instar 1.3.220 → 1.3.222

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.220",
+  "version": "1.3.222",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-06-03T11:27:46.725Z",
-  "instarVersion": "1.3.220",
+  "generatedAt": "2026-06-03T13:08:47.621Z",
+  "instarVersion": "1.3.222",
   "entryCount": 195,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "af8b673a98bab2b47c8782a00013354e7ad340ad4c1558ce47b8811bdf521dab",
+      "contentHash": "684bada4c212f8188383803eb827932e826eb06ce383bda2b8752e99b4874a1e",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.221.md

@@ -0,0 +1,43 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Caps the embedding model's ONNX Runtime thread pools to 1 (`session_options:
+{ intraOpNumThreads: 1, interOpNumThreads: 1 }` on the `feature-extraction` pipeline).
+
+**The fleet-wide idle-CPU root cause (task #17).** A profiler sample of a live, *idle* agent
+server showed it dominated by `onnxruntime::PosixThread::ThreadMain` — the SemanticMemory embedding
+model (`all-MiniLM-L6-v2` via `@huggingface/transformers`) keeps its multi-thread ORT pool **busy-
+spinning ~50% of a core while the model sits resident between embeds**. Across N agent servers that's
+the bulk of the recurring host load (observed 20–32 on a 16-core box) that flapped relays and slowed
+CI all day.
+
+The existing idle-unload (dispose after 5 min idle) only helps a *truly* idle agent — semantic-search
+queries re-arm the timer, so the model stays resident and spins. all-MiniLM-L6 is tiny and memory
+embeds are sporadic, so a single ORT thread is plenty; capping the pool stops the spin without
+changing output.
+
+## What to Tell Your User
+
+- **Much lower idle CPU**: "My background memory engine was quietly burning about half a CPU core
+  per agent just spinning idle threads — across several agents that was most of the host load you
+  saw. Capping it cuts that to near-zero with no change to how memory/search works."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Bounded embedding CPU | Automatic — the embedding ORT pool is capped to 1 thread, eliminating the resident busy-spin. |
+
+## Evidence
+
+Verification (a thread-count probe is load-independent, so it's reliable even on a busy box):
+
+- Runtime probe on the real model: embed output unchanged (384-dim); the **resident** process thread
+  count dropped **18 → 12** with the cap (the ~6 extra ORT intra-op spinners gone), confirming the
+  spin is eliminated while embedding still works.
+- Unit: `ONNX_SESSION_OPTIONS` guard (caps both pools to 1); the EmbeddingProvider idle-unload suite
+  unchanged (6 tests green). `pnpm lint` (tsc + 4 lints) clean; `pnpm build` clean.

package/upgrades/1.3.222.md

@@ -0,0 +1,50 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+Adds apprenticeship role-coverage visibility on top of `ApprenticeshipCycleStore`.
+
+Cycle rows now use a controlled `kind` vocabulary for the role axis:
+
+- `mentor-mentee-differential`
+- `overseer-apprentice-devreview`
+- `overseer-mentee-direct`
+- `unknown`
+
+Historical `differential-cycle` rows are backfilled/read as `unknown`, so the system never invents
+role coverage from pre-vocabulary data. New cycle writes default missing `kind` to
+`mentor-mentee-differential`, and invalid labels are rejected.
+
+Adds read-only `GET /apprenticeship/instances/:id/role-coverage`. It returns per-axis
+`{ fired, cycleCount, lastAt }`, an `unknown` bucket, `dormantAxes`, and `driftWarning`. The warning
+is true when the mentor-mentee differential axis is dormant while the overseer-apprentice dev-review
+axis has at least two cycles. This is observability-only; it does not gate transitions or messages.
+
+## What to Tell Your User
+
+- **Apprenticeship role coverage is visible**: "I can now show whether an apprenticeship is actually
+  exercising the mentor-to-mentee learning loop, or just accumulating easier review cycles. It is a
+  read-only warning surface; it will not block work by itself."
+
+## Summary of New Capabilities
+
+| Capability | How to Use |
+|-----------|-----------|
+| Apprenticeship role coverage | `GET /apprenticeship/instances/:id/role-coverage` shows per-axis coverage and drift warning state. |
+| Explicit cycle axis vocabulary | `POST /apprenticeship/cycles` accepts `mentor-mentee-differential`, `overseer-apprentice-devreview`, `overseer-mentee-direct`, or `unknown` as the cycle kind. |
+
+## Evidence
+
+Verification:
+
+- Unit: cycle-kind defaulting, invalid-kind rejection, legacy `differential-cycle` to `unknown`, drift
+  true, healthy mix false, and empty instance false.
+- Integration: route auth, 503 when cycle store is unavailable, drift true, healthy false, and empty
+  false through the real router.
+- E2E: production `AgentServer` route is alive and reports drift for the seeded dev-review-only
+  pattern.
+- Capability discoverability: `CapabilityIndex` advertises the route and
+  `tests/unit/capabilities-discoverability.test.ts` was run explicitly.

