docs: establish canonical documentation architecture (#1210)
ci/woodpecker/push/publish Pipeline failed

This commit was merged in pull request #1210.
This commit is contained in:
2026-08-13 17:56:13 +00:00
parent f82307c4dc
commit 7a6fb024b4
241 changed files with 4722 additions and 1579 deletions
+51
View File
@@ -0,0 +1,51 @@
# Documentation Reports
> **Status:** Current evidence index. Reports record reviews, tests, audits, and deferred findings; they are not requirements or operational instructions by themselves.
Use the canonical guide, API contract, source, and tests to determine current behavior. A report retains the scope and verdict of its original review unless a later report explicitly supersedes it.
## Documentation evidence
- [Documentation catalog and truth audit](documentation/2026-08-10-docs-catalog-audit.md) — migration inventory and static truth assessment.
- [Fleet documentation IA closure](documentation/758-fleet-config-ia-closure.md) — active Fleet documentation acceptance evidence; the executable book remains at `docs/fleet/`.
- [Fleet documentation deferrals](deferred/758-fleet-config-deferrals.md) — explicit holds and deferred live-action boundaries.
- [Issue #756 documentation checklist](documentation/756-discord-plugin-checklist.md) — historical completion checklist for the official Discord plugin workstream.
- [Framework consistency audit — 2026-02-17](documentation/AUDIT-2026-02-17-framework-consistency.md) — historical framework consistency and remediation snapshot.
- [Compaction-refresh #830 checklist](compaction-refresh/830-documentation-checklist.md) — historical incomplete-at-snapshot documentation checklist.
## Code-review evidence
- [Issue #756 independent code review](code-review/756-code-review.md) — historical exact-scope review of the official Discord plugin workstream.
- [Gateway security-hardening code review — 2026-03-13](code-review/gateway-security-20260313.md) — historical no-blocker review snapshot.
## Security evidence
- [Issue #756 security review](security/756-security-review.md) — historical security review of Discord ingress, authorization, routing, and residual risks.
## QA evidence
- [P8-003 performance optimization report](qa/p8-003-performance-optimization.md) — historical implementation evidence; not a current SLO or production benchmark.
- [Gateway security-hardening QA report — 2026-03-13](qa/gateway-security-20260313.md) — historical test report with its original live-smoke-test limitation.
## Native Kanban/SOT evidence
These reports preserve the review sequence for issue #751. Their GO verdicts apply only to the reviewed historical scope and do not decide current Kanban authority or authorize held KBN-101 database work.
- [Initial independent NO-GO](native-kanban-sot/canon-initial-review-no-go.md) — original blocking review.
- [Independent re-review GO](native-kanban-sot/canon-final-rereview-go.md) — follow-up closure review.
- [Ultron final GO](native-kanban-sot/ultron-final-go.md) — historical final-gate record.
- [KBN-101 security/architecture review](native-kanban-sot/kbn-101-contract-security-review-82ce325.md) — active review evidence coupled to the held KBN-101 authority surface.
## Retention rules
- Preserve report wording and verdicts when migrating historical evidence.
- Keep the reviewed commit, issue, scope, and date visible when present.
- Do not treat an old approval as approval of later code.
- Link each tracked report from this index or an explicitly scoped child index.
- Put current operator procedures in the administrator guide, not in reports.
## Related
- [[README|Documentation contract]]
- [[SITEMAP|Documentation sitemap]]
- [[archive/README|Documentation archive]]
@@ -0,0 +1,527 @@
# Mosaic Stack Documentation Catalog and Truth Audit
> **Status:** First-pass static audit — 2026-08-10
> **Task:** `DOCS-IA-002` / `TASKS:DOCS-IA-002`
> **Scope:** Catalog and evidence triage only. No existing documentation was moved, deleted, or rewritten by this audit. The baseline catalog snapshot predates the DOCS-IA-002 plan, scratchpad, and report; those artifacts are listed separately and excluded from baseline counts to avoid self-referential metrics.
## Executive summary
- **283 baseline documentation artifacts** are cataloged: 11 current root files, 269 files under `docs/_old_structure/`, two prior plans, and one prior scratchpad. The three DOCS-IA-002 artifacts are listed separately.
- At the audit baseline, `.gitignore` ignored `docs/reports/`, conflicting with the documentation contract. The migration subsequently removed that blanket rule so canonical reports can be tracked normally.
- The current navigation surface contains **97 internal links, 83 legacy/unresolved links**, plus 2 intentional future blueprint wikilinks in the new `docs/README.md`.
- The historical archive contains **122 links, 12 unresolved links**. These do not represent current navigation, but they matter if pages are promoted again.
- The current broken-link problem is concentrated in `docs/SITEMAP.md` (66), `docs/MISSION-MANIFEST.md` (7), `docs/TASKS.md` (7), and `docs/PRD.md` (3).
- Static code inspection found **31 source/test/framework files** that still reference legacy documentation roots such as `docs/fleet/`, `docs/federation/`, or `docs/architecture/`. These paths cannot be removed until their consumers are migrated or deliberately updated.
- The workspace currently contains **26 package manifests**, 12 root scripts, and 110 package scripts. This is sufficient evidence to validate package/path claims statically, but not to prove deployed behavior.
### High-confidence findings
1. `docs/QUICKSTART.md` is empty and cannot serve as a quickstart.
2. `docs/SITEMAP.md` is structurally stale after the archive move; it is not a reliable current navigation map.
3. `docs/PRD-TUI_Improvements.md` and `docs/TASKS-TUI_Improvements.md` describe a missing `packages/cli` and missing historical worktree. Current TUI code is under `packages/mosaic`.
4. `docs/SSO-PROVIDERS.md` has a verified provider environment-variable core, but its `NEXT_PUBLIC_*_ENABLED` web-flow claim does not match current dynamic provider discovery through `/api/sso/providers`; Keycloak SAML fallback is also absent from the guide.
5. `docs/openapi-tess.yaml` parses as OpenAPI 3.1.0 with 17 paths and is useful as a Tess-scoped contract, but it is in a legacy root location and is not a complete gateway API contract.
6. `docs/PRD.md` is explicitly draft and normative. Its acceptance criteria must not be presented as shipped capabilities; several of its path references are broken because supporting artifacts are archived.
## Audit status model
| Status | Meaning |
| -------------------- | ------------------------------------------------------------------------------------------------------------- |
| `verified` | Directly supported by current source, configuration, tests, or a reproducible static command. |
| `partially-verified` | Some claims are supported, but the page includes unverified, time-sensitive, or environment-dependent claims. |
| `contradicted` | Current repository evidence conflicts with a material claim or referenced path. |
| `stale` | Formerly meaningful, but no longer aligned with current paths or tracked state. |
| `historical` | Retained record of past state; not current operator or developer guidance. |
| `draft` | Normative proposal or requirement; not a statement of shipped behavior. |
| `unverified` | No sufficient evidence was collected in this first pass. |
| `incomplete` | Empty or structurally insufficient for its stated role. |
A document can have two labels, such as `partially-verified/contradicted`, when one section is supported and another section is materially wrong. Archived files are labeled `historical/unverified`: archival status is known, but historical claim accuracy has not been proven.
## Current-document truth triage
| Document | Preliminary status | Role | Evidence and truth notes | Candidate destination |
| -------------------------------- | ------------------------------------ | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------------------------------------------------- |
| `docs/MISSION-MANIFEST.md` | `stale` | MVP mission rollup | Last updated 2026-07-14; seven current-path links are broken and its active-workstream claims were not revalidated. | `tasks/ or archive/missions/` |
| `docs/PERFORMANCE.md` | `partially-verified` | historical performance report | All seven named implementation files exist and key configuration/index markers are present; target metrics and production impact are not proven by this static audit. | `reports/qa/` |
| `docs/PRD-TUI_Improvements.md` | `contradicted/stale` | branch-specific TUI PRD | It names missing `packages/cli` and an absent historical worktree; current TUI code is under `packages/mosaic`. | `archive/ or plans/` |
| `docs/PRD.md` | `draft` | normative product requirements | Explicitly marked draft; three current links point to archived paths. Requirements express intent and acceptance criteria, not shipped behavior. | `PRD.md; split supporting contracts later` |
| `docs/QUICKSTART.md` | `incomplete` | quickstart placeholder | Empty file: 0 bytes and 0 lines. | `USER-GUIDE/getting-started/quickstart.md` |
| `docs/README.md` | `current/verified` | documentation structure contract | Structure, placement, source-of-truth, migration, and link rules were checked in this task; two future blueprint wikilinks are intentionally unresolved. | `README.md` |
| `docs/SITEMAP.md` | `stale/contradicted` | navigation index | 66 current links resolve only against removed pre-archive paths; it must be regenerated after the canonical scaffold and migration map are approved. | `SITEMAP.md` |
| `docs/SSO-PROVIDERS.md` | `partially-verified/contradicted` | SSO operator guide | Required provider environment names and partial-config behavior match `packages/auth`; documented `NEXT_PUBLIC_*_ENABLED` flags are not read by current web code, which discovers providers through `/api/sso/providers`. | `ADMIN-GUIDE/security/sso-providers.md` |
| `docs/TASKS-TUI_Improvements.md` | `stale/historical` | branch-specific TUI task ledger | References an absent worktree and `packages/cli`; Wave 1/2 status and commit claims were not independently reverified against current code. | `tasks/ or archive/` |
| `docs/TASKS.md` | `active/stale-links` | MVP orchestrator rollup | Active rollup with seven broken workstream links. Status is orchestrator-owned and was not changed by this audit. | `TASKS.md until orchestrator archives it` |
| `docs/openapi-tess.yaml` | `partially-verified/legacy-location` | Tess-scoped OpenAPI contract | PyYAML parses OpenAPI 3.1.0 with 17 paths. It covers Tess interaction, Mos coordination, and memory routes, but is not at `docs/API/` and is not a complete gateway contract. | `API/ (scoped Tess contract or consolidated OPENAPI.yaml)` |
### DOCS-IA-002 audit artifacts
- `docs/plans/2026-08-10-docs-catalog-audit.md` — approved audit method and evidence statuses.
- `docs/scratchpads/DOCS-IA-002-catalog-audit.md` — active audit progress and command log.
- `docs/reports/documentation/2026-08-10-docs-catalog-audit.md` — this human-readable report; it required force-add at the audit baseline, before the blanket report ignore rule was removed.
- These artifacts are current working/evidence documentation and must not be mistaken for product requirements or shipped behavior.
