feat(mcp): add brain_read + brain_edit, contained to the sync source (brain#4)

brain_read returns a note verbatim; brain_edit is str_replace with an
exactly-once match. Both operate on INGEST_BRAIN_DIR, which is the pod's
mount of /var/lib/supervisor/brain — the tree brain-sync commits from, so
an edit reaches gitea on the next cycle rather than landing somewhere the
sync cannot see it (brain#2).

An adversarial design review before implementation changed three things,
each of which would otherwise have shipped:

1. Governance files are NOT in the model-facing tool. The original plan
   allowed root *.md so CLAUDE.md had an MCP path at all — the absence of
   one is what pushed a session to edit via the gitea REST API on
   2026-06-16 and wedge the sync. But brain content is ingested from the
   outside world, reaches a model's context via brain_query, and that
   model would hold the editor: one poisoned page could rewrite the
   CLAUDE.md a .dispatch-allow agent later loads as instructions. Worse,
   brain-sync merges with --strategy-option=ours, so the live tree wins
   against a human's corrective push on exactly the conflicting lines.
   CLAUDE.md now goes through brain_edit_root: de-surfaced from
   tools/list (the brain_index precedent, ADR-0012 rule 4) and gated on
   the local static principal, so a claude.ai-origin session is refused.
   The two scopes are disjoint — the privileged door has the smaller reach.

2. Reads needed the same allowlist, and brain_get already lacked it.
   api.ReadNote resolves any brain-relative path and parseFrontmatter
   returns the whole file when there is no fence, so brain_get reads
   verbatim session transcripts under archive/ (up to 500 KB, never
   BM25-indexed, so nobody thinks of them as reachable). A test proves
   the exposure was live; the same Resolve now gates brain_get.

3. Canonicalise before allowlisting. A prefix check on the raw argument
   accepts knowledge/../.git/hooks/post-commit, which Clean collapses to
   a git hook that brain-sync executes inside a pod holding the Gitea
   push credentials. Traversal, symlink escape, dotfiles, .git/, archive/,
   sessions/ and raw/ are refused by a static backstop that does not
   depend on the allowlist being right. There were no traversal tests in
   this repo before.

Also from the review: overlapping match counting (bytes.Count says "aa"
occurs once in "aaa", so a Count-based uniqueness check accepts an
ambiguous edit); UTF-8 validation on both sides, because encoding/json
substitutes U+FFFD and would hand back bytes the file does not contain,
making every derived old_str unmatchable; refusal while .git/MERGE_HEAD
or index.lock exists, since an edit racing brain-sync's merge is either
hard-reset away or committed as a wrongly resolved conflict; flock plus a
per-path mutex with the read taken inside the lock, because two pods
share the hostPath during a RollingUpdate and uniqueness evaluated
against a stale read loses an update while reporting success; same-dir
*.tmp + rename + chmod 0644 + fsync of file and parent; and reindex only
when the edit touches frontmatter, since BM25 walks live and embeddings
are mtime-driven.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01BeAp5LTscnz2W7Ubt4eJ6m

.context/mcp.json

@@ -7,29 +7,6 @@
     "supervisor": {
       "url": "http://localhost:3200/mcp",
       "description": "Hyperguild SDO — skill workers (tdd, retrospective), brain tools (brain_query, brain_write), session logging, tier detection"
-    },
-    "brain": {
-      "type": "http",
-      "url": "https://koala.tail30472e.ts.net:8443/mcp",
-      "headers": {
-        "Authorization": "Bearer ${BRAIN_MCP_TOKEN}"
-      }
-    },
-    "gitea": {
-      "_comment": "gitea-mcp authenticates by PASS-THROUGH: the bearer is a Gitea PAT it validates against Gitea and then acts as. GITEA_MCP_TOKEN -- which this entry used until 2026-09-08 -- 401s against it, so every harness synced from this file had a dead gitea server and no signal saying so. Probed 2026-09-08: GITEA_MCP_TOKEN 401, DMABE_GITEA_API_TOKEN 200, on both the public and the Serve URL.",
-      "type": "http",
-      "url": "https://koala.tail30472e.ts.net:8446/mcp",
-      "headers": {
-        "Authorization": "Bearer ${DMABE_GITEA_API_TOKEN}"
-      }
-    },
-    "infra": {
-      "_comment": "The bearer is belt-and-braces: this endpoint answers 200 with or without it, since Serve already limits reach to the tailnet. Sending it anyway means the day the server starts enforcing is not the day every harness breaks.",
-      "type": "http",
-      "url": "https://koala.tail30472e.ts.net:8444/mcp",
-      "headers": {
-        "Authorization": "Bearer ${INFRA_MCP_TOKEN}"
-      }
     }
   }
 }

.context/system-prompt.txt

@@ -53,30 +53,14 @@ These rules apply to every task across every project, regardless of harness.
    logical change (one tool, one fix, one test) with passing tests. Main is always
    deployable. Never create long-lived feature branches.
 
-   **The PR trigger is RISK, not concurrency.** `risk/low` work commits straight to
+   **Exception — parallel agents on same repo:** If another agent is known to be
-   main with CI as the gate — that is most work and is unchanged. `risk/medium` and
+   actively working on the same repo simultaneously, create a short-lived branch
-   above opens a PR, even solo, even with nobody waiting to review it. This mirrors
+   (`agent/<description>`), finish the task, and merge to main within the same
-   the tiered merge model in `assessor-loop`
+   session. Do not leave agent branches open between sessions.
-   `method/transfer-to-a-regulated-organisation.md` §4.1, so the estate practises
-   what it sells instead of merging everything on green and claiming otherwise.
 
-   **Concurrency is NOT a reason to branch.** Measured 2026-08-29 across three real
+   **Exception — external contributor or client four-eyes requirement:** Use
-   collisions between parallel sessions: two were not branching problems at all — a
+   PR flow only when a human reviewer outside the project is required. Document
-   generated artifact written to the same path by both (branching turns that into a
+   the reason in PROJECT.md.
-   merge conflict on a 33k-line JSON), and uncommitted work in a shared checkout
-   (a per-session worktree fixes it) — and the third was an ordinary non-fast-forward
-   push resolved by rebase in seconds. Use a worktree per session on shared repos and
-   timestamp generated artifacts. Do not reach for a branch.
-
-   Branch+PR flow carries documented costs on solo repos: merging auto-closes gated
-   issues, review comments live on a thread separate from the issue's, and a
-   merged-and-deleted branch cannot be amended (brain:
-   `gitea-pr-merge-autoclose-and-review-comment-footguns`). Those are the price of
-   the `risk/medium`+ lane — paid deliberately, not incurred by accident.
-
-   **Exception — external contributor or client four-eyes requirement:** Use PR flow
-   when a human reviewer outside the project is required. Document the reason in
-   PROJECT.md.
 
 6. **Close the loop — every substantive task ends with the same ritual.** Shipping
    the code is not the end of the task; capturing it is. Run this unprompted:
@@ -94,18 +78,6 @@ These rules apply to every task across every project, regardless of harness.
    - Surface the brain entries and issue numbers in the closing summary so the
      trail is auditable.
 
-   **Chat is not a durable store. Never rely on Mathias remembering anything.**
-   Every gap, caveat, risk, open question and next step must land in one of four
-   places before the turn ends: **the brain**, **a repo** (code, docs, ADR),
-   **a tracker issue**, or **a plan file**. A finding stated only in conversation is
-   lost the moment the session closes — and this estate has repeatedly proved that a
-   remembered convention is an unreliable control.
-
-   This applies hardest to what is tempting to leave as a closing remark: "worth
-   knowing X isn't enforced yet", "this is a convention, not a gate", "we should
-   revisit Y". Those are exactly the items that need a locator. If it is worth
-   saying in a summary, it is worth writing where it can be found again without you.
-
 ## CAD sprint patterns
 
 Two CAD sprint archetypes (defs: brain `wiki/homelab/decisions/continuous-agentic-development-cad-concept-2026-06-16`):
@@ -176,10 +148,10 @@ Three machines on Tailscale:
 |---------|------|-----------|
 | koala | GPU inference, heavy compute | RTX 5070, runs k3s + llama-swap + shared postgres18/pgvector |
 | iguana | Services, builds | M2 Ultra Mac |
-| flamingo | Daily driver, edge | Apple Silicon Mac, ~/dev is here |
+| flamingo | Daily driver, edge | Mac mini, ~/dev is here |
 
 - **Model routing**: LiteLLM in front of llama-swap (local) + cloud APIs (when permitted)
-- **Orchestration**: k3s on koala only — single control-plane node, no workers (verified 2026-08-30). iguana and flamingo are on the tailnet but are not cluster members
+- **Orchestration**: k3s cluster across all three machines
 - **Networking**: Tailscale mesh
 
 ## Project landscape
@@ -275,11 +247,10 @@ When working on a project tagged with a client name:
 
 ## Harness-agnostic principles
 
-Supported harnesses (2026-09-01) — Cursor and Aider were dropped; do not
+This context is designed to work with any AI coding tool:
-re-add adapters for them:
+- Claude Code, Cursor, Aider, Open WebUI, Charmbracelet Mods/Crush
-- Claude Code, Antigravity, OpenCode, Mistral Vibe, Crush, Pi Coding Agent
+- Pi Coding Agent, Mistral Vibe, Antigravity
-- Open WebUI, Charmbracelet Mods, or any tool that takes a system prompt string
+- Any tool that accepts a system prompt or reads a markdown context file
-- Any other tool that reads `AGENTS.md`, which is the de facto convention
 
 The canonical source is always `.context/AGENT.md` (root) and `.context/PROJECT.md` (per-project).
 Derived files are committed (see *How context propagates* below) so a `git pull` on any host yields full agent context with no setup.
@@ -291,29 +262,15 @@ Canonical sources of truth:
 - Project: `<repo>/.context/PROJECT.md` (per-repo)
 
 Derived files (committed, regenerated by `task context:sync`):
-- `CLAUDE.md`, `AGENTS.md`, `.context/system-prompt.txt`
+- `CLAUDE.md`, `AGENTS.md`, `.cursorrules`, `.aider.conventions.md`,
-
+  `.context/system-prompt.txt`
-Repos still carrying `.cursorrules`, `.aider.conventions.md` or
-`.aider.conf.yml` are stale: nothing regenerates them. Delete them the next time
-you touch the repo, along with their entries in that repo's `task check`
-assertion.
 
 Workflow:
 1. Edit a canonical file. Run `task context:sync`. Commit canonical and
    derived together. Push.
-2. On any other host, `git pull` brings both. Which file a harness reads does
+2. On any other host, `git pull` brings both. Claude Code (tree-walking)
-   NOT split cleanly by lookup strategy, so do not reason from the strategy:
+   uses `CLAUDE.md`; Crush / Pi / Antigravity (cwd-only) use `AGENTS.md`;
-   - `CLAUDE.md` — Claude Code (walks up the tree)
+   Cursor uses `.cursorrules`; Aider uses `.aider.conventions.md`.
-   - `AGENTS.md` — Crush, Pi, Antigravity (cwd-only), OpenCode (project root,
-     global at `~/.config/opencode/AGENTS.md`), and Mistral Vibe, which **walks
-     up** from cwd and takes the first `AGENTS.md` it finds
-     (user-level `~/.vibe/AGENTS.md`)
-   - `.context/system-prompt.txt` — Open WebUI, Mods, raw API calls; not read by
-     any harness, it is for pasting
-
-   Vibe tree-walks for `AGENTS.md`, so "tree-walkers use CLAUDE.md" is false.
-   Each repo's `AGENTS.md` embeds the canonical and is the first one found from
-   inside that repo, so this works — but by construction, not by luck.
 3. `task check` runs `context:sync` then asserts `git status --porcelain`
    is empty over the derived files (catches both modified-tracked drift
    and missing-untracked adapters). A drift fails the check with a
@@ -324,20 +281,7 @@ unconditionally on every host, every harness.
 
 ## Engineering Skills
 
-Shared engineering skills live in the **`mathias/skills`** repo (`git.d-ma.be/mathias/skills`). Load at task start — not "on demand" but on schedule, before writing code. Browse `SKILLS_INDEX.md` for the full list.
+Shared engineering skills live in the **`mathias/skills`** repo (`git.d-ma.be/mathias/skills`). Clone it to `~/dev/skills/` and run `SKILLS_CHECKOUT_DIR="$PWD" bash install.sh` there to wire every skill into your harnesses (Claude Code, Crush, Antigravity, Mistral Vibe) as native, on-demand skills. (Use `install.sh`, not `task install` — the latter is currently broken, skills#7.) Load at task start — not "on demand" but on schedule, before writing code. Browse `~/dev/skills/SKILLS_INDEX.md` for the full list.
-
-**Claude Code** installs the repo as a plugin from the marketplace the same repo hosts. That path also carries the `secret-guard` and `pre-task-ritual` hooks and the brain/gitea/infra MCP servers, which symlinks cannot:
-
-```
-/plugin marketplace add https://git.d-ma.be/mathias/skills.git
-/plugin install skills@mathias
-```
-
-Skills are **namespaced** under Claude Code: load `tdd` as `skills:tdd`. The trigger table below uses bare names — prefix them.
-
-**Crush, Pi and OpenCode** have no plugin system and are wired by `install.sh` as one directory symlink per harness via `~/.agents/skills`. Do not clone the checkout into `~/dev`: that folder is iCloud-shared between the Macs and spans two path roots (`/Users/mathias` vs `/home/mathias` on koala), so a checkout there is a git working tree with two concurrent writers, and any absolute symlink stored in it is broken on one side by construction (skills#23). Leave `SKILLS_CHECKOUT_DIR` at its host-local default.
-
-Check a host with `task doctor` in the skills repo; it also runs automatically at session start via the plugin.
 
 **Skill trigger table — load before starting, not after getting stuck:**
 

.dispatch-allow

@@ -1,2 +0,0 @@
-# Presence of this file marks this repo as opt-in for headless dispatch.
-# See dispatch#3.

.env.example

@@ -1,6 +1,7 @@
 # Supervisor MCP server
 SUPERVISOR_PORT=3200
 SUPERVISOR_CONFIG_DIR=./config/supervisor
+SUPERVISOR_MODELS_FILE=./config/models.yaml
 
 # LiteLLM gateway (iguana)
 LITELLM_BASE_URL=http://iguana:4000

.gitea/workflows/cd.yml

@@ -45,12 +45,6 @@ jobs:
           set -e
           trap 'rm -rf /tmp/infra-update; rm -f ~/.ssh/infra_deploy_key' EXIT
           IMAGE_TAG="${{ github.sha }}"
-          # infra#311: github.sha is never empty in practice, but the manifest
-          # patch below is the same shape that took Flux down estate-wide on
-          # 2026-08-25 -- an empty tag yields `image: <repo>:`, which is invalid
-          # YAML and fails the ENTIRE Kustomization, not just this app. The
-          # assert costs nothing and removes the class.
-          [ -n "${IMAGE_TAG:-}" ] || { echo "IMAGE_TAG is empty - refusing to patch"; exit 1; }
           mkdir -p ~/.ssh
           echo "${{ secrets.INFRA_DEPLOY_KEY }}" > ~/.ssh/infra_deploy_key
           chmod 600 ~/.ssh/infra_deploy_key
@@ -81,19 +75,11 @@ jobs:
           git config user.email "cd-bot@d-ma.be"
           git config user.name "CD Bot"
           git add "k3s/apps/supervisor/ingestion-deployment.yaml"
-          # Idempotent: `git commit` exits 1 on an empty index, so a run that
-          # finds the bump already applied failed the whole job and rang the
-          # CI-red alarm for a deploy that was fine (hyperguild#118). Two
-          # sources of a no-op run: a manual re-run, and the tag-push CI run
-          # that used to shadow the branch-push one for the same sha.
-          if git diff --cached --quiet; then
-            echo "Infra already at ${IMAGE_TAG} — nothing to commit"
-          else
           git commit -m "chore(deploy): ingestion → ${IMAGE_TAG}"
           GIT_SSH_COMMAND="ssh -i ~/.ssh/infra_deploy_key -o IdentitiesOnly=yes" \
             git push
+
           echo "Infra repo updated: ingestion → ${IMAGE_TAG}"
-          fi
 
       - name: Trigger Flux reconcile (immediate)
         run: |

.gitea/workflows/ci.yml

@@ -2,13 +2,8 @@ name: CI
 
 "on":
   push:
-    # Branch only. A `v*` tag here points at a commit main already tested, so
-    # the tag push re-ran the whole gate and — because cd.yml keys off "CI
-    # succeeded" — triggered a SECOND full image build and deploy for the same
-    # sha. That second deploy then died on "nothing to commit" (hyperguild#118).
-    # Nothing consumes a tag-triggered run: there is no release workflow, and
-    # cd.yml reads github.sha, not the tag.
     branches: [main]
+    tags: ["v*"]
   pull_request:
     branches: [main]
 

.githooks/pre-commit

@@ -1,34 +0,0 @@
-#!/usr/bin/env bash
-# Pre-commit secret scan for the hyperguild repo.
-#
-# task check -> security:gitleaks enforces this in CI, but CI is after the
-# push. This catches a staged secret before it ever leaves the machine --
-# the infra#39 rotation pass found exactly this class of leak (a printed
-# credential, committed, archived into git) and there was no local gate to
-# have caught it. Mirrors infra's own .githooks/pre-commit (infra#326).
-#
-# Enable once per clone:   git config core.hooksPath .githooks
-# Bypass if absolutely needed: git commit --no-verify
-
-set -euo pipefail
-
-GITLEAKS="$(command -v gitleaks || true)"
-if [[ -z "$GITLEAKS" && -x "$(go env GOPATH 2>/dev/null)/bin/gitleaks" ]]; then
-  GITLEAKS="$(go env GOPATH)/bin/gitleaks"
-fi
-
-if [[ -z "$GITLEAKS" ]]; then
-  echo "⚠ gitleaks not installed — skipping local secret scan (CI still enforces it)."
-  echo "  Install: go install github.com/zricethezav/gitleaks/v8@latest"
-  exit 0
-fi
-
-echo "→ Scanning staged changes for secrets..."
-if ! "$GITLEAKS" protect --staged --redact --config .gitleaks.toml >/dev/null 2>&1; then
-  echo "  ✗ gitleaks found a secret in the staged changes."
-  echo "    Review with: gitleaks protect --staged --redact --config .gitleaks.toml -v"
-  echo "    If it is a false positive, allowlist it in .gitleaks.toml or add a"
-  echo "    '# gitleaks:allow' comment. Do NOT --no-verify a real secret."
-  exit 1
-fi
-echo "  ✓ no staged secrets"

.gitleaks.toml

@@ -56,16 +56,8 @@ paths = [
   '''ingestion/internal/claudewatcher/watcher_test\.go$''',
 ]
 
-# infra#344: the allowlist that used to sit here is gone, and so is the reason
+[[allowlists]]
-# for it. It suppressed docs/superpowers/plans/2026-04-22-phase4-attempt-wiring.md
+description = "Literal placeholder word REDACTED matched as if it were a token (verified 2026-08-04: extracted Secret == 'REDACTED' exactly, gitleaks' curl-auth-header rule matched the placeholder text itself, not a real credential)"
-# on the stated grounds that "extracted Secret == 'REDACTED' exactly ... the
+condition = "AND"
-# placeholder text itself, not a real credential" (verified 2026-08-04). That was
+paths = ['''docs/superpowers/plans/2026-04-22-phase4-attempt-wiring\.md$''']
-# not what the file contained: line 1054 carried a real 40-char hex Gitea PAT in
+regexes = ['''REDACTED''']
-# an `Authorization: token ...` header. Confirmed dead by side-effect — GET
-# /api/v1/user with it returns 401 — and redacted in that file, so there is now
-# nothing to allowlist.
-#
-# The `paths` entry also made the block far broader than its description: gitleaks
-# ORs global allowlist clauses and ignores `condition = "AND"`, so the whole file
-# was immune, not just lines matching /REDACTED/. A live token added to that doc
-# would have been suppressed on the strength of a note about a different value.

.gitleaksignore

@@ -1,33 +0,0 @@
-# Historical gitleaks findings, dispositioned (infra#326 / infra#317).
-#
-# WHY THIS FILE AND NOT .gitleaks.toml:
-# This is a finding in git HISTORY, surfaced by the full-history audit
-# (`task security:gitleaks:history`). The working-tree scan that gates commits
-# (`task security:gitleaks`, the pre-commit hook, CI) is clean. Suppressing by
-# PATH in .gitleaks.toml would also blind the working-tree scan for that file
-# forever; a fingerprint pins one finding in one commit, so a NEW secret in the
-# same file still fires.
-#
-# History is not rewritten here, so the remediation for a real leak is
-# ROTATION -- making the committed value worthless -- never scrubbing.
-#
-# Dispositioned 2026-08-29. Re-check with: task security:gitleaks:history
-
-# --- Real credential, ALREADY DEAD -------------------------------------------
-# A Gitea PAT pasted into a CD-watching command in a planning doc
-# (`Authorization: token <40-hex>`, last_eight 3105a670).
-#
-# Verified dead 2026-08-29: authenticating against
-# GET https://git.d-ma.be/api/v1/user with this exact value returns 401, so the
-# committed token no longer grants anything. It was almost certainly invalidated
-# by the early-August rotation of the `mathias` PATs (the same rotation whose
-# fan-out caused infra#260, where CI copies of the old value kept failing).
-#
-# No rotation action outstanding. Kept as a fingerprint rather than removed from
-# history because history cannot be rewritten here.
-#
-# The generalisable lesson is recorded separately: a credential printed into a
-# doc/transcript is permanent, so the only remedy is rotating it -- which in
-# this case had already happened for unrelated reasons, by luck rather than by
-# the leak being noticed.
-c9310b1079478bf4430b0a2dfb25445d7ccc9b59:docs/superpowers/plans/2026-04-22-phase4-attempt-wiring.md:curl-auth-header:1053

AGENTS.md

@@ -48,30 +48,14 @@ These rules apply to every task across every project, regardless of harness.
    logical change (one tool, one fix, one test) with passing tests. Main is always
    deployable. Never create long-lived feature branches.
 
-   **The PR trigger is RISK, not concurrency.** `risk/low` work commits straight to
+   **Exception — parallel agents on same repo:** If another agent is known to be
-   main with CI as the gate — that is most work and is unchanged. `risk/medium` and
+   actively working on the same repo simultaneously, create a short-lived branch
-   above opens a PR, even solo, even with nobody waiting to review it. This mirrors
+   (`agent/<description>`), finish the task, and merge to main within the same
-   the tiered merge model in `assessor-loop`
+   session. Do not leave agent branches open between sessions.
-   `method/transfer-to-a-regulated-organisation.md` §4.1, so the estate practises
-   what it sells instead of merging everything on green and claiming otherwise.
 
-   **Concurrency is NOT a reason to branch.** Measured 2026-08-29 across three real
+   **Exception — external contributor or client four-eyes requirement:** Use
-   collisions between parallel sessions: two were not branching problems at all — a
+   PR flow only when a human reviewer outside the project is required. Document
-   generated artifact written to the same path by both (branching turns that into a
+   the reason in PROJECT.md.
-   merge conflict on a 33k-line JSON), and uncommitted work in a shared checkout
-   (a per-session worktree fixes it) — and the third was an ordinary non-fast-forward
-   push resolved by rebase in seconds. Use a worktree per session on shared repos and
-   timestamp generated artifacts. Do not reach for a branch.
-
-   Branch+PR flow carries documented costs on solo repos: merging auto-closes gated
-   issues, review comments live on a thread separate from the issue's, and a
-   merged-and-deleted branch cannot be amended (brain:
-   `gitea-pr-merge-autoclose-and-review-comment-footguns`). Those are the price of
-   the `risk/medium`+ lane — paid deliberately, not incurred by accident.
-
-   **Exception — external contributor or client four-eyes requirement:** Use PR flow
-   when a human reviewer outside the project is required. Document the reason in
-   PROJECT.md.
 
 6. **Close the loop — every substantive task ends with the same ritual.** Shipping
    the code is not the end of the task; capturing it is. Run this unprompted:
@@ -89,18 +73,6 @@ These rules apply to every task across every project, regardless of harness.
    - Surface the brain entries and issue numbers in the closing summary so the
      trail is auditable.
 
-   **Chat is not a durable store. Never rely on Mathias remembering anything.**
-   Every gap, caveat, risk, open question and next step must land in one of four
-   places before the turn ends: **the brain**, **a repo** (code, docs, ADR),
-   **a tracker issue**, or **a plan file**. A finding stated only in conversation is
-   lost the moment the session closes — and this estate has repeatedly proved that a
-   remembered convention is an unreliable control.
-
-   This applies hardest to what is tempting to leave as a closing remark: "worth
-   knowing X isn't enforced yet", "this is a convention, not a gate", "we should
-   revisit Y". Those are exactly the items that need a locator. If it is worth
-   saying in a summary, it is worth writing where it can be found again without you.
-
 ## CAD sprint patterns
 
 Two CAD sprint archetypes (defs: brain `wiki/homelab/decisions/continuous-agentic-development-cad-concept-2026-06-16`):
@@ -171,10 +143,10 @@ Three machines on Tailscale:
 |---------|------|-----------|
 | koala | GPU inference, heavy compute | RTX 5070, runs k3s + llama-swap + shared postgres18/pgvector |
 | iguana | Services, builds | M2 Ultra Mac |
-| flamingo | Daily driver, edge | Apple Silicon Mac, ~/dev is here |
+| flamingo | Daily driver, edge | Mac mini, ~/dev is here |
 
 - **Model routing**: LiteLLM in front of llama-swap (local) + cloud APIs (when permitted)
-- **Orchestration**: k3s on koala only — single control-plane node, no workers (verified 2026-08-30). iguana and flamingo are on the tailnet but are not cluster members
+- **Orchestration**: k3s cluster across all three machines
 - **Networking**: Tailscale mesh
 
 ## Project landscape
@@ -270,11 +242,10 @@ When working on a project tagged with a client name:
 
 ## Harness-agnostic principles
 
-Supported harnesses (2026-09-01) — Cursor and Aider were dropped; do not
+This context is designed to work with any AI coding tool:
-re-add adapters for them:
+- Claude Code, Cursor, Aider, Open WebUI, Charmbracelet Mods/Crush
-- Claude Code, Antigravity, OpenCode, Mistral Vibe, Crush, Pi Coding Agent
+- Pi Coding Agent, Mistral Vibe, Antigravity
-- Open WebUI, Charmbracelet Mods, or any tool that takes a system prompt string
+- Any tool that accepts a system prompt or reads a markdown context file
-- Any other tool that reads `AGENTS.md`, which is the de facto convention
 
 The canonical source is always `.context/AGENT.md` (root) and `.context/PROJECT.md` (per-project).
 Derived files are committed (see *How context propagates* below) so a `git pull` on any host yields full agent context with no setup.
@@ -286,29 +257,15 @@ Canonical sources of truth:
 - Project: `<repo>/.context/PROJECT.md` (per-repo)
 
 Derived files (committed, regenerated by `task context:sync`):
-- `CLAUDE.md`, `AGENTS.md`, `.context/system-prompt.txt`
+- `CLAUDE.md`, `AGENTS.md`, `.cursorrules`, `.aider.conventions.md`,
-
+  `.context/system-prompt.txt`
-Repos still carrying `.cursorrules`, `.aider.conventions.md` or
-`.aider.conf.yml` are stale: nothing regenerates them. Delete them the next time
-you touch the repo, along with their entries in that repo's `task check`
-assertion.
 