package/upgrades/apprenticeship-role-coverage.eli16.md

@@ -0,0 +1,30 @@
+# Apprenticeship role coverage visibility
+
+An apprenticeship has three roles: overseer, mentor, and mentee. The important learning loop is the
+mentor working directly with the mentee, then the overseer checking what the mentor missed. During
+the first real run, Justin caught a problem: the system could keep doing the easier overseer-review
+work while the actual mentor-to-mentee learning loop stayed quiet.
+
+This change makes that visible.
+
+Each apprenticeship cycle now has an explicit role-axis kind:
+
+- mentor-mentee differential
+- overseer-apprentice development review
+- overseer-mentee direct
+- unknown
+
+Old cycles used one generic label, so we do not pretend we know what axis they belonged to. They are
+shown as unknown.
+
+There is a new read-only route:
+
+`GET /apprenticeship/instances/:id/role-coverage`
+
+It reports, for each axis, whether it has fired, how many cycles it has, and the most recent time it
+fired. It also reports dormant axes and a drift warning. The warning turns on when the
+mentor-to-mentee axis has not fired, but the overseer review axis has fired at least twice.
+
+The boundary is important: this is only visibility. It does not block an apprenticeship transition,
+stop a message, close a cycle, or judge quality. It just makes the missing loop visible so the
+overseer and mentor can correct course.

package/upgrades/onnx-thread-cap.eli16.md

@@ -0,0 +1,22 @@
+# Embedding "Idle Spin" CPU Fix — ELI16
+
+Viewable private artifact:
+https://echo.dawn-tunnel.dev/view/082822f3-ebee-4899-822b-27a1da723cbe?sig=aaa6645486e212907210c5a7e5b18233b7e267b16dc5593b2e8334fa17aa8829
+
+Every Instar agent has a little built-in "memory brain" that turns notes into numbers so it can
+search them by meaning. That brain (an ONNX model) keeps a team of worker threads ready. The problem:
+those workers **don't sleep** — they keep busy-spinning even when no memory work is happening, burning
+about **half a CPU core per agent, 24/7**. With several agents running, that was most of the load
+that's been making the machine sluggish (and flapping the chat relay).
+
+There was already a fix that unloads the brain after 5 idle minutes — but it never got a chance,
+because routine searches kept waking it up, so it stayed loaded and kept spinning.
+
+This change tells the model to use just **one** worker thread instead of a whole team. The model is
+tiny and memory work is occasional, so one thread is plenty — and it stops the idle spinning.
+Measured directly: the model's thread count drops from 18 to 12 (the extra spinners gone) and it
+produces the exact same results. Nothing about memory or search changes — the machine just stops
+wasting CPU.
+
+_Tier-1 fix · branch `echo/onnx-thread-cap` · task #17 (the session-long box-load root cause) ·
+runtime-verified via a load-independent thread-count probe._

