ruvnet-brain 4.0.6 → 4.0.8

package/README.md

@@ -4,7 +4,7 @@
 
 # 🧠 RuvNet Brain
 
-### 🧠 RuvNet Brain — [![RuvNet Brain version 4.0.6 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.0.6-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
+### 🧠 RuvNet Brain — [![RuvNet Brain version 4.0.8 — updated 2026-07-30 03:24 EDT](https://img.shields.io/badge/version_4.0.8-updated_2026--07--30_03:24_EDT-1E90FF?style=for-the-badge&labelColor=0757BA)](https://github.com/stuinfla/ruvnet-brain/blob/main/plugin/.claude-plugin/plugin.json)
 
 **A portable, source-grounded brain over Reuven Cohen's (rUv's) RuvNet stack — delivered as a Claude Code plugin that makes Claude _use_ the stack instead of fighting it.**
 
@@ -247,11 +247,11 @@ Our code now does **one honest job**: a price transform. A model your subscripti
 
 Result: **11 jobs supervised, every one producing a fresh successful receipt.** One had been *totally blind* — writing zero bytes on a healthy day, so "ran fine" and "never ran" were indistinguishable. Cured without changing a line of its logic.
 
-### 3. A subagent can no longer inherit your expensive model by accident
+### 3. Inherited subagent models are now auditable
 
 **A subagent inherits your session's model unless something says otherwise.** Ten agents on an Opus session are ten Opus agents; on a Fable session that's `$10/$50` per Mtok — up to **10× what the same mechanical work costs on Haiku**. That single default was the biggest cost leak in the harness, and an advisory rule did not fix it (the router's entire first life saved **$0.018**).
 
-So 2.5.1 makes it a **wall, not advice**: a `PreToolUse` gate that **blocks any subagent dispatch that doesn't declare a `model`**, tells you which tier the task actually needs, and logs every allowed dispatch so routing is *auditable* rather than merely claimed. Forks still inherit — that's what a fork is.
+The hook records both explicit-model and inherited-model dispatches so routing is *auditable* rather than merely claimed. It does not claim to block Agent/Task calls: Claude Code 2.1.220 consumes those `PreToolUse` results only after `tool_dispatch_end` ([issue #84](https://github.com/stuinfla/ruvnet-brain/issues/84), [upstream #83195](https://github.com/anthropics/claude-code/issues/83195)). Forks still inherit — that's what a fork is.
 
 > **`npm run falsify`** — the adversary. Every question that had to be asked of this project ("is the nightly *actually* running?", "is that really rUv's code?", "why is my quota still burning?", "is CI *actually* green?") is now a check that fails on an **unproven claim**, not merely on broken code. Because tests you wrote yourself passing is circular evidence.
 

package/bin/install.mjs

@@ -24,6 +24,7 @@ import {
   requiredEmbedderModels,
   missingEmbedderModels,
 } from '../kb/model-requirements.mjs';
+import { mergeManagedCatalog } from '../scripts/model-router-catalog.mjs';
 
 // SEC-0010 #6 — the Ed25519 PUBLIC key is EMBEDDED here (not a separate file) so the installer's
 // trust root travels with the installer code itself: an attacker who swaps the downloaded bundle
@@ -616,6 +617,7 @@ export function beginConsoleRuntimeTransaction(cacheDir, sourceRoot = REPO_ROOT)
     ['console', 'console'],
     ['scripts', 'scripts'],
     ['plugin/scripts', 'plugin/scripts'],
+    ['data/model-catalog.json', 'data/model-catalog.json'],
     ['kb/brain-profile.mjs', 'kb/brain-profile.mjs'],
     ['bin/install.mjs', 'bin/install.mjs'],
     ['package.json', 'package.json'],
@@ -642,6 +644,15 @@ export function beginConsoleRuntimeTransaction(cacheDir, sourceRoot = REPO_ROOT)
     fs.rmSync(staged, { recursive: true, force: true });
     throw new Error(`console runtime version ${packageManifest.version || '(missing)'} does not match candidate ${PACKAGE_VERSION}`);
   }
+  try {
+    const providerCatalog = JSON.parse(fs.readFileSync(path.join(staged, 'data', 'model-catalog.json'), 'utf8'));
+    if (!providerCatalog.providers || typeof providerCatalog.providers !== 'object' || !Object.keys(providerCatalog.providers).length) {
+      throw new Error('providers object is missing or empty');
+    }
+  } catch (error) {
+    fs.rmSync(staged, { recursive: true, force: true });
+    throw new Error(`console runtime model-catalog is invalid: ${error.message}`);
+  }
   const stagedEntry = path.join(staged, 'scripts', 'onboarding-console.mjs');
   for (const syntaxTarget of [stagedEntry, path.join(staged, 'bin', 'install.mjs')]) {
     const checked = spawnSync(process.execPath, ['--check', syntaxTarget], { encoding: 'utf8' });
@@ -791,7 +802,8 @@ function wirePlugin({ expectedVersion = PACKAGE_VERSION, requireManaged = false
     'Wiring the Claude Code plugin',
     'this registers search_ruvnet + the grounding hook so Claude uses the brain automatically',
   );
-  const manualMarketplace = 'claude plugin marketplace add stuinfla/ruvnet-brain';
+  const marketplaceSource = process.env.RUVNET_CLAUDE_MARKETPLACE_SOURCE || 'stuinfla/ruvnet-brain';
+  const manualMarketplace = `claude plugin marketplace add ${marketplaceSource}`;
   const manualInstall = 'claude plugin install ruvnet-brain@ruvnet-brain --scope user';
 
