roadmap: mark P4 style-warning fix as DONE

Eliminates COMMON-LISP-USER::DEFSKILL and other package-related
STYLE-WARNINGs during compilation. Files affected:
- gateway-messaging, programming-repl, programming-standards,
  system-memory, system-archivist
Remaining warnings are cross-skill references (vault functions)
and minor same-file forward refs — category 2 per ROADMAP.

.env.example

@@ -1,4 +1,4 @@
-# opencortex: Environment Configuration Template
+# passepartout: Environment Configuration Template
 # Copy this to .env and fill in your values
 
 # =============================================================================
@@ -15,23 +15,29 @@ OPENAI_API_KEY="your_openai_key_here"
 ANTHROPIC_API_KEY="your_anthropic_key_here"
 GROQ_API_KEY="your_groq_api_key_here"
 GEMINI_API_KEY="your_gemini_key_here"
+DEEPSEEK_API_KEY="your_deepseek_key_here"
+NVIDIA_API_KEY="your_nvidia_nim_key_here"
 
 # Cascade order (first available provider wins)
-PROVIDER_CASCADE="openrouter,openai,anthropic,groq,gemini-api,ollama"
+# Default (if unset): openrouter,openai,anthropic,groq,gemini-api,deepseek,nvidia
+PROVIDER_CASCADE="openrouter,openai,anthropic,groq,gemini,deepseek"
 
 # =============================================================================
-# LOCAL LLM (Ollama - runs offline)
+# LOCAL LLM (generic OpenAI-compatible endpoint)
 # =============================================================================
+# Set this to the base URL of any local OpenAI-compatible server
+# (llama.cpp, Ollama, vLLM, LM Studio, etc.)
+LOCAL_BASE_URL="localhost:8080"
+
+# Ollama host (legacy: falls back to LOCAL_BASE_URL if not set)
 OLLAMA_HOST="localhost:11434"
 
-# llama.cpp backend (for local GGUF models)
-LLAMA_HOST="localhost:8080"
-
 # =============================================================================
 # VECTOR EMBEDDINGS (semantic search)
 # =============================================================================
-EMBEDDING_PROVIDER="ollama"  # "ollama" or "llama.cpp"
+EMBEDDING_PROVIDER="hashing"  # "hashing" (local, no deps), "local", or "openai"
 EMBEDDING_MODEL="nomic-embed-text"  # model name for embeddings
+EMBEDDING_BASE_URL="https://api.openai.com/v1"  # for :openai provider
 
 # =============================================================================
 # MESSAGING GATEWAYS (optional)
@@ -64,7 +70,7 @@ PRIVACY_FILTER_TAGS="@personal,@health,@finance"
 # =============================================================================
 # BOOTSTRAP
 # =============================================================================
-MANDATORY_SKILLS="org-skill-policy,org-skill-bouncer"
+MANDATORY_SKILLS="security-policy,security-dispatcher"
 
 # =============================================================================
 # CONTEXT / MEMORY
@@ -84,3 +90,4 @@ AREAS_DIR="$HOME/memex/areas"
 RESOURCES_DIR="$HOME/memex/resources"
 ARCHIVES_DIR="$HOME/memex/archives"
 SYSTEM_DIR="$HOME/memex/system"
+LLM_REQUEST_TIMEOUT=30

.gitea/workflows/deploy.yml

@@ -19,6 +19,6 @@ jobs:
       - name: Build and deploy via Docker Compose
         run: |
           cd infrastructure/docker
-          docker-compose -p opencortex down
-          docker-compose -p opencortex build --no-cache opencortex
-          docker-compose -p opencortex up -d --force-recreate opencortex
+          docker-compose -p passepartout down
+          docker-compose -p passepartout build --no-cache passepartout
+          docker-compose -p passepartout up -d --force-recreate passepartout

.github/workflows/lint.yml

@@ -82,6 +82,6 @@ jobs:
 
       - name: Check README has quick install
         run: |
-          grep -q "curl.*opencortex" README.org && \
+          grep -q "curl.*passepartout" README.org && \
             echo "OK: Quick install in README" || \
             echo "WARNING: Quick install curl command not found in README"

.github/workflows/release.yml

@@ -16,16 +16,16 @@ jobs:
 
       - name: Create tarball
         run: |
-          git archive --format=tar.gz --prefix=opencortex-$(git describe --tags) HEAD -o opencortex.tar.gz
+          git archive --format=tar.gz --prefix=passepartout-$(git describe --tags) HEAD -o passepartout.tar.gz
 
       - name: Create zipball
         run: |
-          git archive --format=zip --prefix=opencortex-$(git describe --tags) HEAD -o opencortex.zip
+          git archive --format=zip --prefix=passepartout-$(git describe --tags) HEAD -o passepartout.zip
 
       - name: Upload to GitHub Release
         uses: softprops/action-gh-release@v2
         with:
           files: |
-            opencortex.tar.gz
-            opencortex.zip
+            passepartout.tar.gz
+            passepartout.zip
           generate_release_notes: true

.github/workflows/test.yml

@@ -59,17 +59,17 @@ jobs:
           rm -f *.org
           cd "$OLDPWD"
 
-      - name: Load opencortex and initialize skills
+      - name: Load passepartout and initialize skills
         run: |
           export OC_DATA_DIR="$PWD/.github-test"
           sbcl --non-interactive \
             --eval '(load (merge-pathnames "quicklisp/setup.lisp" (user-homedir-pathname)))' \
             --eval "(push (truename \"$PWD/\") asdf:*central-registry*)" \
             --eval "(push (truename \"$OC_DATA_DIR/\") asdf:*central-registry*)" \
-            --eval '(ql:quickload :opencortex :silent t)' \
+            --eval '(ql:quickload :passepartout :silent t)' \
             --eval "(setf (uiop:getenv \"OC_DATA_DIR\") \"$OC_DATA_DIR\")" \
-            --eval '(opencortex:initialize-all-skills)' \
-            --eval "(let ((n (hash-table-count opencortex:*skills-registry*))) (format t \"~%Skills loaded: ~a~%\" n) (unless (>= n 20) (sb-ext:exit :code 1)))"
+            --eval '(passepartout:initialize-all-skills)' \
+            --eval "(let ((n (hash-table-count passepartout:*skills-registry*))) (format t \"~%Skills loaded: ~a~%\" n) (unless (>= n 20) (sb-ext:exit :code 1)))"
 
       - name: Daemon smoke test
         run: |
@@ -78,9 +78,9 @@ jobs:
             --eval '(load (merge-pathnames "quicklisp/setup.lisp" (user-homedir-pathname)))' \
             --eval "(push (truename \"$PWD/\") asdf:*central-registry*)" \
             --eval "(push (truename \"$OC_DATA_DIR/\") asdf:*central-registry*)" \
-            --eval "(ql:quickload '(:opencortex :croatoan))" \
+            --eval "(ql:quickload '(:passepartout :croatoan))" \
             --eval "(setf (uiop:getenv \"OC_DATA_DIR\") \"$OC_DATA_DIR\")" \
-            --eval '(opencortex:main)' \
+            --eval '(passepartout:main)' \
             > /tmp/oc-daemon.log 2>&1 &
           DAEMON_PID=$!
 

.gitignore

@@ -1,12 +1,14 @@
 .env
-opencortex-server
+passepartout-server
 \$MEMEX_DIR/
 *.log
 *~
 \#*#
-opencortex-tui
+passepartout-tui
 test_input.txt
 
 # Generated artifacts (source of truth is .org)
 /skills/*.lisp
 /tests/*.lisp
+/tmp/*.lisp
+*.fasl

README.org

@@ -1,6 +1,6 @@
-#+TITLE: OpenCortex: Your Autonomous, Plain-Text Life Assistant
+#+TITLE: Passepartout — Your Autonomous, Plain-Text Life Assistant
 #+AUTHOR: Amr
-#+FILETAGS: :opencortex:ai:assistant:
+#+FILETAGS: :passepartout:ai:assistant:
 
 #+HTML: <div style="display: flex; gap: 8px; flex-wrap: wrap; margin-bottom: 1em;">
 #+HTML: <img src="https://img.shields.io/github/v/tag/amrgharbeia/opencortex?label=version&style=flat-square">
@@ -9,104 +9,60 @@
 #+HTML: <img src="https://img.shields.io/badge/docs-Org--mode-green?style=flat-square">
 #+HTML: </div>
 
-* Quick Install
+Passepartout is an AI assistant that runs in your terminal, reads and writes your Org-mode files, executes tasks through a verified safety gate, and works fully offline with local LLMs. Everything it knows is a folder of plain text files that you own.
+
+**One-line install:**
 
 #+begin_src bash
-curl -fsSL https://raw.githubusercontent.com/amrgharbeia/opencortex/main/opencortex.sh | bash -s configure
+curl -fsSL https://raw.githubusercontent.com/amrgharbeia/opencortex/main/passepartout | bash -s configure
 #+end_src
 
-Then run ~opencortex tui~ to start chatting.
-
-* Meet OpenCortex
-
-Most AI assistants are just chatbots. You ask a question, they answer, they forget you exist. They trap your conversations in proprietary web apps and silo your data.
-
-*OpenCortex is different. It is an AI that lives inside your own text files.*
-
-It runs locally on your machine. It reads your notes, organizes your life, executes tasks, and gardens your knowledge base—all while keeping your data in plain text files you own completely.
-
-* Why OpenCortex Exists
-
-The current generation of AI agents have a fundamental flaw: they prioritize quick demos over long-term reliability and user sovereignty.
-
-The biggest problem is data ownership. Most agents bury your memories in opaque databases. If you want to see your own data, you have to ask the AI to fetch it. If the app shuts down, your data is gone.
-
-OpenCortex solves this with total plain-text transparency. Your entire life is a folder of text files. OpenCortex manages them the same way you do—with any text editor. No database to migrate, no schema to update, no lock-in.
-
-* What Makes OpenCortex Different
-
-Most AI agents are Python applications that happened to call an LLM. OpenCortex is different. It is built in pure Common Lisp—top to bottom, no wrapper, no translation layer.
-
-The kernel is Lisp. The skills are Lisp. The memory system is Lisp. The TUI is Lisp. One language from the hardware to the agent's thoughts.
-
-Python agents need a second language for configuration (YAML), a third for memory (JSON or SQLite), and a fourth for deployment (Docker). OpenCortex needs SBCL. That's it.
-
-This is not nostalgia for the 1980s. Lisp has two properties that matter for an autonomous agent.
-
-First, code is data. In Lisp, the agent can read its own code the same way it reads a text file. It can parse its skills, understand their structure, and modify them at runtime. Python's AST is a foreign object—the agent can inspect it, but not treat it as something it owns.
-
-Second, stability. The Common Lisp specification has been stable for decades. Your code does not break because a library changed its API. Dependencies do not rot. A Lisp program from 1995 still runs today.
-
-Your data lives in Org-mode files. Not a database. Not JSON. Not a vector store. Just plain text that you can read in any editor, search with grep, and back up any way you want.
-
-This matters because every other agent makes your data dependent on their app. Their database schema defines what you can store. Their migration scripts decide whether your data survives an upgrade. OpenCortex has no schema. Your memory is a folder of text files. It survives app updates, platform switches, and decades of use.
-
-The agent fixes itself. When it encounters an error, it can modify its own code, apply surgical fixes, and learn from the outcome to improve and grow. Skills hot-reload at runtime, so you can extend the system without restarting. And if something goes wrong during a complex operation, it snaps back to a known-good state.
-
-* Three Problems Every Agent Ignores
-
-Every other AI assistant has three fundamental flaws that OpenCortex addresses.
-
-The first is the data silo. Most agents bury your memories in opaque databases. If you want to see your own data, you have to ask the AI to fetch it. If the app shuts down, your data is gone. OpenCortex stores everything in plain text files that you own. No migration needed, no schema to update, no lock-in.
-
-The second is the hallucination problem. Most agents pipe AI-generated text directly into your terminal. If the model hallucinates, it can delete your files or break your system. OpenCortex splits its brain into two parts. The creative brain (the LLM) suggests actions. The strict guard (deterministic logic) intercepts every proposal before it touches a file or runs a command. If the AI hallucinates, the guard blocks it.
-
-The third is cloud dependency. Most assistants rely entirely on big tech APIs. When your internet drops, or the service goes down, your assistant dies. Worse, your private notes are constantly sent to third-party servers. OpenCortex runs on your own hardware using free, open-source models. Your private data never leaves your laptop. Cloud models are optional—used only when you explicitly allow them for complex tasks.
+Then ~passepartout tui~ to start chatting.
 
 * Quick Start
 
-You need SBCL (Steel Bank Common Lisp) installed.
+You need SBCL (Common Lisp), git, and curl.
 
 #+begin_src bash
-# Clone the repository
-git clone https://github.com/amrgharbeia/opencortex.git ~/memex/projects/opencortex
-
-# Run the Setup Wizard
-cd ~/memex/projects/opencortex
-./opencortex.sh setup
-
-# Verify System Health
-opencortex doctor
-
-# Enter the Brain
-opencortex tui
+git clone https://github.com/amrgharbeia/opencortex.git ~/projects/passepartout
+cd ~/projects/passepartout
+./passepartout configure       # install deps, tangle, setup wizard
+passepartout tui                # launch the terminal interface
 #+end_src
 
-* The Onboarding Trifecta
+See [[file:docs/USER_MANUAL.org][User Manual]] for the full guide.
 
-`opencortex setup` guides you through configuring LLM providers. Tell it how to talk to Ollama, Groq, OpenRouter, or your own endpoint.
+* Why Passepartout
 
-`opencortex gateway link <platform> <token>` connects external chat gateways. Talk to your agent from Telegram while it works on your files.
+** Your data stays yours.** No database, no vector store, no cloud silo. Your entire memory is a folder of Org files. You can read them with any text editor, search them with grep, and back them up however you like. If Passepartout stops existing, your data doesn't disappear.
 
-`opencortex doctor` shows you what's working, what's broken, and what needs attention.
+** The LLM can't do damage.** Every action the LLM proposes passes through a deterministic safety gate before it touches a file, runs a command, or sends a message. The LLM suggests; the gate decides. Hallucinations are blocked, not corrected after the fact.
+
+** Runs on your hardware.** Works fully offline with Ollama and local models. Cloud providers (OpenRouter, OpenAI, Anthropic, Groq, Gemini, DeepSeek, NVIDIA NIM) are optional add-ons.
+
+** Written in Common Lisp.** Code is data. The agent reads its own source the same way it reads a text file — it parses, modifies, and hot-reloads its skills without restarting. One language from the kernel to the TUI to the build system.
 
 * Architecture
 
-OpenCortex has three layers.
-
-The Harness is the kernel. It runs the [[file:harness/loop.org][metabolic loop]]—Perceive → Reason → Act—each signal moving through normalization, LLM reasoning, skill verification, and action execution. Depth limits prevent infinite loops. The [[file:harness/memory.org][memory system]] persists to plain-text Org-mode files with snapshot and rollback on errors.
-
-The Skills are userland—thin harness, fat skills. Modular skills load at runtime. Diagnostics, Configuration, LLM Gateway, Shell Actuation, Emacs Editing, Self-Edit, Self-Fix, Credentials Vault, Tool Permissions, Protocol Validator, and more. Each is an independent Org-mode module. Add new skills without touching the kernel.
-
-The Interface is what you use to talk to the agent. A native Lisp [[file:harness/tui-client.org][TUI]] with semantic highlighting and history. A [[file:harness/communication.org][TCP socket server]] for CLI interaction. External channels via the gateway—Telegram and beyond.
+- [[file:org/core-loop.org][Metabolic Loop]] — Perceive → Reason → Act, the fundamental cognitive cycle
+- [[file:org/security-dispatcher.org][Dispatcher]] — 9-vector safety gate: secret scanning, path protection, shell safety, lisp validation, network exfiltration, privacy filtering
+- [[file:org/core-memory.org][Memory]] — Single-address-space object store with Merkle-tree integrity and snapshot rollback
+- [[file:org/core-skills.org][Skill Engine]] — 20 hot-reloadable skills loaded at boot, each an independent Org file
+- [[file:org/gateway-tui.org][TUI]] — Croatoan-based terminal interface connected via framed TCP protocol
+- [[file:org/system-model.org][LLM Dispatch]] — Central dispatch for model inference requests
 
 * Project Documentation
 
-OpenCortex practices what it preaches—the documentation lives in the code.
-
-The [[file:USER_MANUAL.org][User Manual]] covers setup, configuration, and commands. The [[file:docs/ROADMAP.org][Evolutionary Roadmap]] shows our plan for reaching state-of-the-art capabilities. The [[file:docs/CONTRIBUTING.org][Contributing]] guide teaches you how to add new skills.
+| Document | Answers |
+|----------|---------|
+| [[file:docs/USER_MANUAL.org][User Manual]] | How do I use it? |
+| [[file:docs/ARCHITECTURE.org][Architecture]] | How does it work inside? |
+| [[file:docs/DESIGN_DECISIONS.org][Design Decisions]] | Why was it built this way? |
+| [[file:docs/ROADMAP.org][Roadmap]] | Where is it going? When? |
+| [[file:docs/ROADMAP.org][TODO]] | Who is doing what? |
+| [[file:docs/CONTRIBUTING.org][Contributing]] | How do I contribute? |
 
 * License
 
-OpenCortex is released under the [[file:LICENSE][AGPLv3 license]].
+Passepartout is released under the [[file:LICENSE][AGPLv3 license]].
 See [[file:CLA.org][CLA.org]] for the Contributor License Agreement.

TODO.org

@@ -1,796 +0,0 @@
-# OpenCortex Project Tasks
-# All OpenCortex-related TODOs live here. gtd.org links to this file.
-# Evolutionary context: see docs/ROADMAP.org
-
-* PHASE: AUTONOMOUS MVP (v0.1.0 Released)
-:PROPERTIES:
-:ID:       proj-mvp-v0-1-0
-:END:
-The "Zero-to-One" release. The agent must be mathematically secure, CLI-first, and capable of autonomous Memex maintenance.
-
-** DONE 1. Harness Hardening (The Final Audit)
-*** DONE Audit remaining core skills (`org-skill-policy.org`, `org-skill-bouncer.org`) to the new Literate Granularity standard.
-*** DONE Implement Verification Lock: Ensure `MANDATORY_SKILLS` pass `validate-lisp-syntax` before boot proceeds.
-*** DONE Logging & Transparency: Ensure `context-get-system-logs` is utilized by the Reason engine to explain blocked actions.
-
-** DONE 2. The Autonomous Scribe & Gardener (The Primary Value Prop)
-*** DONE Implement `org-skill-scribe.org`: Background worker that distills daily chronological logs into structured Zettelkasten notes.
-*** DONE Implement `org-skill-gardener.org`: Heartbeat-driven skill that autonomously flags orphaned nodes and repairs broken links.
-
-** DONE 3. The Zero-to-One Experience (setup.org)
-*** DONE Consolidate installation instructions, `onboard.sh`, and `Dockerfile` into a single, literate `setup.org` file.
-*** DONE Ensure the setup process interactively builds the `.env` and verifies SBCL/Quicklisp dependencies.
-
-** DONE 4. CLI-First Actuation
-    CLOSED: [2026-04-14 Tue 09:40]
-*** DONE Verified the `cli` actuator and inbound gateway handle standard I/O interaction gracefully via a stateful `socat` connection.
-
-* PHASE: PUBLICATION & VERIFICATION (v0.1.0 Post-Release)
-:PROPERTIES:
-:ID:       proj-pub-v0-1-0
-:END:
-Ensuring the system is ready for the world through collaborative testing, documentation, and licensing.
-
-** DONE 1. Collaborative End-to-End Testing [2026-04-21 Tue]
-    CLOSED: [2026-04-21 Tue 17:30]
-*** DONE Verified stable foundation at commit `cab0e5a`.
-*** DONE Verified boot sequence and bidirectional connectivity.
-
-** DONE 2. Semantic Reorganization & System Stabilization [2026-04-21 Tue]
-    CLOSED: [2026-04-21 Tue 18:30]
-*** DONE Rename directories: harness/, library/, environment/, infrastructure/.
-*** DONE Consolidate Probabilistic engine into reason.lisp.
-*** DONE Embed bidirectional CLI logic into opencortex.sh.
-*** DONE Stabilize skill engine: 12/12 skills loaded with package jailing.
-*** DONE Cleanup legacy documentation and deployment artifacts.
-
-** DONE 2. Comprehensive Documentation <2026-04-14 Tue>
-    CLOSED: [2026-04-20 Mon 18:00]
-*** DONE Draft `USER_MANUAL.org`: Focus on CLI interaction, installation, and Memex structure.
-*** DONE Draft `CONTRIBUTING.org`: Explain Literate Granularity and Skill creation standards.
-
-** DONE 3. License & Legal Finalization <2026-04-14 Tue>
-    CLOSED: [2026-04-17 Fri 11:25]
-*** DONE Assign the AGPLv3 open-source license.
-*** DONE Implement a broad Contributor License Agreement (CLA) process.
-*** DONE Update `LICENSE` and `CHANGELOG` accordingly.
-
-** TODO 4. GitHub Migration & Repository Setup <2026-04-14 Tue>
-*** TODO Migrate primary remote to GitHub and configure canonical repository.
-*** TODO Set repository topics, badges, issue templates, and CI/CD foundations.
-
-** TODO 5. Marketing & Social Media Launch <2026-04-14 Tue>
-*** TODO Execute PR plan (Reddit, Hacker News, X/Twitter).
-*** TODO Create a short, high-quality terminal demo GIF/video of the TUI interaction.
-
-* PHASE: INTERACTIVE REFINEMENT (v0.2.0 Target)
-:PROPERTIES:
-:ID:       proj-refinement-v0-2-0
-:END:
-Elevating the user interface from raw shell piping to a high-fidelity, native Lisp experience. Priority: Self-editing is the foundation of all future growth. Full org-mode manipulation makes the agent a true Emacs citizen.
-
-Roadmap basis: Evolutionary roadmap from README.org. Working backwards from SOTA parity.
-
-** DONE 0. Autonomous Self-Editing Foundation
-*** DONE org-skill-lisp-repair (Lisp syntax repair)
-    - Deterministic: auto-balance parens via paren-counting
-    - Probabilistic: LLM generates surgical fix on =:syntax-error= events
-    - Memory rollback on failure
-    DONE: Now in org-skill-lisp-utils (merged from contrib)
-*** DONE org-skill-emacs-edit (full org-mode manipulation)
-    - Read org buffers, parse AST via org-element
-    - Create/update/delete headlines, set properties, manage TODO states
-    - Handle =id:= links and internal links
-    - Pure Lisp implementation (no Emacs subprocess)
-*** DONE Expose Structural AST Editing Tools
-    - Wrap org-skill-emacs-edit into def-cognitive-tool definitions
-    - Force LLM to use semantic node updates instead of regex file I/O
-*** DONE Implement Reflection Loops
-    - Feed rejection traces (syntax errors, policy blocks) back to LLM to trigger self-correction
-*** DONE Harden Actuators
-    - Fix path-traversal vulnerabilities in file I/O tools (e.g. :write-file)
-    - Enforce Merkle-snapshots on all state-modifying actions
-*** DONE Implement tool permission tiers (ask/allow/deny)
-    - Per-tool permission plist stored in org-object
-    - =generate-tool-belt-prompt= filters denied tools before LLM sees them
-    - Ask-tier prompts user before execution
-*** DONE Implement skill hot-reload (=:reload-skill= tool)
-    - Swap compiled skill files without breaking active sockets
-    - Reload skill into jailed package namespace
-    - DONE: Added :reload-skill, :read-file, :write-file, :replace-string tools
-    - DONE: Fixed ASDF compilation bug (position tracking issue with :serial t)
-    - DONE: Added explicit :depends-on declarations to opencortex.asd
-
-** DONE Engineering Process Improvements [2026-04-23 Wed]
-*** DONE Fix ASDF compilation bug (position tracking at byte 16834)
-    - Root cause: Duplicate proto-get, bt: prefix issues, :serial t position cache
-    - Fix: Removed duplicate, fixed bt:->bordeaux-threads, explicit dependencies
-    - Added eval-when wrapper for new tools (good Lisp practice)
-*** DONE Add test-first methodology to engineering standards
-    - Rule 10: Test-first - design tests before coding, run chaos testing
-    - Rule 11: Org as thinking medium - document investigations in prose
-    - Rule 12: Engineering decision audit trail - document root cause, tradeoffs
-    - Added to opencortex-contrib/skills/org-skill-engineering-standards.org
-*** DONE Perform comprehensive architectural review and evolution strategy [2026-04-27 Mon]
-    - Identified hidden gaps: Org-mode round-trip, sandboxing vulnerabilities, and GC scaling.
-    - Defined "Structural AST Editing" and "Reflection Loops" as core strategic requirements.
-    - Captured findings in [[file:notes/opencortex-architectural-evolution.org][opencortex-architectural-evolution.org]].
-*** DONE Fix API drift in opencortex-contrib [2026-04-27 Mon]
-    - Standardized legacy keywords (:neuro/:symbolic) to new harness standard (:probabilistic/:deterministic).
-    - Updated 16 skills in opencortex-contrib for kernel compatibility.
-
-** DONE 4. Core Skills Consolidation [2026-04-23 Thu]
-    - Merged lisp-validator + lisp-repair → org-skill-lisp-utils.org
-    - Added lisp utilities: count-char, deterministic-repair, neural-repair
-    - Added validation: structural, syntactic, semantic checks
-    - Moved org-skill-self-fix from contrib → core
-    - Moved org-skill-engineering-standards from contrib → core
-    - Deleted old org-skill-lisp-validator.org
-
-** DONE 5. Advanced CLI Onboarding Experience
-*** DONE Implement interactive Lisp CLI wizard (=opencortex setup=)
-*** DONE Implement =opencortex gateway link= for Telegram/Signal bot connection [2026-05-02 Sat]
-*** DONE Implement =opencortex gateway unlink= to disable a gateway [2026-05-02 Sat]
-*** DONE Implement =opencortex gateway list= to show gateway status [2026-05-02 Sat]
-*** DONE Implement =opencortex install <skill>= for dynamic skill downloading [2026-05-02 Sat]
-*** DONE Implement =opencortex doctor= for environment health and API key validation [2026-04-28 Tue]
-    - Verified 22/22 skills loading with clean boot.
-    - Fixed macro conflicts and package jailing bugs.
-
-** DONE Chaos-Driven Bug Fixes (v0.2.0 Pre-Release) [2026-04-28 Tue]
-   - Fixed major conflict between Type A and Type B def-cognitive-tool macros.
-   - Enforced dynamic-only loading by removing skills from opencortex.asd.
-   - Fixed let/let* sequential binding bugs in emacs-edit and self-edit.
-   - Standardized *cognitive-tools* as a centralized hash table.
-   - Resolved missing in-package declarations in core skills.
-
-** DONE 1. Common Lisp TUI Implementation [2026-04-28 Tue]
-*** DONE Integrate =croatoan= for native terminal rendering
-*** DONE Implement scrollable history viewport for chat and thought streams
-*** DONE Implement fixed bottom input box with multi-line support and command history
-*** DONE Implement persistent status bar for background workers (Scribe/Gardener)
-*** DONE Support syntax highlighting for Lisp code blocks and Org-mode syntax
-
-** DONE 2. Slash Commands & Interactive Control [2026-04-28 Tue]
-*** DONE Implement =/help= command for system overview
-*** DONE Implement =/exit= and =/clear= commands
-*** DONE Implement =/skill-load <name>= for dynamic hot-reloading
-*** DONE Implement =/status=, =/config=, =/search=, =/commit= slash commands
-
-** DONE 3. Direct Lisp-to-Terminal Actuation [2026-04-28 Tue]
-*** DONE Refactor the =:cli= actuator to use native TUI rendering
-
-** DONE 4. Persistent REPL for Interactive Development [2026-04-30 Thu]
-*** DONE Implement org-skill-repl for persistent Lisp evaluation
-    - repl-eval: evaluate code with result+output+error separation
-    - repl-inspect: inspect variables and functions
-    - repl-list-vars: list bound symbols in package
-    - repl-load-file: load files into image
-    - Supports REPL-first workflow with literate reflection in org
-
-* PHASE: EVENT ORCHESTRATION + HITL (v0.3.0)
-:PROPERTIES:
-:ID:       proj-orchestration-v0-3-0
-:END:
-Unified control plane: hooks + cron + routing in one skill. Deep project understanding.
-
-** TODO 0. Project Renaming (Bouncer → Dispatcher)
-*** TODO Audit all files for component names to rename
-*** TODO Rename org-skill-bouncer.org → org-skill-dispatcher.org
-*** TODO Rename skill-bouncer package → skill-dispatcher
-*** TODO Rename cognitive tool =:bouncer= → =:dispatcher=
-*** TODO Update all references in harness, skills, documentation
-*** TODO Update gtd.org and ROADMAP.org terminology
-*** TODO Update DESIGN_DECISIONS.org section if applicable
-*** TODO Verify all tests pass after rename
-:LOGBOOK:
-- State "TODO"       from "" [2026-05-01 Fri 15:40]
-:END:
-
-The Dispatcher's role has evolved beyond security guard. It is the seed of the deterministic engine - it learns to execute procedures without invoking the neural net.
-
-** TODO 1. Event Orchestrator (unified hooks+cron+routing)
-*** TODO Integrate contrib org-skill-event-orchestrator
-    - Merge *hook-registry* + *cron-registry* + complexity classifier
-    - Hooks via =#+HOOK:= Org-mode properties
-    - Three complexity tiers: =:REFLEX= (no LLM), =:COGNITION= (light LLM), =:REASONING= (full LLM)
-    - Hook into heartbeat for cron processing
-
-** TODO 2. Context Manager (project scoping)
-*** TODO Integrate contrib org-skill-context-manager
-    - Stack-based context with =push-context= / =pop-context=
-    - Path resolution relative to current context
-    - Memory scope: =:scope= property on org-objects (memex/session/project)
-    - Implement lazy-loading proxies for large-scale memory traversal (offload cold nodes to disk)
-
-** TODO 3. Model-Tier Routing (cost optimization)
-*** TODO Extend =*model-selector-fn= for complexity-based routing
-    - Heartbeats → smallest model
-    - User input → medium model
-    - Complex reasoning → large model
-    - Source: GBrain sub-agent model routing
-
-** TODO 4. Memory Scope Segmentation
-*** TODO Extend org-object with =:scope= property
-    - =:memex= (permanent knowledge)
-    - =:session= (ephemeral context)
-    - =:project= (scoped to current work)
-    - Scope-aware retrieval in memory.lisp
-
-** TODO 5. Asynchronous Embedding Gateway
-*** TODO Implement provider-agnostic org-skill-embedding-gateway
-    - Support Ollama, llama.cpp, and OpenAI based on .env config
-    - Implement lazy-loading: edits mark nodes as =:vector :pending=
-    - Background worker thread batches pending nodes and updates Merkle tree silently
-
-** TODO 6. Slash Commands (TUI ergonomics)
-*** TODO M-x style command palette
-*** TODO /- prefix for command mode
-*** TODO Commands defined in Org-mode
-
-* PHASE: LONG-HORIZON PLANNING + GIT WORKFLOWS (v0.4.0)
-:PROPERTIES:
-:ID:       proj-planning-v0-4-0
-:END:
-Multi-step task mastery, structured tracking with failure handling and course correction.
-
-** TODO 0. Long-Horizon Planning (task tree DAG)
-*** TODO Implement org-skill-long-horizon
-    - Decompose complex tasks into Org-mode headline trees
-    - Terminal states: =:todo= → =:next-action= → =:in-progress= → =:done= / =:blocked= / =:stuck=
-    - Parent summarises child results
-    - Branch pruning when paths fail
-    - Source: Claude Code ULTRAPLAN (reimplemented in Lisp)
-
-** TODO 1. Git Steward (version control integration)
-*** TODO Integrate contrib org-skill-git-steward
-    - Status, diff, commit, push, branch operations
-    - Policy: commit-before-modify gate (from contrib engineering-standards)
-    - Log commits to memory
-
-** TODO 2. TDD Runner Integration
-*** TODO Integrate contrib org-skill-tdd-runner
-    - Run FiveAM tests on file save
-    - Inject =:test-failure= event on red
-    - Hook into self-fix for auto-repair proposals
-
-** TODO 3. Deep Emacs Integration
-*** TODO Full org-agenda awareness
-    - Navigate, clock time, refile, archive
-    - Uses org-element + org-id
-
-* PHASE: INTERACTIVE ACTUATION & ENVIRONMENT STEWARDSHIP (v0.5.0)
-:PROPERTIES:
-:ID:       proj-actuation-v0-5-0
-:END:
-Interactive terminal sessions and autonomous dependency management.
-
-** TODO 0. Interactive PTY Actuator
-*** TODO Stream long-running process output to the context window (e.g., `npm run dev`, REPLs)
-*** TODO Implement async interrupt control (Ctrl+C emulation)
-
-** TODO 1. The Environment Steward
-*** TODO Autonomously detect missing dependencies (e.g., "Command not found")
-*** TODO Propose an installation command and retry the failed action
-
-* PHASE: CREATOR + ARCHITECT + GTD (v0.6.0)
-:PROPERTIES:
-:ID:       proj-creator-v0-5-0
-:END:
-Agent bootstraps itself: creates skills autonomously, designs projects from PRDs, tracks work.
-
-** TODO 0. Skill Creator (autonomous skill generation)
-*** TODO Integrate contrib org-skill-creator
-    - LLM drafts complete skill org-file from natural language
-    - Mandatory: syntax validation → jail-load → test → register
-
-** TODO 1. Architect Agent (PRD → PROTOCOL)
-*** TODO Integrate contrib org-skill-architect
-    - Scan =:STATUS: FROZEN= PRDs
-    - Generate Phase B PROTOCOL from Phase A
-    - Write to same file
-
-** TODO 2. GTD Integration (project tracking)
-*** TODO Integrate contrib org-skill-gtd
-    - Full GTD cycle: capture, clarify, organize, reflect, engage
-    - org-gtd v4.0 DAG (=:TRIGGER:=, =:BLOCKER:=)
-
-** TODO 3. Consensus Loop (multi-model agreement)
-*** TODO Integrate contrib org-skill-consensus
-    - Run multiple providers for critical decisions
-    - Compare results, detect disagreements
-    - Confidence scoring
-
-** TODO 4. Web Research (Playwright browsing)
-*** TODO Integrate contrib org-skill-playwright + org-skill-web-research
-    - Headless Chromium via Python bridge
-    - Text extraction and screenshots
-    - Gemini Web UI automation
-
-** TODO 5. Memex Management (PARA lifecycle)
-*** TODO Integrate contrib org-skill-memex + org-skill-workspace-manager
-    - Archive DONE tasks, suggest refiling
-    - Detect orphaned nodes
-    - PARA/Zettelkasten maintenance
-
-* PHASE: VISUAL GROUNDING & MCP BRIDGE (v0.7.0)
-:PROPERTIES:
-:ID:       proj-vision-v0-7-0
-:END:
-Multimodal visual interaction and ecosystem-wide tool compatibility.
-
-** TODO 0. Computer Use / Vision
-*** TODO Allow the agent to request host OS or browser screenshots
-*** TODO Analyze UI and issue precise X/Y coordinate click/type commands via an X11/Wayland bridge
-
-** TODO 1. MCP Gateway Bridge
-*** TODO Build a Lisp-native client for the Model Context Protocol
-*** TODO Connect OpenCortex to external tools and data sources
-
-* PHASE: THE EVALUATION HARNESS (v0.8.0)
-:PROPERTIES:
-:ID:       proj-eval-v0-8-0
-:END:
-Automated benchmarking to mathematically prove the agent's reasoning capabilities.
-
-** TODO 0. SWE-Bench Harness
-*** TODO Automated pipeline that clones repositories and feeds GitHub issues
-*** TODO Track multi-step resolution trajectory, run tests, and score success
-
-* PHASE: SOTA PARITY (v1.0.0)
-:PROPERTIES:
-:ID:       proj-sota-v1-0-0
-:END:
-Feature-complete agent competitive with commercial agents. All borrowed concepts reimplemented in pure Lisp.
-
-All features from v0.2.0 through v0.8.0 combined, verified, and tested end-to-end.
-
-| Area | Parity Target |
-|------|--------------|
-| Self-improvement | Claude Code self-debug |
-| Planning | ULTRAPLAN equivalent |
-| Tool ecosystem | 10+ cognitive tools |
-| Context window | Semantic search + scope segmentation |
-| Safety | 6 Policy invariants + formal verification |
-| Multi-step tasks | Task trees with terminal states |
-| Code editing | Full file read/write via org manipulation |
-| Memory | Vector recall in org-object |
-| Emacs integration | Full org-mode control (exceeds Claude Code) |
-| Autonomy | 100% local capable (exceeds Claude Code) |
-
-* PHASE: LISP MACHINE EMERGENCE (v2.0.0)
-:PROPERTIES:
-:ID:       proj-lisp-v2-0-0
-:END:
-From Lisp-using agent to true Lisp machine. Agent IS the Emacs process.
-
-** TODO Lish: Lisp editor as Org-mode IDE
-    - Org-babel for interactive Lisp evaluation
-    - Full REPL in TUI
-    - No bridge needed — direct memory access
-** TODO Lish: Shell replacement
-    - Lisp-based shell that speaks plists
-    - Org-mode buffers as file system
-    - No bash dependency
-
-* PHASE: NEUROSYMBOLIC MATURITY (v3.0.0)
-:PROPERTIES:
-:ID:       proj-neuro-v3-0-0
-:END:
-Deterministic planner takes the wheel. LLM relegated to semantic translation.
-
-** TODO Deterministic planner
-    - Planner as pure Lisp function
-    - No LLM needed for scheduling
-    - Generates task graphs without probabilistic inference
-** TODO Self-correcting gates
-    - Gates learn from false positives (user override patterns)
-    - Adaptive threshold adjustment
-
-* PHASE: AI STACK INTERNALIZED (v4.0.0)
-:PROPERTIES:
-:ID:       proj-ai-v4-0-0
-:END:
-The agent understands its own weights. No external inference.
-
-** TODO Llama.cpp in Lisp
-    - FFI binding to llama.cpp
-    - No Python subprocess
-    - Pure Common Lisp inference
-** TODO Weights as sexps
-    - Neural weights represented as Lisp data structures
-    - Homoiconic model introspection
-
-* PHASE: TRUE AGENCY (v5.0.0)
-:PROPERTIES:
-:ID:       proj-agency-v5-0-0
-:END:
-World models, temporal reasoning, goal persistence across restarts.
-
-** TODO World models
-    - Agent builds predictive models of user behavior
-    - Project dynamics awareness
-    - System state forecasting
-** TODO Temporal reasoning
-    - Scheduling and deadline awareness
-    - Elapsed duration tracking
-    - Calendar integration
-** TODO Goal persistence
-    - Goals survive restarts
-    - Long-term projects tracked in org-objects
-    - Cross-session continuity
-
-* PHASE: EVOLUTIONARY ROADMAP (Previous — Superseded by Critical Analysis)
-:PROPERTIES:
-:ID:       proj-old-roadmap
-:END:
-Superseded by the critical analysis-informed roadmap above (v0.2.0 through v5.0.0). This section kept for historical reference.
-
-** TODO v0.1.0: The Autonomous Foundation (Current Release) — Now COMPLETE
-** TODO v1.0.0 (Phase 2.5): The Verified Wrapper (SOTA Parity) — Now v1.0.0
-** TODO v2.0.0 (Phase 3): Cannibalizing the Toolchain — Now v2.0.0
-** TODO v3.0.0 (Phase 4): True Symbolic Determinism — Now v3.0.0
-
-* PHASE: FOUNDATION (Complete)
-** DONE Draft Swank/Socket communication protocol between CL and Emacs
-:PROPERTIES:
-:CREATED: [2026-03-22 Sun 14:00]
-:ASSIGNED: Agent
-:END:
-** DONE Implement core Perceive-Think-Act loop in Common Lisp
-:PROPERTIES:
-:CREATED: [2026-03-22 Sun 14:00]
-:ASSIGNED: Agent
-:END:
-** DONE Implement Persistent Object-Store for Org entities in CL
-:PROPERTIES:
-:CREATED: [2026-03-22 Sun 16:30]
-:ASSIGNED: Agent
-:END:
-** DONE Implement LLM Connector (Probabilistic Engine) in CL Daemon
-:PROPERTIES:
-:CREATED: [2026-03-22 Sun 17:30]
-:ASSIGNED: Agent
-:END:
-** DONE Design Deterministic Engine Heuristics (Lisp logic over Memory)
-:PROPERTIES:
-:CREATED: [2026-03-22 Sun 17:30]
-:END:
-** DONE Achieve Phase 3: The Self-Editing Kernel
-:PROPERTIES:
-:CREATED: [2026-03-23 Mon 16:30]
-:END:
-- Jailing & Sandboxing implemented
-- Org-Native Skill Standard established
-- Telemetry & Introspection API active
-
-* PHASE: THE SOVEREIGN BOUNDARY (Core vs Skills Refactor)
-:PROPERTIES:
-:ID:       proj-autonomous-boundary
-:END:
-Slim down the opencortex microharness by moving non-essential cognitive functions to hot-reloadable user-space skills.
-
-** DONE Extract LLM Provider Routing to a Skill (neuro.lisp)
-** DONE Extract Vector Embedding Algorithms to a Skill (embedding.lisp)
-   CLOSED: [2026-04-12 Sun 14:10]
-   :PROPERTIES:
-   :ID: extract-embedding-skill
-   :END:
-   - Created `org-skill-embedding.org`.
-   - Moved logic to `src/embedding-logic.lisp` via tangling.
-   - Updated `system-definition.org`.
-** DONE Extract Sparse Tree Context Pruning Strategies to a Skill (context.lisp)
-   CLOSED: [2026-04-12 Sun 14:25]
-   :PROPERTIES:
-   :ID: extract-context-skill
-   :END:
-   - Created `org-skill-peripheral-vision.org`.
-   - Moved logic to `src/context-logic.lisp` via tangling.
-   - Updated `system-definition.org`.
-** DONE Implement `org-skill-peripheral-vision` (Moving embedding logic out of core)
-   CLOSED: [2026-04-12 Sun 14:25]
-   :PROPERTIES:
-   :ID: impl-peripheral-vision
-   :END:
-** DONE Implement communication protocol Schema Validation (Prevent reader macro injection in communication.lisp)
-   CLOSED: [2026-04-12 Sun 14:45]
-   :PROPERTIES:
-   :ID: communication-protocol-schema-validation
-   :END:
-   - Created `org-skill-protocol-validator.org`.
-   - Integrated `validate-communication-protocol-schema` into `communication.org`.
-   - Added `protocol-validator.lisp` to system definition.
-** DONE Implement Pluggable communication protocol Integrity Hashing (Core interface, Skill-based algorithms)
-   CLOSED: [2026-04-12 Sun 15:15]
-   :PROPERTIES:
-   :ID: communication-protocol-integrity-hashing
-   :END:
-   - Integrated HMAC-SHA256 (`ironclad:make-mac`) in `literate/communication.org`.
-** DONE Implement Native Lisp Merkle-Tree Versioning (Short-term undo buffer in memory.lisp)
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Performance: Implement Copy-on-Write (CoW) or Persistent Data Structures for Memory
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Feature: Implement Latent Reflection (Proactive Gardening) using heartbeat idle cycles
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Simplification: Refactor Cognitive Cycle into a Unified Reactive Signal Pipeline
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Resilience: Implement Micro-Rollbacks for the Immune System
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Implement `org-skill-memory-archivist` (Long-term IPFS checkpointing and P2P sync)
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Implement True Lisp Sandboxing (eval-safe mechanism in core and policy in skills)
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Decouple Vendor Logic from Probabilistic Engine (Move Google/Anthropic/OpenAI to Skills)
-   CLOSED: [2026-04-12 Sun 19:15]
-** DONE Component IV: Comprehensive Core Skill Audit (Review all 39 skills)
-   CLOSED: [2026-04-12 Sun 19:45]
-   :PROPERTIES:
-   :ID: core-skill-audit-task
-   :END:
-
-** DONE Consolidation I: Unified LLM Gateway (Anthropic, Gemini, Groq, OpenAI, etc.)
-** DONE Consolidation II: Credentials Vault (Secure Enclave & Masked Logging)
-** DONE Consolidation III: Homoiconic Memory (Unified Grammar, Bridge, & ID Generation)
-** DONE Consolidation IV: State Persistence Layer (Unified Local & IPFS Checkpointing)
-** DONE Consolidation V: Event Orchestrator (Unified Cron, Hooks, & Cognitive Routing)
-** DONE Consolidation VI: Task Orchestrator (Task Integrity, Delegation, & Consensus)
-   CLOSED: [2026-04-11 Sat 13:45]
-   :PROPERTIES:
-   :ID: task-orchestrator-consolidation
-   :END:
-   - Implemented Parallel Multi-Backend Consensus in neuro.lisp.
-   - Implemented Task Integrity (GTD semantics) in symbolic.lisp.
-   - Integrated Consensus Gate and Delegation hooks in core.lisp.
-   - Verified with new task-orchestrator-tests.lisp.
-** DONE Implement Unified Envelope Architecture & Channel-Awareness
-   CLOSED: [2026-04-20 Mon 13:20]
-   - Removed specialized :CHAT type; reverted to semantic :REQUEST/:EVENT protocol.
-   - Decoupled routing metadata into a :META envelope (SOURCE, SESSION-ID).
-   - Updated TUI, Emacs, and CLI gateways to use the unified protocol.
-   - Verified end-to-end loop with TUI; kernel correctly routes responses back to origin interface.
-   - Achieved "Equality of Clients" mandate.
-** DONE Full review of opencortex's harness
-   CLOSED: [2026-05-01 Fri 12:46]
-   :PROPERTIES:
-   :CREATED: [2026-04-13 Mon 13:30]
-   :ASSIGNED: Agent
-   :END:
-   - [X] Audit terminology: Replaced OACP with "communication protocol" workspace-wide.
-   - [X] Audit boot sequence: Synchronized loader with `org-skill-policy.org`.
-   - [X] Implement Unified Envelope (Channel-Aware Routing).
-   - [X] Audit core Perceive-Think-Act loop.
-     - [X] Verified protocol framing and reader jailing (`*read-eval* nil`).
-     - [X] Refactored `loop.org` for literate granularity and configuration externalization.
-     - [X] Improved error handling (restricted rollback) and added graceful shutdown.
-     - [X] **FIXED:** Implemented symbolic guard check in `act-gate` via Dispatcher skill refactoring.
-     - [X] **FIXED:** Harness `deterministic-verify` now correctly respects skill triggers.
-     - [X] **FIXED:** Resolved TUI crash by removing `--non-interactive` from `opencortex.sh` and adding defensive coordinate handling.
-     - [X] **VERIFIED:** Confirmed bidirectional TUI communication and signed off v0.2.0.
-   - [X] Ensure alignment with System Policy and Engineering Standards.
-   - [X] Restored structural integrity by fixing `manifest.org` loading sequence.
-
-** TODO Wake up the Scribe (Implement autonomous weekly Journal-to-Ledger distillation in org-skill-scribe.org)
-** TODO Implement `org-skill-lisp-repair` (Self-correcting syntax gate for Deterministic Engine)
-   CLOSED: [2026-04-11 Sat 15:10]
-   :PROPERTIES:
-   :ID: lisp-repair-gate
-   :END:
-   - Implemented asynchronous, event-driven repair logic.
-   - Decoupled core from repair logic (emits `:syntax-error` event).
-   - Proven via lisp-repair-tests.lisp (Asynchronous flow verified).
-** DONE Implement `org-skill-formal-verification` (Prove safety of high-impact actions)
-   CLOSED: [2026-04-11 Sat 18:15]
-   :PROPERTIES:
-   :ID: formal-verification-task
-   :END:
-   - Implemented `org-skill-formal-verification.org`.
-   - Created Lisp-Native Symbolic Prover for security invariants.
-   - Implemented `path-confinement` invariant (restricted to memex root).
-   - Implemented `no-network-exfil` invariant (blocking nc, ssh, etc).
-   - Verified with `formal-verification-tests.lisp`.
-
-* PHASE: DETERMINISTIC ENGINE REFINEMENT
-** DONE Verify Autonomous Self-Fix Loop
-   CLOSED: [2026-04-11 Sat 14:20]
-   :PROPERTIES:
-   :CREATED: [2026-03-23 Mon 16:30]
-   :END:
-   - Proven repair capability via self-fix-tests.lisp.
-   - Verified surgical code patching and hot-reloading.
-   - Documentation and RCA complete.
-** DONE Implement "Planning Mode" (Deterministic Engine Dispatcher) for Complex Actions
-   CLOSED: [2026-04-11 Sat 15:30]
-   :PROPERTIES:
-   :CREATED: [2026-04-01 Wed 17:00]
-   :END:
-   - Implemented `dispatcher-check` interceptor in `symbolic.lisp`.
-   - Created `org-skill-dispatcher.org` for flight plan serialization.
-   - Verified asynchronous Org-native approval loop via `dispatcher-tests.lisp`.
-** DONE Implement Authorization Gate (communication protocol) for "Planning Mode"
-   CLOSED: [2026-04-11 Sat 15:30]
-   :PROPERTIES:
-   :CREATED: [2026-04-01 Wed 17:00]
-   :END:
-   - Integrated with Org-mode state transitions (`PLAN` -> `APPROVED`).
-   - Leveraged Memory event bus for asynchronous re-injection.
-
-** DONE Refactor Architecture Terminology (Associative -> Probabilistic, Deliberate -> Deterministic)
-    CLOSED: [2026-04-12 Sun 21:00]
-    :PROPERTIES:
-    :ID: terminology-refactor-task
-    :END:
-    - Updated codebase-wide terminology to use Probabilistic/Deterministic Engines.
-    - Replaced System 1/2 with Probabilistic/Deterministic Engines respectively.
-
-** DONE Refactor org-skill-policy.org: Concrete Invariants, Conflict Hierarchy, and Auditable Gate
-    CLOSED: [2026-04-22 Wed 11:50]
-    :PROPERTIES:
-    :ID: policy-refactor-concrete-invariants
-    :END:
-    - Added explicit Override Hierarchy (Transparency > Autonomy > Bloat > Mentorship > Sustainability).
-    - Implemented `policy-check-transparency`: blocks user-facing actions without :explanation.
-    - Implemented `policy-check-autonomy`: flags proprietary domain references as autonomy debt.
-    - Implemented `policy-check-bloat`: warns on :create-skill actions exceeding size threshold.
-    - Implemented `policy-check-mentorship`: blocks high-impact actions missing :mentorship-note.
-    - Implemented `policy-check-sustainability`: logs cloud-provider usage as sustainability debt.
-    - Implemented `policy-explain`: formats auditable rationale for every policy decision.
-    - Implemented `policy-find-engineering-standards-gate`: robust cross-package search for standards skill.
-    - Hardened `policy-deterministic-gate`: never returns NIL silently; always returns action or auditable log.
-    - Raised skill priority from 100 to 500 to ensure it runs before other deterministic gates.
-
-** DONE Add Invariant 6 (Modularity) and Harness Boundary Contract to Policy/Manifest
-    CLOSED: [2026-04-22 Wed 12:10]
-    :PROPERTIES:
-    :ID: policy-modularity-invariant
-    :END:
-    - Added Modularity as Invariant 6 in `org-skill-policy.org`: general life principle that complexity must live at the edges.
-    - Implemented `policy-check-modularity`: blocks modifications to protected core paths unless `:modularity-justification` is provided.
-    - Defined `*modularity-protected-paths*` as project-configurable variable (defaults: harness/, opencortex.asd).
-    - Updated Override Hierarchy to include Modularity between Bloat and Mentorship.
-    - Added Harness Boundary Contract section to `harness/manifest.org` documenting primary boundary files and generated artifacts.
-    - Converted checkbox sub-tasks to hierarchical TODO headlines per GTD standard.
-
-** DONE Implement `org-skill-lisp-validator` (3-phase deterministic validation gate)
-    CLOSED: [2026-04-22 Wed 12:30]
-    :PROPERTIES:
-    :ID: lisp-validator-implementation
-    :END:
-    - Created 3-phase validation pipeline: Structural (O(n) paren scanner), Syntactic (reader with *read-eval* nil), Semantic (whitelist AST walk).
-    - Implemented `lisp-validator-validate` returning structured plists for machine parsing.
-    - Exposed `:validate-lisp` cognitive tool for Probabilistic Engine self-correction.
-    - Replaced `validate-lisp-syntax` in `harness/skills.org` with delegation to the validator.
-    - Added mandatory validation rule to Probabilistic Engine system prompt in `harness/reason.org`.
-    - Fixed paren balance and `return-from` compilation errors in org source; tangled and validated in SBCL.
-
-** DONE Fix Skill Loader to Respect `:tangle` Blocks and Eliminate Circular Dependency
-    CLOSED: [2026-04-22 Wed 12:45]
-    :PROPERTIES:
-    :ID: skill-loader-tangle-fix
-    :END:
-    - Updated `load-skill-from-org` in `harness/skills.org` to only collect blocks with `:tangle` directives pointing to runtime `.lisp` files, excluding `tests/` and `test/` paths.
-    - Added fallback to `validate-lisp-syntax` so it uses a basic reader check when `lisp-validator-validate` is not yet loaded (breaks circular harness->skill dependency).
-    - Verified full boot: 13/13 skills loaded successfully into SBCL, including `skill-lisp-validator` at priority 900 and `skill-policy` at priority 500.
-
-* TRACK: SECURITY & CONTAINMENT (The 5-Vector Dispatcher Matrix)
-** DONE Implement Path-Based Scoping for File Writes (DNA/State vs Work)
-   CLOSED: [2026-04-12 Sun 15:15]
-   :PROPERTIES:
-   :ID: path-based-scoping
-   :END:
-   - Implemented as `path-confinement` invariant in `org-skill-formal-verification.org`.
-** DONE Implement Network Exfiltration Gate (Intercept generic HTTP requests)
-   CLOSED: [2026-04-12 Sun 15:15]
-   :PROPERTIES:
-   :ID: network-exfiltration-gate
-   :END:
-   - Implemented as `no-network-exfil` invariant in `org-skill-formal-verification.org`.
-** TODO Implement Secret Exposure Gate (Intercept reads to .env, keys)
-
-* TRACK: INTELLIGENCE & ACTUATION (The Engines)
-** DONE Verify individual provider track (Anthropic, Gemini, Groq, OpenAI, OpenRouter, Ollama)
-   CLOSED: [2026-04-11 Sat 15:45]
-   :PROPERTIES:
-   :ID: provider-verification-track
-   :END:
-   - Added unit tests for each provider in `llm-gateway-tests.lisp`.
-   - Mocked `dex:post` to verify JSON payload formatting and response parsing.
-   - Implemented robust `get-nested` helper to handle various provider structures.
-   - Integrated `llm-gateway` and `credentials-vault` into `opencortex.asd`.
-** TODO Verify org-skill-shell-actuator formal safety harnesses
-** DONE Build Playwright-Python Bridge for high-fidelity browsing
-   CLOSED: [2026-04-11 Sat 18:30]
-   :PROPERTIES:
-   :ID: playwright-bridge-task
-   :END:
-   - Created `scripts/browser-bridge.py` (Playwright wrapper).
-   - Implemented `org-skill-playwright.org`.
-   - Registered `:browser` cognitive tool (JS-rendering, text extraction, screenshots).
-   - Updated `Dockerfile` with Python/Playwright dependencies.
-   - Verified with `playwright-tests.lisp`.
-
-
-* TRACK: COMMUNICATION & INTERFACES
-** DONE Implement org-skill-gateway-telegram
-   CLOSED: [2026-04-11 Sat 16:15]
-   :PROPERTIES:
-   :ID: gateway-telegram-task
-   :END:
-   - Implemented `org-skill-gateway-telegram.org`.
-   - Added automated background polling for Telegram GetUpdates.
-   - Implemented `:telegram` actuator for outbound responses.
-   - Refactored `org-skill-chat` to be channel-aware.
-   - Verified with `gateway-telegram-tests.lisp`.
-** DONE Implement org-skill-gateway-signal
-   CLOSED: [2026-04-11 Sat 16:50]
-   :PROPERTIES:
-   :ID: gateway-signal-task
-   :END:
-   - Implemented `org-skill-gateway-signal.org` (signal-cli wrapper).
-   - Added background polling for `signal-cli receive --json`.
-   - Implemented `:signal` actuator for outbound responses.
-   - Updated `org-skill-chat` to support Signal channel.
-   - Verified with `gateway-signal-tests.lisp`.
-** DONE Implement org-skill-gateway-matrix
-   CLOSED: [2026-04-11 Sat 17:15]
-   :PROPERTIES:
-   :ID: gateway-matrix-task
-   :END:
-   - Implemented `org-skill-gateway-matrix.org` (Client-Server API).
-   - Added background polling for `/sync` with token persistence.
-   - Implemented `:matrix` actuator for `m.room.message` delivery.
-   - Updated `org-skill-chat` to support Matrix channel and room IDs.
-   - Verified with `gateway-matrix-tests.lisp`.
-
-* TRACK: DEPLOYMENT & INFRASTRUCTURE
-** DONE Create Dockerfile and docker-compose.yml for containerized setup
-   CLOSED: [2026-04-11 Sat 17:30]
-   :PROPERTIES:
-   :ID: docker-infra-task
-   :END:
-   - Created `Dockerfile` (Debian-based, SBCL + Quicklisp + signal-cli).
-   - Created `docker-compose.yml` with host-volume mapping for memex.
-   - Created `docs/deployment.org` guide.
-** TODO Create Bare Metal installation scripts/playbooks
-** TODO Create LXC (Linux Containers) template/guide
-** TODO Create VM Vagrantfiles/Cloud-init configs
-
-* TRACK: MAINTENANCE & HYGIENE
-** TODO [RECURRING: Monthly] Review and test Infrastructure Dependency Upgrades
-   :PROPERTIES:
-   :ID: monthly-infra-audit
-   :REPEAT_TO_STATE: TODO
-   :END:
-*** TODO Check for new Debian security patches (`apt-get update` check)
-*** TODO Check for new `signal-cli` releases (compare vs v0.14.0)
-*** TODO Check for new Quicklisp distribution (monthly snapshot)
-*** TODO Verification: Update `Dockerfile`, run `docker-compose build --no-cache`, and execute full test suite
-*** TODO If all tests pass, commit updated `Dockerfile` and `.asd` dependencies
-
-* TRACK: COMMUNITY & DOCS
-** TODO Write Quickstart Guide
-** TODO Write Skill Creation Guide
-** TODO Write Architecture Deep-Dive
-** TODO Clean up GitHub repository structure and add CI/CD
-** TODO Create Marketing Material (Landing page copy, diagrams)
-** TODO Draft Release Plan checklist
-
-* SUB-PROJECT: THE BOOT SEQUENCE (skills.lisp)
-:PROPERTIES:
-:ID:       proj-skill-boot-sequence
-:END:
-** DONE Refactor `skills.lisp` into a Micro-Loader (Harness)
-   CLOSED: [2026-04-12 Sun 19:10]
-** DONE Implement Topological Sort based on `#+DEPENDS_ON:` tags
-   CLOSED: [2026-04-12 Sun 15:15]
-   :PROPERTIES:
-   :ID: topological-sort-skills
-   :END:
-   - Implemented in `literate/skills.org`.
-** DONE Enforce `org-skill-system-invariants` as the mandatory Gateway Skill (Loaded first)
-   CLOSED: [2026-04-12 Sun 15:15>
-   :PROPERTIES:
-   :ID: enforce-mandatory-skill
-   :END:
-   - Enforced in `initialize-all-skills` in `literate/skills.org`.
-** DONE Formalize the "Minimal Boot Set" (Router, Vision, Steward, Actuator)
-   CLOSED: [2026-04-12 Sun 19:10>

USER_MANUAL.org

@@ -1,61 +0,0 @@
-#+TITLE: OpenCortex User Manual
-#+AUTHOR: Agent
-#+STARTUP: content
-#+FILETAGS: :docs:manual:
-
-* Introduction
-Welcome to the OpenCortex User Manual. This guide provides the operational knowledge required to manage your sovereign Lisp Machine and its neural skills.
-
-* System Architecture
-OpenCortex follows a "Purified Kernel" model. The core harness handles essential I/O, while all high-level logic resides in sovereign skills.
-
-** XDG Directory Standard
-To ensure POSIX compliance, OpenCortex stores its files in standard Linux locations:
-
-| Type | Path | Purpose |
-| :--- | :--- | :--- |
-| **Config** | `~/.config/opencortex/` | User settings, `.env` secrets, and provider registry. |
-| **Data** | `~/.local/share/opencortex/` | Tangled Lisp artifacts and the compiled engine. |
-| **State** | `~/.local/state/opencortex/` | Brain snapshots, logs, and Merkle-memory. |
-| **Bin** | `~/.local/bin/opencortex` | The global CLI shim. |
-
-* Command Reference
-
-** `opencortex setup`
-The interactive configuration wizard. Use this to:
-- Define your identity and the Agent's name.
-- Register LLM providers (Ollama, Groq, Anthropic, etc.).
-- The wizard automatically splits sensitive tokens into `~/.config/opencortex/.env`.
-
-** `opencortex gateway link <platform> <token>`
-Connects OpenCortex to external communication gateways.
-- **Example:** `opencortex gateway link telegram <my_bot_token>`
-- **Example:** `opencortex gateway unlink telegram` to disable
-- **Example:** `opencortex gateway list` to see status
-
-** `opencortex doctor`
-Your primary diagnostic tool. Run this if the system feels sluggish or fails to boot. It verifies:
-- External dependencies (sbcl, git, socat).
-- XDG directory existence and permissions.
-- LLM connectivity.
-
-** `opencortex tui`
-Launches the native Lisp Terminal User Interface.
-- **Highlighting:** Semantic color-coding for Lisp and Org syntax.
-- **Scrolling:** Use `PgUp`/`PgDn` to navigate history.
-- **Exit:** Type `/exit` or `Ctrl+C` to close.
-
-* Configuration Strategy
-OpenCortex uses a **Hybrid Storage** model for maximum security and flexibility.
-
-** 1. Secrets (`.env`)
-Found in `~/.config/opencortex/.env`. This file stores raw API tokens. It is never automatically read by the Lisp structural parser to prevent accidental leakage into logs.
-
-** 2. Metadata (`providers.lisp`)
-Found in `~/.config/opencortex/providers.lisp`. This stores non-sensitive configuration like model names, base URLs, and user preferences as native Lisp S-expressions.
-
-* Troubleshooting
-If `opencortex doctor` reports a `FAIL`:
-1. Check that your `PATH` includes `/usr/bin` and `/usr/local/bin`.
-2. Ensure `sbcl` is installed.
-3. If LLM connectivity fails, verify your API key in `~/.config/opencortex/.env`.

docs/.#ROADMAP.org

@@ -0,0 +1 @@
+user@amr.1092521:1777807168

docs/ARCHITECTURE.org

@@ -0,0 +1,91 @@
+#+TITLE: Passepartout Architecture
+#+AUTHOR: Agent
+#+STARTUP: content
+
+* The Four Quadrants
+
+Passepartout divides cognition along two axes: **Foreground vs Background** (initiated by the user vs running autonomously) and **Probabilistic vs Deterministic** (LLM-driven vs pure Lisp logic).
+
+|                | Probabilistic (LLM)                                         | Deterministic (Lisp)                                       |
+|----------------+-------------------------------------------------------------+------------------------------------------------------------|
+| **Foreground** | Chat responses, task execution, code generation             | Shell execution, file I/O, safety gates, dispatcher checks |
+| **Background** | Scribe distillation, vector embedding, autonomous decisions | Heartbeat, cron jobs, memory auto-save, gateway polling    |
+
+The Probabilistic engine proposes. The Deterministic engine verifies and executes. No proposal from the LLM touches a file, runs a command, or sends a message without passing through at least one deterministic gate.
+
+* Code Map
+
+The project is organized into ~org/~ (source of truth) and ~lisp/~ (generated by tangle).
+
+** Core pipeline (loaded by ASDF, committed to git)
+
+| File                         | Purpose                                                            |
+|------------------------------+--------------------------------------------------------------------|
+| ~org/core-defpackage.org~    | Package definition and export list                                 |
+| ~org/core-skills.org~        | Skill engine: ~defskill~ macro, topological sorter, jailed loading |
+| ~org/core-communication.org~ | Framed TCP protocol, actuator registry, daemon server              |
+| ~org/core-memory.org~        | ~memory-object~ struct, Merkle hashing, snapshots, persistence     |
+| ~org/core-context.org~       | Foveal-peripheral rendering, context assembly for LLM              |
+| ~org/core-loop-perceive.org~ | Stage 1: normalize raw signals into pipeline format                |
+| ~org/core-loop-reason.org~   | Stage 2: LLM proposal + deterministic verification                 |
+| ~org/core-loop-act.org~      | Stage 3: dispatch approved actions to actuators                    |
+| ~org/core-loop.org~          | Orchestration: process-signal, heartbeat, main entry point         |
+| ~org/system-diagnostics.org~ | Boot-time health check, doctor CLI                                 |
+
+** Skills (loaded at runtime by the skill engine)
+
+| Category         | Files                                                                                                                             | Purpose                         |
+|------------------+-----------------------------------------------------------------------------------------------------------------------------------+---------------------------------|
+| **gateway-**     | ~gateway-cli~, ~gateway-messaging~, ~gateway-tui~                                                | External communication channels |
+| **system-model-** | ~system-model-provider~, ~system-model~, ~system-model-router~, ~system-model-embedding~, ~system-model-explorer~ | LLM infrastructure |
+| **security-**    | ~security-dispatcher~, ~security-policy~, ~security-permissions~, ~security-vault~, ~security-validator~                          | Safety and authorization        |
+| **programming-** | ~programming-lisp~, ~programming-org~, ~programming-standards~, ~programming-literate~, ~programming-repl~                        | Lisp and Org tooling            |
+| **system-**      | ~system-config~, ~system-archivist~, ~system-self-improve~, ~system-memory~, ~system-actuator-shell~, ~system-event-orchestrator~ | Background services             |
+
+* Pipeline Flow
+
+Every signal moves through three stages:
+
+```
+Signal → Perceive (normalize) → Reason (think + verify) → Act (dispatch)
+```
+
+The signal is a plist: ~(:TYPE :EVENT :META (...) :PAYLOAD (:SENSOR :user-input :TEXT "..."))~
+
+1. **Perceive** normalizes raw input from any gateway into a uniform signal
+2. **Reason** calls the LLM to generate a proposal, then runs the proposal through all registered deterministic gates (sorted by priority). If a gate rejects the proposal, the rejection trace feeds back to the LLM for self-correction (up to 3 retries)
+3. **Act** dispatches the approved action to the registered actuator (~:cli~, ~:tool~, ~:system~, ~:shell~, ~:telegram~, ~:signal~)
+
+Each stage can produce feedback signals that loop back to Perceive (e.g., a tool-execute action produces a ~:tool-output~ event that becomes the next perception).
+
+** Depth limiting
+
+A depth counter prevents infinite loops. If a signal's depth exceeds 10, it is silently dropped. This is the circuit breaker for runaway recursive cycles.
+
+* Skill Lifecycle
+
+1. *Discovery:* ~skill-initialize-all~ scans the skills directory, globs for ~*.lisp~ files (excluding ~core-*~ files which are loaded by ASDF)
+2. *Sorting:* ~skill-topological-sort~ orders skills by their ~#+DEPENDS_ON:~ declarations
+3. *Loading:* Each skill is loaded into a jailed package (~passepartout.skills.<skill-name>~). The loader removes ~in-package~ forms, evaluates the remaining code in the jailed package, and exports symbols matching the skill's short name to ~passepartout~
+4. *Registration* The skill's ~defskill~ call creates a ~skill~ struct in ~*skill-registry*~, registering its trigger function, probabilistic prompt generator, deterministic gate, and system-prompt augment
+5. *Triggering:* On each cognitive cycle, ~skill-triggered-find~ iterates the registry and returns the highest-priority skill whose trigger matches the context
+6. *Hot-reload:* A skill can be replaced at runtime by loading a new version into its jailed package — no restart needed
+
+* Communication protocol Format
+
+All communication between the daemon and its gateways (TUI, CLI, Emacs) uses length-prefixed plists over TCP:
+
+```
+00002C(:TYPE :EVENT :PAYLOAD (:ACTION :handshake :VERSION "0.2.0"))
+```
+
+The 6-character hex prefix encodes the payload length. The payload is a ~prin1~-serialized plist. ~*read-eval*~ is bound to nil on the receiving end to prevent code injection.
+
+** Standard message envelope:
+
+| Key | Value | Meaning |
+|-----|-------|---------|
+| ~:TYPE~ | ~:REQUEST~, ~:EVENT~, ~:RESPONSE~, ~:LOG~, ~:STATUS~ | Message category |
+| ~:META~ | plist | ~:SOURCE~, ~:SESSION-ID~, ~:reply-stream~ |
+| ~:PAYLOAD~ | plist | Action-specific data (~:SENSOR~, ~:ACTION~, ~:TEXT~) |
+| ~:DEPTH~ | integer | Recursion counter for loop prevention |

docs/CHANGELOG.org

@@ -1,6 +1,41 @@
 #+TITLE: Changelog
 #+STARTUP: content
 
+* v0.2.1 — Rename, Safety, and Deployment (2026-05-02)
+This release renames the project to Passepartout, adds content-level safety gates, professionalizes deployment, and documents every function with full explanatory prose.
+
+** Project Rename
+- **Passepartout:** Project renamed from OpenCortex to Passepartout. All files, packages, functions, and environment variables updated.
+- **Org/lisp split:** Source of truth lives in ~org/~, tangled to ~lisp/~. Core files committed, skills generated at configure time.
+- **31 org files:** Every file renamed to ~category-subject.org~ convention. Harness and skills unified under one directory.
+
+** Safety
+- **Secret Exposure Gate:** Content scanning for API keys, PEM blocks, PGP keys, credentials, and tokens in all outgoing text.
+- **Path Protection:** File reads blocked for ~.env~, SSH keys, PEM/PGP, cloud configs, and credential stores.
+- **Shell Safety:** Destructive commands (~rm -rf /~, ~dd~, ~mkfs~, ~shred~) and injection patterns (backtick, ~$()~) blocked with timeout and output limits.
+- **Lisp Validation Gate:** Writes to ~.lisp~ and ~.org~ files validated for syntax errors before they reach disk.
+- **REPL Verification Lint:** Warns if defuns are written without REPL prototyping.
+
+** Deployment
+- **Multi-distro:** Automatic detection of Debian vs Fedora, correct package names and managers.
+- **systemd service:** User-level auto-start on boot via ~passepartout install service~.
+- **Backup/Restore:** ~passepartout backup~ and ~passepartout restore~ commands.
+- **Docker:** Updated to ~debian:trixie-slim~, fixed build context.
+- **CI/CD:** GitHub Actions workflows for lint, test, and release. Gitea deploy workflow fixed.
+
+** Engineering Process
+- **REPL-first Lifecycle:** Two-track workflow: Org-first for prose and tests, REPL-first for implementation. Every function prototyped in the REPL before reaching Org.
+- **Verification Loop:** Bouncer rejects bad lisp; rejection trace feeds back to LLM for self-correction.
+- **System-prompt-augment:** Skills can inject domain-specific mandates into the LLM prompt via ~:system-prompt-augment~.
+
+** Documentation
+- **Literate Prose Restored:** Every Org file now has an Architectural Intent overview and explanatory prose before each function block, following the style established in the v0.1.0 era.
+- **AGENTS.md:** Thinned to a routing layer — the skill org files are authoritative.
+
+** Contributors
+- **gitignore:** ~skills/*.lisp~ and ~tests/*.lisp~ as generated artifacts (source of truth is ~.org~).
+- **DeepSeek and NVIDIA NIM:** Added as LLM providers (OpenAI-compatible). Use ~DEEPSEEK_API_KEY~ and ~NVIDIA_API_KEY~ env vars.
+
 * v0.2.0 - Interactive Refinement (2026-04-29)
 This release focuses on professionalizing the environment and enhancing the agent's structural capabilities.
 
