owfadev 0.3.1 → 0.4.0

package/{.meta/plugins/core → payloads/personal}/notes/PLUGIN.yaml

@@ -1,16 +1,16 @@
 id: notes
 schema_version: 1
-version: 0.15
+version: 0.16
 bridge: 按需
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "wiki/notes/ — native notes zone"
 fields: {}
 commands:
-  - save
-inject: "Native notes `wiki/notes/`: knowledge whose provenance is the wiki itself, subdivided by the type field (open form vocabulary, default values in registry); no-regeneration zone, commands append-only and never modify; session and profile types do not land in this zone (they belong to the sessions / user-profile territories); notes on-demand bridge — domain plugins one-way derive high-value conclusions into this zone on an emergence basis, and must back-link the source page (constitutional principle 11, format owned by this bridge)"
+  - owfa-save
+inject: "Native notes `wiki/notes/`: knowledge born in the wiki, open `type` vocabulary (defaults in registry); commands append, never modify; session/profile pages live in their own territories; domain derivations must back-link the source; details PLUGIN.md"
 usage:
   - Landing spot `wiki/notes/<title>.md`, file name free (named by humans); type form vocabulary in registry (open, self-extended by instances), territory values do not land in this zone
   - Append-only: commands never rewrite an existing note wholesale; updating = append-style merge under user instruction (trace left in the body) or manual human edits

package/{.meta/plugins/core → payloads/personal}/sessions/PLUGIN.md

@@ -52,8 +52,9 @@ The performance budget for volumetric fog on low-end machines?
 
 ## Changelog
 
+- 0.10 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.9 2026-09-23: added the wiki dependency edge — inner plugins attach to wiki, aligning with the domain 0.1 declaration; missed in the 2026-09-22 domainization batch
-- 0.8 2026-09-13: made the usage sample pointer explicit — added the `.meta/plugins/sessions/PLUGIN.md` path, zero priors
+- 0.8 2026-09-13: made the usage sample pointer explicit — added the `.owfa/plugins/sessions/PLUGIN.md` path, zero priors
 - 0.7 2026-09-13: inject source moved to the manifest — deleted the Checks, Usage, Inject, Attachments sections; md returns to pure documentation
 - 0.6 2026-09-13: established the Usage section — write-side contracts handed to command injection regions for projection, single text source
 - 0.5 2026-09-12: manifest dropped layer — layering abolished: injection order changed to dependency topology plus alphabetical, direction checks removed

package/{.meta/plugins/core → payloads/personal}/sessions/PLUGIN.yaml

@@ -1,19 +1,19 @@
 id: sessions
 schema_version: 1
-version: 0.9
+version: 0.10
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "wiki/sessions/ — native sessions zone, session-type backbone pages"
 fields:
   participants: "YAML list, actor convention (human:name / process:flow name / agent/model id), the multi-agent collaboration extension point"
 commands:
-  - save
-inject: "Native sessions `wiki/sessions/`: session backbone pages (type: session, participants required = actor list, default naming YYYY-MM-DD-<topic>); high-value topics promoted to standalone `wiki/notes/` pages with a back-link; no-regeneration zone, commands append-only and never modify"
+  - owfa-save
+inject: "Native sessions `wiki/sessions/`: session backbone pages (`type: session`, `participants` required, named YYYY-MM-DD-<topic>); high-value topics promoted to `wiki/notes/` with a back-link; commands append, never modify"
 usage:
   - Landing spot `wiki/sessions/YYYY-MM-DD-<topic>.md` (default naming), type: session, participants required (actor list)
-  - Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.meta/plugins/sessions/PLUGIN.md`)
+  - Backbone page five-section shape: Core Conclusions / Decisions & Rationale / Non-obvious Insights / Open Questions / Related Pages (full-shape sample in the Example section of `.owfa/plugins/sessions/PLUGIN.md`)
   - Standalone high-value topics promoted to `wiki/notes/` pages, the backbone page keeping a wikilink; dedupe before promotion
 checks:
   - Mechanical (covered by audit): session-type pages outside `wiki/sessions/` (or the reverse) → warning; participants missing or entries violating the actor convention → warning

package/{.meta/plugins/core → payloads/personal}/structure/PLUGIN.md

@@ -24,6 +24,8 @@
 
 ## Changelog
 
+- 0.5 2026-11-12: attached-audit fix — declaration keys written without the trailing slash no longer double-report as drift (undeclared + nonexistent); the directory name is the semantics, the slash is form
+- 0.4 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.3 2026-09-22: domain-ization — the first paragraph gained in-domain governance positioning, transitively belonging to the vault domain, governance page inside and target outside; depends unchanged, transitivity means membership
 - 0.2 2026-09-14: territory moved into wiki — declaration page `wiki/structure.md`, frontmatter structure block mapping machine-readable; drift detection upgraded from a semantic item to the attached-audit script, i.e. the declaration diff; depends gained wiki; the shell's natural-language declaration retired
 - 0.1 2026-09-14: established — from the user-write manuscript, i.e. the four presets plus the AGENTS declaration, distilled with the vault governance discussion; the layout responsibility separated from the vault concept plugin, symmetric to the wiki side's concept-and-structure layering

