musememory 3.2.0 → 3.4.0

package/.agents/context/evidence-ledger.md

@@ -0,0 +1,99 @@
+# Evidence Ledger
+
+## Dashboard
+
+| Category | Count |
+|---|---|
+| DECISION | 1 |
+| CLAIM | 6 |
+| STATUS | 1 |
+
+| Status | Count |
+|---|---|
+| VERIFIED | 6 |
+| ACTIVE | 2 |
+| QUARANTINED | 0 |
+
+**Health score**: 6 / 6 claims verified (100%) — the previous quarantine on EVD-005 is resolved by EVD-008; the remaining two entries are an active fix record and an active decision.
+
+---
+
+### EVD-001 | 2026-11-09 | STATUS
+**Statement**: `memory benchmark` crashed on title-less memories; fixed in the token-budget packing loop.
+**Category**: `STATUS`
+**Confidence**: `[RAW]` — reproduced with `bun bin/musememory.ts benchmark --iterations 5` (TypeError at `item.entry.title.length`), then passed after the null-safe patch.
+**Epistemology**: `[EMPIRICAL]`
+**Evidence**: `src/retrieval/ranking.ts` token estimate; `test/ranking_titleless.test.ts`.
+**Status**: `ACTIVE`
+
+---
+
+### EVD-002 | 2026-11-09 | CLAIM
+**Statement**: On a 34-entry synthetic corpus, retrieval hit the target in the top 3 for 10/10 queries (MRR 0.933, 2.69 ms average, 68% token savings).
+**Category**: `CLAIM`
+**Confidence**: `[RAW]` — scratch benchmark run, output JSON retained in session.
+**Epistemology**: `[EMPIRICAL]`
+**Evidence**: `docs/evidence/2026-11-dogfood.md`; query set and metrics table.
+**Status**: `VERIFIED`
+
+---
+
+### EVD-003 | 2026-11-09 | CLAIM
+**Statement**: On the real 799-memory store, the benchmark reports FTS5 p50 12.81 ms, context assembly p50 15.64 ms, and 99% token compression.
+**Category**: `CLAIM`
+**Confidence**: `[RAW]` — `bun bin/musememory.ts benchmark --iterations 10`.
+**Epistemology**: `[EMPIRICAL]`
+**Evidence**: benchmark table in `docs/evidence/2026-11-dogfood.md`.
+**Status**: `VERIFIED`
+
+---
+
+### EVD-004 | 2026-11-09 | CLAIM
+**Statement**: The engine targets p95 latency: hot cache < 250 µs, FTS5 < 50 ms, context < 50 ms.
+**Category**: `CLAIM`
+**Confidence**: `[RAW]` — 50-iteration benchmark: 176.25 µs, 15.66 ms, 26.69 ms.
+**Epistemology**: `[EMPIRICAL]`
+**Evidence**: `docs/evidence/2026-11-dogfood.md`; benchmark `[TARGET]` line.
+**Status**: `VERIFIED` — the earlier "< 15 ms" claim was a p50 value mislabeled as a bound; it has been corrected.
+
+---
+
+### EVD-005 | 2026-11-09 | CLAIM
+**Statement** *(revised)*: On convention-sensitive coding tasks, an agent that can recall the project's stored conventions produces more correct implementations than the same agent without them.
+**Category**: `CLAIM`
+**Confidence**: `[EMPIRICAL]` — a ten-task condition-blind study (EVD-008) measured 10/10 with memory against 6/10 without it; four tasks discriminated and none regressed.
+**Epistemology**: `[EMPIRICAL]`
+**Evidence**: `docs/evidence/2026-11-outcome-study.md`; task prompts and hidden graders in `.agents/artifacts/outcome-study-2026-11/`.
+**Status**: `VERIFIED` — scoped to convention recall in this study. The original unqualified sentence ("improves coding-agent task success") is too broad for n=10 and has been narrowed rather than marked proven.
+
+---
+
+### EVD-006 | 2026-11-09 | DECISION
+**Statement**: Before starting Wave 28, fix the benchmark defect, record evidence, harden the enclave key lifecycle, then cut a release candidate.
+**Category**: `DECISION`
+**Confidence**: `[RAW]` — based on EVD-001 through EVD-005.
+**Epistemology**: `[EMPIRICAL]`
+**Options considered**: (a) continue feature waves; (b) evidence + security + release gate; (c) release immediately without evidence.
+**Trade-offs**: (b) delays new features but converts unverified claims into measurable ones and protects client data.
+**Evidence**: this ledger + `TECHNICAL_DEBT-wave27.md`.
+**Status**: `ACTIVE`
+
+---
+
+### EVD-007 | 2026-11-09 | CLAIM
+**Statement**: In a 2-task pilot, an agent with memory passed 2/2 hidden tests; the same model without memory passed 1/2 (missed the 32-character tag cap).
+**Category**: `CLAIM`
+**Confidence**: `[RAW]` — hidden Bun tests run against both fixture implementations.
+**Epistemology**: `[EMPIRICAL]`
+**Evidence**: `docs/evidence/2026-11-outcome-pilot.md`.
+**Status**: `VERIFIED` — pilot only (n=2, single run). Superseded as primary evidence by EVD-008.
+
+---
+
+### EVD-008 | 2026-11-09 | CLAIM
+**Statement**: In a ten-task condition-blind study, an agent told to consult memory passed 10/10 hidden tests when the conventions were seeded and 6/10 when they were not; the four discriminating tasks were duration units, UTC dates, the slug length cap and CSV whitespace quoting.
+**Category**: `CLAIM`
+**Confidence**: `[RAW]` — hidden Bun tests graded all twenty solutions mechanically under a non-UTC timezone; Fisher's exact one-sided p = 0.043.
+**Epistemology**: `[EMPIRICAL]`
+**Evidence**: `docs/evidence/2026-11-outcome-study.md`; `.agents/artifacts/outcome-study-2026-11/`.
+**Status**: `VERIFIED` — n=10, one run per arm, one model. Supports EVD-005 within that scope only.

package/.agents/context/index.md

@@ -13,7 +13,7 @@
 | [`product.md`](./product.md) | Product scope, the live MCP tool matrix, the 7 task profiles, the CLI surface, and the trust gates an agent must assume | Understanding user commands, capabilities, and MCP protocols |
 | [`architecture.md`](./architecture.md) | Dual-Scope storage (`.memory/`), SQLite DB, retrieval scoring formula, and file layout | System design, file locations, state machine, and data flow |
 | [`brand.md`](./brand.md) | Persona profiles (`USER.md` archetypes), voice, and presentation rules | Writing prompts, terminal output copy, and user documentation |
-| [`current.md`](./current.md) | Current shipped state (**v3.1.0**), test coverage, and active constraints | Before starting work on bugs, features, or refactors |
+| [`current.md`](./current.md) | Current shipped state (**v3.4.0**), test coverage, and active constraints | Before starting work on bugs, features, or refactors |
 | [`decisions.md`](./decisions.md) | Locked architectural decisions (zero-daemon, file-backed SQLite, atomic I/O) | Evaluating technical choices or refactors |
 | [`roadmap.md`](./roadmap.md) | Planned improvements, ecosystem expansions, and backlog | Scoping new capabilities |
 | [`ticket-plan.md`](./ticket-plan.md) | Detailed ticket plan for the next work waves | Planning a specific wave of work |