## Archived catalog by category
All files below were moved unchanged by commit `cd4409a` on 2026-08-10. Category counts are definitive for this checkout; truth claims remain unverified until a page is selected for migration.
| Archived category | Files | Bytes | Preliminary destination | Default disposition |
| --------------------- | ----: | ------: | ----------------------------------------------------------------- | -------------------------------------------------- |
| `architecture/` | 7 | 84,248 | `DEVELOPER-GUIDE/architecture/` | `historical/unverified`; classify before promotion |
| `archive/` | 11 | 108,472 | `archive/` | `historical/unverified`; classify before promotion |
| `audits/` | 1 | 5,037 | `reports/documentation/ or reports/security/` | `historical/unverified`; classify before promotion |
| `briefs/` | 1 | 10,589 | `plans/ or archive/` | `historical/unverified`; classify before promotion |
| `compaction-refresh/` | 2 | 21,484 | `DEVELOPER-GUIDE/architecture/ or reports/qa/` | `historical/unverified`; classify before promotion |
| `deploy/` | 2 | 10,881 | `ADMIN-GUIDE/deployment/` | `historical/unverified`; classify before promotion |
| `design/` | 4 | 45,773 | `DEVELOPER-GUIDE/architecture/decisions/ or plans/` | `historical/unverified`; classify before promotion |
| `federation/` | 6 | 95,408 | `ADMIN-GUIDE/deployment/ and DEVELOPER-GUIDE/architecture/` | `historical/unverified`; classify before promotion |
| `fleet/` | 38 | 214,726 | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` | `historical/unverified`; classify before promotion |
| `guides/` | 9 | 94,257 | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` | `historical/unverified`; classify before promotion |
| `mission-control/` | 4 | 33,605 | `tasks/ or archive/` | `historical/unverified`; classify before promotion |
| `native-kanban-sot/` | 13 | 659,105 | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` | `historical/unverified`; classify before promotion |
| `plans/` | 12 | 298,514 | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` | `historical/unverified`; classify before promotion |
| `remediation/` | 8 | 218,485 | `reports/deferred/ or tasks/` | `historical/unverified`; classify before promotion |
| `reports/` | 12 | 79,398 | `reports/<category>/` | `historical/unverified`; classify before promotion |
| `requirements/` | 1 | 27,315 | `PRD.md or DEVELOPER-GUIDE/architecture/requirements/` | `historical/unverified`; classify before promotion |
| `reviews/` | 1 | 51,000 | `reports/code-review/` | `historical/unverified`; classify before promotion |
| `rfcs/` | 2 | 114,255 | `DEVELOPER-GUIDE/architecture/rfcs/` | `historical/unverified`; classify before promotion |
| `scratchpads/` | 111 | 638,974 | `archive/ or tasks/ after retention review` | `historical/unverified`; classify before promotion |
| `tasks/` | 4 | 20,803 | `tasks/` | `historical/unverified`; classify before promotion |
| `tess/` | 20 | 645,134 | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` | `historical/unverified`; classify before promotion |
### Category interpretation
- `architecture/`, `design/`, `requirements/`, and `rfcs/` are likely developer architecture material, but each page must be checked for supersession, normative authority, and code alignment.
- `fleet/`, `federation/`, and `tess/` are mixed audiences. They must be split across user, admin, developer, API, reports, and task destinations rather than moved as whole directories.
- `guides/` contains mixed audience material and cannot be mapped by directory name alone.
- `scratchpads/`, `remediation/`, `reports/`, `reviews/`, and `tasks/` are evidence/workflow artifacts. They should not be promoted into current guides without extracting and re-verifying the current facts.
- `archive/` is already historical by intent and should remain separate from the new migration target unless a specific page is needed for provenance.
## Baseline file-level catalog
The following table assigns every file in the baseline snapshot a preliminary status, role, evidence posture, and candidate destination. The DOCS-IA-002 plan, scratchpad, and report are listed in the audit-artifacts section above. These are triage labels, not final migration approvals.
| Path | Title | Status | Role | Evidence posture | Candidate destination |
| ------------------------------------------------------------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------ | -------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ----------------------------------------------------------------- |
| `docs/MISSION-MANIFEST.md` | Mission Manifest — MVP | `stale` | MVP mission rollup | Last updated 2026-07-14; seven current-path links are broken and its active-workstream claims were not revalidated. | `tasks/ or archive/missions/` |
| `docs/PERFORMANCE.md` | Performance Optimization — P8-003 | `partially-verified` | historical performance report | All seven named implementation files exist and key configuration/index markers are present; target metrics and production impact are not proven by this static audit. | `reports/qa/` |
| `docs/PRD-TUI_Improvements.md` | PRD: TUI Improvements — Phase 7 | `contradicted/stale` | branch-specific TUI PRD | It names missing `packages/cli` and an absent historical worktree; current TUI code is under `packages/mosaic`. | `archive/ or plans/` |
| `docs/PRD.md` | PRD: Mosaic Stack v0.1.0 | `draft` | normative product requirements | Explicitly marked draft; three current links point to archived paths. Requirements express intent and acceptance criteria, not shipped behavior. | `PRD.md; split supporting contracts later` |
| `docs/QUICKSTART.md` | (no title) | `incomplete` | quickstart placeholder | Empty file: 0 bytes and 0 lines. | `USER-GUIDE/getting-started/quickstart.md` |
| `docs/README.md` | Mosaic Stack Documentation | `current/verified` | documentation structure contract | Structure, placement, source-of-truth, migration, and link rules were checked in this task; two future blueprint wikilinks are intentionally unresolved. | `README.md` |
| `docs/SITEMAP.md` | Documentation Sitemap | `stale/contradicted` | navigation index | 66 current links resolve only against removed pre-archive paths; it must be regenerated after the canonical scaffold and migration map are approved. | `SITEMAP.md` |
| `docs/SSO-PROVIDERS.md` | SSO Providers | `partially-verified/contradicted` | SSO operator guide | Required provider environment names and partial-config behavior match `packages/auth`; documented `NEXT_PUBLIC_*_ENABLED` flags are not read by current web code, which discovers providers through `/api/sso/providers`. | `ADMIN-GUIDE/security/sso-providers.md` |
| `docs/TASKS-TUI_Improvements.md` | Tasks: TUI Improvements | `stale/historical` | branch-specific TUI task ledger | References an absent worktree and `packages/cli`; Wave 1/2 status and commit claims were not independently reverified against current code. | `tasks/ or archive/` |
| `docs/TASKS.md` | Tasks — MVP (Top-Level Rollup) | `active/stale-links` | MVP orchestrator rollup | Active rollup with seven broken workstream links. Status is orchestrator-owned and was not changed by this audit. | `TASKS.md until orchestrator archives it` |
| `docs/_old_structure/architecture/ADR-MOS-EGRESS-GATEWAYS.md` | ADR: Optional AI egress gateways for runtime-neutral Mos | `historical/unverified` | archived architecture | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/architecture/channel-protocol.md` | Channel Protocol Architecture | `historical/unverified` | archived architecture | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/architecture/compaction-revocation.md` | Compaction observer revocation and runtime generations | `historical/unverified` | archived architecture | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/architecture/lease-broker-protocol.md` | Authenticated external lease broker protocol | `historical/unverified` | archived architecture | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/architecture/lease-broker-security.md` | WI-1 lease broker security notes | `historical/unverified` | archived architecture | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/architecture/mos-runtime-portability-m1.md` | Mos Runtime Portability M1 — Logical Identity and Fencing | `historical/unverified` | archived architecture | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/architecture/mutator-class-gate.md` | Whole mutator-class lease gate | `historical/unverified` | archived architecture | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/archive/missions/cli-unification-20260404/MISSION-MANIFEST.md` | Mission Manifest — CLI Unification & E2E First-Run | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/cli-unification-20260404/TASKS.md` | Tasks — CLI Unification & E2E First-Run | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/harness-20260321/MISSION-MANIFEST.md` | Mission Manifest — Harness Foundation | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/harness-20260321/PRD.md` | PRD: Harness Foundation — Phase 9 | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/install-ux-hardening-20260405/MISSION-MANIFEST.md` | Mission Manifest — Install UX Hardening | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/install-ux-hardening-20260405/TASKS.md` | Tasks — Install UX Hardening | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/install-ux-v2-20260405/MISSION-MANIFEST.md` | Mission Manifest — Install UX v2 | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/install-ux-v2-20260405/TASKS.md` | Tasks — Install UX v2 | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/install-ux-v2-20260405/iuv-m03-design.md` | IUV-M03 Design: Provider-first intelligent flow + drill-down main menu | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/install-ux-v2-20260405/scratchpad.md` | Install UX v2 — Orchestrator Scratchpad | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/archive/missions/storage-abstraction/TASKS.md` | Tasks — Storage Abstraction Retrofit | `historical/unverified` | archived archive | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/` |
| `docs/_old_structure/audits/AUDIT-2026-02-17-framework-consistency.md` | Mosaic Framework Consistency Audit | `historical/unverified` | archived audits | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/documentation/ or reports/security/` |
| `docs/_old_structure/briefs/monorepo-consolidation.md` | Brief: Monorepo Consolidation — mosaic/stack → mosaic/mosaic-stack | `historical/unverified` | archived briefs | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or archive/` |
| `docs/_old_structure/compaction-refresh/probes/p5_receipt_replay.py` | #!/usr/bin/env python3 | `historical/unverified` | archived compaction-refresh | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/ or reports/qa/` |
| `docs/_old_structure/compaction-refresh/probes/p6_constrained_recovery.py` | #!/usr/bin/env python3 | `historical/unverified` | archived compaction-refresh | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/ or reports/qa/` |
| `docs/_old_structure/deploy/portainer/README.md` | deploy/portainer/ | `historical/unverified` | archived deploy | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/` |
| `docs/_old_structure/deploy/portainer/federated-test.stack.yml` | deploy/portainer/federated-test.stack.yml | `historical/unverified` | archived deploy | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/` |
| `docs/_old_structure/design/791-upgrade-config-protection.md` | Design — #791: Framework upgrades must not destroy operator-owned config under `~/.config/mosaic` | `historical/unverified` | archived design | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/decisions/ or plans/` |
| `docs/_old_structure/design/framework-constitution/ALPHA-DOD.md` | Constitution Alpha — Definition-of-Done checklist + release notes | `historical/unverified` | archived design | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/decisions/ or plans/` |
| `docs/_old_structure/design/prerelease-next-dist-tag-pipeline.md` | npm `@next` prerelease lane | `historical/unverified` | archived design | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/decisions/ or plans/` |
| `docs/_old_structure/design/storage-abstraction-middleware.md` | Storage & Queue Abstraction — Middleware Architecture | `historical/unverified` | archived design | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/decisions/ or plans/` |
