instar 1.3.740 → 1.3.741

package/dist/core/promptContract.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Shared prompt↔parser contract library — the mechanical arm of the
+ * "The Prompt and the Parser Are One Contract" standard (defect class 1 closure;
+ * docs/specs/prompt-parser-contract-standard.md).
+ *
+ * WHY THIS EXISTS (earned): on 2026-07-02 the INSTAR-Bench v2 defect-class
+ * review found the tone gate's PROMPT taught models the short rule id ("B15")
+ * while its production PARSER accepts only the full identifier
+ * ("B15_CONTEXT_DEATH_STOP") and fails closed on the short form. Every model
+ * through every door obeyed the prompt and "failed" — a 100%-our-fault defect.
+ * An LLM callsite whose output is machine-parsed is ONE contract with TWO halves
+ * maintained separately: the prompt promises an output vocabulary/shape; the
+ * parser accepts one. Nothing held them coherent. This module gives that
+ * contract a code artifact — the type of a co-located promise, and a pure
+ * generator for the counter-examples a contract test must prove the parser
+ * REJECTS — so a taught-but-unparsed vocabulary becomes a CI failure instead of
+ * a latent door.
+ *
+ * SCOPE HONESTY (design §2): the PREFERRED form for an enumerated-verdict
+ * callsite is single-sourcing — prompt, parser, and test all consume ONE
+ * exported verdict constant, which makes a taught-but-undeclared token
+ * structurally impossible. The `PromptContract` manifest below is the FALLBACK
+ * form for prose-shaped prompts where single-sourcing is impractical (a reviewed
+ * claim per spec §2, not an author's private call). This module ships DARK: it
+ * introduces no runtime caller and changes NO live prompt or parser behavior.
+ * It is consumed only by the per-callsite CONTRACT TESTS that graduate on the
+ * shrink-only schedule (rollout §1/§2) — each of which renders the REAL
+ * production prompt through an exported pure render function; that render
+ * refactor of the live builders is deferred to its own A/B-gated increments and
+ * is NOT part of this dark increment.
+ */
+/**
+ * The election of a contract's form, recorded per coverage entry (spec §2:
+ * "Form election is not self-certified"). A `manifest`-form entry on an
+ * enumerated-verdict callsite requires an X1 argued reason in the registry.
+ */
+export type ContractForm = 'single-source' | 'manifest';
+/**
+ * The co-located machine-readable promise for a prose-shaped (fallback-form)
+ * callsite. Co-location is the point (spec §2): a prompt edit lands in the same
+ * file/diff as the promise, so review and CI see contract drift as ONE change.
+ *
+ * The `parser` is a FUNCTION REFERENCE, never a string — refactor-safe (spec §2).
+ * A parser returning a non-null/defined value for an input is treated as
+ * "accepted"; the contract test decides acceptance semantics per callsite.
+ */
+export interface PromptContract<TAccepted = unknown> {
+    /**
+     * Every terminal token/shape the prompt text tells the model to produce.
+     * Prefer the shared verdict constant even here (spec §2).
+     */
+    readonly promisedOutputs: readonly string[];
+    /**
+     * Canonical counter-examples the parser must REJECT (fail-closed proof).
+     * MECHANICALLY DERIVED from `promisedOutputs` via `deriveRejectedForms`
+     * (case-mutation, prefix-truncation, separator-stripping) plus hand-picked
+     * extras — a hand-only list invites trivial rejects (spec §2).
+     */
+    readonly rejectedForms: readonly string[];
+    /**
+     * Known-hazard shapes that must NOT appear anywhere in the full rendered
+     * prompt outside explicitly-declared negative sections (spec §3.1) — the
+     * inverse-direction backstop (e.g. bare rule ids the parser rejects).
+     */
+    readonly hazardPatterns: readonly RegExp[];
+    /**
+     * The response envelope the prompt promises (JSON shape, field names).
+     */
+    readonly envelope: {
+        readonly shape: 'json' | 'text';
+        readonly verdictField?: string;
+    };
+    /**
+     * Compatibility forms the parser DELIBERATELY accepts (documented, tested).
+     * "non-promised" for the fail-closed test means outside promised ∪ aliases.
+     */
+    readonly acceptedAliases: readonly string[];
+    /** The REAL production parser, by reference. */
+    readonly parser: (raw: string) => TAccepted;
+}
+/**
+ * Options for {@link deriveRejectedForms}.
+ */
+export interface DeriveRejectedFormsOptions {
+    /**
+     * The separator characters whose stripping/truncation produces a rejected
+     * form. Defaults to `_`, `-`, and a space — the separators that produced the
+     * historical B15 defect ("B15_CONTEXT_DEATH_STOP" → "B15").
+     */
+    readonly separators?: readonly string[];
+}
+/**
+ * Mechanically derive the canonical counter-examples a contract test feeds the
+ * REAL parser to prove its documented fail-closed behavior (spec §2/§3.3).
+ *
+ * For each promised token it produces: case-mutations, prefix-truncations at
+ * each separator, and separator-stripped forms. `extras` (hand-picked shapes,
+ * e.g. the literal short id `B15` and the empty string) are appended. The
+ * result EXCLUDES any form that collides with a genuinely-promised token — a
+ * mutation that equals a real promised output is NOT a rejected form (that would
+ * make the fail-closed assertion contradict the acceptance assertion). The
+ * output is de-duplicated and stably ordered.
+ *
+ * Pure and side-effect-free. It touches no live parser and reads no I/O.
+ *
+ * @param vocabulary the promised output vocabulary (the taught verdict tokens).
+ * @param extras hand-picked additional rejected forms (spec §2: a hand-only
+ *   list invites trivial rejects, so this AUGMENTS the derived set).
+ * @param options separator configuration (defaults to `_ - <space>`).
+ * @returns the derived + hand-picked rejected forms, minus any that collide
+ *   with a promised token, de-duplicated and stably ordered.
+ */
+export declare function deriveRejectedForms(vocabulary: readonly string[], extras?: readonly string[], options?: DeriveRejectedFormsOptions): string[];
+//# sourceMappingURL=promptContract.d.ts.map

package/dist/core/promptContract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptContract.d.ts","sourceRoot":"","sources":["../../src/core/promptContract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;GAIG;AACH,MAAM,MAAM,YAAY,GAAG,eAAe,GAAG,UAAU,CAAC;AAExD;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAc,CAAC,SAAS,GAAG,OAAO;IACjD;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C;;;;OAIG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C;;OAEG;IACH,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;QAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACvF;;;OAGG;IACH,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,gDAAgD;IAChD,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC;CAC7C;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAgDD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,SAAS,MAAM,EAAE,EAC7B,MAAM,GAAE,SAAS,MAAM,EAAO,EAC9B,OAAO,GAAE,0BAA+B,GACvC,MAAM,EAAE,CAqBV"}