   if (!have('claude')) {
@@ -809,7 +821,7 @@ function wirePlugin({ expectedVersion = PACKAGE_VERSION, requireManaged = false
   if (requireManaged && !before.managed) return { host: false, wired: false, action: 'unmanaged' };
   const addedMarket = before.managed
     ? tryRun('claude', ['plugin', 'marketplace', 'update', 'ruvnet-brain'])
-    : tryRun('claude', ['plugin', 'marketplace', 'add', 'stuinfla/ruvnet-brain']);
+    : tryRun('claude', ['plugin', 'marketplace', 'add', marketplaceSource]);
   // Deliberately NOT reassuring here. This used to say "it may already be added — that's fine",
   // which is a GUESS about someone else's machine, and when it was wrong the user finished the
   // install with a working search_ruvnet, no slash commands, and a message telling them all was
@@ -1118,11 +1130,27 @@ const CODEX_PLUGIN_ID = 'ruvnet-brain@ruvnet-brain';
 const CODEX_MARKETPLACE = 'ruvnet-brain';
 const CODEX_MARKETPLACE_SOURCE = 'stuinfla/ruvnet-brain';
 
-function prepareCodexMarketplace() {
-  const target = path.join(
+function codexMarketplaceTarget() {
+  return path.join(
     process.env.RUVNET_BRAIN_HOME || path.join(os.homedir(), '.cache', 'ruvnet-brain'),
     'codex-marketplace',
   );
+}
+
+function codexMarketplaceReady(target = codexMarketplaceTarget()) {
+  try {
+    const manifest = JSON.parse(fs.readFileSync(path.join(target, '.claude-plugin', 'marketplace.json'), 'utf8'));
+    return manifest?.name === CODEX_MARKETPLACE
+      && Array.isArray(manifest.plugins)
+      && manifest.plugins.some((plugin) => plugin?.name === 'ruvnet-brain' && plugin?.source === './plugin')
+      && fs.existsSync(path.join(target, 'plugin', '.codex-plugin', 'plugin.json'));
+  } catch {
+    return false;
+  }
+}
+
+function prepareCodexMarketplace() {
+  const target = codexMarketplaceTarget();
   const staged = `${target}.tmp-${process.pid}`;
   fs.rmSync(staged, { recursive: true, force: true });
   fs.mkdirSync(path.join(staged, '.claude-plugin'), { recursive: true });
@@ -1199,6 +1227,18 @@ export function wireCodexPlugin({
 } = {}) {
   if (!fs.existsSync(codexDir)) return { host: false, action: 'no-host' };
   const options = { codexBin, codexHome, cwd };
+  // Codex loads every configured marketplace before it can report plugin state. Repair only an
+  // absent/malformed Brain-owned snapshot before that probe, or the probe can fail before its own
+  // repair path is reachable. A healthy current cache stays byte-untouched, and plugin enablement
+  // is still read and preserved below.
+  let localMarketplace = null;
+  if (runJson === runCodexJson && !codexMarketplaceReady()) {
+    try { localMarketplace = prepareCodexMarketplace(); }
+    catch (error) {
+      if (announce) warn(`Codex marketplace preparation failed — ${error.message}`);
+      return { host: true, action: 'marketplace-prepare-failed', error: error.message };
+    }
+  }
   const before = codexPluginStatus({ ...options, runJson });
   if (!before.available) {
     if (announce) warn(`Codex plugin lifecycle not installed — ${before.error}`);
@@ -1213,7 +1253,13 @@ export function wireCodexPlugin({
     return { host: true, action: 'unchanged', ...before };
   }
 
