sneakoscope 8.3.2 → 8.4.0

package/README.md

@@ -22,7 +22,7 @@ Proof-first orchestration for Codex CLI, ChatGPT Desktop, AI coding agents, mult
 Sneakoscope Codex (`sks`) is an open-source trust layer for Codex CLI and ChatGPT Desktop. It coordinates bounded AI coding agents, records machine-verifiable evidence, preserves project memory, and blocks release claims that are not supported by current tests or artifacts. Search visibility outcomes are measured separately; SKS does not promise rankings or traffic.
 <!-- END SKS SEARCH VISIBILITY MARKETING -->
 
-This README documents package **SKS 8.3.2** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
+This README documents package **SKS 8.4.0** — its own identity, read from `package.json` and subject to release-gate verification, not advice about what to install.
 
 Use the official latest stable SKS and Codex CLI releases. The Codex compatibility SSOT is always the **current latest stable** host; capability probes measure what that host can actually do. Product docs do not crown a fixed `0.x.y` string as SSOT (release pins and schema directories are measured artifacts for the current package, not a permanent product version claim). Menu Bar / Center induce updates to the latest stable build. Run `sks update-check` for what is installed and read the capability report for what is supported. Install SSOT is npm `sneakoscope@latest`; PATH `sks` and Menu Bar stamped generation must match that version or gates fail. It resolves managed SKS skills from the authoritative global install, preserves a runnable Naruto child slot when `max_threads=2`, and keeps Menu Bar repair transactional so stamped generations remain verifiable. Naruto uses stable opt-in multi-agent V2 when the host exposes it (Codex official multi-agent wrap-only; SKS does not reimplement a parallel runtime). Local code search is mode-separated (`sks search files|text|structure|symbol|context`); `context` is answered by the compiled TriWiki Context Graph (`context-graph.json` is exhaustive authority; `context-pack.json` and managed `AGENTS.md` are bounded projections) — see [docs/architecture/context-graph.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/architecture/context-graph.md) and [docs/PRODUCT-CONTRACT.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/docs/PRODUCT-CONTRACT.md). See [CHANGELOG.md](https://github.com/mandarange/Sneakoscope-Codex/blob/main/CHANGELOG.md).
 

