clearotron 0.5.0-beta.2 → 0.5.0-beta.3

package/driver/suite-census.json

@@ -81,6 +81,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-blocking-email-keeps-the-reports-client-actions.test.mjs": {
+          "tests": 3,
+          "asserts": 7,
+          "skips": 0,
+          "todos": 0
+        },
         "a-borrowed-node-modules-is-not-a-licence-defect.test.mjs": {
           "tests": 8,
           "asserts": 28,
@@ -669,6 +675,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-failure-notice-goes-to-whoever-asked.test.mjs": {
+          "tests": 3,
+          "asserts": 10,
+          "skips": 0,
+          "todos": 0
+        },
         "a-family-withheld-by-judgment-is-not-read-as-awaiting.test.mjs": {
           "tests": 6,
           "asserts": 15,
@@ -705,6 +717,24 @@
           "skips": 0,
           "todos": 0
         },
+        "a-findings-record-broken-after-synthesis-is-restored-at-delivery.pipeline.test.mjs": {
+          "tests": 6,
+          "asserts": 38,
+          "skips": 0,
+          "todos": 0
+        },
+        "a-finished-turn-is-not-a-timeout-for-a-request-inside-it.test.mjs": {
+          "tests": 5,
+          "asserts": 23,
+          "skips": 0,
+          "todos": 0
+        },
+        "a-floor-is-set-aside-on-its-goods-or-mark-on-the-evidence.test.mjs": {
+          "tests": 6,
+          "asserts": 19,
+          "skips": 0,
+          "todos": 0
+        },
         "a-floor-row-whose-owner-was-set-aside-is-answered.test.mjs": {
           "tests": 2,
           "asserts": 11,
@@ -803,7 +833,7 @@
         },
         "a-goods-test-miss-is-not-called-other-goods.test.mjs": {
           "tests": 2,
-          "asserts": 6,
+          "asserts": 7,
           "skips": 0,
           "todos": 0
         },
@@ -827,7 +857,7 @@
         },
         "a-group-row-gives-every-owner-in-it-a-fate.test.mjs": {
           "tests": 7,
-          "asserts": 36,
+          "asserts": 37,
           "skips": 0,
           "todos": 0
         },
@@ -1557,6 +1587,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-register-search-that-cannot-finish-is-delivered-as-not-searched.pipeline.test.mjs": {
+          "tests": 3,
+          "asserts": 22,
+          "skips": 0,
+          "todos": 0
+        },
         "a-register-unit-follow-up-carries-the-one-market-list-and-the-classes.test.mjs": {
           "tests": 4,
           "asserts": 10,
@@ -1815,12 +1851,24 @@
           "skips": 0,
           "todos": 0
         },
+        "a-search-a-check-cannot-prove-is-delivered-as-not-searched.pipeline.test.mjs": {
+          "tests": 11,
+          "asserts": 66,
+          "skips": 0,
+          "todos": 0
+        },
         "a-search-asks-the-web-on-the-settings-its-report-type-pins.test.mjs": {
           "tests": 6,
           "asserts": 22,
           "skips": 0,
           "todos": 0
         },
+        "a-search-taken-out-of-the-band-is-never-read-as-answered.test.mjs": {
+          "tests": 5,
+          "asserts": 23,
+          "skips": 0,
+          "todos": 0
+        },
         "a-search-the-engine-chose-not-to-run-is-not-reported-as-unfinished.test.mjs": {
           "tests": 5,
           "asserts": 13,
@@ -1905,6 +1953,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-slice-taken-out-of-the-band-is-open-for-its-own-reason.test.mjs": {