| `docs/_old_structure/federation/ADMIN-CLI.md` | Mosaic Federation — Admin CLI Reference | `historical/unverified` | archived federation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/federation/MILESTONES.md` | Mosaic Stack — Federation Implementation Milestones | `historical/unverified` | archived federation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/federation/MISSION-MANIFEST.md` | Mission Manifest — Federation v1 | `historical/unverified` | archived federation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/federation/PRD.md` | Mosaic Stack — Federation PRD | `historical/unverified` | archived federation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/federation/SETUP.md` | Federated Tier Setup Guide | `historical/unverified` | archived federation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/federation/TASKS.md` | Tasks — Federation v1 | `historical/unverified` | archived federation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/deployment/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/FLEET-CONFIG-DOCS-IA-CHECKLIST.md` | Fleet Configuration Management — Documentation IA Acceptance Checklist | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/FLEET-LAUNCH.md` | Fleet Launch Runbook | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/LEGACY-EXAMPLE-PROFILE-DISPOSITION-INVENTORY.md` | Fleet Configuration Management — Legacy Example, Profile, and Service Disposition Inventory | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/NORTH_STAR.md` | Mosaic Fleet — NORTH STAR | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/NORTH_STAR.yaml` | Mosaic Fleet — NORTH_STAR (machine-readable source of truth) | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/PRD-fleet-suite.md` | PRD — Mosaic Fleet Suite (init, configure, operate) | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/PRD.md` | PRD — Fleet Phase 2: Operator Observability | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/README.md` | Fleet Configuration Management | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/TASKS.md` | Tasks — W-FLEET (Fleet) Phase 2: Observability | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/backlog-conventions.md` | Fleet Backlog Conventions | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/concepts/desired-vs-observed-state.md` | Desired, Derived, and Observed Fleet State | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/concepts/generated-env-launch-chain.md` | Generated Environment Launch Chain | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/concepts/identity-class-runtime.md` | Fleet Identity, Class, and Runtime | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/concepts/role-authority-and-leases.md` | Fleet Role Authority and Leases | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/examples/roster-v2.yaml` | (no title) | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/f4-matrix-connector.md` | F4 — Orchestrator chat connector + Matrix (local homeserver) | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/how-to/configure-tess-interaction.md` | Configure an Interaction Instance | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/how-to/configure-ultron-validator.md` | Configure a Validator Instance | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/how-to/create-update-delete-agent.md` | Create, Inspect, Update, and Delete a Local Fleet Agent | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/how-to/customize-roles.md` | Customize Fleet Roles | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/how-to/start-stop-restart.md` | Safely Reconcile and Control a Local Fleet Agent | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/migration/example-profile-disposition.md` | Executable Fleet Example, Profile, and Service-Preset Dispositions | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/migration/legacy-class-aliases.md` | Legacy Fleet Class Aliases | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/migration/v1-to-v2.md` | Previewing a Fleet Roster v1-to-v2 Migration | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/north-star.md` | Mosaic Fleet — North Star | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/operations/backup-restore.md` | Fleet Configuration Backup and Restore Boundary | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/operations/env-quarantine.md` | Environment Quarantine Operations | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/operations/reconcile-and-recover.md` | Reconcile and Recover a Local Fleet | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/operations/systemd-tmux-troubleshooting.md` | Systemd and tmux Troubleshooting | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/operations/upgrade-assets.md` | Upgrade and Installed-Asset Drift | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/agent-mutations.md` | Local Fleet Agent Mutations | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/cli.md` | Fleet Control-Plane CLI | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/generated-env-boundary.md` | Fleet Generated Environment Boundary | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/lifecycle-transitions.md` | Local Fleet Lifecycle Transitions | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/role-classes.md` | Fleet Role Classes and Authority | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/roster-v2-fields.md` | Fleet Roster v2 Structural Contract | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/roster-v2.schema.json` | (no title) | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/fleet/reference/status-and-drift.md` | Local Fleet Status and Drift | `historical/unverified` | archived fleet | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `ADMIN-GUIDE/operations/ and DEVELOPER-GUIDE/architecture/` |
| `docs/_old_structure/guides/admin-guide.md` | Mosaic Stack — Admin Guide | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/deployment.md` | Deployment Guide | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/dev-guide.md` | Mosaic Stack — Developer Guide | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/fleet-local-canary.md` | Local Fleet Canary | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/lease-broker-operations.md` | Lease broker operations | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/migrate-tier.md` | Migrating to the Federated Tier | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/mos-connector-lease-operations.md` | Mos Connector Lease Operations — M1 | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/upgrade-safety-and-recovery.md` | Upgrade Safety & Recovery | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/guides/user-guide.md` | Mosaic Stack — User Guide | `historical/unverified` | archived guides | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, or DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/mission-control/BOARD.md` | Mission Control Plane — Feature Board | `historical/unverified` | archived mission-control | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/ or archive/` |
| `docs/_old_structure/mission-control/MISSION-MANIFEST.md` | Mission Manifest — Mosaic Mission Control Plane | `historical/unverified` | archived mission-control | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/ or archive/` |
| `docs/_old_structure/mission-control/PRD.md` | PRD: Mosaic Mission Control Plane | `historical/unverified` | archived mission-control | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/ or archive/` |
| `docs/_old_structure/mission-control/TASKS.md` | Tasks — Mosaic Mission Control Plane | `historical/unverified` | archived mission-control | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/ or archive/` |
| `docs/_old_structure/native-kanban-sot/DOCUMENTATION-CHECKLIST.md` | Documentation Completion Checklist — Native Kanban/SOT Canon | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/INDEX.md` | Native Kanban/SOT Canon | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/KBN-010-THREAT-AUTH-CONSTRAINT-GATE.md` | KBN-010 — Threat, Authorization, and Constraint-Impact Gate | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/KBN-101-DB-ROLE-SPLIT.md` | KBN-101 — Database Runtime/Migration Role Split | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/KBN-101-ENVELOPE-A.md` | KBN-101 — B1/B2 Envelope A (v6, FINAL) — Declarative Sink-RBAC + Per-Role Credential/Connection-Selection + RLS Write-Source (INSERT tenant-bound, single-compound-or-RESTRICTIVE composition) + Sink-Resident User-Override + Read/USING Enforcement | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/MISSION-MANIFEST.md` | Mission Manifest — Mosaic Native Kanban and Canonical Task SOT P0P3 | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/SHARED-CONTRACT.md` | Native Kanban/SOT — Remediated Shared Contract v1 | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/TASKS.md` | Native Kanban/SOT P0P3 — Dependency-Ordered Build Slices | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/contracts/health-state.v1.ts` | (no title) | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/contracts/kanban-schema.v1.ts` | (no title) | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/contracts/mechanical-coordinator.v1.ts` | (no title) | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/contracts/recovery-posture.v1.ts` | (no title) | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/native-kanban-sot/tsconfig.json` | (no title) | `historical/unverified` | archived native-kanban-sot | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/, tasks/, and reports/` |
| `docs/_old_structure/plans/2026-03-13-gateway-security-hardening.md` | Gateway Security Hardening Implementation Plan | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/2026-03-15-agent-platform-architecture.md` | Agent Platform Architecture — Slash Commands, Workspaces, Task Orchestration & Agent Isolation | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/2026-03-15-wave2-tui-layout-navigation.md` | Wave 2 — TUI Layout & Navigation Implementation Plan | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/2026-05-06-hermes-mosaic-alignment.md` | Hermes-Mosaic Alignment Plan | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/2026-05-07-coordination-resilience.md` | Mosaic Stack ↔ Hermes Coordination Resilience | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/2026-08-09-webui-fleet-claude-bridge.md` | WebUI Fleet Claude Bridge Implementation Plan | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/agent-reflection-loop-PRD.md` | PRD — Agent Reflection Loop (durable kernel) | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/authentik-sso-setup.md` | Authentik SSO Setup | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/chroot-sandboxing.md` | Chroot Agent Sandboxing — Process Isolation for Agent Tool Execution | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/gatekeeper-service.md` | Gatekeeper Service — PR Review, Quality Gates & Merge Authority | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/gateway-token-recovery.md` | Gateway Admin Token Recovery — Implementation Plan | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/plans/task-queue-unification.md` | Task Queue Unification — @mosaicstack/queue as Unified Orchestration Layer | `historical/unverified` | archived plans | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `plans/ or DEVELOPER-GUIDE/architecture/decisions/` |
| `docs/_old_structure/remediation/BOARD-LEDGER.md` | ### **D-1 / P-ACTIVATION + hygiene — committed `.npmrc` hard-pins `store-dir=/root/.local/share/pnpm/store`.** | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/remediation/BOARD.md` | mos-remediation — LIVE BOARD (keep < 8 KB) | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/remediation/DECOMP-OPUS.md` | DECOMP-OPUS — Adversarial Task Decomposition (ROBUSTNESS SIDE) | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/remediation/DECOMP-SOL.md` | Adversarial Decomposition — Pragmatic / Shortest-Path Side | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/remediation/KICKSTART.md` | mos-remediation — Orchestrator Kickstart / Compaction-Survival Resume | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/remediation/MACP-WIRING-SCOUT.md` | MACP wiring investigation | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/remediation/MISSION.md` | Mosaic Stack Remediation — Mission Charter | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/remediation/TASKS.md` | Remediation Backlog — Reconciled Execution Plan | `historical/unverified` | archived remediation | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/deferred/ or tasks/` |
| `docs/_old_structure/reports/code-review/756-code-review.md` | Independent Code Review — #756 Official Discord Channel Plugin | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/code-review/gateway-security-20260313.md` | Code Review Report — Gateway Security Hardening | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/compaction-refresh/830-documentation-checklist.md` | #830 Documentation Completion Checklist | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/deferred/758-fleet-config-deferrals.md` | FCM-M5-001 Fleet Documentation Deferrals and Holds | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/documentation/756-discord-plugin-checklist.md` | Documentation Completion Checklist — #756 Official Discord plugin | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/documentation/758-fleet-config-ia-closure.md` | FCM-M5-001 Fleet Documentation IA Closure Evidence | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/native-kanban-sot/canon-final-rereview-go.md` | Native Kanban/SOT canon independent re-review 2 | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/native-kanban-sot/canon-initial-review-no-go.md` | Independent Review — Native Kanban/SOT Canon | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/native-kanban-sot/kbn-101-contract-security-review-82ce325.md` | KBN-101 contract independent security/architecture review | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/native-kanban-sot/ultron-final-go.md` | #751 Native Kanban/SOT canonical publication — Ultron final gate | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/qa/gateway-security-20260313.md` | QA Report — Gateway Security Hardening | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/reports/security/756-security-review.md` | Security Review — Issue #756 | `historical/unverified` | archived reports | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/<category>/` |
