psyclaw 0.27.23 → 0.28.1

package/vendor/ars/shared/contracts/passport/timeline.schema.json

@@ -0,0 +1,102 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/Imbad0202/academic-research-skills/shared/contracts/passport/timeline.schema.json",
+  "title": "Material Passport Timeline (phase2_investigation/timeline.yaml)",
+  "description": "Aggregate schema for the v3.9.4 timeline sidecar. Per spec §3.1 and §4. Owned by timeline_extraction_agent; literature_corpus_entry.schema.json is unmodified.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "sources"],
+  "properties": {
+    "schema_version": { "const": "1.0", "description": "Schema-internal version. v3.9.4 ships 1.0. Future drafts bump this constant to drive explicit migration." },
+    "sources": {
+      "type": "array",
+      "description": "Per-source temporal facts (publication date, effective range, supersession chain). Each entry joins to literature_corpus[] via citation_key. Per spec §3.1.",
+      "items": { "$ref": "#/$defs/timeline_source_entry" }
+    },
+    "events": {
+      "type": "array",
+      "description": "Events referenced in prose without a bibliographic citation (e.g., 'law repealed in 2024'). Optional; absent or empty when no such events exist. Per spec §3.1 + §4 join key discipline.",
+      "items": { "$ref": "#/$defs/timeline_event_entry" }
+    }
+  },
+  "$defs": {
+    "date_object": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["value", "precision", "provenance"],
+      "properties": {
+        "value": { "type": ["string", "null"] },
+        "precision": { "enum": ["day", "month", "year", "interval", "unknown"] },
+        "open_ended": { "type": "boolean", "description": "True ONLY on effective_date_range.end when the source is still in force (verifier treats as +∞). MUST be absent or false on any other date. False or absent with value:null + precision:unknown means missing data (verifier emits TEMPORAL-METADATA-MISSING). Per spec §3.1 date shape table." },
+        "provenance": { "$ref": "#/$defs/provenance_object" }
+      }
+    },
+    "provenance_object": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["method", "confidence"],
+      "properties": {
+        "method": { "enum": ["crossref_lookup", "pdftotext_cover", "user_override", "adapter_metadata", "unknown"] },
+        "raw": { "type": ["string", "null"] },
+        "source_locator": { "type": ["string", "null"] },
+        "confidence": { "enum": ["high", "medium", "low", "unverified"] }
+      }
+    },
+    "timeline_source_entry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["citation_key", "type"],
+      "properties": {
+        "citation_key": { "type": "string", "pattern": "^[A-Za-z][A-Za-z0-9_:-]*$" },
+        "type": { "type": "string", "minLength": 1, "description": "Free-form classification string (e.g., 'institutional-document', 'policy', 'standard'). No closed vocabulary at v1.0; v3.10 may introduce one. Per spec §3.1 sources entry shape." },
+        "published_date": { "$ref": "#/$defs/date_object" },
+        "effective_date_range": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["start", "end"],
+          "properties": {
+            "start": { "$ref": "#/$defs/date_object" },
+            "end": { "$ref": "#/$defs/date_object" }
+          }
+        },
+        "supersedes": { "type": ["string", "null"] },
+        "superseded_by": { "type": ["string", "null"] },
+        "version_family_id": { "type": ["string", "null"] },
+        "version_catalog_completeness": { "enum": ["exhaustive", "partial", "unknown"] }
+      },
+      "allOf": [
+        {
+          "description": "open_ended:true is permitted ONLY on effective_date_range.end (spec §3.1 date shape table). Rejecting open_ended:true on start.",
+          "if": {
+            "required": ["effective_date_range"],
+            "properties": {
+              "effective_date_range": {
+                "type": "object",
+                "properties": {
+                  "start": {
+                    "type": "object",
+                    "properties": { "open_ended": { "const": true } },
+                    "required": ["open_ended"]
+                  }
+                },
+                "required": ["start"]
+              }
+            }
+          },
+          "then": { "not": {} }
+        }
+      ]
+    },
+    "timeline_event_entry": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["event_id", "date"],
+      "properties": {
+        "event_id": { "type": "string", "pattern": "^[A-Za-z][A-Za-z0-9_:-]*$" },
+        "description": { "type": "string" },
+        "date": { "$ref": "#/$defs/date_object" },
+        "governed_by": { "type": ["string", "null"] }
+      }
+    }
+  }
+}