 Workflow:
 1. Edit a canonical file. Run `task context:sync`. Commit canonical and
    derived together. Push.
-2. On any other host, `git pull` brings both. Which file a harness reads does
+2. On any other host, `git pull` brings both. Claude Code (tree-walking)
-   NOT split cleanly by lookup strategy, so do not reason from the strategy:
+   uses `CLAUDE.md`; Crush / Pi / Antigravity (cwd-only) use `AGENTS.md`;
-   - `CLAUDE.md` — Claude Code (walks up the tree)
+   Cursor uses `.cursorrules`; Aider uses `.aider.conventions.md`.
-   - `AGENTS.md` — Crush, Pi, Antigravity (cwd-only), OpenCode (project root,
-     global at `~/.config/opencode/AGENTS.md`), and Mistral Vibe, which **walks
-     up** from cwd and takes the first `AGENTS.md` it finds
-     (user-level `~/.vibe/AGENTS.md`)
-   - `.context/system-prompt.txt` — Open WebUI, Mods, raw API calls; not read by
-     any harness, it is for pasting
-
-   Vibe tree-walks for `AGENTS.md`, so "tree-walkers use CLAUDE.md" is false.
-   Each repo's `AGENTS.md` embeds the canonical and is the first one found from
-   inside that repo, so this works — but by construction, not by luck.
 3. `task check` runs `context:sync` then asserts `git status --porcelain`
    is empty over the derived files (catches both modified-tracked drift
    and missing-untracked adapters). A drift fails the check with a
@@ -319,20 +276,7 @@ unconditionally on every host, every harness.
 
 ## Engineering Skills
 
-Shared engineering skills live in the **`mathias/skills`** repo (`git.d-ma.be/mathias/skills`). Load at task start — not "on demand" but on schedule, before writing code. Browse `SKILLS_INDEX.md` for the full list.
+Shared engineering skills live in the **`mathias/skills`** repo (`git.d-ma.be/mathias/skills`). Clone it to `~/dev/skills/` and run `SKILLS_CHECKOUT_DIR="$PWD" bash install.sh` there to wire every skill into your harnesses (Claude Code, Crush, Antigravity, Mistral Vibe) as native, on-demand skills. (Use `install.sh`, not `task install` — the latter is currently broken, skills#7.) Load at task start — not "on demand" but on schedule, before writing code. Browse `~/dev/skills/SKILLS_INDEX.md` for the full list.
-
-**Claude Code** installs the repo as a plugin from the marketplace the same repo hosts. That path also carries the `secret-guard` and `pre-task-ritual` hooks and the brain/gitea/infra MCP servers, which symlinks cannot:
-
-```
-/plugin marketplace add https://git.d-ma.be/mathias/skills.git
-/plugin install skills@mathias
-```
-
-Skills are **namespaced** under Claude Code: load `tdd` as `skills:tdd`. The trigger table below uses bare names — prefix them.
-
-**Crush, Pi and OpenCode** have no plugin system and are wired by `install.sh` as one directory symlink per harness via `~/.agents/skills`. Do not clone the checkout into `~/dev`: that folder is iCloud-shared between the Macs and spans two path roots (`/Users/mathias` vs `/home/mathias` on koala), so a checkout there is a git working tree with two concurrent writers, and any absolute symlink stored in it is broken on one side by construction (skills#23). Leave `SKILLS_CHECKOUT_DIR` at its host-local default.
-
-Check a host with `task doctor` in the skills repo; it also runs automatically at session start via the plugin.
 
 **Skill trigger table — load before starting, not after getting stuck:**
 

Procfile

@@ -1 +1,2 @@
 ingestion: cd ingestion && INGEST_BRAIN_DIR=../brain INGEST_PORT=3300 INGEST_WATCH_INTERVAL=30 go run ./cmd/server/
+supervisor: SUPERVISOR_CONFIG_DIR=./config/supervisor SUPERVISOR_MODELS_FILE=./config/models.yaml SUPERVISOR_SESSIONS_DIR=./brain/sessions INGEST_BASE_URL=http://localhost:3300 INGEST_SVC_URL=http://localhost:3300 go run ./cmd/supervisor/

README.md

@@ -5,11 +5,6 @@ Instead of letting Claude Code do whatever it wants, hyperguild enforces structu
 workflows (TDD red/green/refactor), logs every session, and accumulates learnings
 into a searchable brain.
 
-**This repo is also where `brain-mcp` lives** — the MCP server at
-`brain-mcp.d-ma.be` that `brain_query`, `brain_write`, `brain_read`, `brain_edit`
-and `capture` are served from. It is not a separate deployable; see
-[Where brain-mcp lives](#where-brain-mcp-lives).
-
 ## Hypothesis
 
 > We believe routing skill tasks through local models, backed by brain context,
@@ -25,7 +20,7 @@ usage, the fast-model routing path should be reconsidered.
 
 **hyperguild = Claude Code + MCP.** This is a supervisor for Claude Code sessions specifically.
 For multi-agent orchestration (OpenCode + LiteLLM, executor/reviewer pipelines), see
-[agentsquad](https://git.d-ma.be/mathias/agentsquad) — a separate harness for a different
+[agentsquad](http://gitea.d-ma.be/mathias/agentsquad) — a separate harness for a different
 orchestration model. Skills (mathias/skills) are shared between both.
 
