ruvnet-brain 4.3.21 → 4.3.26

package/console/app.js

@@ -109,6 +109,8 @@ const fmtMs = (ms) => {
   const m = Math.floor(s / 60);
   return `${m} m ${Math.round(s % 60)} s`;
 };
+// Signed time. A negative saving means routes were SLOWER than baseline — a finding, never a dash.
+const fmtSignedMs = (ms) => (ms == null || Number.isNaN(Number(ms)) ? '—' : (Number(ms) < 0 ? `−${fmtMs(-Number(ms))}` : fmtMs(ms)));
 
 const fmtDate = (iso) => {
   if (!iso) return '—';
@@ -2011,6 +2013,22 @@ function renderMemory(mem) {
       el('p', { class: 'fineprint' },
         'Dimensions we didn’t probe this session are excluded from the score — shown grey below, never assumed. A known-broken dimension caps the score.'))));
 
+  // Two files can sit in .swarm/. The score is about ONE of them, and the reader is told which — the
+  // card once rendered the MCP coordination store's 15,824 rows as if they were the project memory.
+  if (h.stores && h.stores.coordination && h.stores.coordination.exists && h.stores.canonical && h.stores.canonical.exists) {
+    const k = h.stores.canonical; const c = h.stores.coordination;
+    const scoredIsCanonical = h.stores.scored === k.path;
+    const rows = (s) => (s.rows == null ? '' : ` (${fmtInt(s.rows)} rows)`);
+    main.push(el('p', { class: 'fineprint' },
+      'Scored store: ', el('code', {}, scoredIsCanonical ? k.path : c.path), rows(scoredIsCanonical ? k : c), '. ',
+      'Also present: ', el('code', {}, scoredIsCanonical ? c.path : k.path), rows(scoredIsCanonical ? c : k),
+      scoredIsCanonical
+        ? ' — the MCP coordination store, not scored: a different container from the one '
+        : ' — the canonical store, not scored because it holds no rows; ',
+      scoredIsCanonical ? el('code', {}, 'ruflo memory store') : el('code', {}, 'ruflo memory store'),
+      scoredIsCanonical ? ' writes.' : ' writes there once used.'));
+  }
+
   const learn = renderLearnings(mem.learnings);
   if (learn) main.push(learn);
 
@@ -2533,8 +2551,8 @@ function renderSavings(sv) {
         el('div', { class: 'total-num' }, fmtInt(taskCount)),
         el('div', { class: 'total-lab' }, 'tasks routed')),
       el('div', { class: 'total-tile' },
-        el('div', { class: 'total-num' }, util ? fmtUsd(util.frontierUsd) : (totals && totals.msSaved >= 0 ? fmtMs(totals.msSaved) : '—')),
-        el('div', { class: 'total-lab' }, util ? `if all on ${frontierName}` : 'time saved'))));
+        el('div', { class: 'total-num' }, util ? fmtUsd(util.frontierUsd) : (totals && totals.msSaved != null ? fmtSignedMs(totals.msSaved) : '—')),
+        el('div', { class: 'total-lab' }, util ? `if all on ${frontierName}` : (totals && totals.msSaved < 0 ? 'time cost' : 'time saved')))));
   }
 
   // WP2a — provenance, worn openly: these numbers are receipts, not projections.
@@ -2543,7 +2561,21 @@ function renderSavings(sv) {
     el('span', { class: 'prov-dot', 'aria-hidden': 'true' }),
     el('span', {}, 'real numbers — recomputed from your ',
       el('b', {}, `${fmtInt(receiptCount)} receipt${receiptCount === 1 ? '' : 's'}`),
-      ', never projected')));
+      ', never projected',
+      sv && sv.skippedUnmeasured
+        ? el('span', { class: 'muted' }, ` · ${fmtInt(sv.skippedUnmeasured)} row${sv.skippedUnmeasured === 1 ? '' : 's'} carried no $ or time and ${sv.skippedUnmeasured === 1 ? 'is' : 'are'} not counted`)
+        : '')));
+
+  // TIME, WITH ITS SIGN, ALWAYS. When the utilization hero is present the tile above shows frontier $
+  // instead of time, and the only other place the time result appeared turned negatives into a dash.
+  // A net loss is a finding about the router, not an embarrassment to hide.
+  if (totals && totals.msSaved != null) {
+    const neg = totals.msSaved < 0;
+    blocks.push(el('p', { class: `fineprint${neg ? ' bp-warn' : ''}` },
+      neg ? 'Time cost: ' : 'Time saved: ', el('b', {}, fmtSignedMs(totals.msSaved)),
+      totals.timedCount != null ? ` across ${fmtInt(totals.timedCount)} timed route${totals.timedCount === 1 ? '' : 's'}` : '',
+      neg ? ' — routed tasks took longer than their baseline in aggregate.' : '.'));
+  }
 
