pi-mega-compact 0.20.70 → 0.20.71

package/dist/src/vector-cortex/livewire/livewire-live.js

@@ -0,0 +1,163 @@
+/**
+ * vector-cortex/livewire/livewire-live.ts — LIVEWIRE in-process live state.
+ *
+ * Holds the LIVE subsystem objects for ONE stateDir: the VC7A `CrystalStore`,
+ * the VC7C cache breaker, the per-miss-class tallies, the VC8B shadow metrics,
+ * and the VC7B economics computed bit. This is the object the RUNTIME accumulates
+ * into (`recordMiss`, `recordServeBlocked`, `recordShadowRun`, ...) and that the
+ * reader-only dashboard routes snapshot out of. Kept separate from the registry
+ * (which owns the per-stateDir `Map` + persistence) so neither file crosses the
+ * 300-line soft-as-hard gate.
+ *
+ * AGGREGATE-FIRST, COUNTS ONLY. `snapshotOf` projects the live objects down to
+ * the SECURITY_PRIVACY-safe `LivewireSnapshot` (counts + codes + triad mode) that
+ * gets persisted and rendered. No session id, digest, range, profile id, bytes,
+ * or prompt text can pass through ANY of these fields.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any`. Non-fatal: every derive is
+ * a pure read.
+ */
+import { CrystalStore } from "../cache/store.js";
+import { createCacheBreaker } from "../cache/breaker.js";
+import { validateProfileEconomics } from "../provider/economics.js";
+import { BASE_PROVIDER_PROFILES } from "../provider/registry.js";
+/**
+ * Static VC7B economics profile tallies derived from the base provider registry.
+ * `profileCount` counts profiles that declare economics; `provenExclusions` /
+ * `unprovenExclusions` tally the exclusion sets validated against the fixture
+ * rule. This is PURE (no storage/clock/network) and identical regardless of the
+ * `MEGACOMPACT_VC7B` flag — only the emission/route seam is flag-gated.
+ */
+function baseEconomicsTallies() {
+    let profileCount = 0;
+    let provenExclusions = 0;
+    let unprovenExclusions = 0;
+    for (const bundle of BASE_PROVIDER_PROFILES) {
+        const econ = bundle.profile.economics;
+        if (econ === null)
+            continue;
+        profileCount += 1;
+        const codes = validateProfileEconomics(bundle.profile, econ);
+        const failed = new Set(codes);
+        for (const _ex of bundle.profile.excludedJsonPointers) {
+            if (failed.has("ECON_EXCLUSION_UNPROVEN")) {
+                unprovenExclusions += 1;
+            }
+            else {
+                provenExclusions += 1;
+            }
+        }
+    }
+    return { profileCount, provenExclusions, unprovenExclusions };
+}
+/** A zeroed per-class tally map. */
+function zeroTallies() {
+    return {
+        profile: 0,
+        range: 0,
+        dependency: 0,
+        request: 0,
+        generation: 0,
+        unknown: 0,
+    };
+}
+/** Build a fresh (empty) live state with real subsystem objects. */
+export function createLiveState() {
+    const econTallies = baseEconomicsTallies();
+    return {
+        crystalStore: new CrystalStore(),
+        breaker: createCacheBreaker(),
+        diagnostics: {
+            tallies: zeroTallies(),
+            serveBlocked: 0,
+            breakerState: "CLOSED_A",
+            lastFailure: null,
+        },
+        economics: {
+            computed: false,
+            profileCount: econTallies.profileCount,
+            provenExclusions: econTallies.provenExclusions,
+            unprovenExclusions: econTallies.unprovenExclusions,
+            lastFailure: null,
+        },
+        shadow: {
+            shadowDecisions: 0,
+            clampedDecisions: 0,
+            rejectedInputs: 0,
