kiokuko-dsh 0.2.16 → 0.2.18

package/docs/evaluations/correction-classification-2026-10-21/live-mcp-final-2.json

@@ -0,0 +1,32 @@
+{
+  "schema": "correction-live-mcp-v1",
+  "status": "passed",
+  "dshSourceSha": "01e27576d2efe5020c19e93bdba1a6528bfcaee1",
+  "mainSourceSha": "5289ed72e347e65eb9a17d8b1d90f51958f8b333",
+  "provider": "typesafe",
+  "model": "jev-1.13.0",
+  "syntheticEntries": 2,
+  "providerCalls": 2,
+  "repeatProviderCalls": 0,
+  "cachedResults": 2,
+  "observedRules": [
+    {
+      "rule": "uncertain",
+      "observed": "reference",
+      "model": "jev-1.13.0",
+      "mode": "shadow",
+      "inputTokens": 565
+    },
+    {
+      "rule": "uncertain",
+      "observed": "capability_compatibility",
+      "model": "jev-1.13.0",
+      "mode": "shadow",
+      "inputTokens": 571
+    }
+  ],
+  "modelInput": "unobserved",
+  "verification": "unverified",
+  "authorizationGranted": false,
+  "qualityMeasurement": "separate held-out corpus, not these two handoff cases"
+}

package/docs/evaluations/correction-classification-2026-10-21/live-mcp-final-2.log

@@ -0,0 +1 @@
+{"schema":"correction-live-mcp-v1","status":"passed","dshSourceSha":"01e27576d2efe5020c19e93bdba1a6528bfcaee1","mainSourceSha":"5289ed72e347e65eb9a17d8b1d90f51958f8b333","provider":"typesafe","model":"jev-1.13.0","syntheticEntries":2,"providerCalls":2,"repeatProviderCalls":0,"cachedResults":2,"observedRules":[{"rule":"uncertain","observed":"reference","model":"jev-1.13.0","mode":"shadow","inputTokens":565},{"rule":"uncertain","observed":"capability_compatibility","model":"jev-1.13.0","mode":"shadow","inputTokens":571}],"modelInput":"unobserved","verification":"unverified","authorizationGranted":false,"qualityMeasurement":"separate held-out corpus, not these two handoff cases"}

package/docs/evaluations/correction-classification-2026-10-21/live-mcp-final.json

@@ -0,0 +1,32 @@
+{
+  "schema": "correction-live-mcp-v1",
+  "status": "passed",
+  "dshSourceSha": "01e27576d2efe5020c19e93bdba1a6528bfcaee1",
+  "mainSourceSha": "5289ed72e347e65eb9a17d8b1d90f51958f8b333",
+  "provider": "typesafe",
+  "model": "jev-1.13.0",
+  "syntheticEntries": 2,
+  "providerCalls": 2,
+  "repeatProviderCalls": 0,
+  "cachedResults": 2,
+  "observedRules": [
+    {
+      "rule": "uncertain",
+      "observed": "reference",
+      "model": "jev-1.13.0",
+      "mode": "shadow",
+      "inputTokens": 565
+    },
+    {
+      "rule": "uncertain",
+      "observed": "capability_compatibility",
+      "model": "jev-1.13.0",
+      "mode": "shadow",
+      "inputTokens": 571
+    }
+  ],
+  "modelInput": "unobserved",
+  "verification": "unverified",
+  "authorizationGranted": false,
+  "qualityMeasurement": "separate held-out corpus, not these two handoff cases"
+}

package/docs/evaluations/correction-classification-2026-10-21/main-build.log

@@ -0,0 +1,17 @@
+
+> kiokuko@1.0.45 build
+> npm run clean:dist && tsc -p tsconfig.build.json && npm run set-bin-permissions
+
+
+> kiokuko@1.0.45 clean:dist
+> node --input-type=module --eval "import { rmSync } from 'node:fs'; rmSync('dist', { recursive: true, force: true });"
+
+
+> kiokuko@1.0.45 set-bin-permissions
+> node --input-type=module --eval "import { chmodSync } from 'node:fs'; chmodSync('dist/bin/kiokuko.js', 0o755);"
+
+npm notice
+npm notice New major version of npm available! 11.13.0 -> 12.2.0
+npm notice Changelog: https://github.com/npm/cli/releases/tag/v12.2.0
+npm notice To update run: npm install -g npm@12.2.0
+npm notice

package/docs/evaluations/correction-classification-2026-10-21/main-final-2-unit.log

