superlocalmemory 3.8.14 → 4.0.0

package/src/superlocalmemory/storage/migrations/{M034_scene_fact_members.py → M039_scene_fact_members.py}

@@ -1,7 +1,7 @@
 # Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
 # Licensed under AGPL-3.0-or-later
 
-"""M034 — normalized scene/fact membership for bounded assignment.
+"""M039 — normalized scene/fact membership for bounded assignment.
 
 ``memory_scenes.fact_ids_json`` remains the public compatibility format. This
 additive projection provides the indexed reverse lookup needed to map nearest
@@ -13,7 +13,7 @@ from __future__ import annotations
 
 import sqlite3
 
-NAME = "M034_scene_fact_members"
+NAME = "M039_scene_fact_members"
 DB_TARGET = "memory"
 
 DDL = """
@@ -32,6 +32,10 @@ CREATE TABLE IF NOT EXISTS memory_scenes (
     FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
 );
 CREATE INDEX IF NOT EXISTS idx_scenes_profile ON memory_scenes(profile_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_scenes_profile_scene
+    ON memory_scenes (profile_id, scene_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_facts_profile_fact
+    ON atomic_facts (profile_id, fact_id);
 
 CREATE TABLE IF NOT EXISTS scene_fact_members (
     profile_id TEXT NOT NULL,
@@ -39,8 +43,10 @@ CREATE TABLE IF NOT EXISTS scene_fact_members (
     fact_id    TEXT NOT NULL,
     position   INTEGER NOT NULL DEFAULT 0,
     PRIMARY KEY (scene_id, fact_id),
-    FOREIGN KEY (scene_id) REFERENCES memory_scenes(scene_id) ON DELETE CASCADE,
-    FOREIGN KEY (fact_id) REFERENCES atomic_facts(fact_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id, scene_id)
+        REFERENCES memory_scenes(profile_id, scene_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id, fact_id)
+        REFERENCES atomic_facts(profile_id, fact_id) ON DELETE CASCADE,
     FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
 );
 
@@ -102,7 +108,7 @@ def verify(conn: sqlite3.Connection) -> bool:
         (str(row[0]), str(row[1]))
         for row in conn.execute(
             "SELECT name, type FROM sqlite_master "
-            "WHERE name IN (?, ?, ?, ?, ?)"
+            "WHERE name IN (?, ?, ?, ?, ?, ?, ?)"
             ,
             (
                 "scene_fact_members",
@@ -110,6 +116,8 @@ def verify(conn: sqlite3.Connection) -> bool:
                 "idx_scene_fact_members_order",
                 "trg_scene_fact_members_insert",
                 "trg_scene_fact_members_update",
+                "uq_scenes_profile_scene",
+                "uq_facts_profile_fact",
             ),
         ).fetchall()
     }
@@ -119,6 +127,8 @@ def verify(conn: sqlite3.Connection) -> bool:
         ("idx_scene_fact_members_order", "index"),
         ("trg_scene_fact_members_insert", "trigger"),
         ("trg_scene_fact_members_update", "trigger"),
+        ("uq_scenes_profile_scene", "index"),
+        ("uq_facts_profile_fact", "index"),
     }
 
 

package/src/superlocalmemory/storage/migrations/__init__.py

@@ -28,8 +28,8 @@ from . import (
     M020_model_state_integrity,
     M029_behavioral_history_indexes,
     M030_entity_explorer_indexes,
-    M033_learning_feedback_channel,
-    M034_scene_fact_members,
+    M038_learning_feedback_channel,
+    M039_scene_fact_members,
 )
 