package/dist/core/promptContract.js

@@ -0,0 +1,120 @@
+/**
+ * Shared prompt↔parser contract library — the mechanical arm of the
+ * "The Prompt and the Parser Are One Contract" standard (defect class 1 closure;
+ * docs/specs/prompt-parser-contract-standard.md).
+ *
+ * WHY THIS EXISTS (earned): on 2026-07-02 the INSTAR-Bench v2 defect-class
+ * review found the tone gate's PROMPT taught models the short rule id ("B15")
+ * while its production PARSER accepts only the full identifier
+ * ("B15_CONTEXT_DEATH_STOP") and fails closed on the short form. Every model
+ * through every door obeyed the prompt and "failed" — a 100%-our-fault defect.
+ * An LLM callsite whose output is machine-parsed is ONE contract with TWO halves
+ * maintained separately: the prompt promises an output vocabulary/shape; the
+ * parser accepts one. Nothing held them coherent. This module gives that
+ * contract a code artifact — the type of a co-located promise, and a pure
+ * generator for the counter-examples a contract test must prove the parser
+ * REJECTS — so a taught-but-unparsed vocabulary becomes a CI failure instead of
+ * a latent door.
+ *
+ * SCOPE HONESTY (design §2): the PREFERRED form for an enumerated-verdict
+ * callsite is single-sourcing — prompt, parser, and test all consume ONE
+ * exported verdict constant, which makes a taught-but-undeclared token
+ * structurally impossible. The `PromptContract` manifest below is the FALLBACK
+ * form for prose-shaped prompts where single-sourcing is impractical (a reviewed
+ * claim per spec §2, not an author's private call). This module ships DARK: it
+ * introduces no runtime caller and changes NO live prompt or parser behavior.
+ * It is consumed only by the per-callsite CONTRACT TESTS that graduate on the
+ * shrink-only schedule (rollout §1/§2) — each of which renders the REAL
+ * production prompt through an exported pure render function; that render
+ * refactor of the live builders is deferred to its own A/B-gated increments and
+ * is NOT part of this dark increment.
+ */
+/**
+ * Toggle a token's letter case in the three ways a lenient model most often
+ * mutates a taught identifier: all-upper, all-lower, and first-letter-flipped.
+ * Purely mechanical — no locale assumptions beyond JS default casing.
+ */
+function caseMutations(token) {
+    const out = new Set();
+    out.add(token.toUpperCase());
+    out.add(token.toLowerCase());
+    if (token.length > 0) {
+        const first = token[0];
+        const flippedFirst = first === first.toUpperCase() ? first.toLowerCase() : first.toUpperCase();
+        out.add(flippedFirst + token.slice(1));
+    }
+    return [...out];
+}
+/**
+ * Prefix-truncations at each separator boundary — the exact B15 shape: the
+ * model emits the leading segment ("B15") of a compound identifier
+ * ("B15_CONTEXT_DEATH_STOP") that the parser rejects.
+ */
+function prefixTruncations(token, separators) {
+    const out = new Set();
+    for (const sep of separators) {
+        if (!sep)
+            continue;
+        const idx = token.indexOf(sep);
+        if (idx > 0)
+            out.add(token.slice(0, idx));
+    }
+    return [...out];
+}
+/**
+ * Separator-stripped forms — the same token with each separator removed
+ * ("B15_CONTEXT_DEATH_STOP" → "B15CONTEXTDEATHSTOP").
+ */
+function separatorStripped(token, separators) {
+    const out = new Set();
+    for (const sep of separators) {
+        if (!sep)
+            continue;
+        if (token.includes(sep))
+            out.add(token.split(sep).join(''));
+    }
+    return [...out];
+}
+/**
+ * Mechanically derive the canonical counter-examples a contract test feeds the
+ * REAL parser to prove its documented fail-closed behavior (spec §2/§3.3).
+ *
+ * For each promised token it produces: case-mutations, prefix-truncations at
+ * each separator, and separator-stripped forms. `extras` (hand-picked shapes,
+ * e.g. the literal short id `B15` and the empty string) are appended. The
+ * result EXCLUDES any form that collides with a genuinely-promised token — a
+ * mutation that equals a real promised output is NOT a rejected form (that would
+ * make the fail-closed assertion contradict the acceptance assertion). The
+ * output is de-duplicated and stably ordered.
+ *
+ * Pure and side-effect-free. It touches no live parser and reads no I/O.
+ *
+ * @param vocabulary the promised output vocabulary (the taught verdict tokens).
+ * @param extras hand-picked additional rejected forms (spec §2: a hand-only
+ *   list invites trivial rejects, so this AUGMENTS the derived set).
+ * @param options separator configuration (defaults to `_ - <space>`).
+ * @returns the derived + hand-picked rejected forms, minus any that collide
+ *   with a promised token, de-duplicated and stably ordered.
+ */
+export function deriveRejectedForms(vocabulary, extras = [], options = {}) {
+    const separators = options.separators ?? ['_', '-', ' '];
+    const promised = new Set(vocabulary);
+    const derived = [];
+    for (const token of vocabulary) {
+        if (typeof token !== 'string' || token.length === 0)
+            continue;
+        derived.push(...caseMutations(token), ...prefixTruncations(token, separators), ...separatorStripped(token, separators));
+    }
+    const seen = new Set();
+    const out = [];
+    for (const form of [...derived, ...extras]) {
+        if (promised.has(form))
+            continue; // a real promised token is never a "rejected form"
+        if (seen.has(form))
+            continue;
+        seen.add(form);
+        out.push(form);
+    }
+    return out;
+}
+//# sourceMappingURL=promptContract.js.map

package/dist/core/promptContract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"promptContract.js","sourceRoot":"","sources":["../../src/core/promptContract.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AA8DH;;;;GAIG;AACH,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7B,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;IAC7B,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACrB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;QACvB,MAAM,YAAY,GAChB,KAAK,KAAK,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QAC5E,GAAG,CAAC,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,UAA6B;IACrE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,GAAG,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;GAGG;AACH,SAAS,iBAAiB,CAAC,KAAa,EAAE,UAA6B;IACrE,MAAM,GAAG,GAAG,IAAI,GAAG,EAAU,CAAC;IAC9B,KAAK,MAAM,GAAG,IAAI,UAAU,EAAE,CAAC;QAC7B,IAAI,CAAC,GAAG;YAAE,SAAS;QACnB,IAAI,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAA6B,EAC7B,SAA4B,EAAE,EAC9B,UAAsC,EAAE;IAExC,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC;IACzD,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;IACrC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;QAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAC9D,OAAO,CAAC,IAAI,CACV,GAAG,aAAa,CAAC,KAAK,CAAC,EACvB,GAAG,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,EACvC,GAAG,iBAAiB,CAAC,KAAK,EAAE,UAAU,CAAC,CACxC,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,IAAI,IAAI,CAAC,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC;QAC3C,IAAI,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS,CAAC,mDAAmD;QACrF,IAAI,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS;QAC7B,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QACf,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/data/llmBenchCoverage.d.ts

@@ -53,4 +53,12 @@ export type JudgesClaimsFlag = {
     false: string;
 };
 export declare const LLM_JUDGES_CLAIMS: Readonly<Record<string, JudgesClaimsFlag>>;
+export type ParserContractFlag = {
+    contractTest: string;
+} | {
+    pending: 'contract-wave-1' | 'contract-wave-2';
+} | {
+    false: string;
+};
+export declare const LLM_PARSER_CONTRACT: Readonly<Record<string, ParserContractFlag>>;
 //# sourceMappingURL=llmBenchCoverage.d.ts.map

package/dist/data/llmBenchCoverage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"llmBenchCoverage.d.ts","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAqFtE,CAAC;AA4BF,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAiF5E,CAAC;AA+CF;;;;6EAI6E;AAC7E,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,aAAa,GAAG,cAAc,CAAC;AAE3E,eAAO,MAAM,WAAW,EAAE,aAAa,CAAC,SAAS,CAIhD,CAAC;AAEF;;;;oFAIoF;AACpF,MAAM,MAAM,gBAAgB,GAAG;IAAE,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,KAAK,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAmExE,CAAC"}
+{"version":3,"file":"llmBenchCoverage.d.ts","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,OAAO,EAAE,QAAQ,GAAG,QAAQ,CAAA;CAAE,GAChC;IAAE,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAEvB,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAqFtE,CAAC;AA4BF,MAAM,MAAM,kBAAkB,GAAG,IAAI,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1D,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAiF5E,CAAC;AA+CF;;;;6EAI6E;AAC7E,MAAM,MAAM,SAAS,GAAG,iBAAiB,GAAG,aAAa,GAAG,cAAc,CAAC;AAE3E,eAAO,MAAM,WAAW,EAAE,aAAa,CAAC,SAAS,CAIhD,CAAC;AAEF;;;;oFAIoF;AACpF,MAAM,MAAM,gBAAgB,GAAG;IAAE,SAAS,EAAE,SAAS,CAAA;CAAE,GAAG,KAAK,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEpF,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAmExE,CAAC;AAgDF,MAAM,MAAM,kBAAkB,GAC1B;IAAE,YAAY,EAAE,MAAM,CAAA;CAAE,GACxB;IAAE,OAAO,EAAE,iBAAiB,GAAG,iBAAiB,CAAA;CAAE,GAClD;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEtB,eAAO,MAAM,mBAAmB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAmJ5E,CAAC"}

