ruvnet-brain 4.3.20 → 4.3.25

package/console/app.js

@@ -109,6 +109,8 @@ const fmtMs = (ms) => {
   const m = Math.floor(s / 60);
   return `${m} m ${Math.round(s % 60)} s`;
 };
+// Signed time. A negative saving means routes were SLOWER than baseline — a finding, never a dash.
+const fmtSignedMs = (ms) => (ms == null || Number.isNaN(Number(ms)) ? '—' : (Number(ms) < 0 ? `−${fmtMs(-Number(ms))}` : fmtMs(ms)));
 
 const fmtDate = (iso) => {
   if (!iso) return '—';
@@ -2011,6 +2013,22 @@ function renderMemory(mem) {
       el('p', { class: 'fineprint' },
         'Dimensions we didn’t probe this session are excluded from the score — shown grey below, never assumed. A known-broken dimension caps the score.'))));
 
+  // Two files can sit in .swarm/. The score is about ONE of them, and the reader is told which — the
+  // card once rendered the MCP coordination store's 15,824 rows as if they were the project memory.
+  if (h.stores && h.stores.coordination && h.stores.coordination.exists && h.stores.canonical && h.stores.canonical.exists) {
+    const k = h.stores.canonical; const c = h.stores.coordination;
+    const scoredIsCanonical = h.stores.scored === k.path;
+    const rows = (s) => (s.rows == null ? '' : ` (${fmtInt(s.rows)} rows)`);
+    main.push(el('p', { class: 'fineprint' },
+      'Scored store: ', el('code', {}, scoredIsCanonical ? k.path : c.path), rows(scoredIsCanonical ? k : c), '. ',
+      'Also present: ', el('code', {}, scoredIsCanonical ? c.path : k.path), rows(scoredIsCanonical ? c : k),
+      scoredIsCanonical
+        ? ' — the MCP coordination store, not scored: a different container from the one '
+        : ' — the canonical store, not scored because it holds no rows; ',
+      scoredIsCanonical ? el('code', {}, 'ruflo memory store') : el('code', {}, 'ruflo memory store'),
+      scoredIsCanonical ? ' writes.' : ' writes there once used.'));
+  }
+
   const learn = renderLearnings(mem.learnings);
   if (learn) main.push(learn);
 
@@ -2533,8 +2551,8 @@ function renderSavings(sv) {
         el('div', { class: 'total-num' }, fmtInt(taskCount)),
         el('div', { class: 'total-lab' }, 'tasks routed')),
       el('div', { class: 'total-tile' },
-        el('div', { class: 'total-num' }, util ? fmtUsd(util.frontierUsd) : (totals && totals.msSaved >= 0 ? fmtMs(totals.msSaved) : '—')),
-        el('div', { class: 'total-lab' }, util ? `if all on ${frontierName}` : 'time saved'))));
+        el('div', { class: 'total-num' }, util ? fmtUsd(util.frontierUsd) : (totals && totals.msSaved != null ? fmtSignedMs(totals.msSaved) : '—')),
+        el('div', { class: 'total-lab' }, util ? `if all on ${frontierName}` : (totals && totals.msSaved < 0 ? 'time cost' : 'time saved')))));
   }
 
   // WP2a — provenance, worn openly: these numbers are receipts, not projections.
@@ -2543,7 +2561,21 @@ function renderSavings(sv) {
     el('span', { class: 'prov-dot', 'aria-hidden': 'true' }),
     el('span', {}, 'real numbers — recomputed from your ',
       el('b', {}, `${fmtInt(receiptCount)} receipt${receiptCount === 1 ? '' : 's'}`),
-      ', never projected')));
+      ', never projected',
+      sv && sv.skippedUnmeasured
+        ? el('span', { class: 'muted' }, ` · ${fmtInt(sv.skippedUnmeasured)} row${sv.skippedUnmeasured === 1 ? '' : 's'} carried no $ or time and ${sv.skippedUnmeasured === 1 ? 'is' : 'are'} not counted`)
+        : '')));
+
+  // TIME, WITH ITS SIGN, ALWAYS. When the utilization hero is present the tile above shows frontier $
+  // instead of time, and the only other place the time result appeared turned negatives into a dash.
+  // A net loss is a finding about the router, not an embarrassment to hide.
+  if (totals && totals.msSaved != null) {
+    const neg = totals.msSaved < 0;
+    blocks.push(el('p', { class: `fineprint${neg ? ' bp-warn' : ''}` },
+      neg ? 'Time cost: ' : 'Time saved: ', el('b', {}, fmtSignedMs(totals.msSaved)),
+      totals.timedCount != null ? ` across ${fmtInt(totals.timedCount)} timed route${totals.timedCount === 1 ? '' : 's'}` : '',
+      neg ? ' — routed tasks took longer than their baseline in aggregate.' : '.'));
+  }
 
