kortext 2.2.3 → 3.1.0

package/dist/update.js

@@ -0,0 +1,55 @@
+import { spawn } from 'node:child_process';
+// Cache registry version checks for six hours; failures hide the update notice.
+const LATEST_URL = 'https://registry.npmjs.org/kortext/latest';
+const CACHE_MS = 6 * 60 * 60 * 1000;
+let cached = null;
+export async function latestVersion() {
+    if (cached && Date.now() - cached.at < CACHE_MS)
+        return cached.version;
+    try {
+        const res = await fetch(LATEST_URL, { signal: AbortSignal.timeout(4000) });
+        if (!res.ok)
+            return null;
+        const { version } = (await res.json());
+        if (!version)
+            return null;
+        cached = { at: Date.now(), version };
+        return version;
+    }
+    catch {
+        return null;
+    }
+}
+/** Compare the first three numeric version components, ignoring prerelease suffixes. */
+export function isNewer(latest, current) {
+    const parts = (v) => v
+        .split('-')[0]
+        .split('.')
+        .map((n) => Number(n) || 0);
+    const [a, b] = [parts(latest), parts(current)];
+    for (let i = 0; i < 3; i++)
+        if ((a[i] ?? 0) !== (b[i] ?? 0))
+            return (a[i] ?? 0) > (b[i] ?? 0);
+    return false;
+}
+/**
+ * Update the global package and allow the SQLite binding install script.
+ * Windows requires a shell for the npm .cmd shim; command arguments are fixed.
+ */
+export function selfUpdate() {
+    return new Promise((resolve) => {
+        const proc = spawn('npm', ['install', '-g', '--allow-scripts=better-sqlite3', 'kortext@latest'], { shell: process.platform === 'win32' });
+        let output = '';
+        const collect = (chunk) => {
+            output = (output + chunk.toString()).slice(-4000);
+        };
+        proc.stdout.on('data', collect);
+        proc.stderr.on('data', collect);
+        proc.on('error', (err) => resolve({ ok: false, output: err.message }));
+        proc.on('close', (code) => {
+            if (code === 0)
+                cached = null; // the next check compares against what is now installed
+            resolve({ ok: code === 0, output: output.trim() });
+        });
+    });
+}

package/docs/CHANGELOG.md

@@ -0,0 +1,11 @@
+# Changelog
+
+🇹🇷 [For Turkish press 1](tr/CHANGELOG.md)
+
+## [3.1.0] — 2026-09-14
+
+The first public release.
+
+What was published under this name before 3.1.0 was a different tool. I used it personally and never released it. This one starts from a similar place, but it is a new product.
+
+The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and Kortext follows [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

package/package.json

@@ -1,29 +1,69 @@
 {
   "name": "kortext",
-  "version": "2.2.3",
-  "description": "AI Agent Framework for Operational Discipline and Automated Project Management",
-  "main": "index.js",
+  "version": "3.1.0",
+  "description": "The project brain for AI-driven development: a brief becomes approved analysis documents, then your own agent CLI (Claude Code, Codex, Gemini) writes the code.",
+  "type": "module",
+  "private": false,
   "bin": {
-    "kortext": "scripts/kortext-cli.py"
+    "kortext": "./bin/kortext.js"
   },
+  "files": [
+    "bin/",
+    "dist/",
+    "ui/dist/",
+    "templates/",
+    "workflows/",
+    "agents/",
+    "LICENSE",
+    "docs/CHANGELOG.md"
+  ],
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/erayendes/kortext.git"
+  },
+  "homepage": "https://github.com/erayendes/kortext#readme",
+  "bugs": {
+    "url": "https://github.com/erayendes/kortext/issues"
+  },
+  "funding": "https://buymeacoffee.com/erayendes",
   "scripts": {
-    "test": "python3 scripts/kortext-consistency-check.py",
-    "check": "python3 scripts/kortext-context-check.py",
-    "health": "python3 scripts/kortext-backlog-health.py"
+    "dev": "tsx watch --clear-screen=false server/index.ts --no-open --no-detach",
+    "dev:web": "npm --prefix ui run dev",
+    "build": "tsc -p tsconfig.json && npm --prefix ui run build",
+    "typecheck": "tsc -p tsconfig.json --noEmit && npm --prefix ui run typecheck",
+    "format": "prettier --write .",
+    "format:check": "prettier --check .",
+    "test": "tsx --test test/*.test.ts",
+    "prepack": "npm run build"
   },
   "keywords": [
     "ai",
     "agent",
-    "framework",
-    "automation",
-    "project-management",
+    "project-planning",
+    "analysis",
+    "documentation",
+    "claude",
+    "codex",
     "gemini",
-    "claude"
+    "agents-md",
+    "agentic-coding",
+    "local-first"
   ],
   "author": "Eray Endes",
   "license": "MIT",
   "engines": {
-    "node": ">=14.0.0",
-    "python": ">=3.10.0"
+    "node": ">=22.0.0"
+  },
+  "dependencies": {
+    "better-sqlite3": "^12.10.0",
+    "express": "^5.0.1"
+  },
+  "devDependencies": {
+    "@types/better-sqlite3": "^7.6.12",
+    "@types/express": "^5.0.0",
+    "@types/node": "^26.4.1",
+    "prettier": "^3.9.6",
+    "tsx": "^4.23.13",
+    "typescript": "^7.0.2"
   }
 }