+          "tests": 4,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "a-slice-the-fold-refused-as-already-asked-is-not-a-dispatch-failure.test.mjs": {
           "tests": 10,
           "asserts": 32,
@@ -2067,6 +2121,12 @@
           "skips": 0,
           "todos": 0
         },
+        "a-turns-tool-servers-are-told-when-to-stop-sending.test.mjs": {
+          "tests": 3,
+          "asserts": 12,
+          "skips": 0,
+          "todos": 0
+        },
         "a-two-form-matter-owes-a-read-per-form.test.mjs": {
           "tests": 8,
           "asserts": 25,
@@ -2403,6 +2463,12 @@
           "skips": 0,
           "todos": 0
         },
+        "an-identical-mark-is-declined-on-its-goods-only-on-goods-held-complete.test.mjs": {
+          "tests": 6,
+          "asserts": 19,
+          "skips": 0,
+          "todos": 0
+        },
         "an-incumbent-alert-adds-no-class.test.mjs": {
           "tests": 2,
           "asserts": 3,
@@ -2597,7 +2663,7 @@
         },
         "band-truth-gate.pipeline.test.mjs": {
           "tests": 3,
-          "asserts": 15,
+          "asserts": 16,
           "skips": 0,
           "todos": 0
         },
@@ -3653,7 +3719,7 @@
         },
         "engine.anthropic.test.mjs": {
           "tests": 70,
-          "asserts": 262,
+          "asserts": 263,
           "skips": 2,
           "todos": 0
         },
@@ -4385,7 +4451,7 @@
         },
         "named-band-missing.test.mjs": {
           "tests": 7,
-          "asserts": 22,
+          "asserts": 24,
           "skips": 0,
           "todos": 0
         },
@@ -7103,7 +7169,7 @@
         },
         "the-review-after-a-repair-reads-only-what-the-repair-changed.pipeline.test.mjs": {
           "tests": 24,
-          "asserts": 190,
+          "asserts": 193,
           "skips": 0,
           "todos": 0
         },
@@ -7120,8 +7186,8 @@
           "todos": 0
         },
         "the-review-is-told-the-floors-placement-set-aside.test.mjs": {
-          "tests": 9,
-          "asserts": 25,
+          "tests": 11,
+          "asserts": 27,
           "skips": 0,
           "todos": 0
         },
@@ -7391,7 +7457,7 @@
         },
         "the-words-the-step-reads-match-what-the-driver-checks.test.mjs": {
           "tests": 9,
-          "asserts": 44,
+          "asserts": 45,
           "skips": 0,
           "todos": 0
         },
@@ -7427,7 +7493,7 @@
         },
         "the-writer-owes-positions-not-records.test.mjs": {
           "tests": 6,
-          "asserts": 20,
+          "asserts": 21,
           "skips": 0,
           "todos": 0
         },
@@ -7953,8 +8019,8 @@
           "todos": 0
         },
         "connector-skills-are-one-copy.test.mjs": {
-          "tests": 5,
-          "asserts": 30,
+          "tests": 6,
+          "asserts": 31,
           "skips": 0,
           "todos": 0
         },
@@ -8681,6 +8747,12 @@
           "skips": 0,
           "todos": 0
         },
+        "providers/_shared/test/a-plan-call-past-its-time-to-stop-sending-returns-what-it-holds.test.mjs": {
+          "tests": 5,
+          "asserts": 19,
+          "skips": 0,
+          "todos": 0
+        },
         "providers/_shared/test/a-question-with-no-regions-is-asked-to-the-orders-scope.test.mjs": {
           "tests": 3,
           "asserts": 6,