-  const localMarketplace = runJson === runCodexJson ? prepareCodexMarketplace() : null;
+  if (runJson === runCodexJson && !localMarketplace) {
+    try { localMarketplace = prepareCodexMarketplace(); }
+    catch (error) {
+      if (announce) warn(`Codex marketplace preparation failed — ${error.message}`);
+      return { host: true, action: 'marketplace-prepare-failed', error: error.message };
+    }
+  }
   const markets = runJson(['plugin', 'marketplace', 'list', '--json'], options);
   if (!markets.ok) {
     if (announce) warn(`Codex marketplace check failed — ${markets.error}`);
@@ -1728,6 +1774,21 @@ async function doctor() {
     warn('brain not found here — run the installer first:  npx ruvnet-brain');
     return 1; // "not installed" is a FAILING doctor, not a neutral one
   }
+  const convergencePath = path.join(process.env.RUVNET_BRAIN_HOME || path.join(os.homedir(), '.cache', 'ruvnet-brain'), 'host-convergence.json');
+  let hostConvergence = { healthy: true, state: 'not-recorded' };
+  if (fs.existsSync(convergencePath)) {
+    try {
+      hostConvergence = classifyHostConvergence(JSON.parse(fs.readFileSync(convergencePath, 'utf8')));
+      if (hostConvergence.healthy) ok(`host convergence receipt: ${hostConvergence.state}`);
+      else {
+        warn(`host convergence incomplete: ${hostConvergence.state}`);
+        info(`Retry the same generation: ${c.bold('npx ruvnet-brain --update')}${hostConvergence.action ? `; ${hostConvergence.action}` : ''}`);
+      }
+    } catch (error) {
+      hostConvergence = { healthy: false, state: 'invalid-receipt', error: error.message };
+      warn(`host convergence receipt is invalid: ${error.message}`);
+    }
+  }
   have('node') ? ok('node present') : warn('node missing');
   have('npm') ? ok('npm present') : warn('npm missing');
   have('claude') ? ok('claude CLI present') : warn('claude CLI missing (plugin wiring needs it)');
@@ -1901,13 +1962,18 @@ async function doctor() {
     && !codexLifecycleGuidance(codexLifecycle).healthy
     && !codexLifecycleGuidance(codexLifecycle).intentional,
   );
+  // A staged release verifier can execute the packaged hooks under Codex's explicit automation
+  // trust bypass. That proves the real hook commands without pretending a fresh interactive user
+  // has already reviewed them; normal end-user doctor runs remain fail-closed on pending trust.
+  const codexTrustBypassed = process.env.RUVNET_CODEX_HOOK_TRUST_MODE === 'bypass';
   const codexWiringFailed = Boolean(cx.host && !cx.wired);
   const codexReadinessFailed = Boolean(codexMcp?.blocking);
   const failed = (hookResult ? hookResult.exitCode !== 0 : !allGreen)
     || groundingUnprovenPersisted
-    || codexLifecycleFailed
+    || (codexLifecycleFailed && !codexTrustBypassed)
     || codexWiringFailed
     || codexReadinessFailed
+    || !hostConvergence.healthy
     || Boolean(rufloOperational && !rufloOperational.healthy);
   if (failed && !hookResult && !groundingUnprovenPersisted) {
     console.log(`  ${c.red('✗ FAILING')} — the warnings above are real. Re-run  ${c.bold('npx ruvnet-brain')}  to repair.`);
@@ -1937,7 +2003,7 @@ async function runSelfCheck({ installState = null, quiet = false } = {}) {
     mod = await import(new URL('../scripts/selfcheck.mjs', import.meta.url).href);
   } catch (e) {
     warn(`self-check could not run (${e && e.message}) — this install has NOT been verified end to end`);
-    return { exitCode: 0, violations: [], lines: [], unavailable: true };
+    return { exitCode: FLAG_DOCTOR_HOOKS ? 1 : 0, violations: [], lines: [], unavailable: true };
   }
   const result = await mod.selfCheck({ installState, security: true });
   if (!quiet || result.violations.length) console.log(mod.formatVerdict(result, { color: c }));
@@ -2243,7 +2309,29 @@ export function syncHostsAfterUpdate(cacheDir = resolvedKbDir(), {
     }
   }
   if (!okApplied) return fail({ applyStatus: applied.status, error: applied.error?.message || 'Stable Spine activation failed' });
-  return { ok: true, results, applyStatus: applied.status };
+  const convergence = classifyHostConvergence({
+    desiredVersion: PACKAGE_VERSION,
+    hosts: {
+      claude: { state: results.claude.host ? 'ready' : 'absent', version: results.claude.version || null },
+      codex: { state: results.codex?.action === 'disabled' ? 'disabled' : (results.codexHost?.host ? 'ready' : 'absent'), version: results.codex?.version || null },
+    },
+    consoleRuntime: results.consoleRuntime,
+  });
+  return { ok: true, convergence, results, applyStatus: applied.status };
+}
+
+export function classifyHostConvergence(receipt, expectedVersion = PACKAGE_VERSION) {
+  if (!receipt || receipt.desiredVersion !== expectedVersion) {
+    return { healthy: false, state: 'version-mismatch', action: `required version ${expectedVersion}` };
+  }
+  const hostStates = Object.values(receipt.hosts || {});
+  const badHost = hostStates.find((host) => !['ready', 'disabled', 'absent'].includes(host?.state)
+    || (host.state === 'ready' && host.version !== expectedVersion));
+  if (badHost) return { healthy: false, state: 'host-pending', action: 're-run host synchronization' };
+  if (receipt.consoleRuntime?.state !== 'ready') {
+    return { healthy: false, state: receipt.consoleRuntime?.state || 'console-unproven', action: 'restart Console, then re-run --doctor' };
+  }
+  return { healthy: true, state: 'channels-converged' };
 }
 