   // The distribution — how many tasks went to each bucket, and the saved-vs-frontier math.
   // (computed above, so the totals-strip can stand down when this hero is doing the talking)
@@ -2833,6 +2865,25 @@ function buildSettingsForm(cfg, { endpoint }) {
  * now just the advocacy dial (ADR-032 §DDD-0004 "the three channels": this control is the volume knob
  * on the speech channel). Two stores, two forms, one shared widget — see buildSettingsField/Form.
  */
+// THREE FACTS, SIDE BY SIDE: "switch: off · agent: loaded · last completed run: never". The toggle
+// above this line shows a single state only when the saved choice and the scheduler agree (see
+// reconcileNightly on the server); this line shows all three regardless, so "on" can never again be
+// printed over a config file that says off and a job that has never completed a run.
+function nightlyFactsLine(f) {
+  const choice = f.choice === true ? 'on' : f.choice === false ? 'off' : 'never chosen';
+  const agent = f.enforcement === 'on' ? 'loaded'
+    : f.enforcement === 'off' ? 'not scheduled'
+      : f.enforcement === 'degraded' ? 'degraded'
+        : f.enforcement === 'unsupported' ? 'unsupported here' : String(f.enforcement || 'unknown');
+  const run = f.lastRun === 'ok' ? (f.lastRunAt ? fmtDate(f.lastRunAt) : 'completed')
+    : f.lastRun === 'never-ran' ? 'never'
+      : f.lastRun === 'failed' ? 'failed' : String(f.lastRun || 'unknown');
+  return el('p', { class: `fineprint field-facts${f.agree === false ? ' bp-warn' : ''}` },
+    'switch: ', el('b', {}, choice), ' · agent: ', el('b', {}, agent), ' · last completed run: ', el('b', {}, run),
+    f.agree === false ? ' — these disagree, so the toggle above shows no single state until they do.' : '',
+    f.enforcementEvidence ? el('span', { class: 'muted' }, ` (${f.enforcementEvidence})`) : '');
+}
+
 function renderSettings(cfg, us, bp) {
   const body = $('#body-settings');
   // `bp` is NOT counted here any more: its field is rendered by #card-brain at the top of the page,
@@ -2876,7 +2927,13 @@ function renderSettings(cfg, us, bp) {
         onclick: () => { document.getElementById('card-brain')?.scrollIntoView({ behavior: 'smooth', block: 'center' }); },
       }, 'Take me to it')));
   }
-  if (cfg && Array.isArray(cfg.schema) && cfg.schema.length) main.push(buildSettingsForm(cfg, { endpoint: '/api/save-config' }));
+  if (cfg && Array.isArray(cfg.schema) && cfg.schema.length) {
+    const form = buildSettingsForm(cfg, { endpoint: '/api/save-config' });
+    const facts = cfg.runtime && cfg.runtime.nightly && cfg.runtime.nightly.facts;
+    const slot = facts ? form.querySelector('#field-nightly') : null;
+    if (slot) slot.append(nightlyFactsLine(facts));
+    main.push(form);
+  }
   if (us && Array.isArray(us.schema) && us.schema.length) main.push(buildSettingsForm(us, { endpoint: '/api/save-advocacy' }));
   if (unavailable.length) {
     main.push(el('section', { class: 'settings-unavailable', 'aria-labelledby': 'settings-unavailable-h' },
@@ -2997,6 +3054,22 @@ function bpProfileControl(profile) {
     },
   ];
   const radios = [];
+  // What the number on the card IS, said in words. `installed` is the brain on this disk; the
+  // bundle is what a restore would copy from. A choice with neither measured says so — a dash
+  // for a measured zero was the "— stores · 0 MB" lie this card carried until 2026-09-11.
+  const metaFor = (option, choice) => {
+    if (option.value === 'ruvector') return `1 store · ${bpSize(choice.bytes)}`;
+    if (choice.installed) return `${choice.installed.storeCount} stores · ${bpSize(choice.installed.bytes)} installed`;
+    if (choice.restoreBundle?.present) return `${choice.restoreBundle.storeCount} stores · ${bpSize(choice.restoreBundle.bytes)} in the local bundle`;
+    return 'not installed · size measured after restore';
+  };
+  // The restore mechanism, named — the same branch order saveBrainProfile() takes on Apply.
+  const restoreFor = (choice) => {
+    const where = choice.restoreBundle?.path || 'the release bundle path';
+    if (choice.restoreVia === 'local-bundle') return { warn: false, text: `Apply restores from the signed local bundle at ${where}.` };
+    if (choice.restoreVia === 'signed-download') return { warn: false, text: `No local bundle on this machine (${where}) — Apply downloads the signed complete release with forge-update and verifies it before anything lands. Size is measured after it does.` };
+    return { warn: true, text: `Complete Brain cannot be restored on this machine: no local bundle at ${where} and forge-update.mjs is not installed. Run the Brain update first.` };
+  };
   const cards = options.map((option) => {
     const choice = profile.choices?.[option.value] || {};
     const input = el('input', {
@@ -3013,12 +3086,13 @@ function bpProfileControl(profile) {
       el('span', { class: 'bp-profile-copy' },
         el('span', { class: 'bp-profile-title' }, option.title,
           option.value === current ? chip('active', 'green') : null),
-        el('span', { class: 'bp-profile-meta' },
-          `${choice.storeCount || (option.value === 'ruvector' ? 1 : '—')} ${choice.storeCount === 1 ? 'store' : 'stores'} · ${bpSize(choice.bytes)}`),
+        el('span', { class: 'bp-profile-meta' }, metaFor(option, choice)),
         el('span', { class: 'bp-profile-desc' }, option.copy),
-        choice.available === false
-          ? el('span', { class: 'bp-profile-desc bp-warn' }, 'The complete release bundle is not available on this machine; run the Brain update first.')
-          : null));
+        option.value === 'complete'
+          ? (() => { const r = restoreFor(choice); return el('span', { class: `bp-profile-desc${r.warn ? ' bp-warn' : ''}` }, r.text); })()
+          : (choice.available === false
+            ? el('span', { class: 'bp-profile-desc bp-warn' }, 'No RuVector store exists on this machine or in a local bundle; run the Brain update first.')
+            : null)));
   });
 