@@ -0,0 +1,64 @@
+✔ opt-in capture publishes a strict write contract and saves global candidates visible in another session (229.65825ms)
+✔ receipts survive restart, conflict on changed payload, and do not collide with local operation IDs (81.394458ms)
+✔ read owners reject capture and writers recheck a changed schema before saving (43.383166ms)
+✔ corrections enforce revision and atomicity; replay never recreates purged content (58.6315ms)
+✔ capture cannot overwrite Curator-managed memory or a project entry (68.195958ms)
+✔ invalid authority, limits, policy and secrets cannot write or leak input values (39.116291ms)
+✔ disabled capture reports no save and runtime shutdown drains accepted writes (39.407959ms)
+✔ real CLI read-write saves and a fresh read-only CLI recalls the same memory (1133.358584ms)
+✔ capture bounds waiting writes and drains accepted retries without duplicate memory (189.656875ms)
+✔ remote tools are an explicit read-only allowlist with strict published schemas (198.726125ms)
+✔ policy works without DB access and rejected inputs never return memories or supplied values (12.996167ms)
+✔ Global scope, Japanese/subject queries and JSON character budgets match the local gated path (158.349208ms)
+✔ missing, non-regular, corrupt, outdated and future databases fail without initialization (61.675833ms)
+✔ real stdio CLI defaults to read, returns Global memory and leaves WAL database logically unchanged (698.585834ms)
+✔ stdio closes cleanly on EOF (555.419125ms)
+✔ stdio closes cleanly on SIGTERM (455.624208ms)
+2026-10-21 10:37:28.457 xcodebuild[97618:29847584]  DVTFilePathFSEvents: Failed to start fs event stream.
+2026-10-21 10:37:28.616 xcodebuild[97618:29847583] [MT] DVTDeveloperPaths: Failed to get length of DARWIN_USER_CACHE_DIR from confstr(3), error = Error Domain=NSPOSIXErrorDomain Code=5 "Input/output error". Using NSCachesDirectory instead.
+✔ operator project allowlist is read-only, policy-bound and isolated from global and other projects (1920.518459ms)
+✔ real remote MCP binds corrections with no semantic provider without claiming model delivery or application (231.55975ms)
+✔ real remote MCP binds corrections with injected semantic provider without claiming model delivery or application (112.706292ms)
+✔ read receipts expire, remain connection-local and have a bounded count (25.574125ms)
+✔ a failed actual recall remains unavailable when the caller omits its receipt (16.702125ms)
+✔ identical legacy recapture enriches one existing correction without competing memories or caller provenance metadata (39.348208ms)
+✔ baseline and profile migration create current schema and is idempotent (28.380459ms)
+✔ SQL and migration marker roll back together, and a corrected baseline can retry (72.253875ms)
+✔ initialization refuses old without changing database or sidecar contents (11.563ms)
+✔ initialization refuses missing-history without changing database or sidecar contents (11.939542ms)
+✔ initialization refuses empty-history without changing database or sidecar contents (23.357958ms)
+✔ initialization refuses checksum without changing database or sidecar contents (80.830334ms)
+✔ initialization refuses future without changing database or sidecar contents (53.621583ms)
+✔ foreign-key failure rolls back initialization of a new file (2.625208ms)
+✔ reinitialization leaves the supported database file unchanged (43.274792ms)
+✔ refuses a non-SQLite file with path and new-directory guidance without modifying it (6.304792ms)
+✔ refuses orphan sidecars before reserving a new database and preserves their contents (5.5865ms)
+✔ refuses sidecars that appear after fresh path reservation without opening SQLite (6.84ms)
+✔ refuses a rollback journal without invoking SQLite recovery (23.088458ms)
+✔ baseline installs the derived embedding schema without provider I/O (34.353833ms)
+✔ profile migration upgrades the immutable v1 baseline without parsing or deleting existing sessions (45.307584ms)
+✔ interaction migration upgrades v2 without reclassifying existing memory or rewriting revisions (37.989083ms)
+✔ policy digest and version come from one bundled source; attestation is exact (0.708666ms)
+✔ remote schemas enforce limits and reject local authority and unknown fields (2.900417ms)
+✔ CLI rejects invalid and unsupported profile/access combinations before opening a database (14.688541ms)
+✔ first use persists only host-owned metadata; body survives a lossy summary and unchanged reuse survives restart (130.910083ms)
+✔ legacy/caller metadata cannot activate a rule; shadow, unknown and reference never trigger the compatibility gate (111.718208ms)
+✔ title, body, summary, revision and provider configuration invalidate cached meaning without rewriting old entries (102.29975ms)
+✔ concurrent updates cannot receive a classification from an earlier revision, and concurrent identical lookups share inference (56.91475ms)
+✔ outage remains explicit, is cached and cannot become reference (25.590667ms)
+✔ malformed remains explicit, is cached and cannot become reference (49.870291ms)
+✔ abstain remains explicit, is cached and cannot become reference (37.885417ms)
+✔ timeout remains explicit, is cached and cannot become reference (42.748125ms)
+✔ parent cancellation never persists an asynchronous result (35.059708ms)
+✔ cached meaning cannot survive entry deletion or a foreign workspace identity (48.697291ms)
+✔ corrupt persisted classification fails closed without repeating inference or repairing memory content (42.704458ms)
+✔ the semantic request carries the full body, explicit abstention and no execution effects (0.140875ms)
+✔ the additive cache migration upgrades a real prior schema without changing legacy memory (45.215917ms)
+ℹ tests 54
+ℹ suites 0
+ℹ pass 54
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 5793.910041

