mempalace-code 1.14.0__tar.gz → 1.14.2__tar.gz

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/CHANGELOG.md

@@ -2,6 +2,41 @@
 
 ## Unreleased
 
+## v1.14.2 — 2026-09-21
+
+Recovery release for the accumulated v1.14.1 changes. The immutable v1.14.1
+tag stopped before artifact build when the pinned upstream head moved, so no
+v1.14.1 package or GitHub Release exists.
+
+### Changed
+
+- Refreshed the reviewed upstream snapshot through `e038af97`; the MCP import
+  fix already has an equivalent entry-point boundary in this fork, while the
+  upstream sync identity and JSON audit-WAL changes belong to unsupported
+  runtime owners.
+- Added the failed v1.14.1 tag to the immutable orphan-tag evidence registry.
+- Kept the live upstream check at the canonical pre-tag boundary so later
+  upstream movement cannot strand another immutable public tag.
+
+## v1.14.1 — 2026-09-20 (tagged, not published)
+
+The tag remains immutable public evidence. Publication stopped before artifact
+build because the reviewed upstream head changed; these changes ship in v1.14.2.
+
+### Fixed
+
+- Wing migration now binds live evidence to the qualified runner, updates the
+  destination runtime hash after the merge, bounds retained qualification storage,
+  and preserves exact recovery for the original v16 receipt.
+- Wing migration receipts use the owner-controlled rule `retain until verified
+  recovery or owner disposition`; the obsolete calendar deadline is rejected before
+  any evidence or migration state is written.
+- Installed-wheel qualification now treats the installation-wide MCP lock files as
+  stable protected anchors and directly exercises the `wing-migration` CLI refusal
+  without an action.
+- Runtime provenance checks now accept platform-managed symlink ancestors outside
+  the owned installation and source roots while still refusing symlinks inside them.
+
 ## v1.14.0 — 2026-09-18
 
 ### Added

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: mempalace-code
-Version: 1.14.0
+Version: 1.14.2
 Summary: Developer memory tool — mine codebases and conversations into a LanceDB-backed searchable palace. No API key required.
 Project-URL: Homepage, https://github.com/rergards/mempalace-code
 Project-URL: Repository, https://github.com/rergards/mempalace-code
@@ -1276,7 +1276,7 @@ python -m pyright --pythonpath "$(python -c 'import sys; print(sys.executable)')
 Apache 2.0 — see [LICENSE](LICENSE) and [NOTICE](NOTICE).
 
 <!-- Link Definitions -->
-[version-shield]: https://img.shields.io/badge/version-1.14.0-4dc9f6?style=flat-square&labelColor=0a0e14
+[version-shield]: https://img.shields.io/badge/version-1.14.2-4dc9f6?style=flat-square&labelColor=0a0e14
 [release-link]: https://github.com/rergards/mempalace-code/releases
 [python-shield]: https://img.shields.io/badge/python-3.11+-7dd8f8?style=flat-square&labelColor=0a0e14&logo=python&logoColor=7dd8f8
 [python-link]: https://www.python.org/

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/README.md

@@ -1217,7 +1217,7 @@ python -m pyright --pythonpath "$(python -c 'import sys; print(sys.executable)')
 Apache 2.0 — see [LICENSE](LICENSE) and [NOTICE](NOTICE).
 
 <!-- Link Definitions -->
-[version-shield]: https://img.shields.io/badge/version-1.14.0-4dc9f6?style=flat-square&labelColor=0a0e14
+[version-shield]: https://img.shields.io/badge/version-1.14.2-4dc9f6?style=flat-square&labelColor=0a0e14
 [release-link]: https://github.com/rergards/mempalace-code/releases
 [python-shield]: https://img.shields.io/badge/python-3.11+-7dd8f8?style=flat-square&labelColor=0a0e14&logo=python&logoColor=7dd8f8
 [python-link]: https://www.python.org/

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/docs/RELEASING.md

@@ -375,9 +375,12 @@ wheel, sdist, PyPI artifact, or GitHub Release is created. It requires
 Audit**, and queries the effective rules for `refs/heads/main` plus the active
 `refs/tags/v*` ruleset. Hosted admission requires `non_fast_forward`, `deletion`,
 and `required_status_checks` with `release-required`, plus tag `creation`,
-`update`, and `deletion`. These public reads use no GitHub token. The workflow
-also retains a direct live upstream comparison as defense in depth; that
-post-tag check does not replace the canonical pre-tag command above.
+`update`, and `deletion`. These public reads use no GitHub token. Release
+admission validates the committed upstream snapshot. The direct live upstream
+lookup runs immediately before tag creation, while the operator can still
+refresh the candidate safely. A tag workflow must not repeat that mutable
+lookup after creating the immutable tag: later upstream movement cannot
+invalidate the reviewed release tree or strand a permanent orphan tag.
 Do not trigger PyPI publishing by a workflow dispatch or a release event.
 