package/vendor/ars/shared/contracts/passport/uncited_assertion.schema.json

@@ -0,0 +1,56 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/Imbad0202/academic-research-skills/shared/contracts/passport/uncited_assertion.schema.json",
+  "title": "Material Passport Uncited Assertion Entry",
+  "description": "One entry in Material Passport Schema 9 uncited_assertions[] aggregate. Per uncited-assertion finding emitted by claim_ref_alignment_audit_agent §4 step 6 (D4-c three-condition token rule). Rides in its own aggregate because the finding has no ref_slug to evaluate — embedding it in claim_audit_result would either force a sentinel ref_slug value or relax claim_audit_result.required, both fighting that schema's grain. Always LOW-WARN advisory at the finalizer; gate-refuse is reserved for citation-level defects and constraint_violation. Cross-field invariants U-INV-1..U-INV-4 are lint-enforced in scripts/check_claim_audit_consistency.py. See docs/design/2026-05-15-issue-103-claim-alignment-audit-spec.md §3.3.",
+
+  "type": "object",
+  "additionalProperties": false,
+
+  "required": [
+    "finding_id",
+    "sentence_text",
+    "section_path",
+    "trigger_tokens",
+    "detected_at",
+    "rule_version"
+  ],
+
+  "properties": {
+    "finding_id": {
+      "type": "string",
+      "pattern": "^UA-[0-9]{3,}$",
+      "description": "Per-passport unique finding identifier for uncited_assertions[]. U-INV-1 enforces uniqueness."
+    },
+    "sentence_text": { "type": "string", "minLength": 1, "maxLength": 2000 },
+    "section_path": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Hierarchical path from document root to the section containing the sentence, e.g. '2. Methods > 2.3 Sampling'."
+    },
+    "trigger_tokens": {
+      "type": "array",
+      "minItems": 1,
+      "items": { "type": "string" },
+      "description": "Concrete tokens that matched D4-c condition 1 (quantifiers or empirical-claim verbs). E.g. ['67%', 'showed']. U-INV-2 enforces non-empty."
+    },
+    "detected_at": { "type": "string", "format": "date-time" },
+    "rule_version": {
+      "const": "D4-c-v1",
+      "description": "Frozen literal for the v3.8.0 release. U-INV-3 enforces equality. Future rule revisions bump the constant and require re-lint."
+    },
+    "upstream_owner_agent": {
+      "enum": ["synthesis_agent", "draft_writer_agent", "report_compiler_agent", null]
+    },
+    "manifest_claim_id": {
+      "type": ["string", "null"],
+      "pattern": "^C-[0-9]{3,}$",
+      "description": "When the uncited sentence corresponds to a claim_id in the active claim_intent_manifest. Per D4-c last paragraph: manifest membership does NOT exempt a sentence from being flagged. When present, MUST be paired with scoped_manifest_id to disambiguate against C-001 collision across manifests."
+    },
+    "scoped_manifest_id": {
+      "type": ["string", "null"],
+      "pattern": "^M-[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z-[0-9a-f]{4}$",
+      "description": "Points to the claim_intent_manifest.manifest_id owning the referenced manifest_claim_id. The (scoped_manifest_id, manifest_claim_id) pair uniquely identifies which manifest's claim this uncited finding corresponds to, since C-001 may collide across manifests in the same passport. Required when manifest_claim_id != null (U-INV-4 cross-array integrity). Null when manifest_claim_id is null (the uncited sentence does not correspond to any manifest claim)."
+    }
+  }
+}

