instar 1.3.339 → 1.3.340

package/src/data/state-coherence-registry.json

@@ -0,0 +1,880 @@
+{
+  "$schema-note": "Machine form of docs/specs/STATE-COHERENCE-REGISTRY.md (the approved census, census-date 2026-06-05). AUTHORED, NOT build-generated (committed-generated-manifest conflict-loop lesson, COHERENCE-JOURNAL-SPEC §3.6). One entry per durable state category the census enumerates. Consumed by scripts/lint-state-registry.js: every direct durable-write site targeting a state dir / .instar/ must match an entry's `paths` (or carry an inline `/* state-registry: <category> */` annotation). Fields: category (kebab-case id) | description | scope (machine-local | must-be-coherent | derived-cache | coherent-on-demand) | freshness (real-time | eventual | session-boundary | n/a) | conflictShape (single-writer | append-only | lww | n/a) | transport (git | peer-http | none | deferred) | paths (glob-ish hints) | grandfathered (census marked uncertainty, §4e). New state declares its class here at birth.",
+  "version": 1,
+  "censusDate": "2026-06-05",
+  "sourceDoc": "docs/specs/STATE-COHERENCE-REGISTRY.md",
+  "entries": [
+    {
+      "category": "coherence-journal",
+      "description": "Per-machine append-only cross-machine event streams (topic-placement / session-lifecycle / autonomous-run); replicated first-hop over the mesh (COHERENCE-JOURNAL-SPEC P1).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "append-only",
+      "transport": "peer-http",
+      "paths": [
+        "state/coherence-journal/"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "commitments",
+      "description": "CommitmentTracker single-writer CAS store of user-facing promises and follow-through state.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "peer-http",
+      "paths": [
+        "state/commitments.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "attention-queue",
+      "description": "Attention items surfaced to the user, plus the per-source coalescing/suppression ledger.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "peer-http",
+      "paths": [
+        "state/attention-items.json",
+        "state/attention-suppressed.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "topic-placement-history",
+      "description": "Topic<->machine placement history (does not exist as its own store yet; the journal's first stream materializes it). Distinct from current-owner pool state.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "append-only",
+      "transport": "peer-http",
+      "paths": [
+        "state/coherence-journal/*.topic-placement.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "autonomous-working-artifacts",
+      "description": "Autonomous run working files and their declared artifact paths (the EXO stranding). Coherent-on-demand: fetched via working-set pull when a topic moves.",
+      "scope": "coherent-on-demand",
+      "freshness": "session-boundary",
+      "conflictShape": "single-writer",
+      "transport": "deferred",
+      "paths": [
+        ".instar/autonomous/",
+        ".instar/autonomous/*.local.md",
+        "state/autonomous-emergency-stop",
+        "autonomous-emergency-stop"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "threadline-conversation-state",
+      "description": "Threadline conversation store plus context-thread-map, thread-resume-map, telegram-bridge-bindings.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "peer-http",
+      "paths": [
+        "threadline/conversations.json",
+        "threadline/context-thread-map.json",
+        "threadline/thread-resume-map.json",
+        "threadline/telegram-bridge-bindings.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "message-store-and-threads",
+      "description": "Cross-platform A2A message store, threads, and inbox/outbox JSONL indexes.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "append-only",
+      "transport": "peer-http",
+      "paths": [
+        ".instar/messages/store/",
+        ".instar/messages/threads/",
+        ".instar/messages/inbox.jsonl",
+        ".instar/messages/outbox.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "topic-project-bindings",
+      "description": "Telegram-topic-to-project bindings.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "lww",
+      "transport": "peer-http",
+      "paths": [
+        "topic-project-bindings.json",
+        "state/topic-project-bindings.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "relationships",
+      "description": "Per-person relationship records (one file per identity).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "lww",
+      "transport": "peer-http",
+      "paths": [
+        "relationships/",
+        "relationships/*.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "users-registry",
+      "description": "Multi-user identity / permissions registry.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "lww",
+      "transport": "peer-http",
+      "paths": [
+        "users.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "job-definitions",
+      "description": "Declarative job definitions (cron / prompt / supervision). The coherent half of jobs.json plus markdown job specs; run state is machine-local (see job-run-state). Field split required before whole-file sync (census §5).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "lww",
+      "transport": "git",
+      "paths": [
+        "jobs.json",
+        ".instar/jobs/",
+        ".instar/jobs/*.md"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "soul-identity-documents",
+      "description": "Soul / identity narrative documents and self-knowledge facts (soul.md, identity.json, AGENT.md/USER.md/MEMORY.md/CLAUDE.md identity scaffold, self-knowledge facts).",
+      "scope": "must-be-coherent",
+      "freshness": "session-boundary",
+      "conflictShape": "single-writer",
