total-recall-brain 3.45.0 → 3.46.1

package/frontend/src/pages/MemoryPage.tsx

@@ -84,7 +84,7 @@ export default function MemoryPage({ activeBrainId }: { activeBrainId?: string }
     setError("")
     try {
       if (query.trim()) {
-        const results = await searchMemory(query, category === "all" ? undefined : category)
+        const results = await searchMemory(query, category === "all" ? undefined : category, activeBrainId)
         setNodes(results)
       } else {
         const results = await listMemory(activeBrainId, category === "all" ? undefined : category)
@@ -299,9 +299,10 @@ export default function MemoryPage({ activeBrainId }: { activeBrainId?: string }
 
   // Wire SSE Live Agent Monitor Streaming
   useEffect(() => {
+    // The dashboard's authenticated memory event stream; /stream is the local monitor port only.
     const base = getApiBase() || window.location.origin
-    const sseUrl = `${base.replace(/\/+$/, '')}/stream`
-    const eventSource = new EventSource(sseUrl)
+    const sseUrl = `${base.replace(/\/+$/, '')}/api/memory-events`
+    const eventSource = new EventSource(sseUrl, { withCredentials: new URL(base).origin !== window.location.origin })
 
     eventSource.onmessage = (event) => {
       try {
@@ -546,14 +547,14 @@ export default function MemoryPage({ activeBrainId }: { activeBrainId?: string }
 
   return (
     <div className="page">
-      <div className="page-header" style={{ display: "flex", justifyContent: "space-between", alignItems: "flex-end", marginBottom: 20 }}>
+      <div className="page-header memory-header">
         <div>
           <h1>Memory Vault</h1>
           <p>Browse, audit, and resolve contradictions in your SSSS knowledge graph</p>
         </div>
         
         {/* Tab Selection */}
-        <div style={{ display: "flex", background: "rgba(12, 18, 32, 0.72)", backdropFilter: "blur(16px)", padding: 4, borderRadius: "var(--radius-md, 10px)", border: "1px solid var(--border)" }}>
+        <div className="memory-tabs">
           <button 
             className={`btn btn-sm ${activeTab === "vault" ? "btn-purple" : "btn-ghost"}`}
             onClick={() => { setActiveTab("vault"); setSelected(null); setSearchParams({}); }}
@@ -591,28 +592,20 @@ export default function MemoryPage({ activeBrainId }: { activeBrainId?: string }
       {error && <div className="badge badge-error" style={{ alignSelf: "flex-start", marginBottom: 15 }}>{error}</div>}
 
       {activeTab === "vault" ? (
-        <div className="memory-layout">
-          <div className="memory-sidebar">
-            <h3 style={{ margin: "0 0 12px 0" }}>Categories</h3>
-            {CATEGORIES.map(c => (
-              <button
-                key={c}
-                className={`category-btn ${category === c ? "active" : ""}`}
-                onClick={() => { setCategory(c); setSearchParams({}); setIsCreating(false); setIsEditing(false); }}
-              >
-                <span>{c === "all" ? "All Nodes" : c}</span>
-                {c === "all"
-                  ? <span className="category-count">{nodes.length}</span>
-                  : categoryCounts[c]
-                    ? <span className="category-count">{categoryCounts[c]}</span>
-                    : null
-                }
-              </button>
-            ))}
-            
+        <div className="memory-main">
+          <div className="memory-toolbar">
+            <select className="select" aria-label="Memory category" value={category}
+              onChange={event => { setCategory(event.target.value); setSearchParams({}); setIsCreating(false); setIsEditing(false); }}>
+              {CATEGORIES.map(c => <option key={c} value={c}>
+                {c === "all" ? `All Nodes${category === "all" ? ` (${nodes.length})` : ""}`
+                  : `${c}${categoryCounts[c] ? ` (${categoryCounts[c]})` : ""}`}
+              </option>)}
+            </select>
+            <input className="input" id="memory-search" type="search" aria-label="Search memory nodes"
+              placeholder="Search memory nodes…" value={query} onChange={event => setQuery(event.target.value)} />
+            <button className="btn btn-ghost btn-sm" onClick={fetchNodes}>Refresh</button>
             <button
               className="btn btn-purple"
-              style={{ width: "100%", marginTop: 20, display: "flex", alignItems: "center", justifyContent: "center", gap: 8, fontSize: 13, minHeight: 44, borderRadius: "var(--radius-md, 10px)", fontWeight: 600 }}
               onClick={() => {
                 setSelected(null);
                 setSearchParams({});
@@ -636,17 +629,7 @@ export default function MemoryPage({ activeBrainId }: { activeBrainId?: string }
               Create New Node
             </button>
           </div>
-          <div className="memory-main">
-            <div className="memory-search">
-              <input
-                id="memory-search"
-                type="text"
-                placeholder="Search memory nodes…"
-                value={query}
-                onChange={e => setQuery(e.target.value)}
-              />
-              <button className="btn btn-ghost btn-sm" onClick={fetchNodes}>Refresh</button>
-            </div>
+          <div>
             {loading ? (
               <div style={{ display: "flex", flexDirection: "column", gap: 8 }}>
                 {[1, 2, 3].map(i => <div key={i} className="skeleton" style={{ height: 60 }} />)}