package/vendor/ars/shared/contracts/passport/uncited_audit_failure.schema.json

@@ -0,0 +1,72 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/Imbad0202/academic-research-skills/shared/contracts/passport/uncited_audit_failure.schema.json",
+  "title": "Material Passport Uncited Audit Failure Entry",
+  "description": "One entry in Material Passport Schema 9 uncited_audit_failures[] aggregate (v3.8.2 / #118). Per uncited-sentence × manifest pair where the constraint judge raised a JudgeInvocationError during §4 step 5 stream (d) judging. Rides in its own aggregate because the cited-path INV-14 audit_tool_failure row (a claim_audit_result entry carrying ref_retrieval_method=audit_tool_failure) cannot be reused — claim_audit_result.ref_slug is required and the uncited path has no ref to bind; uncited_assertion is LOW-WARN advisory and routing UAF through it would conflate D4-c detector signal with audit-time infrastructure failure. Drives the [CLAIM-AUDIT-TOOL-FAILURE-UNCITED — <fault-class>] formatter annotation at MED-WARN advisory tier; gate passes — retry-next-pass remediation. Pre-v3.8.2 behaviour silently substituted NOT_VIOLATED on JudgeInvocationError and suppressed HIGH-WARN constraint checks; v3.8.2 routes failures through this aggregate so operational signal surfaces without dropping audit coverage. Cross-field invariants UAF-INV-1..UAF-INV-6 are lint-enforced in scripts/check_claim_audit_consistency.py. See docs/design/2026-05-15-issue-103-claim-alignment-audit-spec.md §3.6.",
+
+  "type": "object",
+  "additionalProperties": false,
+
+  "required": [
+    "finding_id",
+    "claim_text",
+    "section_path",
+    "scoped_manifest_id",
+    "fault_class",
+    "rationale",
+    "judge_model",
+    "judge_run_at",
+    "rule_version"
+  ],
+
+  "properties": {
+    "finding_id": {
+      "type": "string",
+      "pattern": "^UAF-[0-9]{3,}$",
+      "description": "Per-passport unique finding identifier for uncited_audit_failures[]. UAF-INV-1 enforces uniqueness."
+    },
+    "claim_text": { "type": "string", "minLength": 1, "maxLength": 2000 },
+    "section_path": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Hierarchical path from document root to the section containing the offending sentence. Mirrors uncited_assertion.section_path."
+    },
+    "scoped_manifest_id": {
+      "type": "string",
+      "pattern": "^M-[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}Z-[0-9a-f]{4}$",
+      "description": "Points to the claim_intent_manifest.manifest_id whose MNC/NC-C set was being judged when the failure occurred. Required — no MANIFEST-MISSING sentinel admitted; UAF emission requires an active manifest scope. UAF-INV-2 enforces cross-array resolvability."
+    },
+    "manifest_claim_id": {
+      "type": ["string", "null"],
+      "pattern": "^C-[0-9]{3,}$",
+      "description": "When the sentence was bound to a manifest claim (sentence carries manifest_claim_id per §4 step 5 stream (d) NC-C judging path), points to that claim. Null when the judge call was against MNCs only (manifest-wide constraints, no claim binding). UAF-INV-3 enforces (scoped_manifest_id, manifest_claim_id) pair integrity when non-null. Mirrors constraint_violation.manifest_claim_id polarity."
+    },
+    "fault_class": {
+      "enum": [
+        "judge_timeout",
+        "judge_api_error",
+        "judge_parse_error",
+        "cache_corruption",
+        "retrieval_api_error",
+        "retrieval_timeout",
+        "retrieval_network_error"
+      ],
+      "description": "Same closed enum as INV-14 fault-class taxonomy on the cited path. Sourced from JudgeInvocationError.fault_class at the raise site in claim_audit_pipeline.py."
+    },
+    "rationale": {
+      "type": "string",
+      "minLength": 1,
+      "maxLength": 2000,
+      "description": "MUST begin with this row's fault_class value followed by ': ' and a free-form detail. UAF-INV-5 enforces the prefix match. Example: 'judge_timeout: judge timed out after 30s'. Mirrors INV-14 rationale format on the cited path."
+    },
+    "judge_model": { "type": "string", "minLength": 1 },
+    "judge_run_at": { "type": "string", "format": "date-time" },
+    "rule_version": {
+      "const": "D4-c-v1-uaf-v1",
+      "description": "Frozen literal for the v3.8.2 release. UAF surface version. Distinguishes from D4-c-v1 (uncited_assertion D4-c detector) and D4-a-v1 (constraint_violation). Future revisions bump the literal and require re-lint."
+    },
+    "upstream_owner_agent": {
+      "enum": ["synthesis_agent", "draft_writer_agent", "report_compiler_agent", null]
+    }
+  }
+}

