pi-mega-compact 0.20.70 → 0.20.71

package/src/vector-cortex/encoder/asset.ts

@@ -26,7 +26,19 @@ import {
 } from "./types.js";
 
 export type AssetVerifyResult =
-  | { ok: true; embeddedBytes: number; maxTokens: number; onnxDigest: string; tokenizerDigest: string }
+  | {
+      ok: true;
+      embeddedBytes: number;
+      maxTokens: number;
+      onnxDigest: string;
+      tokenizerDigest: string;
+      /**
+       * ML5-A (VC2B-2): digest of the manifest-pinned `trained-heads.json`
+       * sibling when the manifest declares `headWeights`; null when the
+       * manifest ships no head weights (the committed placeholder bundle).
+       */
+      headWeightsDigest: string | null;
+    }
   | { ok: false; code: string };
 
 /** True when `p` is a single basename: non-empty, no path separators, no "..",
@@ -80,7 +92,14 @@ function isManifest(m: unknown): m is ModelManifestV1 {
     typeof o.onnx.path === "string" &&
     typeof o.onnx.sha256 === "string" &&
     typeof o.tokenizer.path === "string" &&
-    typeof o.tokenizer.sha256 === "string"
+    typeof o.tokenizer.sha256 === "string" &&
+    // ML5-A (VC2B-2): optional headWeights must, when present, be a valid
+    // ManifestAssetFile (path basename + sha256 + bytes).
+    (o.headWeights === undefined ||
+      (!!o.headWeights &&
+        typeof o.headWeights.path === "string" &&
+        typeof o.headWeights.sha256 === "string" &&
+        typeof o.headWeights.bytes === "number"))
   );
 }
 
@@ -122,6 +141,11 @@ export function verifyEncoderAsset(
   if (!isBasename(manifest.onnx.path) || !isBasename(manifest.tokenizer.path)) {
     return { ok: false, code: ENC_FAIL.MANIFEST_INVALID };
   }
+  // ML5-A (VC2B-2): a manifest-declared headWeights path must also be a bare
+  // basename (no traversal into arbitrary paths off the asset dir).
+  if (manifest.headWeights !== undefined && !isBasename(manifest.headWeights.path)) {
+    return { ok: false, code: ENC_FAIL.MANIFEST_INVALID };
+  }
 
   const onnxPath = join(assetDir, manifest.onnx.path);
   const onnxDigest = digestFile(onnxPath);
@@ -133,13 +157,32 @@ export function verifyEncoderAsset(
   if (tokDigest === null) return { ok: false, code: ENC_FAIL.ASSET_UNREADABLE };
   if (tokDigest !== manifest.tokenizer.sha256) return { ok: false, code: ENC_FAIL.DIGEST_MISMATCH };
 
+  // ML5-A (VC2B-2): verify the manifest-pinned trained-heads sibling when the
+  // manifest declares it. Absent declaration -> headWeightsDigest: null and no
+  // failure (committed placeholder bundle ships no trained weights).
+  let headWeightsDigest: string | null = null;
+  if (manifest.headWeights !== undefined) {
+    const hwPath = join(assetDir, manifest.headWeights.path);
+    const hwDigest = digestFile(hwPath);
+    if (hwDigest === null) return { ok: false, code: ENC_FAIL.ASSET_UNREADABLE };
+    if (hwDigest !== manifest.headWeights.sha256) return { ok: false, code: ENC_FAIL.DIGEST_MISMATCH };
+    headWeightsDigest = hwDigest;
+  }
+
   let embeddedBytes = 0;
   try {
     embeddedBytes = statSync(onnxPath).size + statSync(tokPath).size;
   } catch {
     return { ok: false, code: ENC_FAIL.ASSET_UNREADABLE };
   }
-  return { ok: true, embeddedBytes, maxTokens: manifest.maxTokens, onnxDigest, tokenizerDigest: tokDigest };
+  return {
+    ok: true,
+    embeddedBytes,
+    maxTokens: manifest.maxTokens,
+    onnxDigest,
+    tokenizerDigest: tokDigest,
+    headWeightsDigest,
+  };
 }
 
