superlocalmemory 4.0.7 → 4.0.9

package/src/superlocalmemory/summaries/daily_reflection.py

@@ -34,6 +34,9 @@ from datetime import date
 from pathlib import Path
 
 from .base import (
+    clean_llm_summary,
+    format_highlight,
+    SUMMARY_SYSTEM_PROMPT,
     COVERAGE_FULL,
     COVERAGE_INSUFFICIENT,
     COVERAGE_UNAVAILABLE,
@@ -128,7 +131,7 @@ def generate_daily_reflection(
         coverage = COVERAGE_FULL
 
     # ── extractive summary (deterministic, always available) ──────────────────
-    extractive_content = _build_extractive_content(date_str, facts, fact_count)
+    extractive_content = _build_extractive_content(date_str, facts, fact_count, db_path, profile_id)
 
     # ── LLM enrichment (optional) ─────────────────────────────────────────────
     mode = get_mode_str(config)
@@ -162,8 +165,14 @@ def _build_extractive_content(
     date_str: str,
     facts: list[dict],
     fact_count: int,
+    db_path: str | Path,
+    profile_id: str,
 ) -> str:
-    """Build a deterministic extractive daily reflection."""
+    """Build a deterministic extractive daily reflection.
+
+    ``db_path`` / ``profile_id`` are needed only to turn entity IDs into names
+    for the "Active entities" line — the facts themselves are already loaded.
+    """
     import json
 
     lines = [
@@ -174,8 +183,7 @@ def _build_extractive_content(
     ]
     for f in facts[:_BODY_FACTS]:
         content = f.get("content", "")
-        if len(content) > _MAX_FACT_CHARS:
-            content = content[:_MAX_FACT_CHARS - 3] + "..."
+        content = format_highlight(content)
         lines.append(f"  - {content}")
     if fact_count > _BODY_FACTS:
         lines.append(f"  ... and {fact_count - _BODY_FACTS} additional facts.")
@@ -193,13 +201,50 @@ def _build_extractive_content(
 
     if entity_counts:
         top_entities = sorted(entity_counts.items(), key=lambda x: x[1], reverse=True)[:5]
-        entity_str = ", ".join(f"{e} ({c})" for e, c in top_entities)
+        # Resolve to names. canonical_entities_json stores entity IDs, so this
+        # line previously read "Active entities: 1666abc512904473 (127),
+        # 84288f2dde994afe (124)" — five 16-hex identifiers, which tell a reader
+        # nothing. They resolve to 'Fixed', 'Gateway', 'REVISED' and so on. This
+        # is the same defect 4.0.6 fixed in the Living Brain, where source
+        # quality listed internal identifiers; it survived here because this
+        # generator was never reachable to be looked at.
+        names = _entity_names(db_path, [e for e, _ in top_entities], profile_id)
+        labelled = [
+            (names.get(eid) or eid, count) for eid, count in top_entities
+        ]
+        entity_str = ", ".join(f"{name} ({c})" for name, c in labelled)
         lines.append("")
         lines.append(f"Active entities: {entity_str}")
 
     return "\n".join(lines)
 