+      "transport": "git",
+      "paths": [
+        "soul.md",
+        "soul.init.md",
+        "state/soul.init.md",
+        "identity.json",
+        "AGENT.md",
+        "USER.md",
+        "MEMORY.md",
+        "CLAUDE.md",
+        "state/self-knowledge-facts.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "projects-registry",
+      "description": "Multi-spec project registry + plan docs + digest cache (claim-ownership verb already models owner-machine claim).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "peer-http",
+      "paths": [
+        ".instar/projects/",
+        ".instar/projects/*.md"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "learned-preferences",
+      "description": "Learned preferences and correction-loop ledger.",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "append-only",
+      "transport": "peer-http",
+      "paths": [
+        ".instar/preferences.json",
+        "state/correction-ledger.db"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "secret-vault",
+      "description": "Encrypted secret vault. The one category that truly replicates today (cross-machine secret sync, X25519-sealed push, receive-only default).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "peer-http",
+      "paths": [
+        "config.secrets.enc",
+        "state/secrets.enc"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "topic-ownership-current",
+      "description": "Current topic ownership (session-pool CAS + lease). The live single-writer source of truth for placement; the journal records its mutations.",
+      "scope": "must-be-coherent",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "peer-http",
+      "paths": [
+        ".instar/state/session-pool/",
+        "state/session-pool/"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "conversation-live-tail",
+      "description": "Conversation live-tail replicated holder->standby per the seamlessness spec.",
+      "scope": "must-be-coherent",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "peer-http",
+      "paths": [
+        "state/live-tail/"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "fleet-config",
+      "description": "Fleet-wide config: feature flags, messaging[] config, monitoring tunables, multiMachine policy. SHARES config.json with machine-local fields (port, paths) -- split-required before whole-file sync (census §5).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "lww",
+      "transport": "git",
+      "paths": [
+        "config.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "machine-identity-keys",
+      "description": "Machine identity + signing/encryption keypairs. Identity IS the machine; never synced by definition.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "machine/identity.json",
+        "machine/*.pem",
+        "signing-private.pem",
+        "encryption-private.pem"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "per-session-state",
+      "description": "Per-session state files. Sessions live and die on one machine; pool transfers create NEW sessions (CONTINUATION), not file copies.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/sessions/",
+        "state/sessions/*.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "job-run-state",
+      "description": "Job RUN state: executions, active-job, run-history ledger. Runs are machine events (definitions are the coherent half, job-definitions).",
+      "scope": "machine-local",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/jobs/",
+        "state/active-job.json",
+        "state/job-runs.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "quota-state",
+      "description": "Per-account-seat per-machine quota state. Broadcast-view ships via capacity heartbeats (quota-aware placement); the file itself is machine-local.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "quota-state.json",
+        "state/quota-state.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "resource-samples",
+      "description": "ResourceLedger CPU/RSS samples. Physical per-machine telemetry.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/resource-ledger.db",
+        "state/resources.db"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "lease-coordination-state",
+      "description": "Lease / coordination state and registry liveness. The lease IS the cross-machine protocol; its state is the protocol's own.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/lease-local.json",
+        "state/registry-liveness.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "nonce-sequence-watermarks",
+      "description": "NonceStore replay-protection watermarks. Per-channel per-machine by design.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/nonce-store.json",
+        "state/nonces/"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "relay-delivery-queues",
+      "description": "Pending-relay and message-ledger SQLite queues. Outbound queue drains on the machine that owns the channel seat.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        ".instar/state/pending-relay.*.sqlite",
+        "state/message-ledger.db"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "messaging-adapter-state",
+      "description": "Telegram/iMessage/WhatsApp/Slack adapter state: poll offsets, chat.db, consent.json. Channel seat is held by one machine (lifeline); failover = seat transfer, not state merge.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/telegram-offset.json",
+        "state/consent.json",
+        "state/adapter-state/"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "platform-attachment-caches",
+      "description": "Telegram/document attachment caches. Fetchable from the platform on demand.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "telegram-images/",