package/config/architecture-map-policy.v1.json

@@ -0,0 +1,168 @@
+{
+  "schema": "sks.architecture-map-policy.v1",
+  "version": 1,
+  "module_id_source": "context-graph module node id, as produced by src/core/triwiki/context-graph/extractors/code/modules.ts: the owning directory, capped at depth 3 under src|source|lib and depth 2 elsewhere. Entries below are exact module ids, never globs; a module not named by any layer is unconstrained.",
+  "layers": [
+    {
+      "id": "entrypoint",
+      "purpose": "Process entry. Nothing in the repository imports these modules, so argv arrives here and only leaves downward.",
+      "modules": ["src/bin"]
+    },
+    {
+      "id": "cli_surface",
+      "purpose": "Argument parsing, terminal output, the command registry and the command manifest.",
+      "modules": ["src/cli"]
+    },
+    {
+      "id": "command",
+      "purpose": "One handler per user-facing command, split across a thin dispatch root and the heavier implementations.",
+      "modules": ["src/commands", "src/core/commands"]
+    },
+    {
+      "id": "orchestration",
+      "purpose": "Route classification, pipeline plans, gate profiles and the stop gate.",
+      "modules": [
+        "src/core/pipeline",
+        "src/core/pipeline-internals",
+        "src/core/router",
+        "src/core/routes",
+        "src/core/runtime",
+        "src/core/stop-gate"
+      ]
+    },
+    {
+      "id": "release",
+      "purpose": "Release gate manifest, gate DAG, scheduling and publish contracts.",
+      "modules": ["src/core/release"]
+    },
+    {
+      "id": "knowledge",
+      "purpose": "TriWiki: the context graph, code packs, the proof bank and the wrongness ledger.",
+      "modules": ["src/core/triwiki", "src/core/triwiki-wrongness"]
+    },
+    {
+      "id": "foundation",
+      "purpose": "Domain-free primitives: error shapes, JSON records, file locks, regex helpers.",
+      "modules": ["src/core/errors", "src/core/json", "src/core/locks", "src/core/text"]
+    },
+    {
+      "id": "gate_script",
+      "purpose": "Standalone check executables invoked by npm scripts and the release DAG.",
+      "modules": ["src/scripts", "src/scripts/lib"]
+    }
+  ],
+  "boundaries": {
+    "mode": "allow-list",
+    "allow": [
+      { "from": "entrypoint", "to": ["cli_surface", "command", "orchestration"] },
+      {
+        "from": "cli_surface",
+        "to": ["command", "orchestration", "release", "knowledge", "foundation"]
+      },
+      { "from": "command", "to": ["orchestration", "release", "knowledge", "foundation"] },
+      { "from": "orchestration", "to": ["release", "knowledge", "foundation"] },
+      { "from": "release", "to": ["knowledge", "foundation"] },
+      { "from": "knowledge", "to": ["foundation"] },
+      { "from": "foundation", "to": [] },
+      {
+        "from": "gate_script",
+        "to": ["cli_surface", "command", "orchestration", "release", "knowledge", "foundation"]
+      }
+    ]
+  },
+  "thresholds": {
+    "max_diagram_nodes": 240,
+    "max_diagram_edges": 900,
+    "max_diagram_bytes": 45000,
+    "max_module_fan_out": 56,
+    "max_module_fan_in": 96
+  },
+  "profiles": {
+    "global": { "maxNodes": 240, "maxEdges": 360, "maxLabelChars": 56, "tokenBudget": 0 },
+    "planning": { "maxNodes": 48, "maxEdges": 72, "maxLabelChars": 56, "tokenBudget": 900 },
+    "implementation": { "maxNodes": 64, "maxEdges": 96, "maxLabelChars": 56, "tokenBudget": 1200 },
+    "review": { "maxNodes": 72, "maxEdges": 108, "maxLabelChars": 56, "tokenBudget": 1600 },
+    "protected": { "maxNodes": 96, "maxEdges": 144, "maxLabelChars": 56, "tokenBudget": 2400 }
+  },
+  "absoluteTokenCeiling": 3200,
+  "globalAtlasMaxBytes": 1572864,
+  "missionArtifactsMaxBytes": 358400,
+  "accuracyFloors": {
+    "changedPathAccounting": 1,
+    "projectionAccounting": 1,
+    "protectedRelationRecall": 1,
+    "eligibleExtractionSuccess": 0.995,
+    "deterministicHashRuns": 3
+  },
+  "dependencyRules": [
+    {
+      "id": "boundary-allow-list",
+      "effect": "deny",
+      "severity": "blocking",
+      "description": "Module edges that cross layers outside boundaries.allow (and outside shrink-only exceptions) are forbidden_dependency findings."
+    }
+  ],
+  "viewBudgets": {
+    "project-topology": { "maxNodes": 240, "maxEdges": 360 },
+    "module-dependency": { "maxNodes": 240, "maxEdges": 900 },
+    "public-surface": { "maxNodes": 120, "maxEdges": 180 },
+    "ssot-provenance": { "maxNodes": 96, "maxEdges": 144 },
+    "runtime-control": { "maxNodes": 120, "maxEdges": 180 },
+    "verification-coverage": { "maxNodes": 160, "maxEdges": 240 },
+    "risk-domains": { "maxNodes": 96, "maxEdges": 144 }
+  },
+  "blockingCodes": [
+    "baseline_missing",
+    "baseline_late",
+    "baseline_stale",
+    "baseline_tampered",
+    "graph_stale",
+    "map_parity_failure",
+    "unaccounted_changed_file",
+    "new_cycle",
+    "cycle_expansion",
+    "forbidden_dependency",
+    "layer_skip",
+    "ssot_collision",
+    "authority_bypass",
+    "protected_verification_gap",
+    "insufficient_graph"
+  ],
+  "exceptions": {
+    "mode": "shrink-only",
+    "entries": [
+      {
+        "id": "cli-layer-hosts-shared-surfaces",
+        "reason": "src/cli owns dispatch surface and terminal presentation toolkit; handlers reach up for formatting.",
+        "edges": [
+          "command -> cli_surface",
+          "orchestration -> cli_surface",
+          "knowledge -> cli_surface"
+        ],
+        "baseline_module_edges": 4,
+        "ceiling_module_edges": 4
+      },
+      {
+        "id": "command-layer-hosts-shared-contracts",
+        "reason": "Shared shapes hosted in the command layer rather than below it.",
+        "edges": ["knowledge -> command", "release -> command"],
+        "baseline_module_edges": 2,
+        "ceiling_module_edges": 2
+      },
+      {
+        "id": "release-knowledge-cycle",
+        "reason": "release and triwiki form a real two-module cycle; only the upward half is excepted.",
+        "edges": ["knowledge -> release"],
+        "baseline_module_edges": 1,
+        "ceiling_module_edges": 1
+      },
+      {
+        "id": "script-root-hosts-libraries",
+        "reason": "src/scripts is an entry root but some files are imported as libraries.",
+        "edges": ["cli_surface -> gate_script", "release -> gate_script"],
+        "baseline_module_edges": 2,
+        "ceiling_module_edges": 2
+      }
+    ]
+  }
+}

