pi-mega-compact 0.17.1 → 0.18.1

package/src/vector-cortex/encoder/emit-vc2b.ts

@@ -0,0 +1,82 @@
+/**
+ * vector-cortex/encoder/emit-vc2b.ts — VC2B observability seam.
+ *
+ * Owns the two VC2B events (task 5), gated on `MEGACOMPACT_VC2B` so the
+ * flag-OFF path emits zero events (mode C parity, byte-identical predecessor):
+ *
+ *   vector_cortex_encoder_heads_emitted      — a multi-head VectorSetV1 produced
+ *   vector_cortex_encoder_fallback_selected  — a mode B/C fallback selected
+ *
+ * No dashboard or API change is necessary for this internal sprint (task 5).
+ * Every event is a JSON line with `ts` + `event` (ENGINEERING_PRACTICES §8); the
+ * emitters are non-fatal (never break the agent loop). Pi-agnostic, zero network
+ * (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+
+import { VC2B_ENABLED } from "../../config/vector-cortex.js";
+import { Logger } from "../../log.js";
+
+export type EncoderEmit = (event: string, fields: Record<string, unknown>) => void;
+
+/** The two-event VC2B reporter surface. */
+export interface EncoderHeadsReporter {
+  readonly headsEmitted: (fields: Record<string, unknown>) => void;
+  readonly fallbackSelected: (fields: Record<string, unknown>) => void;
+}
+
+/** A flag-gated no-op reporter (zero emissions, structural no-op). */
+export const NOOP_VC2B_REPORTER: EncoderHeadsReporter = {
+  headsEmitted: () => {},
+  fallbackSelected: () => {},
+};
+
+/**
+ * The default emitter: routes both VC2B events into the append-only structured
+ * logger (`src/log.ts`) as JSON lines with `ts` + `event`. Supplying `emit:` to
+ * `createEncoderHeadsReporter` replaces this with a caller-provided sink (used
+ * by tests and downstream consumers). Making the default a REAL producer means a
+ * caller that just invokes the producer seam (`encodeOrFallback`, `encodeVectorSet`,
+ * `selectTrigramBFallback`, `selectLexicalC`) without injecting an emitter still
+ * yields structured telemetry instead of silently dropping every event (task 5,
+ * code-review Q01). Best-effort: the logger swallows all I/O errors.
+ */
+function defaultEmitFor(logPath: string | undefined): EncoderEmit {
+  const logger = new Logger(logPath === undefined ? {} : { path: logPath });
+  return (event, fields) => {
+    logger.info(event, fields);
+  };
+}
+
+/** Options for the default logger-backed sink (used when no `emit` is injected). */
+export interface EncoderHeadsEmitOptions {
+  /** Where the default structured sink writes (defaults to the global log path). */
+  readonly logPath?: string;
+}
+
+/**
+ * Flag-gated emit, defaulting to a real logger-backed sink. The returned
+ * reporter is itself flag-gated (`VC2B_ENABLED`), so wiring it into a producer
+ * seam yields zero emissions when `MEGACOMPACT_VC2B=0` (byte-identical to the
+ * predecessor). Pass an explicit `emit` to route elsewhere (tests, downstream
+ * consumers); omit it to emit real structured log lines (Q01: the default is a
+ * live producer, not a silent no-op). `opts.logPath` only redirects the default
+ * sink and is ignored when `emit` is supplied.
+ */
+export function createEncoderHeadsReporter(
+  emit?: EncoderEmit,
+  opts: EncoderHeadsEmitOptions = {},
+): EncoderHeadsReporter {
+  const sink = emit ?? defaultEmitFor(opts.logPath);
+  const fire = (event: string, fields: Record<string, unknown>): void => {
+    if (!VC2B_ENABLED()) return;
+    try {
+      sink(event, { ...fields, ts: new Date().toISOString() });
+    } catch {
+      /* non-fatal observability */
+    }
+  };
+  return {
+    headsEmitted: (fields) => fire("vector_cortex_encoder_heads_emitted", fields),
+    fallbackSelected: (fields) => fire("vector_cortex_encoder_fallback_selected", fields),
+  };
+}

package/src/vector-cortex/encoder/emit.ts

@@ -0,0 +1,51 @@
+/**
+ * vector-cortex/encoder/emit.ts — VC2A observability seam.