 
+def _entity_names(
+    db_path: str | Path, entity_ids: list[str], profile_id: str
+) -> dict[str, str]:
+    """Map entity_id → canonical_name. Missing or unreadable rows are omitted.
+
+    Fail-open: a summary is still useful with a raw id in it, so a query problem
+    must not lose the whole line. The caller falls back to the id per entity.
+    """
+    if not entity_ids:
+        return {}
+    try:
+        conn = sqlite3.connect(f"file:{db_path}?mode=ro", uri=True)
+        try:
+            placeholders = ",".join("?" for _ in entity_ids)
+            rows = conn.execute(
+                f"SELECT entity_id, canonical_name FROM canonical_entities "
+                f"WHERE entity_id IN ({placeholders}) AND profile_id = ?",
+                (*entity_ids, profile_id),
+            ).fetchall()
+        finally:
+            conn.close()
+        return {r[0]: r[1] for r in rows if r[1]}
+    except sqlite3.Error:
+        return {}
+
+
 def _try_llm(
     date_str: str,
     facts: list[dict],
@@ -249,6 +294,7 @@ def _call_ollama(
         payload = json.dumps({
             "model": model,
             "prompt": full_prompt,
+            "system": SUMMARY_SYSTEM_PROMPT,
             "stream": False,
             "options": {"num_predict": 300},
         }).encode()
@@ -259,7 +305,7 @@ def _call_ollama(
         )
         resp = urllib.request.urlopen(req, timeout=timeout)
         data = json.loads(resp.read().decode())
-        text = data.get("response", "").strip()
+        text = clean_llm_summary(data.get("response", ""))
         return text if text and len(text) > 20 else None
     except Exception as exc:
         logger.debug("Ollama daily reflection failed: %s", exc)
@@ -283,11 +329,12 @@ def _call_cloud_llm(
         full_prompt = f"{prompt}\n\nFacts:\n{fact_texts}"
         text = llm.generate(
             prompt=full_prompt,
-            system="You are a concise personal memory summariser.",
+            system=SUMMARY_SYSTEM_PROMPT,
             max_tokens=300,
             temperature=0.1,
         )
-        return text.strip() if text and len(text.strip()) > 20 else None
+        cleaned = clean_llm_summary(text or "")
+        return cleaned if len(cleaned) > 20 else None
     except Exception as exc:
         logger.debug("Cloud LLM daily reflection failed: %s", exc)
         return None

package/src/superlocalmemory/summaries/project_work_log.py

@@ -39,8 +39,12 @@ from collections import Counter
 from pathlib import Path
 
 from .base import (
+    clean_llm_summary,
+    format_highlight,
+    SUMMARY_SYSTEM_PROMPT,
     COVERAGE_FULL,
     COVERAGE_INSUFFICIENT,
+    COVERAGE_PARTIAL,
     COVERAGE_UNAVAILABLE,
     GENERATED_BY_EXTRACTIVE,
     GENERATED_BY_LLM_B,
@@ -121,8 +125,19 @@ def generate_project_work_log(
     event_count = len(tool_rows)
     fact_count = len(facts_rows)
 
-    coverage = COVERAGE_FULL if (event_count >= _MIN_EVENTS or fact_count >= _MIN_FACTS) \
-        else COVERAGE_INSUFFICIENT
+    # A project work log has two inputs: what was DONE (tool events) and what was
+    # LEARNED (facts). "full" means both were there.
+    #
+    # The previous rule was `events >= 1 OR facts >= 1`, which reported "full" for
+    # a project with 86 tool events and zero facts — rendered in the dashboard as
+    # "Built from 0 memories · coverage: full". Claiming full coverage of nothing
+    # is precisely the dishonest summary issue #113 exists to prevent.
+    if event_count >= _MIN_EVENTS and fact_count >= _MIN_FACTS:
+        coverage = COVERAGE_FULL
+    elif event_count >= _MIN_EVENTS or fact_count >= _MIN_FACTS:
+        coverage = COVERAGE_PARTIAL
+    else:
+        coverage = COVERAGE_INSUFFICIENT
 