package/.agents/context/product.md

@@ -44,6 +44,10 @@ across sessions — without an external database daemon, an account, or a cloud
 | `muse_memory_for_code` | **Code-to-Memory** | Queries all memories, ADRs, constraints and bugs associated with a code file and symbol. |
 | `muse_code_for_memory` | **Memory-to-Code** | Resolves all native code anchors and affected source files for a given memory entry. |
 | `muse_reconcile_anchors` | **Anchor Repair** | Prunes dead references and refreshes structural hashes across the store. |
+| `memory_test_feedback` | **Outcome Loop** | Binds a real test run to the applied memories: green reinforces, red penalizes (regression only for relevant anchors). |
+| `muse_regression_sentry` | **Regression Sentry** | Matches failing tests to `BUG_PRONE_PATTERN` / `DO_NOT_USE` memories and returns remediation playbooks (read-only). |
+| `muse_flaky_tests` | **Flakiness & Drift** | Flaky tests, failure bursts and dependency-file drift before a burst, derived from recorded runs (read-only). |
+| `muse_remediation_playbooks` | **Remediation** | Turns recurring failures into playbook candidates with sentry-derived steps (read-only; persistence is CLI `--apply`). |
 | `muse_profile_list` | **Tool Management** | Lists the task-focused profiles and the tools each one exposes. |
 | `memory_adr_record` / `memory_adr_list` | **Architecture Decisions** | Records and lists living ADRs with drivers, consequences, options considered and native code anchors. |
 | `memory_drift_audit` | **Drift Detection** | Bi-directional documentation ↔ code drift engine across 6 alignment states. |

package/.agents/context/roadmap.md

@@ -53,7 +53,7 @@
 - **Git-Aware Branchable Memory Overlays (`memory branch`)**:
   - Branch-isolated working memory overlays that mirror git branch lifecycles (`feature/*`, `fix/*`).
   - Automated `memory branch-merge` command with interactive semantic contradiction resolution when merging feature branches into `main`.
-- **Agency Multi-Tenant Enclaves (`scope: client`)**:
+- **Agency Multi-Tenant Enclaves** (`scope: client` descoped — ADR-007; vaults are explicit):
   - Cryptographically isolated client memory vaults tailored for multi-client agency delivery (Sol, Jasper, Crew, Nexus).
   - Enforces zero cross-client knowledge contamination while allowing global engineering invariants (`scope: global`) to propagate safely.
 - **Zero-Knowledge Memory Attestation**:
@@ -62,13 +62,15 @@
 ---
 
 ### 4. **R20: Test-Driven Memory Reinforcement & Autonomous Regression Sentry**
-- **Automated CI / Test Harness Integration Loop**:
+- **Automated CI / Test Harness Integration Loop**: **Landed 2026-11-09** (`T-440`, `src/quality/test_feedback.ts`; `memory test-feedback` / `memory_test_feedback`).
   - Binds memory utility ROI directly to test outcomes (`bun test`, `vitest`, `jest`, `cargo test`).
   - Passing tests increment memory confidence and `successful_applications`; failing tests trigger automated dispute and regression tracking.
-- **Negative Anti-Pattern Regression Sentry**:
+- **Negative Anti-Pattern Regression Sentry**: **Landed 2026-11-09** (`T-441`, `src/cognition/sentry.ts`; `memory sentry` / `muse_regression_sentry`).
   - Proactive watchdog matching test failure signatures and stack traces against known `BUG_PRONE_PATTERN` and `DO_NOT_USE` entries, generating immediate remediation playbooks.
-- **Flaky Test & Environment Drift Detector**:
+- **Flaky Test & Environment Drift Detector**: **Landed 2026-11-09** (`T-442`, `src/doctor/flaky.ts`; `memory flaky` / `muse_flaky_tests`).
   - Correlates test intermittency with past dependency upgrades, node runtime versions, and environmental invariants.
+- **Autonomous Remediation Playbooks**: **Landed 2026-11-09** (`T-443`, `src/cognition/remediation.ts`; `memory remediation` / `muse_remediation_playbooks`).
+  - Synthesizes reusable playbooks from recurring failures and persists only resolved signatures by default.
 
 ---
 
@@ -161,14 +163,14 @@
 
 ---
 
-## 📊 Current Status (as of v2.3.0)
+## 📊 Current Status (as of v3.4.0)
 
 | Area | Status | Next Milestone |
 |---|---|---|
-| **Speed & Observability** | ✅ Shipped (sub-2ms, <50µs hot cache, 527 tests) | R25 (--include-abstract, --scope) |
+| **Speed & Observability** | ✅ Shipped (sub-2ms, <50µs hot cache, 1592 tests) | R25 (--include-abstract, --scope) |
 | **Hands-free hooks** | ✅ 3/6 events shipped (GAP-2) | R24 (full plugin registry) |
 | **Trust gates** | ✅ Write-time verify + recall-time freshness gate (GAP-1, GAP-3) + calibrated contradiction engine (T-320) | R23 (extend to multi-repo) |
-| **Version control** | ⚠️ No branch-aware memory | R23 (memory branch/checkout/blame) |
+| **Version control** | ✅ `memory branch/checkout/blame` (R23) + branch-isolated overlays (T-436) | R23 extend (merge/blame depth) |
 | **Compounding** | ✅ 7-state lifecycle + archival ladder | R23 (access-weighted retention, half-life decay) |
 | **Team/SaaS** | ⚠️ Not yet built | R26 (pricing page, Plausible, SaaS prototype) |
 
@@ -185,9 +187,9 @@
 - Reuses `src/provenance.ts` and `src/orchestrator/freshness.ts`.
 
 ### 13. **R29: I/O Budget & NVMe Telemetry**
-- **`memory io`**: bytes-written/day from `/proc/self/io` with an alert threshold — makes SSD wear visible instead of theoretical.
-- YAML dual-write mirror becomes async-batched or opt-out (it currently doubles every write's amplification).
-- Rotation caps for `audit.jsonl` / `observations.jsonl` via existing `src/retention.ts`; `wal_autocheckpoint` tuning note.
+- **`memory io`**: bytes-written/day from `/proc/self/io` with an alert threshold — makes SSD wear visible instead of theoretical. **Landed 2026-11-09** (counters + on-disk SQLite/WAL/audit/observation bytes, `--json`).
+- YAML dual-write mirror becomes async-batched or opt-out (it currently doubles every write's amplification). **Opt-out landed 2026-11-09** (`MUSE_YAML_MIRROR=0` / `openStore({ yamlMirror: false })`); async batching deliberately not implemented because the mirror is the rollback copy.
+- Rotation caps for `audit.jsonl` / `observations.jsonl` via existing `src/retention.ts`; `wal_autocheckpoint` tuning note. **Landed 2026-11-09**: audit rotation (5 MiB segments, five retained, chain anchor on prune); observations already rotated; WAL bounded by `wal_autocheckpoint = 512` and `journal_size_limit = 64 MiB`.
 
 ### 14. **R30: Tombstones & Scoped Deletion (extends A7 suppress)**
 - **Content-hash tombstones on delete**: replayed events cannot resurrect deleted memories (qdrant-memory fence pattern; A7's suppress state already hides the bytes).
@@ -199,6 +201,7 @@
 
 ### 16. **R32: Studio Recall-Debug (extends R15 + A22)**
 - Surface `ranking.ts` per-factor score breakdowns in the Observability Studio: *why* was this memory retrieved.
+- **Landed 2026-11-10 (API half)**: `POST /api/recall-debug` returns the top-K with the full `ScoreFactors` object, `why_retrieved`, and token usage, computed by the canonical `rankAndRetrieveMemories` — the panel cannot disagree with real recall because there is no second scoring path.
 - Eval-harness (R27) results panel. Small diffs on `src/ui.ts`.
 
