clearotron 0.4.1 → 0.5.0-beta.0

package/driver/contract-e3-backlog.mjs

@@ -157,7 +157,7 @@ export const E3_BACKLOG = [
   },
   // ── DISCHARGED 2026-08-17 by, and the row said this could not happen ──────────────────────────
   //
-  // It read: stage "blind-frame", where "driver/stages.mjs:974", evidence "Emit the STRUCTURED model
+  // It read: stage "blind-frame", where "driver/stages.mjs:981", evidence "Emit the STRUCTURED model
   // (dictated keys + closed enums per the skill). It is your ONLY output file — do NOT write a prose
   // companion.", reparsedBy "verify.mjs validators.blindFrame …", removedByMove **"NOTHING ON THE PLAN
   // REMOVES THIS"**.
@@ -171,7 +171,7 @@ export const E3_BACKLOG = [
   {
     stage: "common-law",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:1085 (emitted at 1032, 1061, 1147, 1276)",
+    where: "driver/stages.mjs:1102 (emitted at 1891, 1920, 2100, 2320)",
     surface: "stage-message",
     evidence: "CROSS-CHECK HAND-OFF: … record it on its OWN line in EXACTLY the form \"CROSS-CHECK REQUIRED: <what> — <why>\" (that exact prefix; an em-dash between what and why; name the mark in CAPS in <what>). The driver parses ONLY this exact line shape…",
     reparsedBy: "driver/doubt-ledger.mjs:183 CROSS_CHECK_RE = /^(?:[-*]\\s+)?CROSS-CHECK REQUIRED:\\s*(.+?)\\s+—\\s+(.+?)\\s*$/ → mintCrossCheckDoubts",
@@ -218,7 +218,7 @@ export const E3_BACKLOG = [
   {
     stage: "common-law",
     kind: "dictated-line-shape",
-    where: "driver/skills/clearance-common-law/SKILL.md:192 (restated at driver/skills/clearance-search/synthesis-rules.md:394)",
+    where: "driver/skills/clearance-common-law/SKILL.md:192 (restated at driver/skills/clearance-search/synthesis-rules.md:391)",
     surface: "skill-file",
     evidence: "A clean PR/connotation row MUST cite its search — add a `**Connotation-search source:** <URL | \"perplexity_research — no result\">` line.",
     reparsedBy: "driver/connotation-search.mjs — validators.commonLaw rejects a clean claim with no such line (connotation_search_missing); the hint is re-dictated by correctionHint() in gateway.mjs",
@@ -227,7 +227,7 @@ export const E3_BACKLOG = [
   {
     stage: "common-law",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:1055 and driver/stages.mjs:1060 (the no-grid-spec legacy branch)",
+    where: "driver/stages.mjs:1063 and driver/stages.mjs:1068 (the no-grid-spec legacy branch)",
     surface: "stage-message",
     evidence: "GRID KEYS (the validator checks EXACTLY these N terms — use each VERBATIM as its Negative-results matrix key…) … MACHINE RECEIPTS (MANDATORY): save the grid call's stdout JSON VERBATIM … the single stdout object, or a JSON ARRAY of the per-batch stdout objects in batch order when batched.",
     reparsedBy: "driver/common-law-receipts.mjs — the receipts gate's exact identity join on the dictated key list; validators.commonLaw grid-completeness arm",
@@ -256,7 +256,7 @@ export const E3_BACKLOG = [
   {
     stage: "register-unit",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:2286 (the non-supplemental-lane branch)",
+    where: "driver/stages.mjs:2307 (the non-supplemental-lane branch)",
     surface: "stage-message",
     evidence: "BAND ARTIFACT (MANDATORY): ALSO write the COMPLETE NAMED BAND for this axis to <path> — a JSON ARRAY, one block per register_enumerate / count-probe call, in the named-band contract: {\"state\":\"enumerated\",\"query\":\"<what was searched>\",\"total_hits\":N,\"records\":[{record_id, mark_text, classes, status,",
     reparsedBy: "driver/named-band.mjs parseNamedBand / bandRecords / bandCrowds / mergeNamedBands (named in driver/skills/clearance-register/unit.md:60-62); validators.registerUnit",
@@ -265,7 +265,7 @@ export const E3_BACKLOG = [
   {
     stage: "register-unit",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:2249",
+    where: "driver/stages.mjs:2270",
     surface: "stage-message",
     evidence: "Every block you append MUST carry \"state\":\"enumerated\" (ONLY if you paged it to has_more:false) or \"state\":\"incomplete\" — EXACTLY those two strings; there is no \"verified\"/\"checked\"/\"complete\"/\"clean\" state, and any other value fails the stage.",
     reparsedBy: "driver/named-band.mjs parseNamedBand (off-enum state fails validators.registerUnit)",
@@ -283,7 +283,7 @@ export const E3_BACKLOG = [
   {
     stage: "register-unit",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:4241 (the frame-reopen / scoped-retry message builder). A second number stood here and had been stale for some time: it pointed at a contract-element description rather than a builder, at its old line and at every mechanical shift of it. Two candidate builders sit beside 4157 and picking one would be a guess, so the wrong pointer is removed rather than moved a third time — one accurate citation beats one accurate and one invented.",
+    where: "driver/stages.mjs:4248 (the frame-reopen / scoped-retry message builder). A second number stood here and had been stale for some time: it pointed at a contract-element description rather than a builder, at its old line and at every mechanical shift of it. Two candidate builders sit beside 4164 and picking one would be a guess, so the wrong pointer is removed rather than moved a third time — one accurate citation beats one accurate and one invented.",
     surface: "stage-message",
     evidence: "Every block you append MUST carry \"state\":\"enumerated\" (ONLY if paged to has_more:false) or \"state\":\"incomplete\" — EXACTLY those two strings … (re-dispatch builders, which REPLACE def.message)",