   // The distribution — how many tasks went to each bucket, and the saved-vs-frontier math.
   // (computed above, so the totals-strip can stand down when this hero is doing the talking)
@@ -2833,6 +2865,25 @@ function buildSettingsForm(cfg, { endpoint }) {
  * now just the advocacy dial (ADR-032 §DDD-0004 "the three channels": this control is the volume knob
  * on the speech channel). Two stores, two forms, one shared widget — see buildSettingsField/Form.
  */
+// THREE FACTS, SIDE BY SIDE: "switch: off · agent: loaded · last completed run: never". The toggle
+// above this line shows a single state only when the saved choice and the scheduler agree (see
+// reconcileNightly on the server); this line shows all three regardless, so "on" can never again be
+// printed over a config file that says off and a job that has never completed a run.
+function nightlyFactsLine(f) {
+  const choice = f.choice === true ? 'on' : f.choice === false ? 'off' : 'never chosen';
+  const agent = f.enforcement === 'on' ? 'loaded'
+    : f.enforcement === 'off' ? 'not scheduled'
+      : f.enforcement === 'degraded' ? 'degraded'
+        : f.enforcement === 'unsupported' ? 'unsupported here' : String(f.enforcement || 'unknown');
+  const run = f.lastRun === 'ok' ? (f.lastRunAt ? fmtDate(f.lastRunAt) : 'completed')
+    : f.lastRun === 'never-ran' ? 'never'
+      : f.lastRun === 'failed' ? 'failed' : String(f.lastRun || 'unknown');
+  return el('p', { class: `fineprint field-facts${f.agree === false ? ' bp-warn' : ''}` },
+    'switch: ', el('b', {}, choice), ' · agent: ', el('b', {}, agent), ' · last completed run: ', el('b', {}, run),
+    f.agree === false ? ' — these disagree, so the toggle above shows no single state until they do.' : '',
+    f.enforcementEvidence ? el('span', { class: 'muted' }, ` (${f.enforcementEvidence})`) : '');
+}
+
 function renderSettings(cfg, us, bp) {
   const body = $('#body-settings');
   // `bp` is NOT counted here any more: its field is rendered by #card-brain at the top of the page,
@@ -2876,7 +2927,13 @@ function renderSettings(cfg, us, bp) {
         onclick: () => { document.getElementById('card-brain')?.scrollIntoView({ behavior: 'smooth', block: 'center' }); },
       }, 'Take me to it')));
   }
-  if (cfg && Array.isArray(cfg.schema) && cfg.schema.length) main.push(buildSettingsForm(cfg, { endpoint: '/api/save-config' }));
+  if (cfg && Array.isArray(cfg.schema) && cfg.schema.length) {
+    const form = buildSettingsForm(cfg, { endpoint: '/api/save-config' });
+    const facts = cfg.runtime && cfg.runtime.nightly && cfg.runtime.nightly.facts;
+    const slot = facts ? form.querySelector('#field-nightly') : null;
+    if (slot) slot.append(nightlyFactsLine(facts));
+    main.push(form);
+  }
   if (us && Array.isArray(us.schema) && us.schema.length) main.push(buildSettingsForm(us, { endpoint: '/api/save-advocacy' }));
   if (unavailable.length) {
     main.push(el('section', { class: 'settings-unavailable', 'aria-labelledby': 'settings-unavailable-h' },
@@ -2916,6 +2973,53 @@ function bpField(bp) {
   return (bp && Array.isArray(bp.schema) && bp.schema[0]) || null;
 }
 