 ## How it works
@@ -49,73 +44,6 @@ brain/
 └── knowledge/      — legacy flat notes (migration pending: hyperguild#22)
 ```
 
-## Where brain-mcp lives
-
-`brain-mcp` is served from **`ingestion/internal/mcp`** in this repo, at
-**`brain-mcp.d-ma.be`**. It is a component *inside* the `ingestion` service, not
-a standalone deployable — one pod in the `supervisor` namespace serves the MCP
-endpoint, the REST API, and the claudewatcher together.
-
-| You are looking for | It is here |
-|---|---|
-| The MCP tool surface (`brain_query`, `brain_write`, `brain_read`, `brain_edit`, `capture`, …) | `ingestion/internal/mcp` |
-| The HTTP/REST API (`/query`, `/write`, `/ingest`) | `ingestion/internal/api` |
-| Session ingestion from Claude Code transcripts | `ingestion/internal/claudewatcher` |
-| The brain *content* (notes, wings, halls) | [`mathias/brain`](https://git.d-ma.be/mathias/brain) — a separate repo |
-| Deployment manifests | `config/supervisor` |
-
-### Why it is not its own repo
-
-Asked and decided in [#91](https://git.d-ma.be/mathias/hyperguild/issues/91)
-(part 2). `internal/mcp` imports 17 of ingestion's other internal packages and
-has exactly one importer — it is the MCP facade over the service's own
-internals, so "move it out" resolves to renaming `ingestion`, publishing 17
-packages as a shared library, or maintaining a shim. The discoverability problem
-that prompted the question is answered by naming it here instead.
-
-Full reasoning, including the reversal trigger: brain
-`wiki/hyperguild/decisions/brain-mcp-stays-in-ingestion-fix-discoverability-by-name`.
-
-## Ingest revises, it does not overwrite
-
-Re-ingesting a source **merges into the page already on disk** rather than
-replacing it. Previously the write was unconditional, so a second ingest of the
-same source discarded everything accumulated since — including hand-written
-sections.
-
-The merge is deliberately asymmetric in the existing page's favour:
-
-| On the page | In the fresh extraction | Result |
-|---|---|---|
-| a section | the same section | **the on-disk version wins** |
-| — | a new section | added |
-| a bullet list (`Sources`, `Key Claims`, …) | more bullets | unioned, no duplicates |
-| an append section (`Open Questions`, `Updates`, …) | more lines | only genuinely new lines appended |
-| frontmatter | frontmatter | **the on-disk frontmatter wins** |
-
-So an extraction can add to a note but never silently rewrite what a human put
-there, which is what makes it safe to run on every ingest rather than behind a
-review gate.
-
-Re-ingesting unchanged content is **byte-identical** — no diff, so brain-sync
-does not commit noise that hides real edits.
-
-Two fields are **generator-owned** and do get refreshed on a revise:
-`last_updated` and `source_hash`. Everything else on disk wins. The boundary is
-an explicit allowlist, so a field nobody has thought about stays human-owned.
-
-## Re-ingesting an unchanged source is skipped
-
-Ingest stores `source_hash` — sha256 of the ingested **body**, frontmatter
-excluded — on the source page. A later ingest of the same source compares it
-first and skips extraction entirely when it matches, reporting the skip rather
-than doing it silently.
-
-Body-only is deliberate: a re-crawl that stamps a new fetch date has not changed
-the source, and treating that as drift would re-extract the corpus every time a
-crawler ran. A missing or unreadable hash always means "extract" — a missed skip
-costs one extraction, a wrong skip loses an update.
-
 ## Phase 1 tools (available now)
 
 | Tool | What it does |
@@ -130,7 +58,7 @@ costs one extraction, a wrong skip loses an update.
 | `tier` | Returns the current connectivity tier (1=cloud, 2=LAN, 3=offline) |
 
 > **Note:** `tdd_red/green/refactor` and `spec` were retired in Plan 7 (2026-05-12).
-> They are now SKILL.md files in [mathias/skills](https://git.d-ma.be/mathias/skills).
+> They are now SKILL.md files in [mathias/skills](http://gitea.d-ma.be/mathias/skills).
 
 ## Connect a project
 
@@ -219,7 +147,7 @@ The routing pod selects models per skill call based on historical pass rate:
 
 ## Open issues
 
-See [issues](https://git.d-ma.be/mathias/hyperguild/issues) — key open items:
+See [issues](http://gitea.d-ma.be/mathias/hyperguild/issues) — key open items:
 
 - **#25** — skills platform overhaul (audit first, then lazy loading + brain feedback loop)
 - **#24** — reduce context burn from skill listing

Taskfile.yml

@@ -21,7 +21,7 @@ tasks:
   # ── Development ────────────────────────────────────────────────────────────
 
   start:
-    desc: Start ingestion (requires goreman — go install github.com/mattn/goreman@latest)
+    desc: Start ingestion + supervisor (requires goreman — go install github.com/mattn/goreman@latest)
     cmds:
       - goreman start
 
@@ -32,6 +32,11 @@ tasks:
       - lsof -ti:3200 | xargs kill -9 2>/dev/null || true
       - echo "hyperguild stopped"
 
+  supervisor:dev:
+    desc: Run supervisor MCP server (development)
+    cmds:
+      - go run ./cmd/supervisor
+
   hyperguild:dev:
     desc: Run hyperguild CLI from source (e.g. task hyperguild:dev -- tier)
     cmds:
@@ -62,9 +67,14 @@ tasks:
   build:
     desc: Build all binaries
     cmds:
-      - task: hyperguild:build
+      - task: supervisor:build
       - task: ingestion:build
 
+  supervisor:build:
+    desc: Build supervisor binary
+    cmds:
+      - go build -trimpath -ldflags="-s -w -X main.version={{.VERSION}}" -o bin/supervisor ./cmd/supervisor
+
   ingestion:build:
     desc: Build ingestion server binary
     dir: ingestion
@@ -74,28 +84,10 @@ tasks:
   # ── Quality ────────────────────────────────────────────────────────────────
 
   check:
-    desc: Run all checks (context freshness + lint + test + vet + build) across all modules
+    desc: Run all checks (context freshness + lint + test + vet) across all modules
     cmds:
-      # Context sync is skipped under CI, matching dma-cli, gitea-mcp, and the
+      - task: context:sync
-      # rest of the estate. It is not a preference: context-sync.sh walks UP
-      # the tree for the canonical .context/AGENT.md, which lives in local-dev
-      # and does not exist on a CI runner. Without this guard, the script
-      # silently falls back to "project context only" and regenerates AGENTS.md
-      # and .context/system-prompt.txt shorter than their committed, correct
-      # versions -- so the drift assertion fails every CI run for a purely
-      # environmental reason, not real drift. Verified, not assumed: this is
-      # exactly what was happening here (AGENTS.md 430 lines committed vs. an
-      # 82-line regeneration on the runner).
-      #
-      # The cost is real and worth stating: drift is therefore only ever caught
-      # on a developer machine, or by infra's estate-wide context-sync-drift
-      # CronJob (ADR-0019), which does have canonical access and is the actual
-      # enforcement mechanism now.
       - cmd: |
-          if [ -n "${CI:-}" ]; then
-            echo "✓ context sync: skipped in CI (no canonical AGENT.md on the runner)"
-          else
-            bash scripts/context-sync.sh
           drift=$(git status --porcelain -- AGENTS.md CLAUDE.md .context/system-prompt.txt 2>/dev/null)
           if [ -n "$drift" ]; then
             echo "ERROR: derived adapters drifted from canonical context." >&2
@@ -106,16 +98,9 @@ tasks:
             exit 1
           fi
           echo "✓ context: canonical and adapters are in sync"
-          fi
       - task: lint
       - task: test
       - task: vet
-      # `build` is in the gate deliberately (hyperguild#120). vet and test walk
-      # ./... , which enumerates the packages that EXIST — so a build target
-      # naming a DELETED package is invisible to both. `task build` pointed at
-      # ./cmd/supervisor for months after that directory was removed, and CI
-      # stayed green the whole time because nothing in check ever built.
-      - task: build
       - task: security:gitleaks
 
   # ── Security ─────────────────────────────────────────────
@@ -169,6 +154,19 @@ tasks:
       - govulncheck ./... || true
       - cd ingestion && go vet ./...
 
+  supervisor:test:smoke:
+    desc: Smoke test supervisor via MCP (requires start running)
+    cmds:
+      - |
+        curl -s -X POST http://localhost:${SUPERVISOR_PORT:-3200}/mcp \
+          -H "Content-Type: application/json" \
+          -d '{"jsonrpc":"2.0","id":1,"method":"tools/list","params":{}}' | jq .
+
+  smoke:routing:
+    desc: Boot the routing pod against live LiteLLM + brain and verify _routing logs land
+    cmds:
+      - bash scripts/smoke-routing.sh
+
   # ── Git / Release ──────────────────────────────────────────────────────────
 
   tag:

config/models.yaml

@@ -0,0 +1,26 @@
+# Model selection — first entry per skill is used.
+# Override per-call by passing model in the MCP tool args.
+# Model names come from LiteLLM /v1/models (host/name format).
+
+default_chain:
+  - iguana/qwen3-coder-next
+
+skills:
+  tdd:
+    chain:
+      - koala/qwen3-coder-30b
+  review:
+    chain:
+      - iguana/devstral
+  debug:
+    chain:
+      - iguana/deepseek-r1-14b
+  spec:
+    chain:
+      - koala/phi4-14b
+  retrospective:
+    chain:
+      - iguana/qwen3-coder-next
+  trainer:
+    chain:
+      - iguana/qwen3-coder-next

docs/superpowers/plans/2026-04-22-phase4-attempt-wiring.md

@@ -1051,7 +1051,7 @@ git push
 ```bash
 # Poll until complete (replace RUN_ID with the new run):
 curl -s "https://gitea.d-ma.be/api/v1/repos/mathias/hyperguild/actions/runs?limit=2" \
-  -H "Authorization: token <REDACTED-dead-gitea-pat-infra#344>" \
+  -H "Authorization: token 736a8c36adcc6ecb41fff56e5ae4d0eb3105a670" \
   | python3 -c "import sys,json; [print(r['id'],r['status'],r.get('conclusion','—')) for r in json.load(sys.stdin)['workflow_runs']]"
 ```
 

ingestion/cmd/server/main.go

@@ -144,16 +144,6 @@ func envInt(key string, fallback int) int {
 	return fallback
 }
 
-// buildNotifier returns the ntfy notifier, or a nil interface when
-// BRAIN_NTFY_URL is unset. A nil *interface* (not a typed-nil) is required so
-// DegradingSink/Reconcile and the governance observer skip it cleanly.
-func buildNotifier() audit.Notifier {
-	if n := audit.NewNtfyNotifier(os.Getenv("BRAIN_NTFY_URL"), os.Getenv("BRAIN_NTFY_TOKEN")); n != nil {
-		return n
-	}
-	return nil
-}
-
 // buildAuditSink selects the capture audit sink. When BRAIN_LOKI_URL is
 // set it builds the classification-aware DegradingSink (loki central +
 // durable file buffer + optional ntfy) and starts the reconcile loop;
@@ -171,7 +161,12 @@ func buildAuditSink(ctx context.Context, brainDir string, logger *slog.Logger) c
 		logger.Error("capture audit buffer init", "err", err)
 		os.Exit(1)
 	}
-	notifier := buildNotifier()
+	// Keep notifier as a nil interface (not a typed-nil) when unconfigured
+	// so DegradingSink/Reconcile skip it cleanly.
+	var notifier audit.Notifier
+	if n := audit.NewNtfyNotifier(os.Getenv("BRAIN_NTFY_URL"), os.Getenv("BRAIN_NTFY_TOKEN")); n != nil {
+		notifier = n
+	}
 	reconcileInterval := time.Duration(envInt("BRAIN_AUDIT_RECONCILE_INTERVAL", 60)) * time.Second
 	audit.StartReconcile(ctx, central, buffer, notifier, reconcileInterval)
 	logger.Info("capture audit: loki+buffer sink", "loki", lokiURL, "reconcile_s", int(reconcileInterval.Seconds()))
@@ -236,11 +231,6 @@ func main() {
 			fallbackModel := envOr("BRAIN_LLM_FALLBACK_MODEL", "gemma4:31b")
 			router.Fallback = llm.New(fallbackURL, "", fallbackModel, timeout)
 		}
-		if tertiaryURL := os.Getenv("BRAIN_LLM_TERTIARY_URL"); tertiaryURL != "" {
-			tertiaryModel := envOr("BRAIN_LLM_TERTIARY_MODEL", "gemini-2.5-flash")
-			tertiaryKey := os.Getenv("GEMINI_API_KEY")
-			router.Tertiary = llm.New(tertiaryURL, tertiaryKey, tertiaryModel, timeout)
-		}
 		answerComplete = router.Complete
 		logger.Info("brain answer LLM configured", "primary", primaryURL, "model", primaryModel)
 	}
@@ -396,29 +386,6 @@ func main() {
 		}
 		host := envOr("CLAUDE_INGEST_HOST", systemHostname())
 		interval := time.Duration(envInt("CLAUDE_INGEST_INTERVAL", 60)) * time.Second
-
-		// Project directories excluded from ingestion entirely, as globs
-		// against the project directory name — e.g.
-		// "*cobalt-dingo*,*claude-worktrees-bridge-cse*".
-		//
-		// This is a veto list, deliberately named as one. It complements the
-		// client-name scrubber rather than replacing it: the scrubber drops
-		// individual TURNS whose content matches, while this never opens a
-		// project's files at all. Sessions working on live company financials
-		// are excluded here because their content is confidential in ways no
-		// pattern reliably recognises, and their learnings are captured
-		// deliberately through the session-close ritual instead.
-		//
-		// Caveat worth knowing: a project directory is derived from the
-		// session's WORKING DIRECTORY, not from the repositories it touches.
-		// A session run from ~/dev that happens to read a skipped repo will
-		// NOT be excluded by this. The scrubber remains the control for
-		// content; this is a control for whole workspaces.
-		skipProjects := splitList(os.Getenv("CLAUDE_INGEST_SKIP_PROJECTS"))
-		if len(skipProjects) > 0 {
-			logger.Info("claudewatcher: projects excluded from ingestion", "patterns", skipProjects)
-		}
-
 		sink := &claudeSink{brainDir: brainDir, logger: logger}
 		go func() {
 			if err := claudewatcher.Watch(ctx, claudewatcher.Config{
@@ -428,7 +395,6 @@ func main() {
 				Sink:        sink,
 				Cursors:     cursorStore,
 				Logger:      logger,
-				SkipProjects: skipProjects,
 			}); err != nil && err != context.Canceled {
 				logger.Error("claudewatcher exited", "err", err)
 			}
@@ -524,13 +490,7 @@ func main() {
 		// the existing /mcp OAuth connector. mcpSrv is already wrapped above;
 		// WithCapture mutates the same instance, so the tool appears live.
 		mcpSrv.WithCapture(captureSvc, jwtValidator, mcpToken, "local-cli", resolver)
-		// hyperguild#97: a governance-file rewrite gets the same trail a
+		logger.Info("capture enabled (REST + MCP tool)", "sovereign_principals", len(sovereign))
-		// capture already gets, plus an out-of-band alert. Wired here because
-		// brain_edit_root needs the capture plumbing anyway — that is what
-		// re-derives the static principal its gate checks.
-		mcpSrv.WithGovernanceObserver(auditSink, buildNotifier())
-		logger.Info("capture enabled (REST + MCP tool)", "sovereign_principals", len(sovereign),
-			"governance_observer", true)
 	} else {
 		logger.Info("capture endpoint disabled (BRAIN_GITEA_TOKEN unset)")
 	}

ingestion/internal/api/handler.go

@@ -12,7 +12,6 @@ import (
 	"time"
 
 	"github.com/mathiasbq/hyperguild/ingestion/internal/brain"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/claim"
 	"github.com/mathiasbq/hyperguild/ingestion/internal/extract"
 	"github.com/mathiasbq/hyperguild/ingestion/internal/pipeline"
 	"github.com/mathiasbq/hyperguild/ingestion/internal/search"
@@ -133,16 +132,6 @@ func WriteNote(brainDir string, opts WriteNoteOptions) (string, error) {
 		return "", fmt.Errorf("content is required")
 	}
 
-	// In the primitive, not in a caller: POST /write reaches here directly,
-	// without the BrainStore, and a gate one door wide is not a gate.
-	// BrainStore still calls the strip itself to report Ref.Unlinked; the
-	// second pass is a no-op on already-clean content.
-	clean, _, err := brain.StripUnresolvedLinks(brainDir, opts.Content)
-	if err != nil {
-		return "", err
-	}
-	opts.Content = clean
-
 	if opts.Wing != "" && opts.Hall != "" {
 		return writeHallNote(brainDir, opts)
 	}
@@ -163,24 +152,15 @@ func writeHallNote(brainDir string, opts WriteNoteOptions) (string, error) {
 	if err != nil {
 		return "", err
 	}
+	if err := os.MkdirAll(filepath.Dir(dest), 0o755); err != nil {
+		return "", fmt.Errorf("create hall dir: %w", err)
+	}
+
 	existingFields, body := splitFrontmatter(opts.Content)
 	existingByKey := make(map[string]frontmatterField, len(existingFields))
 	for _, f := range existingFields {
 		existingByKey[f.key] = f
 	}
-
-	// Validate the claim-property envelope BEFORE creating the directory, so a
-	// rejected write leaves nothing behind — not even an empty hall dir
-	// (brain#21). Fail closed: a value outside the enum is worse than an absent
-	// one, because a lint skips what it cannot parse and the note then reads as
-	// classified while nothing acts on it.
-	if err := claim.ValidateEnvelope(scalarValues(existingFields)); err != nil {
-		return "", fmt.Errorf("claim envelope: %w", err)
-	}
-
-	if err := os.MkdirAll(filepath.Dir(dest), 0o755); err != nil {
-		return "", fmt.Errorf("create hall dir: %w", err)
-	}
 	emitted := make(map[string]bool, 6)
 
 	var fm strings.Builder
@@ -238,25 +218,6 @@ func writeHallNote(brainDir string, opts WriteNoteOptions) (string, error) {
 	return filepath.ToSlash(rel), nil
 }
 
-// scalarValues flattens frontmatter fields to key -> scalar value for
-// validation. Multi-line values (lists, nested blocks) yield the text after
-// the colon on the first line, which is empty for a list — correct here,
-// since every claim-property field is a scalar enum.
-func scalarValues(fields []frontmatterField) map[string]string {
-	out := make(map[string]string, len(fields))
-	for _, f := range fields {
-		if len(f.lines) == 0 {
-			continue
-		}
-		_, value, found := strings.Cut(f.lines[0], ":")
-		if !found {
-			continue
-		}
-		out[f.key] = strings.TrimSpace(value)
-	}
-	return out
-}
-
 // frontmatterField is one top-level YAML key from a frontmatter block,
 // along with its raw line and any indented continuation lines (e.g. a
 // bulleted list value spanning multiple lines).

ingestion/internal/api/handler_test.go

@@ -440,102 +440,3 @@ func TestIngestPath_Directory(t *testing.T) {
 	require.True(t, ok, "pages must be an array")
 	assert.NotEmpty(t, pagesSlice)
 }
-
-// --- brain#21: claim-property envelope on the write path -------------------
-
-func TestWriteNote_PreservesClaimEnvelopeVerbatim(t *testing.T) {
-	// writeHallNote already passes unknown keys through; this pins that
-	// behaviour for the envelope specifically, so a future refactor of the
-	// merge loop cannot silently drop it.
-	dir := t.TempDir()
-
-	rel, err := api.WriteNote(dir, api.WriteNoteOptions{
-		Content: "---\nhalf_life: durable\napplies: universal\nclaim_provenance: asserted\n---\n\nA durable claim.\n",
-		Wing:    "homelab",
-		Hall:    "decisions",
-	})
-	require.NoError(t, err)
-
-	got, err := os.ReadFile(filepath.Join(dir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	assert.Contains(t, string(got), "half_life: durable")
-	assert.Contains(t, string(got), "applies: universal")
-	assert.Contains(t, string(got), "claim_provenance: asserted")
-}
-
-func TestWriteNote_RejectsInvalidClaimEnvelopeAndWritesNothing(t *testing.T) {
-	// Fail closed: a value outside the enum must not land. A lint skips what
-	// it cannot parse, so an unvalidated write produces a note that reads as
-	// classified while nothing acts on it.
-	dir := t.TempDir()
-
-	_, err := api.WriteNote(dir, api.WriteNoteOptions{
-		Content:  "---\nhalf_life: forever\nclaim_provenance: asserted\n---\n\nBody.\n",
-		Filename: "bad-envelope",
-		Wing:     "homelab",
-		Hall:     "facts",
-	})
-	require.Error(t, err)
-	assert.Contains(t, err.Error(), "half_life")
-
-	_, statErr := os.Stat(filepath.Join(dir, "wiki/homelab/facts/bad-envelope.md"))
-	assert.True(t, os.IsNotExist(statErr), "a rejected write must leave no file behind")
-}
-
-func TestWriteNote_RejectsClaimFieldWithoutProvenance(t *testing.T) {
-	dir := t.TempDir()
-
-	_, err := api.WriteNote(dir, api.WriteNoteOptions{
-		Content:  "---\napplies: homelab\n---\n\nBody.\n",
-		Filename: "no-provenance",
-		Wing:     "homelab",
-		Hall:     "facts",
-	})
-	require.Error(t, err)
-	assert.Contains(t, err.Error(), "claim_provenance")
-
-	_, statErr := os.Stat(filepath.Join(dir, "wiki/homelab/facts/no-provenance.md"))
-	assert.True(t, os.IsNotExist(statErr))
-}
-
-// The HTTP POST /write door reaches WriteNote directly, without the
-// BrainStore, so the unresolved-wikilink strip has to live in the primitive
-// or that door stays ungated.
-func TestWriteNote_UnwrapsUnresolvedWikilinks(t *testing.T) {
-	dir := t.TempDir()
-	_, err := api.WriteNote(dir, api.WriteNoteOptions{
-		Content: "# Target\n\nbody\n", Filename: "target", Wing: "a", Hall: "facts",
-	})
-	require.NoError(t, err)
-
-	rel, err := api.WriteNote(dir, api.WriteNoteOptions{
-		Content:  "See [[target]] and [[gitea-ci]].\n",
-		Filename: "src", Wing: "a", Hall: "facts",
-	})
-	require.NoError(t, err)
-
-	got, err := os.ReadFile(filepath.Join(dir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	assert.Contains(t, string(got), "[[target]]")
-	assert.Contains(t, string(got), "and gitea-ci.")
-	assert.NotContains(t, string(got), "[[gitea-ci]]")
-}
-
-func TestUpdateNote_UnwrapsUnresolvedWikilinks(t *testing.T) {
-	dir := t.TempDir()
-	_, err := api.WriteNote(dir, api.WriteNoteOptions{
-		Content: "old\n", Filename: "n", Wing: "a", Hall: "facts",
-	})
-	require.NoError(t, err)
-
-	rel, _, _, err := api.UpdateNote(dir, api.UpdateNoteOptions{
-		Wing: "a", Hall: "facts", Slug: "n",
-		Content: "Related: [[secret-hygiene]].\n", Reason: "r",
-	})
-	require.NoError(t, err)
-
-	got, err := os.ReadFile(filepath.Join(dir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	assert.Contains(t, string(got), "Related: secret-hygiene.")
-	assert.NotContains(t, string(got), "[[secret-hygiene]]")
-}

ingestion/internal/api/update.go

@@ -10,7 +10,6 @@ import (
 	"time"
 
 	"github.com/mathiasbq/hyperguild/ingestion/internal/brain"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/claim"
 )
 
 // ContentHash returns the lowercase hex sha256 of b. It is the note's
@@ -65,14 +64,6 @@ func UpdateNote(brainDir string, opts UpdateNoteOptions) (relPath, contentHash,
 		return "", "", "", fmt.Errorf("content is required")
 	}
 
-	// Same reason as WriteNote: the strip belongs in the primitive so every
-	// door inherits it.
-	clean, _, err := brain.StripUnresolvedLinks(brainDir, opts.Content)
-	if err != nil {
-		return "", "", "", err
-	}
-	opts.Content = clean
-
 	var rel string
 	if opts.Path != "" {
 		rel = opts.Path
@@ -99,47 +90,14 @@ func UpdateNote(brainDir string, opts UpdateNoteOptions) (relPath, contentHash,
 	}
 	priorHash = ContentHash(prior)
 
-	// A caller may lead opts.Content with its own frontmatter fence to set or
-	// change fields on supersede (e.g. the claim envelope). Split it off
-	// before it reaches the body — left un-split, it would render as a
-	// second, inert `---`-fenced block of literal text rather than taking
-	// effect, and any claim-envelope fields inside it would reach disk
-	// unvalidated (hyperguild#111: the same rule that guards note birth in
-	// writeHallNote must guard a change to the same fields).
-	contentFM, contentBody := parseFrontmatter(opts.Content)
-
 	fm, _ := parseFrontmatter(string(prior))
-	for _, l := range contentFM.lines {
-		if l.key != "" {
-			fm.set(l.key, l.value)
-		}
-	}
 	fm.set("updated_at", time.Now().UTC().Format(time.RFC3339))
 	fm.set("supersedes", priorHash)
 	if opts.Reason != "" {
 		fm.set("supersede_reason", opts.Reason)
 	}
 
-	// Validate the envelope AFTER the merge, against the full field set that
+	out := []byte(fm.render() + opts.Content)
-	// is about to reach disk — not just the caller's fragment. Validating the
-	// fragment alone would miss a caller that supersedes claim_provenance to
-	// empty while half_life/applies survive untouched from the prior note:
-	// each side looks individually fine, but the merged result is an
-	// unprovenanced envelope, which is the exact laundering this check
-	// exists to catch. (Caught in review before merge, not filed after —
-	// worth being honest about in the history: this second pass was the
-	// actual fix; the first one validated the wrong document.)
-	envelope := make(map[string]string, len(fm.lines))
-	for _, l := range fm.lines {
-		if l.key != "" {
-			envelope[l.key] = l.value
-		}
-	}
-	if err := claim.ValidateEnvelope(envelope); err != nil {
-		return "", "", "", fmt.Errorf("claim envelope: %w", err)
-	}
-
-	out := []byte(fm.render() + contentBody)
 	if err := os.WriteFile(abs, out, 0o644); err != nil {
 		return "", "", "", fmt.Errorf("write: %w", err)
 	}

ingestion/internal/api/update_test.go

@@ -52,114 +52,6 @@ func TestUpdateNoteSupersedesAndStamps(t *testing.T) {
 	assert.Contains(t, s, "supersede_reason: facts changed")
 }
 
-func TestUpdateNoteRejectsInvalidEnvelopeAndWritesNothing(t *testing.T) {
-	// hyperguild#111: WriteNote validates the claim envelope before create;
-	// UpdateNote didn't before supersede, so the same rule must hold on
-	// change as on birth, fail-closed, nothing written on rejection.
-	brainDir := t.TempDir()
-	original := "---\nwing: jepa-fx\nhall: facts\ncreated_at: 2026-01-01T00:00:00Z\n---\n# Old\n\nold body\n"
-	rel := seedNote(t, brainDir, "wiki/jepa-fx/facts/val-vol.md", original)
-
-	_, _, _, err := UpdateNote(brainDir, UpdateNoteOptions{
-		Path:    rel,
-		Content: "---\nhalf_life: forever\n---\n# New\n\nnew body\n",
-	})
-	require.Error(t, err)
-	assert.Contains(t, err.Error(), "claim envelope")
-
-	got, err := os.ReadFile(filepath.Join(brainDir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	assert.Equal(t, original, string(got), "rejected update must leave the note byte-identical")
-}
-
-func TestUpdateNoteRejectsAppliesWithoutProvenance(t *testing.T) {
-	brainDir := t.TempDir()
-	original := "---\nwing: jepa-fx\nhall: facts\n---\nold\n"
-	rel := seedNote(t, brainDir, "wiki/jepa-fx/facts/val-vol.md", original)
-
-	_, _, _, err := UpdateNote(brainDir, UpdateNoteOptions{
-		Path:    rel,
-		Content: "---\napplies: universal\n---\nnew\n",
-	})
-	require.Error(t, err)
-	assert.Contains(t, err.Error(), "claim envelope")
-
-	got, err := os.ReadFile(filepath.Join(brainDir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	assert.Equal(t, original, string(got))
-}
-
-func TestUpdateNoteAcceptsValidEnvelopeAndMergesIntoFrontmatter(t *testing.T) {
-	brainDir := t.TempDir()
-	rel := seedNote(t, brainDir, "wiki/jepa-fx/facts/val-vol.md",