package/frontend/src/pages/SettingsPage.tsx

@@ -876,7 +876,7 @@ export default function SettingsPage({ activeBrainId }: { activeBrainId?: string
           </div>
 
           <p style={{ fontSize: 12, color: 'var(--text-tertiary)', margin: '0 0 12px', lineHeight: 1.5 }}>
-            Active vault layer is chosen in the <strong>sidebar brain selector</strong> (bottom left).
+            Choose the active vault layer under <strong>Brains</strong> in the left drawer.
             Fields below edit this install’s <code>brain.json</code> identity — not the active layer.
           </p>
 

package/metadata.plugin.schema.json

@@ -11,6 +11,13 @@
     "description"
   ],
   "additionalProperties": true,
+  "not": {
+    "anyOf": [
+      { "required": ["card"] },
+      { "required": ["card_face"] },
+      { "required": ["card_layout"] }
+    ]
+  },
   "properties": {
     "configuration": {
       "type": "object",
@@ -125,6 +132,20 @@
                   "text"
                 ]
               },
+              "sensitive_output": {
+                "type": "boolean",
+                "description": "The operation can return private credential material. The generic browser runner and UI data bindings must not expose it."
+              },
+              "terminal_only_args": {
+                "type": "array",
+                "uniqueItems": true,
+                "items": { "type": "string", "pattern": "^--[a-z][a-z0-9-]{0,63}$" },
+                "description": "Long flags reserved for the owning terminal CLI. Browser dispatch rejects separate and equals-form values."
+              },
+              "terminal_only": {
+                "type": "boolean",
+                "description": "The owning terminal CLI is required. Safe output pointers may still be documented."
+              },
               "timeout_ms": {
                 "type": "integer",
                 "minimum": 1,
@@ -133,7 +154,7 @@
               "args": {
                 "type": "array",
                 "items": {
-                  "$ref": "#/definitions/cardArgument"
+                  "$ref": "#/definitions/pluginArgument"
                 }
               }
             }
@@ -517,6 +538,10 @@
           "pattern": "\\.md$",
           "description": "Plugin-relative default DESIGN.md, used when the app supplies none."
         },
+        "home": {
+          "type": "string",
+          "description": "ID of the plugin's declared native Home element."
+        },
         "elements": {
           "type": "array",
           "items": {
@@ -540,9 +565,7 @@
                   "list",
                   "detail",
                   "settings",
-                  "widget",
-                  "card",
-                  "card-face"
+                  "widget"
                 ]
               },
               "tag": {
@@ -680,110 +703,6 @@
         }
       }
     },
-    "card_face": {
-      "type": "object",
-      "description": "Branded creative UI card face configuration: mobile-first, touch-friendly, agent-customizable layout, metrics, and actions",
-      "properties": {
-        "skin": {
-          "type": "string",
-          "enum": [
-            "winamp-classic",
-            "analog-hifi",
-            "synth-deck",
-            "translucent-acrylic",
-            "pocket-arcade",
-            "studio-rack",
-            "vibrant-modern"
-          ],
-          "description": "Creative visual skin inspired by classic audio players, hardware decks, and retro UI"
-        },
-        "theme": {
-          "type": "string",
-          "enum": [
-            "vibrant",
-            "neon",
-            "gradient",
-            "minimal",
-            "glass",
-            "compact"
-          ],
-          "description": "Visual theme preset for the card face"
-        },
-        "headline": {
-          "type": "string",
-          "description": "Custom headline or tag line for the plugin card face"
-        },
-        "primary_color": {
-          "type": "string",
-          "description": "Primary brand color hex (e.g. #10b981)"
-        },
-        "secondary_color": {
-          "type": "string",
-          "description": "Secondary accent or background tint hex"
-        },
-        "accent_color": {
-          "type": "string",
-          "description": "Highlight or glowing accent hex"
-        },
-        "quick_actions": {
-          "type": "array",
-          "description": "Touch-friendly direct CLI execution actions rendered on the card face",
-          "items": {
-            "type": "object",
-            "required": [
-              "subcommand",
-              "label"
-            ],
-            "properties": {
-              "subcommand": {
-                "type": "string"
-              },
-              "label": {
-                "type": "string"
-              },
-              "icon": {
-                "type": "string"
-              },
-              "color": {
-                "type": "string"
-              }
-            }
-          }
-        },
-        "metrics": {
-          "type": "array",
-          "description": "DEPRECATED: fixed text cannot reflect real state. Declare a 'status' command (top-level 'status' field) so the card reads the plugin's real state instead.",
-          "items": {
-            "type": "object",
-            "required": [
-              "label",
-              "value"
