instar 1.3.785 → 1.3.786

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.785",
+  "version": "1.3.786",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/scripts/lint-scrape-fixture-realness.js

@@ -50,6 +50,23 @@ const ROOT = path.resolve(__dirname, '..');
  * parser we KNOW consumes untrusted terminal text and bit us (the code=t bug).
  */
 export const SCRAPE_PARSERS = [
+  // routing-control-room-spend PR 4 (CMT-1929, operator directive 2026-07-07): the
+  // web-verify pricing-page parsers consume UNTRUSTED marketing HTML from the two
+  // doors without machine-readable price APIs — load-bearing for the observed
+  // price cache (parse drift would feed the promote-me hints garbage; the
+  // plausibility clamp is the second barrier).
+  {
+    parserSymbol: 'parseGroqPricingHtml',
+    fixtureSlug: 'pricing-page-groq',
+    testFile: 'tests/unit/routing-price-web-verify.test.ts',
+    testName: 'parses the REAL groq.com/pricing table bytes',
+  },
+  {
+    parserSymbol: 'parseGooglePricingHtml',
+    fixtureSlug: 'pricing-page-google',
+    testFile: 'tests/unit/routing-price-web-verify.test.ts',
+    testName: 'parses the REAL ai.google.dev/pricing flash-lite card bytes (PAID text rate, never audio/free)',
+  },
   {
     parserSymbol: 'FrameworkLoginDriver.parseArtifact',
     fixtureSlug: 'claude-url-code-paste',

package/scripts/routing-price-refresh.mjs

@@ -154,6 +154,115 @@ async function fetchOpenRouterModels(timeoutMs = 8000) {
   }
 }
 
+/**
+ * Web-verify (FD-8, operator-directed schedule 2026-07-07): DETERMINISTIC
+ * extraction from the providers' OFFICIAL pricing pages — the two doors whose
+ * prices are published on web pages only (Groq, Google). CONSERVATIVE by
+ * construction: any ambiguity yields NO point (an unknown price refuses rather
+ * than guesses); every candidate still passes isSanePoint + the plausibility
+ * clamp before the forward-only merge. No LLM, no metered spend — the fetch is
+ * free; any future LLM-assisted extraction stays manual + budget-capped.
+ */
+
+/** Strip tags to a pipe-delimited text stream (the page-shape the fixtures pin). */
+function stripHtml(html) {
+  return String(html ?? '').replace(/<[^>]+>/g, '|').replace(/\s+/g, ' ');
+}
+
+/** Groq page model labels for the tracked ids (the table names models in marketing case). */
+const GROQ_LABELS = { 'openai/gpt-oss-120b': /GPT OSS 120B/i };
+
+/** parseGroqPricingHtml — the groq.com/pricing table rows (fixture: pricing-page-groq). */
+export function parseGroqPricingHtml(html, nowMs) {
+  const points = [];
+  const rows = String(html ?? '').split(/<tr>/i);
+  for (const [modelId, label] of Object.entries(GROQ_LABELS)) {
+    if (!TRACKED['groq-api'].includes(modelId)) continue;
+    const row = rows.find((r) => label.test(stripHtml(r)));
+    if (!row) continue; // model row absent → refuse (page reshaped)
+    const txt = stripHtml(row);
+    const input = /Input Token Price[^$]*\$([0-9]+(?:\.[0-9]+)?)/i.exec(txt);
+    const output = /Output Token Price[^$]*\$([0-9]+(?:\.[0-9]+)?)/i.exec(txt);
+    if (!input || !output) continue; // shape drifted → refuse, never guess
+    points.push({
+      door: 'groq-api',
+      modelId: canonical(modelId),
+      inPerMtok: Number(input[1]),
+      outPerMtok: Number(output[1]),
+      effectiveAt: dayAlignedIso(nowMs),
+      recordedAt: new Date(nowMs).toISOString(),
+      source: 'groq-pricing-page',
+      corrects: null,
+    });
+  }
+  return points;
+}
+
+/** parseGooglePricingHtml — the ai.google.dev/pricing model card (fixture: pricing-page-google). */
+export function parseGooglePricingHtml(html, nowMs) {
+  const points = [];
+  const txt = stripHtml(html);
+  for (const modelId of TRACKED['gemini-api']) {
+    const at = txt.indexOf(canonical(modelId));
+    if (at < 0) continue;
+    const card = txt.slice(at, at + 2500);
+    // The PAID text rate only: "$X (text ..." — never the audio rate, never the free tier.
+    const input = /Input price[^$]*\$([0-9]+(?:\.[0-9]+)?) \(text/i.exec(card);
+    // Output: the first plain dollar figure after the label (thinking tokens included per the page).
+    const output = /Output price[^$]*\$([0-9]+(?:\.[0-9]+)?)/i.exec(card);
+    if (!input || !output) continue; // shape drifted → refuse, never guess
+    points.push({
+      door: 'gemini-api',
+      modelId: canonical(modelId),
+      inPerMtok: Number(input[1]),
+      outPerMtok: Number(output[1]),
+      effectiveAt: dayAlignedIso(nowMs),
+      recordedAt: new Date(nowMs).toISOString(),
+      source: 'google-pricing-page',
+      corrects: null,
+    });
+  }
+  return points;
+}
+
+/**
+ * Plausibility clamp vs the canonical manifest (parser-drift protection): an
+ * extracted price wildly off the reviewed one (>10x either way on either axis)
+ * is REFUSED — a reshaped marketing page must never flood the observed cache.
+ * No canonical point → the clamp passes (a brand-new door has no baseline).
+ */
+export function plausibleVsCanonical(point, manifest) {
+  const pts = (manifest?.points ?? []).filter(
+    (p) => p.door === point.door && canonical(p.modelId) === canonical(point.modelId),
+  );
+  if (pts.length === 0) return true;
+  const newest = pts[pts.length - 1];
+  const ok = (a, b) => !(a > 0 && b > 0) || (a / b <= 10 && b / a <= 10);
+  return ok(point.inPerMtok, newest.inPerMtok) && ok(point.outPerMtok, newest.outPerMtok);
+}
+
+/**
+ * Read the CALLER-SUPPLIED plausibility baseline (`--plausibility-baseline <path>`)
+ * for the clamp. The prober itself is structurally BASELINE-BLIND: it never names
+ * any reviewed price file in its own source (S2-2 — this script is observed-cache-
+ * only; the reviewed baseline's location is the CALLER's knowledge, see spec
+ * Layer 1 / FD-8). Absent/corrupt/unset → null → the clamp passes (no baseline).
+ */
+function readBaseline(p) {
+  if (!p) return null;
+  try {
+    return JSON.parse(fs.readFileSync(p, 'utf-8'));
+  } catch {
+    return null;
+  }
+}
+
+async function fetchText(url) {
+  const res = await fetch(url, { signal: AbortSignal.timeout(20_000), redirect: 'follow' });
+  if (!res.ok) throw new Error(`HTTP ${res.status} from ${url}`);
+  return res.text();
+}
+
 function parseArgs(argv) {
   const args = { scope: 'free-probes', budgetUsd: 0, dryRun: false, out: null, projectDir: process.cwd(), stateDir: null };
   for (let i = 0; i < argv.length; i++) {
@@ -164,6 +273,7 @@ function parseArgs(argv) {
     else if (a === '--out') args.out = argv[++i];
     else if (a === '--project-dir') args.projectDir = argv[++i];
     else if (a === '--state-dir') args.stateDir = argv[++i];
+    else if (a === '--plausibility-baseline') args.plausibilityBaseline = argv[++i];
   }
   return args;
 }
@@ -174,8 +284,11 @@ async function main() {
   const outPath = args.out ?? path.join(stateDir, 'routing-prices.observed.json');
   const now = Date.now();
 
