perplexity-server.mjs:111 — a TOOL RESPONSE, no longer a stage message)",
     surface: "tool-response",
     // ── (a) THE ORIGINAL SUBJECT WAS DELETED BY DESIGN — DISCHARGED, NOT FAILED ────────────────────
     // The old rows dictated `receipt_id` (an 8-char token the seat copied) and `quote`. Both are gone:
     //   receipt_id — M1 LANDED. stages.mjs states it outright: "No seat-facing text displays an id shape
     //     any more", and connotation-search.mjs carries " M1, FINISHED" over the retired text. The
     //     seat now gives `receipt_index`, a POSITION, and the driver resolves position to id.
-    //   quote      — M2 LANDED. The live field is `anchor` (prelim-common-law/SKILL.md:197).
+    //   quote      — M2 LANDED. The live field is `anchor` (clearance-common-law/SKILL.md:197).
     // Neither was reworded. Both were removed, and this row is discharged of them.
     //
     // ── (b) THE NEW, NARROWER CLAIM — RE-EVIDENCED for B (the form path is DELETED, ruling
@@ -209,7 +209,7 @@ export const E3_BACKLOG = [
   {
     stage: "common-law",
     kind: "literal-json-skeleton",
-    where: "driver/skills/prelim-common-law/SKILL.md:123-170",
+    where: "driver/skills/clearance-common-law/SKILL.md:123-170",
     surface: "skill-file",
     evidence: "### Format\\n```markdown\\n# Common-law findings — Dawn: Legends of Thornmantle (2026-05-11)\\n\\n## Summary\\n\\n- Perplexity calls executed: 4 …",
     reparsedBy: "driver/publish/audit-from-spine.mjs:14 parseTables → parseSpineFindingBlocks (audit-from-spine.mjs:123) re-parses the common-law finding tables into audit.md",
@@ -218,7 +218,7 @@ export const E3_BACKLOG = [
   {
     stage: "common-law",
     kind: "dictated-line-shape",
-    where: "driver/skills/prelim-common-law/SKILL.md:192 (restated at driver/skills/prelim-search/synthesis-rules.md:394)",
+    where: "driver/skills/clearance-common-law/SKILL.md:192 (restated at driver/skills/clearance-search/synthesis-rules.md:394)",
     surface: "skill-file",
     evidence: "A clean PR/connotation row MUST cite its search — add a `**Connotation-search source:** <URL | \"perplexity_research — no result\">` line.",
     reparsedBy: "driver/connotation-search.mjs — validators.commonLaw rejects a clean claim with no such line (connotation_search_missing); the hint is re-dictated by correctionHint() in gateway.mjs",
@@ -259,7 +259,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:2253 (the non-supplemental-lane branch)",
     surface: "stage-message",
     evidence: "BAND ARTIFACT (MANDATORY): ALSO write the COMPLETE NAMED BAND for this axis to <path> — a JSON ARRAY, one block per register_enumerate / count-probe call, in the named-band contract: {\"state\":\"enumerated\",\"query\":\"<what was searched>\",\"total_hits\":N,\"records\":[{record_id, mark_text, classes, status,",
-    reparsedBy: "driver/named-band.mjs parseNamedBand / bandRecords / bandCrowds / mergeNamedBands (named in driver/skills/prelim-register/unit.md:60-62); validators.registerUnit",
+    reparsedBy: "driver/named-band.mjs parseNamedBand / bandRecords / bandCrowds / mergeNamedBands (named in driver/skills/clearance-register/unit.md:60-62); validators.registerUnit",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -274,7 +274,7 @@ export const E3_BACKLOG = [
   {
     stage: "register-unit",
     kind: "literal-json-skeleton",
-    where: "driver/skills/prelim-register/unit.md:83-97",
+    where: "driver/skills/clearance-register/unit.md:83-97",
     surface: "skill-file",
     evidence: "Two block shapes (no third):\\n```json\\n[\\n { \"state\":\"enumerated\", \"query\":\"…\", \"total_hits\": 12, \"records\": [ { \"record_id\":\"/mark/eu/018…\", \"mark_text\":\"…\", … } ] },\\n { \"state\":\"incomplete\", \"query\":\"…\", \"total_hits\": 2416, \"fetched\": 1, \"sample\":[ … ], \"reason\":\"…\" }\\n]\\n```",
     reparsedBy: "driver/named-band.mjs parseNamedBand — named in the skill file itself at unit.md:60-62",
@@ -322,7 +322,7 @@ export const E3_BACKLOG = [
     where: "driver/skills/placement-inquiry/SKILL.md:42",
     surface: "skill-file",
     evidence: "Use these section headings, in this order: **Band reconciliation** …, the four placement tiers (**Headline candidates**, **Sheet 2 / register watch**, **Watchlist annex**, **Out-of-scope / filtered**), **Disagreements / flags surfaced to downstream**, **Coverage rulings & open questions** …, and **O",
-    reparsedBy: "driver/pipeline.mjs — the PLACEMENT RULINGS TAIL block handed to register-digest is lifted from these named sections (stages.mjs:2559 references it); driver/skills/prelim-register/digest.md:342-352 re-parses the Disagreements section into its own table",
+    reparsedBy: "driver/pipeline.mjs — the PLACEMENT RULINGS TAIL block handed to register-digest is lifted from these named sections (stages.mjs:2559 references it); driver/skills/clearance-register/digest.md:342-352 re-parses the Disagreements section into its own table",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   // RETIRED 2026-08-16 — register-digest's no-form arm. M6 DELETED THE DICTATION ON 2026-08-14 AND THIS
@@ -370,7 +370,7 @@ export const E3_BACKLOG = [
   {
     stage: "register-digest",
     kind: "dictated-line-shape",
-    where: "driver/skills/prelim-register/digest.md:164 (Dominant-element reconciliation — the crowd row's `unit` grammar)",
+    where: "driver/skills/clearance-register/digest.md:164 (Dominant-element reconciliation — the crowd row's `unit` grammar)",
     surface: "skill-file",
     evidence: "`<axis> / dominant-element crowd (<N> members): <one-line label for the residual class>`",
     reparsedBy: "driver/coverage-ledger.mjs crowdRulingCount reads `<N>` back out of the `unit` cell, and driver/recall-reconciliation.mjs parseCrowdRulings turns it into the residual denominator the delivery gate blocks on",
@@ -379,7 +379,7 @@ export const E3_BACKLOG = [
   {
     stage: "register-digest",
     kind: "exactly-these-keys",
-    where: "driver/skills/prelim-register/digest.md:233-241",
+    where: "driver/skills/clearance-register/digest.md:233-241",