 
@@ -380,11 +383,11 @@ Exploded ticket plan: `.agents/context/ticket-plan.md` (269 tracked tickets, 21
    - `T-387`: Client configuration recipes & shared+personal scoping governance
 
 9. **Wave 23: Dashboard Overhaul, Workspace Terrain Maps & High-Speed Agent Hub (v3.1.0 Roadmap)**
-   - `T-405`–`T-407`: Cyber-minimalist left-rail poster navigation shell, dual-scope switcher (`project` | `global` | `mesh`), and sub-10ms UI static route serving
-   - `T-408`–`T-410`: Memory Studio 2.0 with instant Canvas Graph ↔ Filterable List toggle, 60fps kinetic-settling physics loop, and 52-week activity calendar heatmap
-   - `T-411`–`T-413`: Workspace Terrain Generator (`stack.md`, `habits.md`, `ownership.md`, `packages.md`, `repo.md`, `logs.md`) & split-pane markdown reader with scanline reindexing
-   - `T-414`–`T-416`: Universal Agents Hub with live auto-discovery (Antigravity, OpenCode, Claude Code, Cursor, Copilot, Hermes), 1-click MCP wiring, and drop-in prompt snippets
-   - `T-417`–`T-419`: Poster-style About panel (WHAT, THE PIECES live facts table, PRIVACY guarantee), multi-agent quick start guide, and interactive CLI command deck
-   - `T-420`–`T-422`: In-memory SQLite read projection cache, tab visibility sensors for zero idle CPU burn, and headless UI performance benchmark suite
+   - `T-451`–`T-453`: Cyber-minimalist left-rail poster navigation shell, dual-scope switcher (`project` | `global` | `mesh`), and sub-10ms UI static route serving
+   - `T-454`–`T-456`: Memory Studio 2.0 with instant Canvas Graph ↔ Filterable List toggle, 60fps kinetic-settling physics loop, and 52-week activity calendar heatmap
+   - `T-457`–`T-459`: Workspace Terrain Generator (`stack.md`, `habits.md`, `ownership.md`, `packages.md`, `repo.md`, `logs.md`) & split-pane markdown reader with scanline reindexing
+   - `T-460`–`T-462`: Universal Agents Hub with live auto-discovery (Antigravity, OpenCode, Claude Code, Cursor, Copilot, Hermes), 1-click MCP wiring, and drop-in prompt snippets
+   - `T-463`–`T-465`: Poster-style About panel (WHAT, THE PIECES live facts table, PRIVACY guarantee), multi-agent quick start guide, and interactive CLI command deck
+   - `T-466`–`T-468`: In-memory SQLite read projection cache, tab visibility sensors for zero idle CPU burn, and headless UI performance benchmark suite
 
 

package/.agents/context/ticket-plan.md

@@ -158,10 +158,10 @@
 
 ## Wave E — P2 TEAM / SERVER / UI
 
-- [ ] T-150 · MCP Streamable HTTP transport (2025-06-18 spec) · mcp.ts · new · F
-- [ ] T-151 · Origin validation + session id + protocol version headers · mcp.ts · new · F
+- [x] T-150 · landed Wave 7 (PR #84) — verified 2026-11-08: `startHttpMcpServer` + `StreamableHTTPServerTransport` (`src/mcp.ts:3353-3494`), covered by `test/mcp_http_transport.test.ts` · mcp.ts · F
+- [x] T-151 · landed Wave 7 (PR #86) — verified 2026-11-08: protocol-version allowlist/echo (`src/mcp.ts:3199,3406-3426`), Origin 403 (`:3428-3445`), Host/DNS-rebind 403 (`:3447-3464`), session id (`:3360`); `test/mcp_http_transport.test.ts:129-365` · mcp.ts · F
 - [ ] T-152 · SSE resumability for long polls · mcp.ts · new · F
-- [ ] T-153 · per-tenant SQLite DB files (team mode) · store, root · new · F
+- [x] T-153 · landed Wave 7 (PR #90) — verified 2026-11-08: `resolveDbFilename` team/tenant DBs (`src/store.ts:138-158`), tenant dirs + `tenant_<id>.db` (`src/root.ts:153-175`), covered by `test/tenant_isolation.test.ts` · store, root · F
 - [ ] T-154 · extend `sync/pool.ts` to HTTP transport · sync · new · F
 - [ ] T-155 · git/YAML-mirror distribution path for team sync · sync · new · F
 - [ ] T-156 · Litestream sidecar backup docs+compose · docs, scripts · new · N
@@ -430,7 +430,7 @@ Two independent senior reviews of the plan (strategic + implementation-executabi
 - [x] T-381 · landed Wave 6 — embeddings spike: validate llama-cpp local embeddings E2E on the spec branch before ANY of T-071/136/137/138/139 ships · branch: feat/wave-6-embeddings-eval-harness · F
 - [ ] T-382 · deprecation policy: `deprecated: true` metadata + alias retention + "removed in vX"; prerequisite for T-201/T-202/T-203 · N
 - [x] T-383 · landed #71 — R1 red test: legacy store + added column throws before YAML write, passes after runMigrations · test/migrate.test.ts · F
-- [ ] T-384 · R2 fixture: 120 memories / 3 projects / 30 superseded / 30 expired → assert `hybridSearch` returns only matching-project non-superseded rows. Baselines T-303 + T-308 + T-140 at once · F
+- [x] T-384 · R2 fixture — verified 2026-11-08: `test/retrieval_engine.test.ts:53-91` builds 3 projects × 40 = 120 entries (20 live / 10 superseded / 10 expired per project) and asserts project isolation at scale through the hybrid path. Variance: 60 expired rows, not 30; driven via `RetrievalEngine.search` rather than `hybridSearch()` directly · F
 - [ ] T-385 · R3 baseline: 40 must-return queries from the principal's own `.memory/` + recall-set grading — gate Wave 2 on the number before T-070 ships · F
 
 **Principal decisions — all resolved 2026-10-14:**
@@ -552,7 +552,7 @@ Canonical detailed artifact: `.agents/artifacts/audit-and-realigned-roadmap-2026
 21. **Wave 20: Quality Telemetry, Honesty Gates & Retrieval Fault Signals** (`T-127`–`T-135`) — [x] Landed on dev
 22. **Wave 21: Invariant Mutation Safety & Constitutional Immunity** (`T-050`, `T-313`) — [x] Landed on dev
 23. **Wave 22: Failure Attribution & Negative Mining** (`T-144`, `T-314`, `T-315`) — [x] Landed on dev
-24. **Wave 23: Dashboard Overhaul, Terrain Maps & High-Speed Agent Hub** (`T-405`–`T-422`) — [ ] Active Roadmap
+24. **Wave 23: Dashboard Overhaul, Terrain Maps & High-Speed Agent Hub** (`T-451`–`T-468`) — [ ] Active Roadmap
 
 ---
 
@@ -560,78 +560,80 @@ Canonical detailed artifact: `.agents/artifacts/audit-and-realigned-roadmap-2026
 
 Source: Deep research on local Agent OS (Ryoku Rashin `http://127.0.0.1:3600`) and architectural design blueprint (`.agents/artifacts/2026-10-26-dashboard-rehaul-rashin-research-and-wave-23-tickets.md`).
 