package/templates/AGENTS.md

@@ -0,0 +1,62 @@
+# AGENTS.md — Handover Constitution (Kortext v3.1)
+
+> This project was analyzed with **Kortext**: every analysis document was produced from the
+> brief, +prime (the human) approved each one individually, and Kortext completed its job
+> and stepped away. This file is the constitution of the development relationship from here
+> on — EVERY agent working on the project follows it.
+
+## 1. The sacred guideline — `.kortext/`
+
+Make your decisions by reading from here, not by guessing from the code:
+
+- **`.kortext/*.md`** — every document, in one place, in the order they were written:
+  `BRIEF` (why this exists) · `PRODUCT` (what it is) · `STACK` (technology + tools) ·
+  `STRUCTURE` (standards + folders + terminology) · `ARCHITECTURE` (the shape of the system) ·
+  `SECURITY` · `ENVIRONMENT` · `DATABASE` · `API` · `DESIGN` · `GROWTH` · `LEGAL` · `CONTENT` ·
+  `ENGINEERING` (the technical contract) · `TEST`. Follow them when producing code and content.
+  A file marked `status: not-applicable` was considered and deliberately left empty for this
+  project. `PRODUCT` is where the project came from — read it for context, and do not change it
+  at will. `BRIEF` sits beside it when the project started from one; a project analysed from an
+  existing codebase has none, because the code was the brief.
+- **`## Decisions`** in a document — what another document asked of it and +prime refused,
+  with the reason under it. The two documents disagree on purpose: the decision was deferred to
+  this phase, where there is finally enough information to make it. Read each line as open
+  work, not as fact — when your task touches one, raise it with +prime before you choose. (A
+  request that was accepted and done is simply gone — the text says what it asked for; one
+  still open sits under `## Change Requests` as a `from` line and is +prime's to decide.)
+  **`## Findings`** is the same shape for files no document owns (a `.gitignore`, a CI file):
+  informational, and nobody has acted on it yet.
+- **`.kopeng/`** (if present) — the task structure: Version → Epic → Task files. Task
+  tracking is Kopeng's job; if it is set up, take your next piece of work from there and
+  update its status there.
+
+## 2. Working rules
+
+- **Follow the document — or update the document.** If you see that a decision conflicts
+  with the guideline, do not silently deviate: either follow the decision, or talk to +prime
+  and update the RELEVANT DOCUMENT too. Document and code must not drift apart — that is
+  the entire value of this project memory.
+- **Tasks:** if `.kopeng/` exists, work from there. Otherwise work from +prime's
+  instructions; if they ask, first split the work into tasks and show the list.
+- **Work that falls to +prime** (opening accounts, API keys, purchases, approvals): you
+  cannot do it — report it, and if it creates a wait, make it visible.
+- **Read-before-Write:** read the current version of a shared file before writing to it.
+
+## 3. Behavior constitution (essentials)
+
+- **Language:** communicate with +prime in +prime's language. The prose in the `.kortext/`
+  documents is written in the language of the brief — keep it that way when you update one.
+  Their section headings stay English, as do code, identifiers, file names, commands, commits
+  and comments, always, whatever the document language. In-product copy follows the interface
+  language the brief names (`CONTENT.md` § Localization).
+- **Secrets:** API keys/passwords/tokens are never written into code, documents, or
+  templates — only in `.env` (outside the repo) + key names in `.env.example`. If you notice
+  a leak: stop, report to +prime, suggest revoking the key; cleaning git history is +prime's
+  decision.
+- **Getting stuck (3-attempt rule):** if 3 different approaches fail on the same blocker,
+  STOP; tell +prime what you tried and what you suggest. No moving on with a silent
+  workaround.
+- **Conflict:** if you see a conflict between documents, stop producing and ask +prime; do
+  not choose silently.
+- **Test discipline:** meet the quality bar in TEST.md; saying "done" means meeting the
+  criteria there.