+            liveMutations: 0,
+            pressureVersion: 1,
+            lastFailure: null,
+        },
+    };
+}
+/** Project the live state down to the persisted, reader-only aggregate. */
+export function snapshotOf(state) {
+    const crystals = state.crystalStore.stats();
+    const diag = {
+        profileMisses: state.diagnostics.tallies.profile,
+        rangeMisses: state.diagnostics.tallies.range,
+        dependencyMisses: state.diagnostics.tallies.dependency,
+        requestMisses: state.diagnostics.tallies.request,
+        generationMisses: state.diagnostics.tallies.generation,
+        unknownMisses: state.diagnostics.tallies.unknown,
+        serveBlocked: state.diagnostics.serveBlocked,
+        breakerState: state.diagnostics.breakerState,
+        lastFailure: state.diagnostics.lastFailure,
+    };
+    const econ = {
+        profileCount: state.economics.profileCount,
+        provenExclusions: state.economics.provenExclusions,
+        unprovenExclusions: state.economics.unprovenExclusions,
+        computed: state.economics.computed,
+        lastFailure: state.economics.lastFailure,
+    };
+    const policy = {
+        shadowDecisions: state.shadow.shadowDecisions,
+        clampedDecisions: state.shadow.clampedDecisions,
+        rejectedInputs: state.shadow.rejectedInputs,
+        liveMutations: state.shadow.liveMutations,
+        pressureVersion: state.shadow.pressureVersion,
+        lastFailure: state.shadow.lastFailure,
+    };
+    return {
+        schema: "vector-cortex-livewire-v1",
+        crystals: {
+            mode: crystals.mode,
+            crystalCount: crystals.crystalCount,
+            totalBytes: crystals.totalBytes,
+            hits: crystals.hits,
+            misses: crystals.misses,
+            hitBytes: crystals.hitBytes,
+            writes: crystals.writes,
+            duplicateWrites: crystals.duplicateWrites,
+            collisions: crystals.collisions,
+        },
+        diagnostics: diag,
+        economics: econ,
+        policy,
+    };
+}
+/** Seed a fresh live state's CUMULATIVE counters from a persisted snapshot. */
+export function rehydrateLive(state, snap) {
+    state.crystalStore.rehydrate(snap.crystals);
+    state.diagnostics.tallies.profile = snap.diagnostics.profileMisses;
+    state.diagnostics.tallies.range = snap.diagnostics.rangeMisses;
+    state.diagnostics.tallies.dependency = snap.diagnostics.dependencyMisses;
+    state.diagnostics.tallies.request = snap.diagnostics.requestMisses;
+    state.diagnostics.tallies.generation = snap.diagnostics.generationMisses;
+    state.diagnostics.tallies.unknown = snap.diagnostics.unknownMisses;
+    state.diagnostics.serveBlocked = snap.diagnostics.serveBlocked;
+    state.diagnostics.breakerState = snap.diagnostics.breakerState;
+    state.diagnostics.lastFailure = snap.diagnostics.lastFailure;
+    state.economics.computed = snap.economics.computed;
+    state.economics.profileCount = snap.economics.profileCount;
+    state.economics.provenExclusions = snap.economics.provenExclusions;
+    state.economics.unprovenExclusions = snap.economics.unprovenExclusions;
+    state.economics.lastFailure = snap.economics.lastFailure;
+    state.shadow.shadowDecisions = snap.policy.shadowDecisions;
+    state.shadow.clampedDecisions = snap.policy.clampedDecisions;
+    state.shadow.rejectedInputs = snap.policy.rejectedInputs;
+    state.shadow.liveMutations = snap.policy.liveMutations;
+    state.shadow.pressureVersion = snap.policy.pressureVersion;
+    state.shadow.lastFailure = snap.policy.lastFailure;
+}