-  if (args.scope !== 'free-probes' && !(args.budgetUsd > 0)) {
-    // Metered / web-verify probes are MANUAL-ONLY + budget-capped (FD-8). No budget → refuse.
+  if (args.scope !== 'free-probes' && args.scope !== '+web-verify' && !(args.budgetUsd > 0)) {
+    // Metered probes are MANUAL-ONLY + budget-capped (FD-8). No budget → refuse.
+    // '+web-verify' is exempt: its DETERMINISTIC page fetch spends nothing (no
+    // LLM, no metered key) — any future LLM-assisted extraction stays behind a
+    // positive budget (fail-closed at 0 for that path).
     console.error(`[routing-price-refresh] scope '${args.scope}' requires a positive --budget-usd (metered probes are manual-only, budget-fail-closed). Refusing.`);
     process.exit(2);
     return;
@@ -192,8 +305,37 @@ async function main() {
   } catch (err) {
     notes.push(`openrouter-api: probe failed (${err?.message ?? err}) — skipped, no data written for this door`);
   }
-  // gemini-api / groq-api need a key → out of the free scope. Honestly reported, never guessed.
-  notes.push('gemini-api, groq-api: need an API key → not in free-probe scope (manual metered probe only)');
+  if (args.scope === '+web-verify') {
+    // Web-verify (operator-directed schedule): DETERMINISTIC extraction from the
+    // OFFICIAL pricing pages of the doors without machine-readable price APIs.
+    // Conservative fail-closed parsers + the plausibility clamp vs canonical;
+    // an unparseable page yields an honest note, never a guessed price.
+    const manifest = readBaseline(args.plausibilityBaseline);
+    const pages = [
+      { door: 'groq-api', url: 'https://groq.com/pricing', parse: parseGroqPricingHtml },
+      { door: 'gemini-api', url: 'https://ai.google.dev/pricing', parse: parseGooglePricingHtml },
+    ];
+    for (const page of pages) {
+      try {
+        const html = await fetchText(page.url);
+        const pts = page.parse(html, now).filter((pt) => {
+          if (!isSanePoint(pt)) return false;
+          if (!plausibleVsCanonical(pt, manifest)) {
+            notes.push(`${page.door}: extracted price for ${pt.modelId} REFUSED by the plausibility clamp (>10x off the reviewed price — likely a reshaped page)`);
+            return false;
+          }
+          return true;
+        });
+        candidates.push(...pts);
+        notes.push(`${page.door}: ${pts.length} price(s) extracted from the official pricing page${pts.length === 0 ? ' (page shape not confidently parseable — refused, never guessed)' : ''}`);
+      } catch (err) {
+        notes.push(`${page.door}: pricing-page fetch failed (${err?.message ?? err}) — skipped, no data written for this door`);
+      }
+    }
+  } else {
+    // gemini-api / groq-api need a key → out of the free scope. Honestly reported, never guessed.
+    notes.push('gemini-api, groq-api: need an API key → not in free-probe scope (manual metered probe / scheduled web-verify)');
+  }
 