 # ---------------------------------------------------------------------------
@@ -83,8 +83,8 @@ __all__ = (
     "M020_model_state_integrity",
     "M029_behavioral_history_indexes",
     "M030_entity_explorer_indexes",
-    "M033_learning_feedback_channel",
-    "M034_scene_fact_members",
+    "M038_learning_feedback_channel",
+    "M039_scene_fact_members",
     # Legacy re-exports (backward compat):
     "CURRENT_SCHEMA_VERSION",
     "get_schema_version",

package/src/superlocalmemory/storage/schema.py

@@ -180,6 +180,8 @@ CREATE TABLE IF NOT EXISTS atomic_facts (
     embedding          TEXT,
     fisher_mean        TEXT,
     fisher_variance    TEXT,
+    -- Tracks how many accesses had Fisher applied; delta-based update in maintenance
+    fisher_last_applied_access INTEGER NOT NULL DEFAULT 0,
 
     -- Lifecycle
     lifecycle          TEXT NOT NULL DEFAULT 'active'
@@ -453,6 +455,10 @@ CREATE TABLE IF NOT EXISTS memory_scenes (
 
 CREATE INDEX IF NOT EXISTS idx_scenes_profile
     ON memory_scenes (profile_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_scenes_profile_scene
+    ON memory_scenes (profile_id, scene_id);
+CREATE UNIQUE INDEX IF NOT EXISTS uq_facts_profile_fact
+    ON atomic_facts (profile_id, fact_id);
 """
 
 
@@ -467,8 +473,10 @@ CREATE TABLE IF NOT EXISTS scene_fact_members (
     fact_id    TEXT NOT NULL,
     position   INTEGER NOT NULL DEFAULT 0,
     PRIMARY KEY (scene_id, fact_id),
-    FOREIGN KEY (scene_id) REFERENCES memory_scenes(scene_id) ON DELETE CASCADE,
-    FOREIGN KEY (fact_id) REFERENCES atomic_facts(fact_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id, scene_id)
+        REFERENCES memory_scenes(profile_id, scene_id) ON DELETE CASCADE,
+    FOREIGN KEY (profile_id, fact_id)
+        REFERENCES atomic_facts(profile_id, fact_id) ON DELETE CASCADE,
     FOREIGN KEY (profile_id) REFERENCES profiles(profile_id) ON DELETE CASCADE
 );
 

package/src/superlocalmemory/storage/write_coordinator.py

@@ -67,6 +67,16 @@ class CommandRejectedError(WriteCoordinatorError):
         self.error_code = error_code
 
 
+class WriterStalledError(WriteCoordinatorError):
+    """Raised by submit()/execute() when the worker thread has stalled past STALL_THRESHOLD.
+
+    This is the circuit-breaker fast-fail: instead of enqueueing behind a dead worker
+    (causing every new caller to wait for their per-item timeout), new callers get
+    this immediate, actionable error. Admin remediation: check /operations/failed,
+    then restart the daemon if the stall persists.
+    """
+
+
 class Lane(StrEnum):
     """Scheduling lanes, ordered to protect foreground memory operations."""
 
@@ -236,12 +246,18 @@ class WriteCoordinator:
     this coordinator.
     """
 
+    #: Default stall threshold in seconds. Well above the per-item 1s deadline.
+    #: The watchdog is inert for any item that completes within this window,
+    #: preserving healthy-path performance byte-for-byte.
+    _DEFAULT_STALL_THRESHOLD_S: float = 30.0
+
     def __init__(
         self,
         db_path: str | Path,
         *,
         owner_id: str | None = None,
         max_queue_depth: int = _MAX_QUEUE_DEPTH,
+        stall_threshold: float | None = None,
     ) -> None:
         if max_queue_depth < 1:
             raise ValueError("max_queue_depth must be at least one")
@@ -274,6 +290,15 @@ class WriteCoordinator:
         self._worker_ident: int | None = None
         self._capability_token = object()
         self._handlers: dict[CommandKind, CommandHandler] = {}
+        # ---- Stall watchdog state (additive — inert on the healthy path) ----
+        # Protected by self._condition for thread-safety.
+        self._stall_threshold: float = (
+            stall_threshold if stall_threshold is not None else self._DEFAULT_STALL_THRESHOLD_S
+        )
+        self._inflight_started_at: float | None = None
+        self._inflight_op_id: str | None = None
+        self._writer_stalled: bool = False
+        self._stall_logged_once: bool = False
 