package/vendor/ars/shared/contracts/passport/user_attested_read_resolution.schema.json

@@ -0,0 +1,87 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/Imbad0202/academic-research-skills/shared/contracts/passport/user_attested_read_resolution.schema.json",
+  "title": "ARS deterministic transient USER_ATTESTED_READ resolution",
+  "description": "A transient routing decision recomputed from the current ledger and exact current citation anchor on every finalizer pass. It is not a persisted audit receipt and deliberately contains no ledger or anchor digest.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "artifact_role", "citation_key", "signal_type", "state", "ok_eligible", "finalizer_disposition", "reason"],
+  "properties": {
+    "schema_version": { "const": "user-attested-read-resolution/1.0" },
+    "artifact_role": { "const": "transient_routing_decision" },
+    "citation_key": { "type": "string", "minLength": 1 },
+    "signal_type": { "const": "USER_ATTESTED_READ" },
+    "state": {
+      "enum": [
+        "not_attested",
+        "rescinded",
+        "covered",
+        "partial_coverage",
+        "coverage_unknown",
+        "anchor_unresolved",
+        "ledger_invalid"
+      ]
+    },
+    "ok_eligible": { "type": "boolean" },
+    "finalizer_disposition": {
+      "enum": [
+        "eligible_for_ok",
+        "acknowledged_partial",
+        "unacknowledged_low_warn",
+        "anchor_precedence",
+        "block_invalid_ledger"
+      ]
+    },
+    "reason": { "type": "string", "minLength": 1, "maxLength": 1000 },
+    "governing_marked_at": {
+      "type": "string",
+      "pattern": "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{1,6})?Z$"
+    }
+  },
+  "allOf": [
+    {
+      "if": { "properties": { "state": { "const": "covered" } }, "required": ["state"] },
+      "then": {
+        "properties": {
+          "ok_eligible": { "const": true },
+          "finalizer_disposition": { "const": "eligible_for_ok" }
+        }
+      },
+      "else": { "properties": { "ok_eligible": { "const": false } } }
+    },
+    {
+      "if": {
+        "properties": { "state": { "enum": ["partial_coverage", "coverage_unknown"] } },
+        "required": ["state"]
+      },
+      "then": { "properties": { "finalizer_disposition": { "const": "acknowledged_partial" } } }
+    },
+    {
+      "if": {
+        "properties": { "state": { "enum": ["not_attested", "rescinded"] } },
+        "required": ["state"]
+      },
+      "then": { "properties": { "finalizer_disposition": { "const": "unacknowledged_low_warn" } } }
+    },
+    {
+      "if": { "properties": { "state": { "const": "anchor_unresolved" } }, "required": ["state"] },
+      "then": { "properties": { "finalizer_disposition": { "const": "anchor_precedence" } } }
+    },
+    {
+      "if": { "properties": { "state": { "const": "ledger_invalid" } }, "required": ["state"] },
+      "then": { "properties": { "finalizer_disposition": { "const": "block_invalid_ledger" } } }
+    },
+    {
+      "if": {
+        "properties": {
+          "state": {
+            "enum": ["rescinded", "covered", "partial_coverage", "coverage_unknown"]
+          }
+        },
+        "required": ["state"]
+      },
+      "then": { "required": ["governing_marked_at"] },
+      "else": { "not": { "required": ["governing_marked_at"] } }
+    }
+  ]
+}