 function runUpdate() {
@@ -2890,7 +2978,28 @@ export async function offerRouterProfile() {
   for (const [src, dst] of [['catalog.template.json', 'catalog.json'], ['policy.default.mjs', 'policy.default.mjs']]) {
     const s = path.join(pkgRoot, 'config', 'model-router', src);
     const d = path.join(routerDir, dst);
-    if (fs.existsSync(s) && !fs.existsSync(d)) { fs.copyFileSync(s, d); ok(`installed ${dst} (edit freely — goldie keeps prices fresh where scheduled)`); }
+    if (!fs.existsSync(s)) continue;
+    if (!fs.existsSync(d)) {
+      fs.copyFileSync(s, d);
+      ok(`installed ${dst} (edit freely — goldie keeps prices fresh where scheduled)`);
+      continue;
+    }
+    if (src === 'catalog.template.json') {
+      try {
+        const existing = JSON.parse(fs.readFileSync(d, 'utf8'));
+        const managed = JSON.parse(fs.readFileSync(s, 'utf8'));
+        const merged = mergeManagedCatalog(existing, managed);
+        if (merged !== existing) {
+          fs.copyFileSync(d, `${d}.pre-managed-merge`);
+          const tmp = `${d}.tmp-${process.pid}`;
+          fs.writeFileSync(tmp, `${JSON.stringify(merged, null, 2)}\n`, { mode: 0o600 });
+          fs.renameSync(tmp, d);
+          ok(`merged ${merged.candidates.length - existing.candidates.length} managed subscription model(s); your catalog overrides were preserved`);
+        }
+      } catch (error) {
+        warn(`managed model additions were not merged (${error.message}); your existing catalog was left unchanged`);
+      }
+    }
   }
   let copied = 0;
   // dispatch-receipt + metaharness-receipts added 2026-07-13: without the LOGGER, subagent routing is

package/config/model-router/catalog.template.json

@@ -1,6 +1,7 @@
 {
   "_comment": "Model candidate catalog for model-router-engine.mjs. EDIT ME freely. Pricing is $/Mtok. 'verified' names the source+date a price was confirmed live; null pricing means UNKNOWN \u2014 the engine will NOT invent a cost for it (same honesty rule as route-cheap.mjs). 'harness' = which agent(s) can launch each model \u2014 EMPTY [] means landscape-only: known to exist, but no wired execution path yet, so the engine will never select it (see model-router-engine.mjs pool filter). Do not add a real execution path (an entry to route-cheap.mjs PRICING or a harness value) until dispatch is actually implemented and tested \u2014 an engine that 'chooses' a model it can't run is worse than one that doesn't know the model exists. 'subscription' = harness(es) under which this model is covered by a flat subscription (Claude Max, Codex/ChatGPT), so its marginal cost to the user is ~$0 \u2014 the default policy treats those as free and will NOT prefer a billed model over them (never spend where the subscription is free).",
-  "updated": "2026-07-12 (template)",
+  "managedVersion": 2,
+  "updated": "2026-08-02 (managed template)",
   "candidates": [
     {
       "id": "claude-haiku-4-5-20251001",
@@ -45,6 +46,20 @@
       },
       "verified": "2026-07-07 route-cheap.mjs FRONTIER (API price; $0 under Max)"
     },
+    {
+      "id": "claude-opus-5",
+      "provider": "anthropic",
+      "harness": [
+        "claude-code"
+      ],
+      "subscription": [
+        "claude-code"
+      ],
+      "tier": "frontier",
+      "costPerMTok": null,
+      "verified": "2026-08-02 Claude Code 2.1.220 subscription launch (canonicalModel claude-opus-5)",
+      "note": "Launchability is host-scoped. The managed row adds the reviewed candidate; the user's subscription profile still decides whether it is available and covered."
+    },
     {
       "id": "claude-fable-5",
       "provider": "anthropic",
@@ -217,4 +232,4 @@
       "note": "LANDSCAPE-ONLY: 295B MoE Apache-2.0, strong generalist, second-tier coder (SWE-bench V 78.0 vs GLM-5.2 84.2, vendor numbers). IMPORTANT: this is the PAID slug on purpose \u2014 the tencent/hy3:free promo window closes ~2026-07-20 and would silently die/bill; never wire the :free slug. See goldie/2026-07-12.md Q3."
     }
   ]
-}
+}