-            ],
-            "properties": {
-              "label": {
-                "type": "string"
-              },
-              "value": {
-                "type": "string"
-              }
-            }
-          }
-        },
-        "touch_layout": {
-          "type": "string",
-          "enum": [
-            "compact",
-            "comfortable",
-            "dense"
-          ],
-          "description": "Touch target and padding layout mode"
-        },
-        "interactive": {
-          "type": "boolean",
-          "description": "Whether interactive JavaScript controls are active on the card face"
-        }
-      }
-    },
     "locked": {
       "type": "boolean",
       "description": "When true, editing is locked to protect a completed plugin from inadvertent modification"
@@ -898,6 +817,31 @@
         }
       }
     },
+    "startup_check": {
+      "type": "object",
+      "description": "A read command contributed to `startup check` and `brief`. It prints one JSON object { ok, outstanding, summary }; outstanding above zero needs attention.",
+      "required": [
+        "command"
+      ],
+      "properties": {
+        "command": {
+          "type": "string",
+          "pattern": "^[a-z][a-z0-9-]{0,63}$"
+        },
+        "args": {
+          "type": "array",
+          "maxItems": 8,
+          "items": {
+            "type": "string"
+          }
+        },
+        "timeout_ms": {
+          "type": "integer",
+          "minimum": 1000,
+          "maximum": 30000
+        }
+      }
+    },
     "distribution": {
       "type": "object",
       "required": [
@@ -921,124 +865,6 @@
         }
       }
     },
-    "card_layout": {
-      "type": "object",
-      "required": [
-        "template",
-        "regions"
-      ],
-      "properties": {
-        "template": {
-          "enum": [
-            "console",
-            "ledger",
-            "monitor",
-            "inbox",
-            "dashboard",
-            "workbench",
-            "vault"
-          ]
-        },
-        "regions": {
-          "type": "array",
-          "minItems": 1,
-          "maxItems": 12,
-          "items": {
-            "type": "object",
-            "required": [
-              "widget"
-            ],
-            "properties": {
-              "widget": {
-                "enum": [
-                  "status",
-                  "actions",
-                  "table",
-                  "detail",
-                  "log",
-                  "form",
-                  "keypad",
-                  "gauge",
-                  "list",
-                  "settings",
-                  "credentials",
-                  "activity",
-                  "live"
-                ]
-              },
-              "title": {
-                "type": "string"
-              },
-              "command": {
-                "type": "string"
-              },
-              "commands": {
-                "type": "array",
-                "items": {
-                  "type": "string"
-                }
-              },
-              "span": {
-                "type": "integer",
-                "minimum": 1,
-                "maximum": 12
-              },
-              "source": {
-                "type": "object",
-                "required": [
-                  "command"
-                ],
-                "properties": {
-                  "command": {
-                    "type": "string"
-                  },
-                  "args": {
-                    "type": "array",
-                    "items": {
-                      "type": "string"
-                    }
-                  },
-                  "path": {
-                    "type": "string"
-                  }
-                }
-              },
-              "columns": {
-                "type": "array",
-                "minItems": 1,
-                "items": {
-                  "type": "object",
-                  "required": [
-                    "key",
-                    "label"
-                  ],
-                  "properties": {
-                    "key": {
-                      "type": "string"
-                    },
-                    "label": {
-                      "type": "string"
-                    },
-                    "format": {
-                      "enum": [
-                        "text",
-                        "number",
-                        "money",
-                        "date",
-                        "datetime",
-                        "bytes",
-                        "percent",
-                        "status"
-                      ]
-                    }
-                  }
-                }
-              }
-            }
-          }
-        }
-      }
-    },
     "workspace": {
       "type": "object",
       "description": "Live-use surface hosted in the slide-out drawer",
@@ -1122,7 +948,7 @@
     }
   },
   "definitions": {
-    "cardArgument": {
+    "pluginArgument": {
       "type": "object",
       "required": [
         "name",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "total-recall-brain",
-  "version": "3.45.0",
+  "version": "3.46.1",
   "description": "The Vibe Coding Brain & Autonomous Software Factory: memory, rules, secrets, and 33 visual plugins automatically managed across all your devices.",
   "type": "module",
   "bin": {