-		"---\nwing: jepa-fx\nhall: facts\ncreated_at: 2026-01-01T00:00:00Z\n---\nold\n")
-
-	_, _, _, err := UpdateNote(brainDir, UpdateNoteOptions{
-		Path:    rel,
-		Content: "---\nhalf_life: durable\napplies: universal\nclaim_provenance: asserted\n---\nnew body\n",
-	})
-	require.NoError(t, err)
-
-	got, err := os.ReadFile(filepath.Join(brainDir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	s := string(got)
-	assert.Contains(t, s, "half_life: durable")
-	assert.Contains(t, s, "applies: universal")
-	assert.Contains(t, s, "claim_provenance: asserted")
-	assert.Contains(t, s, "wing: jepa-fx", "prior fields survive")
-	assert.Contains(t, s, "new body")
-	assert.Equal(t, 2, strings.Count(s, "---\n"),
-		"exactly one open+close fence pair — the caller's own fence must not leak in as a second, inert block")
-}
-
-func TestUpdateNoteRejectsClearingProvenanceWhileEnvelopeSurvives(t *testing.T) {
-	// Found in review, not written speculatively: validating only the
-	// caller's fragment (rather than the merged result) let a caller blank
-	// out claim_provenance alone while half_life/applies survived from the
-	// prior note untouched — each side looks fine on its own, the merged
-	// envelope on disk is the unprovenanced one the whole check exists to
-	// catch.
-	brainDir := t.TempDir()
-	original := "---\nwing: jepa-fx\nhall: facts\nhalf_life: durable\napplies: universal\nclaim_provenance: asserted\n---\nold\n"
-	rel := seedNote(t, brainDir, "wiki/jepa-fx/facts/val-vol.md", original)
-
-	_, _, _, err := UpdateNote(brainDir, UpdateNoteOptions{
-		Path:    rel,
-		Content: "---\nclaim_provenance: \n---\nnew body\n",
-	})
-	require.Error(t, err)
-	assert.Contains(t, err.Error(), "claim envelope")
-
-	got, err := os.ReadFile(filepath.Join(brainDir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	assert.Equal(t, original, string(got), "rejected update must leave the note byte-identical")
-}
-
-func TestUpdateNoteWithoutEnvelopeFieldsIsUnchangedFromToday(t *testing.T) {
-	// Regression pin: plain fence-less content (the common case) must behave
-	// exactly as it did before the envelope-merge fix.
-	brainDir := t.TempDir()
-	rel := seedNote(t, brainDir, "wiki/jepa-fx/facts/val-vol.md",
-		"---\nwing: jepa-fx\nhall: facts\ncreated_at: 2026-01-01T00:00:00Z\ncustom: keep-me\n---\n# Old\n\nold body\n")
-
-	relPath, hash, priorHash, err := UpdateNote(brainDir, UpdateNoteOptions{
-		Path:    rel,
-		Content: "# New\n\nnew body\n",
-		Reason:  "facts changed",
-	})
-	require.NoError(t, err)
-	assert.Equal(t, rel, relPath)
-	assert.NotEmpty(t, hash)
-	assert.NotEqual(t, hash, priorHash)
-
-	got, err := os.ReadFile(filepath.Join(brainDir, filepath.FromSlash(rel)))
-	require.NoError(t, err)
-	s := string(got)
-	assert.Contains(t, s, "# New")
-	assert.Contains(t, s, "custom: keep-me")
-	assert.Contains(t, s, "supersedes: "+priorHash)
-}
-
 func TestUpdateNoteResolvesByWingHallSlug(t *testing.T) {
 	brainDir := t.TempDir()
 	seedNote(t, brainDir, "wiki/jepa-fx/facts/val-vol.md",

ingestion/internal/brain/linkcheck.go

@@ -1,157 +0,0 @@
-package brain
-
-import (
-	"fmt"
-	"os"
-	"path/filepath"
-	"regexp"
-	"sort"
-	"strings"
-)
-
-// wikilinkRE matches [[target]] and [[target|Display Text]].
-var wikilinkRE = regexp.MustCompile(`\[\[([^\]|]+)(?:\|([^\]]*))?\]\]`)
-
-// fencedCodeRE and inlineCodeRE mark the regions where a [[...]] is a
-// syntax example rather than a link. Same exclusion brain-gardener's audit
-// applies on the read side, so the write gate and the audit agree on what
-// counts as a link at all.
-var (
-	fencedCodeRE = regexp.MustCompile("(?s)```.*?```")
-	inlineCodeRE = regexp.MustCompile("`[^`\n]*`")
-)
-
-// StripUnresolvedLinks unwraps every [[wikilink]] in content whose target
-// resolves to no entry under knowledge/ or wiki/, leaving the link's display
-// text (or its target) as plain prose. It returns the rewritten content and
-// the sorted, de-duplicated targets it unwrapped.
-//
-// WHY UNWRAP RATHER THAN REJECT THE WRITE
-// Agents write [[...]] around anything that feels related — a skill name, a
-// repo, an agent-local memory file — and none of those are brain entries.
-// Every one of those becomes a permanent [high] broken-link finding that no
-// deterministic Fixer can repair, because there is no target to repoint to:
-// the brain-audit digest grew from 19 to 63 high findings between 2026-08-26
-// and 2026-09-16, and 53 of the 63 were exactly this. Rejecting the write
-// instead would push the failure onto claudewatcher's unattended ingest path,
-// where a refused write is a lost learning. Unwrapping keeps the author's
-// words, keeps the write, and keeps the graph honest.
-//
-// An empty corpus (no knowledge/ or wiki/ yet, or a misconfigured brainDir)
-// returns content unchanged: nothing resolving is a bootstrap state, not
-// evidence that every target was invented.
-func StripUnresolvedLinks(brainDir, content string) (string, []string, error) {
-	index, err := entryIndex(brainDir)
-	if err != nil {
-		return "", nil, err
-	}
-	if len(index) == 0 {
-		return content, nil, nil
-	}
-
-	code := codeSpans(content)
-	stripped := map[string]struct{}{}
-
-	var b strings.Builder
-	last := 0
-	for _, m := range wikilinkRE.FindAllStringSubmatchIndex(content, -1) {
-		start, end := m[0], m[1]
-		if overlaps(start, end, code) {
-			continue
-		}
-		target := strings.TrimSpace(content[m[2]:m[3]])
-		if _, ok := index[linkKey(target)]; ok {
-			continue
-		}
-		display := target
-		if m[4] >= 0 {
-			if d := strings.TrimSpace(content[m[4]:m[5]]); d != "" {
-				display = d
-			}
-		}
-		b.WriteString(content[last:start])
-		b.WriteString(display)
-		last = end
-		stripped[target] = struct{}{}
-	}
-	if last == 0 {
-		return content, nil, nil
-	}
-	b.WriteString(content[last:])
-
-	targets := make([]string, 0, len(stripped))
-	for t := range stripped {
-		targets = append(targets, t)
-	}
-	sort.Strings(targets)
-	return b.String(), targets, nil
-}
-
-// linkedTrees are the two trees that hold linkable entries — the same pair
-// package notes admits under ScopeNotes. Duplicated rather than imported
-// because that list is unexported there and this is a read-only mirror.
-var linkedTrees = []string{"knowledge", "wiki"}
-
-// entryIndex maps every form a wikilink may name an entry by — its bare slug
-// and its path form (wiki/<wing>/<hall>/<slug>.md -> wing/hall/slug) — to a
-// present marker. Mirrors brain-gardener's resolver so an accepted link is
-// one the audit will also resolve.
-func entryIndex(brainDir string) (map[string]struct{}, error) {
-	index := map[string]struct{}{}
-	for _, dir := range linkedTrees {
-		root := filepath.Join(brainDir, dir)
-		if _, err := os.Stat(root); os.IsNotExist(err) {
-			continue
-		} else if err != nil {
-			return nil, fmt.Errorf("stat %s: %w", dir, err)
-		}
-		err := filepath.WalkDir(root, func(path string, d os.DirEntry, err error) error {
-			if err != nil {
-				return err
-			}
-			if d.IsDir() || !strings.HasSuffix(path, ".md") {
-				return nil
-			}
-			rel, err := filepath.Rel(brainDir, path)
-			if err != nil {
-				return err
-			}
-			rel = filepath.ToSlash(rel)
-			index[strings.TrimSuffix(filepath.Base(rel), ".md")] = struct{}{}
-			index[strings.TrimPrefix(strings.TrimSuffix(rel, ".md"), "wiki/")] = struct{}{}
-			return nil
-		})
-		if err != nil {
-			return nil, fmt.Errorf("walk %s: %w", dir, err)
-		}
-	}
-	return index, nil
-}
-
-// linkKey normalises a link target for index lookup: an exact path form is
-// tried as written, and anything else falls back to its final segment.
-func linkKey(target string) string {
-	return strings.TrimSuffix(target, ".md")
-}
-
-// codeSpans returns the byte ranges of fenced blocks and inline code spans.
-func codeSpans(content string) [][2]int {
-	var spans [][2]int
-	for _, m := range fencedCodeRE.FindAllStringIndex(content, -1) {
-		spans = append(spans, [2]int{m[0], m[1]})
-	}
-	for _, m := range inlineCodeRE.FindAllStringIndex(content, -1) {
-		spans = append(spans, [2]int{m[0], m[1]})
-	}
-	return spans
-}
-
-// overlaps reports whether [start,end) intersects any span.
-func overlaps(start, end int, spans [][2]int) bool {
-	for _, s := range spans {
-		if start < s[1] && end > s[0] {
-			return true
-		}
-	}
-	return false
-}

ingestion/internal/brain/linkcheck_test.go

@@ -1,93 +0,0 @@
-package brain_test
-
-import (
-	"testing"
-
-	"github.com/mathiasbq/hyperguild/ingestion/internal/brain"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// seedCorpus writes the two entries every linkcheck case resolves against.
-func seedCorpus(t *testing.T, dir string) {
-	t.Helper()
-	seedNote(t, dir, "wiki/homelab/facts/real-entry.md",
-		"---\nwing: homelab\nhall: facts\ntitle: 'Real entry'\n---\n\nbody.\n")
-	seedNote(t, dir, "knowledge/legacy-entry.md",
-		"---\ntitle: 'Legacy entry'\n---\n\nbody.\n")
-}
-
-func TestStripUnresolvedLinks(t *testing.T) {
-	tests := []struct {
-		name     string
-		body     string
-		want     string
-		stripped []string
-	}{
-		{
-			name: "bare slug that resolves is kept",
-			body: "See [[real-entry]] for the rule.",
-			want: "See [[real-entry]] for the rule.",
-		},
-		{
-			name: "path-style target that resolves is kept",
-			body: "See [[homelab/facts/real-entry]].",
-			want: "See [[homelab/facts/real-entry]].",
-		},
-		{
-			name: "knowledge/ entry resolves by bare slug",
-			body: "See [[legacy-entry]].",
-			want: "See [[legacy-entry]].",
-		},
-		{
-			name:     "unresolvable target is unwrapped to plain text",
-			body:     "Related: [[secret-hygiene]].",
-			want:     "Related: secret-hygiene.",
-			stripped: []string{"secret-hygiene"},
-		},
-		{
-			name:     "unresolvable aliased target keeps its display text",
-			body:     "Related: [[feedback_check_host_not_assume|check the host]].",
-			want:     "Related: check the host.",
-			stripped: []string{"feedback_check_host_not_assume"},
-		},
-		{
-			name: "link inside a fenced code block is left alone",
-			body: "Syntax:\n\n```\n[[wing/hall/slug]]\n```\n",
-			want: "Syntax:\n\n```\n[[wing/hall/slug]]\n```\n",
-		},
-		{
-			name: "link inside an inline code span is left alone",
-			body: "Write `[[wing/hall/slug]]` to link.",
-			want: "Write `[[wing/hall/slug]]` to link.",
-		},
-		{
-			name:     "every unresolvable target is reported once, sorted",
-			body:     "[[zeta-gap]] and [[alpha-gap]] and [[zeta-gap]] again.",
-			want:     "zeta-gap and alpha-gap and zeta-gap again.",
-			stripped: []string{"alpha-gap", "zeta-gap"},
-		},
-	}
-
-	for _, tc := range tests {
-		t.Run(tc.name, func(t *testing.T) {
-			dir := t.TempDir()
-			seedCorpus(t, dir)
-
-			got, stripped, err := brain.StripUnresolvedLinks(dir, tc.body)
-			require.NoError(t, err)
-			assert.Equal(t, tc.want, got)
-			assert.Equal(t, tc.stripped, stripped)
-		})
-	}
-}
-
-func TestStripUnresolvedLinks_MissingBrainDirIsNotAGate(t *testing.T) {
-	// A brain dir with no knowledge//wiki/ tree yet must not turn every link
-	// into an unresolved one — an empty corpus is a bootstrap state, not
-	// evidence that the author invented the target.
-	got, stripped, err := brain.StripUnresolvedLinks(t.TempDir(), "See [[real-entry]].")
-	require.NoError(t, err)
-	assert.Equal(t, "See [[real-entry]].", got)
-	assert.Nil(t, stripped)
-}

ingestion/internal/brain/tunnel.go

@@ -54,24 +54,11 @@ func DetectTunnels(brainDir, content string) ([]TunnelCandidate, error) {
 			return nil
 		}
 		title, _ := readTitleAndCreated(path, strings.TrimSuffix(d.Name(), ".md"))
-		title = strings.TrimSpace(title)
+		needle := strings.ToLower(strings.TrimSpace(title))
-		if title == "" {
+		if needle == "" {
 			return nil
 		}
-
+		idx := strings.Index(lowerContent, needle)
-		// A one-word title has to match the prose case-exactly. Matched
-		// case-insensitively, it links every entry that happens to use the
-		// word: "WRONG" (wiki/telos/decisions/wrong.md) collected 185 inbound
-		// See-also links and "Status" 136, making the two most-linked nodes in
-		// the graph artifacts of the English language rather than references.
-		// Multi-word titles keep the case-insensitive match — "risk tier
-		// middleware" in prose is a real mention however it is capitalised,
-		// and a three-word collision is not an accident.
-		haystack, needle := lowerContent, strings.ToLower(title)
-		if isSingleWord(title) {
-			haystack, needle = content, title
-		}
-		idx := strings.Index(haystack, needle)
 		if idx == -1 {
 			return nil
 		}
@@ -82,7 +69,7 @@ func DetectTunnels(brainDir, content string) ([]TunnelCandidate, error) {
 		out = append(out, TunnelCandidate{
 			TargetPath:  filepath.ToSlash(rel),
 			MatchedTerm: title,
-			Exact:       isWholeWord(haystack, idx, len(needle)),
+			Exact:       isWholeWord(lowerContent, idx, len(needle)),
 		})
 		return nil
 	})
@@ -92,11 +79,6 @@ func DetectTunnels(brainDir, content string) ([]TunnelCandidate, error) {
 	return out, nil
 }
 
-// isSingleWord reports whether title is one whitespace-free token.
-func isSingleWord(title string) bool {
-	return !strings.ContainsAny(title, " \t")
-}
-
 // isWholeWord reports whether the substring at [idx, idx+n) in s is
 // bounded by non-alphanumeric characters (or string edges).
 func isWholeWord(s string, idx, n int) bool {

ingestion/internal/brain/tunnel_test.go

@@ -101,28 +101,15 @@ func TestDetectTunnels_ExactTitleMatch(t *testing.T) {
 }
 
 func TestDetectTunnels_FuzzyMatch(t *testing.T) {
-	dir := t.TempDir()
-	seedNote(t, dir, "wiki/x/facts/routing-table.md",
-		"---\ntitle: 'Routing Table'\n---\nbody.\n")
-
-	// Substring of title appears in content, but not as a whole word.
-	candidates, err := brain.DetectTunnels(dir, "the routing tables were rebuilt")
-	require.NoError(t, err)
-	require.Len(t, candidates, 1)
-	assert.False(t, candidates[0].Exact, "substring-only match should be fuzzy")
-}
-
-// A one-word title whose only appearance is lowercase inside another word is
-// not even a candidate: it would fill the review file with English rather than
-// with references.
-func TestDetectTunnels_SingleWordSubstringIsNotACandidate(t *testing.T) {
 	dir := t.TempDir()
 	seedNote(t, dir, "wiki/x/facts/routing.md",
 		"---\ntitle: Routing\n---\nbody.\n")
 
+	// Substring of title appears in content, but not as a whole word.
 	candidates, err := brain.DetectTunnels(dir, "rerouting handles failover")
 	require.NoError(t, err)
-	assert.Empty(t, candidates)
+	require.Len(t, candidates, 1)
+	assert.False(t, candidates[0].Exact, "substring-only match should be fuzzy")
 }
 
 func TestDetectTunnels_NoFrontmatterFallsBackToSlug(t *testing.T) {
@@ -139,21 +126,20 @@ func TestDetectTunnels_NoFrontmatterFallsBackToSlug(t *testing.T) {
 
 func TestAutoTunnel_FuzzyGoesToCandidatesFile(t *testing.T) {
 	dir := t.TempDir()
-	// Existing note in a different wing whose title is "Routing Table".
+	// Existing note in a different wing whose title is "Routing".
-	seedNote(t, dir, "wiki/other/facts/routing-table.md",
+	seedNote(t, dir, "wiki/other/facts/routing.md",
-		"---\nwing: other\nhall: facts\ntitle: 'Routing Table'\n---\nbody.\n")
+		"---\nwing: other\nhall: facts\ntitle: Routing\n---\nbody.\n")
-	// Source note in another wing whose body mentions "routing tables"
+	// Source note in another wing whose body mentions "rerouting" (substring match only).
-	// (substring match only — the title is not there as a whole word).
 	seedNote(t, dir, "wiki/jepa-fx/facts/new.md",
-		"---\nwing: jepa-fx\nhall: facts\n---\nrouting tables rebuilt\n")
+		"---\nwing: jepa-fx\nhall: facts\n---\nrerouting traffic\n")
 
 	require.NoError(t, brain.AutoTunnel(dir,
-		"wiki/jepa-fx/facts/new.md", "routing tables rebuilt"))
+		"wiki/jepa-fx/facts/new.md", "rerouting traffic"))
 
 	// Source must not get auto-linked (fuzzy).
 	got, err := os.ReadFile(filepath.Join(dir, "wiki/jepa-fx/facts/new.md"))
 	require.NoError(t, err)
-	assert.NotContains(t, string(got), "[[other/facts/routing-table]]")
+	assert.NotContains(t, string(got), "[[other/facts/routing]]")
 
 	// Candidates file must list the pair.
 	matches, err := filepath.Glob(filepath.Join(dir, "raw", "tunnel-candidates-*.md"))
@@ -162,7 +148,7 @@ func TestAutoTunnel_FuzzyGoesToCandidatesFile(t *testing.T) {
 	body, err := os.ReadFile(matches[0])
 	require.NoError(t, err)
 	assert.Contains(t, string(body), "wiki/jepa-fx/facts/new.md")
-	assert.Contains(t, string(body), "wiki/other/facts/routing-table.md")
+	assert.Contains(t, string(body), "wiki/other/facts/routing.md")
 	assert.Contains(t, string(body), "Routing")
 }
 
@@ -189,35 +175,3 @@ func TestWriteTunnel_AppendsToExistingSeeAlso(t *testing.T) {
 	assert.Contains(t, s, "[[a/facts/old]]")
 	assert.Contains(t, s, "[[b/facts/y]]")
 }
-
-// A one-word title matched case-insensitively links every entry that happens
-// to use that word. Live cost before this rule: 185 entries auto-linked to
-// wiki/telos/decisions/wrong.md (title "WRONG") and 136 to .../status.md,
-// making the two most-linked nodes in the graph pure artifacts.
-func TestDetectTunnels_SingleWordTitleNeedsAnExactCaseMatch(t *testing.T) {
-	dir := t.TempDir()
-	seedNote(t, dir, "wiki/telos/decisions/wrong.md",
-		"---\nwing: telos\nhall: decisions\ntitle: WRONG\n---\n# WRONG\n\nRetired beliefs.\n")
-
-	got, err := brain.DetectTunnels(dir, "The obvious fix was to reject the write. Wrong here.")
-	require.NoError(t, err)
-	for _, c := range got {
-		assert.False(t, c.Exact, "a lowercase prose word must not auto-link a one-word title: %+v", c)
-	}
-
-	got, err = brain.DetectTunnels(dir, "The beliefs listed under WRONG were retired.")
-	require.NoError(t, err)
-	require.Len(t, got, 1)
-	assert.True(t, got[0].Exact, "the title's own casing appearing in prose is a real reference")
-}
-
-func TestDetectTunnels_MultiWordTitleStaysCaseInsensitive(t *testing.T) {
-	dir := t.TempDir()
-	seedNote(t, dir, "wiki/homelab/facts/risk-tier.md",
-		"---\nwing: homelab\nhall: facts\ntitle: 'Risk Tier Middleware'\n---\nbody\n")
-
-	got, err := brain.DetectTunnels(dir, "We rebuilt the risk tier middleware last week.")
-	require.NoError(t, err)
-	require.Len(t, got, 1)
-	assert.True(t, got[0].Exact)
-}

ingestion/internal/brainstore/store.go

@@ -42,12 +42,6 @@ func (s *Store) WithGraph(g graphsync.Store) *Store {
 
 // Write creates a brain note and returns its read-after-write handle.
 func (s *Store) Write(ctx context.Context, n capture.Note) (capture.Ref, error) {
-	content, unlinked, err := brain.StripUnresolvedLinks(s.brainDir, n.Content)
-	if err != nil {
-		return capture.Ref{}, err
-	}
-	n.Content = content
-
 	relPath, err := api.WriteNote(s.brainDir, api.WriteNoteOptions{
 		Content:  n.Content,
 		Filename: n.Filename,
@@ -63,19 +57,13 @@ func (s *Store) Write(ctx context.Context, n capture.Note) (capture.Ref, error)
 	s.indexInGraph(ctx, "brain_write", relPath)
 
 	_, _, hash, _ := api.ReadNote(s.brainDir, relPath)
-	return capture.Ref{ID: relPath, Path: relPath, ContentHash: hash, Unlinked: unlinked}, nil
+	return capture.Ref{ID: relPath, Path: relPath, ContentHash: hash}, nil
 }
 
 // Update supersedes an existing note in place. slug may be a bare slug
 // (resolved against n.Wing/n.Hall) or a full brain-relative path (when it
 // contains a slash). It never creates — a missing target is an error.
 func (s *Store) Update(ctx context.Context, slug string, n capture.Note) (capture.Ref, error) {
-	content, unlinked, err := brain.StripUnresolvedLinks(s.brainDir, n.Content)
-	if err != nil {
-		return capture.Ref{}, err
-	}
-	n.Content = content
-
 	opts := api.UpdateNoteOptions{Content: n.Content, Reason: n.Reason}
 	if strings.Contains(slug, "/") {
 		opts.Path = slug
@@ -92,7 +80,7 @@ func (s *Store) Update(ctx context.Context, slug string, n capture.Note) (captur
 	}
 	s.indexInGraph(ctx, "brain_update", relPath)
 
-	return capture.Ref{ID: relPath, Path: relPath, ContentHash: hash, Superseded: true, Unlinked: unlinked}, nil
+	return capture.Ref{ID: relPath, Path: relPath, ContentHash: hash, Superseded: true}, nil
 }
 
 // Get fetches a note by id/path — the read-after-write confirmation

ingestion/internal/brainstore/store_test.go

@@ -83,45 +83,3 @@ func TestStoreGetRoundTripsHash(t *testing.T) {
 	assert.Equal(t, "a", note.Frontmatter["wing"])
 	assert.Contains(t, note.Body, "# Body")
 }
-
-func TestStoreWriteUnwrapsUnresolvedWikilinks(t *testing.T) {
-	dir := t.TempDir()
-	s := brainstore.New(dir)
-	_, err := s.Write(context.Background(), capture.Note{
-		Content: "# Target\n\nbody\n", Filename: "target", Wing: "a", Hall: "facts",
-	})
-	require.NoError(t, err)
-
-	ref, err := s.Write(context.Background(), capture.Note{
-		Content:  "See [[target]] and [[secret-hygiene]].\n",
-		Filename: "src", Wing: "a", Hall: "facts",
-	})
-	require.NoError(t, err)
-	assert.Equal(t, []string{"secret-hygiene"}, ref.Unlinked)
-
-	got, err := os.ReadFile(filepath.Join(dir, "wiki/a/facts/src.md"))
-	require.NoError(t, err)
-	assert.Contains(t, string(got), "[[target]]")
-	assert.Contains(t, string(got), "and secret-hygiene.")
-	assert.NotContains(t, string(got), "[[secret-hygiene]]")
-}
-
-func TestStoreUpdateUnwrapsUnresolvedWikilinks(t *testing.T) {
-	dir := t.TempDir()
-	s := brainstore.New(dir)
-	_, err := s.Write(context.Background(), capture.Note{
-		Content: "old\n", Filename: "n", Wing: "a", Hall: "facts",
-	})
-	require.NoError(t, err)
-
-	ref, err := s.Update(context.Background(), "n", capture.Note{
-		Content: "Related: [[cad-babysit]].\n", Wing: "a", Hall: "facts", Reason: "r",
-	})
-	require.NoError(t, err)
-	assert.Equal(t, []string{"cad-babysit"}, ref.Unlinked)
-
-	got, err := os.ReadFile(filepath.Join(dir, "wiki/a/facts/n.md"))
-	require.NoError(t, err)
-	assert.Contains(t, string(got), "Related: cad-babysit.")
-	assert.NotContains(t, string(got), "[[cad-babysit]]")
-}

ingestion/internal/capture/ports.go

@@ -15,10 +15,6 @@ type Ref struct {
 	Path        string
 	ContentHash string
 	Superseded  bool
-	// Unlinked names the [[wikilink]] targets the store unwrapped to plain
-	// text because they resolve to no entry. Reported rather than rejected:
-	// see brain.StripUnresolvedLinks for why the write still lands.
-	Unlinked []string
 }
 
 // StoredNote is a brain note fetched by Get: the read-after-write

ingestion/internal/capturehttp/handler_test.go

@@ -38,11 +38,9 @@ func (f fakeTracker) CreateIssue(context.Context, string, string, string) (captu
 	}
 	return capture.IssueRef{Repo: "hyperguild", Number: 1, URL: "https://git/1"}, nil
 }
-
 func (fakeTracker) CloseIssue(context.Context, string, int, string) (capture.IssueRef, error) {
 	return capture.IssueRef{}, nil
 }
-
 func (fakeTracker) CommentIssue(context.Context, string, int, string) (capture.IssueRef, error) {
 	return capture.IssueRef{}, nil
 }
@@ -185,7 +183,6 @@ type refusingAudit struct{}
 func (refusingAudit) Reserve(context.Context, classification.Level) (capture.AuditOutcome, error) {
 	return 0, errors.New("central audit sink unreachable")
 }
-
 func (refusingAudit) Record(context.Context, capture.AuditEntry, capture.AuditOutcome) error {
 	return nil
 }

ingestion/internal/claim/claim.go

@@ -1,98 +0,0 @@
-// Package claim validates the claim-property frontmatter that says when and
-// where a note's claim holds, and who decided that (brain#21).
-//
-// Two families were designed together and land separately. This is the
-// applicability envelope:
-//
-//	half_life:        volatile | seasonal | durable   — how fast it decays
-//	applies:          local | homelab | universal     — how widely it holds
-//	claim_provenance: asserted | inferred             — who set the above
-//
-// The strength family (confidence, contested) follows once the ingest-time
-// contradiction detector exists to populate it.
-//
-// Why the envelope is validated rather than merely accepted: a value outside
-// the enum is worse than an absent one. A lint skips what it cannot parse, so
-// the note reads as classified while nothing acts on it — the field becomes
-// decoration that suppresses the very review it was added to trigger.
-//
-// Why `applies` and not `scope`: `scope:` has been in use since brain#5 for
-// glossary terms (`homelab-core`, `project:<repo>`) — a disjoint value space
-// on the same key. The shipped schema keeps the name; this one takes another.
-package claim
-
-import (
-	"fmt"
-	"strings"
-)
-
-// Field names, exported so writers and lints agree on the spelling.
-const (
-	FieldHalfLife   = "half_life"
-	FieldApplies    = "applies"
-	FieldProvenance = "claim_provenance"
-)
-
-var (
-	halfLives   = []string{"volatile", "seasonal", "durable"}
-	appliesTo   = []string{"local", "homelab", "universal"}
-	provenances = []string{"asserted", "inferred"}
-)
-
-// ValidateEnvelope checks the envelope fields of one note's frontmatter.
-//
-// Absent fields are valid: the envelope is opt-in for new writes, and a
-// corpus-wide backfill is deliberately out of scope (brain#21) — inferring
-// 1113 notes' properties in bulk has the same failure mode as the extraction
-// pass that produced 28 wrong wikilinks out of 67.
-func ValidateEnvelope(fm map[string]string) error {
-	halfLife, hasHalfLife := present(fm, FieldHalfLife)
-	applies, hasApplies := present(fm, FieldApplies)
-	prov, hasProv := present(fm, FieldProvenance)
-
-	if hasHalfLife {
-		if err := oneOf(FieldHalfLife, halfLife, halfLives); err != nil {
-			return err
-		}
-	}
-	if hasApplies {
-		if err := oneOf(FieldApplies, applies, appliesTo); err != nil {
-			return err
-		}
-	}
-	if hasProv {
-		if err := oneOf(FieldProvenance, prov, provenances); err != nil {
-			return err
-		}
-	}
-
-	// The field and its provenance travel together or not at all. A value
-	// whose author is unknown cannot be trusted differently from one Mathias
-	// asserted, which is how an inferred guess hardens into accepted fact.
-	switch {
-	case (hasHalfLife || hasApplies) && !hasProv:
-		return fmt.Errorf("%s is required when %s or %s is set",
-			FieldProvenance, FieldHalfLife, FieldApplies)
-	case hasProv && !hasHalfLife && !hasApplies:
-		return fmt.Errorf("%s is set but neither %s nor %s is",
-			FieldProvenance, FieldHalfLife, FieldApplies)
-	}
-	return nil
-}
-
-// present reports a trimmed field value and whether it was set to anything
-// non-empty. A key written with an empty value is treated as absent rather