+/* ------------------------------------------------------------ inventory */
+
+// Renders /api/state's `inventory` section: the installed brain's stores BY NAME, joined with their
+// upstream repo and build commit. Ranked by recency (server-side) — never alphabetical. Read-only.
+function renderInventory(inv) {
+  const body = $('#body-inventory');
+  if (!body) return;
+  if (!inv || inv.available !== true) {
+    setChips('chips-inventory', [chip('can’t read the manifest', 'nt')]);
+    body.replaceChildren(el('p', { class: 'muted' },
+      inv && inv.reason ? inv.reason : 'The console could not read RVF-GENERATIONS.json from the installed brain, so it is not guessing a list.'));
+    return;
+  }
+  const chips = [chip(`${fmtInt(inv.count)} repositories`, 'green')];
+  if (inv.privateCount > 0) chips.push(chip(`${fmtInt(inv.privateCount)} private`, 'cyan', 'Fenced private stores — never leave this machine'));
+  if (inv.releaseTag) chips.push(chip(`generation ${inv.releaseTag}`, 'grey'));
+  setChips('chips-inventory', chips);
+
+  const mb = inv.totalBytes ? `${(inv.totalBytes / 1e6).toFixed(0)} MB on disk` : null;
+  const summary = el('p', { class: 'muted' },
+    `${fmtInt(inv.count)} searchable stores`,
+    inv.withProvenance != null ? `, ${fmtInt(inv.withProvenance)} with a recorded upstream commit` : '',
+    mb ? `, ${mb}.` : '.');
+
+  const rows = (inv.stores || []).map((s) => el('li', { class: 'inv-row', 'data-name': s.name.toLowerCase() },
+    el('span', { class: 'mono inv-name' }, s.name),
+    s.private ? chip('private', 'cyan') : null,
+    s.sourceRepo && /^https?:\/\//.test(s.sourceRepo)
+      ? el('a', { class: 'inv-src', href: s.sourceRepo, target: '_blank', rel: 'noopener noreferrer' }, s.sourceRepo.replace(/^https?:\/\/(www\.)?github\.com\//, ''))
+      : el('span', { class: 'muted inv-src' }, s.sourceRepo || '—'),
+    el('span', { class: 'mono muted inv-meta' },
+      s.sourceCommit ? `@${s.sourceCommit}` : '', s.builtUtc ? ` · built ${String(s.builtUtc).slice(0, 10)}` : ''),
+  ));
+  const list = el('ul', { class: 'inv-list', 'aria-label': 'Repositories in the brain' }, ...rows);
+  const filter = el('input', {
+    class: 'inv-filter', type: 'search', placeholder: 'Filter by name…', 'aria-label': 'Filter repositories by name',
+    oninput: (e) => {
+      const q = String(e.target.value || '').trim().toLowerCase();
+      let shown = 0;
+      for (const li of list.children) { const hit = !q || li.dataset.name.includes(q); li.hidden = !hit; if (hit) shown += 1; }
+      count.textContent = q ? `${fmtInt(shown)} of ${fmtInt(inv.count)} match` : '';
+    },
+  });
+  const count = el('span', { class: 'muted inv-count', 'aria-live': 'polite' });
+  body.replaceChildren(summary, el('div', { class: 'inv-tools' }, filter, count), list);
+}
+
 function renderBrainPower(bp) {
   const body = $('#body-brain');
   if (!body) return;
@@ -2997,6 +3101,22 @@ function bpProfileControl(profile) {
     },
   ];
   const radios = [];
+  // What the number on the card IS, said in words. `installed` is the brain on this disk; the
+  // bundle is what a restore would copy from. A choice with neither measured says so — a dash
+  // for a measured zero was the "— stores · 0 MB" lie this card carried until 2026-09-11.
+  const metaFor = (option, choice) => {
+    if (option.value === 'ruvector') return `1 store · ${bpSize(choice.bytes)}`;
+    if (choice.installed) return `${choice.installed.storeCount} stores · ${bpSize(choice.installed.bytes)} installed`;
+    if (choice.restoreBundle?.present) return `${choice.restoreBundle.storeCount} stores · ${bpSize(choice.restoreBundle.bytes)} in the local bundle`;
+    return 'not installed · size measured after restore';
+  };
+  // The restore mechanism, named — the same branch order saveBrainProfile() takes on Apply.
+  const restoreFor = (choice) => {
+    const where = choice.restoreBundle?.path || 'the release bundle path';
+    if (choice.restoreVia === 'local-bundle') return { warn: false, text: `Apply restores from the signed local bundle at ${where}.` };
+    if (choice.restoreVia === 'signed-download') return { warn: false, text: `No local bundle on this machine (${where}) — Apply downloads the signed complete release with forge-update and verifies it before anything lands. Size is measured after it does.` };
+    return { warn: true, text: `Complete Brain cannot be restored on this machine: no local bundle at ${where} and forge-update.mjs is not installed. Run the Brain update first.` };
+  };
   const cards = options.map((option) => {
     const choice = profile.choices?.[option.value] || {};
     const input = el('input', {
@@ -3013,12 +3133,13 @@ function bpProfileControl(profile) {
       el('span', { class: 'bp-profile-copy' },
         el('span', { class: 'bp-profile-title' }, option.title,
           option.value === current ? chip('active', 'green') : null),
-        el('span', { class: 'bp-profile-meta' },
-          `${choice.storeCount || (option.value === 'ruvector' ? 1 : '—')} ${choice.storeCount === 1 ? 'store' : 'stores'} · ${bpSize(choice.bytes)}`),
+        el('span', { class: 'bp-profile-meta' }, metaFor(option, choice)),
         el('span', { class: 'bp-profile-desc' }, option.copy),
-        choice.available === false
-          ? el('span', { class: 'bp-profile-desc bp-warn' }, 'The complete release bundle is not available on this machine; run the Brain update first.')
-          : null));
+        option.value === 'complete'
+          ? (() => { const r = restoreFor(choice); return el('span', { class: `bp-profile-desc${r.warn ? ' bp-warn' : ''}` }, r.text); })()
+          : (choice.available === false
+            ? el('span', { class: 'bp-profile-desc bp-warn' }, 'No RuVector store exists on this machine or in a local bundle; run the Brain update first.')
+            : null)));
   });
 