   apply.onclick = async () => {
@@ -3189,6 +3263,11 @@ const TRUST_INFO = {
     { k: 'Why does it matter?', t: 'This stack ships fast — latest keeps you current. Pinning holds a known-good release when you need repeatable builds.' },
     { k: 'How does it help me?', t: 'Read from your plugin cache on disk, never assumed. Version pinning is planned — both choices will live on this row.' },
   ],
+  versions: [
+    { k: 'What is this?', t: 'The three version numbers this machine is actually running: the knowledge-base generation (RVF-GENERATIONS.json), the running brain (runtime-identity.json, else the plugin cache), and the installed plugin (installed_plugins.json). Each is read from its own file.' },
+    { k: 'Why does it matter?', t: 'After an update they should all match. While they differ, this page is describing more than one release at once — the header chip, the install-channel row and the knowledge base were once three different numbers with nothing saying so.' },
+    { k: 'How does it help me?', t: 'If they disagree, finish the update (one restart picks up boot-level declarations) and re-check. "Not measured" means the file was not there to read — never a guess.' },
+  ],
   advisor: [
     { k: 'What is this?', t: 'A coming mode switch. Full lets the console apply consent-gated, undoable fixes; Advisor makes every Apply button read-only — it shows the exact command and steps aside.' },
     { k: 'Why does it matter?', t: 'Some machines want eyes-only — work laptops, shared rigs, cautious first weeks. The right choice should be easy in both directions.' },
@@ -3284,6 +3363,29 @@ function renderTrust(t) {
     ],
   }));
 
+  /* 3b · versions — three files, three numbers; either they agree or the page says they do not.
+     The header chip (running brain), this card's channel row (installed plugin) and the KB's own
+     ledger (generation) were three different numbers on one page with nothing reconciling them. */
+  const v = t.versions || {};
+  const vChip = v.agree === true ? chip('in sync', 'green', 'KB generation, running brain and installed plugin all report the same version')
+    : v.agree === false ? chip('differ', 'warn', 'At least two of the measured versions disagree')
+      : chip('partly measured', 'grey', 'Fewer than two versions could be read on this machine');
+  const vShow = (x) => (x ? `v${x}` : 'not measured');
+  rows.push(trustRow({
+    name: 'Versions', info: TRUST_INFO.versions,
+    status: vChip,
+    value: [
+      el('p', {}, 'KB generation ', el('b', {}, vShow(v.kbGeneration)),
+        ' · running brain ', el('b', {}, vShow(v.runningBrain)),
+        ' · installed plugin ', el('b', {}, v.installedPlugin ? `v${v.installedPlugin}` : 'none'),
+        ...(v.latestRelease ? [' · latest release ', el('b', {}, `v${v.latestRelease}`)] : [])),
+      v.agree === false
+        ? el('p', { class: 'bp-warn' }, 'These should match once an update has fully landed. While they differ, this page is describing more than one release at once.')
+        : null,
+      el('span', { class: 'trust-src' }, 'RVF-GENERATIONS.json · runtime-identity.json / plugin cache · installed_plugins.json'),
+    ],
+  }));
+
   /* 4 · advisor mode — display-only preview, clearly labeled */
   const advNote = el('p', { class: 'adv-note' },
     'Full is on: every change stays consent-gated, with its undo recorded first. The switch itself is planned — today it’s a preview and changes nothing.');
@@ -3611,6 +3713,9 @@ function renderGates(g) {
   setChips('chips-gates', [
     chip(`${s.blocking} can block`, caught ? 'green' : 'cyan'),
     chip(caught ? `${caught} caught` : 'nothing caught yet', caught ? 'green' : 'grey'),
+    ...(s.unregisteredBlocking
+      ? [chip(`${s.unregisteredBlocking} unwired`, 'warn', 'Blocking gates that exist in the plugin but are registered in no hooks.json — they cannot stop anything until wired')]
+      : []),
   ]);
 
   const main = [];
@@ -3632,6 +3737,33 @@ function renderGates(g) {
       : '',
     infoBtn('What caught Claude', GATES_INFO)));
 