-// than as an error: that is a caller emitting a placeholder, not asserting.
-func present(fm map[string]string, key string) (string, bool) {
-	v := strings.TrimSpace(fm[key])
-	return v, v != ""
-}
-
-func oneOf(field, value string, allowed []string) error {
-	for _, a := range allowed {
-		if a == value {
-			return nil
-		}
-	}
-	return fmt.Errorf("%s: %q is not one of %s", field, value, strings.Join(allowed, ", "))
-}

ingestion/internal/claim/claim_test.go

@@ -1,89 +0,0 @@
-// Package claim_test covers the claim-property envelope (brain#21).
-package claim_test
-
-import (
-	"testing"
-
-	"github.com/mathiasbq/hyperguild/ingestion/internal/claim"
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-func TestValidateEnvelope(t *testing.T) {
-	tests := []struct {
-		name    string
-		fm      map[string]string
-		wantErr string
-	}{
-		{
-			name: "absent is fine — the fields are opt-in on new writes",
-			fm:   map[string]string{"wing": "homelab", "hall": "facts"},
-		},
-		{
-			name: "complete envelope with provenance",
-			fm: map[string]string{
-				"half_life": "durable", "applies": "universal", "claim_provenance": "asserted",
-			},
-		},
-		{
-			name: "inferred provenance is equally valid — it just must be stated",
-			fm: map[string]string{
-				"half_life": "volatile", "applies": "local", "claim_provenance": "inferred",
-			},
-		},
-		{
-			// A value nobody can act on is worse than no value: a lint
-			// silently skips it, so the note looks classified and isn't.
-			name:    "unknown half_life value",
-			fm:      map[string]string{"half_life": "forever", "claim_provenance": "asserted"},
-			wantErr: `half_life: "forever" is not one of volatile, seasonal, durable`,
-		},
-		{
-			name:    "unknown applies value",
-			fm:      map[string]string{"applies": "galaxy", "claim_provenance": "asserted"},
-			wantErr: `applies: "galaxy" is not one of local, homelab, universal`,
-		},
-		{
-			// brain#21: a value a model inferred must never be
-			// indistinguishable from one Mathias asserted. Writing the field
-			// without saying who set it is exactly that laundering.
-			name:    "envelope field without provenance",
-			fm:      map[string]string{"half_life": "durable"},
-			wantErr: "claim_provenance is required when half_life or applies is set",
-		},
-		{
-			name:    "applies without provenance",
-			fm:      map[string]string{"applies": "homelab"},
-			wantErr: "claim_provenance is required when half_life or applies is set",
-		},
-		{
-			name:    "unknown provenance value",
-			fm:      map[string]string{"half_life": "durable", "claim_provenance": "probably"},
-			wantErr: `claim_provenance: "probably" is not one of asserted, inferred`,
-		},
-		{
-			// Provenance alone says who set fields that aren't there.
-			name:    "provenance without any envelope field",
-			fm:      map[string]string{"claim_provenance": "asserted"},
-			wantErr: "claim_provenance is set but neither half_life nor applies is",
-		},
-		{
-			// The glossary wing has used scope: homelab-core since #5. The
-			// envelope deliberately does NOT claim that key (brain#21).
-			name: "glossary scope is untouched",
-			fm:   map[string]string{"scope": "homelab-core", "term": "koala"},
-		},
-	}
-
-	for _, tt := range tests {
-		t.Run(tt.name, func(t *testing.T) {
-			err := claim.ValidateEnvelope(tt.fm)
-			if tt.wantErr == "" {
-				assert.NoError(t, err)
-				return
-			}
-			require.Error(t, err)
-			assert.Contains(t, err.Error(), tt.wantErr)
-		})
-	}
-}

ingestion/internal/claudewatcher/skip_projects_test.go

@@ -1,231 +0,0 @@
-package claudewatcher
-
-import (
-	"context"
-	"log/slog"
-	"os"
-	"path/filepath"
-	"strings"
-	"sync"
-	"testing"
-
-	"github.com/stretchr/testify/assert"
-	"github.com/stretchr/testify/require"
-)
-
-// recordingHandler captures log records so a test can assert that a file was
-// never even attempted — the absence of a read error is the evidence.
-type recordingHandler struct {
-	mu      sync.Mutex
-	records []string
-}
-
-func (h *recordingHandler) Enabled(context.Context, slog.Level) bool { return true }
-
-func (h *recordingHandler) Handle(_ context.Context, r slog.Record) error {
-	h.mu.Lock()
-	defer h.mu.Unlock()
-	var sb strings.Builder
-	sb.WriteString(r.Message)
-	r.Attrs(func(a slog.Attr) bool {
-		sb.WriteString(" " + a.Key + "=" + a.Value.String())
-		return true
-	})
-	h.records = append(h.records, sb.String())
-	return nil
-}
-
-func (h *recordingHandler) WithAttrs([]slog.Attr) slog.Handler { return h }
-func (h *recordingHandler) WithGroup(string) slog.Handler      { return h }
-
-func (h *recordingHandler) contains(substr string) bool {
-	h.mu.Lock()
-	defer h.mu.Unlock()
-	for _, r := range h.records {
-		if strings.Contains(r, substr) {
-			return true
-		}
-	}
-	return false
-}
-
-func session(t *testing.T, root, project, id string) string {
-	t.Helper()
-	dir := filepath.Join(root, project)
-	require.NoError(t, os.MkdirAll(dir, 0o755))
-	return writeSession(t, dir, id, []string{
-		`{"type":"user","sessionId":"` + id + `","message":"a prompt"}`,
-		`{"type":"assistant","sessionId":"` + id + `","message":{"content":[{"type":"text","text":"an answer"}]}}`,
-	})
-}
-
-// A named project is not ingested, and its neighbours still are.
-func TestSkipProjects_skipsTheNamedProjectOnly(t *testing.T) {
-	tmp := t.TempDir()
-	session(t, tmp, "-home-mathias-dev-AGENTS-cobalt-dingo", "skipped")
-	session(t, tmp, "-home-mathias-dev", "kept")
-
-	sink := &memSink{}
-	require.NoError(t, TickOnce(context.Background(), Config{
-		SessionsDir:  tmp,
-		Host:         "koala",
-		Sink:         sink,
-		SkipProjects: []string{"-home-mathias-dev-AGENTS-cobalt-dingo"},
-	}))
-
-	require.Len(t, sink.batches, 1)
-	assert.Equal(t, "kept", sink.batches[0].SessionID)
-	assert.Equal(t, "-home-mathias-dev", sink.batches[0].ProjectID)
-}
-
-// Globs are necessary, not a convenience. A project directory is derived from
-// the session's WORKING DIRECTORY, so a git worktree produces an ephemeral
-// name like "-home-mathias-dev--claude-worktrees-bridge-cse-017xoC...". An
-// exact-match list could never keep up with those.
-func TestSkipProjects_globMatchesEphemeralWorktreeNames(t *testing.T) {
-	tmp := t.TempDir()
-	session(t, tmp, "-home-mathias-dev--claude-worktrees-bridge-cse-017xoCEcrc35", "worktree")
-	session(t, tmp, "-home-mathias-dev", "kept")
-
-	sink := &memSink{}
-	require.NoError(t, TickOnce(context.Background(), Config{
-		SessionsDir:  tmp,
-		Host:         "koala",
-		Sink:         sink,
-		SkipProjects: []string{"*claude-worktrees-bridge-cse*"},
-	}))
-
-	require.Len(t, sink.batches, 1)
-	assert.Equal(t, "kept", sink.batches[0].SessionID)
-}
-
-// The point of skipping at the directory walk: the file is never OPENED, so
-// its content never enters this process. Proven by making it unreadable — a
-// skipped file produces no read error because nothing tried to read it, while
-// the same file in a non-skipped project does.
-func TestSkipProjects_theFileIsNeverOpened(t *testing.T) {
-	tmp := t.TempDir()
-	path := session(t, tmp, "-home-mathias-dev-AGENTS-cobalt-dingo", "unreadable")
-	require.NoError(t, os.Chmod(path, 0o000))
-	t.Cleanup(func() { _ = os.Chmod(path, 0o644) })
-
-	rec := &recordingHandler{}
-	sink := &memSink{}
-	require.NoError(t, TickOnce(context.Background(), Config{
-		SessionsDir:  tmp,
-		Host:         "koala",
-		Sink:         sink,
-		Logger:       slog.New(rec),
-		SkipProjects: []string{"*cobalt-dingo*"},
-	}))
-
-	assert.Empty(t, sink.batches)
-	assert.False(t, rec.contains("file failed"),
-		"a skipped file must not even be attempted")
-}
-
-// The control test for the one above: without the skip, the unreadable file IS
-// attempted and fails. Otherwise the assertion above could pass for the wrong
-// reason.
-func TestSkipProjects_withoutTheSkipTheSameFileIsAttempted(t *testing.T) {
-	tmp := t.TempDir()
-	path := session(t, tmp, "-home-mathias-dev-AGENTS-cobalt-dingo", "unreadable")
-	require.NoError(t, os.Chmod(path, 0o000))
-	t.Cleanup(func() { _ = os.Chmod(path, 0o644) })
-
-	rec := &recordingHandler{}
-	require.NoError(t, TickOnce(context.Background(), Config{
-		SessionsDir: tmp,
-		Host:        "koala",
-		Sink:        &memSink{},
-		Logger:      slog.New(rec),
-	}))
-
-	assert.True(t, rec.contains("file failed"),
-		"the unreadable file must fail when not skipped — otherwise the skip test proves nothing")
-}
-
-// Patterns match the project directory NAME, not the whole path. A temp
-// directory or a home directory component must not accidentally match and
-// silently disable ingestion.
-func TestSkipProjects_matchesTheProjectNameNotTheFullPath(t *testing.T) {
-	tmp := t.TempDir()
-	session(t, tmp, "-home-mathias-dev", "kept")
-
-	sink := &memSink{}
-	require.NoError(t, TickOnce(context.Background(), Config{
-		SessionsDir: tmp,
-		Host:        "koala",
-		Sink:        sink,
-		// tmp is somewhere under /tmp; this must not match the project name.
-		SkipProjects: []string{"*tmp*"},
-	}))
-
-	require.Len(t, sink.batches, 1, "a path component outside the project name must not match")
-}
-
-// An unparseable pattern must stop the watcher rather than be ignored. A
-// silently dropped skip rule means ingesting what was meant to be excluded,
-// which is the failure that cannot be noticed after the fact.
-func TestSkipProjects_invalidPatternRefusesToRun(t *testing.T) {
-	tmp := t.TempDir()
-	session(t, tmp, "-home-mathias-dev", "kept")
-
-	sink := &memSink{}
-	err := TickOnce(context.Background(), Config{
-		SessionsDir:  tmp,
-		Host:         "koala",
-		Sink:         sink,
-		SkipProjects: []string{"[unclosed"},
-	})
-
-	require.Error(t, err)
-	assert.Contains(t, err.Error(), "[unclosed")
-	assert.Empty(t, sink.batches, "nothing may be ingested while a skip rule is broken")
-}
-
-func TestSkipProjects_emptyListChangesNothing(t *testing.T) {
-	tmp := t.TempDir()
-	session(t, tmp, "-home-mathias-dev", "kept")
-
-	sink := &memSink{}
-	require.NoError(t, TickOnce(context.Background(), Config{
-		SessionsDir: tmp, Host: "koala", Sink: sink, SkipProjects: nil,
-	}))
-
-	require.Len(t, sink.batches, 1)
-}
-
-// The difference between SkipDir and filtering after the walk, made
-// observable: an unreadable skipped directory must not disturb anything.
-//
-// Without SkipDir, WalkDir reads the directory's entries, gets a permission
-// error, and that error aborts the ENTIRE walk — so one skipped project with
-// awkward permissions would silently stop ingesting every other project.
-// Returning SkipDir means its contents are never listed at all.
-//
-// Added after a mutation test showed the earlier assertions could not tell the
-// two implementations apart.
-func TestSkipProjects_anUnreadableSkippedDirDoesNotBreakTheWalk(t *testing.T) {
-	tmp := t.TempDir()
-	session(t, tmp, "-home-mathias-dev", "kept")
-
-	blocked := filepath.Join(tmp, "-home-mathias-dev-AGENTS-cobalt-dingo")
-	require.NoError(t, os.MkdirAll(blocked, 0o755))
-	_ = writeSession(t, blocked, "secret", []string{
-		`{"type":"user","sessionId":"secret","message":"should never be read"}`,
-	})
-	require.NoError(t, os.Chmod(blocked, 0o000))
-	t.Cleanup(func() { _ = os.Chmod(blocked, 0o755) })
-
-	sink := &memSink{}
-	require.NoError(t, TickOnce(context.Background(), Config{
-		SessionsDir:  tmp,
-		Host:         "koala",
-		Sink:         sink,
-		SkipProjects: []string{"*cobalt-dingo*"},
-	}))
-
-	require.Len(t, sink.batches, 1, "an unreadable skipped directory must not abort the walk")
-	assert.Equal(t, "kept", sink.batches[0].SessionID)
-}

ingestion/internal/claudewatcher/watcher.go

@@ -45,25 +45,6 @@ type Config struct {
 	Sink        Sink
 	Cursors     *CursorStore
 	Logger      *slog.Logger
-
-	// SkipProjects excludes whole project directories from ingestion, as
-	// filepath.Match globs tested against the project directory NAME (the
-	// basename, e.g. "-home-mathias-dev"), not the full path.
-	//
-	// Globs rather than exact names because a project directory is derived
-	// from the session's working directory, so a git worktree yields an
-	// ephemeral name like
-	// "-home-mathias-dev--claude-worktrees-bridge-cse-017xoC..." that no
-	// exact-match list could keep up with.
-	//
-	// Matching directories are skipped during the directory WALK, so their
-	// files are never opened and their content never enters this process —
-	// which is a stronger property than filtering it out afterwards.
-	//
-	// An unparseable pattern stops the watcher. A silently dropped skip rule
-	// means ingesting what was meant to be excluded, and that is not
-	// noticeable after the fact.
-	SkipProjects []string
 }
 
 // Watch runs the polling loop until ctx is cancelled. Returns ctx.Err()
@@ -87,9 +68,6 @@ func Watch(ctx context.Context, cfg Config) error {
 	if cfg.Logger == nil {
 		cfg.Logger = slog.Default()
 	}
-	if err := validateSkipPatterns(cfg.SkipProjects); err != nil {
-		return err
-	}
 	cfg.Logger.Info("claudewatcher: started",
 		"sessions_dir", cfg.SessionsDir,
 		"host", cfg.Host,
@@ -113,7 +91,7 @@ func Watch(ctx context.Context, cfg Config) error {
 // runTick is one polling pass. Exposed (lowercase) for tests via
 // TickOnce.
 func runTick(ctx context.Context, cfg Config) {
-	files, err := listSessionFiles(cfg.SessionsDir, cfg.SkipProjects, cfg.Logger)
+	files, err := listSessionFiles(cfg.SessionsDir)
 	if err != nil {
 		cfg.Logger.Warn("claudewatcher: list session files", "err", err)
 		return
@@ -141,52 +119,17 @@ func TickOnce(ctx context.Context, cfg Config) error {
 	if cfg.Logger == nil {
 		cfg.Logger = slog.Default()
 	}
-	if err := validateSkipPatterns(cfg.SkipProjects); err != nil {
-		return err
-	}
 	runTick(ctx, cfg)
 	return nil
 }
 
-// validateSkipPatterns rejects a pattern filepath.Match cannot parse.
+func listSessionFiles(root string) ([]string, error) {
-//
-// Checked up front rather than per file: a bad pattern that only failed at
-// match time would be reported once per session file per tick, and — worse —
-// filepath.Match returns an error alongside a false match, so the directory
-// would be ingested while the log complained.
-func validateSkipPatterns(patterns []string) error {
-	for _, p := range patterns {
-		if _, err := filepath.Match(p, "probe"); err != nil {
-			return fmt.Errorf("invalid skip-project pattern %q: %w", p, err)
-		}
-	}
-	return nil
-}
-
-// skipProject reports whether a project directory name matches any pattern.
-func skipProject(name string, patterns []string) bool {
-	for _, p := range patterns {
-		// The error case is already excluded by validateSkipPatterns.
-		if ok, _ := filepath.Match(p, name); ok {
-			return true
-		}
-	}
-	return false
-}
-
-func listSessionFiles(root string, skip []string, log *slog.Logger) ([]string, error) {
 	var out []string
 	err := filepath.WalkDir(root, func(path string, d os.DirEntry, walkErr error) error {
 		if walkErr != nil {
 			return walkErr
 		}
 		if d.IsDir() {
-			// SkipDir, so nothing inside is even listed. The files are never
-			// opened and their content never reaches this process.
-			if path != root && skipProject(d.Name(), skip) {
-				log.Info("claudewatcher: project skipped by configuration", "project", d.Name())
-				return filepath.SkipDir
-			}
 			return nil
 		}
 		if !strings.HasSuffix(path, ".jsonl") {

ingestion/internal/llm/router.go

@@ -5,18 +5,14 @@ import (
 	"fmt"
 )
 
-// Router calls Primary first; on any error falls back to Fallback, then to
+// Router calls Primary first; on any error falls back to Fallback.
-// Tertiary. Fallback and Tertiary may each be nil — a nil tier is skipped and
+// Fallback may be nil, in which case primary errors are returned directly.
-// the chain returns the errors accumulated so far.
 type Router struct {
 	Primary  *Client
 	Fallback *Client
-	Tertiary *Client
 }
 
-// Complete implements pipeline.CompleteFunc, routing through Primary, then
+// Complete implements pipeline.CompleteFunc, routing through Primary then Fallback.
-// Fallback, then Tertiary — trying each configured tier in order and
-// returning the first success.
 func (r *Router) Complete(ctx context.Context, system, user string) (string, error) {
 	out, err := r.Primary.Complete(ctx, system, user)
 	if err == nil {
@@ -26,15 +22,8 @@ func (r *Router) Complete(ctx context.Context, system, user string) (string, err
 		return "", fmt.Errorf("primary llm: %w", err)
 	}
 	out, err2 := r.Fallback.Complete(ctx, system, user)
-	if err2 == nil {
+	if err2 != nil {
-		return out, nil
-	}
-	if r.Tertiary == nil {
 		return "", fmt.Errorf("primary llm: %w; fallback llm: %v", err, err2)
 	}
-	out, err3 := r.Tertiary.Complete(ctx, system, user)
-	if err3 != nil {
-		return "", fmt.Errorf("primary llm: %w; fallback llm: %v; tertiary llm: %v", err, err2, err3)
-	}
 	return out, nil
 }

ingestion/internal/llm/router_test.go

@@ -69,78 +69,3 @@ func TestRouter_NilFallback(t *testing.T) {
 	_, err := r.Complete(context.Background(), "sys", "user")
 	assert.Error(t, err)
 }
-
-func TestRouter_FallsBackToTertiaryWhenPrimaryAndFallbackFail(t *testing.T) {
-	fail := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		http.Error(w, "unavailable", http.StatusServiceUnavailable)
-	}))
-	defer fail.Close()
-	tertiary := mockServer(t, "from-tertiary")
-	defer tertiary.Close()
-
-	r := &Router{
-		Primary:  New(fail.URL, "", "m", time.Second),
-		Fallback: New(fail.URL, "", "m", time.Second),
-		Tertiary: New(tertiary.URL, "", "m", time.Second),
-	}
-	out, err := r.Complete(context.Background(), "sys", "user")
-	require.NoError(t, err)
-	assert.Equal(t, "from-tertiary", out)
-}
-
-func TestRouter_TertiaryNotCalledWhenFallbackSucceeds(t *testing.T) {
-	fail := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		http.Error(w, "unavailable", http.StatusServiceUnavailable)
-	}))
-	defer fail.Close()
-	fallback := mockServer(t, "from-fallback")
-	defer fallback.Close()
-	tertiary := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		t.Error("tertiary must not be called when fallback succeeds")
-	}))
-	defer tertiary.Close()
-
-	r := &Router{
-		Primary:  New(fail.URL, "", "m", time.Second),
-		Fallback: New(fallback.URL, "", "m", time.Second),
-		Tertiary: New(tertiary.URL, "", "m", time.Second),
-	}
-	out, err := r.Complete(context.Background(), "sys", "user")
-	require.NoError(t, err)
-	assert.Equal(t, "from-fallback", out)
-}
-
-func TestRouter_AllThreeFail(t *testing.T) {
-	fail := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		http.Error(w, "err", http.StatusBadGateway)
-	}))
-	defer fail.Close()
-
-	r := &Router{
-		Primary:  New(fail.URL, "", "m", time.Second),
-		Fallback: New(fail.URL, "", "m", time.Second),
-		Tertiary: New(fail.URL, "", "m", time.Second),
-	}
-	_, err := r.Complete(context.Background(), "sys", "user")
-	assert.Error(t, err)
-	assert.Contains(t, err.Error(), "primary llm")
-	assert.Contains(t, err.Error(), "fallback llm")
-	assert.Contains(t, err.Error(), "tertiary llm")
-}
-
-func TestRouter_NilTertiary(t *testing.T) {
-	// Existing 2-tier deployments (no BRAIN_LLM_TERTIARY_URL) must keep working
-	// exactly as before — Tertiary is opt-in, not required.
-	fail := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
-		http.Error(w, "err", http.StatusBadGateway)
-	}))
-	defer fail.Close()
-
-	r := &Router{
-		Primary:  New(fail.URL, "", "m", time.Second),
-		Fallback: New(fail.URL, "", "m", time.Second),
-	}
-	_, err := r.Complete(context.Background(), "sys", "user")
-	assert.Error(t, err)
-	assert.NotContains(t, err.Error(), "tertiary")
-}

ingestion/internal/mcp/handlers.go

@@ -233,15 +233,6 @@ type brainWriteArgs struct {
 	Hall     string `json:"hall,omitempty"`
 }
 
-// unlinkedNote explains the `unlinked` field to the caller that caused it.
-// The write landed; what is gone is the [[...]] around a target that names no
-// brain entry. Said here rather than only in a doc comment because the caller
-// is a model that will otherwise repeat it on the next write.
-const unlinkedNote = "these [[wikilink]] targets resolve to no brain entry, " +
-	"so they were unwrapped to plain text. Link only entries that exist " +
-	"(a filename under knowledge/ or wiki/); write the target entry first if " +
-	"you want the link, and keep skills, repos and agent-local memory files as prose."
-
 func (s *Server) brainWrite(ctx context.Context, args json.RawMessage) (json.RawMessage, error) {
 	var a brainWriteArgs
 	if err := json.Unmarshal(args, &a); err != nil {
@@ -262,12 +253,7 @@ func (s *Server) brainWrite(ctx context.Context, args json.RawMessage) (json.Raw
 	if err != nil {
 		return nil, err
 	}
-	out := map[string]any{"id": ref.ID, "path": ref.Path, "content_hash": ref.ContentHash}
+	return json.Marshal(map[string]string{"id": ref.ID, "path": ref.Path, "content_hash": ref.ContentHash})
-	if len(ref.Unlinked) > 0 {
-		out["unlinked"] = ref.Unlinked
-		out["unlinked_note"] = unlinkedNote
-	}
-	return json.Marshal(out)
 }
 
 type brainUpdateArgs struct {
@@ -311,14 +297,9 @@ func (s *Server) brainUpdate(ctx context.Context, args json.RawMessage) (json.Ra
 	if err != nil {
 		return nil, err
 	}
-	out := map[string]any{
+	return json.Marshal(map[string]any{
 		"id": ref.ID, "path": ref.Path, "content_hash": ref.ContentHash, "superseded": ref.Superseded,
-	}
+	})
-	if len(ref.Unlinked) > 0 {
-		out["unlinked"] = ref.Unlinked
-		out["unlinked_note"] = unlinkedNote
-	}
-	return json.Marshal(out)
 }
 
 type brainGetArgs struct {

ingestion/internal/mcp/server.go

@@ -49,8 +49,6 @@ type rpcError struct {
 // Server handles MCP JSON-RPC over HTTP for the ingestion service.
 type Server struct {
 	brainDir  string
-	govAudit  capture.AuditSink
-	govNotify govNotifier
 	pipeline  pipeline.Config
 	llm       pipeline.CompleteFunc
 	answerLLM pipeline.CompleteFunc // nil = brain_answer and brain_classify unavailable

ingestion/internal/mcp/server_test.go

@@ -134,11 +134,9 @@ type stubTracker struct{}
 func (stubTracker) CreateIssue(context.Context, string, string, string) (capture.IssueRef, error) {
 	return capture.IssueRef{}, nil
 }
-
 func (stubTracker) CloseIssue(context.Context, string, int, string) (capture.IssueRef, error) {
 	return capture.IssueRef{}, nil
 }
-
 func (stubTracker) CommentIssue(context.Context, string, int, string) (capture.IssueRef, error) {
 	return capture.IssueRef{}, nil
 }

ingestion/internal/mcp/tools_capture_test.go

@@ -28,11 +28,9 @@ type capFakeTracker struct{}
 func (capFakeTracker) CreateIssue(context.Context, string, string, string) (capture.IssueRef, error) {
 	return capture.IssueRef{Repo: "hyperguild", Number: 1, URL: "https://git/1"}, nil
 }
-
 func (capFakeTracker) CloseIssue(context.Context, string, int, string) (capture.IssueRef, error) {
 	return capture.IssueRef{}, nil
 }
-
 func (capFakeTracker) CommentIssue(context.Context, string, int, string) (capture.IssueRef, error) {
 	return capture.IssueRef{}, nil
 }

ingestion/internal/mcp/tools_notes.go

@@ -3,15 +3,11 @@ package mcp
 import (
 	"context"
 	"encoding/json"
-	"errors"
 	"fmt"
 	"log/slog"
 	"strings"
-	"time"
 
 	"github.com/mathiasbq/hyperguild/ingestion/internal/brain"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/capture"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/classification"
 	"github.com/mathiasbq/hyperguild/ingestion/internal/notes"
 )
 
@@ -56,20 +52,6 @@ func noteToolDescriptors() []map[string]any {
 	}
 }
 
-// --- hyperguild#97: governance-rewrite observability -----------------------
-
-// govNotifier raises an out-of-band alert. Declared here rather than importing
-// internal/audit so the MCP package keeps depending on capture alone.
-type govNotifier interface {
-	Notify(ctx context.Context, msg string) error
-}
-
-// WithGovernanceObserver attaches the audit sink and notifier that observe a
-// successful brain_edit_root. Both are optional; either may be nil.
-func (s *Server) WithGovernanceObserver(sink capture.AuditSink, n govNotifier) {
-	s.govAudit, s.govNotify = sink, n
-}
-
 type brainReadArgs struct {
 	Path string `json:"path"`
 }
@@ -93,17 +75,8 @@ type brainEditArgs struct {
 }
 
 // brainEdit is the model-facing editor: notes only.
-//
-// Deliberately NOT audited (#97). A note edit is already fully reconstructible
-// from git history, which carries the same before/after bytes plus a diff.
-// Governance files get the extra trail because they change what later agents
-// obey — the asymmetry is about instruction-carrying content, not about how
-// hard the change is to reconstruct. Auditing every note edit would also bury
-// the rare governance record under routine traffic, which is how an alert
-// stops being read.
 func (s *Server) brainEdit(_ context.Context, args json.RawMessage) (json.RawMessage, error) {
-	_, out, err := s.editWithScope(args, notes.ScopeNotes)
+	return s.editWithScope(args, notes.ScopeNotes)
-	return out, err
 }
 
 // brainEditRoot edits a governance file (CLAUDE.md). De-surfaced AND gated on
@@ -116,79 +89,22 @@ func (s *Server) brainEditRoot(ctx context.Context, args json.RawMessage) (json.
 		return nil, fmt.Errorf("brain_edit_root requires the local static principal; " +
 			"a governance file is not editable from a model-facing origin")
 	}
-	res, out, err := s.editWithScope(args, notes.ScopeRoot)
+	out, err := s.editWithScope(args, notes.ScopeRoot)
-	if err != nil {
+	if err == nil {
-		// A refusal is not a rewrite. Recording or alerting on one would cry
-		// wolf, and the gate already logs its own denials.
-		return out, err
-	}
 		// A durable instruction rewrite should be loud, not silent.
 		slog.Warn("brain_edit_root applied", "principal", info.principal, "result", string(out))
-	s.observeGovernanceEdit(ctx, info.principal, res)
+	}
 	return out, err
 }
 
-// observeGovernanceEdit records and alerts on a rewrite that already landed.
+func (s *Server) editWithScope(args json.RawMessage, scope notes.Scope) (json.RawMessage, error) {
-//
-// Best-effort by construction: the bytes are written and brain-sync will commit
-// them within the quarter hour, so failing the call here would report a
-// non-rewrite to the caller while the rewrite sits on disk. A failure to
-// observe is therefore logged at ERROR — the one case where the trail itself is
-// what broke, and the only remaining signal.
