instar 1.3.760 → 1.3.762

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.760",
+  "version": "1.3.762",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/scripts/model-registry-freshness.manifest.json

@@ -4,8 +4,8 @@
   "$schemaNote": "registrySchemaVersion 2 = the enriched Doorway/Model Knowledge Registry. Increment 1 (spec §Rollout step 1) added the per-door topModels[] frontier-derivation layer + the derived-frontier lint (report mode). Increment 2 (spec §Rollout step 2) ADDS the per-door probe{} block + candidateDoorways[] below — the metadata the deterministic prober (scripts/doorway-scan.mjs) reads to know HOW to re-verify each door — plus the live scan-state (.instar/state/doorway-scan.json) + the dark (enabled:false) doorway-scan job. Both additions are backward-compatible: the freshness lint ignores probe{}/candidateDoorways entirely (it reads only topModels/frontier/pins). GET /doorways is a LATER increment (spec §Rollout step 3) and is NOT wired yet.",
   "lastReviewedAt": "2026-07-03",
   "stalenessWindowDays": 45,
-  "enforcement": "report",
-  "$enforcementNote": "'report' = non-gating (prints findings, always exits 0) — the dark/reversible default while the current list is known-stale. Flip to 'strict' (exits 1 on any finding) ONLY after the flaggedStale door swaps below are operator-confirmed and applied AND the standard is ratified (spec §Rollout step 5). Env INSTAR_MODEL_FRESHNESS_STRICT=1 forces strict for a one-off run.",
+  "enforcement": "strict",
+  "$enforcementNote": "'strict' = GATING (exits 1 on any finding: staleness, drift, or a flaggedStale row) — flipped from 'report' in rollout increment 5 (spec §Rollout step 5, the companion-gated activation) now that the prior flaggedStale door swaps are operator-confirmed + reconciled into topModels (flaggedStale is empty) and the derived-frontier drift + staleness teeth pass clean. This is the LIVE TEETH that the 'Keep the Doorway/Model Map Current' constitutional standard is ratified WITH (not ahead of). The lint runs in the `npm run lint` chain, so a future staleness age-out (lastReviewedAt exceeds stalenessWindowDays) or a pin drifting off its door's derived frontier set now FAILS CI — the anti-rot ratchet, by design. To revert to non-gating (dark/reversible rollback), set this field back to 'report'. Env INSTAR_MODEL_FRESHNESS_STRICT=1 forces strict for a one-off run regardless of this field.",
   "doors": {
     "claude-code": {
       "name": "Claude Code CLI",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-04T20:03:31.063Z",
-  "instarVersion": "1.3.760",
+  "generatedAt": "2026-07-04T21:09:40.527Z",
+  "instarVersion": "1.3.762",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -11,7 +11,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/session-start.sh",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:dangerous-command-guard": {
@@ -20,7 +20,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/dangerous-command-guard.sh",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:grounding-before-messaging": {
@@ -29,7 +29,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/grounding-before-messaging.sh",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:compaction-recovery": {
@@ -38,7 +38,7 @@
       "domain": "identity",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/compaction-recovery.sh",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:external-operation-gate": {
@@ -47,7 +47,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-operation-gate.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:deferral-detector": {
@@ -56,7 +56,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/deferral-detector.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:self-stop-guard": {
@@ -65,7 +65,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/self-stop-guard.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:post-action-reflection": {
@@ -74,7 +74,7 @@
       "domain": "evolution",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/post-action-reflection.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:external-communication-guard": {
@@ -83,7 +83,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/external-communication-guard.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-collector": {
@@ -92,7 +92,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-collector.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:scope-coherence-checkpoint": {
@@ -101,7 +101,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/scope-coherence-checkpoint.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:free-text-guard": {
@@ -110,7 +110,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/free-text-guard.sh",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:claim-intercept": {
@@ -119,7 +119,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:claim-intercept-response": {
@@ -128,7 +128,7 @@
       "domain": "coherence",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/claim-intercept-response.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:stop-gate-router": {
@@ -137,7 +137,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/stop-gate-router.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "hook:auto-approve-permissions": {
@@ -146,7 +146,7 @@
       "domain": "safety",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
       "installedPath": ".instar/hooks/instar/auto-approve-permissions.js",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "job:health-check": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "13d7a09d6e23886a37ddc267c77cad510edf9b1013cd6324312773d8c3429cd8",
+      "contentHash": "2cf5227213f33fee0e634e024dc90cef6b51880242b8101921af631a2b15bac3",
       "since": "2025-01-01"
     },
     "cli:init": {
@@ -1562,7 +1562,7 @@
       "type": "subsystem",
       "domain": "updates",
       "sourcePath": "src/core/PostUpdateMigrator.ts",
-      "contentHash": "ae15e23b7525213595701aaac82b83f9ca3f74f99b0b6ab498930096d16ace7a",
+      "contentHash": "387d05da5a63b6ae1463c481820d94a613cde16bef85a0b72619949e4a151763",
       "since": "2025-01-01"
     },
     "subsystem:scheduler": {