   const existing = readObserved(outPath);
   const { points, added } = mergeForwardOnly(existing, candidates);

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-08T18:34:50.090Z",
-  "instarVersion": "1.3.785",
+  "generatedAt": "2026-07-08T21:14:02.877Z",
+  "instarVersion": "1.3.786",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "9ea6be3f5d36afcdd1ee3fbc4fd2fa65810ad55196fff7d21d9d068cabf26e75",
+      "contentHash": "6dd6ca2f8912d7e60e3210bb2db055b72b3c1cbb816598cff9d6a00c43413606",
       "since": "2025-01-01"
     },
     "cli:init": {

package/src/scaffold/templates/jobs/instar/routing-price-web-verify.md

@@ -0,0 +1,32 @@
+---
+name: Routing Price Web-Verify
+description: "The SCHEDULED web-research price check (operator directive 2026-07-07; docs/specs/routing-control-room-spend-alerts.md FD-8 web-verify): for the metered doors whose prices are published on OFFICIAL WEB PAGES only (Groq, Google), the deterministic prober fetches groq.com/pricing + ai.google.dev/pricing and extracts the tracked models' per-Mtok prices with CONSERVATIVE fail-closed parsers (fixture-realness-tested; a reshaped page refuses, never guesses) plus a plausibility clamp vs the reviewed canonical price (>10x off → refused). Extracted points are OBSERVATIONS written forward-only, UTC-day-aligned, into the MACHINE-LOCAL observed cache ONLY — structurally never the canonical manifest; an observed price never becomes official without the operator's PIN promotion. The fetch is FREE (no LLM, no metered key) — any future LLM-assisted extraction stays manual + budget-capped. Drift between observed and canonical surfaces via the Spend tab promote hint and the observed-drift alert. Ships OFF by default (enabled:false). perMachineIndependent — the observed cache is machine-local."
+schedule: "0 6 * * 2"
+priority: low
+expectedDurationMinutes: 5
+model: haiku
+supervision: tier1
+enabled: false
+perMachineIndependent: true
+tags:
+  - cat:maintenance
+  - role:worker
+  - exec:prompt
+gate: curl -sf http://localhost:${INSTAR_PORT:-4042}/health >/dev/null 2>&1
+toolAllowlist: ["Bash"]
+unrestrictedTools: false
+mcpAccess: none
+---
+Run one routing-price web-verify pass. This job only INVOKES the deterministic prober and sanity-checks that it produced a well-formed result — the prober owns 100% of the network I/O, the conservative page parsing, the plausibility clamp, the forward-only day-alignment, and the observed-cache write. You have Bash ONLY — no Edit/Write tool. Do NOT try to edit any source file, and NEVER touch `scripts/routing-prices.manifest.json` (the canonical manifest is human/PIN-reviewed only; the prober is structurally forbidden from writing it).
+
+1. **Prober-presence gate.** Confirm the prober ships in this tree; if absent, exit cleanly (nothing to do):
+   `test -f scripts/routing-price-refresh.mjs`
+
+2. **Run the deterministic prober at the web-verify scope (official pricing pages; zero metered spend — the fetch is free and no LLM is involved):**
+   `node scripts/routing-price-refresh.mjs --scope +web-verify --plausibility-baseline scripts/routing-prices.manifest.json`
+
+   (The `--plausibility-baseline` path is READ-ONLY input for the >10x sanity clamp — the prober's own source is structurally baseline-blind (S2-2) and can never write that file; you pass its location, the prober only compares against it.)
+
+3. **Tier-1 supervision (your job) — sanity-check the run, do NOT re-surface anything yourself.** Confirm the prober printed a well-formed JSON result (`added`, `totalObserved`, `notes`). A note saying a page was "not confidently parseable — refused, never guessed" or "REFUSED by the plausibility clamp" is a HEALTHY fail-closed outcome, not an error. The observed cache is REPORTING-ONLY; a real price drift surfaces in the Routing Spend dashboard tab's promote hint and the observed-drift alert, never as an edit here.
+
+4. Exit. The observed cache is machine-local and forward-only; the canonical manifest is never touched by this job.