package/console/app.js

@@ -2099,17 +2099,24 @@ function renderRouterEngine(re) {
   const pool = Array.isArray(re.pool) ? re.pool : [];
   const TIER_ORDER = { mechanical: 0, cheap: 1, mid: 2, frontier: 3 };
   const byTier = (a, b) => (TIER_ORDER[a.tier] ?? 9) - (TIER_ORDER[b.tier] ?? 9);
-  const lensTable = (rows, costOf, costHead) => el('div', { class: 'scroll-x' },
+  const recommended = (Array.isArray(re.decisions) ? re.decisions : []).find((decision) => decision && decision.model);
+  const lensTable = (rows, costOf, costHead, { showRouting = false } = {}) => el('div', { class: 'scroll-x' },
     el('table', { class: 'tb rp-tb' },
       el('thead', {}, el('tr', {},
         el('th', { scope: 'col' }, 'Bucket'), el('th', { scope: 'col' }, 'Model'),
-        el('th', { scope: 'col' }, costHead))),
+        el('th', { scope: 'col' }, costHead),
+        showRouting ? el('th', { scope: 'col' }, 'Routing') : null)),
       el('tbody', {}, rows.map((p) => el('tr', {},
         el('td', { class: 'rp-band' }, p.tier || '—'),
         el('td', {}, el('div', { class: 'rp-model' }, prettyModel(p.id))),
         el('td', { class: 'cell-mono num' }, costOf(p)),
+        showRouting ? el('td', {}, recommended?.model === p.id
+          ? chip('last selected', 'green', recommended.reason || 'The latest router receipt selected this model.')
+          : 'available') : null,
       )))));
-  // Development: only what this machine's harness can launch; best (cheapest-marginal) per bucket.
+  // Development is an inventory, not a recommendation filter. The previous one-row-per-tier
+  // projection hid equal-cost Fable behind Opus based solely on array order. Every launchable row
+  // remains visible; the latest actual routing receipt is a separate marker.
   const bestPerTier = (rows, price) => {
     const seen = {};
     for (const p of rows) {
@@ -2118,9 +2125,9 @@ function renderRouterEngine(re) {
     }
     return Object.values(seen).sort(byTier);
   };
-  const devRows = bestPerTier(
-    pool.filter((p) => (p.harness || []).includes('claude-code')),
-    (p) => (p.subscriptionCovered ? -1 : p.marginalPerMTok ?? Infinity));
+  const devRows = pool
+    .filter((p) => (p.harness || []).includes('claude-code'))
+    .sort((a, b) => byTier(a, b) || String(a.id).localeCompare(String(b.id)));
   const prodRows = bestPerTier(
     pool.filter((p) => p.listPerMTok != null && p.provider !== 'local'),
     (p) => p.listPerMTok ?? Infinity);
@@ -2130,7 +2137,7 @@ function renderRouterEngine(re) {
       el('span', { class: 'rp-obj' }, 'you, in Claude Code — models your plan covers win at $0 marginal')),
     lensTable(devRows,
       (p) => (p.subscriptionCovered ? el('b', { title: 'covered by your subscription — zero marginal cost' }, '$0 · yours') : money(p.marginalPerMTok)),
-      'Your cost'));
+      'Your cost', { showRouting: true }));
   const prodBlock = el('div', { class: 'rp-profile' },
     el('div', { class: 'rp-head' },
       el('span', { class: 'rp-name' }, 'Production'),
@@ -2140,7 +2147,7 @@ function renderRouterEngine(re) {
   const poolFoot = el('p', { class: 'fineprint' },
     re.catalogSource === 'built-in-fallback'
       ? `No personal catalog found — showing a minimal built-in set of ${pool.length}. Run \`node scripts/model-router-setup.mjs\` to build your real catalog, then the engine weighs yours on every call.`
-      : `Best pick per bucket shown; the engine weighs all ${pool.length} candidates in its catalog on every call — nothing is retired by being off this summary.`);
+      : `All ${devRows.length} launchable Claude Code models are shown. The engine weighs all ${pool.length} candidates; the routing marker comes from its latest receipt, never catalog order.`);
 
   // Decisions: dedupe consecutive identical picks, keep 3, humanize the reason head. The full
   // append-only log stays on disk — this is a pulse, not a table of record.
@@ -4011,6 +4018,7 @@ function renderLessons(data) {
   if (c.awaitingYou) chips.push(chip(`${c.awaitingYou} awaiting you`, 'amber', 'Recorded, but not yet agreed to by you. Until you decide, it does not enforce at full strength.'));
   if (c.active) chips.push(chip(`${c.active} on`, 'green'));
   if (c.off) chips.push(chip(`${c.off} off`, 'grey', 'Switched off by you. The record of where you taught it is kept.'));
+  if (c.quarantined) chips.push(chip(`${c.quarantined} imported`, 'nt', 'Maintainer or demonstration history. It is visible for audit but cannot become your personal policy.'));
   if (c.blocking) chips.push(chip(`${c.blocking} can stop me`, 'cyan', 'These interrupt me at their moment and I cannot continue until the check passes.'));
   setChips('chips-lessons', chips);
 
@@ -4022,6 +4030,7 @@ function renderLessons(data) {
     const box = el('input', {
       type: 'checkbox', class: 'lesson-switch', id: `lsw-${r.id}`,
       'aria-label': `${isOn ? 'Turn off' : 'Turn on'}: ${r.statement.slice(0, 60)}`,
+      disabled: r.quarantined || null,
     });
     box.checked = isOn;
 