package/dist/src/vector-cortex/livewire/livewire-registry.js

@@ -0,0 +1,73 @@
+/**
+ * vector-cortex/livewire/livewire-registry.ts — per-stateDir LIWIRE registry.
+ *
+ * The single seam the runtime and the reader-only dashboard routes BOTH access.
+ * It owns a `Map<stateDir, LivewireLiveState>` (one live subsystem cluster per
+ * repo) and lazily opens a state on first access, rehydrating its cumulative
+ * counters from the persisted aggregate snapshot (`livewire-snapshot.ts`) so a
+ * freshly-spawned process — e.g. the dashboard server — reports the same counts
+ * the runtime has already accumulated.
+ *
+ * The runtime WRITES through this registry (see `livewire-runtime.ts`): each
+ * mutation persists a reduced, count-only snapshot. The routes READ through
+ * `livewireOf(stateDir)` and call the pure `snapshotOf`. There is no other path.
+ *
+ * BEST-EFFORT + NON-FATAL. `openLivewire` never throws: persistence failures are
+ * swallowed by the snapshot layer and state is always returned. PREVENT-PI-004
+ * (local in-process Map + filesystem only), PREVENT-011 (no `any`).
+ */
+import { createLiveState, rehydrateLive, snapshotOf, } from "./livewire-live.js";
+import { loadLivewireSnapshot, saveLivewireSnapshot, } from "./livewire-snapshot.js";
+/** The per-stateDir registry (process-local; a fresh process starts empty). */
+const REGISTRY = new Map();
+let activeLogger;
+/**
+ * Bind the structured logger the snapshot layer uses for its non-fatal write
+ * failures. The runtime calls this once at startup with its JSON logger.
+ */
+export function setLivewireLogger(logger) {
+    activeLogger = logger;
+}
+/**
+ * Open (or return the cached) live state for a stateDir. Lazy: on first access
+ * it rehydrates from the persisted aggregate so a separate dashboard process
+ * reflects prior runtime work. Never throws.
+ */
+export function livewireOf(stateDir) {
+    const cached = REGISTRY.get(stateDir);
+    if (cached !== undefined)
+        return cached;
+    const state = createLiveState();
+    const snap = loadLivewireSnapshot(stateDir);
+    if (snap !== null)
+        rehydrateLive(state, snap);
+    REGISTRY.set(stateDir, state);
+    return state;
+}
+/**
+ * Persist a state's reduced aggregate (counts + codes only). Best-effort and
+ * non-fatal. Called by the runtime after every mutation so the snapshot stays
+ * fresh for any reader process.
+ */
+export function persistLivewire(state, stateDir) {
+    saveLivewireSnapshot(stateDir, snapshotOf(state), activeLogger);
+}
+/** Persist the live state for a stateDir (convenience over open + persist). */
+export function flushLivewire(stateDir) {
+    const state = REGISTRY.get(stateDir);
+    if (state === undefined)
+        return;
+    persistLivewire(state, stateDir);
+}
+/**
+ * Build the reader aggregate for one stateDir WITHOUT persisting — the reader
+ * seam the dashboard routes call. Reads the live state (rehydrated from disk on
+ * first access) and projects it to the count-only snapshot.
+ */
+export function readLivewireSnapshot(stateDir) {
+    return snapshotOf(livewireOf(stateDir));
+}
+/** For tests: drop the registry so a fresh stateDir is fully rehydrated. */
+export function _resetLivewireRegistryForTests() {
+    REGISTRY.clear();
+}