package/dist/data/llmBenchCoverage.js

@@ -239,4 +239,121 @@ export const LLM_JUDGES_CLAIMS = {
     CartographerSweep: false, // authors doc-tree summaries over code
     StandardsCoverageEnrichment: false, // enriches standards-coverage rows
 };
+export const LLM_PARSER_CONTRACT = {
+    // ── WAVE-1: the four spec-named highest-stakes parsed callsites (rollout §0) ──
+    MessagingToneGate: { pending: 'contract-wave-1' }, // THE motivating defect: prompt taught "B15", parser accepts only "B15_CONTEXT_DEATH_STOP"
+    ExternalOperationGate: { pending: 'contract-wave-1' }, // parses a closed mutability/reversibility classification
+    CompletionEvaluator: { pending: 'contract-wave-1' }, // the stop-judge surface parses a closed done/blocked/continue verdict
+    InputClassifier: { pending: 'contract-wave-1' }, // parses a closed auto-approve vs relay decision
+    // ── WAVE-2: every other enumerated-verdict / decision callsite (rollout §2) ──
+    MessageSentinel: { pending: 'contract-wave-2' }, // closed intent set (pause / emergency / normal)
+    LLMSanitizer: { pending: 'contract-wave-2' }, // parses a closed sanitize verdict/decision
+    WarrantsReplyGate: { pending: 'contract-wave-2' }, // closed should-reply yes/no verdict
+    InputGuard: { pending: 'contract-wave-2' }, // closed input-coherence verdict
+    StallTriageNurse: { pending: 'contract-wave-2' }, // closed stall-triage diagnosis label
+    CommitmentSentinel: { pending: 'contract-wave-2' }, // closed commitment-detected verdict + structured envelope
+    PresenceProxy: { pending: 'contract-wave-2' }, // closed tier-3 stall verdict
+    ProjectDriftChecker: { pending: 'contract-wave-2' }, // closed on-project verdict
+    TemporalCoherenceChecker: { pending: 'contract-wave-2' }, // closed temporal-coherence verdict
+    SessionWatchdog: { pending: 'contract-wave-2' }, // closed stuck verdict
+    ResumeQueueDrainer: { pending: 'contract-wave-2' }, // closed resume-sanity verdict
+    TopicIntentArcCheck: { pending: 'contract-wave-2' }, // closed arc-check classification label
+    TelegramAdapter: { pending: 'contract-wave-2' }, // stall-confirm — closed genuinely-stalled verdict
+    SlackAdapter: { pending: 'contract-wave-2' }, // stall-confirm (byte-identical prompt to Telegram's; parity)
+    PromptGate: { pending: 'contract-wave-2' }, // closed injection-detected verdict
+    UnjustifiedStopGate: { pending: 'contract-wave-2' }, // closed stop-justified verdict
+    OverrideDetector: { pending: 'contract-wave-2' }, // closed override-intent verdict
+    TaskClassifier: { pending: 'contract-wave-2' }, // closed task-type label set
+    ResumeValidator: { pending: 'contract-wave-2' }, // closed resume-UUID match yes/no verdict
+    CoherenceReviewer: { pending: 'contract-wave-2' }, // gate-triage — closed coherence verdict
+    // ── Argued false (pinned shrink-only) — no closed-vocabulary verdict parse ──
+    // No live LLM callsite, a fixed canary, or free-text / open-set content.
+    InputDetector: {
+        false: 'attribution-manifest alias only (a legacy prompt-pattern matcher); the live matcher calls with attribution PromptGate, contracted there',
+    },
+    SessionActivitySentinel: {
+        false: 'authors a free-text activity DIGEST — the product is prose, not a closed verdict vocabulary a prompt teaches and a parser gates on',
+    },
+    PromiseBeacon: {
+        false: 'no live LLM prompt — generateStatusLine/classifyProgress hooks are unwired at the construction site; nothing parses a taught vocabulary (matches its bench-coverage exemption)',
+    },
+    InteractivePoolCanaryJudge: {
+        false: 'judges a FIXED known-answer canary probe — the expected output is a constant, so the canary is its own contract; a prompt↔parser contract test would re-test the same constant',
+    },
+    SessionSummarySentinel: {
+        false: 'extracts task/phase/files as open-set free-text FIELDS — there is no closed taught verdict vocabulary, so the B15 prompt↔parser drift cannot arise here',
+    },
+    AutoApprover: {
+        false: 'mechanical key injection + audit logging, no LLM prompt of its own; the upstream parsed decision is InputClassifier.classify(), contracted there',
+    },
+    IntegrationGate: {
+        false: 'no LLM prompt of its own — delegates to JobReflector.reflect(); zero LLM-provider callsites of its own that parse a taught vocabulary',
+    },
+    CoherenceGate: {
+        false: 'no callsite carries attribution CoherenceGate — all LLM calls flow through CoherenceReviewer.callApi(), contracted there',
+    },
+    JobReflector: {
+        false: 'reflection produces free-text content over a job — no closed taught verdict vocabulary a parser gates on (its own bench coverage is wave-3)',
+    },
+    crossModelReviewer: {
+        false: 'produces a free-text review of a SPEC document — no closed output vocabulary the prompt teaches and a parser must accept',
+    },
+    SelfKnowledgeTree: {
+        false: 'extracts self-knowledge tree fragments as content that is stored/merged — no closed verdict token gates a branch on a taught vocabulary',
+    },
+    TreeTriage: {
+        false: 'triages knowledge-tree fragments into content — no closed taught output vocabulary a parser must accept or reject',
+    },
+    TopicSummarizer: {
+        false: 'produces a free-text topic summary — the prose is the product; there is no closed vocabulary the prompt teaches and a parser gates on',
+    },
+    ContextualEvaluator: {
+        false: 'evaluates context relevance into content — no closed taught verdict vocabulary that a parser accepts a promised form of',
+    },
+    RelationshipManager: {
+        false: 'extracts relationship facts as open-set structured content — no closed taught vocabulary a prompt promises and a parser gates on',
+    },
+    StandardsConformanceReviewer: {
+        false: 'reviews artifact-vs-standard conformance as content — no closed output vocabulary the prompt teaches and a parser must accept',
+    },
+    DiscoveryEvaluator: {
+        false: 'evaluates serendipity discoveries into content — no closed taught verdict vocabulary a parser accepts a promised form of',
+    },
+    Usher: {
+        false: 'routes a turn to candidate TOPIC IDS — an OPEN, machine-supplied set, not a closed taught vocabulary the prompt fixes and a parser gates on',
+    },
+    TopicIntentExtractor: {
+        false: 'extracts a topic-intent description from a turn — free-text content, not a closed taught verdict vocabulary a parser accepts',
+    },
+    PreCompactionFlush: {
+        false: 'extracts durable facts before compaction as free-text content — no closed taught output vocabulary a parser gates on',
+    },
+    TreeSynthesis: {
+        false: 'synthesizes knowledge fragments into a free-text answer — the prose is the product, no closed taught verdict vocabulary a parser accepts',
+    },
+    LLMConflictResolver: {
+        false: 'resolves divergent multi-machine state into a merged value/content — no closed taught verdict vocabulary a prompt promises and a parser gates on',
+    },
+    openConversationBrief: {
+        false: 'generates a free-text A2A conversation brief — the prose is the product, no closed output vocabulary the prompt teaches and a parser must accept',
+    },
+    'a2a-checkin': {
+        false: 'summarizes A2A check-in threads into free-text content — no closed taught verdict vocabulary a parser accepts a promised form of',
+    },
+    'correction-learning': {
+        false: 'distills recurring corrections into a preference (content) — no closed taught output vocabulary a parser gates on',
+    },
+    'mentor-stage-b': {
+        false: 'classifies mentor signals over mentee output into differential content — no closed taught verdict vocabulary a parser gates on (its own bench coverage is wave-3)',
+    },
+    PipeSessionSpawner: {
+        false: 'spawns sessions from task descriptions — no LLM output parsed into a closed taught verdict vocabulary',
+    },
+    CartographerSweep: {
+        false: 'authors doc-tree summaries over code as free text — the prose is the product, no closed taught output vocabulary a parser gates on',
+    },
+    StandardsCoverageEnrichment: {
+        false: 'enriches standards-coverage rows with content — no closed taught verdict vocabulary a prompt promises and a parser accepts',
+    },
+};
 //# sourceMappingURL=llmBenchCoverage.js.map