package/driver/verify.mjs

@@ -2689,12 +2689,12 @@ function placementAccountVerdict(dir) {
     const rid = rowOf.get(id), cause = rid ? causeOf.get(rid) : null;
     return `${id}${group ? ` in (${group})` : ""}${cause ? `, its row ${rid} (${cause})` : ""}`;
   });
-  const finishRow = floors.some((f) => f.includes(", its row ")) ? " Where a floor's row is named, finish that row: a floor's row owes a tier, "
-    + "sheet-2 at the least, and a reason stating the ground." : "";
+  const finishRow = floors.some((f) => f.includes(", its row ")) ? " Where a floor's row is named, finish that row: give it "
+    + "headline-candidate or sheet-2, and a reason stating the ground." : "";
   if (unjudged.length) {
     const named = unjudged.slice(0, 8).map((u) => `${u.row_id ?? u.select ?? "?"} (${u.cause})`).join(", ");
-    const floorsToo = floors.length ? ` The form gives these floors no fate either: ${capped(floors)}. Place each by `
-      + `selecting that record, sheet-2 at the least, or set its line aside by name on its status or its territory.${finishRow}` : "";
+    const floorsToo = floors.length ? ` The form gives these floors no fate either: ${capped(floors)}. Select each at `
+      + `headline-candidate or sheet-2, or set its line aside by name.${finishRow}` : "";
     return fail(`placement_unjudged=${unjudged.length}: ${named}${unjudged.length > 8 ? ", …" : ""} — each of these rows is `
       + "in placement-form.json and its own judgement will not render: a selected row owes a `tier` from the closed set and a `reason` "
       + "stating the ground; a row you wrote in full owes mark, owner and jurisdiction too. Finish these rows in the form; "
@@ -2755,8 +2755,8 @@ function placementSaidBackVerdict({ refused, floors, also, finishRow = "" }) {
   if (floors.length)
     return fail(`placement_floors_without_fate=${floors.length}: ${capped(floors)} — each is a floor, a live identical or `
       + "near-identical mark in an ordered class, and the form gives it no fate. "
-      + "Place it by selecting that record, sheet-2 at the least, or set its line aside by name on its status or its "
-      + `territory.${finishRow} Only these are owed; every other row stands.${also}`);
+      + "Select it at headline-candidate or sheet-2, or set its line aside by name."
+      + `${finishRow} Only these are owed; every other row stands.${also}`);
   if (refused.length)
     return fail(`placement_refused=${refused.length}: ${capped(refused)} — the form refused each of these for the reason given `
       + "with it, and nothing else on the form moved. Send each again corrected, or leave it out; every other row stands.");

package/mcp-server/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-artifacts-mcp
 
+## 0.5.0-beta.3
+
+No changes in this release.
+
 ## 0.5.0-beta.2
 
 No changes in this release.

package/mcp-server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-artifacts-mcp",
-  "version": "0.5.0-beta.2",
+  "version": "0.5.0-beta.3",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "MCP server to interrogate clearotron trademark-clearance runs — list/read artifacts, trace the full decision flow, telemetry/cost, coverage, single-run search, and a gated single-step what-if. Imports the clearotron-driver read-only; touches no driver/template/deploy files.",

package/package.json

@@ -2,7 +2,7 @@
   "name": "clearotron",
   "mcpName": "io.github.CordilleraSarl/clearotron",
   "type": "module",
-  "version": "0.5.0-beta.2",
+  "version": "0.5.0-beta.3",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",

package/portal-ui/package.json

@@ -2,7 +2,7 @@
   "name": "portal-ui",
   "private": true,
   "type": "module",
-  "version": "0.5.0-beta.2",
+  "version": "0.5.0-beta.3",
   "license": "AGPL-3.0-only",
   "description": "The unified trademark portal UI. One address, one login: who you are decides what you see. Built as a static bundle, served by driver/portal-service.mjs — the browser never reaches profile-service or recipe-service.",
   "engines": {

package/providers/_shared/README.md

@@ -24,6 +24,7 @@ documents both: `countProbe` (`"endpoint"` / `"cheap"` / `"none"`) says where a
 | `term-shape.mjs` | Whether a string is a searchable mark term and agrees with its predicate (`{ predicate: "exact", term: "WAVO*" }` is a silent clean). |
 | `territory-codes.mjs` | Display name → ISO 3166 / WIPO ST.3 code. `""` means worldwide, `null` means unknown — and never goes to the wire. |
 | `provider-text.mjs` | Clips a vendor message from the MIDDLE, because the word that classifies a refusal sits at the end of the sentence. |
+| `send-until.mjs` | The time after which a plan call sends no further question, handed to each turn's tool servers ahead of the turn's deadline, so a call cut short returns what it holds. |
 | `test/` | Twelve files, provider-agnostic by design — several drive every adapter's real code rather than fixtures of what we believe it returns. |
 