     reparsedBy: "driver/named-band.mjs parseNamedBand. Scope warning: these builders replace def.message on every escalation / envelope-close / frame-reopen dispatch, so an E3 lint that walks STAGES[*].message only never sees them",
@@ -292,7 +292,7 @@ export const E3_BACKLOG = [
   {
     stage: "placement-inquiry",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:2351-2353",
+    where: "driver/stages.mjs:2359-2353",
     surface: "stage-message",
     evidence: "PLACEMENT FORM (MANDATORY): record every placement in <path> — {\"rows\":[…]} … · A REGISTER candidate: {\"select\":\"<one record URI it holds>\",\"tier\":\"…\",\"reason\":\"…\"} (+ optional \"borderline\":true) … · A COMMON-LAW candidate …: {\"kind\":\"seat\",\"mark\",\"owner\",\"jurisdiction\",\"records\":[],\"tier\",\"reason\"}",
     reparsedBy: "driver/placement-form.mjs (SELECT_ROW_FIELDS at placement-form.mjs:93, the seat-row contract SEAT_ROW_CONTRACT, formRowKey/rowIsSettled/renderEntry) via validators.placement. The same field list is ALSO carried in the driver-written form's own seat_row_contract, so the shape exists twice",
@@ -301,7 +301,7 @@ export const E3_BACKLOG = [
   {
     stage: "placement-inquiry",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:2447",
+    where: "driver/stages.mjs:2468",
     surface: "stage-message",
     evidence: "· tier EXACTLY one of headline-candidate / sheet-2 / watchlist-annex / out-of-scope-filtered.",
     reparsedBy: "driver/placement-form.mjs / driver/placement-model.mjs via validators.placement",
@@ -347,7 +347,7 @@ export const E3_BACKLOG = [
     // (coverage-form.mjs coverageFormBrief) and the tool schema, with every row receiver-validated at
     // call time. Same dictated vocabulary, same authored site, new route — this row's evidence follows
     // the dictation so the row keeps describing something that exists.
-    where: "driver/stages.mjs:2656 (the digest message) + driver/coverage-form.mjs (coverageFormBrief — the dispatch block carrying the enum and the row shape)",
+    where: "driver/stages.mjs:2678 (the digest message) + driver/coverage-form.mjs (coverageFormBrief — the dispatch block carrying the enum and the row shape)",
     surface: "stage-message",
     evidence: "Record a \"status\" and a \"reason\" on EVERY row ONLY by calling the … tool — the driver validates each row as it arrives, holds the record itself, and renders both the ## Coverage ledger table and the coverage JSON from it",
     reparsedBy: "driver/coverage-call.mjs validateCoverageCall (receiver-validated at call time, the same predicates the gate judges with) + driver/coverage-form.mjs rowIsSettled via validators.registerFindings over the _driver/ accumulator",
@@ -430,7 +430,7 @@ export const E3_BACKLOG = [
   {
     stage: "frame-diff",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:2836",
+    where: "driver/stages.mjs:2850",
     surface: "stage-message",
     evidence: "For each blind-model variant / field / source the run did NOT scope or search, emit one directive {layer, item, observation, severity} … severity = dominant-element (the omission is ON the spine) | material (a real omission worth a targeted sweep) | minor (already covered, or presentation only).",
     reparsedBy: "driver/verify.mjs validators.frameDiff + driver/pipeline.mjs runSupplementalSweeps (the parser REFUSES a firing variant directive that dictates nothing dispatchable)",
@@ -454,7 +454,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3218",
+    where: "driver/stages.mjs:3232",
     surface: "stage-message",
     evidence: "MACHINE FINDINGS (MANDATORY): … a JSON OBJECT {\"schema_version\":<FINDINGS_SCHEMA_VERSION>,\"rated_under_framework\":\"…\",\"findings\":[...],\"coverage\":[...],\"context_notes\":[...],\"actions\":[...],\"ask_answers\":[...]} … Each finding object has EXACTLY these keys: {\"ordinal\",\"mark\",\"owner\",\"band\",\"net\",\"bor",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson via validators.narrative",
@@ -468,7 +468,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:3254",
+    where: "driver/stages.mjs:3265",
     surface: "stage-message",
     evidence: "- off_field_ground (MANDATORY on every off-field finding, FORBIDDEN on every other disposition): EXACTLY one bare token of: ${OFF_FIELD_GROUNDS.join(\" / \")}",
     reparsedBy: "driver/findings-model.mjs validateOffFieldGround — the enum is imported from findings-model.mjs and interpolated back into the prompt, so code already holds the list it asks the model to type",
@@ -477,7 +477,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3255",
+    where: "driver/stages.mjs:3266",
     surface: "stage-message",
     evidence: "- manageable …: {\"category\":\"<EXACTLY one of large-competitor / commercial-partner / troll / well-known-enforcer>\",\"reason\":\"<one-two lines…>\"}",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson",
@@ -486,7 +486,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3271",
+    where: "driver/stages.mjs:3282",
     surface: "stage-message",
     evidence: "- meters: {\"mark_similarity\":{...},\"goods_proximity\":{...},\"use\":{...},\"enforcer\":{...}} — all four present, each {\"token\",\"basis\",\"source\"}. … mark_similarity = high | medium | low. goods_proximity = high | medium | low. enforcer = high | medium | low | unknown. use = confirmed | not-confirmed | un",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson; driver/verify.mjs:1171 checkFindingsSibling gates meters.*.source; finding_basis_source_missing",