package/upgrades/side-effects/apprenticeship-role-coverage.md

@@ -0,0 +1,20 @@
+### apprenticeship-role-coverage side effects
+
+Primary risk reviewed: a visibility surface could accidentally become authority and start blocking
+apprenticeship lifecycle transitions or messages.
+
+Mitigation:
+
+- The new route is read-only and only calls `ApprenticeshipCycleStore.roleCoverage(instanceId)`.
+- `driftWarning` is a boolean signal, not a gate. No transition route, message route, or completion
+  gate reads it.
+- Store migration only changes legacy `kind = 'differential-cycle'` rows to `unknown`; it does not
+  assign them to a real role axis.
+- New writes use a closed vocabulary. Invalid labels fail fast instead of silently creating fake
+  coverage.
+- Unknown historical rows are preserved in a separate `unknown` bucket so operators can see that
+  evidence exists without treating it as mentor-mentee or overseer review coverage.
+
+Secondary risk: a default kind could hide a missing caller update. The only current HTTP cycle-write
+site now explicitly supplies the default `mentor-mentee-differential` value when a request omits
+`kind`, and tests pin the returned kind.

package/upgrades/side-effects/onnx-thread-cap.md

@@ -0,0 +1,53 @@
+# Side-Effects Review — Cap embedding ONNX thread pool
+
+**Version / slug:** `onnx-thread-cap`
+**Date:** `2026-06-03`
+**Author:** `echo`
+**Second-pass reviewer:** `not required`
+
+## Summary of the change
+
+One config value on the `feature-extraction` pipeline creation:
+`session_options: { intraOpNumThreads: 1, interOpNumThreads: 1 }` (extracted to the exported
+`ONNX_SESSION_OPTIONS` const). Fleet-wide — every agent's EmbeddingProvider. No logic change.
+
+## Decision-point inventory
+
+None. It's a thread-pool sizing hint to ONNX Runtime; no new branch, no decision surface.
+
+## 1. Correctness
+
+Thread count does not affect embedding *output* — only how the inference is parallelized internally.
+Verified directly: the runtime probe produced an identical 384-dim vector with the cap. The existing
+idle-unload unit suite (dispose→reload lifecycle) is unchanged and green.
+
+## 2. Latency / throughput
+
+all-MiniLM-L6-v2 is a small model (~80MB, 384-dim) and instar memory embeds are sporadic
+(single-text semantic-search queries, occasional digest batches). Single-text inference on this model
+is already sub-100ms; the intra-op pool gave little speedup for it but cost a resident busy-spin. For
+the rare large `embedBatch`, throughput could be marginally lower — acceptable, and far outweighed by
+eliminating ~0.5 core/agent of idle waste. (If a heavy-batch consumer ever proves sensitive, the cap
+is a one-line constant to raise.)
+
+## 3. Blast radius
+
+Bounded. Worst case is a no-op (if a future transformers.js version ignored the key) or marginally
+slower batch embeds — both recoverable by reverting one constant. It cannot break embedding,
+search, or memory; it cannot affect any non-embedding path.
+
+## 4. Verification method (load-independent)
+
+CPU% on a contended box is noisy, so verification used **thread count** (load-independent): a probe
+created a real EmbeddingProvider, embedded, and counted process threads while resident — 18 (default)
+vs 12 (capped). The 6 freed threads are the ORT intra-op spinners. Reproducible probe pattern:
+construct provider → `initialize()` → `embed()` → `ps -M <pid> | wc -l`.
+
+## 5. Reversibility
+
+Pure config constant; no migration, no persisted state. Revert = revert the constant.
+
+## Verdict
+
+Bounded, output-preserving, fleet-wide CPU win. Eliminates the resident ONNX busy-spin (~0.5
+core/agent) that was the dominant recurring host-load source, with no change to memory behavior.