+ *
+ * Emits the two VC2A structured events, gated on `MEGACOMPACT_VC2A` (mode C
+ * parity: flag OFF => zero emissions). Every event is a JSON line with `ts` +
+ * `event` (ENGINEERING_PRACTICES §8); the emitters are never fatal on consumer
+ * failure (non-fatal observability, never breaks the agent loop).
+ *
+ *   vector_cortex_encoder_asset_verified   — a qualified manifest+digest load
+ *   vector_cortex_encoder_runtime_demoted  — a demotion to mode B or C
+ *
+ * No network, no side effects beyond the supplied emit callback
+ * (PREVENT-PI-004 / PREVENT-011).
+ */
+
+import { VC2A_ENABLED } from "../../config/vector-cortex.js";
+
+export type EncoderEmit = (event: string, fields: Record<string, unknown>) => void;
+
+/** The two-event reporter surface consumed by the runtime seams. */
+export interface EncoderReporter {
+  readonly assetVerified: (fields: Record<string, unknown>) => void;
+  readonly runtimeDemoted: (fields: Record<string, unknown>) => void;
+}
+
+/** A flag-gated no-op reporter (zero emissions, default when none injected). */
+export const NOOP_ENCODER_REPORTER: EncoderReporter = {
+  assetVerified: () => {},
+  runtimeDemoted: () => {},
+};
+
+/**
+ * Flag-gated emit: no-op when VC2A is off or no emitter is supplied. The
+ * returned reporter is itself flag-gated (`VC2A_ENABLED`), so wiring it into a
+ * runtime seam yields zero emissions when `MEGACOMPACT_VC2A=0` (byte-identical
+ * to the predecessor).
+ */
+export function createEncoderReporter(emit?: EncoderEmit): EncoderReporter {
+  const fire = (event: string, fields: Record<string, unknown>): void => {
+    if (!VC2A_ENABLED()) return;
+    try {
+      emit?.(event, { ...fields, ts: new Date().toISOString() });
+    } catch {
+      /* non-fatal observability */
+    }
+  };
+  return {
+    assetVerified: (fields) => fire("vector_cortex_encoder_asset_verified", fields),
+    runtimeDemoted: (fields) => fire("vector_cortex_encoder_runtime_demoted", fields),
+  };
+}

package/src/vector-cortex/encoder/heads.ts

@@ -0,0 +1,142 @@
+/**
+ * vector-cortex/encoder/heads.ts — VC2B multi-head encoder (tasks 1–2).
+ *
+ * Produces a `VectorSetV1`: five independent L2-normalized projection heads in
+ * STABLE order — semantic 384, dependency 128, contradiction 128, cacheStability
+ * 64, payloadRouting 32 (MODEL_ASSET §decision record). Each head L2-normalizes
+ * its raw projection; a zero-norm projection maps to an all-zero vector (task 2).
+ *
+ * The raw per-head projection is a deterministic seeded compression of the input
+ * token sequence (seeded by `ENCODER_SEED` and the head's stable index), which
+ * mirrors the VC2A `projectSemantic` placeholder pattern: the contract, shape
+ * gating, normalization, zero-norm mapping, ordering and loss/seed constants are
+ * all normative here; real trained weights are substituted in VC2C. This keeps
+ * the mode-A multi-head path fully testable end-to-end today with zero network.
+ *
+ * The VC2B emit seam (task 5) is wired: producing a VectorSetV1 emits
+ * `vector_cortex_encoder_heads_emitted`; selecting a mode B/C fallback emits
+ * `vector_cortex_encoder_fallback_selected` — both gated on MEGACOMPACT_VC2B.