 ## What reads it

package/providers/_shared/enumerate.mjs

@@ -57,6 +57,7 @@ import {
 import { makeCountProbe, parseToolText, isToolError } from "./count.mjs"; import { floorOf, moreThan } from "../../shared/register-floor.mjs";
 import { guardCountCall, guardToolCall } from "./transport-guard.mjs";
 import { clipProviderText } from "./provider-text.mjs";   // — keep the discriminator
+import { pastSendUntil } from "./send-until.mjs";   // past a call's time to stop sending, a timed-out question is not split again
 
 // ── — HOW MUCH OF A PROVIDER ERROR SURVIVES INTO THE BAND BLOCK: ALL OF IT ───────────────────────────
 //
@@ -448,7 +449,7 @@ export function makeEnumerate(deps) {
       }
       // A half that timed out while its sibling answered is the one place fewer regions may help: it is
       // halved in turn, under the same rule.
-      const r = timedOut({ r: first })
+      const r = timedOut({ r: first }) && !pastSendUntil(tctx)
         ? await regionHalves(auth, { ...params, regions: half }, tctx, { ceiling, incomplete, cause: parseToolText(first)?.reason ?? cause, hear })
         : first;
       const parsed = isToolError(r) ? null : parseToolText(r);
@@ -637,7 +638,7 @@ export function makeEnumerate(deps) {
             + `Provider's own words: ${clipProviderText(c?.reason ?? "", COUNT_PROBE_BUDGET)}`,
             { crowd_basis: "provider-refused-count", count_unavailable: true });
         }
-        if (splittable && isGatewayTimeout(c?.reason)) return regionHalves(auth, params, tctx, { ceiling, incomplete, cause: String(c.reason), hear });
+        if (splittable && isGatewayTimeout(c?.reason) && !pastSendUntil(tctx)) return regionHalves(auth, params, tctx, { ceiling, incomplete, cause: String(c.reason), hear });
         return incomplete(0, 0, [],
           `provider error on the count probe before enumeration: ${String(c?.reason ?? "count unavailable")}`, timeoutMark(c?.reason));
       }
@@ -670,7 +671,7 @@ export function makeEnumerate(deps) {
         if (page === 0 && allNames && allNames.length > 1 && listRefusal?.test(String(r.text ?? ""))) {
           return enumerateQuestion(auth, params, tctx, { split, width: Math.ceil(allNames.length / 2) }, said);
         }
-        if (splittable && isGatewayTimeout(r.text)) return regionHalves(auth, params, tctx, { ceiling, incomplete, cause: String(r.text), hear });
+        if (splittable && isGatewayTimeout(r.text) && !pastSendUntil(tctx)) return regionHalves(auth, params, tctx, { ceiling, incomplete, cause: String(r.text), hear });
         return incomplete(total, results.length, results, `provider error during enumeration (page ${page}): ${String(r.text ?? "")}`, timeoutMark(r.text));
       }
       const parsed = parseToolText(r);

package/providers/_shared/execute-plan.mjs

@@ -20,6 +20,8 @@ import { nativeScriptIndexGap } from "./script-form.mjs"; import { floorOf, more
 import { entryTermIssues, goodsTermsList } from "./term-shape.mjs";
 import { awaitsReadingTurn, releasedFamiliesFile } from "./plan-guards.mjs";
 import { FOLLOW_UP_SEARCH_LIMIT, runDriverDirOf, followUpRoom, followUpClass, identicalMarkTerms, recordFollowUpSearch, recordOutstanding } from "./follow-up-searches.mjs";
+import { bandWithSlicesOut, slicesTakenOutByAxis } from "../../shared/slices-taken-out.mjs";
+import { pastSendUntil } from "./send-until.mjs";   // a call past its time to stop sending sends no new question   // a band read as answers, with the slices a check could not prove ran taken out
 