@@ -495,7 +495,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3272",
+    where: "driver/stages.mjs:3283",
     surface: "stage-message",
     evidence: "- quadrant: {\"x\",\"y\"} numbers in [0,1]. x = goods/services proximity (0 = distant, 1 = identical). y = mark similarity (0 = distinct, 1 = identical).",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson",
@@ -504,7 +504,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3273",
+    where: "driver/stages.mjs:3284",
     surface: "stage-message",
     evidence: "- source: {\"source_type\",\"resolved_link\"}. source_type EXACTLY one of: register-vendor / register-euipo / common-law-marketplace / common-law-web / case-law",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson",
@@ -513,7 +513,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:3274",
+    where: "driver/stages.mjs:3285",
     surface: "stage-message",
     evidence: "coverage[]: ONE object per coverage AREA, EXACTLY {\"area\",\"state\",\"note\"}. … state EXACTLY one of: confirmed-clean / coverage-limited / open / not-searched / note.",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson; the render owns the coverage panel from these typed states",
@@ -522,7 +522,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3283",
+    where: "driver/stages.mjs:3294",
     surface: "stage-message",
     evidence: "use_check = {\"source\",\"quality\"}: … quality: OPTIONAL, EXACTLY one of owner-site / independent / register-mirror … own_rights = {\"source\"}",
     reparsedBy: "driver/verify.mjs checkFindingsSibling (finding_use_check_missing); driver/own-rights.mjs:19-22",
@@ -531,7 +531,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3340",
+    where: "driver/stages.mjs:3351",
     surface: "stage-message",
     evidence: "MARK ASSESSMENT … STRUCTURED FORM …: either field may instead be an OBJECT {\"read\":\"…\",\"spectrum\":\"…\",\"per_class\":[{\"class\":\"5\",\"note\":\"…\"}],\"per_market\":[{\"market\":\"CN\",\"note\":\"…\"}],\"counter_registrations\":[{\"mark\":\"…\",\"uri\":\"/mark/…\",\"note\":\"…\"}],\"acquired\":\"<optional>\",\"note\":\"<optional residual>",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson; the report collapses the rows behind toggles and the audit workbook renders them",
@@ -540,7 +540,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3346",
+    where: "driver/stages.mjs:3357",
     surface: "stage-message",
     evidence: "FOUR ANSWERS …: \"four_answers\": {\"third_party_rights\":{...},\"objection_likelihood\":{...},\"registrability\":{...},\"client_enforceability\":{...}} … Each answer … is {\"read\":\"…\",\"token\":\"…\",\"basis\":\"…\",\"ordinals\":[…]}. Tokens (closed enums …): third_party_rights = strong|moderate|weak; objection_likelih",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson",
@@ -549,7 +549,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3223",
+    where: "driver/stages.mjs:3231",
     surface: "stage-message",
     evidence: "ACTIONS REGISTER …: emit \"actions\": [...] — ONE object per forward step …, each EXACTLY {\"id\",\"kind\",\"text\",\"ordinals\"} plus an OPTIONAL \"deadline\" and an OPTIONAL \"condition\". … kind: EXACTLY one of — consent / coexistence-agreement / territorial-delimitation / goods-amendment / mark-modification /",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson; pipeline applyCoverageFloor legalActions arm derives the delivered disposition from the closed kind enum",
@@ -558,7 +558,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:3353",
+    where: "driver/stages.mjs:3364",
     surface: "stage-message",
     evidence: "COVERAGE JUDGMENT …: emit \"coverage_judgment\": {\"sufficient\":<bool>, \"reason\":\"<one line…>\"} — EXACTLY those two keys. Do NOT emit \"rows\": the driver writes that register itself … anything you type there is replaced wholesale.",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson. The \"Do NOT emit rows\" clause is the purest E3 case in the tree — the prompt names a field, dictates its shape and states in the same breath that code overwrites it",
@@ -567,7 +567,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3196",
+    where: "driver/stages.mjs:3210",
     surface: "stage-message",
     // RE-QUOTED, NOT PARKED. The writer's conversion reworded this dictation — the
     // ask answers ride the findings RECORD now and the driver renders the labelled line into both the
@@ -591,7 +591,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:3115 (restated at driver/skills/clearance-search/synthesis-rules.md:428)",
+    where: "driver/stages.mjs:3129 (restated at driver/skills/clearance-search/synthesis-rules.md:425)",
     surface: "stage-message",
     evidence: "END that finding's actual-use line with a literal \"- **Use-check source:** <result URL | \"perplexity_research — no result\">\" line",
     reparsedBy: "driver/verify.mjs validators.narrative (spec-11 hard reject); the repair hint re-dictates the literal in correctionHint() in gateway.mjs",
@@ -600,7 +600,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:3128 (restated at driver/skills/clearance-search/synthesis-rules.md:475)",
+    where: "driver/stages.mjs:3142 (restated at driver/skills/clearance-search/synthesis-rules.md:472)",
     surface: "stage-message",
     evidence: "END that finding's reasoning with a literal \"- **Own-rights source:** <record URI(s) | \"no applicant-owned registrations in the searched register material\">\" line",