+  // WHICH hooks.json the plugin numbers came from. On an installed host the console's own repo path
+  // has no plugin/hooks/, and the card used to silently count zero plugin gates while Claude Code
+  // was loading them from the plugin cache. Named here so a zero can never again pass for absence.
+  main.push(el('p', { class: 'fineprint' },
+    g.pluginPath
+      ? ['Plugin gates read from ', el('code', {}, g.pluginPath),
+        g.pluginSource === 'installed' ? ' — the plugin Claude Code loads on this machine.'
+          : g.pluginSource === 'repo' ? ' — this repository checkout, not an installed plugin.' : '.']
+      : ['No plugin hooks.json was found on this machine — only machine-wide hooks are counted above.']));
+
+  // Blocking gates the launcher knows that NOTHING registers. "0 can block" and "4 enforcers are
+  // unplugged" are different sentences; only the second tells the owner what to do.
+  const unplugged = Array.isArray(g.unregistered) ? g.unregistered : [];
+  if (unplugged.length) {
+    main.push(el('p', { class: 'lead-stat' },
+      el('b', {}, String(unplugged.length)),
+      ` blocking gate${unplugged.length === 1 ? '' : 's'} exist${unplugged.length === 1 ? 's' : ''} in the plugin but ${unplugged.length === 1 ? 'is' : 'are'} registered in no hooks.json — ${unplugged.length === 1 ? 'it' : 'they'} cannot stop anything until wired: `,
+      ...unplugged.flatMap((u, i) => [i ? ', ' : '', el('code', {}, u.name), u.onDisk ? '' : el('span', { class: 'muted' }, ' (file missing)')]),
+      '.'));
+  }
+  if (Array.isArray(g.git) && g.git.length) {
+    main.push(el('p', { class: 'fineprint' },
+      'Git hooks in this checkout — they stop commits, not tool calls, so they are not in the count above: ',
+      ...g.git.flatMap((h, i) => [i ? ', ' : '', el('code', {}, h.name), h.executable ? '' : el('span', { class: 'muted' }, ' (not executable — will not run)')]),
+      '.'));
+  }
+
   if (caught) {
     // Deliberately NOT the .wire-lane grid: its fixed columns are sized for (count, label, meaning)
     // and fling a gate name and its subject to opposite sides of a dead gap. A catch is a sentence —

package/console/index.html

@@ -55,6 +55,7 @@
     <div class="head-right">
       <!-- Its own class on purpose: this is a DOOR, not machine chrome. It once borrowed
            .host-chip and vanished with the readout on phones (see THE TIPS DOOR in style.css). -->
+      <a class="tips-link mono" href="scope.html" title="Every repo and gist the installed brain covers — rUv's last change beside the date the brain read it"><span class="tl-long">what's in the brain</span><span class="tl-short">scope</span> →</a>
       <a class="tips-link mono" href="tips.html" title="How to actually use the Brain — three depths, one visual page"><span class="tl-long">how to use it</span><span class="tl-short">tips</span> →</a>
       <span class="host-chip mono" id="host-chip" hidden></span>
       <button class="theme-toggle" id="recheck-btn" type="button" aria-label="Re-check my machine now"
@@ -270,7 +271,7 @@
       <span class="card-head">
         <span class="stage st-mirror">Mirror</span>
         <h2 id="group-inventory-h">What have I got?</h2>
-        <span class="q">Every rUv tool on this machine — what's installed, whether it's really what we published, and where each project launches it from.</span>
+        <span class="q">Every rUv tool on this machine — what's installed, and where each project launches it from.</span>
       </span>
     </div>
     <div class="qgroup-body">
@@ -306,29 +307,8 @@
         </div>
       </details>
 
-      <!-- 1b · TRUST & PROVENANCE (v3.3 preview)
-           PROVE-stage: what you install is what we published. One number is REAL today (the release
-           bundle's published sha256); the empty rows say exactly what will fill them and when —
-           never placeholder data. -->
-      <details class="card sub-card rail-prove" id="card-trust">
-        <summary>
-          <span class="card-ic ic-prove" aria-hidden="true">
-            <svg viewBox="0 0 24 24"><path d="M12 3.5 5 6v5.5c0 4.4 2.9 7.5 7 9 4.1-1.5 7-4.6 7-9V6l-7-2.5Z"/><path d="m8.8 12 2.3 2.3 4.1-4.6"/></svg>
-          </span>
-          <span class="card-head">
-            <span class="stage st-prove">Prove</span>
-            <h2>Is this really what we published?</h2>
-            <span class="q">Is the Brain you're running the one we published? Checked against the release, not asserted.</span>
-          </span>
-          <span class="chips" id="chips-trust"><span class="chip tone-wait">checking…</span></span>
-          <span class="chev" aria-hidden="true">›</span>
-        </summary>
-        <div class="body" id="body-trust">
-          <div class="skeleton" aria-hidden="true"><div class="sk-bar w45"></div><div class="sk-bar w70"></div></div>
-          <p class="loading-note">Reading the published release fingerprint from GitHub (read-only metadata —
-          the one network touch this card makes) and your plugin cache on disk.</p>
-        </div>
-      </details>
+      <!-- 1b · (was TRUST & PROVENANCE — moved to #card-advanced at the bottom of the page on
+           2026-09-12: release provenance is a maintainer's question, not an end user's.) -->
 
       <!-- 1c · HOW IT'S WIRED -->
       <details class="card sub-card rail-mirror" id="card-wiring">
@@ -628,6 +608,53 @@
     </div>
   </section>
 