 /** How soon after an answer lands it is written to the band, while the call goes on (see `keepAnswers` below). */
 export const KEEP_ANSWERS_AFTER_MS = 2000;
@@ -375,10 +377,20 @@ export function makeExecutePlan(deps) {
       try { identicalTerms = identicalMarkTerms(JSON.parse(readFileSync(join(driverDir, "register-plan.json"), "utf8"))); } catch { /* no frozen plan: no identical terms known */ }
     }
     const refused = [];
+    // THE BAND AS ANSWERS, for the checks below that read it so: a slice the run's searches record took out of the band,
+    // because a check could not prove it ran, is read as the open slice it was delivered as, whatever wrote the band
+    // since (shared/slices-taken-out.mjs). The run is the band's own, as the propose tool reads it. The writes below
+    // still merge the file as it stands.
+    const asAnswers = (file) => {
+      const prior = JSON.parse(readFileSync(file, "utf8"));
+      return Array.isArray(prior) ? bandWithSlicesOut(prior, slicesTakenOutByAxis(dirname(dirname(outPath))).get(axis)).blocks : prior;
+    };
+    const bandAsAnswers = () => asAnswers(outPath);
     // The follow-ups this axis's band already answers, read once and only when the net meets a question sent before:
-    // an answered one adds nothing when it is sent again, and a failed one counts again. A unit whose pass was killed at
-    // its time limit is parked: its band is renamed (`<band>.tainted-<n>`) so the resume runs the unit again, and the
-    // re-run sends the same follow-ups. Their answers are in the renamed band, so they count nothing either.
+    // an answered one adds nothing when it is sent again, and a failed one counts again, as does one taken out. A unit
+    // whose pass was killed at its time limit is parked: its band is renamed (`<band>.tainted-<n>`) so the resume runs the
+    // unit again, and the re-run sends the same follow-ups. Their answers are in the renamed band, so they count nothing
+    // either. Every band on record is read as answers, so a slice taken out counts again whichever band holds it.
     let answeredQids = null;
     // This axis's band, and the bands a parked pass left (`<band>.tainted-<n>`), oldest first and the band's own last.
     const bandsOnRecord = () => {
@@ -393,7 +405,7 @@ export function makeExecutePlan(deps) {
         answeredQids = new Set();
         for (const band of bandsOnRecord()) {
           try {
-            const prior = JSON.parse(readFileSync(band, "utf8"));
+            const prior = asAnswers(band);
             for (const b of Array.isArray(prior) ? prior : []) if (b?.qid && b.error !== true) answeredQids.add(String(b.qid));
           } catch { /* no band yet: nothing answered */ }
         }
@@ -426,7 +438,7 @@ export function makeExecutePlan(deps) {
     const seeded = new Set();
     if (qidsFilter) {
       try {
-        const existing = JSON.parse(readFileSync(outPath, "utf8"));
+        const existing = bandAsAnswers();   // a parent taken out of the band releases no child
         if (Array.isArray(existing)) {
           for (const b of existing) {
             if (b && typeof b === "object" && b.qid && typeof b.state === "string" && !qidsFilter.has(b.qid)) {
@@ -695,7 +707,11 @@ export function makeExecutePlan(deps) {
     // change the answer. An unhandled fault here is an unknown of unknown durability, so it keeps the
     // transient reading. The reason names it an EXECUTOR fault so it is never read as something the
     // register said — a block that fabricated a provider response would be the worse defect.
+    // PAST ITS TIME TO STOP SENDING, A CALL SENDS NO NEW QUESTION (send-until.mjs). The question is not reached by
+    // this call and keeps whatever block the band holds for it; the call returns what it has, naming it.
+    const notReached = [];
     const runEntry = async (e) => {
+      if (pastSendUntil(tctx)) { notReached.push(e.qid); return; }
       if (driverDir && followUpClass(e, { identicalTerms }) === "counted") {
         const room = followUpRoom(driverDir, FOLLOW_UP_SEARCH_LIMIT, e, { answered: answeredBefore });
         if (!room.open) {
@@ -754,8 +770,8 @@ export function makeExecutePlan(deps) {
     // fringe) gets no block and any stale one is dropped (a fringe slice must never outlive its
     // parent's crowd verdict). This makes the initial call and every warm followup the SAME call.
     // A follow-up the net did not send is not owned by this call: whatever answer it already had stands.
-    const refusedSet = new Set(refused);
-    const owned = new Set(targeted.map((e) => e.qid).filter((q) => !refusedSet.has(q)));
+    const refusedSet = new Set(refused), notReachedSet = new Set(notReached);
+    const owned = new Set(targeted.map((e) => e.qid).filter((q) => !refusedSet.has(q) && !notReachedSet.has(q)));
     let preserved = [];
     try {
       const existing = JSON.parse(readFileSync(outPath, "utf8"));
@@ -793,6 +809,7 @@ export function makeExecutePlan(deps) {
       states: Object.fromEntries([...stateByQid].filter(([q]) => !seeded.has(q))),
       ...(Object.keys(spellingCounts).length ? { spelling_counts: spellingCounts } : {}),
       ...(refused.length ? { outstanding: refused } : {}),
+      ...(notReached.length ? { not_reached: notReached } : {}),
     }, null, 2) };
   };
 }