 /**

package/src/vector-cortex/encoder/router.ts

@@ -26,15 +26,24 @@
  */
 
 import { createEncoderRuntime } from "./runtime.js";
-import { encodeVectorSet, type HeadProjectionOptions } from "./heads.js";
+import {
+  encodeVectorSet,
+  loadHeadProjections,
+  projectHeadFromTrunk,
+  type HeadProjectionOptions,
+  type HeadProjectionTable,
+} from "./heads.js";
 import { embedTrigram512, selectTrigramBFallback } from "./trigram.js";
 import { embedLexical, selectLexicalC } from "./lexical.js";
 import { createEncoderHeadsReporter, type EncoderHeadsReporter } from "./emit-vc2b.js";
+import { ML5A_ENABLED } from "../../config/vector-cortex.js";
 import {
   ENC_FAIL,
+  ENCODER_HEAD_ORDER,
   type EncoderInput,
   type EncoderLoadResult,
   type EncoderRuntime,
+  type HeadVector,
   type VectorSetV1,
 } from "./types.js";
 
@@ -61,6 +70,15 @@ export interface RouterOptions extends HeadProjectionOptions {
   /** Forced fallback: skips the A load and selects the named VC2B fallback
    *  (used to exercise C when A and B are both disabled). Optional. */
   readonly forceFallback?: "B" | "C";
+  /**
+   * ML5-A (VC2B-2): path to the `trained-heads-v1` artifact. When supplied AND
+   * the MEGACOMPACT_ML5_A gate is on AND the artifact loads (correct seed +
+   * shape), the mode-A VectorSet is produced by projecting the real trained head
+   * matrices over the trunk embedding (`projectHeadFromTrunk`). When absent /
+   * flag-off / unloadable, the mode-A producer falls back to the deterministic
+   * LCG placeholder `encodeVectorSet` (byte-identical predecessor).
+   */
+  readonly trainedHeadsPath?: string;
 }
 
 /** Deterministic text derived from an int token sequence so the asset-free
@@ -133,10 +151,46 @@ export function encodeOrFallback(
   if (!inferred.ok) {
     return fallbackFromLoad({ ok: false, mode: "B", code: inferred.code }, reporter, tokens);
   }
-  const vectorSet = encodeVectorSet(tokens, { reporter, seed: options.seed });
+  const vectorSet = produceVectorSet(inferred.semantic, tokens, options, reporter);
   return { ok: true, mode: "A", vectorSet, code: null };
 }
 
+/**
+ * Produce a mode-A `VectorSetV1` from the [1,384] trunk embedding (the
+ * `runtime.infer` result). VC2B-2 ML5-A: when real trained heads are loaded
+ * (`MEGACOMPACT_ML5_A` on + a `trainedHeadsPath` that loads), the multi-head
+ * output is projected through the real trained projection matrices via
+ * `projectHeadFromTrunk`. Otherwise (flag-off / absent / unloadable artifact)
+ * the deterministic LCG placeholder `encodeVectorSet` serves mode A —
+ * byte-identical to the VC2B predecessor. Non-fatal: an unloadable artifact
+ * degrades to the placeholder, never a throw.
+ */
+function produceVectorSet(
+  trunkEmbedding: Float32Array,
+  tokens: readonly number[],
+  options: RouterOptions,
+  reporter: EncoderHeadsReporter,
+): VectorSetV1 {
+  const table: HeadProjectionTable | null =
+    ML5A_ENABLED() && options.trainedHeadsPath !== undefined
+      ? loadHeadProjections(options.trainedHeadsPath)
+      : null;
+  if (table !== null) {
+    const heads: HeadVector[] = ENCODER_HEAD_ORDER.map((h) =>
+      projectHeadFromTrunk(h, trunkEmbedding, table),
+    );
+    reporter.headsEmitted({
+      heads: heads.length,
+      dims: heads.map((h) => h.dim).join("/"),
+      normalized: true,
+      tokens: tokens.length,
+    });
+    return { schema: "vector-set-v1", inputTokens: [...tokens], heads, normalized: true };
+  }
+  // ML5-A placeholder fallback (byte-identical predecessor).
+  return encodeVectorSet(tokens, { reporter, seed: options.seed });
+}
+
 /**
  * Catch a (real or forced) A load failure (ok === false only) and select the
  * B/C fallback that emits `vector_cortex_encoder_fallback_selected` from the