     reparsedBy: "driver/own-rights.mjs, in its header — \"This module only requires the 'Own-rights source:' line to exist\"; repair hint in correctionHint() in gateway.mjs (the `own_rights_missing` branch; re-verified 2026-08-29 — the old :1736 predated this branch and pointed into the A4 repeat-signature block)",
@@ -609,7 +609,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "exactly-these-keys",
-    where: "driver/stages.mjs:3332",
+    where: "driver/stages.mjs:3343",
     surface: "stage-message",
     evidence: "add it to the top-level \"context_notes\" array — each object EXACTLY {\"type\":\"famous-neighbour-ungrounded\",\"mark\",\"owner\",\"context\"}",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson",
@@ -618,7 +618,7 @@ export const E3_BACKLOG = [
   {
     stage: "synthesis",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3220",
+    where: "driver/stages.mjs:3234",
     surface: "stage-message",
     evidence: "- owner: {\"name\",\"country\",\"registrations\":[...]}. … Each registration: {\"uri\", optionally \"classes\":[\"9\",\"41\"],\"status\",\"filed\",\"expiry\",\"jurisdiction\"}. The \"uri\" is the ONLY field that matters: the driver BINDS classes/status/filed/expiry/jurisdiction AND the owner name from the FETCHED record ke",
     reparsedBy: "driver/findings-model.mjs:848 parseFindingsJson + the record-binding join. Six of the seven keys are stated in the prompt and overwritten by code in the same sentence",
@@ -627,7 +627,7 @@ export const E3_BACKLOG = [
   {
     stage: "case-law",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3502",
+    where: "driver/stages.mjs:3513",
     surface: "stage-message",
     evidence: "ALSO write the RETRIEVAL RECORD to <path> — a JSON OBJECT with EXACTLY these keys: {\"schema_version\":2,\"queries\":[{\"query\":\"<the search you dispatched, verbatim>\",\"jurisdiction\":\"…\",\"results\":<how many hits it returned, or null when the query never reached a source — never 0 for a query you could not send>}, …],\"citations\":[{\"proceeding\":\"…\",\"forum\":\"…\",\"jurisdiction\":\"…\",\"decided\":\"…\"",
     reparsedBy: "driver/verify.mjs validators.caseLaw — the ledger arm, armed by the stage-contract marker `citations` (the case-law stage's `contract: { citations: 1 }` in stages.mjs)",
@@ -636,7 +636,7 @@ export const E3_BACKLOG = [
   {
     stage: "case-law",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:3510",
+    where: "driver/stages.mjs:3521",
     surface: "stage-message",
     evidence: "EVERY \"Grounded profile\" section MUST start its body with the line \"- ord: <N>\" naming which finding it grounds (use the ordinal from this list; a profile that grounds no listed finding omits the line)",
     reparsedBy: "driver/publish/parse.mjs:339, parseCaseLawProfiles() in parse.mjs (\"the optional '- ord: <N>' first body line … gives an EXACT join\"); driver/findings-model.mjs:274 /^-\\s*ord:\\s*(\\d+)\\s*$/m; driver/publish/index.mjs publishReport (joinCaseLawProfiles)",
@@ -670,7 +670,7 @@ export const E3_BACKLOG = [
   {
     stage: "narrative-refutation",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:3644",
+    where: "driver/stages.mjs:4797",
     surface: "stage-message",
     // RE-QUOTED BY CONVERSION 9. The LINE-TOKEN half is gone — no "anywhere on the line", no "[kind: …]
     // token", no "a line with no token is treated as fact", because a kind is a typed field now and an
@@ -704,7 +704,7 @@ export const E3_BACKLOG = [
   {
     stage: "narrative-refutation",
     kind: "dictated-line-shape",
-    where: "driver/stages.mjs:1871 and driver/skills/narrative-refutation/SKILL.md:41-50",
+    where: "driver/stages.mjs:1879 and driver/skills/narrative-refutation/SKILL.md:41-50",
     // RE-QUOTED 2026-08-16. The dictated SENTENCE survives in narrative-refutation's SKILL.md — it is the
     // `evidence` below, verbatim. What changed is that the four kinds moved from an inline list after the
     // colon onto their own `- [kind: …]` bullet lines. Measured, not assumed: the old anchor matched 59 of
@@ -769,7 +769,7 @@ export const E3_BACKLOG = [
   {
     stage: "report-card",
     kind: "literal-json-skeleton",
-    where: "driver/stages.mjs:3953",
+    where: "driver/stages.mjs:3960",
     surface: "stage-message",
     evidence: "The finding's OWN record — the ONLY source for this card …:\\n```json\\n<JSON.stringify(finding, null, 2)>\\n```",
     reparsedBy: "none — this is the INPUT side, and that is why it belongs in the survey: a full JSON object rendered into the prompt is exactly the mechanism #850 proves produced R-RECEIPT (the model pattern-matches a shown shape). E3's clause 1 as written (\"a code fence or inline example showing the exact object shape the model must emit\") does not reach an injected record, so the lint needs an explicit rule for shown-but-not-owed structure",
@@ -859,7 +859,7 @@ export const E3_EVIDENCE_UNRESOLVED = [
   // absorbed. It was the narrative "## Answers to your instructions" row deleted above: its dictation is
   // gone, so there is no un-anchorable quote left to be unresolved. The one that REMAINS is a live row
   // whose quote spans a template line. Measured before deleting, not predicted — two rows shared
-  // `where: "driver/stages.mjs:3075"`, so which one occupied this slot could not be read off the strings.
+  // `where: "driver/stages.mjs:3083"`, so which one occupied this slot could not be read off the strings.
   "synthesis|driver/stages.mjs",
 ];
 