package/providers/_shared/send-until.mjs

@@ -0,0 +1,25 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+//
+// send-until.mjs — the time after which a plan call sends no further question to the register.
+//
+// A plan call runs inside a model's turn, and the turn has a deadline. When the call outlasted it, the call and the
+// turn ended together, so the unit could not write what the call had answered: on a production run on 2026-10-21 a
+// unit's plan search ran into the register's gateway timeouts on every attempt and never wrote its result. The
+// driver now hands each turn's tool servers a time to stop sending (CLEAROTRON_GATHER_SEND_UNTIL_MS, set per turn by
+// the gateway, ahead of the turn's own deadline by a reserve). Past it, the executor sends no new question and a
+// timed-out question is not split again; the call returns what it holds and the turn has the time to write it.
+//
+// A pure leaf. A call with no time to stop sending, the driver's own dispatches among them, runs as it always did.
+
+/** The gateway's reserve for a turn of `timeoutSec`: a quarter of the turn, and never more than five minutes. */
+export const sendReserveMs = (timeoutSec) => Math.min(300_000, Math.max(0, Number(timeoutSec) || 0) * 250);
+
+/** Whether a call given `tctx` is past its time to stop sending. False when it has none. */
+export function pastSendUntil(tctx, now = Date.now()) {
+  const until = Number(tctx?.sendUntilMs);
+  return Number.isFinite(until) && until > 0 && now >= until;
+}
+
+/** The call context's time to stop sending, read from the environment a turn's tool server was started with. */
+export const sendUntilFromEnv = (env = process.env) => Number(env.CLEAROTRON_GATHER_SEND_UNTIL_MS) || null;

package/providers/oauth-mcp-bridge/CHANGELOG.md

@@ -1,5 +1,9 @@
 # trademark-oauth-mcp-bridge
 
+## 0.5.0-beta.3
+
+No changes in this release.
+
 ## 0.5.0-beta.2
 
 No changes in this release.

package/providers/oauth-mcp-bridge/package.json

@@ -1,6 +1,6 @@
 {
   "name": "trademark-oauth-mcp-bridge",
-  "version": "0.5.0-beta.2",
+  "version": "0.5.0-beta.3",
   "license": "AGPL-3.0-only",
   "private": true,
   "description": "OAuth 2.1 MCP stdio bridge used by the engine's case-law gather stage (courtlistener / legaldatahunter).",

package/scripts/band-shape-probe.mjs

@@ -65,7 +65,7 @@ if (!/^\d+$/.test(String(opts.seed)) || Number(opts.seed) <= 0)
 
 // ── the inputs deriveBandShape uses, read the same way it reads them ─────────────────────────────────
 //
-// Deliberately mirrors driver/pipeline.mjs:441-490 mergeRegisterBands rather than inventing a gathering step. If the two
+// Deliberately mirrors driver/pipeline.mjs:501-563 mergeRegisterBands rather than inventing a gathering step. If the two
 // diverge, this probe measures a shape the run never had.
 