package/src/vector-cortex/encoder/types.ts

@@ -92,6 +92,9 @@ export interface ModelManifestV1 {
   readonly heads: EncoderHeads;
   readonly onnx: ManifestAssetFile;
   readonly tokenizer: ManifestAssetFile;
+  /** ML5-A (VC2B-2): optional sibling `trained-heads.json` (`trained-heads-v1`) shipping
+   *  REAL trained head weights; absent in the placeholder bundle, non-fatal when missing. */
+  readonly headWeights?: ManifestAssetFile;
   readonly totalBytes: number;
   readonly trainingManifestDigest: string;
 }

package/src/vector-cortex/livewire/livewire-live.ts

@@ -0,0 +1,223 @@
+/**
+ * vector-cortex/livewire/livewire-live.ts — LIVEWIRE in-process live state.
+ *
+ * Holds the LIVE subsystem objects for ONE stateDir: the VC7A `CrystalStore`,
+ * the VC7C cache breaker, the per-miss-class tallies, the VC8B shadow metrics,
+ * and the VC7B economics computed bit. This is the object the RUNTIME accumulates
+ * into (`recordMiss`, `recordServeBlocked`, `recordShadowRun`, ...) and that the
+ * reader-only dashboard routes snapshot out of. Kept separate from the registry
+ * (which owns the per-stateDir `Map` + persistence) so neither file crosses the
+ * 300-line soft-as-hard gate.
+ *
+ * AGGREGATE-FIRST, COUNTS ONLY. `snapshotOf` projects the live objects down to
+ * the SECURITY_PRIVACY-safe `LivewireSnapshot` (counts + codes + triad mode) that
+ * gets persisted and rendered. No session id, digest, range, profile id, bytes,
+ * or prompt text can pass through ANY of these fields.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any`. Non-fatal: every derive is
+ * a pure read.
+ */
+
+import { CrystalStore } from "../cache/store.js";
+import { createCacheBreaker } from "../cache/breaker.js";
+import type { MissClass } from "../cache/diagnostics-types.js";
+import { validateProfileEconomics } from "../provider/economics.js";
+import { BASE_PROVIDER_PROFILES } from "../provider/registry.js";
+import type {
+  LivewireDiagnosticsAggregate,
+  LivewireEconomicsAggregate,
+  LivewirePolicyAggregate,
+  LivewireSnapshot,
+} from "./livewire-types.js";
+
+/** One VC7C miss classification tally (in-process, counts only). */
+export interface LivewireDiagnosticsRecord {
+  readonly tallies: { [K in MissClass]: number };
+  serveBlocked: number;
+  /**
+   * Observable breaker state (CLOSED_A / OPEN_B / ... / MANUAL_HALT). Tracked as
+   * a field so it survives process restart: the runtime syncs it from the live
+   * breaker when persisting, and a reader process restores it from the snapshot
+   * (a fresh in-process breaker is always CLOSED_A, which would be misleading).
+   */
+  breakerState: string;
+  lastFailure: string | null;
+}
+
+/** One VC7B economics record (computed bit + profile tallies + last failure). */
+export interface LivewireEconomicsRecord {
+  computed: boolean;
+  /** Provider profiles that declare cache economics (static from BASE_PROFILES). */
+  profileCount: number;
+  /** Exclusions that carry a proving fixture id (static from BASE_PROFILES). */
+  provenExclusions: number;
+  /** Exclusions rejected for lacking a fixture id (static from BASE_PROFILES). */
+  unprovenExclusions: number;