package/{.meta/plugins/core → payloads/personal}/structure/PLUGIN.yaml

@@ -1,15 +1,15 @@
 id: structure
 schema_version: 1
-version: 0.3
+version: 0.5
 depends:
   - vault
   - wiki
-updated: 2026-10-06
+updated: 2026-11-12
 attachment:
   - "wiki/structure.md — structure declaration page (the vault layout declaration proper: frontmatter structure block mapping + body preset notes)"
   - "scripts/check.py — attached audit (declaration diff / territory placement / declaration-page existence)"
 fields: {}
-inject: "vault structure declaration `wiki/structure.md` (type: structure): frontmatter `structure` block mapping = directory → one-line semantics, body records presets (date/format/type/mixed, nestable) and notes; agents read this page before placing assets, placing them by position; page absent = flat tolerance; after the human adjusts vault, sync the declaration, check does a mechanical diff (undeclared top-level directory / declared-but-nonexistent directory → warning)"
+inject: "vault layout declaration `wiki/structure.md` (directory → one-line semantics + presets): read it before placing assets and place by position (absent = flat tolerance); sync it after the human reorganizes vault; details PLUGIN.md"
 usage:
   - How to declare: frontmatter `structure` block mapping (key = top-level directory name with trailing slash, value = one-line semantics); the body records preset choices and nesting-rule notes
   - Agent placing assets into vault: read the declaration page first and place by position; with no fitting position, use the flat slot or create a directory then supplement the declaration; if the page is absent, place flat in the root directory

package/{.meta/plugins/core → payloads/personal}/structure/scripts/check.py

@@ -24,7 +24,7 @@ def check(ctx):
         return issues
     actual = {d + "/" for d in os.listdir(vroot)
               if os.path.isdir(os.path.join(vroot, d)) and not d.startswith(".")}
-    declared = {str(k).strip() for k in decl}
+    declared = {str(k).strip().rstrip("/") + "/" for k in decl}  # the directory name is the semantics; a key without the trailing slash is a form variance, not a drift
     for d in sorted(actual - declared):
         issues.append({"level": "warning", "message": f"vault top-level directory undeclared: {d} (add a declaration or put it in place)"})
     for d in sorted(declared - actual):

package/{.meta/plugins/core → payloads/personal}/tag/PLUGIN.md

@@ -24,6 +24,8 @@ Owns the `tags` field conventions:
 
 ## Changelog
 
+- 0.13 2026-11-12: attached-audit fix — a fully empty tag now reports under the empty-segment rule (previously slipped through: only slash-bearing tags were segmented-checked)
+- 0.12 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.11 2026-10-04: language neutralization — "Chinese-primary" removed; the primary language follows the language page's default key (absent → session language); hierarchy wording changed to "≤2, `/` separated"; the English kebab-case word-shape rule kept (already neutral); same batch as the language v0.2 follow-up cleanup
 - 0.10 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch
 - 0.9 2026-09-13: checks merged with executors unified as mechanically-confirmed items; expert review: two conflicting tellings versus actions.md

package/{.meta/plugins/core → payloads/personal}/tag/PLUGIN.yaml

@@ -1,15 +1,15 @@
 id: tag
 schema_version: 1
-version: 0.11
+version: 0.13
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-12
 attachment:
   - "Cross-cutting plugin: owns the frontmatter tags field across all pages plus vocabulary governance"
   - "scripts/check.py — attached audit (>5 per page / restating type / hierarchy depth)"
 fields:
   tags: "YAML list ≤5; primary language follows the language page's default key (absent → session language); English tags lowercase kebab-case; hierarchy ≤2, `/` separated; restating type forbidden"
-inject: "Page `tags` field: YAML list; primary language follows the default key of the writing-style declaration page `wiki/language.md` (page or key absent → session language); English tags lowercase kebab-case; hierarchy ≤2 (`/` separated), ≤5 per page; open semantic classification, restating type forbidden"
+inject: "Page `tags`: YAML list, ≤5 per page, hierarchy ≤2 (`/`); language follows the `wiki/language.md` default (absent → session language); English tags lowercase kebab-case; open semantics, never restate `type`"
 usage:
   - Before writing, read `wiki/tags.md` and prefer reusing existing terms
   - New-term conventions: primary language follows the language page's default key (absent → session language, preventing mixed Chinese-English fragmentation of the vocabulary); English lowercase kebab-case; hierarchy ≤2; ≤5 per page; restating type forbidden

package/{.meta/plugins/core → payloads/personal}/tag/scripts/check.py

@@ -21,7 +21,9 @@ def check(ctx):
             issues.append({"level": "warning", "message": f"{rel}: tag restates type ({ptype})"})
         for t in tags:
             s = str(t)
-            if "/" in s:
+            if not s.strip():
+                issues.append({"level": "warning", "message": f"{rel}: empty tag (no empty segments)"})
+            elif "/" in s:
                 parts = s.split("/")
                 if len(parts) > 2 or any(not p.strip() for p in parts):
                     issues.append({"level": "warning", "message": f"{rel}: tag hierarchy over limit or empty segment ({s}, parent/child ≤2)"})