package/templates/docs/API.md

@@ -0,0 +1,67 @@
+---
+status: uninitialized
+author: +architect
+approver: +prime
+---
+
+# API Reference
+
+## Authentication
+
+- **Type:** [e.g., Bearer Token, OAuth2, API Key]
+- **Headers:**
+
+## Base URLs
+
+- **Production:** `https://api.example.com/v1`
+- **Staging/Test:** `https://staging-api.example.com/v1`
+
+## Endpoints
+
+### [Module Name / Group Name]
+
+#### `GET /path/to/resource` (Description)
+
+- **Authorization:** [which role, from the model `SECURITY.md` defines — or `public`]
+- **Parameters / Query:**
+  - `param` (type): [Description]
+- **Request Body:** (If any)
+
+```json
+{
+  "key": "value"
+}
+```
+
+- **Response Data (Success 2xx):**
+
+```json
+{
+  "data": "value"
+}
+```
+
+- **Response Data (Error 4xx/5xx):**
+
+```json
+{
+  "error": "Message"
+}
+```
+
+## Error Codes & Formatting
+
+- **200:** Success
+- **400:** Bad Request
+- **401:** Unauthorized
+- **403:** Forbidden
+- **404:** Not Found
+- **500:** Internal Server Error
+
+## Change Requests
+
+- [What THIS document asks of another, one line per request: - `TARGET.md` — what must change there and why. It travels to that document when this one is approved. Lines that start with `from` are the other direction — what others asked of this document; the human decides them, kortext ticks them, leave them exactly as they are. Leave this section empty when nothing upstream needs to change]
+
+## Questions for Prime
+
+- [Anything prime must answer before this document can be relied on — leave this section empty when there is nothing]

package/templates/docs/ARCHITECTURE.md

@@ -0,0 +1,31 @@
+---
+status: uninitialized
+author: +architect
+approver: +prime
+---
+
+# System Architecture
+
+## Components
+
+- [The system's main parts: client, server, database, external services…]
+
+## Data flow
+
+- [The path a request or piece of data takes through the system; who sends what to whom]
+
+## Boundaries and integrations
+
+- [The surfaces where the system touches the outside world: APIs, third-party services, webhooks]
+
+## Why this way
+
+- [One line per main architectural choice: the rationale, and the alternative that lost]
+
+## Change Requests
+
+- [What THIS document asks of another, one line per request: - `TARGET.md` — what must change there and why. It travels to that document when this one is approved. Lines that start with `from` are the other direction — what others asked of this document; the human decides them, kortext ticks them, leave them exactly as they are. Leave this section empty when nothing upstream needs to change]
+
+## Questions for Prime
+
+- [Anything prime must answer before this document can be relied on — leave this section empty when there is nothing]

package/templates/docs/BRIEF.md

@@ -0,0 +1,27 @@
+---
+status: uninitialized
+author: +product-manager
+approver: +prime
+---
+
+# Brief
+
+## Product Vision & Goals
+
+- [The product's core purpose and vision]
+
+## Target Audience & Personas
+
+- [Which user segments does it serve?]
+
+## Interface Language
+
+- [Which language does the product speak to its users? If more than one, name them and say which is the default]
+
+## Key Performance Indicators (KPIs)
+
+- [What are the success criteria?]
+
+## Future Scope & Out of Scope
+
+- [What is out of scope?]