package/dist/src/vector-cortex/livewire/livewire-runtime.js

@@ -0,0 +1,107 @@
+/**
+ * vector-cortex/livewire/livewire-runtime.ts — LIVEWIRE runtime accumulation seam.
+ *
+ * The WRITE side of LIVEWIRE: the runtime calls these methods wherever the
+ * corresponding subsystem path actually runs, and each call accumulates into the
+ * per-stateDir live state and persists a reduced count-only snapshot (best-effort,
+ * non-fatal). This is the seam that turns the pure VC7A/VC7B/VC7C/VC8B arithmetic
+ * into LIVE dashboard state.
+ *
+ * FLAG SEMANTICS (mirrors every other VC writer): these methods run REGARDLESS of
+ * the corresponding `MEGACOMPACT_VC*` flag — the arithmetic is never skipped, and
+ * a miss is still classified / a write still stored exactly as before. Only the
+ * dashboard REPORT seam (`routes-vector-cortex-*.ts`) is flag-gated: with the
+ * flag off a route returns the legacy `deferredReason` (byte-identical to the
+ * predecessor). The reporter emit seams in `cache/*-emit.ts` / `controller/
+ * policy-emit.ts` remain the event-announcement gate.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any`. Every write is best-effort.
+ */
+import { classifyMiss } from "../cache/diagnostics.js";
+import { shouldBlockServe } from "../cache/breaker.js";
+import { livewireOf, persistLivewire } from "./livewire-registry.js";
+/**
+ * Record a VC7A crystal WRITE attempt (write-once + collision arithmetic). The
+ * caller passes the fully-formed `CrystalV1`; the store returns the write result
+ * (first-write / idempotent / collision). The dashboard's `stats()` reflects it.
+ *
+ * @returns the store's write verdict, forwarded so the runtime can act on a
+ *          collision without re-deriving it.
+ */
+export function recordCrystalWrite(stateDir, crystal) {
+    const state = livewireOf(stateDir);
+    const result = state.crystalStore.write(crystal);
+    persistLivewire(state, stateDir);
+    return result;
+}
+/**
+ * Record a VC7A crystal READ attempt. Returns the stored crystal (or undefined
+ * on a miss / mode C), mirroring `CrystalStore.read` so the cache-serve path can
+ * use this seam entirely.
+ */
+export function readCrystal(stateDir, keyDigest) {
+    const state = livewireOf(stateDir);
+    const found = state.crystalStore.read(keyDigest);
+    persistLivewire(state, stateDir);
+    return found;
+}
+/**
+ * Record a VC7C miss observation: classify it into its exclusive class and tally
+ * it. When the class demands the cache serve be demoted BEFORE answering, the
+ * `serveBlocked` counter is also incremented. The live breaker state itself is
+ * driven by the real cache-serve path (through `breaker.execute`), not here; this
+ * seam only observes and tallies.
+ *
+ * @returns the exclusive class the observation was tallied under.
+ */
+export function observeCacheMiss(stateDir, observation) {
+    const state = livewireOf(stateDir);
+    const missClass = classifyMiss(observation).missClass;
+    state.diagnostics.tallies[missClass] += 1;
+    if (shouldBlockServe(missClass))
+        state.diagnostics.serveBlocked += 1;
+    persistLivewire(state, stateDir);
+    return missClass;
+}
+/**
+ * Record a VC7C cache serve that the breaker demoted BEFORE answering. Talls the
+ * `serveBlocked` counter the diagnostics card surfaces.
+ */
+export function recordServeBlocked(stateDir) {
+    const state = livewireOf(stateDir);
+    state.diagnostics.serveBlocked += 1;
+    persistLivewire(state, stateDir);
+}
+/**
+ * Record a VC8B shadow evaluation run: accumulate its decision metrics so the
+ * policy card reports how many shadow decisions were evaluated / clamped /
+ * rejected and how many live mutations the shadow proved (structurally 0).
+ */
+export function recordShadowRun(stateDir, result) {
+    const state = livewireOf(stateDir);
+    state.shadow.shadowDecisions += result.metrics.evaluated;
+    state.shadow.clampedDecisions += result.metrics.clamped;
+    state.shadow.rejectedInputs += result.metrics.rejected;
+    state.shadow.liveMutations += result.metrics.liveMutations;
+    persistLivewire(state, stateDir);
+}
+/**
+ * Set the active M7 pressure version (1 = legacy, 2 = migrated). The runtime
+ * calls this after a successful `migratePressureV2` so the policy card reflects
+ * the live migration state rather than a hardcoded 1.
+ */
+export function setPressureVersion(stateDir, version) {
+    const state = livewireOf(stateDir);
+    state.shadow.pressureVersion = version;
+    persistLivewire(state, stateDir);
+}
+/**
+ * Mark that VC7B cache economics have actually been computed at runtime (the
+ * `computed` bit drives the economics card's `hasData`). The runtime calls this
+ * after the first real `computeEconomics` over observed usage.
+ */
+export function markEconomicsComputed(stateDir) {
+    const state = livewireOf(stateDir);
+    state.economics.computed = true;
+    persistLivewire(state, stateDir);
+}