@@ -12,7 +47,7 @@ This release focuses on professionalizing the environment and enhancing the agen
 - **Professional TUI:** Styled, scrollable interface with improved diagnostics.
 
 * v0.1.0 - The Autonomous Foundation (2026-04-20)
-This is the initial MVP release of the ~opencortex~. It establishes a secure, auditable Lisp kernel for a personal operating system.
+This is the initial MVP release of the ~passepartout~. It establishes a secure, auditable Lisp kernel for a personal operating system.
 
 ** Features
 - **Unified Envelope Architecture:** Actuator-agnostic protocol that decouples routing metadata from cognitive payloads, ensuring all clients (TUI, Emacs, CLI, Matrix) are treated as equal citizens.
@@ -22,12 +57,12 @@ This is the initial MVP release of the ~opencortex~. It establishes a secure, au
 - **The Bouncer:** Last-mile deterministic security gate with Deep Packet Inspection for secrets and network exfiltration.
 - **Autonomous Scribe:** Background distillation worker that turns daily journal entries into evergreen Zettelkasten notes. Verified to distill atomic concepts autonomously.
 - **Autonomous Gardener:** Heartbeat-driven worker that repairs broken links and identifies orphaned nodes in the Memex graph.
-- **Unified Onboarding:** Single-command installation (~opencortex.sh~) with Docker support, OS detection, and automated dependency resolution.
+- **Unified Onboarding:** Single-command installation (~passepartout.sh~) with Docker support, OS detection, and automated dependency resolution.
 - **Channel-Aware TUI:** Interactive Croatoan-based terminal client with clean, human-readable formatting for tool results and system logs.
 - **CLI Gateway:** Local TCP socket server for pipe-friendly interaction and frictionless first contact.
 
 ** Licensing & Community
-- **AGPLv3 License:** OpenCortex is now officially licensed under the GNU Affero General Public License v3.0.
+- **AGPLv3 License:** Passepartout is now officially licensed under the GNU Affero General Public License v3.0.
 - **Contributor License Agreement:** Implemented a broad CLA (~CLA.org~) for long-term project sustainability.
 
 ** Architectural Shift

docs/CONTRIBUTING.org

@@ -1,10 +1,10 @@
-#+TITLE: Contributing to OpenCortex
-#+AUTHOR: OpenCortex Contributors
+#+TITLE: Contributing to Passepartout
+#+AUTHOR: Passepartout Contributors
 #+STARTUP: content
 #+FILETAGS: :docs:contributing:
 
 * Philosophy
-OpenCortex is built on a "Zero-Bloat" mandate. The core kernel is mathematically pure, pushing all peripheral logic, API integrations, and routing to hot-reloadable "Skills".
+Passepartout is built on a "Zero-Bloat" mandate. The core kernel is mathematically pure, pushing all peripheral logic, API integrations, and routing to hot-reloadable "Skills".
 
 * Literate Granularity
 We strictly adhere to Literate Programming using Org-mode.
@@ -14,7 +14,7 @@ We strictly adhere to Literate Programming using Org-mode.
 - Every architectural decision, constraint, and implementation detail must be documented alongside the code in the `.org` file.
 
 * Skill Creation Standard
-Skills are the building blocks of OpenCortex. They reside in the `skills/` directory.
+Skills are the building blocks of Passepartout. They reside in the `skills/` directory.
 
 A skill must define:
 1. *Trigger*: A lambda determining if the skill should activate based on the context.
@@ -40,5 +40,5 @@ All inter-process communication occurs via the Unified Envelope. Do not use lega
 1. Ensure your working tree is clean.
 2. Write tests for your skill in `tests/`.
 3. Tangle all files.
-4. Run the test suite: `sbcl --eval "(asdf:test-system :opencortex)"`.
+4. Run the test suite: `sbcl --eval "(asdf:test-system :passepartout)"`.
 5. Submit a PR outlining the architectural intent and the specific Literate changes.

docs/DESIGN_DECISIONS.org

@@ -1,8 +1,8 @@
-# OpenCortex Design Decisions
+# Passepartout Design Decisions
 
 This document captures the rationale behind key architectural choices. It is not a specification - it is a thinking medium for future architects and contributors who need to understand why the system is built this way, not just how.
 
-* Multi-Agent by Default is a Smell
+* A single agent
 :PROPERTIES:
 :ID:       design-multi-agent-default
 :END:
@@ -11,17 +11,17 @@ The AI industry has developed an intuition toward multi-agent systems as the def
 
 When context windows grew expensive and task complexity increased, the response was natural: split the problem across agents, each handling a slice. But this architectural choice carries hidden costs that are rarely acknowledged in the enthusiasm of implementation.
 
-**The synchronization tax** is the most immediate burden. Each agent operates with partial information, and maintaining coherence requires continuous state reconciliation. Tokens and processing cycles are spent not on the task itself, but on protocol overhead - who holds what, who decided what, who is correct when they disagree.
+*The synchronization tax* is the most immediate burden. Each agent operates with partial information, and maintaining coherence requires continuous state reconciliation. Tokens and processing cycles are spent not on the task itself, but on protocol overhead - who holds what, who decided what, who is correct when they disagree.
 
-**Fragmented context** is the deeper problem. When Agent A writes a function and Agent B modifies a type it depends on, neither has the full picture. Integration failures emerge not from individual incompetence but from systemic communication gaps. Single-agent systems avoid this entirely: one brain holds the complete model, every decision is made with full visibility.
+*Fragmented context* is the deeper problem. When Agent A writes a function and Agent B modifies a type it depends on, neither has the full picture. Integration failures emerge not from individual incompetence but from systemic communication gaps. Single-agent systems avoid this entirely: one brain holds the complete model, every decision is made with full visibility.
 
-**Audit trails become complex** in multi-agent systems. A decision traced through a single-agent system has a clean, linear history. A decision traced through a multi-agent system branches and forks, with each agent's reasoning partially overlapping and partially conflicting.
+*Audit trails become complex* in multi-agent systems. A decision traced through a single-agent system has a clean, linear history. A decision traced through a multi-agent system branches and forks, with each agent's reasoning partially overlapping and partially conflicting.
 
 None of this is to say multi-agent systems are never appropriate. Embarrassingly parallel workloads - scanning ten thousand files, processing batch jobs - benefit from parallelism regardless of context. When distinct expertises are required and cannot coexist in one model, delegation makes sense. In adversarial scenarios where conflicting goals are features, multi-agent architectures shine.
 
 But the default assumption that complex reasoning tasks are best solved by multiple agents is unproven and likely wrong for the engineering domain. Claude Code is a single-agent system. It handles 50-file refactors, debugs complex stack traces, writes tests, and navigates large codebases. The assumption that you need five agents to do what one well-designed agent can do is an industry habit, not a technical necessity.
 
-OpenCortex is single-agent by default not from limitation but from conviction: for reasoning-heavy work where coherence matters, a unified memory space and single decision-making locus are architectural assets, not constraints.
+Passepartout is single-agent by default not from limitation but from conviction: for reasoning-heavy work where coherence matters, a unified memory space and single decision-making locus are architectural assets, not constraints.
 
 * The Unified Memory Argument
 :PROPERTIES:
@@ -32,88 +32,26 @@ If single-agent architecture is the decision, unified memory becomes the mechani
 
 Context window limits are largely a symptom of lazy architecture. The default approach - stuff everything in, hope the model figures it out - works poorly at scale. A more principled approach inverts the problem: the system should hold effectively infinite context, with the active window kept lean through intelligent management.
 
-**Lazy loading** is the core technique. When an agent needs information about a function, it does not load the entire codebase. It loads precisely what the function does. Context stays lean - 2,000 to 4,000 tokens - while the full context remains accessible through retrieval.
+*Lazy loading* is the core technique. When an agent needs information about a function, it does not load the entire codebase. It loads precisely what the function does. Context stays lean - 2,000 to 4,000 tokens - while the full context remains accessible through retrieval.
 
-**Compaction events** are scheduled during idle cycles. The system extracts new facts from active context and writes them to permanent storage. Active context is wiped clean, not because space ran out, but because the information has been preserved in a form that can be retrieved when relevant.
+*Compaction events* are scheduled during idle cycles. The system extracts new facts from active context and writes them to permanent storage. Active context is wiped clean, not because space ran out, but because the information has been preserved in a form that can be retrieved when relevant.
 
-**Org-mode as externalized memory** solves the persistence problem elegantly. Every decision, every note, every task lives in plain text files the user already owns. The agent does not maintain a separate database. It queries files it can already access, modifies files it already owns.
+*Org-mode as externalized memory* solves the persistence problem elegantly. Every decision, every note, every task lives in plain text files the user already owns. The agent does not maintain a separate database. It queries files it can already access, modifies files it already owns.
 
-**Retrieval is the key primitive.** Semantic search across Org files finds relevant nodes. The agent does not hold the full context - it holds pointers to context, loaded on demand. This is how a single agent handles tasks that would saturate a naive multi-megabyte context window.
+*Retrieval is the key primitive.* Semantic search across Org files finds relevant nodes. The agent does not hold the full context - it holds pointers to context, loaded on demand. This is how a single agent handles tasks that would saturate a naive multi-megabyte context window.
 
 The unified memory argument is not that infinite context is free. It is that with proper architecture, effective infinite context is achievable without the synchronization and fragmentation costs of multi-agent systems.
 
-* The Probabilistic-Deterministic Split
-:PROPERTIES:
-:ID:       design-probabilistic-deterministic
-:END:
-
-The architecture divides cognition into two fundamentally different reasoning systems. This is not arbitrary engineering but a structural response to a fundamental truth: probabilistic systems will hallucinate, and you cannot build reliable autonomy on an unreliable foundation.
-
-An LLM is a statistical engine. It generates outputs based on patterns in training data. It is remarkable at translation, generation, pattern matching, and fuzzy reasoning. It can take messy human intent and produce structured queries. It can take structured results and produce natural language. It is, in the terminology of the system, the creative brain.
-
-But it cannot be trusted. Not because it is poorly designed or insufficiently trained, but because hallucination is a fundamental property of probabilistic inference. The model generates the most likely continuation, not the correct one. Given sufficient context, the most likely continuation is correct. Given novel context, it is often wrong in confident-sounding ways.
-
-The deterministic engine addresses this by being what the probabilistic engine is not: mathematically rigorous, formally verifiable, and incapable of hallucination by design. It operates on explicit symbolic representations - lists, property lists, knowledge graphs - not on floating-point activations. When it evaluates a path confinement check, it returns true or false, not a probability distribution.
-
-The division of labor is architectural. The LLM handles the fuzzy interface between human language and structured representation. It translates what the user wants into what the system can reason about. The deterministic engine receives those structured representations and evaluates them against formal invariants. It decides whether to execute, not whether the translation was semantically plausible.
-
-This separation is the source of OpenCortex's safety guarantee. Other agents add "guardrails" as an afterthought - a layer of filtering around a dangerous core. OpenCortex makes the division explicit: the LLM never touches the file system, never executes a command, never modifies memory. It generates proposals. The deterministic engine evaluates and executes. The dangerous operations are never in the probabilistic path.
-
-The split also explains why the system gets safer over time without the LLM improving. The deterministic engine accumulates rules. The LLM proposes actions, the engine evaluates them against a growing rule set. Early versions block obvious dangers. Later versions block sophisticated attacks that were previously unknown. The safety grows logarithmically with the number of interactions, not linearly with model capability.
-
-* Homoiconicity as Foundation
-:PROPERTIES:
-:ID:       design-homoiconicity
-:END:
-
-Common Lisp is homoiconic: code and data share the same representation. A Lisp program is a list, and a list is a Lisp program. This is usually presented as a curiosity, an interesting property that enables macros. In OpenCortex, it is the foundational enabling property of the entire self-modification architecture.
-
-When code is data, the agent can read its own source the same way it reads a text file or an Org buffer. There is no AST parser required, no external tool to extract the function object from the running image. The agent evaluates (read-from-string source) and the result is executable Lisp. The representation it manipulates is the same representation that the runtime executes.
-
-This is not true of most languages. In Python, the agent can inspect an AST through the ast module, but that AST is a foreign object - a data structure that represents code but is not code itself. The agent can see that a function takes certain arguments and returns a certain type, but it cannot treat the AST as a live object it can modify and re-evaluate. In C, the agent cannot inspect its own compiled machine code at all.
-
-In Lisp, the distinction between code and data is a convention, not a barrier. The agent's skills are lists. The agent can take a skill, extract a function definition, modify the body, wrap it in a new list, and evaluate it. The modification is surgical: it changes exactly what it intends to change, with no risk of corrupting adjacent state, because the representation is a tree that the runtime understands natively.
-
-Runtime introspection is therefore native. The agent does not need a debugger API or a reflection protocol. It operates on its own code as data because its own code is data. (describe 'function-name) returns the function's documentation. (function-lambda-list 'function-name) returns its parameters. (macroexpand-1 '(defskill ...)) shows what the macro produces. There is no impedance mismatch between the agent's reasoning and the system's representation.
-
-Self-modification is the practical consequence. The agent can detect an error, locate the erroneous function, generate a corrected version, and hot-reload it into the running image. The correction is not applied to a file that requires a restart - it is applied to the live object that the system is currently executing. This is what makes the self-editing skill viable: the agent can fix itself without stopping.
-
-In v3.0.0, when the symbolic engine takes over the reasoning core, homoiconicity becomes the bridge between the neural and symbolic layers. The neural engine generates proposals as s-expressions. The symbolic engine evaluates them against formal constraints. The result is a modification that is simultaneously a data structure the symbolic engine can analyze and code the runtime can execute. The two representations are identical by construction.
-
-This is the technical meaning of "Lisp as Governor": not just that Lisp orchestrates the other components, but that the representation of the system is uniform and inspectable at every level. There is no hidden state, no opaque machine code, no representation that the agent cannot reach into and modify. The system is legible to itself by design.
-
-**Self-Modification Without Boundaries**
-
-Other systems that support self-editing draw a line between the core and the skills. Hermes can modify its skills at runtime, but the core harness is protected - editing it requires a restart because the core is treated as privileged code that cannot be safely modified while running.
-
-OpenCortex has no such boundary. The "thin harness, fat skills" distinction describes where complexity lives, not where authority flows. The harness is small by design, but it is not privileged. The agent can read and write any part of the system - including the very code that is currently executing - without restarting.
-
-This is only possible because Lisp code is mutable data at runtime. In a compiled language, the machine code for a running function is locked in memory, protected by the call stack, impossible to modify safely. In Lisp, the function object is a list you can modify with =setf=. When the agent changes a harness function, the running image immediately reflects the change. The next invocation uses the new code. There is no restart, no special boot mode, no distinction between development and production.
-
-The implications extend beyond convenience. A system that cannot modify its own core is a system that has limits on its own adaptability. It can learn skills but not improve its own structure. It can grow but not evolve. OpenCortex's lack of a core boundary means the system can improve its own reasoning engine, fix bugs in its own cognition, and evolve its own architecture - all while continuing to operate.
-
-This is the final expression of homoiconicity: not just that code is readable as data, or that skills are modifiable, but that the entire system - including the parts that other systems protect - is open to modification. There is no ceiling on self-improvement. The agent can rewrite the very code that rewrites itself.
-
-**Lisp and the AI Dream**
-
-Lisp was invented in 1958 by John McCarthy with artificial intelligence explicitly in mind. Its design - code as data, runtime mutation, symbols and lists as first-class constructs - was shaped by the belief that a truly intelligent machine would need to reason about and modify its own reasoning. For decades, Lisp machines were the closest thing to thinking machines that existed.
-
-Then the AI winter came. Symbolic AI fell out of favor. Statistical learning and neural networks dominated. Lisp was relegated to niche applications and academic curiosity. The machine that was designed for AI was never used for the task it was designed for.
-
-Six decades later, neural networks have arrived at the problem from a different direction. They can learn and generalize, but they hallucinate, cannot explain their reasoning, and cannot safely modify themselves. The neuro-symbolic synthesis - combining neural pattern recognition with symbolic reasoning - is recognized as the path toward AI that is both powerful and trustworthy.
-
-Lisp's time may finally have come. Not as a replacement for neural networks, but as the governor that makes them safe - the symbolic engine that verifies what the neural engine proposes, the homoiconic substrate that allows the system to inspect, modify, and improve its own reasoning. The machine that was designed for AI in 1958 may be the exact machine needed for AI in 2026 and beyond.
-
 * Org-Mode as Unified AST
 :PROPERTIES:
 :ID:       design-org-unified-ast
 :END:
 
-OpenCortex makes a bet that most systems consider too expensive to place: that humans and machines should share the same file format. That bet is Org-mode.
+Passepartout makes a bet that most systems consider too expensive to place: that humans and machines should share the same file format. That bet is Org-mode.
 
 Most systems separate human-readable notes from machine-readable data. The user writes Markdown. The system stores it, indexes it, searches it. But internally, the system maintains its own model - a database, an object store, a knowledge graph - that is disconnected from the Markdown. When the user dies or leaves, the Markdown survives but the model must be reconstructed.
 
-OpenCortex refuses this separation. The Org file is not a representation of the data. The Org file IS the data. The same text that the user reads and edits is what the system parses and operates on. org-element reads an Org buffer and returns a tree structure that is the direct Lisp representation of the file's content.
+Passepartout refuses this separation. The Org file is not a representation of the data. The Org file IS the data. The same text that the user reads and edits is what the system parses and operates on. org-element reads an Org buffer and returns a tree structure that is the direct Lisp representation of the file's content.
 
 This has several profound implications.
 
@@ -131,12 +69,114 @@ Sparse tree retrieval is the key to efficient context management. When the agent
 
 Sixth, Org-mode unifies what every other format fragments. A single Org file contains the headline hierarchy, prose documentation, source code blocks with live evaluation, tags for categorization, metadata in property drawers, TODO state for task management, timestamps and deadlines, and links to other nodes. Markdown cannot express TODO state without external tools. JSON cannot contain prose. YAML cannot embed runnable code. Each format serves one purpose; Org-mode serves all of them. When the agent reads a skill file, it reads documentation, code, dependencies, metadata, and task state in one parseable structure. When the human reads the same file, they see the same information rendered in a human-friendly form. No other format achieves this unification without maintaining parallel files or external databases.
 
-Seventh, a skill lives in one Org file, not a directory. The standard pattern for a software project is a directory containing =README.md=, =package.json=, =src/main.py=, =src/utils.py=, =tests/test_main.py=, =scripts/deploy.sh=, and =config.yaml=. Each file type is isolated by convention: prose lives in README, code lives in src, tests in tests, configuration in config. This fragmentation means the skill is not a single object the system can reason about - it is a collection of files the system must assemble. OpenCortex's skills violate this convention deliberately. Each skill is one Org file. The file contains the skill's documentation, the skill's code, the skill's metadata, the skill's TODO state, and the skill's dependencies on other skills. There is no directory to navigate, no external files to locate, no risk that the README describes behavior that the code does not implement. The skill is a single atomic unit: readable by human and machine, editable by both, versionable as one entity.
+Seventh, a skill lives in one Org file, not a directory. The standard pattern for a software project is a directory containing =README.md=, =package.json=, =src/main.py=, =src/utils.py=, =tests/test_main.py=, =scripts/deploy.sh=, and =config.yaml=. Each file type is isolated by convention: prose lives in README, code lives in src, tests in tests, configuration in config. This fragmentation means the skill is not a single object the system can reason about - it is a collection of files the system must assemble. Passepartout's skills violate this convention deliberately. Each skill is one Org file. The file contains the skill's documentation, the skill's code, the skill's metadata, the skill's TODO state, and the skill's dependencies on other skills. There is no directory to navigate, no external files to locate, no risk that the README describes behavior that the code does not implement. The skill is a single atomic unit: readable by human and machine, editable by both, versionable as one entity.
 
 The unified format is what makes the memory architecture work. The agent's memory is not a database that the user cannot inspect. It is a folder of Org files that the user can read, edit, and understand. The agent manipulates these files directly, using the same tools the user would use. There is no hidden state, no shadow database, no model that differs from the source.
 
 This is what "sovereignty" means in technical terms: the user owns the data in a format they can access, and the agent operates on the data in the same format they own.
 
+* Homoiconicity as Foundation
+:PROPERTIES:
+:ID:       design-homoiconicity
+:END:
+
+Common Lisp is homoiconic: code and data share the same representation. A Lisp program is a list, and a list is a Lisp program. This is usually presented as a curiosity, an interesting property that enables macros. In Passepartout, it is the foundational enabling property of the entire self-modification architecture.
+
+When code is data, the agent can read its own source the same way it reads a text file or an Org buffer. There is no AST parser required, no external tool to extract the function object from the running image. The agent evaluates (read-from-string source) and the result is executable Lisp. The representation it manipulates is the same representation that the runtime executes.
+
+This is not true of most languages. In Python, the agent can inspect an AST through the ast module, but that AST is a foreign object - a data structure that represents code but is not code itself. The agent can see that a function takes certain arguments and returns a certain type, but it cannot treat the AST as a live object it can modify and re-evaluate. In C, the agent cannot inspect its own compiled machine code at all.
+
+In Lisp, the distinction between code and data is a convention, not a barrier. The agent's skills are lists. The agent can take a skill, extract a function definition, modify the body, wrap it in a new list, and evaluate it. The modification is surgical: it changes exactly what it intends to change, with no risk of corrupting adjacent state, because the representation is a tree that the runtime understands natively.
+
+Runtime introspection is therefore native. The agent does not need a debugger API or a reflection protocol. It operates on its own code as data because its own code is data. (describe 'function-name) returns the function's documentation. (function-lambda-list 'function-name) returns its parameters. (macroexpand-1 '(defskill ...)) shows what the macro produces. There is no impedance mismatch between the agent's reasoning and the system's representation.
+
+Self-modification is the practical consequence. The agent can detect an error, locate the erroneous function, generate a corrected version, and hot-reload it into the running image. The correction is not applied to a file that requires a restart - it is applied to the live object that the system is currently executing. This is what makes the self-editing skill viable: the agent can fix itself without stopping.
+
+In v3.0.0, when the symbolic engine takes over the reasoning core, homoiconicity becomes the bridge between the neural and symbolic layers. The neural engine generates proposals as s-expressions. The symbolic engine evaluates them against formal constraints. The result is a modification that is simultaneously a data structure the symbolic engine can analyze and code the runtime can execute. The two representations are identical by construction.
+
+This is the technical meaning of "Lisp as Governor": not just that Lisp orchestrates the other components, but that the representation of the system is uniform and inspectable at every level. There is no hidden state, no opaque machine code, no representation that the agent cannot reach into and modify. The system is legible to itself by design.
+
+*Self-Modification Without Boundaries*
+
+Other systems that support self-editing draw a line between the core and the skills. Hermes can modify its skills at runtime, but the core harness is protected - editing it requires a restart because the core is treated as privileged code that cannot be safely modified while running.
+
+Passepartout has no such boundary. The "thin harness, fat skills" distinction describes where complexity lives, not where authority flows. The harness is small by design, but it is not privileged. The agent can read and write any part of the system - including the very code that is currently executing - without restarting.
+
+This is only possible because Lisp code is mutable data at runtime. In a compiled language, the machine code for a running function is locked in memory, protected by the call stack, impossible to modify safely. In Lisp, the function object is a list you can modify with =setf=. When the agent changes a harness function, the running image immediately reflects the change. The next invocation uses the new code. There is no restart, no special boot mode, no distinction between development and production.
+
+The implications extend beyond convenience. A system that cannot modify its own core is a system that has limits on its own adaptability. It can learn skills but not improve its own structure. It can grow but not evolve. Passepartout's lack of a core boundary means the system can improve its own reasoning engine, fix bugs in its own cognition, and evolve its own architecture - all while continuing to operate.
+
+This is the final expression of homoiconicity: not just that code is readable as data, or that skills are modifiable, but that the entire system - including the parts that other systems protect - is open to modification. There is no ceiling on self-improvement. The agent can rewrite the very code that rewrites itself.
+
+*Lisp and the AI Dream*
+
+Lisp was invented in 1958 by John McCarthy with artificial intelligence explicitly in mind. Its design - code as data, runtime mutation, symbols and lists as first-class constructs - was shaped by the belief that a truly intelligent machine would need to reason about and modify its own reasoning. For decades, Lisp machines were the closest thing to thinking machines that existed.
+
+Then the AI winter came. Symbolic AI fell out of favor. Statistical learning and neural networks dominated. Lisp was relegated to niche applications and academic curiosity. The machine that was designed for AI was never used for the task it was designed for.
+
+Six decades later, neural networks have arrived at the problem from a different direction. They can learn and generalize, but they hallucinate, cannot explain their reasoning, and cannot safely modify themselves. The neuro-symbolic synthesis - combining neural pattern recognition with symbolic reasoning - is recognized as the path toward AI that is both powerful and trustworthy.
+
+Lisp's time may finally have come. Not as a replacement for neural networks, but as the governor that makes them safe - the symbolic engine that verifies what the neural engine proposes, the homoiconic substrate that allows the system to inspect, modify, and improve its own reasoning. The machine that was designed for AI in 1958 may be the exact machine needed for AI in 2026 and beyond.
+
+* The Probabilistic-Deterministic Split
+:PROPERTIES:
+:ID:       design-probabilistic-deterministic
+:END:
+
+The architecture divides cognition into two fundamentally different reasoning systems. This is not arbitrary engineering but a structural response to a fundamental truth: probabilistic systems will hallucinate, and you cannot build reliable autonomy on an unreliable foundation.
+
+An LLM is a statistical engine. It generates outputs based on patterns in training data. It is remarkable at translation, generation, pattern matching, and fuzzy reasoning. It can take messy human intent and produce structured queries. It can take structured results and produce natural language. It is, in the terminology of the system, the creative brain.
+
+But it cannot be trusted. Not because it is poorly designed or insufficiently trained, but because hallucination is a fundamental property of probabilistic inference. The model generates the most likely continuation, not the correct one. Given sufficient context, the most likely continuation is correct. Given novel context, it is often wrong in confident-sounding ways.
+
+The deterministic engine addresses this by being what the probabilistic engine is not: mathematically rigorous, formally verifiable, and incapable of hallucination by design. It operates on explicit symbolic representations - lists, property lists, knowledge graphs - not on floating-point activations. When it evaluates a path confinement check, it returns true or false, not a probability distribution.
+
+The division of labor is architectural. The LLM handles the fuzzy interface between human language and structured representation. It translates what the user wants into what the system can reason about. The deterministic engine receives those structured representations and evaluates them against formal invariants. It decides whether to execute, not whether the translation was semantically plausible.
+
+This separation is the source of Passepartout's safety guarantee. Other agents add "guardrails" as an afterthought - a layer of filtering around a dangerous core. Passepartout makes the division explicit: the LLM never touches the file system, never executes a command, never modifies memory. It generates proposals. The deterministic engine evaluates and executes. The dangerous operations are never in the probabilistic path.
+
+The split also explains why the system gets safer over time without the LLM improving. The deterministic engine accumulates rules. The LLM proposes actions, the engine evaluates them against a growing rule set. Early versions block obvious dangers. Later versions block sophisticated attacks that were previously unknown. The safety grows logarithmically with the number of interactions, not linearly with model capability.
+
+* The Dispatcher as Learning System
+:PROPERTIES:
+:ID:       design-bouncer-learning
+:END:
+
+The Dispatcher begins as a static guard - a set of rules that block obviously dangerous actions. But defining "obviously" is the hard problem. The agent encounters situations the rules do not anticipate. The Bouncer must grow.
+
+The human-in-the-loop exception is the seed. When the LLM proposes an action the Bouncer does not recognize, the system does not default to blocking or allowing. It suspends. It writes the proposed action to an Org buffer in a format the human can read and understand. The human reviews and approves or denies. The Bouncer observes the decision.
+
+From this single observation, the Bouncer extracts a rule. Not merely "allow this specific action" but "allow this class of actions parameterized by these dimensions." The human approved a write to ~/projects/myapp/src/core.clj. The Bouncer generalizes: writes to ~/projects/*/src/*.lisp are approved for this session, or for this project, or indefinitely depending on the context and the user's pattern of decisions.
+
+Shadow mode is where rules are tested before deployment. When the Bouncer encounters a novel situation and is uncertain, it can run the proposed action in a simulated environment. It observes the side effects - what files would be modified, what processes would be spawned, what network calls would be made. If the simulation produces dangerous side effects, the rule is discarded. If it appears safe, the rule is added to the active set with a confidence rating.
+
+Formal verification is where the learned rules are checked against invariants. The Bouncer's rules are not merely patterns observed from human behavior. They are formulas in a logic that the system can reason about. A rule that would enable path traversal is not discarded because it was observed to be safe in prior instances - it is discarded because it violates the path-confinement invariant by construction.
+
+The Bouncer becomes, over time, not a guard that blocks bad actions but a reasoning system that understands why actions are good or bad. Early versions learn from human decisions. Later versions learn from their own logical analysis. The human's role transitions from approver to auditor to, eventually, unnecessary oversight.
+
+This is the bootstrap. The system begins dependent on human judgment because it has no basis for judgment of its own. Through accumulated decisions, it constructs a model of what is permitted and why. That model is the foundation for the deterministic symbolic engine that in v3.0.0 takes over the reasoning that the Bouncer learned to perform.
+
+* The REPL as Cognitive Substrate
+:PROPERTIES:
+:ID:       design-repl-cognition
+:END:
+
+A REPL - Read, Eval, Print, Loop - is an interactive programming environment that reads an expression, evaluates it, prints the result, and loops back to read the next expression. It is the opposite of batch processing: where batch compiles and runs a program in one shot, a REPL works one expression at a time, with each evaluation building on all previous ones. The programmer defines a function, calls it, inspects the result, modifies it, and calls it again. The state accumulates. The session is the program.
+
+In Lisp, the REPL is not a debugging tool bolted onto the language - it is the natural mode of interaction. The running image is the environment. When you evaluate =(+ 2 2)=, the result =4= is printed, and you remain in the same image where =+= is defined, where previous definitions persist, where the next expression can reference anything that came before. There is no separation between development and execution. The REPL is not a simulation of the program - it is the program running.
+
+Passepartout uses the REPL in this spirit, but elevated: it is not merely a tool for writing code, it is the mechanism by which the agent interacts with its own cognition - a loop that mirrors the perceive-reason-act metabolic cycle at the implementation level.
+
+In the agent's cognitive architecture, the REPL serves three functions that are difficult or impossible to achieve through batch processing or stateless API calls.
+
+First, the REPL enables verification before commitment. When the agent generates code, it does not write and forget - it evaluates in a running image, observes the result, iterates if incorrect. The feedback loop is tight: the time between writing and seeing the error is measured in milliseconds, not in the round-trip to a language server or a batch compiler. This is the "verification over hallucination" principle from the RLM paper made concrete: the agent tests what it writes before claiming it works.
+
+Second, the REPL enables stateful exploration. The agent can define a variable, inspect it, modify it, redefine it. The exploration accumulates state across interactions. This is not a debugging session - it is the agent thinking with its hands, working through a problem by trying variations and observing outcomes, keeping the successful ones and discarding the failures.
+
+Third, the REPL is a shared substrate. When the agent evaluates code, that code runs in the same image as the agent's own cognition. There is no process boundary between the agent and its tools. The REPL is not a subprocess the agent controls - it is a direct interface to the agent's own nervous system.
+
+This is why the REPL becomes more important as the system matures. In early versions, it is a development tool. In v0.6.0 and beyond, it becomes a cognitive tool: the agent explores hypotheses by evaluating them, verifies the output of sub-agents by inspecting live state, and tests modifications before committing them to the knowledge graph.
+
 * Literate Programming as Discipline
 :PROPERTIES:
 :ID:       design-literate-programming
@@ -158,121 +198,16 @@ Together, these constraints create a development experience that is slower in th
 
 The literate programming discipline is not about producing documentation. It is about producing code whose correctness has been verified by the act of explaining it.
 
-* The Bouncer as Learning System
-:PROPERTIES:
-:ID:       design-bouncer-learning
-:END:
-
-The Bouncer begins as a static guard - a set of rules that block obviously dangerous actions. But defining "obviously" is the hard problem. The agent encounters situations the rules do not anticipate. The Bouncer must grow.
-
-The human-in-the-loop exception is the seed. When the LLM proposes an action the Bouncer does not recognize, the system does not default to blocking or allowing. It suspends. It writes the proposed action to an Org buffer in a format the human can read and understand. The human reviews and approves or denies. The Bouncer observes the decision.
-
-From this single observation, the Bouncer extracts a rule. Not merely "allow this specific action" but "allow this class of actions parameterized by these dimensions." The human approved a write to ~/projects/myapp/src/core.clj. The Bouncer generalizes: writes to ~/projects/*/src/*.lisp are approved for this session, or for this project, or indefinitely depending on the context and the user's pattern of decisions.
-
-Shadow mode is where rules are tested before deployment. When the Bouncer encounters a novel situation and is uncertain, it can run the proposed action in a simulated environment. It observes the side effects - what files would be modified, what processes would be spawned, what network calls would be made. If the simulation produces dangerous side effects, the rule is discarded. If it appears safe, the rule is added to the active set with a confidence rating.
-
-Formal verification is where the learned rules are checked against invariants. The Bouncer's rules are not merely patterns observed from human behavior. They are formulas in a logic that the system can reason about. A rule that would enable path traversal is not discarded because it was observed to be safe in prior instances - it is discarded because it violates the path-confinement invariant by construction.
-
-The Bouncer becomes, over time, not a guard that blocks bad actions but a reasoning system that understands why actions are good or bad. Early versions learn from human decisions. Later versions learn from their own logical analysis. The human's role transitions from approver to auditor to, eventually, unnecessary oversight.
-
-This is the bootstrap. The system begins dependent on human judgment because it has no basis for judgment of its own. Through accumulated decisions, it constructs a model of what is permitted and why. That model is the foundation for the deterministic symbolic engine that in v3.0.0 takes over the reasoning that the Bouncer learned to perform.
-
-* OpenCortex as a Function in Time
-:PROPERTIES:
-:ID:       design-trajectory
-:END:
-
-The system is not static. OpenCortex is defined not just by its current state but by its trajectory - how its cognitive architecture evolves over versions, with each phase reducing probabilistic surface area while increasing deterministic control.
-
-**v0.1.0: The Probabilistic Foundation**
-
-The agent begins by relying heavily on the neural engine. The LLM translates messy human intent into structured queries, generates code, proposes solutions. The Bouncer is present but thin - it blocks obviously dangerous actions, verifies path confinement, enforces basic invariants. Most reasoning is probabilistic because the symbolic infrastructure does not yet exist to do otherwise.
-
-At this stage, OpenCortex is similar to other LLM-based agents. The key difference is the gate is already there - the architecture assumes the LLM will hallucinate and structures safety accordingly.
-
-**v0.2.0 through v0.5.0: The Bouncer Learns**
-
-Each version expands the deterministic layer. The Bouncer writes rules from approved exceptions. Shadow mode runs trial executions. Tool permission tiers mature from simple allow/deny to nuanced context-aware policies. The agent becomes less likely to attempt dangerous actions not because it is smarter but because the guard has more complete information.
-
-This is the bootstrapping phase. The system learns by watching itself and its user. Every blocked action becomes a rule. Every approved exception becomes a pattern. The symbolic layer grows at the probabilistic layer's expense.
-
-**v0.6.0 through v0.7.0: The Architecture Crystallizes**
-
-Skills become more deterministic. The agent learns to write its own skills - first drafts generated by the LLM, but verified and refined by the symbolic engine. Self-editing improves. The REPL becomes a first-class cognitive substrate - code is not just written but verified, iterated, tested before committing.
-
-The balance shifts. The neural engine still translates and generates, but the symbolic engine checks, constrains, and corrects. The system is becoming what Gemini called "the strict guard" - a mathematically rigorous layer intercepting probabilistic output.
-
-**v1.0.0: SOTA Parity - The Probabilistic Ceiling**
-
-Achieving feature parity with commercial agents requires the full v0.x series complete. At this point, OpenCortex is a reliable autonomous agent - it can handle multi-step engineering tasks, maintain context across sessions, recover from errors, pass benchmarks. It is safer than alternatives because the Bouncer is mature and the memory architecture is sound.
-
-But it is still fundamentally probabilistic at its core. The symbolic engine verifies and constrains, but the generative engine is still the primary reasoning source.
-
-**v2.0.0: The Agent Becomes the Interface**
-
-This version is not about the symbolic engine - it is about tools. The agent stops running inside Emacs and starts replacing it. Lish (Lisp shell) emerges: a shell that speaks plists, not POSIX. Org-mode buffers become the file system. Org-babel becomes the REPL. The agent is no longer a passenger in Emacs - it is the operating system.
-
-The key insight is that the agent's interface and the agent's brain become the same thing. In earlier versions, there is a clear separation: the agent produces output, the TUI displays it. In v2.0.0, the distinction blurs. The agent's thoughts are displayed in Org buffers that are also the interface that the agent manipulates.
-
-This is the Emacs cannibalization phase. Not hostile replacement but evolution - Emacs was always a Lisp machine, and v2.0.0 completes the metamorphosis.
-
-**v3.0.0: The Symbolic Breakthrough**
-
-This is the architectural leap. The system transitions from "probabilistic engine with symbolic verification" to "symbolic engine with probabilistic input and output."
-
-The 10-80-10 architecture becomes fully realized: ten percent neural for input translation, eighty percent symbolic for reasoning against a knowledge graph, ten percent neural for output formatting. The symbolic engine maintains facts, relationships, rules, and formal proofs. When the neural engine generates something, the symbolic engine verifies it - not by checking against a blocklist, but by running the proposal through a Prolog/Datalog reasoner that understands the domain constraints.
-
-The deterministic planner takes the wheel. The LLM is no longer consulted for planning decisions - it translates human language to structured queries and structured results back to human language. The planning itself is pure Lisp: task graphs generated by a symbolic reasoner that has access to the full knowledge graph.
-
-Self-correcting gates replace the learned Bouncer rules. The system learns not just from approved exceptions but from the full history of outcomes - did the plan succeed? Where did it fail? The symbolic engine updates its own rules based on the results.
-
-The implications are significant. Hallucination becomes structurally impossible because the symbolic engine will not accept a fact that contradicts its knowledge graph. Safety becomes provable because the formal verification layer can prove properties about the system's behavior. Self-improvement becomes stable because the agent modifies skills that are then verified before execution.
-
-**v4.0.0 and Beyond: Hardware as the Final Constraint**
-
-The Lisp machine becomes physical. RISC-V with tagged architecture, hardware-enforced type checking, FPGA prototype for the symbolic core. The agent runs not in emulation but on silicon purpose-built for the architecture.
-
-This is the long horizon. The symbolic engine runs on logic ASICs optimized for symbolic computation. The neural engine runs on GPU or purpose-built matrix math hardware. Lisp orchestrates both, enforcing at the hardware level what it enforced at the software level in earlier versions.
-
-**The Trajectory as Design Principle**
-
-Understanding OpenCortex as a function in time is not nostalgia. It is architectural guidance. Every decision in v0.x should be made with awareness of where the system is going. Code written today becomes the substrate for v3.0. Skills designed today become the vocabulary the symbolic engine speaks tomorrow.
-
-The probabilistic beginning is not a weakness to overcome. It is the bootstrap. The system learns the domain through probabilistic inference, and that learned knowledge becomes the seed for the symbolic engine. By the time the symbolic engine takes over, it has a rich knowledge graph to reason about, grown from thousands of probabilistic interactions.
-
-This is how you build a reasoning machine: start with a learner, make it learn to verify, let verification become the core, remove the learner once it has learned enough.
-
-* The REPL as Cognitive Substrate
-:PROPERTIES:
-:ID:       design-repl-cognition
-:END:
-
-A REPL - Read, Eval, Print, Loop - is an interactive programming environment that reads an expression, evaluates it, prints the result, and loops back to read the next expression. It is the opposite of batch processing: where batch compiles and runs a program in one shot, a REPL works one expression at a time, with each evaluation building on all previous ones. The programmer defines a function, calls it, inspects the result, modifies it, and calls it again. The state accumulates. The session is the program.
-
-In Lisp, the REPL is not a debugging tool bolted onto the language - it is the natural mode of interaction. The running image is the environment. When you evaluate =(+ 2 2)=, the result =4= is printed, and you remain in the same image where =+= is defined, where previous definitions persist, where the next expression can reference anything that came before. There is no separation between development and execution. The REPL is not a simulation of the program - it is the program running.
-
-OpenCortex uses the REPL in this spirit, but elevated: it is not merely a tool for writing code, it is the mechanism by which the agent interacts with its own cognition - a loop that mirrors the perceive-reason-act metabolic cycle at the implementation level.
-
-In the agent's cognitive architecture, the REPL serves three functions that are difficult or impossible to achieve through batch processing or stateless API calls.
-
-First, the REPL enables verification before commitment. When the agent generates code, it does not write and forget - it evaluates in a running image, observes the result, iterates if incorrect. The feedback loop is tight: the time between writing and seeing the error is measured in milliseconds, not in the round-trip to a language server or a batch compiler. This is the "verification over hallucination" principle from the RLM paper made concrete: the agent tests what it writes before claiming it works.
-
-Second, the REPL enables stateful exploration. The agent can define a variable, inspect it, modify it, redefine it. The exploration accumulates state across interactions. This is not a debugging session - it is the agent thinking with its hands, working through a problem by trying variations and observing outcomes, keeping the successful ones and discarding the failures.
-
-Third, the REPL is a shared substrate. When the agent evaluates code, that code runs in the same image as the agent's own cognition. There is no process boundary between the agent and its tools. The REPL is not a subprocess the agent controls - it is a direct interface to the agent's own nervous system.
-
-This is why the REPL becomes more important as the system matures. In early versions, it is a development tool. In v0.6.0 and beyond, it becomes a cognitive tool: the agent explores hypotheses by evaluating them, verifies the output of sub-agents by inspecting live state, and tests modifications before committing them to the knowledge graph.
-
 * The Evaluation Harness
 :PROPERTIES:
 :ID:       design-evaluation-harness
 :END:
 
-SOTA parity is meaningless without measurement. A system that claims to match commercial agents must demonstrate it through reproducible benchmarks, not through feature checklists. The evaluation harness is the apparatus by which OpenCortex proves its capabilities.
+SOTA parity is meaningless without measurement. A system that claims to match commercial agents must demonstrate it through reproducible benchmarks, not through feature checklists. The evaluation harness is the apparatus by which Passepartout proves its capabilities.
 
 The industry standard for coding agents is SWE-bench: a corpus of GitHub issues paired with pull requests. The agent is given an issue, must understand the codebase, write a fix, and submit. Success is measured by whether the submitted PR passes the existing test suite. This tests the full chain: understanding, planning, code generation, verification, and multi-step reasoning.
 
-OpenCortex implements a native Lisp harness for this. A background thread clones repositories, feeds issues into the cognitive loop, tracks the resolution trajectory as an Org-mode headline tree, and scores success by test outcomes. The trajectory is persisted: when a resolution fails, the system can inspect where in the chain the reasoning broke down. The headline tree records the agent's thoughts at each step, making the failure auditable and the debugging human-assisted.
+Passepartout implements a native Lisp harness for this. A background thread clones repositories, feeds issues into the cognitive loop, tracks the resolution trajectory as an Org-mode headline tree, and scores success by test outcomes. The trajectory is persisted: when a resolution fails, the system can inspect where in the chain the reasoning broke down. The headline tree records the agent's thoughts at each step, making the failure auditable and the debugging human-assisted.
 
 Beyond SWE-bench, the harness includes chaos testing. The system is subjected to resource starvation, concurrent load, and adversarial input. The deterministic engine must maintain safety invariants under pressure. The symbolic verifier must not deadlock or livelock. The probabilistic engine must degrade gracefully - if tokens are limited, it must still produce valid proposals that the deterministic engine can evaluate. Failure under chaos is a design flaw, not a benchmark anomaly.
 
@@ -283,7 +218,7 @@ The harness also supports regression testing on the skill set. Every skill is te
 :ID:       design-observability
 :END:
 
-When a human asks why the system made a decision, the answer must be findable. In most AI systems, the reasoning is ephemeral - it exists in the model's activations and disappears when the session ends. In OpenCortex, every significant cognitive event is written to an Org buffer as it happens.
+When a human asks why the system made a decision, the answer must be findable. In most AI systems, the reasoning is ephemeral - it exists in the model's activations and disappears when the session ends. In Passepartout, every significant cognitive event is written to an Org buffer as it happens.
 
 The thought trace is the agent's journal, written in parallel with its reasoning. When the probabilistic engine generates a proposal, the trace records the input, the prompt, and the raw output. When the deterministic engine evaluates it, the trace records which rules were checked, which passed, which failed, and why. When an action is executed, the trace records the timestamp, the user who approved it (if human-in-the-loop), and the outcome.
 
@@ -300,40 +235,161 @@ Without observability, the system is a black box that happens to produce correct
 
 The Model Context Protocol (MCP) is a standard for connecting AI systems to external tools and data sources. It defines how a client requests tools from a server, how the server exposes its capabilities, and how the client invokes them. The ecosystem is growing: MCP servers exist for GitHub, Slack, Postgres, filesystem access, and much more.
 
-OpenCortex connects to this ecosystem, but not by becoming a Node.js runtime. The architecture is: external MCP servers communicate via stdio or SSE to a Lisp-native MCP client that runs in the same image as the agent. The client is pure Common Lisp - it parses the JSON-RPC messages, invokes the tools, and presents results to the agent as Lisp data structures. There is no serialization overhead between the agent and the MCP layer, no process boundary, no impedance mismatch.
+Passepartout connects to this ecosystem, but not by becoming a Node.js runtime. The architecture is: external MCP servers communicate via stdio or SSE to a Lisp-native MCP client that runs in the same image as the agent. The client is pure Common Lisp - it parses the JSON-RPC messages, invokes the tools, and presents results to the agent as Lisp data structures. There is no serialization overhead between the agent and the MCP layer, no process boundary, no impedance mismatch.
 
 When the agent calls a tool via MCP, it receives a plist with the tool name, arguments, and result. The result is immediately usable by the agent's symbolic engine. When the agent generates a file, it can be written to the filesystem through an MCP filesystem server. When the agent needs to send a message, it can use an MCP Slack server. The agent does not need to know that these are MCP interactions - it sees only the plists that flow through its cognitive architecture.
 
 The alternative is to build MCP wrappers in Python or TypeScript and bridge to Lisp via subprocess. This is what OpenClaw does: a Node.js runtime that manages MCP servers, with a bridge to the Lisp process. The bridge introduces latency, serialization costs, and a maintenance burden. The Node.js process must be kept running. The bridge must be maintained across Lisp and JavaScript runtimes. The cognitive architecture must handle errors that cross the process boundary.
 
-OpenCortex's native client is smaller, faster, and more maintainable. The MCP client is a skill, not a core component. It can be reloaded, replaced, or removed without restarting the agent. The agent can add new MCP tool integrations by loading new skills, not by deploying new infrastructure.
+Passepartout's native client is smaller, faster, and more maintainable. The MCP client is a skill, not a core component. It can be reloaded, replaced, or removed without restarting the agent. The agent can add new MCP tool integrations by loading new skills, not by deploying new infrastructure.
 
 * Local-First Architecture
 :PROPERTIES:
 :ID:       design-local-first
 :END:
 
-OpenCortex is designed to run on the user's machine, on their hardware, with their data, without requiring an internet connection. This is not a deployment option - it is an architectural commitment. The system must be able to reason, plan, and act using only the resources available locally.
+Passepartout is designed to run on the user's machine, on their hardware, with their data, without requiring an internet connection. This is not a deployment option - it is an architectural commitment. The system must be able to reason, plan, and act using only the resources available locally.
 
 The motivation is not merely philosophical. Cloud-based AI agents are economically incentivized to collect data, to train on user interactions, and to build lock-in through proprietary formats and network effects. When the agent runs locally, the user owns the hardware, owns the data, and can terminate the process without asking permission. There is no vendor that can change terms, no service that can go offline, no model that can be updated without consent.
 
-Technically, local-first means several things. The LLM must be able to run on local hardware. OpenCortex supports Ollama as a provider, which runs quantized models on CPU and GPU without requiring an external API. The vector database must be local. OpenCortex uses its own org-object store, which is a folder of Org files that the agent already owns. There is no ChromaDB or Qdrant to install, no cloud vector service to authenticate with.
+Technically, local-first means several things. The LLM must be able to run on local hardware. Passepartout supports Ollama as a provider, which runs quantized models on CPU and GPU without requiring an external API. The vector database must be local. Passepartout uses its own org-object store, which is a folder of Org files that the agent already owns. There is no ChromaDB or Qdrant to install, no cloud vector service to authenticate with.
 
 The symbolic engine does not require a network connection. The Prolog/Datalog reasoner that in v3.0.0 verifies neural proposals runs entirely in the Lisp image. The Bouncer's rule synthesis does not call an external service. The agent can operate in a disconnected environment indefinitely, resuming full capability when connectivity is restored.
 
-This does not mean OpenCortex refuses to use cloud services when available and appropriate. It means cloud services are optional enhancements, not architectural requirements. The core is local. The user can choose to add cloud LLM providers for more capable inference, but the system functions without them.
+This does not mean Passepartout refuses to use cloud services when available and appropriate. It means cloud services are optional enhancements, not architectural requirements. The core is local. The user can choose to add cloud LLM providers for more capable inference, but the system functions without them.
 
 * Zero-Dependency Deployment
 :PROPERTIES:
 :ID:       design-zero-dependency
 :END:
 
-The simplest deployment is one that requires no installation steps. The user downloads one file, runs it, and the system works. OpenCortex approximates this through SBCL's ability to produce standalone executables via save-lisp-and-die. The executable contains the Lisp runtime, the compiled system, and Quicklisp libraries - everything bundled into one binary.
+The simplest deployment is one that requires no installation steps. The user downloads one file, runs it, and the system works. Passepartout approximates this through SBCL's ability to produce standalone executables via save-lisp-and-die. The executable contains the Lisp runtime, the compiled system, and Quicklisp libraries - everything bundled into one binary.
 
 The practical reality is more nuanced. Building a truly standalone executable requires resolving all library dependencies at build time and embedding them in the binary. SBCL supports this, but the resulting binary is large (tens of megabytes), and updating any component requires a full rebuild. The current deployment model uses a Docker container that maps the user's memex directory as a volume. The container starts, loads the system, and is ready. No compilation on the user's machine, no dependency installation, no platform-specific quirks.
 
-The long-term goal is a single =opencortex= binary that the user runs. It starts a local web server on a Unix domain socket. The TUI connects through the socket. The user's Org files are in =~/memex/=. The binary is the only thing that needs to be installed.
+The long-term goal is a single =passepartout= binary that the user runs. It starts a local web server on a Unix domain socket. The TUI connects through the socket. The user's Org files are in =~/memex/=. The binary is the only thing that needs to be installed.
 
 This stands in stark contrast to most AI agent systems, which require managing Python environments, npm packages, API keys, environment variables, and configuration files. OpenAI's agents SDK requires pip install, a Python environment, and external API access. OpenClaw requires Node.js, npm, and a plugin ecosystem that must be individually installed. LangChain requires a Python environment with dozens of dependencies that must be kept compatible.
 
-OpenCortex's dependency model is SBCL plus Quicklisp. Quicklisp loads libraries on demand from the internet, but caches them locally. A system with internet access can fetch any library it needs. A system without internet access uses only the libraries it has already loaded - and those are preserved in the cache. The agent does not require internet access to function after initial setup.
+Passepartout's dependency model is SBCL plus Quicklisp. Quicklisp loads libraries on demand from the internet, but caches them locally. A system with internet access can fetch any library it needs. A system without internet access uses only the libraries it has already loaded - and those are preserved in the cache. The agent does not require internet access to function after initial setup.
+
+* Token Economics and Performance Advantage
+:PROPERTIES:
+:ID:       design-token-economics
+:END:
+
+This section analyzes how Passepartout's architectural decisions translate into token usage, latency, and cost versus competing agent designs (OpenClaw, Hermes, Claude Code).
+
+** The Core Insight: LLM as Expensive Resource, Not Default Engine
+
+Passepartout treats the LLM as a resource to be minimized. Every operation is designed to reduce LLM dependency. Competitors treat the LLM as the core engine through which all operations flow. This is not a difference of degree but of architecture.
+
+The three structural multipliers are:
+
+*Sparse tree retrieval* — loading relevant subtrees (200-800 tokens per file) rather than full files (1,500-5,000 tokens) = ~5-10x reduction per file access
+2. *Deterministic safety* — 9-vector dispatcher gate runs in pure Lisp (0 LLM tokens per verification) versus prompt-based guardrails (200-500 tokens per action) = infinite multiplier
+3. *REPL verification* — catches errors in-image (milliseconds, 0 LLM tokens) versus LLM correction round-trips (500-2,000 tokens per retry)
+
+These compound. A coding session touching 20 files, performing 10 actions, and triggering 3 errors saves ~50,000-100,000 tokens compared to the same session with Claude Code.
+
+** Per-Task Type Analysis
+
+*** Coding (debugging, refactoring, PR review)
+
+| Operation                           | Passepartout            | Claude Code                 | Hermes (3-agent)             | Savings vs Claude     |
+|-------------------------------------+-------------------------+-----------------------------+------------------------------+-----------------------|
+| File access (30 files)              | 30 × 400 tok = 12,000   | 30 × 3,000 tok = 90,000     | 30 × 3,000 tok × 3 = 270,000 | 78,000 tok            |
+| Reasoning rounds (20)               | 20 × 3,000 tok = 60,000 | 20 × 4,000 tok = 80,000     | 20 × 3,000 tok × 3 = 180,000 | 20,000 tok            |
+| Error correction (5 caught by REPL) | 0 (REPL)                | 5 × 1,000 tok = 5,000       | 5 × 1,000 tok × 3 = 15,000   | 5,000 tok             |
+| Safety verification                 | 0 (deterministic)       | 500 tok/round × 20 = 10,000 | 200 tok/round × agents       | 10,000 tok            |
+| Agent coordination                  | 0                       | 0                           | 3,000-5,000 tok/task         | 0                     |
+| *Total*                             | *~72,000 tok*           | *~185,000 tok*              | *~475,000 tok*               | *~113,000 tok (2.6x)* |
+
+Over a month of daily coding (20 sessions): ~2.3 million tokens saved. At typical API pricing ($2-15/M tokens), this saves $5-35/month.
+
+*** Knowledge Management (Zettelkasten, research, note-taking)
+
+Passepartout's strongest domain. The Org-mode native format and sparse tree retrieval create a 10-40x advantage because knowledge bases are the worst case for "load everything" architectures.
+
+| Operation                      | Passepartout                                           | Competitor                              | Savings   |
+|--------------------------------+--------------------------------------------------------+-----------------------------------------+-----------|
+| Context assembly (500-node KB) | Peripheral outline + ~5 foveal nodes = 2,000-4,000 tok | Full serialization = 80,000-150,000 tok | 40-75x    |
+| Semantic search (10 queries)   | Vector lookup in-image = 0 LLM tok                     | LLM-assisted search = 5,000 tok         | 5,000 tok |
+| Note creation (10 notes)       | Deterministic Org writes = 0 LLM tok                   | 10 × 800 tok = 8,000                    | 8,000 tok |
+| *Total per session*            | *~7,000 tok*                                           | *~95,000-165,000 tok*                   | *~13-24x* |
+
+*** Day-to-Day Life Management (calendar, tasks, reminders)
+
+| Operation                   | Passepartout                               | Competitor                     | Savings    |
+|-----------------------------+--------------------------------------------+--------------------------------+------------|
+| Background maintenance      | Deterministic heartbeat-driven = 0 LLM tok | Scheduled LLM calls or skipped | Variable   |
+| User interactions (30/day)  | 30 × 2,000 tok = 60,000                    | 30 × 4,000 tok = 120,000       | 60,000 tok |
+| Context queries by TODO/tag | Hash table scan = 0 LLM tok                | LLM-based search = 2,500 tok   | 2,500 tok  |
+| *Total per day*             | *~60,000 tok*                              | *~122,500 tok*                 | *~2x*      |
+
+The defining advantage: background maintenance (compaction, archiving, link repair) costs zero LLM tokens. Competing systems either skip this or pay LLM costs for it.
+
+*** Chatting (casual conversation)
+
+Chatting is inherently LLM-bound. Passepartout's edge is privacy filtering before content reaches the LLM and slightly smaller context footprint. Token savings are marginal (~1.3x).
+
+** The Dispatcher Learning Curve: Cost Decreases Over Time
+
+A unique architectural property: Passepartout's cost curve descends while competitors' ascends.
+
+Passepartout: As the dispatcher accumulates deterministic rules from Human-in-the-Loop decisions, fewer actions require LLM proposals. A file write that initially triggered a full LLM proposal → dispatcher review → HITL approval → rule extraction loop eventually becomes a deterministic rule check. Each hardened rule permanently reduces future token costs.
+
+Competitors: As context histories grow, safety instructions accumulate, and guardrails become more elaborate, each interaction costs more than the last. The only way to reduce cost is to cap context — sacrificing capability.
+
+After 12 months of learning, Passepartout's core reasoning costs could drop to 40-60% of baseline, while competitors' costs rise to 125-140% of baseline.
+
+The crossover point where Passepartout becomes structurally cheaper is estimated at 3-6 months depending on usage volume and task diversity.
+
+** Local LLM Viability
+
+Reduced context requirements change which model sizes deliver acceptable performance:
+
+| Model                    | Passepartout Viability      | Competitor Viability |
+|--------------------------+-----------------------------+----------------------|
+| Phi-3-mini 3.8B (4K ctx) | Viable for structured tasks | Context starvation   |
+| Llama 3.1 8B (8K ctx)    | Comfortable daily driver    | Marginal             |
+| Qwen 2.5 7B (4K ctx)     | Viable for most tasks       | Not viable           |
+| Mistral 7B (8K ctx)      | Comfortable                 | Marginal             |
+| Llama 3.1 70B (128K ctx) | Overkill (but works)        | Comfortable          |
+
+KV cache memory scales with context length:
+
+| Context Window | KV Cache (Llama 3.1 8B, FP16) |
+|----------------+-------------------------------|
+| 4K tokens      | ~67 MB                        |
+| 32K tokens     | ~540 MB                       |
+| 128K tokens    | ~2.1 GB                       |
+
+Passepartout at 4K effective context: ~67 MB KV cache. Competitor at 128K: ~2.1 GB. A 7-8B model on an RTX 3060 Ti (8 GB VRAM) or MacBook (16 GB unified memory) is a practical daily driver with Passepartout. Competitors at full context require 16-32 GB VRAM or cloud APIs.
+
+** Open Questions and Risks
+
+1. *Retrieval accuracy is the bottleneck.* If sparse tree retrieval loads the wrong subtree (low-similarity but causally relevant), the LLM makes unfixable errors. The architecture assumes embedding quality is "good enough" — this is untested at scale.
+
+2. *System prompt overhead can consume savings.* Every =think= cycle iterates all registered skills and calls every =system-prompt-augment= function. With 20+ skills, a trivial interaction could carry 3,000-8,000 tokens of overhead before user input is even processed. This overhead is flat per-call, so it disproportionately affects short interactions.
+
+3. *Model size vs context quality.* A 3.8B model with perfect context cannot match a 70B model on complex multi-file refactors regardless of context quality. Model size independently determines reasoning depth. The minimum viable model is likely 7-13B parameters for engineering work.
+
+4. *The 3-retry dispatcher loop.* When the dispatcher rejects a proposal, the rejection trace feeds back to the LLM for self-correction (up to 3 retries). If the dispatcher rejects 30% of proposals, the effective token multiplier is 1.39x per action. At 50% rejection (plausible during early use), it is 1.75x. This penalty decreases as the dispatcher accumulates rules.
+
+5. *Competitor evolution.* Sparse retrieval is not patentable. Claude Code, Copilot, and others will implement similar mechanisms. The architectural advantage is real but finite in duration. The deterministic safety gate is the harder-to-replicate differentiator.
+
+** Comparison Summary
+
+| Metric                      | Passepartout        | Claude Code             | Hermes                       | OpenClaw              |
+|-----------------------------+---------------------+-------------------------+------------------------------+-----------------------|
+| Active context (tokens)     | 2,000-4,000         | 10,000-50,000+          | 5,000-15,000/agent           | 10,000-40,000         |
+| File access cost (per file) | 200-800 tok         | 1,500-5,000 tok         | 1,500-5,000 tok × agents     | 1,500-5,000 tok       |
+| Safety verification cost    | 0 (deterministic)   | 200-500 tok/action      | 200-500 tok/action × agents  | 100-300 tok/action    |
+| Agent coordination cost     | 0                   | 0                       | 1,000-3,000 tok/task         | 500-2,000 tok/task    |
+| Error recovery cost         | 0 (REPL)            | 500-2,000 tok/retry     | 500-2,000 tok/retry × agents | 500-2,000 tok/retry   |
+| Long-term cost trend        | Decreasing          | Increasing              | Increasing                   | Flat/Increasing       |
+| Min viable local model      | 3-4B params, 4K ctx | 30-70B params, 32K+ ctx | 30-70B params, 32K+ ctx      | 7-13B params, 8K+ ctx |
+| Min VRAM for local          | 4-6 GB              | 16-32 GB                | 24-48 GB                     | 8-16 GB               |
+
+*Conclusion:* Passepartout's architecture is designed to produce 2-3x token savings for coding, 13-24x for knowledge management, and 2x for life management at v1.0.0 maturity. The three structural advantages — sparse trees, deterministic safety, and REPL verification — compound. The critical risk is implementation gap: achieving the retrieval precision, dispatcher learning, and REPL integration depth required to realize the design.

docs/ROADMAP.org

@@ -1,11 +1,12 @@
-#+TITLE: OpenCortex Evolutionary Roadmap
+#+TITLE: Passepartout Evolutionary Roadmap
 #+STARTUP: content
+#+FILETAGS: :docs:roadmap:
 
 * The Evolutionary Roadmap
 
-The roadmap is designed working backwards from SOTA parity (V 1.0.0), guiding each version toward a fully autonomous, self-editing agent. Each version builds on the previous, with features designed to be implemented in pure Common Lisp + Org-mode.
+The roadmap is designed working backwards from SOTA parity (v1.0.0), guiding each version toward a fully autonomous, self-editing agent. Each version builds on the previous, with features designed to be implemented in pure Common Lisp + Org-mode.
 