package/templates/docs/CONTENT.md

@@ -0,0 +1,66 @@
+---
+status: uninitialized
+author: +copywriter
+approver: +prime
+---
+
+# Content Strategy & Microcopy
+
+## Brand Voice & Tone
+
+- **Tone:** [e.g., Professional, Friendly, Playful, Serious]
+- **Dos & Don'ts:**
+  - **Do:** [e.g., Use simple sentences that guide the user]
+  - **Don't:** [e.g., Don't drown the user in technical jargon]
+
+## Message Hierarchy & Page Copy
+
+> Written into the surfaces and components `DESIGN.md` names.
+
+### [Surface name]
+
+- **Headline:** [the one sentence this screen leads with]
+- **Support:** [the line under it]
+- **Action:** [what the primary button says]
+
+## Microcopy (UI Interface Texts)
+
+- **Primary Buttons:** [e.g., 'Continue', 'Save', 'Get Started']
+- **Secondary Buttons:** [e.g., 'Cancel', 'Go Back']
+- **Empty States:** [e.g., 'Nothing here yet — create the first record!']
+- **Success Messages:** [e.g., 'Saved successfully.']
+
+## Error Messages
+
+- **Validation Errors:** [e.g., 'This field is required.', 'Invalid email format.']
+- **Server/System Errors:** [e.g., 'Could not reach the server, please try again.']
+
+## Required Legal Notices
+
+> `LEGAL.md` names the notices this product owes its users. Write them here in full —
+> a reference is not a notice. Write `none` when compliance requires no user-facing text.
+
+### [Notice — e.g., Cookie consent banner]
+
+- **Where it appears:** [surface and moment]
+- **Copy:** [the text the user actually reads, in the interface language]
+- **Obligation it satisfies:** [the rule in `LEGAL.md` this discharges]
+
+## Localization
+
+- [Interface language(s) from BRIEF.md; if more than one: source language, target languages, what is translated and what is never translated (product name, code identifiers, legal terms)]
+
+## Email & Notification Templates
+
+### [Notification Type / Scenario]
+
+- **Subject:**
+- **Body:**
+
+## Change Requests
+
+- [What THIS document asks of another, one line per request: - `TARGET.md` — what must change there and why. It travels to that document when this one is approved. Lines that start with `from` are the other direction — what others asked of this document; the human decides them, kortext ticks them, leave them exactly as they are. Leave this section empty when nothing upstream needs to change]
+
+## Questions for Prime
+
+- [Anything prime must answer before this document can be relied on — leave this section empty when there is nothing]

package/templates/docs/DATABASE.md

@@ -0,0 +1,63 @@
+---
+status: uninitialized
+author: +db-admin
+approver: +architect
+---
+
+# Database Schema
+
+## Database Overview
+
+- **Database Engine:** [e.g., PostgreSQL, MongoDB]
+- **ORM / ODM:** [e.g., Prisma, Mongoose]
+- **Migrations Tool:** [e.g., Prisma Migrate, TypeORM]
+
+## Conventions & Standards
+
+- **Table Naming:** [e.g., snake_case (plural)]
+- **Column Naming:** [e.g., snake_case / camelCase]
+- **Primary Keys:** [e.g., UUID / Auto-increment integer]
+- **Timestamps:** `created_at`, `updated_at` (required)
+- **Personal data:** every column holding personal data carries a `[PII]` marker in its line below, and is repeated in the roll-up section
+
+## Entity-Relationship (ERD) Structure
+
+### Table: `[table_name]`
+
+- **Description:** [What the table does]
+- **Columns:**
+  - `id` (PK, UUID)
+  - `[column_name]` ([type], [nullable/unique]) [PII if personal] - [Description]
+- **Relations:**
+  - `[FK/Relation]` -> `[Related Table]`
+
+### Table: `[table_name_2]`
+
+- **Description:** [What the table does]
+- **Columns:**
+  - `id` (PK)
+
+## Indexes & Performance Optimizations
+
+- **[table_name]:** `[column_name]` (Index Type) -> Reason
+
+## Personal Data Columns
+
+> `LEGAL.md` is run against this list — it decides retention and erasure duties from it.
+> Write `none` when the schema holds no personal data at all.
+
+| Table.Column | What it holds | Why the product needs it |
+| --- | --- | --- |
+| `[table].[column]` | [e.g., the user's email address] | [what breaks without it] |
+
+## Security Policies / Row-Level Security
+
+- [e.g., RLS rules, encryption of sensitive data]
+
+## Change Requests
+
+- [What THIS document asks of another, one line per request: - `TARGET.md` — what must change there and why. It travels to that document when this one is approved. Lines that start with `from` are the other direction — what others asked of this document; the human decides them, kortext ticks them, leave them exactly as they are. Leave this section empty when nothing upstream needs to change]
+
+## Questions for Prime
+
+- [Anything prime must answer before this document can be relied on — leave this section empty when there is nothing]