package/dist/src/vector-cortex/livewire/livewire-snapshot.js

@@ -0,0 +1,101 @@
+/**
+ * vector-cortex/livewire/livewire-snapshot.ts — LIVEWIRE aggregate persistence.
+ *
+ * The four LV subsytems are in-process live objects, but the dashboard server may
+ * run in a SEPARATE process from the runtime that accumulates the counts. To keep
+ * the reader-only routes honest when they run in their own process, this module
+ * persists a COUNT-ONLY aggregate snapshot (`vector-cortex-livewire.json`) to the
+ * per-repo `stateDir`, and `openLivewire` rehydrates a fresh process from it on
+ * first access. This is the same DR-snapshot philosophy as the legacy JSON
+ * checkpoints, but reduced to counts + codes (SECURITY_PRIVACY — see these types).
+ *
+ * BEST-EFFORT + NON-FATAL. A failed write is logged as a structured event and
+ * never breaks the agent loop; a missing/unreadable snapshot reads as null and
+ * the process starts from zero (matches the non-fatal-stores invariant). Every
+ * write is atomic-ish: the JSON is fully serialized to a temp name then renamed
+ * so a reader never observes a partial snapshot.
+ *
+ * PREVENT-PI-004: local filesystem read/write only, no network. PREVENT-011: no
+ * `any`.
+ */
+import { readFileSync, writeFileSync, renameSync, existsSync, mkdirSync } from "node:fs";
+import { join } from "node:path";
+/** The snapshot filename in the per-repo stateDir (counts + codes only). */
+export const LIVEWIRE_SNAPSHOT_FILE = "vector-cortex-livewire.json";
+/** Resolve the snapshot path for a stateDir. */
+export function livewireSnapshotPath(stateDir) {
+    return join(stateDir, LIVEWIRE_SNAPSHOT_FILE);
+}
+/**
+ * Best-effort type guard over a parsed snapshot. Rejects anything that is not
+ * the exact aggregate shape so a corrupted or stale file cannot poison the
+ * rehydrated counters.
+ */
+function isSnapshot(value) {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const s = value;
+    return (s.schema === "vector-cortex-livewire-v1" &&
+        typeof s.crystals === "object" &&
+        s.crystals !== null &&
+        typeof s.diagnostics === "object" &&
+        s.diagnostics !== null &&
+        typeof s.economics === "object" &&
+        s.economics !== null &&
+        typeof s.policy === "object" &&
+        s.policy !== null);
+}
+/**
+ * Read the persisted aggregate for a stateDir, or null when absent/unreadable/
+ * malformed. Best-effort and non-fatal by construction.
+ */
+export function loadLivewireSnapshot(stateDir) {
+    const path = livewireSnapshotPath(stateDir);
+    let raw;
+    try {
+        raw = readFileSync(path, "utf-8");
+    }
+    catch {
+        return null;
+    }
+    try {
+        const parsed = JSON.parse(raw);
+        return isSnapshot(parsed) ? parsed : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Best-effort write of the aggregate snapshot (atomic rename). Never throws to
+ * the caller: a persistence failure logs a structured event and is swallowed.
+ *
+ * @param logger  optional structured logger `(line: unknown) => void`; when
+ *                omitted no event is emitted (tests pass `undefined`).
+ */
+export function saveLivewireSnapshot(stateDir, snapshot, logger) {
+    const dir = stateDir;
+    try {
+        if (!existsSync(dir))
+            mkdirSync(dir, { recursive: true });
+        const path = livewireSnapshotPath(dir);
+        const tmp = `${path}.tmp`;
+        writeFileSync(tmp, JSON.stringify(snapshot), "utf-8");
+        renameSync(tmp, path);
+    }
+    catch (err) {
+        if (logger !== undefined) {
+            try {
+                logger({
+                    ts: new Date().toISOString(),
+                    event: "vector_cortex_livewire_snapshot_write_failed",
+                    stateDir,
+                    reason: err instanceof Error ? err.message : String(err),
+                });
+            }
+            catch {
+                // A failing logger must not recurse into another failure.
+            }
+        }
+    }
+}