+ *
+ * Pi-agnostic, zero network (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+
+import {
+  ENCODER_HEAD_DIMS,
+  ENCODER_HEAD_ORDER,
+  ENCODER_HEAD_LOSS_WEIGHTS,
+  ENCODER_HEAD_LOSS_SUM,
+  ENCODER_SEED,
+  type EncoderHeadName,
+  type HeadVector,
+  type VectorSetV1,
+} from "./types.js";
+import {
+  createEncoderHeadsReporter,
+  NOOP_VC2B_REPORTER,
+  type EncoderHeadsReporter,
+} from "./emit-vc2b.js";
+
+/** The stable head index of a head name (its position in ENCODER_HEAD_ORDER). */
+const HEAD_INDEX: Readonly<Record<EncoderHeadName, number>> = {
+  semantic: 0,
+  dependency: 1,
+  contradiction: 2,
+  cacheStability: 3,
+  payloadRouting: 4,
+};
+
+/** Deterministic 32-bit LCG step (matches runtime.ts projectSemantic). */
+function nextState(state: number): number {
+  return (state * 1664525 + 1013904223) >>> 0;
+}
+
+export interface HeadProjectionOptions {
+  readonly seed?: number;
+  readonly reporter?: EncoderHeadsReporter;
+}
+
+/**
+ * L2-normalize a float vector in place semantics (returns a new Float32Array).
+ * A zero-norm (or empty) input maps to an all-zero vector of the same length
+ * (task 2: "mapping zero norm to an all-zero vector"). All finite.
+ */
+export function l2Normalize(values: Float32Array): Float32Array {
+  const out = new Float32Array(values.length);
+  let sum = 0;
+  for (const v of values) sum += v * v;
+  const norm = Math.sqrt(sum);
+  if (!(norm > 0)) return out; // zero norm -> all-zero
+  for (let i = 0; i < values.length; i++) out[i] = values[i]! / norm;
+  return out;
+}
+
+/** L2 norm of a Float32Array (0 for empty/all-zero). */
+export function l2Norm(values: Float32Array): number {
+  let sum = 0;
+  for (const v of values) sum += v * v;
+  return Math.sqrt(sum);
+}
+
+/** A deterministic per-head projection over the token sequence, pre-normalization. */
+function projectRaw(head: EncoderHeadName, tokens: readonly number[], seed: number): Float32Array {
+  const dim = ENCODER_HEAD_DIMS[head];
+  const out = new Float32Array(dim);
+  // An EMPTY token sequence has no signal: the raw projection is the zero vector,
+  // so after L2 normalization it maps to the all-zero vector (task 2: "mapping
+  // zero norm to an all-zero vector"; ENC-ZERO-002). This keeps empty input
+  // finite and zero-norm instead of seeding spurious unit-norm noise.
+  if (tokens.length === 0) return out;
+  // Mix the stable head index + ENCODER_SEED + seed into a per-head state so
+  // each head is a distinct independent projection (failure-triad independence).
+  let state = (((ENCODER_SEED ^ HEAD_INDEX[head]) >>> 0) ^ (seed >>> 0)) ^ 0x9e3779b9;
+  for (const t of tokens) state = nextState(state ^ ((t >>> 0) * 2654435761));
+  for (let i = 0; i < dim; i++) {
+    state = nextState(state ^ seed);
+    out[i] = (state / 4294967296) * 2 - 1;
+  }
+  return out;
+}
+
+/**
+ * Compute one head's L2-normalized vector (all-zero on zero norm) for a token
+ * sequence. Deterministic for a given seed (repeat drift == 0).
+ */
+export function projectHead(
+  head: EncoderHeadName,
+  tokens: readonly number[],
+  seed: number = ENCODER_SEED,
+): HeadVector {
+  const raw = projectRaw(head, tokens, seed);
+  return { head, dim: ENCODER_HEAD_DIMS[head], values: l2Normalize(raw) };
+}
+
+/**
+ * Encode a token sequence into a `VectorSetV1`: the five heads in stable order,
+ * each L2-normalized (all-zero on zero norm). Emits `heads_emitted` via the
+ * reporter (non-fatal, flag-gated). Deterministic for a given seed.