package/dist/data/llmBenchCoverage.js.map

@@ -1 +1 @@
-{"version":3,"file":"llmBenchCoverage.js","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,mEAAmE;IACnE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;IACxC,6DAA6D;IAC7D,mBAAmB,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAChE,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnD,YAAY,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC7C,iBAAiB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IACxB,qBAAqB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;IAE1C,kEAAkE;IAClE,0BAA0B,EAAE;QAC1B,MAAM,EACJ,0HAA0H;KAC7H;IAED,mFAAmF;IACnF,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC7C,uBAAuB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACpD,gBAAgB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,aAAa,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC/C,mBAAmB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACpD,wBAAwB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACxD,eAAe,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACjD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,mBAAmB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACnD,eAAe,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACnD,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,YAAY,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAChD,UAAU,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC1C,mBAAmB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACtD,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC/C,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC3C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,sBAAsB,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC5D,oBAAoB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAExD,yFAAyF;IACzF,eAAe,EAAE;QACf,MAAM,EACJ,yKAAyK;KAC5K;IACD,aAAa,EAAE;QACb,MAAM,EACJ,qKAAqK;KACxK;IACD,YAAY,EAAE;QACZ,MAAM,EACJ,6IAA6I;KAChJ;IACD,aAAa,EAAE;QACb,MAAM,EACJ,mLAAmL;KACtL;IACD,aAAa,EAAE;QACb,MAAM,EACJ,+LAA+L;KAClM;IAED,mDAAmD;IACnD,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,4BAA4B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,2BAA2B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAClD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;CACxC,CAAC;AA8BF,MAAM,CAAC,MAAM,mBAAmB,GAAiD;IAC/E,yEAAyE;IACzE,UAAU,EAAE,IAAI;IAChB,uBAAuB,EAAE,IAAI;IAC7B,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,wBAAwB,EAAE,IAAI;IAC9B,mBAAmB,EAAE,IAAI;IACzB,eAAe,EAAE,IAAI;IACrB,kBAAkB,EAAE,IAAI;IACxB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,IAAI;IACrB,sBAAsB,EAAE,IAAI;IAC5B,eAAe,EAAE,IAAI;IAErB,4DAA4D;IAC5D,UAAU,EAAE,IAAI;IAChB,qBAAqB,EAAE,IAAI,EAAE,uEAAuE;IACpG,iBAAiB,EAAE,IAAI;IACvB,mBAAmB,EAAE,IAAI;IACzB,iBAAiB,EAAE,IAAI,EAAE,oEAAoE;IAC7F,iBAAiB,EAAE,IAAI;IACvB,YAAY,EAAE,IAAI,EAAE,kDAAkD;IACtE,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI,EAAE,wEAAwE;IAE/F,oFAAoF;IACpF,YAAY,EAAE,IAAI;IAClB,kBAAkB,EAAE,IAAI;IACxB,iBAAiB,EAAE,IAAI;IACvB,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,IAAI;IACzB,4BAA4B,EAAE,IAAI;IAClC,kBAAkB,EAAE,IAAI;IACxB,KAAK,EAAE,IAAI;IACX,oBAAoB,EAAE,IAAI;IAC1B,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,IAAI,EAAE,sDAAsD;IACjF,qBAAqB,EAAE,IAAI;IAC3B,aAAa,EAAE,IAAI,EAAE,4BAA4B;IACjD,qBAAqB,EAAE,IAAI;IAC3B,gBAAgB,EAAE,IAAI;IAEtB,+DAA+D;IAC/D,kBAAkB,EAAE,IAAI,EAAE,0DAA0D;IACpF,iBAAiB,EAAE,IAAI,EAAE,gGAAgG;IACzH,2BAA2B,EAAE,IAAI;IAEjC,0FAA0F;IAC1F,aAAa,EAAE;QACb,KAAK,EACH,8KAA8K;KACjL;IACD,0BAA0B,EAAE;QAC1B,KAAK,EACH,iIAAiI;KACpI;IACD,YAAY,EAAE;QACZ,KAAK,EACH,2IAA2I;KAC9I;IACD,eAAe,EAAE;QACf,KAAK,EACH,mIAAmI;KACtI;IACD,aAAa,EAAE;QACb,KAAK,EACH,+HAA+H;KAClI;IACD,aAAa,EAAE;QACb,KAAK,EACH,8IAA8I;KACjJ;CACF,CAAC;AAsDF,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD,iBAAiB;IACjB,aAAa;IACb,cAAc;CACf,CAAC;AASF,MAAM,CAAC,MAAM,iBAAiB,GAA+C;IAC3E,8EAA8E;IAC9E,kEAAkE;IAClE,mBAAmB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,wDAAwD;IAC/G,mBAAmB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,iFAAiF;IACxI,YAAY,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,yHAAyH;IAEzK,iFAAiF;IACjF,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,cAAc;IAC7D,aAAa,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,qBAAqB;IAClE,gBAAgB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,yBAAyB;IACzE,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,kIAAkI;IACjL,YAAY,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,kEAAkE;IAE9G,qDAAqD;IACrD,gBAAgB,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,4EAA4E;IAE7H,+EAA+E;IAC/E,iFAAiF;IACjF,aAAa,EAAE,KAAK,EAAE,sCAAsC;IAC5D,UAAU,EAAE,KAAK,EAAE,iDAAiD;IACpE,uBAAuB,EAAE,KAAK,EAAE,8FAA8F;IAC9H,kBAAkB,EAAE,KAAK,EAAE,8BAA8B;IACzD,aAAa,EAAE,KAAK,EAAE,+EAA+E;IACrG,eAAe,EAAE,KAAK,EAAE,sEAAsE;IAC9F,mBAAmB,EAAE,KAAK,EAAE,8EAA8E;IAC1G,eAAe,EAAE,KAAK,EAAE,6CAA6C;IACrE,sBAAsB,EAAE,KAAK,EAAE,yEAAyE;IACxG,mBAAmB,EAAE,KAAK,EAAE,8DAA8D;IAC1F,wBAAwB,EAAE,KAAK,EAAE,oCAAoC;IACrE,kBAAkB,EAAE,KAAK,EAAE,uFAAuF;IAClH,0BAA0B,EAAE,KAAK,EAAE,kEAAkE;IAErG,qFAAqF;IACrF,UAAU,EAAE,KAAK,EAAE,sCAAsC;IACzD,YAAY,EAAE,KAAK,EAAE,qDAAqD;IAC1E,eAAe,EAAE,KAAK,EAAE,uDAAuD;IAC/E,qBAAqB,EAAE,KAAK,EAAE,wEAAwE;IACtG,iBAAiB,EAAE,KAAK,EAAE,oDAAoD;IAC9E,aAAa,EAAE,KAAK,EAAE,oDAAoD;IAC1E,iBAAiB,EAAE,KAAK,EAAE,8BAA8B;IACxD,iBAAiB,EAAE,KAAK,EAAE,6BAA6B;IACvD,YAAY,EAAE,KAAK,EAAE,sCAAsC;IAC3D,gBAAgB,EAAE,KAAK,EAAE,oCAAoC;IAC7D,cAAc,EAAE,KAAK,EAAE,uBAAuB;IAC9C,eAAe,EAAE,KAAK,EAAE,qEAAqE;IAE7F,4FAA4F;IAC5F,kBAAkB,EAAE,KAAK,EAAE,4DAA4D;IACvF,iBAAiB,EAAE,KAAK,EAAE,0BAA0B;IACpD,UAAU,EAAE,KAAK,EAAE,yBAAyB;IAC5C,eAAe,EAAE,KAAK,EAAE,qBAAqB;IAC7C,mBAAmB,EAAE,KAAK,EAAE,8BAA8B;IAC1D,mBAAmB,EAAE,KAAK,EAAE,8BAA8B;IAC1D,4BAA4B,EAAE,KAAK,EAAE,2EAA2E;IAChH,kBAAkB,EAAE,KAAK,EAAE,oCAAoC;IAC/D,KAAK,EAAE,KAAK,EAAE,oCAAoC;IAClD,oBAAoB,EAAE,KAAK,EAAE,oCAAoC;IACjE,kBAAkB,EAAE,KAAK,EAAE,2CAA2C;IACtE,aAAa,EAAE,KAAK,EAAE,2CAA2C;IACjE,mBAAmB,EAAE,KAAK,EAAE,yCAAyC;IACrE,qBAAqB,EAAE,KAAK,EAAE,sCAAsC;IACpE,aAAa,EAAE,KAAK,EAAE,kCAAkC;IACxD,qBAAqB,EAAE,KAAK,EAAE,8CAA8C;IAC5E,kBAAkB,EAAE,KAAK,EAAE,gCAAgC;IAC3D,iBAAiB,EAAE,KAAK,EAAE,uCAAuC;IACjE,2BAA2B,EAAE,KAAK,EAAE,mCAAmC;CACxE,CAAC"}
+{"version":3,"file":"llmBenchCoverage.js","sourceRoot":"","sources":["../../src/data/llmBenchCoverage.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAOH,MAAM,CAAC,MAAM,kBAAkB,GAA4C;IACzE,mEAAmE;IACnE,eAAe,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC9C,iBAAiB,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE;IACxC,6DAA6D;IAC7D,mBAAmB,EAAE,EAAE,IAAI,EAAE,iCAAiC,EAAE;IAChE,qBAAqB,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IACnD,YAAY,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IAC7C,iBAAiB,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE;IAC7C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,KAAK,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE;IACxB,qBAAqB,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACvD,iBAAiB,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;IAE1C,kEAAkE;IAClE,0BAA0B,EAAE;QAC1B,MAAM,EACJ,0HAA0H;KAC7H;IAED,mFAAmF;IACnF,UAAU,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IAC7C,uBAAuB,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IACpD,gBAAgB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACpD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,aAAa,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IAC/C,mBAAmB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACpD,wBAAwB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACxD,eAAe,EAAE,EAAE,IAAI,EAAE,sBAAsB,EAAE;IACjD,kBAAkB,EAAE,EAAE,IAAI,EAAE,qBAAqB,EAAE;IACnD,mBAAmB,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IACnD,eAAe,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IACnD,mEAAmE;IACnE,sEAAsE;IACtE,iEAAiE;IACjE,YAAY,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAChD,UAAU,EAAE,EAAE,IAAI,EAAE,oBAAoB,EAAE;IAC1C,mBAAmB,EAAE,EAAE,IAAI,EAAE,uBAAuB,EAAE;IACtD,gBAAgB,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;IAC/C,cAAc,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE;IAC3C,eAAe,EAAE,EAAE,IAAI,EAAE,kBAAkB,EAAE;IAC7C,sBAAsB,EAAE,EAAE,IAAI,EAAE,0BAA0B,EAAE;IAC5D,oBAAoB,EAAE,EAAE,IAAI,EAAE,wBAAwB,EAAE;IAExD,yFAAyF;IACzF,eAAe,EAAE;QACf,MAAM,EACJ,yKAAyK;KAC5K;IACD,aAAa,EAAE;QACb,MAAM,EACJ,qKAAqK;KACxK;IACD