 ## 4. Verify the public release

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/docs/UPSTREAM_COMPARISON.md

@@ -6,12 +6,12 @@ This is the canonical, source-pinned comparison between `rergards/mempalace-code
 
 | Field | Value |
 |---|---|
-| Reviewed date | `2026-09-18` |
+| Reviewed date | `2026-09-20` |
 | Canonical upstream repository | <https://github.com/MemPalace/mempalace> |
 | Branch reviewed | `develop` |
-| Commit reviewed | `25203ed6ee1a739103a77e87219a1f679dee81e9` |
-| Previous reviewed commit | `d9f059076c866fa6f29195679d75712436986024` |
-| Previous reviewed date | `2026-09-02` |
+| Commit reviewed | `e038af9703d2467bb7cfffdd3f7fb2bd212e58a4` |
+| Previous reviewed commit | `25203ed6ee1a739103a77e87219a1f679dee81e9` |
+| Previous reviewed date | `2026-09-18` |
 | Upstream release described by its changelog | `3.10.0` |
 | Fork commit at review time | this repository, release preparation branch |
 
@@ -19,75 +19,73 @@ Upstream code was reviewed at the pinned commit. It was not run, benchmarked, or
 
 ## Source Links
 
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/README.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/CHANGELOG.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/pyproject.toml>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/.codex-plugin/plugin.json>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/.claude-plugin/plugin.json>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/.agents/plugins/marketplace.json>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/.mcp.json>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/.dsh-plugin/README.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/crates/README.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/benchmarks/PRIVATE_PALACE.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/docs/rfcs/003-agent-logstream-coordination.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/docs/rfcs/004-replicated-palace.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/docs/rfcs/005-agent-identity-routing.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/integrations/shared/coordination-protocol.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/website/guide/lightweight-mcp.md>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/config.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/split_mega_files.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/update_awareness.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/hub_client.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/logstream.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/mcp_server/__init__.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/mcp_server/http.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/mcp_server/protocol.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/mcp_server/runtime.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/searcher/__init__.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/searcher/ranking.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/embedding.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/backends/qdrant.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/backends/rust_exact.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/cli/__init__.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/cli/parser.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/cli_write_routing.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/knowledge_graph.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/mcp_light_server.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/query_parser.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/normalize.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/entity_registry.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/diary_ingest.py>
-- <https://github.com/MemPalace/mempalace/blob/25203ed6ee1a739103a77e87219a1f679dee81e9/mempalace/daemon.py>
-
-Exact compare range: <https://github.com/MemPalace/mempalace/compare/d9f059076c866fa6f29195679d75712436986024...25203ed6ee1a739103a77e87219a1f679dee81e9>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/README.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/CHANGELOG.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/pyproject.toml>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/.codex-plugin/plugin.json>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/.claude-plugin/plugin.json>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/.agents/plugins/marketplace.json>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/.mcp.json>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/.dsh-plugin/README.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/crates/README.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/benchmarks/PRIVATE_PALACE.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/docs/rfcs/003-agent-logstream-coordination.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/docs/rfcs/004-replicated-palace.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/docs/rfcs/005-agent-identity-routing.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/integrations/shared/coordination-protocol.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/website/guide/lightweight-mcp.md>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/config.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/split_mega_files.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/update_awareness.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/hub_client.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/logstream.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/mcp_server/__init__.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/mcp_server/http.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/mcp_server/protocol.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/mcp_server/runtime.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/searcher/__init__.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/searcher/ranking.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/embedding.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/backends/qdrant.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/backends/rust_exact.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/cli/__init__.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/cli/parser.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/cli_write_routing.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/knowledge_graph.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/mcp_light_server.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/query_parser.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/normalize.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/entity_registry.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/diary_ingest.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/daemon.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/source_identity.py>
+- <https://github.com/MemPalace/mempalace/blob/e038af9703d2467bb7cfffdd3f7fb2bd212e58a4/mempalace/wal.py>
+
+Exact compare range: <https://github.com/MemPalace/mempalace/compare/25203ed6ee1a739103a77e87219a1f679dee81e9...e038af9703d2467bb7cfffdd3f7fb2bd212e58a4>
 