+ */
+export function encodeVectorSet(
+  tokens: readonly number[],
+  options: HeadProjectionOptions = {},
+): VectorSetV1 {
+  const seed = options.seed ?? ENCODER_SEED;
+  const reporter = options.reporter ?? createEncoderHeadsReporter();
+  const heads: HeadVector[] = ENCODER_HEAD_ORDER.map((h) => projectHead(h, tokens, seed));
+  reporter.headsEmitted({
+    heads: heads.length,
+    dims: heads.map((h) => h.dim).join("/"),
+    normalized: true,
+    tokens: tokens.length,
+  });
+  return { schema: "vector-set-v1", inputTokens: [...tokens], heads, normalized: true };
+}
+
+/**
+ * The per-head loss weights (must sum to ENCODER_HEAD_LOSS_SUM exactly).
+ * Exposed for training/tests to assert the normative .35/.20/.20/.15/.10 split.
+ */
+export function headLossWeights(): Readonly<Record<EncoderHeadName, number>> {
+  return { ...ENCODER_HEAD_LOSS_WEIGHTS };
+}
+
+export { ENCODER_HEAD_ORDER, ENCODER_HEAD_DIMS, ENCODER_HEAD_LOSS_SUM, ENCODER_SEED, NOOP_VC2B_REPORTER };

package/src/vector-cortex/encoder/lexical.ts

@@ -0,0 +1,123 @@
+/**
+ * vector-cortex/encoder/lexical.ts — VC2B mode C: token/phrase lexical encoder.
+ *
+ * Lexical C is a token/phrase lexical feature generator used when both mode A
+ * (learned asset) and mode B (trigram) are unavailable or fail. It is continuity,
+ * NOT semantic completeness: C operates on exact current tokens/phrases only and
+ * MUST state that it has lost old semantic context (task 4 + TRIAD_RESILIENCE.
+ * "C is continuity, not semantic completeness: it may omit old context and must
+ * report that limitation").
+ *
+ * C never imports the learned asset or learned calibration (task 4): it is a
+ * pure token/phrase lexical projection (token counts + phrase hashes) computed
+ * from the exact input. It is independently implemented from B (which hashes
+ * byte-level trigrams) — C works at the token/phrase level, B at the byte-ngram
+ * level, so the two share no algorithm.
+ *
+ * Authority outage freezes derived high-water: C never advances any derived
+ * frontier; it is purely a local reconstruction from the exact present tokens.
+ *
+ * Pi-agnostic, zero network (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+
+import { createHash } from "node:crypto";
+import { l2Normalize } from "./heads.js";
+import {
+  createEncoderHeadsReporter,
+  type EncoderHeadsReporter,
+} from "./emit-vc2b.js";
+
+/** Fixed output width of lexical C. */
+export const ENCODER_LEXICAL_WIDTH = 256;
+
+/** The documented limitation lexical C reports (continuity, not semantics). */
+export const ENCODER_LEXICAL_LIMITATION =
+  "lexical C: token/phrase-level continuity only; old semantic context is omitted";
+
+export function tokenizeLexical(text: string): string[] {
+  // Split into lowercase token/phrase units on non-alphanumeric boundaries.
+  return text.toLowerCase().split(/[^a-z0-9_]+/).filter((t) => t.length > 0);
+}
+
+/**
+ * Normalize a single token/phrase unit the same way `tokenizeLexical` does for
+ * the string form: lowercase and strip leading/trailing non-alphanumeric runs.
+ * Applied to array-form tokens so both accepted input forms of `embedLexical`
+ * hash identical conceptual content to identical buckets, regardless of how the
+ * caller chose to pass it (code-review Q03).