@@ -4073,7 +4082,9 @@ function renderLessons(data) {
       chip(r.origin, r.userStated ? 'green' : 'nt',
         r.userStated
           ? 'You said this. Only lessons you stated yourself are allowed to reach the strongest level.'
-          : 'I inferred this from what happened. A lesson I inferred can never be raised to "Stops me", however often it fires — the model does not get to ratify its own rules.'),
+          : r.quarantined
+            ? 'This came from bundled maintainer or demonstration history. It is not your statement and cannot be turned into your personal policy.'
+            : 'I inferred this from what happened. A lesson I inferred can never be raised to "Stops me", however often it fires — the model does not get to ratify its own rules.'),
       r.taughtCount ? chip(`taught ${r.taughtCount}×`, 'grey') : null,
       r.awaitingYou ? chip('awaiting your decision', 'amber', 'Recorded, but you have not agreed to it yet.') : null,
     ].filter(Boolean);
@@ -4097,9 +4108,9 @@ function renderLessons(data) {
           : null,
         r.projects && r.projects.length
           ? el('p', null, el('strong', null, 'Learned in: '), r.projects.join(', ')) : null,
-        el('p', { class: 'muted' },
-          'Turning this off hides the rule without deleting the record of where you taught it — ',
-          'you can switch it back on here at any time.')));
+        el('p', { class: 'muted' }, r.quarantined
+          ? 'This imported record is quarantined for audit. It cannot be switched on or ratified as your policy.'
+          : 'Turning this off hides the rule without deleting the record of where you taught it — you can switch it back on here at any time.')));
 
     list.append(el('div', { class: `cap-row lesson-row${r.demoted ? ' is-off' : ''}` },
       // NO `for=` here. The label WRAPS its checkbox, which is already an implicit association; a
@@ -4142,9 +4153,10 @@ function partitionLessons(list, rows) {
   // the card whose job is to be the truth about it, and printed BECAUSE they used the control we
   // gave them. Found by GPT-5.6-Sol, 2026-07-24. A group's heading must be derivable from the state
   // of the rows inside it, which is why the counts below are computed from the split, never passed in.
-  const asks = [], inForce = [], off = [];
+  const asks = [], inForce = [], off = [], quarantined = [];
   rows.forEach((r, i) => {
-    if (r.demoted) off.push(kids[i]);
+    if (r.quarantined) quarantined.push(kids[i]);
+    else if (r.demoted) off.push(kids[i]);
     else if (r.awaitingYou) asks.push(kids[i]);
     else inForce.push(kids[i]);
   });
@@ -4171,6 +4183,12 @@ function partitionLessons(list, rows) {
         `${off.length} ${off.length === 1 ? 'rule you switched off' : 'rules you switched off'} — not in force; switch back on any time`),
       el('div', { class: 'cap-list' }, ...off)));
   }
+  if (quarantined.length) {
+    out.push(el('details', { class: 'lessons-more' },
+      el('summary', null,
+        `${quarantined.length} imported maintainer or demonstration ${quarantined.length === 1 ? 'record' : 'records'} — quarantined, not your policy`),
+      el('div', { class: 'cap-list' }, ...quarantined)));
+  }
   return out;
 }
 

package/console/architecture.html

@@ -749,7 +749,7 @@ table.tb { width: 100%; border-collapse: collapse; font-size: var(--fs--1); min-
             <tr><td class="cell-mono">SessionStart</td><td class="cell-name">session-start.sh</td><td><span class="part">nudge</span></td><td>Tells you the brain is on. Runs 4 pure-filesystem health checks in under 5 ms — no cache dir? no <code>.rvf</code> at all? reader deps gone? last real search failed? Injects the capability playbook once per session.</td></tr>
             <tr><td class="cell-mono">UserPromptSubmit</td><td class="cell-name">ground-ruvnet.sh</td><td><span class="part">nudge</span></td><td>Three gates on your prompt: <b>RuvNet</b> (you named the stack → ground before asserting), <b>drift</b> (you reached for a classical default → name the rUv replacement), <b>build</b> (a build request → apply the playbook).</td></tr>
             <tr><td class="cell-mono">PreToolUse<small>Write · Edit · Bash</small></td><td class="cell-name">hijack-ruvnet.sh</td><td><span class="part">nudge</span></td><td>Scans the payload for four categories of classical default — generic vector stores, paid embedding APIs, generic RAG frameworks, hand-rolled memory glue — and names the rUv replacement. <b>Never blocks.</b> One word on line 12 would make it block; it ships as advisory because a false-positive refusal bricks real work.</td></tr>
-            <tr><td class="cell-mono">PreToolUse<small>Task</small></td><td class="cell-name">route-dispatch.sh</td><td><span class="no">blocks</span></td><td>Refuses a subagent dispatch that would silently inherit your expensive main-loop model. <b>Opt-in only</b> — with no router profile on disk it does nothing, not even warn.</td></tr>
+            <tr><td class="cell-mono">PreToolUse<small>Task · Agent</small></td><td class="cell-name">route-dispatch.sh</td><td><span class="part">audit</span></td><td>Records declared versus inherited model use. Claude Code 2.1.220 consumes this result after dispatch, so it never claims a late refusal. <b>Opt-in only</b> — with no router profile on disk it does nothing.</td></tr>
             <tr><td class="cell-mono">PreToolUse<small>Bash</small></td><td class="cell-name">verify-interface.sh</td><td><span class="no">blocks</span></td><td>Refuses an ecosystem CLI subcommand whose <code>--help</code> you have not read in 24 h. Born from reporting AgentDB broken three times when the real defect was passing a query positionally instead of with <code>-q</code>.</td></tr>
             <tr><td class="cell-mono">PreToolUse<small>Bash</small></td><td class="cell-name">design-wall.sh</td><td><span class="no">blocks</span></td><td>Refuses shipping or opening a visual surface with no fresh design grade. <b>Scoped to this repo</b> since issue&nbsp;#17, after a plain <code>git commit</code> in an unrelated project got blocked demanding someone else's ritual.</td></tr>
             <tr><td class="cell-mono">PreToolUse · Stop</td><td class="cell-name">lesson-hooks.sh</td><td><span class="part">nudge</span></td><td>Surfaces your own recorded corrections at the moment they apply — writing code, changing the machine, asserting a fact, claiming done.</td></tr>