package/driver/contract-e3-baseline.json

@@ -36,9 +36,9 @@
       "dictated-line-shape": 1
     },
     "register-digest": {
-      "literal-json-skeleton": 1,
+      "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
-      "dictated-line-shape": 2
+      "dictated-line-shape": 1
     },
     "skeptic": {
       "literal-json-skeleton": 0,
@@ -120,7 +120,7 @@
     "skills/clearance-register/SKILL.md": {
       "literal-json-skeleton": 0,
       "exactly-these-keys": 0,
-      "dictated-line-shape": 4
+      "dictated-line-shape": 3
     },
     "skills/clearance-register/unit.md": {
       "literal-json-skeleton": 5,
@@ -189,7 +189,7 @@
     }
   },
   "totals": {
-    "stages": 45,
-    "files": 64
+    "stages": 43,
+    "files": 63
   }
 }

package/driver/contract-vocabulary.mjs

@@ -474,21 +474,21 @@ export const INNER_CODES = Object.freeze([
   // `no_recorded_queries`, and the `connotation_` family row (dynamic D1) is declared against exactly
   // that list. The four call codes are folded by a template — `connotation_${callFail.reason}` at
   // verify.mjs — so they are namespaced by construction rather than one branch at a time.
-  { code: "call_never_made", mints: ["driver/connotation-search.mjs:1981"], rollsUpTo: ["connotation_call_never_made"],
+  { code: "call_never_made", mints: ["driver/connotation-search.mjs:1979"], rollsUpTo: ["connotation_call_never_made"],
     why: "CALL_AUDIT_ROWS. The typed transport's four call states, handed in by disposition-call-audit.mjs and namespaced at verify.mjs." },
-  { code: "call_truncated", mints: ["driver/connotation-search.mjs:1982"], rollsUpTo: ["connotation_call_truncated"],
+  { code: "call_truncated", mints: ["driver/connotation-search.mjs:1980"], rollsUpTo: ["connotation_call_truncated"],
     why: "As call_never_made — same table, same projection." },
-  { code: "call_schema_violation", mints: ["driver/connotation-search.mjs:1983"], rollsUpTo: ["connotation_call_schema_violation"],
+  { code: "call_schema_violation", mints: ["driver/connotation-search.mjs:1981"], rollsUpTo: ["connotation_call_schema_violation"],
     why: "As call_never_made — same table, same projection." },
-  { code: "call_partial", mints: ["driver/connotation-search.mjs:1984"], rollsUpTo: ["connotation_call_partial"],
+  { code: "call_partial", mints: ["driver/connotation-search.mjs:1982"], rollsUpTo: ["connotation_call_partial"],
     why: "As call_never_made — same table, same projection. This is the pair #1211 cites as its worked example: the composite is covered, the bare form reaches no stage." },
-  { code: "quote_unbound", mints: ["driver/connotation-search.mjs:2115"], rollsUpTo: ["connotation_quote_unbound"],
+  { code: "quote_unbound", mints: ["driver/connotation-search.mjs:2113"], rollsUpTo: ["connotation_quote_unbound"],
     why: "The ruled-but-unbound row. Projected as `unbound` in connotationDispositionFail() in verify.mjs, and reported only once nothing is unruled." },
-  { code: "token_absent", mints: ["driver/connotation-search.mjs:2142"], rollsUpTo: ["connotation_token_absent"],
+  { code: "token_absent", mints: ["driver/connotation-search.mjs:2140"], rollsUpTo: ["connotation_token_absent"],
     why: "#592 split this out of no_ruling. Row-level only — PROGRESS_TOKENS declared in repairs.mjs says so in as many words: `never a top-level token`." },
-  { code: "cite_absent", mints: ["driver/connotation-search.mjs:2151"], rollsUpTo: ["connotation_cite_absent"],
+  { code: "cite_absent", mints: ["driver/connotation-search.mjs:2149"], rollsUpTo: ["connotation_cite_absent"],
     why: "#592, as token_absent. PROGRESS_TOKENS declared in repairs.mjs: `row-level only — never a top-level token`." },
-  { code: "no_ruling", mints: ["driver/connotation-search.mjs:2158"], rollsUpTo: ["connotation_no_ruling"],
+  { code: "no_ruling", mints: ["driver/connotation-search.mjs:2156"], rollsUpTo: ["connotation_no_ruling"],
     why: "The residual the other two split off from, and it has representatives — see the mint site. Declared as a corrective token at repairs.mjs:308 and in stages.mjs's E1 rows, always namespaced." },
   // THE ONE THAT IS RENAMED, NOT NAMESPACED — and it is the reason this table stores the composite as
   // data rather than deriving it. Every derivation anyone would write is `connotation_` + the code, and
@@ -496,7 +496,7 @@ export const INNER_CODES = Object.freeze([
   // verify.mjs's block headed "the meaning-sweep failure tokens" states the ruling: a sweep that did not
   // RUN is a canonical-only decision with its own token and its own remedy, so the projector,
   // connotationDispositionFail() in verify.mjs, deliberately does not handle it.
-  { code: "no_recorded_queries", mints: ["driver/connotation-search.mjs:1999"], rollsUpTo: ["connotation_search_missing"],
+  { code: "no_recorded_queries", mints: ["driver/connotation-search.mjs:1997"], rollsUpTo: ["connotation_search_missing"],
     why: "RENAMED, not namespaced: verify.mjs emits `connotation_search_missing`. It is excluded from CONNOTATION_FORM_REASONS at connotation-search.mjs for exactly this reason." },
 