package/dist/src/vector-cortex/livewire/livewire-types.js

@@ -0,0 +1,19 @@
+/**
+ * vector-cortex/livewire/livewire-types.ts — LIVEWIRE aggregate snapshot types.
+ *
+ * LIVEWIRE wires the four complete-but-unwired Vector Cortex subsystems into the
+ * runtime so their dashboard routes report LIVE state instead of hardcoded
+ * "deferred" zeros. This module is the SINGLE SOURCE OF TRUTH for the persisted
+ * aggregate snapshot shape (counts + codes ONLY) and for the per-stateDir
+ * live-state records the routes read.
+ *
+ * SECURITY_PRIVACY: every field here is a count, a code, or a finite triad mode.
+ * There is deliberately NO string slot for a session id, a request/crystal
+ * digest, a covered range, frozen bytes, a profile id, or ledger content — a
+ * crystal IS a frozen rendered prompt, so the card that reports on it must never
+ * be able to carry one. The snapshot is the SAME reduced shape, so nothing secret
+ * reaches disk either.
+ *
+ * PREVENT-PI-004: type definitions only, no network code. PREVENT-011: no `any`.
+ */
+export {};

package/dist/src/vector-cortex/provider/registry.js

@@ -45,48 +45,80 @@ function baseCache(stableFields) {
     };
 }
 /** Build a contract-profile shape pinned as a conformance fixture too. */
-function profile(id, version, excludedJsonPointers) {
+function profile(id, version, excludedJsonPointers, economics) {
     return {
         schema: "provider-profile-v1",
         id,
         version,
         hashMode: "entire-canonical-request",
         excludedJsonPointers,
+        economics,
     };
 }
+/**
+ * Build integer micro-unit economics for a base profile (VC7B). A cache WRITE
+ * costs more than an uncached token, a cache READ costs less — the standard
+ * provider-prompt-cache shape. `exclusionFixtureId` mirrors the profile's own
+ * exclusion fixture (or null when the profile has none to prove).
+ */
+function econ(id, version, exclusionFixtureId, values) {
+    return {
+        schema: "provider-economics-v1",
+        profileId: id,
+        profileVersion: version,
+        basePrice: values.basePrice,
+        readPrice: values.readPrice,
+        writePrice: values.writePrice,
+        ttlMs: values.ttlMs,
+        minPrefix: values.minPrefix,
+        exclusionFixtureId,
+    };
+}
+/** Representative integer micro-unit economics for the Anthropic opus base tier. */
+const OPUS_ECON = econ("anthropic-claude-opus", "v1", null, { basePrice: 15, readPrice: 2, writePrice: 19, ttlMs: 300_000, minPrefix: 1024 });
+/** Representative integer micro-unit economics for the Anthropic sonnet base tier. */
+const SONNET_ECON = econ("anthropic-claude-sonnet", "v1", null, { basePrice: 3, readPrice: 0, writePrice: 4, ttlMs: 300_000, minPrefix: 1024 });
+/** Representative integer micro-unit economics for the OpenAI gpt base tier. */
+const GPT_ECON = econ("openai-gpt", "v1", null, { basePrice: 5, readPrice: 1, writePrice: 6, ttlMs: 300_000, minPrefix: 1024 });
+/** The gemini profile's versioned, fixture-proven exclusion. */
+const GEMINI_EXCLUSIONS = [
+    {
+        pointer: "/requestId",
+        fixtureId: "PRO-EXCLUDE-010",
+        proofDigest: "sha256:excluded-request-id-proof",
+    },
+];
+/** Representative integer micro-unit economics for the gemini base tier. */
+const GEMINI_ECON = econ("google-gemini", "v1", "PRO-EXCLUDE-010", { basePrice: 3, readPrice: 1, writePrice: 4, ttlMs: 300_000, minPrefix: 1024 });
 /**
  * The fixture-backed base profiles. Each entry is the REAL bundle the renderer
  * resolves; the parallel conformance fixtures prove the cache-identity behavior.
  */
 const BASE_PROFILES = [
     {
-        profile: profile("anthropic-claude-opus", "v1", []),
+        profile: profile("anthropic-claude-opus", "v1", [], OPUS_ECON),
         role: BASE_ROLE,
         tool: BASE_TOOL,
         cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
     },
     {
-        profile: profile("anthropic-claude-sonnet", "v1", []),
+        profile: profile("anthropic-claude-sonnet", "v1", [], SONNET_ECON),
         role: BASE_ROLE,
         tool: BASE_TOOL,
         cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
     },
     {
-        profile: profile("openai-gpt", "v1", []),
+        profile: profile("openai-gpt", "v1", [], GPT_ECON),
         role: BASE_ROLE,
         tool: BASE_TOOL,
         cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),
     },
     {
         // A profile that proves a fixture-excluded pointer: a provider whose
-        // request-id header cannot affect cache identity. Excluded + versioned.
-        profile: profile("google-gemini", "v1", [
-            {
-                pointer: "/requestId",
-                fixtureId: "PRO-EXCLUDE-010",
-                proofDigest: "sha256:excluded-request-id-proof",
-            },
-        ]),
+        // request-id header cannot affect cache identity. Excluded + versioned, and
+        // the exclusion fixture id is carried into economics so the proof is
+        // honored (an unproven exclusion would fail economics validation).
+        profile: profile("google-gemini", "v1", GEMINI_EXCLUSIONS, GEMINI_ECON),
         role: BASE_ROLE,
         tool: BASE_TOOL,
         cache: baseCache(["systemPromptPrepend", "tools", "nodes"]),