package/crates/sks-core/Cargo.lock

@@ -259,7 +259,7 @@ dependencies = [
 
 [[package]]
 name = "sks-core"
-version = "8.3.2"
+version = "8.4.0"
 dependencies = [
  "globset",
  "grep-matcher",

package/crates/sks-core/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "sks-core"
-version = "8.3.2"
+version = "8.4.0"
 edition = "2021"
 
 [dependencies]

package/dist/commands/bridge.js

@@ -23,6 +23,8 @@ export function usage(command = 'bridge') {
         `       sks ${command} provider validate|enable|disable <codex-lb|openrouter> [--json]`,
         `       sks ${command} provider remove-credential <codex-lb|openrouter> --confirm [--json]`,
         `       sks ${command} catalog sync|status [--json]`,
+        `       sks ${command} models list [--json]`,
+        `       sks ${command} models select --set <public-id,...> [--json]`,
         `       sks ${command} route list [--json]`,
         `       sks ${command} route set-default <codex-lb|openrouter> [--json]`,
         `       sks ${command} route explain <model> [--json]`,
@@ -204,6 +206,22 @@ async function parseInvocation(args, io) {
             label: `Combined catalog ${action}`
         };
     }
+    if (area === 'models') {
+        if (action === 'list' && target === undefined) {
+            allowOnly(parsed, ['--json'], []);
+            return { ...base, request: { operation: 'models.list' }, label: 'Selectable bridge models' };
+        }
+        if (action === 'select') {
+            allowOnly(parsed, ['--json'], ['--set']);
+            const raw = parsed.values.get('--set') || '';
+            const publicIds = raw.split(',').map((id) => id.trim()).filter(Boolean);
+            return {
+                ...base,
+                request: { operation: 'models.select', public_ids: publicIds },
+                label: 'Select exposed bridge models'
+            };
+        }
+    }
     if (area === 'route') {
         if (action === 'list' && target === undefined) {
             allowOnly(parsed, ['--json'], []);
@@ -254,7 +272,7 @@ function parseArgs(args) {
     const booleanOptions = new Set([
         '--json', '--strict', '--require-ready', '--api-key-stdin', '--confirm'
     ]);
-    const valueOptions = new Set(['--level', '--host', '--settings']);
+    const valueOptions = new Set(['--level', '--host', '--settings', '--set']);
     for (let index = 0; index < args.length; index += 1) {
         const value = String(args[index] || '');
         if (!value.startsWith('--')) {

package/dist/commands/doctor-profile.js

@@ -43,7 +43,7 @@ export function doctorPhaseIdsForProfile(profile) {
     ];
     if (profile === 'migration')
         return required;
-    const optional = ['supabase_mcp_repair', 'native_capability_repair', 'sks_menubar'];
+    const optional = ['supabase_mcp_repair', 'native_capability_repair', 'sks_menubar', 'desktop_bridge_catalog_repair'];
     if (profile === 'full' || profile === 'capabilities')
         return ['setup', ...required, ...optional];
     return [...required, ...optional];