+> **Renumbered 2026-11-08.** This wave originally used `T-405`–`T-422`, which collided with the already-landed `T-405` (conflicted-memory injection, PR #321) and `T-406` (project-casing, PR #322). The block is now `T-451`–`T-468`; ticket text is unchanged. **PR 1 (`T-451`–`T-453`) implemented locally 2026-11-08** — see the annotations below and v15; not committed/pushed, so not landed.
+
 ## PR 1 / Issue #1: Left-Rail Cyber-Minimalist Shell, Typography & Dual-Scope Switcher
-- [ ] T-405 · UI Shell: Fixed 76px vertical left rail with clean brand mark, numbered sections (`01 OVERVIEW`..`06 ABOUT`), warm-dark aesthetic, JetBrains Mono & Archivo Black typography (English-only, zero kanji) · src/ui.ts · F
-- [ ] T-406 · Dual-Scope Memory Switcher: Header segment toggle `[ Local Project Scope (./.memory) | Global User Scope (~/.memory) | Cross-Project Mesh ]` with instant live refetch · src/ui.ts, src/store.ts, src/root.ts · F
-- [ ] T-407 · Sub-10ms UI Route Architecture: Split single embedded HTML into modular static cached templates with ETag headers and pre-compressed buffers · src/ui.ts · F
+- [x] T-451 · UI Shell: Fixed 76px vertical left rail with clean brand mark, numbered sections (`01 OVERVIEW`..`06 ABOUT`), warm-dark aesthetic, JetBrains Mono & Archivo Black typography (English-only, zero kanji) · src/ui.ts · F — **LOCAL 2026-11-08**: implemented in `src/ui_assets.ts` (rail with six numbered sections + tools group, warm `#0c0a09` palette, Archivo Black / JetBrains Mono, zero emoji in the rail, About anchor); `test/ui.test.ts` T-451; gate 1449/0, tsc clean, build 434 modules; gauntlet CAPPED at the 5-round ceiling (last critic 7.99 — see `.agents/artifacts/gauntlet-wave23-pr1/`); landed PR #337 at `d0c9600`.
+- [x] T-452 · Dual-Scope Memory Switcher: Header segment toggle `[ Local Project Scope (./.memory) | Global User Scope (~/.memory) | Cross-Project Mesh ]` with instant live refetch · src/ui.ts, src/store.ts, src/root.ts · F — **LOCAL 2026-11-08**: segmented switcher wired to `?scope=`; `/api/memories`, `/api/stats`, `/api/current`, `/api/wiki`, `/api/user-profile` and `/api/audit` resolve project / lazy global `~/.memory` / mesh aggregation (`origin_project`, first 200); global and mesh reads open with `skipSyncConstraints`/`skipAutoWiki` and never re-sync a store; mutations stay project-scoped behind a visible scope banner and `requireProjectScope()`; `test/ui.test.ts` T-452 + `test/mesh.test.ts` read-only test; landed PR #337 at `d0c9600`.
+- [x] T-453 · Sub-10ms UI Route Architecture: Split single embedded HTML into modular static cached templates with ETag headers and pre-compressed buffers · src/ui.ts · F — **LOCAL 2026-11-08**: `src/ui_assets.ts` splits CSS / markup / client JS; `/assets/studio.css` + `/assets/studio.js` serve strong ETags, pre-gzipped buffers, `Vary: Accept-Encoding` and 304 fast paths; standalone export inlines the same modules; `test/ui.test.ts` T-453; landed PR #337 at `d0c9600`.
 
 ## PR 2 / Issue #2: Memory Studio 2.0: Instant Graph/List View Toggle, Physics Settling & Activity Heatmap
-- [ ] T-408 · Graph vs List Toggle Switch: Instant segment toggle between interactive Canvas Graph and filterable/sortable data table with live 100ms debounced search · src/ui.ts · F
-- [ ] T-409 · Energy-Settling Canvas Physics Engine: Ring-seeded 60fps force-directed graph with auto-settling kinetic loop (`energy < SETTLE` halts rAF) and pointer capture · src/ui.ts · F
-- [ ] T-410 · Activity Calendar Heatmap & Agent Sessions Card: 52-week activity commit-style calendar for memory mutations + agent session log cards with model tags, timestamps, message counts · src/ui.ts, src/audit.ts · F
+- [x] T-454 · LANDED 2026-11-08 — PR #339 (`3e621fa`): Graph vs List Toggle Switch: Instant segment toggle between interactive Canvas Graph and filterable/sortable data table with live 100ms debounced search · src/ui.ts · F
+- [x] T-455 · LANDED 2026-11-08 — PR #340 (`05b4fdf`): Energy-Settling Canvas Physics Engine: Ring-seeded 60fps force-directed graph with auto-settling kinetic loop (`energy < SETTLE` halts rAF) and pointer capture · src/ui.ts · F
+- [x] T-456 · LANDED 2026-11-08 — PR #341 (`436d198`): Activity Calendar Heatmap & Agent Sessions Card: 52-week activity commit-style calendar for memory mutations + agent session log cards with model tags, timestamps, message counts · src/ui.ts, src/audit.ts · F
 
 ## PR 3 / Issue #3: Workspace Terrain Vault: Auto-Generated Context Maps & Split Markdown Reader
-- [ ] T-411 · Workspace Terrain Generator Engine: Compile deterministic workspace maps: `stack.md`, `habits.md`, `ownership.md`, `packages.md`, `repo.md`, `logs.md` · src/vault/index.ts, src/cli.ts · F
-- [ ] T-412 · Terrain Vault Split-Pane UI: Left file tree with `GEN` badges and right rendered markdown viewer with scanline animation on `REINDEX` · src/ui.ts · F
-- [ ] T-413 · Terrain Token-Efficiency Test & Benchmark: Test suite verifying deterministic generation, zero secret leaks, and token savings · test/vault_terrain.test.ts · F
+- [x] T-457 · LANDED 2026-11-08 — PR #342 (`8006427`): Workspace Terrain Generator Engine: Compile deterministic workspace maps: `stack.md`, `habits.md`, `ownership.md`, `packages.md`, `repo.md`, `logs.md` · src/vault/index.ts, src/cli.ts · F
+- [x] T-458 · LANDED 2026-11-08 — PR #343 (`65113af`): Terrain Vault Split-Pane UI: Left file tree with `GEN` badges and right rendered markdown viewer with scanline animation on `REINDEX` · src/ui.ts · F
+- [x] T-459 · LANDED 2026-11-08 — PR #344: Terrain Token-Efficiency Test & Benchmark: Test suite verifying deterministic generation, zero secret leaks, and token savings · test/vault_terrain.test.ts · F
 
 ## PR 4 / Issue #4: Universal Agents Hub: Detection, 1-Click MCP Wiring & Prompt Snippets
-- [ ] T-414 · Coding Agent Auto-Discovery: Detect installed agents (Antigravity, OpenCode, Claude Code, Cursor, Copilot CLI, Hermes, Crush, Goose, Aider, Codex) with `WIRED`/`UNWIRED`/`ABSENT` status · src/connect.ts, src/ui.ts · F
-- [ ] T-415 · 1-Click Wire / Unwire API: `POST /api/agents/wire` and `POST /api/agents/unwire` writing safe native MCP configs with backup protection · src/ui.ts, src/connect.ts · F
-- [ ] T-416 · "Point Any Agent" Manifest & One-Click Copy Snippet: Display exposed filesystem paths, MCP endpoints, and one-click copyable system prompt snippet for custom LLMs · src/ui.ts · F
+- [x] T-460 · LANDED 2026-11-08 — PR #345: Coding Agent Auto-Discovery: Detect installed agents (Antigravity, OpenCode, Claude Code, Cursor, Copilot CLI, Hermes, Crush, Goose, Aider, Codex) with `WIRED`/`UNWIRED`/`ABSENT` status · src/connect.ts, src/ui.ts · F
+- [x] T-461 · LANDED 2026-11-08 — PR #346: 1-Click Wire / Unwire API: `POST /api/agents/wire` and `POST /api/agents/unwire` writing safe native MCP configs with backup protection · src/ui.ts, src/connect.ts · F
+- [x] T-462 · LANDED 2026-11-08 — PR #347: "Point Any Agent" Manifest & One-Click Copy Snippet: Display exposed filesystem paths, MCP endpoints, and one-click copyable system prompt snippet for custom LLMs · src/ui.ts · F
 