   apply.onclick = async () => {
@@ -3189,6 +3310,11 @@ const TRUST_INFO = {
     { k: 'Why does it matter?', t: 'This stack ships fast — latest keeps you current. Pinning holds a known-good release when you need repeatable builds.' },
     { k: 'How does it help me?', t: 'Read from your plugin cache on disk, never assumed. Version pinning is planned — both choices will live on this row.' },
   ],
+  versions: [
+    { k: 'What is this?', t: 'The three version numbers this machine is actually running: the knowledge-base generation (RVF-GENERATIONS.json), the running brain (runtime-identity.json, else the plugin cache), and the installed plugin (installed_plugins.json). Each is read from its own file.' },
+    { k: 'Why does it matter?', t: 'After an update they should all match. While they differ, this page is describing more than one release at once — the header chip, the install-channel row and the knowledge base were once three different numbers with nothing saying so.' },
+    { k: 'How does it help me?', t: 'If they disagree, finish the update (one restart picks up boot-level declarations) and re-check. "Not measured" means the file was not there to read — never a guess.' },
+  ],
   advisor: [
     { k: 'What is this?', t: 'A coming mode switch. Full lets the console apply consent-gated, undoable fixes; Advisor makes every Apply button read-only — it shows the exact command and steps aside.' },
     { k: 'Why does it matter?', t: 'Some machines want eyes-only — work laptops, shared rigs, cautious first weeks. The right choice should be easy in both directions.' },
@@ -3284,6 +3410,29 @@ function renderTrust(t) {
     ],
   }));
 
+  /* 3b · versions — three files, three numbers; either they agree or the page says they do not.
+     The header chip (running brain), this card's channel row (installed plugin) and the KB's own
+     ledger (generation) were three different numbers on one page with nothing reconciling them. */
+  const v = t.versions || {};
+  const vChip = v.agree === true ? chip('in sync', 'green', 'KB generation, running brain and installed plugin all report the same version')
+    : v.agree === false ? chip('differ', 'warn', 'At least two of the measured versions disagree')
+      : chip('partly measured', 'grey', 'Fewer than two versions could be read on this machine');
+  const vShow = (x) => (x ? `v${x}` : 'not measured');
+  rows.push(trustRow({
+    name: 'Versions', info: TRUST_INFO.versions,
+    status: vChip,
+    value: [
+      el('p', {}, 'KB generation ', el('b', {}, vShow(v.kbGeneration)),
+        ' · running brain ', el('b', {}, vShow(v.runningBrain)),
+        ' · installed plugin ', el('b', {}, v.installedPlugin ? `v${v.installedPlugin}` : 'none'),
+        ...(v.latestRelease ? [' · latest release ', el('b', {}, `v${v.latestRelease}`)] : [])),
+      v.agree === false
+        ? el('p', { class: 'bp-warn' }, 'These should match once an update has fully landed. While they differ, this page is describing more than one release at once.')
+        : null,
+      el('span', { class: 'trust-src' }, 'RVF-GENERATIONS.json · runtime-identity.json / plugin cache · installed_plugins.json'),
+    ],
+  }));
+
   /* 4 · advisor mode — display-only preview, clearly labeled */
   const advNote = el('p', { class: 'adv-note' },
     'Full is on: every change stays consent-gated, with its undo recorded first. The switch itself is planned — today it’s a preview and changes nothing.');
@@ -3561,6 +3710,7 @@ async function loadState({ landed = false } = {}) {
     renderHost(state.host, state.generatedAt);
     const s = state.sections || {};
     renderBrainPower(s.brainPower);
+    renderInventory(s.inventory);
     renderWiring(s.wiring);
     lastMemory = s.memory;
     renderMemory(s.memory);
@@ -3611,6 +3761,9 @@ function renderGates(g) {
   setChips('chips-gates', [
     chip(`${s.blocking} can block`, caught ? 'green' : 'cyan'),
     chip(caught ? `${caught} caught` : 'nothing caught yet', caught ? 'green' : 'grey'),
+    ...(s.unregisteredBlocking
+      ? [chip(`${s.unregisteredBlocking} unwired`, 'warn', 'Blocking gates that exist in the plugin but are registered in no hooks.json — they cannot stop anything until wired')]
+      : []),
   ]);
 
   const main = [];
@@ -3632,6 +3785,33 @@ function renderGates(g) {
       : '',
     infoBtn('What caught Claude', GATES_INFO)));
 