package/src/scaffold/templates.ts

@@ -14,7 +14,7 @@
 // existing-agent migration there) so the two can never drift. Imported as a runtime
 // function call inside generateClaudeMd — no module-init cycle (PostUpdateMigrator
 // never imports templates).
-import { PLAYWRIGHT_PROFILE_REGISTRY_CLAUDEMD_SECTION, MACHINE_LOAD_ASSESSMENT_CLAUDEMD_SECTION, DYNAMIC_MCP_CLAUDEMD_SECTION, SENDER_REJECTION_CLAUDEMD_SECTION, SCOPE_ACCRETION_CLAUDEMD_SECTION, MESH_SELF_HEALING_CLAUDEMD_SECTION, WRITE_ADMISSION_CLAUDEMD_SECTION } from '../core/PostUpdateMigrator.js';
+import { PLAYWRIGHT_PROFILE_REGISTRY_CLAUDEMD_SECTION, MACHINE_LOAD_ASSESSMENT_CLAUDEMD_SECTION, DYNAMIC_MCP_CLAUDEMD_SECTION, SENDER_REJECTION_CLAUDEMD_SECTION, SCOPE_ACCRETION_CLAUDEMD_SECTION, MESH_SELF_HEALING_CLAUDEMD_SECTION, WRITE_ADMISSION_CLAUDEMD_SECTION, DOORWAY_REGISTRY_CLAUDEMD_SECTION } from '../core/PostUpdateMigrator.js';
 
 export interface AgentIdentity {
   name: string;
@@ -872,6 +872,7 @@ ${SENDER_REJECTION_CLAUDEMD_SECTION()}
 ${DYNAMIC_MCP_CLAUDEMD_SECTION(port)}
 ${MESH_SELF_HEALING_CLAUDEMD_SECTION(port)}
 ${WRITE_ADMISSION_CLAUDEMD_SECTION(port)}
+${DOORWAY_REGISTRY_CLAUDEMD_SECTION(port)}
 **Per-Feature LLM Metrics & LLM Activity (Observable Intelligence)** — Audit what each of your LLM-driven gates/sentinels actually does: WHICH provider + model ran it, how often it ACTED (fired) vs found nothing (noop), how often it was skipped to save rate limits (shed), cost, and latency. This is the *Observable Intelligence* standard — no autonomous AI action the system takes is allowed to be invisible. Read-only observability — it never gates anything.
 - Check: \`curl -H "Authorization: Bearer $AUTH" "http://localhost:${port}/metrics/features?sinceHours=24"\`
 - Returns \`{ totals, features: [{ feature, frameworks, models, byModel, calls, realCalls, tokensIn, tokensOut, tokensCached, fired, noop, shed, fireRate, p50LatencyMs, p95LatencyMs, ... }] }\` — one row per system (e.g. MessagingToneGate, MessageSentinel). \`frameworks\`/\`models\` = which provider(s) actually served the call; \`fireRate\` = how often it acts; \`shed\` = skipped by the rate-limit guard. Filter with \`?feature=<name>\`.