+  lastFailure: string | null;
+}
+
+/**
+ * Static VC7B economics profile tallies derived from the base provider registry.
+ * `profileCount` counts profiles that declare economics; `provenExclusions` /
+ * `unprovenExclusions` tally the exclusion sets validated against the fixture
+ * rule. This is PURE (no storage/clock/network) and identical regardless of the
+ * `MEGACOMPACT_VC7B` flag — only the emission/route seam is flag-gated.
+ */
+function baseEconomicsTallies(): {
+  profileCount: number;
+  provenExclusions: number;
+  unprovenExclusions: number;
+} {
+  let profileCount = 0;
+  let provenExclusions = 0;
+  let unprovenExclusions = 0;
+  for (const bundle of BASE_PROVIDER_PROFILES) {
+    const econ = bundle.profile.economics;
+    if (econ === null) continue;
+    profileCount += 1;
+    const codes = validateProfileEconomics(bundle.profile, econ);
+    const failed = new Set(codes);
+    for (const _ex of bundle.profile.excludedJsonPointers) {
+      if (failed.has("ECON_EXCLUSION_UNPROVEN")) {
+        unprovenExclusions += 1;
+      } else {
+        provenExclusions += 1;
+      }
+    }
+  }
+  return { profileCount, provenExclusions, unprovenExclusions };
+}
+
+/** One VC8B shadow-policy record (metrics + active pressure version). */
+export interface LivewireShadowRecord {
+  shadowDecisions: number;
+  clampedDecisions: number;
+  rejectedInputs: number;
+  liveMutations: number;
+  pressureVersion: 1 | 2;
+  lastFailure: string | null;
+}
+
+/** The live, in-process state for one stateDir. */
+export interface LivewireLiveState {
+  readonly crystalStore: CrystalStore;
+  readonly breaker: ReturnType<typeof createCacheBreaker>;
+  readonly diagnostics: LivewireDiagnosticsRecord;
+  readonly economics: LivewireEconomicsRecord;
+  readonly shadow: LivewireShadowRecord;
+}
+
+/** A zeroed per-class tally map. */
+function zeroTallies(): LivewireDiagnosticsRecord["tallies"] {
+  return {
+    profile: 0,
+    range: 0,
+    dependency: 0,
+    request: 0,
+    generation: 0,
+    unknown: 0,
+  };
+}
+
+/** Build a fresh (empty) live state with real subsystem objects. */
+export function createLiveState(): LivewireLiveState {
+  const econTallies = baseEconomicsTallies();
+  return {
+    crystalStore: new CrystalStore(),
+    breaker: createCacheBreaker(),
+    diagnostics: {
+      tallies: zeroTallies(),
+      serveBlocked: 0,
+      breakerState: "CLOSED_A",
+      lastFailure: null,
+    },
+    economics: {
+      computed: false,
+      profileCount: econTallies.profileCount,
+      provenExclusions: econTallies.provenExclusions,
+      unprovenExclusions: econTallies.unprovenExclusions,
+      lastFailure: null,
+    },
+    shadow: {
+      shadowDecisions: 0,
+      clampedDecisions: 0,
+      rejectedInputs: 0,
+      liveMutations: 0,
+      pressureVersion: 1,
+      lastFailure: null,
+    },
+  };
+}
+
+/** Project the live state down to the persisted, reader-only aggregate. */
+export function snapshotOf(state: LivewireLiveState): LivewireSnapshot {
+  const crystals = state.crystalStore.stats();
+  const diag: LivewireDiagnosticsAggregate = {