     @property
     def db_path(self) -> Path:
@@ -285,6 +310,46 @@ class WriteCoordinator:
         """Opaque daemon instance identifier recorded in the ownership lease."""
         return self._owner_id
 
+    @property
+    def stall_threshold(self) -> float:
+        """Seconds before an in-flight item is considered stalled."""
+        return self._stall_threshold
+
+    @property
+    def writer_stalled(self) -> bool:
+        """True when the worker thread has exceeded stall_threshold on one item.
+
+        This is a dynamic check — computed from the current inflight age without
+        requiring a submitter to trigger _check_stall(). Safe to poll from any thread.
+        """
+        with self._condition:
+            if self._writer_stalled:
+                return True
+            started = self._inflight_started_at
+            if started is None:
+                return False
+            return (time.monotonic() - started) > self._stall_threshold
+
+    def inflight_info(self) -> dict:
+        """Return stall health snapshot for /health and get_status.
+
+        Returns:
+            {"stalled": bool, "op_id": str | None, "age_s": float | None}
+
+        Pure read — never raises.
+        """
+        with self._condition:
+            started = self._inflight_started_at
+            stalled = self._writer_stalled
+            op_id = self._inflight_op_id
+        if started is None:
+            return {"stalled": False, "op_id": None, "age_s": None}
+        now = time.monotonic()
+        age = now - started
+        # Dynamic stall check (same logic as writer_stalled property)
+        is_stalled = stalled or (age > self._stall_threshold)
+        return {"stalled": is_stalled, "op_id": op_id, "age_s": round(age, 2)}
+
     def claim_ownership(self) -> bool:
         """Claim the cross-platform owner lease without waiting on another daemon."""
         if _portalocker is None:
@@ -407,6 +472,34 @@ class WriteCoordinator:
         if context is not None:
             context.__exit__(None, None, None)
 
+    def _check_stall(self) -> None:
+        """Circuit-breaker check: raise WriterStalledError if worker is stalled.
+
+        Called from submit() and execute() BEFORE enqueueing. Inert on the
+        healthy path (started_at is None or within stall_threshold).
+        Thread-safe: reads only condition-protected state.
+        """
+        with self._condition:
+            started = self._inflight_started_at
+            if started is None:
+                return
+            age = time.monotonic() - started
+            if age > self._stall_threshold:
+                if not self._stall_logged_once:
+                    import logging as _log
+                    _log.getLogger(__name__).critical(
+                        "WriteCoordinator: worker thread stalled for %.1fs on op=%s; "
+                        "new submitters will receive WriterStalledError",
+                        age,
+                        self._inflight_op_id,
+                    )
+                    self._stall_logged_once = True
+                self._writer_stalled = True
+            if self._writer_stalled:
+                raise WriterStalledError(
+                    "write subsystem stalled; admin remediation required"
+                )
+
     def execute(
         self,
         sql: str,
@@ -424,6 +517,7 @@ class WriteCoordinator:
             raise ValueError("sql must be a non-empty statement")
         if timeout <= 0:
             raise ValueError("timeout must be greater than zero")
+        self._check_stall()  # circuit-breaker (inert if no stall)
         lane = self._coerce_lane(priority)
         self.start()
         item = _Execution(
@@ -467,6 +561,7 @@ class WriteCoordinator:
             raise TypeError("command must be a WriteCommand")
         if timeout <= 0:
             raise ValueError("timeout must be greater than zero")
+        self._check_stall()  # circuit-breaker (inert if no stall)
         lane = self._coerce_lane(priority)
         self.start()
         item = _Execution(
@@ -569,8 +664,25 @@ class WriteCoordinator:
         return Lane.FOREGROUND
 