-func (s *Server) observeGovernanceEdit(ctx context.Context, principal string, res notes.Result) {
-	// Path and hashes only. The notification leaves the cluster for a phone
-	// via a third-party topic; a hash identifies the rewrite, the bytes would
-	// leak whatever was written into an instruction file.
-	msg := fmt.Sprintf("brain_edit_root applied\npath=%s\nprincipal=%s\nbefore=%s\nafter=%s",
-		res.Path, principal, res.PrevContentHash, res.ContentHash)
-
-	if s.govNotify != nil {
-		if err := s.govNotify.Notify(ctx, msg); err != nil {
-			slog.Error("brain_edit_root notify failed", "path", res.Path, "err", err)
-		}
-	}
-	if s.govAudit == nil {
-		return
-	}
-	// Internal, not Confidential: a governance file is not client data, and
-	// Confidential would make DegradingSink REFUSE to record while loki is
-	// down rather than buffer — losing exactly the record that matters most.
-	outcome, err := s.govAudit.Reserve(ctx, classification.Internal)
-	if err != nil {
-		slog.Error("brain_edit_root audit reserve failed", "path", res.Path, "err", err)
-		return
-	}
-	entry := capture.AuditEntry{
-		Timestamp:               time.Now().UTC(),
-		Principal:               principal,
-		Actor:                   "brain_edit_root",
-		Harness:                 "mcp",
-		EffectiveClassification: classification.Internal.String(),
-		Items:                   []string{res.Path},
-		SecurityEvents: []string{fmt.Sprintf(
-			"governance file rewritten: %s before=%s after=%s",
-			res.Path, res.PrevContentHash, res.ContentHash)},
-	}
-	if err := s.govAudit.Record(ctx, entry, outcome); err != nil {
-		slog.Error("brain_edit_root audit record failed", "path", res.Path, "err", err)
-	}
-}
-
-func (s *Server) editWithScope(args json.RawMessage, scope notes.Scope) (notes.Result, json.RawMessage, error) {
 	var a brainEditArgs
 	if err := json.Unmarshal(args, &a); err != nil {
-		return notes.Result{}, nil, fmt.Errorf("parse args: %w", err)
+		return nil, fmt.Errorf("parse args: %w", err)
 	}
 	res, err := notes.Edit(s.brainDir, a.Path, a.OldStr, a.NewStr, scope)
 	if err != nil {
-		if errors.Is(err, notes.ErrDegenerate) && a.OldStr == "" {
+		return nil, err
-			// hyperguild#115: "old_str is empty" alone doesn't say whether the
-			// caller sent it empty or a hop between the caller and here lost
-			// it. Naming the raw argument byte count makes that distinguishable
-			// without a second investigation.
-			return notes.Result{}, nil, fmt.Errorf("%w (raw arguments were %d bytes)", err, len(args))
-		}
-		return notes.Result{}, nil, err
 	}
 
 	// Reindex only when the edit could have changed what the index reads.
@@ -205,8 +121,7 @@ func (s *Server) editWithScope(args json.RawMessage, scope notes.Scope) (notes.R
 			res.ReindexError = ierr.Error()
 		}
 	}
-	out, merr := json.Marshal(res)
+	return json.Marshal(res)
-	return res, out, merr
 }
 
 // wingOf returns the wing for a wiki path, or "" for knowledge/ and root.

ingestion/internal/mcp/tools_notes_test.go

@@ -2,22 +2,13 @@
 package mcp_test
 
 import (
-	"context"
-	"crypto/sha256"
-	"encoding/hex"
 	"encoding/json"
 	"net/http"
 	"net/http/httptest"
 	"os"
 	"path/filepath"
-	"strings"
 	"testing"
 
-	"github.com/mathiasbq/hyperguild/ingestion/internal/audit"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/brainstore"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/capture"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/capturehttp"
-	"github.com/mathiasbq/hyperguild/ingestion/internal/classification"
 	"github.com/mathiasbq/hyperguild/ingestion/internal/mcp"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
@@ -70,29 +61,6 @@ func TestBrainReadAndEdit_RoundTripThroughJSONRPC(t *testing.T) {
 		"only the matched bytes may change")
 }
 
-func TestBrainEdit_EmptyOldStrErrorNamesRawArgumentBytes(t *testing.T) {
-	// hyperguild#115: a session reported "old_str is empty" with an old_str
-	// that, on their end, was never empty. The server-side path was
-	// unreachable to reproduce (verified separately: a fresh brain_edit call
-	// with real content round-trips cleanly), which points at something
-	// between a specific client and this call losing the field. The fix this
-	// issue actually asked for isn't a behavior change — old_str=="" must
-	// still refuse — it's that the refusal should say how many raw argument
-	// bytes it received, so "client sent empty" is distinguishable from
-	// "server received empty after some hop lost it" without a second
-	// session's worth of guessing.
-	dir := newBrainRepo(t)
-	srv := mcp.NewServer(dir, nil, nil, nil)
-
-	resp := call(t, srv, "brain_edit", map[string]any{
-		"path": "wiki/homelab/facts/n.md", "old_str": "", "new_str": "BETA",
-	})
-	errMsg, ok := resp["error"].(map[string]any)["message"].(string)
-	require.True(t, ok, "%v", resp)
-	assert.Contains(t, errMsg, "old_str is empty")
-	assert.Contains(t, errMsg, "raw arguments were", "%v", errMsg)
-}
-
 func TestBrainEdit_RefusesGovernanceFilesFromTheModelFacingTool(t *testing.T) {
 	dir := newBrainRepo(t)
 	srv := mcp.NewServer(dir, nil, nil, nil)
@@ -157,164 +125,3 @@ func mustJSON(t *testing.T, v any) []byte {
 	require.NoError(t, err)
 	return b
 }
-
-// ---- hyperguild#97: a governance rewrite must be observed, not just gated ----
-
-// govSink captures audit records. Governance edits are rare, so the whole
-// history is kept and asserted on rather than sampled.
-type govSink struct {
-	entries  []capture.AuditEntry
-	outcomes []capture.AuditOutcome
-	recErr   error
-}
-
-func (s *govSink) Reserve(context.Context, classification.Level) (capture.AuditOutcome, error) {
-	return capture.AuditCentral, nil
-}
-
-func (s *govSink) Record(_ context.Context, e capture.AuditEntry, o capture.AuditOutcome) error {
-	s.entries = append(s.entries, e)
-	s.outcomes = append(s.outcomes, o)
-	return s.recErr
-}
-
-type govNotifier struct {
-	msgs []string
-	err  error
-}
-
-func (n *govNotifier) Notify(_ context.Context, msg string) error {
-	n.msgs = append(n.msgs, msg)
-	return n.err
-}
-
-// govServer wires capture (which is what re-derives the static principal) plus
-// the #97 observer, and returns the brain dir so the test can read the file.
-func govServer(t *testing.T) (*mcp.Server, string, *govSink, *govNotifier) {
-	t.Helper()
-	dir := newBrainRepo(t)
-	cfg, err := classification.Load(dir)
-	require.NoError(t, err)
-	svc := capture.NewService(brainstore.New(dir), capFakeTracker{}, cfg, audit.NewSlogSink(nil))
-
-	srv := mcp.NewServer(dir, nil, nil, nil)
-	srv.WithCapture(svc, nil, capStaticTok, "local-cli", capturehttp.NewOriginResolver(nil))
-	sink, notifier := &govSink{}, &govNotifier{}
-	srv.WithGovernanceObserver(sink, notifier)
-	return srv, dir, sink, notifier
-}
-
-// authCall is call() with an Authorization header, so the static principal is
-// present and brain_edit_root's gate opens.
-func authCall(t *testing.T, srv *mcp.Server, authz, name string, args map[string]any) map[string]any {
-	t.Helper()
-	req := httptest.NewRequest(http.MethodPost, "/mcp", body(t, map[string]any{
-		"jsonrpc": "2.0", "id": 1, "method": "tools/call",
-		"params": map[string]any{"name": name, "arguments": args},
-	}))
-	if authz != "" {
-		req.Header.Set("Authorization", authz)
-	}
-	rr := httptest.NewRecorder()
-	srv.ServeHTTP(rr, req)
-	var resp map[string]any
-	require.NoError(t, json.Unmarshal(rr.Body.Bytes(), &resp))
-	return resp
-}
-
-func sha256hex(s string) string {
-	sum := sha256.Sum256([]byte(s))
-	return hex.EncodeToString(sum[:])
-}
-
-func TestBrainEditRoot_RecordsAnAuditEntryNamingPrincipalPathAndBothHashes(t *testing.T) {
-	// The gate proves a rewrite was ALLOWED. Only a record proves one HAPPENED
-	// — and brain-sync will commit it within 15 minutes authored `brain-sync`,
-	// so git history cannot tell it apart from routine note traffic.
-	srv, dir, sink, _ := govServer(t)
-
-	resp := authCall(t, srv, "Bearer "+capStaticTok, "brain_edit_root", map[string]any{
-		"path": "CLAUDE.md", "old_str": "# rules", "new_str": "# rewritten",
-	})
-	require.NotContains(t, resp, "error", "%v", resp["error"])
-
-	require.Len(t, sink.entries, 1, "exactly one audit record per governance rewrite")
-	e := sink.entries[0]
-	assert.Equal(t, "local-cli", e.Principal)
-	assert.Contains(t, e.Items, "CLAUDE.md", "the record must name what was rewritten")
-
-	joined := strings.Join(e.SecurityEvents, " ")
-	assert.Contains(t, joined, sha256hex("# rules\n"), "before-hash must be recorded")
-	assert.Contains(t, joined, sha256hex("# rewritten\n"), "after-hash must be recorded")
-	assert.NotZero(t, e.Timestamp)
-
-	got, err := os.ReadFile(filepath.Join(dir, "CLAUDE.md"))
-	require.NoError(t, err)
-	assert.Equal(t, "# rewritten\n", string(got))
-}
-
-func TestBrainEditRoot_NotifiesWithPathAndHashesButNeverContent(t *testing.T) {
-	srv, _, _, notifier := govServer(t)
-
-	resp := authCall(t, srv, "Bearer "+capStaticTok, "brain_edit_root", map[string]any{
-		"path": "CLAUDE.md", "old_str": "# rules", "new_str": "# rewritten",
-	})
-	require.NotContains(t, resp, "error", "%v", resp["error"])
-
-	require.Len(t, notifier.msgs, 1)
-	msg := notifier.msgs[0]
-	assert.Contains(t, msg, "CLAUDE.md")
-	assert.Contains(t, msg, "local-cli")
-	assert.Contains(t, msg, sha256hex("# rules\n"))
-	assert.Contains(t, msg, sha256hex("# rewritten\n"))
-
-	// The notification travels to a phone through a third-party topic. A hash
-	// identifies a rewrite; the bytes would leak whatever was written.
-	assert.NotContains(t, msg, "# rewritten", "no file content in the notification body")
-	assert.NotContains(t, msg, "# rules")
-}
-
-func TestBrainEditRoot_RefusedProducesNoRecordNoNotificationNoWrite(t *testing.T) {
-	srv, dir, sink, notifier := govServer(t)
-
-	// No Authorization header → no static principal → the gate stays shut.
-	resp := authCall(t, srv, "", "brain_edit_root", map[string]any{
-		"path": "CLAUDE.md", "old_str": "# rules", "new_str": "# rewritten",
-	})
-	require.Contains(t, resp, "error")
-
-	assert.Empty(t, sink.entries, "a refusal is not a rewrite — recording one would cry wolf")
-	assert.Empty(t, notifier.msgs)
-	got, err := os.ReadFile(filepath.Join(dir, "CLAUDE.md"))
-	require.NoError(t, err)
-	assert.Equal(t, "# rules\n", string(got))
-}
-
-func TestBrainEditRoot_FailedEditProducesNoRecordNoNotification(t *testing.T) {
-	// Authorised but no match: the door opened and nothing went through it.
-	srv, _, sink, notifier := govServer(t)
-
-	resp := authCall(t, srv, "Bearer "+capStaticTok, "brain_edit_root", map[string]any{
-		"path": "CLAUDE.md", "old_str": "absent-from-the-file", "new_str": "x",
-	})
-	require.Contains(t, resp, "error")
-
-	assert.Empty(t, sink.entries)
-	assert.Empty(t, notifier.msgs)
-}
-
-func TestBrainEdit_OnOrdinaryNotesIsNotAudited(t *testing.T) {
-	// The decided asymmetry (#97): note edits are covered by git history, which
-	// carries the same before/after bytes with a diff. Governance files get the
-	// extra trail because they change what later agents obey, not because they
-	// are harder to reconstruct.
-	srv, _, sink, notifier := govServer(t)
-
-	resp := authCall(t, srv, "Bearer "+capStaticTok, "brain_edit", map[string]any{
-		"path": "wiki/homelab/facts/n.md", "old_str": "beta", "new_str": "BETA",
-	})
-	require.NotContains(t, resp, "error", "%v", resp["error"])
-
-	assert.Empty(t, sink.entries, "note edits must not fill the governance audit trail")
-	assert.Empty(t, notifier.msgs)
-}

ingestion/internal/notes/edit.go

@@ -37,10 +37,6 @@ var pathLocks sync.Map // string -> *sync.Mutex
 // Result is what a successful edit reports.
 type Result struct {
 	Path         string `json:"path"`
-	// PrevContentHash is the sha256 of the file as it was before this edit.
-	// Paired with ContentHash it identifies a rewrite in an audit trail or an
-	// alert without carrying any of the bytes (hyperguild#97).
-	PrevContentHash string `json:"prev_content_hash"`
 	ContentHash  string `json:"content_hash"`
 	BytesBefore  int    `json:"bytes_before"`
 	BytesAfter   int    `json:"bytes_after"`
@@ -153,10 +149,8 @@ func Edit(brainDir, path, oldStr, newStr string, scope Scope) (Result, error) {
 	}
 
 	sum := sha256.Sum256([]byte(after))
-	prev := sha256.Sum256(before)
 	return Result{
 		Path:        t.Rel,
-		PrevContentHash: hex.EncodeToString(prev[:]),
 		ContentHash: hex.EncodeToString(sum[:]),
 		BytesBefore: len(before),
 		BytesAfter:  len(after),

ingestion/internal/pipeline/build.go

@@ -76,9 +76,6 @@ func buildFrontmatter(rp RawPage, date string) string {
 		}
 		fmt.Fprintf(&sb, "date_ingested: %s\n", date)
 		fmt.Fprintf(&sb, "last_updated: %s\n", date)
-		if rp.SourceHash != "" {
-			fmt.Fprintf(&sb, "source_hash: %s\n", rp.SourceHash)
-		}
 		if rp.Source != "" {
 			fmt.Fprintf(&sb, "source: %s\n", yamlScalar(rp.Source))
 		}

ingestion/internal/pipeline/parse.go

@@ -20,10 +20,6 @@ type RawPage struct {
 	// ingested content's own frontmatter (see parseContentFrontmatter) — never
 	// set by the LLM. json:"-" keeps them immune to same-named keys the LLM
 	// might emit. Only meaningful for Type == "source".
-	// SourceHash is sha256 of the ingested BODY (frontmatter excluded), stamped
-	// so the next ingest of the same source can tell "unchanged" from "edited"
-	// without re-running extraction (#105).
-	SourceHash string `json:"-"`
 	Source    string `json:"-"`
 	Author    string `json:"-"`
 	Published string `json:"-"`
@@ -116,11 +112,6 @@ type sourceMeta struct {
 	Source    string
 	Author    string
 	Published string
-	// BodyHash is sha256 of the content with any leading frontmatter removed.
-	// Body-only on purpose: a re-crawl that stamps a new fetch date has not
-	// changed the source, and treating that as drift would re-extract the
-	// whole corpus every time a crawler ran (#105).
-	BodyHash string
 }
 
 // parseContentFrontmatter extracts source/author/published from a leading
@@ -163,7 +154,6 @@ func applySourceMeta(pages []RawPage, meta sourceMeta) {
 		if pages[i].Type != "source" {
 			continue
 		}
-		pages[i].SourceHash = meta.BodyHash
 		pages[i].Source = meta.Source
 		pages[i].Author = meta.Author
 		pages[i].Published = meta.Published

ingestion/internal/pipeline/pipeline.go

@@ -3,8 +3,6 @@ package pipeline
 
 import (
 	"context"
-	"crypto/sha256"
-	"encoding/hex"
 	"fmt"
 	"os"
 	"path/filepath"
@@ -28,11 +26,6 @@ type Config struct {
 type Result struct {
 	Pages    []string // relative paths written (or would-be written in dry-run)
 	Warnings []string
-	// Skipped reports that the source was byte-identical to the last ingest,
-	// so no extraction ran and nothing was written. Reported rather than
-	// silent: a run that does nothing must say so, or "the pipeline is fine"
-	// and "the pipeline stopped working" look the same (#105, #107).
-	Skipped bool
 }
 
 // Run ingests content and writes structured wiki pages to brainDir/wiki/.
@@ -50,32 +43,13 @@ func Run(ctx context.Context, cfg Config, brainDir, content, source string, dryR
 
 	sourceSlug := wiki.Slug(source)
 	date := time.Now().UTC().Format("2006-01-02")
-
-	// Drift check BEFORE any extraction: an unchanged source costs a full LLM
-	// pass over every chunk to produce a result that merges to nothing (#105).
-	// The merge is already idempotent (#103), so this is cost and signal, not
-	// correctness — which is why it is safe for it to be an early return.
-	bodyHash := hashBody(content)
-	if !dryRun && bodyHash != "" && bodyHash == storedSourceHash(brainDir, sourceSlug) {
-		return Result{Skipped: true, Warnings: []string{
-			fmt.Sprintf("source %q unchanged since last ingest (hash %s) — extraction skipped", source, bodyHash[:12]),
-		}}, nil
-	}
-
-	// The source's own page path is deterministic (sourceSlug, computed above)
-	// even before extraction runs, unlike a concept/entity page's path, which
-	// only exists once the model has produced a title. So page-aware
-	// extraction (#106) is scoped to the source page: it's the one page every
-	// chunk's prompt can be given in advance.
-	existingPage := readSourcePage(brainDir, sourceSlug)
-
 	chunks := Chunk(content, cfg.ChunkSize)
 
 	var allRaw []RawPage
 	var allWarnings []string
 
 	for _, chunk := range chunks {
-		userPrompt := BuildPrompt(schema, source, chunk, inventory, existingPage)
+		userPrompt := BuildPrompt(schema, source, chunk, inventory)
 		output, err := cfg.Complete(ctx, systemPrompt, userPrompt)
 		if err != nil {
 			return Result{}, fmt.Errorf("LLM call: %w", err)
@@ -85,9 +59,7 @@ func Run(ctx context.Context, cfg Config, brainDir, content, source string, dryR
 		allWarnings = append(allWarnings, warnings...)
 	}
 
-	meta := parseContentFrontmatter(content)
+	applySourceMeta(allRaw, parseContentFrontmatter(content))
-	meta.BodyHash = bodyHash
-	applySourceMeta(allRaw, meta)
 
 	return buildAndWrite(allRaw, sourceSlug, date, brainDir, source, inventory, allWarnings, dryRun)
 }
@@ -124,11 +96,7 @@ func buildAndWrite(rawPages []RawPage, sourceSlug, date, brainDir, source string
 			if err := os.MkdirAll(filepath.Dir(dest), 0o755); err != nil {
 				return Result{}, fmt.Errorf("mkdir for %s: %w", page.Path, err)
 			}
-			content, err := reviseOrCreate(dest, page)
+			if err := os.WriteFile(dest, []byte(page.Content), 0o644); err != nil {
-			if err != nil {
-				return Result{}, err
-			}
-			if err := os.WriteFile(dest, []byte(content), 0o644); err != nil {
 				return Result{}, fmt.Errorf("write %s: %w", page.Path, err)
 			}
 		}
@@ -147,81 +115,6 @@ func buildAndWrite(rawPages []RawPage, sourceSlug, date, brainDir, source string
 	return Result{Pages: written, Warnings: warnings}, nil
 }
 
-// hashBody returns sha256 of content with any leading frontmatter block
-// removed, or "" for empty content.
-//
-// Body-only on purpose: a re-crawl that stamps a new fetch date has not changed
-// the source, and treating that as drift would re-extract the corpus every time
-// a crawler ran (#105).
-func hashBody(content string) string {
-	body := content
-	if strings.HasPrefix(body, "---\n") {
-		if _, rest, found := strings.Cut(body[4:], "\n---"); found {
-			body = strings.TrimPrefix(rest, "\n")
-		}
-	}
-	if strings.TrimSpace(body) == "" {
-		return ""
-	}
-	sum := sha256.Sum256([]byte(body))
-	return hex.EncodeToString(sum[:])
-}
-
-// readSourcePage returns the full on-disk content of the source page at
-// wiki/sources/<sourceSlug>.md, or "" when it doesn't exist yet.
-func readSourcePage(brainDir, sourceSlug string) string {
-	raw, err := os.ReadFile(filepath.Join(brainDir, "wiki", "sources", sourceSlug+".md"))
-	if err != nil {
-		return ""
-	}
-	return string(raw)
-}
-
-// storedSourceHash reads source_hash from the source page a previous ingest
-// wrote, or "" when there is no such page or no such field.
-//
-// Absence always means "extract". That is the fail-safe direction: a missed
-// skip costs one extraction, while a wrong skip loses an update silently — and
-// silence is the failure mode this repo keeps paying for.
-func storedSourceHash(brainDir, sourceSlug string) string {
-	for _, line := range strings.Split(readSourcePage(brainDir, sourceSlug), "\n") {
-		if key, value, found := strings.Cut(line, ":"); found && strings.TrimSpace(key) == "source_hash" {
-			return strings.TrimSpace(value)
-		}
-	}
-	return ""
-}
-
-// reviseOrCreate returns the bytes to write for one extracted page: merged into
-// whatever is already on disk, or the page as-is when the path is new.
-//
-// This is the compile half of compile-on-ingest. Before it, the write was an
-// unconditional os.WriteFile, so re-ingesting a source replaced its page
-// wholesale and discarded everything accumulated since — including human edits
-// (hyperguild#43: "re-ingest overwrites wholesale").
-//
-// The merge is deliberately asymmetric in the existing page's favour:
-// wiki.Merge keeps the on-disk frontmatter and the on-disk version of any
-// section both sides carry, adds sections only the extraction produced, and
-// unions bullet lists. So a freshly extracted page can add to a note but never
-// silently rewrite what a human put there — which is what makes it safe to run
-// this on every ingest rather than behind a review gate.
-//
-// Known limitation: because the on-disk frontmatter wins, `last_updated` keeps
-// its first-ingest date on a revised page. Left deliberately — the alternative
-// is this function editing frontmatter it does not own, and no lint reads that
-// field today.
-func reviseOrCreate(dest string, page wiki.Page) (string, error) {
-	existing, err := os.ReadFile(dest)
-	switch {
-	case os.IsNotExist(err):
-		return page.Content, nil
-	case err != nil:
-		return "", fmt.Errorf("read existing %s: %w", page.Path, err)
-	}
-	return wiki.Merge(wiki.Page{Path: page.Path, Content: string(existing)}, page).Content, nil
-}
-
 // mergeAll deduplicates pages by path, merging content from later occurrences.
 func mergeAll(pages []wiki.Page) []wiki.Page {
 	order := make([]string, 0, len(pages))

ingestion/internal/pipeline/pipeline_test.go

@@ -171,223 +171,3 @@ func mustJSON(v any) string {
 	}
 	return string(b)
 }
-
-// --- B1: compile-on-ingest — revise the existing page, never clobber it -----
-
-func TestRunRaw_MergesIntoAnExistingPageInsteadOfOverwritingIt(t *testing.T) {
-	// Before this, buildAndWrite did an unconditional os.WriteFile: re-ingesting
-	// a source replaced its page wholesale, discarding anything accumulated
-	// since — including human edits. hyperguild#43 recorded the symptom as
-	// "re-ingest overwrites wholesale".
-	dir := t.TempDir()
-	page := filepath.Join(dir, "wiki", "sources", "shape-up.md")
-	require.NoError(t, os.MkdirAll(filepath.Dir(page), 0o755))
-	require.NoError(t, os.WriteFile(page, []byte(`---
-title: 'Shape Up'
----
-
-## Summary
-
-A book about shaping product work.
-
-## My Take
-
-Read this before the next planning cycle.
-`), 0o644))
-
-	_, err := RunRaw(dir, "shape-up", []RawPage{{
-		Title: "Shape Up", Type: "source", Subtype: "book", Domain: "product-strategy",
-		Content: "## Summary\n\nA book about shaping product work.\n\n## Key Claims\n\n- Appetite beats estimation.\n",
-	}}, false)
-	require.NoError(t, err)
-
-	got, err := os.ReadFile(page)
-	require.NoError(t, err)
-	s := string(got)
-
-	assert.Contains(t, s, "## My Take", "a section the extraction never saw must survive the merge")
-	assert.Contains(t, s, "Read this before the next planning cycle.")
-	assert.Contains(t, s, "Appetite beats estimation.", "newly extracted material must still land")
-}
-
-func TestRunRaw_ReIngestingUnchangedContentIsByteIdentical(t *testing.T) {
-	// Compile-on-ingest runs on every ingest, so "nothing changed" must produce
-	// no diff at all. Otherwise every re-ingest dirties the tree, brain-sync
-	// commits it, and the git history fills with noise that hides real edits.
-	dir := t.TempDir()
-	raw := []RawPage{{
-		Title: "Shape Up", Type: "source", Subtype: "book", Domain: "product-strategy",
-		Content: "## Summary\n\nA book about shaping product work.\n\n## Open Questions\n\n- Does appetite scale?\n",
-	}}
-
-	_, err := RunRaw(dir, "shape-up", raw, false)
-	require.NoError(t, err)
-	first, err := os.ReadFile(filepath.Join(dir, "wiki", "sources", "shape-up.md"))
-	require.NoError(t, err)
-
-	_, err = RunRaw(dir, "shape-up", raw, false)
-	require.NoError(t, err)
-	second, err := os.ReadFile(filepath.Join(dir, "wiki", "sources", "shape-up.md"))
-	require.NoError(t, err)
-
-	assert.Equal(t, string(first), string(second),
-		"re-ingesting unchanged content must leave the page byte-identical")
-}
-
-// --- #105: source drift — an unchanged re-ingest must not re-extract --------
-
-func TestRun_SkipsExtractionWhenTheSourceIsUnchanged(t *testing.T) {
-	// #103 made a re-ingest harmless (byte-identical merge). It is still not
-	// free: the full LLM extraction runs over every chunk to produce a result
-	// that merges to nothing. This is the cost half.
-	dir := t.TempDir()
-	var calls int
-	cfg := Config{Complete: func(_ context.Context, _, _ string) (string, error) {
-		calls++
-		return `[{"title":"Shape Up","type":"source","subtype":"book","domain":"product","content":"## Summary\n\nA book.\n"}]`, nil
-	}}
-
-	content := "---\nsource: https://example.com/shape-up\n---\n\nThe body of the article.\n"
-
-	first, err := Run(context.Background(), cfg, dir, content, "shape-up", false)
-	require.NoError(t, err)
-	require.Equal(t, 1, calls, "first ingest must extract")
-	assert.False(t, first.Skipped)
-
-	second, err := Run(context.Background(), cfg, dir, content, "shape-up", false)
-	require.NoError(t, err)
-	assert.Equal(t, 1, calls, "unchanged content must not be extracted again")
-	assert.True(t, second.Skipped, "the skip must be reported, not silent")
-}
-
-func TestRun_ReExtractsWhenTheSourceBodyChanged(t *testing.T) {
-	dir := t.TempDir()
-	var calls int
-	cfg := Config{Complete: func(_ context.Context, _, _ string) (string, error) {
-		calls++
-		return `[{"title":"Shape Up","type":"source","subtype":"book","domain":"product","content":"## Summary\n\nA book.\n"}]`, nil
-	}}
-
-	_, err := Run(context.Background(), cfg, dir, "---\nsource: x\n---\n\nversion one\n", "shape-up", false)
-	require.NoError(t, err)
-	_, err = Run(context.Background(), cfg, dir, "---\nsource: x\n---\n\nversion two — the source was edited\n", "shape-up", false)
-	require.NoError(t, err)
-
-	assert.Equal(t, 2, calls, "changed content must be re-extracted")
-}
-
-// --- #106: page-aware extraction — the model sees the page it is revising --
-
-func TestRun_ExistingSourcePageIsIncludedInTheExtractionPrompt(t *testing.T) {
-	// #103 made the merge asymmetric (on-disk wins); #106 is the other half —
-	// the extraction itself gets to see what's already there instead of
-	// producing a page blind and letting the merge reconcile it afterwards.
-	// This only proves the existing page reaches the prompt; the byte-identical
-	// guarantee for an echoed-back revision is a separate test below.
-	dir := t.TempDir()
-	for _, sub := range []string{"wiki/concepts", "wiki/entities", "wiki/sources"} {
-		require.NoError(t, os.MkdirAll(filepath.Join(dir, sub), 0o755))
-	}
-
-	seeded := "---\ntitle: 'Shape Up'\n---\n\n## Summary\n\nA book about shaping product work.\n\n## Key Claims\n\n- Appetite beats estimation.\n"
-	page := filepath.Join(dir, "wiki", "sources", "shape-up.md")