package/dist/commands/doctor.js

@@ -7,7 +7,7 @@ import { ui as cliUi } from '../cli/cli-theme.js';
 import { getCodexInfo } from '../core/codex-adapter.js';
 import { rustInfo } from '../core/rust-accelerator.js';
 import { codexAppIntegrationStatus } from '../core/codex-app.js';
-import { desktopBridgeStatusV3 } from '../core/codex-lb/desktop-controller-v3.js';
+import { desktopBridgeStatusV3, executeDesktopBridgeCommandV3 } from '../core/codex-lb/desktop-controller-v3.js';
 import { inspectCodexConfigReadability } from '../core/codex/codex-config-readability.js';
 import { inspectOAuthCallbackPortConflict, oauthCallbackDoctorGuidance } from '../core/codex/oauth-callback-port-diagnostic.js';
 import { inventoryCodexPermissionProfiles } from '../core/codex/codex-permission-profiles.js';
@@ -984,6 +984,38 @@ async function runDoctor(args = [], root, doctorFix, deps = {}) {
                         route_blockers: doctorNativeCapabilityRepair?.route_blockers || {},
                         rollback_evidence: doctorNativeCapabilityRepair?.secret_preservation_guard || 'native_capability_repair_report'
                     })
+                },
+                {
+                    id: 'desktop_bridge_catalog_repair',
+                    required_for_ready: false,
+                    run: async () => {
+                        const base = {
+                            id: 'desktop_bridge_catalog_repair',
+                            required_for_ready: false,
+                            manual_required: false,
+                            warnings: [],
+                            rollback_evidence: 'combined_catalog_previous_generation_preserved'
+                        };
+                        try {
+                            const status = await desktopBridgeStatusV3({ home: root, env: process.env });
+                            const blockers = (status?.readiness?.blockers || []).map(String);
+                            const stale = blockers.filter((blocker) => blocker.endsWith('_catalog_stale'));
+                            if (!status?.management?.managed || stale.length === 0) {
+                                return { ...base, ok: true, repaired: false, blockers: [] };
+                            }
+                            const sync = await executeDesktopBridgeCommandV3({ operation: 'catalog.sync' }, { home: root, env: process.env });
+                            const synced = sync?.ok === true && sync?.execution?.ok === true;
+                            return {
+                                ...base,
+                                ok: synced,
+                                repaired: synced,
+                                blockers: synced ? [] : (sync?.execution?.blockers || ['desktop_bridge_catalog_sync_failed']).map(String)
+                            };
+                        }
+                        catch (error) {
+                            return { ...base, ok: false, repaired: false, blockers: [String(error?.message || 'desktop_bridge_catalog_sync_failed')] };
+                        }
+                    }
                 }
             ].filter((phase) => doctorPhaseIds.includes(phase.id))
         }).catch((err) => ({

package/dist/config/skills-manifest.json

@@ -1,6 +1,6 @@
 {
   "schema": "sks.skills-manifest.v1",
-  "package_version": "8.3.2",
+  "package_version": "8.4.0",
   "skills": [
     {
       "canonical_name": "sks",

package/dist/core/align/align-route.js

@@ -3,6 +3,7 @@ import fs from 'node:fs';
 import fsp from 'node:fs/promises';
 import path from 'node:path';
 import { nowIso, readJson, writeJsonAtomic } from '../fsx.js';
+import { ARCHITECTURE_MAP_ARTIFACT_RELS } from '../triwiki/context-graph/store/architecture-map-store.js';
 import { CODE_NAVIGATION_LIMITS } from '../triwiki/code-navigation-policy.js';
 export const ALIGN_PLAN_ARTIFACT = 'align-plan.json';
 export const ALIGN_LEDGER_ARTIFACT = 'align-ledger.json';
@@ -21,7 +22,8 @@ export const ALIGN_OUTPUT_ARTIFACTS = Object.freeze([
     '.sneakoscope/wiki/context-graph.meta.json',
     '.sneakoscope/wiki/code-navigation-manifest.json',
     '.sneakoscope/wiki/code-pack.json',
-    '.sneakoscope/wiki/context-pack.json'
+    '.sneakoscope/wiki/context-pack.json',
+    ...ARCHITECTURE_MAP_ARTIFACT_RELS
 ]);
 export function buildAlignPlan(missionId, task) {
     return {
@@ -143,7 +145,11 @@ export function evaluateAlignGate(plan, ledger, missionId, activeVerification =
         skips: (ledger?.scan.fatal_skips.length ?? 1) === 0,
         coverage: ledger?.graph.exact_file_coverage === true && ledger.graph.missing_files.length === 0 && ledger.graph.unexpected_files.length === 0,
         cas: ledger?.scan.source_cas_verified === true,
-        extractor: ledger?.graph.extractor_ids.length === 1 && ledger.graph.extractor_ids[0] === 'code',
+        extractor: Array.isArray(ledger?.graph.extractor_ids)
+            && ledger.graph.extractor_ids.length === 3
+            && ledger.graph.extractor_ids[0] === 'code'
+            && ledger.graph.extractor_ids[1] === 'topology'
+            && ledger.graph.extractor_ids[2] === 'triwiki-evidence',
         publication: ledger?.publication.staged === true && ledger.publication.transactional_directory_replaced === true,
         artifacts: ledger?.validation.artifact_hashes === true && activeVerification.artifacts,
         projection: ledger?.validation.projection === true && activeVerification.projections,