   // ── case-law-ledger.mjs — ONE token, the codes as census payload ─────────────────────────────────
@@ -530,9 +530,9 @@ export const INNER_CODES = Object.freeze([
   // ONE CODE, TWO TOKENS, and the split is by `cause` rather than by code: verify.mjs peels the
   // `axis_invalid` cause into its own family before counting the rest. A ruling naming only
   // `coverage_no_status` would be true of most `no_status` records and false of the ones that matter most.
-  { code: "no_status", mints: ["driver/coverage-form.mjs:894"], rollsUpTo: ["coverage_no_status", "coverage_form_axis_invalid"],
+  { code: "no_status", mints: ["driver/coverage-form.mjs:897"], rollsUpTo: ["coverage_no_status", "coverage_form_axis_invalid"],
     why: "Two composites, split on the record's `cause`: coverageFormFail() in verify.mjs for cause `axis_invalid`, and the same function for the rest. NOT the `@returns` annotation of findCoverageFormViolations() in coverage-form.mjs — that is the annotation, not the mint." },
-  { code: "engine_vocabulary", mints: ["driver/coverage-form.mjs:884"], rollsUpTo: ["coverage_form_engine_vocabulary"],
+  { code: "engine_vocabulary", mints: ["driver/coverage-form.mjs:887"], rollsUpTo: ["coverage_form_engine_vocabulary"],
     why: "#669 — the seat wrote an engine token into the `reason` sentence that reaches the reader's page. Checked on settled rows too, because a row the seat considers finished is exactly the one whose sentence gets printed. Namespaced by coverageFormFail() in verify.mjs; the bare code names a row, never a stage." },
 
   // ── ONE CODE, TWO MODULES ────────────────────────────────────────────────────────────────────────
@@ -544,7 +544,7 @@ export const INNER_CODES = Object.freeze([
   // failure tokens" already states the rule this row records: `coverage_form_damaged`, never a bare
   // `form_damaged`.
   { code: "form_damaged",
-    mints: ["driver/connotation-search.mjs:2004", "driver/connotation-search.mjs:2080", "driver/coverage-form.mjs:876"],
+    mints: ["driver/connotation-search.mjs:2002", "driver/connotation-search.mjs:2078", "driver/coverage-form.mjs:879"],
     rollsUpTo: ["connotation_form_damaged", "coverage_form_damaged"],
     why: "Minted in two lanes and namespaced per lane: connotationDispositionFail() in verify.mjs for the meaning sweep, coverageFormFail() in verify.mjs for the register digest. The namespacing is what keeps them apart — see verify.mjs's block headed \"the register coverage-form failure tokens\"." },
 ]);