-Per-version task tracking: [[file:../TODO.org][TODO.org]]
+The TODO states in each version's Tasks section are the authoritative task tracker. The feature tables describe what each version delivers.
 
 ** Non-Negotiable Identity
 - Pure Common Lisp + Org-mode. No JSON. No YAML. No external databases.
@@ -16,156 +17,606 @@ Per-version task tracking: [[file:../TODO.org][TODO.org]]
 
 ** Version Roadmap
 
-*** v0.1.0: The Autonomous Foundation — CURRENT RELEASE ✅
+Understanding Passepartout as a function in time is not nostalgia. It is architectural guidance. Every decision in v0.x should be made with awareness of where the system is going. Code written today becomes the substrate for v3.0. Skills designed today become the vocabulary the symbolic engine speaks tomorrow.
+
+The probabilistic beginning is not a weakness to overcome. It is the bootstrap. The system learns the domain through probabilistic inference, and that learned knowledge becomes the seed for the symbolic engine. By the time the symbolic engine takes over, it has a rich knowledge graph to reason about, grown from thousands of probabilistic interactions.
+
+This is how you build a reasoning machine: start with a learner, make it learn to verify, let verification become the core, remove the learner once it has learned enough.
+
+
+*** v0.1.0: The Autonomous Foundation — RELEASED 2026-04-20
 
 The secure, auditable Lisp kernel. All core infrastructure in place.
 
-| Component                         | Status | Notes                                                                 |
-|-----------------------------------+--------+-----------------------------------------------------------------------|
-| Perceive-Reason-Act pipeline      | ✅     | 3-stage metabolic loop                                                |
-| Skills engine with jailed loading | ✅     | defskill, topological sort, hot-reload                                |
-| Policy skill (6 invariants)       | ✅     | Transparency, Autonomy, Bloat, Modularity, Mentorship, Sustainability |
-| Bouncer skill                     | ✅     | Command whitelist guard functions                                     |
-| Memory (org-object + Merkle)      | ✅     | Hash tables, snapshots, rollback                                      |
-| Lisp validator skill              | ✅     | Syntax validation before eval                                         |
-| Scribe + Gardener skills          | ✅     | Heartbeat-driven distillation + audit                                 |
-| LLM gateway (OpenRouter + Ollama) | ✅     | Provider cascade                                                      |
-| Shell actuator                    | ✅     | Safe command execution                                                |
-| Emacs bridge via Swank            | ✅     | Point/buffer updates                                                  |
-| FiveAM test suite                 | ✅     | Memory, boot, pipeline, act, communication                            |
-| Credentials vault                 | ✅     | Encrypted storage                                                     |
+**** DONE Perceive-Reason-Act pipeline
+:PROPERTIES:
+:ID:       id-06f10b9a-4054-4dea-a927-b0935fbdcd2f
+:CREATED:  [2026-03-22 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
 
-*** v0.2.0: Interactive Refinement ✅
+**** DONE Skills engine with jailed loading
+:PROPERTIES:
+:ID:       id-dc83944f-3923-4142-b324-c317dacd6b0b
+:CREATED:  [2026-03-22 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
+
+**** DONE Policy skill (6 invariants)
+:PROPERTIES:
+:ID:       id-929c84b7-d6ae-42b9-a8b5-d9df962db826
+:CREATED:  [2026-03-22 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
+
+**** DONE Memory (memory-object + Merkle hashing)
+:PROPERTIES:
+:ID:       id-3a96b384-cacf-4da0-8faa-1647739feba9
+:CREATED:  [2026-03-22 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
+
+**** DONE Scribe + Gardener background workers
+:PROPERTIES:
+:ID:       id-3f618a38-ec23-4034-ba3c-ef272e212e2b
+:CREATED:  [2026-03-22 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
+
+**** DONE LLM gateway (OpenRouter, Ollama)
+:PROPERTIES:
+:ID:       id-f5d870e2-cbd2-4c00-a8d4-174ab4118afc
+:CREATED:  [2026-04-11 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
+
+**** DONE Shell actuator, Emacs bridge, credentials vault
+:PROPERTIES:
+:ID:       id-7ca3167f-8353-4bb7-8b97-c039017716b0
+:CREATED:  [2026-04-11 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
+
+**** DONE FiveAM test suite
+:PROPERTIES:
+:ID:       id-925d4180-764b-4219-8bdc-8e1849572da1
+:CREATED:  [2026-04-11 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-20 Mon]
+:END:
+
+*** v0.2.0: Interactive Refinement — RELEASED 2026-04-29
 
 The "Brain" meets the "Machine." Standardization and professionalization of the user interface and environment.
 
-| Feature              | Status | Notes                                                   |
-| :---                 | :---:  | :---                                                    |
-| Minimalist Kernel    | ✅     | Purified harness targeting I/O & Memory only.           |
-| Sovereign Skills     | ✅     | Diagnostics and Configuration extracted to Userland.    |
-| POSIX/XDG Compliance | ✅     | Standardized paths (~/.config, ~/.local).               |
-| Professional TUI     | ✅     | Styled, scrollable, and verified Lisp interface.        |
-| Onboarding Wizard    | ✅     | Modular Lisp setup for multiple LLM providers.          |
-| Linkage Command      | ✅     | Real-time verification of external gateways (Telegram). |
-| Self-Editing         | ✅     | Detects errors, applies fixes, learns from outcomes.    |
-| Enhanced Utilities   | ✅     | Structural Lisp/Org manipulation + REPL evaluation.     |
-| Memory Rollback      | ✅     | Snap back to known-good state on critical errors.       |
+*v0.2.0 through v0.5.0: The Dispatcher Learns*
+
+Each version expands the deterministic layer. The Dispatcher writes rules from approved exceptions. Shadow mode runs trial executions. Tool permission tiers mature from simple allow/deny to nuanced context-aware policies. The agent becomes less likely to attempt dangerous actions not because it is smarter but because the guard has more complete information.
+
+This is the bootstrapping phase. The system learns by watching itself and its user. Every blocked action becomes a rule. Every approved exception becomes a pattern. The symbolic layer grows at the probabilistic layer's expense.
+
+
+**** DONE Professional TUI (Croatoan-based, styled, scrollable)
+:PROPERTIES:
+:ID:       id-57cef382-fe14-42e6-aade-03e05e3e920b
+:CREATED:  [2026-04-28 Tue]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-29 Wed]
+:END:
+
+**** DONE Self-editing (error detection, surgical fix, hot-reload)
+:PROPERTIES:
+:ID:       id-459b8275-9979-4d0f-8d61-a9af883930d4
+:CREATED:  [2026-04-23 Wed]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-29 Wed]
+:END:
+
+**** DONE Enhanced utilities (structural Lisp/Org manipulation + REPL)
+:PROPERTIES:
+:ID:       id-23f37c0d-4e77-4dc3-ab43-52a5987eb426
+:CREATED:  [2026-04-23 Wed]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-29 Wed]
+:END:
+
+**** DONE Onboarding wizard (modular Lisp setup for LLM providers)
+:PROPERTIES:
+:ID:       id-bd497de7-3533-4056-b89f-2c992d2ea28b
+:CREATED:  [2026-04-28 Tue]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-29 Wed]
+:END:
+
+**** DONE Memory rollback (snapshot and restore)
+:PROPERTIES:
+:ID:       id-fd2fb6e3-03e7-4e22-b9e9-a7eecfd06718
+:CREATED:  [2026-04-12 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-04-29 Wed]
+:END:
+
+**** DONE Secret Exposure Gate, Shell Safety, Lisp Validation
+:PROPERTIES:
+:ID:       id-aa53c128-195b-42d4-9838-2def59faf7cf
+:CREATED:  [2026-05-02 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-02 Sat]
+:END:
+
+**** DONE Multi-distro deployment (Debian+Fedora, systemd, Docker)
+:PROPERTIES:
+:ID:       id-783df999-f7fe-45c8-896d-2fd07c604d64
+:CREATED:  [2026-05-02 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-02 Sat]
+:END:
+
+**** DONE Project rename to Passepartout (files, packages, env vars)
+:PROPERTIES:
+:ID:       id-91724874-aa0d-4804-9220-8bc5551f1366
+:CREATED:  [2026-05-02 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-02 Sat]
+:END:
+
+**** DONE 31 org files with full literate prose
+:PROPERTIES:
+:ID:       id-597b2a92-aac6-481a-b2c4-4f9842ced97c
+:CREATED:  [2026-05-02 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-02 Sat]
+:END:
 
 *** v0.3.0: Event Orchestration + HITL
 
-Unified control plane and Human-in-the-Loop (HITL) state management.
+Unified control plane and Human-in-the-Loop state management.
 
-| Feature                        | Description                                                                                                                                               |
-|--------------------------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------|
-| org-skill-event-orchestrator   | Unified hooks + cron + routing. Three tiers: =:REFLEX= (no LLM), =:COGNITION= (light LLM), =:REASONING= (full LLM).                                       |
-| Human-in-the-Loop (HITL)       | Continuation-based interaction. The agent can "suspend" its cognitive loop to ask for permission or clarification and resume precisely where it left off. |
-| org-skill-context-manager      | Stack-based project scoping. =push-context= / =pop-context=. Path resolution relative to context.                                                         |
-| Memory scope segmentation      | =:scope= property on org-objects: memex/session/project. Scope-aware retrieval.                                                                           |
-| Model-tier routing             | Complexity-based model selection: heartbeat → tiny, user → medium, reasoning → large.                                                                     |
-| Slash commands                 | =M-x= style command palette in TUI. Commands defined in Org-mode.                                                                                         |
-| Asynchronous Embedding Gateway | Provider-agnostic vector generation (Ollama, local llama.cpp) via background worker.                                                                      |
-| Telegram Gateway Skill         | Full implementation of the message receiver for linked Telegram bots.                                                                                     |
+**** Remediation: Backfill v0.1.0/v0.2.0 Gaps
+
+These features were marked DONE in prior versions but are stubs, no-ops, or
+missing. They must be completed before v0.3.0 feature work proceeds.
+
+***** DONE P0: Add vault-get-secret / vault-set-secret wrappers       :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-vault-secret-wrappers
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+=vault-get-secret= and =vault-set-secret= are exported from =core-defpackage=
+and called from =gateway-messaging.org= (lines 36, 86, 180) but never defined.
+=gateway-link= crashes at runtime. Add one-line wrappers in =security-vault.org=
+that delegate to the existing =vault-get=/=vault-set= with ~:type :secret~.
+
+***** DONE P0: system-archivist — Scribe + Gardener                   :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-archivist-distillation
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+Scribe: distill daily Org logs into atomic Zettelkasten notes with backlinks.
+Gardener: scan for broken =[[file:]]= links and orphaned =memory-object= entries.
+Wire both as cron jobs via =system-event-orchestrator=.
+Depends on: orchestrator bootstrap (P1 item below).
+
+***** DONE P0: system-self-improve — surgical edit + error fix        :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-self-improve-real
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+= self-improve-edit=: =org-read-file= → text replace → =snapshot-memory= →
+=org-write-file= → =literate-block-balance-check= → tangle → reload.
+=self-improve-fix=: parse error log → =lisp-structural-check= →
+=lisp-extract= → surgical repair → =repl-eval= verify.
+Remove the dead first =defskill= registration (trigger nil, overwritten by second).
+Depends on: =programming-org=, =programming-literate= (P0 items below).
+
+***** DONE P0: programming-org — fix org-modify + org-ast-render      :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-org-modify-render
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+=org-modify(filepath, id, changes)= ignores ~changes~ and only logs. Should locate
+node by ID in file and apply changes to its content.
+=org-ast-render(ast)= returns a hardcoded placeholder. Should convert plist AST
+back to Org text.
+
+***** DONE P0: programming-literate — fix both stubs                  :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-literate-real
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+=literate-block-balance-check=: verify all =#+begin_src lisp= blocks in an Org file
+have balanced parentheses. Returns T if all balanced, error message otherwise.
+=literate-tangle-sync-check=: verify =.lisp= file matches tangled output of =.org= file.
+
+***** DONE P1: system-event-orchestrator — bootstrap implementation   :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-orchestrator-bootstrap
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+=orchestrator-bootstrap= currently only logs. Should scan Org files for =#+HOOK:=
+and =#+CRON:= properties and register them via the existing registries.
+Prerequisite for archivist cron jobs.
+
+***** DONE P1: system-memory — memory introspection                   :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-memory-inspect
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+=memory-inspect= only logs. Should return structured statistics: object count
+by type, TODO state distribution, orphan count, snapshot list. Trigger on
+=:INTROSPECTION= sensor type.
+
+***** DONE P1: Path relic — skills/ → lisp/ in skill-initialize-all   :backfill:
+CLOSED: [2026-05-03 Sun 10:42]
+:PROPERTIES:
+:ID:       id-path-relic
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 10:42]
+:END:
+=skill-initialize-all= and =context-skill-source= resolve against =skills/=
+under =$PASSEPARTOUT_DATA_DIR=. Core and skills were merged into =lisp/=.
+Update both functions to point at =lisp/=.
+
+***** DONE P2: core-context — semantic retrieval (embeddings)         :backfill:
+CLOSED: [2026-05-03 Sun 11:42]
+:PROPERTIES:
+:ID:       id-embeddings
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 11:42]
+:END:
+=org-object-vector= is never populated; all similarities are 0.0. Generate
+embeddings via Ollama =nomic-embed-text= at ingest time. Store in
+=memory-object.vector=. Fallback: TF-IDF bag-of-words.
+
+***** DONE P2: core-context — subtree-based skill source loading      :backfill:
+CLOSED: [2026-05-03 Sun 11:42]
+:PROPERTIES:
+:ID:       id-skill-subtree
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 11:42]
+:END:
+=context-skill-source= reads entire Org files. Add =context-skill-subtree=
+for targeted retrieval of specific function docs or test blocks by heading name.
+
+***** DONE P3: Variable name drift normalization (out of scope for now) :backfill:
+CLOSED: [2026-05-03 Sun 11:50]
+
+***** DONE P4: Eliminate STYLE-WARNINGs from setup output             :cosmetic:
+CLOSED: [2026-05-04 Mon]
+SBCL emits ~25 STYLE-WARNINGs at boot due to forward references (function
+called before its =defun= appears in the file). Actual bugs (C/T, handler-case,
+bare =return=) are already fixed. Remaining warnings fall into two categories:
+1. Same-file forward references (reorder =defun=s to fix).
+2. Cross-skill references (inherent to skill architecture; suppress or accept).
+Reordering is mechanical but tedious — grep each file's =defun= list, compute
+topological order, move definitions down. Do not change function bodies.
+:PROPERTIES:
+:ID:       id-name-normalization
+:CREATED:  [2026-05-03 Sun]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 11:50]
+:END:
+=*memory*= (context) vs =*memory-store*= (memory). =*skills-registry*= with
+underscore (reason/context) vs =*skill-registry*= with hyphen (defpackage).
+Normalization pass across all modules. Touches every file — do after P0-P2
+are stable. Do not mix with functional changes.
+
+**** DONE Project Renaming (Bouncer → Dispatcher)
+:PROPERTIES:
+:ID:       id-9e779580-287b-b3d1-37b9-bcefd750bf9e
+:CREATED:  [2026-05-01 Fri 15:40]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-02 Sat 22:00]
+:END:
+The Dispatcher's role has evolved beyond security guard. It is the seed of the deterministic engine — it learns to execute procedures without invoking the neural net.
+
+**** DONE Event Orchestrator (unified hooks+cron+routing)
+:PROPERTIES:
+:ID:       id-d35aea3d-2e5f-4a12-a9b0-1c2d3e4f5a6b
+:CREATED:  [2026-05-02 Sat 14:00]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-02 Sat 22:36]
+:END:
+Unified control plane for hooks, cron, and complexity-based routing.
+- *hook-registry* + *cron-registry* + tier classifier
+- Hooks via ~#+HOOK:~ Org-mode properties
+- Three complexity tiers: ~:REFLEX~ (no LLM), ~:COGNITION~ (light LLM), ~:REASONING~ (full LLM)
+- Hooked into heartbeat for cron processing
+- Rule-based tier classifier (overrideable via ~*tier-classifier*~)
+
+**** TODO Context Manager (project scoping)
+
+**** DONE Model-Tier Routing (cost optimization) 
+CLOSED: [2026-05-03 Sun 16:00]
+:PROPERTIES:
+:ID:       id-model-tier-routing
+:CREATED:  [2026-05-02 Sat 23:00]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 16:00]
+:END:
+Extend ~*model-selector*~ for quadrant-based routing with per-slot provider cascades.
+- Privacy filter (local-only for @personal content) — top priority
+- Quadrant tagging (foreground/background × probabilistic/deterministic)
+- Complexity classifier (code/plan/chat/background slots), each with its own provider cascade
+- Model-selector skill registers into $*model-selector*$ hook
+
+Deferred:
+- Economics / budget tracking (per-request cost, cumulative caps)
+- TUI /config command for cascade configuration (env vars for now)
+- Skill metadata declaring complexity at defskill time (keyword-based for now)
+- Visual model indicator in TUI status bar
+
+**** DONE Memory Scope Segmentation
+CLOSED: [2026-05-03 Sun 16:30]
+:PROPERTIES:
+:ID:       id-memory-scope-segmentation
+:CREATED:  [2026-05-02 Sat 23:00]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 16:30]
+:END:
+Extend memory-object with ~:scope~ property.
+- ~:memex~ (permanent knowledge), ~:session~ (ephemeral), ~:project~ (current work)
+- Scope-aware retrieval in memory layer
+
+**** TODO Asynchronous Embedding Gateway
+Provider-agnostic vector generation (Ollama, llama.cpp, OpenAI).
+Edits mark nodes as ~:vector :pending~; background worker batches and updates Merkle tree.
+
+**** TODO TUI Experience (Daily Driver Quality)
+The TUI is a standalone Croatoan app in ~org/gateway-tui.org~.
+None of these changes require daemon modifications — the protocol between TUI and
+daemon (port 9105, framed plists) is stable.
+
+- P0: Chat scrollback (Page Up/Down) — ~2h
+- P0: Input history (up/down arrows) — ~1h
+- P1: Status bar (daemon, model, time) — ~3h
+- P1: Message rendering (timestamps, colors, wrapping) — ~2h
+- P2: Command palette (/help redesign) — ~4h
+- P2: Multi-line input (Shift+Enter) — ~3h
+- P3: Background activity indicator — ~2h
+- P4: Tab completion for / commands — ~3h
+- P4: Configurable theme — ~4h
+
+**** DONE Human-in-the-Loop (HITL)
+CLOSED: [2026-05-03 Sun 14:00]
+Continuation-based interaction. The agent can suspend its cognitive loop to ask for
+permission or clarification and resume precisely where it left off. Builds on the
+dispatcher's existing Flight Plan mechanism.
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-03 Sun 14:00]
+:END:
 
 *** v0.4.0: Long-Horizon Planning + Git Workflows
 
 Structured tracking, failure handling, and course correction for multi-step engineering work.
 
-| Feature                | Description                                                                                                                                 |
-|------------------------+---------------------------------------------------------------------------------------------------------------------------------------------|
-| org-skill-long-horizon | Decompose tasks into Org-mode headline trees. Terminal states: =:done= / =:blocked= / =:stuck=. Parent summarises children. Branch pruning. |
-| org-skill-git-steward  | Status, diff, commit, push, branch. Policy enforces commit-before-modify.                                                                   |
-| TDD runner             | FiveAM on file save. =:test-failure= events. Hook into self-fix for auto-repair.                                                            |
-| Deep Emacs integration | Full org-agenda awareness. Navigate, clock time, refile, archive.                                                                           |
+
+**** TODO Long-Horizon Planning (task tree DAG)
+Decompose complex tasks into Org-mode headline trees.
+Terminal states: ~:todo~ → ~:next-action~ → ~:in-progress~ → ~:done~ / ~:blocked~ / ~:stuck~.
+Parent summarises child results.
+Branch pruning when paths fail.
+
+**** TODO Git Steward (version control integration)
+Status, diff, commit, push, branch operations.
+Policy enforces commit-before-modify gate.
+Log commits to memory.
+
+**** TODO TDD Runner Integration
+Run FiveAM tests on file save.
+Inject ~:test-failure~ event on red.
+Hook into self-fix for auto-repair proposals.
+
+**** TODO Deep Emacs Integration
+Full org-agenda awareness: navigate, clock time, refile, archive.
+Uses org-element + org-id.
 
 *** v0.5.0: Interactive Actuation & Environment Stewardship
 
 Interactive terminal sessions and autonomous dependency management.
 
-| Feature                  | Description                                                                                                                         |
-|--------------------------+-------------------------------------------------------------------------------------------------------------------------------------|
-| Interactive PTY Actuator | Stream long-running process output to the context window (e.g., `npm run dev`, REPLs) with async interrupt control.                 |
-| The Environment Steward  | Autonomously detect missing dependencies (e.g., "Command not found"), propose an installation command, and retry the failed action. |
+
+**** TODO Interactive PTY Actuator
+Stream long-running process output to the context window (e.g., ~npm run dev~, REPLs).
+Async interrupt control (Ctrl+C emulation).
+
+**** TODO The Environment Steward
+Autonomously detect missing dependencies ("Command not found").
+Propose installation command and retry the failed action.
 
 *** v0.6.0: Concurrency + Creator + GTD
 
+
+*v0.6.0 through v0.7.0: The Architecture Crystallizes*
+
+Skills become more deterministic. The agent learns to write its own skills - first drafts generated by the LLM, but verified and refined by the symbolic engine. Self-editing improves. The REPL becomes a first-class cognitive substrate - code is not just written but verified, iterated, tested before committing.
+
+The balance shifts. The neural engine still translates and generates, but the symbolic engine checks, constrains, and corrects. The system is becoming what Gemini called "the strict guard" - a mathematically rigorous layer intercepting probabilistic output.
+
 The agent bootstraps itself and manages parallel workstreams.
 
-| Feature                     | Description                                                                                                                           |
-|-----------------------------+---------------------------------------------------------------------------------------------------------------------------------------|
-| org-skill-sub-agent-manager | Lightweight Lisp-native sub-agents (via bordeaux-threads) that share memory but have isolated execution contexts for background work. |
-| org-skill-creator           | LLM drafts complete skill org-file from natural language. Mandatory: syntax validation → jail-load → test → register.                 |
-| org-skill-architect         | Scan =:STATUS: FROZEN= PRDs. Generate Phase B PROTOCOL.                                                                               |
-| org-skill-gtd               | Full GTD cycle: capture, clarify, organize, reflect, engage. org-gtd v4.0 DAG (=:TRIGGER:=, =:BLOCKER:=).                             |
-| Consensus loop              | Run multiple providers for critical decisions. Compare results, detect disagreements.                                                 |
-| Web research                | Headless Chromium via Python bridge. Text extraction, screenshots, Gemini Web UI automation.                                          |
+
+**** TODO Skill Creator (autonomous skill generation)
+LLM drafts complete skill org-file from natural language.
+Mandatory: syntax validation → jail-load → test → register.
+
+**** TODO Architect Agent (PRD → PROTOCOL)
+Scan ~:STATUS: FROZEN~ PRDs. Generate Phase B PROTOCOL from Phase A.
+
+**** TODO GTD Integration (project tracking)
+Full GTD cycle: capture, clarify, organize, reflect, engage.
+org-gtd v4.0 DAG (~:TRIGGER:~, ~:BLOCKER:~).
+
+**** TODO Consensus Loop (multi-model agreement)
+Run multiple providers for critical decisions.
+Compare results, detect disagreements.
+Confidence scoring.
+
+**** TODO Web Research (Playwright browsing)
+Headless Chromium via Python bridge.
+Text extraction, screenshots, Gemini Web UI automation.
+
+**** TODO Memex Management (PARA lifecycle)
+Archive DONE tasks, suggest refiling.
+Detect orphaned nodes.
+PARA/Zettelkasten maintenance.
 
 *** v0.7.0: Visual Grounding & MCP Bridge
 
 Multimodal visual interaction and ecosystem-wide tool compatibility.
 
-| Feature               | Description                                                                                                                                                |
-|-----------------------+------------------------------------------------------------------------------------------------------------------------------------------------------------|
-| Computer Use / Vision | Allow the agent to request host OS or browser screenshots, analyze the UI, and issue precise X/Y coordinate click/type commands via an X11/Wayland bridge. |
-| MCP Gateway Bridge    | Lisp-native client for the Model Context Protocol, allowing OpenCortex to connect to the entire ecosystem of external tools and data sources.              |
+
+**** TODO Computer Use / Vision
+Allow the agent to request host OS or browser screenshots.
+Analyze UI and issue precise X/Y coordinate click/type commands via X11/Wayland bridge.
+
+**** TODO MCP Gateway Bridge
+Lisp-native client for the Model Context Protocol.
+Connect Passepartout to external tools and data sources.
 
 *** v0.8.0: The Evaluation Harness
 
 Automated benchmarking to mathematically prove the agent's reasoning capabilities.
 
-| Feature           | Description                                                                                                                                    |
-|-------------------+------------------------------------------------------------------------------------------------------------------------------------------------|
-| SWE-Bench Harness | Automated pipeline that clones repositories, feeds GitHub issues, tracks the multi-step resolution trajectory, runs tests, and scores success. |
+
+**** TODO SWE-Bench Harness
+Automated pipeline that clones repositories and feeds GitHub issues.
+Track multi-step resolution trajectory, run tests, and score success.
 
 *** v1.0.0: SOTA Parity
 
-Feature-complete agent competitive with commercial agents. All features reimplemented in pure Lisp.
+Feature-complete agent competitive with commercial agents. All features from v0.2.0 through v0.8.0 combined, verified, and tested end-to-end.
 
-| Area              | Status    | Notes                                     |
-|-------------------+-----------+-------------------------------------------|
-| Self-improvement  | ✅ v0.2.0 | Self-edit + lisp-repair                   |
-| Planning          | ✅ v0.4.0 | Task tree DAGs with terminal states       |
-| Tool ecosystem    | 🟡 v0.4.0 | 10+ cognitive tools                       |
-| Context window    | ✅ v0.3.0 | Semantic search + scope segmentation      |
-| Safety            | ✅ v0.1.0 | 6 Policy invariants + formal verification |
-| Multi-step tasks  | ✅ v0.4.0 | Task trees with failure handling          |
-| Code editing      | ✅ v0.2.0 | Full org-mode file read/write             |
-| Memory            | ✅ v0.2.0 | Vector recall in org-object               |
-| Emacs integration | ✅ v0.2.0 | Full org-mode control                     |
-| Autonomy          | ✅ v0.1.0 | 100% local capable (Ollama)               |
+Achieving feature parity with commercial agents requires the full v0.x series complete. At this point, Passepartout is a reliable autonomous agent - it can handle multi-step engineering tasks, maintain context across sessions, recover from errors, pass benchmarks. It is safer than alternatives because the Bouncer is mature and the memory architecture is sound.
+
+But it is still fundamentally probabilistic at its core. The symbolic engine verifies and constrains, but the generative engine is still the primary reasoning source.
+
+
+| Area              | Parity Target                               |
+|-------------------+---------------------------------------------|
+| Self-improvement  | Claude Code self-debug                      |
+| Planning          | ULTRAPLAN equivalent                        |
+| Tool ecosystem    | 10+ cognitive tools                         |
+| Context window    | Semantic search + scope segmentation        |
+| Safety            | 6 Policy invariants + formal verification   |
+| Multi-step tasks  | Task trees with terminal states             |
+| Code editing      | Full file read/write via org manipulation   |
+| Memory            | Vector recall in memory-object              |
+| Emacs integration | Full org-mode control (exceeds Claude Code) |
+| Autonomy          | 100% local capable (exceeds Claude Code)    |
 
 *** v2.0.0: Lisp Machine Emergence
 
+
+This version is not about the symbolic engine - it is about tools. The agent stops running inside Emacs and starts replacing it. Lish (Lisp shell) emerges: a shell that speaks plists, not POSIX. Org-mode buffers become the file system. Org-babel becomes the REPL. The agent is no longer a passenger in Emacs - it is the operating system.
+
+The key insight is that the agent's interface and the agent's brain become the same thing. In earlier versions, there is a clear separation: the agent produces output, the TUI displays it. In v2.0.0, the distinction blurs. The agent's thoughts are displayed in Org buffers that are also the interface that the agent manipulates.
+
+This is the Emacs cannibalization phase. Not hostile replacement but evolution - Emacs was always a Lisp machine, and v2.0.0 completes the metamorphosis.
+
 From Lisp-using agent to true Lisp machine. Agent IS the Emacs process.
 
-| Feature | Description |
-|---------|-------------|
-| Lish: Lisp editor | Org-mode as IDE. Org-babel for interactive evaluation. Full REPL in TUI. No bridge needed. |
-| Lish: Shell replacement | Lisp-based shell that speaks plists. Org-mode buffers as file system. |
+- Lish: Lisp editor — Org-mode as IDE. Org-babel for interactive evaluation. Full REPL in TUI.
+- Lish: Shell replacement — Lisp-based shell that speaks plists. Org-mode buffers as file system.
 
 *** v3.0.0: Neurosymbolic Maturity
 
 Deterministic planner takes the wheel. LLM relegated to semantic translation.
 
-| Feature | Description |
-|---------|-------------|
-| Deterministic planner | Pure Lisp task scheduler. No LLM needed for planning. |
-| Self-correcting gates | Gates learn from false positives (user override patterns). |
+- Deterministic planner: Pure Lisp task scheduler. No LLM needed for scheduling.
+- Self-correcting gates: Gates learn from false positives (user override patterns).
+
+This is the architectural leap. The system transitions from "probabilistic engine with symbolic verification" to "symbolic engine with probabilistic input and output."
+
+The 10-80-10 architecture becomes fully realized: ten percent neural for input translation, eighty percent symbolic for reasoning against a knowledge graph, ten percent neural for output formatting. The symbolic engine maintains facts, relationships, rules, and formal proofs. When the neural engine generates something, the symbolic engine verifies it - not by checking against a blocklist, but by running the proposal through a Prolog/Datalog reasoner that understands the domain constraints.
+
+The deterministic planner takes the wheel. The LLM is no longer consulted for planning decisions - it translates human language to structured queries and structured results back to human language. The planning itself is pure Lisp: task graphs generated by a symbolic reasoner that has access to the full knowledge graph.
+
+Self-correcting gates replace the learned Bouncer rules. The system learns not just from approved exceptions but from the full history of outcomes - did the plan succeed? Where did it fail? The symbolic engine updates its own rules based on the results.
+
+The implications are significant. Hallucination becomes structurally impossible because the symbolic engine will not accept a fact that contradicts its knowledge graph. Safety becomes provable because the formal verification layer can prove properties about the system's behavior. Self-improvement becomes stable because the agent modifies skills that are then verified before execution.
 
 *** v4.0.0: AI Stack Internalized
 
 The agent understands its own weights. No external inference.
 
-| Feature | Description |
-|---------|-------------|
-| Llama.cpp in Lisp | FFI binding. No Python subprocess. Pure Common Lisp inference. |
-| Weights as sexps | Neural weights as Lisp data structures. Homoiconic model introspection. |
+- Llama.cpp in Lisp: FFI binding. No Python subprocess. Pure Common Lisp inference.
+- Weights as sexps: Neural weights as Lisp data structures. Homoiconic model introspection.
 
-*** v5.0.0: True Agency
+*** v5.0.0: Hardware
+
+The Lisp machine becomes physical. RISC-V with tagged architecture, hardware-enforced type checking, FPGA prototype for the symbolic core. The agent runs not in emulation but on silicon purpose-built for the architecture.
+
+This is the long horizon. The symbolic engine runs on logic ASICs optimized for symbolic computation. The neural engine runs on GPU or purpose-built matrix math hardware. Lisp orchestrates both, enforcing at the hardware level what it enforced at the software level in earlier versions.
+
+*** v6.0.0: True Agency
 
 World models, temporal reasoning, goal persistence across restarts.
 
-| Feature | Description |
-|---------|-------------|
-| World models | Predictive models of user behavior, project dynamics, system state. |
-| Temporal reasoning | Scheduling, deadlines, elapsed duration awareness. |
-| Goal persistence | Goals survive restarts. Long-term projects in org-objects. |
+- World models: Predictive models of user behavior, project dynamics, system state.
+- Temporal reasoning: Scheduling, deadlines, elapsed duration awareness.
+- Goal persistence: Goals survive restarts. Long-term projects in memory-objects.
+

docs/USER_MANUAL.org

@@ -1,25 +1,25 @@
-#+TITLE: OpenCortex User Manual
-#+AUTHOR: OpenCortex Contributors
+#+TITLE: Passepartout User Manual
+#+AUTHOR: Passepartout Contributors
 #+STARTUP: content
 #+FILETAGS: :docs:manual:
 
 * Introduction
-Welcome to OpenCortex v0.1.0 (The Autonomous Foundation). OpenCortex is a neurosymbolic AI agent and a Lisp Machine operating system designed to autonomously maintain your Memex (knowledge base) and interact with you via multiple, equal-citizen interfaces.
+Welcome to Passepartout v0.1.0 (The Autonomous Foundation). Passepartout is a neurosymbolic AI agent and a Lisp Machine operating system designed to autonomously maintain your Memex (knowledge base) and interact with you via multiple, equal-citizen interfaces.
 
 * Installation
-OpenCortex is bootstrapped via a single shell script.
+Passepartout is bootstrapped via a single shell script.
 
 ** Quick start (curl)
 
 #+begin_src bash
-curl -fsSL https://raw.githubusercontent.com/amrgharbeia/opencortex/main/opencortex.sh | bash -s configure
+curl -fsSL https://raw.githubusercontent.com/amrgharbeia/passepartout/main/passepartout.sh | bash -s configure
 #+end_src
 
 ** From a clone
 
 #+begin_src bash
-git clone https://github.com/amrgharbeia/opencortex.git ~/projects/opencortex
-~/projects/opencortex/opencortex.sh configure
+git clone https://github.com/amrgharbeia/passepartout.git ~/projects/passepartout
+~/projects/passepartout/passepartout.sh configure
 #+end_src
 
 Both methods will:
@@ -37,33 +37,33 @@ The system is configured via a `.env` file in the project root. Essential variab
 - `PROVIDER_CASCADE`: The fallback order for LLM providers (e.g., `openrouter,ollama,anthropic`).
 - `MEMEX_DIR`: The absolute path to your knowledge base (defaults to `~/memex`).
 
-* Interacting with OpenCortex
+* Interacting with Passepartout
 Because of the Unified Envelope Architecture, the kernel treats all clients as interchangeable. You must first boot the background daemon:
 
 #+begin_src bash
-./opencortex.sh --boot &
+./passepartout.sh --boot &
 #+end_src
 
 ** Terminal User Interface (TUI)
 For a rich, split-pane terminal experience:
 #+begin_src bash
-./opencortex.sh tui
+./passepartout.sh tui
 #+end_src
 
 ** Command Line Interface (CLI)
 For raw, pipe-friendly interaction:
 #+begin_src bash
-./opencortex.sh cli
+./passepartout.sh cli
 #+end_src
 
 ** Emacs Integration
-OpenCortex functions as your "foveal vision" inside Emacs.
+Passepartout functions as your "foveal vision" inside Emacs.
 1. Ensure `org-agent.el` is loaded.
-2. Run `M-x opencortex-connect`.
-3. Interact via the `*opencortex-chat*` buffer.
+2. Run `M-x passepartout-connect`.
+3. Interact via the `*passepartout-chat*` buffer.
 
 * The Memex Structure
-OpenCortex assumes a local folder structure representing your "Memex".
+Passepartout assumes a local folder structure representing your "Memex".
 - Core memories and identities are mapped to Org-mode files.
 - The `Scribe` background worker distills chronological logs into structured Zettelkasten notes.
 - The `Gardener` continuously repairs broken links and flags orphaned nodes.
@@ -75,9 +75,9 @@ OpenCortex assumes a local folder structure representing your "Memex".
 The ~configure~ command supports both Debian-based (Ubuntu, Pop, Mint) and Fedora-based (RHEL, Rocky) distributions. It detects your distro automatically and installs the correct packages.
 
 #+begin_src bash
-./opencortex.sh configure              # interactive
-./opencortex.sh configure --non-interactive  # headless
-./opencortex.sh configure --with-firewall    # also open port 9105
+./passepartout.sh configure              # interactive
+./passepartout.sh configure --non-interactive  # headless
+./passepartout.sh configure --with-firewall    # also open port 9105
 #+end_src
 
 After configuration, you can re-run ~configure~ any time to add providers or link gateways.
@@ -85,15 +85,15 @@ After configuration, you can re-run ~configure~ any time to add providers or lin
 ** systemd service (auto-start on boot)
 
 #+begin_src bash
-./opencortex.sh install service
+./passepartout.sh install service
 #+end_src
 
-Installs a user-level systemd unit that starts the daemon on login. Logs are available via ~journalctl --user -u opencortex.service -f~.
+Installs a user-level systemd unit that starts the daemon on login. Logs are available via ~journalctl --user -u passepartout.service -f~.
 
 To remove:
 
 #+begin_src bash
-./opencortex.sh uninstall service
+./passepartout.sh uninstall service
 #+end_src
 
 ** Docker
@@ -110,7 +110,7 @@ This builds an image from ~debian:trixie-slim~ with all dependencies pre-install
 ** Backup
 
 #+begin_src bash
-./opencortex.sh backup ~/my-backup.tar.gz
+./passepartout.sh backup ~/my-backup.tar.gz
 #+end_src
 
 Backs up the config, data, and memex directories.
@@ -118,7 +118,7 @@ Backs up the config, data, and memex directories.
 ** Restore
 
 #+begin_src bash
-./opencortex.sh restore ~/my-backup.tar.gz
+./passepartout.sh restore ~/my-backup.tar.gz
 #+end_src
 
-Restores from a backup file. Run ~opencortex doctor~ afterward to verify integrity.
+Restores from a backup file. Run ~passepartout doctor~ afterward to verify integrity.

docs/v0.2.x-REMEDIATION.org

@@ -0,0 +1,253 @@
+#+TITLE: v0.2.x Remediation Plan
+#+AUTHOR: 
+#+STARTUP: content
+#+FILETAGS: :docs:plan:remediation:
+
+* Summary
+
+Features marked DONE in the ROADMAP for v0.1.0 and v0.2.0 but whose implementations
+are stubs, no-ops, or missing critical functionality. These should have been
+completed in their respective versions and must be addressed before v0.3.0
+development proceeds.
+
+* P0: system-archivist — Proper Distillation and Link Maintenance
+
+** Claimed status**: =DONE= (v0.1.0: "Scribe + Gardener background workers" + v0.2.0: "31 org files with full literate prose")
+
+** Actual state**: =archivist-log= is a trivial log wrapper (~10 lines). No knowledge
+distillation, no broken link detection, no orphaned node flagging.
+
+** What it should do**:
+
+*** Scribe (knowledge distillation)
+1. Read daily Org log files from the Memex =daily/= directory
+2. Identify new entries (since last processed commit or timestamp)
+3. Extract conceptual claims, decisions, and atomic facts from prose
+4. Generate atomic Zettelkasten notes in =notes/= with:
+   - Descriptive snake_case filename (no dates)
+   - =:CREATED:= property from the source log's date
+   - =Source:= backlink to the original daily file and headline
+   - Tags inferred from content and parent file
+5. Track processed state to avoid re-distilling the same content
+
+*** Gardener (structural maintenance)
+1. Scan all Org files in the Memex for broken =[[file:...][...]]= links
+2. Scan =memory-store= for =memory-object= entries whose =:parent-id= or =:children=
+   references point to deleted objects (orphaned nodes)
+3. Flag broken links and orphans with =:GARDENER: broken-link= or =:GARDENER: orphan= tags
+4. Generate a maintenance report as a Org buffer the user can review
+
+*** Implementation approach
+- Wire into =system-event-orchestrator= as cron jobs:
+  - Scribe: daily cron (="<%%Y-%%m-%%d %%a +1d>"=, tier =:cognition=)
+  - Gardener: weekly cron (="<%%Y-%%m-%%d %%a +1w>"=, tier =:cognition=)
+- Use =orchestrator-register-cron= to schedule
+- Replace the trivial =archivist-log= function with real implementation
+- Track last-processed state via =memory-store= (:LATEST_PROCESSED_DATETIME property)
+  or git commit hash
+
+** Dependencies**: =system-event-orchestrator= (cron scheduling), =core-memory= (object store)
+
+** Verification**: FiveAM test that creates a daily log with known content, runs the
+Scribe, and asserts that an atomic note was created with correct backlinks.
+
+* P0: system-self-improve — Surgical Self-Editing and Self-Repair
+
+** Claimed status**: =DONE= (v0.2.0: "Self-editing (error detection, surgical fix, hot-reload)")
+
+** Actual state**: =self-improve-edit= does =(declare (ignore old-text new-text))= followed by
+a log message — no actual text transformation. =self-improve-fix= same pattern.
+The skill's trigger is =nil= so it never fires.
+
+** What it should do**:
+
+*** Self-edit (surgical text replacement)
+1. Accept (=filepath=, =old-text=, =new-text=) and apply the transformation
+2. Read the file, locate =old-text= (with exact match verification), replace with =new-text=
+3. If the target is an Org file with a =#+begin_src lisp= block, tangling the file
+   and reloading the skill after edit
+4. Create a memory snapshot before editing (rollback safety)
+5. Verify the edit succeeded (re-read file, confirm =new-text= appears)
+6. Return success/failure with a diff summary
+
+*** Self-fix (error diagnosis and repair)
+1. Accept (=skill-name=, =error-log=) and diagnose the failure
+2. Parse the error log for: syntax errors (unmatched parens, invalid forms),
+   undefined symbol references, semantic issues (prohibited forms)
+3. For syntax errors: locate the problematic region, propose a correction
+   using structural Lisp knowledge
+4. For undefined references: check if the symbol exists in another package,
+   if the skill's =#+DEPENDS_ON:= declaration is missing a dependency
+5. For semantic issues: identify the prohibited operation and suggest alternatives
+6. Invoke =self-improve-edit= to apply the fix
+7. After repair, run the skill's tests if they exist; if tests pass, hot-reload
+
+*** Implementation approach
+- Add an actual =:trigger= function that activates on =:ERROR= or =:STUCK= signal types
+- =self-improve-edit=: use =uiop:read-file-string=, string replacement with
+  =ppcre:regex-replace= or substring operations, write back with =with-open-file=
+- =self-improve-fix=: add structural analysis in =programming-lisp.lisp= for error parsing
+- Leverage the REPL skill for verification after repair (call =lisp-eval= on the fixed code block)
+
+** Dependencies**: =programming-lisp= (lisp-structural-check), =programming-org= (tangling),
+=core-memory= (snapshot-memory), =core-skills= (jailed reload)
+
+** Verification**: FiveAM test that creates a file with known content, calls self-improve-edit,
+and asserts the replacement was applied. Second test with a file containing a
+deliberate error, calls self-improve-fix, and asserts the error was corrected.
+
+* P1: system-event-orchestrator — Bootstrap Implementation
+
+** Claimed status**: v0.3.0 partially DONE ("hook-registry + cron-registry + tier classifier")
+
+** Actual state**: Hook/cron registries, tier dispatching, and heartbeat integration work.
+But =orchestrator-bootstrap= is a stub: =(log-message "ORCHESTRATOR: Bootstrap complete")=
+
+** What it should do**:
+
+1. Scan the Memex =projects/= and =notes/= directories for Org files containing =#+HOOK:= properties
+2. For each =#+HOOK:= property found, call =orchestrator-register-hook= with
+   the hook name and a gate function
+3. For files with =#+CRON:= properties (or cron expressions in timestamps),
+   register them via =orchestrator-register-cron=
+4. Log the count of registered hooks and cron jobs at completion
+5. Run bootstrap once at startup (after memory is loaded but before cognitive loop begins)
+
+*** Implementation approach
+- Use =uiop:directory-files= with glob patterns for =*.org= files
+- Use =org-element= from Emacs (via =emacs-bridge= or =org-eval= skill) for parsing,
+  or implement a simple regex-based Org property parser in Lisp
+- Walk each file's headlines, extract property drawers, filter for =HOOK:= and =CRON:= keys
+- Call existing =orchestrator-register-hook= / =orchestrator-register-cron=
+
+** Dependencies**: =programming-org= (Org file parsing), file system access
+
+** Verification**: Create a test Org file with =#+HOOK: on-write=, run bootstrap,
+assert the hook registry contains the expected entry.
+
+* P1: system-memory — Memory Introspection
+
+** Claimed status**: Skill exists but was never part of a version milestone.
+
+** Actual state**: =memory-inspect= is a no-op: =(log-message "MEMORY: Self-inspection triggered.")=
+The =:trigger= is =nil= so the skill never activates.
+
+** What it should do**:
+
+1. Return a structured report of memory state:
+   - Total objects in =*memory-store*=
+   - Distribution by type (=:HEADLINE=, =:PARAGRAPH=, etc.)
+   - Distribution by =:TODO-STATE= (=TODO=, =NEXT=, =DONE=, etc.)
+   - Count of privacy-filtered objects
+   - Most recent objects (by =:version= timestamp)
+   - Current snapshot count and timestamps
+   - Orphaned objects (parent-id references a deleted ID)
+2. Accept an optional filter to narrow the report (by type, by tag, by time range)
+3. Wire the trigger to activate on =:INTROSPECTION= signal type or =/memory= commands
+
+*** Implementation approach
+- Iterate =*memory-store*= with =maphash=, collect statistics
+- Add to skill trigger: =(eq (getf (getf ctx :payload) :sensor) :introspection)=
+- Return results as a plist that can be rendered in the TUI
+
+** Dependencies**: =core-memory= (memory-store and memory-object struct)
+
+** Verification**: Ingest known objects, call memory-inspect, assert type counts and
+object counts match.
+
+* P2: core-context — Semantic Retrieval (Embeddings)
+
+** Claimed status**: The foveal-peripheral model is implemented and tested, but the
+embedding pipeline that feeds it is listed as TODO for v0.3.0.
+
+** Actual state**: The context rendering code (=context-object-render=) computes
+=cosine-similarity= correctly, but =org-object-vector= is never populated.
+All objects have =nil= vectors, all similarities are =0.0=, and the model
+falls back to "include everything within depth 2." This is functionally
+equivalent to no retrieval at all.
+
+** What it should do**:
+
+1. Add a =populate-vector= function to =core-memory= that calls an embedding
+   provider and stores the result in the =memory-object= =:vector= slot
+2. At ingest time (=ingest-ast=), generate embeddings for new objects
+3. Embedding provider options (in priority order):
+   - Ollama (local, =nomic-embed-text= or =mxbai-embed-large=)
+   - OpenAI-compatible embedding API (=text-embedding-3-small=)
+   - Fallback: TF-IDF bag-of-words vector (no external dependency)
+4. Updates: when =memory-object= content changes, mark =:vector= as =:pending=
+   and process in a background batch via the event orchestrator
+5. Add an environment variable =EMBEDDING_PROVIDER= with default =ollama=
+
+*** Implementation approach
+- Add an =:embedding-provider= function stored in =*config*=
+- =embed-object=: take content string → call provider → store float vector
+- Modify =ingest-ast= to call =embed-object= on each new object
+- Add batch processing in =system-event-orchestrator= for vector updates
+- Use =bordeaux-threads= with a lock for async embedding generation
+
+** Dependencies**: External embedding provider (Ollama or API), =core-memory= (vector slot)
+
+** Verification**: Create objects with content, run embedding pipeline, assert vectors
+are non-nil and have the correct dimensionality. Verify that =cosine-similarity=
+between semantically similar objects exceeds 0.75 threshold.
+
+* P2: core-context — Subtree-Based Skill Source Loading
+
+** Claimed status**: DESIGN_DECISIONS §"Org-Mode as Unified AST" describes: "When the
+agent needs information about the =openctl-db= function, it queries for the
+=openctl-db= subtree specifically."
+
+** Actual state**: =context-skill-source= reads the ENTIRE Org file as a string via
+=uiop:read-file-string=. No subtree query exists.
+
+** What it should do**:
+
+1. Add a =context-skill-subtree= function that takes (=skill-name=, =heading-name=)
+   and returns only the content under that headline
+2. Add a =context-skill-function-signature= function that returns only the function
+   name, lambda list, and docstring
+3. Add a =context-skill-tests= function that returns only test blocks
+4. Modify =context-skill-source= to optionally accept a =:subtree= keyword argument
+5. If the Org file has an Org-element parser available, use it for structural queries;
+   otherwise fall back to regex-based headline matching
+
+*** Implementation approach
+- Use =org-element= via =org-eval= skill (REPL bridge to Emacs) if available
+- Lisp-native fallback: parse Org headlines with regex (=^*+ = pattern),
+   match heading name by string comparison, extract content until next
+   headline of equal or higher level
+- Cache parsed results to avoid re-parsing on repeated queries
+
+** Dependencies**: =programming-org= (Org parsing utilities), =emacs-bridge= (if Emacs
+Org-element is preferred)
+
+** Verification**: Create a test Org file with multiple headlines, query for a specific
+subtree, assert only that subtree's content is returned.
+
+* Priority and Sequencing
+
+The remediation should proceed in this order:
+
+1. **system-event-orchestrator bootstrap** (P1) — needed as infrastructure for Scribe/Gardener cron scheduling
+2. **system-archivist** (P0) — depends on orchestrator for cron scheduling
+3. **system-self-improve** (P0) — independent, can proceed in parallel with #2
+4. **core-context embeddings** (P2) — independent, unlocks semantic retrieval
+5. **core-context subtree loading** (P2) — independent, improves context efficiency
+6. **system-memory inspect** (P1) — lowest priority, nice-to-have introspection
+
+P0 items must be completed before v0.3.0 development begins. P1 items should be
+completed before v0.3.0 is released. P2 items can extend into early v0.3.0.
+
+* Out of Scope
+
+Features listed as TODO in the ROADMAP for v0.3.0+ are NOT in this remediation
+plan. Specifically excluded:
+
+- HITL continuation-based suspension (v0.3.0 TODO)
+- Model-tier routing / cost optimization (v0.3.0 TODO)
+- Memory scope segmentation (v0.3.0 TODO)
+- Long-horizon planning / task trees (v0.4.0 TODO)
+- Shadow simulation mode (not on roadmap, aspirational)
+- Formal verification of dispatcher rules (not on roadmap, aspirational)
+- Bouncer rule learning from HITL decisions (not on roadmap, aspirational)

harness/act.lisp

@@ -1,133 +0,0 @@
-(in-package :opencortex)
-
-(defvar *default-actuator* :cli
-  "The actuator used when no explicit target is specified.")
-
-(defvar *silent-actuators* '(:cli :system-message :emacs)
-  "List of actuators that don't generate tool-output feedback.")
-
-(defun initialize-actuators ()
-  "Register core actuators and load configuration."
-  (let ((def (uiop:getenv "DEFAULT_ACTUATOR"))
-        (silent (uiop:getenv "SILENT_ACTUATORS")))
-    (when def
-      (setf *default-actuator* (intern (string-upcase def) :keyword)))
-    (when silent
-      (setf *silent-actuators*
-            (mapcar (lambda (s) (intern (string-upcase (string-trim '(#\Space) s)) :keyword))
-                    (uiop:split-string silent :separator '(#\,))))))
-
-  (register-actuator :system #'execute-system-action)
-  (register-actuator :tool #'execute-tool-action)
-
-  (register-actuator :tui (lambda (action context)
-                            (declare (ignore context))
-                            (let* ((meta (getf action :meta))
-                                   (stream (getf meta :reply-stream)))
-                              (when (and stream (open-stream-p stream))
-                                (format stream "~a" (frame-message action))
-                                (finish-output stream))))))
-
-(defun dispatch-action (action context)
-  "Route an approved action to its registered actuator."
-  (let ((payload (proto-get action :payload)))
-    (when (eq (proto-get payload :sensor) :heartbeat)
-      (return-from dispatch-action nil))
-
-    (when (and action (listp action))
-      (let* ((meta (proto-get context :meta))
-             (source (proto-get meta :source))
-             (raw-target (or (proto-get action :target) source *default-actuator*))
-             (target (intern (string-upcase (string raw-target)) :keyword))
-             (actuator-fn (gethash target *actuator-registry*)))
-        (when (and meta (null (getf action :meta)))
-          (setf (getf action :meta) meta))
-        (if actuator-fn
-            (funcall actuator-fn action context)
-            (harness-log "ACT ERROR: No actuator registered for '~s'" target))))))
-
-(defun execute-system-action (action context)
-  "Execute internal harness commands."
-  (declare (ignore context))
-  (let* ((payload (getf action :payload))
-         (cmd (getf payload :action)))
-    (case cmd
-      (:eval
-       (eval (read-from-string (getf payload :code))))
-      (:message
-       (harness-log "ACT [System]: ~a" (getf payload :text)))
-      (t
-       (harness-log "ACT ERROR [System]: Unknown command '~s'" cmd)))))
-
-(defun execute-tool-action (action context)
-  "Execute a registered cognitive tool."
-  (let* ((payload (getf action :payload))
-         (tool-name (getf payload :tool))
-         (tool-args (getf payload :args))
-         (depth (getf context :depth 0))
-         (meta (getf context :meta))
-         (source (getf meta :source))
-         (tool (gethash (string-downcase (string tool-name)) *cognitive-tools*)))
-    (if tool
-        (handler-case
-            (let* ((clean-args (if (and (listp tool-args) (listp (car tool-args))) (car tool-args) tool-args))
-                   (result (funcall (cognitive-tool-body tool) clean-args)))
-              (when source
-                (dispatch-action (list :TYPE :REQUEST :TARGET source 
-                                       :PAYLOAD (list :ACTION :MESSAGE :TEXT (format-tool-result tool-name result)))
-                                context))
-              (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
-                    :PAYLOAD (list :SENSOR :tool-output :RESULT result :TOOL tool-name)))
-          (error (c)
-            (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
-                  :PAYLOAD (list :SENSOR :tool-error :TOOL tool-name :MESSAGE (format nil "~a" c)))))
-        (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
-              :PAYLOAD (list :SENSOR :tool-error :MESSAGE (format nil "Tool '~a' not found" tool-name))))))
-
-(defun format-tool-result (tool-name result)
-  "Format a tool result for display."
-  (if (listp result)
-      (let ((status (getf result :status))
-            (content (getf result :content))
-            (msg (getf result :message)))
-        (cond
-          ((and (eq status :success) content) (format nil "~a" content))
-          ((and (eq status :error) msg) (format nil "ERROR [~a]: ~a" tool-name msg))
-          (t (format nil "TOOL [~a] RESULT: ~s" tool-name result))))
-      (format nil "TOOL [~a] RESULT: ~a" tool-name result)))
-
-(defun act-gate (signal)
-  "Final stage of the metabolic pipeline: Actuation."
-  (let* ((approved (getf signal :approved-action))
-         (type (getf signal :type))
-         (meta (getf signal :meta))
-         (source (getf meta :source))
-         (feedback nil))
-    (when approved
-      (let* ((original-type (getf approved :type))
-             (verified (deterministic-verify approved signal)))
-        (if (and (listp verified) (member (getf verified :type) '(:LOG :EVENT)) (not (member original-type '(:LOG :EVENT))))
-            (progn
-              (harness-log "ACT BLOCKED: Action failed last-mile deterministic check.")
-              (setf (getf signal :approved-action) nil)
-              (setf feedback verified))
-            (progn
-              (setf (getf signal :approved-action) verified)
-              (setf approved verified)))))
-
-    (case type
-      (:REQUEST (dispatch-action signal signal))
-      (:LOG (dispatch-action signal signal))
-      (:EVENT
-       (if approved
-           (let* ((target (getf approved :target))
-                  (result (dispatch-action approved signal)))
-             (cond
-               ((and (listp result) (member (getf result :type) '(:EVENT :LOG)))
-                (setf feedback result))
-               ((and result (not (member target *silent-actuators*)))
-                (setf feedback (list :type :EVENT :depth (1+ (getf signal :depth 0)) :meta meta
-                                    :payload (list :sensor :tool-output :result result :tool approved))))))
-           (when source (dispatch-action signal signal)))))
-    (setf (getf signal :status) :acted)
-    feedback))

harness/communication-validator.lisp

@@ -1,9 +0,0 @@
-(in-package :opencortex)
-
-(defun validate-communication-protocol-schema (msg)
-  "Strict structural validation for incoming protocol messages."
-  (unless (listp msg) (error "Message must be a plist"))
-  (let ((type (proto-get msg :type)))
-    (unless (member type '(:REQUEST :EVENT :RESPONSE :LOG :STATUS))
-      (error "Invalid message type '~a'" type))
-    t))

harness/communication.org

@@ -1,186 +0,0 @@
-#+TITLE: Communication Protocol (communication.lisp)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:protocol:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle communication.lisp
-
-* Overview
-The ~communication.lisp~ module defines the low-level transport and framing logic for OpenCortex stimuli.
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** Actuator Registry
-#+begin_src lisp
-(defvar *actuator-registry* (make-hash-table :test 'equalp)
-  "Global registry mapping target keywords to their physical actuator functions.")
-
-(defun register-actuator (name fn) 
-  "Registers an actuator function. Actuators receive: (ACTION CONTEXT)."
-  (let ((key (if (keywordp name) name (intern (string-upcase (string name)) :keyword))))
-    (setf (gethash key *actuator-registry*) fn)))
-#+end_src
-
-** Message Framing
-#+begin_src lisp
-(defun sanitize-protocol-message (msg)
-  "Recursively strips non-serializable objects from a protocol plist."
-  (if (and msg (listp msg))
-      (let ((clean nil))
-        (loop for (k v) on msg by #'cddr
-              do (unless (member k '(:reply-stream :socket :stream))
-                   (push k clean)
-                   (push (if (listp v) (sanitize-protocol-message v) v) clean)))
-        (nreverse clean))
-      msg))
-
-(defun frame-message (msg)
-  "Serializes a message plist and prefixes it with a 6-character hex length."
-  (let* ((sanitized (sanitize-protocol-message msg))
-         (payload (let ((*print-pretty* nil) (*read-eval* nil)) (format nil "~s" sanitized)))
-         (len (length payload)))
-    (format nil "~6,'0x~a" len payload)))
-
-(defun read-framed-message (stream)
-  "Reads a hex-length prefixed S-expression from the stream securely."
-  (let ((length-buffer (make-string 6)))
-    (handler-case
-        (progn
-          (loop for char = (peek-char nil stream nil :eof)
-                while (and (not (eq char :eof)) (member char '(#\Space #\Newline #\Tab #\Return)))
-                do (read-char stream))
-          (let ((count (read-sequence length-buffer stream)))
-            (if (< count 6)
-                :eof
-                (let ((len (ignore-errors (parse-integer length-buffer :radix 16))))
-                  (if (not len)
-                      :error
-                      (let ((msg-buffer (make-string len)))
-                        (read-sequence msg-buffer stream)
-                        (let ((*read-eval* nil))
-                          (handler-case (read-from-string msg-buffer)
-                            (error () :error)))))))))
-      (error () :error))))
-#+end_src
-
-** Server Listener (start-daemon)
-#+begin_src lisp
-(defvar *server-socket* nil)
-
-(defun handle-client-connection (socket)
-  "Handles a single TUI/CLI client connection in a dedicated thread."
-  (let ((stream (usocket:socket-stream socket)))
-    (handler-case
-        (progn
-          (format stream "~a" (frame-message (make-hello-message "0.2.0")))
-          (finish-output stream)
-          (loop
-            (let ((msg (read-framed-message stream)))
-              (cond
-                ((eq msg :eof) (return))
-                ((eq msg :error) (return))
-                ((eq (getf msg :type) :health-check)
-                 ;; Handle health check request
-                 (let ((health-msg (list :type :health-response 
-                                          :status (or (and (boundp 'opencortex::*system-health*) 
-                                                          (symbol-value 'opencortex::*system-health*))
-                                                      :unknown)
-                                          :checked-p (or (and (boundp 'opencortex::*health-check-ran*)
-                                                              (symbol-value 'opencortex::*health-check-ran*))
-                                                      nil))))
-                   (format stream "~a" (frame-message health-msg))
-                   (finish-output stream)))
-                (t (inject-stimulus msg :stream stream))))))
-      (error (c) (harness-log "CLIENT ERROR: ~a" c)))
-    (ignore-errors (usocket:socket-close socket))))
-
-(defun start-daemon (&key (port 9105))
-  "Starts the network listener for TUI/CLI clients."
-  (setf *server-socket* (usocket:socket-listen "127.0.0.1" port :reuse-address t))
-  (harness-log "DAEMON: Listening on localhost:~a" port)
-  (bt:make-thread
-   (lambda ()
-     (loop
-       (let ((client-socket (usocket:socket-accept *server-socket*)))
-         (when client-socket
-           (bt:make-thread (lambda () (handle-client-connection client-socket))
-                          :name "opencortex-client-handler")))))
-   :name "opencortex-server-listener"))
-#+end_src
-
-** Handshake Logic
-#+begin_src lisp
-(defun make-hello-message (version)
-  "Constructs the standard HELLO handshake message."
-  (list :TYPE :EVENT 
-        :PAYLOAD (list :ACTION :handshake 
-                       :VERSION version 
-                       :CAPABILITIES '(:AUTH :ORG-AST))))
-#+end_src
-
-** Structural Validation
-#+begin_src lisp :tangle communication-validator.lisp
-(in-package :opencortex)
-
-(defun validate-communication-protocol-schema (msg)
-  "Strict structural validation for incoming protocol messages."
-  (unless (listp msg) (error "Message must be a plist"))
-  (let ((type (proto-get msg :type)))
-    (unless (member type '(:REQUEST :EVENT :RESPONSE :LOG :STATUS))
-      (error "Invalid message type '~a'" type))
-    t))
-#+end_src
-
-** Protocol Smoke Test (manual for REPL evaluation)
-The following script connects to a running daemon, sends "hi", and reads the response. Useful for verifying the daemon is alive and the framing protocol works end-to-end.
-
-#+begin_src lisp :tangle no
-(defun test-daemon-protocol ()
-  (handler-case
-      (let* ((socket (usocket:socket-connect "127.0.0.1" 9105))
-             (stream (usocket:socket-stream socket)))
-        (format t "Connected.~%")
-        (let* ((len-buf (make-string 6))
-               (count (read-sequence len-buf stream)))
-          (when (= count 6)
-            (let* ((len (parse-integer len-buf :radix 16))
-                   (msg-buf (make-string len)))
-              (read-sequence msg-buf stream)
-              (format t "HELLO: ~a~%" msg-buf))))
-        (let* ((msg '(:TYPE :EVENT :META (:SOURCE :tui) :PAYLOAD (:SENSOR :user-input :TEXT "hi")))
-               (framed (frame-message msg)))
-          (format stream "~a" framed)
-          (finish-output stream)
-          (let* ((len-buf (make-string 6))
-                 (count (read-sequence len-buf stream)))
-            (when (= count 6)
-              (let* ((len (parse-integer len-buf :radix 16))
-                     (msg-buf (make-string len)))
-                (read-sequence msg-buf stream)
-                (format t "Response: ~a~%" msg-buf)))))
-        (usocket:socket-close socket))
-    (error (c) (format t "Error: ~a~%" c))))
-#+end_src
-
-* Test Suite
-#+begin_src lisp :tangle ../tests/communication-tests.lisp
-(eval-when (:compile-toplevel :load-toplevel :execute)
-  (ql:quickload :fiveam :silent t))
-
-(defpackage :opencortex-communication-tests
-  (:use :cl :fiveam :opencortex)
-  (:export #:communication-protocol-suite))
-(in-package :opencortex-communication-tests)
-
-(def-suite communication-protocol-suite :description "Communication Protocol Suite")
-(in-suite communication-protocol-suite)
-
-(test test-framing
-  (let* ((msg '(:type :EVENT :payload (:action :handshake)))
-         (framed (frame-message msg)))
-    (is (string= "00002C" (string-upcase (subseq framed 0 6))))))
-#+end_src