+ */
+function normalizeToken(tok: string): string {
+  return tok.toLowerCase().split(/[^a-z0-9_]+/).join("");
+}
+
+/**
+ * Resolve either accepted input form to a normalized token sequence: the string
+ * form routes through `tokenizeLexical` (split on non-alphanumeric boundaries,
+ * fragmented tokens discarded); the array form applies the same per-token
+ * lowercase/strip normalization and drops tokens that normalize to empty. Both
+ * paths therefore agree on hash buckets for the same conceptual content.
+ */
+function resolveTokens(tokensOrText: readonly string[] | string): string[] {
+  if (typeof tokensOrText === "string") return tokenizeLexical(tokensOrText);
+  const out: string[] = [];
+  for (const raw of tokensOrText) {
+    const norm = normalizeToken(raw);
+    if (norm.length > 0) out.push(norm);
+  }
+  return out;
+}
+
+/**
+ * Encode a token/phrase sequence into a 256-dim L2-normalized lexical vector
+ * (all-zero on empty input). Features: exact token count + token id-hash sums +
+ * phrase-adjacency hashes. Deterministic (repeat drift == 0). Pure local compute.
+ */
+export function embedLexical(tokensOrText: readonly string[] | string): Float32Array {
+  const width = ENCODER_LEXICAL_WIDTH;
+  const out = new Float32Array(width);
+  const tokens = resolveTokens(tokensOrText);
+  for (let i = 0; i < tokens.length; i++) {
+    const tok = tokens[i]!;
+    const h = createHash("sha256").update(`t:${tok}`).digest();
+    const bucket = h.readUInt32BE(0) % width;
+    const weight = (h.readUInt32BE(4) / 4294967295) * 2 - 1;
+    out[bucket] += weight;
+    // Phrase adjacency: bigram hash blended in so semantic-free ordering matters.
+    if (i > 0) {
+      const pair = createHash("sha256").update(`p:${tokens[i - 1]}:${tok}`).digest();
+      const pb = pair.readUInt32BE(0) % width;
+      const pw = (pair.readUInt32BE(4) / 4294967295) * 2 - 1;
+      out[pb] += pw;
+    }
+  }
+  return l2Normalize(out);
+}
+
+/** The documented limitation string, surfaced when lexical C is selected. */
+export function selectLexicalC(
+  options: { readonly reporter?: EncoderHeadsReporter } = {},
+): {
+  ok: true;
+  mode: "C";
+  dim: number;
+  width: number;
+  limitation: string;
+} {
+  const reporter = options.reporter ?? createEncoderHeadsReporter();
+  const selection = {
+    ok: true as const,
+    mode: "C" as const,
+    dim: ENCODER_LEXICAL_WIDTH,
+    width: ENCODER_LEXICAL_WIDTH,
+    limitation: ENCODER_LEXICAL_LIMITATION,
+  };
+  reporter.fallbackSelected({
+    mode: selection.mode,
+    dim: selection.dim,
+    width: selection.width,
+    limitation: selection.limitation,
+  });
+  return selection;
+}
+
+export { l2Normalize };

package/src/vector-cortex/encoder/router.ts

@@ -0,0 +1,163 @@
+/**
+ * vector-cortex/encoder/router.ts — VC2B encode-or-fallback router (S2).
+ *
+ * The single production seam that catches a real VC2A `load()` failure and
+ * hands off to the independently initialized VC2B fallbacks:
+ *
+ *   - mode A: the learned multi-head projection — an EncoderRuntime that
+ *     verifies+loads a local qualified ONNX (VC2A) plus `encodeVectorSet`
+ *     producing VectorSetV1, emitting `vector_cortex_encoder_heads_emitted`;
+ *   - when that `load()` fails for ANY reason (removed model ->
+ *     ENC_ASSET_UNREADABLE, digest mismatch -> ENC_DIGEST_MISMATCH, missing
+ *     manifest -> ENC_MANIFEST_INVALID, unsupported platform, RSS over budget,
+ *     ...) the router catches the real failure and selects the independently
+ *     initialized asset-free trigram B (`selectTrigramBFallback`) — or lexical C
+ *     when the runtime reports B-unavailable / the caller forces mode C. The
+ *     `vector_cortex_encoder_fallback_selected` event fires from the REAL
+ *     producer seam, not test wiring (task 5 + code-review S1).