     surface: "skill-file",
     evidence: "- `axis` — EXACTLY one bare token of: `saturation-probe` / `primary-sweep` / `transliteration-numeric` / `incumbent-class`. **That vocabulary is CLOSED** and a row whose axis is outside it is refused.",
     reparsedBy: "driver/coverage-form.mjs (seat-row contract; SEAT_ROW_CONTRACT rides the accumulator) — and, since the typed-transport conversion, driver/coverage-call.mjs validateCoverageCall refuses an off-vocabulary axis AT CALL TIME (axis_invalid), so the dictation is receiver-checked in the same turn it is obeyed",
@@ -399,7 +399,7 @@ export const E3_BACKLOG = [
     // closed vocabulary sent through the `record_coverage` typed call (the transport conversion, B's
     // pattern). The seat opens no file and writes no table; the dictated shape is the call's own two
     // values, receiver-validated as they arrive.
-    where: "driver/skills/prelim-register/digest.md:216-218",
+    where: "driver/skills/clearance-register/digest.md:216-218",
     surface: "skill-file",
     evidence: "- `status` — EXACTLY one bare token: `confirmed-clean` / `coverage-limited` / `deferred`. Qualifiers never go in the status; they go in the reason.",
     reparsedBy: "driver/coverage-call.mjs validateCoverageCall (status_invalid at call time) + driver/coverage-form.mjs rowIsSettled via validators.registerFindings; the archived-era prose-table reader (coverage-ledger.mjs parseCoverageLedgerFull) survives for replay only",
@@ -408,7 +408,7 @@ export const E3_BACKLOG = [
   {
     stage: "register-digest",
     kind: "exactly-these-keys",
-    where: "driver/skills/prelim-register/SKILL.md:198-199",
+    where: "driver/skills/clearance-register/SKILL.md:198-199",
     surface: "skill-file",
     evidence: "**The status vocabulary is CLOSED: EXACTLY one bare token of: `confirmed-clean` / `coverage-limited` / `deferred`.** Qualifiers never go in a status cell; they go in the reason.",
     reparsedBy: "driver/coverage-form.mjs / driver/coverage-ledger.mjs. Since the typed-transport conversion the STAGE MESSAGE no longer restates the enum; the surviving copies are SKILL.md (here), digest.md:207, the dispatch brief (coverage-form.mjs coverageFormBrief), the record_coverage schema (coverage-server.mjs) and gateway.mjs's repair hints — still one enum spelled at five sites",
@@ -417,7 +417,7 @@ export const E3_BACKLOG = [
   // ── DISCHARGED 2026-08-17 by (skeptic's conversion) ───────────────────────────────────────────
   //
   // It read: stage "skeptic", kind "dictated-line-shape", where
-  // "driver/skills/prelim-search/phase2-execution.md:96-98", evidence "`## Escalation decisions` section the
+  // "driver/skills/clearance-search/phase2-execution.md:96-98", evidence "`## Escalation decisions` section the
   // driver parses verbatim: one `ESCALATE: <axis> — <reason>` line per register axis …", reparsedBy
   // "pipeline.mjs (same regex) — **the shape is dictated twice, in the message and in the skill file**",
   // removedByMove "NOTHING ON THE PLAN REMOVES THIS".
@@ -590,7 +590,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:3081 (restated at driver/skills/prelim-search/synthesis-rules.md:428)",
+    where: "driver/stages.mjs:3081 (restated at driver/skills/clearance-search/synthesis-rules.md:428)",
     surface: "stage-message",
     evidence: "END that finding's actual-use line with a literal \"- **Use-check source:** <result URL | \"perplexity_research — no result\">\" line",
     reparsedBy: "driver/verify.mjs validators.narrative (spec-11 hard reject); the repair hint re-dictates the literal at driver/gateway.mjs:2153",
@@ -599,7 +599,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:3094 (restated at driver/skills/prelim-search/synthesis-rules.md:475)",
+    where: "driver/stages.mjs:3094 (restated at driver/skills/clearance-search/synthesis-rules.md:475)",
     surface: "stage-message",
     evidence: "END that finding's reasoning with a literal \"- **Own-rights source:** <record URI(s) | \"no applicant-owned registrations in the searched register material\">\" line",
     reparsedBy: "driver/own-rights.mjs:19-22 — \"This module only requires the 'Own-rights source:' line to exist\"; repair hint at driver/gateway.mjs:2361 (the `own_rights_missing` branch; re-verified 2026-08-29 — the old :1736 predated this branch and pointed into the A4 repeat-signature block)",
@@ -638,7 +638,7 @@ export const E3_BACKLOG = [
     where: "driver/stages.mjs:3474",
     surface: "stage-message",
     evidence: "EVERY \"Grounded profile\" section MUST start its body with the line \"- ord: <N>\" naming which finding it grounds (use the ordinal from this list; a profile that grounds no listed finding omits the line)",
-    reparsedBy: "driver/publish/parse.mjs:339 parseCaseLawProfiles (\"the optional '- ord: <N>' first body line … gives an EXACT join\"); driver/findings-model.mjs:273 /^-\\s*ord:\\s*(\\d+)\\s*$/m; driver/publish/index.mjs:778 runOrigins",
+    reparsedBy: "driver/publish/parse.mjs:339, parseCaseLawProfiles() in parse.mjs (\"the optional '- ord: <N>' first body line … gives an EXACT join\"); driver/findings-model.mjs:273 /^-\\s*ord:\\s*(\\d+)\\s*$/m; driver/publish/index.mjs:778 runOrigins",
     removedByMove: "NOTHING ON THE #850 PLAN REMOVES THIS",
   },
   {
@@ -822,7 +822,7 @@ export const E3_UNPLANNED = E3_BACKLOG.filter((e) => e.removedByMove === "NOTHIN
  * ── TRIAGED 2026-08-16. NOT ONE ROW WAS STALE. ────────────────────────────────────────────
  *
  * All 15 were read against their sites. Every one described a dictation that still exists; what failed was
- * always the QUOTE. Three are re-quoted in this commit and clear: prelim-variants (its evidence was a
+ * always the QUOTE. Three are re-quoted in this commit and clear: clearance-variants (its evidence was a
  * DESCRIPTION OF the site rather than text FROM it, so no matcher could ever have resolved it),
  * narrative-refutation (the sentence survives; its four kinds moved onto their own bullet lines), and
  * report-card (the dictation moved FILE, into the second path this row already named).