+  <!-- ================================================= MAINTAINER · ADVANCED (closed by default)
+       Release provenance — "is this really what we published?" — is a maintainer's question, not an
+       end user's (owner, 2026-09-12: "that doesn't belong in an end-user configuration screen. That's
+       something for you and I to work through."). The card keeps its ids (#card-trust / #chips-trust /
+       #body-trust), so app.js hydrates it exactly as before; only its parent moved. Nothing is hidden
+       from anyone — it is one click away, below the questions a person actually asks. -->
+  <details class="card rail-prove" id="card-advanced">
+    <summary>
+      <span class="card-ic ic-prove" aria-hidden="true">
+        <svg viewBox="0 0 24 24"><path d="M12 3.5 5 6v5.5c0 4.4 2.9 7.5 7 9 4.1-1.5 7-4.6 7-9V6l-7-2.5Z"/><path d="m8.8 12 2.3 2.3 4.1-4.6"/></svg>
+      </span>
+      <span class="card-head">
+        <span class="stage st-prove">Prove</span>
+        <h2>Advanced — verify this install against the release</h2>
+        <span class="q">For maintainers and the security-minded: the published fingerprint and bill of materials of the Brain you are running. Everything above works without ever opening this.</span>
+      </span>
+      <span class="chev" aria-hidden="true">›</span>
+    </summary>
+    <div class="body">
+
+      <!-- TRUST & PROVENANCE (v3.3 preview)
+           PROVE-stage: what you install is what we published. One number is REAL today (the release
+           bundle's published sha256); the empty rows say exactly what will fill them and when —
+           never placeholder data. -->
+      <details class="card sub-card rail-prove" id="card-trust">
+        <summary>
+          <span class="card-ic ic-prove" aria-hidden="true">
+            <svg viewBox="0 0 24 24"><path d="M12 3.5 5 6v5.5c0 4.4 2.9 7.5 7 9 4.1-1.5 7-4.6 7-9V6l-7-2.5Z"/><path d="m8.8 12 2.3 2.3 4.1-4.6"/></svg>
+          </span>
+          <span class="card-head">
+            <span class="stage st-prove">Prove</span>
+            <h2>Is this really what we published?</h2>
+            <span class="q">Is the Brain you're running the one we published? Checked against the release, not asserted.</span>
+          </span>
+          <span class="chips" id="chips-trust"><span class="chip tone-wait">checking…</span></span>
+          <span class="chev" aria-hidden="true">›</span>
+        </summary>
+        <div class="body" id="body-trust">
+          <div class="skeleton" aria-hidden="true"><div class="sk-bar w45"></div><div class="sk-bar w70"></div></div>
+          <p class="loading-note">Reading the published release fingerprint from GitHub (read-only metadata —
+          the one network touch this card makes) and your plugin cache on disk.</p>
+        </div>
+      </details>
+
+    </div>
+  </details>
+
 </main>
 