package/upgrades/1.3.761.md

@@ -0,0 +1,34 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Doorway/Model Knowledge Registry — rollout increment 3 (the `GET /doorways` read surface + CLAUDE.md awareness + the `maintenance.doorwayScan` config knob, per `docs/specs/DOORWAY-MODEL-KNOWLEDGE-REGISTRY-SPEC.md` §Rollout step 3). Increments 1 (enriched manifest + lint) and 2 (deterministic prober + scan-state + dark job + §2.7 guard) are already merged. **The scan job stays DARK** — this increment adds a READ route + awareness only; nothing probes, spends, or changes routing.
+
+- **`GET /doorways`** (`src/core/DoorwayRegistryReader.ts` + `src/server/routes.ts`, spec §D5) — a read-only, Bearer-authed, always-mounted route returning the merged doorway→model map: the git-tracked canonical `topModels` (authoritative for routing, with pricing) overlaid with THIS machine's read-validated live reachability, keyed by `doorId`. It honors the **D5 two-state contract**: `200` with `scanState:"never-run"` when the registry is present but no scan has run yet (each door honestly `reachable:null`/`probeStatus:"never-scanned"`), `200` merged once a scan has run, and `503` with a stable `code` when the registry is genuinely unavailable — `registry-unavailable-no-instar-source` (a pure end-user install carries no manifest) or `registry-corrupt` (present but unparseable). It never fabricates an empty map. The machine-local scan-state is UNTRUSTED and re-validated field-by-field on read (door id charset + known-candidate cross-check, `probeStatus` fixed enum, ISO timestamps; `reachable` DERIVED from the clamped `probeStatus`, never the stored boolean), so a poisoned local file is contained.
+- **CLAUDE.md awareness block** (`generateClaudeMd()` for new agents + a content-sniffed `migrateClaudeMd()` block for existing agents, via the shared `DOORWAY_REGISTRY_CLAUDEMD_SECTION()`, spec §Agent Awareness + §Migration Parity) — a pointer (not an inlined door/model table): what the registry is, the `GET /doorways` read, the OFF-by-default scan job + how to enable it, and the proactive trigger ("what models can I reach? / is my model map current?" → read `GET /doorways`, don't guess). `/doorways` is also registered in `CAPABILITY_INDEX` so it surfaces in `/capabilities`.
+- **`maintenance.doorwayScan` config knob** (`migrateConfig()` via `ConfigDefaults.SHARED_DEFAULTS`, seeded on both init AND update, spec §D6 + §Migration Parity) — the D6 fail-closed defaults `scope:"free-probes"`, `cadence:"0 4 * * 1"` (weekly), `digestTopicId:null`, `budgetCapUsd:0`. It seeds **every field EXCEPT `enabled`** (which stays absent): a seeded `false` would trip the D6 deny-wins predicate (`config.enabled !== false`) and permanently block the scan even after the job manifest is enabled — the round-2/round-5 bug the spec calls out. Whether the scan RUNS is governed by the (dark) job manifest; `maintenance.doorwayScan.enabled:false` is a master kill-switch.
+
+Increment 5 (reconcile `flaggedStale` → flip the freshness lint to `strict` → ratify the "Keep the Doorway/Model Map Current" standard) is companion-gated + operator-gated and is NOT in this increment.
+
+## What to Tell Your User
+
+You can now ask me "what models can I reach right now?" or "is my model map current?" and I'll read a real, live answer instead of guessing — a map from each of your doorways (Claude Code, Codex, Gemini, a paid API key, …) to the top models each one reaches. Before the (still-off-by-default) weekly scan ever runs, that map is honest: it shows the reviewed model list and says "not scanned yet" for live reachability, rather than pretending to be empty. Nothing here turns on any probing or spends any money — the scan that keeps the map fresh remains switched off until you deliberately enable it later.