+    profileMisses: state.diagnostics.tallies.profile,
+    rangeMisses: state.diagnostics.tallies.range,
+    dependencyMisses: state.diagnostics.tallies.dependency,
+    requestMisses: state.diagnostics.tallies.request,
+    generationMisses: state.diagnostics.tallies.generation,
+    unknownMisses: state.diagnostics.tallies.unknown,
+    serveBlocked: state.diagnostics.serveBlocked,
+    breakerState: state.diagnostics.breakerState,
+    lastFailure: state.diagnostics.lastFailure,
+  };
+  const econ: LivewireEconomicsAggregate = {
+    profileCount: state.economics.profileCount,
+    provenExclusions: state.economics.provenExclusions,
+    unprovenExclusions: state.economics.unprovenExclusions,
+    computed: state.economics.computed,
+    lastFailure: state.economics.lastFailure,
+  };
+  const policy: LivewirePolicyAggregate = {
+    shadowDecisions: state.shadow.shadowDecisions,
+    clampedDecisions: state.shadow.clampedDecisions,
+    rejectedInputs: state.shadow.rejectedInputs,
+    liveMutations: state.shadow.liveMutations,
+    pressureVersion: state.shadow.pressureVersion,
+    lastFailure: state.shadow.lastFailure,
+  };
+  return {
+    schema: "vector-cortex-livewire-v1",
+    crystals: {
+      mode: crystals.mode,
+      crystalCount: crystals.crystalCount,
+      totalBytes: crystals.totalBytes,
+      hits: crystals.hits,
+      misses: crystals.misses,
+      hitBytes: crystals.hitBytes,
+      writes: crystals.writes,
+      duplicateWrites: crystals.duplicateWrites,
+      collisions: crystals.collisions,
+    },
+    diagnostics: diag,
+    economics: econ,
+    policy,
+  };
+}
+
+/** Seed a fresh live state's CUMULATIVE counters from a persisted snapshot. */
+export function rehydrateLive(state: LivewireLiveState, snap: LivewireSnapshot): void {
+  state.crystalStore.rehydrate(snap.crystals);
+  state.diagnostics.tallies.profile = snap.diagnostics.profileMisses;
+  state.diagnostics.tallies.range = snap.diagnostics.rangeMisses;
+  state.diagnostics.tallies.dependency = snap.diagnostics.dependencyMisses;
+  state.diagnostics.tallies.request = snap.diagnostics.requestMisses;
+  state.diagnostics.tallies.generation = snap.diagnostics.generationMisses;
+  state.diagnostics.tallies.unknown = snap.diagnostics.unknownMisses;
+  state.diagnostics.serveBlocked = snap.diagnostics.serveBlocked;
+  state.diagnostics.breakerState = snap.diagnostics.breakerState;
+  state.diagnostics.lastFailure = snap.diagnostics.lastFailure;
+  state.economics.computed = snap.economics.computed;
+  state.economics.profileCount = snap.economics.profileCount;
+  state.economics.provenExclusions = snap.economics.provenExclusions;
+  state.economics.unprovenExclusions = snap.economics.unprovenExclusions;
+  state.economics.lastFailure = snap.economics.lastFailure;
+  state.shadow.shadowDecisions = snap.policy.shadowDecisions;
+  state.shadow.clampedDecisions = snap.policy.clampedDecisions;
+  state.shadow.rejectedInputs = snap.policy.rejectedInputs;
+  state.shadow.liveMutations = snap.policy.liveMutations;
+  state.shadow.pressureVersion = snap.policy.pressureVersion;
+  state.shadow.lastFailure = snap.policy.lastFailure;
+}