     extractive_content = _build_extractive_content(
         project_path, tool_rows, facts_rows, event_count, fact_count
@@ -302,8 +317,7 @@ def _build_extractive_content(
         lines.append("Key facts from project sessions:")
         for f in facts_rows[:_TOP_FACTS]:
             content = f.get("content", "")
-            if len(content) > _MAX_FACT_CHARS:
-                content = content[:_MAX_FACT_CHARS - 3] + "..."
+            content = format_highlight(content)
             lines.append(f"  - {content}")
         if fact_count > _TOP_FACTS:
             lines.append(f"  ... and {fact_count - _TOP_FACTS} more facts.")
@@ -373,6 +387,7 @@ def _call_ollama(
         payload = json.dumps({
             "model": model,
             "prompt": full_prompt,
+            "system": SUMMARY_SYSTEM_PROMPT,
             "stream": False,
             "options": {"num_predict": 300},
         }).encode()
@@ -383,7 +398,7 @@ def _call_ollama(
         )
         resp = urllib.request.urlopen(req, timeout=timeout)
         data = json.loads(resp.read().decode())
-        text = data.get("response", "").strip()
+        text = clean_llm_summary(data.get("response", ""))
         return text if text and len(text) > 20 else None
     except Exception as exc:
         logger.debug("Ollama project work log failed: %s", exc)
@@ -414,11 +429,12 @@ def _call_cloud_llm(
         )
         text = llm.generate(
             prompt=full_prompt,
-            system="You are a concise project activity summariser.",
+            system=SUMMARY_SYSTEM_PROMPT,
             max_tokens=300,
             temperature=0.1,
         )
-        return text.strip() if text and len(text.strip()) > 20 else None
+        cleaned = clean_llm_summary(text or "")
+        return cleaned if len(cleaned) > 20 else None
     except Exception as exc:
         logger.debug("Cloud LLM project work log failed: %s", exc)
         return None

package/src/superlocalmemory/summaries/session_summary.py

@@ -8,7 +8,7 @@ CRITICAL DATA HONESTY NOTE
 ---------------------------
 On a real 3,294-fact store, only 127 facts (3.9%) carry a session_id.
 A Session Summary that presents itself as "everything you did this session"
-while silently covering 4% of the facts is the same overclaiming Wave 4
+while silently covering 4% of the facts is overclaiming — the same defect
 removed from brain/truth.py.
 
 Coverage is ALWAYS disclosed.  If the session has too few facts to summarise
@@ -37,6 +37,9 @@ from datetime import date, timezone
 from pathlib import Path
 
 from .base import (
+    clean_llm_summary,
+    format_highlight,
+    SUMMARY_SYSTEM_PROMPT,
     COVERAGE_FULL,
     COVERAGE_INSUFFICIENT,
     COVERAGE_NO_SESSION,
@@ -209,8 +212,7 @@ def _build_extractive_content(
     ]
     for f in facts[:_BODY_FACTS]:
         content = f.get("content", "")
-        if len(content) > _MAX_FACT_CHARS:
-            content = content[:_MAX_FACT_CHARS - 3] + "..."
+        content = format_highlight(content)
         lines.append(f"  - {content}")
     if fact_count > _BODY_FACTS:
         lines.append(f"  ... and {fact_count - _BODY_FACTS} more facts.")
@@ -263,6 +265,7 @@ def _call_ollama(
         payload = json.dumps({
             "model": model,
             "prompt": full_prompt,
+            "system": SUMMARY_SYSTEM_PROMPT,
             "stream": False,
             "options": {"num_predict": 200},
         }).encode()
@@ -273,7 +276,7 @@ def _call_ollama(
         )
         resp = urllib.request.urlopen(req, timeout=timeout)
         data = json.loads(resp.read().decode())
-        text = data.get("response", "").strip()
+        text = clean_llm_summary(data.get("response", ""))
         return text if text and len(text) > 20 else None
     except Exception as exc:
         logger.debug("Ollama session summary failed: %s", exc)
@@ -297,11 +300,12 @@ def _call_cloud_llm(
         full_prompt = f"{prompt}\n\nFacts:\n{fact_texts}\n\nRespond in 2-4 sentences."
         text = llm.generate(
             prompt=full_prompt,
-            system="You are a concise memory summariser.",
+            system=SUMMARY_SYSTEM_PROMPT,
             max_tokens=200,
             temperature=0.1,
         )
-        return text.strip() if text and len(text.strip()) > 20 else None
+        cleaned = clean_llm_summary(text or "")
+        return cleaned if len(cleaned) > 20 else None
     except Exception as exc:
         logger.debug("Cloud LLM session summary failed: %s", exc)
         return None