package/driver/contract-e3-baseline.json

@@ -5,7 +5,7 @@
       "exactly-these-keys": 0,
       "dictated-line-shape": 0
     },
-    "prelim-variants": {
+    "clearance-variants": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 0
@@ -97,12 +97,12 @@
       "exactly-these-keys": 0,
       "dictated-line-shape": 1
     },
-    "skills/prelim-variants/SKILL.md": {
+    "skills/clearance-variants/SKILL.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 1
     },
-    "skills/prelim-variants/transliteration-scripts.md": {
+    "skills/clearance-variants/transliteration-scripts.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 1
@@ -112,17 +112,17 @@
       "exactly-these-keys": 2,
       "dictated-line-shape": 0
     },
-    "skills/prelim-common-law/SKILL.md": {
+    "skills/clearance-common-law/SKILL.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 1,
       "dictated-line-shape": 2
     },
-    "skills/prelim-register/SKILL.md": {
+    "skills/clearance-register/SKILL.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 4
     },
-    "skills/prelim-register/unit.md": {
+    "skills/clearance-register/unit.md": {
       "literal-json-skeleton": 5,
       "exactly-these-keys": 0,
       "dictated-line-shape": 6
@@ -132,12 +132,12 @@
       "exactly-these-keys": 3,
       "dictated-line-shape": 1
     },
-    "skills/prelim-register/digest.md": {
+    "skills/clearance-register/digest.md": {
       "literal-json-skeleton": 1,
       "exactly-these-keys": 1,
       "dictated-line-shape": 4
     },
-    "skills/prelim-search/phase2-execution.md": {
+    "skills/clearance-search/phase2-execution.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 3
@@ -147,27 +147,27 @@
       "exactly-these-keys": 2,
       "dictated-line-shape": 0
     },
-    "skills/prelim-search/synthesis-rules.md": {
+    "skills/clearance-search/synthesis-rules.md": {
       "literal-json-skeleton": 1,
       "exactly-these-keys": 1,
       "dictated-line-shape": 2
     },
-    "skills/prelim-search/firm-wide-reasoning.md": {
+    "skills/clearance-search/firm-wide-reasoning.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 0
     },
-    "skills/prelim-search/risk-framework.md": {
+    "skills/clearance-search/risk-framework.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 0
     },
-    "skills/prelim-search/worked-examples.md": {
+    "skills/clearance-search/worked-examples.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 1
     },
-    "skills/prelim-search/report-prose.md": {
+    "skills/clearance-search/report-prose.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
       "dictated-line-shape": 0
@@ -182,7 +182,7 @@
       "exactly-these-keys": 2,
       "dictated-line-shape": 1
     },
-    "skills/prelim-search/delivery-contract.md": {
+    "skills/clearance-search/delivery-contract.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 1,
       "dictated-line-shape": 1

package/driver/contract-vocabulary.mjs

@@ -41,13 +41,13 @@
 // ── PER-STAGE, NEVER GLOBAL ─────────────────────────────────────────────────────────────────────────
 //
 // `too_short` and `missing` come from the shared nonEmpty()/needs() helpers (verify.mjs:123-133) and are
-// legitimately owned by DIFFERENT elements in matter-frame, prelim-variants and frame-diff. A global
+// legitimately owned by DIFFERENT elements in matter-frame, clearance-variants and frame-diff. A global
 // token→element map sees several owners for one token and "fixes" a partition that was never violated.
 // Every row therefore carries `stages`, and the partition is computed per (token, stage) pair.
 