 ## Upstream Delta Since the Previous Pin
 
-The range contains exactly 89 commits. Each SHA is owned once by one review group. The legacy manifest field `merge_group` stores the first SHA of each review group; groups may contain direct commits as well as merge commits.
+The range contains exactly 3 commits. Each SHA is owned once by one review group.
 
 | Delta decision | Upstream change | Stance | Release-critical | Review group |
 |---|---|---|---|---|
-| `native-and-retired-backends` | optional Rust exact search plus sqlite_exact, ChromaDB, pgvector, Qdrant, HNSW, and native-wheel changes | `irrelevant` | no | `753f08f3` |
-| `distributed-runtime-integrations` | hub and daemon writer routing, logstream lifecycle, shared-brain rules, DSH integration, and distributed coordination fixes | `irrelevant` | no | `92a8ac6b` |
-| `structural-release-maintenance` | module and test splits, dependency and workflow maintenance, documentation, release metadata, and branch synchronization | `irrelevant` | no | `1beed5a3` |
-| `protocol-cli-equivalents` | diary pagination beyond the legacy limit, total JSON-RPC replies for requests with ids, and natural --palace option placement | `equivalent-local` | yes | `87a01ddf` |
-| `local-ingest-registry-safety` | raw Codex fallback refusal, registry preservation and bounded temporary names, plus removal of an unconfigured Wikipedia lookup | `adopted` | yes | `46406439` |
-| `optional-retrieval-metadata` | optional ranking weights, drawer timestamps, search date provenance, KG pagination, XDG defaults, and retrieval performance changes | `deferred` | no | `39c1200d` |
-| `upstream-runtime-specific-fixes` | repair, hook, collection-name, environment, and integrity fixes bound to upstream Chroma, hub, daemon, or hook implementations | `irrelevant` | no | `e32b1e84` |
+| `source-directory-identity-sync` | directory-inode provenance for destructive distributed sync decisions | `irrelevant` | no | `f8b9ed15` |
+| `mcp-import-argv-boundary` | defer MCP flag parsing from module import to executable entry points | `equivalent-local` | yes | `36ec72f9` |
+| `upstream-json-audit-wal-outcomes` | append mutation outcomes to the upstream JSON write-audit WAL | `irrelevant` | no | `e038af97` |
 
-Inventory anchor: `dc3a368fefa15cce6705eda7e3080264db7077eea726c7d5cc010fac0ba8e518` (`sha256`, 89 commits).
+Inventory anchor: `9a61cbf303111d2df4241f73128aa1071fc770a261da381ad60572040f3d0a35` (`sha256`, 3 commits).
 
 Review groups:
 
-- `753f08f3`: `1ed2676e`, `1fd5c4c0`, `61e8a626`, `f1e5ef73`, `7e69c3f1`, `17465d29`, `1c3a125c`, `58af2f2e`, `c04d423d`, `7ff9502f`, `955ab13e`, `e7562c06`, `f2a6edad`, `7ac87d3b`, `c39007f4`, `863462c2`, `38260df5`, `7702a2df`
-- `92a8ac6b`: `f9297a22`, `6c47daac`, `4f0e0af1`, `622b8b05`, `5affd624`, `a30c4516`, `df330d8c`, `99b1c970`, `527d0810`, `30cb69ab`, `752965d7`, `0a4059ff`, `48b262ee`, `8d13b0e6`, `cda984ee`, `a992af9a`
-- `1beed5a3`: `3e24d4b4`, `ba27375c`, `0b8188c1`, `e7102f97`, `1e052302`, `c664e8a5`, `238ca21d`, `37e14155`, `7010a09a`, `37ffbbe3`, `4f2c0362`, `a855bc07`, `3b57f256`, `5e2fa639`, `b0774e73`, `f3a99cc9`, `50dc89a8`, `e59e3683`, `7b7a782b`, `319667a8`, `40ea737d`, `ce54d5dd`, `d5250c78`, `3206f45d`, `345bcfba`
-- `87a01ddf`: `5a2abffe`, `40db9e5c`, `25203ed6`
-- `46406439`: `5af2fc30`, `d81726a2`, `e7f79840`, `d30348d9`
-- `39c1200d`: `687533ec`, `e4d0aa06`, `4591269e`, `0da09a20`, `636d9bc6`, `d27e515d`, `a07fb3f1`, `0fec3340`, `77da41d3`
-- `e32b1e84`: `50fb09d2`, `d5a31d0e`, `c79f2d07`, `c0c96151`, `8dd30cba`, `e0c5d693`, `0818de9e`
+- `f8b9ed15`
+- `36ec72f9`
+- `e038af97`
 