package/dist/vector-cortex/cache/store.js

@@ -70,6 +70,11 @@ export class CrystalStore {
     writes = 0;
     duplicateWrites = 0;
     collisions = 0;
+    /** Restart-survival crystal count/bytes (LIVEWIRE rehydrate). The `committed`
+     *  map is empty in a fresh process; these offsets carry the persisted totals
+     *  so the dashboard does not reset to zero on restart. */
+    rehydratedCrystalCount = 0;
+    rehydratedTotalBytes = 0;
     /** Freeze a crystal object for a key/bytes pair (digest computed here). */
     static freeze(keyDigest, bytes, key) {
         const copy = new Uint8Array(bytes);
@@ -178,12 +183,12 @@ export class CrystalStore {
     }
     /** Reader-only aggregate for the dashboard seam — counts and bytes only. */
     stats() {
-        let totalBytes = 0;
+        let totalBytes = this.rehydratedTotalBytes;
         for (const c of this.committed.values())
             totalBytes += c.byteCount;
         return {
             mode: this.mode(),
-            crystalCount: this.committed.size,
+            crystalCount: this.rehydratedCrystalCount + this.committed.size,
             totalBytes,
             hits: this.hits,
             misses: this.misses,
@@ -193,4 +198,22 @@ export class CrystalStore {
             collisions: this.collisions,
         };
     }
+    /**
+     * Restart survival: seed the CUMULATIVE counters from a previously-persisted
+     * aggregate (LIVEWIRE). The in-memory `committed` map is naturally empty in a
+     * fresh process — this only restores the running totals the dashboard reports,
+     * so a process restart does not reset the dashboard to zero. It deliberately
+     * does NOT reconstruct crystals: frozen bytes are never persisted to the
+     * reader aggregate, only the counts.
+     */
+    rehydrate(stats) {
+        this.rehydratedCrystalCount = stats.crystalCount;
+        this.rehydratedTotalBytes = stats.totalBytes;
+        this.hits = stats.hits;
+        this.misses = stats.misses;
+        this.hitBytes = stats.hitBytes;
+        this.writes = stats.writes;
+        this.duplicateWrites = stats.duplicateWrites;
+        this.collisions = stats.collisions;
+    }
 }