-	require.NoError(t, os.WriteFile(page, []byte(seeded), 0o644))
-
-	var gotPrompt string
-	cfg := Config{Complete: func(_ context.Context, _, user string) (string, error) {
-		gotPrompt = user
-		return mustJSON([]RawPage{{
-			Title: "Shape Up", Type: "source", Subtype: "book",
-			Content: "## Summary\n\nA book about shaping product work.\n",
-		}}), nil
-	}}
-
-	// Deliberately does not mention "Appetite beats estimation." — that phrase
-	// can only reach the prompt via the existing on-disk page, not the source
-	// content, so its presence proves the page was threaded through.
-	content := "A short editorial update to the book's listing. No new claims here."
-	_, err := Run(context.Background(), cfg, dir, content, "shape-up", false)
-	require.NoError(t, err)
-
-	assert.Contains(t, gotPrompt, "Appetite beats estimation.",
-		"the existing page's content must be visible to the extraction prompt")
-	assert.Contains(t, gotPrompt, "revis", "the prompt must ask for a revision, not a fresh page")
-}
-
-func TestRun_NewSourceHasNoExistingPageInThePrompt(t *testing.T) {
-	// The other side of the same behavior: a source with no page on disk yet
-	// must not get an "existing page" section injected into its prompt at all.
-	dir := t.TempDir()
-	for _, sub := range []string{"wiki/concepts", "wiki/entities", "wiki/sources"} {
-		require.NoError(t, os.MkdirAll(filepath.Join(dir, sub), 0o755))
-	}
-
-	var gotPrompt string
-	cfg := Config{Complete: func(_ context.Context, _, user string) (string, error) {
-		gotPrompt = user
-		return mustJSON([]RawPage{{
-			Title: "New Thing", Type: "source", Subtype: "article",
-			Content: "## Summary\n\nBrand new.\n",
-		}}), nil
-	}}
-
-	_, err := Run(context.Background(), cfg, dir, "Brand new content.", "new-thing", false)
-	require.NoError(t, err)
-
-	assert.NotContains(t, gotPrompt, "Current page",
-		"a source with no page on disk yet must not get a revision section in its prompt")
-}
-
-func TestRun_RevisionEchoingExistingPageStaysByteIdentical(t *testing.T) {
-	// The issue's explicit risk: a model given the current page will sometimes
-	// echo it back verbatim. That must not duplicate content or otherwise
-	// perturb the page — the deterministic merge is still the backstop.
-	dir := t.TempDir()
-	for _, sub := range []string{"wiki/concepts", "wiki/entities", "wiki/sources"} {
-		require.NoError(t, os.MkdirAll(filepath.Join(dir, sub), 0o755))
-	}
-
-	seeded := "---\ntitle: 'Shape Up'\n---\n\n## Summary\n\nA book about shaping product work.\n\n## Key Claims\n\n- Appetite beats estimation.\n"
-	page := filepath.Join(dir, "wiki", "sources", "shape-up.md")
-	require.NoError(t, os.WriteFile(page, []byte(seeded), 0o644))
-
-	cfg := Config{Complete: func(_ context.Context, _, _ string) (string, error) {
-		return mustJSON([]RawPage{{
-			Title: "Shape Up", Type: "source", Subtype: "book",
-			Content: "## Summary\n\nA book about shaping product work.\n\n## Key Claims\n\n- Appetite beats estimation.\n",
-		}}), nil
-	}}
-
-	content := "A short editorial update to the book's listing. No new claims here."
-	result, err := Run(context.Background(), cfg, dir, content, "shape-up", false)
-	require.NoError(t, err)
-	require.False(t, result.Skipped)
-
-	got, err := os.ReadFile(page)
-	require.NoError(t, err)
-
-	want := "---\ntitle: 'Shape Up'\nlast_updated: " + time.Now().UTC().Format("2006-01-02") +
-		"\nsource_hash: " + hashBody(content) + "\n---\n\n" +
-		"## Summary\n\nA book about shaping product work.\n\n" +
-		"## Key Claims\n\n- Appetite beats estimation.\n"
-	assert.Equal(t, want, string(got),
-		"a revision pass that echoes the existing page back must not duplicate or alter its content")
-}
-
-func TestRun_FrontmatterOnlyChangeIsNotDrift(t *testing.T) {
-	// The hash covers the body, so re-fetching a page whose metadata moved
-	// (a re-crawl stamping a new date) is not treated as the source changing.
-	dir := t.TempDir()
-	var calls int
-	cfg := Config{Complete: func(_ context.Context, _, _ string) (string, error) {
-		calls++
-		return `[{"title":"Shape Up","type":"source","subtype":"book","domain":"product","content":"## Summary\n\nA book.\n"}]`, nil
-	}}
-
-	_, err := Run(context.Background(), cfg, dir, "---\nsource: x\nfetched: monday\n---\n\nsame body\n", "shape-up", false)
-	require.NoError(t, err)
-	_, err = Run(context.Background(), cfg, dir, "---\nsource: x\nfetched: tuesday\n---\n\nsame body\n", "shape-up", false)
-	require.NoError(t, err)
-
-	assert.Equal(t, 1, calls, "only the body counts as the source")
-}

ingestion/internal/pipeline/prompt.go

@@ -22,18 +22,8 @@ Each element must have exactly these fields:
 Wikilinks in content: [[Display Name]] — just the display name, no slug, no pipe separator.
 Only link to pages listed in the inventory or pages you are creating in this response.`
 
-// BuildPrompt constructs the user prompt for a single chunk. existingPage is
+// BuildPrompt constructs the user prompt for a single chunk.
-// the full current content (frontmatter + body) of the source's own wiki page
+func BuildPrompt(schema, source, content string, inventory map[wiki.PageType][]wiki.Entry) string {
-// when one already exists on disk, or "" for a source being ingested for the
-// first time. When non-empty, the model is asked to revise that page rather
-// than write a fresh one — see hyperguild#106. The deterministic merge in
-// wiki.Merge remains the backstop regardless of what the model returns: an
-// on-disk section the model doesn't touch survives untouched, and a section
-// it does touch only takes effect where Merge's strategy allows the fresh
-// side to change anything (bullet union, append) — never for an ordinary
-// section, so the model proposing a revision is never how a page gets
-// overwritten.
-func BuildPrompt(schema, source, content string, inventory map[wiki.PageType][]wiki.Entry, existingPage string) string {
 	var sb strings.Builder
 
 	fmt.Fprintf(&sb, "Today's date is %s.\n\n", time.Now().UTC().Format("2006-01-02"))
@@ -59,18 +49,6 @@ func BuildPrompt(schema, source, content string, inventory map[wiki.PageType][]w
 		sb.WriteString("\n")
 	}
 
-	if existingPage != "" {
-		sb.WriteString("## Current page for this source — revise it, don't restart\n\n")
-		sb.WriteString("This source has already been ingested and has the wiki page shown below.\n")
-		sb.WriteString("You are revising that page, not writing a fresh one:\n")
-		sb.WriteString("  - Add sections or claims the source below supports that this page doesn't have yet.\n")
-		sb.WriteString("  - Strengthen a claim where the source gives more detail, evidence, or nuance than what's already there.\n")
-		sb.WriteString("  - Leave unchanged whatever the source doesn't affect — reuse the existing wording verbatim rather than paraphrasing it, so an unchanged claim is recognized as unchanged.\n")
-		sb.WriteString("  - A merge step keeps this page's on-disk content for any section you don't return, so it's fine to omit a section you aren't revising.\n\n")
-		sb.WriteString(existingPage)
-		sb.WriteString("\n\n")
-	}
-
 	sb.WriteString("## Non-negotiable rules\n\n")
 	sb.WriteString("1. Output ONLY a valid JSON array — no prose, no fences.\n")
 	sb.WriteString("2. Fields: title, type, subtype (if applicable), domain (if applicable), content.\n")

ingestion/internal/startupretry/startupretry_test.go

@@ -18,6 +18,7 @@ func TestDo_ReturnsImmediatelyOnFirstSuccess(t *testing.T) {
 		calls++
 		return "ready", nil
 	})
+
 	if err != nil {
 		t.Fatalf("Do: %v", err)
 	}
@@ -40,6 +41,7 @@ func TestDo_SurvivesTransientFailuresThenSucceeds(t *testing.T) {
 		}
 		return "ready", nil
 	})
+
 	if err != nil {
 		t.Fatalf("Do returned %v — a transient 502 must not be fatal", err)
 	}

ingestion/internal/vectorstore/pg_test.go

@@ -16,7 +16,6 @@ import (
 // reachable database.
 //
 // To run:
-//
 //   BRAIN_PG_TEST_DSN='postgres://brain_app:pwd@127.0.0.1:5432/brain' \
 //   go test ./internal/vectorstore/... -run Integration
 func dsn(t *testing.T) string {

ingestion/internal/wiki/merge.go

@@ -3,7 +3,6 @@ package wiki
 
 import (
 	"fmt"
-	"sort"
 	"strings"
 )
 
@@ -30,235 +29,38 @@ type section struct {
 }
 
 // Merge combines two Page values with the same path.
-// Frontmatter is taken from a. The preamble (content before the first ##
+// Frontmatter is taken from a. Sections are merged by strategy:
-// heading) is taken from a — same "on-disk wins" default every unlisted
+// bullet sections union unique lines, append sections concatenate,
-// named section gets, kept as a separate field rather than a section with
+// all others keep a's version. Sections in b not present in a are appended.
-// an empty heading so it can never collide with one (see parseSections).
-// Sections are merged by strategy: bullet sections union unique lines,
-// append sections concatenate, all others keep a's version. Sections in b
-// not present in a are appended.
 func Merge(a, b Page) Page {
-	fmA, preambleA, secsA := parseSections(a.Content)
+	fmA, secsA := parseSections(a.Content)
-	fmB, _, secsB := parseSections(b.Content)
+	_, secsB := parseSections(b.Content)
 
-	// First occurrence wins on a collision — a page can already carry two
-	// on-disk sections that only differ by case or whitespace (the exact
-	// corpus drift this normalization exists to catch going forward, found
-	// pre-existing in review of PR #130): a plain last-write assignment
-	// here would silently and deterministically route every future update
-	// to whichever duplicate happens to sort last in the file, freezing
-	// the other one forever with nothing to say so.
 	idx := make(map[string]int, len(secsA))
 	for i, s := range secsA {
-		key := normalizeHeading(s.heading)
+		idx[s.heading] = i
-		if _, exists := idx[key]; !exists {
-			idx[key] = i
-		}
 	}
 
 	for _, sB := range secsB {
-		key := normalizeHeading(sB.heading)
+		i, exists := idx[sB.heading]
-		i, exists := idx[key]
 		if !exists {
-			idx[key] = len(secsA)
+			idx[sB.heading] = len(secsA)
 			secsA = append(secsA, sB)
 			continue
 		}
 		sA := secsA[i]
 		switch {
-		case bulletSectionsNorm[key]:
+		case bulletSections[sB.heading]:
 			secsA[i].content = mergeBullets(sA.content, sB.content)
-		case appendSectionsNorm[key]:
+		case appendSections[sB.heading]:
-			secsA[i].content = appendNew(sA.content, sB.content)
+			secsA[i].content = strings.TrimRight(sA.content, "\n") + "\n\n" + strings.TrimLeft(sB.content, "\n")
 		}
 	}
 
-	return Page{Path: a.Path, Content: rebuildContent(refreshOwned(fmA, fmB), preambleA, secsA)}
+	return Page{Path: a.Path, Content: rebuildContent(fmA, secsA)}
 }
 
-// normalizeHeading returns the key Merge uses to decide "is this the same
+func parseSections(markdown string) (frontmatter string, sections []section) {
-// section" — trimmed and case-folded, so "Key Claims" and "Key claims" match
-// (hyperguild#106: heading casing drift must not fork a section). It is used
-// only for that comparison; the on-disk section's original heading text
-// (secsA[i].heading, untouched here) is what actually gets written out, so a
-// human's heading casing is never silently rewritten by a merge.
-func normalizeHeading(h string) string {
-	return strings.ToLower(strings.TrimSpace(h))
-}
-
-// bulletSectionsNorm and appendSectionsNorm are bulletSections/appendSections
-// keyed by normalizeHeading instead of exact text, so a section's merge
-// strategy (union bullets, append) is chosen by the same normalized identity
-// Merge uses to match it — otherwise a heading that matched an on-disk
-// section (case-insensitively) could still fail the exact-string strategy
-// lookup and silently fall through to "keep a's version," dropping b's
-// content instead of unioning or appending it.
-var bulletSectionsNorm = normalizeSet(bulletSections)
-var appendSectionsNorm = normalizeSet(appendSections)
-
-func normalizeSet(names map[string]bool) map[string]bool {
-	out := make(map[string]bool, len(names))
-	for k := range names {
-		out[normalizeHeading(k)] = true
-	}
-	return out
-}
-
-// generatorOwned names the frontmatter fields the ingest pipeline may refresh
-// on a page it is revising. Everything else on disk wins.
-//
-// #103 made the on-disk frontmatter win wholesale, which is what stops a
-// regenerating writer from overwriting human-set metadata — a title someone
-// fixed, or the claim-property envelope (brain#21). The cost was that fields
-// the generator legitimately owns froze at their first-ingest values: when it
-// last ran, and what it last saw.
-//
-// An explicit allowlist rather than a carve-out: the ownership boundary is
-// nameable, and a field nobody has thought about stays human-owned by default,
-// which is the safe direction.
-var generatorOwned = map[string]bool{
-	"last_updated": true,
-	"source_hash":  true,
-}
-
-// fmLine is one line of a frontmatter block: a parsed key/value pair, or a
-// raw line (blank, comment, or anything else that isn't a simple "key:
-// value") kept verbatim. Same shape as api.frontmatter's fmLine — this
-// package doesn't import that one (it's unexported there, and a's/b's
-// frontmatter here always arrives as a string, not a parsed struct), so the
-// small, already-proven set()-appends-if-absent behavior is reproduced
-// locally rather than string-index surgery reinvented per call site.
-type fmLine struct {
-	key, value, raw string
-}
-
-// parseFrontmatterBlock parses a "---\n...\n---\n" fenced block (the shape
-// parseSections produces) into an ordered line list. A block with no
-// opening/closing fence — including the empty string, a page with no
-// frontmatter at all — returns nil, ok=false: there is nothing to update in
-// place, only something to potentially create.
-func parseFrontmatterBlock(block string) (lines []fmLine, ok bool) {
-	if !strings.HasPrefix(block, "---\n") {
-		return nil, false
-	}
-	rest := block[len("---\n"):]
-	end := strings.Index(rest, "\n---\n")
-	if end < 0 {
-		return nil, false
-	}
-	for _, line := range strings.Split(rest[:end], "\n") {
-		// An indented line is a continuation (a YAML block-list item, a
-		// wrapped value) never a top-level key, regardless of whether it
-		// happens to contain a colon — "  - 'Chapter 3: The Reckoning'"
-		// is not a key named "- 'Chapter 3". Checked before Cut so a
-		// colon inside one never reaches the key/value path at all.
-		if line != "" && (line[0] == ' ' || line[0] == '\t') {
-			lines = append(lines, fmLine{raw: line})
-			continue
-		}
-		key, val, found := strings.Cut(line, ":")
-		key = strings.TrimSpace(key)
-		if !found || key == "" || strings.HasPrefix(strings.TrimSpace(line), "#") {
-			lines = append(lines, fmLine{raw: line})
-			continue
-		}
-		lines = append(lines, fmLine{key: key, value: strings.TrimSpace(val)})
-	}
-	return lines, true
-}
-
-// setLine updates key's value in place if lines already has it, or appends
-// a new entry if it doesn't — the one behavior the original refreshOwned
-// got wrong (PR #126 review, round 2: it only ever updated in place).
-func setLine(lines []fmLine, key, value string) []fmLine {
-	for i := range lines {
-		if lines[i].key == key {
-			lines[i].value = value
-			return lines
-		}
-	}
-	return append(lines, fmLine{key: key, value: value})
-}
-
-func renderFrontmatterBlock(lines []fmLine) string {
-	if len(lines) == 0 {
-		return ""
-	}
-	var sb strings.Builder
-	sb.WriteString("---\n")
-	for _, l := range lines {
-		switch {
-		case l.key == "":
-			sb.WriteString(l.raw)
-		case l.value == "":
-			// A key with nothing after the colon (the YAML block-list shape:
-			// "aliases:" followed by indented "- item" lines on their own
-			// raw lines) must stay bare — "key: " with a trailing space
-			// is a different, if invisible, byte sequence, and this file's
-			// whole purpose is byte-stability across an unrelated merge.
-			sb.WriteString(l.key)
-			sb.WriteByte(':')
-		default:
-			sb.WriteString(l.key)
-			sb.WriteString(": ")
-			sb.WriteString(l.value)
-		}
-		sb.WriteByte('\n')
-	}
-	sb.WriteString("---\n")
-	return sb.String()
-}
-
-// refreshOwned returns a's frontmatter with the generator-owned fields taken
-// from b where b supplies them. Fields absent from b keep a's value, so a
-// generator that stops emitting a field cannot blank it.
-//
-// A field b supplies that a doesn't have yet — every page ingested before
-// this mechanism existed has no source_hash line at all — is appended, not
-// dropped (round 1 of review: dropping it silently meant source_hash never
-// populated for the pre-existing corpus). If a has no frontmatter fence at
-// all, one is created to hold the new fields rather than splicing raw
-// "key: value" text into the body (round 2: that corrupted the page and the
-// fields would duplicate on every subsequent merge, since unfenced text
-// isn't recognized as frontmatter by parseSections on the next pass).
-func refreshOwned(a, b string) string {
-	bLines, _ := parseFrontmatterBlock(b)
-	bVals := make(map[string]string)
-	for _, l := range bLines {
-		if l.key != "" && generatorOwned[l.key] {
-			bVals[l.key] = l.value
-		}
-	}
-	if len(bVals) == 0 {
-		return a
-	}
-
-	aLines, _ := parseFrontmatterBlock(a) // ok==false (no fence) -> aLines nil, same as "start fresh"
-
-	// Sorted for a deterministic, byte-stable result when more than one
-	// field is appended in the same call — map iteration order isn't.
-	keys := make([]string, 0, len(bVals))
-	for k := range bVals {
-		keys = append(keys, k)
-	}
-	sort.Strings(keys)
-	for _, k := range keys {
-		aLines = setLine(aLines, k, bVals[k])
-	}
-	return renderFrontmatterBlock(aLines)
-}
-
-// parseSections splits markdown into its frontmatter, its preamble (content
-// before the first `## ` heading), and its `## `-headed sections.
-//
-// The preamble is returned separately rather than as a section with an
-// empty heading — a section keyed by heading=="" would collide with a
-// literal degenerate `## ` (marker, no title text; strings.TrimPrefix also
-// yields ""), which is a distinct, addressable section a page can genuinely
-// have, not the same thing as "no heading yet." Two entries sharing one key
-// in Merge's idx map means one of them silently loses lookup visibility —
-// found in review as real, reproducible data loss, not a hypothetical.
-func parseSections(markdown string) (frontmatter, preamble string, sections []section) {
 	lines := strings.Split(markdown, "\n")
 	i := 0
 
@@ -276,22 +78,6 @@ func parseSections(markdown string) (frontmatter, preamble string, sections []se
 		frontmatter = fmt.Sprintf("---\n%s\n---\n", strings.Join(fmLines, "\n"))
 	}
 
-	// Everything before the first `## ` heading — an intro paragraph, or, if
-	// the page has no headings at all, the entire body — is ordinary content,
-	// not something this parser is entitled to drop (hyperguild#103 review:
-	// dropping it meant Merge, one caller up, would silently replace the
-	// whole on-disk body with the fresh extraction whenever a page didn't
-	// follow the ## convention — exactly the class of bug this file exists
-	// to prevent).
-	var preambleLines []string
-	for ; i < len(lines); i++ {
-		if strings.HasPrefix(lines[i], "## ") {
-			break
-		}
-		preambleLines = append(preambleLines, lines[i])
-	}
-	preamble = strings.Join(preambleLines, "\n")
-
 	var cur *section
 	for ; i < len(lines); i++ {
 		line := lines[i]
@@ -310,85 +96,24 @@ func parseSections(markdown string) (frontmatter, preamble string, sections []se
 	return
 }
 
-// rebuildContent serialises sections back into a page.
+func rebuildContent(frontmatter string, sections []section) string {
-//
-// Each section body is normalised to exactly one trailing newline and no
-// leading blank line. Without that, a section keeps whatever blank lines it was
-// parsed with and this function adds its own, so every merge pass grows the page
-// by a blank line — invisible in a diff viewer, fatal to byte-stability. Compile-on-ingest
-// merges on every run, so "merging changes nothing when nothing changed" has to
-// hold at the byte level, not just the content level.
-func rebuildContent(frontmatter, preamble string, sections []section) string {
 	var sb strings.Builder
 	sb.WriteString(frontmatter)
-	if body := strings.Trim(preamble, "\n"); body != "" {
-		fmt.Fprintf(&sb, "\n%s\n", body)
-	}
 	for _, sec := range sections {
-		body := strings.Trim(sec.content, "\n")
+		fmt.Fprintf(&sb, "\n## %s\n\n%s", sec.heading, sec.content)
-		fmt.Fprintf(&sb, "\n## %s\n\n%s\n", sec.heading, body)
 	}
 	return sb.String()
 }
 
-// canonicalLine collapses a line to its comparison key: internal whitespace
-// runs (a re-extraction's bullet spacing, tabs vs spaces, trailing spaces)
-// must not make the same logical line look new. strings.Fields already
-// trims and splits on any whitespace run, so joining it back with single
-// spaces is exactly "same words, same order, whitespace-insensitive."
-func canonicalLine(line string) string {
-	return strings.Join(strings.Fields(line), " ")
-}
-
-// appendNew concatenates the lines of b that a does not already carry.
-//
-// Append sections used to concatenate wholesale, which is correct exactly once.
-// Compile-on-ingest merges a freshly extracted page into the one already on
-// disk, so an unchanged source re-ingested would grow "Open Questions" and
-// "Updates" on every run until the page is unreadable — and the drift guard
-// that would otherwise catch it (hashing the source body) does not exist yet,
-// so idempotency has to hold here rather than upstream.
-//
-// Line-level rather than block-level: the common case is a re-ingest carrying
-// one genuinely new line alongside several it already has. A block-level
-// "skip if identical" would duplicate the old lines every time that happened.
-//
-// The cost is that a line repeated verbatim on purpose collapses to one. For
-// these sections — questions, updates, evolving notes — a repeat is noise
-// rather than signal, and the failure is conservative: the page stops growing
-// instead of growing wrongly.
-func appendNew(a, b string) string {
-	seen := make(map[string]bool)
-	for _, line := range strings.Split(a, "\n") {
-		if c := canonicalLine(line); c != "" {
-			seen[c] = true
-		}
-	}
-
-	var add []string
-	for _, line := range strings.Split(b, "\n") {
-		c := canonicalLine(line)
-		if c == "" || seen[c] {
-			continue
-		}
-		seen[c] = true
-		add = append(add, line)
-	}
-	if len(add) == 0 {
-		return a // nothing new — leave the section byte-identical
-	}
-	return strings.TrimRight(a, "\n") + "\n\n" + strings.Join(add, "\n") + "\n"
-}
-
 func mergeBullets(a, b string) string {
 	seen := make(map[string]bool)
 	var lines []string
 	for _, line := range strings.Split(a+b, "\n") {
-		c := canonicalLine(line)
+		trimmed := strings.TrimSpace(line)
-		if c == "" || seen[c] {
+		if trimmed == "" || seen[trimmed] {
 			continue
 		}
-		seen[c] = true
+		seen[trimmed] = true
 		lines = append(lines, line)
 	}
 	return strings.Join(lines, "\n") + "\n"

ingestion/internal/wiki/merge_test.go

@@ -53,344 +53,3 @@ func TestMerge_KeepsFrontmatterFromA(t *testing.T) {
 	assert.Contains(t, got.Content, "title: A")
 	assert.NotContains(t, got.Content, "title: B")
 }
-
-// --- hyperguild#103 review: a page with content outside any `## ` section ---
-// must never lose that content on merge. parseSections used to only capture
-// text between `## ` headings — anything before the first heading (a common,
-// ordinary shape for a hand-written note: an intro paragraph before the first
-// section) or, worse, an entire page with no `## ` headings at all (a legacy
-// note, a stub, any hand-edit that doesn't follow the section convention)
-// vanished silently. Merge would then fill the page entirely from the fresh
-// extraction — the opposite of "never silently rewrite what a human put
-// there," the guarantee this whole file exists to provide.
-
-func TestMerge_PreservesOnDiskContentWithNoSectionHeadings(t *testing.T) {
-	a := Page{Path: "wiki/x.md", Content: "---\ntitle: X\n---\n\nJust some free text a human wrote. No section headings at all.\n"}
-	b := Page{Path: "wiki/x.md", Content: "---\ntitle: X\n---\n\n## Definition\n\nFresh extraction's take.\n"}
-
-	got := Merge(a, b)
-	assert.Contains(t, got.Content, "Just some free text a human wrote",
-		"on-disk content with no ## headings must survive the merge, not be replaced wholesale by the fresh extraction")
-}
-
-func TestMerge_DegenerateEmptyHeadingDoesNotCollideWithPreamble(t *testing.T) {
-	// Second review pass on #103: representing the preamble as a section with
-	// heading=="" collides with a literal `## ` (marker, no title text) —
-	// strings.TrimPrefix("## ", "## ") is also "". `a` has only a preamble
-	// (no degenerate heading of its own); `b` introduces a genuinely new
-	// degenerate `## ` section. Because both key to "", Merge's idx thinks
-	// b's section "already exists" in a (it's really just a's unrelated
-	// preamble) and never adds it — b's section vanishes from the output
-	// entirely, not merged, not kept, not appended.
-	a := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\nAn intro paragraph.\n\n## Definition\n\nA thing.\n"}
-	b := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## \n\nA genuinely new degenerate section's body.\n\n## Definition\n\nA thing.\n"}
-
-	got := Merge(a, b)
-	assert.Contains(t, got.Content, "An intro paragraph.", "a's own preamble must survive")
-	assert.Contains(t, got.Content, "A genuinely new degenerate section's body.",
-		"b's degenerate section is new content, not a collision with a's unrelated preamble — it must not be silently dropped")
-}
-
-func TestMerge_PreservesPreambleBeforeFirstHeading(t *testing.T) {
-	a := Page{Path: "wiki/x.md", Content: "---\ntitle: X\n---\n\nAn intro paragraph before the first heading.\n\n## Definition\n\nA thing.\n"}
-	b := Page{Path: "wiki/x.md", Content: "---\ntitle: X\n---\n\n## Definition\n\nA thing.\n"}
-
-	got := Merge(a, b)
-	assert.Contains(t, got.Content, "An intro paragraph before the first heading",
-		"text before the first ## heading is ordinary page content, not something the parser is entitled to drop")
-}
-
-// --- hyperguild#103 review: dedup must be whitespace-insensitive -----------