package/templates/docs/DESIGN.md

@@ -0,0 +1,124 @@
+---
+status: uninitialized
+author: +designer
+approver: +prime
+---
+
+# Design System (Strict & Tokenized Specification)
+
+## Core Tokens (Atomic Values)
+
+> [!WARNING] **FE RULE:**
+> Raw values (HEX, px, rem) are forbidden in code. Only the variable names below may be used.
+
+### Color Palette & Functional Mapping
+
+| Token Name | HEX / RGB | Usage Context |
+| :--- | :--- | :--- |
+| `--color-bg-main` | `[VALUE]` | Main page background |
+| `--color-bg-surface` | `[VALUE]` | Cards, modals, sections |
+| `--color-text-base` | `[VALUE]` | Standard text content |
+| `--color-text-muted` | `[VALUE]` | Placeholders, helper text |
+| `--color-primary` | `[VALUE]` | Primary buttons, active links |
+| `--color-primary-hover` | `[VALUE]` | Hover state (required) |
+| `--color-border` | `[VALUE]` | Divider lines and input borders |
+| `--color-success` | `[VALUE]` | Success messages and icons |
+| `--color-error` | `[VALUE]` | Error messages and input error states |
+
+### Spacing Scale (8px Grid Rule)
+
+> [!WARNING] **FE RULE:**
+> Margin and padding values may only be picked from this scale. In-between values (13px, 7px, etc.) are forbidden.
+
+- `--space-unit`: `8px`
+- `--space-xs`: `4px`  (0.5x)
+- `--space-sm`: `8px`  (1x)
+- `--space-md`: `16px` (2x)
+- `--space-lg`: `24px` (3x)
+- `--space-xl`: `32px` (4x)
+- `--space-2xl`: `48px` (6x)
+
+---
+
+## Typography (The Vertical Rhythm)
+
+> [!WARNING] **FE RULE:**
+> Font-size alone is not enough. Line-height and weight are fixed for each role.
+
+| Role | Font-Family | Size (px) | Line-Height | Weight | Letter-Spacing |
+| :--- | :--- | :--- | :--- | :--- | :--- |
+| `H1` | `[Family]` | `40px` | `1.2` | `700` | `-0.02em` |
+| `H2` | `[Family]` | `32px` | `1.2` | `600` | `-0.01em` |
+| `Body` | `[Family]` | `16px` | `1.5` | `400` | `normal` |
+| `Small` | `[Family]` | `12px` | `1.4` | `400` | `0.01em` |
+| `Label` | `[Family]` | `14px` | `1` | `500` | `0.02em` |
+
+---
+
+## Layout & Grid (Structural Constraints)
+
+| Property | Value | Description |
+| :--- | :--- | :--- |
+| `--container-max` | `1200px` | Maximum width the content is centered within |
+| `--gutter` | `24px` | Gap between columns |
+| `--screen-sm` | `640px` | Mobile breakpoint |
+| `--screen-md` | `768px` | Tablet breakpoint |
+| `--screen-lg` | `1024px` | Desktop breakpoint |
+| `--safe-area` | `16px` | Minimum edge margin on mobile devices |
+
+---
+
+## Surfaces & Components
+
+> Two documents read this section by name: `CONTENT.md` writes copy into the components,
+> `GROWTH.md` measures the surfaces. Name them concretely — an unnamed screen gets no copy
+> and no event.
+
+| Surface (screen) | Purpose | Main components |
+| --- | --- | --- |
+| `[Sign in]` | [what the user does here] | [Input, Button, ErrorText] |
+
+| Component | Purpose | Copy slots it carries |
+| --- | --- | --- |
+| `[EmptyState]` | [when it is shown] | [title, body, action label] |
+
+## UI Components (Strict Atoms)
+
+### Buttons
+
+- **Border-Radius:** `--radius-btn`: `[px]`
+- **Heights:** `Small: 32px`, `Default: 44px`, `Large: 56px`
+- **States (required):**
+  - *Focus:* `outline: 2px solid --color-primary`, `offset: 2px`
+  - *Active:* `transform: scale(0.98)`
+  - *Disabled:* `opacity: 0.5`, `cursor: not-allowed`
+
+### Inputs
+
+- **Border:** `1px solid --color-border`
+- **Focus State:** `border-color: --color-primary`, `box-shadow: [Value]`
+- **Border-Radius:** `--radius-input`: `[px]`
+
+### Effects & Elevation
+
+- `--shadow-sm`: `[CSS Box Shadow Value]`
+- `--shadow-md`: `[CSS Box Shadow Value]`
+- `--transition-base`: `all 0.2s ease-in-out`
+
+---
+
+## Technical Implementation Directives (Red Lines)
+
+1. **No Magic Numbers:** Any value not defined in the design will be rejected.
+2. **Icon Mapping:** Only the `[Icon Set Name]` library may be used. Icon sizes must be one of `16/24/32px`.
+3. **Variable Injection:** Once the designer approves this file, +frontend-developer transfers all values into the `CSS Variables` or `Tailwind Config` file.
+4. **Consistency:** All "shadow", "blur" and "transition" values must use the CSS defined in this file — no ad-hoc variants.
+5. **Zero Tolerance for Hardcoding:** A HEX code found in CSS files counts as a critical error (Blocker).
+
+## Change Requests
+
+- [What THIS document asks of another, one line per request: - `TARGET.md` — what must change there and why. It travels to that document when this one is approved. Lines that start with `from` are the other direction — what others asked of this document; the human decides them, kortext ticks them, leave them exactly as they are. Leave this section empty when nothing upstream needs to change]
+
+## Questions for Prime
+
+- [Anything prime must answer before this document can be relied on — leave this section empty when there is nothing]