package/dist/core/align/code-navigation-align.js

@@ -7,15 +7,40 @@ import { guardedRename, guardedRm, guardContextForRoute } from '../safety/mutati
 import { createRequestedScopeContract } from '../safety/requested-scope-contract.js';
 import { projectTriwikiToAgentsMdTransactional } from '../triwiki/agents-md-projector.js';
 import { buildCodeNavigationContextPack, validateCodeNavigationContextPack } from '../triwiki/code-navigation-context-pack.js';
-import { CODE_NAVIGATION_FATAL_SKIP_REASONS, CODE_NAVIGATION_LIMITS, inspectCodeNavigationSources } from '../triwiki/code-navigation-policy.js';
+import { CODE_NAVIGATION_FATAL_SKIP_REASONS, CODE_NAVIGATION_LIMITS } from '../triwiki/code-navigation-policy.js';
 import { isCodePackProjectionBoundToSnapshot, projectCodePackFromGraph, validateCodePack } from '../triwiki/code-pack.js';
 import { validateContextGraphSnapshot } from '../triwiki/context-graph/contracts.js';
 import { compileContextGraph } from '../triwiki/context-graph/compiler/index.js';
 import { readSourceHashes } from '../triwiki/context-graph/compiler/freshness.js';
-import { codeNavigationGraphExtractors } from '../triwiki/context-graph/extractors/index.js';
+import { ARCHITECTURE_MAP_EXTRACTOR_IDS, architectureMapGraphExtractors } from '../triwiki/context-graph/extractors/index.js';
+import { computeContextGraphCacheKey } from '../triwiki/context-graph/compiler/cache-key.js';
+import { walkCodeInventory } from '../triwiki/context-graph/extractors/code/inventory.js';
+import { codeInventoryInputHashes } from '../triwiki/code-navigation-policy.js';
 import { clearContextGraphSnapshotCache } from '../triwiki/context-graph/query/snapshot-cache.js';
 import { withTriWikiStateLock } from '../triwiki/triwiki-cleanup.js';
+import { publishArchitectureMapToStage } from '../triwiki/context-graph/store/architecture-map-store.js';
 import { ALIGN_GATE_ARTIFACT, ALIGN_LEDGER_ARTIFACT, ALIGN_OUTPUT_ARTIFACTS, ALIGN_PLAN_ARTIFACT, ALIGN_STAGING_ROOT_REL, buildInitialAlignLedger, refreshAlignGate } from './align-route.js';
+const WIKI_PREFIX = '.sneakoscope/wiki/';
+function isArchitectureMapOptionalSkip(skip) {
+    const rel = skip.path.replace(/\\/g, '/');
+    if (skip.reason !== 'unreadable' && skip.reason !== 'excluded')
+        return false;
+    if (rel === '.sneakoscope/wiki/context-pack.json')
+        return true;
+    if (rel.startsWith('.sneakoscope/triwiki/proof-bank'))
+        return true;
+    if (rel.startsWith('.sneakoscope/wiki/'))
+        return true;
+    return false;
+}
+function isAlignFatalSkip(skip) {
+    if (!CODE_NAVIGATION_FATAL_SKIP_REASONS.has(skip.reason))
+        return false;
+    return !isArchitectureMapOptionalSkip(skip);
+}
+if (new Set(ALIGN_OUTPUT_ARTIFACTS).size !== ALIGN_OUTPUT_ARTIFACTS.length) {
+    throw new Error('align_output_artifacts_not_unique');
+}
 const ALIGN_REPLACED_SURFACES = Object.freeze([
     { key: 'wiki', rel: '.sneakoscope/wiki' },
     { key: 'memory', rel: '.sneakoscope/memory' },
@@ -116,19 +141,19 @@ async function buildPack(root, snapshot, meta, generatedAt) {
         observedSourceHashes: observed
     }).pack;
 }
-function buildManifest(generatedAt, inspection, snapshot) {
+function buildManifest(generatedAt, inventory, inventoryDigest, snapshot) {
     return {
         schema: 'sks.code-navigation-manifest.v1',
         generated_at: generatedAt,
         source_policy: 'repository_code_only',
         exhaustive_graph: 'context-graph.json',
-        inventory_digest: inspection.inventoryDigest,
+        inventory_digest: inventoryDigest,
         snapshot_hash: snapshot.snapshotHash,
-        source_file_count: inspection.inventory.files.length,