package/vendor/ars/shared/contracts/passport/version_records.schema.json

@@ -0,0 +1,138 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/Imbad0202/academic-research-skills/shared/contracts/passport/version_records.schema.json",
+  "title": "Material Passport Version Records (phase2_investigation/version_records.yaml)",
+  "description": "Aggregate schema for academic citation version-family reconciliation. Per Kong #258. Owned by timeline_extraction_agent; literature_corpus_entry.schema.json remains unmodified.",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["schema_version", "version_records"],
+  "properties": {
+    "schema_version": {
+      "const": "1.0",
+      "description": "Schema-internal version. Kong #258 ships 1.0."
+    },
+    "version_records": {
+      "type": "array",
+      "description": "One record per academic work version family, such as preprint -> proceedings -> journal extension.",
+      "items": { "$ref": "#/$defs/version_family_record" }
+    }
+  },
+  "$defs": {
+    "key": {
+      "type": "string",
+      "pattern": "^[A-Za-z][A-Za-z0-9_:-]*$"
+    },
+    "arxiv_id": {
+      "type": "string",
+      "pattern": "^([A-Za-z][A-Za-z0-9-]*(\\.[A-Za-z0-9-]+)*/\\d{7}(v[1-9]\\d*)?|\\d{4}\\.\\d{4,5}(v[1-9]\\d*)?)$"
+    },
+    "date_object": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["value", "precision"],
+      "properties": {
+        "value": { "type": ["string", "null"] },
+        "precision": { "enum": ["day", "month", "year", "unknown"] }
+      }
+    },
+    "version_family_record": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["version_family_id", "canonical_slug", "discovery_status", "known_versions"],
+      "properties": {
+        "version_family_id": {
+          "$ref": "#/$defs/key",
+          "description": "Stable family key. Joins to timeline.yaml sources[].version_family_id when present."
+        },
+        "canonical_slug": {
+          "$ref": "#/$defs/key",
+          "description": "Preferred citation slug for the family, not necessarily a concrete version."
+        },
+        "primary_version_key": {
+          "type": ["string", "null"],
+          "description": "Scholar-selected version_key to render by default. Null means user confirmation is pending."
+        },
+        "discovery_status": {
+          "enum": ["candidate", "user_confirmed", "rejected", "needs_review"],
+          "description": "Advisory discovery state. Only user_confirmed should drive final citation standardization."
+        },
+        "reconciliation_note": {
+          "type": ["string", "null"],
+          "description": "Optional scholar-facing note explaining version choice or unresolved ambiguity."
+        },
+        "known_versions": {
+          "type": "array",
+          "minItems": 1,
+          "items": { "$ref": "#/$defs/known_version" }
+        }
+      }
+    },
+    "known_version": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["version_key", "kind", "title", "year", "metadata_provenance"],
+      "properties": {
+        "version_key": {
+          "$ref": "#/$defs/key",
+          "description": "Stable key for this concrete version within the family."
+        },
+        "citation_key": {
+          "type": ["string", "null"],
+          "description": "Optional join to literature_corpus[].citation_key when this concrete version has its own corpus entry."
+        },
+        "kind": {
+          "enum": [
+            "arxiv_preprint",
+            "proceedings",
+            "journal_article",
+            "book",
+            "book_chapter",
+            "report",
+            "dataset",
+            "other"
+          ]
+        },
+        "title": { "type": "string", "minLength": 1 },
+        "year": { "type": "integer", "minimum": 1000, "maximum": 2100 },
+        "venue": { "type": ["string", "null"] },
+        "doi": {
+          "type": ["string", "null"],
+          "pattern": "^10\\.[0-9]{4,9}/[^\\s]+$"
+        },
+        "arxiv_id": {
+          "anyOf": [
+            { "$ref": "#/$defs/arxiv_id" },
+            { "type": "null" }
+          ]
+        },
+        "url": { "type": ["string", "null"] },
+        "publication_date": {
+          "anyOf": [
+            { "$ref": "#/$defs/date_object" },
+            { "type": "null" }
+          ]
+        },
+        "metadata_provenance": {
+          "enum": [
+            "crossref_lookup",
+            "openalex_lookup",
+            "arxiv_api",
+            "adapter_metadata",
+            "user_override",
+            "manual",
+            "unknown"
+          ]
+        },
+        "source_locator": {
+          "type": ["string", "null"],
+          "description": "Concrete URL, DOI, arXiv locator, local PDF page, or KB pointer used to verify this version."
+        },
+        "claim_scope_note": {
+          "type": ["string", "null"],
+          "description": "What kinds of quoted text or claims are safe to attribute to this concrete version."
+        },
+        "notes": { "type": ["string", "null"] }
+      }
+    }
+  }
+}