package/{.meta/plugins/core → payloads/personal}/tmp/PLUGIN.md

@@ -23,4 +23,5 @@
 
 ## Changelog
 
+- 0.4 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.3 (2026-10-06) inject line: code formatting restored on the territory path (issue #12 post-migration nit)- 0.2 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.1 2026-09-19: established — path-as-territory, invisible to the derived layer, stale_after cleanup prompts, delete upon promotion

package/{.meta/plugins/core → payloads/personal}/tmp/PLUGIN.yaml

@@ -1,13 +1,13 @@
 id: tmp
 schema_version: 1
-version: 0.3
+version: 0.4
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "wiki/tmp/ — temporary zone (the path is the territory; instance data — real contents never enter the framework repo or test-repo)"
 fields: {}
-inject: "Temporary zone `wiki/tmp/` (the path is the territory; type: tmp optional, landing outside → error): drafts and parsing intermediates, no retention promise, cleanable any time; invisible to the derived layer — excluded from index/tags, never a link source, broken links exempt; promote precious drafts promptly (draft deleted on promotion); intermediates set stale_after as they go — check reports over-age, disposal via confirmation (no automatic deletion); sensitive intermediates best gitignored instance-side"
+inject: "Temporary zone `wiki/tmp/` (path = territory): drafts and intermediates, no retention promise, invisible to the derived layer; promote precious drafts (draft deleted on promotion); set `stale_after` — deletion only on confirmation; details PLUGIN.md"
 usage:
   - Drafts / parsing scratch: land directly at `wiki/tmp/<name>.md`, frontmatter kept simple (title + optional stale_after); broken links may stay as written
   - Promotion: content distilled via save into notes or merged into the target territory (a project decision section, etc.); delete the draft after the links close (agent-created drafts deleted by the agent; human drafts upon confirmation)

package/{.meta/plugins/core → payloads/personal}/todo/PLUGIN.md

@@ -28,6 +28,8 @@ A derivation-destination bridge governing action items: domain plugins one-way d
 
 ## Changelog
 
+- 0.6 2026-11-12: contract-had-no-enforcement fix — mechanical checks (territory placement / entry trigger + by/at contract / overdue info list) landed as the attached-audit script scripts/check.py, closing the gap between the declared checks and execution
+- 0.5 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.4 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.3 2026-10-02: global-domain batch two — established the on-demand bridge as the derivation destination; domain-plugin self-descriptions retained with a pointer
 - 0.2 2026-10-02: added 'create on absence' — when a new session's first read finds todo.md absent, it creates an empty page, so the entry discipline never falls through; guideline registration entry revised, empirically verified
 - 0.1 2026-09-14: established — the `wiki/todo.md` delegation queue, type: todo entered the registry territory values; settlement history goes to log, the log type value set extended with todo; no attached command — the write contract travels with the injection line

package/{.meta/plugins/core → payloads/personal}/todo/PLUGIN.yaml

@@ -1,15 +1,16 @@
 id: todo
 schema_version: 1
-version: 0.4
+version: 0.6
 bridge: 按需
 depends:
   - wiki
   - log
-updated: 2026-10-06
+updated: 2026-11-12
 attachment:
   - "wiki/todo.md — temporary memory page (cross-session delegation queue)"
+  - "scripts/check.py — attached audit (territory placement / entry contract / overdue list)"
 fields: {}
-inject: "Temporary memory wiki/todo.md (type: todo): cross-session delegations and reminders; entry = trigger condition (date or context) + one sentence + by/at; read first at session start (before hot; absent → create empty); due or past entries raised proactively; append upon delegation, settle upon completion ([x] + log line, history to log); settled capped at 20; live working set only; on-demand bridge — domain plugins one-way derive action items in"
+inject: "Temporary memory `wiki/todo.md`: read first at session start (before hot; absent → create empty), raise due entries; entry = trigger (date/context) + one sentence + by/at; settle with [x] + log line, settled ≤20; details PLUGIN.md"
 usage:
   - Append upon delegation: `- [ ] <date YYYY-MM-DD or context phrase>: one sentence (by: <actor>, at: <date>)`; date entries are mechanically scannable, context entries are semantically activated
   - Read this page first at the start of a new session (before hot; if absent, create an empty page): entries with now ≥ trigger day are proactively raised with the user; overdue and unsettled entries keep being raised, marked overdue
@@ -17,6 +18,6 @@ usage:
   - Cleanup: settled entries capped at 20, silently delete the oldest beyond the cap (log already holds the settlement record, deletion is not an event); valuable content is distilled via save upon completion; this page keeps no history
   - Self-create the page upon first delegation (frontmatter: type: todo + generated), independent of any initialization mechanism
 checks:
-  - Mechanical (info-level): the list of date-triggered, overdue and unsettled entries (the mechanical basis for new-session reminders); page absent (the no-delegation norm)
-  - Mechanical: entry missing trigger condition or by/at → warning; type: todo landing outside `wiki/todo.md` → error
+  - Mechanical (attached-audit script `scripts/check.py`, executed on audit discovery): entry missing trigger condition or by/at → warning; type: todo landing outside `wiki/todo.md` → error
+  - Mechanical (info-level, attached audit): date-triggered, overdue and unsettled entries (the mechanical basis for new-session reminders); page absent (the no-delegation norm)
   - Semantic (check command): open entries > 50 → warning (bloat triage: do what should be done, distill what should be distilled via save, confirm with the user what should be dropped)