 ## PR 5 / Issue #5: About & Cognitive Mission Control: Architecture Specs, Quick Start & CLI Cheatsheet
-- [ ] T-417 · Poster-Style About Panel: Architectural poster with WHAT (mission), THE PIECES live facts table (SQLite, Scope, Constraints, Tools, Wiki, Audit), and PRIVACY zero-cloud guarantee · src/ui.ts · F
-- [ ] T-418 · Quick-Start Interactive Onboarding: Multi-step interactive setup cards for leading agents (Antigravity, OpenCode, Claude Code, Cursor) with copyable commands · src/ui.ts · F
-- [ ] T-419 · "Go Deeper" Interactive Command Deck: Searchable CLI command palette with copyable one-liners (`muse recall`, `muse capture`, `muse current`, `muse brief`, `muse doctor`, `muse adr`, `muse sync`) · src/ui.ts · F
+- [x] T-463 · LANDED 2026-11-08 — PR #348: Poster-Style About Panel: Architectural poster with WHAT (mission), THE PIECES live facts table (SQLite, Scope, Constraints, Tools, Wiki, Audit), and PRIVACY zero-cloud guarantee · src/ui.ts · F
+- [x] T-464 · LANDED 2026-11-08 — PR #349: Quick-Start Interactive Onboarding: Multi-step interactive setup cards for leading agents (Antigravity, OpenCode, Claude Code, Cursor) with copyable commands · src/ui.ts · F
+- [x] T-465 · LANDED 2026-11-08 — PR #350: "Go Deeper" Interactive Command Deck: Searchable CLI command palette with copyable one-liners (`muse recall`, `muse capture`, `muse current`, `muse brief`, `muse doctor`, `muse adr`, `muse sync`) · src/ui.ts · F
 
 ## PR 6 / Issue #6: System Speed, In-Memory Caching & Performance Hardening
-- [ ] T-420 · In-Memory SQLite Read Projection Cache: Cache UI list and graph responses in memory, invalidated automatically on write transactions · src/ui.ts, src/cache.ts · F
-- [ ] T-421 · Fast-Exit & Visibility Sensors: Document `visibilitychange` listeners to stop all background polling intervals and animation frames when browser tab is inactive · src/ui.ts · F
-- [ ] T-422 · Automated UI Performance Benchmark Suite: Headless benchmark asserting sub-10ms UI responses, 60fps graph rendering, and zero memory leaks · test/ui_performance.test.ts · F
+- [x] T-466 · LANDED 2026-11-08 — PR #351: In-Memory SQLite Read Projection Cache: Cache UI list and graph responses in memory, invalidated automatically on write transactions · src/ui.ts, src/cache.ts · F
+- [x] T-467 · LANDED 2026-11-08 — PR #352: Fast-Exit & Visibility Sensors: Document `visibilitychange` listeners to stop all background polling intervals and animation frames when browser tab is inactive · src/ui.ts · F
+- [x] T-468 · LANDED 2026-11-08 — PR #353: Automated UI Performance Benchmark Suite: Headless benchmark asserting sub-10ms UI responses, 60fps graph rendering, and zero memory leaks · test/ui_performance.test.ts · F
 
 ---
 
-# v14 — STRATEGIC HORIZONS & SOVEREIGN LIFEOS RETIREMENT (WAVES 24–29, 2026-10-26)
+# v14 — STRATEGIC HORIZONS & SOVEREIGN ECOSYSTEM RETIREMENT (WAVES 24–29, 2026-10-26)
 
-Source: Strategic roadmaps, developer experience assets, R17–R20 tri-cognitive horizons, and LifeOS sovereignty audit.
+Source: Strategic roadmaps, developer experience assets, R17–R20 tri-cognitive horizons, and the sovereignty audit.
 
 ## Wave 24: Showcase, Interactive Playground & DX Assets
-- [ ] T-423 · Terminal Showreel & GIF Recording: Script and record high-fidelity terminal demo (`showreel.mp4`, `muse-memory-demo.gif`) on v3.0.0 highlighting failure attribution, negative mining, and HOT.md compounding · assets/, docs/ · N
-- [ ] T-424 · Interactive WASM/SQLite Web Playground: In-browser memory studio preview on `apps/website` with zero backend server dependencies · apps/website · F
-- [ ] T-425 · Competitive Benchmark Showcase: Real-time latency, recall accuracy, and token-cost comparison matrix vs Mem0, Zep, and Letta · apps/website, docs/ · N
-- [ ] T-426 · Multi-Agent Interactive Demos: Interactive agent switcher in website docs demonstrating context injection across Antigravity, OpenCode, Claude Code, and Cursor · apps/website · N
+- [x] T-423 · LANDED 2026-11-08 — PR #362: Terminal Showreel & GIF Recording: Script and record high-fidelity terminal demo (`showreel.mp4`, `muse-memory-demo.gif`) on v3.0.0 highlighting failure attribution, negative mining, and HOT.md compounding · assets/, docs/ · N
+- [x] T-424 · LANDED 2026-11-08 — PR #365: Interactive WASM/SQLite Web Playground: In-browser memory studio preview on `apps/website` with zero backend server dependencies · apps/website · F
+- [x] T-425 · LANDED 2026-11-08 — PR #363: Competitive Benchmark Showcase: Real-time latency, recall accuracy, and token-cost comparison matrix vs Mem0, Zep, and Letta · apps/website, docs/ · N
+- [x] T-426 · LANDED 2026-11-08 — PR #364: Multi-Agent Interactive Demos: Interactive agent switcher in website docs demonstrating context injection across Antigravity, OpenCode, Claude Code, and Cursor · apps/website · N
 
 ## Wave 25: R17 Tri-Cognitive Playbooks & Episodic Narrative Horizon
-- [ ] T-427 · Procedural Playbook Engine (`ProceduralMemory`): Model and persist executable step trajectories, pre-conditions, verification assertions, and rollback recipes · src/cognition/playbooks.ts · F
-- [ ] T-428 · Episodic Causal Narrative Horizon: Group linear observations into causal episodes (`Goal ➔ Hypothesis ➔ Trajectory ➔ Verification ➔ Retrospective`) · src/cognition/episodes.ts · F
-- [ ] T-429 · Bi-Temporal Validity Windows: Stored dual timestamps (`asserted_at` vs `valid_from`/`valid_until`) allowing historical queries without clobbering active state · src/schema.ts, src/store.ts · F
-- [ ] T-430 · Ebbinghaus Utility-Reinforced Cognitive Forgetting Curve: Exponential decay for unverified candidate notes; reinforcement for green test executions · src/quality/decay.ts · F
-- [ ] T-431 · CLI & MCP Playbook Commands: Wire `memory playbook --run <id>`, `memory playbook --list`, and `muse_playbook_recall` / `muse_playbook_record` MCP tools · src/cli/playbook.ts, src/mcp.ts · F
+- [x] T-427 · LANDED 2026-11-08 — PR #356: Procedural Playbook Engine (`ProceduralMemory`): Model and persist executable step trajectories, pre-conditions, verification assertions, and rollback recipes · src/cognition/playbooks.ts · F
+- [x] T-428 · LANDED 2026-11-08 (wired: memory briefing prints recent episodes) — PR #357: Episodic Causal Narrative Horizon: Group linear observations into causal episodes (`Goal ➔ Hypothesis ➔ Trajectory ➔ Verification ➔ Retrospective`) · src/cognition/episodes.ts · F
+- [x] T-429 · LANDED 2026-11-08 (wired: memory briefing prints recent episodes) — PR #359: Bi-Temporal Validity Windows: Stored dual timestamps (`asserted_at` vs `valid_from`/`valid_until`) allowing historical queries without clobbering active state · src/schema.ts, src/store.ts · F
+- [x] T-430 · LANDED 2026-11-08 (wired: memory briefing prints recent episodes) — PR #358: Ebbinghaus Utility-Reinforced Cognitive Forgetting Curve: Exponential decay for unverified candidate notes; reinforcement for green test executions · src/quality/decay.ts · F
+- [x] T-431 · LANDED 2026-11-08 — PR #360 + #361: CLI & MCP Playbook Commands: Wire `memory playbook --run <id>`, `memory playbook --list`, and `muse_playbook_recall` / `muse_playbook_record` MCP tools · src/cli/playbook.ts, src/mcp.ts · F
 