 const runDir = opts.run;

package/scripts/e2e-first-time.mjs

@@ -76,7 +76,7 @@ export const COUNTED_EVENTS = {
   "post-repair-correction-unrecoverable": FAILED, "post-repair-state-not-kept": FAILED,
   "digest-flush-timeout": FAILED, "document-coverage-render-failed": FAILED, "doubts-failed": FAILED,
   "evidence-claim-invariant": { kind: FAILED, when: (e) => e.ok === false || Number(e.violations) > 0 },
-  "floor-duty-failed": FAILED, "frame-reopen-redigest-failed": FAILED, "goods-evidence-failed": FAILED, "placement-decisions-failed": FAILED, "placement-band-ids-failed": FAILED, "late-evidence-failed": FAILED, "band-refused-records-failed": FAILED, "verdict-write-deferred": FAILED, "ranking-read-by-writer-failed": FAILED, "audit-rebuild-failed": FAILED, "audit-build-failed": FAILED, "write-up-goods-from-failed": FAILED, "house-element-ownership-failed": FAILED,
+  "floor-duty-failed": FAILED, "frame-reopen-redigest-failed": FAILED, "goods-evidence-failed": FAILED, "placement-decisions-failed": FAILED, "placement-band-ids-failed": FAILED, "late-evidence-failed": FAILED, "band-refused-records-failed": FAILED, "verdict-write-deferred": FAILED, "ranking-read-by-writer-failed": FAILED, "audit-rebuild-failed": FAILED, "audit-build-failed": FAILED, "write-up-goods-from-failed": FAILED, "declination-goods-states-failed": FAILED, "house-element-ownership-failed": FAILED,
   "intake-asks-missing": FAILED, "invalid-artifact-strikes": FAILED, "knockout-band-checks-inert": FAILED,
   "knockout-in-use-as-unanswered": FAILED, "knockout-ladder-unreadable": FAILED, "knockout-method-checks-inert": FAILED,
   "knockout-owner-checks-failed": FAILED, "knockout-register-records-failed": FAILED, "knockout-sweep-outage": FAILED,
@@ -231,6 +231,7 @@ export const NOT_COUNTED_EVENTS = {
   ],
   "the twin of an incident counted under another record — its dispatch, its repair, its clamp or its failure": [
     "assessment-not-completed-delivery", "part-completed", "overview-not-completed-delivery", "review-not-completed-delivery",
+    "core-artifact-restored", "searches-not-completed-delivery", "unit-not-completed-delivery",
     "action-reemit", "ask-answer-reemit", "authority-write-denied", "connotation-remedy", "corrections-applied",
     "corrective-cycle-receipt", "corrective-cycle-settled", "corrective-findings-stale", "coverage-absence-rendered",
     "coverage-closure", "coverage-ledger-recovered", "delivery-stale-repair", "delivery-stale-requeued", "envelope-close-rows", "escalation-noop", "floor-duty-after-repair", "writer-duty-after-repair", "writer-duty-after-correction", "guard-clause-replaced", "guard-gap-closed", "verdict-recomputed-gap-closed", "guard-clause-named-elsewhere", "audit-rebuilt", "audit-withdrawn", "record-carry-doubts-again",

package/shared/names-in-force.mjs

@@ -71,6 +71,7 @@ export const NAMES_IN_FORCE = Object.freeze([
   "CLEAROTRON_FRAME_REOPEN_MAX",
   "CLEAROTRON_GATHER_AGENT",
   "CLEAROTRON_GATHER_CONCURRENCY",
+  "CLEAROTRON_GATHER_SEND_UNTIL_MS",
   "CLEAROTRON_GATHER_SESSION_ID",
   "CLEAROTRON_GATHER_SESSION_KEY",
   "CLEAROTRON_HARD_MS",