package/driver/corrections-delivered.mjs

@@ -0,0 +1,113 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+// corrections-delivered.mjs — whether each reviewer correction is still in the record the report is built from.
+//
+// corrections-applied.json records what the corrective pass changed, flag by flag, compared at the pass. It
+// cannot say whether the change is still there when the report is assembled: later saves re-send the record
+// (the delivery check's redo, the stale repair, a re-emit), the delivery seam folds it, and the report is built
+// after all of them. This answers that question for the typed fields a report prints from the record — a
+// finding's sentence (`net`) and its two positions, a coverage row's note, an action's text, and the mark
+// assessment's distinctiveness and connotation — in two steps:
+//
+//   correctionTargets   at the corrective pass, where the records before and after it are in hand: what each
+//                       flag changed in those fields, with the text the pass left (the basis);
+//   deliveredOutcomes   after an assembly: whether the record the report was built from still carries it.
+//
+// Each flag's outcome:
+//   delivered        every field it changed reads, in the delivered record, as the pass left it;
+//   not-found        at least one does not: a later save or the fold did not carry it to the report;
+//   not-applicable   it changed none of these fields — a narrative or structure correction, a reasoned
+//                    no-change, a removal, a rating — so there is no typed text to look for. Narrative prose
+//                    reaches the client only through the overview's own words, and this does not guess at it;
+//   not-checkable    the records before and after the pass could not both be read, so nothing was compared.
+//
+// THE RECORD DECIDES, report.md IS A SECOND LOOK. Every client surface renders these fields from the delivered
+// record — findings.json as the report was built from it, folded after the delivery seam — so the outcome is
+// read there, joined in the model's numbering through the fold's map. report.md prints two of them itself, the
+// finding sentence on a finding's card and an action's text, and each such change says whether report.md
+// carries it (`inReportMd`, null for a field report.md does not print). It never decides the outcome: whether a
+// finding has a card is the assembly's choice, not the correction's fate.
+//
+// PURE — no node imports. The pipeline reads and writes the files.
+import { reportLines, linesOf } from "./corrections-feedforward.mjs";
+
+/** The finding fields a correction can change that a report prints from the record. */
+export const DELIVERED_FINDING_FIELDS = Object.freeze(["net", "legal_position", "practical_position"]);
+
+const squash = (s) => String(s ?? "").replace(/\s+/g, " ").trim();
+// The name join `buildCorrectionsApplied` uses: mark first, then owner, first one wins.
+const norm = (s) => String(s ?? "").toLowerCase().replace(/[^a-z0-9]+/g, " ").trim();
+function byName(doc) {
+  const out = new Map();
+  for (const f of doc?.findings ?? [])
+    for (const name of [f?.mark, f?.owner?.name]) { const n = norm(name); if (n && !out.has(n)) out.set(n, f); }
+  return out;
+}
+const byOrdinal = (doc) => new Map((doc?.findings ?? []).filter((f) => Number.isInteger(f?.ordinal)).map((f) => [f.ordinal, f]));
+
+/**
+ * The basis: for each row `buildCorrectionsApplied` returned, the printed fields the pass changed and the text it
+ * left in each. PURE. `preDoc` and `postDoc` are the records before and after the pass, in the model's numbering —
+ * the two the applied table was built from. A finding is the one the flag declared by ordinal, else the one it
+ * named; a line is the one the flag named or quoted, as the applied table joined it.
+ */
+export function correctionTargets(rows, preDoc, postDoc) {
+  const checkable = Boolean(preDoc && postDoc);
+  const preOrd = byOrdinal(preDoc), postOrd = byOrdinal(postDoc);
+  const preName = byName(preDoc), postName = byName(postDoc);
+  const preLines = reportLines(preDoc);
+  const postLines = new Map(reportLines(postDoc).map((l) => [l.key, l.text]));
+  return (Array.isArray(rows) ? rows : []).map((r) => {
+    const out = { n: r?.n ?? null, kind: r?.kind ?? null, applied: r?.outcome ?? null, changes: [] };
+    if (!checkable || r?.outcome === "not-checkable") return { ...out, why: "not-checkable" };
+    const seen = new Set();
+    const add = (c, key) => { if (!seen.has(key)) { seen.add(key); out.changes.push(c); } };
+    if (r.outcome === "line-changed") {
+      for (const l of linesOf(r.text, preLines)) {
+        const now = postLines.get(l.key);
+        if (now !== undefined && squash(now) !== squash(l.text)) add({ line: l.key, text: now }, l.key);
+      }
+    } else if (r.outcome === "findings-changed") {
+      const declared = (Array.isArray(r.ordinals) ? r.ordinals : []).filter((o) => preOrd.has(o) || postOrd.has(o));
+      const pairs = declared.length ? declared.map((o) => [preOrd.get(o), postOrd.get(o)])
+        : (Array.isArray(r.targets) ? r.targets : []).map((t) => [preName.get(norm(t)), postName.get(norm(t))]);
+      for (const [a, b] of pairs) {
+        if (!b || !Number.isInteger(b.ordinal)) continue;   // gone after the pass: nothing left to deliver
+        for (const field of DELIVERED_FINDING_FIELDS) {
+          if (squash(a?.[field]) !== squash(b[field])) add({ ordinal: b.ordinal, field, text: String(b[field] ?? "") }, `${b.ordinal}|${field}`);
+        }
+      }
+    }
+    return out.changes.length ? out : { ...out, why: "no-printed-field-changed" };
+  });
+}
+
+/**
+ * Each basis row's outcome against the delivered record. PURE. `deliveredDoc` is the record the report was built
+ * from; `foldMap` is the fold's `{modelToFolded}` when a fold is in force, else null; `reportMd` is report.md's
+ * text, or null when it could not be read. Returns null when there is no delivered record to read: a caller
+ * records that as a failure to look, never as an outcome.
+ */
+export function deliveredOutcomes({ basis, deliveredDoc, foldMap = null, reportMd = null } = {}) {
+  if (!Array.isArray(basis) || !deliveredDoc || typeof deliveredDoc !== "object") return null;
+  const findings = byOrdinal(deliveredDoc);
+  const lines = new Map(reportLines(deliveredDoc).map((l) => [l.key, l.text]));
+  const md = typeof reportMd === "string" ? squash(reportMd) : null;
+  const folded = (o) => { const f = foldMap?.modelToFolded?.[String(o)]; return f == null ? o : Number(f); };
+  return basis.map((b) => {
+    const head = { n: b?.n ?? null, kind: b?.kind ?? null, applied: b?.applied ?? null };
+    if (b?.why === "not-checkable") return { ...head, outcome: "not-checkable", changes: [] };
+    const changes = (Array.isArray(b?.changes) ? b.changes : []).map((c) => {
+      const onFinding = c?.ordinal != null;
+      const where = onFinding ? { ordinal: c.ordinal, deliveredAs: folded(c.ordinal), field: c.field } : { line: c?.line };
+      const inRecord = onFinding
+        ? findings.has(where.deliveredAs) && squash(findings.get(where.deliveredAs)[c.field]) === squash(c.text)
+        : lines.has(c?.line) && squash(lines.get(c.line)) === squash(c.text);
+      const printedInReportMd = (onFinding && c.field === "net") || (!onFinding && String(c?.line).startsWith("action:"));
+      const inReportMd = !printedInReportMd || md == null || !squash(c?.text) ? null : md.includes(squash(c.text));
+      return { ...where, inRecord, inReportMd };
+    });
+    if (!changes.length) return { ...head, outcome: "not-applicable", why: b?.why ?? "no-printed-field-changed", changes };
+    return { ...head, outcome: changes.every((c) => c.inRecord) ? "delivered" : "not-found", changes };
+  });
+}

package/driver/corrections-feedforward.mjs

@@ -252,7 +252,10 @@ export function scopeDrift(rows, preDoc, postDoc) {
   return { scoped: true, named: [...named], moved, unbound };
 }
 