 /** The 16 stages of STAGES in stages.mjs. Kept here so a stage added there fails this file's own test. */
 export const ALL_STAGES = [
-  "matter-frame", "prelim-variants", "blind-frame", "common-law", "common-law-half", "register-unit",
+  "matter-frame", "clearance-variants", "blind-frame", "common-law", "common-law-half", "register-unit",
   "placement-inquiry", "register-digest", "skeptic", "frame-diff", "synthesis", "case-law",
   "narrative-refutation", "doubt-closure", "report-overview", "report-card",
 ];
@@ -65,7 +65,7 @@ const CL = ["common-law", "common-law-half"];
 export const VOCABULARY = [
   // ── the shared helpers: one token, many stages, different owners per stage ─────────────────────────
   { token: "too_short", stages: ALL_STAGES.filter((s) => !["blind-frame", "doubt-closure", "narrative-refutation"].includes(s)), site: "driver/verify.mjs:133" },
-  { token: "missing", stages: ["matter-frame", "prelim-variants", "common-law", "common-law-half", "placement-inquiry", "register-digest", "doubt-closure", "report-overview", "report-card"], site: "driver/verify.mjs:164" },
+  { token: "missing", stages: ["matter-frame", "clearance-variants", "common-law", "common-law-half", "placement-inquiry", "register-digest", "doubt-closure", "report-overview", "report-card"], site: "driver/verify.mjs, in needs()" },
 
   // ── common-law / common-law-half ───────────────────────────────────────────────────────────────────
   { token: "declared_unavailable", stages: CL, site: "driver/verify.mjs" },
@@ -151,18 +151,18 @@ export const VOCABULARY = [
   { token: "coverage_classes_invalid", stages: ["register-digest"], site: "driver/verify.mjs", family: "driver/coverage-ledger.mjs", dynamic: "D4" },
   { token: "plan_execution_unreadable", stages: ["register-digest", "narrative-refutation"], site: "driver/verify.mjs:1496, 1712" },
 
-  // ── matter-frame / prelim-variants / blind-frame / frame-diff ──────────────────────────────────────
-  { token: "stagecontracts_invalid", stages: ["matter-frame", "prelim-variants", "placement-inquiry", "case-law"], site: "driver/verify.mjs:1539, 1170, 1366, 1677" },
+  // ── matter-frame / clearance-variants / blind-frame / frame-diff ──────────────────────────────────────
+  { token: "stagecontracts_invalid", stages: ["matter-frame", "clearance-variants", "placement-inquiry", "case-law"], site: "driver/verify.mjs:1539 coverageEntryList, 1170, 1366, 1677" },
   { token: "meaning_angles_missing", stages: ["matter-frame"], site: "driver/verify.mjs" },
   { token: "frame_scope_missing", stages: ["matter-frame"], site: "driver/verify.mjs:1119" },
-  { token: "variantmodel_romanization_missing", stages: ["prelim-variants"], site: "driver/verify.mjs" },
-  { token: "variantmodel_family_incomplete", stages: ["prelim-variants"], site: "driver/verify.mjs" },
-  { token: "variantmodel_term_markup", stages: ["prelim-variants"], site: "driver/verify.mjs" },
-  { token: "variantmodel_missing", stages: ["prelim-variants"], site: "driver/verify.mjs:1171 checkFindingsSibling, 1230 checkJson" },
+  { token: "variantmodel_romanization_missing", stages: ["clearance-variants"], site: "driver/verify.mjs" },
+  { token: "variantmodel_family_incomplete", stages: ["clearance-variants"], site: "driver/verify.mjs" },
+  { token: "variantmodel_term_markup", stages: ["clearance-variants"], site: "driver/verify.mjs" },
+  { token: "variantmodel_missing", stages: ["clearance-variants"], site: "driver/verify.mjs:1171 checkFindingsSibling, 1230 checkJson" },
   // Recovered during E2 authoring, absent from the draft census: variant-manifest.json is strict-parsed
   // through checkSiblingJson (verify.mjs:1241) → checkJson (:742), so the WHOLE variantmodel_* family
-  // reaches prelim-variants, not just the four literal tokens above.
-  // CONVERSION 3 widened this family's SOURCE without widening its prefix. `acceptPrelimVariants` raises
+  // reaches clearance-variants, not just the four literal tokens above.
+  // CONVERSION 3 widened this family's SOURCE without widening its prefix. `acceptClearanceVariants` raises
   // `variantmodel_scope_layer_invalid`, `_scope_status_invalid`, `_scope_item_missing` and `_scope_pipe`
   // at the ACCEPTANCE BOUNDARY — the call is refused in the turn where restating is free, and no manifest
   // reaches disk. They share the prefix deliberately: a seat reading one refused call should not have to
@@ -172,7 +172,7 @@ export const VOCABULARY = [
   // `fail(` / `throw new Error(` / `=>` string literals, and every record module returns
   // `{ok: false, reason}` instead — measured, all four extract ZERO tokens. So this row is authored, not
   // extracted, and nothing re-derives it if the module grows a member. Filed as.
-  { token: "variantmodel_", stages: ["prelim-variants"], site: "driver/verify.mjs:1171 checkFindingsSibling → 742 (JSON family); driver/prelim-variants-record.mjs acceptPrelimVariants (scope-ledger transport family)", family: "driver/variant-manifest-model.mjs (token-first throws) + driver/prelim-variants-record.mjs", dynamic: "D3" },
+  { token: "variantmodel_", stages: ["clearance-variants"], site: "driver/verify.mjs:1171 checkFindingsSibling → 742 (JSON family); driver/clearance-variants-record.mjs acceptClearanceVariants (scope-ledger transport family)", family: "driver/variant-manifest-model.mjs (token-first throws) + driver/clearance-variants-record.mjs", dynamic: "D3" },
   { token: "blindframe_", stages: ["blind-frame"], site: "driver/verify.mjs blindFrame → checkJson", family: "driver/blind-frame-model.mjs", dynamic: "D3" },
   // — THE SKEPTIC TRANSPORT FAMILY, WHICH HAD NO ROW AT ALL. Nine tokens minted by acceptSkeptic
   // and not one of them was covered here: the conversion that moved them to the acceptance boundary moved
@@ -209,6 +209,9 @@ export const VOCABULARY = [
 