+ *
+ * Best-effort and non-fatal: every branch returns an explicit verdict and never
+ * throws across the boundary into the agent loop. Flag-OFF parity: with
+ * `MEGACOMPACT_VC2B=0` the VC2B reporter is a no-op (zero emissions), and the
+ * mode-A path is governed by the VC2A runtime itself — the router only adds the
+ * fallback handoff and changes no producer bytes.
+ *
+ * Pi-agnostic, zero network (PREVENT-PI-004), no `any` (PREVENT-011).
+ */
+
+import { createEncoderRuntime } from "./runtime.js";
+import { encodeVectorSet, type HeadProjectionOptions } from "./heads.js";
+import { embedTrigram512, selectTrigramBFallback } from "./trigram.js";
+import { embedLexical, selectLexicalC } from "./lexical.js";
+import { createEncoderHeadsReporter, type EncoderHeadsReporter } from "./emit-vc2b.js";
+import {
+  ENC_FAIL,
+  type EncoderInput,
+  type EncoderLoadResult,
+  type EncoderRuntime,
+  type VectorSetV1,
+} from "./types.js";
+
+/** A resolved encode decision: a qualified mode-A VectorSet, an explicit B/C
+ *  fallback vector, or a hard failure. */
+export type RouterVerdict =
+  | { readonly ok: true; readonly mode: "A"; readonly vectorSet: VectorSetV1; readonly code: null }
+  | {
+      readonly ok: true;
+      readonly mode: "B" | "C";
+      readonly vector: Float32Array;
+      readonly width: number;
+      /** Semantic-context limitation (mode C) or null (mode B). */
+      readonly limitation: string | null;
+      /** The VC2A failure code that triggered the fallback (e.g.
+       *  ENC_ASSET_UNREADABLE), or null when the caller forced the mode. */
+      readonly code: string | null;
+    }
+  | { readonly ok: false; readonly mode: "B" | "C"; readonly code: string };
+
+export interface RouterOptions extends HeadProjectionOptions {
+  /** The VC2A runtime (mode A path). Defaults to a freshly created runtime. */
+  readonly runtime?: EncoderRuntime;
+  /** Forced fallback: skips the A load and selects the named VC2B fallback
+   *  (used to exercise C when A and B are both disabled). Optional. */
+  readonly forceFallback?: "B" | "C";
+}
+
+/** Deterministic text derived from an int token sequence so the asset-free
+ *  fallback producers operate on the same authority the learned path encoded. */
+function textFromTokens(tokens: readonly number[]): string {
+  return tokens.join("-");
+}
+
+/**
+ * Try to produce an encoding for an input token sequence. Mode A: verify+load
+ * the local learned asset via the EncoderRuntime; on a real `load()` failure
+ * (removed model, digest mismatch, missing manifest, ...) the router catches it
+ * and selects the independently initialized trigram B or lexical C, emitting
+ * `vector_cortex_encoder_fallback_selected` (and `heads_emitted` when A wins).
+ */
+export function encodeOrFallback(
+  input: EncoderInput,
+  assetDir: string,
+  options: RouterOptions = {},
+): RouterVerdict {
+  const reporter = options.reporter ?? createEncoderHeadsReporter();
+  const tokens = Array.isArray(input?.tokens) ? input.tokens : [];
+  const runtime = options.runtime ?? createEncoderRuntime();
+
+  // A caller that explicitly forces a fallback mode wins even over the empty-
+  // input degenerate case: the forced-mode contract must hold for ANY input, so
+  // handle forceFallback before the empty-input selection below (Q02). A forced
+  // B/C is NOT a rollback and NOT a demotion — it is an intentional selection
+  // for capacity/testing — so the verdict carries `code: null`, never
+  // ENC_FAIL.ROLLBACK, so a consumer that reads `verdict.code` as "what
+  // triggered the fallback" won't misread a deliberately forced mode as a
+  // rollback and take rollback-specific action (code-review Q04).