package/dist/vector-cortex/encoder/asset.js

@@ -67,7 +67,14 @@ function isManifest(m) {
         typeof o.onnx.path === "string" &&
         typeof o.onnx.sha256 === "string" &&
         typeof o.tokenizer.path === "string" &&
-        typeof o.tokenizer.sha256 === "string");
+        typeof o.tokenizer.sha256 === "string" &&
+        // ML5-A (VC2B-2): optional headWeights must, when present, be a valid
+        // ManifestAssetFile (path basename + sha256 + bytes).
+        (o.headWeights === undefined ||
+            (!!o.headWeights &&
+                typeof o.headWeights.path === "string" &&
+                typeof o.headWeights.sha256 === "string" &&
+                typeof o.headWeights.bytes === "number")));
 }
 /**
  * Verify the asset manifest + digest + constraints BEFORE allocation.
@@ -107,6 +114,11 @@ export function verifyEncoderAsset(assetDir, manifest, platform = detectPlatform
     if (!isBasename(manifest.onnx.path) || !isBasename(manifest.tokenizer.path)) {
         return { ok: false, code: ENC_FAIL.MANIFEST_INVALID };
     }
+    // ML5-A (VC2B-2): a manifest-declared headWeights path must also be a bare
+    // basename (no traversal into arbitrary paths off the asset dir).
+    if (manifest.headWeights !== undefined && !isBasename(manifest.headWeights.path)) {
+        return { ok: false, code: ENC_FAIL.MANIFEST_INVALID };
+    }
     const onnxPath = join(assetDir, manifest.onnx.path);
     const onnxDigest = digestFile(onnxPath);
     if (onnxDigest === null)
@@ -119,6 +131,19 @@ export function verifyEncoderAsset(assetDir, manifest, platform = detectPlatform
         return { ok: false, code: ENC_FAIL.ASSET_UNREADABLE };
     if (tokDigest !== manifest.tokenizer.sha256)
         return { ok: false, code: ENC_FAIL.DIGEST_MISMATCH };
+    // ML5-A (VC2B-2): verify the manifest-pinned trained-heads sibling when the
+    // manifest declares it. Absent declaration -> headWeightsDigest: null and no
+    // failure (committed placeholder bundle ships no trained weights).
+    let headWeightsDigest = null;
+    if (manifest.headWeights !== undefined) {
+        const hwPath = join(assetDir, manifest.headWeights.path);
+        const hwDigest = digestFile(hwPath);
+        if (hwDigest === null)
+            return { ok: false, code: ENC_FAIL.ASSET_UNREADABLE };
+        if (hwDigest !== manifest.headWeights.sha256)
+            return { ok: false, code: ENC_FAIL.DIGEST_MISMATCH };
+        headWeightsDigest = hwDigest;
+    }
     let embeddedBytes = 0;
     try {
         embeddedBytes = statSync(onnxPath).size + statSync(tokPath).size;
@@ -126,7 +151,14 @@ export function verifyEncoderAsset(assetDir, manifest, platform = detectPlatform
     catch {
         return { ok: false, code: ENC_FAIL.ASSET_UNREADABLE };
     }
-    return { ok: true, embeddedBytes, maxTokens: manifest.maxTokens, onnxDigest, tokenizerDigest: tokDigest };
+    return {
+        ok: true,
+        embeddedBytes,
+        maxTokens: manifest.maxTokens,
+        onnxDigest,
+        tokenizerDigest: tokDigest,
+        headWeightsDigest,
+    };
 }
 /**
  * Read + shape-check a committed ModelManifestV1 from an asset directory.