   // ── placement-inquiry ──────────────────────────────────────────────────────────────────────────────
   { token: "placementmodel_missing", stages: ["placement-inquiry"], site: "driver/verify.mjs:1352, 1379" },
+  { token: "placement_unjudged", stages: ["placement-inquiry"], site: "driver/verify.mjs placementAccountVerdict" },
+  { token: "placement_register_unrendered", stages: ["placement-inquiry"], site: "driver/verify.mjs placementAccountVerdict" },
+  { token: "placement_form_unreadable", stages: ["placement-inquiry"], site: "driver/verify.mjs placementAccountVerdict" },
   { token: "placement", stages: ["placement-inquiry"], site: "driver/verify.mjs:1352 → 742", family: "driver/placement-model.mjs (`placement_*` and `placements_*`)", dynamic: "D3" },
 
   // ── case-law / narrative-refutation ────────────────────────────────────────────────────────────────
@@ -261,7 +264,7 @@ export function normalizeFailToken(raw) {
 export const ARM1_EXEMPTIONS = [
   {
     token: "stagecontracts_invalid",
-    stages: ["matter-frame", "prelim-variants", "placement-inquiry", "case-law"],
+    stages: ["matter-frame", "clearance-variants", "placement-inquiry", "case-law"],
     reason: "The artifact is DRIVER-written (pipeline.mjs recordStageContract → _driver/stage-contracts.json). A corrupt one is a code or filesystem fault, and verify.mjs:1095 says so in its own comment. Pinning it on a model element would be the exact inversion #850 forbids — a mechanical failure wearing a model's name.",
   },
   // `tool_timeout` was on this list and has been REMOVED: register-unit's tool-written "execute the
@@ -387,12 +390,12 @@ export const TRIPWIRE_OUT_OF_SCOPE = [
     token: "no_citations",
     symbol: { file: "driver/case-law-ledger.mjs", names: ["findCaseLawLedgerViolations", "CASE_LAW_ADVISORY_REASONS", "isCaseLawBlocking"] },
     site: "driver/case-law-ledger.mjs:179 (minted), :65 CASE_LAW_ADVISORY_REASONS, :67 isCaseLawBlocking",
-    reason: "ADVISORY, and filtered before the token is built. `caseLawLedgerFail` keeps only blocking violations (case-law-ledger.mjs:196), and `no_citations` is the one member of CASE_LAW_ADVISORY_REASONS — so it cannot appear even in the `caselaw_ledger` census payload, let alone as a token head. It is the honest no-on-point-precedent result the report is allowed to state; failing a run for it would manufacture citations.",
+    reason: "ADVISORY, and filtered before the token is built. caseLawLedgerFail() in case-law-ledger.mjs keeps only blocking violations (:196), and `no_citations` is the one member of CASE_LAW_ADVISORY_REASONS — so it cannot appear even in the `caselaw_ledger` census payload, let alone as a token head. It is the honest no-on-point-precedent result the report is allowed to state; failing a run for it would manufacture citations.",
   },
   {
     token: "accepted_not_folded",
     symbol: { file: "driver/disposition-call.mjs", names: ["CALL_DROPS"] },
-    site: "driver/disposition-tool.mjs:378 (minted), driver/disposition-call.mjs:192 (CALL_DROPS)",
+    site: "driver/disposition-tool.mjs:378 recordDispositions — where the token is minted, driver/disposition-call.mjs:192 CALL_DROPS",
     reason: "A DRIVER-FAULT journal code, and the fault is ours. It records that the tool accepted a row the accumulator then did not carry; it is written to the call verdict ledger and reaches a seat only inside a sentence that orders the seat NOT to act (`your answer was valid and this is ours to fix`). A stage refusal built on it would be the driver failing a seat for the driver's own defect, so no stage can emit it by construction rather than by omission.",
   },
   {
@@ -477,7 +480,7 @@ export const INNER_CODES = Object.freeze([
 