harness/context.lisp

@@ -1,148 +0,0 @@
-(in-package :opencortex)
-
-(defun context-query-store (&key tag todo-state type)
-  "Filters the Memory based on tags, todo states, or types."
-  (let ((results nil))
-    (maphash (lambda (id obj)
-               (declare (ignore id))
-               (let* ((attrs (org-object-attributes obj)) (state (getf attrs :TODO-STATE)) (match t))
-                 (when (and type (not (eq (org-object-type obj) type))) (setf match nil))
-                 (when tag (unless (search tag (format nil "~a" (getf attrs :TAGS)) :test #'string-equal) (setf match nil)))
-                 (when (and todo-state (not (equal state todo-state))) (setf match nil))
-                 (when match (push obj results))))
-             *memory*)
-    results))
-
-(defun context-get-active-projects ()
-  "Returns headlines tagged as 'project' that are not yet marked DONE."
-  (remove-if (lambda (obj) (equal (getf (org-object-attributes obj) :TODO-STATE) "DONE"))
-             (context-query-store :tag "project" :type :HEADLINE)))
-
-(defun context-get-recent-completed-tasks () 
-  "Retrieves recently finished tasks from the store."
-  (context-query-store :todo-state "DONE" :type :HEADLINE))
-
-(defun context-list-all-skills ()
-  "Provides a sorted overview of currently loaded system capabilities."
-  (let ((results nil))
-    (maphash (lambda (name skill)
-               (declare (ignore name))
-               (push (list :name (skill-name skill) :priority (skill-priority skill) :dependencies (skill-dependencies skill)) results))
-             *skills-registry*)
-    (sort results #'> :key (lambda (x) (getf x :priority)))))
-
-(defun context-get-skill-source (skill-name)
-  "Reads the raw literate source of a specific skill for inspection."
-  (let* ((filename (format nil "~a.org" skill-name))
-         (data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "OC_DATA_DIR") (namestring (merge-pathnames ".local/share/opencortex/" (user-homedir-pathname))))))
-         (skills-dir (merge-pathnames "skills/" data-dir))
-         (full-path (merge-pathnames filename skills-dir)))
-    (if (uiop:file-exists-p full-path) (uiop:read-file-string full-path) nil)))
-
-(defun context-get-system-logs (&optional limit)
-  "Retrieves the most recent lines from the harness's internal log."
-  (let ((log-limit (or limit (ignore-errors (parse-integer (uiop:getenv "CONTEXT_LOG_LIMIT"))) 20)))
-    (bt:with-lock-held (*logs-lock*)
-      (let ((count (min log-limit (length *system-logs*)))) 
-        (subseq *system-logs* 0 count)))))
-
-(defun context-render-to-org (obj &key (depth 1) (foveal-id nil) semantic-threshold (foveal-vector nil))
-  "Recursively renders an org-object and its children to an Org string using a Foveal-Peripheral Hybrid model."
-  (let* ((id (org-object-id obj))
-         (is-foveal (equal id foveal-id))
-         (title (or (getf (org-object-attributes obj) :TITLE) "Untitled"))
-         (content (org-object-content obj))
-         (children (org-object-children obj))
-         (stars (make-string depth :initial-element #\*))
-         (obj-vector (org-object-vector obj))
-         (threshold (or semantic-threshold (ignore-errors (read-from-string (uiop:getenv "CONTEXT_SEMANTIC_THRESHOLD"))) 0.75))
-         (similarity (if (and foveal-vector obj-vector (not is-foveal))
-                         (cosine-similarity foveal-vector obj-vector)
-                         0.0))
-         (is-semantically-relevant (>= similarity threshold))
-         (should-render (or (<= depth 2) is-foveal is-semantically-relevant))
-         (output ""))
-    
-    (when should-render
-      (setf output (format nil "~a ~a~%:PROPERTIES:~%:ID: ~a~%" stars title id))
-      (when is-semantically-relevant
-        (setf output (concatenate 'string output (format nil ":SEMANTIC_SCORE: ~,2f~%" similarity))))
-      (setf output (concatenate 'string output (format nil ":END:~%")))
-      
-      (when (and content (or is-foveal is-semantically-relevant))
-        (setf output (concatenate 'string output content (string #\Newline))))
-      
-      (dolist (child-id children)
-        (let ((child-obj (lookup-object child-id)))
-          (when child-obj
-            (let ((next-foveal (if is-foveal child-id foveal-id)))
-              (setf output (concatenate 'string output 
-                                        (context-render-to-org child-obj 
-                                                               :depth (1+ depth) 
-                                                               :foveal-id next-foveal
-                                                               :semantic-threshold threshold
-                                                               :foveal-vector foveal-vector))))))))
-    output))
-
-(defun context-resolve-path (path-string)
-  "Expands environment variables and strips literal quotes from a path string."
-  (let ((path (if (stringp path-string) 
-                  (string-trim '(#\" #\' #\Space) path-string)
-                  path-string)))
-    (if (and (stringp path) (search "$" path))
-        (let ((result path))
-          (ppcre:do-register-groups (var-name) ("\\$([A-Za-z0-9_]+)" path)
-            (let ((var-val (uiop:getenv var-name)))
-              (when var-val
-                (setf result (ppcre:regex-replace (format nil "\\$~a" var-name) result var-val)))))
-          result)
-        path)))
-
-(defun context-object-privacy-filtered-p (obj)
-  "Returns T if an org-object's :TAGS attribute matches bouncer-privacy-tags."
-  (let* ((attrs (org-object-attributes obj))
-         (tags (getf attrs :TAGS))
-         (privacy-tags (and (find-package :opencortex.skills.org-skill-bouncer)
-                            (symbol-value
-                             (find-symbol "BOUNCER-PRIVACY-TAGS"
-                                          :opencortex.skills.org-skill-bouncer)))))
-    (when (and tags privacy-tags)
-      (let ((tag-list (if (listp tags) tags (list tags))))
-        (some (lambda (tag)
-                (some (lambda (private)
-                        (string-equal (string-trim '(#\:) tag)
-                                      (string-trim '(#\:) private)))
-                      privacy-tags))
-              tag-list)))))
-
-(defun context-object-privacy-filtered-p (obj)
-  "Returns T if an org-object's :TAGS attribute matches bouncer-privacy-tags."
-  (let* ((attrs (org-object-attributes obj))
-         (tags (getf attrs :TAGS))
-         (privacy-tags (and (find-package :opencortex.skills.org-skill-bouncer)
-                            (symbol-value
-                             (find-symbol "BOUNCER-PRIVACY-TAGS"
-                                          :opencortex.skills.org-skill-bouncer)))))
-    (when (and tags privacy-tags)
-      (let ((tag-list (if (listp tags) tags (list tags))))
-        (some (lambda (tag)
-                (some (lambda (private)
-                        (string-equal (string-trim '(#\:) tag)
-                                      (string-trim '(#\:) private)))
-                      privacy-tags))
-              tag-list)))))
-
-(defun context-assemble-global-awareness (&optional signal)
-  "Produces a high-level skeletal outline of the current Memory for the LLM.
-Privacy-filtered objects (matching *privacy-filter-tags*) are excluded."
-  (let* ((foveal-id (or (getf signal :foveal-focus) 
-                        (ignore-errors (getf (getf signal :payload) :target-id))))
-         (all-projects (context-get-active-projects))
-         (projects (remove-if #'context-object-privacy-filtered-p all-projects))
-         (output (format nil "GLOBAL MEMEX AWARENESS (Peripheral Vision):~%")))
-    (if projects
-        (dolist (project projects)
-          (setf output (concatenate 'string output
-                                    (context-render-to-org project :foveal-id foveal-id))))
-        (setf output (concatenate 'string output "No active projects found.~%")))
-    output))

harness/doctor.lisp

@@ -1,81 +0,0 @@
-(in-package :opencortex)
-
-(defvar *doctor-required-binaries* '("sbcl" "emacs" "git" "socat" "nc")
-  "List of external binaries required for full system operation.")
-
-(defun doctor-check-dependencies ()
-  "Verifies that required external binaries are available in the PATH via a shell probe."
-  (let ((all-ok t))
-    (harness-log "DOCTOR: Checking system dependencies...")
-    (dolist (dep *doctor-required-binaries*)
-      (let ((path (ignore-errors 
-                    (uiop:run-program (list "which" dep) 
-                                      :output :string :ignore-error-status t))))
-        (if (and path (> (length path) 0))
-            (harness-log "  [OK] Found ~a" dep)
-            (progn
-              (harness-log "  [FAIL] Missing binary: ~a" dep)
-              (setf all-ok nil)))))
-    all-ok))
-
-(defun doctor-check-env ()
-  "Validates XDG directories and environment configuration against the POSIX standard."
-  (harness-log "DOCTOR: Checking XDG environment...")
-  (let ((all-ok t)
-        (config-dir (uiop:getenv "OC_CONFIG_DIR"))
-        (data-dir (uiop:getenv "OC_DATA_DIR"))
-        (state-dir (uiop:getenv "OC_STATE_DIR"))
-        (memex-dir (uiop:getenv "MEMEX_DIR")))
-    
-    (flet ((check-dir (name path critical)
-             (if (and path (> (length path) 0))
-                 (if (uiop:directory-exists-p path)
-                     (harness-log "  [OK] ~a: ~a" name path)
-                     (progn
-                       (harness-log "  [FAIL] ~a directory missing: ~a" name path)
-                       (when critical (setf all-ok nil))))
-                 (progn
-                   (harness-log "  [FAIL] ~a variable not set." name)
-                   (when critical (setf all-ok nil))))))
-
-      (check-dir "Config (OC_CONFIG_DIR)" config-dir t)
-      (check-dir "Data (OC_DATA_DIR)" data-dir t)
-      (check-dir "State (OC_STATE_DIR)" state-dir t)
-      (check-dir "Memex (MEMEX_DIR)" memex-dir t))
-    all-ok))
-
-(defun doctor-check-llm ()
-  "Tests connectivity to primary LLM providers. Non-critical fallback allowed."
-  (harness-log "DOCTOR: Checking LLM connectivity...")
-  (let ((openrouter-key (uiop:getenv "OPENROUTER_API_KEY")))
-    (if (and openrouter-key (> (length openrouter-key) 0))
-        (progn
-          (harness-log "  [OK] OpenRouter API Key detected.")
-          t)
-        (progn
-          (harness-log "  [WARN] No OpenRouter API Key. Falling back to local inference only.")
-          t))))
-
-(defun doctor-run-all ()
-  "Executes the full diagnostic suite and returns T if system is healthy."
-  (harness-log "==================================================")
-  (harness-log " OPENCORTEX DOCTOR: Commencing Health Check")
-  (harness-log "==================================================")
-  (let ((dep-ok (doctor-check-dependencies))
-        (env-ok (doctor-check-env))
-        (llm-ok (doctor-check-llm)))
-    (declare (ignore llm-ok))
-    (harness-log "==================================================")
-    (if (and dep-ok env-ok)
-        (progn
-          (harness-log " ✓ SYSTEM HEALTHY: Ready for ignition.")
-          t)
-        (progn
-          (harness-log " ✗ SYSTEM UNHEALTHY: Fix the errors above.")
-          nil))))
-
-(defun doctor-main ()
-  "Entry point for the 'doctor' CLI command."
-  (if (doctor-run-all)
-      (uiop:quit 0)
-      (uiop:quit 1)))

harness/doctor.org

@@ -1,163 +0,0 @@
-#+PROPERTY: header-args:lisp :tangle doctor.lisp
-#+TITLE: System Diagnostic Doctor (doctor.org)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:setup:diagnostic:
-#+STARTUP: content
-
-* Overview
-The *System Doctor* is the primary diagnostic utility for the OpenCortex. Its purpose is to transform opaque startup failures into actionable engineering reports. 
-
-By centralizing environment validation, we ensure that the "Brain" never attempts to boot in a compromised or incomplete state.
-
-* Phase A: Demand (Thinking)
-** The XDG Standard Rationale
-To ensure OpenCortex behaves as a first-class POSIX citizen, we adopt the **XDG Base Directory Specification**. This separates the system into four logical layers:
-
-1. **Configuration (`~/.config/opencortex`)**: User-editable settings and secrets.
-2. **Data (`~/.local/share/opencortex`)**: Tangled Lisp engine artifacts (immutable by user).
-3. **State (`~/.local/state/opencortex`)**: Dynamic persistence like brain snapshots.
-4. **Bin (`~/.local/bin`)**: The CLI shim for global invocation.
-
-** The Detection Invariant: Shell Probing
-Common Lisp's `getenv` is strictly typed in SBCL. The Doctor must ensure that missing variables are handled as logic failures, not type crashes. Furthermore, binary detection must use a shell probe (`command -v` or `which`) to account for varying `$PATH` inheritance between interactive and headless sessions.
-
-* Phase B: Protocol (Success Criteria)
-
-** Package Context
-#+begin_src lisp :tangle ../tests/doctor-tests.lisp
-(defpackage :opencortex-doctor-tests
-  (:use :cl :fiveam :opencortex)
-  (:export #:doctor-suite))
-
-(in-package :opencortex-doctor-tests)
-
-(def-suite doctor-suite :description "Verification of the System Doctor diagnostic logic")
-(in-suite doctor-suite)
-#+end_src
-
-** Dependency Tests
-#+begin_src lisp :tangle ../tests/doctor-tests.lisp
-(test test-dependency-check-fail
-  "Verify that missing binaries are correctly identified as failures."
-  (let ((opencortex::*doctor-required-binaries* '("non-existent-binary-123")))
-    (is (null (opencortex:doctor-check-dependencies)))))
-#+end_src
-
-** Environment Tests
-#+begin_src lisp :tangle ../tests/doctor-tests.lisp
-(test test-env-validation-fail
-  "Verify that an invalid MEMEX_DIR triggers a critical failure."
-  (let ((old-m (uiop:getenv "MEMEX_DIR"))
-        (old-d (uiop:getenv "OC_DATA_DIR")))
-    (unwind-protect
-         (progn
-           (setf (uiop:getenv "MEMEX_DIR") "/non/existent/path/999")
-           (is (null (opencortex:doctor-check-env))))
-      (setf (uiop:getenv "MEMEX_DIR") (or old-m ""))
-      (setf (uiop:getenv "OC_DATA_DIR") (or old-d "")))))
-#+end_src
-
-* Phase C: Implementation (Build)
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** Global Configuration
-#+begin_src lisp
-(defvar *doctor-required-binaries* '("sbcl" "emacs" "git" "socat" "nc")
-  "List of external binaries required for full system operation.")
-#+end_src
-
-** Dependency Verification
-#+begin_src lisp
-(defun doctor-check-dependencies ()
-  "Verifies that required external binaries are available in the PATH via a shell probe."
-  (let ((all-ok t))
-    (harness-log "DOCTOR: Checking system dependencies...")
-    (dolist (dep *doctor-required-binaries*)
-      (let ((path (ignore-errors 
-                    (uiop:run-program (list "which" dep) 
-                                      :output :string :ignore-error-status t))))
-        (if (and path (> (length path) 0))
-            (harness-log "  [OK] Found ~a" dep)
-            (progn
-              (harness-log "  [FAIL] Missing binary: ~a" dep)
-              (setf all-ok nil)))))
-    all-ok))
-#+end_src
-
-** Environment & XDG Validation
-#+begin_src lisp
-(defun doctor-check-env ()
-  "Validates XDG directories and environment configuration against the POSIX standard."
-  (harness-log "DOCTOR: Checking XDG environment...")
-  (let ((all-ok t)
-        (config-dir (uiop:getenv "OC_CONFIG_DIR"))
-        (data-dir (uiop:getenv "OC_DATA_DIR"))
-        (state-dir (uiop:getenv "OC_STATE_DIR"))
-        (memex-dir (uiop:getenv "MEMEX_DIR")))
-    
-    (flet ((check-dir (name path critical)
-             (if (and path (> (length path) 0))
-                 (if (uiop:directory-exists-p path)
-                     (harness-log "  [OK] ~a: ~a" name path)
-                     (progn
-                       (harness-log "  [FAIL] ~a directory missing: ~a" name path)
-                       (when critical (setf all-ok nil))))
-                 (progn
-                   (harness-log "  [FAIL] ~a variable not set." name)
-                   (when critical (setf all-ok nil))))))
-
-      (check-dir "Config (OC_CONFIG_DIR)" config-dir t)
-      (check-dir "Data (OC_DATA_DIR)" data-dir t)
-      (check-dir "State (OC_STATE_DIR)" state-dir t)
-      (check-dir "Memex (MEMEX_DIR)" memex-dir t))
-    all-ok))
-#+end_src
-
-** LLM Connectivity
-#+begin_src lisp
-(defun doctor-check-llm ()
-  "Tests connectivity to primary LLM providers. Non-critical fallback allowed."
-  (harness-log "DOCTOR: Checking LLM connectivity...")
-  (let ((openrouter-key (uiop:getenv "OPENROUTER_API_KEY")))
-    (if (and openrouter-key (> (length openrouter-key) 0))
-        (progn
-          (harness-log "  [OK] OpenRouter API Key detected.")
-          t)
-        (progn
-          (harness-log "  [WARN] No OpenRouter API Key. Falling back to local inference only.")
-          t))))
-#+end_src
-
-** Orchestration
-#+begin_src lisp
-(defun doctor-run-all ()
-  "Executes the full diagnostic suite and returns T if system is healthy."
-  (harness-log "==================================================")
-  (harness-log " OPENCORTEX DOCTOR: Commencing Health Check")
-  (harness-log "==================================================")
-  (let ((dep-ok (doctor-check-dependencies))
-        (env-ok (doctor-check-env))
-        (llm-ok (doctor-check-llm)))
-    (declare (ignore llm-ok))
-    (harness-log "==================================================")
-    (if (and dep-ok env-ok)
-        (progn
-          (harness-log " ✓ SYSTEM HEALTHY: Ready for ignition.")
-          t)
-        (progn
-          (harness-log " ✗ SYSTEM UNHEALTHY: Fix the errors above.")
-          nil))))
-#+end_src
-
-** CLI Entry Point
-#+begin_src lisp
-(defun doctor-main ()
-  "Entry point for the 'doctor' CLI command."
-  (if (doctor-run-all)
-      (uiop:quit 0)
-      (uiop:quit 1)))
-#+end_src

harness/loop.lisp

@@ -1,136 +0,0 @@
-(in-package :opencortex)
-
-(defvar *interrupt-flag* nil
-  "Atomic flag set by signal handlers to trigger graceful shutdown.")
-
-(defvar *interrupt-lock* (bt:make-lock "harness-interrupt-lock")
-  "Mutex protecting *interrupt-flag* access.")
-
-(defvar *heartbeat-thread* nil
-  "Handle to the heartbeat thread.")
-
-(defun process-signal (signal)
-  "The entry point to the Metabolic Pipeline: Perceive -> Reason -> Act."
-  (let ((current-signal signal))
-    (loop while current-signal do
-      (let ((depth (getf current-signal :depth 0))
-            (meta (getf current-signal :meta)))
-        (when (> depth 10)
-          (harness-log "METABOLISM ERROR: Max recursion depth reached.")
-          (return nil))
-
-        (when (bt:with-lock-held (*interrupt-lock*) *interrupt-flag*)
-          (harness-log "METABOLISM: Interrupted by shutdown signal.")
-          (return nil))
-
-        (handler-case
-            (progn
-              (setf current-signal (perceive-gate current-signal))
-              (setf current-signal (reason-gate current-signal))
-              (let ((feedback (act-gate current-signal)))
-                (if feedback
-                    (progn
-                      (unless (getf feedback :meta) (setf (getf feedback :meta) meta))
-                      (setf current-signal feedback))
-                    (setf current-signal nil))))
-          (error (c)
-            (let ((sensor (ignore-errors (getf (getf current-signal :payload) :sensor))))
-              (harness-log "METABOLISM CRASH [~a]: ~a" (or sensor :unknown) c)
-              (unless (member sensor '(:loop-error :tool-error :syntax-error))
-                (harness-log "CRITICAL ERROR: Initiating Micro-Rollback.")
-                (rollback-memory 0))
-              (if (or (> depth 2) (member sensor '(:loop-error :tool-error)))
-                  (setf current-signal nil)
-                  (setf current-signal
-                        (list :type :EVENT :depth (1+ depth) :meta meta
-                              :payload (list :sensor :loop-error :message (format nil "~a" c) :depth depth)))))))))))
-
-(defvar *auto-save-interval* 300)
-(defvar *heartbeat-save-counter* 0)
-
-(defun start-heartbeat ()
-  "Starts the background heartbeat thread."
-  (let ((interval (or (ignore-errors (parse-integer (uiop:getenv "HEARTBEAT_INTERVAL"))) 60))
-        (auto-save (or (ignore-errors (parse-integer (uiop:getenv "MEMORY_AUTO_SAVE_INTERVAL"))) *auto-save-interval*)))
-    (setf *auto-save-interval* auto-save)
-    (setf *heartbeat-save-counter* 0)
-
-    (setf *heartbeat-thread*
-          (bt:make-thread
-           (lambda ()
-             (loop
-               (sleep interval)
-               (incf *heartbeat-save-counter*)
-               (when (>= *heartbeat-save-counter* (/ *auto-save-interval* interval))
-                 (setf *heartbeat-save-counter* 0)
-                 (save-memory-to-disk))
-               (inject-stimulus
-                 (list :type :EVENT :payload (list :sensor :heartbeat :unix-time (get-universal-time))))))
-           :name "opencortex-heartbeat"))))
-
-(defvar *shutdown-save-enabled* t)
-
-(defvar *system-health* :unknown
-  "Current system health status: :healthy, :degraded, :unhealthy, or :unknown.")
-
-(defvar *health-check-ran* nil
-  "Flag indicating if initial health check has completed.")
-
-(defun run-startup-health-check ()
-  "Runs the doctor diagnostics on startup. Returns health status."
-  (format t "~%")
-  (format t "==================================================~%")
-  (format t " DOCTOR: Running Startup Health Check~%")
-  (format t "==================================================~%")
-  (handler-case
-      (progn
-         (when (fboundp 'doctor-run-all)
-           (let ((result (doctor-run-all)))
-            (setf *health-check-ran* t)
-            (if result
-                (progn
-                  (setf *system-health* :healthy)
-                  (format t "DAEMON: Health check passed. Starting services.~%"))
-                (progn
-                  (setf *system-health* :degraded)
-                  (format t "DAEMON: Health check found issues.~%")
-                  (format t "         Run 'opencortex doctor --fix' to repair.~%")))))
-        (setf *health-check-ran* t))
-    (error (c)
-      (format t "DOCTOR ERROR: ~a~%" c)
-      (setf *system-health* :unhealthy)
-      (setf *health-check-ran* t)))
-  (format t "==================================================~%~%"))
-
-(defun main ()
-  "Entry point for OpenCortex. Initializes the system and enters idle loop."
-  (let* ((home (uiop:getenv "HOME"))
-         (env-file (uiop:merge-pathnames* ".config/opencortex/.env" (uiop:ensure-directory-pathname home))))
-    (when (uiop:file-exists-p env-file)
-      (cl-dotenv:load-env env-file)))
-
-  (load-memory-from-disk)
-  (initialize-actuators)
-  (initialize-all-skills)
-  
-  ;; Run proactive doctor before starting services
-  (run-startup-health-check)
-  
-  (start-heartbeat)
-  (start-daemon)
-
-  #+sbcl
-  (sb-sys:enable-interrupt sb-unix:sigint
-                            (lambda (sig code scp)
-                              (declare (ignore sig code scp))
-                              (harness-log "SHUTDOWN: SIGINT received. Saving memory...")
-                              (when *shutdown-save-enabled* (save-memory-to-disk))
-                              (uiop:quit 0)))
-
-  (let ((sleep-interval (or (ignore-errors (parse-integer (uiop:getenv "DAEMON_SLEEP_INTERVAL"))) 3600)))
-    (loop
-      (when (bt:with-lock-held (*interrupt-lock*) *interrupt-flag*)
-        (harness-log "SHUTDOWN: Interrupt flag set. Saving memory...")
-        (when *shutdown-save-enabled* (save-memory-to-disk))
-        (return))
-      (sleep sleep-interval))))

harness/manifest.org

@@ -1,64 +0,0 @@
-#+TITLE: System Manifest (manifest.org)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:manifest:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle ../opencortex.asd
-
-* Overview
-The *System Manifest* defines the structural components of the OpenCortex.
-
-* Implementation
-
-** Main System
-#+begin_src lisp
-(defsystem :opencortex
-  :name "opencortex"
-  :author "Amr Gharbeia"
-  :version "0.2.0"
-  :license "AGPLv3"
-  :description "The Probabilistic-Deterministic Lisp Machine"
-  :depends-on (:usocket :bordeaux-threads :dexador :uiop :cl-dotenv :cl-ppcre :hunchentoot :ironclad :str :cl-json :uuid)
-  :serial t
-  :components ((:file "harness/package")
-               (:file "harness/skills")
-               (:file "harness/communication")
-               (:file "harness/communication-validator")
-               (:file "harness/memory")
-               (:file "harness/context")
-               (:file "harness/perceive")
-               (:file "harness/reason")
-               (:file "harness/act")
-               (:file "harness/loop")))
-#+end_src
-
-** Test System
-#+begin_src lisp
-(defsystem :opencortex/tests
-  :depends-on (:opencortex :fiveam)
-  :components ((:file "tests/pipeline-act-tests")
-               (:file "tests/boot-sequence-tests")
-               (:file "tests/immune-system-tests")
-               (:file "tests/memory-tests")
-               (:file "tests/pipeline-perceive-tests")
-               (:file "tests/pipeline-reason-tests")
-               (:file "tests/peripheral-vision-tests")
-               (:file "tests/utils-org-tests")
-               (:file "tests/engineering-standards-tests")
-               (:file "tests/utils-lisp-tests")
-               (:file "tests/literate-programming-tests")
-               (:file "tests/self-edit-tests")
-               (:file "tests/tool-permissions-tests")
-               (:file "tests/diagnostics-tests")
-               (:file "tests/config-manager-tests")
-               (:file "tests/gateway-manager-tests")
-               (:file "tests/tui-tests")
-               (:file "tests/llm-gateway-tests")))
-#+end_src
-
-** TUI System
-#+begin_src lisp
-(defsystem :opencortex/tui
-  :depends-on (:opencortex :croatoan :usocket :bordeaux-threads)
-  :components ((:file "harness/tui-client")))
-#+end_src
-

harness/memory.lisp

@@ -1,120 +0,0 @@
-(in-package :opencortex)
-
-(defvar *memory* (make-hash-table :test 'equal))
-(defvar *history-store* (make-hash-table :test 'equal)
-  "Immutable Merkle-Tree versioning store mapping hashes to objects.")
-
-(defun lookup-object (id)
-  (gethash id *memory*))
-
-(defstruct org-object
-  id type attributes content vector parent-id children version last-sync hash)
-
-(defmethod make-load-form ((obj org-object) &optional env)
-  (make-load-form-saving-slots obj :environment env))
-
-(defun deep-copy-org-object (obj)
-  (make-org-object :id (org-object-id obj)
-                  :type (org-object-type obj)
-                  :attributes (copy-list (org-object-attributes obj))
-                  :content (org-object-content obj)
-                  :vector (org-object-vector obj)
-                  :parent-id (org-object-parent-id obj)
-                  :children (copy-list (org-object-children obj))
-                  :version (org-object-version obj)
-                  :last-sync (org-object-last-sync obj)
-                  :hash (org-object-hash obj)))
-
-(defun compute-merkle-hash (id type attributes content child-hashes)
-  (let* ((alist (loop for (k v) on attributes by #'cddr collect (cons k v)))
-         (sorted-alist (sort alist #'string< :key (lambda (x) (format nil "~a" (car x)))))
-         (attr-string (format nil "~s" sorted-alist))
-         (children-string (format nil "~{~a~}" child-hashes))
-         (data-string (format nil "ID:~a|TYPE:~s|ATTRS:~a|CONTENT:~a|CHILDREN:~a"
-                              id type attr-string (or content "") children-string))
-         (digester (ironclad:make-digest :sha256)))
-    (ironclad:update-digest digester (ironclad:ascii-string-to-byte-array data-string))
-    (ironclad:byte-array-to-hex-string (ironclad:produce-digest digester))))
-
-(defun ingest-ast (ast &optional parent-id)
-  (let* ((type (getf ast :type))
-         (props (getf ast :properties))
-         (id (or (getf props :ID) (format nil "temp-~a" (get-universal-time))))
-         (contents (getf ast :contents))
-         (raw-content (when (eq type :HEADLINE)
-                        (format nil "~a~%~a" (getf props :TITLE) (or (getf ast :raw-content) ""))))
-         (child-ids nil) (child-hashes nil))
-    (dolist (child contents)
-      (when (listp child)
-        (let ((child-id (ingest-ast child id)))
-          (push child-id child-ids)
-          (let ((child-obj (gethash child-id *memory*)))
-            (when child-obj (push (org-object-hash child-obj) child-hashes))))))
-    (setf child-ids (nreverse child-ids))
-    (setf child-hashes (nreverse child-hashes))
-    (let* ((hash (compute-merkle-hash id type props raw-content child-hashes))
-           (existing-obj (gethash hash *history-store*))
-           (obj (or existing-obj
-                    (make-org-object 
-                     :id id :type type :attributes props :content raw-content
-                     :parent-id parent-id :children child-ids
-                     :version (get-universal-time) :last-sync (get-universal-time)
-                     :hash hash))))
-      (unless existing-obj (setf (gethash hash *history-store*) obj))
-      (setf (gethash id *memory*) obj)
-      id)))
-
-(defvar *object-store-snapshots* nil)
-
-(defun copy-hash-table (hash-table)
-  (let ((new-table (make-hash-table :test (hash-table-test hash-table) 
-                                    :size (hash-table-size hash-table))))
-    (maphash (lambda (k v) (setf (gethash k new-table) v)) hash-table)
-    new-table))
-
-(defun snapshot-memory ()
-  (let ((snapshot (make-hash-table :test 'equal :size (hash-table-size *memory*))))
-    (maphash (lambda (k v) (setf (gethash k snapshot) (deep-copy-org-object v))) *memory*)
-    (push (list :timestamp (get-universal-time) :data snapshot) *object-store-snapshots*)
-    (when (> (length *object-store-snapshots*) 20) (setf *object-store-snapshots* (subseq *object-store-snapshots* 0 20)))
-    (harness-log "MEMORY - CoW Memory snapshot created.")))
-
-(defun rollback-memory (&optional (index 0))
-  (let ((snapshot (nth index *object-store-snapshots*)))
-    (if snapshot
-        (progn (setf *memory* (copy-hash-table (getf snapshot :data)))
-               (harness-log "MEMORY - Memory rolled back to snapshot ~a" index))
-        (harness-log "MEMORY ERROR - Snapshot ~a not found." index))))
-
-(defvar *memory-snapshot-path* nil)
-
-(defun ensure-memory-snapshot-path ()
-  (or *memory-snapshot-path*
-      (let ((env-path (uiop:getenv "MEMORY_SNAPSHOT_PATH")))
-        (setf *memory-snapshot-path*
-              (or env-path (namestring (uiop:merge-pathnames* "memory.snap" (user-homedir-pathname))))))))
-
-(defun save-memory-to-disk ()
-  (let ((path (ensure-memory-snapshot-path)))
-    (with-open-file (stream path :direction :output :if-exists :supersede :if-does-not-exist :create)
-      (let ((memory-alist nil) (history-alist nil))
-        (maphash (lambda (k v) (push (cons k v) memory-alist)) *memory*)
-        (maphash (lambda (k v) (push (cons k v) history-alist)) *history-store*)
-        (prin1 (list :memory memory-alist :history-store history-alist) stream)))
-    (harness-log "MEMORY - Saved to ~a" path)))
-
-(defun load-memory-from-disk ()
-  (let ((path (ensure-memory-snapshot-path)))
-    (when (uiop:file-exists-p path)
-      (handler-case
-          (with-open-file (stream path :direction :input)
-            (let ((data (read stream nil)))
-              (when data
-                (let ((memory-alist (getf data :memory)) (history-alist (getf data :history-store)))
-                  (setf *memory* (make-hash-table :test 'equal :size (length memory-alist)))
-                  (dolist (kv memory-alist) (setf (gethash (car kv) *memory*) (cdr kv)))
-                  (setf *history-store* (make-hash-table :test 'equal :size (length history-alist)))
-                  (dolist (kv history-alist) (setf (gethash (car kv) *history-store*) (cdr kv)))
-                  (harness-log "MEMORY - Loaded from ~a (~a objects)" path (hash-table-size *memory*))))))
-          (error (c) (harness-log "MEMORY WARNING - Failed to load snapshot: ~a" c)))))
-  t)

harness/memory.org

@@ -1,248 +0,0 @@
-#+TITLE: The System Memory (memory.lisp)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:memory:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle memory.lisp
-
-* Overview
-The Memory module is the agent's live cognitive state — a set of Merkle-tree-versioned ~org-object~ instances stored in hash tables. Every perception, action, and decision is recorded here.
-
-Key structures:
-- ~*memory*~ — the primary object store, keyed by ID
-- ~*history-store*~ — immutable archive of all past object versions, keyed by SHA-256 hash
-- ~org-object~ — the universal data unit (id, type, attributes, content, vector embedding, parent, children, merkle hash)
-- ~ingest-ast~ — converts an Org-mode AST into ~org-object~ instances, computing Merkle hashes for integrity
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** The Object Repository
-#+begin_src lisp
-(defvar *memory* (make-hash-table :test 'equal))
-(defvar *history-store* (make-hash-table :test 'equal)
-  "Immutable Merkle-Tree versioning store mapping hashes to objects.")
-#+end_src
-
-** Object Lookup (lookup-object)
-Retrieve a single object by its ID from the active memory store.
-#+begin_src lisp
-(defun lookup-object (id)
-  "Retrieves an org-object by ID from *memory*."
-  (gethash id *memory*))
-#+end_src
-
-** Object search (list-objects-with-attribute)
-Scan the entire memory store for objects whose attributes match a given key-value pair.
-#+begin_src lisp
-(defun list-objects-with-attribute (attr value)
-  "Returns all org-objects whose :ATTRIBUTES plist has ATTR = VALUE."
-  (let ((results nil))
-    (maphash (lambda (id obj)
-               (declare (ignore id))
-               (when (equal (getf (org-object-attributes obj) attr) value)
-                 (push obj results)))
-             *memory*)
-    (nreverse results)))
-#+end_src
-
-** ID generation (org-id-new)
-Generate a unique identifier string for a new Org node. Uses the universal time encoded in base-36 for compactness.
-#+begin_src lisp
-(defun org-id-new ()
-  "Generates a timestamp-based unique ID."
-  (format nil "id-~36r" (get-universal-time)))
-#+end_src
-
-** The Data Structure (org-object)
-The universal data unit. Every stored entity is an ~org-object~ with an ID, type, attribute plist, content string, optional vector embedding, parent/child pointers, version timestamp, and Merkle hash.
-#+begin_src lisp
-(defstruct org-object
-  id type attributes content vector parent-id children version last-sync hash)
-#+end_src
-
-** Serialization support
-Required by the Lisp runtime for saving/loading objects across image restarts.
-#+begin_src lisp
-(defmethod make-load-form ((obj org-object) &optional env)
-  (make-load-form-saving-slots obj :environment env))
-#+end_src
-
-** Deep copy
-Creates an independent copy of an ~org-object~. Used by the snapshot system to capture consistent memory state.
-#+begin_src lisp
-(defun deep-copy-org-object (obj)
-  "Creates a full copy of an org-object, including a fresh list copy of attributes and children."
-  (make-org-object :id (org-object-id obj)
-                  :type (org-object-type obj)
-                  :attributes (copy-list (org-object-attributes obj))
-                  :content (org-object-content obj)
-                  :vector (org-object-vector obj)
-                  :parent-id (org-object-parent-id obj)
-                  :children (copy-list (org-object-children obj))
-                  :version (org-object-version obj)
-                  :last-sync (org-object-last-sync obj)
-                  :hash (org-object-hash obj)))
-#+end_src
-
-** Merkle Tree Integrity
-#+begin_src lisp
-(defun compute-merkle-hash (id type attributes content child-hashes)
-  (let* ((alist (loop for (k v) on attributes by #'cddr collect (cons k v)))
-         (sorted-alist (sort alist #'string< :key (lambda (x) (format nil "~a" (car x)))))
-         (attr-string (format nil "~s" sorted-alist))
-         (children-string (format nil "~{~a~}" child-hashes))
-         (data-string (format nil "ID:~a|TYPE:~s|ATTRS:~a|CONTENT:~a|CHILDREN:~a"
-                              id type attr-string (or content "") children-string))
-         (digester (ironclad:make-digest :sha256)))
-    (ironclad:update-digest digester (ironclad:ascii-string-to-byte-array data-string))
-    (ironclad:byte-array-to-hex-string (ironclad:produce-digest digester))))
-#+end_src
-
-** Ingest (ingest-ast)
-#+begin_src lisp
-(defun ingest-ast (ast &optional parent-id)
-  (let* ((type (getf ast :type))
-         (props (getf ast :properties))
-         (id (or (getf props :ID) (format nil "temp-~a" (get-universal-time))))
-         (contents (getf ast :contents))
-         (raw-content (when (eq type :HEADLINE)
-                        (format nil "~a~%~a" (getf props :TITLE) (or (getf ast :raw-content) ""))))
-         (child-ids nil) (child-hashes nil))
-    (dolist (child contents)
-      (when (listp child)
-        (let ((child-id (ingest-ast child id)))
-          (push child-id child-ids)
-          (let ((child-obj (gethash child-id *memory*)))
-            (when child-obj (push (org-object-hash child-obj) child-hashes))))))
-    (setf child-ids (nreverse child-ids))
-    (setf child-hashes (nreverse child-hashes))
-    (let* ((hash (compute-merkle-hash id type props raw-content child-hashes))
-           (existing-obj (gethash hash *history-store*))
-           (obj (or existing-obj
-                    (make-org-object 
-                     :id id :type type :attributes props :content raw-content
-                     :parent-id parent-id :children child-ids
-                     :version (get-universal-time) :last-sync (get-universal-time)
-                     :hash hash))))
-      (unless existing-obj (setf (gethash hash *history-store*) obj))
-      (setf (gethash id *memory*) obj)
-      id)))
-#+end_src
-
-** Snapshot history (~*object-store-snapshots*~)
-A stack of CoW (copy-on-write) memory snapshots for rollback. Up to 20 snapshots are retained.
-#+begin_src lisp
-(defvar *object-store-snapshots* nil)
-#+end_src
-
-** Hash table copy utility
-Used by the rollback system to restore saved memory state.
-#+begin_src lisp
-(defun copy-hash-table (hash-table)
-  "Creates an independent copy of a hash table."
-  (let ((new-table (make-hash-table :test (hash-table-test hash-table) 
-                                     :size (hash-table-size hash-table))))
-    (maphash (lambda (k v) (setf (gethash k new-table) v)) hash-table)
-    new-table))
-#+end_src
-
-** Memory snapshot (snapshot-memory)
-Captures a point-in-time copy of ~*memory*~. Each object is deep-copied so the snapshot is independent of ongoing mutations.
-#+begin_src lisp
-(defun snapshot-memory ()
-  "Creates a CoW snapshot of *memory* for rollback recovery."
-  (let ((snapshot (make-hash-table :test 'equal :size (hash-table-size *memory*))))
-    (maphash (lambda (k v) (setf (gethash k snapshot) (deep-copy-org-object v))) *memory*)
-    (push (list :timestamp (get-universal-time) :data snapshot) *object-store-snapshots*)
-    (when (> (length *object-store-snapshots*) 20)
-      (setf *object-store-snapshots* (subseq *object-store-snapshots* 0 20)))
-    (harness-log "MEMORY - CoW Memory snapshot created.")))
-#+end_src
-
-** Memory rollback (rollback-memory)
-Restores ~*memory*~ to a previous snapshot. By default restores the most recent snapshot (index 0).
-#+begin_src lisp
-(defun rollback-memory (&optional (index 0))
-  "Restores *memory* from a snapshot. INDEX 0 = most recent."
-  (let ((snapshot (nth index *object-store-snapshots*)))
-    (if snapshot
-        (progn (setf *memory* (copy-hash-table (getf snapshot :data)))
-               (harness-log "MEMORY - Memory rolled back to snapshot ~a" index))
-        (harness-log "MEMORY ERROR - Snapshot ~a not found." index))))
-#+end_src
-
-** Persistence — snapshot path (~*memory-snapshot-path*~)
-Configurable path for serialized memory state. Falls back to ~memory.snap~ in the home directory.
-#+begin_src lisp
-(defvar *memory-snapshot-path* nil)
-
-(defun ensure-memory-snapshot-path ()
-  "Returns the path to the memory snapshot file, resolving env or default."
-  (or *memory-snapshot-path*
-      (let ((env-path (uiop:getenv "MEMORY_SNAPSHOT_PATH")))
-        (setf *memory-snapshot-path*
-              (or env-path (namestring (uiop:merge-pathnames* "memory.snap" (user-homedir-pathname))))))))
-#+end_src
-
-** Save to disk (save-memory-to-disk)
-Serialises ~*memory*~ and ~*history-store*~ to a Lisp-readable file.
-#+begin_src lisp
-(defun save-memory-to-disk ()
-  "Writes the entire memory and history store to disk as a plist."
-  (let ((path (ensure-memory-snapshot-path)))
-    (with-open-file (stream path :direction :output :if-exists :supersede :if-does-not-exist :create)
-      (let ((memory-alist nil) (history-alist nil))
-        (maphash (lambda (k v) (push (cons k v) memory-alist)) *memory*)
-        (maphash (lambda (k v) (push (cons k v) history-alist)) *history-store*)
-        (prin1 (list :memory memory-alist :history-store history-alist) stream)))
-    (harness-log "MEMORY - Saved to ~a" path)))
-#+end_src
-
-** Load from disk (load-memory-from-disk)
-Restores memory state from a previously saved snapshot file.
-#+begin_src lisp
-(defun load-memory-from-disk ()
-  "Reads memory state from disk and restores *memory* and *history-store*."
-  (let ((path (ensure-memory-snapshot-path)))
-    (when (uiop:file-exists-p path)
-      (handler-case
-          (with-open-file (stream path :direction :input)
-            (let ((data (read stream nil)))
-              (when data
-                (let ((memory-alist (getf data :memory)) (history-alist (getf data :history-store)))
-                  (setf *memory* (make-hash-table :test 'equal :size (length memory-alist)))
-                  (dolist (kv memory-alist) (setf (gethash (car kv) *memory*) (cdr kv)))
-                  (setf *history-store* (make-hash-table :test 'equal :size (length history-alist)))
-                  (dolist (kv history-alist) (setf (gethash (car kv) *history-store*) (cdr kv)))
-                  (harness-log "MEMORY - Loaded from ~a (~a objects)" path (hash-table-size *memory*))))))
-          (error (c) (harness-log "MEMORY WARNING - Failed to load snapshot: ~a" c)))))
-  t)
-#+end_src
-
-* Test Suite
-#+begin_src lisp :tangle ../tests/memory-tests.lisp
-(eval-when (:compile-toplevel :load-toplevel :execute)
-  (ql:quickload :fiveam :silent t))
-
-(defpackage :opencortex-memory-tests
-  (:use :cl :fiveam :opencortex)
-  (:export #:memory-suite))
-
-(in-package :opencortex-memory-tests)
-
-(def-suite memory-suite :description "Tests for the Merkle-Tree Memory")
-(in-suite memory-suite)
-
-(test merkle-hash-consistency
-  (let* ((ast1 '(:type :HEADLINE :properties (:ID "test-1" :TITLE "Node 1") :contents nil)))
-    (clrhash opencortex::*memory*)
-    (let ((id1 (ingest-ast ast1)))
-      (let ((hash1 (org-object-hash (lookup-object id1))))
-        (clrhash opencortex::*memory*)
-        (let ((id2 (ingest-ast ast1)))
-          (is (equal hash1 (org-object-hash (lookup-object id2)))))))))
-#+end_src

harness/perceive.lisp

@@ -1,72 +0,0 @@
-(in-package :opencortex)
-
-(defvar *interrupt-flag* nil)
-(defvar *async-sensors* '(:chat-message :delegation :user-command)
-  "Sensors that are processed in dedicated threads.")
-
-(defvar *foveal-focus-id* nil
-  "The Org ID of the node the user is currently interacting with.")
-
-(defun inject-stimulus (raw-message &key stream (depth 0))
-  "Inject a raw message into the signal processing pipeline."
-  (let* ((payload (getf raw-message :payload))
-         (sensor (getf payload :sensor))
-         (meta (getf raw-message :meta))
-         (async-p (or (getf payload :async-p)
-                     (member sensor *async-sensors*))))
-
-    (unless meta
-      (setf meta (list :SOURCE :SYSTEM :SESSION-ID "internal")))
-
-    (when stream
-      (setf (getf meta :reply-stream) stream))
-
-    (setf (getf raw-message :meta) meta)
-    (setf (getf raw-message :depth) depth)
-
-    (if async-p
-        (bt:make-thread
-         (lambda ()
-           (restart-case (process-signal raw-message)
-             (skip-event () nil)))
-         :name "opencortex-async-task")
-        
-        (restart-case
-            (handler-bind ((error (lambda (c)
-                                    (harness-log "SYSTEM ERROR: ~a" c)
-                                    (invoke-restart 'skip-event))))
-              (process-signal raw-message))
-          (skip-event ()
-            (harness-log "SYSTEM RECOVERY: Stimulus dropped."))))))
-
-(defun perceive-gate (signal)
-  "Stage 1 of the metabolic pipeline: Normalize sensory input."
-  (let* ((payload (getf signal :payload))
-         (type (getf signal :type))
-         (meta (getf signal :meta))
-         (sensor (getf payload :sensor)))
-
-    (harness-log "GATE [Perceive]: ~a (~a) [Source: ~s]"
-                 type (or sensor "no-sensor") (getf meta :source))
-
-    (cond ((eq type :EVENT)
-           (case sensor
-             (:buffer-update
-              (let ((ast (getf payload :ast)))
-                (when ast
-                  (snapshot-memory)
-                  (ingest-ast ast))))
-             (:point-update
-              (let ((element (getf payload :element)))
-                (when element
-                  (snapshot-memory)
-                  (setf *foveal-focus-id* (getf element :id))
-                  (ingest-ast element))))
-             (:interrupt
-              (setf *interrupt-flag* t))))
-          ((eq type :RESPONSE)
-           (harness-log "GATE [Perceive]: Act Result -> ~a" (getf payload :status))))
-
-    (setf (getf signal :status) :perceived)
-    (setf (getf signal :foveal-focus) *foveal-focus-id*)
-    signal))

harness/perceive.org

@@ -1,126 +0,0 @@
-#+TITLE: Stage 1: Perceive (perceive.lisp)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:perceive:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle perceive.lisp
-
-* Overview
-The Perceive stage is the "sensory cortex" of OpenCortex. Its job is to take raw stimuli from the outside world and transform them into standardized Signals that the rest of the pipeline can process.
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** Interrupt Handling
-#+begin_src lisp
-(defvar *interrupt-flag* nil)
-#+end_src
-
-** Sensor Configuration
-#+begin_src lisp
-(defvar *async-sensors* '(:chat-message :delegation :user-command)
-  "Sensors that are processed in dedicated threads.")
-
-(defvar *foveal-focus-id* nil
-  "The Org ID of the node the user is currently interacting with.")
-#+end_src
-
-** Stimulus Injection (inject-stimulus)
-#+begin_src lisp
-(defun inject-stimulus (raw-message &key stream (depth 0))
-  "Inject a raw message into the signal processing pipeline."
-  (let* ((payload (getf raw-message :payload))
-         (sensor (getf payload :sensor))
-         (meta (getf raw-message :meta))
-         (async-p (or (getf payload :async-p)
-                     (member sensor *async-sensors*))))
-
-    (unless meta
-      (setf meta (list :SOURCE :SYSTEM :SESSION-ID "internal")))
-
-    (when stream
-      (setf (getf meta :reply-stream) stream))
-
-    (setf (getf raw-message :meta) meta)
-    (setf (getf raw-message :depth) depth)
-
-    (if async-p
-        (bt:make-thread
-         (lambda ()
-           (restart-case (process-signal raw-message)
-             (skip-event () nil)))
-         :name "opencortex-async-task")
-        
-        (restart-case
-            (handler-bind ((error (lambda (c)
-                                    (harness-log "SYSTEM ERROR: ~a" c)
-                                    (invoke-restart 'skip-event))))
-              (process-signal raw-message))
-          (skip-event ()
-            (harness-log "SYSTEM RECOVERY: Stimulus dropped."))))))
-#+end_src
-
-** Perceive Gate (perceive-gate)
-#+begin_src lisp
-(defun perceive-gate (signal)
-  "Stage 1 of the metabolic pipeline: Normalize sensory input."
-  (let* ((payload (getf signal :payload))
-         (type (getf signal :type))
-         (meta (getf signal :meta))
-         (sensor (getf payload :sensor)))
-
-    (harness-log "GATE [Perceive]: ~a (~a) [Source: ~s]"
-                 type (or sensor "no-sensor") (getf meta :source))
-
-    (cond ((eq type :EVENT)
-           (case sensor
-             (:buffer-update
-              (let ((ast (getf payload :ast)))
-                (when ast
-                  (snapshot-memory)
-                  (ingest-ast ast))))
-             (:point-update
-              (let ((element (getf payload :element)))
-                (when element
-                  (snapshot-memory)
-                  (setf *foveal-focus-id* (getf element :id))
-                  (ingest-ast element))))
-             (:interrupt
-              (setf *interrupt-flag* t))))
-          ((eq type :RESPONSE)
-           (harness-log "GATE [Perceive]: Act Result -> ~a" (getf payload :status))))
-
-    (setf (getf signal :status) :perceived)
-    (setf (getf signal :foveal-focus) *foveal-focus-id*)
-    signal))
-#+end_src
-
-* Test Suite
-
-#+begin_src lisp :tangle ../tests/pipeline-perceive-tests.lisp
-(eval-when (:compile-toplevel :load-toplevel :execute)
-  (ql:quickload :fiveam :silent t))
-
-(defpackage :opencortex-pipeline-perceive-tests
-  (:use :cl :fiveam :opencortex)
-  (:export #:pipeline-perceive-suite))
-
-(in-package :opencortex-pipeline-perceive-tests)
-
-(def-suite pipeline-perceive-suite :description "Test suite for Perceive pipeline")
-(in-suite pipeline-perceive-suite)
-
-(test test-perceive-gate
-  (clrhash opencortex::*memory*)
-  (let* ((signal (list :type :EVENT :payload (list :sensor :buffer-update :ast (list :type :HEADLINE :properties (list :ID "test-node" :TITLE "Test") :contents nil))))
-         (result (perceive-gate signal)))
-    (is (eq :perceived (getf result :status)))
-    (is (not (null (gethash "test-node" opencortex::*memory*))))))
-
-(test test-depth-limiting
-  (let ((runaway-signal (list :type :EVENT :depth 11 :payload (list :sensor :heartbeat))))
-    (is (null (process-signal runaway-signal)))))
-#+end_src

harness/reason.lisp

@@ -1,132 +0,0 @@
-(in-package :opencortex)
-
-(defvar *probabilistic-backends* (make-hash-table :test 'equal))
-
-(defvar *provider-cascade* nil)
-
-(defvar *model-selector-fn* nil)
-
-(defvar *consensus-enabled-p* nil)
-
-(defun register-probabilistic-backend (name fn)
-  (setf (gethash name *probabilistic-backends*) fn))
-
-(defun probabilistic-call (prompt &key
-                                (system-prompt "You are the Probabilistic engine.")
-                                (cascade nil)
-                                (context nil))
-  (let ((backends (or cascade *provider-cascade*)))
-    (or (dolist (backend backends)
-          (let ((backend-fn (gethash backend *probabilistic-backends*)))
-            (when backend-fn
-              (harness-log "PROBABILISTIC: Attempting backend ~a..." backend)
-              (let* ((model (when *model-selector-fn*
-                              (funcall *model-selector-fn* backend context)))
-                     (result (if model
-                                 (funcall backend-fn prompt system-prompt :model model)
-                                 (funcall backend-fn prompt system-prompt))))
-                (cond ((and (listp result) (eq (getf result :status) :success))
-                       (return (getf result :content)))
-                      ((stringp result)
-                       (return result))
-                      (t
-                       (harness-log "PROBABILISTIC: Backend ~a failed: ~a"
-                                   backend (getf result :message))))))))
-        (list :type :LOG
-              :payload (list :text "Neural Cascade Failure: All providers exhausted.")))))
-
-(defun strip-markdown (text)
-  (if (and text (stringp text))
-      (let ((cleaned text))
-        (setf cleaned (cl-ppcre:regex-replace-all "^```[a-z]*\\n" cleaned ""))
-        (setf cleaned (cl-ppcre:regex-replace-all "\\n```$" cleaned ""))
-        (setf cleaned (cl-ppcre:regex-replace-all "```" cleaned ""))
-        (string-trim '(#\Space #\Newline #\Tab) cleaned))
-      text))
-
-(defun normalize-plist-keywords (plist)
-  (when (listp plist)
-    (loop for (k v) on plist by #'cddr
-          collect (if (and (symbolp k) (not (keywordp k)))
-                       (intern (string k) :keyword)
-                       k)
-          collect v)))
-
-(defun think (context)
-  (let* ((active-skill (find-triggered-skill context))
-         (tool-belt (generate-tool-belt-prompt))
-         (global-context (context-assemble-global-awareness))
-         (system-logs (context-get-system-logs))
-         (assistant-name (or (uiop:getenv "MEMEX_ASSISTANT") "Agent"))
-         (rejection-trace (proto-get (proto-get context :payload) :rejection-trace))
-         (prompt-generator (when active-skill (skill-probabilistic-prompt active-skill)))
-         (raw-prompt (if prompt-generator
-                         (funcall prompt-generator context)
-                         (let ((p (proto-get (proto-get context :payload) :text)))
-                           (if (and p (stringp p)) p "Maintain metabolic stasis."))))
-         (reflection-feedback (if rejection-trace
-                                  (format nil "~%~%PREVIOUS PROPOSAL REJECTED: ~a" rejection-trace)
-                                  ""))
-         (system-prompt (format nil "IDENTITY: ~a~a~%~%TOOLS:~%~a~%~%CONTEXT:~%~a~%~%LOGS:~%~a" 
-                               assistant-name reflection-feedback tool-belt global-context system-logs)))
-    (let* ((thought (probabilistic-call raw-prompt :system-prompt system-prompt :context context))
-           (cleaned (strip-markdown thought)))
-       (if (and cleaned (stringp cleaned) (> (length cleaned) 0) (or (char= (char cleaned 0) #\() (char= (char cleaned 0) #\[)))
-           (handler-case
-               (let ((parsed (read-from-string cleaned)))
-                 (if (listp parsed)
-                     (normalize-plist-keywords parsed)
-                     (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
-             (error () (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
-            (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT (if (stringp cleaned) cleaned "No response") :EXPLANATION "Generated by the Probabilistic engine."))))))
-
-(defun deterministic-verify (proposed-action context)
-  (let ((current-action proposed-action)
-        (skills nil))
-    (maphash (lambda (name skill)
-               (declare (ignore name))
-               (when (skill-deterministic-fn skill)
-                 (push skill skills)))
-             *skills-registry*)
-    (setf skills (sort skills #'> :key #'skill-priority))
-    (dolist (skill skills)
-      (let ((trigger (skill-trigger-fn skill))
-            (gate (skill-deterministic-fn skill)))
-        (when (or (null trigger) (ignore-errors (funcall trigger context)))
-          (let ((next-action (funcall gate current-action context)))
-            (when (and (listp next-action)
-                       (member (proto-get next-action :type) '(:LOG :EVENT)))
-              (harness-log "DETERMINISTIC: Intercepted by skill '~a'" (skill-name skill))
-              (return-from deterministic-verify next-action))
-             (when next-action (setf current-action next-action))))))
-    current-action))
-
-(defun reason-gate (signal)
-  (let* ((type (proto-get signal :type))
-         (payload (proto-get signal :payload))
-         (sensor (proto-get payload :sensor)))
-    (unless (and (eq type :EVENT) (member sensor '(:user-input :chat-message)))
-      (return-from reason-gate signal))
-    (let ((retries 3)
-          (current-signal (copy-tree signal))
-          (last-rejection nil))
-      (loop
-        (when (<= retries 0)
-          (setf (getf signal :approved-action) last-rejection)
-          (setf (getf signal :status) :reasoned)
-          (return signal))
-        (when last-rejection
-          (setf (getf (getf current-signal :payload) :rejection-trace) last-rejection))
-        (let ((candidate (think current-signal)))
-          (if (and candidate (listp candidate))
-              (let ((verified (deterministic-verify candidate current-signal)))
-                (if (member (getf verified :type) '(:LOG :EVENT))
-                    (progn (decf retries) (setf last-rejection verified))
-                    (progn
-                      (setf (getf signal :approved-action) verified)
-                      (setf (getf signal :status) :reasoned)
-                      (return signal))))
-              (progn
-                (setf (getf signal :approved-action) nil)
-                (setf (getf signal :status) :reasoned)
-                (return signal))))))))

harness/reason.org

@@ -1,212 +0,0 @@
-#+TITLE: Stage 2: Reason (reason.lisp)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:reason:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle reason.lisp
-
-* Overview
-The Reason stage implements the core Innovation of OpenCortex: the separation of probabilistic reasoning (neural/LLM) from deterministic verification (logic/safety).
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** Probabilistic Engine state
-~*probabilistic-backends*~ is the hash table mapping provider keywords to backend functions. ~*provider-cascade*~ is the ordered list of providers to try. ~*model-selector-fn*~ is an optional function that selects a model per request. ~*consensus-enabled-p*~ enables multi-provider agreement.
-#+begin_src lisp
-(defvar *probabilistic-backends* (make-hash-table :test 'equal))
-#+end_src
-
-#+begin_src lisp
-(defvar *provider-cascade* nil)
-#+end_src
-
-#+begin_src lisp
-(defvar *model-selector-fn* nil)
-#+end_src
-
-#+begin_src lisp
-(defvar *consensus-enabled-p* nil)
-#+end_src
-
-** Backend Registration (register-probabilistic-backend)
-#+begin_src lisp
-(defun register-probabilistic-backend (name fn)
-  (setf (gethash name *probabilistic-backends*) fn))
-#+end_src
-
-** Cascade Dispatch (probabilistic-call)
-#+begin_src lisp
-(defun probabilistic-call (prompt &key
-                                (system-prompt "You are the Probabilistic engine.")
-                                (cascade nil)
-                                (context nil))
-  (let ((backends (or cascade *provider-cascade*)))
-    (or (dolist (backend backends)
-          (let ((backend-fn (gethash backend *probabilistic-backends*)))
-            (when backend-fn
-              (harness-log "PROBABILISTIC: Attempting backend ~a..." backend)
-              (let* ((model (when *model-selector-fn*
-                              (funcall *model-selector-fn* backend context)))
-                     (result (if model
-                                 (funcall backend-fn prompt system-prompt :model model)
-                                 (funcall backend-fn prompt system-prompt))))
-                (cond ((and (listp result) (eq (getf result :status) :success))
-                       (return (getf result :content)))
-                      ((stringp result)
-                       (return result))
-                      (t
-                       (harness-log "PROBABILISTIC: Backend ~a failed: ~a"
-                                   backend (getf result :message))))))))
-        (list :type :LOG
-              :payload (list :text "Neural Cascade Failure: All providers exhausted.")))))
-#+end_src
-
-** Cognitive Proposal Generation (Think)
-#+begin_src lisp
-(defun strip-markdown (text)
-  (if (and text (stringp text))
-      (let ((cleaned text))
-        (setf cleaned (cl-ppcre:regex-replace-all "^```[a-z]*\\n" cleaned ""))
-        (setf cleaned (cl-ppcre:regex-replace-all "\\n```$" cleaned ""))
-        (setf cleaned (cl-ppcre:regex-replace-all "```" cleaned ""))
-        (string-trim '(#\Space #\Newline #\Tab) cleaned))
-      text))
-
-(defun normalize-plist-keywords (plist)
-  (when (listp plist)
-    (loop for (k v) on plist by #'cddr
-          collect (if (and (symbolp k) (not (keywordp k)))
-                       (intern (string k) :keyword)
-                       k)
-          collect v)))
-
-(defun think (context)
-  (let* ((active-skill (find-triggered-skill context))
-         (tool-belt (generate-tool-belt-prompt))
-         (global-context (context-assemble-global-awareness))
-         (system-logs (context-get-system-logs))
-         (assistant-name (or (uiop:getenv "MEMEX_ASSISTANT") "Agent"))
-         (rejection-trace (proto-get (proto-get context :payload) :rejection-trace))
-         (prompt-generator (when active-skill (skill-probabilistic-prompt active-skill)))
-         (raw-prompt (if prompt-generator
-                         (funcall prompt-generator context)
-                         (let ((p (proto-get (proto-get context :payload) :text)))
-                           (if (and p (stringp p)) p "Maintain metabolic stasis."))))
-         (reflection-feedback (if rejection-trace
-                                  (format nil "~%~%PREVIOUS PROPOSAL REJECTED: ~a" rejection-trace)
-                                  ""))
-         (skill-augments (let ((augments ""))
-                           (maphash (lambda (name skill)
-                                      (declare (ignore name))
-                                      (let ((aug-fn (skill-system-prompt-augment skill)))
-                                        (when aug-fn
-                                          (let ((aug-text (ignore-errors (funcall aug-fn context))))
-                                            (when (and aug-text (stringp aug-text) (> (length aug-text) 0))
-                                              (setf augments (concatenate 'string augments aug-text (string #\Newline))))))))
-                                    *skills-registry*)
-                           (when (> (length augments) 0) augments)))
-         (system-prompt (format nil "IDENTITY: ~a~a~%~%TOOLS:~%~a~%~%CONTEXT:~%~a~%~%LOGS:~%~a~%~a" 
-                                assistant-name reflection-feedback tool-belt global-context system-logs
-                                (or skill-augments ""))))
-    (let* ((thought (probabilistic-call raw-prompt :system-prompt system-prompt :context context))
-           (cleaned (strip-markdown thought)))
-       (if (and cleaned (stringp cleaned) (> (length cleaned) 0) (or (char= (char cleaned 0) #\() (char= (char cleaned 0) #\[)))
-           (handler-case
-               (let ((parsed (read-from-string cleaned)))
-                 (if (listp parsed)
-                     (normalize-plist-keywords parsed)
-                     (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
-             (error () (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
-            (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT (if (stringp cleaned) cleaned "No response") :EXPLANATION "Generated by the Probabilistic engine."))))))
-#+end_src
-
-** Deterministic Engine (Verification)
-#+begin_src lisp
-(defun deterministic-verify (proposed-action context)
-  (let ((current-action proposed-action)
-        (skills nil))
-    (maphash (lambda (name skill)
-               (declare (ignore name))
-               (when (skill-deterministic-fn skill)
-                 (push skill skills)))
-             *skills-registry*)
-    (setf skills (sort skills #'> :key #'skill-priority))
-    (dolist (skill skills)
-      (let ((trigger (skill-trigger-fn skill))
-            (gate (skill-deterministic-fn skill)))
-        (when (or (null trigger) (ignore-errors (funcall trigger context)))
-          (let ((next-action (funcall gate current-action context)))
-            (when (and (listp next-action)
-                       (member (proto-get next-action :type) '(:LOG :EVENT)))
-              (harness-log "DETERMINISTIC: Intercepted by skill '~a'" (skill-name skill))
-              (return-from deterministic-verify next-action))
-             (when next-action (setf current-action next-action))))))
-    current-action))
-#+end_src
-
-** Reason Gate (Stage 2)
-#+begin_src lisp
-(defun reason-gate (signal)
-  (let* ((type (proto-get signal :type))
-         (payload (proto-get signal :payload))
-         (sensor (proto-get payload :sensor)))
-    (unless (and (eq type :EVENT) (member sensor '(:user-input :chat-message)))
-      (return-from reason-gate signal))
-    (let ((retries 3)
-          (current-signal (copy-tree signal))
-          (last-rejection nil))
-      (loop
-        (when (<= retries 0)
-          (setf (getf signal :approved-action) last-rejection)
-          (setf (getf signal :status) :reasoned)
-          (return signal))
-        (when last-rejection
-          (setf (getf (getf current-signal :payload) :rejection-trace) last-rejection))
-        (let ((candidate (think current-signal)))
-          (if (and candidate (listp candidate))
-              (let ((verified (deterministic-verify candidate current-signal)))
-                (if (member (getf verified :type) '(:LOG :EVENT))
-                    (progn (decf retries) (setf last-rejection verified))
-                    (progn
-                      (setf (getf signal :approved-action) verified)
-                      (setf (getf signal :status) :reasoned)
-                      (return signal))))
-              (progn
-                (setf (getf signal :approved-action) nil)
-                (setf (getf signal :status) :reasoned)
-                (return signal))))))))
-#+end_src
-
-* Test Suite
-#+begin_src lisp :tangle ../tests/pipeline-reason-tests.lisp
-(eval-when (:compile-toplevel :load-toplevel :execute)
-  (ql:quickload :fiveam :silent t))
-
-(defpackage :opencortex-pipeline-reason-tests
-  (:use :cl :fiveam :opencortex)
-  (:export #:pipeline-reason-suite))
-
-(in-package :opencortex-pipeline-reason-tests)
-
-(def-suite pipeline-reason-suite :description "Test suite for Reason pipeline")
-(in-suite pipeline-reason-suite)
-
-(test test-decide-gate-safety
-  (clrhash opencortex::*skills-registry*)
-  (opencortex::defskill :mock-safety
-    :priority 50
-    :trigger (lambda (ctx) (declare (ignore ctx)) t)
-    :deterministic (lambda (action ctx)
-                    (declare (ignore ctx))
-                    (if (search "rm -rf" (format nil "~s" action))
-                        (list :type :LOG :payload (list :text "Rejected"))
-                        action)))
-  (let* ((candidate '(:type :REQUEST :payload (:action :shell :cmd "rm -rf /")))
-         (signal '(:type :EVENT :payload (:sensor :user-input)))
-         (result (deterministic-verify candidate signal)))
-    (is (eq :LOG (getf result :type)))))
-#+end_src