package/payloads/personal/todo/scripts/check.py

@@ -0,0 +1,51 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""todo plugin attached audit: mechanical items (territory placement / entry contract / overdue list).
+
+Entry shape per the manifest: `- [ ] <trigger: date YYYY-MM-DD or context phrase>: one sentence (by: <actor>, at: <date>)`.
+Bloat triage (open entries > 50) is a semantic item, under the check command.
+"""
+import datetime
+import re
+
+DATE_RE = re.compile(r"^\d{4}-\d{2}-\d{2}$")
+
+
+def check(ctx):
+    issues = []
+    today = datetime.date.today()
+    todo_page = None
+    for rel, fm, _body in ctx.pages:
+        if fm.get("type") == "todo" and rel != "todo.md":
+            issues.append({"level": "error", "message": f"{rel}: type: todo outside wiki/todo.md (territory misplacement)"})
+        if rel == "todo.md":
+            todo_page = _body
+    if todo_page is None:
+        return issues  # page absent = the no-delegation norm, nothing to check
+    for i, raw in enumerate(todo_page.splitlines(), 1):
+        line = raw.rstrip()
+        if not line.startswith("- [ ]"):
+            continue  # settled entries ([x]) and non-entry lines are out of scope
+        rest = line[len("- [ ]"):].strip()
+        # strip the trailing (by: …, at: …) parenthetical first, so its colons cannot be mistaken for the trigger separator
+        meta = ""
+        m = re.search(r"\(([^()]*)\)\s*$", rest)
+        if m and ("by:" in m.group(1) or "at:" in m.group(1)):
+            meta = m.group(1)
+            rest = rest[: m.start()].strip()
+        trig, sep, tail = rest.partition(":")
+        trig = trig.strip()
+        if not sep or not trig:
+            issues.append({"level": "warning", "message": f"todo.md:{i}: entry missing trigger condition ({line[:40]}…)"})
+        scope = meta or tail
+        if not re.search(r"by:\s*\S", scope):
+            issues.append({"level": "warning", "message": f"todo.md:{i}: entry missing by ({line[:40]}…)"})
+        if not re.search(r"at:\s*\S", scope):
+            issues.append({"level": "warning", "message": f"todo.md:{i}: entry missing at ({line[:40]}…)"})
+        if trig and sep and DATE_RE.match(trig):
+            try:
+                if datetime.date.fromisoformat(trig) < today:
+                    issues.append({"level": "info", "message": f"todo.md:{i}: overdue and unsettled entry ({trig}: {tail[:40]}…)"})
+            except ValueError:
+                issues.append({"level": "warning", "message": f"todo.md:{i}: trigger date not a real calendar date ({trig})"})
+    return issues

package/{.meta/plugins/core → payloads/personal}/trust/PLUGIN.md

@@ -59,6 +59,7 @@ Field bridge: the trust-field contract shared by all domain plugins across domai
 
 ## Changelog
 
+- 0.10 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.9 2026-10-02: global-domain batch one — established the mandatory bridge, i.e. the field bridge; domain bases must depend on it, kernel verifies completeness
 - 0.8 2026-09-23: added the wiki dependency edge — inner-side plugins attach to wiki, aligning with the domain 0.1 declaration; omitted from the 2026-09-22 domain-ization batch
 - 0.7 2026-09-13: usage gained the verified production channel — reviews are initiated by the user, agents never append spontaneously; expert review: the input channel was idling

package/{.meta/plugins/core → payloads/personal}/trust/PLUGIN.yaml

@@ -1,10 +1,10 @@
 id: trust
 schema_version: 1
-version: 0.9
+version: 0.10
 bridge: 必依
 depends:
   - wiki
-updated: 2026-10-06
+updated: 2026-11-09
 attachment:
   - "scripts/check.py — attached audit (trust-field contract + stale list + trust-level counts)"
 fields:
@@ -12,7 +12,7 @@ fields:
   verified: "event list, items single-line `by: <actor>, at: <date>`, appendable multiple times; the trust level is derived from this"
   stale_after: "YYYY-MM-DD absolute moment; expiry check = the pure comparison now ≥ stale_after"
   sources: "source list, items contain id / resource / credibility signals (author, usage_count, last_modified)"
-inject: "Trust fields (optional per page): `generated` (who generated it) / `verified` (event list, items single-line by+at) / `stale_after` (expiry moment) / `sources` (sources and signals); level derivation never persisted — no record = unverified, only agent/process = machine-confirmed, contains human = human-reviewed, past stale_after = stale"
+inject: "Trust fields (optional): `generated` / `verified` (by+at events) / `stale_after` / `sources`; level is derived, never stored — no record = unverified, agent/process only = machine-confirmed, any human = human-reviewed, past stale_after = stale"
 usage:
   - When writing a page, write `generated` along the way (block style: `by: agent/<current-model>` / `at: <today>`)
   - When a review action happens, append a `verified` event (single line `by: <actor>, at: <date>`), never fabricated to inflate the level

package/{.meta/plugins/core → payloads/personal}/user-profile/PLUGIN.md

@@ -33,6 +33,8 @@ The cognition bridge: the global profile's extension point toward domain-level c
 