   // ── case-law-ledger.mjs — ONE token, the codes as census payload ─────────────────────────────────
   //
-  // `caseLawLedgerFail` (case-law-ledger.mjs:195) returns `caselaw_ledger:<census>;<detail>`, and
+  // caseLawLedgerFail() in case-law-ledger.mjs (:195) returns `caselaw_ledger:<census>;<detail>`, and
   // `normalizeFailToken` cuts at the first colon — so the token is `caselaw_ledger` and every code below
   // lives in the payload. The `caselaw_ledger` row already carries `family:
   // "driver/case-law-ledger.mjs:204 (census reasons)"`, which is this ruling written down before the
@@ -551,7 +554,7 @@ export const COVERED_SOURCES = [
   // its token-first throw through unchanged, so their families are already covered where they are raised.
   // They are listed anyway, because the cost of listing a module that mints nothing is zero and the cost
   // of the alternative — noticing, one day, that a module started minting — is the whole of this issue.
-  "prelim-variants-record.mjs", "skeptic-record.mjs", "frame-diff-record.mjs", "blind-frame-record.mjs",
+  "clearance-variants-record.mjs", "skeptic-record.mjs", "frame-diff-record.mjs", "blind-frame-record.mjs",
   // Conversion 4 — and this one MINTS, unlike the two delegating modules above it.
   "report-overview-record.mjs",
   // Conversion 5 — the fan-out transport; it mints its own family including the bound-index refusals.
@@ -560,6 +563,10 @@ export const COVERED_SOURCES = [
   // tripwire must read this module's token literals too. Without it the accounting family could grow a
   // member that no vocabulary row covers and nothing would notice, which is this list's whole subject.
   "register-digest-record.mjs",
+  // verify.mjs reaches `placementRenderAccount`, the placement pass's own account of what it recorded, and
+  // that module names the parser tokens it sorts rows by. It mints none of its own: every token it carries
+  // is placement-model.mjs's, passed through, so the `placement` family row already covers them.
+  "placement-form.mjs",
 ];
 
 /**

package/driver/deliver-trigger.sh

@@ -22,11 +22,11 @@
 set -u
 
 # this fallback chain MIRRORS driver.config.mjs (`outboxDir` = CLEAROTRON_OUTBOX_DIR, else
-# <workspaceRoot>/prelim-outbox; `workspaceRoot` = CLEAROTRON_WORK_DIR, else $HOME/trademark/workspace).
+# <workspaceRoot>/clearance-outbox; `workspaceRoot` = CLEAROTRON_WORK_DIR, else $HOME/trademark/workspace).
 # It is a second derivation of the same answer in a language that cannot import the first, so it moves
 # whenever that one does. If they disagree, the driver writes markers where this script never looks and
 # delivery stops with nothing in any log — the shape prelim-outbox.path already has.
-OUTBOX="${CLEAROTRON_OUTBOX_DIR:-${CLEAROTRON_WORK_DIR:-${OPENCLAW_HOME:-$HOME}/trademark/workspace}/prelim-outbox}"
+OUTBOX="${CLEAROTRON_OUTBOX_DIR:-${CLEAROTRON_WORK_DIR:-${OPENCLAW_HOME:-$HOME}/trademark/workspace}/clearance-outbox}"
 OPENCLAW="$(command -v openclaw || echo "${OPENCLAW_HOME:-$HOME}/.npm-global/bin/openclaw")"
 HELPER="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)/outbox-backoff.mjs"
 DRAIN_WAIT="${CLEAROTRON_OUTBOX_DRAIN_WAIT:-180}"
@@ -58,7 +58,7 @@ MSG="The trademark engine's outbox has pending events. Run the clearotron-delive
 # below still runs, so a refusal cannot hot-loop the level-triggered .path unit.
 WALL="$(command -v timeout || command -v gtimeout || true)"
 if [ -z "$WALL" ]; then
-  echo "prelim-outbox: REFUSING TO WAKE — neither timeout(1) nor gtimeout(1) is on PATH, and every" >&2
+  echo "clearance-outbox: REFUSING TO WAKE — neither timeout(1) nor gtimeout(1) is on PATH, and every" >&2
   echo "  courier wake runs under it as an enforced wall (a wake that cannot be killed wedged this" >&2
   echo "  lane for 19h on 2026-07-04). NO event has been touched — they are all still pending and" >&2
   echo "  will deliver as soon as this is fixed. Install GNU coreutils on this host (Debian/Ubuntu:" >&2
@@ -70,7 +70,7 @@ fi
 
 # C5 — deterministic rescan FIRST (cheap: readdir + status.json of unsettled runs only). On a timer fire
 # this is what creates the work; on a marker fire it is a free consistency pass. Failure-tolerant.
-node "$HELPER" rescan || echo "prelim-outbox: rescan failed (non-fatal — existing markers still processed)"
+node "$HELPER" rescan || echo "clearance-outbox: rescan failed (non-fatal — existing markers still processed)"
 
 [ -d "$OUTBOX" ] || exit 0
 shopt -s nullglob
@@ -89,7 +89,7 @@ for m in "${markers[@]}"; do
   if printf '%s' "$a" | grep -qE '^[A-Za-z0-9_-]+$'; then
     by_agent["$a"]+="$m"$'\n'
   else
-    echo "prelim-outbox: quarantining marker with no routable agent: $m (payload kept)"
+    echo "clearance-outbox: quarantining marker with no routable agent: $m (payload kept)"
     if mkdir -p "$OUTBOX/quarantine"; then mv -f "$m" "$OUTBOX/quarantine/" || true; fi
   fi
 done
@@ -107,24 +107,24 @@ for agent in "${!by_agent[@]}"; do
   # paces the .path re-trigger. Helper failure answers "due" (never lose a delivery).
   gate="$(node "$HELPER" check "$agent" || echo due)"
   if [ "${gate%% *}" = "wait" ]; then
-    echo "prelim-outbox: $agent in backoff (${gate#wait } s left) — events retained, not waking"
+    echo "clearance-outbox: $agent in backoff (${gate#wait } s left) — events retained, not waking"
     track_wait "${gate#wait }"
     continue
   fi
 