     def _execute_item(self, conn: sqlite3.Connection, item: _Execution) -> None:
+        # ------------------------------------------------------------------
+        # Stall watchdog: record inflight state so _check_stall() can detect
+        # a frozen worker.  Cleared in the finally block.  This guard is
+        # strictly ADDITIVE — the item execution path is unchanged.
+        # ------------------------------------------------------------------
+        op_id: str | None = None
+        if item.command is not None:
+            op_id = item.command.command_id
+        with self._condition:
+            self._inflight_started_at = time.monotonic()
+            self._inflight_op_id = op_id
+
         if item.cancelled or time.monotonic() >= item.deadline:
             item.error = WriteDeadlineExceededError("canonical write expired before execution")
+            with self._condition:
+                self._inflight_started_at = None
+                self._inflight_op_id = None
+                self._writer_stalled = False
+                self._stall_logged_once = False
             item.completion.set()
             return
         remaining = max(0.0, item.deadline - time.monotonic())
@@ -578,6 +690,11 @@ class WriteCoordinator:
             item.error = WriteDeadlineExceededError(
                 "canonical write expired waiting for its process lock"
             )
+            with self._condition:
+                self._inflight_started_at = None
+                self._inflight_op_id = None
+                self._writer_stalled = False
+                self._stall_logged_once = False
             item.completion.set()
             return
         try:
@@ -637,6 +754,13 @@ class WriteCoordinator:
             item.error.__cause__ = exc
         finally:
             self._process_write_lock.release()
+            # Clear inflight state and reset stall breaker so next caller can proceed.
+            with self._condition:
+                self._inflight_started_at = None
+                self._inflight_op_id = None
+                if self._writer_stalled:
+                    self._writer_stalled = False
+                    self._stall_logged_once = False
             item.completion.set()
 
     def _execute_command(self, conn: sqlite3.Connection, command: WriteCommand) -> WriteResult:
@@ -800,4 +924,5 @@ __all__ = [
     "WriteCoordinatorError",
     "WriteDeadlineExceededError",
     "WriteResult",
+    "WriterStalledError",
 ]

package/src/superlocalmemory/trust/scorer.py

@@ -73,10 +73,34 @@ class TrustScorer:
         return self._compute_trust(alpha, beta)
 
     def get_fact_trust(self, fact_id: str, profile_id: str) -> float:
-        """Get trust for a fact. Inherits source agent trust, modified by
-        any contradiction evidence recorded directly against the fact."""
-        alpha, beta = self._get_beta_params("fact", fact_id, profile_id)
-        return self._compute_trust(alpha, beta)
+        """Get trust for a fact.
+
+        When a direct trust record exists for the fact, use it.
+        Otherwise inherit the trust of the agent that created the fact,
+        as recorded in the provenance table.
+        """
+        rows = self._db.execute(
+            "SELECT trust_score, evidence_count FROM trust_scores "
+            "WHERE target_type = ? AND target_id = ? AND profile_id = ?",
+            ("fact", fact_id, profile_id),
+        )
+        if rows:
+            d = dict(rows[0])
+            alpha, beta = self._decode_beta(d["trust_score"], d["evidence_count"])
+            return self._compute_trust(alpha, beta)
+
+        # No direct record — inherit from the provenance source agent.
+        prov = self._db.execute(
+            "SELECT created_by FROM provenance "
+            "WHERE fact_id = ? AND profile_id = ?",
+            (fact_id, profile_id),
+        )
+        if prov:
+            agent_id = dict(prov[0]).get("created_by", "")
+            if agent_id:
+                return self.get_agent_trust(agent_id, profile_id)
+
+        return _DEFAULT_TRUST
 
     def get_entity_trust(self, entity_id: str, profile_id: str) -> float:
         """Convenience: get trust for an entity."""