-// Page content is produced by an LLM per run, so byte-identical re-extraction
-// of "the same" logical line is not guaranteed — different bullet spacing or
-// trailing whitespace on an otherwise-identical line must still dedup, or
-// idempotency only holds when the extractor happens to reproduce whitespace
-// exactly, which is not a real guarantee.
-
-func TestMerge_AppendSectionDedupsAcrossWhitespaceVariants(t *testing.T) {
-	a := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Open Questions\n\n- Does this converge?\n"}
-	b := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Open Questions\n\n-   Does this converge?  \n"}
-
-	got := Merge(a, b)
-	assert.Equal(t, 1, strings.Count(got.Content, "Does this converge?"),
-		"same logical line with different whitespace must dedup, not duplicate")
-}
-
-func TestMerge_BulletSectionDedupsAcrossWhitespaceVariants(t *testing.T) {
-	a := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Related Concepts\n\n- [[bar|Bar]]\n"}
-	b := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Related Concepts\n\n-  [[bar|Bar]]\n"}
-
-	got := Merge(a, b)
-	assert.Equal(t, 1, strings.Count(got.Content, "[[bar|Bar]]"),
-		"same logical bullet with different whitespace must dedup, not duplicate")
-}
-
-// --- brain#21/B1: merging must be safe to run again -------------------------
-
-func TestMerge_AppendSectionDoesNotDuplicateContentAlreadyPresent(t *testing.T) {
-	// Compile-on-ingest merges a freshly extracted page into the one already
-	// on disk. Bullet sections union, so they are naturally idempotent — but
-	// append sections concatenate, so re-ingesting an unchanged source would
-	// grow "Open Questions" on every run until the page is unreadable.
-	page := Page{Path: "wiki/sources/x.md", Content: `---
-title: X
----
-
-## Open Questions
-
-- Does this converge?
-`}
-
-	once := Merge(page, page)
-	twice := Merge(once, page)
-
-	assert.Equal(t, 1, strings.Count(once.Content, "Does this converge?"),
-		"merging a page with itself must not duplicate an append section")
-	assert.Equal(t, once.Content, twice.Content,
-		"merge must be idempotent — a third pass may not keep growing the page")
-}
-
-func TestMerge_AppendSectionStillAccumulatesGenuinelyNewContent(t *testing.T) {
-	// The dedup must not turn append sections into keep-a-only sections:
-	// new material is exactly what compile-on-ingest exists to add.
-	existing := Page{Path: "wiki/sources/x.md", Content: `---
-title: X
----
-
-## Open Questions
-
-- Does this converge?
-`}
-	fresh := Page{Path: "wiki/sources/x.md", Content: `---
-title: X
----
-
-## Open Questions
-
-- What happens under load?
-`}
-
-	got := Merge(existing, fresh).Content
-	assert.Contains(t, got, "Does this converge?", "existing question must survive")
-	assert.Contains(t, got, "What happens under load?", "new question must be added")
-}
-
-func TestMerge_GeneratorOwnedFrontmatterFieldsAreRefreshed(t *testing.T) {
-	// #103 made on-disk frontmatter win wholesale, which is what protects
-	// human-set fields from a regenerating writer. The cost was that fields the
-	// generator legitimately owns — when it last ran, what it last saw — froze
-	// at their first-ingest values. An explicit owned-set is the boundary:
-	// named fields the generator may refresh, everything else human-owned.
-	existing := Page{Path: "wiki/sources/x.md", Content: `---
-title: 'X'
-last_updated: 2026-01-01
-source_hash: aaaa
-half_life: durable
-claim_provenance: asserted
----
-
-## Summary
-
-Original.
-`}
-	fresh := Page{Path: "wiki/sources/x.md", Content: `---
-title: 'Renamed by the model'
-last_updated: 2026-08-22
-source_hash: bbbb
----
-
-## Summary
-
-Rewritten by the model.
-`}
-
-	got := Merge(existing, fresh).Content
-
-	assert.Contains(t, got, "last_updated: 2026-08-22", "generator owns last_updated")
-	assert.Contains(t, got, "source_hash: bbbb", "generator owns source_hash")
-	assert.Contains(t, got, "title: 'X'", "a human-set title must survive regeneration")
-	assert.Contains(t, got, "half_life: durable", "the claim envelope must survive regeneration")
-	assert.Contains(t, got, "claim_provenance: asserted")
-	assert.Contains(t, got, "Original.", "an existing section still wins over the model's rewrite")
-	assert.NotContains(t, got, "Renamed by the model")
-}
-
-func TestMerge_GeneratorOwnedFieldsAreAppendedWhenAPageNeverHadThemBefore(t *testing.T) {
-	// Found in review of PR #126: refreshOwned only replaced a generator-owned
-	// line that already existed in a's frontmatter — it never appended one a
-	// didn't have. Every page ingested before this feature shipped has no
-	// source_hash line at all, so on its first re-ingest after deploy, the
-	// fresh hash was silently dropped and the skip-on-unchanged feature this
-	// PR exists to build would never engage for the entire pre-existing
-	// corpus, permanently, with nothing telling anyone.
-	existing := Page{Path: "wiki/sources/x.md", Content: `---
-title: 'X'
----
-
-## Summary
-
-Original.
-`}
-	fresh := Page{Path: "wiki/sources/x.md", Content: `---
-title: 'Renamed by the model'
-last_updated: 2026-08-22
-source_hash: bbbb
----
-
-## Summary
-
-Rewritten by the model.
-`}
-
-	got := Merge(existing, fresh).Content
-
-	// Exact frontmatter block, not Contains: the second review round found
-	// that a substring check doesn't prove the fields landed inside a valid
-	// fence, in the right order, or that the fence itself wasn't corrupted —
-	// two independent mutations (closeIdx targeting the wrong fence, reversed
-	// sort) both survived a Contains-only version of this test.
-	want := "---\ntitle: 'X'\nlast_updated: 2026-08-22\nsource_hash: bbbb\n---\n\n## Summary\n\nOriginal.\n"
-	assert.Equal(t, want, got)
-}
-
-func TestMerge_GeneratorOwnedFieldsCreateAFrontmatterBlockWhenThePageHadNoneAtAll(t *testing.T) {
-	// Second review round on PR #126: when a has no frontmatter fence at all,
-	// the append fallback spliced raw, unfenced "key: value" lines straight
-	// into the body -- worse than the original bug, because the next
-	// parseSections call wouldn't recognize them as frontmatter (they don't
-	// start with `---`), so they'd be absorbed as ordinary preamble text and
-	// re-duplicate on every subsequent merge instead of updating in place.
-	existing := Page{Path: "wiki/sources/x.md", Content: "## Summary\n\nOriginal.\n"}
-	fresh := Page{Path: "wiki/sources/x.md", Content: `---
-last_updated: 2026-08-22
-source_hash: bbbb
----
-
-## Summary
-
-Rewritten by the model.
-`}
-
-	got := Merge(existing, fresh).Content
-
-	want := "---\nlast_updated: 2026-08-22\nsource_hash: bbbb\n---\n\n## Summary\n\nOriginal.\n"
-	assert.Equal(t, want, got)
-}
-
-func TestMerge_GeneratorOwnedFieldsMixedReplaceAndAppend(t *testing.T) {
-	// a already has last_updated (replace in place) but not source_hash
-	// (append) -- the two code paths in the same call, together.
-	existing := Page{Path: "wiki/sources/x.md", Content: `---
-title: 'X'
-last_updated: 2026-01-01
----
-
-## Summary
-
-Original.
-`}
-	fresh := Page{Path: "wiki/sources/x.md", Content: `---
-last_updated: 2026-08-22
-source_hash: bbbb
----
-
-## Summary
-
-Rewritten by the model.
-`}
-
-	got := Merge(existing, fresh).Content
-
-	want := "---\ntitle: 'X'\nlast_updated: 2026-08-22\nsource_hash: bbbb\n---\n\n## Summary\n\nOriginal.\n"
-	assert.Equal(t, want, got)
-}
-
-// --- hyperguild#106: heading casing drift must not fork a section ----------
-// Page-aware extraction asks the model to revise the page it's given, but
-// nothing guarantees the model reproduces a heading's exact on-disk casing
-// ("Key Claims" vs "Key claims"). Without normalizing the match key, that
-// drift silently creates a near-duplicate section instead of updating the
-// original — the failure mode #106 exists to close.
-
-func TestMerge_HeadingCaseDriftMatchesSameSection(t *testing.T) {
-	a := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Key Claims\n\n- Appetite beats estimation.\n"}
-	b := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Key claims\n\n- New pattern holds under load.\n"}
-
-	got := Merge(a, b).Content
-
-	assert.Equal(t, 1, strings.Count(got, "## Key"),
-		"casing drift in the heading must not create a second section")
-	assert.Contains(t, got, "Appetite beats estimation.")
-	assert.Contains(t, got, "New pattern holds under load.",
-		"the differently-cased section's content must still be unioned in")
-	assert.Contains(t, got, "## Key Claims",
-		"the on-disk heading's original casing must be preserved in the output")
-	assert.NotContains(t, got, "## Key claims",
-		"the fresh extraction's heading casing must not overwrite the on-disk display text")
-}
-
-func TestMerge_HeadingWhitespaceDriftMatchesSameSection(t *testing.T) {
-	a := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Open Questions \n\n- Does appetite scale?\n"}
-	b := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n##  Open Questions\n\n- What about remote teams?\n"}
-
-	got := Merge(a, b).Content
-
-	assert.Equal(t, 1, strings.Count(got, "## Open Questions"),
-		"surrounding whitespace drift in the heading must not create a second section")
-	assert.Contains(t, got, "Does appetite scale?")
-	assert.Contains(t, got, "What about remote teams?")
-}
-
-func TestMerge_PreExistingCaseDuplicateHeadingsRouteToTheFirstOccurrence(t *testing.T) {
-	// Found in review of PR #130: normalizeHeading's idx map is built by
-	// iterating secsA with idx[normalizeHeading(s.heading)] = i -- last
-	// write wins. Before heading normalization existed, two on-disk
-	// sections differing only by case (real, pre-existing corpus drift --
-	// the exact pattern #106 itself cites) never collided, since idx keyed
-	// on the exact string. After normalization they collide, and every
-	// fresh update silently, deterministically routes to whichever
-	// duplicate happens to appear LAST in the file -- the first one is
-	// frozen forever, never receiving updates again, with nothing to say
-	// so. A Contains-only check doesn't catch this: nothing is literally
-	// deleted, a bullet just lands under the wrong of two still-present
-	// headings. Assert it lands under the FIRST occurrence instead —
-	// deterministic and matches "earliest is canonical," same reasoning
-	// as every other on-disk-wins default in this file.
-	a := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Key Claims\n\n- claim one\n\n## KEY CLAIMS\n\n- claim two\n"}
-	b := Page{Path: "p.md", Content: "---\ntitle: X\n---\n\n## Key Claims\n\n- claim one\n- fresh claim\n"}
-
-	got := Merge(a, b).Content
-
-	assert.Contains(t, got, "## Key Claims\n\n- claim one\n- fresh claim\n",
-		"the fresh bullet must land in the first-occurrence section, not silently route to the last duplicate")
-	assert.Contains(t, got, "## KEY CLAIMS\n\n- claim two\n",
-		"the second duplicate is untouched by this update, not merged into or overwritten")
-}
-
-func TestRefreshOwned_CommentLinesSurviveUnmangled(t *testing.T) {
-	// Third review round on PR #126: parseFrontmatterBlock dropped the
-	// sibling api package's comment guard (strings.HasPrefix(trimmed, "#")).
-	// Without it, a comment line containing a colon gets cut at the colon
-	// and re-rendered with collapsed whitespace instead of surviving
-	// verbatim.
-	a := "---\n#see also:   https://x/y\ntitle: 'X'\n---\n"
-	b := "---\nsource_hash: bbbb\n---\n"
-
-	got := refreshOwned(a, b)
-	assert.Equal(t, "---\n#see also:   https://x/y\ntitle: 'X'\nsource_hash: bbbb\n---\n", got)
-}
-
-func TestRefreshOwned_IndentedListItemsWithColonsAreNotMisparsedAsKeys(t *testing.T) {
-	// Same round: an indented YAML block-list item that happens to contain a
-	// colon (e.g. a title with a subtitle) is a continuation line, never a
-	// top-level key, regardless of what strings.Cut finds in it. Misparsing
-	// it as a key/value pair and re-rendering strips its indentation,
-	// de-indenting it out of the list it belongs to -- and refreshOwned
-	// re-renders this block on essentially every non-skipped ingest, so this
-	// is the normal path, not an edge case.
-	a := "---\naliases:\n  - 'Chapter 3: The Reckoning'\ntitle: 'X'\n---\n"
-	b := "---\nsource_hash: bbbb\n---\n"
-
-	got := refreshOwned(a, b)
-	assert.Equal(t, "---\naliases:\n  - 'Chapter 3: The Reckoning'\ntitle: 'X'\nsource_hash: bbbb\n---\n", got)
-}

internal/auth/jwt_test.go

@@ -10,10 +10,10 @@ import (
 	"testing"
 	"time"
 
-	"git.d-ma.be/mathias/hyperguild/internal/auth"
 	"github.com/lestrrat-go/jwx/v2/jwa"
 	"github.com/lestrrat-go/jwx/v2/jwk"
 	"github.com/lestrrat-go/jwx/v2/jwt"
+	"git.d-ma.be/mathias/hyperguild/internal/auth"
 	"github.com/stretchr/testify/assert"
 	"github.com/stretchr/testify/require"
 )

internal/config/config.go

@@ -7,6 +7,7 @@ type Config struct {
 	LiteLLMBaseURL string // LITELLM_BASE_URL, default http://iguana:4000
 	LiteLLMAPIKey  string // LITELLM_API_KEY
 	ConfigDir      string // SUPERVISOR_CONFIG_DIR, default ./config/supervisor
+	ModelsFile     string // SUPERVISOR_MODELS_FILE, default <ConfigDir>/../models.yaml
 	IngestBaseURL  string // INGEST_BASE_URL, default http://localhost:3300
 	IngestSvcURL   string // INGEST_SVC_URL — base URL for brain_ingest (/ingest, /ingest-path)
 	KBRetrievalURL string // KB_RETRIEVAL_URL — base URL for brain_search
@@ -22,6 +23,7 @@ func Load() (Config, error) {
 		LiteLLMAPIKey:  os.Getenv("LITELLM_API_KEY"),
 		ConfigDir:      envOr("SUPERVISOR_CONFIG_DIR", "./config/supervisor"),
 	}
+	cfg.ModelsFile = envOr("SUPERVISOR_MODELS_FILE", cfg.ConfigDir+"/../models.yaml")
 	cfg.IngestBaseURL = envOr("INGEST_BASE_URL", "http://localhost:3300")
 	cfg.IngestSvcURL = envOr("INGEST_SVC_URL", "")
 	cfg.KBRetrievalURL = envOr("KB_RETRIEVAL_URL", "")

internal/config/models.go

@@ -0,0 +1,49 @@
+package config
+
+import (
+	"fmt"
+	"os"
+
+	"gopkg.in/yaml.v3"
+)
+
+type skillChain struct {
+	Chain []string `yaml:"chain"`
+}
+
+type modelsFile struct {
+	DefaultChain []string              `yaml:"default_chain"`
+	Skills       map[string]skillChain `yaml:"skills"`
+}
+
+type Models struct {
+	data modelsFile
+}
+
+func LoadModels(path string) (Models, error) {
+	raw, err := os.ReadFile(path)
+	if err != nil {
+		return Models{}, fmt.Errorf("load models: %w", err)
+	}
+	var f modelsFile
+	if err := yaml.Unmarshal(raw, &f); err != nil {
+		return Models{}, fmt.Errorf("parse models: %w", err)
+	}
+	return Models{data: f}, nil
+}
+
+// ModelFor returns the primary model to use for a skill.
+// If override is non-empty, it is returned directly.
+// Falls back to default_chain[0] when the skill has no explicit entry.
+func (m Models) ModelFor(skill, override string) string {
+	if override != "" {
+		return override
+	}
+	if sc, ok := m.data.Skills[skill]; ok && len(sc.Chain) > 0 {
+		return sc.Chain[0]
+	}
+	if len(m.data.DefaultChain) > 0 {
+		return m.data.DefaultChain[0]
+	}
+	return ""
+}

internal/config/models_test.go

@@ -0,0 +1,53 @@
+package config_test
+
+import (
+	"os"
+	"path/filepath"
+	"testing"
+
+	"git.d-ma.be/mathias/hyperguild/internal/config"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+)
+
+const testYAML = `
+default_chain:
+  - ollama/qwen3-coder-30b-tuned
+  - claude-sonnet-4-6
+
+skills:
+  review:
+    chain:
+      - ollama/devstral-tuned
+      - ollama/gemma4
+      - claude-sonnet-4-6
+  spec:
+    chain:
+      - ollama/phi4
+      - claude-opus-4-6
+`
+
+func writeModels(t *testing.T, content string) string {
+	t.Helper()
+	f := filepath.Join(t.TempDir(), "models.yaml")
+	require.NoError(t, os.WriteFile(f, []byte(content), 0644))
+	return f
+}
+
+func TestModelsModelForSkillWithEntry(t *testing.T) {
+	m, err := config.LoadModels(writeModels(t, testYAML))
+	require.NoError(t, err)
+	assert.Equal(t, "ollama/devstral-tuned", m.ModelFor("review", ""))
+}
+
+func TestModelsModelForDefaultFallback(t *testing.T) {
+	m, err := config.LoadModels(writeModels(t, testYAML))
+	require.NoError(t, err)
+	assert.Equal(t, "ollama/qwen3-coder-30b-tuned", m.ModelFor("trainer", ""))
+}
+
+func TestModelsModelForCallerOverride(t *testing.T) {
+	m, err := config.LoadModels(writeModels(t, testYAML))
+	require.NoError(t, err)
+	assert.Equal(t, "claude-opus-4-6", m.ModelFor("review", "claude-opus-4-6"))
+}

internal/registry/registry_test.go

@@ -22,7 +22,6 @@ func (s stubSkill) Tools() []registry.ToolDef {
 		InputSchema: json.RawMessage(`{"type":"object","properties":{}}`),
 	}}
 }
-
 func (s stubSkill) Handle(ctx context.Context, tool string, args json.RawMessage) (json.RawMessage, error) {
 	return json.RawMessage(`{"ok":true}`), nil
 }

scripts/context-sync.sh

@@ -5,29 +5,15 @@
 # For Claude Code: generates project-only CLAUDE.md (it inherits root via tree walk)
 # For everything else: concatenates root AGENT.md + project PROJECT.md
 #
-# Cursor and Aider adapters removed 2026-09-01 — neither is a supported harness
+# Usage: ./scripts/context-sync.sh [adapter...]
-# any more. Supported: Claude Code, Antigravity, OpenCode, Mistral Vibe, Crush,
-# Pi. All read CLAUDE.md or AGENTS.md; system-prompt.txt remains for Open WebUI,
-# Mods and raw API use.
-#
-# Usage: ./scripts/context-sync.sh [--force] [adapter...]
 # Task:  task context:sync
 #
 # Override root context: ROOT_CONTEXT=~/dev/.context/AGENT.md ./scripts/context-sync.sh
 
 set -euo pipefail
 
-# Parse --force flag and collect adapter names separately
-FORCE=false
-ADAPTERS=()
-for _arg in "$@"; do
-  case "$_arg" in
-    --force) FORCE=true ;;
-    *) ADAPTERS+=("$_arg") ;;
-  esac
-done
-
 PROJECT_FILE=".context/PROJECT.md"
+SKILLS_DIR=".skills"
 
 # Walk up to find root .context/AGENT.md
 find_root_context() {
@@ -50,28 +36,19 @@ if [ ! -f "$PROJECT_FILE" ]; then
   exit 1
 fi
 
-# Pre-flight: reject unfilled {{...}} placeholders unless --force
-if [ "$FORCE" = false ]; then
-  _placeholders=$(grep -n '{{[^}]*}}' "$PROJECT_FILE" 2>/dev/null || true)
-  if [ -n "$_placeholders" ]; then
-    echo "Error: unfilled placeholders in $PROJECT_FILE:" >&2
-    while IFS= read -r _match; do
-      _lineno="${_match%%:*}"
-      _content="${_match#*:}"
-      _token=$(printf '%s' "$_content" | grep -o '{{[^}]*}}' | head -1)
-      echo "  $PROJECT_FILE:$_lineno: unfilled placeholder $_token" >&2
-    done <<< "$_placeholders"
-    echo "" >&2
-    echo "Fill these placeholders, then re-run: task context:sync" >&2
-    echo "To bypass validation: bash scripts/context-sync.sh --force" >&2
-    exit 1
-  fi
-fi
-
 if [ -n "$ROOT_CONTEXT" ] && [ -f "$ROOT_CONTEXT" ]; then
   echo "  Root context: $ROOT_CONTEXT"
 else
-  echo "  No root AGENT.md found (project context only)"
+  # No reachable root AGENT.md — common in CI's clean checkout. The root+project
+  # adapters (AGENTS.md, system-prompt.txt) require the root context to
+  # regenerate correctly, so we skip them entirely and only regenerate CLAUDE.md
+  # (which is project-only and inherits root via tree walk in Claude Code itself).
+  echo "  No root AGENT.md found — regenerating CLAUDE.md only"
+  echo "Syncing project context from $PROJECT_FILE..."
+  cat "$PROJECT_FILE" > CLAUDE.md
+  echo "  → CLAUDE.md (project-only)"
+  echo "Done."
+  exit 0
 fi
 
 # Emit root context + separator
@@ -118,7 +95,6 @@ generate_system_prompt() {
 
 # ── MCP config ───────────────────────────────────────────────
 generate_mcp() {
-  # Ensure baseline file exists with project-specific knowledge server
   if [ ! -f .context/mcp.json ]; then
     cat > .context/mcp.json << 'JSON'
 {
@@ -130,47 +106,27 @@ generate_mcp() {
   }
 }
 JSON
+    echo "  → .context/mcp.json (new)"
+  else
+    echo "  → .context/mcp.json (exists, skipped)"
   fi
-
-  # Merge root mcp-servers.json if found alongside root AGENT.md
-  local root_mcp=""
-  if [ -n "$ROOT_CONTEXT" ] && [ -f "$ROOT_CONTEXT" ]; then
-    local candidate
-    candidate="$(dirname "$ROOT_CONTEXT")/mcp-servers.json"
-    [ -f "$candidate" ] && root_mcp="$candidate"
-  fi
-
-  if [ -z "$root_mcp" ]; then
-    echo "  → .context/mcp.json (exists, no root mcp-servers.json found)"
-    return
-  fi
-
-  # Root servers take precedence over project entries on key conflict
-  local root_servers count updated
-  root_servers=$(jq '.servers' "$root_mcp")
-  count=$(printf '%s' "$root_servers" | jq 'keys | length')
-  updated=$(jq --argjson root "$root_servers" \
-    '.mcpServers = (.mcpServers + $root)' \
-    .context/mcp.json)
-  printf '%s\n' "$updated" > .context/mcp.json
-  echo "  → .context/mcp.json (merged $count root servers)"
 }
 
 echo "Syncing project context from $PROJECT_FILE..."
 
-if [ ${#ADAPTERS[@]} -eq 0 ]; then
+if [ $# -eq 0 ]; then
   generate_claude
   generate_agents
   generate_system_prompt
   generate_mcp
 else
-  for adapter in "${ADAPTERS[@]}"; do
+  for adapter in "$@"; do
     case "$adapter" in
       claude)  generate_claude ;;
       agents)  generate_agents ;;
       prompt|system|openwebui|owui|generic) generate_system_prompt ;;
       mcp)     generate_mcp ;;
-      *) echo "Unknown adapter: $adapter" >&2; exit 1 ;;
+      *) echo "Unknown adapter: $adapter" ;;
     esac
   done
 fi

scripts/smoke-routing.sh

@@ -0,0 +1,64 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# Boot the routing binary and exercise its four tools against live deps.
+# Skipped when LITELLM_BASE_URL or BRAIN_URL is unreachable.
+
+LITELLM_BASE_URL="${LITELLM_BASE_URL:-https://llm-api.d-ma.be}"
+BRAIN_URL="${BRAIN_URL:-http://koala:30330}"
+
+if ! curl -sS --max-time 2 "${LITELLM_BASE_URL}/v1/models" >/dev/null 2>&1; then
+  echo "SKIP: LITELLM at ${LITELLM_BASE_URL} unreachable"
+  exit 0
+fi
+if ! curl -sS --max-time 2 "${BRAIN_URL}/query" -X POST -d '{"query":"x","k":1}' -H 'Content-Type: application/json' >/dev/null 2>&1; then
+  echo "SKIP: BRAIN at ${BRAIN_URL} unreachable"
+  exit 0
+fi
+
+PORT=33310
+BIN=$(mktemp)
+trap 'rm -f $BIN; pkill -P $$ -f "$BIN" 2>/dev/null || true' EXIT
+
+go build -o "$BIN" ./cmd/routing
+
+LITELLM_BASE_URL="$LITELLM_BASE_URL" BRAIN_URL="$BRAIN_URL" \
+  ROUTING_PORT="$PORT" SUPERVISOR_CONFIG_DIR="$(pwd)/config/supervisor" \
+  "$BIN" &
+
+# Wait for the binary to bind.
+for _ in $(seq 1 50); do
+  curl -sS "http://127.0.0.1:${PORT}/healthz" >/dev/null 2>&1 && break
+  sleep 0.1
+done
+
+call_tool() {
+  local tool="$1"
+  local args="$2"
+  curl -sS -X POST "http://127.0.0.1:${PORT}/mcp" \
+    -H 'Content-Type: application/json' \
+    -d "{\"jsonrpc\":\"2.0\",\"id\":1,\"method\":\"tools/call\",\"params\":{\"name\":\"${tool}\",\"arguments\":${args}}}" \
+    | jq -e '.result // .error' > /dev/null
+}
+
+echo "calling tools/list..."
+curl -sS -X POST "http://127.0.0.1:${PORT}/mcp" \
+  -H 'Content-Type: application/json' \
+  -d '{"jsonrpc":"2.0","id":1,"method":"tools/list"}' \
+  | jq -r '.result.tools | map(.name) | sort | .[]'
+
+echo "calling each tool..."
+call_tool review          '{"project_root":"/tmp","files":["README.md"],"session_id":"smoke-1"}'
+call_tool debug           '{"project_root":"/tmp","error":"smoke test","session_id":"smoke-1"}'
+call_tool retrospective   '{"session_id":"smoke-1"}'
+call_tool trainer         '{"session_id":"smoke-1"}'
+
+echo "checking brain has _routing entries..."
+sleep 2
+COUNT=$(curl -sS "${BRAIN_URL}/pass-rate?skill=_routing&window=1h" | jq -r '.total // 0')
+if [ "${COUNT}" -lt 4 ]; then
+  echo "FAIL: expected >=4 _routing entries in last 1h, got ${COUNT}"
+  exit 1
+fi
+
+echo "PASS: smoke:routing"

skills/close-session/SKILL.md

@@ -49,13 +49,12 @@ Persist the session via a **single `capture` call** (the `brain:capture` MCP too
 **Assemble one payload:**
 
 - **`insights[]`** — the generalizable learnings from Phase 1 (decisions/failures worth re-reading). Each: `{text, wing, hall}`; add `supersede_slug` to revise a prior note in place instead of creating a duplicate. `hall` ∈ facts/decisions/failures/hypotheses/sources.
-  Optional claim envelope, per insight: `half_life` ∈ volatile/seasonal/durable, `applies` ∈ local/homelab/universal, `claim_provenance` ∈ asserted/inferred — required together whenever either `half_life` or `applies` is set (an envelope with no provenance is rejected). A close-session insight is usually exactly the durable, generalizable, human-decided kind this describes: `half_life: durable, applies: universal, claim_provenance: asserted` is the common case, not a rare opt-in.
 - **`tickets[]`** — the issue actions from Phase 3: `{repo, action, ...}` where action ∈ create/close/comment. Owner is always `mathias` (server-forced).
 - **`context`** — `{harness: "claudeai-chat", session_ref: <chatid8-or-slug>, fidelity: "live-capture", actor: "mathias", classification: <see gate below>}`.
 
 **THE CLASSIFICATION GATE (read before calling — this is where capture refuses).**
 Capture computes an **effective classification = the strictest across EVERY target it touches** (each insight's `wing`, each ticket's `repo`), then refuses if that effective level is `confidential` and the origin is us-nexus (claude.ai is us-nexus). Levels come from `classification.yaml` at the brain root (source of truth, #67), with the code defaults as the floor: `hyperguild`/`homelab` → internal; `client-*` → confidential; **anything untagged → confidential (fail-safe)**.
-- **The rule, not a list**: untagged → confidential (fail-safe). `classification.yaml` at the brain root is the sole authority on what's tagged `internal` today — it grew from 10 to ~39 repos in one sweep (hyperguild#91) and will keep moving, so read the file rather than trust an enumeration frozen at whatever moment this skill was last edited.
+- **Tagged `internal` today** (safe through claude.ai): wings `hyperguild`, `homelab`; repos `brain`, `ai-sessions`, `infra`, `hyperguild`, `homelab`, `tapir`, `agentsquad`, `jepa-fx-risk`, `swedsl`. Treat `classification.yaml` as authoritative — this list is a hint, not gospel.
 - Declare `context.classification: "internal"` for normal homelab work.
 - Insight `wing`s and ticket `repo`s are classification INPUTS, not free-form metadata — every target must resolve `internal` or the whole capture escalates to `confidential` and the gate refuses via claude.ai. Listing the central homelab repos (incl. `brain`/`ai-sessions`) is now fine; they're tagged.
 - If a session genuinely touched **`client-*` or otherwise-untagged** material, it cannot be captured through claude.ai — note that in the verdict rather than trying to force it.