instar 1.3.973 → 1.3.975

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "instar",
-  "version": "1.3.973",
+  "version": "1.3.975",
   "description": "Coherence infrastructure for self-evolving AI agents — on the Claude Code or Codex subscription you already have.",
   "type": "module",
   "main": "dist/index.js",

package/src/data/builtin-manifest.json

@@ -1,8 +1,8 @@
 {
   "$schema": "./builtin-manifest.schema.json",
   "schemaVersion": 1,
-  "generatedAt": "2026-07-25T23:04:13.043Z",
-  "instarVersion": "1.3.973",
+  "generatedAt": "2026-07-26T02:30:21.100Z",
+  "instarVersion": "1.3.975",
   "entryCount": 202,
   "entries": {
     "hook:session-start": {
@@ -418,7 +418,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:agents": {
@@ -426,7 +426,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:backups": {
@@ -434,7 +434,7 @@
       "type": "route-group",
       "domain": "operations",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:git": {
@@ -442,7 +442,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:memory": {
@@ -450,7 +450,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:semantic": {
@@ -458,7 +458,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:status": {
@@ -466,7 +466,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:capabilities": {
@@ -474,7 +474,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:project-map": {
@@ -482,7 +482,7 @@
       "type": "route-group",
       "domain": "mapping",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:coherence": {
@@ -490,7 +490,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:topic-bindings": {
@@ -498,7 +498,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:context": {
@@ -506,7 +506,7 @@
       "type": "route-group",
       "domain": "context",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:scope-coherence": {
@@ -514,7 +514,7 @@
       "type": "route-group",
       "domain": "coherence",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:canonical-state": {
@@ -522,7 +522,7 @@
       "type": "route-group",
       "domain": "state",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:ci": {
@@ -530,7 +530,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:sessions": {
@@ -538,7 +538,7 @@
       "type": "route-group",
       "domain": "sessions",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:jobs": {
@@ -546,7 +546,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:skip-ledger": {
@@ -554,7 +554,7 @@
       "type": "route-group",
       "domain": "scheduling",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:telegram": {
@@ -562,7 +562,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:attention": {
@@ -570,7 +570,7 @@
       "type": "route-group",
       "domain": "communication",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:relationships": {
@@ -578,7 +578,7 @@
       "type": "route-group",
       "domain": "relationships",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:feedback": {
@@ -586,7 +586,7 @@
       "type": "route-group",
       "domain": "feedback",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:updates": {
@@ -594,7 +594,7 @@
       "type": "route-group",
       "domain": "updates",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:dispatches": {
@@ -602,7 +602,7 @@
       "type": "route-group",
       "domain": "dispatches",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:quota": {
@@ -610,7 +610,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:publishing": {
@@ -618,7 +618,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:private-views": {
@@ -626,7 +626,7 @@
       "type": "route-group",
       "domain": "publishing",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:tunnel": {
@@ -634,7 +634,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:events": {
@@ -642,7 +642,7 @@
       "type": "route-group",
       "domain": "networking",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:evolution": {
@@ -650,7 +650,7 @@
       "type": "route-group",
       "domain": "evolution",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:watchdog": {
@@ -658,7 +658,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:topic-memory": {
@@ -666,7 +666,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:state-sync": {
@@ -674,7 +674,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:intent": {
@@ -682,7 +682,7 @@
       "type": "route-group",
       "domain": "intent",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:triage": {
@@ -690,7 +690,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:operations": {
@@ -698,7 +698,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:sentinel": {
@@ -706,7 +706,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:trust": {
@@ -714,7 +714,7 @@
       "type": "route-group",
       "domain": "safety",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:monitoring": {
@@ -722,7 +722,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:commitments": {
@@ -730,7 +730,7 @@
       "type": "route-group",
       "domain": "commitments",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:episodes": {
@@ -738,7 +738,7 @@
       "type": "route-group",
       "domain": "memory",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:messages": {
@@ -746,7 +746,7 @@
       "type": "route-group",
       "domain": "coordination",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:system-reviews": {
@@ -754,7 +754,7 @@
       "type": "route-group",
       "domain": "monitoring",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "route-group:machine-mesh": {
@@ -770,7 +770,7 @@
       "type": "route-group",
       "domain": "security",
       "sourcePath": "src/server/routes.ts",
-      "contentHash": "ce5777c9c83d44d988a1b346cc596336bea5fe915eb047be669371cbf2467540",
+      "contentHash": "9cda21e349af7f9e1b0817a7a5aba7e54e0325a4c15ab3563ff87637aacb8515",
       "since": "2025-01-01"
     },
     "cli:init": {