package/docs/evaluations/correction-classification-2026-10-21/metrics-final.log

@@ -0,0 +1,11 @@
+✔ evaluation denominators include positive abstentions/outages as misses and all gold non-special cases (0.829875ms)
+✔ empty denominators are unavailable and cannot pass release gates (0.094375ms)
+✔ held-out corpus is disjoint, balanced and aligned across the five declared languages (0.725625ms)
+ℹ tests 3
+ℹ suites 0
+ℹ pass 3
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 74.4725

package/docs/evaluations/correction-classification-2026-10-21/native-final.log

@@ -0,0 +1,57 @@
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [info] Setup complete: Skills 43 created, 0 updated (/private/tmp/kiokuko-correction-semantics-20261021/kiokuko-skill-home-OvP6sH/.agents/skills); AGENTS.md unmanaged-or-absent (/private/tmp/kiokuko-correction-semantics-20261021/skill-delivery-4a7URB/AGENTS.md). Reload existing sessions to refresh their instructions.
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native correction handoff and scoped version-gate rejection (public, drop=false) (1696.796375ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native correction handoff and scoped version-gate rejection (public, drop=true) (891.448209ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native correction handoff and scoped version-gate rejection (adapter, drop=false) (882.449708ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native correction handoff and scoped version-gate rejection (adapter, drop=true) (877.614667ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native shadow never invokes special correction handling (public) (688.143416ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native reference never invokes special correction handling (public) (689.047875ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native uncertain never invokes special correction handling (public) (687.386333ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native unavailable never invokes special correction handling (public) (686.763709ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native shadow never invokes special correction handling (adapter) (705.926292ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native reference never invokes special correction handling (adapter) (694.795375ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native uncertain never invokes special correction handling (adapter) (696.069417ms)
+[kiokuko-dsh] [info] plugin loaded
+[kiokuko-dsh] [warn] toolExposure left the native surface unchanged: auto:unbound:turn_record_missing
+[kiokuko-dsh] toolExposure projection {"requestedMode":"auto","mode":"lean","reason":"task_execution:build:projected","toolCountBefore":30,"toolCountAfter":23,"taskFilteredCount":0,"phaseFilteredCount":7,"descriptionTransformedCount":1,"descriptionBytesBefore":20450,"descriptionBytesAfter":8083,"parameterBytesBefore":32907,"parameterBytesAfter":25395,"unownedSurfaceReductionCount":0,"unownedSurfaceReductionReason":"registration_provenance_unavailable"}
+✔ native unavailable never invokes special correction handling (adapter) (692.837084ms)
+ℹ tests 12
+ℹ suites 0
+ℹ pass 12
+ℹ fail 0
+ℹ cancelled 0
+ℹ skipped 0
+ℹ todo 0
+ℹ duration_ms 10280.6255

package/docs/evaluations/correction-classification-2026-10-21/package-evidence.json

@@ -0,0 +1,51 @@
+[
+  {
+    "package": "kiokuko-dsh",
+    "status": "passed",
+    "runtimeSnapshotByteMatched": [
+      "scripts/module-compatibility-assets.json",
+      "scripts/pack-check.mjs",
+      "src/dsh/core/tasks.ts",
+      "src/dsh/correction-context.ts",
+      "src/dsh/decisions/config.ts",
+      "src/dsh/decisions/contracts.ts",
+      "src/dsh/decisions/diagnostics.ts",
+      "src/dsh/decisions/service.ts",
+      "src/dsh/host-adapter.ts",
+      "src/dsh/host-adapter/context.ts",
+      "src/memory/correction-contract.ts",
+      "migrations/045_correction_classification.sql",
+      "src/dsh/decisions/correction.ts",
+      "src/memory/correction-classification.ts"
+    ],
+    "requiredAssets": [
+      "dist/memory/correction-classification.js",
+      "dist/memory/correction-contract.js",
+      "migrations/045_correction_classification.sql",
+      "dist/dsh/decisions/correction.js"
+    ],
+    "tarball": "kiokuko-dsh-0.2.17.tgz",
+    "tarballSha256": "5c2c39352fae24ed76730de9f57ec94ada25e8f0813b1f4fe38c127fd38af489",
+    "scripts": "ignored; no install or publish"
+  },
+  {
+    "package": "kiokuko",
+    "status": "passed",
+    "runtimeSnapshotByteMatched": [
+      "src/mcp/chatgpt-contract.ts",
+      "src/mcp/chatgpt-server.ts",
+      "src/mcp/correction-review.ts",
+      "src/memory/correction-contract.ts",
+      "migrations/015_correction_classification.sql",
+      "src/memory/correction-classification.ts"
+    ],
+    "requiredAssets": [
+      "dist/memory/correction-classification.js",
+      "dist/memory/correction-contract.js",
+      "migrations/015_correction_classification.sql"
+    ],
+    "tarball": "kiokuko-1.0.45.tgz",
+    "tarballSha256": "70d4aaf24b9e9959146f9a5860113cd1b72c8469e114dfc601e7fae840d23fdc",
+    "scripts": "ignored; no install or publish"
+  }
+]