 ## Changelog
 
+- 0.8 2026-11-12: contract-had-no-enforcement fix — mechanical checks (wrong-territory error / page-absent info) landed as the attached-audit script scripts/check.py, closing the gap between the declared checks and execution
+- 0.7 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.6 (2026-10-06) inject line: sections lost to the kernel comment-strip clip restored (quoted values are now protected), tightened for budget headroom — issue #12 post-migration nit- 0.5 (2026-10-06) inject line compressed to pointer density (issue #12 layer discipline) — procedural detail lives in usage / PLUGIN.md / skills- 0.4 2026-10-02: global-domain batch three — established the cognition bridge, on-demand: the profile body `## Domain Cognition` registration section, aggregate-don't-copy, read-first discipline; bb-track user.md the first registration; the mapping edge removed — under the bridge law it reached domain via the vault chain, causing a global plugin to be misjudged, caught by an actual kernel test; the 'hanging edges are harmless' premise failed
 - 0.3 2026-09-29: profile command established — the write side shed its parasitism on the map and save dual entry points, both commands' consumes entries removed; the evidence domain opened to any page inside wiki, dissolving the cross-domain ownership suspension; first creation self-builds on trigger, absorbing the profile part of the pending initialization items; tags explicitly not applied; depends kept, ruling: reference-level edges retained, not cut
 - 0.2 2026-09-14: usage added the profile distillation methodology — signal criteria, layered placement, assertions concrete and verifiable; the executable part of the distillation entered the write-side contract, closing the SASU-L disclosure loop: an agent running map or save knows how to distill, without relying on model priors; the full text remains in `docs/research-user-profile.md`

package/{.meta/plugins/core → payloads/personal}/user-profile/PLUGIN.yaml

@@ -1,18 +1,19 @@
 id: user-profile
 schema_version: 1
-version: 0.6
+version: 0.8
 bridge: 按需
 depends:
   - wiki
   - trust
   - sessions
-updated: 2026-10-06
+updated: 2026-11-12
 attachment:
   - "wiki/profile.md — user profile page (a continuing cognition profile of the user)"
+  - "scripts/check.py — attached audit (territory placement / page presence)"
 fields: {}
 commands:
-  - profile
-inject: "User profile wiki/profile.md (type: profile): continuing cognition of the user, static identity + dynamic preference layers, dimensions open; convergence-style updates (new replaces old, trace in body), assertions carry evidence wikilinks, preference layer stale_after; zero own fields, reuses trust; not in the notes territory, no tags; updates via the profile command (dual-track trigger, self-creates on first); read before personalized decisions; cognition bridge — domain cognition pages register one line each in ## Domain Cognition, the profile aggregates pointers only"
+  - owfa-profile
+inject: "User profile `wiki/profile.md`: continuing cognition of the user (identity + preference layers); read before personalized decisions; write only via the profile command; assertions carry evidence wikilinks, preferences stale_after; details PLUGIN.md"
 usage:
   - Dual-track triggering: the user explicitly invokes profile; the agent calls it spontaneously in any session upon recognizing significant signals — signal distillation uniformly goes through this command, not parasitic on other command flows
   - Signal criteria: self-reported signals (preference expressions, corrections, background) and behavioral signals (subjects, fields, material habits); record only recurring subjects/fields, explicit preference expressions, corrections to output, and stable background facts (identity/tools/environment); one-off and instrumental content and uncertain observations are not recorded
@@ -26,5 +27,5 @@ usage:
   - Cognition bridge registration (a domain-plugin-side action, disclosed on this side): when a domain cognition plugin creates its archive and the profile is present, maintain one line in the profile's `## Domain Cognition` section (domain name + path-form wikilink); if the profile is absent, skip without proxy-creating it (on-demand bridge absence tolerance); multiple courses and archives register via the path-form wildcard (bb: <term>/<course> form)
 checks:
   - Semantic (check command): profile assertion missing an evidence wikilink → warning
-  - Mechanical: a type: profile page landing in `wiki/notes/` or `wiki/vault/` (wrong territory) → error
-  - Mechanical (info-level): profile page absent (the untriggered norm; profile self-creates on first trigger)
+  - Mechanical (attached-audit script `scripts/check.py`, executed on audit discovery): a type: profile page landing in `wiki/notes/` or `wiki/vault/` (wrong territory) → error
+  - Mechanical (info-level, attached audit): profile page absent (the untriggered norm; profile self-creates on first trigger)

package/payloads/personal/user-profile/scripts/check.py

@@ -0,0 +1,20 @@
+#!/usr/bin/env python3
+# -*- coding: utf-8 -*-
+"""user-profile plugin attached audit: mechanical items (territory placement / page presence).
+
+Assertion evidence-wikilink grading is a semantic item, under the check command.
+"""
+
+
+def check(ctx):
+    issues = []
+    present = False
+    for rel, fm, _body in ctx.pages:
+        if fm.get("type") == "profile":
+            if rel.startswith("notes/") or rel.startswith("vault/"):
+                issues.append({"level": "error", "message": f"{rel}: type: profile in the wrong territory (single-page territory, wiki/profile.md only)"})
+            if rel == "profile.md":
+                present = True
+    if not present:
+        issues.append({"level": "info", "message": "no profile page (the untriggered norm; profile self-creates on first trigger)"})
+    return issues

package/{.meta/plugins/core → payloads/personal}/vault/PLUGIN.md

@@ -20,6 +20,7 @@ No structure or scripts of its own. The external territory is the root-level `va
 