 ## Wave 26: R18 AST Associative Callgraph Retrieval & Speculative Pre-Flight
-- [ ] T-432 · Recursive SQLite CTE Associative Expansion (Zero-Daemon HippoRAG): 2-hop associative graph traversal using in-process SQLite recursive CTEs (`WITH RECURSIVE call_tree AS (...)`) · src/sqlite.ts, src/retrieval/ · F
-- [ ] T-433 · Speculative Pre-Flight Context Push: Git and editor hooks pre-calculating token-budgeted memory knapsacks on file opening or branch switching · src/hooks/preflight.ts · F
-- [ ] T-434 · Cross-File Symbol Blast-Radius Risk Scoring: AST identifier cross-reference scoring to rate modification risk for proposed code changes · src/anchors/blast_radius.ts · F
-- [ ] T-435 · AST-Anchored Invariant Auto-Recall: Bind exported symbols and route interfaces directly to governing ADRs and architectural invariants · src/retrieval/anchors.ts · F
+- [x] T-432 · LANDED 2026-11-09 — direct dev 2389985: Recursive SQLite CTE Associative Expansion (Zero-Daemon HippoRAG): 2-hop associative graph traversal using in-process SQLite recursive CTEs (`WITH RECURSIVE call_tree AS (...)`) · src/associative.ts, src/retrieval.ts · F
+- [x] T-433 · LANDED 2026-11-09 — PR #370: Speculative Pre-Flight Context Push: Pre-flight context builder (CLI; hook wiring deferred) on file opening or branch switching · src/hooks/preflight.ts · F
+- [x] T-434 · LANDED 2026-11-09 — PR #371: Cross-File Symbol Blast-Radius Risk Scoring: File/symbol blast-radius heuristic (registry AST integration deferred) to rate modification risk for proposed code changes · src/intelligence/blast_risk.ts · F
+- [x] T-435 · LANDED 2026-11-09 — PR #372: Anchor-Matched Invariant Auto-Recall: Bind exported symbols and route interfaces directly to governing ADRs and architectural invariants · src/retrieval/anchors.ts · F
 
 ## Wave 27: R19 Git-Branchable Memories & Multi-Tenant Agency Enclaves
-- [ ] T-436 · Branchable Memory Overlays (`memory branch` / `branch-merge`): Branch-isolated memory layers tracking git feature branch lifecycles · src/store/branch.ts · F
-- [ ] T-437 · Multi-Tenant Agency Enclaves (`scope: client`): Cryptographically segregated client vaults across Council divisions (Sol, Jasper, Crew, Nexus) · src/store/enclaves.ts · F
-- [ ] T-438 · Zero-Knowledge Memory Attestation: Cryptographic SHA-256 signing of SyncPackets with tamper-evident audit chains for client handoffs · src/sync/attestation.ts · F
-- [ ] T-439 · Semantic Contradiction Merge Resolver: Interactive 3-way semantic conflict resolution on branch merge into `main` · src/quality/branch_merge.ts · F
+- [x] T-436 · LANDED 2026-11-09 — PR #377: Branchable Memory Overlays (`memory overlay` with `set`/`rm`; merge via T-439): Branch-isolated memory layers tracking git feature branch lifecycles · src/store/branch.ts · F
+- [x] T-437 · LANDED 2026-11-09 — PR #378: Multi-Tenant Agency Enclaves: authenticated encrypted client vaults (store-key, at-rest); `scope: client` descoped (ADR-007) · src/store/enclaves.ts · F
+- [x] T-438 · LANDED 2026-11-09 — PR #379: Signed Packet Attestation v2: Ed25519 over canonical hashes with seq/head/key-id with tamper-evident audit chains for client handoffs · src/sync/attestation.ts · F
+- [x] T-439 · LANDED 2026-11-09 — PR #380: Semantic Contradiction Merge Resolver: Interactive 3-way semantic conflict resolution on branch merge into `main` · src/quality/branch_merge.ts · F
 
 ## Wave 28: R20 Test-Driven Reinforcement & Regression Sentry
-- [ ] T-440 · Automated CI / Test Harness Integration: Bind memory utility directly to real test outcomes (`bun test`, `vitest`, `cargo test`); increment ROI on green, decay on red · src/quality/test_feedback.ts · F
-- [ ] T-441 · Negative Anti-Pattern Regression Sentry: Proactive watchdog matching test failures against `BUG_PRONE_PATTERN` and `DO_NOT_USE` records · src/cognition/sentry.ts · F
-- [ ] T-442 · Flaky Test & Environment Drift Detector: Correlate test flakiness and failure bursts with dependency updates and environmental churn · src/doctor/flaky.ts · F
-- [ ] T-443 · Autonomous Remediation Playbook Generator: Automatically synthesize recurring test fix sequences into verified reusable playbooks · src/cognition/remediation.ts · F
+- [x] T-440 · LANDED 2026-11-09 — Automated CI / Test Harness Integration: `src/quality/test_feedback.ts` parses bun/vitest/jest/cargo/pytest/go output and binds ROI to real outcomes; CLI `test-feedback` + MCP `memory_test_feedback` · F
+- [x] T-441 · LANDED 2026-11-09 — Negative Anti-Pattern Regression Sentry: read-only matching against BUG_PRONE_PATTERN / DO_NOT_USE / failed-approach memories with remediation playbooks; CLI `sentry` + MCP `muse_regression_sentry` · src/cognition/sentry.ts · F
+- [x] T-442 · LANDED 2026-11-09 — Flaky Test & Environment Drift Detector: `src/doctor/flaky.ts` derives flaky tests (per command), failure bursts and dependency-file drift from the `test_feedback` ledger; CLI `flaky` + MCP `muse_flaky_tests` · F
+- [x] T-443 · LANDED 2026-11-09 — Autonomous Remediation Playbook Generator: `src/cognition/remediation.ts` synthesizes playbook candidates from recurring failures using sentry guidance; applies resolved candidates only; CLI `remediation` + MCP `muse_remediation_playbooks` · F
 
 ## Wave 29: Sovereign Ecosystem Migration & Decommissioning
 - [x] T-444 · Sovereign Persona & Memory Ingestion: Synthesize user persona into `~/.memory/USER.md` and SQLite memory store; legacy import tool permanently removed from source · F
 - [x] T-445 · Native Vibeguard CLI (`memory scan-secrets`): Standalone secret scanning binary in `musememory` with zero external dependencies · src/cli/secrets.ts · F
 - [x] T-446 · Machine Terrain Collector in `src/vault/`: Incorporate hardware, toolchain, and package scans into unified workspace maps (`memory terrain`) · src/vault/system.ts · F
-- [x] T-447 · Global Governance De-LifeOSification: Remove all legacy imports and rewrite governance directives to point purely to Muse Memory and Muse Skills · ~/.agents/AGENTS.md · N
+- [x] T-447 · Global Governance Decommissioning: Remove all legacy imports and rewrite governance directives to point purely to Muse Memory and Muse Skills · ~/.agents/AGENTS.md · N
 - [x] T-448 · Sovereign Ecosystem Decommissioning Gate: Verification audit confirming zero dangling runtime dependencies and legacy tool removal · test/sovereignty_gate.test.ts · F
 
 ## v14 Totals
@@ -644,3 +646,101 @@ Source: Strategic roadmaps, developer experience assets, R17–R20 tri-cognitive
 
 
 