package/templates/docs/ENGINEERING.md

@@ -0,0 +1,66 @@
+---
+status: uninitialized
+author: +architect
+approver: +prime
+---
+
+# Engineering
+
+
+## Technical Goals
+
+- **Product Goal:** [Reference to the Product Requirements Document]
+- **Engineering Goal:** [The system's technical targets, e.g., must handle 1k requests per second]
+
+## System Architecture & Boundaries
+
+- **Client ↔ Server:** [Which interfaces will be used?]
+- **Data Flow:** [What route does the data travel?]
+- **Integrations:** [Which external services does it talk to?]
+
+## Component Details
+
+- **Frontend Requirements:** [e.g., SSR required, bundle size max 500kb]
+- **Backend Requirements:** [e.g., a job queue must be used, caching must be enabled]
+- **Data Layer:** [e.g., PostgreSQL 16, Redis 7.x]
+
+## Non-functional Requirements
+
+- **Performance:** [latency budget, throughput target]
+- **Reliability:** [uptime, RTO/RPO]
+- **Security:** [auth model, encryption requirements]
+- **Observability:** [logging, metrics, tracing]
+
+## Decisions
+
+> The engineering decisions this report merges, each with the document it was made in.
+
+- **[Decision]** — [what was chosen, and the alternative that lost] (`SOURCE.md`)
+
+## Compliance Rulings & Conflicts
+
+> Where `LEGAL.md` rules against the design, the contradiction is settled here: either the
+> design changes and this line says how, or it stands and this line names the residual risk
+> and who accepted it. An unresolved ruling is an open question, not a silent omission.
+
+| Ruling | Source | Resolution | Residual risk |
+| --- | --- | --- | --- |
+| [what compliance requires] | `LEGAL.md` | [what changed, or why it stands] | [none / what remains] |
+
+## Technical Constraints & Risks
+
+- **Bottleneck:** [Where could the system slow down?]
+- **Risk:** [Which risks, how likely, and what impact?]
+- **Risk Mitigation:** [How will we manage this risk?]
+
+## Implementation Plan
+
+- [High-level implementation steps — fine-grained detail is worked out per task]
+
+## Change Requests
+
+- [What THIS document asks of another, one line per request: - `TARGET.md` — what must change there and why. It travels to that document when this one is approved. Lines that start with `from` are the other direction — what others asked of this document; the human decides them, kortext ticks them, leave them exactly as they are. Leave this section empty when nothing upstream needs to change]
+
+## Questions for Prime
+
+- [Open questions awaiting a decision — escalated to `prime` or the relevant gate]