 ## Changelog
 
+- 0.7 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.6 2026-10-02: global-domain batch one — added the trust and log mandatory-bridge edges; vault previously lacked even the trust edge, confirmed by audit; constitution principle 11, kernel verifies completeness
 - 0.5 2026-09-22: domain-ization — depends gained domain, i.e. the default-domain positioning, and wiki, i.e. the territory declaration `wiki/vault/`; the dual role spelled out: doubling as the landing repository for other domains, the url field as the passthrough interface
 - 0.4 2026-09-14: all three governance blocks claimed — source preservation, claiming the registry-reserved field `url`, provenance registration for URL-type assets, the write contract in mapping usage; structure rules moved to the structure plugin established at 0.1; lifecycle and change propagation go to mapping reference counting with recomputation audit trails, in coordination with check triage

package/payloads/personal/vault/PLUGIN.yaml

@@ -0,0 +1,13 @@
+id: vault
+schema_version: 1
+version: 0.7
+depends:
+  - domain
+  - wiki
+  - trust
+  - log
+updated: 2026-11-09
+attachment: []
+fields:
+  url: "Source URL; provenance registration for URL-type assets (source preservation), optional for manual placement, required for agent channels (delegate etc.); also the interface for other domains to land via vault"
+inject: "Default domain `vault/` (real assets of any format; landing repository for other domains), wiki-side `wiki/vault/`; commands are append-only toward vault — deleting/modifying belongs to the human; layout per `wiki/structure.md`"

package/{.meta/plugins/core → payloads/personal}/wiki/PLUGIN.md

@@ -28,6 +28,7 @@ Cross-cutting plugins — tag, trust, link — occupy fields and syntax, not pag
 
 ## Changelog
 
+- 0.8 2026-11-09: inject line rewritten to routing-pointer density (issue #49 phase 1, relieves the #48 budget): path + read/write trigger + the one easy-to-break invariant + pointer here; the dropped detail already lives in this file / the manifest
 - 0.7 2026-10-02: two territory forms — proxy pages as the default, plus in-domain native pages, i.e. domain-side archives declared by a domain with shape owned by the domain plugin; group-meeting ruling, first case bb-track cognition profile user.md; legitimizes the existing tension of lark and email archive pages, not an exception hatch
 - 0.6 2026-09-29: narrative reinforcement — the origin dichotomy spelled out as three page-origin layers: domain territories, native territory, derived facilities; added cross-cutting plugin positioning; sessions characterized as minutes not mirrors, the source vanishes and the page is the true body
 - 0.5 2026-09-22: domain-ization — the origin dichotomy generalized to "pages each domain declares as its territory", removing the vault-specific hardcoding; territory-to-domain mapping read from path convention, declarations in each domain's manifest; first paragraph rewritten to the inner/outer narrative

package/payloads/personal/wiki/PLUGIN.yaml

@@ -0,0 +1,8 @@
+id: wiki
+schema_version: 1
+version: 0.8
+depends: []
+updated: 2026-11-09
+attachment: []
+fields: {}
+inject: "wiki container `wiki/`: territory pages (domain proxy projections or in-domain native pages), native writings (true body here), derived index/tags/hot/log; frontmatter = top-level scalars, block lists, one-level block mappings only; details PLUGIN.md"

package/templates/AGENTS.template.md

@@ -1,10 +1,10 @@
 # {{name}}
 
-This is an OWFA workspace — a `vault/` of real assets plus a `wiki/` the agent can re-enter without being re-introduced. `vault/` holds files in any format, `wiki/` holds the markdown pages the agent reads and writes, and `.meta/` + `.agents/skills/` are the framework body. Rewrite this paragraph freely: everything outside the injection region is yours, and the agent never edits it.
+This is an OWFA workspace — a `vault/` of real assets plus a `wiki/` the agent can re-enter without being re-introduced. `vault/` holds files in any format, `wiki/` holds the markdown pages the agent reads and writes, and `.owfa/` + `.agents/skills/` are the framework body. Rewrite this paragraph freely: everything outside the injection region is yours, and the agent never edits it.
 
 ## Layout
 
-`vault/` real assets · `wiki/` the md world · `.meta/` + `.agents/skills/` the framework body (domain packages under `.meta/plugins/domains/`).
+`vault/` real assets · `wiki/` the md world · `.owfa/` + `.agents/skills/` the framework body (domain packages under `.owfa/plugins/domains/`).
 