+  // WHICH hooks.json the plugin numbers came from. On an installed host the console's own repo path
+  // has no plugin/hooks/, and the card used to silently count zero plugin gates while Claude Code
+  // was loading them from the plugin cache. Named here so a zero can never again pass for absence.
+  main.push(el('p', { class: 'fineprint' },
+    g.pluginPath
+      ? ['Plugin gates read from ', el('code', {}, g.pluginPath),
+        g.pluginSource === 'installed' ? ' — the plugin Claude Code loads on this machine.'
+          : g.pluginSource === 'repo' ? ' — this repository checkout, not an installed plugin.' : '.']
+      : ['No plugin hooks.json was found on this machine — only machine-wide hooks are counted above.']));
+
+  // Blocking gates the launcher knows that NOTHING registers. "0 can block" and "4 enforcers are
+  // unplugged" are different sentences; only the second tells the owner what to do.
+  const unplugged = Array.isArray(g.unregistered) ? g.unregistered : [];
+  if (unplugged.length) {
+    main.push(el('p', { class: 'lead-stat' },
+      el('b', {}, String(unplugged.length)),
+      ` blocking gate${unplugged.length === 1 ? '' : 's'} exist${unplugged.length === 1 ? 's' : ''} in the plugin but ${unplugged.length === 1 ? 'is' : 'are'} registered in no hooks.json — ${unplugged.length === 1 ? 'it' : 'they'} cannot stop anything until wired: `,
+      ...unplugged.flatMap((u, i) => [i ? ', ' : '', el('code', {}, u.name), u.onDisk ? '' : el('span', { class: 'muted' }, ' (file missing)')]),
+      '.'));
+  }
+  if (Array.isArray(g.git) && g.git.length) {
+    main.push(el('p', { class: 'fineprint' },
+      'Git hooks in this checkout — they stop commits, not tool calls, so they are not in the count above: ',
+      ...g.git.flatMap((h, i) => [i ? ', ' : '', el('code', {}, h.name), h.executable ? '' : el('span', { class: 'muted' }, ' (not executable — will not run)')]),
+      '.'));
+  }
+
   if (caught) {
     // Deliberately NOT the .wire-lane grid: its fixed columns are sized for (count, label, meaning)
     // and fling a gate name and its subject to opposite sides of a dead gap. A catch is a sentence —

package/console/index.html

@@ -55,6 +55,7 @@
     <div class="head-right">
       <!-- Its own class on purpose: this is a DOOR, not machine chrome. It once borrowed
            .host-chip and vanished with the readout on phones (see THE TIPS DOOR in style.css). -->
+      <a class="tips-link mono" href="scope.html" title="Every repo and gist the installed brain covers — rUv's last change beside the date the brain read it"><span class="tl-long">what's in the brain</span><span class="tl-short">scope</span> →</a>
       <a class="tips-link mono" href="tips.html" title="How to actually use the Brain — three depths, one visual page"><span class="tl-long">how to use it</span><span class="tl-short">tips</span> →</a>
       <span class="host-chip mono" id="host-chip" hidden></span>
       <button class="theme-toggle" id="recheck-btn" type="button" aria-label="Re-check my machine now"
@@ -107,6 +108,25 @@
     </div>
   </section>
 
+  <!-- The one thing this page never showed: WHICH repositories are in the brain, by name. It always
+       carried the count and never the list. Read-only mirror of the installed manifest. -->
+  <section class="card rail-mirror" id="card-inventory" aria-labelledby="card-inventory-h">
+    <div class="qgroup-head">
+      <span class="card-ic ic-mirror" aria-hidden="true">
+        <svg viewBox="0 0 24 24"><path d="M4 6h16"/><path d="M4 12h16"/><path d="M4 18h10"/></svg>
+      </span>
+      <span class="card-head">
+        <span class="stage st-mirror">Mirror</span>
+        <h2 id="card-inventory-h">What’s in your brain</h2>
+        <span class="q">Every repository the brain can search right now, by name — where it came from and when it was built.</span>
+      </span>
+      <span class="chips" id="chips-inventory"><span class="chip tone-wait">counting…</span></span>
+    </div>
+    <div class="body" id="body-inventory">
+      <div class="skeleton" aria-hidden="true"><div class="sk-bar w40"></div><div class="sk-bar w75"></div></div>
+    </div>
+  </section>
+
   <!-- ======================================================= HERO -->
   <section class="intro">
     <div class="intro-grid">
@@ -270,7 +290,7 @@
       <span class="card-head">
         <span class="stage st-mirror">Mirror</span>
         <h2 id="group-inventory-h">What have I got?</h2>
-        <span class="q">Every rUv tool on this machine — what's installed, whether it's really what we published, and where each project launches it from.</span>
+        <span class="q">Every rUv tool on this machine — what's installed, and where each project launches it from.</span>
       </span>
     </div>
     <div class="qgroup-body">
@@ -306,29 +326,8 @@
         </div>
       </details>
 