package/scaffold/.agent/skills/plugin/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: plugin
-description: Author, review or fix a Total Recall plugin (tr-plugin-*). A recipe of exact specifications an agent executes, so the plugin declares the surfaces its function needs, serves agents through its CLI, scaffolds its capability into other applications, and renders a bespoke card face.
+description: Author, review or fix a Total Recall plugin (tr-plugin-*). Declare real operations and data, author its bespoke Home and SSSS UI blocks, and compose pages through Decision.
 repo_scoped: false
 metadata:
-  version: "1.0.0"
+  version: "1.2.0"
   source: total-recall-brain
 ---
 
@@ -17,7 +17,7 @@ A plugin adds **one capability** to Total Recall. Core holds portable memory and
 
 Before designing or writing a plugin, inventory `total-recall plugin library --json`, `total-recall plugin available --json` and `total-recall plugin bricks --json`. Match each dependency to an existing owner. Call installed plugins for shared services and vendor existing bricks for code the project needs to own. Document the verified gaps that need new code. Run `record.mjs --reuse` after drafting the manifest and before implementing the capability.
 
-**A plugin is not one shape.** It declares the surfaces its capability needs, and a capability can need almost any combination — memory, context, a CLI, skills, scheduled work, runtime behaviour, a face, deployment, distribution, composition. Some plugins are only a memory category. Some are only a generator. Some are a CLI. Some are several at once. What it is, is decided by what it does.
+**A plugin is not one shape.** It declares the surfaces its capability needs, and a capability can need almost any combination — memory, context, a CLI, skills, scheduled work, runtime behaviour, a Home, deployment, distribution, composition. Some plugins are only a memory category. Some are only a generator. Some are a CLI. Some are several at once. What it is, is decided by what it does.
 
 ```
 references/   every field, every rule, and the failure catalogue
@@ -38,8 +38,8 @@ True of every plugin, whatever it turns out to be. Check every one before callin
 3. **Machine-facing output is structured.** A command emits JSON under `--json` and exits non-zero on failure, so an agent acts on a result instead of scraping prose.
 4. **Credentials are declared, never held.** Resolved only through `total-recall auth secret`. Never a second store, never `argv`, never an ambient environment variable, never a log.
 5. **Real data only.** Every value traces to something that actually returned it. No seeded readings, no placeholders, no example defaults, no reassuring badges. A failure is reported as a failure, with the time of the last attempt.
-6. **No templates.** Not for the face, and not for the plugin's shape. A face that could be dropped onto a different plugin is a failed face.
-7. **Every plugin has a card face**, authored by hand from its own function.
+6. **Owner design.** Every plugin ships a bespoke root `DESIGN.md` and a Home centered on its main workflows, live status and next actions. Author the interface in the owner repository.
+7. **Composable coverage.** Ship reusable SSSS blocks for every routine workflow and meaningful safe data point. Provide editable inputs and real actions where the workflow needs them. Agents can author additional blocks and place them on a page. Jev selects from validated candidates through Decision.
 8. **Fail closed.** A missing credential, a failed provider or an unreachable peer is an explicit error, never a success state.
 9. **Copy.** No filler words, and no sentence ends with a preposition.
 
@@ -54,11 +54,13 @@ True of every plugin, whatever it turns out to be. Check every one before callin
 | 3 | [Scaffold, then stop generating](prompts/03-scaffold.md) | repository skeleton | it exists, tests run |
 | 4 | [Write the CLI as an agent interface](prompts/04-cli.md) | operations, args, effects, JSON | `record.mjs` passes |
 | 5 | [Declare credentials and settings](prompts/05-credentials.md) | `secrets[]`, `configuration` | one credential path, auth |
-| 6 | [Design the card face by hand](prompts/06-card.md) | `ui/DESIGN.md`, `ui/card.js` | `record.mjs --card` passes |
+| 6 | [Design the Home and blocks](references/generative-home.md) | `DESIGN.md`, native panels, SSSS blocks | validate every block and check coverage |
 | 7 | [Extract the scaffold](prompts/07-scaffold.md) | the capability for another app | runs with Total Recall absent |
 | 8 | [Verify and report](prompts/08-verify.md) | a truthful report | `record.mjs` passes every check |
 
-Read [surfaces](references/surfaces.md) before Prompt 2, and [card](references/card.md) before Prompt 6.
+Read [surfaces](references/surfaces.md) before Prompt 2 and [generative Home](references/generative-home.md) before Step 6.
+
+For an existing dashboard task, follow [Author and place a block](references/generative-home.md#author-and-place-a-block). This works for any installed, enabled owner in the selected brain.
 
 ---
 
@@ -69,7 +71,7 @@ Run from the plugin repository.
 ```
 node <skill>/scripts/record.mjs .              # every check
 node <skill>/scripts/record.mjs . --manifest   # manifest only
-node <skill>/scripts/record.mjs . --card       # face only
+node <skill>/scripts/record.mjs . --home       # Home, design and operation coverage
 node <skill>/scripts/record.mjs . --secrets    # credential safety only
 node <skill>/scripts/record.mjs . --scaffold   # standalone scaffold only
 node <skill>/scripts/record.mjs . --reuse      # installed owner commands and required bricks
@@ -87,10 +89,10 @@ Delegate when the work is separable. Each is a prompt file, disposable and repea
 | Subagent | Use when | Returns |
 | --- | --- | --- |
 | [plugin-reviewer](subagents/plugin-reviewer.md) | a plugin is claimed finished | violations against the invariants, with evidence, or "clean" |
-| [card-designer](subagents/card-designer.md) | the function is known and the face is not written | `ui/DESIGN.md` reasoning and a first `ui/card.js`, or the questions it cannot answer |
+| [Home design procedure](references/generative-home.md) | the plugin's work is known and its Home is missing | a useful owner Home, verified bindings and bespoke design |
 | [scaffold-extractor](subagents/scaffold-extractor.md) | a plugin holds a capability another app could use | capability module design, or "not separable, because…" |
 