+
+## Late additions (post-v3.2.0)
+
+- [x] T-449 · LANDED 2026-11-08 via PR #337 (`c0f7aef`, caller scan) + PR #338 (`94620895`, home-store guard, doc-link skip) · triage filed as GitHub issue #336 — test hermeticity: 9 local failures from `~/.memory` / `~/.agents` ancestor leakage (8 env-contamination) + 1 intelligence regex flake (stateful `g`-flag `RegExp` + definition counted as caller). Dry-run only; no code changed. Branch: `new` · F
+- [ ] T-450 · DEFERRED: scope which `.agents/` subpaths should be gitignored (e.g. artifacts, plans, context/current.md) vs. kept tracked (standards, skills). Audit consumer impact (collaborators, DOX, skills) before removing any. No execution until user scopes. Branch: `new` · N
+
+---
+
+# v15 — VERIFIED REMAINDER AUDIT (2026-11-08)
+
+Source: per-ticket verification of **every unchecked ticket in this plan** against the live tree (`src/`, `test/`, `apps/website/`, `Dockerfile`, `.gitignore`). Evidence rules: a ticket-number comment alone was **not** accepted; a module path only counted if the behaviour exists; a test file only counted if it asserts behaviour. Four tickets were found already implemented and are now marked done; the rest are classified below so no future pass re-litigates them.
+
+## Renumber applied in this pass
+
+Wave 23 (v13) originally used `T-405`–`T-422`, colliding with the landed `T-405` (conflicted injection, PR #321) and `T-406` (project casing, PR #322). The block is now:
+
+| old | new | old | new |
+|---|---|---|---|
+| T-405 | T-451 | T-414 | T-460 |
+| T-406 | T-452 | T-415 | T-461 |
+| T-407 | T-453 | T-416 | T-462 |
+| T-408 | T-454 | T-417 | T-463 |
+| T-409 | T-455 | T-418 | T-464 |
+| T-410 | T-456 | T-419 | T-465 |
+| T-411 | T-457 | T-420 | T-466 |
+| T-412 | T-458 | T-421 | T-467 |
+| T-413 | T-459 | T-422 | T-468 |
+
+References updated: this file, `.agents/context/roadmap.md`, `.agents/context/current.md`. The historical blueprint artifact keeps its original IDs plus a pointer note; `HANDOFF.md`'s `T-405`/`T-406` mentions are the *unrelated landed fixes* and were deliberately left untouched.
+
+## Status summary
+
+| Outcome | Count | Tickets |
+|---|---|---|
+| Implemented → marked done | 4 | `T-150`, `T-151`, `T-153`, `T-384` |
+| Partial (real code, incomplete scope) | 15 | below |
+| Not implemented | 86 | 83 remain; `T-451`–`T-453` implemented locally on 2026-11-08 |
+| Dropped by principal decision | 1 | `T-163` (D3: dashboard keeps writes) |
+| Filed / deferred | 2 | `T-449` (issue #336), `T-450` (needs scoping) |
+| **Unique open at audit start** | **108** | **104 remain unchecked after this pass** |
+
+## Implemented (now marked `[x]`)
+
+| ID | Evidence |
+|---|---|
+| T-150 | `src/mcp.ts:3353-3494` (`startHttpMcpServer`, `StreamableHTTPServerTransport`); `test/mcp_http_transport.test.ts` |
+| T-151 | `src/mcp.ts:3199,3360,3406-3464` (protocol allowlist, session id, Origin/Host guards); `test/mcp_http_transport.test.ts:129-365` |
+| T-153 | `src/store.ts:138-158`, `src/root.ts:153-175`; `test/tenant_isolation.test.ts` |
+| T-384 | `test/retrieval_engine.test.ts:53-91` (3 projects × 40 entries; 20 live / 10 superseded / 10 expired per project) |
+
+## Partial
+
+| ID | Evidence | Remaining gap |
+|---|---|---|
+| T-033 | `src/optimize.ts:297-305` prunes via `deleteEntry`; `src/store.ts:1867-1926` tombstones | no optimize-side tombstone/restore call or test |
+| T-203 | CLI `handleRecallCommand` delegates to `queryContext` (`src/cli/retrieval.ts:155`); MCP `memory_recall` separate (`src/mcp.ts:1956`) | no deprecation notice / formal alias |
+| T-176 | `src/cli/versioning.ts:53-121` branch refs + checkout | no store-level fork/merge of entry state |
+| T-178 | RRF A/B weight presets (`src/retrieval/rrf.ts:22-37`) | no graph-on/off gate in the eval harness |
+| T-179 | wikilink expansion (`src/retrieval.ts:1374-1460`) | no HRR half, no T-178 gating |
+| T-316 | write-time `linked_memory_ids` (`src/store.ts:1131-1176`) | scores session/tag/lexical overlap only; `store.ts` never imports `plasticity.ts` |
+| T-323 | anchored entries re-sorted by truncation rank (`src/orchestrator/context.ts:424`); freshness gate withholds orphaned anchors | `anchor.status` itself is never consulted |
+| T-369 | claims relabelled `[CLAIMED]` (`src/benchmark/suite.ts:210`) | assertions still `>= 0` (`test/benchmark.test.ts:50-71`) — no threshold gate |
+| T-378 | `LspProvider` now used (`test/intelligence.test.ts:175`) | 5 dead imports remain (`quality`, `settings`, `orchestrator`) |
+| T-385 | recall-set + latency grading (`src/quality/eval.ts`, `test/recall-eval.test.ts`) | fixture is 20 synthetic queries, not 40 from the principal's store |
+| T-460 | detection engine (`src/agents/detect.ts:82-123`) | no `WIRED`/`UNWIRED`/`ABSENT` vocabulary, no hub UI |
+| T-423 | `apps/website/public/showreel.mp4`, `assets/muse-memory-demo.gif` | not a terminal recording; mp4 not under `assets/` |
+| T-425 | capability matrix (`apps/website/src/pages/compare.astro:37`) | no competitor rows, no measured latency/recall/token figures |
+| T-429 | `valid_from`/`valid_to` (`src/sqlite.ts:150,375`) | no `asserted_at` / `valid_until` split |
+| T-434 | blast-radius via `src/intelligence/adapters/*` + `memory_code_intel_blast_radius` (`src/mcp.ts:1236`) | not the AST cross-file risk module at the named path |
+
+## Not implemented (86)
+
+**Wave A/B/C/D leftovers (7).** `T-016` no dispatch-coverage matrix (only name parity in `test/connect_tools_alignment.test.ts:24`); `T-034` no `secure_delete` in `src/`; `T-048` no wake gate/actionable-keys allowlist; `T-051` no `memory_pressure` event; `T-201` all 30 detectors live (`src/migrator/detect.ts:15-374`); `T-202` 52 registry entries, none frozen (`src/agents/registry.ts`); `T-205` `Dockerfile:9-11` still runs `bun test` + `tsc --noEmit`.
+
+**Wave E team/server/interop (14).** `T-152` no `Last-Event-ID`/event store (`src/daemon.ts:27-40` is plain SSE); `T-154` `src/sync/pool.ts:12-85` filesystem-only; `T-155` no git/YAML distribution path; `T-156` no Litestream service (`docker-compose.yml:1-10`); `T-168` no Hermes provider; `T-169` no Muse-MCP adapter; `T-170` no catalog packaging; `T-171` no qdrant adapter (`src/store/` is only `sidecars.ts`); `T-172` checksum validation only (`src/sync/federation.ts:65-82`), no probes/lock scope; `T-173` no observer/observed relation; `T-174` no peer/namespace columns (`src/schema.ts`); `T-175` only USER.md reserved slots (`src/orchestrator/context.ts:386-390`); `T-180`/`T-181` no spec documents.
+
+**Dashboard (9).** `T-157`–`T-162` no route/panel for recall-debug, lineage, eval, lifecycle tower, config honesty, or team mesh (`src/ui.ts:156-778` routes, `:1103-1115` tabs); `T-164` consolidation is on-demand only (`src/consolidate.ts:51`); `T-165` cadence is N-day + inactivity, no turn trigger (`src/optimize.ts:98-131`); `T-166` `crontabLine` has no ownership token (`src/routines.ts:71-73`).
+
+**Quality/scale (14).** `T-317` no PPR/restart set; `T-318` telemetry exists (`src/quality/telemetry.ts:177-195`) but no auto-tuner; `T-319` no `is_inference`/`parent_ids`/review queue (`src/sqlite.ts:138-165`); `T-322` anchor audit re-reads per anchor (`src/anchors/resolver.ts:287`), no cache; `T-325` `rollupTemporal` has no period filter (`src/compounding/temporal.ts:171-181`); `T-326` tiers 0/1 call full `queryContext` (`src/retrieval/tiered.ts:49`); `T-327` `list()` has no paging (`src/store.ts:638-641`); `T-328` clock is `length + Date.now()` (`src/sync/engine.ts:118-120`); `T-329` no episode table / retrieval unit; `T-330` no `absent` type or role scoping; `T-332` no packet signature/peer allowlist (`src/sync/packet.ts:72-103`); `T-333` `confirm()` never extends expiry (`src/store.ts:1356-1387`); `T-334` no `write_origin`; `T-335` no `visible_until` window (`src/store.ts:224-266`).
+
+**Test integrity (8).** `T-371` (lying security tests, `test/security_hardening.test.ts:88-100,127`), `T-372` (tautological doctor test, `test/doctor.test.ts:11-16`), `T-373` (grep-only UI asserts, `test/ui.test.ts:52-218`), `T-374` (`toBeDefined`/`>= 0`, `test/health.test.ts:221-228`, `test/benchmark.test.ts:47-72`), `T-375` (`Array.isArray`-only, `test/ui.test.ts`, `test/mcp.test.ts:72-131`, `test/mesh.test.ts:349`), `T-376` (duplicate suites, `graph*`, `panda_loader`/`upgrade`, `retrieval*`, `sqlite_primary`/`store`), `T-377` (`markStale` imported never called, `test/sqlite_primary.test.ts:4,47-90`), and `T-382` (no `deprecated` metadata anywhere in `src/`). All seven T-371–T-377 defects are still present, not fixed.
+
+**Wave 23 (14 remaining; new IDs).** `T-451`–`T-453` are implemented locally (rail, dual-scope switcher, modular ETag/gzip assets — see the v13 annotations and `current.md`). `T-454`–`T-459` and `T-461`–`T-468` remain: no graph/list toggle, no kinetic-settling loop, no activity heatmap, no terrain pane, no agents-hub wire/unwire routes, no About poster / quick-start / command deck, no UI projection cache, no `visibilitychange` idling, and no `test/ui_performance.test.ts`. `src/vault/` still writes only `system.md` — none of the six terrain maps exist.
+
+**Wave 24–29 (17).** `T-424` no playground/WASM page; `T-426` no agent-switcher demo; `T-427` no `src/cognition/playbooks.ts`; `T-428` no `src/cognition/episodes.ts`; `T-430` no `src/quality/decay.ts`; `T-431` no `src/cli/playbook.ts` or playbook MCP tools; `T-432` no `WITH RECURSIVE` in `src/`; `T-433` no `src/hooks/preflight.ts`; `T-435` no `src/retrieval/anchors.ts`; `T-436` no `src/store/branch.ts`; `T-437` no `src/store/enclaves.ts`; `T-438` no `src/sync/attestation.ts`; `T-439` no `src/quality/branch_merge.ts`; `T-440` no `src/quality/test_feedback.ts`; `T-441` no `src/cognition/sentry.ts`; `T-442` no flaky-test detector (`src/doctor` is a flat module); `T-443` no `src/cognition/remediation.ts`.
+
+## Dropped by decision
+
+- `T-163` — read-only dashboard invariant. Principal decision **D3**: the dashboard keeps its 12 write endpoints; the invariant was dropped. The ticket text is stale; no code should be written for it.
+
+## Filed / deferred
+
+- `T-449` — **OPEN**, GitHub issue #336. Triage only so far (9 local failures: 8 env-contamination from `~/.memory`/`~/.agents` ancestors, 1 intelligence regex flake). No fix landed.
+- `T-450` — **DEFERRED** pending principal scoping of `.agents/` gitignore vs tracked paths. `.gitignore:80-81` still tracks all of `.agents/`.
+
+## What this changes about "next"
+
+Wave 23 **PR 1 is now implemented locally** (`T-451`–`T-453`: rail, dual-scope switcher, modular cached assets), so the next build is **PR 2 — `T-454`–`T-456`** (graph/list toggle, kinetic-settling loop, activity heatmap). `T-316` remains the only already-unblocked quality ticket (partial: Hebbian half missing) and `T-318` is missing. The only open filed defect is `T-449`. The 86 "not implemented" tickets are accurate backlog, not stale checkboxes.