package/src/superlocalmemory/ui/css/legacy-dashboard.css

@@ -202,7 +202,7 @@
             margin-bottom: 12px;
         }
 
-        /* Pane error state — WP-12 */
+        /* Pane error state */
         .pane-error {
             text-align: center;
             padding: 40px;

package/src/superlocalmemory/ui/css/neural-glass.css

@@ -1593,7 +1593,7 @@ body.ng-privacy-blur::before {
   }
 }
 
-/* WP-12 — pane-error dark-mode override */
+/* pane-error dark-mode override */
 .ng-dark .pane-error {
   color: var(--ng-status-error);
 }

package/src/superlocalmemory/ui/index.html

@@ -1017,6 +1017,11 @@
                 <div id="skill-detail-panel" style="display:none;margin-top:24px"></div>
             </div>
 
+            <!-- Bounded Loops (v4.0.8) — moved out of Governance: it is a
+                 separate product SLM optionally observes, i.e. an integration.
+                 Rendered entirely by od-boundedloops.js (window.odRenderLoops). -->
+            <div class="tab-pane fade" id="loops-pane"></div>
+
             <!-- Mesh Peers (v3.4.3 — Neural Glass) -->
             <div class="tab-pane fade" id="mesh-pane">
                 <div class="ng-content-header">
@@ -1599,13 +1604,14 @@
     <script src="static/js/od-ops-health.js?v=400"></script>
     <script src="static/js/od-team.js?v=379"></script>
     <script src="static/js/od-graph.js?v=6812bf6c"></script>
-    <script src="static/js/od-memories.js?v=379"></script>
+    <script src="static/js/od-memories.js?v=022ff653"></script>
     <script src="static/js/od-entities.js?v=379"></script>
     <!-- Multi-Agent Memory pane (v3.8.0): visualises memory written by multiple agents -->
     <script src="static/js/od-agents.js?v=c75ff3c2"></script>
     <script src="static/js/od-skills.js?v=379"></script>
-    <script src="static/js/od-mesh.js?v=379"></script>
-    <script src="static/js/od-optimize.js?v=379"></script>
+    <script src="static/js/od-boundedloops.js?v=b4a014a1"></script>
+    <script src="static/js/od-mesh.js?v=a7bc694a"></script>
+    <script src="static/js/od-optimize.js?v=1f511698"></script>
     <script src="static/js/od-settings.js?v=386"></script>
     <script src="static/js/od-backup.js?v=379"></script>
     <!-- MCP & Integrations pane (v3.8.0): shows exposed MCP tool profile + counts -->

package/src/superlocalmemory/ui/js/core.js

@@ -292,7 +292,7 @@ function showEmpty(containerId, icon, message) {
 }
 
 // ============================================================================
-// Pane error state — WP-12
+// Pane error state
 // showPaneError / clearPaneError / paneErrorMessage
 // ============================================================================
 