+        source_file_count: inventory.files.length,
         symbol_count: snapshot.nodes.filter((node) => node.kind === 'symbol').length,
         edge_count: snapshot.edgeCount,
         extractors: snapshot.extractors.map(({ id, revision }) => ({ id, revision })),
-        source_files: inspection.inventory.files.map((file) => ({
+        source_files: inventory.files.map((file) => ({
             path: file.rel,
             sha256: file.hash,
             language: file.language,
@@ -141,13 +166,15 @@ function buildManifest(generatedAt, inspection, snapshot) {
 }
 async function validateStaging(input) {
     for (const artifact of ALIGN_OUTPUT_ARTIFACTS) {
-        const stageFile = path.join(input.stageWiki, path.basename(artifact));
+        if (!artifact.startsWith(WIKI_PREFIX))
+            return false;
+        const stageFile = path.join(input.stageWiki, artifact.slice(WIKI_PREFIX.length));
         const stat = await fsp.stat(stageFile).catch(() => null);
         if (!stat?.isFile() || stat.size <= 0)
             return false;
     }
     const meta = await readJson(path.join(input.stageWiki, 'context-graph.meta.json'), null);
-    if (meta?.snapshotHash !== input.snapshot.snapshotHash || meta?.cacheKeyParts?.sourcePolicy !== 'repository_code_only')
+    if (meta?.snapshotHash !== input.snapshot.snapshotHash || meta?.cacheKeyParts?.sourcePolicy !== 'workspace')
         return false;
     const manifest = await readJson(path.join(input.stageWiki, 'code-navigation-manifest.json'), null);
     if (manifest?.inventory_digest !== input.manifest.inventory_digest || manifest?.source_file_count !== input.manifest.source_file_count)
@@ -174,21 +201,31 @@ async function runLocked(root, dir, missionId, plan, ledger, beforeFinalSourceCa
     ledger.validation.absent_or_existing_input_supported = plan.requires_cleanup_receipt === false
         && plan.acceptance.absent_or_existing_triwiki_supported === true;
     ledger.validation.prior_state_ignored = true;
-    const extractorIdentities = codeNavigationGraphExtractors();
-    const inspection = await inspectCodeNavigationSources(root, extractorIdentities, CODE_NAVIGATION_LIMITS);
-    const extractors = codeNavigationGraphExtractors({ preparedInventory: inspection.inventory });
-    ledger.scan.inventory_digest = inspection.inventoryDigest;
-    ledger.scan.source_file_count = inspection.inventory.files.length;
-    ledger.scan.source_bytes = inspection.inventory.files.reduce((sum, file) => sum + file.bytes, 0);
-    ledger.scan.source_lines = inspection.inventory.files.reduce((sum, file) => sum + file.lines, 0);
-    ledger.scan.languages = countsBy(inspection.inventory.files, (file) => file.language);
-    ledger.scan.allowed_exclusions = inspection.inventory.skipped
-        .filter((skip) => !CODE_NAVIGATION_FATAL_SKIP_REASONS.has(skip.reason))
+    const extractorIdentities = architectureMapGraphExtractors();
+    const inventory = walkCodeInventory(root, CODE_NAVIGATION_LIMITS);
+    const inputHashes = codeInventoryInputHashes(inventory);
+    const codeInventoryDigest = crypto
+        .createHash('sha256')
+        .update(Object.entries(inputHashes)
+        .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0))
+        .map(([relative, hash]) => `${relative}\0${hash}`)
+        .join('\n'))
+        .digest('hex');
+    const cacheKey = await computeContextGraphCacheKey({ root, extractors: extractorIdentities });
+    const fatalSkips = inventory.skipped.filter((skip) => isAlignFatalSkip(skip));
+    ledger.scan.inventory_digest = codeInventoryDigest;
+    ledger.scan.source_file_count = inventory.files.length;