-The two release-critical groups are closed by named local predicates. Other groups add unsupported architecture, repository maintenance, or optional capabilities without a current release acceptance gap.
+The MCP import fix is closed by named local predicates. The source-directory
+identity fix protects upstream's destructive distributed `sync --apply` owner,
+which this fork does not implement. The JSON write-audit WAL has no owner in this
+fork; LanceDB transactions and the SQLite knowledge-graph WAL use separate
+recovery contracts.
 
 ## Capability Comparison
 
@@ -224,9 +222,9 @@ Every upstream identifier is mapped in the manifest to one or more pinned source
 
 **Adopted safety.** The fork refuses raw fallback for recognized incomplete Codex rollouts, preserves malformed or unreadable entity registries, bounds entity-registry temporary-name collisions, and contains no callable Wikipedia research path.
 
-**Equivalent protocol behavior.** Existing tests cover diary reads beyond the former limit, malformed JSON-RPC envelopes with preserved request IDs and session continuity, and `--palace` placement before or after a subcommand.
+**Equivalent protocol behavior.** Existing tests cover diary reads beyond the former limit, malformed JSON-RPC envelopes with preserved request IDs and session continuity, and `--palace` placement before or after a subcommand. MCP imports ignore host-process arguments; executable flag parsing is owned by `dispatch.main(argv)`.
 
-**Storage boundary.** LanceDB remains the only current backend. Rust exact search, ChromaDB, sqlite_exact, pgvector, Qdrant, hub, daemon, logstream, and replication contracts are outside this release.
+**Storage boundary.** LanceDB remains the only current backend. Rust exact search, ChromaDB, sqlite_exact, pgvector, Qdrant, hub, daemon, logstream, upstream distributed sync, JSON write-audit WAL, and replication contracts are outside this release.
 
 **Deferred additions.** Ranking weights, last-modified metadata, date provenance, KG pagination, and XDG default migration require their own acceptance and migration evidence.
 

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/docs/operations/wing-migration.md

@@ -43,7 +43,7 @@ Supplying `--inventory` is optional and provides only an equality guard: it must
 same file selected by `WING_MIGRATION_INVENTORY_PATH`. Selection and mode-0600 regular-file checks
 run before a receipt, snapshot, lock, runtime artifact, or report is created. Public output contains
 fixed predicates; paths, inventory values, measured counts, runtime diagnostics, source content,
-the recovery command, and the retention deadline remain in private evidence.
+the recovery command, and the retention rule remain in private evidence.
 
 The receipt-bound fixture actions are:
 
@@ -62,8 +62,8 @@ mempalace-code wing-migration live-run --authority /absolute/private/live-author
 ```
 
 The mode-0600 authority names the exact host, source and destination wings, canonical palace,
-configuration, operation lock, both KG candidates, project marker, a fresh evidence root, a future
-retention deadline, and the retained full-copy qualification report with its SHA-256, inventory
+configuration, operation lock, both KG candidates, project marker, a fresh evidence root, the
+retention rule, and the retained full-copy qualification report with its SHA-256, inventory
 seal, and qualified runner hash. It must set `scope` to `single_host_live_wing_merge`, set both
 `live_mutation` and `mcp_downtime` to true, contain the owner's approval, and name the exact
 operation as `merge wing SOURCE into DESTINATION`. The operator rejects a non-canonical palace,
@@ -141,12 +141,12 @@ fail-closed authority values:
   "live_mutation": false,
   "watcher_restart": false,
   "fixture_process_authority": "acquire fixture lock and stop only fixture-owned subprocesses",
-  "retention_rule": "retain through deadline and until verified recovery or owner disposition, whichever is later"
+  "retention_rule": "retain until verified recovery or owner disposition"
 }
 ```
 