package/src/superlocalmemory/ui/js/od-boundedloops.js

@@ -0,0 +1,324 @@
+// Copyright (c) 2026 Varun Pratap Bhardwaj / Qualixar
+// Licensed under AGPL-3.0-or-later - see LICENSE file
+// Part of SuperLocalMemory | https://qualixar.com
+//
+// Bounded Loops pane.
+//
+// Moved out of Governance in 4.0.8. Every other Governance tab governs SLM's
+// OWN data — lifecycle, access, trust, compliance, ingestion. Bounded Loops
+// governs none of it: it is a SEPARATE product that SLM optionally observes
+// over the published contract bounded-loops.dev/slm-bridge/v1. Neither product
+// depends on the other and installing either alone is complete, which makes
+// this an integration, not a governance function.
+//
+// Reads GET /api/v3/bounded-loops/evidence for live bridge status and observed
+// terminal runs. The guarantees are rendered FROM THE DATA rather than asserted
+// in prose: every document carries eligible_for_learning=false, so the pane can
+// show that SLM is not permitted to learn from these runs instead of merely
+// promising that it does not.
+
+(function () {
+  'use strict';
+
+  function esc(s) {
+    return String(s == null ? '' : s).replace(/[&<>"']/g, function (c) {
+      return { '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' }[c];
+    });
+  }
+
+  function scaffold() {
+    return (
+
+      // ══════ BOUNDED LOOPS TAB ════════════════════════════════════════
+      // Static info card — no backend calls.
+      // A bounded loop advances only when an INDEPENDENT gate passes, not
+      // when the agent claims success. Laps are persisted as SLM memory
+      // (tag loop:<name>) so the full run history is queryable.
+      '<div>' +
+
+        // Live bridge status first: whether Bounded Loops is installed, the
+        // negotiated contract, and which runs were observed. The explanation
+        // below it is the same for everyone; this part is about YOUR install.
+        '<div class="card" style="margin-bottom:16px">' +
+          '<div class="card-head"><h3>Bridge status</h3>' +
+            '<span class="sub">observation only \u2014 never learns from these runs</span>' +
+          '</div>' +
+          '<div class="card-pad" id="od-bl-evidence">' +
+            '<div style="font-size:13px;color:var(--fg-2)">Checking bridge\u2026</div>' +
+          '</div>' +
+        '</div>' +
+
+        '<div class="page-head" style="margin-bottom:16px">' +
+          '<h2 style="font-size:20px;margin-bottom:6px">Bounded Loops</h2>' +
+          '<p style="font-size:13.5px">An iteration control pattern for agentic ' +
+            'frameworks &mdash; the loop advances only when an <strong>independent ' +
+            'gate</strong> passes, not when the agent claims success. Prevents ' +
+            'rationalisation: the model cannot self-certify completion.</p>' +
+        '</div>' +
+
+        // Two-column: concept + CLI reference
+        '<div class="grid" style="grid-template-columns:1fr 1fr;align-items:start;margin-bottom:16px">' +
+
+          '<div class="card">' +
+            '<div class="card-head"><h3>How it works</h3></div>' +
+            '<div class="card-pad">' +
+              '<p style="font-size:13px;line-height:1.6;margin-bottom:12px">' +
+                'Standard agentic loops let the model declare itself done &mdash; ' +
+                'a known failure mode when the model rationalises instead of verifying. ' +
+                'A bounded loop separates <em>execution</em> (the agent) from ' +
+                '<em>verification</em> (an independent gate such as a test suite, ' +
+                'linter, or judge LLM).' +
+              '</p>' +
+              '<p style="font-size:13px;line-height:1.6;margin-bottom:12px">' +
+                'The loop terminates only when the gate returns <code>DONE</code>, ' +
+                'or when a hard lap cap is reached (<code>HALT</code>). Each lap is ' +
+                'persisted as a queryable SLM memory tagged ' +
+                '<code>loop:&lt;name&gt;</code>.' +
+              '</p>' +
+              '<div style="background:var(--card-2);border-radius:var(--r-md);' +
+                'padding:10px 14px;font-size:12.5px;line-height:1.7">' +
+                '<div><span class="badge ok" style="margin-right:8px">DONE</span>' +