harness/setup.sh

@@ -1,3 +0,0 @@
-#!/bin/bash
-# (The content here is a duplicate of the main opencortex.sh for literate consistency)
-# [Note: Implementation is already verified in the top-level script]

harness/tui-client.lisp

@@ -1,147 +0,0 @@
-(in-package :cl-user)
-(defpackage :opencortex.tui
-  (:use :cl :croatoan :usocket :bordeaux-threads)
-  (:export :main))
-(in-package :opencortex.tui)
-
-(defvar *daemon-host* "127.0.0.1")
-(defvar *daemon-port* 9105)
-(defvar *socket* nil)
-(defvar *stream* nil)
-(defvar *chat-history* nil)
-(defvar *input-list* nil) ; List of characters (stored in reverse)
-(defvar *is-running* t)
-(defvar *queue-lock* (bt:make-lock))
-(defvar *incoming-msgs* nil)
-
-(defun log-debug (msg &rest args)
-  (ignore-errors
-    (with-open-file (s "/tmp/opencortex-tui-debug.log" :direction :output :if-exists :append :if-does-not-exist :create)
-      (format s "[~a] " (get-universal-time))
-      (apply #'format s msg args)
-      (terpri s)
-      (finish-output s))))
-
-(defun enqueue-msg (msg)
-  (bt:with-lock-held (*queue-lock*)
-    (setf *incoming-msgs* (append *incoming-msgs* (list msg)))))
-
-(defun dequeue-msgs ()
-  (bt:with-lock-held (*queue-lock*)
-    (let ((msgs *incoming-msgs*))
-      (setf *incoming-msgs* nil)
-      msgs)))
-
-(defun render-chat (win h)
-  (when (and win (integerp h))
-    (clear win)
-    (box win 0 0)
-    (let* ((view-height (- h 2))
-           (history (copy-list *chat-history*))
-           (len (length history))
-           (num-to-draw (min len view-height))
-           (slice (subseq history 0 num-to-draw)))
-      (loop for i from 0 below num-to-draw
-            for msg in (reverse slice)
-            do (when msg
-                 (add-string win (format nil "│ ~a" msg) :y (1+ i) :x 2))))
-    (refresh win)))
-
-(defun handle-backspace ()
-  (pop *input-list*))
-
-(defun handle-return (stream)
-  (let ((cmd (coerce (reverse *input-list*) 'string)))
-    (setf *input-list* nil)
-    (log-debug "SUBMITTING: '~a'" cmd)
-    (when (> (length cmd) 0)
-      (push (format nil "⬆ ~a" cmd) *chat-history*)
-      (handler-case
-          (progn
-            (if (and stream (open-stream-p stream))
-                (let* ((msg (list :TYPE :EVENT 
-                                 :META (list :SOURCE :tui)
-                                 :PAYLOAD (list :SENSOR :user-input :TEXT cmd)))
-                       (payload (format nil "~s" msg))
-                       (len (length payload)))
-                  (format stream "~6,'0x~a" len payload)
-                  (finish-output stream)
-                  (log-debug "SENT WIRE: ~a" payload))
-                (push "ERROR: Not connected." *chat-history*)))
-        (error (c)
-          (log-debug "SEND ERROR: ~a" c)
-          (push (format nil "ERROR: ~a" c) *chat-history*)
-          (setf *is-running* nil))))
-    (when (string= cmd "/exit") (setf *is-running* nil))
-    (when (string= cmd "/clear") (setf *chat-history* nil))))
-
-(defun start-background-reader (stream)
-  (bt:make-thread
-   (lambda ()
-     (loop while *is-running* do
-       (handler-case
-           (let* ((len-buf (make-string 6))
-                  (count (read-sequence len-buf stream)))
-             (if (= count 6)
-                 (let* ((msg-len (parse-integer len-buf :radix 16))
-                        (msg-buf (make-string msg-len)))
-                   (read-sequence msg-buf stream)
-                   (log-debug "DAEMON MSG: ~a" msg-buf)
-                   (let ((msg (read-from-string msg-buf)))
-                     (let ((payload (getf msg :payload)))
-                       (cond
-                         ((eq (getf payload :action) :handshake)
-                          (enqueue-msg "* Connected *"))
-                         (t
-                          (let ((text (or (getf payload :text) (format nil "~a" payload))))
-                            (enqueue-msg (format nil "⬇ ~a" text))))))))
-                 (sleep 0.05)))
-         (error (c)
-           (when *is-running*
-             (log-debug "READER ERROR: ~a" c)
-             (enqueue-msg "ERROR: Connection lost.")
-             (setf *is-running* nil))))))
-   :name "opencortex-tui-reader"))
-
-(defun main ()
-  (log-debug "=== START ===")
-  (handler-case
-      (setf *socket* (usocket:socket-connect *daemon-host* *daemon-port*))
-    (error (e) (format t "Offline: ~a~%" e) (return-from main)))
-  (setf *stream* (usocket:socket-stream *socket*))
-  
-  (unwind-protect
-      (with-screen (scr :input-echoing nil :input-blocking nil :enable-colors t)
-        (let* ((h (or (height scr) 24))
-               (w (or (width scr) 80))
-               (chat-h (- h 4))
-               (chat-win (make-instance 'window :height chat-h :width (- w 2) :y 1 :x 1))
-               (input-win (make-instance 'window :height 1 :width (- w 2) :y (- h 2) :x 1)))
-          (setf (input-blocking input-win) nil)
-          (start-background-reader *stream*)
-          (loop :while *is-running* :do
-            (let ((msgs (dequeue-msgs)))
-              (when msgs 
-                (dolist (m msgs) (push m *chat-history*))
-                (render-chat chat-win chat-h)))
-            (let ((ch (get-char input-win)))
-              (when (and ch (not (equal ch -1)))
-                (log-debug "KEY: ~s" ch)
-                (cond
-                  ((or (eql ch 10) (eql ch 13) (eq ch :enter) (eql ch #\Newline) (eql ch #\Return))
-                   (handle-return *stream*)
-                   (render-chat chat-win chat-h))
-                  ((or (eql ch 127) (eql ch 8) (eq ch :backspace) (eql ch #\Backspace))
-                   (handle-backspace))
-                  ((characterp ch)
-                   (push ch *input-list*))
-                  ((integerp ch)
-                   (let ((converted (code-char ch)))
-                     (when (graphic-char-p converted)
-                       (push converted *input-list*))))))
-              (clear input-win)
-              (add-string input-win (format nil "▶ ~a" (coerce (reverse *input-list*) 'string)) :y 0 :x 1)
-              (refresh input-win))
-            (sleep 0.01))))
-    (setf *is-running* nil)
-    (when *socket* (ignore-errors (usocket:socket-close *socket*)))))

harness/tui-client.org

@@ -1,229 +0,0 @@
-#+TITLE: OpenCortex TUI Client (Standalone)
-#+STARTUP: content
-#+FILETAGS: :tui:ux:client:
-#+PROPERTY: header-args:lisp :tangle tui-client.lisp
-
-* Overview
-The TUI Client is a standalone ncurses application (built on Croatoan) that connects to the daemon via TCP. It provides a split-pane interface: a scrollable chat history window and a fixed input line at the bottom. Connected to the daemon at ~localhost:9105~, it sends user input as framed protocol messages and displays responses as they arrive from the daemon's background reader thread.
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :cl-user)
-(defpackage :opencortex.tui
-  (:use :cl :croatoan :usocket :bordeaux-threads)
-  (:export :main))
-(in-package :opencortex.tui)
-#+end_src
-
-** Connection state
-#+begin_src lisp
-(defvar *daemon-host* "localhost")
-#+end_src
-
-#+begin_src lisp
-(defvar *daemon-port* 9105)
-#+end_src
-
-#+begin_src lisp
-(defvar *socket* nil)
-#+end_src
-
-#+begin_src lisp
-(defvar *stream* nil)
-#+end_src
-
-** UI state
-#+begin_src lisp
-(defvar *chat-history* nil)
-#+end_src
-
-#+begin_src lisp
-(defvar *input-list* nil)
-#+end_src
-
-#+begin_src lisp
-(defvar *is-running* t)
-#+end_src
-
-** Thread-safe message queue
-#+begin_src lisp
-(defvar *queue-lock* (bt:make-lock "incoming-queue-lock"))
-#+end_src
-
-#+begin_src lisp
-(defvar *incoming-msgs* nil)
-#+end_src
-
-** Utilities
-#+begin_src lisp
-(defun log-debug (msg &rest args)
-  (ignore-errors
-    (with-open-file (s "/tmp/opencortex-tui-debug.log" :direction :output :if-exists :append :if-does-not-exist :create)
-      (format s "[~a] " (get-universal-time))
-      (apply #'format s msg args)
-      (terpri s)
-      (finish-output s))))
-
-(defun enqueue-msg (msg)
-  (bt:with-lock-held (*queue-lock*)
-    (setf *incoming-msgs* (append *incoming-msgs* (list msg)))))
-
-(defun dequeue-msgs ()
-  (bt:with-lock-held (*queue-lock*)
-    (let ((msgs *incoming-msgs*))
-      (setf *incoming-msgs* nil)
-      msgs)))
-#+end_src
-
-** Rendering
-#+begin_src lisp
-(defun render-chat (win h)
-  (when (and win (integerp h))
-    (clear win)
-    (box win 0 0)
-    (let* ((view-height (- h 2))
-           (history (copy-list *chat-history*))
-           (len (length history))
-           (num-to-draw (min len view-height))
-           (slice (subseq history 0 num-to-draw)))
-      (loop for i from 0 below num-to-draw
-            for msg in (reverse slice)
-            do (when msg
-                 (add-string win (format nil "│ ~a" msg) :y (1+ i) :x 2))))
-    (refresh win)))
-#+end_src
-
-** Input Handling
-#+begin_src lisp
-(defun handle-backspace ()
-  (pop *input-list*))
-
-(defun handle-return (stream)
-  (let ((cmd (coerce (reverse *input-list*) 'string)))
-    (setf *input-list* nil)
-    (log-debug "SUBMITTING: '~a'" cmd)
-    (when (> (length cmd) 0)
-      (push (format nil "⬆ ~a" cmd) *chat-history*)
-      (handler-case
-          (progn
-            (if (and stream (open-stream-p stream))
-                (let* ((msg (list :TYPE :EVENT 
-                                 :META (list :SOURCE :tui)
-                                 :PAYLOAD (list :SENSOR :user-input :TEXT cmd)))
-                       (payload (format nil "~s" msg))
-                       (len (length payload)))
-                  (format stream "~6,'0x~a" len payload)
-                  (finish-output stream)
-                  (log-debug "SENT WIRE: ~a" payload))
-                (push "ERROR: Not connected." *chat-history*)))
-        (error (c)
-          (log-debug "SEND ERROR: ~a" c)
-          (push (format nil "ERROR: ~a" c) *chat-history*)
-          (setf *is-running* nil))))
-    (when (string= cmd "/exit") (setf *is-running* nil))
-    (when (string= cmd "/clear") (setf *chat-history* nil))))
-#+end_src
-
-** Background Reader
-#+begin_src lisp
-(defun start-background-reader (stream)
-  (bt:make-thread
-   (lambda ()
-     (loop while *is-running* do
-       (handler-case
-           (let* ((len-buf (make-string 6))
-                  (count (read-sequence len-buf stream)))
-             (if (= count 6)
-                 (let* ((msg-len (parse-integer len-buf :radix 16))
-                        (msg-buf (make-string msg-len)))
-                   (read-sequence msg-buf stream)
-                   (log-debug "DAEMON MSG: ~a" msg-buf)
-                   (let ((msg (read-from-string msg-buf)))
-                     (let ((payload (getf msg :payload)))
-                       (cond
-                         ((eq (getf payload :action) :handshake)
-                          (enqueue-msg "* Connected *"))
-                         (t
-                          (let ((text (or (getf payload :text) (format nil "~a" payload))))
-                            (enqueue-msg (format nil "⬇ ~a" text))))))))
-                 (sleep 0.05)))
-         (error (c)
-           (when *is-running*
-             (log-debug "READER ERROR: ~a" c)
-             (enqueue-msg "ERROR: Connection lost.")
-             (setf *is-running* nil))))))
-   :name "opencortex-tui-reader"))
-#+end_src
-
-** Main Entry Point
-#+begin_src lisp
-(defun main ()
-  (log-debug "=== START ===")
-  (handler-case
-      (setf *socket* (usocket:socket-connect *daemon-host* *daemon-port*))
-    (error (e) (format t "Offline: ~a~%" e) (return-from main)))
-  (setf *stream* (usocket:socket-stream *socket*))
-  
-  (unwind-protect
-      (with-screen (scr :input-echoing nil :input-blocking nil :enable-colors t)
-        (let* ((h (or (height scr) 24))
-               (w (or (width scr) 80))
-               (chat-h (- h 4))
-               (chat-win (make-instance 'window :height chat-h :width (- w 2) :y 1 :x 1))
-               (input-win (make-instance 'window :height 1 :width (- w 2) :y (- h 2) :x 1)))
-          (setf (input-blocking input-win) nil)
-          (start-background-reader *stream*)
-          (loop :while *is-running* :do
-            (let ((msgs (dequeue-msgs)))
-              (when msgs 
-                (dolist (m msgs) (push m *chat-history*))
-                (render-chat chat-win chat-h)))
-            (let ((ch (get-char input-win)))
-              (when (and ch (not (equal ch -1)))
-                (log-debug "KEY: ~s" ch)
-                (cond
-                  ((or (eql ch 10) (eql ch 13) (eq ch :enter) (eql ch #\Newline) (eql ch #\Return))
-                   (handle-return *stream*)
-                   (render-chat chat-win chat-h))
-                  ((or (eql ch 127) (eql ch 8) (eq ch :backspace) (eql ch #\Backspace))
-                   (handle-backspace))
-                  ((characterp ch)
-                   (push ch *input-list*))
-                  ((integerp ch)
-                   (let ((converted (code-char ch)))
-                     (when (graphic-char-p converted)
-                       (push converted *input-list*))))))
-              (clear input-win)
-              (add-string input-win (format nil "▶ ~a" (coerce (reverse *input-list*) 'string)) :y 0 :x 1)
-              (refresh input-win))
-            (sleep 0.01))))
-    (setf *is-running* nil)
-    (when *socket* (ignore-errors (usocket:socket-close *socket*)))))
-#+end_src
-
-** REPL test script (tmux)
-Use this script to test the TUI non-interactively in a tmux session. It launches the TUI in a headless tmux window, sends text, and captures the output.
-
-#+begin_src bash :tangle no
-#!/bin/bash
-SESSION="oct-tui-test"
-tmux new-session -d -s "$SESSION" \
-    -e OC_CONFIG_DIR="$HOME/.config/opencortex" \
-    -e OC_DATA_DIR="$HOME/.local/share/opencortex" \
-    -e TERM="screen-256color" \
-    "sbcl --non-interactive \
-        --eval '(load (merge-pathnames \"quicklisp/setup.lisp\" (user-homedir-pathname)))' \
-        --eval '(push (truename \"$HOME/.local/share/opencortex/\") asdf:*central-registry*)' \
-        --eval '(ql:quickload :opencortex/tui)' \
-        --eval '(opencortex.tui:main)'"
-sleep 5
-tmux capture-pane -t "$SESSION" -p -S -20
-tmux send-keys -t "$SESSION" 'hello' Enter
-sleep 8
-tmux capture-pane -t "$SESSION" -p -S -20
-tmux send-keys -t "$SESSION" '/exit' Enter
-sleep 1
-tmux kill-session -t "$SESSION" 2>/dev/null || true
-#+end_src

infrastructure/docker/docker-compose.yml

@@ -1,9 +1,9 @@
 services:
-  opencortex:
+  passepartout:
     build:
       context: ../../
       dockerfile: infrastructure/docker/Dockerfile
-    container_name: opencortex
+    container_name: passepartout
     env_file: ../../.env
     volumes:
       - ../../../..:/memex

infrastructure/opencortex.service

@@ -6,10 +6,10 @@ After=network.target
 [Service]
 Type=simple
 User=%u
-ExecStart=%h/projects/opencortex/opencortex.sh daemon
+ExecStart=%h/projects/passepartout/opencortex.sh daemon
 Restart=on-failure
 RestartSec=10
-WorkingDirectory=%h/projects/opencortex
+WorkingDirectory=%h/projects/passepartout
 
 [Install]
 WantedBy=default.target

infrastructure/passepartout.service

@@ -0,0 +1,15 @@
+[Unit]
+Description=Passepartout Daemon
+Documentation=https://github.com/amrgharbeia/opencortex
+After=network.target
+
+[Service]
+Type=simple
+User=%u
+ExecStart=%h/projects/passepartout/passepartout daemon
+Restart=on-failure
+RestartSec=10
+WorkingDirectory=%h/projects/passepartout
+
+[Install]
+WantedBy=default.target

lisp/core-communication.lisp

@@ -1,4 +1,12 @@
-(in-package :opencortex)
+(in-package :passepartout)
+
+(defun proto-get (plist key)
+  "Look up KEY in PLIST with case-insensitive keyword normalization."
+  (let ((key-upcase (string-upcase (string key))))
+    (loop for (k v) on plist by #'cddr
+          when (and (keywordp k)
+                    (string-equal (string k) key-upcase))
+            do (return v))))
 
 (defvar *actuator-registry* (make-hash-table :test 'equalp)
   "Global registry mapping target keywords to their physical actuator functions.")
@@ -8,20 +16,20 @@
   (let ((key (if (keywordp name) name (intern (string-upcase (string name)) :keyword))))
     (setf (gethash key *actuator-registry*) fn)))
 
-(defun sanitize-protocol-message (msg)
+(defun protocol-message-sanitize (msg)
   "Recursively strips non-serializable objects from a protocol plist."
   (if (and msg (listp msg))
       (let ((clean nil))
         (loop for (k v) on msg by #'cddr
               do (unless (member k '(:reply-stream :socket :stream))
                    (push k clean)
-                   (push (if (listp v) (sanitize-protocol-message v) v) clean)))
+                   (push (if (listp v) (protocol-message-sanitize v) v) clean)))
         (nreverse clean))
       msg))
 
 (defun frame-message (msg)
   "Serializes a message plist and prefixes it with a 6-character hex length."
-  (let* ((sanitized (sanitize-protocol-message msg))
+  (let* ((sanitized (protocol-message-sanitize msg))
          (payload (let ((*print-pretty* nil) (*read-eval* nil)) (format nil "~s" sanitized)))
          (len (length payload)))
     (format nil "~6,'0x~a" len payload)))
@@ -47,9 +55,9 @@
                             (error () :error)))))))))
       (error () :error))))
 
-(defvar *server-socket* nil)
+(defvar *daemon-socket* nil)
 
-(defun handle-client-connection (socket)
+(defun client-handle-connection (socket)
   "Handles a single TUI/CLI client connection in a dedicated thread."
   (let ((stream (usocket:socket-stream socket)))
     (handler-case
@@ -62,32 +70,31 @@
                 ((eq msg :eof) (return))
                 ((eq msg :error) (return))
                 ((eq (getf msg :type) :health-check)
-                 ;; Handle health check request
                  (let ((health-msg (list :type :health-response 
-                                          :status (or (and (boundp 'opencortex::*system-health*) 
-                                                          (symbol-value 'opencortex::*system-health*))
-                                                      :unknown)
-                                          :checked-p (or (and (boundp 'opencortex::*health-check-ran*)
-                                                              (symbol-value 'opencortex::*health-check-ran*))
-                                                      nil))))
+                                         :status (or (and (boundp 'passepartout::*system-health*) 
+                                                         (symbol-value 'passepartout::*system-health*))
+                                                     :unknown)
+                                         :checked-p (or (and (boundp 'passepartout::*health-check-ran*)
+                                                             (symbol-value 'passepartout::*health-check-ran*))
+                                                     nil))))
                    (format stream "~a" (frame-message health-msg))
                    (finish-output stream)))
-                (t (inject-stimulus msg :stream stream))))))
-      (error (c) (harness-log "CLIENT ERROR: ~a" c)))
+                (t (stimulus-inject msg :stream stream))))))
+      (error (c) (log-message "CLIENT ERROR: ~a" c)))
     (ignore-errors (usocket:socket-close socket))))
 
 (defun start-daemon (&key (port 9105))
   "Starts the network listener for TUI/CLI clients."
-  (setf *server-socket* (usocket:socket-listen "127.0.0.1" port :reuse-address t))
-  (harness-log "DAEMON: Listening on localhost:~a" port)
+  (setf *daemon-socket* (usocket:socket-listen "127.0.0.1" port :reuse-address t))
+  (log-message "DAEMON: Listening on localhost:~a" port)
   (bt:make-thread
    (lambda ()
      (loop
-       (let ((client-socket (usocket:socket-accept *server-socket*)))
+       (let ((client-socket (usocket:socket-accept *daemon-socket*)))
          (when client-socket
-           (bt:make-thread (lambda () (handle-client-connection client-socket))
-                          :name "opencortex-client-handler")))))
-   :name "opencortex-server-listener"))
+           (bt:make-thread (lambda () (client-handle-connection client-socket))
+                          :name "passepartout-client-handler")))))
+   :name "passepartout-server-listener"))
 
 (defun make-hello-message (version)
   "Constructs the standard HELLO handshake message."
@@ -95,3 +102,33 @@
         :PAYLOAD (list :ACTION :handshake 
                        :VERSION version 
                        :CAPABILITIES '(:AUTH :ORG-AST))))
+
+(in-package :passepartout)
+
+(defun protocol-schema-validate (msg)
+  "Strict structural validation for incoming protocol messages."
+  (unless (listp msg) (error "Message must be a plist"))
+  (let ((type (proto-get msg :type)))
+    (unless (member type '(:REQUEST :EVENT :RESPONSE :LOG :STATUS))
+      (error "Invalid message type '~a'" type))
+    t))
+
+(defun validate-communication-protocol-schema (msg)
+  "Backward-compatibility alias for protocol-schema-validate."
+  (protocol-schema-validate msg))
+
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-communication-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:communication-protocol-suite))
+(in-package :passepartout-communication-tests)
+
+(def-suite communication-protocol-suite :description "Communication Protocol Suite")
+(in-suite communication-protocol-suite)
+
+(test test-framing
+  (let* ((msg '(:type :EVENT :payload (:action :handshake)))
+         (framed (frame-message msg)))
+    (is (string= "00002C" (string-upcase (subseq framed 0 6))))))

lisp/core-context.lisp

@@ -1,97 +1,84 @@
-#+TITLE: Context API (context.lisp)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:context:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle context.lisp
+(in-package :passepartout)
 
-* Overview
-The *Context API* (Peripheral Vision) provides the opencortex with the ability to selectively prune and present its memory to the LLM. It implements a **Foveal-Peripheral model**, where the current task is shown in high detail (foveal), while the broader Memex structure is shown as a skeletal outline (peripheral).
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** Memory Query (context-query-store)
-#+begin_src lisp
-(defun context-query-store (&key tag todo-state type)
-  "Filters the Memory based on tags, todo states, or types."
+(defun context-query (&key tag todo-state type scope)
+  "Filters the Memory based on tags, todo states, or types.
+Optional SCOPE restricts results to objects with that scope
+or :memex (global scope always visible)."
   (let ((results nil))
     (maphash (lambda (id obj)
                (declare (ignore id))
-               (let* ((attrs (org-object-attributes obj)) (state (getf attrs :TODO-STATE)) (match t))
-                 (when (and type (not (eq (org-object-type obj) type))) (setf match nil))
+               (let* ((attrs (memory-object-attributes obj)) (state (getf attrs :TODO-STATE)) (match t))
+                 ;; Scope filter: if scope specified, only match :memex (global) or same scope
+                 (when (and scope (not (eq (memory-object-scope obj) :memex))
+                            (not (eq (memory-object-scope obj) scope)))
+                   (setf match nil))
+                 (when (and type (not (eq (memory-object-type obj) type))) (setf match nil))
                  (when tag (unless (search tag (format nil "~a" (getf attrs :TAGS)) :test #'string-equal) (setf match nil)))
                  (when (and todo-state (not (equal state todo-state))) (setf match nil))
                  (when match (push obj results))))
-             *memory*)
+             *memory-store*)
     results))
-#+end_src
 
-** Active Projects (context-get-active-projects)
-#+begin_src lisp
-(defun context-get-active-projects ()
+(defun context-active-projects ()
   "Returns headlines tagged as 'project' that are not yet marked DONE."
-  (remove-if (lambda (obj) (equal (getf (org-object-attributes obj) :TODO-STATE) "DONE"))
-             (context-query-store :tag "project" :type :HEADLINE)))
-#+end_src
+  (remove-if (lambda (obj) (equal (getf (memory-object-attributes obj) :TODO-STATE) "DONE"))
+             (context-query :tag "project" :type :HEADLINE)))
 
-** Completed Tasks (context-get-recent-completed-tasks)
-#+begin_src lisp
-(defun context-get-recent-completed-tasks () 
+(defun context-recent-tasks () 
   "Retrieves recently finished tasks from the store."
-  (context-query-store :todo-state "DONE" :type :HEADLINE))
-#+end_src
+  (context-query :todo-state "DONE" :type :HEADLINE))
 
-** Capability Discovery (context-list-all-skills)
-#+begin_src lisp
-(defun context-list-all-skills ()
+(defun context-skill-list ()
   "Provides a sorted overview of currently loaded system capabilities."
   (let ((results nil))
     (maphash (lambda (name skill)
                (declare (ignore name))
                (push (list :name (skill-name skill) :priority (skill-priority skill) :dependencies (skill-dependencies skill)) results))
-             *skills-registry*)
+             *skill-registry*)
     (sort results #'> :key (lambda (x) (getf x :priority)))))
-#+end_src
 
-** Skill Inspection (context-get-skill-source)
-#+begin_src lisp
-(defun context-get-skill-source (skill-name)
+(defun context-skill-source (skill-name)
   "Reads the raw literate source of a specific skill for inspection."
   (let* ((filename (format nil "~a.org" skill-name))
-         (data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "OC_DATA_DIR") (namestring (merge-pathnames ".local/share/opencortex/" (user-homedir-pathname))))))
-         (skills-dir (merge-pathnames "skills/" data-dir))
-         (full-path (merge-pathnames filename skills-dir)))
-    (if (uiop:file-exists-p full-path) (uiop:read-file-string full-path) nil)))
-#+end_src
+         (data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "PASSEPARTOUT_DATA_DIR") (namestring (merge-pathnames ".local/share/passepartout/" (user-homedir-pathname))))))
+         (org-dir (merge-pathnames "org/" data-dir))
+         (full-path (merge-pathnames filename org-dir)))
+     (if (uiop:file-exists-p full-path) (uiop:read-file-string full-path) nil)))
 
-** Harness Logs (context-get-system-logs)
-#+begin_src lisp
-(defun context-get-system-logs (&optional limit)
+(defun context-skill-subtree (skill-name heading-name)
+  "Reads a specific headline subtree from a skill's Org source file.
+Returns the content under HEADING-NAME (including children) as a string,
+or nil if the heading is not found."
+  (let ((full-source (context-skill-source skill-name)))
+    (unless full-source (return-from context-skill-subtree nil))
+    (if (fboundp 'org-subtree-extract)
+        (org-subtree-extract full-source heading-name)
+        ;; Fallback: no org-subtree-extract available, return full source
+        full-source)))
+
+(defun context-logs (&optional limit)
   "Retrieves the most recent lines from the harness's internal log."
   (let ((log-limit (or limit (ignore-errors (parse-integer (uiop:getenv "CONTEXT_LOG_LIMIT"))) 20)))
-    (bt:with-lock-held (*logs-lock*)
-      (let ((count (min log-limit (length *system-logs*)))) 
-        (subseq *system-logs* 0 count)))))
-#+end_src
+    (bt:with-lock-held (*log-lock*)
+      (let ((count (min log-limit (length *log-buffer*)))) 
+        (subseq *log-buffer* 0 count)))))
 
-** AST to Org Rendering (context-render-to-org)
-#+begin_src lisp
-(defun context-render-to-org (obj &key (depth 1) (foveal-id nil) semantic-threshold (foveal-vector nil))
+(defun context-get-system-logs (&optional limit)
+  "Backward-compatibility alias for context-logs."
+  (context-logs limit))
+
+(defun context-object-render (obj &key (depth 1) (foveal-id nil) semantic-threshold (foveal-vector nil))
   "Recursively renders an org-object and its children to an Org string using a Foveal-Peripheral Hybrid model."
-  (let* ((id (org-object-id obj))
+  (let* ((id (memory-object-id obj))
          (is-foveal (equal id foveal-id))
-         (title (or (getf (org-object-attributes obj) :TITLE) "Untitled"))
-         (content (org-object-content obj))
-         (children (org-object-children obj))
+         (title (or (getf (memory-object-attributes obj) :TITLE) "Untitled"))
+         (content (memory-object-content obj))
+         (children (memory-object-children obj))
          (stars (make-string depth :initial-element #\*))
-         (obj-vector (org-object-vector obj))
+         (obj-vector (memory-object-vector obj))
          (threshold (or semantic-threshold (ignore-errors (read-from-string (uiop:getenv "CONTEXT_SEMANTIC_THRESHOLD"))) 0.75))
          (similarity (if (and foveal-vector obj-vector (not is-foveal))
-                         (cosine-similarity foveal-vector obj-vector)
+                          (vector-cosine-similarity foveal-vector obj-vector)
                          0.0))
          (is-semantically-relevant (>= similarity threshold))
          (should-render (or (<= depth 2) is-foveal is-semantically-relevant))
@@ -107,21 +94,18 @@ The *Context API* (Peripheral Vision) provides the opencortex with the ability t
         (setf output (concatenate 'string output content (string #\Newline))))
       
       (dolist (child-id children)
-        (let ((child-obj (lookup-object child-id)))
+        (let ((child-obj (memory-object-get child-id)))
           (when child-obj
             (let ((next-foveal (if is-foveal child-id foveal-id)))
               (setf output (concatenate 'string output 
-                                        (context-render-to-org child-obj 
+                                        (context-object-render child-obj 
                                                                :depth (1+ depth) 
                                                                :foveal-id next-foveal
                                                                :semantic-threshold threshold
                                                                :foveal-vector foveal-vector))))))))
     output))
-#+end_src
 
-** Path Resolution (context-resolve-path)
-#+begin_src lisp
-(defun context-resolve-path (path-string)
+(defun context-path-resolve (path-string)
   "Expands environment variables and strips literal quotes from a path string."
   (let ((path (if (stringp path-string) 
                   (string-trim '(#\" #\' #\Space) path-string)
@@ -134,39 +118,15 @@ The *Context API* (Peripheral Vision) provides the opencortex with the ability t
                 (setf result (ppcre:regex-replace (format nil "\\$~a" var-name) result var-val)))))
           result)
         path)))
-#+end_src
 
-** Privacy filter for context assembly
-Checks if an org-object has tags matching ~*privacy-filter-tags*~. Objects with matching tags are excluded from the LLM context window.
-#+begin_src lisp
-(defun context-object-privacy-filtered-p (obj)
+(defun context-privacy-filtered-p (obj)
   "Returns T if an org-object's :TAGS attribute matches bouncer-privacy-tags."
-  (let* ((attrs (org-object-attributes obj))
+  (let* ((attrs (memory-object-attributes obj))
          (tags (getf attrs :TAGS))
-         (privacy-tags (and (find-package :opencortex.skills.org-skill-bouncer)
+         (privacy-tags (and (find-package :passepartout.security-dispatcher)
                             (symbol-value
                              (find-symbol "BOUNCER-PRIVACY-TAGS"
-                                          :opencortex.skills.org-skill-bouncer)))))
-    (when (and tags privacy-tags)
-      (let ((tag-list (if (listp tags) tags (list tags))))
-        (some (lambda (tag)
-                (some (lambda (private)
-                        (string-equal (string-trim '(#\:) tag)
-                                      (string-trim '(#\:) private)))
-                      privacy-tags))
-              tag-list)))))
-#+end_src
-
-** Global Awareness (context-assemble-global-awareness)
-#+begin_src lisp
-(defun context-object-privacy-filtered-p (obj)
-  "Returns T if an org-object's :TAGS attribute matches bouncer-privacy-tags."
-  (let* ((attrs (org-object-attributes obj))
-         (tags (getf attrs :TAGS))
-         (privacy-tags (and (find-package :opencortex.skills.org-skill-bouncer)
-                            (symbol-value
-                             (find-symbol "BOUNCER-PRIVACY-TAGS"
-                                          :opencortex.skills.org-skill-bouncer)))))
+                                          :passepartout.security-dispatcher)))))
     (when (and tags privacy-tags)
       (let ((tag-list (if (listp tags) tags (list tags))))
         (some (lambda (tag)
@@ -176,54 +136,52 @@ Checks if an org-object has tags matching ~*privacy-filter-tags*~. Objects with
                       privacy-tags))
               tag-list)))))
 
-(defun context-assemble-global-awareness (&optional signal)
+(defun context-awareness-assemble (&optional signal)
   "Produces a high-level skeletal outline of the current Memory for the LLM.
-Privacy-filtered objects (matching *privacy-filter-tags*) are excluded."
+Privacy-filtered objects (matching bouncer-privacy-tags) are excluded."
   (let* ((foveal-id (or (getf signal :foveal-focus) 
                         (ignore-errors (getf (getf signal :payload) :target-id))))
-         (all-projects (context-get-active-projects))
-         (projects (remove-if #'context-object-privacy-filtered-p all-projects))
+         (all-projects (context-active-projects))
+         (projects (remove-if #'context-privacy-filtered-p all-projects))
          (output (format nil "GLOBAL MEMEX AWARENESS (Peripheral Vision):~%")))
     (if projects
         (dolist (project projects)
           (setf output (concatenate 'string output
-                                    (context-render-to-org project :foveal-id foveal-id))))
+                                    (context-object-render project :foveal-id foveal-id))))
         (setf output (concatenate 'string output "No active projects found.~%")))
     output))
-#+end_src
 
-* Test Suite
+(defun context-assemble-global-awareness ()
+  (context-awareness-assemble))
 
-#+begin_src lisp :tangle ../tests/peripheral-vision-tests.lisp
 (eval-when (:compile-toplevel :load-toplevel :execute)
   (ql:quickload :fiveam :silent t))
 
-(defpackage :opencortex-peripheral-vision-tests
-  (:use :cl :fiveam :opencortex)
+(defpackage :passepartout-peripheral-vision-tests
+  (:use :cl :fiveam :passepartout)
   (:export #:vision-suite))
-(in-package :opencortex-peripheral-vision-tests)
+(in-package :passepartout-peripheral-vision-tests)
 
 (def-suite vision-suite :description "Verification of Foveal-Peripheral context model.")
 (in-suite vision-suite)
 
 (test test-foveal-rendering
-  (clrhash opencortex::*memory*)
+  (clrhash passepartout::*memory-store*)
   (let* ((ast '(:type :HEADLINE :properties (:ID "proj-root" :TITLE "Project" :TAGS ("project"))
                 :contents ((:type :HEADLINE :properties (:ID "node-foveal" :TITLE "Foveal Node")
-                            :raw-content "FOVEAL CONTENT" :contents nil)
-                           (:type :HEADLINE :properties (:ID "node-peripheral" :TITLE "Peripheral Node")
-                            :raw-content "PERIPHERAL CONTENT" :contents nil)))))
+                             :raw-content "FOVEAL CONTENT" :contents nil)
+                            (:type :HEADLINE :properties (:ID "node-peripheral" :TITLE "Peripheral Node")
+                             :raw-content "PERIPHERAL CONTENT" :contents nil)))))
     (ingest-ast ast)
-    (let ((output (context-assemble-global-awareness (list :foveal-focus "node-foveal"))))
+    (let ((output (context-awareness-assemble (list :foveal-focus "node-foveal"))))
       (is (search "FOVEAL CONTENT" output))
       (is (search "* Peripheral Node" output))
       (is (not (search "PERIPHERAL CONTENT" output))))))
 
 (test test-awareness-budget
-  (clrhash opencortex::*memory*)
+  (clrhash passepartout::*memory-store*)
   (ingest-ast '(:type :HEADLINE :properties (:ID "p1" :TITLE "Project 1" :TAGS ("project")) :contents nil))
   (ingest-ast '(:type :HEADLINE :properties (:ID "p2" :TITLE "Project 2" :TAGS ("project")) :contents nil))
-  (let ((output (context-assemble-global-awareness)))
+  (let ((output (context-awareness-assemble)))
     (is (search "Project 1" output))
     (is (search "Project 2" output))))
-#+end_src

lisp/core-defpackage.lisp

@@ -1,7 +1,6 @@
-(defpackage :opencortex
+(defpackage :passepartout
   (:use :cl)
   (:export
-   ;; --- communication protocol ---
    #:frame-message
    #:read-framed-message
    #:PROTO-GET
@@ -12,108 +11,100 @@
    #:parse-message
    #:make-hello-message
    #:validate-communication-protocol-schema
-
-   ;; --- Daemon Lifecycle ---
    #:start-daemon
    #:stop-daemon
-   #:harness-log
+   #:log-message
    #:main
-
-   ;; --- Diagnostic Doctor ---
    #:doctor-run-all
    #:doctor-main
    #:doctor-check-dependencies
    #:doctor-check-env
-
-   ;; --- Setup Wizard ---
    #:register-provider
    #:system-ready-p
    #:run-setup-wizard
-
-   ;; --- Gateway Manager Skill ---
    #:skill-gateway-register
    #:skill-gateway-link
    #:gateway-manager-main
-
-   ;; --- Memory (CLOSOS) ---
    #:ingest-ast
-   #:lookup-object
+   #:memory-object-get
    #:list-objects-by-type
    #:org-id-new
-   #:*memory*
+   #:*memory-store*
    #:*history-store*
-   #:org-object
-   #:make-org-object
-   #:org-object-id
-   #:org-object-type
-   #:org-object-attributes
-   #:org-object-parent-id
-   #:org-object-children
-   #:org-object-version
-   #:org-object-last-sync
-   #:org-object-vector
-   #:org-object-content
-   #:org-object-hash
+   #:memory-object
+   #:make-memory-object
+   #:memory-object-id
+   #:memory-object-type
+   #:memory-object-attributes
+   #:memory-object-parent-id
+   #:memory-object-children
+   #:memory-object-version
+   #:memory-object-last-sync
+   #:memory-object-vector
+   #:memory-object-content
+   #:memory-object-hash
+   #:memory-object-scope
    #:snapshot-memory
    #:rollback-memory
-
-   ;; --- Context API (Peripheral Vision) ---
    #:context-query-store
    #:context-get-active-projects
    #:context-get-recent-completed-tasks
    #:context-list-all-skills
    #:context-get-skill-source
-   #:context-get-system-logs
-   #:context-resolve-path
-   #:context-get-skill-telemetry
-   #:harness-track-telemetry
-   #:context-assemble-global-awareness
-
-   ;; --- Reactive Signal Pipeline ---
+    #:context-get-system-logs
+    #:context-resolve-path
+    #:context-get-skill-telemetry
+    #:telemetry-track
+    #:context-assemble-global-awareness
+    #:context-query
    #:process-signal
+   #:loop-process
    #:perceive-gate
    #:probabilistic-gate
    #:consensus-gate
    #:act-gate
    #:reason-gate
-   #:perceive-gate
    #:dispatch-gate
-   #:inject-stimulus
-   #:initialize-actuators
+    #:register-pre-reason-handler
+    #:inject-stimulus
+    #:stimulus-inject
+    #:hitl-create
+    #:hitl-approve
+    #:hitl-deny
+    #:hitl-handle-message
+    #:actuator-initialize
    #:dispatch-action
    #:register-actuator
-
-   ;; --- Skill Engine ---
    #:load-skill-from-org
-   #:initialize-all-skills
-   #:load-skill-with-timeout
-   #:topological-sort-skills
-   #:validate-lisp-syntax
-   #:defskill
-   #:*skills-registry*
-   #:skill
+    #:skill-initialize-all
+    #:load-skill-with-timeout
+    #:topological-sort-skills
+    #:validate-lisp-syntax
+    #:defskill
+       #:*skill-registry*
+       #:*scope-resolver*
+       #:*embedding-backend*
+       #:*embedding-queue*
+       #:*embedding-provider*
+       #:embed-queue-object
+       #:embed-object
+       #:embed-all-pending
+       #:embeddings-compute
+     #:skill
    #:skill-name
    #:skill-priority
    #:skill-dependencies
    #:skill-trigger-fn
    #:skill-probabilistic-prompt
    #:skill-deterministic-fn
-
-   ;; --- Tool Registry ---
    #:def-cognitive-tool
-   #:*cognitive-tools*
-
-   ;; --- Engineering Standards Skill ---
+   #:*cognitive-tool-registry*
    #:verify-git-clean-p
    #:engineering-standards-verify-lisp
    #:engineering-standards-format-lisp
-
-   ;; --- Literate Programming Skill ---
    #:literate-check-block-balance
    #:check-tangle-sync
    #:*tangle-targets*
-
-   ;; --- Utils Org Skill ---
    #:utils-org-read-file
    #:utils-org-write-file
    #:utils-org-add-headline
@@ -125,8 +116,6 @@
    #:utils-org-id-format
    #:utils-org-ast-to-org
    #:utils-org-modify
-
-   ;; --- Utils Lisp Skill ---
    #:utils-lisp-validate
    #:utils-lisp-check-structural
    #:utils-lisp-check-syntactic
@@ -139,13 +128,9 @@
    #:utils-lisp-structural-inject
    #:utils-lisp-structural-slurp
    #:utils-lisp-register
-
-   ;; --- Config Manager & Diagnostics Skill ---
    #:get-oc-config-dir
    #:prompt-for
    #:save-secret
-
-   ;; --- Tool Permissions Skill ---
    #:get-tool-permission
    #:set-tool-permission
    #:check-tool-permission-gate
@@ -155,60 +140,51 @@
    #:cognitive-tool-parameters
    #:cognitive-tool-guard
    #:cognitive-tool-body
-
-   ;; --- Emacs Client Registry ---
    #:*emacs-clients*
    #:*clients-lock*
    #:register-emacs-client
    #:unregister-emacs-client
-
-   ;; --- Probabilistic Engine ---
    #:ask-probabilistic
    #:register-probabilistic-backend
    #:distill-prompt
+   #:*probabilistic-backends*
    #:*provider-cascade*
-
-   ;; --- Security Vault ---
    #:vault-get-secret
    #:vault-set-secret
-
-   ;; --- Deterministic Logic ---
-   #:list-objects-with-attribute
+   #:memory-objects-by-attribute
    #:deterministic-verify
-
-   ;; --- AST Helpers ---
    #:find-headline-missing-id))
 
-(in-package :opencortex)
+(in-package :passepartout)
 
-(defun proto-get (plist key)
-  "Robustly retrieves a value from a plist, checking both uppercase and lowercase keyword versions."
+(defun plist-get (plist key)
+  "Robust plist accessor — checks both :KEY and :key variants."
   (let* ((s (string key))
          (up (intern (string-upcase s) :keyword))
          (dn (intern (string-downcase s) :keyword)))
     (or (getf plist up) (getf plist dn))))
 
-(defvar *system-logs* nil)
-(defvar *logs-lock* (bordeaux-threads:make-lock "harness-logs-lock"))
-(defvar *max-log-history* 100)
+(defvar *log-buffer* nil)
+(defvar *log-lock* (bordeaux-threads:make-lock "log-messages-lock"))
+(defvar *log-limit* 100)
 
-(defvar *skills-registry* (make-hash-table :test 'equal)
+(defvar *skill-registry* (make-hash-table :test 'equal)
   "Global registry of all loaded skills.")
 
-(defvar *skill-telemetry* (make-hash-table :test 'equal))
+(defvar *telemetry-table* (make-hash-table :test 'equal))
 (defvar *telemetry-lock* (bordeaux-threads:make-lock "harness-telemetry-lock"))
 
-(defun harness-track-telemetry (skill-name duration status)
-  "Updates performance metrics for a specific skill. Status should be :success or :rejected."
+(defun telemetry-track (skill-name duration status)
+  "Updates performance metrics for a skill. STATUS is :success or :rejected."
   (when skill-name
     (bordeaux-threads:with-lock-held (*telemetry-lock*)
-      (let ((entry (or (gethash skill-name *skill-telemetry*) (list :executions 0 :total-time 0 :failures 0))))
+      (let ((entry (or (gethash skill-name *telemetry-table*) (list :executions 0 :total-time 0 :failures 0))))
         (incf (getf entry :executions))
         (incf (getf entry :total-time) duration)
         (when (eq status :rejected) (incf (getf entry :failures)))
-        (setf (gethash skill-name *skill-telemetry*) entry)))))
+        (setf (gethash skill-name *telemetry-table*) entry)))))
 
-(defvar *cognitive-tools* (make-hash-table :test 'equal))
+(defvar *cognitive-tool-registry* (make-hash-table :test 'equal))
 
 (defstruct cognitive-tool
   name
@@ -218,16 +194,16 @@
   body)
 
 (defmacro def-cognitive-tool (name description parameters &key guard body)
-  "Registers a new cognitive tool into the global registry. Parameters must be a list of property lists."
-  `(setf (gethash (string-downcase (string ',name)) *cognitive-tools*)
+  "Registers a cognitive tool. PARAMETERS is a list of plists, one per parameter."
+  `(setf (gethash (string-downcase (string ',name)) *cognitive-tool-registry*)
          (make-cognitive-tool :name (string-downcase (string ',name))
                               :description ,description
                               :parameters ',parameters
                               :guard ,guard
-                               :body ,body)))
+                              :body ,body)))
 
-(defun generate-tool-belt-prompt ()
-  "Generates a prompt string describing all available cognitive tools."
+(defun cognitive-tool-prompt ()
+  "Serialises all registered tools into a prompt string for the LLM."
   (let ((descriptions nil))
     (maphash (lambda (k tool)
                (declare (ignore k))
@@ -236,22 +212,25 @@
                              (cognitive-tool-description tool)
                              (cognitive-tool-parameters tool))
                      descriptions))
-             *cognitive-tools*)
+              *cognitive-tool-registry*)
     (if descriptions
         (format nil "Available tools:~%~a" (apply #'concatenate 'string (sort descriptions #'string<)))
         "No tools registered.")))
 
-(defun harness-log (msg &rest args)
-  "Centralized logging for the harness."
+;; Alias: generate-tool-belt-prompt → cognitive-tool-prompt
+(defun generate-tool-belt-prompt ()
+  (cognitive-tool-prompt))
+
+(defun log-message (msg &rest args)
+  "Centralized, thread-safe logging for the harness."
   (let ((formatted-msg (apply #'format nil msg args)))
-    (bordeaux-threads:with-lock-held (*logs-lock*)
-      (push formatted-msg *system-logs*)
-      (when (> (length *system-logs*) *max-log-history*)
-        (setq *system-logs* (subseq *system-logs* 0 *max-log-history*))))
+    (bordeaux-threads:with-lock-held (*log-lock*)
+      (push formatted-msg *log-buffer*)
+      (when (> (length *log-buffer*) *log-limit*)
+        (setq *log-buffer* (subseq *log-buffer* 0 *log-limit*))))
     (format t "~a~%" formatted-msg)
     (finish-output)))
 
-;; --- Debugger Hook ---
 (setf *debugger-hook* (lambda (condition hook)
   "Friendly error handler - shows diagnostic message instead of raw debugger."
   (declare (ignore hook))
@@ -259,10 +238,12 @@
   (format t "┌─────────────────────────────────────────────┐~%")
   (format t "│  ERROR: ~A~%" (type-of condition))
   (format t "│~%")
-  (format t "│  Run: opencortex doctor~%")
+  (format t "│  Run: passepartout doctor~%")
   (format t "│  For system diagnostics~%")
   (format t "└─────────────────────────────────────────────┘~%")
   (format t "~%")
   (format t "Details: ~A~%" condition)
+  (format t "Backtrace:~%")
+  (sb-debug:print-backtrace :count 20 :stream *standard-output*)
   (finish-output)
   (uiop:quit 1)))

lisp/core-loop-act.lisp

@@ -1,40 +1,24 @@
-#+TITLE: Stage 3: Act (act.lisp)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:act:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle act.lisp
+(in-package :passepartout)
 
-* Overview
-The Act stage dispatches approved actions to registered actuators. After the Probabilistic engine proposes and the Deterministic engine verifies, Act executes the approved action via the appropriate actuator (:cli, :tool, :system, :telegram, :signal, etc.). The actuator registry is extensible — skills can register new actuators at runtime.
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** Actuator Configuration
-#+begin_src lisp
-(defvar *default-actuator* :cli
+(defvar *actuator-default* :cli
   "The actuator used when no explicit target is specified.")
 
-(defvar *silent-actuators* '(:cli :system-message :emacs)
+(defvar *actuator-silent* '(:cli :system-message :emacs)
   "List of actuators that don't generate tool-output feedback.")
 
-(defun initialize-actuators ()
+(defun actuator-initialize ()
   "Register core actuators and load configuration."
   (let ((def (uiop:getenv "DEFAULT_ACTUATOR"))
         (silent (uiop:getenv "SILENT_ACTUATORS")))
     (when def
-      (setf *default-actuator* (intern (string-upcase def) :keyword)))
+      (setf *actuator-default* (intern (string-upcase def) :keyword)))
     (when silent
-      (setf *silent-actuators*
+      (setf *actuator-silent*
             (mapcar (lambda (s) (intern (string-upcase (string-trim '(#\Space) s)) :keyword))
                     (uiop:split-string silent :separator '(#\,))))))
 
-  (register-actuator :system #'execute-system-action)
-  (register-actuator :tool #'execute-tool-action)
+  (register-actuator :system #'action-system-execute)
+  (register-actuator :tool #'action-tool-execute)
 
   (register-actuator :tui (lambda (action context)
                             (declare (ignore context))
@@ -43,32 +27,32 @@ The Act stage dispatches approved actions to registered actuators. After the Pro
                               (when (and stream (open-stream-p stream))
                                 (format stream "~a" (frame-message action))
                                 (finish-output stream))))))
-#+end_src
 
-** Action Dispatch (dispatch-action)
-#+begin_src lisp
-(defun dispatch-action (action context)
+(defun action-dispatch (action context)
   "Route an approved action to its registered actuator."
   (let ((payload (proto-get action :payload)))
     (when (eq (proto-get payload :sensor) :heartbeat)
-      (return-from dispatch-action nil))
+      (return-from action-dispatch nil))
 
     (when (and action (listp action))
       (let* ((meta (proto-get context :meta))
              (source (proto-get meta :source))
-             (raw-target (or (proto-get action :target) source *default-actuator*))
+             (raw-target (or (proto-get action :target) source *actuator-default*))
              (target (intern (string-upcase (string raw-target)) :keyword))
-             (actuator-fn (gethash target *actuator-registry*)))
+             ;; If target is :SYSTEM and we have a live reply-stream, route to :TUI instead
+             (actual-target (if (and (eq target :system)
+                                     (getf meta :reply-stream)
+                                     (ignore-errors (open-stream-p (getf meta :reply-stream))))
+                               :tui
+                               target))
+             (actuator-fn (gethash actual-target *actuator-registry*)))
         (when (and meta (null (getf action :meta)))
           (setf (getf action :meta) meta))
         (if actuator-fn
             (funcall actuator-fn action context)
-            (harness-log "ACT ERROR: No actuator registered for '~s'" target))))))
-#+end_src
+            (log-message "ACT ERROR: No actuator registered for '~s'" actual-target))))))
 
-** System Actuator (execute-system-action)
-#+begin_src lisp
-(defun execute-system-action (action context)
+(defun action-system-execute (action context)
   "Execute internal harness commands."
   (declare (ignore context))
   (let* ((payload (getf action :payload))
@@ -77,14 +61,11 @@ The Act stage dispatches approved actions to registered actuators. After the Pro
       (:eval
        (eval (read-from-string (getf payload :code))))
       (:message
-       (harness-log "ACT [System]: ~a" (getf payload :text)))
+       (log-message "ACT [System]: ~a" (getf payload :text)))
       (t
-       (harness-log "ACT ERROR [System]: Unknown command '~s'" cmd)))))
-#+end_src
+       (log-message "ACT ERROR [System]: Unknown command '~s'" cmd)))))
 
-** Tool Actuator (execute-tool-action)
-#+begin_src lisp
-(defun execute-tool-action (action context)
+(defun action-tool-execute (action context)
   "Execute a registered cognitive tool."
   (let* ((payload (getf action :payload))
          (tool-name (getf payload :tool))
@@ -92,14 +73,14 @@ The Act stage dispatches approved actions to registered actuators. After the Pro
          (depth (getf context :depth 0))
          (meta (getf context :meta))
          (source (getf meta :source))
-         (tool (gethash (string-downcase (string tool-name)) *cognitive-tools*)))
+         (tool (gethash (string-downcase (string tool-name)) *cognitive-tool-registry*)))
     (if tool
         (handler-case
             (let* ((clean-args (if (and (listp tool-args) (listp (car tool-args))) (car tool-args) tool-args))
                    (result (funcall (cognitive-tool-body tool) clean-args)))
               (when source
-                (dispatch-action (list :TYPE :REQUEST :TARGET source 
-                                       :PAYLOAD (list :ACTION :MESSAGE :TEXT (format-tool-result tool-name result)))
+                (action-dispatch (list :TYPE :REQUEST :TARGET source 
+                                       :PAYLOAD (list :ACTION :MESSAGE :TEXT (tool-result-format tool-name result)))
                                 context))
               (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
                     :PAYLOAD (list :SENSOR :tool-output :RESULT result :TOOL tool-name)))
@@ -108,11 +89,8 @@ The Act stage dispatches approved actions to registered actuators. After the Pro
                   :PAYLOAD (list :SENSOR :tool-error :TOOL tool-name :MESSAGE (format nil "~a" c)))))
         (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
               :PAYLOAD (list :SENSOR :tool-error :MESSAGE (format nil "Tool '~a' not found" tool-name))))))
-#+end_src
 
-** Tool Result Formatting (format-tool-result)
-#+begin_src lisp
-(defun format-tool-result (tool-name result)
+(defun tool-result-format (tool-name result)
   "Format a tool result for display."
   (if (listp result)
       (let ((status (getf result :status))
@@ -123,23 +101,39 @@ The Act stage dispatches approved actions to registered actuators. After the Pro
           ((and (eq status :error) msg) (format nil "ERROR [~a]: ~a" tool-name msg))
           (t (format nil "TOOL [~a] RESULT: ~s" tool-name result))))
       (format nil "TOOL [~a] RESULT: ~a" tool-name result)))
-#+end_src
 
-** Act Gate (Stage 3)
-#+begin_src lisp
-(defun act-gate (signal)
-  "Final stage of the metabolic pipeline: Actuation."
+(defun loop-gate-act (signal)
+  "Final stage of the metabolic pipeline: Actuation.
+For approval-required actions, creates a Flight Plan instead of executing."
   (let* ((approved (getf signal :approved-action))
+         (signal-status (getf signal :status))
          (type (getf signal :type))
          (meta (getf signal :meta))
          (source (getf meta :source))
          (feedback nil))
+    ;; HITL: if the approved action requires human approval,
+    ;; create a Flight Plan (Emacs) and HITL entry (all gateways).
+    (when (and approved
+               (eq (getf approved :level) :approval-required))
+      (let* ((payload (getf approved :payload))
+             (blocked-action (getf payload :action))
+             (hitl (hitl-create blocked-action)))
+        (log-message "ACT: Action requires approval — creating Flight Plan + HITL (~a)" (getf hitl :token))
+        (dispatcher-flight-plan-create blocked-action)
+        (setf (getf signal :status) :suspended)
+        (action-dispatch (list :target source
+                               :payload (list :text (getf hitl :message)))
+                         signal)
+        (setf approved nil)
+        (setf feedback nil)))
     (when approved
       (let* ((original-type (getf approved :type))
-             (verified (deterministic-verify approved signal)))
-        (if (and (listp verified) (member (getf verified :type) '(:LOG :EVENT)) (not (member original-type '(:LOG :EVENT))))
+             (verified (cognitive-verify approved signal)))
+        (if (and (listp verified) (member (getf verified :type) '(:LOG :EVENT))
+                 (not (eq (getf verified :level) :approval-required))
+                 (not (member original-type '(:LOG :EVENT))))
             (progn
-              (harness-log "ACT BLOCKED: Action failed last-mile deterministic check.")
+              (log-message "ACT BLOCKED: Action failed last-mile deterministic check.")
               (setf (getf signal :approved-action) nil)
               (setf feedback verified))
             (progn
@@ -147,41 +141,40 @@ The Act stage dispatches approved actions to registered actuators. After the Pro
               (setf approved verified)))))
 
     (case type
-      (:REQUEST (dispatch-action signal signal))
-      (:LOG (dispatch-action signal signal))
+      (:REQUEST (action-dispatch signal signal))
+      (:LOG (action-dispatch signal signal))
       (:EVENT
        (if approved
            (let* ((target (getf approved :target))
-                  (result (dispatch-action approved signal)))
+                  (result (action-dispatch approved signal)))
              (cond
                ((and (listp result) (member (getf result :type) '(:EVENT :LOG)))
                 (setf feedback result))
-               ((and result (not (member target *silent-actuators*)))
+               ((and result (not (member target *actuator-silent*)))
                 (setf feedback (list :type :EVENT :depth (1+ (getf signal :depth 0)) :meta meta
                                     :payload (list :sensor :tool-output :result result :tool approved))))))
-           (when source (dispatch-action signal signal)))))
+           (when source (action-dispatch signal signal)))))
     (setf (getf signal :status) :acted)
     feedback))
-#+end_src
 
-* Test Suite
-#+begin_src lisp :tangle ../tests/pipeline-act-tests.lisp
+(defun act-gate (signal)
+  (loop-gate-act signal))
+
 (eval-when (:compile-toplevel :load-toplevel :execute)
   (ql:quickload :fiveam :silent t))
 
-(defpackage :opencortex-pipeline-act-tests
-  (:use :cl :fiveam :opencortex)
+(defpackage :passepartout-pipeline-act-tests
+  (:use :cl :fiveam :passepartout)
   (:export #:pipeline-act-suite))
 
-(in-package :opencortex-pipeline-act-tests)
+(in-package :passepartout-pipeline-act-tests)
 
 (def-suite pipeline-act-suite :description "Test suite for Act pipeline")
 (in-suite pipeline-act-suite)
 