package/upgrades/1.3.974.md

@@ -0,0 +1,74 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+**The standards enforcement-coverage audit no longer reports a figure it cannot stand behind.**
+Five honesty defects in one instrument, found while auditing the tool that audits our constitution
+(2026-07-25). Live evidence on the dev machine: the audit reported `enforcedRatio: 0.0455` over
+`total: 22` while the source registry carries **81** article headings — re-run over the whole
+document the real figure is **0.5375**. The arithmetic was fine; the denominator was invisible, and
+the visible number was 12× more alarming than reality.
+
+- **`enforcedRatio` is now `number | null`.** With nothing to divide by it returns `null`, not `0`
+  ("0% enforced" is a measurement nobody took — and an *alarming* fabrication is worse than a
+  flattering one, because a frightening number is the least likely to be questioned).
+- **Family detection is structural, not a name allowlist.** A `##` section is a standards family
+  iff at least one `###` under it carries a `**Rule.**`. The old hardcoded five-name list silently
+  dropped every article under a sixth family (`## The Fractal`) — currently the Self-Hosting
+  standard. Prose sections are still excluded automatically, and the next family added needs no
+  code change to be seen.
+- **The parse canary compares against the document's own denominator.** `MIN_EXPECTED_ARTICLES = 15`
+  (written when the real count was ~21) never moved as the registry grew to 81, so it would have
+  passed while 65 of 81 articles vanished. It now fails — naming each lost heading — whenever a
+  heading inside a family parses with no rule. The floor is retained as a coarse backstop only.
+- **`converged` carries its meaning.** `GET /conformance/coverage/health` adds `convergedMeans`:
+  the field has only ever meant "the deterministic pass is stable", never "the standards are
+  healthy" — but sitting bare beside the ratio it read as the second thing.
+- **An unreadable registry no longer hashes identically to an empty one** in the recompute cache.
+
+`CoverageSummary` gains `assessmentTrustworthy` plus a `registry` provenance block (path, bytes,
+article headings found, parsed, dropped headings, families, canary verdict), so a fragment can be
+measured but can never pose as the whole.
+
+## What to Tell Your User
+
+Nothing to configure; this is an internal observability instrument (dev-agent-gated, read-only, and
+it gates nothing). If you had ever read a standards-enforcement percentage off this endpoint, read
+it again — the old figure may have been computed over a fraction of your constitution, and the
+response now tells you exactly what it counted.
+
+## Summary of New Capabilities
+
+- `parseStandardsRegistryDetailed` / `loadStandardsRegistryDetailed` return
+  `RegistryParseDiagnostics` (families, article headings, parsed, dropped headings, non-family
+  sections).
+- `runRegistryCanary(articles, diagnostics?)` reports `articleHeadings` + `completenessAssessed`,
+  and says so when it could NOT assess completeness rather than implying a clean bill of health.
+- `GET /conformance/coverage` + `/conformance/coverage/health` carry `assessmentTrustworthy`,
+  `registry`, and `convergedMeans`.
+
+## Evidence
+
+- `tests/unit/standards-conformance-gate.test.ts` — structural family detection (incl. an invented
+  family and `The Fractal`); the canary reports its denominator and admits when it could not check;
+  the silent-drop case the old floor passed and the completeness check now names.
+- `tests/unit/standards-enforcement-auditor.test.ts` — `enforcedRatio` null over an empty registry;
+  provenance + trustworthiness on a real pass vs a truncated fragment; unreadable ≠ empty in
+  `computeInputHash`.
+- `tests/integration/conformance-dev-gate-route.test.ts` — the HTTP response returns `null` not `0`,
+  carries provenance, never presents `converged` bare, and gives a real ratio over a visible
+  denominator when populated.
+- `tests/e2e/standards-coverage-lifecycle.test.ts` — the live route assesses the WHOLE constitution
+  (denominator equals the document's own heading count; families include `The Fractal`), and a
+  truncated registry cannot present itself as trustworthy.
+
+## Known Gap (tracked, not deferred)
+
+This does **not** change which registry copy the server reads. The audit reads the agent-home
+snapshot, and `PostUpdateMigrator` classifies a drifted snapshot as "customized — left untouched",
+so it stays frozen. What changes today is that the stale read is no longer *silent*: it comes back
+`assessmentTrustworthy: false` with the counts attached instead of a confident low ratio. The
+migration is the next item on the same project tier. <!-- tracked: CMT-1035 -->