-export function buildCorrectionsApplied(rows, preDoc, postDoc) {
+// `sections`, optional: the flags whose target is a narrative section, as `{n, label, before, after}` with the
+// section's text before and after the pass. The review after a delivery-check repair names sections as items,
+// so a flag on one can be checked; with no `sections` the output is what it always was.
+export function buildCorrectionsApplied(rows, preDoc, postDoc, { sections = null } = {}) {
   // THE UNION OF BOTH SIDES, deliberately. Reading the post doc alone loses a finding the pass REMOVED —
   // and a removal is exactly when the flag would stop naming anything, so the post doc alone cannot even
   // see the event.: what that removal is EVIDENCE of is the question this module used to get wrong.
@@ -286,12 +289,15 @@ export function buildCorrectionsApplied(rows, preDoc, postDoc) {
     // — A LINE THAT IS NOT A FINDING, asked before the name match. A flag that names or quotes a coverage
     // note, an action or the mark assessment is about that line, and a mark or owner named inside the
     // line it quotes is incidental. Asked only where no ordinal was declared: a declaration still wins.
-    const hit = preDoc && !declaredOrds.length ? linesOf(r.text, preLines) : [];
+    const sec = !declaredOrds.length ? (sections ?? []).find((x) => x.n === r.n) ?? null : null;
+    const hit = preDoc && !declaredOrds.length && !sec ? linesOf(r.text, preLines) : [];
     const targets = declaredOrds.length ? declaredOrds.map(label)
+      : sec ? [sec.label]
       : hit.length ? hit.map((l) => l.label) : targetsOf(r.text, known);
     let outcome;
     let removed = [];
-    if (!preDoc) outcome = "not-checkable";
+    if (sec) outcome = squash(sec.after ?? "") !== squash(sec.before ?? "") ? "section-changed" : "section-unchanged";
+    else if (!preDoc) outcome = "not-checkable";
     else if (hit.length) {
       // The same three answers a finding gets, asked of the line's own text. REMOVAL WINS, as it does
       // for a finding: a line gone after the pass was answered by deletion, and that is the question.
@@ -374,7 +380,7 @@ export function buildCorrectionsApplied(rows, preDoc, postDoc) {
  *
  * PURE.
  */
-export const RESOLVED_OUTCOMES = Object.freeze(["findings-changed", "line-changed"]);
+export const RESOLVED_OUTCOMES = Object.freeze(["findings-changed", "line-changed", "section-changed"]);
 
 /** The rows to print. Anything not positively resolved, including a row of an outcome nobody has met. */
 export const unresolvedFlags = (rows) =>
@@ -387,7 +393,7 @@ export const unresolvedFlags = (rows) =>
  * twelve mixed lines has to re-derive that grouping for itself every time. The raw review still rides
  * below it in the followup: this is a better index of the same evidence, not a replacement for it. PURE.
  */
-export function correctionsWorklist(rows) {
+export function correctionsWorklist(rows, { afterRepair = false } = {}) {
   if (!rows?.length) return "";
   const byKind = new Map();
   for (const r of rows) { if (!byKind.has(r.kind)) byKind.set(r.kind, []); byKind.get(r.kind).push(r); }
@@ -400,9 +406,13 @@ export function correctionsWorklist(rows) {
   // it rather than correcting it: the flag went away and the report did not become true. Stated as a
   // constraint on the worklist itself, where the moves are chosen, rather than left to the recheck to
   // catch afterwards — the recheck that caught it did so once, and once is luck.
+  //
+  // AFTER A DELIVERY-CHECK REPAIR NO REVIEW FOLLOWS THE CORRECTION, so "standing for the reviewer" would be
+  // false there: a point left standing is recorded for the reviewing lawyer instead.
   out.push("",
     "REMOVING A FLAGGED FINDING DOES NOT ANSWER ITS FLAG. Correct the fact, or say why it cannot be corrected "
-    + "and leave it standing for the reviewer. A finding you believe should not be there is WITHDRAWN with its "
+    + (afterRepair ? "and leave it standing; the point is recorded for the reviewing lawyer. " : "and leave it standing for the reviewer. ")
+    + "A finding you believe should not be there is WITHDRAWN with its "
     + "reason recorded, never deleted — a flag that stops naming anything reads as resolved, and the driver "
     + "reports the deletion by name either way.");
   return out.join("\n");

package/driver/corrective-arm.mjs

@@ -9,17 +9,20 @@
 //
 // ── WHY THIS IS NOT SIMPLY "ALLOW THE WORD" ─────────────────────────────────────────────────────────
 //
-// The production corrective pass is a WARM followup: it resumes the synthesis session and sends only
-// `correctionsExtra`'s blocks. An experiment arm always builds a fresh key and dispatches into a sandbox,
-// so it cannot resume anything — and resuming the REAL session from a sandbox was rejected outright,
-// because "canonical run untouched" is the arm's whole contract and an arm that breaks its contract to
-// gain fidelity is measuring with a broken instrument.
+// The production corrective pass is a FOLLOWUP dispatch of the synthesis stage, on the run's own key with
+// the winning attempt's model and thinking, and its message is `correctionsExtra`'s blocks. It does not
+// resume the synthesis session: no engine resumes by session key (stages-followup.test.mjs pins it), so
+// the followup's first attempt is a fresh turn handed the corrections and the stage's inputs to read. An
+// experiment arm always builds a fresh key and dispatches into a sandbox — and dispatching on the REAL run's
+// key from a sandbox was rejected outright, because "canonical run untouched" is the arm's whole contract and
+// an arm that breaks its contract to gain fidelity is measuring with a broken instrument.
 //
 // So an arm carries the corrective pass's INPUTS on a COLD turn, composed by the same function production
-// uses. That reaches the seam nothing else reaches without a two-hour run. It is NOT the warm pass, and
-// the receipt says so in a word rather than leaving it to be inferred:
+// uses. That reaches the seam nothing else reaches without a two-hour run. It is NOT production's
+// dispatch, and the receipt says so in a word rather than leaving it to be inferred. The production word
+// is a recorded value and stays as it is, though the followup it names never resumes the synthesis session:
 //
-//   dispatched-warm            production only — the resumed followup
+//   dispatched-warm            production only — the followup on the run's own key
 //   dispatched-cold            the arm — the same blocks, a fresh turn
 //   refused-no-corrective-state  neither — this run has no corrective pass to reproduce
 //