 ## Git
 

package/.agents/skills/check/SKILL.md

@@ -1,130 +0,0 @@
----
-name: check
-owner: framework
-description: "Audit the repository's health: hard-structure checks on the foundation and plugins + semantic checks on plugins and pages. Triggers on: check, 健康检查, 检查插件, lint."
----
-
-# check: repository health audit
-
-This is an audit, not a guardrail. It outputs a graded report: error = structural breakage requiring action; warning = a suggested to-do. Check rules come from two places: the foundation part of this file (protocol level) + the injection region below (a mechanical projection by wiki_plugin_kernel from each plugin manifest's checks list; presence means registration).
-
-## Purpose
-
-Run one health audit over the entire instance (foundation + plugins + wiki pages).
-
-## Scope
-
-Read: everything (.meta/, the AGENTS.md injection region, .agents/skills/, the wiki/, vault/ directory trees)
-Write: one line in wiki/log.md (type "check"); regenerable zones are rebuilt directly per the action discipline (scripts: injection region / registry / command copies; semantics: index / tags / hot eviction / log archiving / hash recomputation)
-
-## Steps
-
-1. **Foundation hard checks** (protocol level):
-   - **Static self-check script**: `python .meta/scripts/wiki_plugin_kernel.py validate` (directory completeness, manifest seven fields + optional commands, id consistency, dependency existence, acyclicity, command binding owner×commands bidirectional consistency) — any error means FAIL
-   - **Idempotent rebuild**: `python .meta/scripts/wiki_plugin_kernel.py all` (injection region / registry plugin section / command copies — mechanical and automatic; drift is fixed here, the script source is the rule list)
-   - `.meta/protocol/registry.yaml` is in place with the protocol / reserved sections intact (the script never touches these two sections; a missing section is an error)
-   - **Value-set violation**: scan the frontmatter of all wiki/ pages; a type / status value outside the registry value set → error
-   - Every `.meta/command/` SKILL.md has frontmatter (name / description / owner; optional consumes — an ordered list of plugins whose write-side contracts are consumed; referenced plugins must be present with a usage list; mandatory for owner-driven commands)
-2. **Plugin checks**: first run the attached audit `python .meta/scripts/wiki_plugin_kernel.py audit` (mechanical items: each plugin's scripts/check.py executed on audit discovery, read-only reporting; errors count toward FAIL); then execute the items marked "semantic" in the injection-region blocks below
-3. **Semantic checks**: read plugin and command files, looking for dangling references (a command referring to nonexistent structure), ghost fields (page fields with no owning plugin and not registry-reserved), and injection-region blocks inconsistent with the PLUGIN.md Checks section
-4. Summary output: PASS / WARN / FAIL counts + graded details + vault backlog count (informational)
-5. **Fixes are executed by grade per the action discipline** (`.meta/protocol/actions.md`): mechanical-automatic items are done directly — `pipeline.py index` / `tags` (index rebuild), `wiki_plugin_kernel.py all` (registry / injection region / copies), hash recomputation (raw_sha256 of changed frontmatter); hot / log overflows are converged by their own write-pipeline commands; mechanical-confirmation items present a list and ask once; semantic items are reported only; historical entries are never automatically changed
-6. Prepend one line to wiki/log.md (type "check", via `pipeline.py log check "<one line>"`); if anything changed (fixes / a log line), commit per the commit discipline (`检查: <conclusion>`, see `.meta/protocol/actions.md`)
-
-## Tools
-
-grep / file reading suffice; no second scan when one read is enough (call frugality).
-
-## Parameters
-
-- None: full-repository audit
-- Plugin id: check that plugin only
-
-## Injected Section (plugin check blocks)
-
-> This region is a wiki_plugin_kernel projection from each plugin manifest's checks list (rebuilt by `inject` / `all`; presence means registration); handwritten content does not belong here — to change check rules, edit PLUGIN.yaml.
-
-<!-- check-inject:start -->
-<!-- check:device -->
-- Mechanical (attached-audit script `scripts/check.py`, executed discovery-style by audit): device block mapping's warranty_until within ≤30 days of today → warning nearing expiry; already expired → warning expired; invalid date → warning
-<!-- /check:device -->
-
-<!-- check:hot -->
-- Window out of bounds (>25 entries / >5 days / >200 chars per entry) → run `pipeline.py hot <type> "<backfill>"` once, or wait for the next write to converge naturally then re-check
-- Contradiction with log (log has records while hot shows no trace) → warning
-<!-- /check:hot -->
-
-<!-- check:language -->
-- Mechanical (attached-audit script `scripts/check.py`, executed discovery-style by audit): type: language landing outside `wiki/language.md` → error; terms empty values → warning; declaration page absent → info (session-language fallback tolerated)
-<!-- /check:language -->
-
-<!-- check:link -->
-- Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): broken link (target is neither a page full name nor any page's aliases) → warning; hand-written broken link in hot → warning (not counted as an inbound-link source); garbled link (target contains the U+FFFD replacement character, including related items) → error; alias ambiguity (two pages declaring the same aliases, resolution indeterminate) → error; orphan page (no inbound links and no related references, inbound sources counting concept pages only) → warning for notes knowledge pages, info for territory-value registration pages (registry territory values except session, having no inbound links yet being the registration norm); one-way related (A lists B while B does not list back) → info