package/src/vector-cortex/livewire/livewire-registry.ts

@@ -0,0 +1,91 @@
+/**
+ * vector-cortex/livewire/livewire-registry.ts — per-stateDir LIWIRE registry.
+ *
+ * The single seam the runtime and the reader-only dashboard routes BOTH access.
+ * It owns a `Map<stateDir, LivewireLiveState>` (one live subsystem cluster per
+ * repo) and lazily opens a state on first access, rehydrating its cumulative
+ * counters from the persisted aggregate snapshot (`livewire-snapshot.ts`) so a
+ * freshly-spawned process — e.g. the dashboard server — reports the same counts
+ * the runtime has already accumulated.
+ *
+ * The runtime WRITES through this registry (see `livewire-runtime.ts`): each
+ * mutation persists a reduced, count-only snapshot. The routes READ through
+ * `livewireOf(stateDir)` and call the pure `snapshotOf`. There is no other path.
+ *
+ * BEST-EFFORT + NON-FATAL. `openLivewire` never throws: persistence failures are
+ * swallowed by the snapshot layer and state is always returned. PREVENT-PI-004
+ * (local in-process Map + filesystem only), PREVENT-011 (no `any`).
+ */
+
+import type { LivewireSnapshot } from "./livewire-types.js";
+import {
+  createLiveState,
+  rehydrateLive,
+  snapshotOf,
+  type LivewireLiveState,
+} from "./livewire-live.js";
+import {
+  loadLivewireSnapshot,
+  saveLivewireSnapshot,
+} from "./livewire-snapshot.js";
+
+/** The per-stateDir registry (process-local; a fresh process starts empty). */
+const REGISTRY = new Map<string, LivewireLiveState>();
+
+/** Optional structured logger for best-effort failure events. */
+export type LivewireLogger = (line: unknown) => void;
+
+let activeLogger: LivewireLogger | undefined;
+
+/**
+ * Bind the structured logger the snapshot layer uses for its non-fatal write
+ * failures. The runtime calls this once at startup with its JSON logger.
+ */
+export function setLivewireLogger(logger: LivewireLogger | undefined): void {
+  activeLogger = logger;
+}
+
+/**
+ * Open (or return the cached) live state for a stateDir. Lazy: on first access
+ * it rehydrates from the persisted aggregate so a separate dashboard process
+ * reflects prior runtime work. Never throws.
+ */
+export function livewireOf(stateDir: string): LivewireLiveState {
+  const cached = REGISTRY.get(stateDir);
+  if (cached !== undefined) return cached;
+  const state = createLiveState();
+  const snap = loadLivewireSnapshot(stateDir);
+  if (snap !== null) rehydrateLive(state, snap);
+  REGISTRY.set(stateDir, state);
+  return state;
+}
+
+/**
+ * Persist a state's reduced aggregate (counts + codes only). Best-effort and
+ * non-fatal. Called by the runtime after every mutation so the snapshot stays
+ * fresh for any reader process.
+ */
+export function persistLivewire(state: LivewireLiveState, stateDir: string): void {
+  saveLivewireSnapshot(stateDir, snapshotOf(state), activeLogger);
+}
+
+/** Persist the live state for a stateDir (convenience over open + persist). */
+export function flushLivewire(stateDir: string): void {
+  const state = REGISTRY.get(stateDir);
+  if (state === undefined) return;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Build the reader aggregate for one stateDir WITHOUT persisting — the reader
+ * seam the dashboard routes call. Reads the live state (rehydrated from disk on
+ * first access) and projects it to the count-only snapshot.
+ */
+export function readLivewireSnapshot(stateDir: string): LivewireSnapshot {
+  return snapshotOf(livewireOf(stateDir));
+}
+
+/** For tests: drop the registry so a fresh stateDir is fully rehydrated. */
+export function _resetLivewireRegistryForTests(): void {
+  REGISTRY.clear();
+}