+
+## Summary of New Capabilities
+
+- **`GET /doorways`** — a read-only "what models can I reach?" map: canonical top-models per doorway (with pricing) overlaid with this machine's live reachability. Honest two-state contract (200 never-run / 200 merged / 503 with a precise `code` when there's no registry to serve), never a fabricated empty payload, with the untrusted machine-local scan-state re-validated on every read.
+- **Agent awareness** of the doorway registry — every agent (new via init, existing via update) now knows the registry + `GET /doorways` + the dark scan job exist, and the proactive trigger to read it.
+- **A `maintenance.doorwayScan` config knob** with fail-closed defaults (free-probes, weekly, `budgetCapUsd:0`) seeded on init and update — every field except `enabled`, so the scan can never be permanently blocked by a seeded `false`.
+
+## Evidence
+
+- `tests/unit/doorway-registry-reader.test.ts` (10) — the D5 two-state contract at the reader layer (never-run / scanned / no-manifest / corrupt), the merged view, `reachable` derived from the clamped `probeStatus` (P20 tri-state: ok→true, timeout→null, not-installed/http-4xx→false, malformed→true), the EXHAUSTIVE §1.3 read-clamp (out-of-enum probeStatus coerced, injection/metachar door-ids dropped, unknown door dropped, bad timestamp → null, machineId control-chars stripped), corrupt-scan-state → degrades to never-run (never crashes), and a MIRROR-PIN asserting the TS clamp constants (`PROBE_STATUS_ENUM`, `probeStatusToReachable`) match the prober's exported source of truth so they can't drift.
+- `tests/unit/doorway-config-migration.test.ts` (6) — `getInitDefaults`/`getMigrationDefaults` seed every field EXCEPT `enabled`; `applyDefaults` seeds `0`/`null` correctly, never clobbers an operator override, never adds an `enabled` the operator omitted, preserves an operator's explicit `enabled:false`, and is idempotent; a full `PostUpdateMigrator.migrate()` seeds `maintenance.doorwayScan` on an existing agent with `enabled` absent.
+- `tests/unit/doorway-claudemd-migration.test.ts` (4) — `generateClaudeMd` includes the awareness section + the `GET /doorways` read; the section function honors the injected port (never hardcoded); `migrateClaudeMd` appends the section once, is a no-op on a second run (content-sniffed idempotency), and does not re-append when already present.
+- `tests/integration/doorway-routes.test.ts` (4) — `GET /doorways` through the real `createRoutes` HTTP pipeline: never-run → 200 `scanState:"never-run"` + canonical topModels (asserted NOT 503); scan-state present → 200 merged; no manifest → 503 `registry-unavailable-no-instar-source`; corrupt manifest → 503 `registry-corrupt`.
+- `tests/e2e/doorway-registry-alive.test.ts` (4) — the "feature is alive" test on the REAL `AgentServer` init path: a source-carrying agent returns **200-not-503 with `scanState:"never-run"` before any scan** and 200 merged after; a non-instar-source agent returns 503 `registry-unavailable-no-instar-source`; the route requires Bearer auth (401 without a token).
+- Ratchets satisfied: `capabilities-discoverability` (145) — `/doorways` classified in `CAPABILITY_INDEX`; `feature-delivery-completeness` (115) — the CLAUDE.md section tracked in `legacyMigratorSections`; `CapabilityIndex` (10), `ConfigDefaults` (36), `scaffold-templates` (26) all green. `npx tsc --noEmit` clean; the full `npm run lint` chain PASS (incl. `lint-model-registry-freshness` report-mode PASS, `lint-dev-agent-dark-gate` PASS); `npm run build` OK.
+- Deferred items (spec §Deferred DF1-DF6, incl. the pool-scope `/doorways` merge) remain tracked in `docs/specs/reports/DOORWAY-MODEL-KNOWLEDGE-REGISTRY-followups.md`.