,YAAY,EAAE;QACZ,MAAM,EACJ,6IAA6I;KAChJ;IACD,aAAa,EAAE;QACb,MAAM,EACJ,mLAAmL;KACtL;IACD,aAAa,EAAE;QACb,MAAM,EACJ,+LAA+L;KAClM;IAED,mDAAmD;IACnD,YAAY,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACjC,eAAe,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACtC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,4BAA4B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACnD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,iBAAiB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACxC,2BAA2B,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAClD,kBAAkB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACzC,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,mBAAmB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC1C,qBAAqB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IAC5C,aAAa,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;IACpC,gBAAgB,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;CACxC,CAAC;AA8BF,MAAM,CAAC,MAAM,mBAAmB,GAAiD;IAC/E,yEAAyE;IACzE,UAAU,EAAE,IAAI;IAChB,uBAAuB,EAAE,IAAI;IAC7B,gBAAgB,EAAE,IAAI;IACtB,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,wBAAwB,EAAE,IAAI;IAC9B,mBAAmB,EAAE,IAAI;IACzB,eAAe,EAAE,IAAI;IACrB,kBAAkB,EAAE,IAAI;IACxB,mBAAmB,EAAE,IAAI;IACzB,YAAY,EAAE,IAAI;IAClB,eAAe,EAAE,IAAI;IACrB,sBAAsB,EAAE,IAAI;IAC5B,eAAe,EAAE,IAAI;IAErB,4DAA4D;IAC5D,UAAU,EAAE,IAAI;IAChB,qBAAqB,EAAE,IAAI,EAAE,uEAAuE;IACpG,iBAAiB,EAAE,IAAI;IACvB,mBAAmB,EAAE,IAAI;IACzB,iBAAiB,EAAE,IAAI,EAAE,oEAAoE;IAC7F,iBAAiB,EAAE,IAAI;IACvB,YAAY,EAAE,IAAI,EAAE,kDAAkD;IACtE,gBAAgB,EAAE,IAAI;IACtB,cAAc,EAAE,IAAI;IACpB,eAAe,EAAE,IAAI,EAAE,wEAAwE;IAE/F,oFAAoF;IACpF,YAAY,EAAE,IAAI;IAClB,kBAAkB,EAAE,IAAI;IACxB,iBAAiB,EAAE,IAAI;IACvB,UAAU,EAAE,IAAI;IAChB,eAAe,EAAE,IAAI;IACrB,mBAAmB,EAAE,IAAI;IACzB,mBAAmB,EAAE,IAAI;IACzB,4BAA4B,EAAE,IAAI;IAClC,kBAAkB,EAAE,IAAI;IACxB,KAAK,EAAE,IAAI;IACX,oBAAoB,EAAE,IAAI;IAC1B,kBAAkB,EAAE,IAAI;IACxB,aAAa,EAAE,IAAI;IACnB,mBAAmB,EAAE,IAAI,EAAE,sDAAsD;IACjF,qBAAqB,EAAE,IAAI;IAC3B,aAAa,EAAE,IAAI,EAAE,4BAA4B;IACjD,qBAAqB,EAAE,IAAI;IAC3B,gBAAgB,EAAE,IAAI;IAEtB,+DAA+D;IAC/D,kBAAkB,EAAE,IAAI,EAAE,0DAA0D;IACpF,iBAAiB,EAAE,IAAI,EAAE,gGAAgG;IACzH,2BAA2B,EAAE,IAAI;IAEjC,0FAA0F;IAC1F,aAAa,EAAE;QACb,KAAK,EACH,8KAA8K;KACjL;IACD,0BAA0B,EAAE;QAC1B,KAAK,EACH,iIAAiI;KACpI;IACD,YAAY,EAAE;QACZ,KAAK,EACH,2IAA2I;KAC9I;IACD,eAAe,EAAE;QACf,KAAK,EACH,mIAAmI;KACtI;IACD,aAAa,EAAE;QACb,KAAK,EACH,+HAA+H;KAClI;IACD,aAAa,EAAE;QACb,KAAK,EACH,8IAA8I;KACjJ;CACF,CAAC;AAsDF,MAAM,CAAC,MAAM,WAAW,GAA6B;IACnD,iBAAiB;IACjB,aAAa;IACb,cAAc;CACf,CAAC;AASF,MAAM,CAAC,MAAM,iBAAiB,GAA+C;IAC3E,8EAA8E;IAC9E,kEAAkE;IAClE,mBAAmB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,wDAAwD;IAC/G,mBAAmB,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,iFAAiF;IACxI,YAAY,EAAE,EAAE,SAAS,EAAE,iBAAiB,EAAE,EAAE,yHAAyH;IAEzK,iFAAiF;IACjF,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,cAAc;IAC7D,aAAa,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,qBAAqB;IAClE,gBAAgB,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,yBAAyB;IACzE,eAAe,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,kIAAkI;IACjL,YAAY,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE,EAAE,kEAAkE;IAE9G,qDAAqD;IACrD,gBAAgB,EAAE,EAAE,SAAS,EAAE,cAAc,EAAE,EAAE,4EAA4E;IAE7H,+EAA+E;IAC/E,iFAAiF;IACjF,aAAa,EAAE,KAAK,EAAE,sCAAsC;IAC5D,UAAU,EAAE,KAAK,EAAE,iDAAiD;IACpE,uBAAuB,EAAE,KAAK,EAAE,8FAA8F;IAC9H,kBAAkB,EAAE,KAAK,EAAE,8BAA8B;IACzD,aAAa,EAAE,KAAK,EAAE,+EAA+E;IACrG,eAAe,EAAE,KAAK,EAAE,sEAAsE;IAC9F,mBAAmB,EAAE,KAAK,EAAE,8EAA8E;IAC1G,eAAe,EAAE,KAAK,EAAE,6CAA6C;IACrE,sBAAsB,EAAE,KAAK,EAAE,yEAAyE;IACxG,mBAAmB,EAAE,KAAK,EAAE,8DAA8D;IAC1F,wBAAwB,EAAE,KAAK,EAAE,oCAAoC;IACrE,kBAAkB,EAAE,KAAK,EAAE,uFAAuF;IAClH,0BAA0B,EAAE,KAAK,EAAE,kEAAkE;IAErG,qFAAqF;IACrF,UAAU,EAAE,KAAK,EAAE,sCAAsC;IACzD,YAAY,EAAE,KAAK,EAAE,qDAAqD;IAC1E,eAAe,EAAE,KAAK,EAAE,uDAAuD;IAC/E,qBAAqB,EAAE,KAAK,EAAE,wEAAwE;IACtG,iBAAiB,EAAE,KAAK,EAAE,oDAAoD;IAC9E,aAAa,EAAE,KAAK,EAAE,oDAAoD;IAC1E,iBAAiB,EAAE,KAAK,EAAE,8BAA8B;IACxD,iBAAiB,EAAE,KAAK,EAAE,6BAA6B;IACvD,YAAY,EAAE,KAAK,EAAE,sCAAsC;IAC3D,gBAAgB,EAAE,KAAK,EAAE,oCAAoC;IAC7D,cAAc,EAAE,KAAK,EAAE,uBAAuB;IAC9C,eAAe,EAAE,KAAK,EAAE,qEAAqE;IAE7F,4FAA4F;IAC5F,kBAAkB,EAAE,KAAK,EAAE,4DAA4D;IACvF,iBAAiB,EAAE,KAAK,EAAE,0BAA0B;IACpD,UAAU,EAAE,KAAK,EAAE,yBAAyB;IAC5C,eAAe,EAAE,KAAK,EAAE,qBAAqB;IAC7C,mBAAmB,EAAE,KAAK,EAAE,8BAA8B;IAC1D,mBAAmB,EAAE,KAAK,EAAE,8BAA8B;IAC1D,4BAA4B,EAAE,KAAK,EAAE,2EAA2E;IAChH,kBAAkB,EAAE,KAAK,EAAE,oCAAoC;IAC/D,KAAK,EAAE,KAAK,EAAE,oCAAoC;IAClD,oBAAoB,EAAE,KAAK,EAAE,oCAAoC;IACjE,kBAAkB,EAAE,KAAK,EAAE,2CAA2C;IACtE,aAAa,EAAE,KAAK,EAAE,2CAA2C;IACjE,mBAAmB,EAAE,KAAK,EAAE,yCAAyC;IACrE,qBAAqB,EAAE,KAAK,EAAE,sCAAsC;IACpE,aAAa,EAAE,KAAK,EAAE,kCAAkC;IACxD,qBAAqB,EAAE,KAAK,EAAE,8CAA8C;IAC5E,kBAAkB,EAAE,KAAK,EAAE,gCAAgC;IAC3D,iBAAiB,EAAE,KAAK,EAAE,uCAAuC;IACjE,2BAA2B,EAAE,KAAK,EAAE,mCAAmC;CACxE,CAAC;AAqDF,MAAM,CAAC,MAAM,mBAAmB,GAAiD;IAC/E,iFAAiF;IACjF,iBAAiB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,2FAA2F;IAC9I,qBAAqB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,0DAA0D;IACjH,mBAAmB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,uEAAuE;IAC5H,eAAe,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,iDAAiD;IAElG,gFAAgF;IAChF,eAAe,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,iDAAiD;IAClG,YAAY,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,4CAA4C;IAC1F,iBAAiB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,qCAAqC;IACxF,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,iCAAiC;IAC7E,gBAAgB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,sCAAsC;IACxF,kBAAkB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,2DAA2D;IAC/G,aAAa,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,8BAA8B;IAC7E,mBAAmB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,4BAA4B;IACjF,wBAAwB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,oCAAoC;IAC9F,eAAe,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,uBAAuB;IACxE,kBAAkB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,+BAA+B;IACnF,mBAAmB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,wCAAwC;IAC7F,eAAe,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,mDAAmD;IACpG,YAAY,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,8DAA8D;IAC5G,UAAU,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,oCAAoC;IAChF,mBAAmB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,gCAAgC;IACrF,gBAAgB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,iCAAiC;IACnF,cAAc,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,6BAA6B;IAC7E,eAAe,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,0CAA0C;IAC3F,iBAAiB,EAAE,EAAE,OAAO,EAAE,iBAAiB,EAAE,EAAE,yCAAyC;IAE5F,+EAA+E;IAC/E,yEAAyE;IACzE,aAAa,EAAE;QACb,KAAK,EACH,yIAAyI;KAC5I;IACD,uBAAuB,EAAE;QACvB,KAAK,EACH,oIAAoI;KACvI;IACD,aAAa,EAAE;QACb,KAAK,EACH,gLAAgL;KACnL;IACD,0BAA0B,EAAE;QAC1B,KAAK,EACH,gLAAgL;KACnL;IACD,sBAAsB,EAAE;QACtB,KAAK,EACH,yJAAyJ;KAC5J;IACD,YAAY,EAAE;QACZ,KAAK,EACH,kJAAkJ;KACrJ;IACD,eAAe,EAAE;QACf,KAAK,EACH,uIAAuI;KAC1I;IACD,aAAa,EAAE;QACb,KAAK,EACH,0HAA0H;KAC7H;IACD,YAAY,EAAE;QACZ,KAAK,EACH,6IAA6I;KAChJ;IACD,kBAAkB,EAAE;QAClB,KAAK,EACH,0HAA0H;KAC7H;IACD,iBAAiB,EAAE;QACjB,KAAK,EACH,yIAAyI;KAC5I;IACD,UAAU,EAAE;QACV,KAAK,EACH,mHAAmH;KACtH;IACD,eAAe,EAAE;QACf,KAAK,EACH,uIAAuI;KAC1I;IACD,mBAAmB,EAAE;QACnB,KAAK,EACH,yHAAyH;KAC5H;IACD,mBAAmB,EAAE;QACnB,KAAK,EACH,kIAAkI;KACrI;IACD,4BAA4B,EAAE;QAC5B,KAAK,EACH,+HAA+H;KAClI;IACD,kBAAkB,EAAE;QAClB,KAAK,EACH,0HAA0H;KAC7H;IACD,KAAK,EAAE;QACL,KAAK,EACH,6IAA6I;KAChJ;IACD,oBAAoB,EAAE;QACpB,KAAK,EACH,8HAA8H;KACjI;IACD,kBAAkB,EAAE;QAClB,KAAK,EACH,sHAAsH;KACzH;IACD,aAAa,EAAE;QACb,KAAK,EACH,0IAA0I;KAC7I;IACD,mBAAmB,EAAE;QACnB,KAAK,EACH,kJAAkJ;KACrJ;IACD,qBAAqB,EAAE;QACrB,KAAK,EACH,kJAAkJ;KACrJ;IACD,aAAa,EAAE;QACb,KAAK,EACH,kIAAkI;KACrI;IACD,qBAAqB,EAAE;QACrB,KAAK,EACH,mHAAmH;KACtH;IACD,gBAAgB,EAAE;QAChB,KAAK,EACH,mKAAmK;KACtK;IACD,kBAAkB,EAAE;QAClB,KAAK,EACH,uGAAuG;KAC1G;IACD,iBAAiB,EAAE;QACjB,KAAK,EACH,oIAAoI;KACvI;IACD,2BAA2B,EAAE;QAC3B,KAAK,EACH,4HAA4H;KAC/H;CACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.740",
+  "version": "1.3.741",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-03T23:17:57.781Z",
-  "instarVersion": "1.3.740",
+  "generatedAt": "2026-07-03T23:25:24.796Z",
+  "instarVersion": "1.3.741",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {

package/src/data/llmBenchCoverage.ts

@@ -360,3 +360,203 @@ export const LLM_JUDGES_CLAIMS: Readonly<Record<string, JudgesClaimsFlag>> = {
   CartographerSweep: false, // authors doc-tree summaries over code
   StandardsCoverageEnrichment: false, // enriches standards-coverage rows
 };
+
+// ───────────────────────────────────────────────────────────────────────────
+// Prompt↔parser contract standard (defect class 1 — docs/specs/prompt-parser-
+// contract-standard.md §4)
+//
+// The `contract` axis of the program's shared per-callsite metadata record
+// (class-closure-gate.md §"Program-shared machinery"). It co-locates in THIS
+// file with the bench-coverage record it extends, exactly like the sibling
+// `untrustedInput` (authority-clause) and `judgesClaims` (evidence-bar) axes.
+//
+// THE FIELD IS REQUIRED AND EXPLICIT FOR EVERY COMPONENT_CATEGORY KEY — there is
+// NO DEFAULT. A callsite whose output is machine-parsed into a CLOSED, taught
+// verdict/decision vocabulary (the B15 failure surface: prompt teaches "B15",
+// parser accepts only "B15_CONTEXT_DEATH_STOP") either NAMES its contract-test
+// file (`{ contractTest: '<path>' }`, covered) or is queued in the shrink-only
+// pending set (`{ pending: 'contract-wave-1' | 'contract-wave-2' }`). A callsite
+// with NO such closed-vocabulary parse — no live LLM prompt, a fixed canary, or
+// free-text / open-set CONTENT consumed as data (summaries, extractions,
+// syntheses, briefs, reviews, open-set id routing) — is `{ false: '<reason>' }`
+// and pinned shrink-only in
+// tests/unit/parser-contract-classification-ratchet.test.ts. A silent omission
+// is red CI, so the flag can NEVER default toward the un-contracted state.
+//
+// POLARITY (spec §3: "Undeclared content is hazard-scanned by default"): the
+// default pulls TOWARD "needs a contract" — a callsite is `false` only with an
+// argued reason, exactly like the sibling `untrustedInput` axis defaults toward
+// `true`.
+//
+// WAVE-1 is the spec-named SHIPPED-FIX set (rollout §0/§1): the four
+// highest-stakes parsed callsites — MessagingToneGate (the motivating B15
+// defect), ExternalOperationGate, CompletionEvaluator (stop-judge), and
+// InputClassifier. It is pinned as a seed floor in the ratchet so a
+// highest-stakes callsite can never silently slip out of scope. WAVE-2 is every
+// other enumerated-verdict/decision callsite, graduating on the shrink-only
+// schedule (rollout §2).
+//
+// DARK / REPORT-ONLY: this record is build-time metadata read ONLY by the new
+// pinned ratchet. Nothing here is a contract test yet (those render the REAL
+// production prompt and need the live-builder render refactor, deferred to its
+// own A/B-gated increments — spec rollout §0/§1). The pending set IS the report
+// (spec §4: "report-only inventory happens by construction").
+//
+// A cross-check lint flags any GATE/SENTINEL-category callsite marked `false`
+// for review (these categories most often parse a verdict) — see the ratchet's
+// REVIEWED_FALSE_PARSER_GATE pin.
+// ───────────────────────────────────────────────────────────────────────────
+
+export type ParserContractFlag =
+  | { contractTest: string }
+  | { pending: 'contract-wave-1' | 'contract-wave-2' }
+  | { false: string };
+
+export const LLM_PARSER_CONTRACT: Readonly<Record<string, ParserContractFlag>> = {
+  // ── WAVE-1: the four spec-named highest-stakes parsed callsites (rollout §0) ──
+  MessagingToneGate: { pending: 'contract-wave-1' }, // THE motivating defect: prompt taught "B15", parser accepts only "B15_CONTEXT_DEATH_STOP"
+  ExternalOperationGate: { pending: 'contract-wave-1' }, // parses a closed mutability/reversibility classification
+  CompletionEvaluator: { pending: 'contract-wave-1' }, // the stop-judge surface parses a closed done/blocked/continue verdict
+  InputClassifier: { pending: 'contract-wave-1' }, // parses a closed auto-approve vs relay decision
+
+  // ── WAVE-2: every other enumerated-verdict / decision callsite (rollout §2) ──
+  MessageSentinel: { pending: 'contract-wave-2' }, // closed intent set (pause / emergency / normal)
+  LLMSanitizer: { pending: 'contract-wave-2' }, // parses a closed sanitize verdict/decision
+  WarrantsReplyGate: { pending: 'contract-wave-2' }, // closed should-reply yes/no verdict
+  InputGuard: { pending: 'contract-wave-2' }, // closed input-coherence verdict
+  StallTriageNurse: { pending: 'contract-wave-2' }, // closed stall-triage diagnosis label
+  CommitmentSentinel: { pending: 'contract-wave-2' }, // closed commitment-detected verdict + structured envelope
+  PresenceProxy: { pending: 'contract-wave-2' }, // closed tier-3 stall verdict
+  ProjectDriftChecker: { pending: 'contract-wave-2' }, // closed on-project verdict
+  TemporalCoherenceChecker: { pending: 'contract-wave-2' }, // closed temporal-coherence verdict
+  SessionWatchdog: { pending: 'contract-wave-2' }, // closed stuck verdict
+  ResumeQueueDrainer: { pending: 'contract-wave-2' }, // closed resume-sanity verdict
+  TopicIntentArcCheck: { pending: 'contract-wave-2' }, // closed arc-check classification label
+  TelegramAdapter: { pending: 'contract-wave-2' }, // stall-confirm — closed genuinely-stalled verdict
+  SlackAdapter: { pending: 'contract-wave-2' }, // stall-confirm (byte-identical prompt to Telegram's; parity)
+  PromptGate: { pending: 'contract-wave-2' }, // closed injection-detected verdict
+  UnjustifiedStopGate: { pending: 'contract-wave-2' }, // closed stop-justified verdict
+  OverrideDetector: { pending: 'contract-wave-2' }, // closed override-intent verdict
+  TaskClassifier: { pending: 'contract-wave-2' }, // closed task-type label set
+  ResumeValidator: { pending: 'contract-wave-2' }, // closed resume-UUID match yes/no verdict
+  CoherenceReviewer: { pending: 'contract-wave-2' }, // gate-triage — closed coherence verdict
+
+  // ── Argued false (pinned shrink-only) — no closed-vocabulary verdict parse ──
+  // No live LLM callsite, a fixed canary, or free-text / open-set content.
+  InputDetector: {
+    false:
+      'attribution-manifest alias only (a legacy prompt-pattern matcher); the live matcher calls with attribution PromptGate, contracted there',
+  },
+  SessionActivitySentinel: {
+    false:
+      'authors a free-text activity DIGEST — the product is prose, not a closed verdict vocabulary a prompt teaches and a parser gates on',
+  },
+  PromiseBeacon: {
+    false:
+      'no live LLM prompt — generateStatusLine/classifyProgress hooks are unwired at the construction site; nothing parses a taught vocabulary (matches its bench-coverage exemption)',
+  },
+  InteractivePoolCanaryJudge: {
+    false:
+      'judges a FIXED known-answer canary probe — the expected output is a constant, so the canary is its own contract; a prompt↔parser contract test would re-test the same constant',
+  },
+  SessionSummarySentinel: {
+    false:
+      'extracts task/phase/files as open-set free-text FIELDS — there is no closed taught verdict vocabulary, so the B15 prompt↔parser drift cannot arise here',
+  },
+  AutoApprover: {
+    false:
+      'mechanical key injection + audit logging, no LLM prompt of its own; the upstream parsed decision is InputClassifier.classify(), contracted there',
+  },
+  IntegrationGate: {
+    false:
+      'no LLM prompt of its own — delegates to JobReflector.reflect(); zero LLM-provider callsites of its own that parse a taught vocabulary',
+  },
+  CoherenceGate: {
+    false:
+      'no callsite carries attribution CoherenceGate — all LLM calls flow through CoherenceReviewer.callApi(), contracted there',
+  },
+  JobReflector: {
+    false:
+      'reflection produces free-text content over a job — no closed taught verdict vocabulary a parser gates on (its own bench coverage is wave-3)',
+  },
+  crossModelReviewer: {
+    false:
+      'produces a free-text review of a SPEC document — no closed output vocabulary the prompt teaches and a parser must accept',
+  },
+  SelfKnowledgeTree: {
+    false:
+      'extracts self-knowledge tree fragments as content that is stored/merged — no closed verdict token gates a branch on a taught vocabulary',
+  },
+  TreeTriage: {
+    false:
+      'triages knowledge-tree fragments into content — no closed taught output vocabulary a parser must accept or reject',
+  },
+  TopicSummarizer: {
+    false:
+      'produces a free-text topic summary — the prose is the product; there is no closed vocabulary the prompt teaches and a parser gates on',
+  },
+  ContextualEvaluator: {
+    false:
+      'evaluates context relevance into content — no closed taught verdict vocabulary that a parser accepts a promised form of',
+  },
+  RelationshipManager: {
+    false:
+      'extracts relationship facts as open-set structured content — no closed taught vocabulary a prompt promises and a parser gates on',
+  },
+  StandardsConformanceReviewer: {
+    false:
+      'reviews artifact-vs-standard conformance as content — no closed output vocabulary the prompt teaches and a parser must accept',
+  },
+  DiscoveryEvaluator: {
+    false:
+      'evaluates serendipity discoveries into content — no closed taught verdict vocabulary a parser accepts a promised form of',
+  },
+  Usher: {
+    false:
+      'routes a turn to candidate TOPIC IDS — an OPEN, machine-supplied set, not a closed taught vocabulary the prompt fixes and a parser gates on',
+  },
+  TopicIntentExtractor: {
+    false:
+      'extracts a topic-intent description from a turn — free-text content, not a closed taught verdict vocabulary a parser accepts',
+  },
+  PreCompactionFlush: {
+    false:
+      'extracts durable facts before compaction as free-text content — no closed taught output vocabulary a parser gates on',
+  },
+  TreeSynthesis: {
+    false:
+      'synthesizes knowledge fragments into a free-text answer — the prose is the product, no closed taught verdict vocabulary a parser accepts',
+  },
+  LLMConflictResolver: {
+    false:
+      'resolves divergent multi-machine state into a merged value/content — no closed taught verdict vocabulary a prompt promises and a parser gates on',
+  },
+  openConversationBrief: {
+    false:
+      'generates a free-text A2A conversation brief — the prose is the product, no closed output vocabulary the prompt teaches and a parser must accept',
+  },
+  'a2a-checkin': {
+    false:
+      'summarizes A2A check-in threads into free-text content — no closed taught verdict vocabulary a parser accepts a promised form of',
+  },
+  'correction-learning': {
+    false:
+      'distills recurring corrections into a preference (content) — no closed taught output vocabulary a parser gates on',
+  },
+  'mentor-stage-b': {
+    false:
+      'classifies mentor signals over mentee output into differential content — no closed taught verdict vocabulary a parser gates on (its own bench coverage is wave-3)',
+  },
+  PipeSessionSpawner: {
+    false:
+      'spawns sessions from task descriptions — no LLM output parsed into a closed taught verdict vocabulary',
+  },
+  CartographerSweep: {
+    false:
+      'authors doc-tree summaries over code as free text — the prose is the product, no closed taught output vocabulary a parser gates on',
+  },
+  StandardsCoverageEnrichment: {
+    false:
+      'enriches standards-coverage rows with content — no closed taught verdict vocabulary a prompt promises and a parser accepts',
+  },
+};