+    ledger.scan.source_bytes = inventory.files.reduce((sum, file) => sum + file.bytes, 0);
+    ledger.scan.source_lines = inventory.files.reduce((sum, file) => sum + file.lines, 0);
+    ledger.scan.languages = countsBy(inventory.files, (file) => file.language);
+    ledger.scan.allowed_exclusions = inventory.skipped
+        .filter((skip) => !isAlignFatalSkip(skip))
         .map((skip) => ({ path: skip.path, reason: skip.reason }));
-    ledger.scan.fatal_skips = inspection.fatalSkips.map((skip) => ({ ...skip }));
-    ledger.validation.source_inventory_complete = inspection.fatalSkips.length === 0;
-    if (inspection.fatalSkips.length)
-        throw new Error(`code_navigation_fatal_skips:${inspection.fatalSkips.map((skip) => `${skip.reason}:${skip.path}`).join('|')}`);
+    ledger.scan.fatal_skips = fatalSkips.map((skip) => ({ ...skip }));
+    ledger.validation.source_inventory_complete = fatalSkips.length === 0;
+    if (fatalSkips.length)
+        throw new Error(`code_navigation_fatal_skips:${fatalSkips.map((skip) => `${skip.reason}:${skip.path}`).join('|')}`);
+    const extractors = architectureMapGraphExtractors({ preparedInventory: inventory });
     const generatedAt = nowIso();
     const compiled = await compileContextGraph({
         root,
@@ -197,12 +234,12 @@ async function runLocked(root, dir, missionId, plan, ledger, beforeFinalSourceCa
         limits: CODE_NAVIGATION_LIMITS,
         observedAt: generatedAt,
         useFragmentCache: false,
-        cacheKey: inspection.cacheKey,
+        cacheKey,
         persistArtifacts: false,
         useCompileLock: false
     });
     ledger.validation.graph_compile = compiled.ok;
-    const compileFatal = compiled.skipped.filter((skip) => CODE_NAVIGATION_FATAL_SKIP_REASONS.has(skip.reason));
+    const compileFatal = compiled.skipped.filter((skip) => isAlignFatalSkip(skip));
     if (compileFatal.length)
         ledger.scan.fatal_skips.push(...compileFatal.map((skip) => ({ ...skip })));
     if (!compiled.ok || !compiled.snapshot || !compiled.meta || compileFatal.length) {
@@ -218,7 +255,7 @@ async function runLocked(root, dir, missionId, plan, ledger, beforeFinalSourceCa
     ledger.graph.test_nodes = snapshot.nodes.filter((node) => node.kind === 'test').length;
     ledger.graph.edge_count = snapshot.edgeCount;
     ledger.graph.edges_by_type = countsBy(snapshot.edges, (edge) => edge.type);
-    const inventoryPaths = inspection.inventory.files.map((file) => file.rel).sort();
+    const inventoryPaths = inventory.files.map((file) => file.rel).sort();
     const fileNodePaths = snapshot.nodes.filter((node) => node.kind === 'file').map((node) => String(node.path || '')).filter(Boolean).sort();
     const inventorySet = new Set(inventoryPaths);
     const fileNodeSet = new Set(fileNodePaths);
@@ -229,12 +266,16 @@ async function runLocked(root, dir, missionId, plan, ledger, beforeFinalSourceCa
         && fileNodePaths.length === inventoryPaths.length;
     if (!ledger.graph.exact_file_coverage)
         throw new Error('code_navigation_exact_file_coverage_failed');
-    if (ledger.graph.extractor_ids.length !== 1 || ledger.graph.extractor_ids[0] !== 'code')
-        throw new Error('code_navigation_non_code_extractor_present');
+    const expectedExtractors = [...ARCHITECTURE_MAP_EXTRACTOR_IDS];
+    if (ledger.graph.extractor_ids.length !== expectedExtractors.length
+        || expectedExtractors.some((id, index) => ledger.graph.extractor_ids[index] !== id)) {
+        throw new Error(`code_navigation_architecture_map_extractors_mismatch:${ledger.graph.extractor_ids.join(',')}`);
+    }
     const graphValidation = validateContextGraphSnapshot(snapshot);
     ledger.validation.graph_schema = graphValidation.ok;