package/docs/evaluations/correction-classification-2026-10-21/timing-final.json

@@ -0,0 +1,53 @@
+{
+  "schema": "correction-live-evaluation-v1",
+  "mode": "live-synthetic",
+  "split": "development",
+  "prototypeOnly": true,
+  "sourceSha": "01e27576d2efe5020c19e93bdba1a6528bfcaee1",
+  "policy": "correction-meaning-v1",
+  "startedAt": "2026-10-21T01:23:19.231Z",
+  "nodeVersion": "v24.16.0",
+  "implementationSha256": {
+    "src/memory/correction-contract.ts": "3b815bc09b5fe1d3211a1332f8cd2a161f02528f1050716e1f5976434a9cb881",
+    "src/memory/correction-classification.ts": "fe1fb793025600249d630ec5b08c6fae67a291f433e41b8f6d68e4b74de41fb5",
+    "src/dsh/decisions/correction.ts": "cf0524467e9e6c084a4f208c6afc6c415665e1284792266b73ff4837391315cc",
+    "src/dsh/decisions/contracts.ts": "829121e8788ee4cea9f34335985ca368bca638924d04c170a444e41fd9f971b3",
+    "src/dsh/decisions/service.ts": "f7423d0a82b8fab07189f419507f539d53641ac941e99845b902ebc8c89b4f44",
+    "src/dsh/decisions/providers.ts": "ac81c87a2a1553bfcd14a173c7060b204ed2133d93889d845f5e45575c61802f"
+  },
+  "corpusSha256": "55350662ade98aaeb475829cfc5158828d629da2ac06ae72b93d959afb20c80d",
+  "batchContractSha256": "fc16c03dae9fac288f713acc0e1e64cdff2bc338600e8cf2b3b873441f63054e",
+  "baselineSourceSha": "01e27576d2efe5020c19e93bdba1a6528bfcaee1",
+  "provider": "typesafe",
+  "configuredModel": "jev-1.13.0",
+  "acceptance": {
+    "minConfidence": 0.8
+  },
+  "distinctSemanticFamilies": 0,
+  "limitations": "24 distinct held-out semantic families, each aligned across five languages; translations are not 120 independent semantic families. Synthetic authored labels; no claim of arbitrary-language validity.",
+  "rows": [],
+  "metrics": null,
+  "prototype": {
+    "capture": {
+      "writeMs": 4.670458999999994,
+      "totalMs": 233.71345900000006,
+      "inferenceMs": 229.04137500000007,
+      "inputTokens": 571
+    },
+    "firstUse": {
+      "captureMs": 2.964375000000018,
+      "coldLookupMs": 155.61066600000004,
+      "cachedLookupMeanMs": 0.9485958499999981,
+      "repeatedLookups": 20,
+      "repeatedProviderCalls": 0,
+      "inputTokens": 570
+    },
+    "changedEntry": {
+      "providerCalls": 1,
+      "elapsedMs": 160.63212499999997,
+      "oldObjectState": "stale"
+    },
+    "selection": "first-use with durable content/revision/policy/configuration cache",
+    "rationale": "Capture does not wait for inference; unused corrections cause no model calls. First use pays one inference; unchanged repeated use pays cache I/O. A changed entry is reclassified."
+  }
+}