-The reviewer is adversarial by construction: it looks for fabricated values, host leaks, and a face that would suit any other plugin.
+The reviewer is adversarial by construction: it looks for fabricated values, host leaks, and an interface that would suit any other plugin.
 
 ---
 
@@ -110,6 +112,6 @@ See [evals](evals/README.md).
 ## References
 
 - [Surfaces](references/surfaces.md) — every surface and its exact manifest fields.
-- [Card](references/card.md) — designing a bespoke face, and what it must never do.
+- [Generative Home](references/generative-home.md) — owner Home, SSSS chunks, Decision and evidence.
 - [Scaffold](references/scaffold.md) — the capability for another application, and distribution.
 - [Anti-patterns](references/anti-patterns.md) — the failure catalogue, every entry observed in a real plugin.

package/scaffold/.agent/skills/plugin/evals/README.md

@@ -2,7 +2,7 @@
 
 Proof that the recipe and its checks work.
 
-Each case is a synthetic plugin whose correct outcome is already known. Five are **real defects observed in this ecosystem**; one is a plugin that follows the recipe and must be **accepted**. A checker that only ever rejects, or only ever accepts, proves nothing.
+The positive fixture has a native Home, an SSSS page block, root `DESIGN.md`, bundled Auth and a standalone capability. Each defect case changes the files that produce its expected failure.
 
 ```
 node evals/run.mjs                 # every case
@@ -11,48 +11,41 @@ node evals/run.mjs --json
 node evals/run.mjs --keep          # keep the temp fixture for inspection
 ```
 
-Exit code is non-zero unless every case behaves as expected.
+Use an installed Total Recall and Auth catalog, or set `TOTAL_RECALL_BIN` to the candidate binary and `AGENT_DIR` to its plugin registry. The suite exits nonzero when a case fails.
 
 ## How a case is judged
 
-A case declares the failures it expects. It passes when `scripts/record.mjs` reports **exactly** those and nothing else:
-
-- A defect case passes only if the checker **catches** it. A checker that looks at nothing fails here.
-- The correct-plugin case passes only if there are **no** failures. An over-eager checker fails here.
-- A case whose expectation is empty treats any failure as unexpected.
+A case declares the exact set of failed check names it expects. The positive case expects zero failures and requires the checks that prove Auth, native Home, design, block validation, coverage and capability portability.
 