 <footer class="foot">

package/console/scope.css

@@ -0,0 +1,137 @@
+/* scope.css — "what's in the brain": every repo and gist the installed brain covers, rUv's last
+   change beside the date the brain read it. Layered on style.css (the console's tokens, header,
+   .wrap, .card, .mono, .eyebrow, .muted) — only what this page adds lives here. */
+
+.back-chip {
+  font-size: 12.5px; color: var(--ink-2);
+  border: 1px solid var(--hair); border-radius: 100px; padding: 4px 13px;
+  white-space: nowrap; letter-spacing: 0.06em; text-decoration: none;
+  transition: border-color 0.18s var(--ease), color 0.18s var(--ease), background 0.18s var(--ease);
+}
+.back-chip:hover { border-color: var(--amber); color: var(--amber-text); background: var(--fill); }
+.brand-sub { color: var(--muted); font-weight: 400; font-size: 0.86em; margin-left: 6px; }
+
+main.wrap { padding-block: 34px 72px; }
+
+/* ── lead ─────────────────────────────────────────────────────────────────── */
+.scope-lead h1 { font-size: clamp(1.6rem, 1.2rem + 1.6vw, 2.3rem); margin: 0 0 12px; }
+.scope-rule {
+  font-size: 1.02rem; line-height: 1.6; color: var(--ink-2); max-width: 62ch;
+  border-left: 3px solid var(--amber); padding-left: 14px; margin: 0 0 18px;
+}
+.asof {
+  display: inline-flex; align-items: center; gap: 8px; flex-wrap: wrap;
+  font-family: var(--mono); font-size: 12.5px; color: var(--ink-2);
+  border: 1px solid var(--hair-strong); border-radius: 100px; padding: 5px 12px;
+}
+.asof .dot { width: 8px; height: 8px; border-radius: 50%; background: var(--green); flex: none; }
+.asof.is-old .dot { background: var(--warn); }
+.asof strong { color: var(--ink); font-weight: 600; }
+
+/* ── buckets ──────────────────────────────────────────────────────────────── */
+.buckets {
+  display: grid; grid-template-columns: repeat(auto-fit, minmax(190px, 1fr)); gap: 12px;
+  margin: 26px 0 8px;
+}
+.bucket {
+  border: 1px solid var(--ridge); border-radius: var(--radius-s); padding: 14px 16px;
+  background: linear-gradient(180deg, var(--surface) 0%, color-mix(in srgb, var(--surface) 55%, var(--bg-2)) 100%);
+  position: relative; overflow: hidden;
+}
+.bucket::before { content: ""; position: absolute; left: 0; top: 0; bottom: 0; width: 3px; }
+.bucket.b-current::before   { background: var(--green); }
+.bucket.b-behind::before    { background: var(--amber); }
+.bucket.b-unverified::before{ background: var(--faint); }
+.bucket.b-notin::before     { background: var(--red); }
+.bucket .n { font-family: var(--display); font-size: 2rem; line-height: 1; color: var(--ink); }
+.bucket .n small { font-family: var(--mono); font-size: 0.78rem; color: var(--muted); margin-left: 6px; }
+.bucket .l { font-family: var(--mono); font-size: 11.5px; letter-spacing: 0.14em; text-transform: uppercase; color: var(--muted); margin-top: 6px; }
+.bucket .d { font-size: 12.5px; color: var(--ink-2); margin-top: 8px; line-height: 1.45; }
+.bucket-foot { font-size: 12.5px; color: var(--muted); margin: 6px 0 0; }
+.bucket-foot code { font-family: var(--mono); color: var(--ink-2); }
+
+/* ── search + tables ──────────────────────────────────────────────────────── */
+.scope-tools {
+  display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap;
+  margin: 30px 0 12px;
+}
+.scope-tools h2 { margin: 0; font-size: 1.15rem; }
+.scope-tools .count { color: var(--muted); font-family: var(--mono); font-size: 12.5px; margin-left: 8px; }
+.search {
+  flex: 1 1 260px; max-width: 420px;
+  font: inherit; font-size: 0.95rem; color: var(--ink);
+  background: var(--surface); border: 1px solid var(--ridge); border-radius: 100px;
+  padding: 9px 16px; outline: none;
+  transition: border-color 0.18s var(--ease);
+}
+.search::placeholder { color: var(--faint); }
+.search:focus { border-color: var(--cyan); }
+
+/* the one-line purpose under the title — the question a person came here with */
+.scope-purpose { font-size: 1.05rem; color: var(--ink); margin: 10px 0 6px; max-width: 62ch; }
+
+/* three views + the search, one row: newest first · A–Z · behind first */
+.scope-views {
+  display: flex; align-items: center; gap: 8px; flex-wrap: wrap;
+  margin: 26px 0 4px;
+}
+.views-cap { font-size: 11px; letter-spacing: .12em; text-transform: uppercase; color: var(--muted); margin-right: 2px; }
+.view {
+  font: inherit; font-size: 0.9rem; color: var(--ink-2);
+  background: var(--surface); border: 1px solid var(--ridge); border-radius: 100px;
+  padding: 7px 14px; cursor: pointer;
+  transition: border-color 0.18s var(--ease), color 0.18s var(--ease), background 0.18s var(--ease);
+}
+.view:hover { border-color: var(--cyan); color: var(--ink); }
+.view[aria-pressed="true"] { border-color: var(--cyan); color: var(--ink); background: color-mix(in srgb, var(--cyan) 14%, var(--surface)); }
+.view:focus-visible { outline: 2px solid var(--cyan); outline-offset: 2px; }
+.scope-views .search { margin-left: auto; }
+
+/* what the repo does, under its name — the words the search box also matches */
+table.scope td.name .desc {
+  display: -webkit-box; -webkit-box-orient: vertical; -webkit-line-clamp: 2; overflow: hidden;
+  color: var(--muted); font-size: 12px; line-height: 1.35; margin-top: 2px; max-width: 56ch;
+}
+
+.tbl-wrap { overflow-x: auto; border: 1px solid var(--ridge); border-radius: var(--radius-s); background: var(--surface); }
+table.scope { width: 100%; border-collapse: collapse; font-size: 13.5px; min-width: 640px; }
+table.scope th, table.scope td { padding: 9px 12px; text-align: left; vertical-align: top; border-bottom: 1px solid var(--hair); }
+table.scope thead th {
+  position: sticky; top: 58px; z-index: 2;
+  background: color-mix(in srgb, var(--surface-2) 92%, var(--bg));
+  font-family: var(--mono); font-size: 11px; letter-spacing: 0.14em; text-transform: uppercase; color: var(--muted);
+  cursor: pointer; user-select: none; white-space: nowrap;
+}
+table.scope thead th[aria-sort="descending"]::after { content: " ▾"; color: var(--amber-text); }
+table.scope thead th[aria-sort="ascending"]::after  { content: " ▴"; color: var(--amber-text); }
+table.scope tbody tr:nth-child(even) td { background: color-mix(in srgb, var(--surface-2) 40%, transparent); }
+table.scope tbody tr:hover td { background: var(--fill); }
+table.scope td.name a { color: var(--ink); text-decoration: none; border-bottom: 1px dotted var(--hair-strong); }
+table.scope td.name a:hover { color: var(--cyan-text); border-bottom-color: var(--cyan); }
+table.scope td.date { font-family: var(--mono); font-size: 12.5px; white-space: nowrap; color: var(--ink-2); }
+table.scope td.date.unknown { color: var(--faint); font-style: italic; }
+table.scope td.verdict { white-space: nowrap; }
+table.scope td.sha { font-family: var(--mono); font-size: 11px; color: var(--faint); }
+
+.badge {
+  display: inline-flex; align-items: center; gap: 6px;
+  font-family: var(--mono); font-size: 11.5px; letter-spacing: 0.04em;
+  padding: 2px 9px; border-radius: 100px; border: 1px solid var(--hair-strong);
+}
+.badge::before { content: ""; width: 7px; height: 7px; border-radius: 50%; }
+.badge.b-current    { color: var(--green-text); border-color: color-mix(in srgb, var(--green) 35%, transparent); } .badge.b-current::before { background: var(--green); }
+.badge.b-behind     { color: var(--amber-text); border-color: color-mix(in srgb, var(--amber) 40%, transparent); } .badge.b-behind::before  { background: var(--amber); }
+.badge.b-unverified { color: var(--muted); }                                                                      .badge.b-unverified::before { background: var(--faint); }
+.badge.b-notin      { color: var(--red-text);   border-color: color-mix(in srgb, var(--red) 40%, transparent); }   .badge.b-notin::before   { background: var(--red); }
+.gap { color: var(--amber-text); font-family: var(--mono); font-size: 11.5px; margin-left: 6px; }
+
+.empty { padding: 26px 16px; color: var(--muted); text-align: center; }
+.scope-foot { margin-top: 30px; font-size: 12.5px; color: var(--muted); line-height: 1.6; }
+.scope-foot code { font-family: var(--mono); color: var(--ink-2); }
+.state { padding: 40px 0; color: var(--muted); }
+.state.error { color: var(--red-text); }
+
+@media (max-width: 640px) {
+  .bucket .n { font-size: 1.6rem; }
+  table.scope thead th { top: 0; }
+}