-(test test-act-gate-basic
-  (clrhash opencortex::*skills-registry*)
+(test test-loop-gate-act-basic
+  (clrhash passepartout::*skill-registry*)
   (let* ((signal (list :type :EVENT :status nil :depth 0 :approved-action '(:target :cli :payload (:text "Hello"))))
-         (result (act-gate signal)))
+          (result (loop-gate-act signal)))
     (is (eq :acted (getf signal :status)))
     (is (null result))))
-#+end_src

lisp/core-loop-perceive.lisp

@@ -0,0 +1,134 @@
+(in-package :passepartout)
+
+(defvar *loop-interrupt* nil)
+
+(defvar *scope-resolver* nil
+  "If set, function returning current scope keyword. Used by perceive gate.")
+
+(defvar *loop-async-sensors* '(:chat-message :delegation :user-command)
+  "Sensors that are processed in dedicated threads.")
+
+(defvar *loop-focus-id* nil
+  "The Org ID of the node the user is currently interacting with.")
+
+(defvar *pre-reason-handlers* (make-hash-table :test 'eq)
+  "Pre-reason handler registry: sensor keyword → handler function.")
+
+(defun register-pre-reason-handler (sensor fn)
+  "Registers FN to handle signals with SENSOR in the perceive gate.
+FN receives (signal) and returns T if consumed, nil to continue."
+  (setf (gethash sensor *pre-reason-handlers*) fn))
+
+(defun inject-stimulus (raw-message &key stream (depth 0))
+  (stimulus-inject raw-message :stream stream :depth depth))
+
+(defun stimulus-inject (raw-message &key stream (depth 0))
+  "Inject a raw message into the signal processing pipeline."
+  (let* ((payload (getf raw-message :payload))
+         (sensor (getf payload :sensor))
+         (meta (getf raw-message :meta))
+         (async-p (or (getf payload :async-p)
+                     (member sensor *loop-async-sensors*))))
+
+    (unless meta
+      (setf meta (list :SOURCE :SYSTEM :SESSION-ID "internal")))
+
+    (when stream
+      (setf (getf meta :reply-stream) stream))
+
+    (setf (getf raw-message :meta) meta)
+    (setf (getf raw-message :depth) depth)
+
+    (if async-p
+        (bt:make-thread
+         (lambda ()
+           (restart-case (process-signal raw-message)
+             (skip-event () nil)))
+         :name "passepartout-async-task")
+        
+        (restart-case
+            (handler-bind ((error (lambda (c)
+                                    (log-message "SYSTEM ERROR: ~a" c)
+                                    (invoke-restart 'skip-event))))
+              (process-signal raw-message))
+          (skip-event ()
+            (log-message "SYSTEM RECOVERY: Stimulus dropped."))))))
+
+(defun loop-gate-perceive (signal)
+  "Stage 1 of the metabolic pipeline: Normalize sensory input."
+  (let* ((payload (getf signal :payload))
+          (type (getf signal :type))
+          (meta (getf signal :meta))
+          (sensor (getf payload :sensor)))
+    ;; HITL: intercept approval/denial commands before LLM processing
+    (when (and (eq sensor :user-input)
+               (stringp (getf payload :text)))
+      (let ((text (getf payload :text)))
+        (when (ignore-errors (hitl-handle-message text (getf meta :source)))
+          (log-message "GATE [Perceive]: HITL command processed — ~a" text)
+          (return-from loop-gate-perceive signal))))
+    ;; Pre-reason handlers: dispatch custom sensors to registered skill handlers
+    (let ((handler (gethash sensor *pre-reason-handlers*)))
+      (when handler
+        (when (funcall handler signal)
+          (return-from loop-gate-perceive signal))))
+
+    (log-message "GATE [Perceive]: ~a (~a) [Source: ~s]"
+                 type (or sensor "no-sensor") (getf meta :source))
+
+    (cond ((eq type :EVENT)
+            (case sensor
+              (:buffer-update
+               (let ((ast (getf payload :ast)))
+                 (when ast
+                   (snapshot-memory)
+                   (ingest-ast ast :scope (if *scope-resolver* (funcall *scope-resolver*) :memex)))))
+              (:point-update
+               (let ((element (getf payload :element)))
+                 (when element
+                   (snapshot-memory)
+                   (setf *loop-focus-id* (getf element :id))
+                   (ingest-ast element :scope (if *scope-resolver* (funcall *scope-resolver*) :memex)))))
+              (:interrupt
+               (setf *loop-interrupt* t))
+              ;; HITL: re-injected approved action from dispatcher-approvals-process
+              (:approval-required
+               (when (getf payload :approved)
+                 (log-message "GATE [Perceive]: Approved Flight Plan re-injected")
+                  (setf (getf signal :approved) t)
+                 (setf (getf signal :approved-action) (getf payload :action))))
+              ;; Default sensor: pass through without requiring user-input processing
+              (otherwise
+               (log-message "GATE [Perceive]: Unknown sensor ~a, passing through" sensor))))
+          ((eq type :RESPONSE)
+           (log-message "GATE [Perceive]: Act Result -> ~a" (getf payload :status))))
+
+    (setf (getf signal :status) :perceived)
+    (setf (getf signal :foveal-focus) *loop-focus-id*)
+    signal))
+
+(defun perceive-gate (signal)
+  (loop-gate-perceive signal))
+
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-pipeline-perceive-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:pipeline-perceive-suite))
+
+(in-package :passepartout-pipeline-perceive-tests)
+
+(def-suite pipeline-perceive-suite :description "Test suite for Perceive pipeline")
+(in-suite pipeline-perceive-suite)
+
+(test test-loop-gate-perceive
+  (clrhash passepartout::*memory-store*)
+  (let* ((signal (list :type :EVENT :payload (list :sensor :buffer-update :ast (list :type :HEADLINE :properties (list :ID "test-node" :TITLE "Test") :contents nil))))
+         (result (loop-gate-perceive signal)))
+    (is (eq :perceived (getf result :status)))
+    (is (not (null (gethash "test-node" passepartout::*memory-store*))))))
+
+(test test-depth-limiting
+  (let ((runaway-signal (list :type :EVENT :depth 11 :payload (list :sensor :heartbeat))))
+    (is (null (process-signal runaway-signal)))))

lisp/core-loop-reason.lisp

@@ -0,0 +1,214 @@
+(in-package :passepartout)
+
+(defvar *probabilistic-backends* (make-hash-table :test 'equal)
+  "Maps provider keyword → handler function (prompt system-prompt &key model).")
+
+(defun register-probabilistic-backend (name fn)
+  "Register FN as the handler for provider NAME."
+  (setf (gethash name *probabilistic-backends*) fn))
+
+(defvar *backend-registry* (make-hash-table :test 'equal))
+
+(defvar *provider-cascade* nil)
+
+(defvar *model-selector* nil)
+
+(defvar *consensus-enabled* nil)
+
+(defun backend-register (name fn)
+  (setf (gethash name *backend-registry*) fn))
+
+(defun backend-cascade-call (prompt &key
+                                (system-prompt "You are the Probabilistic engine.")
+                                (cascade nil)
+                                (context nil))
+  (let ((backends (or cascade *provider-cascade*))
+        (result nil))
+    (dolist (backend backends (or result
+                                   (list :type :LOG
+                                         :payload (list :text "Neural Cascade Failure: All providers exhausted."))))
+      (let ((backend-fn (or (gethash backend *backend-registry*)
+                            (gethash backend *probabilistic-backends*))))
+        (when backend-fn
+          (log-message "PROBABILISTIC: Attempting backend ~a..." backend)
+          (let* ((model (and *model-selector*
+                             (funcall *model-selector* backend context)))
+                 (skip (eq model :skip))
+                 (r (unless skip
+                      (if (and model (not skip))
+                          (funcall backend-fn prompt system-prompt :model model)
+                          (funcall backend-fn prompt system-prompt)))))
+            (when skip
+              (log-message "PROBABILISTIC: Skipping ~a (filtered)" backend))
+            (cond ((and (listp r) (eq (getf r :status) :success))
+                   (setf result (getf r :content))
+                   (return result))
+                  ((stringp r)
+                   (setf result r)
+                   (return result))
+                  (t
+                   (log-message "PROBABILISTIC: Backend ~a failed: ~a"
+                               backend (getf r :message))))))))))(defun markdown-strip (text)
+  (if (and text (stringp text))
+      (let ((cleaned text))
+        (setf cleaned (cl-ppcre:regex-replace-all "^```[a-z]*\\n" cleaned ""))
+        (setf cleaned (cl-ppcre:regex-replace-all "\\n```$" cleaned ""))
+        (setf cleaned (cl-ppcre:regex-replace-all "```" cleaned ""))
+        (string-trim '(#\Space #\Newline #\Tab) cleaned))
+      text))
+
+(defun plist-keywords-normalize (plist)
+  (when (listp plist)
+    (loop for (k v) on plist by #'cddr
+          collect (if (and (symbolp k) (not (keywordp k)))
+                       (intern (string k) :keyword)
+                       k)
+          collect v)))
+
+(defun think (context)
+  (let* ((active-skill (find-triggered-skill context))
+         (tool-belt (generate-tool-belt-prompt))
+         (global-context (context-assemble-global-awareness))
+         (system-logs (context-get-system-logs))
+         (assistant-name (or (uiop:getenv "MEMEX_ASSISTANT") "Agent"))
+         (rejection-trace (proto-get (proto-get context :payload) :rejection-trace))
+         (prompt-generator (when active-skill (skill-probabilistic-prompt active-skill)))
+         (raw-prompt (if prompt-generator
+                         (funcall prompt-generator context)
+                         (let ((p (proto-get (proto-get context :payload) :text)))
+                           (if (and p (stringp p)) p "Maintain metabolic stasis."))))
+         (reflection-feedback (if rejection-trace
+                                  (format nil "~%~%PREVIOUS PROPOSAL REJECTED: ~a" rejection-trace)
+                                  ""))
+         (skill-augments (let ((augments ""))
+                           (maphash (lambda (name skill)
+                                      (declare (ignore name))
+                                      (let ((aug-fn (skill-system-prompt-augment skill)))
+                                        (when aug-fn
+                                          (let ((aug-text (ignore-errors (funcall aug-fn context))))
+                                            (when (and aug-text (stringp aug-text) (> (length aug-text) 0))
+                                              (setf augments (concatenate 'string augments aug-text (string #\Newline))))))))
+                                    *skill-registry*)
+                           (when (> (length augments) 0) augments)))
+         (system-prompt (format nil "IDENTITY: ~a~a~%~%TOOLS:~%~a~%~%CONTEXT:~%~a~%~%LOGS:~%~a~%~a" 
+                                assistant-name reflection-feedback tool-belt global-context system-logs
+                                (or skill-augments ""))))
+    (let* ((thought (backend-cascade-call raw-prompt :system-prompt system-prompt :context context))
+           (cleaned (if (and (listp thought) (getf thought :type))
+                        (format nil "~a" (getf (getf thought :payload) :text))
+                        (markdown-strip thought))))
+       (if (and cleaned (stringp cleaned) (> (length cleaned) 0) (or (char= (char cleaned 0) #\() (char= (char cleaned 0) #\[)))
+           (handler-case
+                (let ((parsed (read-from-string cleaned)))
+                  (if (listp parsed)
+                      (let ((normalized (plist-keywords-normalize parsed)))
+                        ;; Ensure explanation is present in the payload for policy gate
+                        (let ((payload (proto-get normalized :payload)))
+                          (if (and payload (proto-get payload :explanation))
+                              normalized
+                              (let ((new-payload (list* :EXPLANATION "Generated by the Probabilistic engine."
+                                                        (if (listp payload) payload nil))))
+                                (list* :PAYLOAD new-payload
+                                       (loop for (k v) on normalized by #'cddr
+                                             unless (eq k :PAYLOAD)
+                                             collect k collect v))))))
+                      (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
+             (error () (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
+            (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT (if (stringp cleaned) cleaned "No response") :EXPLANATION "Generated by the Probabilistic engine."))))))
+
+(defun cognitive-verify (proposed-action context)
+  "Runs all registered deterministic gates against the proposed action,
+sorted by priority (highest first). Returns a rejection plist or the action."
+  (let ((current-action (copy-tree proposed-action))
+        (approval-needed nil)
+        (approval-action nil)
+        (gates nil))
+    ;; Collect gates sorted by priority (highest first)
+    (maphash (lambda (name skill)
+               (declare (ignore name))
+               (when (skill-deterministic-fn skill)
+                 (push (cons (skill-priority skill) (skill-deterministic-fn skill)) gates)))
+             *skill-registry*)
+    (setf gates (sort gates #'> :key #'car))
+    (dolist (gate-pair gates)
+      (let ((result (funcall (cdr gate-pair) current-action context)))
+        (cond
+          ((eq (getf result :level) :approval-required)
+           (setf approval-needed t
+                 approval-action (getf (getf result :payload) :action)))
+          ((member (getf result :type) '(:LOG :EVENT))
+           (return-from cognitive-verify result))
+          ((and (listp result) result)
+           (setf current-action result)))))
+    (if approval-needed
+        (list :type :EVENT :level :approval-required
+              :payload (list :sensor :approval-required
+                             :action approval-action))
+        current-action)))
+
+(defun loop-gate-reason (signal)
+  (let* ((type (proto-get signal :type))
+         (payload (proto-get signal :payload))
+         (sensor (proto-get payload :sensor)))
+    (unless (and (eq type :EVENT) (member sensor '(:user-input :chat-message)))
+      (return-from loop-gate-reason signal))
+    (let ((retries 3)
+          (current-signal (copy-tree signal))
+          (last-rejection nil))
+      (loop
+        (when (<= retries 0)
+          (setf (getf signal :approved-action) last-rejection)
+          (setf (getf signal :status) :reasoned)
+          (return signal))
+        (when last-rejection
+          (setf (getf (getf current-signal :payload) :rejection-trace) last-rejection))
+        (let ((candidate (think current-signal)))
+           (if (and candidate (listp candidate))
+               (let ((verified (cognitive-verify candidate current-signal)))
+                 ;; Approval-required is not a rejection — pass to act for Flight Plan
+                 (if (eq (getf verified :level) :approval-required)
+                     (progn
+                       (setf (getf signal :approved-action) verified)
+                       (setf (getf signal :status) :requires-approval)
+                       (return signal))
+                     ;; Hard rejection: retry with feedback
+                     (if (member (getf verified :type) '(:LOG :EVENT))
+                         (progn (decf retries) (setf last-rejection verified))
+                         (progn
+                           (setf (getf signal :approved-action) verified)
+                           (setf (getf signal :status) :reasoned)
+                           (return signal)))))
+              (progn
+                (setf (getf signal :approved-action) nil)
+                (setf (getf signal :status) :reasoned)
+                (return signal))))))))
+
+(defun reason-gate (signal)
+  (loop-gate-reason signal))
+
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-pipeline-reason-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:pipeline-reason-suite))
+
+(in-package :passepartout-pipeline-reason-tests)
+
+(def-suite pipeline-reason-suite :description "Test suite for Reason pipeline")
+(in-suite pipeline-reason-suite)
+
+(test test-decide-gate-safety
+  (clrhash passepartout::*skill-registry*)
+  (passepartout::defskill :mock-safety
+    :priority 50
+    :trigger (lambda (ctx) (declare (ignore ctx)) t)
+    :deterministic (lambda (action ctx)
+                    (declare (ignore ctx))
+                    (if (search "rm -rf" (format nil "~s" action))
+                        (list :type :LOG :payload (list :text "Rejected"))
+                        action)))
+  (let* ((candidate '(:type :REQUEST :payload (:action :shell :cmd "rm -rf /")))
+         (signal '(:type :EVENT :payload (:sensor :user-input)))
+         (result (cognitive-verify candidate signal)))
+    (is (eq :LOG (getf result :type)))))

lisp/core-loop.lisp

@@ -1,80 +1,62 @@
-#+TITLE: The Metabolic Loop (loop.lisp)
-#+AUTHOR: Agent
-#+FILETAGS: :harness:loop:
-#+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle loop.lisp
+(in-package :passepartout)
 
-* Overview
-The Metabolic Loop is the fundamental rhythm of OpenCortex: the continuous processing of signals from perception through cognition to action.
-
-* Implementation
-
-** Package Context
-#+begin_src lisp
-(in-package :opencortex)
-#+end_src
-
-** Global Variables (Thread-Safe)
-#+begin_src lisp
 (defvar *interrupt-flag* nil
   "Atomic flag set by signal handlers to trigger graceful shutdown.")
 
-(defvar *interrupt-lock* (bt:make-lock "harness-interrupt-lock")
+(defvar *loop-interrupt-lock* (bt:make-lock "harness-interrupt-lock")
   "Mutex protecting *interrupt-flag* access.")
 
 (defvar *heartbeat-thread* nil
   "Handle to the heartbeat thread.")
-#+end_src
 
-** Core Engine (process-signal)
-#+begin_src lisp
-(defun process-signal (signal)
+(defun loop-process (signal)
   "The entry point to the Metabolic Pipeline: Perceive -> Reason -> Act."
   (let ((current-signal signal))
     (loop while current-signal do
       (let ((depth (getf current-signal :depth 0))
             (meta (getf current-signal :meta)))
         (when (> depth 10)
-          (harness-log "METABOLISM ERROR: Max recursion depth reached.")
+          (log-message "METABOLISM ERROR: Max recursion depth reached.")
           (return nil))
 
-        (when (bt:with-lock-held (*interrupt-lock*) *interrupt-flag*)
-          (harness-log "METABOLISM: Interrupted by shutdown signal.")
+        (when (bt:with-lock-held (*loop-interrupt-lock*) *interrupt-flag*)
+          (log-message "METABOLISM: Interrupted by shutdown signal.")
           (return nil))
 
         (handler-case
-            (progn
-              (setf current-signal (perceive-gate current-signal))
-              (setf current-signal (reason-gate current-signal))
-              (let ((feedback (act-gate current-signal)))
-                (if feedback
-                    (progn
-                      (unless (getf feedback :meta) (setf (getf feedback :meta) meta))
-                      (setf current-signal feedback))
-                    (setf current-signal nil))))
+             (progn
+               (setf current-signal (perceive-gate current-signal))
+               (setf current-signal (reason-gate current-signal))
+               (let ((feedback (act-gate current-signal)))
+                 (if feedback
+                     (progn
+                       (unless (getf feedback :meta) (setf (getf feedback :meta) meta))
+                       (setf current-signal feedback))
+                     (setf current-signal nil))))
           (error (c)
             (let ((sensor (ignore-errors (getf (getf current-signal :payload) :sensor))))
-              (harness-log "METABOLISM CRASH [~a]: ~a" (or sensor :unknown) c)
+              (log-message "METABOLISM CRASH [~a]: ~a" (or sensor :unknown) c)
               (unless (member sensor '(:loop-error :tool-error :syntax-error))
-                (harness-log "CRITICAL ERROR: Initiating Micro-Rollback.")
+                (log-message "CRITICAL ERROR: Initiating Micro-Rollback.")
                 (rollback-memory 0))
               (if (or (> depth 2) (member sensor '(:loop-error :tool-error)))
                   (setf current-signal nil)
                   (setf current-signal
                         (list :type :EVENT :depth (1+ depth) :meta meta
                               :payload (list :sensor :loop-error :message (format nil "~a" c) :depth depth)))))))))))
-#+end_src
 
-** Heartbeat Mechanism
-#+begin_src lisp
-(defvar *auto-save-interval* 300)
+(defun process-signal (signal)
+  (loop-process signal))
+
+(defvar *memory-auto-save-interval* 300)
+
 (defvar *heartbeat-save-counter* 0)
 
-(defun start-heartbeat ()
+(defun heartbeat-start ()
   "Starts the background heartbeat thread."
   (let ((interval (or (ignore-errors (parse-integer (uiop:getenv "HEARTBEAT_INTERVAL"))) 60))
-        (auto-save (or (ignore-errors (parse-integer (uiop:getenv "MEMORY_AUTO_SAVE_INTERVAL"))) *auto-save-interval*)))
-    (setf *auto-save-interval* auto-save)
+        (auto-save (or (ignore-errors (parse-integer (uiop:getenv "MEMORY_AUTO_SAVE_INTERVAL"))) *memory-auto-save-interval*)))
+    (setf *memory-auto-save-interval* auto-save)
     (setf *heartbeat-save-counter* 0)
 
     (setf *heartbeat-thread*
@@ -83,31 +65,22 @@ The Metabolic Loop is the fundamental rhythm of OpenCortex: the continuous proce
              (loop
                (sleep interval)
                (incf *heartbeat-save-counter*)
-               (when (>= *heartbeat-save-counter* (/ *auto-save-interval* interval))
+               (when (>= *heartbeat-save-counter* (/ *memory-auto-save-interval* interval))
                  (setf *heartbeat-save-counter* 0)
                  (save-memory-to-disk))
-               (inject-stimulus
-                 (list :type :EVENT :payload (list :sensor :heartbeat :unix-time (get-universal-time))))))
-           :name "opencortex-heartbeat"))))
-#+end_src
+               (stimulus-inject
+                  (list :type :EVENT :payload (list :sensor :heartbeat :unix-time (get-universal-time))))))
+           :name "passepartout-heartbeat"))))
 
-** Shutdown Flag
-#+begin_src lisp
 (defvar *shutdown-save-enabled* t)
-#+end_src
 
-** Health Status
-#+begin_src lisp
 (defvar *system-health* :unknown
   "Current system health status: :healthy, :degraded, :unhealthy, or :unknown.")
 
 (defvar *health-check-ran* nil
   "Flag indicating if initial health check has completed.")
-#+end_src
 
-** Proactive Doctor
-#+begin_src lisp
-(defun run-startup-health-check ()
+(defun diagnostics-startup-run ()
   "Runs the doctor diagnostics on startup. Returns health status."
   (format t "~%")
   (format t "==================================================~%")
@@ -125,74 +98,78 @@ The Metabolic Loop is the fundamental rhythm of OpenCortex: the continuous proce
                 (progn
                   (setf *system-health* :degraded)
                   (format t "DAEMON: Health check found issues.~%")
-                  (format t "         Run 'opencortex doctor --fix' to repair.~%")))))
+                  (format t "         Run 'passepartout doctor --fix' to repair.~%")))))
         (setf *health-check-ran* t))
     (error (c)
       (format t "DOCTOR ERROR: ~a~%" c)
       (setf *system-health* :unhealthy)
       (setf *health-check-ran* t)))
   (format t "==================================================~%~%"))
-#+end_src
 
-** Main Entry Point (main)
-#+begin_src lisp
 (defun main ()
-  "Entry point for OpenCortex. Initializes the system and enters idle loop."
+  "Entry point for Passepartout. Initializes the system and enters idle loop."
   (let* ((home (uiop:getenv "HOME"))
-         (env-file (uiop:merge-pathnames* ".config/opencortex/.env" (uiop:ensure-directory-pathname home))))
+         (env-file (uiop:merge-pathnames* ".config/passepartout/.env" (uiop:ensure-directory-pathname home))))
     (when (uiop:file-exists-p env-file)
       (cl-dotenv:load-env env-file)))
 
   (load-memory-from-disk)
-  (initialize-actuators)
-  (initialize-all-skills)
+  (actuator-initialize)
+  (skill-initialize-all)
+  
+  ;; Check for configured LLM providers
+  (when (zerop (hash-table-count *probabilistic-backends*))
+    (log-message "WELCOME: No LLM providers configured. Run 'passepartout tui' and press F2 to set up.")
+    (log-message "WELCOME: Supported providers: openrouter, openai, anthropic, groq, gemini, deepseek, nvidia")
+    (log-message "WELCOME: For free tier, start with OPENROUTER_API_KEY at https://openrouter.ai"))
   
   ;; Run proactive doctor before starting services
-  (run-startup-health-check)
+  (diagnostics-startup-run)
   
-  (start-heartbeat)
+  (heartbeat-start)
   (start-daemon)
 
   #+sbcl
   (sb-sys:enable-interrupt sb-unix:sigint
                             (lambda (sig code scp)
                               (declare (ignore sig code scp))
-                              (harness-log "SHUTDOWN: SIGINT received. Saving memory...")
+                              (log-message "SHUTDOWN: SIGINT received. Saving memory...")
                               (when *shutdown-save-enabled* (save-memory-to-disk))
                               (uiop:quit 0)))
 
   (let ((sleep-interval (or (ignore-errors (parse-integer (uiop:getenv "DAEMON_SLEEP_INTERVAL"))) 3600)))
     (loop
-      (when (bt:with-lock-held (*interrupt-lock*) *interrupt-flag*)
-        (harness-log "SHUTDOWN: Interrupt flag set. Saving memory...")
+      (when (bt:with-lock-held (*loop-interrupt-lock*) *interrupt-flag*)
+        (log-message "SHUTDOWN: Interrupt flag set. Saving memory...")
         (when *shutdown-save-enabled* (save-memory-to-disk))
         (return))
       (sleep sleep-interval))))
-#+end_src
 
-* Test Suite
-#+begin_src lisp :tangle ../tests/immune-system-tests.lisp
+(defun providers-configured-p ()
+  "Returns T if at least one probabilistic backend is registered."
+  (and (boundp '*probabilistic-backends*)
+       (> (hash-table-count *probabilistic-backends*) 0)))
+
 (eval-when (:compile-toplevel :load-toplevel :execute)
   (ql:quickload :fiveam :silent t))
 
-(defpackage :opencortex-immune-system-tests
-  (:use :cl :fiveam :opencortex)
+(defpackage :passepartout-immune-system-tests
+  (:use :cl :fiveam :passepartout)
   (:export #:immune-suite))
 
-(in-package :opencortex-immune-system-tests)
+(in-package :passepartout-immune-system-tests)
 
 (def-suite immune-suite :description "Verification of the Immune System (Core Error Hooks)")
 (in-suite immune-suite)
 
 (test loop-error-injection
   "Verify that a crash in think/decide triggers a :loop-error stimulus."
-  (clrhash opencortex::*skills-registry*)
-  (opencortex:defskill :evil-skill
+  (clrhash passepartout::*skills-registry*)
+  (passepartout:defskill :evil-skill
     :priority 100
     :trigger (lambda (ctx) (eq (getf (getf ctx :payload) :sensor) :user-input))
     :probabilistic (lambda (ctx) (declare (ignore ctx)) (error "CRITICAL BRAIN FAILURE"))
     :deterministic nil)
-  (opencortex:process-signal '(:type :EVENT :payload (:sensor :user-input)))
-  (let ((logs (opencortex:context-get-system-logs 20)))
+  (passepartout:loop-process '(:type :EVENT :payload (:sensor :user-input)))
+  (let ((logs (passepartout:context-get-system-logs 20)))
     (is (not (null (find-if (lambda (line) (search "CRITICAL BRAIN FAILURE" line)) logs))))))
-#+end_src

lisp/core-memory.lisp

@@ -0,0 +1,166 @@
+(in-package :passepartout)
+
+(defvar *memory-store* (make-hash-table :test 'equal))
+
+(defvar *memory-history* (make-hash-table :test 'equal)
+  "Immutable Merkle-Tree versioning store mapping hashes to objects.")
+
+(defun memory-object-get (id)
+  "Retrieves an memory-object by ID from *memory-store*."
+  (gethash id *memory-store*))
+
+(defun memory-objects-by-attribute (attr value)
+  "Returns all memory-objects whose :ATTRIBUTES plist has ATTR = VALUE."
+  (let ((results nil))
+    (maphash (lambda (id obj)
+               (declare (ignore id))
+               (when (equal (getf (memory-object-attributes obj) attr) value)
+                 (push obj results)))
+             *memory-store*)
+    (nreverse results)))
+
+(defun memory-id-generate ()
+  "Generates a UUIDv4 unique ID. Compatible with Agora Note UUIDs."
+  (concatenate 'string "id-" (string-downcase (format nil "~a" (uuid:make-v4-uuid)))))
+
+(defstruct memory-object
+  id type attributes content vector parent-id children version last-sync hash scope)
+
+(defmethod make-load-form ((obj memory-object) &optional env)
+  (make-load-form-saving-slots obj :environment env))
+
+(defun deep-copy-memory-object (obj)
+  "Creates a full copy of an memory-object, including fresh lists for attributes and children."
+  (make-memory-object :id (memory-object-id obj)
+                  :type (memory-object-type obj)
+                  :attributes (copy-list (memory-object-attributes obj))
+                  :content (memory-object-content obj)
+                  :vector (memory-object-vector obj)
+                  :parent-id (memory-object-parent-id obj)
+                  :children (copy-list (memory-object-children obj))
+                  :version (memory-object-version obj)
+                  :last-sync (memory-object-last-sync obj)
+                  :hash (memory-object-hash obj)
+                  :scope (memory-object-scope obj)))
+
+(defun memory-merkle-hash (id type attributes content child-hashes)
+  (let* ((alist (loop for (k v) on attributes by #'cddr collect (cons k v)))
+         (sorted-alist (sort alist #'string< :key (lambda (x) (format nil "~a" (car x)))))
+         (attr-string (format nil "~s" sorted-alist))
+         (children-string (format nil "~{~a~}" child-hashes))
+         (data-string (format nil "ID:~a|TYPE:~s|ATTRS:~a|CONTENT:~a|CHILDREN:~a"
+                               id type attr-string (or content "") children-string))
+         (digester (ironclad:make-digest :sha256)))
+    (ironclad:update-digest digester (ironclad:ascii-string-to-byte-array data-string))
+    (ironclad:byte-array-to-hex-string (ironclad:produce-digest digester))))
+
+(defun ingest-ast (ast &key parent-id (scope :memex))
+  (let* ((type (getf ast :type))
+         (props (getf ast :properties))
+         (id (or (getf props :ID) (format nil "temp-~a" (get-universal-time))))
+         (contents (getf ast :contents))
+         (raw-content (when (eq type :HEADLINE)
+                        (format nil "~a~%~a" (getf props :TITLE) (or (getf ast :raw-content) ""))))
+         (child-ids nil) (child-hashes nil))
+    (dolist (child contents)
+      (when (listp child)
+        (let ((child-id (ingest-ast child :parent-id id :scope scope)))
+          (push child-id child-ids)
+          (let ((child-obj (gethash child-id *memory-store*)))
+            (when child-obj (push (memory-object-hash child-obj) child-hashes))))))
+    (setf child-ids (nreverse child-ids))
+    (setf child-hashes (nreverse child-hashes))
+    (let* ((hash (memory-merkle-hash id type props raw-content child-hashes))
+           (existing-obj (gethash hash *memory-history*))
+           (obj (or existing-obj
+                    (make-memory-object 
+                     :id id :type type :attributes props :content raw-content
+                     :parent-id parent-id :children child-ids
+                     :version (get-universal-time) :last-sync (get-universal-time)
+                     :hash hash :scope scope))))
+      (unless existing-obj (setf (gethash hash *memory-history*) obj))
+      (setf (gethash id *memory-store*) obj)
+      id)))
+
+(defvar *memory-snapshots* nil)
+
+(defun memory-hash-table-copy (hash-table)
+  "Creates an independent copy of a hash table."
+  (let ((new-table (make-hash-table :test (hash-table-test hash-table) 
+                                     :size (hash-table-size hash-table))))
+    (maphash (lambda (k v) (setf (gethash k new-table) v)) hash-table)
+    new-table))
+
+(defun snapshot-memory ()
+  "Creates a CoW snapshot of *memory-store* for rollback recovery."
+  (let ((snapshot (make-hash-table :test 'equal :size (hash-table-size *memory-store*))))
+    (maphash (lambda (k v) (setf (gethash k snapshot) (deep-copy-memory-object v))) *memory-store*)
+    (push (list :timestamp (get-universal-time) :data snapshot) *memory-snapshots*)
+    (when (> (length *memory-snapshots*) 20)
+      (setf *memory-snapshots* (subseq *memory-snapshots* 0 20)))
+    (log-message "MEMORY - CoW Memory snapshot created.")))
+
+(defun rollback-memory (&optional (index 0))
+  "Restores *memory-store* from a snapshot. INDEX 0 = most recent."
+  (let ((snapshot (nth index *memory-snapshots*)))
+    (if snapshot
+        (progn (setf *memory-store* (memory-hash-table-copy (getf snapshot :data)))
+               (log-message "MEMORY - Memory rolled back to snapshot ~a" index))
+        (log-message "MEMORY ERROR - Snapshot ~a not found." index))))
+
+(defvar *memory-snapshot-path* nil)
+
+(defun memory-snapshot-path-ensure ()
+  "Returns the path to the memory snapshot file, resolving env or default."
+  (or *memory-snapshot-path*
+      (let ((env-path (uiop:getenv "MEMORY_SNAPSHOT_PATH")))
+        (setf *memory-snapshot-path*
+              (or env-path (namestring (uiop:merge-pathnames* "memory.snap" (user-homedir-pathname))))))))
+
+(defun save-memory-to-disk ()
+  "Writes the entire memory and history store to disk as a plist."
+  (let ((path (memory-snapshot-path-ensure)))
+    (with-open-file (stream path :direction :output :if-exists :supersede :if-does-not-exist :create)
+      (let ((memory-alist nil) (history-alist nil))
+        (maphash (lambda (k v) (push (cons k v) memory-alist)) *memory-store*)
+        (maphash (lambda (k v) (push (cons k v) history-alist)) *memory-history*)
+        (prin1 (list :memory memory-alist :history-store history-alist) stream)))
+    (log-message "MEMORY - Saved to ~a" path)))
+
+(defun load-memory-from-disk ()
+  "Reads memory state from disk and restores *memory-store* and *memory-history*."
+  (let ((path (memory-snapshot-path-ensure)))
+    (when (uiop:file-exists-p path)
+      (handler-case
+          (with-open-file (stream path :direction :input)
+            (let ((data (read stream nil)))
+              (when data
+                (let ((memory-alist (getf data :memory)) (history-alist (getf data :history-store)))
+                  (setf *memory-store* (make-hash-table :test 'equal :size (length memory-alist)))
+                  (dolist (kv memory-alist) (setf (gethash (car kv) *memory-store*) (cdr kv)))
+                  (setf *memory-history* (make-hash-table :test 'equal :size (length history-alist)))
+                  (dolist (kv history-alist) (setf (gethash (car kv) *memory-history*) (cdr kv)))
+                  (log-message "MEMORY - Loaded from ~a (~a objects)" path (hash-table-size *memory-store*))))))
+          (error (c) (log-message "MEMORY WARNING - Failed to load snapshot: ~a" c)))))
+  t)
+
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-memory-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:memory-suite))
+
+(in-package :passepartout-memory-tests)
+
+(def-suite memory-suite :description "Tests for the Merkle-Tree Memory")
+(in-suite memory-suite)
+
+(test merkle-hash-consistency
+  (let* ((ast1 '(:type :HEADLINE :properties (:ID "test-1" :TITLE "Node 1") :contents nil)))
+    (clrhash passepartout::*memory-store*)
+    (let ((id1 (ingest-ast ast1)))
+      (let ((hash1 (memory-object-hash (memory-object-get id1))))
+        (clrhash passepartout::*memory-store*)
+        (let ((id2 (ingest-ast ast1)))
+          (is (equal hash1 (memory-object-hash (memory-object-get id2)))))))))

lisp/core-skills.lisp

@@ -1,6 +1,6 @@
-(in-package :opencortex)
+(in-package :passepartout)
 
-(defun COSINE-SIMILARITY (v1 v2)
+(defun vector-cosine-similarity (v1 v2)
   "Computes cosine similarity between two vectors."
   (let* ((len1 (length v1)) (len2 (length v2)))
     (if (or (zerop len1) (zerop len2))
@@ -16,14 +16,18 @@
 
 (defstruct skill name priority dependencies trigger-fn probabilistic-prompt deterministic-fn system-prompt-augment)
 
-(defvar *skills-registry* (make-hash-table :test 'equal))
+(defvar *skill-registry* (make-hash-table :test 'equal))
 
 (defvar *skill-catalog* (make-hash-table :test 'equal)
   "Tracks all discovered skill files and their loading state.")
 
 (defstruct skill-entry filename (status :discovered) error-log (load-time 0))
 
+;; Alias: find-triggered-skill → skill-triggered-find
 (defun find-triggered-skill (context)
+  (skill-triggered-find context))
+
+(defun skill-triggered-find (context)
   "Returns the highest priority skill whose trigger matches context."
   (let ((triggered nil))
     (maphash (lambda (name skill) 
@@ -31,12 +35,12 @@
                (when (and (skill-probabilistic-prompt skill)
                           (ignore-errors (funcall (skill-trigger-fn skill) context)))
                  (push skill triggered))) 
-              *skills-registry*)
+               *skill-registry*)
     (first (sort triggered #'> :key #'skill-priority))))
 
 (defmacro defskill (name &key priority dependencies trigger probabilistic deterministic system-prompt-augment)
   "Registers a new skill. NAME is a keyword. TRIGGER is a function (context) → bool."
-  `(setf (gethash (string-downcase (string ,name)) *skills-registry*)
+  `(setf (gethash (string-downcase (string ,name)) *skill-registry*)
          (make-skill :name (string-downcase (string ,name)) 
                     :priority (or ,priority 10) 
                     :dependencies ',dependencies
@@ -45,20 +49,20 @@
                     :deterministic-fn ,deterministic
                     :system-prompt-augment ,system-prompt-augment)))
 
-(defun resolve-skill-dependencies (skill-name)
+(defun skill-dependencies-resolve (skill-name)
   "Resolves transitive dependencies. Returns list of skill names in dependency order."
   (let ((resolved nil) (seen nil))
     (labels ((visit (name) 
                (unless (member name seen :test #'equal) 
                  (push name seen)
-                 (let ((skill (gethash (string-downcase (string name)) *skills-registry*)))
+                 (let ((skill (gethash (string-downcase (string name)) *skill-registry*)))
                    (when skill 
                      (dolist (dep (skill-dependencies skill)) (visit dep))))
                  (push name resolved))))
       (visit skill-name) 
       (nreverse resolved))))
 
-(defun parse-skill-metadata (filepath)
+(defun skill-metadata-parse (filepath)
   "Extracts ID and DEPENDS_ON tags from org file."
   (let ((dependencies nil) (id nil) (content (uiop:read-file-string filepath)))
     (let ((id-start (search ":ID:" content)))
@@ -75,11 +79,32 @@
                 (setf pos end)))))
     (values id (reverse dependencies))))
 
-(defun topological-sort-skills (skills-dir)
+(defun skill-topological-sort (skills-dir)
   "Returns a list of skill filepaths sorted by dependency."
-  (let* ((org-files (uiop:directory-files skills-dir "org-skill-*.org"))
-         (lisp-files (uiop:directory-files skills-dir "org-skill-*.lisp"))
-         (files (append org-files lisp-files))
+  (let* ((org-files (uiop:directory-files skills-dir "*.org"))
+         (lisp-files (uiop:directory-files skills-dir "*.lisp"))
+         (all-files (append org-files lisp-files))
+         (files (remove-if (lambda (f)
+                             (let ((n (pathname-name f)))
+                                (or (string= n "core-defpackage")
+                                    (string= n "core-skills")
+                                    (string= n "core-communication")
+                                    (string= n "core-memory")
+                                    (string= n "core-context")
+                                    (string= n "core-loop-perceive")
+                                    (string= n "core-loop-reason")
+                                    (string= n "core-loop-act")
+                                    (string= n "core-loop")
+                                    (string= n "core-manifest")
+                                    (string= n "security-dispatcher")
+                                    (string= n "system-model-router")
+                                    (string= n "system-model-embedding")
+                                     (string= n "system-model-explorer")
+                                     (string= n "gateway-tui")
+                                     (string= n "gateway-tui-model")
+                                     (string= n "gateway-tui-view")
+                                     (string= n "gateway-tui-main"))))
+                           all-files))
         (adj (make-hash-table :test 'equal))
         (name-to-file (make-hash-table :test 'equal))
         (id-to-file (make-hash-table :test 'equal))
@@ -91,10 +116,9 @@
         (if (uiop:string-suffix-p (namestring file) ".lisp")
             (progn
               (setf (gethash (string-downcase filename) name-to-file) file)
-              ;; Don't overwrite dependency info from .org files
               (unless (gethash (string-downcase filename) adj)
                 (setf (gethash (string-downcase filename) adj) nil)))
-            (multiple-value-bind (id deps) (parse-skill-metadata file)
+            (multiple-value-bind (id deps) (skill-metadata-parse file)
               (setf (gethash (string-downcase filename) name-to-file) file)
               (when id (setf (gethash (string-downcase id) id-to-file) file))
               (setf (gethash (string-downcase filename) adj) deps)))))
@@ -124,7 +148,7 @@
             (when file (visit file)))))
       (nreverse result))))
 
-(defun validate-lisp-syntax (code-string)
+(defun lisp-syntax-validate (code-string)
   "Checks if a string contains valid Common Lisp forms."
   (handler-case
       (let ((*read-eval* nil))
@@ -133,7 +157,7 @@
         (values t nil))
     (error (c) (values nil (format nil "~a" c)))))
 
-(defun remove-in-package-forms (code-string)
+(defun skill-package-forms-strip (code-string)
   "Removes in-package forms so symbols get defined in skill package."
   (let ((lines (uiop:split-string code-string :separator '(#\Newline)))
         (result ""))
@@ -143,11 +167,11 @@
           (setf result (concatenate 'string result line (string #\Newline))))))
     result))
 
-(defun extract-tangle-target (line)
+(defun tangle-target-extract (line)
   "Extracts the value of the :tangle header."
   (let ((pos (search ":tangle" line)))
     (when pos
-      (let ((rest (string-trim '(#\Space #\Tab) (subseq line (+ pos 7)))))
+      (let ((rest (string-tirm '(#\Space #\Tab) (subseq line (+ pos 7)))))
         (let ((end (position #\Space rest)))
           (if end (subseq rest 0 end) rest))))))
 
@@ -160,15 +184,13 @@
         (let* ((content (uiop:read-file-string filepath))
                (lines (uiop:split-string content :separator '(#\Newline)))
                (in-lisp-block nil) (collect-this-block nil) (lisp-code "")
-               (pkg-name (intern (string-upcase (format nil "OPENCORTEX.SKILLS.~a" skill-base-name)) :keyword)))
+               (pkg-name (intern (string-upcase (format nil "PASSEPARTOUT.SKILLS.~a" skill-base-name)) :keyword)))
           (dolist (line lines)
             (let ((clean-line (string-trim '(#\Space #\Tab #\Return) line)))
               (cond
                 ((uiop:string-prefix-p "#+begin_src lisp" clean-line)
                  (setf in-lisp-block t)
-                 (let ((target (extract-tangle-target clean-line)))
-                   ;; Collect if there's no tangle target (inherits from file)
-                   ;; or if it's a lisp file and NOT a test.
+                 (let ((target (tangle-target-extract clean-line)))
                    (setf collect-this-block (or (null target)
                                                 (and (not (search "no" target))
                                                      (not (search "/tests" target)))))))
@@ -176,46 +198,40 @@
                  (setf in-lisp-block nil) (setf collect-this-block nil))
                 ((and in-lisp-block collect-this-block)
                  (unless (or (uiop:string-prefix-p ":PROPERTIES:" (string-upcase clean-line))
-                             (uiop:string-prefix-p ":END:" (string-upcase clean-line))
-                             (uiop:string-prefix-p ":ID:" (string-upcase clean-line)))
+                              (uiop:string-prefix-p ":END:" (string-upcase clean-line))
+                              (uiop:string-prefix-p ":ID:" (string-upcase clean-line)))
                    (setf lisp-code (concatenate 'string lisp-code line (string #\Newline))))))))
           (if (= (length lisp-code) 0)
               (setf (skill-entry-status entry) :ready)
               (progn
-                (multiple-value-bind (valid-p err) (validate-lisp-syntax lisp-code)
+                (multiple-value-bind (valid-p err) (lisp-syntax-validate lisp-code)
                   (unless valid-p (error err)))
                 (unless (find-package pkg-name)
-                  (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :opencortex new-pkg)))
+                  (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :passepartout new-pkg)))
                 (let ((*read-eval* nil) (*package* (find-package pkg-name)))
-                  (harness-log "LOADER: Evaluating code for '~a' in package ~a" skill-base-name (package-name *package*))
+                  (log-message "LOADER: Evaluating code for '~a' in package ~a" skill-base-name (package-name *package*))
                   (eval (read-from-string (format nil "(progn ~a)" lisp-code))))
 
-                ;; Export symbols back to :OPENCORTEX for discoverability and testing
-                (let* ((target-pkg (find-package :opencortex))
-                       (raw-name (string-upcase skill-base-name))
-                       (short-name (if (uiop:string-prefix-p "ORG-SKILL-" raw-name)
-                                       (subseq raw-name 10)
-                                       raw-name)))
-                  (harness-log "LOADER: Scanning package ~a for symbols to export..." (package-name (find-package pkg-name)))
+                (let ((target-pkg (find-package :passepartout))
+                      (exported 0)
+                      (seen (make-hash-table :test 'equal)))
                   (do-symbols (sym (find-package pkg-name))
-                    (when (eq (symbol-package sym) (find-package pkg-name))
-                      (let ((sn (symbol-name sym)))
-                        (when (or (uiop:string-prefix-p raw-name sn)
-                                  (uiop:string-prefix-p short-name sn)
-                                  (string-equal sn "DOCTOR-MAIN")
-                                  (string-equal sn "RUN-SETUP-WIZARD"))
-                          (harness-log "LOADER: Exporting ~a to :OPENCORTEX" sn)
-                          ;; Resolve potential name conflicts by uninterning first
-                          (let ((existing (find-symbol sn target-pkg)))
-                            (when (and existing (not (eq existing sym)))
-                              (unintern existing target-pkg)))
-                          (import sym target-pkg)
-                          (export sym target-pkg))))))
+                    (when (and (eq (symbol-package sym) (find-package pkg-name))
+                               (or (fboundp sym) (boundp sym))
+                               (not (gethash (symbol-name sym) seen)))
+                      (setf (gethash (symbol-name sym) seen) t)
+                      (incf exported)
+                      (let ((existing (find-symbol (symbol-name sym) target-pkg)))
+                        (when existing (unintern existing target-pkg)))
+                      (import sym target-pkg)
+                      (export sym target-pkg)))
+                  (log-message "LOADER: Exported ~a symbols from ~a to :PASSEPARTOUT"
+                               exported (package-name (find-package pkg-name))))
 
                 (setf (skill-entry-status entry) :ready)))
           t)
       (error (c)
-        (harness-log "LOADER ERROR in skill '~a': ~a" skill-base-name c)
+        (log-message "LOADER ERROR in skill '~a': ~a" skill-base-name c)
         (setf (skill-entry-status entry) :failed) nil))))
 
 (defun load-skill-from-lisp (filepath)
@@ -224,53 +240,47 @@
          (entry (or (gethash skill-base-name *skill-catalog*) (setf (gethash skill-base-name *skill-catalog*) (make-skill-entry :filename skill-base-name)))))
     (setf (skill-entry-status entry) :loading)
     (handler-case
-        (let* ((content (remove-in-package-forms (uiop:read-file-string filepath)))
-               (pkg-name (intern (string-upcase (format nil "OPENCORTEX.SKILLS.~a" skill-base-name)) :keyword)))
-          (multiple-value-bind (valid-p err) (validate-lisp-syntax content)
+        (let* ((content (skill-package-forms-strip (uiop:read-file-string filepath)))
+               (pkg-name (intern (string-upcase (format nil "PASSEPARTOUT.SKILLS.~a" skill-base-name)) :keyword)))
+          (multiple-value-bind (valid-p err) (lisp-syntax-validate content)
             (unless valid-p (error err)))
           (unless (find-package pkg-name)
-            (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :opencortex new-pkg)))
+            (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :passepartout new-pkg)))
           (let ((*read-eval* nil) (*package* (find-package pkg-name)))
-            (harness-log "LOADER: Loading .lisp skill '~a' in package ~a" skill-base-name (package-name *package*))
-            ;; Evaluate forms individually so one bad form doesn't abort the entire skill
+            (log-message "LOADER: Loading .lisp skill '~a' in package ~a" skill-base-name (package-name *package*))
             (with-input-from-string (s content)
               (loop for form = (read s nil :eof) until (eq form :eof)
                     do (handler-case (eval form)
-                         (error (c) (harness-log "LOADER WARNING in '~a': ~a" skill-base-name c))))))
-          ;; Export symbols
-          (let* ((target-pkg (find-package :opencortex))
-                 (raw-name (string-upcase skill-base-name))
-                 (short-name (if (uiop:string-prefix-p "ORG-SKILL-" raw-name)
-                                 (subseq raw-name 10)
-                                 raw-name)))
-            (harness-log "LOADER: Scanning package ~a for symbols to export..." (package-name (find-package pkg-name)))
+                         (error (c) (log-message "LOADER WARNING in '~a': ~a" skill-base-name c))))))
+          (let ((target-pkg (find-package :passepartout))
+                (exported 0)
+                (seen (make-hash-table :test 'equal)))
             (do-symbols (sym (find-package pkg-name))
-              (when (eq (symbol-package sym) (find-package pkg-name))
-                (let ((sn (symbol-name sym)))
-                  (when (or (uiop:string-prefix-p raw-name sn)
-                            (uiop:string-prefix-p short-name sn)
-                            (string-equal sn "DOCTOR-MAIN")
-                            (string-equal sn "RUN-SETUP-WIZARD"))
-                    (harness-log "LOADER: Exporting ~a to :OPENCORTEX" sn)
-                    (let ((existing (find-symbol sn target-pkg)))
-                      (when (and existing (not (eq existing sym)))
-                        (unintern existing target-pkg)))
-                    (import sym target-pkg)
-                    (export sym target-pkg))))))
+              (when (and (eq (symbol-package sym) (find-package pkg-name))
+                         (or (fboundp sym) (boundp sym))
+                         (not (gethash (symbol-name sym) seen)))
+                (setf (gethash (symbol-name sym) seen) t)
+                (incf exported)
+                (let ((existing (find-symbol (symbol-name sym) target-pkg)))
+                  (when existing (unintern existing target-pkg)))
+                (import sym target-pkg)
+                (ignore-errors (export sym target-pkg))))
+            (log-message "LOADER: Exported ~a symbols from ~a to :PASSEPARTOUT"
+                         exported (package-name (find-package pkg-name))))
           (setf (skill-entry-status entry) :ready))
       (error (c)
-        (harness-log "LOADER ERROR in skill '~a': ~a" skill-base-name c)
+        (log-message "LOADER ERROR in skill '~a': ~a" skill-base-name c)
         (setf (skill-entry-status entry) :failed) nil))))
 
-(defun initialize-all-skills ()
-  "Initializes all skills from the XDG skills directory."
-  (let* ((data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "OC_DATA_DIR") (namestring (merge-pathnames ".local/share/opencortex/" (user-homedir-pathname))))))
-         (skills-dir (merge-pathnames "skills/" data-dir)))
-    (unless (uiop:directory-exists-p skills-dir) (return-from initialize-all-skills nil))
-    (let ((sorted-files (topological-sort-skills skills-dir)))
-      (harness-log "LOADER: Initializing ~a skills..." (length sorted-files))
+(defun skill-initialize-all ()
+  "Initializes all skills from the XDG data directory."
+  (let* ((data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "PASSEPARTOUT_DATA_DIR") (namestring (merge-pathnames ".local/share/passepartout/" (user-homedir-pathname))))))
+         (skills-dir (merge-pathnames "lisp/" (uiop:ensure-directory-pathname data-dir))))
+    (unless (uiop:directory-exists-p skills-dir) (return-from skill-initialize-all nil))
+    (let ((sorted-files (skill-topological-sort skills-dir)))
+      (log-message "LOADER: Initializing ~a skills..." (length sorted-files))
       (dolist (file sorted-files)
         (if (uiop:string-suffix-p (namestring file) ".lisp")
             (load-skill-from-lisp file)
             (load-skill-from-org file)))
-      (harness-log "LOADER: Boot Complete."))))
+      (log-message "LOADER: Boot Complete."))))

lisp/gateway-cli.lisp

@@ -0,0 +1,10 @@
+(defun gateway-cli-input (text)
+  "Processes raw text from the command line."
+  (inject-stimulus (list :type :EVENT 
+                         :payload (list :sensor :user-input :text text) 
+                         :meta (list :source :CLI))))
+
+(defskill :passepartout-gateway-cli
+  :priority 100
+  :trigger (lambda (ctx) (eq (getf (getf ctx :meta) :source) :CLI))
+  :deterministic (lambda (action ctx) (declare (ignore ctx)) action))

lisp/gateway-messaging.lisp

@@ -0,0 +1,216 @@
+(in-package :passepartout)
+
+(defvar *gateway-configs* (make-hash-table :test 'equal)
+  "Maps platform name to plist (:token :thread :interval :enabled)")
+
+(defvar *gateway-registry* (make-hash-table :test 'equal)
+  "Maps platform name to plist (:poll-fn :send-fn :default-interval)")
+
+(defun telegram-get-token ()
+  (vault-get-secret :telegram))
+
+(defun telegram-poll ()
+  "Polls Telegram for new messages and injects them into the harness."
+  (let* ((token (telegram-get-token)))
+    (when token
+      (let* ((last-id (getf (gethash "telegram" *gateway-configs*) :last-update-id 0))
+             (url (format nil "https://api.telegram.org/bot~a/getUpdates?offset=~a"
+                          token (1+ last-id))))
+        (handler-case
+            (let* ((response (dex:get url))
+                   (json (cl-json:decode-json-from-string response))
+                   (updates (cdr (assoc :result json))))
+              (dolist (update updates)
+                (let* ((update-id (cdr (assoc :update--id update)))
+                       (message (cdr (assoc :message update)))
+                       (chat (cdr (assoc :chat message)))
+                       (chat-id (cdr (assoc :id chat)))
+                       (text (cdr (assoc :text message))))
+                  (setf (getf (gethash "telegram" *gateway-configs*) :last-update-id) update-id)
+                  (when (and text chat-id)
+                    (log-message "TELEGRAM: Received message from ~a" chat-id)
+                    (unless (ignore-errors (hitl-handle-message text :telegram))
+                      (stimulus-inject
+                       (list :type :EVENT
+                             :meta (list :source :telegram :chat-id (format nil "~a" chat-id))
+                             :payload (list :sensor :user-input :text text))))))))
+          (error (c) (log-message "TELEGRAM POLL ERROR: ~a" c)))))))
+
+(defun telegram-send (action context)
+  "Sends a message via Telegram."
+  (declare (ignore context))
+  (let* ((payload (getf action :payload))
+         (meta (getf action :meta))
+         (chat-id (or (getf meta :chat-id) (getf payload :chat-id) (getf action :chat-id)))
+         (text (or (getf payload :text) (getf action :text)))
+         (token (telegram-get-token)))
+    (when (and token chat-id text)
+      (handler-case
+          (let ((url (format nil "https://api.telegram.org/bot~a/sendMessage" token)))
+            (dex:post url
+                      :headers '(("Content-Type" . "application/json"))
+                      :content (cl-json:encode-json-to-string
+                                `((chat_id . ,chat-id) (text . ,text)))))
+        (error (c) (log-message "TELEGRAM ERROR: ~a" c))))))
+
+(defun signal-get-account ()
+  (vault-get-secret :signal))
+
+(defun signal-poll ()
+  "Polls Signal for new messages and injects them into the harness."
+  (let ((account (signal-get-account)))
+    (when account
+      (handler-case
+          (let* ((output (uiop:run-program (list "signal-cli" "-u" account "receive" "--json")
+                                            :output :string :error-output :string :ignore-error-status t))
+                 (lines (cl-ppcre:split "\\\\n" output)))
+            (dolist (line lines)
+              (when (and line (> (length line) 0))
+                (let* ((json (ignore-errors (cl-json:decode-json-from-string line)))
+                       (envelope (cdr (assoc :envelope json)))
+                       (source (cdr (assoc :source envelope)))
+                       (data-message (cdr (assoc :data-message envelope)))
+                       (text (cdr (assoc :message data-message))))
+                  (when (and source text)
+                    (log-message "SIGNAL: Received message from ~a" source)
+                    (unless (ignore-errors (hitl-handle-message text :signal))
+                      (stimulus-inject
+                       (list :type :EVENT
+                             :meta (list :source :signal :chat-id source)
+                             :payload (list :sensor :user-input :text text)))))))))
+        (error (c) (log-message "SIGNAL POLL ERROR: ~a" c))))))
+
+(defun signal-send (action context)
+  "Sends a message via Signal."
+  (declare (ignore context))
+  (let* ((payload (getf action :payload))
+         (meta (getf action :meta))
+         (chat-id (or (getf meta :chat-id) (getf payload :chat-id) (getf action :chat-id)))
+         (text (or (getf payload :text) (getf action :text)))
+         (account (signal-get-account)))
+    (when (and account chat-id text)
+      (handler-case
+          (uiop:run-program (list "signal-cli" "-u" account "send" "-m" text chat-id)
+                            :output :string :error-output :string)
+        (error (c) (log-message "SIGNAL ERROR: ~a" c))))))
+
+(defun gateway-registry-initialize ()
+  "Registers all built-in gateway handlers."
+  (setf (gethash "telegram" *gateway-registry*)
+        (list :poll-fn #'telegram-poll
+              :send-fn #'telegram-send
+              :default-interval 3))
+  (setf (gethash "signal" *gateway-registry*)
+        (list :poll-fn #'signal-poll
+              :send-fn #'signal-send
+              :default-interval 5)))
+
+(defun gateway-configured-p (platform)
+  "Returns T if a platform has a stored token."
+  (let ((config (gethash platform *gateway-configs*)))
+    (and config (getf config :token))))
+
+(defun gateway-active-p (platform)
+  "Returns T if a platform's polling thread is alive."
+  (let ((config (gethash platform *gateway-configs*)))
+    (and config
+         (getf config :thread)
+         (bt:thread-alive-p (getf config :thread)))))
+
+(defun messaging-link (platform token)
+  "Links a platform with a token and starts polling."
+  (let ((platform-lc (string-downcase platform)))
+    (unless (gethash platform-lc *gateway-registry*)
+      (error "Unknown platform: ~a. Available: ~{~a~^, ~}"
+             platform (loop for k being the hash-keys of *gateway-registry* collect k)))
+    (when (or (null token) (zerop (length token)))
+      (error "Token cannot be empty"))
+    (log-message "MESSAGING: Linking to ~a..." platform-lc)
+    (gateway-unlink platform-lc)
+    (let* ((registry-entry (gethash platform-lc *gateway-registry*))
+           (interval (or (getf registry-entry :default-interval) 5)))
+      (setf (gethash platform-lc *gateway-configs*)
+            (list :token token :interval interval :enabled t))
+      (vault-set-secret (intern (string-upcase platform-lc) :keyword) token)
+      (gateway-start platform-lc)
+      (log-message "MESSAGING: Successfully linked ~a" platform-lc)
+      (format t "Successfully linked ~a gateway. Token stored securely.~%" platform-lc)
+      t)))
+
+(defun messaging-unlink (platform)
+  "Unlinks a platform and stops its polling thread."
+  (let ((platform-lc (string-downcase platform)))
+    (gateway-stop platform-lc)
+    (remhash platform-lc *gateway-configs*)
+    (log-message "MESSAGING: Unlinked ~a" platform-lc)
+    (format t "Successfully unlinked ~a gateway.~%" platform-lc)
+    t))
+
+(defun gateway-start (platform)
+  "Starts the polling thread for a linked gateway."
+  (let ((platform-lc (string-downcase platform)))
+    (let ((config (gethash platform-lc *gateway-configs*)))
+      (when (and config (getf config :enabled) (not (gateway-active-p platform-lc)))
+        (let ((poll-fn (getf (gethash platform-lc *gateway-registry*) :poll-fn)))
+          (when poll-fn
+            (let ((interval (getf config :interval)))
+              (setf (getf config :thread)
+                    (bt:make-thread
+                     (lambda ()
+                       (loop
+                         (when (getf (gethash platform-lc *gateway-configs*) :enabled)
+                           (funcall poll-fn))
+                         (sleep interval)))
+                     :name (format nil "passepartout-~a-gateway" platform-lc)))
+              (log-message "MESSAGING: Started ~a polling (interval: ~as)" platform-lc interval))))))))
+
+(defun gateway-stop (platform)
+  "Stops the polling thread for a gateway."
+  (let ((platform-lc (string-downcase platform)))
+    (let ((config (gethash platform-lc *gateway-configs*)))
+      (when (and config (getf config :thread))
+        (when (bt:thread-alive-p (getf config :thread))
+          (log-message "MESSAGING: Stopping ~a polling thread" platform-lc)
+          (bt:destroy-thread (getf config :thread))))
+      (setf (getf config :thread) nil))))
+
+(defun messaging-list ()
+  "Returns a list of all gateways with their status."
+  (loop for platform being the hash-keys of *gateway-registry*
+        collect (let ((configured (gateway-configured-p platform))
+                      (active (gateway-active-p platform)))
+                  (list :platform platform
+                        :configured configured
+                        :active active))))
+
+(defun messaging-list-print ()
+  "Prints a formatted table of gateways."
+  (format t "~%")
+  (format t "  ~20@A ~12@A ~10@A~%" "PLATFORM" "CONFIGURED" "STATUS")
+  (dolist (gw (messaging-list))
+    (format t "  ~20@A ~12@A ~10@A~%"
+            (getf gw :platform)
+            (if (getf gw :configured) "yes" "no")
+            (cond
+              ((getf gw :active) "ACTIVE")
+              ((getf gw :configured) "stopped")
+              (t "not linked"))))
+  (format t "~%"))
+
+(defun gateway-start-all ()
+  "Called at boot to start all configured gateways."
+  (dolist (config (loop for platform being the hash-keys of *gateway-configs*
+                       collect (list platform (gethash platform *gateway-configs*))))
+    (destructuring-bind (platform config) config
+      (when (and (getf config :enabled) (not (gateway-active-p platform)))
+        (gateway-start platform)))))
+
+(register-actuator :telegram #'telegram-send)
+(register-actuator :signal #'signal-send)
+
+(defskill :passepartout-gateway-messaging
+  :priority 150
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))
+
+(gateway-registry-initialize)
+(gateway-start-all)

lisp/gateway-tui-main.lisp

@@ -0,0 +1,165 @@
+(in-package :passepartout.gateway-tui)
+
+(defun on-key (&rest args)
+  (let ((ch (car args)))
+    (cond
+      ;; Enter
+      ((or (eql ch 10) (eql ch 13) (eq ch :enter)
+           (eql ch #\Newline) (eql ch #\Return))
+       (let ((text (string-trim '(#\Space #\Tab) (input-string))))
+         (when (> (length text) 0)
+           (push text (st :input-history))
+           (setf (st :input-hpos) 0)
+           (setf (st :scroll-offset) 0)
+           (cond
+             ;; /eval command
+             ((and (>= (length text) 6)
+                   (string-equal (subseq text 0 6) "/eval "))
+              (handler-case
+                  (let* ((*read-eval* t)
+                         (*package* (find-package :passepartout.gateway-tui))
+                         (r (eval (read-from-string (subseq text 6)))))
+                    (add-msg :system (format nil "=> ~s" r)))
+                (error (c) (add-msg :system (format nil "=> ✗ ~a" c)))))
+             ;; Normal message
+             (t
+              (add-msg :user text)
+              (send-daemon (list :type :event
+                                :payload (list :sensor :user-input :text text)))))
+           (setf (st :input-buffer) nil)
+           (setf (st :dirty) (list t t t)))))
+      ;; Backspace
+      ((or (eql ch 127) (eql ch 8) (eq ch :backspace) (eql ch #\Backspace))
+       (when (st :input-buffer) (pop (st :input-buffer)))
+       (setf (st :dirty) (list nil nil t)))
+      ;; Up arrow
+      ((or (eq ch :up) (eql ch 259))
+       (let* ((h (st :input-history)) (p (st :input-hpos)))
+         (when (and h (< p (1- (length h))))
+           (incf (st :input-hpos))
+           (setf (st :input-buffer)
+                 (reverse (coerce (nth (st :input-hpos) h) 'list)))
+           (setf (st :dirty) (list nil nil t)))))
+      ;; Down arrow
+      ((or (eq ch :down) (eql ch 258))
+       (when (> (st :input-hpos) 0)
+         (decf (st :input-hpos))
+         (let ((h (st :input-history)))
+           (setf (st :input-buffer)
+                 (if (and h (< (st :input-hpos) (length h)))
+                     (reverse (coerce (nth (st :input-hpos) h) 'list))
+                     nil))
+           (setf (st :dirty) (list nil nil t)))))
+      ;; PageUp
+      ((or (eq ch :ppage) (eql ch 339))
+       (incf (st :scroll-offset) 5)
+       (setf (st :dirty) (list nil t nil)))
+      ;; PageDown
+      ((or (eq ch :npage) (eql ch 338))
+       (setf (st :scroll-offset) (max 0 (- (st :scroll-offset) 5)))
+       (setf (st :dirty) (list nil t nil)))
+      ;; Printable
+      (t
+       (let ((chr (typecase ch
+                    (character ch)
+                    (integer (code-char ch))
+                    (t nil))))
+         (when (and chr (graphic-char-p chr))
+           (push chr (st :input-buffer))
+           (setf (st :dirty) (list nil nil t))))))))
+
+(defun on-daemon-msg (msg)
+  (let* ((payload (getf msg :payload))
+         (text (getf payload :text))
+         (action (getf payload :action)))
+    (cond
+      (text (add-msg :agent text))
+      ((eq action :handshake)
+       (add-msg :system (format nil "Connected v~a" (getf payload :version))))
+      (t (add-msg :agent (format nil "~a" msg))))))
+
+(defun send-daemon (msg)
+  (let ((s (st :stream)))
+    (when (and s (open-stream-p s))
+      (handler-case
+          (progn
+            (format s "~a" (frame-message msg))
+            (finish-output s))
+        (error (c) (log-message "TUI-SEND: ~a" c))))))
+
+(defun recv-daemon (s)
+  (handler-case
+      (let* ((hdr (make-string 6)) (n 0))
+        (loop while (< n 6)
+              do (let ((ch (read-char s nil)))
+                   (unless ch (return-from recv-daemon nil))
+                   (setf (char hdr n) ch) (incf n)))
+        (let* ((len (parse-integer hdr :radix 16 :junk-allowed t))
+               (buf (make-string (or len 0))))
+          (when (and len (> len 0))
+            (loop for i from 0 below len
+                  do (let ((ch (read-char s nil)))
+                       (unless ch (return-from recv-daemon nil))
+                       (setf (char buf i) ch)))
+            (let ((*read-eval* nil))
+              (read-from-string buf)))))
+    (error (c) (log-message "TUI-RECV: ~a" c) nil)))
+
+(defun reader-loop (s)
+  (loop while (and (st :running) (open-stream-p s))
+        do (let ((msg (recv-daemon s)))
+             (when msg (queue-event (list :type :daemon :payload msg))))))
+
+(defun connect-daemon (&optional (host "127.0.0.1") (port 9105))
+  (handler-case
+      (let ((s (usocket:socket-connect host port :element-type 'character)))
+        (setf (st :stream) (usocket:socket-stream s) (st :connected) t)
+        (bt:make-thread (lambda () (reader-loop (st :stream))) :name "tui-reader")
+        (add-msg :system "* Connected *")
+        t)
+    (error (c)
+      (add-msg :system (format nil "* Connection failed: ~a *" c))
+      nil)))
+
+(defun disconnect-daemon ()
+  (when (st :stream)
+    (ignore-errors (close (st :stream)))
+    (setf (st :stream) nil (st :connected) nil)
+    (add-msg :system "* Disconnected *")))
+
+(defun tui-main ()
+  (init-state)
+  (with-screen (scr :input-blocking nil :input-echoing nil :cursor-visible nil)
+    (let* ((h (or (height scr) 24))
+           (w (or (width scr) 80))
+           (sw (make-instance 'window :height 3 :width (- w 2) :y 0 :x 1))
+           (ch (- h 5))
+           (cw (make-instance 'window :height ch :width (- w 2) :y 3 :x 1))
+           (iw (make-instance 'window :height 1 :width (- w 2) :y (- h 1) :x 1))
+           (swank-port (or (ignore-errors
+                             (parse-integer (uiop:getenv "TUI_SWANK_PORT")))
+                           4006)))
+      (setf (function-keys-enabled-p iw) t
+            (st :dirty) (list t t t))
+      (connect-daemon)
+      (when (> swank-port 0)
+        (handler-case
+            (progn
+              (ql:quickload :swank :silent t)
+              (funcall (find-symbol "CREATE-SERVER" "SWANK")
+                       :port swank-port :dont-close t)
+              (add-msg :system
+                       (format nil "* Swank ~d  M-x slime-connect *" swank-port)))
+          (error ()
+            (add-msg :system "* Swank unavailable *"))))
+      (loop while (st :running) do
+        (dolist (ev (drain-queue))
+          (when (eq (getf ev :type) :daemon)
+            (on-daemon-msg (getf ev :payload))))
+        (let ((ch (get-char iw)))
+          (when (and ch (not (equal ch -1)))
+            (on-key ch)))
+        (redraw sw cw ch iw)
+        (refresh scr)
+        (sleep 0.03))
+      (disconnect-daemon))))

lisp/gateway-tui-model.lisp

@@ -0,0 +1,38 @@
+(defpackage :passepartout.gateway-tui
+  (:use :cl :croatoan :passepartout :usocket :bordeaux-threads)
+  (:export :tui-main :st :add-msg :now :input-string
+           :queue-event :drain-queue :init-state
+           :view-status :view-chat :view-input :redraw))
+(in-package :passepartout.gateway-tui)
+
+(defvar *state* nil)
+(defvar *event-queue* nil)
+(defvar *event-lock* (bt:make-lock "tui-event-lock"))
+
+(defun st (key) (getf *state* key))
+(defun (setf st) (val key) (setf (getf *state* key) val))
+
+(defun init-state ()
+  (setf *state*
+        (list :running t :mode :chat :connected nil :stream nil
+              :input-buffer nil :input-history nil :input-hpos 0
+              :messages nil :scroll-offset 0 :dirty (list nil nil nil))))
+
+(defun now ()
+  (multiple-value-bind (h m) (get-decoded-time)
+    (format nil "~2,'0d:~2,'0d" h m)))
+
+(defun input-string ()
+  (coerce (reverse (st :input-buffer)) 'string))
+
+(defun add-msg (role content)
+  (push (list :role role :content content :time (now)) (st :messages))
+  (setf (st :dirty) (list t t nil)))
+
+(defun queue-event (ev)
+  (bt:with-lock-held (*event-lock*) (push ev *event-queue*)))
+
+(defun drain-queue ()
+  (bt:with-lock-held (*event-lock*)
+    (let ((evs (nreverse *event-queue*)))
+      (setf *event-queue* nil) evs)))