package/docs/evaluations/correction-classification-2026-10-21/verification.json

@@ -0,0 +1,199 @@
+{
+  "schema": "correction-verification-v1",
+  "host": "dkmkbkair2k21.local",
+  "platform": "darwin-arm64",
+  "node": "24.16.0",
+  "rust": "1.99.1 (58cf8f9c3 2026-10-13)",
+  "checks": [
+    {
+      "label": "dsh-final-2-unit",
+      "exit": 0,
+      "seconds": 5.5123971659999995,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "--import",
+        "tsx",
+        "--test",
+        "tests/dsh/unit/correction-classification.test.ts",
+        "tests/dsh/unit/correction-decision.test.ts",
+        "tests/dsh/unit/correction-evaluation.test.ts",
+        "tests/dsh/unit/decisions/correction.test.ts",
+        "tests/dsh/unit/decisions/contracts.test.ts",
+        "tests/dsh/unit/decisions/laya-coreml.test.ts",
+        "tests/dsh/integration/correction-workflow.test.ts",
+        "tests/dsh/unit/migration-assets-regression.test.mjs"
+      ]
+    },
+    {
+      "label": "dsh-final-2-typecheck",
+      "exit": 0,
+      "seconds": 8.841066542,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "node_modules/typescript/bin/tsc",
+        "-p",
+        "tsconfig.json",
+        "--noEmit"
+      ]
+    },
+    {
+      "label": "main-final-2-unit",
+      "exit": 0,
+      "seconds": 5.981610584,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "--import",
+        "tsx",
+        "--test",
+        "tests/unit/correction-classification.test.ts",
+        "tests/integration/correction-review.test.ts",
+        "tests/unit/chatgpt-contract.test.ts",
+        "tests/integration/chatgpt-mcp.test.ts",
+        "tests/integration/chatgpt-capture.test.ts",
+        "tests/integration/migrations.test.ts"
+      ]
+    },
+    {
+      "label": "main-final-2-typecheck",
+      "exit": 0,
+      "seconds": 5.775224207999999,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "node_modules/typescript/bin/tsc",
+        "-p",
+        "tsconfig.json",
+        "--noEmit"
+      ]
+    },
+    {
+      "label": "native-final",
+      "exit": 0,
+      "seconds": 10.414792249968741,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "--import",
+        "tsx",
+        "--test",
+        "tests/dsh/integration/correction-native.test.ts"
+      ]
+    },
+    {
+      "label": "metrics-final",
+      "exit": 0,
+      "seconds": 0.11212245800000001,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "--import",
+        "tsx",
+        "--test",
+        "tests/dsh/unit/correction-evaluation.test.ts"
+      ]
+    },
+    {
+      "label": "dsh-final-3-typecheck",
+      "exit": 0,
+      "seconds": 9.412363375,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "node_modules/typescript/bin/tsc",
+        "-p",
+        "tsconfig.json",
+        "--noEmit"
+      ]
+    },
+    {
+      "label": "live-mcp-final-2",
+      "exit": 0,
+      "seconds": 1.292674209,
+      "args": [
+        "/tmp/kiokuko-ci-repair-20261020/runtime/node-v24.16.0-darwin-arm64/bin/node",
+        "--import",
+        "tsx",
+        "/tmp/kiokuko-correction-semantics-20261021/live-mcp-launch.mts",
+        "/Users/dkc/Sites/Src/kiokuko",
+        "/tmp/kiokuko-correction-semantics-20261021/jev-config.json",
+        "/tmp/kiokuko-correction-semantics-20261021/live-mcp-final-2.json"
+      ]
+    }
+  ],
+  "builds": [
+    {
+      "label": "main-build",
+      "exit": 0,
+      "seconds": 5.04937791696284,
+      "timedOut": false
+    },
+    {
+      "label": "dsh-build",
+      "exit": 0,
+      "seconds": 8.328844834002666,
+      "timedOut": false
+    },
+    {
+      "label": "built-product-pair",
+      "exit": 0,
+      "seconds": 6.806159999978263,
+      "timedOut": false
+    }
+  ],
+  "compiledProductPair": [
+    {
+      "label": "built-both-product-pair",
+      "exit": 0,
+      "seconds": 8.074469084036537,
+      "timedOut": false
+    }
+  ],
+  "packageEvidence": "package-evidence.json",
+  "ci": "Not run on GitHub/Linux for this uncommitted diff",
+  "scope": "Disposable DBs and isolated build/dependency environment; no live configuration/database/plugin changes, commit or push",
+  "sources": {
+    "kiokuko-dsh": {
+      "head": "01e27576d2efe5020c19e93bdba1a6528bfcaee1",
+      "originMain": "01e27576d2efe5020c19e93bdba1a6528bfcaee1",