| `docs/_old_structure/requirements/native-kanban-sot.md` | Native Kanban and Canonical Task SOT — Canonical Requirements | `historical/unverified` | archived requirements | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `PRD.md or DEVELOPER-GUIDE/architecture/requirements/` |
| `docs/_old_structure/reviews/consolidation-board-memo.md` | Board of Directors — Monorepo Consolidation Brief | `historical/unverified` | archived reviews | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `reports/code-review/` |
| `docs/_old_structure/rfcs/RFC-001-MACP-MATRIX-NATIVE.md` | RFC-001 — MACP: A Mosaic-Native, Matrix-Native Comms Layer | `historical/unverified` | archived rfcs | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/rfcs/` |
| `docs/_old_structure/rfcs/RFC-002-INSTALL-CONFIG-TOPOLOGY.md` | RFC-002 — Install, Configuration & Topology for the Mosaic Matrix/MACP Comms System | `historical/unverified` | archived rfcs | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `DEVELOPER-GUIDE/architecture/rfcs/` |
| `docs/_old_structure/scratchpads/1000-rm-61-ci-contract-exemption.md` | RM-61 — CI contract exemption for #1000 teardown artifact | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/2026-06-20-fleet-cli-local-canary.md` | Fleet CLI Local Canary Dogfood — 2026-06-20 | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/2026-06-20-fleet-release-hardening.md` | Fleet release hardening | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/387-updater-wrapper-gitea-20260404.md` | Scratchpad — issue #387 updater simplification + Gitea wrapper repo context | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/41-plugin-host.md` | Scratchpad — P5-001 Plugin Host | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/462-fed-m3-04-scope-service.md` | Scratchpad — FED-M3-04 Scope Service | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/462-fed-m3-06-get-verb.md` | Scratchpad — FED-M3-06 get verb | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/536-wrapper-login-pin.md` | Issue 536 Wrapper Login Pin Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/544-agent-reflection-loop.md` | Scratchpad — #544 Agent Reflection Loop (durable kernel) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/559-560-wrapper-eval-login-20260620.md` | Wrapper hardening fold-in: #559 (eval removal) + #560 (host-derived login) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/561-python-is-python3.md` | Issue #561 — Bare python on agent hosts | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/631-reseed-preserves-fleet.md` | #631 — re-seed must preserve user fleet data (CRITICAL data-loss) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/633-comms-block-runbook.md` | #633 — comms-block emitter + FLEET-LAUNCH runbook | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/672-fleet-personas-timeout.md` | Scratchpad — fleet-personas spec timeout | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/703-wrapper-interactive-auth.md` | #703 Git Wrapper Interactive and Auth Resilience | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/747-wsa-dehardcode.md` | #747 — De-hardcode orchestrator and interaction agent names | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/751-native-kanban-canon.md` | Issue #751 — Native Kanban/SOT canonical publication | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/753-kbn010-threat-gate.md` | Issue #753 — KBN-010 threat, authorization, and constraint-impact gate | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/755-mos-logical-identity-fencing.md` | Issue #755 — Logical Mos identity and connector lease fencing | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/756-official-discord-plugin.md` | Scratchpad — #756 Official Discord channel plugin | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/758-fcm-m1-002-shared-role-resolution.md` | FCM-M1-002 — Shared role resolution | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/758-fcm-m1-003-example-profile-dispositions.md` | FCM-M1-003 — Executable example/profile/service-preset dispositions | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/758-fcm-m2-002-fleet-agent-crud.md` | FCM-M2-002 — Generation-Guarded Fleet Agent CRUD | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/758-fcm-m3-001-local-reconciler.md` | FCM-M3-001 — Local roster-owned reconciliation and lifecycle | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/758-fcm-m3-002-reconciler-lifecycle-gates.md` | FCM-M3-002 — Reconciler lifecycle acceptance gates | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/758-fcm-m4-001-v1-v2-migrator.md` | FCM-M4-001 — v1-to-v2 inventory, preview, and migrator | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/771-kbn101-db-role-split.md` | Scratchpad — KBN-101 DB runtime/migration role split (#771) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/791-upgrade-config-protection.md` | Scratchpad — #791 Upgrade config protection (ms-791 worker lane) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/804-install-unknown-flags.md` | Issue #804 — fail closed on unknown installer arguments | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/807-glpi-partial-content.md` | Issue #807 — GLPI list wrappers accept HTTP 206 | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/808-agent-send-sender-identity.md` | Issue #808 — agent-send sender identity | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/812-pr-review-comment.md` | Issue #812 — durable Gitea PR review comments | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/824-mosaic-skill-cli.md` | Issue #824 — Mosaic skill CLI and Claude bridge auto-sync | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/828-lease-broker.md` | WI-1 Scratchpad — Authenticated external lease broker | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/829-mutator-gate.md` | WI-2 Scratchpad — Whole mutator-class gate | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/830-compaction-revoke.md` | WI-3 Scratchpad — Compaction revocation and runtime-generation rollover | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/832-receipt-challenge-protocol.md` | #832 Receipt-challenge protocol — build scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/833-constrained-recovery-command.md` | #833 constrained recovery command — build scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/838-broker-acceptance-flake.md` | Issue #838 — Broker acceptance socket flake | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/B1-next-durable-publish-design.md` | B1 / @next Durable Publish Pipeline — Design | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/B2-skills-sync-path.md` | B2 — Fresh-install skills sync path | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/B3-wizard-gateway-health-order.md` | B3 — Wizard completion ordering | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/B4-wizard-step-dedup.md` | B4 — Wizard step deduplication | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/BUG-CLI-scratchpad.md` | BUG-CLI Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/FED-M3-05-list-verb.md` | FED-M3-05 — Federation List Verb Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/FED-M3-07-capabilities.md` | FED-M3-07 — Capabilities Verb Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/FED-M3-09-query-source.md` | FED-M3-09 — Query Source Service Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/FED-M3-10-integration-tests.md` | FED-M3-10 — Federation M3 Integration Tests | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/bug-196-admin-redirect.md` | BUG-196: Admin Page Redirect Issue | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/ci-docker-publish-20260330.md` | Scratchpad: CI Docker Publish (2026-03-30) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/cli-unification-20260404.md` | Mission Scratchpad — CLI Unification & E2E First-Run | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/f3-m3-update-reseed.md` | F3-m3 — `mosaic update` re-seeds framework + relaunches agents (R13) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/f4-matrix-connector.md` | F4 — Orchestrator chat connector + Matrix (#616) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fcm-m2-001-generated-env-boundary.md` | FCM-M2-001 — Generated Environment Boundary | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fcm-m5-001-fleet-config-operator-docs.md` | FCM-M5-001 — Fleet configuration operator documentation | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fix-ci-migrations-20260330.md` | Scratchpad — fix-ci-migrations-20260330 | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fix-turbo-env-passthrough.md` | Task Scratchpad — Turbo DATABASE_URL passthrough | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fleet-cli-local-canary-review-fixes.md` | Fleet CLI Local Canary Review Fixes | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fleet-comms-onboarding.md` | Fleet onboarding-injection — comms cheat-sheet + peer roster (#620) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fleet-enhancer-floor.md` | Fleet enhancer role + two-agent floor (#614) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fleet-observability-phase2.md` | Scratchpad — Fleet Phase 2: Observability (W-FLEET) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fleet-polish-bundle.md` | Fleet-polish bundle — boot-survival symmetry (#611) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/fleet-standup-fixes.md` | Fleet stand-up fixes — model_hint→--model + socket-default trap (#626) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/gateway-install-ux-20260404.md` | Gateway Install UX Fixes — 2026-04-04 | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/gateway-security-20260313.md` | Gateway Security Hardening Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/git-wrapper-rollup-20260526.md` | Git Wrapper Rollup — 2026-05-26 | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/h1-heartbeat-readiness.md` | H1 — heartbeat readiness detection | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/h1b-pane-idle-signal.md` | H1b — tmux pane idle signal wiring | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/h2-readiness-available.md` | H2 — readiness semantics: available, not stuck | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/harness-20260321.md` | Mission Scratchpad — Harness Foundation | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/install-ux-hardening-20260405.md` | Install UX Hardening — IUH-M01 Session Notes | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/installer-next-fast-npm-20260625.md` | Installer `--next` fast npm lane — 2026-06-25 | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/installer-next-lane-20260624.md` | Scratchpad — installer `--next` lane | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/issue-766-exact-fleet-comms.md` | Issue 766 — exact cross-harness fleet comms targeting | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/m3-001-provider-adapter.md` | M3-001 Provider Adapter Pattern — Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/macp-oc-bridge-20260330.md` | Scratchpad: MACP OC Bridge (2026-03-30) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/ms-792-fleet-enoent-installer.md` | ms-792 — Fleet roster error handling and installer heading | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/mvp-20260312.md` | Mission Scratchpad — MVP | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/north-star-doctrine.md` | north-star doctrine consolidation (#620-adjacent doc PR) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p5-003-telegram-plugin.md` | Scratchpad — P5-003 Telegram Plugin | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p5-004-authentik-sso.md` | P5-004 Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p5-overlay-composer.md` | P5 — Overlay composer + cross-harness (compose-contract) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p6-docs-compliance-alpha.md` | P6 — Docs, compliance matrix, alpha tag (constitution capstone) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p8-001-sso-providers.md` | P8-001 — WorkOS + Keycloak SSO Providers | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p8-009-tui-slash-commands.md` | P8-009: TUI Phase 1 — Slash Command Parsing | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p8-010-command-registry.md` | P8-010 Scratchpad — Gateway Phase 2: CommandRegistryService + CommandExecutorService | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p8-012-agent-provider-commands.md` | P8-012 Scratchpad — Gateway /agent, /provider, /mission, /prdy, /tools Commands | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p8-016-tool-hardening.md` | P8-016: Security — Tool Path Hardening + Sandbox Escape Prevention | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/p8-019-verify.md` | P8-019 Verification — Phase 8 Platform Architecture | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/rm-01-reproducible-checkout.md` | RM-01 — Reproducible checkout | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/rm-03-queue-guard.md` | RM-03 — CI Queue Guard Repair | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/t-a292e96f-gitea-pr-metadata.md` | t_a292e96f — Gitea PR metadata wrapper fix | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/t_301e4e3b-pr-merge-gitea-empty-uid.md` | Scratchpad: t_301e4e3b pr-merge.sh Gitea empty-uid fallback | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/t_5aab9cc8-pr-merge-eval-injection.md` | t_5aab9cc8 — pr-merge.sh eval injection remediation | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/task-mission-ownership-20260313.md` | Task Ownership Gap Fix Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-20260712.md` | Scratchpad — Tess Interaction Agent | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m1-002-provider-registry.md` | TESS-M1-002 — Provider Registry | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m1-003-fleet-provider.md` | TESS-M1-003 — Fleet/tmux Runtime Provider | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m1-obs-001.md` | TESS-M1-OBS-001 Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m1-sec-001.md` | TESS-M1-SEC-001 — Command authorization and exact-action approval | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m1-sec-004-discord-ingress.md` | Scratchpad — TESS-M1-SEC-004 Discord ingress | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m1-sec-006-session-gc-scope.md` | Scratchpad — TESS-M1-SEC-006 Session GC scope | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m2-001-pi-service.md` | TESS-M2-001 — Pi Interaction Service | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m2-002-durable-state.md` | TESS-M2-002 — Durable Tess State | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m4-001-mos-coordination.md` | TESS-M4-001 — Mos Coordination | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tess-m4-003-operator-plugins.md` | TESS-M4-003 — Operator Plugin Foundations | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/tools-md-seeding-20260411.md` | Hotfix Scratchpad — `install.sh` does not seed `TOOLS.md` | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/update-checker-package-20260404.md` | Scratchpad — updater package target fix (#382) | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/webui-fleet-bridge-plan.md` | WebUI Fleet Bridge Planning Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/webui-p2-data-auth.md` | WebUI Phase P — P2 Data + Auth Scratchpad | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/scratchpads/yolo-runtime-initial-arg-20260411.md` | Hotfix Scratchpad — `mosaic yolo <runtime>` passes runtime name as initial user message | `historical/unverified` | archived scratchpads | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `archive/ or tasks/ after retention review` |
| `docs/_old_structure/tasks/544-agent-reflection-loop.md` | 544: Agent Reflection Loop — durable kernel | `historical/unverified` | archived tasks | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/` |
| `docs/_old_structure/tasks/WP1-forge-package.md` | WP1: packages/forge — Forge Pipeline Package | `historical/unverified` | archived tasks | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/` |
| `docs/_old_structure/tasks/WP2-macp-package.md` | WP2: packages/macp — MACP Protocol Package | `historical/unverified` | archived tasks | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/` |
| `docs/_old_structure/tasks/WP3-mosaic-framework-plugin.md` | WP3: plugins/mosaic-framework — OC Rails Injection Plugin | `historical/unverified` | archived tasks | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `tasks/` |
| `docs/_old_structure/tess/ADMIN-GUIDE.md` | Tess Administration | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/ARCHITECTURE.md` | Tess Architecture | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/DEVELOPER-GUIDE.md` | Tess Developer Guide | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/M4-003-OPERATOR-PLUGIN-SKETCH.md` | TESS-M4-003 Operator Plugin Sketch | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/M5-003-DOCUMENTATION-CHECKLIST.md` | TESS-M5-003 Documentation Checklist | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/M5-MIGRATION-CUTOVER.md` | TESS-MIG-001 — Cutover Procedure | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/M5-MIGRATION-INVENTORY.md` | TESS-MIG-001 — Hermes → Mosaic Evidence Inventory | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/M5-MIGRATION-RETENTION-DEPRECATION.md` | TESS-MIG-001 — Retention and Legacy Deprecation Policy | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/M5-MIGRATION-ROLLBACK.md` | TESS-MIG-001 — Rollback Procedure | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/MIGRATION-INVENTORY.md` | Tess Capability Migration Inventory | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/MISSION-MANIFEST.md` | Mission Manifest — Tess Interaction Agent | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/MOS-COORDINATION.md` | TessMos Coordination Contract Sketch | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/OPERATIONS-GUIDE.md` | Tess Operations and Recovery | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/PLUGIN-GUIDE.md` | Tess Plugin Authoring | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/TASKS.md` | Tasks — Tess Interaction Agent | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/THREAT-MODEL.md` | Tess Threat Model | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/USER-GUIDE.md` | Tess User Guide | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/VERIFICATION-MATRIX.md` | Tess Verification Matrix | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/hermes-runtime-adapter-design.md` | TESS-HRM-001 — Hermes runtime adapter boundary | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/_old_structure/tess/qualification/2026-07-14-option2-runtime-portability.md` | Tess / Option 2 runtime-portability qualification — 2026-07-14 | `historical/unverified` | archived tess | Moved unchanged during the 2026-08-10 archive operation; claims require evidence review before resurfacing. | `USER-GUIDE/, ADMIN-GUIDE/, and DEVELOPER-GUIDE/ by page purpose` |
| `docs/openapi-tess.yaml` | (no title) | `partially-verified/legacy-location` | Tess-scoped OpenAPI contract | PyYAML parses OpenAPI 3.1.0 with 17 paths. It covers Tess interaction, Mos coordination, and memory routes, but is not at `docs/API/` and is not a complete gateway contract. | `API/ (scoped Tess contract or consolidated OPENAPI.yaml)` |
| `docs/plans/2026-08-10-docs-information-architecture-design.md` | Documentation Information Architecture Design | `current/working` | approved plan | Task-local planning artifact; not a statement of shipped behavior. | `plans/` |
| `docs/plans/2026-08-10-docs-structure-readme.md` | Documentation Structure README Implementation Plan | `current/working` | approved plan | Task-local planning artifact; not a statement of shipped behavior. | `plans/` |
| `docs/scratchpads/DOCS-IA-001.md` | DOCS-IA-001 — Documentation Information Architecture | `current/working` | task scratchpad | Task-local working notes; not a canonical product source. | `scratchpads/` |
## Navigation and link audit
- Total scanned links: **219**.
- Current/workflow links: **97**; unresolved current links excluding the two intentional README blueprint links: **83**.
- Archive links: **122**; unresolved archive links: **12**.
### Broken-link clusters
| Target | Occurrences | Current sources |
| --------------------------------------------------------- | ----------: | ------------------------------------------- |
| `./scratchpads/mvp-20260312.md` | 3 | `docs/MISSION-MANIFEST.md` |
| `./federation/TASKS.md` | 3 | `docs/MISSION-MANIFEST.md`, `docs/TASKS.md` |
| `./federation/MISSION-MANIFEST.md` | 2 | `docs/MISSION-MANIFEST.md`, `docs/TASKS.md` |
| `./fleet/FLEET-CONFIG-DOCS-IA-CHECKLIST.md` | 2 | `docs/PRD.md`, `docs/TASKS.md` |
| `./fleet/LEGACY-EXAMPLE-PROFILE-DISPOSITION-INVENTORY.md` | 2 | `docs/PRD.md`, `docs/TASKS.md` |
| `tess/USER-GUIDE.md` | 2 | `docs/SITEMAP.md` |
| `tess/PLUGIN-GUIDE.md` | 2 | `docs/SITEMAP.md` |
| `./tess/MISSION-MANIFEST.md` | 1 | `docs/MISSION-MANIFEST.md` |
| `./native-kanban-sot/MISSION-MANIFEST.md` | 1 | `docs/MISSION-MANIFEST.md` |
| `./native-kanban-sot/KBN-101-DB-ROLE-SPLIT.md` | 1 | `docs/PRD.md` |
| `architecture/lease-broker-protocol.md` | 1 | `docs/SITEMAP.md` |
| `guides/lease-broker-operations.md` | 1 | `docs/SITEMAP.md` |
| `architecture/lease-broker-security.md` | 1 | `docs/SITEMAP.md` |
| `architecture/mutator-class-gate.md` | 1 | `docs/SITEMAP.md` |
| `architecture/compaction-revocation.md` | 1 | `docs/SITEMAP.md` |
| `guides/user-guide.md` | 1 | `docs/SITEMAP.md` |
| `guides/dev-guide.md` | 1 | `docs/SITEMAP.md` |
| `fleet/README.md` | 1 | `docs/SITEMAP.md` |
| `fleet/concepts/desired-vs-observed-state.md` | 1 | `docs/SITEMAP.md` |
| `fleet/concepts/identity-class-runtime.md` | 1 | `docs/SITEMAP.md` |
| `fleet/concepts/role-authority-and-leases.md` | 1 | `docs/SITEMAP.md` |
| `fleet/concepts/generated-env-launch-chain.md` | 1 | `docs/SITEMAP.md` |
| `fleet/reference/roster-v2-fields.md` | 1 | `docs/SITEMAP.md` |
| `fleet/reference/cli.md` | 1 | `docs/SITEMAP.md` |
| `fleet/reference/lifecycle-transitions.md` | 1 | `docs/SITEMAP.md` |
### Link-audit interpretation
- The 66 `SITEMAP.md` failures are a navigation migration blocker, not evidence that every archived page is false.
- The `PRD.md`, `TASKS.md`, and `MISSION-MANIFEST.md` failures show that current control documents still point at the pre-archive layout.
- The two unresolved wikilinks in `docs/README.md` are intentional target-tree blueprint links and should resolve when the architecture scaffold is created.
- Link repair must occur with page classification; blindly changing paths can turn a historical or draft page into an accidental current instruction.
## Repository truth dependencies
The following tracked files currently depend on documentation paths that are absent from the working tree:
| Source file | Dependency | Risk |
| -------------------------------------------------------------------------- | ------------------ | ---------------------------------------------------------------------------------------------- |
| `README.md` | legacy docs path | Installed framework guidance may retain stale links. |
| `apps/gateway/src/federation/ca.service.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `apps/gateway/src/federation/oid.util.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `apps/gateway/src/federation/scope-schema.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/mosaic/framework/fleet/README.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/board.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/code.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/decomposition.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/documentation.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/enhancer.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/merge-gate.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/operator.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/orchestrator.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/planner.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/rebase.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/review.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/security-review.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/session-review.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/fleet/roles/site-tester.md` | `docs/fleet/` | Installed framework guidance may retain stale links. |
| `packages/mosaic/framework/systemd/user/README.md` | legacy docs path | Installed framework guidance may retain stale links. |
| `packages/mosaic/src/commands/fleet-north-star.spec.ts` | `docs/fleet/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/mosaic/src/commands/fleet.ts` | `docs/fleet/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/mosaic/src/fleet/fleet-documentation.spec.ts` | `docs/fleet/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/mosaic/src/fleet/roster-v2.spec.ts` | `docs/fleet/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/mosaic/src/lease-broker/framework_skill_portability_unittest.py` | legacy docs path | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/mosaic/src/mutator-gate/mutator-gate.acceptance.spec.ts` | legacy docs path | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/types/src/federation/error.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/types/src/federation/request.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/types/src/federation/response.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/types/src/federation/source-tag.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
| `packages/types/src/federation/verbs.ts` | `docs/federation/` | Tests or runtime path resolution may fail if the source is not updated with the document move. |
High-risk consumers include `packages/mosaic/src/commands/fleet.ts`, fleet path-resolution tests, lease-broker portability tests, federation source comments, and root `README.md` operator links. These must be handled before deleting the archived source pages.