lisp/gateway-tui-view.lisp

@@ -0,0 +1,59 @@
+(in-package :passepartout.gateway-tui)
+
+(defun view-status (win)
+  (clear win)
+  (box win 0 0)
+  (add-string win
+   (format nil " Passepartout  ~a  [~a]  msgs:~a  scroll:~a"
+           (if (st :connected) "● Connected" "○ Disconnected")
+           (string-upcase (string (st :mode)))
+           (length (st :messages))
+           (if (> (st :scroll-offset) 0) (format nil "~a↑" (st :scroll-offset)) "0"))
+   :y 1 :x 1 :fgcolor (if (st :connected) :green :red))
+  (add-string win (format nil " ~a" (now)) :y 2 :x 1 :fgcolor :yellow)
+  (refresh win))
+
+(defun view-chat (win h)
+  (clear win)
+  (box win 0 0)
+  (let* ((w (or (width win) 78))
+         (msgs (reverse (st :messages)))
+         (max-lines (- h 2))
+         (total (length msgs))
+         (start (max 0 (- total max-lines (st :scroll-offset))))
+         (y 1))
+    (loop for i from start below total
+          while (< y (1- h))
+          do (let ((msg (nth i msgs)))
+               (let* ((role (getf msg :role))
+                      (content (getf msg :content))
+                      (time (or (getf msg :time) ""))
+                      (label (case role
+                               (:user (format nil "⬆ [~a] ~a" time content))
+                               (:agent (format nil "⬇ [~a] ~a" time content))
+                               (:system (format nil "   [~a] ~a" time content))
+                               (t (format nil "   [~a] ~a" time content))))
+                      (color (case role
+                               (:user :green)
+                               (:agent :white)
+                               (:system :yellow)
+                               (t :white))))
+                 (add-string win label :y y :x 1 :n (1- w) :fgcolor color)
+                 (incf y)))))
+  (refresh win))
+
+(defun view-input (win)
+  (let* ((text (input-string))
+         (w (or (width win) 78))
+         (clip (min (length text) (1- w))))
+    (clear win)
+    (add-string win (format nil "~a " text) :y 0 :x 0 :n (1- w) :fgcolor :cyan)
+    (setf (cursor-position win) (list 0 clip)))
+  (refresh win))
+
+(defun redraw (sw cw ch iw)
+  (destructuring-bind (sd cd id) (st :dirty)
+    (when sd (view-status sw))
+    (when cd (view-chat cw ch))
+    (when id (view-input iw))
+    (setf (st :dirty) (list nil nil nil))))

lisp/programming-lisp.lisp

@@ -0,0 +1,148 @@
+(defun lisp-structural-check (code)
+  "Checks if parentheses are balanced and the code is readable."
+  (handler-case
+      (let ((*read-eval* nil))
+        (with-input-from-string (s code)
+          (loop for form = (read s nil :eof) until (eq form :eof)))
+        (values t nil))
+    (error (c)
+      (values nil (format nil "Reader Error: ~a" c)))))
+
+(defun lisp-syntactic-check (code)
+  "Checks for valid Lisp syntax beyond just balanced parentheses."
+  (lisp-structural-check code))
+
+(defun lisp-semantic-check (code)
+  "Checks for potentially unsafe forms."
+  (let ((unsafe-tokens '("eval" "load" "uiop:run-program" "sb-ext:run-program" "cl-user::eval")))
+    (loop for token in unsafe-tokens
+          when (search token (string-downcase code))
+          do (return-from lisp-semantic-check (values nil (format nil "Unsafe form detected: ~a" token))))
+    (values t nil)))
+
+(defun lisp-validate (code &key (strict t))
+  "Unified validation gate for Lisp code."
+  (multiple-value-bind (struct-ok struct-err) (lisp-structural-check code)
+    (unless struct-ok
+      (return-from lisp-validate (list :status :error :reason struct-err)))
+    (when strict
+      (multiple-value-bind (sem-ok sem-err) (lisp-semantic-check code)
+        (unless sem-ok
+          (return-from lisp-validate (list :status :error :reason sem-err)))))
+    (list :status :success)))
+
+(defun lisp-eval (code-string &key (package :passepartout))
+  "Evaluates a Lisp string and captures its output/results."
+  (let ((out (make-string-output-stream))
+        (err (make-string-output-stream)))
+    (handler-case
+        (let* ((*standard-output* out)
+               (*error-output* err)
+               (*package* (or (find-package package) (find-package :passepartout)))
+               (result (with-input-from-string (s code-string)
+                         (let ((last-val nil))
+                           (loop for form = (read s nil :eof) until (eq form :eof)
+                                 do (setf last-val (eval form)))
+                           last-val))))
+          (list :status :success
+                :result (format nil "~a" result)
+                :output (get-output-stream-string out)
+                :error (get-output-stream-string err)))
+      (error (c)
+        (list :status :error
+              :reason (format nil "~a" c)
+              :output (get-output-stream-string out)
+              :error (get-output-stream-string err))))))
+
+(defun lisp-format (code-string)
+  "Attempts to format Lisp code using Emacs batch mode if available."
+  (handler-case
+      (let ((tmp-file "/tmp/oc-format-temp.lisp"))
+        (uiop:with-output-file (s tmp-file :if-exists :supersede)
+          (format s "~a" code-string))
+        (multiple-value-bind (out err code)
+            (uiop:run-program (list "emacs" "--batch" tmp-file 
+                                   "--eval" "(indent-region (point-min) (point-max))"
+                                   "--eval" "(princ (buffer-string))")
+                             :output :string :error-output :string :ignore-error-status t)
+          (if (= code 0)
+              out
+              (progn
+                (log-message "FORMAT ERROR: ~a" err)
+                code-string))))
+    (error (c)
+      (log-message "FORMAT EXCEPTION: ~a" c)
+      code-string)))
+
+(defun lisp-extract (code function-name)
+  "Extracts the definition of a specific function from a code string."
+  (let ((*read-eval* nil))
+    (with-input-from-string (s code)
+      (loop for form = (read s nil :eof) until (eq form :eof)
+            when (and (listp form) 
+                      (symbolp (car form))
+                      (member (symbol-name (car form)) '("DEFUN" "DEFMACRO" "DEFMETHOD") :test #'string-equal)
+                      (symbolp (second form))
+                      (string-equal (symbol-name (second form)) function-name))
+            do (return-from lisp-extract (format nil "~s" form))))
+    nil))
+
+(defun lisp-wrap (code target-name wrapper-symbol)
+  "Wraps a specific form in a wrapper form (e.g., wrap in a let)."
+  (let ((*read-eval* nil) (results nil))
+    (with-input-from-string (s code)
+      (loop for form = (read s nil :eof) until (eq form :eof)
+            do (if (and (listp form) 
+                        (symbolp (second form))
+                        (string-equal (symbol-name (second form)) target-name))
+                   (push (list wrapper-symbol form) results)
+                   (push form results))))
+    (format nil "~{~s~^~%~%~}" (nreverse results))))
+
+(defun lisp-list-definitions (code)
+  "Returns a list of names for all top-level definitions (defun, defmacro, etc.)."
+  (let ((*read-eval* nil) (names nil))
+    (with-input-from-string (s code)
+      (loop for form = (read s nil :eof) until (eq form :eof)
+            when (and (listp form) 
+                      (symbolp (car form))
+                      (member (symbol-name (car form)) 
+                              '("DEFUN" "DEFMACRO" "DEFMETHOD" "DEFVAR" "DEFPARAMETER")
+                              :test #'string-equal)
+                      (symbolp (second form)))
+            do (push (second form) names)))
+    (nreverse names)))
+
+(defun lisp-inject (code target-name new-form-string)
+  "Injects a new form into the body of a targeted definition."
+  (let ((*read-eval* nil)
+        (new-form (read-from-string new-form-string))
+        (results nil))
+    (with-input-from-string (s code)
+      (loop for form = (read s nil :eof) until (eq form :eof)
+            do (if (and (listp form) 
+                        (symbolp (car form))
+                        (member (symbol-name (car form)) '("DEFUN" "DEFMACRO" "DEFMETHOD") :test #'string-equal)
+                        (symbolp (second form))
+                        (string-equal (symbol-name (second form)) target-name))
+                   (push (append form (list new-form)) results)
+                   (push form results))))
+    (format nil "~{~s~^~%~%~}" (nreverse results))))
+
+(defun lisp-slurp (code target-name form-to-slurp-string)
+  "Adds a form to the end of a named list or definition (Paredit slurp)."
+  (let ((*read-eval* nil)
+        (to-slurp (read-from-string form-to-slurp-string))
+        (results nil))
+    (with-input-from-string (s code)
+      (loop for form = (read s nil :eof) until (eq form :eof)
+            do (if (and (listp form) 
+                        (symbolp (second form))
+                        (string-equal (symbol-name (second form)) target-name))
+                   (push (append form (list to-slurp)) results)
+                   (push form results))))
+    (format nil "~{~s~^~%~%~}" (nreverse results))))
+
+(defskill :passepartout-programming-lisp
+  :priority 400
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))

lisp/programming-literate.lisp

@@ -0,0 +1,64 @@
+(defun literate-extract-lisp-blocks (content)
+  "Extracts all #+begin_src lisp ... #+end_src blocks from Org CONTENT.
+Returns a list of block strings."
+  (let ((lines (uiop:split-string content :separator '(#\Newline)))
+        (blocks nil)
+        (in-block nil)
+        (current-block nil))
+    (dolist (line lines)
+      (let ((trimmed (string-trim '(#\Space) line)))
+        (cond
+          ((uiop:string-prefix-p "#+begin_src lisp" trimmed)
+           (setf in-block t current-block nil))
+          ((uiop:string-prefix-p "#+end_src" trimmed)
+           (when in-block
+             (push (format nil "~{~a~^~%~}" (nreverse current-block)) blocks)
+             (setf in-block nil current-block nil)))
+          (in-block
+           (push line current-block)))))
+    (nreverse blocks)))
+
+(defun literate-block-balance-check (org-file)
+  "Verifies that all Lisp source blocks in an Org file have balanced parentheses.
+Returns T if all blocks pass validation, or an error string listing failures."
+  (when (not (uiop:file-exists-p org-file))
+    (return-from literate-block-balance-check
+      (format nil "Org file not found: ~a" org-file)))
+  (let* ((content (uiop:read-file-string org-file))
+         (blocks (literate-extract-lisp-blocks content))
+         (failures nil))
+    (if (null blocks)
+        t
+        (progn
+          (loop for i from 0
+                for block in blocks
+                for (ok reason) = (multiple-value-list
+                                    (lisp-structural-check block))
+                unless ok
+                do (push (format nil "Block ~d: ~a" (1+ i) reason) failures))
+          (if failures
+              (format nil "Unbalanced blocks in ~a:~%~{~a~^~%~}" org-file failures)
+              t)))))
+
+(defun literate-tangle-sync-check (org-file lisp-file)
+  "Verifies that the .lisp file matches the tangled output of the .org file.
+Compares the concatenation of all lisp blocks from the Org file against the
+contents of the Lisp file. Returns T if they match, or an error message."
+  (when (not (uiop:file-exists-p org-file))
+    (return-from literate-tangle-sync-check
+      (format nil "Org file not found: ~a" org-file)))
+  (when (not (uiop:file-exists-p lisp-file))
+    (return-from literate-tangle-sync-check
+      (format nil "Lisp file not found: ~a" lisp-file)))
+  (let* ((org-content (uiop:read-file-string org-file))
+         (org-blocks (literate-extract-lisp-blocks org-content))
+         (tangled (format nil "~{~a~^~%~%~}" org-blocks))
+         (lisp-content (uiop:read-file-string lisp-file)))
+    (if (string= (string-trim '(#\Space #\Newline) tangled)
+                 (string-trim '(#\Space #\Newline) lisp-content))
+        t
+        (format nil "Tangle sync mismatch: ~a does not match ~a" org-file lisp-file))))
+
+(defskill :passepartout-programming-literate
+  :priority 300
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))

lisp/programming-org.lisp

@@ -0,0 +1,244 @@
+(defun org-filetags-extract (content)
+  "Extracts the list of tags from a #+FILETAGS: line."
+  (let ((lines (uiop:split-string content :separator '(#\Newline))))
+    (dolist (line lines)
+      (when (uiop:string-prefix-p "#+FILETAGS:" (string-trim '(#\Space) line))
+        (let ((tag-str (string-trim " :" (subseq (string-trim '(#\Space) line) 10))))
+          (return-from org-filetags-extract
+            (mapcar (lambda (tag) (format nil ":~a" (string-trim '(#\Space) tag)))
+                    (uiop:split-string tag-str :separator '(#\space #\tab))))))))
+  nil)
+
+(defun org-privacy-tag-p (tags-list)
+  "Returns T if any tag in TAGS-LIST matches bouncer-privacy-tags."
+  (let ((privacy-tags (symbol-value (find-symbol "BOUNCER-PRIVACY-TAGS" :passepartout))))
+    (when (and tags-list privacy-tags)
+      (some (lambda (tag)
+              (some (lambda (private-tag)
+                      (string-equal (string-trim '(#\: #\space) tag)
+                                    (string-trim '(#\: #\space) private-tag)))
+                    privacy-tags))
+            tags-list))))
+
+(defun org-privacy-strip (content)
+  "Removes Org headlines whose :TAGS: property contains a privacy-filtered tag.
+Returns the filtered content as a string."
+  (let* ((lines (uiop:split-string content :separator '(#\Newline)))
+         (result-lines nil)
+         (skip-depth nil)
+         (current-tags nil)
+         (in-properties nil))
+    (dolist (line lines)
+      (cond
+        (skip-depth
+         ;; We're inside a skipped subtree
+         (when (and (uiop:string-prefix-p "*" (string-trim '(#\Space) line))
+                    (<= (length (string-trim '(#\Space) line)) skip-depth))
+           (setf skip-depth nil)))
+        ((uiop:string-prefix-p ":PROPERTIES:" (string-trim '(#\Space) line))
+         (setf in-properties t)
+         (push line result-lines))
+        ((uiop:string-prefix-p ":END:" (string-trim '(#\Space) line))
+         (setf in-properties nil)
+         (when current-tags
+           (when (org-privacy-tag-p (reverse current-tags))
+             (setf skip-depth
+                   (length (car (last result-lines
+                                      (1+ (position-if
+                                           (lambda (l)
+                                             (uiop:string-prefix-p "*" (string-trim '(#\Space) l)))
+                                           (reverse result-lines))))))))
+           (setf current-tags nil))
+         (push line result-lines))
+        ((and in-properties (uiop:string-prefix-p ":TAGS:" (string-trim '(#\Space) line)))
+         (let ((tag-val (string-trim '(#\Space) (subseq (string-trim '(#\Space) line) 6))))
+           (setf current-tags (uiop:split-string tag-val :separator '(#\space #\tab))))
+         (push line result-lines))
+        (t
+         (push line result-lines))))
+    (format nil "~{~a~%~}" (nreverse result-lines))))
+
+(defun org-read-file (filepath)
+  "Reads an Org file into a string, applying privacy filtering."
+  (let* ((raw (uiop:read-file-string filepath))
+         (filetags (org-filetags-extract raw)))
+    (if (org-privacy-tag-p filetags)
+        (progn
+          (log-message "UTILS-ORG: Blocked read of ~a — file-level privacy tag(s) ~a" filepath filetags)
+          nil)
+        (org-privacy-strip raw))))
+
+(defun org-write-file (filepath content)
+  "Writes content to an Org file."
+  (uiop:with-output-file (s filepath :if-exists :supersede)
+    (format s "~a" content)))
+
+(defun org-id-generate ()
+  "Generates a new UUID for an Org node."
+  (string-downcase (format nil "~a" (uuid:make-v4-uuid))))
+
+(defun org-id-format (id)
+  "Ensures the ID has the 'id:' prefix."
+  (if (uiop:string-prefix-p "id:" id)
+      id
+      (format nil "id:~a" id)))
+
+(defun org-property-set (ast target-id property value)
+  "Recursively sets a property on a headline with a matching ID in the AST."
+  (let ((type (getf ast :type))
+        (props (getf ast :properties))
+        (contents (getf ast :contents)))
+    (when (and (eq type :HEADLINE) (string= (getf props :ID) target-id))
+      (setf (getf (getf ast :properties) property) value)
+      (return-from org-property-set t))
+    (dolist (child contents)
+      (when (listp child)
+        (when (org-property-set child target-id property value)
+          (return-from org-property-set t)))))
+  nil)
+
+(defun org-todo-set (ast target-id status)
+  "Sets the TODO status of a headline in the AST."
+  (org-property-set ast target-id :TODO status))
+
+(defun org-headline-add (ast parent-id title)
+  "Adds a new headline as a child of the parent-id in the AST."
+  (let* ((type (getf ast :type))
+         (props (getf ast :properties))
+         (id (getf props :ID))
+         (contents (getf ast :contents)))
+    (when (and (eq type :HEADLINE) (string= id parent-id))
+      (let ((new-node (list :type :HEADLINE
+                           :properties (list :ID (org-id-format (org-id-generate))
+                                            :TITLE title)
+                           :contents nil)))
+        (setf (getf ast :contents) (append contents (list new-node)))
+        (return-from org-headline-add t)))
+    (dolist (child contents)
+      (when (listp child)
+        (when (org-headline-add child parent-id title)
+          (return-from org-headline-add t)))))
+  nil)
+
+(defun org-headline-find-by-id (ast id)
+  "Finds a headline by its ID in the AST."
+  (let ((props (getf ast :properties)))
+    (when (string= (getf props :ID) id)
+      (return-from org-headline-find-by-id ast))
+    (dolist (child (getf ast :contents))
+      (when (listp child)
+        (let ((found (org-headline-find-by-id child id)))
+          (when found (return-from org-headline-find-by-id found)))))
+    nil))
+
+(defun org-headline-find-by-title (ast title)
+  "Finds a headline by its title in the AST."
+  (let ((props (getf ast :properties)))
+    (when (string-equal (getf props :TITLE) title)
+      (return-from org-headline-find-by-title ast))
+    (dolist (child (getf ast :contents))
+      (when (listp child)
+        (let ((found (org-headline-find-by-title child title)))
+          (when found (return-from org-headline-find-by-title found)))))
+     nil))
+
+(defun org-subtree-extract (org-content heading-name)
+  "Extracts a subtree by heading name from Org text. Returns the subtree
+content as a string (headline + body + children), or nil if not found."
+  (let* ((lines (uiop:split-string org-content :separator '(#\Newline)))
+         (target-depth nil)
+         (in-target nil)
+         (result nil))
+    (loop for line in lines
+          for trimmed = (string-trim '(#\Space) line)
+          do (let ((depth (when (uiop:string-prefix-p "*" trimmed)
+                            (length (subseq trimmed 0
+                                            (position-if (lambda (c) (not (char= c #\*)))
+                                                         trimmed)))))
+                   (headline-title (when (uiop:string-prefix-p "*" trimmed)
+                                     (string-trim '(#\* #\Space) trimmed))))
+               (when depth
+                 (when (string-equal headline-title heading-name)
+                   (setf target-depth depth in-target t))
+                 (when (and in-target target-depth
+                            (<= depth target-depth)
+                            (not (string-equal headline-title heading-name)))
+                   (return-from org-subtree-extract
+                     (format nil "~{~a~^~%~}" (nreverse result)))))
+               (when in-target (push line result))))
+    (when result
+      (format nil "~{~a~^~%~}" (nreverse result)))))
+
+(defun org-heading-list (org-content)
+  "Returns a list of all top-level heading names in Org text."
+  (let* ((lines (uiop:split-string org-content :separator '(#\Newline)))
+         (headings nil))
+    (dolist (line lines)
+      (let ((trimmed (string-trim '(#\Space) line)))
+        (when (uiop:string-prefix-p "* " trimmed)
+          (let ((title (string-trim '(#\* #\Space) trimmed)))
+            (unless (find title headings :test #'string-equal)
+              (push title headings))))))
+    (nreverse headings)))
+
+(defun org-modify (filepath old-text new-text)
+  "Replaces all occurrences of OLD-TEXT with NEW-TEXT in filepath.
+Returns T if OLD-TEXT was found and replaced, nil if not found."
+  (when (not (uiop:file-exists-p filepath))
+    (log-message "UTILS-ORG: org-modify: file not found: ~a" filepath)
+    (return-from org-modify nil))
+  (let* ((content (uiop:read-file-string filepath))
+         (pos (search old-text content :test #'string=)))
+    (unless pos
+      (log-message "UTILS-ORG: org-modify: text not found in ~a" filepath)
+      (return-from org-modify nil))
+    (let ((modified (cl-ppcre:regex-replace-all
+                      (cl-ppcre:quote-meta-chars old-text)
+                      content new-text)))
+      (org-write-file filepath modified)
+      (log-message "UTILS-ORG: Modified ~a (~d chars replaced)" filepath (length old-text))
+      t)))
+
+(defun org-ast-render (ast &key (depth 1))
+  "Converts a plist AST node back to Org text.
+AST format: (:TYPE :HEADLINE :properties (:ID ... :TITLE ... :TAGS (...))
+              :contents (child-ast ...))"
+  (let* ((type (getf ast :TYPE))
+         (props (getf ast :properties))
+         (title (or (getf props :TITLE) "Untitled"))
+         (tags (getf props :TAGS))
+         (todo (getf props :TODO-STATE))
+         (children (getf ast :contents))
+         (raw-content (getf ast :raw-content))
+         (stars (make-string depth :initial-element #\*))
+         (output ""))
+    (unless (eq type :HEADLINE)
+      (return-from org-ast-render (or raw-content "")))
+    ;; Headline
+    (setf output (format nil "~a~@[ ~a~] ~a" stars todo title))
+    (when tags
+      (let ((tag-str (format nil "~{~a~^:~}" (mapcar (lambda (tag) (string-trim '(#\:) tag)) tags))))
+        (setf output (concatenate 'string output (format nil " :~a::~%" tag-str))))
+      (setf output (concatenate 'string output (string #\Newline))))
+    (unless tags
+      (setf output (concatenate 'string output (string #\Newline))))
+    ;; Property drawer
+    (setf output (concatenate 'string output ":PROPERTIES:" (string #\Newline)))
+    (loop for (k v) on props by #'cddr
+          do (unless (or (eq k :TITLE) (eq k :TAGS))
+               (setf output (concatenate 'string output
+                                         (format nil ":~a: ~a~%" k v)))))
+    (setf output (concatenate 'string output ":END:" (string #\Newline)))
+    ;; Content
+    (when raw-content
+      (setf output (concatenate 'string output raw-content (string #\Newline))))
+    ;; Children
+    (dolist (child children)
+      (when (listp child)
+        (setf output (concatenate 'string output
+                                  (org-ast-render child :depth (1+ depth))))))
+    output))
+
+(defskill :passepartout-programming-org
+  :priority 100
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))

lisp/programming-repl.lisp

@@ -0,0 +1,148 @@
+(in-package :passepartout)
+
+(defvar *repl-package* :passepartout
+  "Default package for REPL evaluations.")
+
+(defvar *repl-history* nil
+  "History of evaluated forms for session continuity.")
+
+(defvar *repl-variables* (make-hash-table :test #'eq)
+  "Cache of bound variables for inspection.")
+
+(defun repl-eval (code-string &key (package *repl-package*))
+  "Evaluate Lisp code and return (values result output error).
+   - result: the return value as string
+   - output: captured stdout
+   - error: error message or nil on success"
+  (let ((out (make-string-output-stream))
+        (err (make-string-output-stream))
+        (pkg (or (find-package package) (find-package :passepartout))))
+    (handler-case
+        (let* ((*standard-output* out)
+               (*error-output* err)
+               (*package* pkg)
+               (*read-eval* nil)
+               (result nil))
+          (with-input-from-string (s code-string)
+            (loop for form = (read s nil :eof) until (eq form :eof)
+                  do (setf result (eval form))))
+          (push code-string *repl-history*)
+          (values
+           (format nil "~a" result)
+           (get-output-stream-string out)
+           nil))
+      (error (c)
+        (values
+         nil
+         (get-output-stream-string out)
+         (format nil "~a" c))))))
+
+(defun repl-inspect (symbol-name &key (package *repl-package*))
+  "Inspect a variable's value and structure."
+  (let* ((pkg (or (find-package package) (find-package :passepartout)))
+         (sym (find-symbol (string-upcase symbol-name) pkg)))
+    (cond
+      ((null sym)
+       (format nil "Symbol ~a not found in package ~a" symbol-name package))
+      ((boundp sym)
+       (let ((val (symbol-value sym)))
+         (format nil "~a = ~a~%Type: ~a~%~%"
+                 sym val (type-of val))))
+      ((fboundp sym)
+       (format nil "~a is a function~%Args: ~a~%"
+               sym (documentation sym 'function)))
+      (t
+       (format nil "~a is unbound" symbol-name)))))
+
+(defun repl-list-vars (&key (package *repl-package*))
+  "List all bound variables in the package."
+  (let* ((pkg (or (find-package package) (find-package :passepartout)))
+         (vars nil))
+    (do-symbols (sym pkg)
+      (when (boundp sym)
+        (push (format nil "~a" sym) vars)))
+    (sort vars #'string<)))
+
+(defun repl-load-file (filepath)
+  "Load a Lisp file into the current image."
+  (handler-case
+      (progn
+        (load filepath)
+        (format nil "Loaded ~a" filepath))
+    (error (c)
+      (format nil "Error loading ~a: ~a" filepath c))))
+
+(defun repl-set-package (package-name)
+  "Set the default package for REPL evaluations."
+  (let ((pkg (find-package (string-upcase package-name))))
+    (if pkg
+        (setf *repl-package* pkg)
+        (format nil "Package ~a not found" package-name))))
+
+(defun repl-help ()
+  "Return available REPL commands."
+  (format nil "~%
+REPL Skill Commands:
+-------------------
+(repl-eval \"code\" :package :passepartout)
+  - Evaluate Lisp code, returns (values result output error)
+
+(repl-inspect \"symbol\" :package :passepartout)
+  - Inspect a variable or function
+
+(repl-list-vars :package :passepartout)
+  - List all bound variables
+
+(repl-load-file \"/path/to/file.lisp\")
+  - Load a file into the image
+
+(repl-set-package :package-name)
+  - Switch default package
+
+(repl-help)
+  - Show this message
+"))
+
+(defun repl-handle (signal)
+  "Pre-reason handler for :repl-eval sensor. Evaluates code and
+writes the result back through the reply-stream."
+  (let* ((payload (getf signal :payload))
+         (code (getf payload :code))
+         (stream (getf (getf signal :meta) :reply-stream))
+         (result (multiple-value-bind (val out err)
+                     (repl-eval code)
+                   (if err
+                       (list :status :error :message err)
+                       (list :status :success :value (or val ""))))))
+    (when stream
+      (handler-case
+          (progn
+            (write-sequence (frame-message result) stream)
+            (finish-output stream))
+        (error (c)
+          (log-message "REPL-EVAL: Failed to write response: ~a" c))))
+    ;; Return T to signal the message was consumed
+    t))
+
+;; Register the handler at load time
+(register-pre-reason-handler :repl-eval #'repl-handle)
+
+(defun repl-mandate (context)
+  "Returns REPL-first engineering mandate when context involves code editing."
+  (let ((raw (or (proto-get (proto-get context :payload) :text) "")))
+    (when (or (search "org-skill-" raw :test #'char-equal)
+              (and (search ".org" raw :test #'char-equal)
+                   (or (search "defun" raw :test #'char-equal)
+                       (search "tangle" raw :test #'char-equal)
+                       (search "write-file" raw :test #'char-equal)
+                       (search "lisp" raw :test #'char-equal)))
+              (search "defun " raw :test #'char-equal)
+              (search "repl-eval" raw :test #'char-equal)
+              (search "validate" raw :test #'char-equal))
+      (format nil "~%REPL-FIRST MANDATE:~%Before writing any defun to an Org file, prototype it in the REPL first. Set :repl-verified t on the write action. On rejection, fix the error and retry.~%"))))
+
+(defskill :passepartout-programming-repl
+  :priority 200
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil)
+  :deterministic (lambda (action ctx) (declare (ignore action ctx)) nil)
+  :system-prompt-augment #'repl-mandate)

lisp/programming-standards.lisp

@@ -0,0 +1,23 @@
+(in-package :passepartout)
+
+(defun standards-git-clean-p (dir)
+  "Checks if a directory has uncommitted changes."
+  (let ((status (uiop:run-program (list "git" "-C" (namestring dir) "status" "--porcelain")
+                                 :output :string
+                                 :ignore-error-status t)))
+    (string= "" (string-trim '(#\Space #\Newline #\Tab) status))))
+
+(defun standards-lisp-verify (code)
+  "Enforces Lisp structural and semantic standards using utils-lisp."
+  (let ((result (utils-lisp-validate code :strict t)))
+    (if (eq (getf result :status) :success)
+        t
+        (error (getf result :reason)))))
+
+(defun standards-lisp-format (code)
+  "Ensures Lisp code adheres to formatting standards."
+  (utils-lisp-format code))
+
+(defskill :passepartout-programming-standards
+  :priority 100
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))

lisp/security-dispatcher.lisp

@@ -1,36 +1,17 @@
-#+TITLE: SKILL: Bouncer (org-skill-bouncer.org)
-#+AUTHOR: Agent
-#+FILETAGS: :system:bouncer:authorization:autonomy:
-#+PROPERTY: header-args:lisp :tangle org-skill-bouncer.lisp
+(in-package :passepartout)
 
-* Overview
-The *Bouncer Skill* is the physical security layer of OpenCortex. It enforces operational security checks on all proposed actions.
-
-* Implementation
-
-** Security Configuration — network whitelist
-Domains that the Bouncer considers safe for outbound connections. Network calls to unlisted domains are blocked or queued for approval.
-#+begin_src lisp
-(defvar *bouncer-network-whitelist*
+(defvar *dispatcher-network-whitelist*
   '("api.telegram.org" "matrix.org" "googleapis.com" "openai.com" "anthropic.com")
   "Domains the Bouncer considers safe for outbound connections.")
-#+end_src
 
-** Privacy filter tags (bouncer-privacy-tags)
-List of tag strings that mark content as private. Content with these tags is filtered from the LLM context window. Configurable via ~PRIVACY_FILTER_TAGS~ env var.
-#+begin_src lisp
-(defvar bouncer-privacy-tags
+(defvar *dispatcher-privacy-tags*
   (let ((env (uiop:getenv "PRIVACY_FILTER_TAGS")))
     (if env
         (uiop:split-string env :separator '(#\,))
         '("@personal")))
   "Tags marking content as private. Set via PRIVACY_FILTER_TAGS.")
-#+end_src
 
-** Protected file paths (bouncer-protected-paths)
-Path patterns (with * wildcards) that are blocked from file reads. Covers SSH keys, PEM/PGP files, credentials, tokens, env files, and cloud configs.
-#+begin_src lisp
-(defvar bouncer-protected-paths
+(defvar *dispatcher-protected-paths*
   '(".env" ".env.example" ".env.local" ".env.production"
     "*credentials*" "*cred*"
     "*id_rsa*" "*id_dsa*" "*id_ecdsa*" "*id_ed25519*"
@@ -43,12 +24,8 @@ Path patterns (with * wildcards) that are blocked from file reads. Covers SSH ke
     "*.cert" "*.crt" "*.csr"
     "*password*" "*passwd*")
   "Path patterns blocked from file reads.")
-#+end_src
 
-** Content exposure patterns (bouncer-exposure-patterns)
-Named regex patterns for scanning content for secret exposure. Each entry is a (name regex) pair. Matches are reported by name so downstream code can act on specific categories.
-#+begin_src lisp
-(defvar bouncer-exposure-patterns
+(defvar *dispatcher-exposure-patterns*
   '((:pem-key "-----BEGIN +(RSA|DSA|EC|OPENSSH|PGP) +PRIVATE +KEY *-----")
     (:pgp-key "-----BEGIN +PGP +PRIVATE +KEY +BLOCK-----")
     (:pgp-public "-----BEGIN +PGP +PUBLIC +KEY +BLOCK-----")
@@ -59,26 +36,14 @@ Named regex patterns for scanning content for secret exposure. Each entry is a (
     (:env-assignment "[A-Z_]+=[A-Za-z0-9+/=_\\-]{20,}")
     (:generic-secret "(api|secret|password|token)[ ]*[:=][ ]*[\"']?[A-Za-z0-9_\\-]{16,}"))
   "Named regex patterns for secret exposure detection.")
-#+end_src
 
-** Shell safety — timeout
-Maximum seconds a shell command is allowed to run before being killed.
-#+begin_src lisp
-(defvar *bouncer-shell-timeout* 30
+(defvar *dispatcher-shell-timeout* 30
   "Maximum seconds for a shell command before timeout.")
-#+end_src
 
-** Shell safety — output limit
-Maximum characters of shell command output to capture. Prevents memory exhaustion from infinite output.
-#+begin_src lisp
-(defvar *bouncer-shell-max-output* 100000
+(defvar *dispatcher-shell-max-output* 100000
   "Maximum characters of shell output to capture.")
-#+end_src
 
-** Shell safety — blocked patterns
-Destructive and injection patterns that are blocked in shell commands. Covers ~rm -rf /~, ~dd~, ~mkfs~, ~shred~, backtick injection, and ~$()~ subshell injection.
-#+begin_src lisp
-(defvar *bouncer-shell-blocked-patterns*
+(defvar *dispatcher-shell-blocked*
   '((:destructive-rm    "\\brm\\s+-rf\\s+/")
     (:destructive-dd    "\\bdd\\s+if=")
     (:destructive-mkfs  "\\bmkfs\\.")
@@ -88,43 +53,34 @@ Destructive and injection patterns that are blocked in shell commands. Covers ~r
     (:injection-backtick "`[^`]+`")
     (:injection-subshell "\\$\\([^)]+\\)"))
   "Destructive and injection patterns blocked in shell commands.")
-#+end_src
 
-** Secret Path Check (bouncer-check-secret-path)
-#+begin_src lisp
-(defun bouncer-wildcard-match (pattern path)
+(defun wildcard-match (pattern path)
   "Matches PATH against PATTERN where * matches any characters."
   (let ((regex (cl-ppcre:regex-replace-all
                 "\\*" (cl-ppcre:quote-meta-chars pattern) ".*")))
     (cl-ppcre:scan regex path)))
 
-(defun bouncer-check-secret-path (filepath)
+(defun dispatcher-check-secret-path (filepath)
   "Returns the matching pattern if FILEPATH matches a protected path, nil otherwise."
   (when (and filepath (stringp filepath))
     (some (lambda (pattern)
-            (when (bouncer-wildcard-match pattern filepath)
+            (when (wildcard-match pattern filepath)
               pattern))
-          bouncer-protected-paths)))
-#+end_src
+          *dispatcher-protected-paths*)))
 
-** Content Exposure Scanner (bouncer-scan-exposure)
-#+begin_src lisp
-(defun bouncer-scan-exposure (text)
+(defun dispatcher-exposure-scan (text)
   "Scans TEXT for patterns matching known secret formats.
 Returns a list of matched category keywords."
   (when (and text (stringp text) (> (length text) 0))
     (let ((matches nil))
-      (dolist (entry bouncer-exposure-patterns)
+      (dolist (entry *dispatcher-exposure-patterns*)
         (let ((name (first entry))
               (regex (second entry)))
           (when (cl-ppcre:scan regex text)
             (push name matches))))
       matches)))
-#+end_src
 
-** Vault Secret Scanning (bouncer-scan-secrets)
-#+begin_src lisp
-(defun bouncer-scan-secrets (text)
+(defun dispatcher-vault-scan (text)
   "Scans TEXT for known secrets from the vault."
   (when (and text (stringp text))
     (let ((found-secret nil))
@@ -134,32 +90,26 @@ Returns a list of matched category keywords."
                      (setf found-secret key))))
                *vault-memory*)
       found-secret)))
-#+end_src
 
-** Privacy Tag Check (bouncer-check-privacy-tags)
-#+begin_src lisp
-(defun bouncer-check-privacy-tags (tags-list)
+(defun dispatcher-check-privacy-tags (tags-list)
   "Returns T if any tag in TAGS-LIST matches a privacy filter tag."
   (when (and tags-list (listp tags-list))
     (some (lambda (tag)
             (some (lambda (private)
                     (or (string-equal tag private)
                         (search private tag :test #'string-equal)))
-                  bouncer-privacy-tags))
+                  *dispatcher-privacy-tags*))
           tags-list)))
 
-(defun bouncer-check-text-for-privacy (text)
+(defun dispatcher-check-text-for-privacy (text)
   "Scans TEXT for leaked privacy-tagged content."
   (when (and text (stringp text))
     (let ((lower (string-downcase text)))
       (some (lambda (tag)
               (search (string-downcase tag) lower))
-            bouncer-privacy-tags))))
-#+end_src
+            *dispatcher-privacy-tags*))))
 
-** Lisp Validation Gate (bouncer-check-lisp-valid)
-#+begin_src lisp
-(defun bouncer-extract-org-lisp-blocks (content)
+(defun org-blocks-extract (content)
   "Extracts concatenated Lisp code from #+begin_src lisp blocks in an Org string."
   (when (and content (stringp content))
     (let ((lines (uiop:split-string content :separator '(#\Newline)))
@@ -176,14 +126,14 @@ Returns a list of matched category keywords."
              (setf code (concatenate 'string code line (string #\Newline)))))))
       (when (> (length code) 0) code))))
 
-(defun bouncer-check-lisp-valid (filepath content)
+(defun dispatcher-check-lisp-valid (filepath content)
   "Validates Lisp syntax when writing .lisp files or Org files with lisp blocks.
 Returns the validation result plist or nil if not applicable."
   (when (and content (stringp content) (> (length content) 0))
     (let ((to-validate
            (cond
              ((uiop:string-suffix-p filepath ".lisp") content)
-             ((uiop:string-suffix-p filepath ".org") (bouncer-extract-org-lisp-blocks content))
+             ((uiop:string-suffix-p filepath ".org") (org-blocks-extract content))
              (t nil))))
       (when to-validate
         (multiple-value-bind (valid-p err) (ignore-errors
@@ -193,45 +143,36 @@ Returns the validation result plist or nil if not applicable."
                                               (values t nil)))
           (unless valid-p
             (list :status :error :reason err)))))))
-#+end_src
 
-** REPL Verification Gate (bouncer-check-repl-verified)
-#+begin_src lisp
-(defun bouncer-org-contains-defuns-p (content)
+(defun org-has-defuns-p (content)
   "Returns T if the Org content contains any #+begin_src lisp blocks with defuns."
   (when (and content (stringp content))
     (search "defun " content :test #'char-equal)))
 
-(defun bouncer-check-repl-verified (action filepath content)
+(defun dispatcher-check-repl-verified (action filepath content)
   "Warns if writing a defun to an Org file without :repl-verified metadata."
   (let ((repl-verified (getf action :repl-verified)))
     (when (and filepath
                (uiop:string-suffix-p filepath ".org")
-               (bouncer-org-contains-defuns-p content)
+               (org-has-defuns-p content)
                (not repl-verified))
       (list :type :LOG
             :payload (list :level :warn
                            :text (format nil "Lint: Writing defun to ~a without :repl-verified flag. Did you prototype this in the REPL first?" filepath))))))
-#+end_src
 
-** Shell Safety Check (bouncer-check-shell-safety)
-#+begin_src lisp
-(defun bouncer-check-shell-safety (cmd)
+(defun dispatcher-check-shell-safety (cmd)
   "Checks a shell command for destructive patterns and injection vectors.
 Returns a list of matched pattern names or nil if safe."
   (when (and cmd (stringp cmd) (> (length cmd) 0))
     (let ((matches nil))
-      (dolist (entry *bouncer-shell-blocked-patterns*)
+      (dolist (entry *dispatcher-shell-blocked*)
         (let ((name (first entry))
               (regex (second entry)))
           (when (cl-ppcre:scan regex cmd)
             (push name matches))))
       matches)))
-#+end_src
 
-** Network Check (bouncer-check-network-exfil)
-#+begin_src lisp
-(defun bouncer-check-network-exfil (cmd)
+(defun dispatcher-check-network-exfil (cmd)
   "Detects if CMD attempts to contact an unwhitelisted external host."
   (when (and cmd (stringp cmd))
     (multiple-value-bind (match regs)
@@ -240,12 +181,9 @@ Returns a list of matched pattern names or nil if safe."
       (when regs
         (let ((domain (aref regs 1)))
           (not (some (lambda (safe) (search safe domain))
-                    *bouncer-network-whitelist*)))))))
-#+end_src
+                    *dispatcher-network-whitelist*)))))))
 
-** Main Security Gate (bouncer-check)
-#+begin_src lisp
-(defun bouncer-check (action context)
+(defun dispatcher-check (action context)
   "Security gate for high-risk actions.
 Vectors: lisp validation, secret path, secret content, vault secrets,
 privacy tags, privacy text, shell safety, network exfil, high-impact approval."
@@ -265,66 +203,66 @@ privacy tags, privacy text, shell safety, network exfil, high-impact approval."
          (approved (proto-get action :approved))
          (tags (proto-get payload :tags))
          (lisp-valid (when (and filepath content (not approved))
-                       (bouncer-check-lisp-valid filepath content)))
+                       (dispatcher-check-lisp-valid filepath content)))
          (repl-lint (when (and filepath content (not approved))
-                     (bouncer-check-repl-verified action filepath content))))
+                     (dispatcher-check-repl-verified action filepath content))))
     (cond
       (approved action)
 
        ;; Vector 0: REPL verification lint (warn, don't block)
       (repl-lint
-       (harness-log "BOUNCER: ~a" (proto-get repl-lint :text))
+       (log-message "BOUNCER: ~a" (proto-get repl-lint :text))
        action)
 
        ;; Vector 1: Lisp syntax validation (block bad lisp writes)
       ((and lisp-valid (eq (getf lisp-valid :status) :error))
-       (harness-log "LINT VIOLATION: Blocked write — lisp syntax error in ~a: ~a" filepath (getf lisp-valid :reason))
+       (log-message "LINT VIOLATION: Blocked write — lisp syntax error in ~a: ~a" filepath (getf lisp-valid :reason))
        (list :type :LOG
              :payload (list :level :error
                             :text (format nil "Lisp syntax error in ~a: ~a. The write was blocked. Fix the parenthesis balance and retry." filepath (getf lisp-valid :reason)))))
 
       ;; Vector 2: File read to a protected secret path
-      ((and filepath (bouncer-check-secret-path filepath))
-       (let ((matched (bouncer-check-secret-path filepath)))
-         (harness-log "SECURITY VIOLATION: Blocked read of protected path '~a' (matched: ~a)" filepath matched)
+      ((and filepath (dispatcher-check-secret-path filepath))
+       (let ((matched (dispatcher-check-secret-path filepath)))
+         (log-message "SECURITY VIOLATION: Blocked read of protected path '~a' (matched: ~a)" filepath matched)
          (list :type :LOG
                :payload (list :level :error
                               :text (format nil "Action blocked: Attempted read of protected path '~a'" filepath)))))
 
       ;; Vector 3: Content contains secret patterns
-      ((and text (bouncer-scan-exposure text))
-       (let ((matched (bouncer-scan-exposure text)))
-         (harness-log "SECURITY VIOLATION: Content contains secret patterns: ~a" matched)
+      ((and text (dispatcher-exposure-scan text))
+       (let ((matched (dispatcher-exposure-scan text)))
+         (log-message "SECURITY VIOLATION: Content contains secret patterns: ~a" matched)
          (list :type :LOG
                :payload (list :level :error
                               :text "Action blocked: Content contains potential secret exposure."))))
 
       ;; Vector 4: Content contains vault secrets
-      ((and text (bouncer-scan-secrets text))
-       (let ((secret-name (bouncer-scan-secrets text)))
-         (harness-log "SECURITY VIOLATION: Blocked potential leak of secret '~a'" secret-name)
+      ((and text (dispatcher-vault-scan text))
+       (let ((secret-name (dispatcher-vault-scan text)))
+         (log-message "SECURITY VIOLATION: Blocked potential leak of secret '~a'" secret-name)
          (list :type :LOG
                :payload (list :level :error
                               :text (format nil "Action blocked: Potential exposure of '~a'" secret-name)))))
 
       ;; Vector 5: Privacy-tagged content in action
-      ((and tags (bouncer-check-privacy-tags tags))
-       (harness-log "PRIVACY VIOLATION: Action contains privacy-tagged content")
+      ((and tags (dispatcher-check-privacy-tags tags))
+       (log-message "PRIVACY VIOLATION: Action contains privacy-tagged content")
        (list :type :LOG
              :payload (list :level :warn
                             :text "Action blocked: Content tagged with privacy filter.")))
 
       ;; Vector 6: Text leaks privacy tag names
-      ((and text (bouncer-check-text-for-privacy text))
-       (harness-log "PRIVACY WARNING: Text may contain leaked private content")
+      ((and text (dispatcher-check-text-for-privacy text))
+       (log-message "PRIVACY WARNING: Text may contain leaked private content")
        (list :type :LOG
              :payload (list :level :warn
                             :text "Action blocked: Text may reference private content.")))
 
        ;; Vector 7: Shell destructive/injection patterns
-      ((and cmd (bouncer-check-shell-safety cmd))
-       (let ((matched (bouncer-check-shell-safety cmd)))
-         (harness-log "SHELL VIOLATION: Destructive or injection pattern in command: ~a" matched)
+      ((and cmd (dispatcher-check-shell-safety cmd))
+       (let ((matched (dispatcher-check-shell-safety cmd)))
+         (log-message "SHELL VIOLATION: Destructive or injection pattern in command: ~a" matched)
          (list :type :LOG
                :payload (list :level :error
                               :text (format nil "Shell command blocked: contains unsafe pattern ~a" matched)))))
@@ -332,74 +270,134 @@ privacy tags, privacy text, shell safety, network exfil, high-impact approval."
       ;; Vector 8: Network exfiltration
       ((and (or (eq target :shell)
                 (and (eq target :tool) (equal (proto-get payload :tool) "shell")))
-            (bouncer-check-network-exfil cmd))
-        (harness-log "SECURITY WARNING: External network call detected. Queuing for approval.")
-        (list :type :EVENT :payload (list :sensor :approval-required :action action)))
+            (dispatcher-check-network-exfil cmd))
+        (log-message "SECURITY WARNING: External network call detected. Queuing for approval.")
+        (list :type :EVENT :level :approval-required
+              :payload (list :sensor :approval-required :action action)))
 
       ;; Vector 8: High-impact action approval
       ((or (member target '(:shell))
            (and (eq target :tool) (member (proto-get payload :tool) '("shell" "repair-file") :test #'string=))
            (and (eq target :emacs) (eq (proto-get payload :action) :eval)))
-       (harness-log "SECURITY: High-impact action requires approval: ~a" (or (proto-get payload :tool) target))
+       (log-message "SECURITY: High-impact action requires approval: ~a" (or (proto-get payload :tool) target))
        (list :type :EVENT :payload (list :sensor :approval-required :action action)))
       (t action))))
 
-#+end_src
-
-** Approval Processing (bouncer-process-approvals)
-#+begin_src lisp
-(defun bouncer-process-approvals ()
+(defun dispatcher-approvals-process ()
   "Scans for APPROVED flight plans and re-injects them."
-  (let ((approved-nodes (list-objects-with-attribute :TODO "APPROVED"))
+  (let ((approved-nodes (memory-objects-by-attribute :TODO "APPROVED"))
         (found-any nil))
     (dolist (node approved-nodes)
-      (let* ((attrs (org-object-attributes node))
+      (let* ((attrs (memory-object-attributes node))
              (tags (getf attrs :TAGS))
              (action-str (getf attrs :ACTION)))
         (when (and (member "FLIGHT_PLAN" tags :test #'string-equal) action-str)
-          (harness-log "BOUNCER: Found approved flight plan '~a'. Re-injecting..." (org-object-id node))
+          (log-message "BOUNCER: Found approved flight plan '~a'. Re-injecting..." (memory-object-id node))
           (let ((action (ignore-errors (read-from-string action-str))))
             (when action
               (setf (getf action :approved) t)
-              (inject-stimulus action)
-              (setf (getf (org-object-attributes node) :TODO) "DONE")
+              (stimulus-inject (list :type :EVENT
+                                     :payload (list :sensor :approval-required
+                                                    :action action
+                                                    :approved t)
+                                     :meta (list :source :system)))
+              (setf (getf (memory-object-attributes node) :TODO) "DONE")
               (setq found-any t))))))
     found-any))
-#+end_src
 
-** Flight Plan Creation (bouncer-create-flight-plan)
-#+begin_src lisp
-(defun bouncer-create-flight-plan (blocked-action)
-  "Creates a Flight Plan node for manual approval."
-  (let ((id (org-id-new)))
-    (harness-log "BOUNCER: Creating flight plan node '~a'..." id)
+(defun dispatcher-flight-plan-create (blocked-action)
+  "Creates a Flight Plan node for manual approval in Emacs."
+  (let ((id (remove #\- (princ-to-string (uuid:make-v4-uuid)))))
+    (log-message "BOUNCER: Creating flight plan node '~a'..." id)
     (list :type :REQUEST :target :emacs
           :payload (list :action :insert-node :id id
                          :attributes (list :TITLE "Flight Plan: High-Risk Action"
                                            :TODO "PLAN" :TAGS '("FLIGHT_PLAN")
                                            :ACTION (format nil "~s" blocked-action))))))
-#+end_src
 
-** Gate Logic (bouncer-deterministic-gate)
-#+begin_src lisp
-(defun bouncer-deterministic-gate (action context)
+(defvar *hitl-pending* (make-hash-table :test 'equal)
+  "Maps correlation token → blocked-action plist for pending HITL approvals.")
+
+(defun hitl-create (blocked-action)
+  "Saves a blocked action for HITL approval. Returns a plist with
+:token (the correlation ID) and :message (user-facing text)."
+  (let* ((token (format nil "HITL-~a" (subseq (remove #\- (princ-to-string (uuid:make-v4-uuid))) 0 8))))
+    (setf (gethash token *hitl-pending*) blocked-action)
+    (log-message "HITL: Created pending approval ~a" token)
+    (list :token token
+          :message (format nil "HITL: Action requires approval [~a]. Reply /approve ~a to approve." token token))))
+
+(defun hitl-approve (token)
+  "Approves a pending HITL action by token. Re-injects with :approved t.
+Returns T if found and approved, nil if token is invalid."
+  (let ((action (gethash token *hitl-pending*)))
+    (if action
+        (progn
+          (remhash token *hitl-pending*)
+          (setf (getf action :approved) t)
+          (stimulus-inject (list :type :EVENT
+                                  :payload (list :sensor :approval-required
+                                                 :action action
+                                                 :approved t)
+                                  :meta (list :source :system)))
+          (log-message "HITL: Approved ~a — re-injected" token)
+          t)
+        (progn
+          (log-message "HITL: Token ~a not found in pending" token)
+          nil))))
+
+(defun hitl-deny (token)
+  "Denies a pending HITL action by token. Removes it from the pending store.
+Returns T if found, nil if token is invalid."
+  (if (gethash token *hitl-pending*)
+      (progn
+        (remhash token *hitl-pending*)
+        (log-message "HITL: Denied ~a" token)
+        t)
+      (progn
+        (log-message "HITL: Token ~a not found in pending" token)
+        nil)))
+
+(defun hitl-handle-message (text &optional source)
+  "Checks if TEXT is a HITL approval or denial command.
+If it matches, processes the command and returns T.
+Otherwise returns nil (text should be handled as normal input).
+Recognized formats:
+  /approve HITL-abc123
+  /deny HITL-abc123
+  approve HITL-abc123
+  deny HITL-abc123"
+  (let ((text (string-trim '(#\Space) (or text ""))))
+    (when (or (uiop:string-prefix-p (string-downcase "/approve") (string-downcase text))
+              (uiop:string-prefix-p (string-downcase "approve") (string-downcase text)))
+      (let* ((parts (uiop:split-string text :separator '(#\Space #\Tab)))
+             (token (when (> (length parts) 1) (second parts))))
+        (when (and token (hitl-approve token))
+          (log-message "HITL: Approved via ~a — ~a" (or source :unknown) token)
+          (return-from hitl-handle-message t))))
+    (when (or (uiop:string-prefix-p (string-downcase "/deny") (string-downcase text))
+              (uiop:string-prefix-p (string-downcase "deny") (string-downcase text)))
+      (let* ((parts (uiop:split-string text :separator '(#\Space #\Tab)))
+             (token (when (> (length parts) 1) (second parts))))
+        (when (and token (hitl-deny token))
+          (log-message "HITL: Denied via ~a — ~a" (or source :unknown) token)
+          (return-from hitl-handle-message t))))
+    nil))
+
+(defun dispatcher-gate (action context)
   "Main deterministic gate for the Bouncer skill."
   (let* ((payload (getf context :payload))
          (sensor (getf payload :sensor)))
     (case sensor
       (:approval-required
-       (bouncer-create-flight-plan (getf payload :action)))
+       (dispatcher-flight-plan-create (getf payload :action)))
       (:heartbeat
-       (bouncer-process-approvals)
-       (if action (bouncer-check action context) action))
+       (dispatcher-approvals-process)
+       (if action (dispatcher-check action context) action))
       (otherwise
-       (if action (bouncer-check action context) action)))))
-#+end_src
+       (if action (dispatcher-check action context) action)))))
 
-** Skill Registration
-#+begin_src lisp
-(defskill :skill-bouncer
+(defskill :passepartout-security-dispatcher
   :priority 150
   :trigger (lambda (ctx) (declare (ignore ctx)) t)
-  :deterministic #'bouncer-deterministic-gate)
-#+end_src
+  :deterministic #'dispatcher-gate)

lisp/security-permissions.lisp

@@ -0,0 +1,13 @@
+(defvar *permission-table* (make-hash-table :test 'equal))
+
+(defun permission-set (tool-name level)
+  "Sets the permission level for a tool."
+  (setf (gethash (string-downcase (string tool-name)) *permission-table*) level))
+
+(defun permission-get (tool-name)
+  "Retrieves the permission level for a tool. Defaults to :ask."
+  (gethash (string-downcase (string tool-name)) *permission-table* :ask))
+
+(defskill :passepartout-security-permissions
+  :priority 600
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))

lisp/security-policy.lisp

@@ -0,0 +1,17 @@
+(defun policy-compliance-check (action context)
+  "Enforces constitutional invariants on proposed actions."
+  (declare (ignore context))
+  (let* ((payload (proto-get action :payload))
+         (explanation (proto-get payload :explanation)))
+    (if (and explanation (stringp explanation) (> (length explanation) 10))
+        action
+        (progn
+          (log-message "POLICY VIOLATION: Action lacks sufficient explanation.")
+          (list :type :LOG
+                :payload (list :level :warn
+                              :text "Action blocked: Missing or insufficient :explanation. Please justify your reasoning."))))))
+
+(defskill :passepartout-security-policy
+  :priority 500
+  :trigger (lambda (ctx) (declare (ignore ctx)) t)
+  :deterministic #'policy-compliance-check)

lisp/security-validator.lisp

@@ -0,0 +1,13 @@
+(defun validator-protocol-check (msg)
+  "Enforces structural schema compliance on protocol messages."
+  (validate-communication-protocol-schema msg))
+
+(defskill :passepartout-security-validator
+  :priority 95
+  :trigger (lambda (ctx) (declare (ignore ctx)) t)
+  :deterministic (lambda (action ctx)
+                   (declare (ignore ctx))
+                   (handler-case
+                       (progn (validator-protocol-check action) action)
+                     (error (c)
+                       (list :type :LOG :payload (list :level :error :text (format nil "Protocol Violation: ~a" c)))))))

lisp/security-vault.lisp

@@ -1,22 +1,7 @@
-#+TITLE: SKILL: Credentials Vault (org-skill-credentials-vault.org)
-#+AUTHOR: Agent
-#+FILETAGS: :system:security:vault:
-#+PROPERTY: header-args:lisp :tangle org-skill-credentials-vault.lisp
-
-* Overview
-The *Credentials Vault* provides secure in-memory storage for sensitive API keys and session tokens.
-
-* Implementation
-
-** Vault Storage
-#+begin_src lisp
 (defvar *vault-memory* (make-hash-table :test 'equal)
   "In-memory cache of sensitive credentials.")
-#+end_src
 
-** Secret Management
-#+begin_src lisp
-(defun vault-get-secret (provider &key (type :api-key))
+(defun vault-get (provider &key (type :api-key))
   "Retrieves a credential from the vault or environment."
   (let* ((key (format nil "~a-~a" provider type))
          (val (gethash key *vault-memory*)))
@@ -30,15 +15,19 @@ The *Credentials Vault* provides secure in-memory storage for sensitive API keys
                           (otherwise nil))))
           (when env-var (uiop:getenv env-var))))))
 
-(defun vault-set-secret (provider secret &key (type :api-key))
+(defun vault-set (provider secret &key (type :api-key))
   "Stores a secret in the vault."
   (let ((key (format nil "~a-~a" provider type)))
     (setf (gethash key *vault-memory*) secret)))
-#+end_src
 
-** Skill Registration
-#+begin_src lisp
-(defskill :skill-credentials-vault
+(defun vault-get-secret (provider)
+  "Retrieves a stored secret or token for a gateway provider."
+  (vault-get provider :type :secret))
+
+(defun vault-set-secret (provider secret)
+  "Stores a secret or token for a gateway provider."
+  (vault-set provider secret :type :secret))
+
+(defskill :passepartout-security-vault
   :priority 600
   :trigger (lambda (ctx) (declare (ignore ctx)) nil))
-#+end_src

lisp/system-actuator-shell.lisp

@@ -1,26 +1,14 @@
-#+TITLE: SKILL: Shell Actuator (org-skill-shell-actuator.org)
-#+AUTHOR: Agent
-#+FILETAGS: :skill:actuator:shell:
-#+PROPERTY: header-args:lisp :tangle org-skill-shell-actuator.lisp
-
-* Overview
-The *Shell Actuator* provides the agent with the capability to execute bash commands.
-
-* Implementation
-
-** Shell Execution (shell-execute)
-#+begin_src lisp
-(defun shell-execute (action context)
+(defun actuator-shell-execute (action context)
   "Executes a bash command with timeout (via timeout(1)) and output limit."
   (declare (ignore context))
   (let* ((payload (getf action :payload))
          (cmd (getf payload :cmd))
-         (timeout-sym (find-symbol "*BOUNCER-SHELL-TIMEOUT*" :opencortex))
+         (timeout-sym (find-symbol "*BOUNCER-SHELL-TIMEOUT*" :passepartout))
          (timeout (or (getf payload :timeout) (if timeout-sym (symbol-value timeout-sym) 30)))
-         (max-sym (find-symbol "*BOUNCER-SHELL-MAX-OUTPUT*" :opencortex))
+         (max-sym (find-symbol "*BOUNCER-SHELL-MAX-OUTPUT*" :passepartout))
          (max-output (or (getf payload :max-output) (if max-sym (symbol-value max-sym) 100000)))
          (wrapped-cmd (format nil "timeout ~a bash -c ~s" timeout cmd)))
-    (harness-log "ACT [Shell]: ~a (timeout: ~as)" cmd timeout)
+    (log-message "ACT [Shell]: ~a (timeout: ~as)" cmd timeout)
     (multiple-value-bind (out err code)
         (uiop:run-program (list "bash" "-c" wrapped-cmd)
                           :output :string :error-output :string
@@ -31,13 +19,9 @@ The *Shell Actuator* provides the agent with the capability to execute bash comm
          (format nil "~a~%... (output truncated to ~a chars)" (subseq out 0 max-output) max-output))
         ((= code 0) out)
         (t (format nil "ERROR [~a]: ~a" code err))))))
-#+end_src
 
-** Skill Registration
-#+begin_src lisp
-(register-actuator :shell #'shell-execute)
+(register-actuator :shell #'actuator-shell-execute)
 
-(defskill :skill-shell-actuator
+(defskill :passepartout-system-actuator-shell
   :priority 50
   :trigger (lambda (ctx) (declare (ignore ctx)) nil))
-#+end_src

lisp/system-archivist.lisp

@@ -0,0 +1,239 @@
+(in-package :passepartout)
+
+(defvar *archivist-last-scribe* 0
+  "Universal time of the last Scribe distillation run.")
+
+(defvar *archivist-last-gardener* 0
+  "Universal time of the last Gardener scan run.")
+
+(defvar *archivist-gardener-interval* 86400
+  "Seconds between Gardener scans. Default: 24 hours.")
+
+(defun archivist-scribe-distill ()
+  "Distills daily log entries into atomic notes. Reads the Memex daily/
+directory for log files modified since the last run, extracts headlines
+as potential note seeds, and creates atomic note files in notes/ with
+backlinks to the source daily entry."
+  (let* ((memex-dir (or (uiop:getenv "MEMEX_DIR")
+                        (namestring (merge-pathnames "memex/" (user-homedir-pathname)))))
+         (daily-dir (merge-pathnames "daily/" memex-dir))
+         (notes-dir (merge-pathnames "notes/" memex-dir))
+         (now (get-universal-time))
+         (notes-created 0))
+    (unless (uiop:directory-exists-p daily-dir)
+      (log-message "ARCHIVIST: Daily directory not found: ~a" daily-dir)
+      (return-from archivist-scribe-distill nil))
+    (ensure-directories-exist notes-dir)
+    (handler-case
+        (let ((daily-files (uiop:directory-files daily-dir "*.org")))
+          (dolist (file daily-files)
+            (let* ((filepath (namestring file))
+                   (file-mtime (ignore-errors (file-write-date filepath))))
+              (when (and file-mtime (> file-mtime *archivist-last-scribe*))
+                ;; Extract headlines from daily log
+                (let* ((content (handler-case (uiop:read-file-string filepath)
+                                  (error () nil)))
+                       (headlines (when content
+                                    (archivist-extract-headlines content))))
+                  (dolist (hl headlines)
+                    (when (archivist-create-note hl notes-dir filepath)
+                      (incf notes-created))))))))
+      (error (c)
+        (log-message "ARCHIVIST: Scribe error: ~a" c)))
+    (setf *archivist-last-scribe* now)
+    (when (> notes-created 0)
+      (log-message "ARCHIVIST: Scribe created ~d atomic notes" notes-created))
+    notes-created))
+
+(defun archivist-extract-headlines (content)
+  "Extracts first-level headlines and their content from Org text.
+Returns a list of plists: (:title <str> :content <str> :tags <list>)."
+  (let ((lines (uiop:split-string content :separator '(#\Newline)))
+        (results nil)
+        (current-title nil)
+        (current-lines nil)
+        (current-tags nil)
+        (in-properties nil))
+    (dolist (line lines)
+      (let ((trimmed (string-trim '(#\Space) line)))
+        (when (string= trimmed ":PROPERTIES:")
+          (setf in-properties t))
+        (when (string= trimmed ":END:")
+          (setf in-properties nil))
+        (when (and in-properties (uiop:string-prefix-p ":TAGS:" trimmed))
+          (setf current-tags
+                (mapcar (lambda (tag) (string-trim '(#\Space) tag))
+                        (uiop:split-string (string-trim '(#\Space) (subseq trimmed 6))
+                                           :separator '(#\space #\tab)))))
+        (cond
+          ;; First-level headline
+          ((and (uiop:string-prefix-p "* " trimmed)
+                (not (uiop:string-prefix-p "**" trimmed)))
+           ;; Save previous
+           (when current-title
+             (push (list :title current-title
+                         :content (format nil "~{~a~^~%~}" (nreverse current-lines))
+                         :tags current-tags)
+                   results))
+           (setf current-title (string-trim '(#\* #\Space) trimmed)
+                 current-lines nil
+                 current-tags nil
+                 in-properties nil))
+          ;; Content lines under current headline
+          (current-title
+           (unless (or (uiop:string-prefix-p "*" trimmed)
+                       (string= trimmed ":PROPERTIES:")
+                       (string= trimmed ":END:"))
+             (push line current-lines))))))
+    ;; Save last headline
+    (when current-title
+      (push (list :title current-title
+                  :content (format nil "~{~a~^~%~}" (nreverse current-lines))
+                  :tags current-tags)
+            results))
+    (nreverse results)))
+
+(defun archivist-headline-to-filename (title)
+  "Converts a headline title to a valid atomic note filename.
+Replaces spaces and special chars with underscores, downcases."
+  (let* ((clean (cl-ppcre:regex-replace-all "[^a-zA-Z0-9 ]" title ""))
+         (underscored (cl-ppcre:regex-replace-all "\\s+" clean "_"))
+         (lowered (string-downcase underscored)))
+    (if (> (length lowered) 100)
+        (subseq lowered 0 100)
+        lowered)))
+
+(defun archivist-create-note (headline notes-dir source-filepath)
+  "Creates an atomic note from a headline plist in the notes/ directory.
+Headline is a plist (:title <str> :content <str> :tags <list>).
+Returns T if note was created, nil if it already exists."
+  (let* ((title (getf headline :title))
+         (content (or (getf headline :content) ""))
+         (tags (getf headline :tags))
+         (filename (archivist-headline-to-filename title))
+         (filepath (merge-pathnames (format nil "~a.org" filename) notes-dir))
+         (source-basename (enough-namestring source-filepath
+                                             (merge-pathnames "" notes-dir))))
+    (when (uiop:file-exists-p filepath)
+      (return-from archivist-create-note nil))
+    (handler-case
+        (progn
+          (uiop:with-output-file (s filepath :if-exists :nil)
+            (format s "#+TITLE: ~a~%" title)
+            (format s "#+FILETAGS: :atomic:note:~:[~;~{~a~^:~}~]~%" tags tags)
+            (format s "~%* ~a~%" title)
+            (format s ":PROPERTIES:~%")
+            (format s ":CREATED: ~a~%" (org-id-generate))
+            (format s ":SOURCE: ~a~%" source-basename)
+            (format s ":END:~%")
+            (format s "~%~a~%" content)
+            (format s "~%* Backlinks~%")
+            (format s "- Source: [[file:~a][~a]]~%" source-basename
+                    (file-namestring source-filepath)))
+          (log-message "ARCHIVIST: Created note ~a" (namestring filepath))
+          t)
+      (error (c)
+        (log-message "ARCHIVIST: Failed to create note ~a: ~a" filepath c)
+        nil))))
+
+(defun archivist-gardener-scan ()
+  "Scans the Memex for broken file links and orphaned memory objects.
+Broken links are =[[file:...]]= references whose target file does not exist.
+Orphaned objects are =memory-object= entries whose =:parent-id= references
+a deleted object. Returns a plist (:broken-links <count> :orphans <count>)."
+  (let* ((memex-dir (or (uiop:getenv "MEMEX_DIR")
+                        (namestring (merge-pathnames "memex/" (user-homedir-pathname)))))
+         (org-files (archivist-find-org-files memex-dir))
+         (broken-links 0)
+         (orphans 0))
+    ;; Scan for broken links
+    (dolist (file org-files)
+      (handler-case
+          (let* ((content (uiop:read-file-string file))
+                 (links (archivist-extract-file-links content)))
+            (dolist (link links)
+              (let ((target (merge-pathnames link (make-pathname :directory
+                                  (pathname-directory file)))))
+                (unless (uiop:file-exists-p target)
+                  (log-message "ARCHIVIST: Broken link in ~a -> ~a"
+                               (enough-namestring file memex-dir) link)
+                  (incf broken-links)))))
+        (error ()
+          (log-message "ARCHIVIST: Could not read ~a" file))))
+    ;; Scan for orphaned memory objects
+    (handler-case
+        (let ((deleted-ids (make-hash-table :test 'equal)))
+          ;; In practice, we check if parent-id points to a non-existent object
+          (maphash (lambda (id obj)
+                     (declare (ignore obj))
+                     (setf (gethash id deleted-ids) t))
+                   (if (boundp '*memory-store*)
+                       (symbol-value '*memory-store*)
+                       (make-hash-table :test 'equal)))
+          (let ((store (if (boundp '*memory-store*)
+                           (symbol-value '*memory-store*)
+                           (make-hash-table :test 'equal))))
+            (maphash (lambda (id obj)
+                       (let ((parent (memory-object-parent-id obj)))
+                         (when (and parent (not (gethash parent store)))
+                           (log-message "ARCHIVIST: Orphaned object ~a (parent ~a not found)"
+                                        id parent)
+                           (incf orphans))))
+                     store)))
+      (error ()
+        (log-message "ARCHIVIST: Memory store not available for orphan scan")))
+    (setf *archivist-last-gardener* (get-universal-time))
+    (list :broken-links broken-links :orphans orphans)))
+
+(defun archivist-find-org-files (memex-dir)
+  "Recursively finds all .org files under memex-dir, up to 3 levels deep."
+  (let ((files nil))
+    (labels ((walk (dir depth)
+               (when (and (uiop:directory-exists-p dir) (< depth 3))
+                 (handler-case
+                     (dolist (entry (uiop:subdirectories dir))
+                       (walk entry (1+ depth)))
+                   (error ()))
+                 (handler-case
+                     (dolist (file (uiop:directory-files dir "*.org"))
+                       (push (namestring file) files))
+                   (error ())))))
+      (walk memex-dir 0))
+    files))
+
+(defun archivist-extract-file-links (content)
+  "Extracts all =[[file:...]]= link targets from Org content.
+Returns a list of link target strings."
+  (let ((links nil))
+    (cl-ppcre:do-register-groups (target)
+        ("\\[\\[file:([^\\]]+)\\]\\[" content)
+      (unless (search "::" target)  ;; skip internal anchors
+        (pushnew target links :test #'string=)))
+    ;; Also handle bare [[file:target]] links
+    (cl-ppcre:do-register-groups (target)
+        ("\\[\\[file:([^\\]]+)\\]\\]" content)
+      (unless (search "::" target)
+        (pushnew target links :test #'string=)))
+    links))
+
+(defun archivist-run (action context)
+  "Runs the archivist maintenance cycle. Checks Scribe and Gardener schedules
+and dispatches as needed. Called by the deterministic gate."
+  (declare (ignore action context))
+  (let ((now (get-universal-time)))
+    ;; Scribe runs every 6 hours (21600 seconds)
+    (when (>= (- now *archivist-last-scribe*) 21600)
+      (ignore-errors (archivist-scribe-distill)))
+    ;; Gardener runs every 24 hours
+    (when (>= (- now *archivist-last-gardener*) *archivist-gardener-interval*)
+      (ignore-errors
+        (let ((result (archivist-gardener-scan)))
+          (when (> (getf result :broken-links) 0)
+            (log-message "ARCHIVIST: Gardener found ~d broken links, ~d orphans"
+                         (getf result :broken-links) (getf result :orphans)))))))
+  nil)
+
+(defskill :passepartout-system-archivist
+  :priority 100
+  :trigger (lambda (ctx) (eq (getf (getf ctx :payload) :sensor) :heartbeat))
+  :deterministic #'archivist-run)

lisp/system-config.lisp

@@ -1,43 +1,19 @@
-#+TITLE: SKILL: Config Manager (org-skill-config-manager.org)
-#+AUTHOR: Agent
-#+FILETAGS: :skill:setup:config:
-#+PROPERTY: header-args:lisp :tangle org-skill-config-manager.lisp
-
-* Overview
-The *Config Manager* skill provides the OpenCortex Agent with the capability to manage its own environment variables and provider configurations. It includes an interactive setup wizard for LLM providers, gateways, and system settings.
-
-* Implementation
-
-** Configuration directory (get-oc-config-dir)
-Resolves the XDG config directory for OpenCortex.
-#+begin_src lisp
-(defun get-oc-config-dir ()
+(defun config-directory ()
   "Returns the absolute path to the opencortex config directory."
   (let ((xdg (uiop:getenv "OC_CONFIG_DIR")))
-    (if xdg xdg (namestring (merge-pathnames ".config/opencortex/" (user-homedir-pathname))))))
-#+end_src
+    (if xdg xdg (namestring (merge-pathnames ".config/passepartout/" (user-homedir-pathname))))))
 