+        "documents/"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "listener-daemon-internals",
+      "description": "Listener-daemon IPC internals: inbox/outbox.jsonl.active, pid, sentinels, hmac key. Daemon-local.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/listener/",
+        "state/listener/inbox.jsonl.active",
+        "state/listener/outbox.jsonl.active"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "threadline-transport-internals",
+      "description": "Threadline transport internals: relay-tokens, mcp-tokens, rate-limits. Connection-scoped; identity-keys are local-secret like machine keys.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "threadline/relay-tokens.json",
+        "threadline/mcp-tokens.json",
+        "threadline/rate-limits.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "process-restart-coordination",
+      "description": "Process/restart coordination: boot-id, restart markers, auto-updater state, caffeinate pid, slept-marker. Per-process lifecycle.",
+      "scope": "machine-local",
+      "freshness": "real-time",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/boot-id",
+        "state/auto-updater.json",
+        "state/slept-marker.json",
+        "state/lifeline-restart-requested.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "ephemeral-caches",
+      "description": "Per-boot/ephemeral caches: paste/, stop-gate.db, feature-registry.db, capability manifest. Recomputed or per-machine detection.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/paste/",
+        "state/stop-gate.db",
+        "state/feature-registry.db"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "trust-elevation-incidents",
+      "description": "External-op trust elevation / incident state. Debatable whether trust transfers across machines -- flagged for P3+ review rather than silently local.",
+      "scope": "machine-local",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/trust-levels.json",
+        "state/trust-incidents.json",
+        "state/trust-*.json"
+      ],
+      "grandfathered": true
+    },
+    {
+      "category": "audit-destructive-ops",
+      "description": "Destructive-ops audit stream (411M live -- needs rotation, census §7). Append-only per-machine.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/destructive-ops.jsonl",
+        "logs/destructive-ops.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-job-runs",
+      "description": "Job-runs audit stream. Append-only per-machine.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/job-runs.jsonl",
+        "logs/job-runs.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-reaper",
+      "description": "Reaper decision audit stream (keep/kill transitions stamped with pressure tier).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/reaper-audit.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-reap-log",
+      "description": "Reap-log: why a session vanished (one JSON line per shutoff/refused-shutoff).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/reap-log.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-sentinel-events",
+      "description": "Sentinel-events audit stream (silently-stopped family transitions).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/sentinel-events.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-security",
+      "description": "Security audit stream (auth/security events).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "security.jsonl",
+        "state/security.jsonl",
+        "logs/security.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-decision-journal",
+      "description": "Decision-journal audit stream.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/decision-journal.jsonl",
+        "state/decision-journal.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-activity",
+      "description": "Activity audit streams (date-partitioned, ~37M).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/activity-*.jsonl",
+        "state/activity/"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-watchdog-interventions",
+      "description": "Watchdog-interventions audit stream.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/watchdog-interventions.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-operation-log",
+      "description": "External-operation gate operation-log audit stream.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/operation-log.jsonl",
+        "state/operation-log.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-trust-chain",
+      "description": "Hash-chained trust-audit / mandate-decision chain.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/trust-audit-chain.jsonl",
+        "state/trust-audit-chain.jsonl",
+        "threadline/trust-audit.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-telegram-messages",
+      "description": "Telegram message history JSONL (5.2M).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/telegram-messages.jsonl",
+        "logs/telegram-messages.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-a2a-messages",
+      "description": "Agent-to-agent sent/received audit streams.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        ".instar/messages/a2a-sent.jsonl",
+        ".instar/messages/a2a-received.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-prompt-gate",
+      "description": "Prompt-gate audit stream.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/prompt-gate-audit.jsonl",
+        "state/prompt-gate-audit.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-recovery-events",
+      "description": "Recovery-events audit stream (compaction/recovery lifecycle).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/recovery-events.jsonl",
+        "state/recovery-events.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-skill-telemetry",