-    if (!graphValidation.ok || meta.cacheKeyParts.sourcePolicy !== 'repository_code_only')
+    if (!graphValidation.ok || meta.cacheKeyParts.sourcePolicy !== 'workspace') {
         throw new Error('code_navigation_graph_validation_failed');
+    }
     const pack = await buildPack(root, snapshot, meta, generatedAt);
     const packValidation = await validateCodePack(pack, root);
     ledger.validation.code_pack = packValidation.ok
@@ -255,7 +296,7 @@ async function runLocked(root, dir, missionId, plan, ledger, beforeFinalSourceCa
     ledger.validation.context_pack = contextValidation.ok;
     if (!contextValidation.ok)
         throw new Error('code_navigation_context_pack_invalid');
-    const manifest = buildManifest(generatedAt, inspection, snapshot);
+    const manifest = buildManifest(generatedAt, inventory, codeInventoryDigest, snapshot);
     const stageRoot = path.join(stageBase, `${missionId}-${randomUUID().slice(0, 8)}`);
     const stageWiki = path.join(stageRoot, 'new-wiki');
     const previousRoot = path.join(stageRoot, 'previous');
@@ -271,6 +312,7 @@ async function runLocked(root, dir, missionId, plan, ledger, beforeFinalSourceCa
         await writeJsonAtomic(path.join(stageWiki, 'code-navigation-manifest.json'), manifest);
         await writeJsonAtomic(path.join(stageWiki, 'code-pack.json'), pack);
         await writeJsonAtomic(path.join(stageWiki, 'context-pack.json'), contextPack);
+        await publishArchitectureMapToStage(stageWiki, snapshot, { root, missionId });
         ledger.publication.staged = true;
         ledger.validation.staged_readback = await validateStaging({ stageWiki, root, snapshot, pack, contextPack, manifest });
         if (!ledger.validation.staged_readback)
@@ -308,9 +350,23 @@ async function runLocked(root, dir, missionId, plan, ledger, beforeFinalSourceCa
         }
         ledger.validation.artifact_hashes = Object.keys(ledger.publication.artifact_sha256).length === ALIGN_OUTPUT_ARTIFACTS.length;
         await beforeFinalSourceCas?.();
-        const finalInspection = await inspectCodeNavigationSources(root, extractorIdentities, CODE_NAVIGATION_LIMITS);
-        ledger.scan.source_cas_verified = finalInspection.fatalSkips.length === 0
-            && finalInspection.cacheKey.key === inspection.cacheKey.key;
+        const finalInventory = walkCodeInventory(root, CODE_NAVIGATION_LIMITS);
+        const finalFatal = finalInventory.skipped.filter((skip) => isAlignFatalSkip(skip));
+        const finalCacheKey = await computeContextGraphCacheKey({ root, extractors: extractorIdentities });
+        const finalCodeDigest = crypto
+            .createHash('sha256')
+            .update(Object.entries(codeInventoryInputHashes(finalInventory))
+            .sort(([left], [right]) => (left < right ? -1 : left > right ? 1 : 0))
+            .map(([relative, hash]) => `${relative}\0${hash}`)
+            .join('\n'))
+            .digest('hex');
+        const casStable = finalCacheKey.parts.tsconfigHash === cacheKey.parts.tsconfigHash
+            && finalCacheKey.parts.commandManifestHash === cacheKey.parts.commandManifestHash
+            && finalCacheKey.parts.gateManifestHash === cacheKey.parts.gateManifestHash
+            && finalCacheKey.parts.schemaRevision === cacheKey.parts.schemaRevision
+            && finalCacheKey.parts.proofIndexHash === cacheKey.parts.proofIndexHash
+            && finalCodeDigest === codeInventoryDigest;
+        ledger.scan.source_cas_verified = finalFatal.length === 0 && casStable;
         if (!ledger.scan.source_cas_verified)
             throw new Error('code_navigation_source_changed_during_scan');
         commitStarted = true;