-  echo "prelim-outbox: waking $agent to run clearotron-deliver"
+  echo "clearance-outbox: waking $agent to run clearotron-deliver"
   # timeout(1) is the enforced wall: the 2026-07-04 incident proved the CLI's own --timeout does not
   # guarantee process EXIT (the agent turn finished; the process idled 19h and wedged the lane).
   # SIGTERM at 840s (inside the unit's TimeoutStartSec budget so the failure is OURS and logged),
   # SIGKILL 30s later. The turn runs server-side to completion either way; since this trigger deletes
   # nothing, a killed wake just leaves the events for the re-fire.
   #
-  # FRESH session per wake (was a fixed --session-key prelim-outbox): reusing ONE session meant every
+  # FRESH session per wake (was a fixed --session-key clearance-outbox): reusing ONE session meant every
   # re-fire piled onto an ever-growing transcript the model reprocessed each time — that unbounded
   # growth, not the wake count alone, is what turned a stuck marker into $200+/day (2026-07-24/25). A
   # unique key bounds each wake to the skill + this one outbox read. The circuit-breaker in
   # outbox-backoff.mjs (not session history) now owns cross-wake loop detection.
-  wake_session="prelim-outbox-$(date -u +%Y%m%dT%H%M%SZ)-$$-${RANDOM}"
+  wake_session="clearance-outbox-$(date -u +%Y%m%dT%H%M%SZ)-$$-${RANDOM}"
   model_args=()
   [ -n "$WAKE_MODEL" ] && model_args=(--model "$WAKE_MODEL")
   out="$("$WALL" --kill-after=30 840 "$OPENCLAW" agent --agent "$agent" --session-key "$wake_session" "${model_args[@]}" --message "$MSG" --json --timeout 300)"
@@ -142,21 +142,21 @@ for agent in "${!by_agent[@]}"; do
       # is the load-bearing cost stop — it ends the re-fire loop for a marker mark_sent/ack_event can never
       # settle (the 2026-07 runaway class), whatever the cause. Operator notification is integrator-owned:
       # surface stuck deliveries from the audit record / MCP read surface, not from the requester outbox.
-      echo "prelim-outbox: 🚨 stuck marker(s) for $agent set aside after repeated no-progress wakes — see $OUTBOX/quarantine/STUCK-ALERTS.jsonl"
+      echo "clearance-outbox: 🚨 stuck marker(s) for $agent set aside after repeated no-progress wakes — see $OUTBOX/quarantine/STUCK-ALERTS.jsonl"
       track_wait "${verdict#* }"
       ;;
     stuck)
       # OK wake that consumed nothing — not a failure, but not progress either. Paced down toward the
       # quarantine threshold instead of hot-refiring every ~3.5min.
-      echo "prelim-outbox: no delivery progress for $agent — marker retained, paced ${verdict#* }s (circuit-breaker counting toward quarantine)"
+      echo "clearance-outbox: no delivery progress for $agent — marker retained, paced ${verdict#* }s (circuit-breaker counting toward quarantine)"
       track_wait "${verdict#* }"
       ;;
     giveup)
-      echo "prelim-outbox: wake for $agent failed rc=$rc — fast retries exhausted; sidecar cooldown + rescan timer own this delivery (events retained)"
+      echo "clearance-outbox: wake for $agent failed rc=$rc — fast retries exhausted; sidecar cooldown + rescan timer own this delivery (events retained)"
       track_wait "${verdict#* }"
       ;;
     *)
-      echo "prelim-outbox: wake for $agent failed rc=$rc — events retained, backoff ${verdict#* }s"
+      echo "clearance-outbox: wake for $agent failed rc=$rc — events retained, backoff ${verdict#* }s"
       track_wait "${verdict#* }"
       ;;
   esac
@@ -185,8 +185,8 @@ if [ "$woke_ok" = 1 ]; then
     sleep 5; waited=$((waited + 5))
     remaining=("$OUTBOX"/*.pending)
   done
-  [ ${#remaining[@]} -gt 0 ] || { echo "prelim-outbox: drained"; exit 0; }
-  echo "prelim-outbox: ${#remaining[@]} event(s) still pending after ${DRAIN_WAIT}s"
+  [ ${#remaining[@]} -gt 0 ] || { echo "clearance-outbox: drained"; exit 0; }
+  echo "clearance-outbox: ${#remaining[@]} event(s) still pending after ${DRAIN_WAIT}s"
 fi
 
 # TIGHT-LOOP GUARD (load-bearing): prelim-outbox.path is PathExistsGlob on *.pending — level-triggered,
@@ -201,7 +201,7 @@ if [ -n "$min_wait" ]; then
   [ "$w" -gt "$cap" ] && w="$cap"
   [ "$w" -gt "$budget" ] && w="$budget"
   if [ "$w" -gt 0 ]; then
-    echo "prelim-outbox: events retained — sleeping ${w}s so the .path re-fire matches the backoff"
+    echo "clearance-outbox: events retained — sleeping ${w}s so the .path re-fire matches the backoff"
     sleep "$w"
   fi
 fi

package/driver/demo-container.mjs

@@ -25,7 +25,7 @@
 
 import { cpSync, existsSync, mkdirSync, mkdtempSync, readdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
 import { tmpdir } from "node:os";
-import { basename, dirname, join, resolve, sep } from "node:path";
+import { basename, dirname, join, resolve, sep } from "node:path"; import { studioDirFor } from "../shared/pre-rename-spellings.mjs";
 