package/vendor/ars/shared/contracts/patch/block_manifest.schema.json

@@ -0,0 +1,45 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/Imbad0202/academic-research-skills/shared/contracts/patch/block_manifest.schema.json",
+  "title": "Block Manifest",
+  "description": "#89 Item 7 block manifest (spec docs/design/2026-06-10-390-diff-patch-revision-mode-spec.md §3.1). Machine-generated sidecar emitted by scripts/ars_anchorize_draft.py beside the anchored draft (<draft>.block-manifest.json) and included in the writer's revision-invocation context. It is the ONLY legitimate hash source for a patch document: the writer copies base_draft_hash and per-op old_hash values from here, never computes them (Bucket A agents have all Bash denied, #134; an LLM asked to emit a SHA-256 would hallucinate one). Sidecar artifact, NOT a passport field (§6).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["manifest_format_version", "base_draft_hash", "blocks"],
+  "properties": {
+    "manifest_format_version": {
+      "type": "string",
+      "const": "1.0"
+    },
+    "base_draft_hash": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{12}$",
+      "description": "First 12 hex chars of SHA-256 over the anchored draft's raw bytes."
+    },
+    "blocks": {
+      "type": "array",
+      "description": "One entry per block, in document order.",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["block_id", "old_hash", "first_line_excerpt"],
+        "properties": {
+          "block_id": {
+            "type": "string",
+            "pattern": "^B[0-9]{4,}$"
+          },
+          "old_hash": {
+            "type": "string",
+            "pattern": "^[0-9a-f]{12}$",
+            "description": "First 12 hex chars of SHA-256 over the block's normalized text (§3.2 normalization; marker line excluded)."
+          },
+          "first_line_excerpt": {
+            "type": "string",
+            "maxLength": 80,
+            "description": "First content line (truncated) so the writer can sanity-check it is naming the block it thinks it is."
+          }
+        }
+      }
+    }
+  }
+}