package/console/scope.html

@@ -0,0 +1,144 @@
+<!doctype html>
+<html lang="en">
+<head>
+<meta charset="utf-8" />
+<meta name="viewport" content="width=device-width, initial-scale=1" />
+<meta name="color-scheme" content="dark light" />
+<title>RuvNet Brain — what's in the brain</title>
+<!-- Same version-free brain mark as the console. -->
+<link rel="icon" href="data:image/svg+xml,<svg xmlns=%22http://www.w3.org/2000/svg%22 viewBox=%220 0 64 64%22><rect x=%222%22 y=%222%22 width=%2260%22 height=%2260%22 rx=%2216%22 fill=%22%230b0d12%22 stroke=%22%232c3850%22 stroke-width=%221.5%22/><path d=%22M25 48 C17 48 11.5 41.5 13.5 34.5 C10 29 13 21 19 19 C21 12.5 29 9.5 35 12 C43 9 50.5 14.5 50.5 22 C55 26 55 34.5 50 38 C49 43.5 43 47.5 37 46.5 L31 47.5 Z%22 fill=%22none%22 stroke=%22%23f0a830%22 stroke-width=%223.4%22 stroke-linejoin=%22round%22/><path d=%22M31 47 L31 33 M31 33 L24 27 M31 33 L40 24.5 M31 33 L41 36.5%22 fill=%22none%22 stroke=%22%23f0a830%22 stroke-width=%222.4%22 stroke-linecap=%22round%22 opacity=%22.9%22/><circle cx=%2224%22 cy=%2227%22 r=%223.4%22 fill=%22%235ad6ff%22/><circle cx=%2240%22 cy=%2224.5%22 r=%223.4%22 fill=%22%23f4b13a%22/><circle cx=%2241%22 cy=%2236.5%22 r=%223.4%22 fill=%22%235fd38a%22/></svg>" />
+
+<script>
+/* Resolve theme BEFORE first paint — same mechanism as the console (index.html). */
+(function () {
+  var t = null;
+  try { t = localStorage.getItem('rbc-theme'); } catch (e) {}
+  if (t !== 'light' && t !== 'dark') {
+    try { t = matchMedia('(prefers-color-scheme: light)').matches ? 'light' : 'dark'; }
+    catch (e) { t = 'dark'; }
+  }
+  document.documentElement.dataset.theme = t;
+})();
+</script>
+
+<link rel="stylesheet" href="style.css" />
+<link rel="stylesheet" href="scope.css" />
+</head>
+<body>
+
+<!-- ============================================================================
+     WHAT'S IN THE BRAIN — the coverage page the owner asked for on 2026-09-11.
+
+     One question, answered per row from the installed brain's OWN receipts: for every repo and
+     gist rUv publishes, when did rUv last change it, and when did the brain last read it. The
+     verdict is never the shipped `status` word (release-projection stamps every seeded row
+     CURRENT); it is `artifact.sourceCommit === upstream.sha` for repos and the gist receipt's
+     `versionSha === upstream.sha` for gists — see scripts/onboarding-console.mjs gatherScope().
+
+     HONESTY CONSTRAINT: the record this page reads shipped WITH the installed bytes and carries
+     its own `observedAt`. That date is printed first, before any count, and the page never says
+     "live". Every number here is computed from the payload; nothing is typed into this file.
+     ============================================================================ -->
+
+<a class="skip-link" href="#main">Skip to content</a>
+
+<header class="head">
+  <div class="wrap head-inner">
+    <div class="brand">
+      <svg class="mark" viewBox="0 0 64 64" aria-hidden="true">
+        <rect class="mk-plate" x="2" y="2" width="60" height="60" rx="16" />
+        <path class="mk-brain" d="M25 48 C17 48 11.5 41.5 13.5 34.5 C10 29 13 21 19 19 C21 12.5 29 9.5 35 12 C43 9 50.5 14.5 50.5 22 C55 26 55 34.5 50 38 C49 43.5 43 47.5 37 46.5 L31 47.5 Z" />
+        <path class="mk-branch" d="M31 47 L31 33 M31 33 L24 27 M31 33 L40 24.5 M31 33 L41 36.5" />
+        <circle class="n2" cx="24" cy="27" r="4" /><circle class="n1" cx="40" cy="24.5" r="4" /><circle class="n3" cx="41" cy="36.5" r="4" />
+      </svg>
+      <span class="brand-text">RuvNet Brain <span class="brand-sub">what's in the brain</span></span>
+    </div>
+    <div class="head-right">
+      <a class="back-chip mono" href="tips.html">how to use it</a>
+      <a class="back-chip mono" href="./">‹ console</a>
+      <button class="theme-toggle" id="theme-toggle" type="button" aria-label="Switch color theme">
+        <svg class="ic-sun" viewBox="0 0 24 24" aria-hidden="true">
+          <circle cx="12" cy="12" r="4.5" />
+          <g class="rays"><line x1="12" y1="2" x2="12" y2="5"/><line x1="12" y1="19" x2="12" y2="22"/><line x1="2" y1="12" x2="5" y2="12"/><line x1="19" y1="12" x2="22" y2="12"/><line x1="4.9" y1="4.9" x2="7" y2="7"/><line x1="17" y1="17" x2="19.1" y2="19.1"/><line x1="4.9" y1="19.1" x2="7" y2="17"/><line x1="17" y1="7" x2="19.1" y2="4.9"/></g>
+        </svg>
+        <svg class="ic-moon" viewBox="0 0 24 24" aria-hidden="true">
+          <path d="M20.4 14.3A8.5 8.5 0 0 1 9.7 3.6a8.5 8.5 0 1 0 10.7 10.7Z" />
+        </svg>
+      </button>
+    </div>
+  </div>