+      "sha256": {
+        "migrations/045_correction_classification.sql": "bb738eeba688a295cb7890219e6f7672b3f44f4cb055ef998768a89ad73c3973",
+        "scripts/correction-evaluation.mjs": "92ae63e451af93f620d502cb846396a115e8ddebcd6b6997309276556fe560ba",
+        "scripts/evaluate-correction-classification.mjs": "8e600f0dd8cecc0e3116ee2f91380c419070d09422933aa43a33864b4fe06708",
+        "scripts/module-compatibility-assets.json": "1e940d01d6a2ad070841bca87567ca3f2d8759f20763bcb78cbbc24d67035ab9",
+        "scripts/pack-check.mjs": "51f4d2e06a8503347c00a3cbd0ce9145f7dab8ad4540f78623e8098c3050e59e",
+        "scripts/verify-correction-mcp-live.mts": "3982240121a0ce02091eefc830eab220309c600d2689fc5f4dc61d699dad895b",
+        "scripts/verify-correction-product-pair.ts": "3680ebffff06ddf115c4ada69cf2558db3230d0e188701da5884c3878124c9e7",
+        "src/dsh/core/tasks.ts": "4e7a1a0679db58b5745ab3b3576ed5f427a699677fae9d84137a7b921df3fe16",
+        "src/dsh/correction-context.ts": "6286ac5fbb70404fa4412e45576bc95cbfccbedda6dc238280bc537798d869f0",
+        "src/dsh/decisions/config.ts": "3a0eda0899c9567c67cf0c1933684f5264f6eb8db8aaec566bb66709f27be4a7",
+        "src/dsh/decisions/contracts.ts": "829121e8788ee4cea9f34335985ca368bca638924d04c170a444e41fd9f971b3",
+        "src/dsh/decisions/correction.ts": "cf0524467e9e6c084a4f208c6afc6c415665e1284792266b73ff4837391315cc",
+        "src/dsh/decisions/diagnostics.ts": "b8892d538879ea747d9e9421053049940b2beb0a9ba17543ffffea71bc410e81",
+        "src/dsh/decisions/service.ts": "f7423d0a82b8fab07189f419507f539d53641ac941e99845b902ebc8c89b4f44",
+        "src/dsh/host-adapter.ts": "5ea88eb5bb2a7839bcb6a81ad3170218b33d21e68a70178a76a93e40bfb1c386",
+        "src/dsh/host-adapter/context.ts": "cfb782626c97cc418285d8702e135692e53ac304b6f98108baf6545c47c55caf",
+        "src/memory/correction-classification.ts": "fe1fb793025600249d630ec5b08c6fae67a291f433e41b8f6d68e4b74de41fb5",
+        "src/memory/correction-contract.ts": "3b815bc09b5fe1d3211a1332f8cd2a161f02528f1050716e1f5976434a9cb881",
+        "tests/dsh/helpers/correction-decisions.ts": "45a9c5e652a788856d5232a191814e20ba1c0a9d431f8c80edf3bc8abc110fe1",
+        "tests/dsh/integration/correction-native.test.ts": "bd231e82e6ca843b0d1be7acf873f479fc43efea6f61ca6675c9fde2f18e6988",
+        "tests/dsh/unit/correction-classification.test.ts": "c23a7126d56d9079ddc337d723a18beef844f7962a47bb6c019160857aa07767",
+        "tests/dsh/unit/correction-decision.test.ts": "053142c3694b7755e2c0e7a7b274fa1ebefad5cfc812fe5f15b445a0ff3a5852",
+        "tests/dsh/unit/correction-evaluation.test.ts": "4f548beabd3cf4f021b6c447fa7c18f2813ad31df9b0f17f6be50fba4f58c873",
+        "tests/dsh/unit/decisions/correction.test.ts": "9d5d460701e4eb715139617fd04f7a8c029660604739cc662788205e958caa40",
+        "tests/fixtures/correction-classification.json": "55350662ade98aaeb475829cfc5158828d629da2ac06ae72b93d959afb20c80d"
+      },
+      "sourceSetSha256": "3c1f1ab47b1ad046206769bc039d379607543801ab5c73011b1dcd038591d0a1"
+    },
+    "kiokuko": {
+      "head": "5289ed72e347e65eb9a17d8b1d90f51958f8b333",
+      "originMain": "5289ed72e347e65eb9a17d8b1d90f51958f8b333",
+      "sha256": {
+        "migrations/015_correction_classification.sql": "bb738eeba688a295cb7890219e6f7672b3f44f4cb055ef998768a89ad73c3973",
+        "src/mcp/chatgpt-contract.ts": "320182b3daef87a9480cae1154e33d592c85087c24e2056ef97fb43e023800b9",
+        "src/mcp/chatgpt-server.ts": "b7320aa5e515f82e54fe676d7c693eb6b9b43e6a853003f1f3ba2461102b01ab",
+        "src/mcp/correction-review.ts": "ea4f48b7e4b1d814da2431c35c6db4a3d8d023f488b77a4dd45e9fb0d3def33d",
+        "src/memory/correction-classification.ts": "fe1fb793025600249d630ec5b08c6fae67a291f433e41b8f6d68e4b74de41fb5",
+        "src/memory/correction-contract.ts": "3b815bc09b5fe1d3211a1332f8cd2a161f02528f1050716e1f5976434a9cb881",
+        "tests/integration/correction-review.test.ts": "4d2fad0711f06c326b0be3060a183ae90411011444ad8fcd5344a9728e00d9ae",
+        "tests/unit/correction-classification.test.ts": "59272ce20f1fb8193ee5a0eb66baa6a228cd6091f75e37f1b65e1add1bca6476"
+      },
+      "sourceSetSha256": "704ab45cf28523074b1736923fe154725a1412fec0ab8fde76bcb5da78082899"
+    }
+  }
+}