## Truth-audit evidence collected
| Surface | Evidence | Result |
| --------------------------------- | --------------------------------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------- |
| SSO provider environment contract | `packages/auth/src/sso.ts`, auth tests, `.env.example` | Provider core names and partial-config behavior align; web feature-flag claim does not. |
| SSO web flow | `apps/web` login/provider pages and `/api/sso/providers` calls | Dynamic provider discovery is current; `NEXT_PUBLIC_*_ENABLED` documentation is stale. |
| Performance report | Seven named implementation files exist; DB pool, upsert, indexes, GC, and Next config markers found | Static implementation alignment is partial; performance metrics and production traffic are unverified. |
| Tess OpenAPI | PyYAML parse of `docs/openapi-tess.yaml` | Valid OpenAPI 3.1 syntax with 17 paths; legacy location and incomplete full-gateway coverage remain. |
| TUI documents | `packages/cli` and old worktree absent; `packages/mosaic/src/tui` exists | TUI document paths are contradicted/stale. |
| Root navigation | Relative link resolver and repository reference scan | Current docs and code still depend on pre-archive paths. |
| Documentation root hygiene | Baseline `.gitignore` and `guides/DOCUMENTATION.md` | `docs/reports/` is required for evidence; the conflicting blanket ignore rule was identified and subsequently removed. |
## Recommended migration order
1. **Scaffold indexes without moving content:** create the required book/API `README.md` files and architecture index pages. Keep them explicit about what is not migrated yet.
2. **Repair current control-plane navigation:** classify the workstream manifests, then update `SITEMAP.md`, `MISSION-MANIFEST.md`, and `TASKS.md` through the orchestrator-owned process. Do not silently change task status.
3. **Migrate high-value operator/user material:** extract `QUICKSTART`, SSO, deployment, recovery, and user workflow pages into the appropriate books. Re-verify every command and environment variable during migration.
4. **Migrate developer architecture and API contracts:** split mixed `fleet`, `federation`, `tess`, architecture, RFC, and requirements material. Move the Tess contract into `API/` and decide whether it remains scoped or becomes part of a consolidated gateway OpenAPI contract.
5. **Resolve source/test dependencies:** update code comments, fixture paths, tests, and framework templates only alongside the corresponding documentation move. Run the relevant package tests after each dependency group.
6. **Retain evidence deliberately:** place historical reports, plans, scratchpads, task snapshots, and reviews in their artifact directories. Promote only claims with current evidence.
7. **Quarantine cleanup:** remove `_old_structure/` only after link, source-reference, and historical-retention checks pass.
## Human validation queue
The following decisions require product-owner or maintainer confirmation rather than static inference:
- Which requirements in the draft PRD remain active for the current release, versus historical or superseded workstreams.
- Whether the MVP/federation/Tess/Kanban manifests are still active control documents or should be archived.
- Which TUI work was actually merged and where its current source of truth lives.
- Whether the Tess OpenAPI document is intended to be a scoped contract or the first portion of the complete gateway contract.
- Whether `NEXT_PUBLIC_WORKOS_ENABLED` and `NEXT_PUBLIC_KEYCLOAK_ENABLED` are obsolete configuration variables or still supported by a deployment surface not present in this checkout.
- Which historical security, migration, and deployment procedures are safe to preserve as reference and which must be marked explicitly non-operative.
## Audit limitations
- This is a static repository audit. It did not start Gateway/Web, PostgreSQL, Valkey, Compose, or external identity providers.
- No external agent session was used because the existing fleet sessions were explicitly standing down; parallel discovery was performed with isolated read-only scans in this coordinating session.
- At the audit baseline, `docs/reports/` was ignored by `.gitignore` and this report required force-add. The migration subsequently removed the blanket ignore rule.
- “Historical/unverified” does not mean the original author was wrong; it means the page is not safe to treat as current without evidence.
- Claims involving production topology, external services, latency, security certification, or merged PR state need independent evidence beyond file presence.
## Reproduction commands
```bash
find docs -type f -not -path 'docs/.obsidian/*' -print | sort
rg -n --hidden --glob '!node_modules/**' --glob '!.git/**' 'docs/(fleet|federation|architecture|tess|native-kanban-sot)' apps packages plugins scripts tools README.md
pnpm exec prettier --check docs/README.md
```
## Related
- [[README|Documentation structure contract]]
- [[plans/2026-08-10-docs-information-architecture-design|Approved information architecture design]]
- [[plans/2026-08-10-docs-catalog-audit|Catalog and truth-audit plan]]
- [[scratchpads/DOCS-IA-002-catalog-audit|Catalog audit scratchpad]]
@@ -14,18 +14,18 @@
## Acceptance mapping
| Checklist area | Evidence |
| ------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Roster authority and fail-closed legacy handling | Root PRD FCM-REQ-01/05/08; desired/observed and quarantine pages. |
| Classes and authority | Root PRD FCM-REQ-07; role authority concept/reference; configurable interaction/validator how-tos. |
| Lifecycle | Root PRD FCM-REQ-04; lifecycle transition table and operator lifecycle how-to. |
| Local-only generated launch boundary | Root PRD FCM-REQ-05/09; generated launch concept/reference. |
| Complete DAG and artifact inventory | `docs/TASKS.md`; M0 inventory; executable disposition tests. |
| IA pages | Every path named by the M0 checklist exists and is linked from `docs/fleet/README.md`. |
| Examples | `docs/fleet/examples/roster-v2.yaml` validates through production v2 compiler/shared resolver; shipped artifact dispositions validate through declared production readers. |
| Links | Deterministic local Markdown link test covers the entire fleet book and sitemap, including local heading-fragment resolution. |
| Checklist area | Evidence |
| ------------------------------------------------ | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Roster authority and fail-closed legacy handling | Root PRD FCM-REQ-01/05/08; desired/observed and quarantine pages. |
| Classes and authority | Root PRD FCM-REQ-07; role authority concept/reference; configurable interaction/validator how-tos. |
| Lifecycle | Root PRD FCM-REQ-04; lifecycle transition table and operator lifecycle how-to. |
| Local-only generated launch boundary | Root PRD FCM-REQ-05/09; generated launch concept/reference. |
| Complete DAG and artifact inventory | `docs/TASKS.md`; M0 inventory; executable disposition tests. |
| IA pages | Every path named by the M0 checklist exists and is linked from `docs/fleet/README.md`. |
| Examples | `docs/fleet/examples/roster-v2.yaml` validates through production v2 compiler/shared resolver; shipped artifact dispositions validate through declared production readers. |
| Links | Deterministic local Markdown link test covers the entire fleet book and sitemap, including local heading-fragment resolution. |
| Sensitive/example safety | Validator scans backtick- and tilde-fenced fleet-book examples plus the canonical roster for sensitive-looking keys, common credential formats (including Anthropic, OpenAI project, and Stripe restricted keys), path-qualified privileged commands, package-manager/root commands, arbitrary command override, and hardcoded Tess/Ultron identities; findings report only file/block and violation kind, never matched values. |
| Holds | `docs/reports/deferred/758-fleet-config-deferrals.md` records M3-002, M4-002, M5-002, compatibility, and repository-structure boundaries. |
| Holds | `docs/reports/deferred/758-fleet-config-deferrals.md` records M3-002, M4-002, M5-002, compatibility, and repository-structure boundaries. |
## Documentation completion checklist
@@ -0,0 +1,139 @@
# Mosaic Framework Consistency Audit
Date: 2026-02-17
Scope:
- `~/src/mosaic-bootstrap`
- `~/src/agent-skills`
- Installed runtime check: `~/.config/mosaic`
## Findings
| ID | Severity | Finding | Status |
| ------ | -------- | ------------------------------------------------------------------------------------------------------------------------------------ | ---------- |
| MF-001 | High | QA rails scripts referenced invalid paths (missing `/qa/` segment) for `qa-hook-handler.sh` calls. | Remediated |
| MF-002 | Medium | Conditional-loading detection was biased to legacy `agent-guides` markers and missed Mosaic `guides`/`Conditional Context` phrasing. | Remediated |
| MF-003 | Medium | Framework spec text still described detection as `agent-guides`-based only. | Remediated |
| MF-004 | Medium | Runtime Claude overlay hardcoded skill count, which drifts over time. | Remediated |
| MF-005 | High | `pr-reviewer` skill used legacy `~/.claude/scripts/git` and `~/.claude/skills` paths. | Remediated |
| MF-006 | Medium | `using-git-worktrees` prioritized `CLAUDE.md` only and ignored Mosaic-first docs (`AGENTS.md`/`SOUL.md`). | Remediated |
| MF-007 | Medium | Marketing skills used `.claude/product-marketing-context.md` instead of Mosaic repo-local path. | Remediated |
| MF-008 | Low | `agent-skills/README.md` manual install/adaptation guidance referenced legacy Claude-only paths. | Remediated |
| MF-009 | Low | Historical creation-log contained stale Claude-specific path examples. | Remediated |
## Remediation Details
### MF-001 (QA rails path correction)
Updated:
- `tools/qa/qa-hook-wrapper.sh`
- `tools/qa/qa-hook-stdin.sh`
- `tools/qa/qa-hook-handler.sh`
- `tools/qa/remediation-hook-handler.sh`
- `tools/qa/qa-queue-monitor.sh`
Change:
- Standardized handler paths to `~/.config/mosaic/tools/qa/...`.
### MF-002 + MF-003 (conditional loading/context detection)
Updated:
- `tools/bootstrap/agent-lint.sh`
- `tools/bootstrap/agent-upgrade.sh`
- `templates/agent/SPEC.md`
Change:
- Detection now recognizes both legacy and Mosaic patterns:
- `agent-guides` (legacy compatibility)
- `~/.config/mosaic/guides`
- `Conditional Loading`
- `Conditional Context`
### MF-004 (runtime overlay drift-proofing)
Updated:
- `runtime/claude/CLAUDE.md`
Change:
- Removed hardcoded skills count text.
### MF-005 (pr-reviewer skill path migration)
Updated:
- `skills/pr-reviewer/SKILL.md`
Change:
- Replaced all `~/.claude/scripts/git/...` with `~/.config/mosaic/tools/git/...`.
- Replaced `~/.claude/skills/...` with `~/.config/mosaic/skills/...`.
### MF-006 (worktree skill docs hierarchy)
Updated:
- `skills/using-git-worktrees/SKILL.md`
Change:
- Replaced CLAUDE-only checks with `AGENTS.md` / `SOUL.md` (fallback: `CLAUDE.md`).
### MF-007 (marketing context path migration)
Updated:
- `skills/product-marketing-context/SKILL.md`
- All skills referencing product-marketing-context path (bulk update)
Change:
- Standardized context path to `.mosaic/product-marketing-context.md`.
### MF-008 + MF-009 (repo guidance cleanup)
Updated:
- `README.md` (agent-skills)
- `skills/writing-skills/SKILL.md`
- `skills/writing-skills/examples/CLAUDE_MD_TESTING.md`
- `skills/systematic-debugging/CREATION-LOG.md`
Change:
- Standardized references to `~/.config/mosaic/skills`.