-      <!-- 1b · TRUST & PROVENANCE (v3.3 preview)
-           PROVE-stage: what you install is what we published. One number is REAL today (the release
-           bundle's published sha256); the empty rows say exactly what will fill them and when —
-           never placeholder data. -->
-      <details class="card sub-card rail-prove" id="card-trust">
-        <summary>
-          <span class="card-ic ic-prove" aria-hidden="true">
-            <svg viewBox="0 0 24 24"><path d="M12 3.5 5 6v5.5c0 4.4 2.9 7.5 7 9 4.1-1.5 7-4.6 7-9V6l-7-2.5Z"/><path d="m8.8 12 2.3 2.3 4.1-4.6"/></svg>
-          </span>
-          <span class="card-head">
-            <span class="stage st-prove">Prove</span>
-            <h2>Is this really what we published?</h2>
-            <span class="q">Is the Brain you're running the one we published? Checked against the release, not asserted.</span>
-          </span>
-          <span class="chips" id="chips-trust"><span class="chip tone-wait">checking…</span></span>
-          <span class="chev" aria-hidden="true">›</span>
-        </summary>
-        <div class="body" id="body-trust">
-          <div class="skeleton" aria-hidden="true"><div class="sk-bar w45"></div><div class="sk-bar w70"></div></div>
-          <p class="loading-note">Reading the published release fingerprint from GitHub (read-only metadata —
-          the one network touch this card makes) and your plugin cache on disk.</p>
-        </div>
-      </details>
+      <!-- 1b · (was TRUST & PROVENANCE — moved to #card-advanced at the bottom of the page on
+           2026-09-12: release provenance is a maintainer's question, not an end user's.) -->
 
       <!-- 1c · HOW IT'S WIRED -->
       <details class="card sub-card rail-mirror" id="card-wiring">
@@ -628,6 +627,53 @@
     </div>
   </section>
 
+  <!-- ================================================= MAINTAINER · ADVANCED (closed by default)
+       Release provenance — "is this really what we published?" — is a maintainer's question, not an
+       end user's (owner, 2026-09-12: "that doesn't belong in an end-user configuration screen. That's
+       something for you and I to work through."). The card keeps its ids (#card-trust / #chips-trust /
+       #body-trust), so app.js hydrates it exactly as before; only its parent moved. Nothing is hidden
+       from anyone — it is one click away, below the questions a person actually asks. -->
+  <details class="card rail-prove" id="card-advanced">
+    <summary>
+      <span class="card-ic ic-prove" aria-hidden="true">
+        <svg viewBox="0 0 24 24"><path d="M12 3.5 5 6v5.5c0 4.4 2.9 7.5 7 9 4.1-1.5 7-4.6 7-9V6l-7-2.5Z"/><path d="m8.8 12 2.3 2.3 4.1-4.6"/></svg>
+      </span>
+      <span class="card-head">
+        <span class="stage st-prove">Prove</span>
+        <h2>Advanced — verify this install against the release</h2>
+        <span class="q">For maintainers and the security-minded: the published fingerprint and bill of materials of the Brain you are running. Everything above works without ever opening this.</span>
+      </span>
+      <span class="chev" aria-hidden="true">›</span>
+    </summary>
+    <div class="body">
+
+      <!-- TRUST & PROVENANCE (v3.3 preview)
+           PROVE-stage: what you install is what we published. One number is REAL today (the release
+           bundle's published sha256); the empty rows say exactly what will fill them and when —
+           never placeholder data. -->
+      <details class="card sub-card rail-prove" id="card-trust">
+        <summary>
+          <span class="card-ic ic-prove" aria-hidden="true">
+            <svg viewBox="0 0 24 24"><path d="M12 3.5 5 6v5.5c0 4.4 2.9 7.5 7 9 4.1-1.5 7-4.6 7-9V6l-7-2.5Z"/><path d="m8.8 12 2.3 2.3 4.1-4.6"/></svg>
+          </span>
+          <span class="card-head">
+            <span class="stage st-prove">Prove</span>
+            <h2>Is this really what we published?</h2>
+            <span class="q">Is the Brain you're running the one we published? Checked against the release, not asserted.</span>
+          </span>
+          <span class="chips" id="chips-trust"><span class="chip tone-wait">checking…</span></span>
+          <span class="chev" aria-hidden="true">›</span>
+        </summary>
+        <div class="body" id="body-trust">
+          <div class="skeleton" aria-hidden="true"><div class="sk-bar w45"></div><div class="sk-bar w70"></div></div>
+          <p class="loading-note">Reading the published release fingerprint from GitHub (read-only metadata —
+          the one network touch this card makes) and your plugin cache on disk.</p>
+        </div>
+      </details>
+
+    </div>
+  </details>
+
 </main>
 