package/.agents/plans/2026-10-20-wave-22-failure-attribution-negative-mining-design.md

@@ -195,4 +195,4 @@ Log four distinct operations to `.memory/audit.jsonl`:
 2. `bun test` (full suite, 527+ tests green)
 3. `bunx tsc --noEmit` (clean, 0 type errors)
 4. `bun run build` (build completes without warnings)
-5. `bun ~/.config/LIFEOS/runtime/TOOLS/SecretScan.ts .` (0 secret leaks)
+5. `memory scan-secrets .` (0 secret leaks)

package/.agents/plans/2026-10-20-wave-22-failure-attribution-negative-mining-plan.md

@@ -244,7 +244,7 @@ Run: `bun run build`
 Expected: Clean build, 0 warnings.
 
 - [ ] **Step 4: Run pre-ship SecretScan**
-Run: `bun ~/.config/LIFEOS/runtime/TOOLS/SecretScan.ts .`
+Run: `memory scan-secrets .`
 Expected: 0 secrets detected.
 
 ---

package/.agents/standards/README.md

@@ -7,20 +7,25 @@
 > Load a standard on demand, not up front. Each one states what it governs and
 > when to open it.
 
-## Routored from `AGENTS.md`
+## Routed from `AGENTS.md`
 
 | Standard | Governs |
 | :--- | :--- |
 | [`execution-kernel.md`](./execution-kernel.md) | Judgment laws, refactoring discipline, code-complete standards, byte-capping. |
+| [`anti-patterns.md`](./anti-patterns.md) | Negative constraints, YAGNI, forbidden dependencies, Anti-Deltas. |
+| [`boundary-governance.md`](./boundary-governance.md) | Goal, facts, method, proof and blast-radius checkpoints before merge. |
 | [`security-vibeguard.md`](./security-vibeguard.md) | Secret isolation, the Destructive Command Gate, untrusted tool output. |
 | [`system-design.md`](./system-design.md) | Domain modelling, resilience, migration rehearsal, schemas. |
 | [`workflows.md`](./workflows.md) | Scaled tiers, the 5-phase pipeline, PR-per-feature and the post-merge sequence. |
+| [`test-failure-audit.md`](./test-failure-audit.md) | Repeated red is a signal to audit your own outputs, triage root cause, then fix. |
+| [`language-policy.md`](./language-policy.md) | English working language; narration between tool calls counts as output. |
 | [`git-workflow.md`](./git-workflow.md) | Branch lifecycle, commit standards, SemVer. |
 | [`landing-gate.md`](./landing-gate.md) | The delivery contract: a commit is not a delivery. `bun run check:landed` proves work reached the remote before *landed* may be used. |
 | [`dox-hierarchy.md`](./dox-hierarchy.md) | Reading order, child document shape, the closeout checklist, the pruning loop. |
 | [`council-roles.md`](./council-roles.md) | Muse / Sol / Jasper / Crew / Nexus responsibilities and subagent dispatch policy. |
 | [`memory-context.md`](./memory-context.md) | Context hygiene, the `.memory` store lifecycle, durable proposals. |
 | [`frontend-astro.md`](./frontend-astro.md) | The `apps/website` stack: the `/musememory` base-path rule, generated assets, the a11y and visual gates. |
+| [`visual-inspection.md`](./visual-inspection.md) | Rendered-output verification for UI work; screenshots live in `.agents/brand/screenshots/`. |
 
 The brand and accessibility standards live in [`../brand/`](../brand/) and are
 routed from the same place: `design.md`, `bem-conventions.md`, `a11y.md` and