- Removed stale Claude-only wording.
## Residual Legacy References (Intentional)
The following legacy references remain in `mosaic-bootstrap` by design and are not inconsistencies:
- Runtime compatibility tooling for Claude home directory management:
- `bin/mosaic-link-runtime-assets`
- `bin/mosaic-clean-runtime`
- `bin/mosaic-doctor`
- `bin/mosaic-sync-skills`
- `bin/mosaic-migrate-local-skills`
- Documentation explaining Claude runtime overlays:
- `README.md`
- `profiles/README.md`
- `adapters/claude.md`
- `runtime/claude/settings-overlays/` (sample overlay; now shipped sanitized under `examples/overlays/`)
These are required to support existing Claude runtime integration while keeping Mosaic as canonical source.
## Verification
Executed checks:
- `rg -n "~/.claude|\\.claude/|agent-guides" ~/src/agent-skills -S`
- Result: no matches after remediation.
- `rg -n "~/.config/mosaic/tools/(qa-hook|remediation-hook|qa-queue-monitor)" ~/src/mosaic-bootstrap -S`
- Result: no invalid old-style QA rail paths remain.
- Installed runtime validation:
- `~/.config/mosaic` contains `tools/git`, `tools/portainer`, `tools/cicd`, `skills`, and `bin` tooling.
@@ -66,18 +66,18 @@ The contract rightly requires `pg_catalog, <mosaic_application_schema>` and reje
## Acceptance and threat traceability
| Requirement / threat | Review result | Evidence or blocking finding |
| --- | --- | --- |
| K101-REQ-01 / AC-K101-01 split runtime/migration URLs | Partial | Role/DTO boundary is coherent; HIGH DDL-path finding requires all current commands to be closed. |
| K101-REQ-02 / AC-K101-02 explicit migration/readiness | Blocked | HIGH ledger definition and HIGH DDL-bypass findings. |
| K101-REQ-03 / AC-K101-03 least privilege, TLS, grants | Partial | Role model, default privileges, ledger read-only, TEMP/function checks are well specified (`KBN-101...:47-56,70-79`); HIGH TLS bootstrap and MEDIUM identifier constraints remain. |
| K101-REQ-04 / AC-K101-04 immutable relations | Correctly deferred | KBN-101-09 after KBN-100 is the correct serial gate (`KBN-101...:58-66,115-118`); no synthetic-only certification claim found. |
| K101-REQ-05 / AC-K101-05 N-1, secrets, rollback | Partial | No owner-runtime exception and rollback keeps migration URL out of Gateway (`:83-95`); deployable TLS and full command inventory are missing. |
| K101-REQ-06 / AC-K101-07 KBN gates and DAG | Structurally sound | DAG is acyclic: 00→01/{03}; 02→06; 00/01/03→05; 00/04/05/06→07→08→KBN-100→09→KBN-105. KBN-100s current branch contains docs-only baseline tracking, not schema implementation. |
| T: runtime DDL / migration fallback | Blocked | HIGH finding 1. Current Gateway/storage, CLI, direct Drizzle scripts, and integration DDL require explicit closure. |
| T: race/crash/readiness | Partial | Same-session nonblocking lock and replica-unready rules are present (`:34-38`); lock namespace remediation required. |
| T: immutable evidence rewrite | Correctly staged | Explicit INSERT/SELECT-only matrix and RESTRICT retention are retained; proof is properly after table creation. |
| T: secret leakage / TLS downgrade | Partial | Redaction and distinct Vault paths are specified (`:93-97`), but no server TLS/bootstrap implementation contract exists. |
| Requirement / threat | Review result | Evidence or blocking finding |
| ----------------------------------------------------- | ------------------ | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| K101-REQ-01 / AC-K101-01 split runtime/migration URLs | Partial | Role/DTO boundary is coherent; HIGH DDL-path finding requires all current commands to be closed. |
| K101-REQ-02 / AC-K101-02 explicit migration/readiness | Blocked | HIGH ledger definition and HIGH DDL-bypass findings. |
| K101-REQ-03 / AC-K101-03 least privilege, TLS, grants | Partial | Role model, default privileges, ledger read-only, TEMP/function checks are well specified (`KBN-101...:47-56,70-79`); HIGH TLS bootstrap and MEDIUM identifier constraints remain. |
| K101-REQ-04 / AC-K101-04 immutable relations | Correctly deferred | KBN-101-09 after KBN-100 is the correct serial gate (`KBN-101...:58-66,115-118`); no synthetic-only certification claim found. |
| K101-REQ-05 / AC-K101-05 N-1, secrets, rollback | Partial | No owner-runtime exception and rollback keeps migration URL out of Gateway (`:83-95`); deployable TLS and full command inventory are missing. |
| K101-REQ-06 / AC-K101-07 KBN gates and DAG | Structurally sound | DAG is acyclic: 00→01/{03}; 02→06; 00/01/03→05; 00/04/05/06→07→08→KBN-100→09→KBN-105. KBN-100s current branch contains docs-only baseline tracking, not schema implementation. |
| T: runtime DDL / migration fallback | Blocked | HIGH finding 1. Current Gateway/storage, CLI, direct Drizzle scripts, and integration DDL require explicit closure. |
| T: race/crash/readiness | Partial | Same-session nonblocking lock and replica-unready rules are present (`:34-38`); lock namespace remediation required. |
| T: immutable evidence rewrite | Correctly staged | Explicit INSERT/SELECT-only matrix and RESTRICT retention are retained; proof is properly after table creation. |
| T: secret leakage / TLS downgrade | Partial | Redaction and distinct Vault paths are specified (`:93-97`), but no server TLS/bootstrap implementation contract exists. |
## Unresolved assumptions
@@ -92,15 +92,15 @@ The contract rightly requires `pg_catalog, <mosaic_application_schema>` and reje
Read-only checks run in this review:
| Check | Result |
| --- | --- |
| `git diff --check origin/main...da742ca2...` | PASS |
| `pnpm exec prettier --check` on all seven changed docs | PASS |
| `pnpm exec tsc --noEmit -p docs/native-kanban-sot/tsconfig.json` | PASS |
| `docker compose -f docker-compose.yml config --quiet` (isolated test ports) | PASS |
| `docker compose -f docker-compose.federated.yml --profile federated config --quiet` (isolated test ports) | PASS |
| Static journal inspection | FAILS the required monotonic ordering premise: 0008 → 0009 `when` decreases; current runner documents skipping behavior. |
| Static DDL-entrypoint inventory | Found direct Drizzle scripts, storage CLI shell-out, runtime extension/migration calls, fleet backlog migration, tier probe extension creation, and a direct-DLL federated integration test. |
| Check | Result |
| --------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `git diff --check origin/main...da742ca2...` | PASS |
| `pnpm exec prettier --check` on all seven changed docs | PASS |
| `pnpm exec tsc --noEmit -p docs/native-kanban-sot/tsconfig.json` | PASS |
| `docker compose -f docker-compose.yml config --quiet` (isolated test ports) | PASS |
| `docker compose -f docker-compose.federated.yml --profile federated config --quiet` (isolated test ports) | PASS |
| Static journal inspection | FAILS the required monotonic ordering premise: 0008 → 0009 `when` decreases; current runner documents skipping behavior. |
| Static DDL-entrypoint inventory | Found direct Drizzle scripts, storage CLI shell-out, runtime extension/migration calls, fleet backlog migration, tier probe extension creation, and a direct-DLL federated integration test. |
No live database, Vault, CI, deployment, issue, PR, or repository mutation was performed. The pass results validate documentation syntax/contract compilation and compose syntax only; they do **not** certify the proposed security behavior.
+14 -14
View File
@@ -16,23 +16,23 @@
## Baseline Verification
| Command | Result | Evidence |
| --- | --- | --- |
| `pnpm --filter @mosaicstack/gateway test -- src/chat/__tests__/chat-security.test.ts src/__tests__/resource-ownership.test.ts` | pass | 3 test files passed, 20 tests passed |
| `pnpm typecheck` | pass | turbo completed 18/18 package typecheck tasks |
| `pnpm lint` | pass | turbo completed 18/18 package lint tasks |
| `pnpm format:check` | pass | `All matched files use Prettier code style!` |
| Command | Result | Evidence |
| ------------------------------------------------------------------------------------------------------------------------------ | ------ | --------------------------------------------- |
| `pnpm --filter @mosaicstack/gateway test -- src/chat/__tests__/chat-security.test.ts src/__tests__/resource-ownership.test.ts` | pass | 3 test files passed, 20 tests passed |
| `pnpm typecheck` | pass | turbo completed 18/18 package typecheck tasks |
| `pnpm lint` | pass | turbo completed 18/18 package lint tasks |
| `pnpm format:check` | pass | `All matched files use Prettier code style!` |
## Situational Verification
| Acceptance Criterion | Verification Method | Evidence |
| --- | --- | --- |
| Chat controller requires auth and current-user context | source assertion test | `chat-security.test.ts` checks `@UseGuards(AuthGuard)` and `@CurrentUser() user: { id: string }` |
| WebSocket handshake requires Better Auth session | unit tests for `validateSocketSession()` | null handshake returns `null`; valid handshake returns original session object |
| Conversation messages reject non-user/assistant roles | class-validator test | `system` role fails validation |
| Conversation messages enforce a 32k max length | class-validator test | `32_001` chars fail validation |
| Chat request payload enforces a 10k max length | class-validator test | `10_001` chars fail validation |
| By-id routes reject cross-user access | ownership regression tests | conversations, projects, missions, tasks each raise `ForbiddenException` for non-owner access |
| Acceptance Criterion | Verification Method | Evidence |
| ------------------------------------------------------ | ---------------------------------------- | ------------------------------------------------------------------------------------------------ |
| Chat controller requires auth and current-user context | source assertion test | `chat-security.test.ts` checks `@UseGuards(AuthGuard)` and `@CurrentUser() user: { id: string }` |
| WebSocket handshake requires Better Auth session | unit tests for `validateSocketSession()` | null handshake returns `null`; valid handshake returns original session object |
| Conversation messages reject non-user/assistant roles | class-validator test | `system` role fails validation |
| Conversation messages enforce a 32k max length | class-validator test | `32_001` chars fail validation |
| Chat request payload enforces a 10k max length | class-validator test | `10_001` chars fail validation |
| By-id routes reject cross-user access | ownership regression tests | conversations, projects, missions, tasks each raise `ForbiddenException` for non-owner access |
## Residual Risk
@@ -0,0 +1,158 @@
# Performance Optimization — P8-003
**Branch:** `feat/p8-003-performance`
**Target metrics:** <200 ms TTFB, <2 s page loads
---
## What Was Profiled
The following areas were reviewed through static analysis and code-path tracing
(no production traffic available; findings are based on measurable code-level patterns):
| Area | Findings |
| ---------------------------------- | -------------------------------------------------------------------------------------------------------- |
| `packages/db` | Connection pool unbounded (default 10, no idle/connect timeout) |
| `apps/gateway/src/preferences` | N+1 round-trip on every pref upsert (SELECT + INSERT/UPDATE) |
| `packages/brain/src/conversations` | Unbounded list queries — no `LIMIT` or `ORDER BY` |
| `packages/db/src/schema` | Missing hot-path indexes: auth session lookup, OAuth callback, conversation list, agent-log tier queries |
| `apps/gateway/src/gc` | Cold-start GC blocked NestJS bootstrap (synchronous `await` in `onModuleInit`) |
| `apps/web/next.config.ts` | Missing `compress: true`, no `productionBrowserSourceMaps: false`, no image format config |
---
## Changes Made
### 1. DB Connection Pool — `packages/db/src/client.ts`
**Problem:** `postgres()` was called with no pool config. The default max of 10 connections
and no idle/connect timeouts meant the pool could hang indefinitely on a stale TCP connection.