+  <div class="spectrum-edge" aria-hidden="true"></div>
+</header>
+
+<main id="main" class="wrap">
+
+  <section class="scope-lead">
+    <p class="eyebrow">coverage · every repo and gist the installed brain knows</p>
+    <h1>What's in the brain</h1>
+    <p class="scope-purpose">Is the latest thing rUv shipped in here? Search a repo or gist below; if rUv's last change is on or before the brain's read date, it's in.</p>
+    <p class="scope-rule">If rUv's last change to a repo is on or before the date the brain read it, everything in that repo is in the brain. If it's after, the brain is behind on that repo by the difference.</p>
+    <div id="asof" class="asof"><span class="dot"></span>reading the installed brain's coverage record…</div>
+    <p id="asof-note" class="muted" style="font-size:12.5px;margin:8px 0 0;"></p>
+  </section>
+
+  <div id="state" class="state">Reading COVERAGE.json and RVF-GENERATIONS.json from the installed store root…</div>
+  <noscript><p class="state">This page needs the console's JavaScript to render the listing — every number on it is read from the installed brain, not written here.</p></noscript>
+
+  <div id="content" hidden>
+    <div id="buckets" class="buckets"></div>
+    <p id="bucket-foot" class="bucket-foot"></p>
+
+    <!-- Three ways to look, one search — the owner's ask (2026-09-12): "alphabetically, or thematically,
+         or by date". There is no theme taxonomy in the installed data (measured), so "thematically" is
+         served honestly by searching what each repo DOES (its capability-card line), not by invented
+         categories. The buttons drive BOTH tables; a column-header click still sorts one table. -->
+    <div class="scope-views" role="group" aria-label="How to list them">
+      <span class="views-cap mono">show</span>
+      <button type="button" class="view" data-view="newest" aria-pressed="true">Newest first</button>
+      <button type="button" class="view" data-view="az" aria-pressed="false">A–Z</button>
+      <button type="button" class="view" data-view="behind" aria-pressed="false">Behind first</button>
+      <input id="search" class="search" type="search" placeholder="search repos and gists — by name or what they do…" autocomplete="off" spellcheck="false" />
+    </div>
+
+    <div class="scope-tools">
+      <h2>Repositories <span id="repos-count" class="count"></span></h2>
+    </div>
+    <div class="tbl-wrap">
+      <table id="repos-table" class="scope">
+        <thead><tr>
+          <th data-key="name" aria-sort="none">repository</th>
+          <th data-key="ruvChangedAt" aria-sort="descending" title="date of the default-branch HEAD commit — what the brain ingests">rUv's last change</th>
+          <th data-key="brainReadAt" aria-sort="none" title="artifact.ingestedAt, or the generation ledger's builtUtc">brain read it</th>
+          <th data-key="bucket" aria-sort="none">verdict</th>
+          <th title="brain's source commit → upstream HEAD">commits</th>
+        </tr></thead>
+        <tbody id="repos-body"></tbody>
+      </table>
+    </div>
+
+    <div class="scope-tools">
+      <h2>Gists <span id="gists-count" class="count"></span></h2>
+    </div>
+    <div class="tbl-wrap">
+      <table id="gists-table" class="scope">
+        <thead><tr>
+          <th data-key="name" aria-sort="none">gist</th>
+          <th data-key="ruvChangedAt" aria-sort="descending" title="gist updated_at — gists have no branches, so this is the content date">rUv's last change</th>
+          <th data-key="brainReadAt" aria-sort="none">brain read it</th>
+          <th data-key="bucket" aria-sort="none">verdict</th>
+          <th title="revision the brain holds → live revision">revisions</th>
+        </tr></thead>
+        <tbody id="gists-body"></tbody>
+      </table>
+    </div>
+
+    <p class="scope-foot">
+      <strong>How the verdict is decided.</strong> <em>Current</em> means the brain's recorded source commit (or gist revision) equals the one live upstream at the as-of date. <em>Behind</em> means they differ — rUv changed it after the brain read it. <em>Unverified</em> means the store is installed here but no source commit was recorded for it, so neither claim can be proven. <em>Not in the brain</em> means no store file exists at the installed root. The shipped status label is never used. Dates: repos use the default-branch commit date, gists their <code>updated_at</code>; the read date is the ingest receipt, falling back to the generation ledger. Store root: <code id="foot-root"></code>
+    </p>
+  </div>
+
+</main>
+
+<script src="scope.js"></script>
+</body>
+</html>