 ## The cases
 
 | Case | Defect it encodes | Expected |
 | --- | --- | --- |
-| [`fabricated-seed`](cases/01-fabricated-seed.mjs) | a card seeding a telemetry reading — a literal hostname, uptime, load average and `usedPercent: 99.1` before any command ran, commented "Retain fallback telemetry" | `no seeded values` |
-| [`reassuring-default`](cases/02-reassuring-default.mjs) | a card reading three fields its command never returns and defaulting to "Up to date", so a repository with three unpushed commits rendered clean | `no reassuring default` |
-| [`declared-template`](cases/03-declared-template.mjs) | a manifest declaring `card_layout` with a template name and region list — the vocabulary that made 24 of 34 plugins identical | `no template` |
-| [`card-collects-credential`](cases/04-card-collects-credential.mjs) | a card collecting an API key in a password field and dispatching the raw value — generated by the old scaffolder | `never collects a credential`, `never transmits a credential` |
-| [`host-leak-in-scaffold`](cases/05-host-leak-in-scaffold.mjs) | a capability calling the `total-recall` binary for credentials and shipping `https://example.com/checkout/success` | `no Total Recall dependency`, `no placeholder values` |
-| [`correct-plugin`](cases/06-correct-plugin.mjs) | a plugin that follows the recipe: one bespoke face, real data only, credentials resolved through auth in the CLI, and a host-free capability | no failures |
+| [`fabricated-seed`](cases/01-fabricated-seed.mjs) | Home displays a seeded memory reading before any command runs | `no seeded values` |
+| [`reassuring-default`](cases/02-reassuring-default.mjs) | Home displays "Healthy" when the response lacks a health reading | `no reassuring default` |
+| [`declared-template`](cases/03-declared-template.mjs) | a native Home package retains a `card_layout` declaration and an orphaned card module | `contract`, `native presentation only` |
+| [`home-collects-credential`](cases/04-home-collects-credential.mjs) | Home collects a service key in a password input and dispatches the raw value outside the declared credential interface | `credential interface` |
+| [`host-leak-in-scaffold`](cases/05-host-leak-in-scaffold.mjs) | a capability calls the `total-recall` binary for credentials and uses a placeholder endpoint | `no Total Recall dependency`, `no placeholder values` |
+| [`correct-plugin`](cases/06-correct-plugin.mjs) | native Home with a verified operation and binding, a bundled Auth session, an Auth-owned service key and a host-free capability | zero failures and all declared passes |
 | [`missing-reuse`](cases/07-missing-reuse.mjs) | an otherwise valid plugin without a reuse decision | `reuse declared` |
 | [`unresolved-owner-command`](cases/08-unresolved-owner-command.mjs) | a reference to an operation absent from its installed owner | `owner commands resolve` |
 | [`missing-brick`](cases/09-missing-brick.mjs) | a declared brick without a project-owned copy | `required bricks present` |
 
-Reuse cases resolve Auth against an installed Total Recall plugin catalog. Run them from a machine with Total Recall and Auth available.
-
 ## Adding a case
 
-A case is a module exporting `{ name, why, files, expect }`:
+A case exports `{ name, why, files, expect }`. Use optional `flags` to isolate a recorder section when an intentionally invalid manifest prevents later sections from running independently.
 
 ```js
 export default {
   name: 'kebab-case-name',
   why: 'the failure mode this encodes, and what it costs',
-  files: { 'plugin.json': '…', 'cli.mjs': '…', 'ui/card.js': '…' },
+  files: { 'plugin.json': '…', 'cli.mjs': '…', 'ui/home.js': '…' },
   expect: { fail: ['the check name record.mjs must report'] },
 }
 ```
 
 Rules:
 
-- `why` states the **cost** of the defect, not just its shape.
-- `expect.fail` lists check names as `record.mjs` prints them. Empty means "must be accepted".
-- Prefer a case grounded in something that actually happened. An invented defect tests the checker against your imagination; a real one tests it against the ecosystem.
-- If a new case cannot be made to fail, the check behind it is decorative — fix the check, not the case.
+- Use `why` to state what can go wrong for the operator.
+- List the exact recorder check names in `expect.fail`. An empty list requires acceptance. Put any required successful check names in `expect.pass`.
+- Base each defect on an observed failure and isolate the behavior that the check is meant to catch.