package/src/superlocalmemory/ui/index.html

@@ -49,8 +49,8 @@
         <input id="q" placeholder="Search memories…">
         <span class="kbd">⌘K</span>
       </label>
-      <span class="badge-local" title="All data stays on this machine. Nothing leaves your device.">
-        <i class="bi bi-lock-fill" aria-hidden="true"></i> LOCAL ONLY
+      <span class="badge-local" title="Local-first memory; active mode and integrations determine network egress.">
+        <i class="bi bi-lock-fill" aria-hidden="true"></i> LOCAL-FIRST
       </span>
       <button class="btn icon ghost" data-theme-icon aria-label="Toggle theme"></button>
     </header>
@@ -973,7 +973,10 @@
                     <h6 class="mb-2">Active retention policies</h6>
                     <div class="mb-3" id="compliance-policies-content"><span class="text-muted">Loading...</span></div>
                     <div class="d-flex justify-content-between align-items-center mb-2">
-                        <h6 class="mb-0">Audit trail</h6>
+                        <div class="d-flex align-items-center gap-2">
+                            <h6 class="mb-0">Audit trail</h6>
+                            <span id="cp-chain-integrity"></span>
+                        </div>
                         <select class="form-select form-select-sm" id="cp-audit-filter" style="width: auto;" data-act-change="load-compliance">
                             <option value="">All events</option>
                             <option value="recall">Recall</option>
@@ -986,6 +989,12 @@
                     </div>
                     <div id="compliance-audit-content"><span class="text-muted">Loading...</span></div>
                 </section>
+
+                <!-- Admin Operations Health is provided as a self-injected tab by
+                     ui/js/od-ops-health.js (fetches /operations/failed, KPI strip,
+                     writer-stall banner, one-click Retry/Reconcile/Cancel). The earlier
+                     static shell here was unpopulated and carried an inline handler, so it
+                     was removed in favour of the single functional CSP-clean tab. -->
             </div>
 
             <!-- Skill Evolution (v3.4.10 — Arsenal Evolution) -->
@@ -1569,6 +1578,8 @@
     <script src="static/js/od-components.js?v=382"></script>
     <script src="static/js/od-health.js?v=382"></script>
     <script src="static/js/od-operations.js?v=380"></script>
+    <script src="static/js/od-compliance-ext.js?v=100"></script>
+    <script src="static/js/od-ops-health.js?v=400"></script>
     <script src="static/js/od-team.js?v=379"></script>
     <script src="static/js/od-graph.js?v=379"></script>
     <script src="static/js/od-memories.js?v=379"></script>

package/src/superlocalmemory/ui/js/auto-settings.js

@@ -195,12 +195,23 @@ async function loadModeSettings() {
 
         var bannerDetail = document.getElementById('settings-current-detail');
         if (bannerDetail) {
-            if (mode === 'a') bannerDetail.textContent = 'Zero cloud — EU AI Act compliant';
+            if (mode === 'a') bannerDetail.textContent = 'Local inference — legal classification requires deployment assessment';
             else if (data.has_key) bannerDetail.textContent = 'API key configured';
             else if (provider === 'ollama') bannerDetail.textContent = 'No API key needed';
             else bannerDetail.textContent = 'API key not set';
         }
 
+        var postureBadge = document.querySelector('.badge-local');
+        if (postureBadge) {
+            if (mode === 'c') {
+                postureBadge.innerHTML = '<i class="bi bi-cloud" aria-hidden="true"></i> CLOUD MODE';
+                postureBadge.title = 'Mode C can use configured cloud providers and integrations.';
+            } else {
+                postureBadge.innerHTML = '<i class="bi bi-lock-fill" aria-hidden="true"></i> LOCAL INFERENCE';
+                postureBadge.title = 'Inference is local; mesh, integrations, and backups have separate egress controls.';
+            }
+        }
+
         var banner = document.getElementById('settings-current-banner');
         if (banner) {
             banner.className = mode === 'a' ? 'alert alert-success mb-3' :

package/src/superlocalmemory/ui/js/brain.js

@@ -1066,10 +1066,12 @@
       'aria-live': 'polite',
     });
     btn.addEventListener('click', async () => {
-      const ok = window.confirm(
-        'Reset all learning data? Memories will be preserved, '
-        + 'but learned patterns and ranking signals will be deleted.',
-      );
+      const ok = await window.confirmDestructive({
+        title: 'Reset learning data',
+        target: 'All learned patterns and ranking signals',
+        consequence: 'Memories will be preserved, but learned patterns and ranking signals will be deleted.',
+        confirmLabel: 'Reset',
+      });
       if (!ok) return;
       status.textContent = 'Resetting…';
       try {