package/upgrades/1.3.975.md

@@ -0,0 +1,21 @@
+# Upgrade Guide — vNEXT
+
+<!-- assembled-by: assemble-next-md -->
+<!-- bump: patch -->
+
+## What Changed
+
+Fixed the guard-posture summary's false all-clear shape. `GET /guards` now returns `summary.loadBearingUninspectableKeys`, listing load-bearing guards whose existing posture is `missing`, `errored`, `on-stale`, or `off-runtime-divergent`. These guards remain excluded from `loadBearingGapKeys`, and `GuardPostureProbe` keeps emitting only their existing anomaly class, so the read surface becomes complete without changing classification or double-alarming.
+
+## What to Tell Your User
+
+The guard-health readout now distinguishes critical protections that are silently off from critical protections whose condition cannot currently be inspected. A clean critical-gap list no longer looks like proof that every critical protection was checked.
+
+## Summary of New Capabilities
+
+- Guard health now names load-bearing protections whose condition is missing, errored, stale, or contradicted by runtime state.
+
+## Evidence
+
+- Refusal-first unit coverage constructs an errored load-bearing guard and requires exclusion from the gap list, inclusion in the uninspectable list, and exactly one existing errored probe anomaly.
+- Unit coverage pins all four uninspectable posture classes. Integration and end-to-end lifecycle coverage require the new summary field to survive the real authenticated `GET /guards` route.

package/upgrades/eli16/guard-uninspectable-summary.md

@@ -0,0 +1,35 @@
+# Guard inspectability summary — Plain-English Overview
+
+> The one-line version: the guard-health readout now says when a critical protection cannot be inspected, instead of letting an empty gap list look like proof that every critical path is protected.
+
+## The problem in one breath
+
+The guard inventory has a list of load-bearing guards that are silently unguarded. That list is intentionally narrow: a missing, errored, stale, or runtime-contradicting guard is already alarming under its own posture class, so adding it to the gap class would produce two alarms for one problem. But the read surface did not explain that distinction. A reader could see an empty gap list and honestly conclude that no critical path was unguarded even though a load-bearing guard could not be inspected at all.
+
+## What already exists
+
+- **Guard posture rows** — classify each guard as confirmed, stale, missing, errored, off, dry-run, or runtime-divergent.
+- **Load-bearing gap list** — names critical guards that are silently off by default or stuck in dry-run past their soak window.
+- **Guard posture probe** — alarms missing, errored, stale, and runtime-divergent guards under their existing classes, without duplicating a load-bearing-gap alarm.
+
+## What this adds
+
+The summary returned by the guards read endpoint gains a separate list of load-bearing guards whose posture is uninspectable. The list contains only the four existing loud classes: missing, errored, stale while on, and enabled in configuration while reporting off at runtime.
+
+This is additive observability. It does not change a guard row's classification, enable or disable any guard, alter the load-bearing gap definition, or create another probe anomaly.
+
+## The safeguards
+
+**Prevents a false all-clear.** A clean gap list can now be read beside the uninspectable list, so absence from one class is not mistaken for proof of complete inspection.
+
+**Prevents double-alarming.** The probe remains unchanged. A load-bearing guard with an errored getter still produces one existing errored anomaly and no load-bearing-gap episode.
+
+**Refuses regression at every live seam.** Unit coverage proves all four allowed postures and the no-double-alarm rule. Integration and end-to-end coverage call the real authenticated guards route and require the new list to survive the response.
+
+## What ships when
+
+One additive summary field ships with the existing guards endpoint. Older consumers can ignore it; consumers that need an honest critical-path reading can use it immediately.
+
+## What you actually need to decide
+
+Does the PR preserve the existing classification and alarm behavior while making incomplete load-bearing inspection explicit?