package/upgrades/1.3.741.md

@@ -0,0 +1,85 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: minor -->
+
+## What Changed
+
+The mechanical arm of the **"The Prompt and the Parser Are One Contract"** standard
+(`docs/specs/prompt-parser-contract-standard.md`, defect class 1 / `prompt-parser-contract`
+closure), shipped as a self-contained DARK increment — no runtime wiring, no operator-gated
+registry text, no config key, and **no change to any live prompt or parser**. It is the
+structural answer to the 2026-07-02 INSTAR-Bench v2 finding: the tone gate's PROMPT taught
+models the short rule id (`B15`) while its production PARSER accepts only the full identifier
+(`B15_CONTEXT_DEATH_STOP`) and fails closed on the short form — so every model through every
+door obeyed the prompt and "failed." A single CI test comparing what the prompt promises
+against what the parser accepts would have made that defect unrepresentable.
+
+This increment ships **the shared contract library + the per-callsite classification + its CI
+ratchet only**:
+
+- A **shared contract library** (`src/core/promptContract.ts`): the `PromptContract` manifest
+  type (the co-located machine-readable promise a prose-shaped callsite carries next to its
+  prompt) and `deriveRejectedForms` — a pure generator for the counter-examples a contract
+  test feeds the REAL parser to prove its fail-closed behavior (case-mutation,
+  prefix-truncation at each separator — the exact `B15` shape — and separator-stripping, plus
+  hand-picked extras, minus any form that collides with a promised token). Machine-derived by
+  design: a hand-only reject list invites trivial rejects that prove nothing.
+- The **`contract` classification** (`LLM_PARSER_CONTRACT` in `src/data/llmBenchCoverage.ts`):
+  the `contract` axis of the program's ONE shared per-callsite metadata record (sibling of the
+  authority-clause `untrustedInput` and evidence-bar `judgesClaims` axes), required-explicit
+  for every LLM component — no default, so a silent omission is red CI and the flag can never
+  default toward the un-contracted state. The four spec-named highest-stakes parsed callsites
+  (tone gate, external-op gate, stop judge, input classifier) seed `contract-wave-1`; every
+  other enumerated-verdict callsite is `contract-wave-2`; a callsite with no closed-vocabulary
+  parse (no live prompt, a fixed canary, or free-text/open-set content) is an argued `false`.
+- A **classification ratchet** (`tests/unit/parser-contract-classification-ratchet.test.ts`):
+  required-explicit + no-dangling + valid-wave + the wave-1 seed pinned as a floor (a
+  highest-stakes callsite can never silently slip scope) + the pending set pinned shrink-only
+  + the argued-false set pinned shrink-only with a real-reason floor + a gate/sentinel
+  cross-check. Same pinned-baseline family as `llm-bench-coverage-ratchet` and the sibling
+  `untrusted-input-classification-ratchet`.
+
+Deliberately OUT of scope (not orphan deferrals — see `upgrades/side-effects/`):
+
+- The **per-callsite contract tests** and the **live-builder render refactor** (spec rollout
+  §0/§1). A contract test renders the REAL production prompt through an exported pure render
+  function; several production builders are private instance methods with live deps and need
+  that refactor, which TOUCHES live parsing code. It is deferred to its own A/B-gated
+  increments, one callsite at a time — never inside this dark inventory increment.
+- The **runtime contract-drift warning** (spec Frontloaded Decision #3) — a prompt-build-time
+  signal that also touches the live builders; it lands with the single-sourcing migrations.
+- The **registry / constitution text** (spec §1) — operator-gated; ships ONLY with Justin's
+  explicit sign-off. It is DRAFTED in the spec; this run does not edit the standards registry.
+
+## What to Tell Your User
+
+Nothing changes for you right now — this ships dark, and it is maintainer-only machinery (a
+no-op on your install unless you develop instar itself). What it does is give my own AI checks
+a safety net: the words a check's prompt tells a model to answer with, and the words the code
+behind that check will actually accept, are now recorded together and held in sync by an
+automatic test. That closes a class of bug where a check would quietly reject every correct
+answer because the two halves had drifted apart — a mistake that was entirely mine, never the
+model's. The real per-check tests and any wording changes come later, one at a time, and only
+after careful review.
+
+## Summary of New Capabilities
+
+None active for end users in this increment — everything ships dark and additive. (For instar
+maintainers: a shared prompt↔parser contract library plus a required per-callsite `contract`
+classification with a shrink-only ratchet and a pinned highest-stakes seed floor, so a
+machine-parsed callsite can never silently ship a taught output vocabulary its own parser
+rejects.)
+
+## Evidence
+
+- `npx vitest run tests/unit/parser-contract-classification-ratchet.test.ts tests/unit/promptContract.test.ts tests/unit/llm-bench-coverage-ratchet.test.ts`
+  → **3 files, 26 tests, 0 failures** (required-explicit + no-dangling + wave-1 seed floor +
+  shrink-only pending + shrink-only argued-false + real-reason floor + gate/sentinel
+  cross-check + the derive-rejected-forms mutation logic incl. the B15 prefix shape; the
+  pre-existing coverage ratchet still green against the additive record).
+- `npx tsc --noEmit` → exit 0. `npm run lint` → exit 0.
+- Dark-by-construction: `LLM_PARSER_CONTRACT` is build-time metadata read only by the new
+  pinned ratchet; `promptContract.ts` has no runtime caller. It changes NO prompt text and
+  wires NO runtime parser — verified by the absence of any src import of the new module
+  outside tests.