package/src/superlocalmemory/ui/js/compliance.js

@@ -10,11 +10,9 @@ async function loadCompliance() {
     var filterValue = filterEl ? filterEl.value : '';
 
     try {
-        var url = '/api/compliance/status';
-        if (filterValue) url += '?event_type=' + encodeURIComponent(filterValue);
-        var response = await fetch(url);
-        if (!response.ok) throw new Error('HTTP ' + response.status);
-        var data = await response.json();
+        var statusResp = await fetch('/api/compliance/status');
+        if (!statusResp.ok) throw new Error('HTTP ' + statusResp.status);
+        var data = await statusResp.json();
         _complianceData = data;
 
         if (!data.available) {
@@ -24,20 +22,37 @@ async function loadCompliance() {
 
         renderComplianceStats(data);
         renderCompliancePolicies(data);
-        renderComplianceAudit(data);
+
+        // Task C: fetch real audit trail from dedicated endpoint with filters
+        var auditUrl = '/api/compliance/audit?limit=100';
+        if (filterValue) auditUrl += '&event_type=' + encodeURIComponent(filterValue);
+        var auditResp = await fetch(auditUrl);
+        var auditData = auditResp.ok ? await auditResp.json() : null;
+        renderComplianceAudit(auditData || data);
 
         var badge = document.getElementById('compliance-profile-badge');
         if (badge) badge.textContent = data.active_profile || 'default';
+
+        // Task C: show chain-integrity indicator
+        var chainEl = document.getElementById('cp-chain-integrity');
+        if (chainEl && auditData) {
+            var ok = auditData.chain_verified !== false;
+            chainEl.innerHTML = ok
+                ? '<span class="badge bg-success"><i class="bi bi-shield-check"></i> Chain verified</span>'
+                : '<span class="badge bg-danger"><i class="bi bi-shield-x"></i> Chain integrity issue</span>';
+        }
     } catch (error) {
         console.error('Error loading compliance:', error);
     }
 }
 
+// Task D: Fix KPI field reads — /api/compliance/status returns top-level fields,
+// NOT a nested .stats object. audit_events_count, retention_policies (array),
+// abac_policies_count are all top-level.
 function renderComplianceStats(data) {
-    var stats = data.stats || {};
-    animateCounter('cp-audit-count', stats.audit_count || 0);
-    animateCounter('cp-retention-count', stats.retention_count || 0);
-    animateCounter('cp-abac-count', stats.abac_count || 0);
+    animateCounter('cp-audit-count', data.audit_events_count || 0);
+    animateCounter('cp-retention-count', (data.retention_policies || []).length);
+    animateCounter('cp-abac-count', data.abac_policies_count || 0);
 }
 
 function renderCompliancePolicies(data) {
@@ -58,7 +73,7 @@ function renderCompliancePolicies(data) {
     table.className = 'table table-sm table-hover mb-0';
     var thead = document.createElement('thead');
     var headRow = document.createElement('tr');
-    ['Policy Name', 'Retention (days)', 'Category', 'Action', 'Created'].forEach(function(h) {
+    ['Policy Name', 'Retention (days)', 'Category', 'Action', 'Created', ''].forEach(function(h) {
         var th = document.createElement('th');
         th.textContent = h;
         headRow.appendChild(th);
@@ -106,16 +121,55 @@ function renderCompliancePolicies(data) {
         dateCell.textContent = formatDate(pol.created_at || '');
         row.appendChild(dateCell);
 