**Fix:**
- `max`: 20 connections (configurable via `DB_POOL_MAX`)
- `idle_timeout`: 30 s (configurable via `DB_IDLE_TIMEOUT`) — recycle stale connections
- `connect_timeout`: 5 s (configurable via `DB_CONNECT_TIMEOUT`) — fail fast on unreachable DB
**Expected impact:** Eliminates pool exhaustion under moderate concurrency; removes indefinite
hangs when the DB is temporarily unreachable.
---
### 2. Preferences Upsert — `apps/gateway/src/preferences/preferences.service.ts`
**Problem:** `upsertPref` executed two serial DB round-trips on every preference write:
```
1. SELECT id FROM preferences WHERE user_id = ? AND key = ? (→ check exists)
2a. UPDATE preferences SET value = ? … (→ if found)
2b. INSERT INTO preferences … (→ if not found)
```
Under concurrency this also had a TOCTOU race window.
**Fix:** Replaced with single-statement `INSERT … ON CONFLICT DO UPDATE`:
```sql
INSERT INTO preferences (user_id, key, value, mutable)
VALUES (?, ?, ?, true)
ON CONFLICT (user_id, key) DO UPDATE SET value = excluded.value, updated_at = now();
```
This required promoting `preferences_user_key_idx` from a plain index to a `UNIQUE INDEX`
(see migration `0003_p8003_perf_indexes.sql`).
**Expected impact:** ~50% reduction in DB round-trips for preference writes; eliminates
the race window.
---
### 3. Missing DB Indexes — `packages/db/src/schema.ts` + migration
The following indexes were added or replaced to cover common query patterns:
| Table | Old indexes | New / changed |
| --------------- | ------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
| `sessions` | _(none)_ | `sessions_user_id_idx(user_id)`, `sessions_expires_at_idx(expires_at)` |
| `accounts` | _(none)_ | `accounts_provider_account_idx(provider_id, account_id)`, `accounts_user_id_idx(user_id)` |
| `conversations` | `(user_id)`, `(archived)` separate | `conversations_user_archived_idx(user_id, archived)` compound |
| `agent_logs` | `(session_id)`, `(tier)`, `(created_at)` separate | `agent_logs_session_tier_idx(session_id, tier)`, `agent_logs_tier_created_at_idx(tier, created_at)` |
| `preferences` | non-unique `(user_id, key)` | **unique** `(user_id, key)` — required for `ON CONFLICT` |
**Expected impact:**
- Auth session validation (hot path on every request): from seq scan → index scan
- OAuth callback account lookup: from seq scan → index scan
- Conversation list (dashboard load): compound index covers `WHERE user_id = ? ORDER BY updated_at`
- Log summarisation cron: `(tier, created_at)` index enables efficient hot→warm promotion query
All changes are in `packages/db/drizzle/0003_p8003_perf_indexes.sql`.
---
### 4. Conversation Queries — `packages/brain/src/conversations.ts`
**Problem:** `findAll(userId)` and `findMessages(conversationId)` were unbounded — no `LIMIT`
and `findAll` had no `ORDER BY`, so the DB planner may not use the index efficiently.
**Fix:**
- `findAll`: `ORDER BY updated_at DESC LIMIT 200` — returns most-recent conversations first
- `findMessages`: `ORDER BY created_at ASC LIMIT 500` — chronological message history
**Expected impact:** Prevents accidental full-table scans on large datasets; ensures the
frontend receives a usable, ordered result set regardless of table growth.
---
### 5. Cold-Start GC — `apps/gateway/src/gc/session-gc.service.ts`
**Problem:** `onModuleInit()` was `async` and `await`-ed `fullCollect()`, which blocked the
NestJS module initialization chain. Full GC — which calls `redis.keys('mosaic:session:*')` and
a DB query — typically takes 100500 ms. This directly added to startup TTFB.
**Fix:** Made `onModuleInit()` synchronous and used `.then().catch()` to run GC in the
background. The first HTTP request is no longer delayed by GC work.
**Expected impact:** Removes 100500 ms from cold-start TTFB.
---
### 6. Next.js Config — `apps/web/next.config.ts`
**Problem:** `compress: true` was not set, so response payloads were uncompressed. No image
format optimization or source-map suppression was configured.
**Fix:**
- `compress: true` — enables gzip/brotli for all Next.js responses
- `productionBrowserSourceMaps: false` — reduces build output size
- `images.formats: ['image/avif', 'image/webp']` — Next.js Image component will serve modern
formats to browsers that support them (typically 4060% smaller than JPEG/PNG)
**Expected impact:** Typical HTML/JSON gzip savings of 6080%; image serving cost reduced
for any `<Image>` components added in the future.
---
## What Was Not Changed (Intentionally)
- **Caching layer (Valkey/Redis):** The `SystemOverrideService` and GC already use Redis
pipelines. `PreferencesService.getEffective()` reads all user prefs in one query — this
is appropriate for the data size and doesn't warrant an additional cache layer yet.
- **WebSocket backpressure:** The `ChatGateway` already drops events for disconnected clients
(`client.connected` check) and cleans up listeners on disconnect. No memory leak was found.
- **Plugin/skill loader startup:** `SkillLoaderService.loadForSession()` is called on first
session creation, not on startup. Already non-blocking.
- **Frontend React memoization:** No specific hot components were identified as causing
excessive re-renders without profiling data. No speculative `memo()` calls added.
---
## Held future procedure
This report is non-operative evidence, not a current runbook. Until **KBN-101-00, KBN-101-03, and KBN-101-05** land, do not execute a PostgreSQL runner from this checkout. The approved future procedure is exactly: external bootstrap → TLS/roles → `mosaic-db-migrator --run``mosaic-db-migrator --verify` → Gateway/Compose readiness. Deployment will supply the reviewed runner, migration-only credentials, and TLS material; Gateway startup only verifies readiness.
---
_Generated by P8-003 performance optimization task — 2026-03-18_
+15 -15
View File
@@ -6,13 +6,13 @@
## Final remediation verification
| Area | Current evidence | Result |
|---|---|---|
| Attachment confidentiality and integrity | Ingress accepts bounded attachment metadata only when URL is HTTPS, query-free, fragment-free, and credential-free. Count, aggregate size, field length, MIME, and finite non-negative size validation apply before dispatch; `sizeBytes` is signed and retained. | Pass |
| Trusted agent selection | Each binding names a required trusted `agentConfigId`; gateway resolves that config server-side and requires its configured name to equal the binding logical-agent ID. Client/provider input cannot select the agent for Discord ingress. | Pass |
| Privileged operation routing | Gateway revalidates the binding and requires the signed conversation identity to match the configured logical agent before approve/stop actions. Paired admin identity and one-time approval checks remain enforced. | Pass |
| Egress containment and delivery | Egress requires an aligned message/route, configured parent or exact observed thread target, and cleans response routes after completion, errors, typed-ingress failure, or bounded-map pressure. | Pass |
| Side-effect limits | Per guild/authorized-parent/user rolling message and thread limits execute before thread creation or dispatch. | Pass |
| Area | Current evidence | Result |
| ---------------------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ------ |
| Attachment confidentiality and integrity | Ingress accepts bounded attachment metadata only when URL is HTTPS, query-free, fragment-free, and credential-free. Count, aggregate size, field length, MIME, and finite non-negative size validation apply before dispatch; `sizeBytes` is signed and retained. | Pass |
| Trusted agent selection | Each binding names a required trusted `agentConfigId`; gateway resolves that config server-side and requires its configured name to equal the binding logical-agent ID. Client/provider input cannot select the agent for Discord ingress. | Pass |
| Privileged operation routing | Gateway revalidates the binding and requires the signed conversation identity to match the configured logical agent before approve/stop actions. Paired admin identity and one-time approval checks remain enforced. | Pass |
| Egress containment and delivery | Egress requires an aligned message/route, configured parent or exact observed thread target, and cleans response routes after completion, errors, typed-ingress failure, or bounded-map pressure. | Pass |
| Side-effect limits | Per guild/authorized-parent/user rolling message and thread limits execute before thread creation or dispatch. | Pass |
## Security controls reviewed
@@ -25,13 +25,13 @@
## Verification evidence
| Command | Result |
|---|---|
| `pnpm --filter @mosaicstack/discord-plugin test` | PASS — 44 tests; v8 coverage: 92.18% statements/lines, 86.55% branches, 100% functions |
| `pnpm --filter @mosaicstack/discord-plugin typecheck` | PASS |
| `pnpm --filter @mosaicstack/types typecheck` | PASS |
| `pnpm --filter @mosaicstack/gateway typecheck` | PASS |
| `pnpm --filter @mosaicstack/gateway exec vitest run src/plugin/discord-ingress.security.spec.ts src/agent/__tests__/agent-service-ownership.test.ts` | PASS — 29 tests |
| `git diff --check` | PASS |
| Command | Result |
| ---------------------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------- |
| `pnpm --filter @mosaicstack/discord-plugin test` | PASS — 44 tests; v8 coverage: 92.18% statements/lines, 86.55% branches, 100% functions |
| `pnpm --filter @mosaicstack/discord-plugin typecheck` | PASS |
| `pnpm --filter @mosaicstack/types typecheck` | PASS |
| `pnpm --filter @mosaicstack/gateway typecheck` | PASS |
| `pnpm --filter @mosaicstack/gateway exec vitest run src/plugin/discord-ingress.security.spec.ts src/agent/__tests__/agent-service-ownership.test.ts` | PASS — 29 tests |
| `git diff --check` | PASS |
No unresolved critical, high, medium, or low security findings were identified in the reviewed final delta.