 /** The entry file each lane's publisher reads as its source, in the order a child is probed for one. */
 export const ENTRY_FILES = Object.freeze(["report.md", "knockout-findings.json"]);
@@ -155,7 +155,7 @@ export function publishContainer(root, { repoRoot, tmp = tmpdir() } = {}) {
  * The demo published its samples as reports and made no run directory, so the connector its own connect
  * line wires listed nothing: an assistant, one of the demo's three faces, had nothing to explore. Each
  * sample's finished `run/` is copied to the layout the connector walks, under the DEMO'S OWN workspace:
- * `<workspace>/workspace-<agent>/studio/prelim-search/<slug>/<date>-<codename>/`. Nothing is written
+ * `<workspace>/workspace-<agent>/studio/clearance-search/<slug>/<date>-<codename>/`. Nothing is written
  * anywhere else, so a real install started afterwards sees none of it (the demo is its own install).
  *
  * Copied, never linked: a connector reading a run may write beside it, and `demo/` is tracked. A run
@@ -176,7 +176,7 @@ export function seedDemoRuns({ workspace, examplesDir, portalOrigin = null }) {
     let s;
     try { s = JSON.parse(readFileSync(join(run, "status.json"), "utf8")); } catch { continue; }
     if (!s?.slug || !s?.codename || !s?.date) continue;
-    const dir = join(workspace, `workspace-${s.agent || "clawdi"}`, "studio", "prelim-search", s.slug, `${s.date}-${s.codename}`);
+    const dir = join(studioDirFor(join(workspace, `workspace-${s.agent || "clawdi"}`)), s.slug, `${s.date}-${s.codename}`);
     if (existsSync(join(dir, "status.json"))) already.push(s.runId);
     else {
       // ONE SAMPLE'S UNREADABLE FILE COSTS THAT SAMPLE ONLY, and is named, never a throw out of the loop.

package/driver/dev-portal.mjs

@@ -32,7 +32,7 @@
 import { envFileRead } from "../shared/env-local.mjs";   // side effect: apply this install's .env when THIS file is the CLI entry (never on library import)
 import { createServer, request as httpRequest } from "node:http";
 import { readFileSync, existsSync, statSync, readdirSync, writeFileSync, renameSync, mkdirSync } from "node:fs";
-import { join, resolve, extname, dirname } from "node:path";
+import { join, resolve, extname, dirname } from "node:path"; import { studioDirFor } from "../shared/pre-rename-spellings.mjs";
 import { fileURLToPath } from "node:url";
 import { config } from "./driver.config.mjs";
 import { BRAND } from "../shared/brand.mjs";
@@ -135,7 +135,7 @@ function readJsonBody(req, maxBytes = 256 * 1024) {
   });
 }
 
-// Run statuses: every workspace's studio/prelim-search/<slug>/<run>/status.json — live runs PLUS the
+// Run statuses: every workspace's studio/clearance-search/<slug>/<run>/status.json — live runs PLUS the
 // archive (a delivered run moves there on delivery; without it the cockpit shows a run "disappearing"
 // at the exact moment it succeeds — found by the first dev smoke run). Read fresh per request.
 function scanRuns(workspaceRoot) {
@@ -153,7 +153,7 @@ function scanRuns(workspaceRoot) {
   try { names = readdirSync(workspaceRoot); } catch { return out; }
   for (const name of names) {
     if (config.agentIdFromWorkspaceName(name) == null) continue;
-    const studio = join(workspaceRoot, name, "studio", "prelim-search");
+    const studio = studioDirFor(join(workspaceRoot, name));
     let slugs = [];
     try { slugs = readdirSync(studio); } catch { continue; }
     for (const slug of slugs) {

package/driver/disposition-call.mjs

@@ -653,7 +653,7 @@ export function validateDispositionCall(rows, recorded, { told = null } = {}) {
     // ruling the whole time; what it could not do was copy a fragment that binds. So the missing exit was
     // never from the judgment.
     //
-    // AND THE JUDGMENT ALREADY HAS ONE. prelim-common-law/SKILL.md dictates it: a row that is on-topic but
+    // AND THE JUDGMENT ALREADY HAS ONE. clearance-common-law/SKILL.md dictates it: a row that is on-topic but
     // cannot responsibly be called benign or loaded is ruled `loaded` with the note saying what could not
     // be established, "which is where an unresolved reputational question belongs". Adding a second way
     // to decline a ruling would compete with that, and an easier road past a hard row is the one outcome

package/driver/doubt-ledger.mjs

@@ -6,7 +6,7 @@
 // by design (the audit is the defensibility record of everything considered). copper-gantry shipped three
 // fragments about ONE mark side by side: an asserted "closest analogue, active nationwide product" block,
 // a direct-search "does NOT appear on the owner's official sites" block, and a prose "requires
-// prelim-register layer cross-check" note that NOTHING parses. The resolutions usually EXIST — in
+// clearance-register layer cross-check" note that NOTHING parses. The resolutions usually EXIST — in
 // findings.json dispositions/actions, in the coverage ledger, in register-findings answer/watchlist
 // lines — the missing piece was the JOIN back to the fragment that raised the doubt. This module is
 // that join, and nothing more.
@@ -179,7 +179,7 @@ function twoTokenMatch(sig, candidateText) {
 // ── minting: gather cross-check hand-offs ─────────────────────────────────────────────────────────
 // The gather stages are DICTATED (stages.mjs) to record any check they could not perform, on its own
 // line, in EXACTLY this shape. The prefix is exact and the parse is deterministic ON PURPOSE: legacy
-// artifacts (and free prose like "requires prelim-register layer cross-check" buried in a paragraph —
+// artifacts (and free prose like "requires clearance-register layer cross-check" buried in a paragraph —
 // the copper-gantry note nothing parsed) mint NOTHING. Carrying prose doubts is the dictation's job at
 // the source, not a fuzzy parser's job here. A leading list bullet is tolerated (models bullet
 // everything); anything else about the shape is strict, including the em-dash between what and why.