+        // Task E: Delete button per row — calls DELETE /api/compliance/retention-policy?name=
+        var actCell = document.createElement('td');
+        var delBtn = document.createElement('button');
+        delBtn.className = 'btn btn-sm btn-outline-danger';
+        delBtn.textContent = 'Delete';
+        delBtn.addEventListener('click', (function(policyName) {
+            return async function() {
+                var confirmed = await confirmDestructive({
+                    title: 'Delete retention policy',
+                    target: policyName,
+                    consequence: 'This policy will stop applying to all memories.',
+                    confirmLabel: 'Delete',
+                });
+                if (!confirmed) return;
+                delBtn.disabled = true;
+                try {
+                    var r = await fetch(
+                        '/api/compliance/retention-policy?name=' + encodeURIComponent(policyName),
+                        { method: 'DELETE' }
+                    );
+                    var d = await r.json().catch(function() { return {}; });
+                    if (d.success !== false) {
+                        showToast('Policy deleted.');
+                        loadCompliance();
+                    } else {
+                        showToast((d.error || 'Delete failed.'));
+                        delBtn.disabled = false;
+                    }
+                } catch (e) {
+                    showToast('Network error deleting policy.');
+                    delBtn.disabled = false;
+                }
+            };
+        }(pol.name || '')));
+        actCell.appendChild(delBtn);
+        row.appendChild(actCell);
+
         tbody.appendChild(row);
     }
     table.appendChild(tbody);
     container.appendChild(table);
 }
 
+// Task C: renderComplianceAudit accepts data from either the status endpoint
+// (recent_audit_events) or the dedicated audit endpoint (events). Tries both.
 function renderComplianceAudit(data) {
     var container = document.getElementById('compliance-audit-content');
     if (!container) return;
-    var events = data.audit_events || [];
+    var events = data.events || data.recent_audit_events || data.audit_events || [];
     container.textContent = '';
 
     if (events.length === 0) {

package/src/superlocalmemory/ui/js/dashboard.js

@@ -354,11 +354,21 @@ async function loadDashboard() {
         if (dashVer) dashVer.textContent = ver;
         if (settVer) settVer.textContent = ver;
 
-        // OD dashboard subtitle
+        // OD dashboard subtitle — locality comes from the mode record via API
+        // (data.data_locality_label). Never hardcode a fixed locality claim;
+        // Mode C is provider-assisted and must not claim data never leaves.
         var subtitle = document.getElementById('od-dash-subtitle');
         if (subtitle && data.mode_name) {
-            subtitle.textContent = 'Mode ' + data.mode.toUpperCase() + ' · ' + data.mode_name +
-                ' · local-only · v' + (ver || '?');
+            var locality = (data.data_locality_label || '').trim();
+            var parts = [
+                'Mode ' + data.mode.toUpperCase(),
+                data.mode_name,
+            ];
+            if (locality) {
+                parts.push(locality);
+            }
+            parts.push('v' + (ver || '?'));
+            subtitle.textContent = parts.join(' · ');
         }
 
         // Update mode badge in sidebar (ng-premount hidden element)

package/src/superlocalmemory/ui/js/feedback.js

@@ -312,8 +312,14 @@ function showPrivacyDetails() {
 /**
  * Reset all learning data.
  */
-function resetLearningData() {
-    if (!confirm('Reset all learning data? Your memories will be preserved.')) return;
+async function resetLearningData() {
+    var confirmed = await confirmDestructive({
+        title: 'Reset learning data',
+        target: 'All learned patterns and ranking signals',
+        consequence: 'Your memories will be preserved.',
+        confirmLabel: 'Reset',
+    });
+    if (!confirmed) return;
 
     fetch('/api/learning/reset', {method: 'POST'})
     .then(function(r) { return r.json(); })

package/src/superlocalmemory/ui/js/lifecycle.js

@@ -299,7 +299,13 @@ async function compactDryRun() {
 }
 
 async function compactExecute() {
-    if (!confirm('This will transition memories to lower lifecycle states. Continue?')) return;
+    var confirmed = await confirmDestructive({
+        title: 'Apply compaction',
+        target: 'All eligible memories',
+        consequence: 'Transitions memories to lower lifecycle states.',
+        confirmLabel: 'Apply',
+    });
+    if (!confirmed) return;
     try {
         var response = await fetch('/api/lifecycle/compact', {
             method: 'POST',