package/data/model-catalog.json

@@ -0,0 +1,54 @@
+{
+  "_meta": {
+    "purpose": "Per-provider (house) tier ladders. The FRONTIER — the escalation target AND the savings baseline — is personalized to the user's own house: a Claude shop's frontier is Fable 5, a ChatGPT shop's is GPT-5.6 Sol, a Codex shop's is Sol, a Gemini shop's is Gemini 3.1 Pro, a Grok shop's is Grok 4.5. Modeled on ruflo ADR-148 (assets/model-router/openrouter-alts.json), extended with a provider-house axis rUv's registry does not carry.",
+    "generated": "2026-07-15",
+    "schema_version": 1,
+    "sources": {
+      "prices": "OpenRouter /api/v1/models live catalog, pulled 2026-07-15 (in/out USD per Mtok).",
+      "rankings": "Artificial Analysis Intelligence Index (artificialanalysis.ai) + Arena/LMArena (arena.ai) — the ONLY independent evaluators carrying current-generation models as of 2026-07-15; each figure cross-verified twice.",
+      "provenance_rule": "rUv ADR-206: vendor-reported scores are optimistic and harness-confounded — trust independent (AA/Arena) numbers, treat vendor self-scaffold SWE-bench/LiveCodeBench figures as noisy features, never as truth.",
+      "benchmark_lag": "The canonical hard coding benchmarks (SWE-bench Verified standardized harness, LiveCodeBench, Aider polyglot) were ALL months stale on 2026-07-15 and carry NONE of these models. The '88.6% / 95% SWE-bench' figures in the press are vendor self-scaffold scores, not the standardized harness — excluded here.",
+      "release_refs": "OpenAI GPT-5.6 GA 2026-07-09 (openai.com/index/gpt-5-6); Anthropic Fable 5 2026-06-09 (anthropic.com/news/claude-fable-5-mythos-5); Google Gemini 3.1 Pro 2026-02-19; xAI/SpaceXAI Grok 4.5 2026-07-08."
+    },
+    "caveat": "Prices are live-verified; tier placements are sensible, independent-benchmark-grounded starters, NOT this user's measured results. Override per-installation via $RUVNET_MODEL_CATALOG or the console. The automated always-current path is rUv's ADR-206 (BenchPress predictor + hourly OpenRouter watcher) — see scripts/refresh-model-catalog.mjs for the live re-pull.",
+    "effort_note": "Frontier effort defaults to 'xhigh' (the max reasoning a shop reaches for on the hardest tasks); this is a principled default, not a per-effort measurement."
+  },
+  "default_provider": "anthropic",
+  "default_provider_reason": "This is a Claude Code plugin, so DEVELOPMENT genuinely runs on Anthropic — that is a detected fact, not an arbitrary house preference. Set your PRODUCTION house in the console (or $RUVNET_PROVIDER) if your app runs on a different provider; it is never assumed silently.",
+  "providers": {
+    "anthropic": {
+      "label": "Claude (Anthropic)",
+      "detect_env": ["ANTHROPIC_API_KEY", "CLAUDE_CODE_ENTRYPOINT", "CLAUDECODE"],
+      "frontier": { "model": "claude-fable-5", "in": 10, "out": 50, "released": "2026-06-09", "rank": "AA Intelligence #1 (60) · Arena #1 (1508 Elo)", "source": "independent (AA + Arena)" },
+      "mid":      { "model": "claude-sonnet-5", "in": 2, "out": 10, "released": "2026-06-30", "rank": "AA 53; intro price $2/$10 → $3/$15 after 2026-08-31", "source": "independent (AA)" },
+      "cheap":    { "model": "claude-haiku-4.5", "in": 1, "out": 5, "released": "2025-10-15", "rank": "cheap tier (AA index low; cost-cascade prefers a cross-provider value pick when an OpenRouter key is present)", "source": "catalog" }
+    },
+    "openai": {
+      "label": "ChatGPT (OpenAI)",
+      "detect_env": ["OPENAI_API_KEY"],
+      "frontier": { "model": "openai/gpt-5.6-sol", "in": 5, "out": 30, "released": "2026-07-09", "rank": "AA Intelligence #2 (59) · AA Coding Index leader (80) · Terminal-Bench 2.1 SOTA · ~1/3 Fable 5's cost/task", "source": "independent (AA)" },