 <footer class="foot">

package/console/scope.css

@@ -0,0 +1,137 @@
+/* scope.css — "what's in the brain": every repo and gist the installed brain covers, rUv's last
+   change beside the date the brain read it. Layered on style.css (the console's tokens, header,
+   .wrap, .card, .mono, .eyebrow, .muted) — only what this page adds lives here. */
+
+.back-chip {
+  font-size: 12.5px; color: var(--ink-2);
+  border: 1px solid var(--hair); border-radius: 100px; padding: 4px 13px;
+  white-space: nowrap; letter-spacing: 0.06em; text-decoration: none;
+  transition: border-color 0.18s var(--ease), color 0.18s var(--ease), background 0.18s var(--ease);
+}
+.back-chip:hover { border-color: var(--amber); color: var(--amber-text); background: var(--fill); }
+.brand-sub { color: var(--muted); font-weight: 400; font-size: 0.86em; margin-left: 6px; }
+
+main.wrap { padding-block: 34px 72px; }
+
+/* ── lead ─────────────────────────────────────────────────────────────────── */
+.scope-lead h1 { font-size: clamp(1.6rem, 1.2rem + 1.6vw, 2.3rem); margin: 0 0 12px; }
+.scope-rule {
+  font-size: 1.02rem; line-height: 1.6; color: var(--ink-2); max-width: 62ch;
+  border-left: 3px solid var(--amber); padding-left: 14px; margin: 0 0 18px;
+}
+.asof {
+  display: inline-flex; align-items: center; gap: 8px; flex-wrap: wrap;
+  font-family: var(--mono); font-size: 12.5px; color: var(--ink-2);
+  border: 1px solid var(--hair-strong); border-radius: 100px; padding: 5px 12px;
+}
+.asof .dot { width: 8px; height: 8px; border-radius: 50%; background: var(--green); flex: none; }
+.asof.is-old .dot { background: var(--warn); }
+.asof strong { color: var(--ink); font-weight: 600; }
+
+/* ── buckets ──────────────────────────────────────────────────────────────── */
+.buckets {
+  display: grid; grid-template-columns: repeat(auto-fit, minmax(190px, 1fr)); gap: 12px;
+  margin: 26px 0 8px;
+}
+.bucket {
+  border: 1px solid var(--ridge); border-radius: var(--radius-s); padding: 14px 16px;
+  background: linear-gradient(180deg, var(--surface) 0%, color-mix(in srgb, var(--surface) 55%, var(--bg-2)) 100%);
+  position: relative; overflow: hidden;
+}
+.bucket::before { content: ""; position: absolute; left: 0; top: 0; bottom: 0; width: 3px; }
+.bucket.b-current::before   { background: var(--green); }
+.bucket.b-behind::before    { background: var(--amber); }
+.bucket.b-unverified::before{ background: var(--faint); }
+.bucket.b-notin::before     { background: var(--red); }
+.bucket .n { font-family: var(--display); font-size: 2rem; line-height: 1; color: var(--ink); }
+.bucket .n small { font-family: var(--mono); font-size: 0.78rem; color: var(--muted); margin-left: 6px; }
+.bucket .l { font-family: var(--mono); font-size: 11.5px; letter-spacing: 0.14em; text-transform: uppercase; color: var(--muted); margin-top: 6px; }
+.bucket .d { font-size: 12.5px; color: var(--ink-2); margin-top: 8px; line-height: 1.45; }
+.bucket-foot { font-size: 12.5px; color: var(--muted); margin: 6px 0 0; }
+.bucket-foot code { font-family: var(--mono); color: var(--ink-2); }
+
+/* ── search + tables ──────────────────────────────────────────────────────── */
+.scope-tools {
+  display: flex; align-items: center; justify-content: space-between; gap: 12px; flex-wrap: wrap;
+  margin: 30px 0 12px;
+}
+.scope-tools h2 { margin: 0; font-size: 1.15rem; }
+.scope-tools .count { color: var(--muted); font-family: var(--mono); font-size: 12.5px; margin-left: 8px; }
+.search {
+  flex: 1 1 260px; max-width: 420px;
+  font: inherit; font-size: 0.95rem; color: var(--ink);
+  background: var(--surface); border: 1px solid var(--ridge); border-radius: 100px;
+  padding: 9px 16px; outline: none;
+  transition: border-color 0.18s var(--ease);
+}
+.search::placeholder { color: var(--faint); }
+.search:focus { border-color: var(--cyan); }
+
+/* the one-line purpose under the title — the question a person came here with */
+.scope-purpose { font-size: 1.05rem; color: var(--ink); margin: 10px 0 6px; max-width: 62ch; }
+
+/* three views + the search, one row: newest first · A–Z · behind first */
+.scope-views {
+  display: flex; align-items: center; gap: 8px; flex-wrap: wrap;