package/upgrades/side-effects/prompt-parser-contract-standard.md

@@ -0,0 +1,67 @@
+# Side-Effects Review — Prompt↔Parser Contract Standard (defect class 1, dark increment)
+
+**Version / slug:** `prompt-parser-contract-standard`
+**Date:** `2026-07-03`
+**Author:** `echo`
+**Tier:** `1 (dark increment — additive library + classification + pinned ratchet; no runtime wiring, no live prompt/parser change, no operator-gated text)`
+
+## Summary of the change
+
+The mechanical arm of the "The Prompt and the Parser Are One Contract" standard (defect class 1 closure; `docs/specs/prompt-parser-contract-standard.md`), shipped as a self-contained DARK increment. It ships:
+
+1. **`src/core/promptContract.ts`** — the shared prompt↔parser contract library. The `PromptContract` manifest type (a co-located, machine-readable promise carried next to a prose-shaped prompt), the `ContractForm` election type, and `deriveRejectedForms(vocabulary, extras, options)` — a PURE generator for the fail-closed counter-examples a per-callsite contract test feeds the REAL parser (case-mutation, prefix-truncation at each separator — the exact B15 shape — separator-stripping, plus hand-picked extras, minus any form that collides with a promised token). No runtime caller in this increment.
+2. **`src/data/llmBenchCoverage.ts`** (additive) — `LLM_PARSER_CONTRACT`, the `contract` axis of the program's shared per-callsite metadata record. Required-explicit for every `COMPONENT_CATEGORY` key; the four spec-named highest-stakes callsites seed `contract-wave-1`, other enumerated-verdict callsites are `contract-wave-2`, and a no-closed-vocabulary callsite is `{ false: '<reason>' }`.
+3. **`tests/unit/parser-contract-classification-ratchet.test.ts`** — required-explicit + no-dangling + valid-wave + wave-1 seed floor + shrink-only pending + shrink-only argued-false + real-reason floor + the gate/sentinel cross-check lint.
+4. **`tests/unit/promptContract.test.ts`** — the derive-rejected-forms mutation logic (incl. the B15 prefix shape, collision-exclusion, purity) and the manifest type surface.
+5. **`docs/specs/prompt-parser-contract-standard.md`** + **`.eli16.md`** — the converged spec and its plain-English overview.
+
+## What is DELIBERATELY out of scope (not orphan deferrals)
+
+- **The per-callsite contract tests + the live-builder render refactor (spec rollout §0/§1).** A contract test renders the REAL production prompt through an exported pure render function; several production builders (e.g. `MessagingToneGate`'s prompt builder) are private instance methods with live deps and need that render refactor, which TOUCHES live parsing code. Per the CAREFUL constraint on this defect class (live, load-bearing parsers), that refactor is deferred to its own A/B-gated increments, one callsite at a time, so live parse behavior is UNCHANGED on this merge. The four siblings deferred their behavioral/render arms for exactly this reason; this increment mirrors that.
+- **The runtime contract-drift warning (spec Frontloaded Decision #3 / "Decision points touched" (a)).** A signal-only prompt-build-time assertion that also touches the live builders; it lands with the by-construction single-sourcing migrations, not this inventory increment.
+- **The registry / constitution text (spec §1).** Operator-gated — ships ONLY with Justin's explicit sign-off (spec front-matter `operator-gate`). The registry entry is DRAFTED in the spec; this run does not write `docs/STANDARDS-REGISTRY.md`.
+
+## Decision-point inventory
+
+- `src/core/promptContract.ts` — **add** — a pure library (types + string/array helpers). NO runtime caller in this increment (dark by construction); it changes NO prompt text and NO parser until a per-callsite contract test + render refactor lands through its own gate. No allow/deny surface.
+- `LLM_PARSER_CONTRACT` classification (`src/data/llmBenchCoverage.ts`) — **add** — build-time metadata only. Read by the new pinned ratchet; no runtime consumer. A SIGNAL producer (which callsites parse a taught output vocabulary), never a runtime authority.
+- The two new vitest tests — **add** — CI-only pinned baselines (same family as `llm-bench-coverage-ratchet`). The ratchet gates the build (adding an unclassified callsite / growing the pending or false set silently is red CI), never a runtime path.
+
+---
+
+## 1. Over-block
+
+**What legitimate inputs does this change reject that it shouldn't?**
+
+None at runtime — nothing is wired to a runtime allow/deny path, and no live prompt or parser changes, so no model answer that was accepted before is rejected now. At CI/build time the only new red-CI surfaces are: (a) adding a new LLM component to `COMPONENT_CATEGORY` without an explicit `contract` classification, (b) growing the pending or argued-false set without editing the pinned baseline, and (c) marking a gate/sentinel `false` without the reviewed allowlist. All three are intentional, self-describing failures with fix-instructions in the assertion message — the "visible, reviewed act" the standard exists to force, not an over-block of legitimate work.
+
+## 2. Under-block
+
+**What failure modes does this still miss?**
+
+- This increment adds NO test that a callsite's prompt and parser are ACTUALLY coherent — that is the per-callsite contract test, deferred with its render refactor. So a classified-`pending` callsite can still ship a drifted prompt↔parser until its contract test graduates. This is the known staged-rollout gap, tracked in the spec's rollout §0→§3, not a silent miss — the pending set IS the honest inventory of that remaining work.
+- Classification accuracy is author-judged against a stated criterion (a CLOSED taught verdict vocabulary → needs a contract; free-text / open-set / no-live-prompt → `false`). A mislabel of a gate/sentinel is partly caught by the cross-check (the highest-risk category); a reflector/job mislabeled `false` would pass. The argued-false shrink-only pin makes every such call visible and reviewed at PR time; this seeding PR IS that review.
+
+## 3. Level-of-abstraction fit
+
+**Is this at the right layer?**
+
+Yes. The contract library is a pure `src/core/` module (the layer where shared prompt/parser scaffolding belongs — sibling to `promptClauses.ts` from the authority-clause standard); the classification extends the ONE shared metadata record the program mandates (`src/data/llmBenchCoverage.ts`), not a new parallel registry; the ratchet is in the established pinned-baseline vitest family. No higher gate already owns "does the prompt's taught vocabulary match the parser"; no lower primitive is duplicated.
+
+## 4. Signal vs authority compliance
+
+The classification and the ratchet are SIGNALS (which callsites parse a taught vocabulary; is the pending/false inventory shrink-only) — they inform the build and the reviewer, never grant or deny a runtime action. `deriveRejectedForms` returns an array; it is inert until a contract test consumes it. No model-produced field is wired to satisfy any authorization check. The library changes no live parser's accept/reject decision.
+
+## 5. Interactions with existing systems
+
+- **`llm-bench-coverage-ratchet` / `untrusted-input-classification-ratchet`** — unaffected: `LLM_PARSER_CONTRACT` is a NEW additive export; the existing `LLM_BENCH_COVERAGE` and `LLM_UNTRUSTED_INPUT` records and their ratchets are untouched (all green post-change). The argued-false membership is consistent with the sibling axes' "no live judging/parsing callsite" reasoning where they overlap (PromiseBeacon, InteractivePoolCanaryJudge, AutoApprover, IntegrationGate, CoherenceGate, InputDetector), and adds the free-text-content reflectors/summarizers on top (which parse no closed verdict vocabulary).
+- **`lint-scrape-fixture-realness`** — the new helper is named `deriveRejectedForms` (not `parse*`/`scrape*`), so it is deliberately outside that lint's `parse*`/`scrape*` surface; it consumes no untrusted real-world text (it operates on a callsite's own declared vocabulary constant).
+- **green-PR auto-merge protected paths** — `src/data/llmBenchCoverage.ts` is already in the class-closure agent-authored-artifact predicate; the pinned ratchet baselines route every future classification/pending/false edit to operator review while a fully-conforming graduation (pending→contractTest) keeps auto-merge (program-shared machinery).
+
+## 6. Failure modes / rollback
+
+Pure additive TypeScript + tests + docs. Rollback = revert the commit; nothing persists state, nothing runs at runtime, no migration, no config key (no agent-side config key exists or is wanted — repo posture only, so no Migration Parity work). `tsc --noEmit` clean, `npm run lint` exit 0, all new + adjacent ratchets green under bounded single-file vitest runs (the machine has intermittent external CPU pressure; verification used bounded runs per the CI-as-gate pattern, full suite gated by CI).
+
+## 7. Second-pass reviewer
+
+Self-review (bounded machine-pressure build). The change is additive, dark, and test-pinned; no runtime surface and no live prompt/parser touched. Key self-checks: (1) confirmed `deriveRejectedForms` never emits a promised token as a "rejected form" (the collision-exclusion test), so a future contract test's accept/reject assertions cannot contradict; (2) confirmed the classification covers all 53 `COMPONENT_CATEGORY` keys exactly once (the required-explicit + no-dangling ratchet asserts it); (3) confirmed the wave-1 seed is exactly the four spec-named highest-stakes callsites; (4) confirmed no `src/` file outside tests imports `promptContract.ts`, so the increment is dark by construction.