package/src/vector-cortex/livewire/livewire-runtime.ts

@@ -0,0 +1,117 @@
+/**
+ * vector-cortex/livewire/livewire-runtime.ts — LIVEWIRE runtime accumulation seam.
+ *
+ * The WRITE side of LIVEWIRE: the runtime calls these methods wherever the
+ * corresponding subsystem path actually runs, and each call accumulates into the
+ * per-stateDir live state and persists a reduced count-only snapshot (best-effort,
+ * non-fatal). This is the seam that turns the pure VC7A/VC7B/VC7C/VC8B arithmetic
+ * into LIVE dashboard state.
+ *
+ * FLAG SEMANTICS (mirrors every other VC writer): these methods run REGARDLESS of
+ * the corresponding `MEGACOMPACT_VC*` flag — the arithmetic is never skipped, and
+ * a miss is still classified / a write still stored exactly as before. Only the
+ * dashboard REPORT seam (`routes-vector-cortex-*.ts`) is flag-gated: with the
+ * flag off a route returns the legacy `deferredReason` (byte-identical to the
+ * predecessor). The reporter emit seams in `cache/*-emit.ts` / `controller/
+ * policy-emit.ts` remain the event-announcement gate.
+ *
+ * PREVENT-PI-004: no network. PREVENT-011: no `any`. Every write is best-effort.
+ */
+
+import type { MissClass, MissObservation } from "../cache/diagnostics-types.js";
+import { classifyMiss } from "../cache/diagnostics.js";
+import { shouldBlockServe } from "../cache/breaker.js";
+import type { CrystalV1, CrystalWriteResult } from "../cache/types.js";
+import type { ShadowResult } from "../controller/types.js";
+import { livewireOf, persistLivewire } from "./livewire-registry.js";
+
+/**
+ * Record a VC7A crystal WRITE attempt (write-once + collision arithmetic). The
+ * caller passes the fully-formed `CrystalV1`; the store returns the write result
+ * (first-write / idempotent / collision). The dashboard's `stats()` reflects it.
+ *
+ * @returns the store's write verdict, forwarded so the runtime can act on a
+ *          collision without re-deriving it.
+ */
+export function recordCrystalWrite(stateDir: string, crystal: CrystalV1): CrystalWriteResult {
+  const state = livewireOf(stateDir);
+  const result = state.crystalStore.write(crystal);
+  persistLivewire(state, stateDir);
+  return result;
+}
+
+/**
+ * Record a VC7A crystal READ attempt. Returns the stored crystal (or undefined
+ * on a miss / mode C), mirroring `CrystalStore.read` so the cache-serve path can
+ * use this seam entirely.
+ */
+export function readCrystal(stateDir: string, keyDigest: string): CrystalV1 | undefined {
+  const state = livewireOf(stateDir);
+  const found = state.crystalStore.read(keyDigest);
+  persistLivewire(state, stateDir);
+  return found;
+}
+
+/**
+ * Record a VC7C miss observation: classify it into its exclusive class and tally
+ * it. When the class demands the cache serve be demoted BEFORE answering, the
+ * `serveBlocked` counter is also incremented. The live breaker state itself is
+ * driven by the real cache-serve path (through `breaker.execute`), not here; this
+ * seam only observes and tallies.
+ *
+ * @returns the exclusive class the observation was tallied under.
+ */
+export function observeCacheMiss(stateDir: string, observation: MissObservation): MissClass {
+  const state = livewireOf(stateDir);
+  const missClass = classifyMiss(observation).missClass;
+  state.diagnostics.tallies[missClass] += 1;
+  if (shouldBlockServe(missClass)) state.diagnostics.serveBlocked += 1;
+  persistLivewire(state, stateDir);
+  return missClass;
+}
+
+/**
+ * Record a VC7C cache serve that the breaker demoted BEFORE answering. Talls the
+ * `serveBlocked` counter the diagnostics card surfaces.
+ */
+export function recordServeBlocked(stateDir: string): void {
+  const state = livewireOf(stateDir);
+  state.diagnostics.serveBlocked += 1;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Record a VC8B shadow evaluation run: accumulate its decision metrics so the
+ * policy card reports how many shadow decisions were evaluated / clamped /
+ * rejected and how many live mutations the shadow proved (structurally 0).
+ */
+export function recordShadowRun(stateDir: string, result: ShadowResult): void {
+  const state = livewireOf(stateDir);
+  state.shadow.shadowDecisions += result.metrics.evaluated;
+  state.shadow.clampedDecisions += result.metrics.clamped;
+  state.shadow.rejectedInputs += result.metrics.rejected;
+  state.shadow.liveMutations += result.metrics.liveMutations;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Set the active M7 pressure version (1 = legacy, 2 = migrated). The runtime
+ * calls this after a successful `migratePressureV2` so the policy card reflects
+ * the live migration state rather than a hardcoded 1.
+ */
+export function setPressureVersion(stateDir: string, version: 1 | 2): void {
+  const state = livewireOf(stateDir);
+  state.shadow.pressureVersion = version;
+  persistLivewire(state, stateDir);
+}
+
+/**
+ * Mark that VC7B cache economics have actually been computed at runtime (the
+ * `computed` bit drives the economics card's `hasData`). The runtime calls this
+ * after the first real `computeEconomics` over observed usage.
+ */
+export function markEconomicsComputed(stateDir: string): void {
+  const state = livewireOf(stateDir);
+  state.economics.computed = true;
+  persistLivewire(state, stateDir);
+}