+  margin: 26px 0 4px;
+}
+.views-cap { font-size: 11px; letter-spacing: .12em; text-transform: uppercase; color: var(--muted); margin-right: 2px; }
+.view {
+  font: inherit; font-size: 0.9rem; color: var(--ink-2);
+  background: var(--surface); border: 1px solid var(--ridge); border-radius: 100px;
+  padding: 7px 14px; cursor: pointer;
+  transition: border-color 0.18s var(--ease), color 0.18s var(--ease), background 0.18s var(--ease);
+}
+.view:hover { border-color: var(--cyan); color: var(--ink); }
+.view[aria-pressed="true"] { border-color: var(--cyan); color: var(--ink); background: color-mix(in srgb, var(--cyan) 14%, var(--surface)); }
+.view:focus-visible { outline: 2px solid var(--cyan); outline-offset: 2px; }
+.scope-views .search { margin-left: auto; }
+
+/* what the repo does, under its name — the words the search box also matches */
+table.scope td.name .desc {
+  display: -webkit-box; -webkit-box-orient: vertical; -webkit-line-clamp: 2; overflow: hidden;
+  color: var(--muted); font-size: 12px; line-height: 1.35; margin-top: 2px; max-width: 56ch;
+}
+
+.tbl-wrap { overflow-x: auto; border: 1px solid var(--ridge); border-radius: var(--radius-s); background: var(--surface); }
+table.scope { width: 100%; border-collapse: collapse; font-size: 13.5px; min-width: 640px; }
+table.scope th, table.scope td { padding: 9px 12px; text-align: left; vertical-align: top; border-bottom: 1px solid var(--hair); }
+table.scope thead th {
+  position: sticky; top: 58px; z-index: 2;
+  background: color-mix(in srgb, var(--surface-2) 92%, var(--bg));
+  font-family: var(--mono); font-size: 11px; letter-spacing: 0.14em; text-transform: uppercase; color: var(--muted);
+  cursor: pointer; user-select: none; white-space: nowrap;
+}
+table.scope thead th[aria-sort="descending"]::after { content: " ▾"; color: var(--amber-text); }
+table.scope thead th[aria-sort="ascending"]::after  { content: " ▴"; color: var(--amber-text); }
+table.scope tbody tr:nth-child(even) td { background: color-mix(in srgb, var(--surface-2) 40%, transparent); }
+table.scope tbody tr:hover td { background: var(--fill); }
+table.scope td.name a { color: var(--ink); text-decoration: none; border-bottom: 1px dotted var(--hair-strong); }
+table.scope td.name a:hover { color: var(--cyan-text); border-bottom-color: var(--cyan); }
+table.scope td.date { font-family: var(--mono); font-size: 12.5px; white-space: nowrap; color: var(--ink-2); }
+table.scope td.date.unknown { color: var(--faint); font-style: italic; }
+table.scope td.verdict { white-space: nowrap; }
+table.scope td.sha { font-family: var(--mono); font-size: 11px; color: var(--faint); }
+
+.badge {
+  display: inline-flex; align-items: center; gap: 6px;
+  font-family: var(--mono); font-size: 11.5px; letter-spacing: 0.04em;
+  padding: 2px 9px; border-radius: 100px; border: 1px solid var(--hair-strong);
+}
+.badge::before { content: ""; width: 7px; height: 7px; border-radius: 50%; }
+.badge.b-current    { color: var(--green-text); border-color: color-mix(in srgb, var(--green) 35%, transparent); } .badge.b-current::before { background: var(--green); }
+.badge.b-behind     { color: var(--amber-text); border-color: color-mix(in srgb, var(--amber) 40%, transparent); } .badge.b-behind::before  { background: var(--amber); }
+.badge.b-unverified { color: var(--muted); }                                                                      .badge.b-unverified::before { background: var(--faint); }
+.badge.b-notin      { color: var(--red-text);   border-color: color-mix(in srgb, var(--red) 40%, transparent); }   .badge.b-notin::before   { background: var(--red); }
+.gap { color: var(--amber-text); font-family: var(--mono); font-size: 11.5px; margin-left: 6px; }
+
+.empty { padding: 26px 16px; color: var(--muted); text-align: center; }
+.scope-foot { margin-top: 30px; font-size: 12.5px; color: var(--muted); line-height: 1.6; }
+.scope-foot code { font-family: var(--mono); color: var(--ink-2); }
+.state { padding: 40px 0; color: var(--muted); }
+.state.error { color: var(--red-text); }
+
+@media (max-width: 640px) {
+  .bucket .n { font-size: 1.6rem; }
+  table.scope thead th { top: 0; }
+}