+      "description": "Skill-telemetry audit stream.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/skill-telemetry.jsonl",
+        "state/skill-telemetry.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-feedback",
+      "description": "Feedback audit stream (Rising Tide feedback loop).",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/feedback.jsonl",
+        "logs/feedback.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "audit-apprenticeship-decisions",
+      "description": "Apprenticeship lifecycle gate decisions audit stream.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "logs/apprenticeship-decisions.jsonl",
+        "state/apprenticeship-decisions.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-token-ledger",
+      "description": "Token ledger SQLite, rebuilt from Claude Code JSONL transcripts.",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/token-ledger.db",
+        "state/tokens.db"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-semantic-memory",
+      "description": "semantic.db / memory.db / episodes -- rebuildable from evidence. (Live-disk: stale since Jun 1 -- investigate separately, census §1.6/§7.)",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/semantic.db",
+        "state/memory.db",
+        "state/episodes.db",
+        "state/episodes/",
+        "memory/semantic.jsonl"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-topic-memory",
+      "description": "topic-memory.db (16M, active). Master spec open Q2: promote to COHERENT? -- left derived-cache until P3 review (census honesty).",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/topic-memory.db"
+      ],
+      "grandfathered": true
+    },
+    {
+      "category": "derived-project-map",
+      "description": "Project-map spatial-awareness scan (refreshable).",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/project-map.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-projects-digest",
+      "description": "Projects-digest cache.",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/projects-digest.cache",
+        ".instar/projects/.digest.cache"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-docs-code-sync",
+      "description": "docs-code-sync.json derived index.",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/docs-code-sync.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-memory-index",
+      "description": "MemoryIndex derived index over memory artifacts.",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/memory-index.json",
+        "memory/index.json"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-framework-model-preferences",
+      "description": "framework-model-preferences.db derived cache.",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/framework-model-preferences.db"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "derived-discovery",
+      "description": "discovery.db derived cache (agent discovery).",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/discovery.db",
+        "threadline/discovery.db"
+      ],
+      "grandfathered": false
+    },
+    {
+      "category": "uncertain-instructions-tracking",
+      "description": "state/instructions-tracking/ (59M, 15,180 UUID-keyed JSONL files). Census did not map an owner; volume says it matters. Owner + rotation + class needed (census §4e).",
+      "scope": "machine-local",
+      "freshness": "eventual",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/instructions-tracking/"
+      ],
+      "grandfathered": true
+    },
+    {
+      "category": "uncertain-topic-intent-store",
+      "description": "TopicIntentStore. Code references it; on-disk location unverified (census §4e).",
+      "scope": "derived-cache",
+      "freshness": "eventual",
+      "conflictShape": "n/a",
+      "transport": "none",
+      "paths": [
+        "state/topic-intent/",
+        "state/topic-intent.json"
+      ],
+      "grandfathered": true
+    },
+    {
+      "category": "uncertain-shared-state-ledger",
+      "description": "shared-state.jsonl (SharedStateLedger). Nominally the git-synced cross-machine ledger -- is anything consuming it on real machines? May be the vestigial ancestor of the P1 journal (census §4e).",
+      "scope": "must-be-coherent",
+      "freshness": "eventual",
+      "conflictShape": "append-only",
+      "transport": "git",
+      "paths": [
+        "state/shared-state.jsonl",
+        "shared-state.jsonl"
+      ],
+      "grandfathered": true
+    },
+    {
+      "category": "uncertain-correction-capture-backlog",
+      "description": "correction-capture-backlog.db vs correction-ledger.db: two stores, one sentinel -- which is canonical? (census §4e).",
+      "scope": "machine-local",
+      "freshness": "eventual",
+      "conflictShape": "append-only",
+      "transport": "none",
+      "paths": [
+        "state/correction-capture-backlog.db"
+      ],
+      "grandfathered": true
+    },
+    {
+      "category": "uncertain-project-round-worktrees",
+      "description": "ProjectRoundWorktrees / TaskFlow stores. Routes-managed; durable form unverified (census §4e).",
+      "scope": "machine-local",
+      "freshness": "eventual",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/project-round-worktrees.json",
+        "state/taskflow/"
+      ],
+      "grandfathered": true
+    },
+    {
+      "category": "legacy-singletons",
+      "description": "Stale legacy singletons (anti-patterns.json, quick-facts.json, project-registry.json, May 20 vintage, no live writers found). Retire per census §7.",
+      "scope": "machine-local",
+      "freshness": "n/a",
+      "conflictShape": "single-writer",
+      "transport": "none",
+      "paths": [
+        "state/anti-patterns.json",
+        "state/quick-facts.json",
+        "state/project-registry.json"
+      ],
+      "grandfathered": true
+    }
+  ]
+}