+  if (options.forceFallback !== undefined) {
+    if (options.forceFallback === "C") {
+      const sel = selectLexicalC({ reporter });
+      const vector = embedLexical(textFromTokens(tokens));
+      return { ok: true, mode: "C", vector, width: sel.width, limitation: sel.limitation, code: null };
+    }
+    const sel = selectTrigramBFallback({ reporter });
+    const vector = embedTrigram512(textFromTokens(tokens));
+    return { ok: true, mode: "B", vector, width: sel.width, limitation: null, code: null };
+  }
+
+  // Empty input yields the asset-free fallback (finite, deterministic zero
+  // vector, ENC-ZERO-002). This is legitimate degenerate behavior, NOT a shape
+  // failure, so the verdict carries no failure code (code === null) — a consumer
+  // that interprets `code` as "what went wrong" must not misread a valid all-zero
+  // B vector as a shape rejection (Q05). Only reached when no mode is forced, so
+  // a forced B/C is never subverted by empty tokens.
+  if (tokens.length === 0) {
+    const sel = selectTrigramBFallback({ reporter });
+    const vector = embedTrigram512("");
+    return { ok: true, mode: "B", vector, width: sel.width, limitation: null, code: null };
+  }
+
+  // Mode A attempt — reached only when no mode is forced (the forceFallback
+  // guard at the top already returned), so `options.forceFallback` is undefined here.
+  const loaded = runtime.load(assetDir);
+  if (!loaded.ok) {
+    return fallbackFromLoad(loaded, reporter, tokens);
+  }
+  // Q01/Q03: a qualified mode-A load is not enough — the verified per-manifest
+  // token capacity (maxTokens, <= global 512) must also be enforced before we
+  // produce a VectorSetV1. run inference over the input; an over-cap sequence
+  // (e.g. 100 tokens against a verified maxTokens=64 manifest) or an
+  // over-budget inference is rejected here and routed to the B/C fallback with
+  // the real failure code, rather than silently emitting an ok:true mode-A
+  // set whose inputTokens breach the model's declared capacity.
+  const inferred = runtime.infer({ tokens });
+  if (!inferred.ok) {
+    return fallbackFromLoad({ ok: false, mode: "B", code: inferred.code }, reporter, tokens);
+  }
+  const vectorSet = encodeVectorSet(tokens, { reporter, seed: options.seed });
+  return { ok: true, mode: "A", vectorSet, code: null };
+}
+
+/**
+ * Catch a (real or forced) A load failure (ok === false only) and select the
+ * B/C fallback that emits `vector_cortex_encoder_fallback_selected` from the
+ * production seam. The parameter is narrowed to the failed-load variant because
+ * the router hands off here only on a non-A/failed load — a qualified mode-A
+ * success never reaches this function (Q04).
+ */
+function fallbackFromLoad(
+  loaded: Extract<EncoderLoadResult, { ok: false }>,
+  reporter: EncoderHeadsReporter,
+  tokens: readonly number[],
+): RouterVerdict {
+  if (loaded.mode === "C") {
+    const sel = selectLexicalC({ reporter });
+    const vector = embedLexical(textFromTokens(tokens));
+    return { ok: true, mode: "C", vector, width: sel.width, limitation: sel.limitation, code: loaded.code };
+  }
+  const sel = selectTrigramBFallback({ reporter });
+  const vector = embedTrigram512(textFromTokens(tokens));
+  return { ok: true, mode: "B", vector, width: sel.width, limitation: null, code: loaded.code };
+}
+
+export { ENC_FAIL };
+export type { EncoderRuntime };