+      "mid":      { "model": "openai/gpt-5.6-terra", "in": 1, "out": 6, "released": "2026-07-09", "rank": "AA Coding 77.4 — beats prev-gen flagship GPT-5.5 (76.4) at lower live catalog pricing", "source": "independent (AA)" },
+      "cheap":    { "model": "openai/gpt-5.6-luna", "in": 0.1, "out": 0.6, "released": "2026-07-09", "rank": "AA 51 · Coding 74.6 — beats most last-gen mid-tier", "source": "independent (AA)" }
+    },
+    "codex": {
+      "label": "Codex (OpenAI)",
+      "detect_env": [],
+      "aliasOf": "openai",
+      "note": "Codex folded into the GPT-5.6 Sol/Terra/Luna tiers on 2026-07-09 — there is NO separate '-codex' SKU this generation; gpt-5.3-codex (2026-02-05) was the last dedicated one and is superseded. A Codex shop's frontier IS Sol."
+    },
+    "google": {
+      "label": "Gemini (Google)",
+      "detect_env": ["GEMINI_API_KEY", "GOOGLE_API_KEY"],
+      "frontier": { "model": "google/gemini-3.1-pro-preview", "in": 2, "out": 12, "released": "2026-02-19", "rank": "AA Intelligence 46 — BELOW the Anthropic/OpenAI/xAI frontier cluster (54–60); still preview-named. Honest: Gemini is not frontier-competitive on independent indices right now.", "source": "independent (AA) — vendor's GPQA-D 94.3% / ARC-AGI-2 77.1% are Google's own, uncorroborated" },
+      "mid":      { "model": "google/gemini-3.5-flash", "in": 1.5, "out": 9, "released": "2026", "rank": "AA 50 — out-scores Google's own 3.1 Pro on this index (real anomaly, not a typo)", "source": "independent (AA)" },
+      "cheap":    { "model": "google/gemini-3.1-flash-lite", "in": 0.25, "out": 1.5, "released": "2026", "rank": "budget", "source": "catalog" }
+    },
+    "xai": {
+      "label": "Grok (SpaceXAI)",
+      "detect_env": ["XAI_API_KEY", "GROK_API_KEY"],
+      "note": "xAI's live lineup has no distinct budget SKU below Grok 4.3 as of 2026-07-15 (the 'grok-4.1-fast' I first wrote does not exist in the live catalog — the verify gate caught it). A Grok shop's cheap tasks route to Grok 4.3 or a cross-provider value pick.",
+      "frontier": { "model": "x-ai/grok-4.5", "in": 2, "out": 6, "released": "2026-07-08", "rank": "AA Intelligence 54 (#8) at ~1/3 Opus 4.7's blended price — the frontier VALUE standout; 'Opus-class, faster, cheaper' (Musk)", "source": "independent (AA)" },
+      "mid":      { "model": "x-ai/grok-4.3", "in": 1.25, "out": 2.5, "released": "2026-04-30", "rank": "AA 38 — also xAI's cheapest verified stable tier", "source": "independent (AA)" }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.0.6",
+  "version": "4.0.8",
   "description": "One-command installer for RuvNet Brain — a portable, source-grounded brain over rUv's RuvNet building blocks, delivered as a Claude Code plugin so Claude uses the stack instead of fighting it.",
   "type": "module",
   "bin": {
@@ -68,6 +68,7 @@
     "LICENSE",
     "console/",
     "config/model-router/",
+    "data/model-catalog.json",
     "scripts/",
     "kb/verify-citation.mjs",
     "kb/zip-extract.mjs",

package/plugin/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "ruvnet-brain",
   "description": "RuvNet brain transplant for Claude Code — grounds every RuvNet decision in real source across 69 rUv repositories, prefers Ruflo / RuVector-RVF / AgentDB over training-prior defaults (pgvector, Pinecone, hand-rolled cosine), and can pull in any RuvNet repo on demand. Ships an enforced UserPromptSubmit retrieve-and-inject grounding hook that sharply reduces drift.",
-  "version": "4.0.6",
+  "version": "4.0.8",
   "author": {
     "name": "Stuart Kerr"
   },

package/plugin/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "ruvnet-brain",
-  "version": "4.0.6",
+  "version": "4.0.8",
   "description": "Source-grounded RuvNet knowledge, lifecycle enforcement, and learning for Codex.",
   "author": {
     "name": "Stuart Kerr"