+                  'Gate passed &mdash; loop succeeded cleanly</div>' +
+                '<div style="margin-top:6px"><span class="badge warn" style="margin-right:8px">HALT</span>' +
+                  'Lap cap reached &mdash; hard stop applied</div>' +
+                '<div style="margin-top:6px"><span class="badge cyan" style="margin-right:8px">PAUSE</span>' +
+                  'Awaiting external input or approval</div>' +
+                '<div style="margin-top:6px"><span class="badge danger" style="margin-right:8px">KILLED</span>' +
+                  'Manually stopped by the operator</div>' +
+                '<div style="margin-top:6px"><span class="badge neutral" style="margin-right:8px">ERROR</span>' +
+                  'Unrecoverable failure during a lap</div>' +
+              '</div>' +
+            '</div>' +
+          '</div>' +
+
+          '<div class="card">' +
+            '<div class="card-head"><h3>Run it: CLI &middot; command &middot; MCP</h3></div>' +
+            '<div class="card-pad">' +
+              '<p style="font-size:13px;margin-bottom:14px">' +
+                'Bounded loops ship on three surfaces &mdash; the same engine and ' +
+                'the same queryable ledger behind each.' +
+              '</p>' +
+
+              '<div style="font-size:12px;font-weight:600;color:var(--fg-2);margin-bottom:6px">CLI</div>' +
+              '<div style="display:flex;flex-direction:column;gap:8px;margin-bottom:14px">' +
+                '<div class="list-row">' +
+                  '<span class="mono" style="min-width:190px;font-size:13px">slm loop demo</span>' +
+                  '<span style="font-size:12.5px;color:var(--fg-2)">Run a live demo bounded loop</span>' +
+                '</div>' +
+                '<div class="list-row">' +
+                  '<span class="mono" style="min-width:190px;font-size:13px">slm loop history</span>' +
+                  '<span style="font-size:12.5px;color:var(--fg-2)">List loop runs for this profile</span>' +
+                '</div>' +
+                '<div class="list-row">' +
+                  '<span class="mono" style="min-width:190px;font-size:13px">slm loop show &lt;run_id&gt;</span>' +
+                  '<span style="font-size:12.5px;color:var(--fg-2)">Inspect a run lap-by-lap</span>' +
+                '</div>' +
+              '</div>' +
+
+              '<div style="font-size:12px;font-weight:600;color:var(--fg-2);margin-bottom:6px">Command (Claude Code / Codex)</div>' +
+              '<div style="display:flex;flex-direction:column;gap:8px;margin-bottom:14px">' +
+                '<div class="list-row">' +
+                  '<span class="mono" style="min-width:190px;font-size:13px">/slm-loop</span>' +
+                  '<span style="font-size:12.5px;color:var(--fg-2)">Slash command bound to the slm-loop skill + runner agent</span>' +
+                '</div>' +
+              '</div>' +
+
+              '<div style="font-size:12px;font-weight:600;color:var(--fg-2);margin-bottom:6px">MCP tools (code / full / power profiles)</div>' +
+              '<div style="display:flex;flex-direction:column;gap:8px">' +
+                '<div class="list-row">' +
+                  '<span class="mono" style="min-width:190px;font-size:13px">slm_loop_run</span>' +
+                  '<span style="font-size:12.5px;color:var(--fg-2)">Run a gated loop &mdash; the gate is an independent SLM recall</span>' +
+                '</div>' +
+                '<div class="list-row">' +
+                  '<span class="mono" style="min-width:190px;font-size:13px">slm_loop_history</span>' +
+                  '<span style="font-size:12.5px;color:var(--fg-2)">List runs (read-only)</span>' +
+                '</div>' +
+                '<div class="list-row">' +
+                  '<span class="mono" style="min-width:190px;font-size:13px">slm_loop_show</span>' +
+                  '<span style="font-size:12.5px;color:var(--fg-2)">Show a run lap-by-lap (read-only)</span>' +
+                '</div>' +
+              '</div>' +
+              '<div style="margin-top:18px;padding:10px 14px;background:var(--card-2);' +
+                'border-radius:var(--r-md);font-size:12.5px;line-height:1.6">' +