-- Semantic items (check command): inbound-link density top list → info item (evidence for hub emergence, no alert)
-<!-- /check:link -->
-
-<!-- check:log -->
-- Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): undated entries (starting with `- ` yet not matching the date format, main file and archive checked alike) → error
-- Semantic items (check command): historical entries modified (verifiable via git) → error; capacity over the limit → re-check after mechanical archiving
-<!-- /check:log -->
-
-<!-- check:notes -->
-- Traces of a note overwritten by a command → error
-- Near-duplicate notes (Jaccard > 0.7) → warning
-<!-- /check:notes -->
-
-<!-- check:sessions -->
-- Mechanical (covered by audit): session-type pages outside `wiki/sessions/` (or the reverse) → warning; participants missing or entries violating the actor convention → warning
-- Semantic: backbone page bloated past due promotion (should have been promoted but was not) → warning
-<!-- /check:sessions -->
-
-<!-- check:tag -->
-- Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): >5 tags on one page → warning; tags restating type → warning; hierarchy over the limit (parent/child ≤2) or empty segment → warning
-- Semantic items (check command): near-duplicate tags → warning suggesting a merge; merging is a mechanically-confirmed item (list presented, executed after user confirmation)
-<!-- /check:tag -->
-
-<!-- check:tmp -->
-- Semantic (v0.1 manual, attached audit deferred): type: tmp landing outside wiki/tmp/ → error; stale_after already past → warning (cleanup prompt); tmp page count > 20 → info (backlog triage)
-<!-- /check:tmp -->
-
-<!-- check:trust -->
-- Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): generated missing by/at or wrong actor format, verified event missing by/at or wrong format, stale_after not YYYY-MM-DD, sources not a list → warning
-- Mechanical items (info level): stale page list (past stale_after); trust-level counts (human-reviewed / machine-confirmed counts)
-- Semantic (check command): stale-page disposition triage (refresh the moment / re-verify / deprecate) — human decides
-<!-- /check:trust -->
-
-<!-- check:calendar -->
-- Semantic (v0.1 manual, attached audit deferred): month page file name not YYYY-MM or landing outside wiki/calendar/ → error; traces of rewriting a past month's page → error (git audit); declaration page missing the `calendar` block → info (the manual-only norm)
-<!-- /check:calendar -->
-
-<!-- check:cron -->
-- Mechanical: a type: cron page landing outside wiki/cron/ → error; task page missing the cron block or the minimal key set (trigger/action/form/status) → warning; malformed condition trigger (kind outside the open vocabulary or missing target) → warning; time form: last_run beyond the schedule period with active → warning (projection-lost signal)
-- Semantic (attached audit deferred): per-form drift between readable execution-side lists (scheduler / system tasks / conditional-executor watches, best-effort) and the declaration page set → warning; unreadable executor → info
-<!-- /check:cron -->
-
-<!-- check:index -->
-- Deviation between indexes and the actual page set (including merged-back indexes pending deletion) → fixed by running `pipeline.py index` to rebuild (idempotent; no diff means consistent); same for tags (`pipeline.py tags`)
-- Traces of hand editing → warning
-<!-- /check:index -->
-
-<!-- check:todo -->
-- Mechanical (info-level): the list of date-triggered, overdue and unsettled entries (the mechanical basis for new-session reminders); page absent (the no-delegation norm)
-- Mechanical: entry missing trigger condition or by/at → warning; type: todo landing outside `wiki/todo.md` → error
-- Semantic (check command): open entries > 50 → warning (bloat triage: do what should be done, distill what should be distilled via save, confirm with the user what should be dropped)
-<!-- /check:todo -->
-
-<!-- check:user-profile -->
-- Semantic (check command): profile assertion missing an evidence wikilink → warning
-- Mechanical: a type: profile page landing in `wiki/notes/` or `wiki/vault/` (wrong territory) → error
-- Mechanical (info-level): profile page absent (the untriggered norm; profile self-creates on first trigger)
-<!-- /check:user-profile -->
-
-<!-- check:mapping -->
-- Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): mirror diff (file in vault without proxy → info backlog; proxy without counterpart → error, message carries the reference count — see the impact surface before deleting); missing registration fields (raw_file / raw_sha256) → error; dangling raw_file → error; raw_sha256 mismatch → warning; suspected full-text duplication (md asset body ≥80% of the original) → warning; description-less stub with updated older than 90 days → warning
-- Semantic items (check command): mismatch-disposition triage (description still applies → mechanical recalculation auto-repairs, writing a log line on completion (type map, one sentence with the asset name and 'original changed, description still applies'); suspected invalid → human decides remap or delete); diary-type full-text duplication exemption judgment; before disposing an orphan proxy, handle its references first (update references in sync or leave aliases to redirect)
-<!-- /check:mapping -->
-
-<!-- check:structure -->
-- Mechanical items (attached-audit script `scripts/check.py`, executed on audit discovery): declaration diff — vault top-level directory undeclared → warning, declaration key pointing to a nonexistent directory → warning; type: structure landing outside `wiki/structure.md` → error; declaration page absent → info (flat tolerance)
-<!-- /check:structure -->
-<!-- check-inject:end -->