package/shared/slices-taken-out.mjs

@@ -0,0 +1,65 @@
+// SPDX-License-Identifier: AGPL-3.0-only
+// Copyright 2026 Cordillera Sàrl. Additional terms under section 7 of the AGPL-3.0 apply — see ADDITIONAL-TERMS.md
+//
+// slices-taken-out.mjs — a band read with the slices a check could not prove ran taken out, by every reader of it.
+//
+// The run's searches record (driver/parts-not-completed.mjs, its `searches` part) names each slice taken out of a band
+// and delivered open: its axis, and its qid or, for a slice with none, its query. A unit re-run after the fan-in writes
+// its axis's band whole, so such a slice can come back with the records nobody could prove were searched. Every reader
+// that takes a band's blocks as answers reads the recorded slices out: the pipeline's merge and plan join, the answers
+// the workers share, the propose tool's check on a re-proposed question, and the executor's checks on a follow-up asked
+// before and on a parent before it releases a child. Each reads them out in memory and never by writing the file: a
+// unit or the executor may be writing that band at the same moment.
+//
+// HERE AND NOT IN THE DRIVER, because the executor reads it too and nothing under providers/ imports the driver. Where
+// the record sits is stated here for the same reason, once, for its writer and its readers alike.
+//
+// A pure leaf: node:fs and shared/driver-dir.mjs only.
+import { readFileSync } from "node:fs";
+import { driverDir } from "./driver-dir.mjs";
+
+/** The folder under `_driver/` holding the record of each part a run could not complete. */
+export const NOT_COMPLETED_DIR = "not-completed";
+
+/** The record's path for `part`. */
+export function notCompletedPath(runDir, part) {
+  return driverDir(runDir, NOT_COMPLETED_DIR, `${part}.json`);
+}
+
+/**
+ * The slices the run's searches record took out of the band, by axis, each named by its qid or, with none, its query.
+ * Empty when the run has no record, and when its record cannot be read: a damaged record names no slice. IMPURE (reads
+ * the record).
+ */
+export function slicesTakenOutByAxis(runDir) {
+  const byAxis = new Map();
+  let slices = [];
+  try { slices = runDir ? JSON.parse(readFileSync(notCompletedPath(runDir, "searches"), "utf8"))?.slices : []; } catch { slices = []; }
+  for (const s of Array.isArray(slices) ? slices : []) {
+    if (!s?.axis || (!s?.qid && !s?.query)) continue;
+    if (!byAxis.has(s.axis)) byAxis.set(s.axis, []);
+    byAxis.get(s.axis).push(s);
+  }
+  return byAxis;
+}
+
+/**
+ * A band's blocks with `slices` taken out: each becomes the executor's deferred block, or is added as one. A slice with
+ * no qid is named by its query: the block with no qid on that query becomes a deferred block on it, and nothing is
+ * added where the band holds none. PURE.
+ */
+export function bandWithSlicesOut(blocks, slices) {
+  const out = Array.isArray(blocks) ? [...blocks] : [];
+  const taken = [];
+  for (const s of Array.isArray(slices) ? slices : []) {
+    const i = s.qid ? out.findIndex((b) => b?.qid === s.qid) : out.findIndex((b) => b && !b.qid && b.query === s.query);
+    if (!s.qid && i < 0) continue;
+    const was = i >= 0 ? out[i] : null;
+    if (was?.error === true && was.deferred === true && was.reason === s.reason) continue;
+    const block = { state: "incomplete", ...(s.qid ? { qid: s.qid } : {}), query: String(was?.query ?? s.query ?? s.qid), total_hits: 0, fetched: 0,
+      sample: [], error: true, deferred: true, reason: String(s.reason) };
+    if (i >= 0) out[i] = block; else out.push(block);
+    taken.push(s);
+  }
+  return { blocks: out, taken };
+}

package/skills/clearotron-account/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: clearotron-account
-description: Work with a trademark clearance account: review the searches already run for it, and commission new ones. Use when the user asks about their clearance searches in general, or wants a new search set up.
+description: "Work with a trademark clearance account: review the searches already run for it, and commission new ones. Use when the user asks about their clearance searches in general, or wants a new search set up."
 ---
 
 # Working with your trademark clearance searches (account connector)

package/skills/clearotron-ops/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: clearotron-ops
-description: Drive the clearance engine as an integrator: take an intake brief, start a run, monitor it, and courier the delivery. Use when operating the engine rather than reading its output.
+description: "Drive the clearance engine as an integrator: take an intake brief, start a run, monitor it, and courier the delivery. Use when operating the engine rather than reading its output."
 ---
 
 # Operating the clearance engine (ops connector) — intake + monitoring