package/docs/guardrail.md

@@ -23,11 +23,11 @@ The full package and core module include precompiled artifacts, protocol, Node r
 
 - Linux x64: static musl ELF; native CLI smoke and reproducible-build checks passed on Linux x64.
 - Linux ARM64: static musl ELF, cloud cross-built; native execution not run.
-- macOS Intel and Apple Silicon: cloud cross-built Mach-O, minimum macOS 13; native execution not run. ARM64 ad-hoc signature structure was checked.
-- Other hosts: unsupported; no substitute architecture is selected.
+- macOS Apple Silicon (ARM64): cloud cross-built Mach-O, minimum macOS 13; native execution not run. ARM64 ad-hoc signature structure was checked.
+- Intel Mac and other hosts: unsupported; no substitute architecture is selected.
 
 Cross-build, format and hash checks do not establish native compatibility, arbitrary runtime behavior, notarization or developer signing. Package smoke execution applies only to its actual host. Linux musl binaries have no dynamic ELF interpreter.
 
 ## Repository source and maintenance
 
-The repository includes the actual dependency-free Rust library/CLI at [crates/guardrail](../crates/guardrail/README.md), including the restricted-language/evidence-wire specification, protocol, Cargo lockfile and tests. [Build and release instructions](../crates/guardrail-release/BUILDING.md) accompany the pinned official-source toolchain inputs and portable offline recipe. This source/build layer is excluded from npm runtime tarballs; runtime [third-party notices](guardrail-licenses/README.md) remain included. Original recorded repeat-build evidence does not mean an adapted wrapper has reproduced every target.
+The repository includes the actual dependency-free Rust library/CLI at [crates/guardrail](../crates/guardrail/README.md), including the restricted-language/evidence-wire specification, protocol, Cargo lockfile and tests. [Build and release instructions](../crates/guardrail-release/BUILDING.md) accompany the pinned official-source toolchain inputs and portable offline recipe. This source/build layer is excluded from npm runtime tarballs; runtime [third-party notices](guardrail-licenses/README.md) remain included. Original recorded repeat-build evidence does not mean an adapted wrapper has reproduced every target. Historical Intel Mac records remain in the frozen source and release provenance for identity verification; they do not describe current shipping support.

package/docs/harness-map.md

@@ -5,6 +5,8 @@ Use this map to find the current entry point and a focused check before editing.
 | Concern | Entry and owner | Focused checks |
 | --- | --- | --- |
 | Task admission and execution choice | `src/dsh/intake-gate.ts`, `src/dsh/host-adapter/admission.ts` | `node scripts/run-tests.mjs tests/dsh/unit/task-completion.test.ts tests/dsh/integration/turn-process.test.ts` |
+| Advisory decision provenance and diagnostics | `src/dsh/decisions/diagnostics.ts`, `src/dsh/decisions/service.ts`, `src/dsh/on-demand-intake.ts`; [contract](decision-diagnostics.md) | `node scripts/run-tests.mjs tests/dsh/integration/decision-diagnostics.test.ts tests/dsh/integration/decision-diagnostics-native.test.ts tests/dsh/integration/turn-process.test.ts` |
+| Independent intent comparison and finite-domain judge | `src/dsh/decisions/intent-assessment.ts`, `src/dsh/decisions/micro-judge.ts`, `crates/micro-judge/src/main.rs`; [contract](micro-judge.md) | `KIOKUKO_REQUIRE_MICRO_JUDGE=1 node scripts/run-tests.mjs tests/dsh/integration/micro-judge.test.ts tests/dsh/integration/request-intent-clarification-native.test.ts` |
 | Task conditions and structured file scope | `src/dsh/execution-frame.ts`, `src/dsh/execution-support.ts` | `node scripts/run-tests.mjs tests/dsh/unit/execution-support.test.ts` |
 | Normal and Enno completion evidence | `src/dsh/task-completion.ts`, `src/enno-oduno/service.ts` | `node scripts/run-tests.mjs tests/dsh/unit/task-completion.test.ts tests/dsh/integration/final-verification` |
 | Durable continuation and recovery | `src/dsh/turn-process.ts`, `src/dsh/boundary-worker.ts` | `node scripts/run-tests.mjs tests/dsh/integration/boundary-worker.test.ts` |