+                '<b>Memory tagging:</b> each lap is stored with tag ' +
+                '<code>loop:&lt;name&gt;</code>. Recall the full history with ' +
+                '<br><code>slm recall --tag loop:my-loop-name</code>' +
+              '</div>' +
+            '</div>' +
+          '</div>' +
+
+        '</div>' + // end two-column grid
+
+        // Framework adapters note
+        '<div class="card">' +
+          '<div class="card-head"><h3>Framework adapters</h3></div>' +
+          '<div class="card-pad">' +
+            '<p style="font-size:13px;line-height:1.6;margin-bottom:14px">' +
+              'Bounded loops integrate with any agentic framework that supports ' +
+              'tool-call round-trips. The gate is an ordinary SLM memory check &mdash; ' +
+              'no special framework wiring required. Each framework stamps ' +
+              '<code>SLM_AGENT_ID</code> so lap history is attribution-aware.' +
+            '</p>' +
+            '<div style="display:flex;flex-wrap:wrap;gap:8px">' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">CrewAI</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">LangChain</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">LangGraph</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">Semantic Kernel</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">LlamaIndex</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">Microsoft Agent Framework</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">AutoGen</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">Google ADK</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">OpenAI Agents</span>' +
+              '<span style="padding:4px 12px;border-radius:99px;font-size:12px;' +
+                'background:var(--card-2);color:var(--fg-2)">Any MCP-compatible agent</span>' +
+            '</div>' +
+            '<p style="margin-top:12px;font-size:12.5px;color:var(--fg-2)">' +
+              'Learn the full pattern: run <code>/slm-loop</code> (the slm-loop skill) ' +
+              'inside Claude Code for an interactive walkthrough with live examples.' +
+            '</p>' +
+          '</div>' +
+        '</div>' +
+
+      '</div>'
+    );
+  }
+
+  /* Bounded Loops bridge status + observed runs.
+   *
+   * Until 4.0.8 this tab was a static essay about loop gating. It said nothing
+   * about the bridge, which is the part that concerns SLM: Bounded Loops is a
+   * SEPARATE product, and what SLM does with it is import read-only evidence
+   * over the published contract bounded-loops.dev/slm-bridge/v1.
+   *
+   * The guarantees are the point, and they must be stated from the DATA rather
+   * than asserted in prose — `eligible_for_learning` is a hard field in every
+   * document, always false in v1, so the pane can show that SLM is not allowed
+   * to learn from these runs rather than merely promising it doesn't.
+   */
+  var _blLoaded = false;
+  function loadEvidence() {
+    var box = document.getElementById('od-bl-evidence');
+    if (!box || _blLoaded) return;
+    _blLoaded = true;
+
+    fetch('/internal/token', { credentials: 'same-origin' })
+      .then(function (r) { return r.ok ? r.json() : null; })
+      .catch(function () { return null; })
+      .then(function (t) {
+        var tok = t && (t.token || t.install_token);
+        return fetch('/api/v3/bounded-loops/evidence', {
+          credentials: 'same-origin',
+          headers: tok ? { 'X-Install-Token': tok } : {},
+        });
+      })
+      .then(function (r) { return r.ok ? r.json() : null; })
+      .then(function (d) {
+        if (!d) { box.innerHTML = _blNote('Bridge status unavailable.'); return; }
+        box.innerHTML = renderBoundedLoopsEvidence(d);
+      })
+      .catch(function () {
+        _blLoaded = false;   // allow a retry on the next tab visit
+        box.innerHTML = _blNote('Could not read bridge status.');
+      });
+  }
+
+  function _blNote(msg) {
+    return '<div style="font-size:13px;color:var(--fg-2)">' + esc(msg) + '</div>';
+  }
+
+  function renderBoundedLoopsEvidence(d) {
+    var installed = d.installed;
+    var runs = d.runs || [];
+    var badge = installed === true
+      ? '<span class="badge ok">installed</span>'
+      : (installed === false