-The same object names distinct original and qualification hosts, explicit owner approval, all
-original paths excluded from mutation, and the future UTC `retention_deadline`. The qualification
+The same object names distinct original and qualification hosts, explicit owner approval, and all
+original paths excluded from mutation. The qualification
 host must equal the current host name. Logical provenance paths are absolute, reject dot
 components, and are compared by lexical path components; the runner never resolves or accesses
 the original root.
@@ -285,8 +285,8 @@ refusal falls back to the ordinary independent copy path.
 Older-format receipts remain byte-for-byte retained evidence. Recovery requires the matching
 historical runner version and hash because the current runner refuses older receipt versions or
 hashes. Preserve that runner separately until recovery or owner disposition.
-Retain this evidence through the inventoried deadline and until verified recovery or owner
-disposition, whichever is later. The private receipt contains one exact recovery command. The
+Retain this evidence until verified recovery or owner disposition. The private receipt contains
+one exact recovery command. The
 descendant receipt is persisted before copied storage is written; if construction stops
 before a snapshot exists, that command removes only incomplete descendant contents and retains the
 receipt. Sanitized command output may be retained with task evidence.

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/docs/quality/scorecard.json

@@ -1,17 +1,17 @@
 {
   "code_size": {
-    "package_code_lines": 29419,
+    "package_code_lines": 29439,
     "package_files": 82,
-    "package_total_lines": 35080,
-    "test_files": 91,
-    "test_total_lines": 86672
+    "package_total_lines": 35098,
+    "test_files": 92,
+    "test_total_lines": 86949
   },
   "demo_gates": {
     "architecture_guard": {
       "status": "present"
     },
     "cli_golden_scenarios": {
-      "count": 21,
+      "count": 20,
       "status": "present"
     },
     "dependency_audit": {
@@ -58,11 +58,11 @@
   },
   "largest_modules": [
     {
-      "lines": 5395,
+      "lines": 5398,
       "path": "mempalace_code/wing_migration.py"
     },
     {
-      "lines": 2226,
+      "lines": 2241,
       "path": "mempalace_code/storage.py"
     },
     {
@@ -281,8 +281,8 @@
     "unreasoned_total": 0
   },
   "tests": {
-    "test_files": 91,
-    "test_functions": 3925
+    "test_files": 92,
+    "test_functions": 3937
   },
   "verification_commands": [
     {

{mempalace_code-1.14.0 → mempalace_code-1.14.2}/docs/quality/scorecard.md

@@ -9,17 +9,17 @@ Schema version: 4
 | Metric | Value |
 |--------|------:|
 | Package files (`mempalace_code/`) | 82 |
-| Package total lines | 35080 |
-| Package code lines | 29419 |
-| Test files (`tests/`) | 91 |
-| Test total lines | 86672 |
+| Package total lines | 35098 |
+| Package code lines | 29439 |
+| Test files (`tests/`) | 92 |
+| Test total lines | 86949 |
 
 ## Largest Modules (top 10)
 
 | Module | Lines |
 |--------|------:|
-| `mempalace_code/wing_migration.py` | 5395 |
-| `mempalace_code/storage.py` | 2226 |
+| `mempalace_code/wing_migration.py` | 5398 |
+| `mempalace_code/storage.py` | 2241 |
 | `mempalace_code/updater.py` | 1780 |
 | `mempalace_code/mining/chunkers.py` | 1466 |
 | `mempalace_code/watcher.py` | 1333 |
@@ -90,7 +90,7 @@ Coverage: `maintained_default_corpus`, `entropy_rule`, `changed_commit_range`, `
 | Gate | Status | Count |
 |------|:------:|------:|
 | architecture_guard | present |  |
-| cli_golden_scenarios | present | 21 |
+| cli_golden_scenarios | present | 20 |
 | dependency_audit | present |  |
 | docs_drift_guard | present |  |
 | mcp_stdio_contracts | present | 5 |
@@ -127,8 +127,8 @@ Scope: `mempalace_code/`, `tests/` (excludes `tests/fixtures/`).
 
 | Metric | Value |
 |--------|------:|
-| Test files | 91 |
-| Test functions | 3925 |
+| Test files | 92 |
+| Test functions | 3937 |
 
 ## Available Suites