package/vendor/ars/shared/contracts/patch/legacy/v1_0/revision_patch.schema.json

@@ -0,0 +1,110 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://github.com/Imbad0202/academic-research-skills/shared/contracts/patch/legacy/v1_0/revision_patch.schema.json",
+  "title": "Revision Patch Document",
+  "description": "#89 Item 7 patch document (spec docs/design/2026-06-10-390-diff-patch-revision-mode-spec.md §3.2). The writer's revision deliverable: a closed-vocabulary list of block operations against an anchored base draft. Every hash in this document — base_draft_hash and every per-op old_hash — is a mechanical copy from the script-generated block manifest (§3.1); the writer never computes hashes. The DOC-BODY-START insert_after shape is the ONLY legal hash-less op: it names a position (after frontmatter, before the first body block), not an anchor block, so there is no content to precondition on. Schema validation is the apply script's step zero; everything the schema cannot see (target existence, hash staleness, per-block single-op rule, marker-free new_text) is Phase 1's job (§3.3).",
+  "type": "object",
+  "additionalProperties": false,
+  "required": ["patch_format_version", "revision_round", "base_draft_hash", "ops", "emitted_by"],
+  "properties": {
+    "patch_format_version": {
+      "type": "string",
+      "const": "1.0",
+      "description": "Pinned so a future Item 9 revision contract can audit exactly what shape it gates (spec §7)."
+    },
+    "revision_round": {
+      "type": "integer",
+      "minimum": 1,
+      "description": "1-based revision round this patch belongs to. Each patch is generated per-round against the current base (§3.1 trigger point c)."
+    },
+    "base_draft_hash": {
+      "$ref": "#/$defs/hash12",
+      "description": "First 12 hex chars of SHA-256 over the anchored base file's raw bytes — copied from the block manifest's base_draft_hash, never computed by the writer. Document-level staleness gate: any mismatch rejects the whole patch (§3.3 Phase 1)."
+    },
+    "ops": {
+      "type": "array",
+      "minItems": 1,
+      "description": "Block operations, defined simultaneously against the base — array order is not semantic; the apply script splices in base-document order (§3.2). Each block_id may appear in at most one op, in any role (Phase 1 enforces; the schema cannot see across items).",
+      "items": {
+        "oneOf": [
+          {"$ref": "#/$defs/replace_block"},
+          {"$ref": "#/$defs/insert_after_anchored"},
+          {"$ref": "#/$defs/insert_after_doc_body_start"},
+          {"$ref": "#/$defs/delete_block"}
+        ]
+      }
+    },
+    "emitted_by": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Emitting agent (e.g. draft_writer_agent). Provenance surface only; the role split itself is enforced by the #134 write guard, not by this field (§3.5)."
+    }
+  },
+  "$defs": {
+    "hash12": {
+      "type": "string",
+      "pattern": "^[0-9a-f]{12}$"
+    },
+    "block_id": {
+      "type": "string",
+      "pattern": "^B[0-9]{4,}$"
+    },
+    "roadmap_item_ids": {
+      "type": "array",
+      "minItems": 1,
+      "items": {"type": "string", "minLength": 1},
+      "description": "Schema 7 RoadmapItem IDs this op addresses. Presence is machine-checked; semantic fit is an LLM/human-layer judgment (§3.2 — Anti-Pattern 7 made visible, not impossible)."
+    },
+    "new_text": {
+      "type": "string",
+      "minLength": 1,
+      "description": "Replacement / inserted markdown. MUST NOT contain <!--block: markers (ID assignment is the apply script's exclusive authority) and MUST carry v3.7.1/v3.7.3 citation markers for any citation it introduces (§3.2). Segmented by the shared parser; multi-block text receives fresh IDs at apply time."
+    },
+    "replace_block": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["op", "block_id", "old_hash", "new_text", "roadmap_item_ids"],
+      "properties": {
+        "op": {"const": "replace_block"},
+        "block_id": {"$ref": "#/$defs/block_id"},
+        "old_hash": {"$ref": "#/$defs/hash12"},
+        "new_text": {"$ref": "#/$defs/new_text"},
+        "roadmap_item_ids": {"$ref": "#/$defs/roadmap_item_ids"}
+      }
+    },
+    "insert_after_anchored": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["op", "block_id", "old_hash", "new_text", "roadmap_item_ids"],
+      "properties": {
+        "op": {"const": "insert_after"},
+        "block_id": {"$ref": "#/$defs/block_id"},
+        "old_hash": {"$ref": "#/$defs/hash12"},
+        "new_text": {"$ref": "#/$defs/new_text"},
+        "roadmap_item_ids": {"$ref": "#/$defs/roadmap_item_ids"}
+      }
+    },
+    "insert_after_doc_body_start": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["op", "block_id", "new_text", "roadmap_item_ids"],
+      "properties": {
+        "op": {"const": "insert_after"},
+        "block_id": {"const": "DOC-BODY-START"},
+        "new_text": {"$ref": "#/$defs/new_text"},
+        "roadmap_item_ids": {"$ref": "#/$defs/roadmap_item_ids"}
+      }
+    },
+    "delete_block": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["op", "block_id", "old_hash", "roadmap_item_ids"],
+      "properties": {
+        "op": {"const": "delete_block"},
+        "block_id": {"$ref": "#/$defs/block_id"},
+        "old_hash": {"$ref": "#/$defs/hash12"},
+        "roadmap_item_ids": {"$ref": "#/$defs/roadmap_item_ids"}
+      }
+    }
+  }
+}