package/docs/micro-judge.md

@@ -0,0 +1,34 @@
+# Native finite-domain micro judge
+
+The experimental `crates/micro-judge` program propagates finite domains and uses minimum-remaining-values search. It has no host callbacks, filesystem effects, network access, permissions or task authority. It is a dependency-free, typed and bounded adaptation of the supplied `prolog/solver.rs` reference algorithm, not the earlier five-way enum router. The reference file's original byte hash is not a hash of this adaptation.
+
+`src/dsh/decisions/intent-assessment.ts` independently submits the original request/context and the candidate to the selected real `DecisionService` under `intent-semantic-match`. It asks about action, reference, constraints and the latest applicable native answer. It never copies the extraction result as a semantic verdict. The configured provider still has to be available; scripted tests prove orchestration, not live model accuracy.
+
+The host builds a typed relation graph over exact message identities/digests, current task/Goal revisions, candidate proposal-set membership, proposal revisions/digests, legal current task operation membership and the independent semantic observation. Strings are interned to opaque integer identities. Boolean unknown has domain `[0,1]`; integer values cannot stand in for Boolean values. Intermediate variables link the relations, so the executable performs propagation and MRV search. These observations cannot grant execution. Existing native ownership, lease, revision, scope, permission, cancellation and admission checks remain required.
+
+A complete entailed relation graph can pass the advisory comparison. Contradiction, ambiguity or inconsistency asks a native clarification. A matching actual UI answer is validated against the same agent/session/question and unchanged context, becomes a fresh native user message/source identity, and is reinterpreted. Its exact text labels the latest explicit revision and its scope; unrelated constraints remain applicable. Wrong-question, replaced/stale context, cancellation and repeat replies cannot create new source authority. Ordinary explanatory answers and native evidence gathering bypass this execution assessment. It operates on resolved candidates; unknown optional intake metadata cannot become a new execution prerequisite. Explicit `typedDecisions.mode=off` retains the pre-existing native authority path and records `assessment_disabled`/`not_run`, with no solver verdict or new grant. An enabled assessment that is unavailable is never converted into that disabled state or a successful comparison. Unowned ordinary native tools keep the existing native-policy path; this assessment currently applies to prepared/owned request intent, not arbitrary shell effects or a new command parser.
+
+Unavailable provider/artifact, timeout, malformed or mismatched output and incomplete/resource-limited search produce `assessment_unavailable`; no successful comparison or execution grant is inferred. Infrastructure failure is reported, not presented as a semantic question that a human answer could repair. Semantic-match and detector events share the existing intake diagnostic lineage and record bounded input/output digests, executable hash, version, duration, completeness, verdict or finite unavailable reason. Raw request/answer text is not copied into diagnostics.
+
+## Protocol and bounds
+
+One UTF-8 line: `kiokuko-fd-v1<TAB>inputIdHex<TAB>sha256PayloadHex<TAB>payload<LF>`. The payload is `workBudget variableCount constraintCount`, then each typed domain (`b|i length values...`), prefix constraints and one Boolean prefix query. Operators are `eq ne lt and or implies diag`; `@0` refers to a variable; Boolean constants are `true false`. `diag a b d` means `abs(a-b) != d`.
+
+Bounds: 128 KiB input, 128 variables, 32 values/domain, 256 constraints, three variables/constraint, 2048 AST nodes, depth 32, two million work steps, 100000 solutions. The host normally requests 200000 work steps, enforces a 1500 ms external deadline and 16 KiB output ceiling, and checks version, input identity/digest, binary hash and result invariants. `complete=false` always means no proof. RSS is explicitly unavailable (`null`) on this portable protocol; Linux `/proc` data is not invented on macOS.
+
+## Native build and delivery
+
+`node scripts/build-micro-judge.mjs /absolute/path/to/rustc` performs an explicit offline build matching the current compiler/host target. It never downloads Rust or modifies shell settings. A matching linker, SDK and target standard library must already exist. The artifact manifest records its SHA256 and byte count with `nativeVerified=false` until native acceptance evidence exists. Normal package build verifies bundled artifacts without compiling or downloading anything. The crate and explicit offline build script remain repository sources; the runtime package contains the prebuilt executable and its verification receipt. Runtime executes only the package's matching, verified artifact path, never PATH or a fallback binary. Unsupported/missing platforms are explicit unavailable; an Apple Silicon run proves no Linux, Intel Mac or Windows execution.
+
+The bundled artifact currently has native acceptance on Apple Silicon macOS only. The native-verification receipt pins its binary/source digests and evidence log digests; it makes no live-model accuracy claim. Run `KIOKUKO_REQUIRE_MICRO_JUDGE=1 node scripts/run-tests.mjs tests/dsh/integration/micro-judge.test.ts` to require actual subprocess execution, all four complete statuses, resource exhaustion, queens counts and host relation tests. Native full-host clarification, live selected provider, corrupted-binary sensitivity, packed artifact host and modular delivery acceptance must also be collected before shipping. A passing connection-only suite must never be reported as that acceptance.
+
+
+### Native CI artifacts and distribution
+
+The supported shipping build catalog is GNU Linux x64/arm64 and macOS Apple Silicon (arm64). Intel Mac is unsupported. CI uses three native runners (`ubuntu-24.04`, `ubuntu-24.04-arm`, `macos-15`) and fixes Rust 1.85.0 as its declared Cargo minimum-support baseline and repeatable compiler input. This is not an exact-version requirement for local builds: the helper uses the explicitly supplied existing compiler and requires successful compilation and native acceptance, recording the observed compiler identity in both the manifest and receipt. The Rust 2021 edition and existing Cargo `rust-version = "1.85"` declaration remain unchanged; no claim of a lower tested minimum is made. Package consumers use prebuilt binaries and need no Rust installation. These scripts never install a compiler on a user's machine. Linux GNU artifacts require a compatible glibc environment; musl and Windows have no claimed artifact.
+
+`node scripts/build-verify-micro-judge.mjs /absolute/path/to/rustc --output=/new/artifact-directory` compiles on its actual host, runs at least 18 mandatory native acceptance cases plus platform regression cases (including the independent 200-case oracle), rejects skipped/incomplete runs, binds the observed TAP output and compiler/source/binary hashes, then exports one verified target. A failed test leaves the candidate unverified. The transport collector `node scripts/merge-micro-judge-artifacts.mjs /downloaded/artifact-parent` requires all three distinct supported targets and validates their current source, architecture, bytes, receipts and acceptance log before assembling the package bundle. Missing, duplicate or stale artifacts fail; unsupported execution never becomes success.
+
+Every CI consumer that executes the detector or packages depends on the three native jobs and assembles their results before dependency `prepare` runs. The required aggregate includes native artifact and browser results. `verify-main` retains the tested multi-platform `.tgz` as a release review candidate; it does not publish or install it. The checked-in development artifact may cover only the locally verified host. A local Apple Silicon run establishes only that host's acceptance; new Linux acceptance requires the corresponding CI job to execute.
+
+Synthetic native workflow and Web approval tests configure a separate scripted decision provider from their known original fixture sources. Wrong actions are contradicted and unknown sources stay insufficient/unavailable. They still execute the packaged Rust detector and native approval/ownership paths; they make no live model accuracy claim. Provider-disabled and provider/artifact-unavailable tests remain separate negative cases.