+          ? '<span class="badge neutral">not installed</span>'
+          : '<span class="badge warn">unknown</span>');
+
+    var head =
+      '<div style="display:flex;align-items:center;gap:10px;margin-bottom:10px">' +
+        badge +
+        '<span class="mono" style="font-size:12px;color:var(--fg-2)">' +
+          esc(d.contract || '') + '</span>' +
+      '</div>';
+
+    // Optional by design — "not installed" is a normal, complete state.
+    if (installed === false) {
+      return head + '<p style="font-size:13px;line-height:1.6;color:var(--fg-2)">' +
+        'Bounded Loops is a separate product and SuperLocalMemory does not ' +
+        'require it. Install it and SLM can import read-only evidence about ' +
+        'finished runs — it never sends anything back.</p>';
+    }
+
+    var guarantees =
+      '<div style="background:var(--card-2);border-radius:var(--r-md);' +
+        'padding:12px 14px;font-size:12.5px;line-height:1.75;margin-bottom:12px">' +
+        '<div><strong>Observation only.</strong> Evidence records what a run did. ' +
+          'It never authorises SLM to learn from it, re-rank memories, or change ' +
+          'routing — every document carries <code>eligible_for_learning: false</code>.</div>' +
+        '<div style="margin-top:6px"><strong>No paths leave the workspace.</strong> ' +
+          'Locations travel as digests, so a project directory name never reaches ' +
+          'the memory store. Gate text and artifact contents are excluded at source.</div>' +
+        '<div style="margin-top:6px"><strong>Tamper-evident, not verified.</strong> ' +
+          'Receipts form a local append-only hash chain (<code>local_hash_chain_only</code>). ' +
+          'That makes edits detectable — it is not authentication or independent audit.</div>' +
+      '</div>';
+
+    if (!runs.length) {
+      return head + guarantees +
+        '<p style="font-size:13px;color:var(--fg-2)">' +
+          'No runs observed yet. Import one with the <code>observe_bounded_loop_evidence</code> ' +
+          'tool — nothing is imported automatically.</p>';
+    }
+
+    var demoNote = d.demonstration_count
+      ? '<div style="font-size:12px;color:var(--fg-3);margin-bottom:8px">' +
+          esc(String(d.demonstration_count)) + ' of ' + esc(String(d.total)) +
+          ' observed run' + (d.total === 1 ? '' : 's') + ' ' +
+          (d.demonstration_count === 1 ? 'is a demonstration' : 'are demonstrations') +
+          ' — wiring proofs, not real work.</div>'
+      : '';
+
+    var rows = runs.map(function (r) {
+      var cls = r.outcome === 'SUCCEEDED' ? 'ok'
+              : (r.outcome === 'CANCELLED' ? 'neutral' : 'danger');
+      // run_state, not just outcome: HALTED (budget/policy stop) and FAILED
+      // (gate rejected the work) are different events and both map to FAILED.
+      var state = r.run_state && r.run_state !== r.outcome
+        ? ' <span style="color:var(--fg-3)">(' + esc(r.run_state) + ')</span>' : '';
+      // min-width:0 + ellipsis: a run ref is a single unbroken token, and in a
+      // narrow pane `flex:1` alone shreds it one character per line
+      // ("demo / — / proo / f"). Truncate with the full value in the tooltip.
+      return '<div class="list-row" style="align-items:baseline;gap:8px">' +
+        '<span class="mono" title="' + esc(r.run_ref || r.run_id) + '" ' +
+          'style="flex:1;min-width:0;font-size:12.5px;overflow:hidden;' +
+          'text-overflow:ellipsis;white-space:nowrap">' +
+          esc(r.run_ref || r.run_id) + '</span>' +
+        (r.demonstration
+          ? '<span class="badge neutral" style="margin-right:8px">demo</span>' : '') +
+        '<span class="badge ' + cls + '" style="margin-right:8px">' + esc(r.outcome) + '</span>' +
+        '<span style="font-size:12px;color:var(--fg-2)">' + state + '</span>' +
+        '<span style="font-size:12px;color:var(--fg-3);margin-left:10px">seq ' +
+          esc(String(r.receipt_sequence)) + '</span>' +
+      '</div>';
+    }).join('');
+
+    return head + guarantees + demoNote + rows;
+  }
+
+  window.odRenderLoops = function (container) {
+    if (!container) return;
+    container.innerHTML = scaffold();
+    _blLoaded = false;
+    loadEvidence();
+  };
+})();