-** Config file path (get-config-file)
-Returns the path to the ~.env~ file within the config directory.
-#+begin_src lisp
-(defun get-config-file ()
+(defun config-file-path ()
   "Returns the path to the .env configuration file."
-  (merge-pathnames ".env" (get-oc-config-dir)))
-#+end_src
+  (merge-pathnames ".env" (config-directory)))
 
-** Ensure config directory (ensure-config-dir)
-Creates the config directory tree if it does not exist.
-#+begin_src lisp
-(defun ensure-config-dir ()
+(defun config-directory-ensure ()
   "Creates the configuration directory if it does not exist."
-  (ensure-directories-exist (get-oc-config-dir)))
-#+end_src
+  (ensure-directories-exist (config-directory)))
 
-** Config File Operations
-#+begin_src lisp
-(defun read-config-file ()
+(defun config-read ()
   "Reads the .env config file and returns an alist of KEY=VALUE pairs."
-  (let ((config-file (get-config-file)))
+  (let ((config-file (config-file-path)))
     (when (uiop:file-exists-p config-file)
       (let ((lines (uiop:read-file-lines config-file))
             (result nil))
@@ -51,34 +27,31 @@ Creates the config directory tree if it does not exist.
                   (push (cons key value) result))))))
         (nreverse result)))))
 
-(defun write-config-file (config-alist)
+(defun config-write (config-alist)
   "Writes the config alist to the .env file."
-  (ensure-config-dir)
-  (let ((config-file (get-config-file)))
+  (config-directory-ensure)
+  (let ((config-file (config-file-path)))
     (with-open-file (stream config-file :direction :output :if-exists :supersede :if-does-not-exist :create)
-      (format stream "# OpenCortex Configuration~%")
+      (format stream "# Passepartout Configuration~%")
       (format stream "# Generated by opencortex setup~%~%")
       (dolist (pair config-alist)
         (format stream "~a=~a~%" (car pair) (cdr pair))))))
 
-(defun get-config-value (key)
+(defun config-get (key)
   "Gets a config value by key."
-  (let ((config (read-config-file)))
+  (let ((config (config-read)))
     (cdr (assoc key config :test #'string=))))
 
-(defun set-config-value (key value)
+(defun config-set (key value)
   "Sets a config value and saves to file."
-  (let ((config (read-config-file))
+  (let ((config (config-read))
         (pair (cons key value)))
     (let ((existing (assoc key config :test #'string=)))
       (if existing
           (setf (cdr existing) value)
           (push pair config))
-      (write-config-file config))))
-#+end_src
+      (config-write config))))
 
-** Input Utilities
-#+begin_src lisp
 (defun prompt (prompt-text)
   "Simple prompt that returns user input as a string."
   (format t "~a" prompt-text)
@@ -104,17 +77,16 @@ Creates the config directory tree if it does not exist.
     (let ((num (ignore-errors (parse-integer response))))
       (when (and num (<= 1 num) (>= (length options) num))
         (nth (1- num) options)))))
-#+end_src
 
-** LLM Provider Setup
-#+begin_src lisp
 (defparameter *available-providers*
   '(("OpenAI" . "OPENAI_API_KEY")
     ("Anthropic" . "ANTHROPIC_API_KEY")
     ("OpenRouter" . "OPENROUTER_API_KEY")
     ("Groq" . "GROQ_API_KEY")
     ("Gemini" . "GEMINI_API_KEY")
-    ("Ollama (local)" . "OLLAMA_URL")))
+    ("DeepSeek" . "DEEPSEEK_API_KEY")
+    ("NVIDIA" . "NVIDIA_API_KEY")
+    ("Local" . "LOCAL_BASE_URL")))
 
 (defun setup-llm-providers ()
   "Interactive wizard for configuring LLM providers."
@@ -124,41 +96,66 @@ Creates the config directory tree if it does not exist.
   (format t "==================================================~%~%")
   
   (let ((current-providers (loop for (name . key) in *available-providers*
-                                when (get-config-value key)
+                                when (config-get key)
                                 collect name)))
     (when current-providers
-      (format t "Current providers: ~{~a~^, ~}~%~%" current-providers))
+      (format t "Currently configured: ~{~a~^, ~}~%~%" current-providers))
     
+    (format t "~%")
+    (format t "★ OpenRouter recommended for new users — free tier, no credit card required.~%")
+    (format t "  Sign up at https://openrouter.ai and paste your API key below.~%")
+    (format t "~%")
     (format t "Available providers:~%")
+    (format t " ~20@A ~25@A ~s~%" "Provider" "Key env var" "Notes")
+    (format t " ~20@A ~25@A ~s~%" "--------" "----------" "-----")
     (dolist (p *available-providers*)
-      (format t "  - ~a~%" (car p)))
+      (let ((name (car p))
+            (env-key (cdr p))
+            (desc (case (car p)
+                    ("OpenRouter" "free tier, 33+ models")
+                    ("OpenAI" "paid, gpt-4o-mini")
+                    ("Anthropic" "paid, Claude 3.5 Sonnet")
+                    ("Groq" "fast inference, free tier")
+                    ("Gemini" "free via API")
+                    ("DeepSeek" "competitive pricing, coding")
+                    ("NVIDIA" "NVIDIA NIM hosted models")
+                    ("Local" "local server, no API key")
+                    (t ""))))
+        (format t " ~20@A ~25@A ~a~%" name env-key desc)))
     (format t "~%")
     
-    (when (prompt-yes-no "Configure a new provider?")
-      (let ((chosen (prompt-choice "Select provider:" (mapcar #'car *available-providers*))))
-        (when chosen
-          (let ((env-key (cdr (assoc chosen *available-providers* :test #'string=))))
-            (if (string= chosen "Ollama (local)")
-                (progn
-                  (format t "Enter Ollama URL (e.g., http://localhost:11434): ")
-                  (let ((url (read-line)))
-                    (set-config-value env-key url)
-                    (format t "✓ Ollama configured at ~a~%" url)))
-                (progn
-                  (format t "Enter API key for ~a: " chosen)
-                  (let ((key (read-line)))
-                    (set-config-value env-key key)
-                    (format t "✓ ~a API key saved~%" chosen)))))))))
-  
-  (format t "~%"))
+    (loop
+      (when (not (prompt-yes-no "Configure a LLM provider?"))
+        (return))
+      (let ((chosen (prompt-choice "Select a provider:" (mapcar #'car *available-providers*))))
+        (unless chosen
+          (format t "Invalid choice.~%")
+          (return))
+        (let ((env-key (cdr (assoc chosen *available-providers* :test #'string=))))
+          (cond
+            ((string= chosen "Local")
+             (format t "Enter the server URL (e.g., http://localhost:11434 for Ollama,~%")
+             (format t "  or http://localhost:8080 for llama.cpp): ")
+             (let ((url (read-line)))
+               (if (> (length url) 0)
+                   (progn (config-set env-key url)
+                          (format t "✓ ~a configured at ~a~%" chosen url))
+                   (format t "Skipping ~a — no URL entered.~%" chosen))))
+            (t
+             (format t "Enter API key for ~a~%" chosen)
+             (format t "  (get one from the provider's website, paste it here): ")
+             (let ((key (read-line)))
+               (if (> (length key) 0)
+                   (progn (config-set env-key key)
+                          (format t "✓ ~a API key saved~%" chosen))
+                    (format t "Skipping ~a — no key entered.~%" chosen))))))))
+
+  (format t "~%")))
 
 (defun setup-add-provider ()
   "Entry point for adding a single provider (called from CLI)."
   (setup-llm-providers))
-#+end_src
 
-** Gateway Setup
-#+begin_src lisp
 (defun setup-gateways ()
   "Interactive wizard for configuring external gateways."
   (format t "~%~%")
@@ -176,15 +173,12 @@ Creates the config directory tree if it does not exist.
       (when chosen
         (let ((token (prompt (format nil "Enter ~a bot token: " chosen))))
           (if (string= chosen "Slack")
-              (set-config-value "SLACK_TOKEN" token)
-              (set-config-value "DISCORD_TOKEN" token))
+              (config-set "SLACK_TOKEN" token)
+              (config-set "DISCORD_TOKEN" token))
           (format t "✓ ~a gateway configured~%" chosen)))))
   
   (format t "~%"))
-#+end_src
 
-** Skill Management
-#+begin_src lisp
 (defun setup-skills ()
   "Interactive wizard for enabling/disabling skills."
   (format t "~%~%")
@@ -193,12 +187,9 @@ Creates the config directory tree if it does not exist.
   (format t "==================================================~%~%")
   
   (format t "Note: Skill management is not yet implemented.~%")
-  (format t "Skills are automatically loaded from ~a~%" (or (uiop:getenv "OC_DATA_DIR") "~/.local/share/opencortex"))
+  (format t "Skills are automatically loaded from ~a~%" (or (uiop:getenv "PASSEPARTOUT_DATA_DIR") "~/.local/share/passepartout"))
   (format t "~%"))
-#+end_src
 
-** Memory Settings
-#+begin_src lisp
 (defun setup-memory ()
   "Interactive wizard for memory settings."
   (format t "~%~%")
@@ -208,18 +199,15 @@ Creates the config directory tree if it does not exist.
   
   (let ((auto-save (prompt "Auto-save interval in seconds [300]:")))
     (when (and auto-save (> (length auto-save) 0))
-      (set-config-value "MEMORY_AUTO_SAVE_INTERVAL" auto-save)))
+      (config-set "MEMORY_AUTO_SAVE_INTERVAL" auto-save)))
   
   (let ((history (prompt "History retention in lines [1000]:")))
     (when (and history (> (length history) 0))
-      (set-config-value "MEMORY_HISTORY_RETENTION" history)))
+      (config-set "MEMORY_HISTORY_RETENTION" history)))
   
   (format t "✓ Memory settings saved~%")
   (format t "~%"))
-#+end_src
 
-** Network Settings
-#+begin_src lisp
 (defun setup-network ()
   "Interactive wizard for network settings."
   (format t "~%~%")
@@ -229,23 +217,20 @@ Creates the config directory tree if it does not exist.
   
   (let ((timeout (prompt "Request timeout in seconds [30]:")))
     (when (and timeout (> (length timeout) 0))
-      (set-config-value "REQUEST_TIMEOUT" timeout)))
+      (config-set "REQUEST_TIMEOUT" timeout)))
   
   (let ((proxy (prompt "Proxy URL (leave empty for none) []:")))
     (when (and proxy (> (length proxy) 0))
-      (set-config-value "HTTP_PROXY" proxy)))
+      (config-set "HTTP_PROXY" proxy)))
   
   (format t "✓ Network settings saved~%")
   (format t "~%"))
-#+end_src
 
-** Main Setup Wizard
-#+begin_src lisp
-(defun run-setup-wizard ()
+(defun setup-wizard-run ()
   "Main entry point for the interactive setup wizard."
   (format t "~%~%")
   (format t "╔═══════════════════════════════════════════════════╗~%")
-  (format t "║         OpenCortex Setup Wizard                   ║~%")
+  (format t "║         Passepartout Setup Wizard                   ║~%")
   (format t "╚═══════════════════════════════════════════════════╝~%")
   (format t "~%")
   (format t "This wizard will help you configure:~%")
@@ -255,7 +240,7 @@ Creates the config directory tree if it does not exist.
   (format t "  4. Network Settings~%")
   (format t "~%")
   
-  (ensure-config-dir)
+  (config-directory-ensure)
   
   ;; Step 1: LLM Providers
   (when (prompt-yes-no "Configure LLM providers?")
@@ -278,15 +263,11 @@ Creates the config directory tree if it does not exist.
   (format t " Setup Complete!~%")
   (format t "==================================================~%")
   (format t "~%")
-  (format t "Configuration saved to: ~a~%" (get-config-file))
+  (format t "Configuration saved to: ~a~%" (config-file-path))
   (format t "~%")
-  (format t "To verify your setup, run: opencortex doctor~%")
+  (format t "To verify your setup, run: passepartout doctor~%")
   (format t "~%"))
-#+end_src
 
-** Skill Registration
-#+begin_src lisp
-(defskill :skill-config-manager
+(defskill :passepartout-system-config
   :priority 100
   :trigger (lambda (ctx) (declare (ignore ctx)) nil))
-#+end_src

lisp/system-context-manager.lisp

@@ -0,0 +1,121 @@
+(defvar *context-stack* nil
+  "Stack of context plists. Each plist has :project, :base-path, :scope.
+Top of stack (car) is the current context.")
+
+(defvar *context-max-depth* 10
+  "Maximum context stack depth. Prevents runaway pushes.")
+
+(defun current-context ()
+  "Returns the current context plist, or nil if no context is set."
+  (car *context-stack*))
+
+(defun current-scope ()
+  "Returns the current scope keyword (:memex/:session/:project).
+Returns :memex when no context is set (defaults to global scope)."
+  (or (getf (current-context) :scope) :memex))
+
+(defun current-project ()
+  "Returns the current project name, or nil."
+  (getf (current-context) :project))
+
+(defun current-base-path ()
+  "Returns the current base path for file resolution, or nil."
+  (getf (current-context) :base-path))
+
+(defun context-stack-depth ()
+  "Returns the current depth of the context stack."
+  (length *context-stack*))
+
+(defun push-context (&key project base-path (scope :project))
+  "Pushes a new context onto the stack. When focused on a project:
+- File paths resolve relative to BASE-PATH
+- Memory queries filter by SCOPE
+- :memex scope objects remain visible (always global)
+Returns the new context plist."
+  (when (>= (context-stack-depth) *context-max-depth*)
+    (log-message "CONTEXT: Stack depth limit reached (~d), refusing push" *context-max-depth*)
+    (return-from push-context (current-context)))
+  (let* ((context (list :project project
+                        :base-path base-path
+                        :scope scope)))
+    (push context *context-stack*)
+    (log-message "CONTEXT: Pushed ~a (depth ~d)" project (context-stack-depth))
+    context))
+
+(defun pop-context ()
+  "Pops the current context, restoring the previous one.
+Returns the restored context or nil if stack becomes empty."
+  (if *context-stack*
+      (let ((popped (pop *context-stack*)))
+        (log-message "CONTEXT: Popped ~a (depth ~d)"
+                     (getf popped :project) (context-stack-depth))
+        (current-context))
+      (progn
+        (log-message "CONTEXT: Cannot pop — stack is empty")
+        nil)))
+
+(defmacro with-context ((&key project base-path (scope :project)) &body body)
+  "Executes BODY within a scoped context, then restores the previous context.
+Example:
+  (with-context (:project \"passepartout\" :base-path \"/home/user/memex/projects/passepartout\")
+    (context-scoped-query :tag \"bug\"))"
+  `(let ((*context-stack* (cons (list :project ,project
+                                      :base-path ,base-path
+                                      :scope ,scope)
+                                *context-stack*)))
+     ,@body))
+
+(defun resolve-path (path)
+  "Resolves a file path relative to the current context.
+If PATH is absolute, returns it unchanged.
+If PATH is relative and a base-path is set, merges them.
+Otherwise returns PATH unchanged."
+  (let ((base (current-base-path)))
+    (if (and base path (not (uiop:absolute-pathname-p path)))
+        (namestring (merge-pathnames path (uiop:ensure-directory-pathname base)))
+        path)))
+
+(defun context-scoped-query (&key tag todo-state type)
+  "Like context-query but filtered to the current context's scope.
+:memex-scoped objects are always visible regardless of current scope."
+  (context-query :tag tag :todo-state todo-state :type type :scope (current-scope)))
+
+(defun project-objects ()
+  "Returns all objects scoped to the current project.
+Includes :memex-scoped objects (global knowledge) plus :project-scoped
+objects matching the current project."
+  (context-scoped-query))
+
+(defun focus-project (name base-path)
+  "Shortcut: focus on a project by name and base path.
+Calls push-context with :scope :project."
+  (push-context :project name :base-path base-path :scope :project))
+
+(defun focus-session ()
+  "Shortcut: enter a session context (ephemeral scope).
+Objects created in this scope are visible only during the session."
+  (push-context :project "session" :scope :session))
+
+(defun focus-memex ()
+  "Shortcut: return to global memex scope. Equivalent to pop-context
+until stack is empty or :memex context is reached."
+  (loop while (and *context-stack*
+                   (not (eq (getf (current-context) :scope) :memex)))
+        do (pop-context)))
+
+(defun unfocus ()
+  "Pop the top context and return to the previous one."
+  (pop-context))
+
+(defskill :passepartout-system-context-manager
+  :priority 90
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil)
+  :deterministic (lambda (action ctx)
+                   (declare (ignore action))
+                   (ignore-errors
+                     (when (> (context-stack-depth) 0)
+                       nil))
+                   nil))
+
+(when (boundp '*scope-resolver*)
+  (setf *scope-resolver* #'current-scope))

lisp/system-diagnostics.lisp

@@ -0,0 +1,176 @@
+(defvar *diagnostics-binaries* '("sbcl" "emacs" "git" "socat" "nc")
+  "List of external binaries required for full system operation.")
+
+(defvar *diagnostics-package-map*
+  '(("sbcl" . "sbcl")
+    ("emacs" . "emacs")
+    ("git" . "git")
+    ("socat" . "socat")
+    ("nc" . "netcat-openbsd")
+    ("curl" . "curl")
+    ("rlwrap" . "rlwrap"))
+  "Map binary names to apt package names.")
+
+(defvar *doctor-missing-deps* nil
+  "List of missing dependencies populated by diagnostics-dependencies-check.")
+
+(defvar *doctor-auto-install* t
+  "When T, doctor will attempt to install missing dependencies automatically.")
+
+(defun diagnostics-dependencies-check ()
+  "Verifies that required external binaries are available in the PATH via shell probe."
+  (setf *doctor-missing-deps* nil)
+  (let ((all-ok t))
+    (format t "DOCTOR: Checking system dependencies...~%")
+    (dolist (dep *diagnostics-binaries*)
+      (let ((path (ignore-errors
+                    (uiop:run-program (list "which" dep)
+                                      :output :string :ignore-error-status t))))
+        (if (and path (> (length path) 0))
+            (format t "  [OK] Found ~a~%" dep)
+            (progn
+              (format t "  [FAIL] Missing binary: ~a~%" dep)
+              (push dep *doctor-missing-deps*)
+              (setf all-ok nil)))))
+    (when (and all-ok (null *doctor-missing-deps*))
+      (format t "DOCTOR: All dependencies satisfied.~%"))
+    all-ok))
+
+(defun diagnostics-dependencies-install ()
+  "Attempts to install missing system dependencies via apt."
+  (when (null *doctor-missing-deps*)
+    (format t "DOCTOR: No missing dependencies to install.~%")
+    (return-from diagnostics-dependencies-install t))
+
+  (format t "DOCTOR: Attempting to install ~a missing dependencies...~%" (length *doctor-missing-deps*))
+
+  (let ((packages (remove-duplicates
+                   (mapcar (lambda (dep)
+                             (or (cdr (assoc dep *diagnostics-package-map* :test #'string=))
+                                 dep))
+                           *doctor-missing-deps*)
+                   :test #'string=)))
+    (format t "DOCTOR: Packages to install: ~a~%" packages)
+
+    (let ((cmd (format nil "apt-get install -y ~{~a~^ ~}" packages)))
+      (format t "DOCTOR: Running: ~a~%" cmd)
+      (handler-case
+          (let ((output (uiop:run-program cmd
+                                           :output :string
+                                           :error-output :string
+                                           :external-format :utf-8)))
+            (if (zerop (uiop:run-program (format nil "which ~a" (car *doctor-missing-deps*))
+                                          :ignore-error-status t))
+                (progn
+                  (format t "DOCTOR: Dependencies installed successfully.~%")
+                  (setf *doctor-missing-deps* nil)
+                  t)
+                (progn
+                  (format t "DOCTOR: Installation failed. Output: ~a~%" output)
+                  nil)))
+        (error (c)
+          (format t "DOCTOR: Installation error: ~a~%" c)
+          nil)))))
+
+(defun diagnostics-env-check ()
+  "Validates XDG directories and environment configuration."
+  (format t "DOCTOR: Checking XDG environment...~%")
+  (let ((all-ok t)
+        (config-dir (uiop:getenv "PASSEPARTOUT_CONFIG_DIR"))
+        (data-dir (uiop:getenv "PASSEPARTOUT_DATA_DIR"))
+        (state-dir (uiop:getenv "PASSEPARTOUT_STATE_DIR"))
+        (memex-dir (uiop:getenv "MEMEX_DIR")))
+
+    (flet ((check-dir (name path critical)
+             (if (and path (> (length path) 0))
+                 (if (uiop:directory-exists-p path)
+                     (format t "  [OK] ~a: ~a~%" name path)
+                     (progn
+                       (format t "  [FAIL] ~a directory missing: ~a~%" name path)
+                       (when critical (setf all-ok nil))))
+                 (progn
+                   (format t "  [FAIL] ~a variable not set.~%" name)
+                   (when critical (setf all-ok nil))))))
+
+      (check-dir "Config (PASSEPARTOUT_CONFIG_DIR)" config-dir t)
+      (check-dir "Data (PASSEPARTOUT_DATA_DIR)" data-dir t)
+      (check-dir "State (PASSEPARTOUT_STATE_DIR)" state-dir t)
+      (check-dir "Memex (MEMEX_DIR)" memex-dir t))
+    all-ok))
+
+(defun diagnostics-llm-check ()
+  "Tests connectivity to LLM providers. Returns T if at least one provider is configured."
+  (format t "DOCTOR: Checking LLM connectivity...~%")
+  (let ((providers '((:openrouter . "OPENROUTER_API_KEY")
+                     (:anthropic . "ANTHROPIC_API_KEY")
+                     (:openai . "OPENAI_API_KEY")
+                     (:groq . "GROQ_API_KEY")
+                     (:gemini . "GEMINI_API_KEY")
+                     (:deepseek . "DEEPSEEK_API_KEY")
+                     (:nvidia . "NVIDIA_API_KEY")
+                     (:ollama . "OLLAMA_URL")))
+        (configured nil))
+    (dolist (p providers)
+      (let ((env-val (uiop:getenv (cdr p))))
+        (cond
+          ((and env-val (> (length env-val) 0))
+           (format t "  [OK] ~a configured~%" (car p))
+           (setf configured t))
+          ((eq (car p) :ollama)
+           (let ((ollama-check (ignore-errors
+                                 (uiop:run-program '("curl" "-s" "http://localhost:11434/api/tags")
+                                                    :output :string :ignore-error-status t))))
+             (when (and ollama-check (search "\"models\"" ollama-check))
+               (format t "  [OK] Ollama local model server detected~%")
+               (setf configured t)))))))
+    (if configured
+        (progn
+          (format t "  [OK] LLM provider(s) available~%")
+          t)
+        (progn
+          (format t "  [WARN] No LLM provider configured.~%")
+          (format t "  Run 'passepartout configure' to configure a provider.~%")
+          t))))
+
+(defun diagnostics-run-all (&key (auto-install t))
+  "Executes the full diagnostic suite and returns T if system is healthy."
+  (format t "==================================================~%")
+  (format t " PASSEPARTOUT DOCTOR: Commencing Health Check~%")
+  (format t "==================================================~%")
+  (let ((dep-ok (diagnostics-dependencies-check)))
+    (when (and (not dep-ok) auto-install *doctor-auto-install*)
+      (format t "DOCTOR: Attempting automatic installation...~%")
+      (setf dep-ok (diagnostics-dependencies-install))
+      (when dep-ok
+        (setf dep-ok (diagnostics-dependencies-check))))
+    (let ((env-ok (diagnostics-env-check))
+          (llm-ok (diagnostics-llm-check)))
+      (format t "==================================================~%")
+      (if (and dep-ok env-ok)
+          (progn
+            (format t " ✓ SYSTEM HEALTHY: Ready for ignition.~%")
+            t)  ;; Explicitly return T
+          (progn
+            (format t "==================================================~%")
+            (format t " ISSUES FOUND:~%")
+            (when (not dep-ok)
+              (format t "  - Missing system dependencies~%"))
+            (when (not llm-ok)
+              (format t "  - No LLM provider configured~%"))
+            (format t "~%")
+            (format t " RECOMMENDED ACTIONS:~%")
+            (format t "  1. Run 'passepartout configure' to configure everything~%")
+            (format t "  2. Or run 'passepartout doctor --fix' for auto-repair~%")
+            (format t "==================================================~%")
+            nil)))))  ;; Return nil when issues found
+
+(defun diagnostics-main ()
+  "Entry point for the 'doctor' CLI command."
+  (if (diagnostics-run-all)
+      (uiop:quit 0)
+      (uiop:quit 1)))
+
+(defskill :passepartout-system-diagnostics
+  :priority 100
+  :trigger (lambda (ctx) (eq (getf (getf ctx :payload) :sensor) :heartbeat))
+  :deterministic (lambda (action ctx) (declare (ignore action ctx)) nil))

lisp/system-event-orchestrator.lisp

@@ -0,0 +1,205 @@
+(defpackage :passepartout.system-event-orchestrator
+  (:use :cl :passepartout)
+  (:export
+   :orchestrator-register-hook
+   :orchestrator-register-cron
+   :orchestrator-classify
+   :orchestrator-on-heartbeat
+   :orchestrator-bootstrap
+   :orchestrator-dispatch
+   :default-classifier
+   :parse-org-repeat
+   :*hook-registry*
+   :*cron-registry*
+   :*tier-classifier*))
+
+(in-package :passepartout.system-event-orchestrator)
+
+(defvar *hook-registry* (make-hash-table :test 'equal)
+  "Maps hook property string → list of gate function symbols.")
+
+(defvar *cron-registry* (make-hash-table :test 'equal)
+  "Maps job name string → plist (:next-run :expression :repeat :action :tier).")
+
+(defvar *tier-classifier* nil
+  "Optional function (context) → :reflex | :cognition | :reasoning.")
+
+(defun default-classifier (context)
+  "Rule-based tier classification.
+:reflex — file/shell operations, deterministic checks
+:cognition — text processing, summarization, simple Q&A
+:reasoning — planning, analysis, multi-step decisions"
+  (let* ((text (or (getf context :text) ""))
+         (lower (string-downcase text)))
+    (cond
+      ((or (search "rm " lower)
+           (search "write-file" lower)
+           (search "shell" lower)
+           (search "verify-" lower))
+       :reflex)
+      ((or (search "summarize" lower)
+           (search "list" lower)
+           (search "find " lower)
+           (search "what is" lower)
+           (search "search" lower))
+       :cognition)
+      (t :reasoning))))
+
+(defun parse-org-repeat (timestamp-string)
+  (let* ((cleaned (string-trim '(#\< #\> #\Newline #\Tab) timestamp-string))
+         (parts (uiop:split-string cleaned :separator '(#\space)))
+         (repeat-part (ignore-errors (car (last parts)))))
+    (when (and repeat-part (uiop:string-prefix-p "+" repeat-part))
+      (let* ((rest (subseq repeat-part 1))
+             (num-end (position-if (lambda (c) (not (digit-char-p c))) rest))
+             (num (parse-integer (subseq rest 0 num-end)))
+             (unit-str (subseq rest num-end)))
+        (list (intern (string-upcase unit-str) :keyword) num)))))
+
+(defun orchestrator-register-hook (hook-property gate-function)
+  "Registers a deterministic gate to fire when an Org node with
+the #+HOOK: property matching HOOK-PROPERTY is modified."
+  (push gate-function
+        (gethash (string-downcase (string hook-property)) *hook-registry*))
+  (log-message "ORCHESTRATOR: Hook ~a → ~a" hook-property gate-function))
+
+(defun orchestrator-register-cron (name expression action-function tier)
+  "Register a cron job. NAME is a keyword, EXPRESSION is an Org-mode
+timestamp string with optional repeat. TIER is :reflex :cognition :reasoning."
+  (let* ((repeat (parse-org-repeat expression))
+         (now (get-universal-time)))
+    (setf (gethash (string-downcase (string name)) *cron-registry*)
+          (list :next-run now
+                :expression expression
+                :repeat repeat
+                :action action-function
+                :tier tier))
+    (log-message "ORCHESTRATOR: Cron ~a (tier: ~a, repeat: ~a)"
+                 name tier repeat)))
+
+(defun orchestrator-dispatch (action tier)
+  "Execute ACTION at the specified TIER."
+  (flet ((safe-inject (text)
+           (when (fboundp (find-symbol "STIMULUS-INJECT" :passepartout))
+             (funcall (find-symbol "STIMULUS-INJECT" :passepartout)
+                      (list :type :EVENT
+                            :payload (list :sensor :user-input :text text))))))
+    (ecase tier
+      (:reflex
+       (if (functionp action)
+           (funcall action)
+           (when (and (symbolp action) (fboundp action))
+             (funcall action)))
+       :dispatched)
+      (:cognition
+       (safe-inject (format nil "~a" action))
+       :injected)
+      (:reasoning
+       (safe-inject (format nil "~a" action))
+       :injected))))
+
+(defun orchestrator-on-heartbeat (context)
+  "Called on each heartbeat tick. Checks and dispatches due cron jobs."
+  (declare (ignore context))
+  (let ((now (get-universal-time))
+        (due-jobs nil))
+    (maphash (lambda (name config)
+               (let ((next-run (getf config :next-run)))
+                 (when (>= now next-run)
+                   (push (cons name config) due-jobs))))
+             *cron-registry*)
+    (dolist (job due-jobs)
+      (let* ((name (car job))
+             (config (cdr job))
+             (action (getf config :action))
+             (tier (getf config :tier))
+             (repeat (getf config :repeat))
+             (result (orchestrator-dispatch action tier)))
+        (log-message "ORCHESTRATOR: Heartbeat dispatched ~a (tier: ~a) → ~a"
+                     name tier result)
+        (when repeat
+          (let* ((unit (first repeat))
+                 (value (second repeat))
+                 (interval (case unit
+                             (:d (* 86400 value))
+                             (:w (* 604800 value))
+                             (:m (* 2592000 value))
+                             (t (* 3600 value)))))
+            (setf (getf (gethash name *cron-registry*) :next-run)
+                  (+ now interval))))))
+    nil))
+
+(defun orchestrator-scan-org-file (filepath)
+  "Scans a single Org file for HOOK and CRON properties in property drawers.
+Returns a list of plists (:type :hook/:cron :name <str> :value <str>)."
+  (let ((results nil)
+        (in-properties nil)
+        (lines nil))
+    (handler-case
+        (setf lines (uiop:split-string (uiop:read-file-string filepath)
+                                        :separator '(#\Newline)))
+      (error (c)
+        (log-message "ORCHESTRATOR: Could not read ~a: ~a" filepath c)
+        (return-from orchestrator-scan-org-file nil)))
+    (dolist (line lines)
+      (let ((trimmed (string-trim '(#\Space) line)))
+        (when (string= trimmed ":PROPERTIES:")
+          (setf in-properties t))
+        (when (string= trimmed ":END:")
+          (setf in-properties nil))
+        (when in-properties
+          (cond
+            ((uiop:string-prefix-p ":HOOK:" trimmed)
+             (let ((val (string-trim '(#\Space) (subseq trimmed 6))))
+               (push (list :type :hook :name val :file filepath) results)
+               (log-message "ORCHESTRATOR: Found hook ~a in ~a" val filepath)))
+            ((uiop:string-prefix-p ":CRON:" trimmed)
+             (let ((val (string-trim '(#\Space) (subseq trimmed 6))))
+               (push (list :type :cron :name val :file filepath) results)
+               (log-message "ORCHESTRATOR: Found cron ~a in ~a" val filepath)))))))
+    (nreverse results)))
+
+(defun orchestrator-bootstrap ()
+  "Scans all Org files in the memex for #+HOOK: and #+CRON: properties
+and registers them. Scans ~/memex/projects/ and ~/memex/system/ by default."
+  (let* ((memex-dir (or (uiop:getenv "MEMEX_DIR")
+                        (namestring (merge-pathnames "memex/" (user-homedir-pathname)))))
+         (scan-dirs (list (merge-pathnames "projects/" memex-dir)
+                          (merge-pathnames "system/" memex-dir)))
+         (hook-count 0)
+         (cron-count 0))
+    (dolist (dir scan-dirs)
+      (handler-case
+          (let ((files (uiop:directory-files dir "*.org")))
+            (dolist (file files)
+              (let* ((path (namestring file))
+                     (entries (orchestrator-scan-org-file path)))
+                (dolist (entry entries)
+                  (let ((type (getf entry :type))
+                        (name (getf entry :name)))
+                    (cond
+                      ((eq type :hook)
+                       (orchestrator-register-hook name
+                         (lambda ()
+                           (log-message "ORCHESTRATOR: Hook ~a fired" name))))
+                      ((eq type :cron)
+                       (orchestrator-register-cron
+                         (intern (string-upcase (format nil "cron-~a" name)) :keyword)
+                         name
+                         (lambda ()
+                           (log-message "ORCHESTRATOR: Cron ~a fired" name))
+                         :cognition))))
+                  (if (eq (getf entry :type) :hook) (incf hook-count) (incf cron-count))))))
+        (error (c)
+          (log-message "ORCHESTRATOR: Could not scan ~a: ~a" dir c))))
+    (log-message "ORCHESTRATOR: Bootstrap complete (~d hooks, ~d cron jobs)"
+                 hook-count cron-count)))
+
+(defskill :passepartout-system-event-orchestrator
+  :priority 80
+  :trigger (lambda (ctx)
+             (eq (getf (getf ctx :payload) :sensor) :heartbeat))
+  :deterministic (lambda (action context)
+                   (declare (ignore action))
+                   (orchestrator-on-heartbeat context)
+                   nil))

lisp/system-memory.lisp

@@ -0,0 +1,73 @@
+(in-package :passepartout)
+
+(defun memory-inspect (&key (type-filter nil) (todo-filter nil) (limit 10))
+  "Returns a structured report of memory state.
+Optional filters: TYPE-FILTER (keyword), TODO-FILTER (string).
+Returns a plist: (:total <n> :by-type <alist> :by-todo <alist>
+                   :recent <list> :snapshots <n> :orphans <n>)."
+  (let* ((store (if (boundp '*memory-store*)
+                    (symbol-value '*memory-store*)
+                    (return-from memory-inspect
+                      (list :total 0 :reason "Memory store not available"))))
+         (total 0)
+         (type-counts (make-hash-table :test 'eq))
+         (todo-counts (make-hash-table :test 'equal))
+         (recent nil)
+         (all-ids (make-hash-table :test 'equal))
+         (orphans 0))
+    (maphash (lambda (id obj)
+               (setf (gethash id all-ids) t)
+               (let ((obj-type (memory-object-type obj))
+                     (attrs (memory-object-attributes obj))
+                     (v (memory-object-version obj)))
+                 (unless (and type-filter (not (eq obj-type type-filter)))
+                   (let ((todo (getf attrs :TODO-STATE)))
+                     (when (and todo-filter
+                                (not (string-equal todo todo-filter)))
+                       (return nil)))
+                   (incf total)
+                    (incf (gethash obj-type type-counts 0))
+                   (let ((todo (getf attrs :TODO-STATE)))
+                     (when todo
+                       (incf (gethash todo todo-counts 0))))
+                   (push (list :id id
+                               :type t
+                               :todo (getf attrs :TODO-STATE)
+                               :title (getf attrs :TITLE)
+                               :version v)
+                         recent))))
+             store)
+    ;; Sort recent by version desc and take LIMIT
+    (setf recent (subseq (sort recent #'>
+                                :key (lambda (r) (or (getf r :version) 0)))
+                         0 (min limit (length recent))))
+    ;; Count orphans
+    (maphash (lambda (id obj)
+               (let ((parent (memory-object-parent-id obj)))
+                 (when (and parent (not (gethash parent all-ids)))
+                   (incf orphans))))
+             store)
+    ;; Build output
+    (let ((types (loop for k being the hash-keys of type-counts
+                         using (hash-value v)
+                       collect (cons k v)))
+          (todos (loop for k being the hash-keys of todo-counts
+                         using (hash-value v)
+                       collect (cons k v)))
+          (snapshots (if (boundp '*memory-snapshots*)
+                         (length (symbol-value '*memory-snapshots*))
+                         0)))
+      (list :total total
+            :by-type (sort types #'> :key #'cdr)
+            :by-todo (sort todos #'> :key #'cdr)
+            :recent recent
+            :snapshots snapshots
+            :orphans orphans))))
+
+(defskill :passepartout-system-memory
+  :priority 100
+  :trigger (lambda (ctx) (eq (getf (getf ctx :payload) :sensor) :introspection))
+  :deterministic (lambda (action ctx)
+                   (declare (ignore action ctx))
+                   (ignore-errors (memory-inspect))
+                   nil))

lisp/system-model-embedding.lisp

@@ -0,0 +1,87 @@
+(in-package :passepartout)
+
+(defvar *embedding-provider* :hashing
+  "Active embedding provider: :hashing, :local, :openai.")
+
+(defvar *embedding-queue* nil
+  "Queue of text objects awaiting embedding.")
+
+(defvar *embedding-batch-size* 10
+  "Maximum texts per embedding API call.")
+
+(defun embedding-backend-local (text)
+  "Generate embeddings via a local OpenAI-compatible endpoint."
+  (let* ((url (or (uiop:getenv "LOCAL_BASE_URL") (format nil "http://~a" (or (uiop:getenv "OLLAMA_HOST") "localhost:11434"))))
+         (model (or (uiop:getenv "EMBEDDING_MODEL") "nomic-embed-text"))
+         (body (cl-json:encode-json-to-string
+                `((model . ,model) (input . ,text)))))
+    (handler-case
+        (let* ((response (dex:post (format nil "~a/api/embeddings" url)
+                                   :headers '(("Content-Type" . "application/json"))
+                                   :content body :connect-timeout 5 :read-timeout 30))
+               (json (cl-json:decode-json-from-string response))
+               (data (car (cdr (assoc :data json)))))
+          (or (cdr (assoc :embedding data))
+              (list :error "No embedding in response")))
+      (error (c)
+        (list :error (format nil "Embedding failed: ~a" c))))))
+
+(defun embedding-backend-openai (text)
+  "Generate embeddings via OpenAI compatible /v1/embeddings endpoint."
+  (let* ((api-key (uiop:getenv "OPENAI_API_KEY"))
+         (base-url (or (uiop:getenv "EMBEDDING_BASE_URL") "https://api.openai.com/v1"))
+         (model (or (uiop:getenv "EMBEDDING_MODEL") "text-embedding-3-small"))
+         (body (cl-json:encode-json-to-string
+                `((model . ,model) (input . ,text)))))
+    (handler-case
+        (let* ((response (dex:post (format nil "~a/embeddings" base-url)
+                                    :headers `(("Content-Type" . "application/json")
+                                               ("Authorization" . ,(format nil "Bearer ~a" api-key)))
+                                    :content body :connect-timeout 5 :read-timeout 30))
+               (json (cl-json:decode-json-from-string response))
+               (data (car (cdr (assoc :data json)))))
+          (or (cdr (assoc :embedding data))
+              (list :error "No embedding in response")))
+      (error (c)
+        (list :error (format nil "OpenAI Embedding failed: ~a" c))))))
+
+(defun embedding-backend-hashing (text)
+  "Fallback: produces a deterministic vector from the text hash."
+  (let* ((digest (ironclad:digest-sequence :sha256 (babel:string-to-octets text)))
+         (vec (make-array 8 :element-type 'single-float :initial-element 0.0)))
+    (dotimes (i (min (length digest) 8))
+      (setf (aref vec i) (float (/ (aref digest i) 255.0) 0.0)))
+    vec))
+
+(defun embed-object (text)
+  "Embed a single text string using the active backend."
+  (let* ((selected (or *embedding-provider* :hashing))
+         (backend (case selected
+                    (:local #'embedding-backend-local)
+                    (:openai #'embedding-backend-openai)
+                    (t #'embedding-backend-hashing))))
+    (if backend
+        (progn
+          (log-message "EMBEDDING: Provider ~a, backend=~a" selected backend)
+          (funcall backend text))
+        (progn
+          (log-message "EMBEDDING: No backend for provider ~a, using hashing" selected)
+          (embedding-backend-hashing text)))))
+
+(defun embed-queue-object (object)
+  "Queue a text object for async embedding."
+  (push object *embedding-queue*)
+  (log-message "EMBEDDING: Queued object"))
+
+(defun embed-all-pending ()
+  "Drain the embedding queue, batch-process all queued objects."
+  (let ((batch (nreverse *embedding-queue*)))
+    (setf *embedding-queue* nil)
+    (dolist (item batch)
+      (handler-case
+          (let ((text (if (stringp item) item (format nil "~a" item))))
+            (embed-object text))
+        (error (c)
+          (log-message "EMBEDDING: Failed to embed object: ~a" c))))))
+
+(log-message "EMBEDDING: Gateway loaded with provider ~a" *embedding-provider*)

lisp/system-model-explorer.lisp

@@ -0,0 +1,69 @@
+(in-package :passepartout)
+
+(defvar *model-cache* (make-hash-table :test 'equal)
+  "Cache: provider keyword -> (timestamp . model-list)")
+
+(defvar *model-cache-ttl* 300
+  "Cache TTL in seconds (default 5 min)")
+
+(defun model-explorer-fetch-openrouter ()
+  "Query OpenRouter /api/v1/models and return parsed model list."
+  (handler-case
+      (let* ((raw (dex:get "https://openrouter.ai/api/v1/models" :connect-timeout 10 :read-timeout 20))
+             (json (cl-json:decode-json-from-string raw))
+             (data (cdr (assoc :data json))))
+        (mapcar (lambda (m)
+                  (let ((pricing (cdr (assoc :pricing m))))
+                    (list :id (cdr (assoc :id m))
+                          :name (cdr (assoc :name m))
+                          :context (cdr (assoc :context_length m))
+                          :free (and pricing
+                                     (string= "0" (cdr (assoc :prompt pricing)))
+                                     (string= "0" (cdr (assoc :completion pricing)))))))
+                data))
+    (error (c)
+      (log-message "MODEL-EXPLORER: OpenRouter API error: ~a" c)
+      nil)))
+
+(defun model-explorer-fetch (provider)
+  "Fetch available models for PROVIDER. Returns list of (:id :name :context :free) plists."
+  (let ((cached (gethash provider *model-cache*)))
+    (when (and cached (< (- (get-universal-time) (car cached)) *model-cache-ttl*))
+      (return-from model-explorer-fetch (cdr cached))))
+  (let ((models (case provider
+                  (:openrouter (model-explorer-fetch-openrouter))
+                  (t nil))))
+    (when models
+      (setf (gethash provider *model-cache*)
+            (cons (get-universal-time) models)))
+    models))
+
+(defun model-explorer-list-free ()
+  "Return all free models from cache or fetch."
+  (remove-if-not (lambda (m) (getf m :free)) (model-explorer-fetch :openrouter)))
+
+(defun model-explorer-recommend (slot)
+  "Return recommended models for SLOT (:code, :chat, :plan, :background)."
+  (case slot
+    (:code
+     '((:id "qwen/qwen3-coder:free" :name "Qwen3 Coder 480B" :context 262000 :free t :note "Top-tier code MoE, 35B active")
+       (:id "poolside/laguna-m.1:free" :name "Laguna M.1" :context 131072 :free t :note "Flagship coding agent")
+       (:id "openai/gpt-oss-120b:free" :name "gpt-oss-120b" :context 131072 :free t :note "117B MoE open-weight coding")))
+    (:plan
+     '((:id "openrouter/owl-alpha" :name "Owl Alpha" :context 1048756 :free t :note "Agentic, tool use, reasoning")
+       (:id "nousresearch/hermes-3-llama-3.1-405b:free" :name "Hermes 3 405B" :context 131072 :free t :note "405B generalist, strong planning")
+       (:id "minimax/minimax-m2.5:free" :name "MiniMax M2.5" :context 196608 :free t :note "SOTA productivity, long context")))
+    (:chat
+     '((:id "meta-llama/llama-3.3-70b-instruct:free" :name "Llama 3.3 70B" :context 65536 :free t :note "Strong multilingual generalist")
+       (:id "google/gemma-4-31b-it:free" :name "Gemma 4 31B" :context 262144 :free t :note "Dense 31B, thinking mode, long context")
+       (:id "mistralai/mistral-nemo:free" :name "Mistral Nemo" :context 32768 :free t :note "Fast, good for casual conversation")))
+    (:background
+     '((:id "meta-llama/llama-3.2-3b-instruct:free" :name "Llama 3.2 3B" :context 131072 :free t :note "Small, fast, efficient")
+       (:id "liquid/lfm-2.5-1.2b-instruct:free" :name "LFM 2.5 1.2B" :context 32768 :free t :note "Ultra-compact, edge-ready")))
+     (t '((:id "meta-llama/llama-3.3-70b-instruct:free" :name "Llama 3.3 70B" :context 65536 :free t :note "Safe fallback")))))
+
+(defvar *slot-descriptions*
+  '((:code . "Code generation, refactoring, debugging. Needs strong reasoning and large context.\nRecommend: Qwen3 Coder (free, 35B active) or Laguna M.1 (coding agent).")
+    (:chat . "Casual conversation, Q&A, creative writing. Prefer balanced quality, low latency.\nRecommend: Llama 3.3 70B (strong generalist) or Gemma 4 31B (thinking mode).")
+    (:plan . "Strategic planning, architecture design, complex multi-step reasoning.\nRecommend: Owl Alpha (free, tool use, 1M ctx) or Hermes 3 405B (strongest free reasoning).")
+    (:background . "Heartbeat summaries, delegation responses, tool output filtering. Must be small + fast.\nRecommend: Llama 3.2 3B (131K ctx, fast) or LFM 2.5 1.2B (edge-ready).")))

lisp/system-model-provider.lisp

@@ -0,0 +1,119 @@
+(defparameter *provider-configs*
+  '((:local      . (:base-url nil          :key-env nil           :url-env "LOCAL_BASE_URL"            :default-model "llama3"))
+    (:openrouter . (:base-url "https://openrouter.ai/api/v1" :key-env "OPENROUTER_API_KEY" :default-model "openrouter/auto"))
+    (:openai     . (:base-url "https://api.openai.com/v1"    :key-env "OPENAI_API_KEY"     :default-model "gpt-4o-mini"))
+    (:anthropic  . (:base-url "https://api.anthropic.com/v1" :key-env "ANTHROPIC_API_KEY"  :default-model "claude-3-5-sonnet-20241022"))
+    (:groq       . (:base-url "https://api.groq.com/openai/v1" :key-env "GROQ_API_KEY"     :default-model "llama-3.1-70b-versatile"))
+    (:gemini     . (:base-url "https://generativelanguage.googleapis.com/v1beta/openai" :key-env "GEMINI_API_KEY" :default-model "gemini-2.0-flash"))
+    (:deepseek   . (:base-url "https://api.deepseek.com/v1"  :key-env "DEEPSEEK_API_KEY"  :default-model "deepseek-chat"))
+    (:nvidia     . (:base-url "https://integrate.api.nvidia.com/v1" :key-env "NVIDIA_API_KEY" :default-model "meta/llama-3.1-405b-instruct"))))
+
+(defun provider-config (provider)
+  "Returns the configuration plist for a provider keyword."
+  (cdr (assoc provider *provider-configs*)))
+
+(defun provider-available-p (provider)
+  "Checks if a provider is configured. Checks API key or URL env vars."
+  (let* ((config (provider-config provider))
+         (key-env (getf config :key-env))
+         (url-env (getf config :url-env))
+         (base-url (getf config :base-url)))
+    (cond (key-env (let ((key (uiop:getenv key-env))) (and key (> (length key) 0))))
+          (url-env (let ((url (uiop:getenv url-env))) (and url (> (length url) 0))))
+          (base-url t))))
+
+(defun provider-openai-request (prompt system-prompt &key model (provider :openrouter))
+  "Executes a request against any OpenAI-compatible API endpoint."
+  (let* ((config (provider-config provider))
+         (base-url (getf config :base-url))
+         (key-env (getf config :key-env))
+         (url-env (getf config :url-env))
+         (default-model (getf config :default-model))
+         (api-key (when key-env (uiop:getenv key-env)))
+         (model-id (or model default-model))
+         (url (if url-env
+                  (let ((host (uiop:getenv url-env)))
+                    (if host
+                        (format nil "http://~a/v1/chat/completions" host)
+                        (format nil "~a/chat/completions" base-url)))
+                  (format nil "~a/chat/completions" base-url)))
+         (timeout (or (ignore-errors
+                        (parse-integer (uiop:getenv "LLM_REQUEST_TIMEOUT")))
+                      30))
+         (headers `(("Content-Type" . "application/json")
+                    ,@(when api-key `(("Authorization" . ,(format nil "Bearer ~a" api-key))))
+                    ,@(when (eq provider :openrouter)
+                        `(("HTTP-Referer" . "https://github.com/amrgharbeia/passepartout")
+                          ("X-Title" . "Passepartout")))))
+         (body (cl-json:encode-json-to-string
+                `((model . ,model-id)
+                  (messages . (( (role . "system") (content . ,system-prompt) )
+                               ( (role . "user") (content . ,prompt) )))))))
+    (handler-case
+        (bt:with-timeout (timeout)
+          (let* ((response (dex:post url :headers headers :content body
+                                    :connect-timeout (min 10 timeout)
+                                    :read-timeout (max 10 (- timeout 5))))
+                 (json (cl-json:decode-json-from-string response))
+                 (choices (cdr (assoc :choices json)))
+                 (first-choice (car choices))
+                 (message (cdr (assoc :message first-choice)))
+                 (content (cdr (assoc :content message))))
+            (if content
+                (list :status :success :content content)
+                (list :status :error :message (format nil "~a: No content in response (~s)" provider json)))))
+      (bt:timeout ()
+        (list :status :error :message (format nil "~a: Request timed out after ~d seconds" provider timeout)))
+      (error (c)
+        (list :status :error :message (format nil "~a Failure: ~a" provider c))))))
+
+(defun provider-register-all ()
+  "Scans environment variables and registers all available LLM backends."
+  (dolist (entry *provider-configs*)
+    (let ((provider (car entry)))
+      (when (provider-available-p provider)
+        (log-message "LLM BACKEND: Registering provider ~a" provider)
+        (register-probabilistic-backend provider
+          (lambda (prompt system-prompt &key model)
+            (provider-openai-request prompt system-prompt :model model :provider provider)))))))
+
+(defun provider-cascade-initialize ()
+  "Reads PROVIDER_CASCADE from env and sets *provider-cascade*."
+  (let ((cascade-str (uiop:getenv "PROVIDER_CASCADE")))
+    (if cascade-str
+        (setf *provider-cascade*
+              (mapcar (lambda (s) (intern (string-upcase (string-trim '(#\Space) s)) :keyword))
+                      (uiop:split-string cascade-str :separator '(#\,))))
+        (setf *provider-cascade* (mapcar #'car (remove-if (lambda (e)
+                                                             (member (car e) '(:local)))
+                                                           *provider-configs*))))))
+
+(defun test-provider-connection (provider &optional api-key)
+  "Test a provider API key by hitting its models endpoint.
+Returns (:ok) on success, (:fail reason) on failure.
+If API-KEY is nil, reads from environment."
+  (let* ((config (provider-config provider))
+         (base-url (getf config :base-url))
+         (key-env (getf config :key-env))
+         (url-env (getf config :url-env))
+         (key (or api-key (when key-env (uiop:getenv key-env)))))
+    (handler-case
+        (let ((url (if url-env
+                       (let ((host (or (uiop:getenv url-env) "")))
+                         (format nil "http://~a/api/tags" host))
+                       (format nil "~a/models" (or base-url "")))))
+          (if key-env
+              (progn (dex:get url :headers `(("Authorization" . ,(format nil "Bearer ~a" key)))
+                              :connect-timeout 5 :read-timeout 10)
+                     '(:ok))
+              (if url-env
+                  (progn (dex:get url :connect-timeout 5 :read-timeout 10) '(:ok))
+                  '(:fail "No URL source for this provider"))))
+      (error (c) `(:fail ,(format nil "~a" c))))))
+
+(provider-register-all)
+(provider-cascade-initialize)
+
+(defskill :passepartout-system-model-provider
+  :priority 50
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))

lisp/system-model-router.lisp

@@ -0,0 +1,90 @@
+(in-package :passepartout)
+
+(defvar *model-cascade-code* nil
+  "Cascade for :code tasks: ((:ollama . \"model\") ...)")
+
+(defvar *model-cascade-plan* nil
+  "Cascade for :plan tasks.")
+
+(defvar *model-cascade-chat* nil
+  "Cascade for :chat tasks.")
+
+(defvar *model-cascade-background* nil
+  "Cascade for background tasks (heartbeat, delegation).")
+
+(defvar *local-backends* '(:ollama :llama-cpp)
+  "Backend keywords considered local (privacy-safe).")
+
+(defun model-classify-complexity (text)
+  "Classify TEXT into :code, :plan, or :chat."
+  (let ((lower (string-downcase text)))
+    (cond
+      ((or (search "defun" lower) (search "defmacro" lower)
+           (search "write" lower) (search "refactor" lower)
+           (search "fix " lower) (search "implement" lower)
+           (search "code" lower)
+           (search "#+begin_src" lower))
+       :code)
+      ((or (search "plan" lower) (search "roadmap" lower)
+           (search "strategy" lower) (search "design" lower)
+           (search "architecture" lower))
+       :plan)
+      (t :chat))))
+
+(defun model-cascade-find (cascade backend)
+  "Find first (PROVIDER . MODEL) in CASCADE matching BACKEND."
+  (assoc backend cascade
+         :test (lambda (a b) (string-equal (string a) (string b)))))
+
+(defun model-select (backend context)
+  "Select model for BACKEND given CONTEXT signal.
+Returns model name or :skip."
+  (let* ((payload (getf context :payload))
+         (text (or (getf payload :text) ""))
+         (sensor (getf payload :sensor))
+         (has-personal (and (boundp '*dispatcher-privacy-tags*)
+                            (some (lambda (tag) (search tag text))
+                                  (symbol-value '*dispatcher-privacy-tags*))))
+         (is-local (member backend *local-backends*)))
+    ;; Privacy: skip cloud backends for personal content
+    (when (and has-personal (not is-local))
+      (log-message "MODEL-ROUTER: Skipping ~a (personal content)" backend)
+      (return-from model-select :skip))
+    ;; Quadrant: background tasks use background cascade
+    (if (member sensor '(:heartbeat :delegation :tool-output :loop-error))
+        (let ((entry (car (or *model-cascade-background*
+                              '((:ollama . "phi-2"))))))
+          (cdr entry))
+        ;; Foreground: classify complexity, use slot cascade
+        (let* ((slot (model-classify-complexity text))
+               (cascade (case slot
+                          (:code *model-cascade-code*)
+                          (:plan *model-cascade-plan*)
+                          (t *model-cascade-chat*)))
+               (entry (model-cascade-find
+                       (or cascade '((:ollama . "qwen2.5:14b"))) backend)))
+          (if entry (cdr entry) nil)))))
+
+(defun model-router-init ()
+  "Read env vars and wire model-select into *model-selector*."
+  (flet ((parse-cascade (str)
+           (when (and str (> (length str) 0))
+             (let ((*read-eval* nil))
+               (read-from-string str)))))
+    (setf *model-cascade-code* (parse-cascade (uiop:getenv "MODEL_CASCADE_CODE"))
+          *model-cascade-plan* (parse-cascade (uiop:getenv "MODEL_CASCADE_PLAN"))
+          *model-cascade-chat* (parse-cascade (uiop:getenv "MODEL_CASCADE_CHAT"))
+          *model-cascade-background* (parse-cascade (uiop:getenv "MODEL_CASCADE_BACKGROUND"))
+          *local-backends* (let ((env (uiop:getenv "LOCAL_BACKENDS")))
+                             (if env
+                                 (mapcar (lambda (s) (intern (string-upcase (string-trim " " s)) :keyword))
+                                         (uiop:split-string env :separator '(#\,)))
+                                 '(:ollama :llama-cpp)))))
+    (setf *model-selector* #'model-select)
+    (log-message "MODEL-ROUTER: Initialized, selector=~a" *model-selector*))
+
+(defskill :passepartout-model-router
+  :priority 250
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))
+
+(model-router-init)

lisp/system-model.lisp

@@ -0,0 +1,16 @@
+(in-package :passepartout)
+
+(defun model-request (&key prompt system-prompt (provider :openrouter) model)
+  "Central dispatcher for LLM requests."
+  (let ((backend (gethash provider *probabilistic-backends*)))
+    (if backend
+        (handler-case
+            (funcall backend prompt system-prompt :model model)
+          (error (c)
+            (list :status :error :message (format nil "~a Failure: ~a" provider c))))
+        (list :status :error :message (format nil "Provider ~a not registered" provider)))))
+
+(defskill :passepartout-system-model
+  :priority 100
+  :trigger (lambda (ctx) (getf ctx :user-input))
+  :deterministic (lambda (action ctx) (declare (ignore ctx)) action))

lisp/system-self-improve.lisp

@@ -0,0 +1,198 @@
+(defun org-tangle-file (filepath)
+  "Tangles an Org file's lisp blocks to its :tangle target, compiles, and loads."
+  (let ((content (uiop:read-file-string filepath))
+        (tangle-path nil)
+        (lisp-lines nil)
+        (in-block nil))
+    (dolist (line (uiop:split-string content :separator '(#\Newline)))
+      (let ((trimmed (string-trim '(#\Space #\Tab) line)))
+        (cond
+          ((and (null tangle-path)
+                (search "#+PROPERTY:" trimmed)
+                (search ":tangle" trimmed))
+           (let* ((parts (uiop:split-string trimmed :separator '(#\Space)))
+                  (target (car (last parts)))
+                  (org-dir (make-pathname :directory (pathname-directory filepath))))
+             (when (and target (not (string-equal target "no")))
+               (setf tangle-path
+                     (if (char= (aref target 0) #\/)
+                         (uiop:parse-unix-namestring target)
+                         (uiop:parse-unix-namestring
+                          (format nil "~a/~a" (namestring org-dir) target)))))))
+          ((search "#+begin_src lisp" trimmed)
+           (setf in-block t))
+          ((search "#+end_src" trimmed)
+           (setf in-block nil)
+           (let ((before (search "#+end_src" line)))
+             (when (and before (> before 0))
+               (push (subseq line 0 before) lisp-lines))))
+          (in-block
+           (push line lisp-lines)))))
+    (when (and tangle-path lisp-lines)
+      (setf lisp-lines (nreverse lisp-lines))
+      (ensure-directories-exist tangle-path)
+      (with-open-file (f tangle-path :direction :output :if-exists :supersede)
+        (format f "~{~a~%~}" lisp-lines))
+      (let ((compiled (compile-file tangle-path)))
+        (when compiled
+          (load compiled)
+          (list :tangled (namestring tangle-path) :compiled t))))))
+
+(defun org-extract-lisp-blocks (content)
+  "Extracts all #+begin_src lisp blocks from Org CONTENT as a list of strings."
+  (let ((blocks nil)
+        (in-block nil)
+        (current nil))
+    (dolist (line (uiop:split-string content :separator '(#\Newline)))
+      (let ((trimmed (string-trim '(#\Space #\Tab) line)))
+        (cond
+          ((search "#+begin_src lisp" trimmed)
+           (setf in-block t current nil))
+          ((search "#+end_src" trimmed)
+           (when in-block
+             (let ((before (search "#+end_src" line)))
+               (when (and before (> before 0))
+                 (push (subseq line 0 before) current)))
+             (push (format nil "~{~a~%~}" (nreverse current)) blocks)
+             (setf in-block nil current nil)))
+          (in-block
+           (push line current)))))
+    (nreverse blocks)))
+
+(defun self-improve-edit (filepath old-text new-text)
+  "Surgical text replacement with tangle+reload for Org source files."
+  (when (or (null filepath) (null old-text) (null new-text))
+    (return-from self-improve-edit
+      (list :status :error :reason "Missing arguments")))
+  (when (not (uiop:file-exists-p filepath))
+    (return-from self-improve-edit
+      (list :status :error :reason (format nil "File not found: ~a" filepath))))
+  (log-message "SELF-IMPROVE: Editing ~a (~d chars)" filepath (length old-text))
+  (ignore-errors
+    (when (fboundp 'snapshot-memory)
+      (snapshot-memory)))
+  (let* ((content (uiop:read-file-string filepath))
+         (pos (search old-text content)))
+    (if pos
+        (let* ((new-content (concatenate 'string
+                              (subseq content 0 pos)
+                              new-text
+                              (subseq content (+ pos (length old-text)))))
+               (ext (pathname-type filepath)))
+          (with-open-file (f filepath :direction :output :if-exists :supersede)
+            (write-sequence new-content f))
+          (let ((re-read (uiop:read-file-string filepath)))
+            (if (search new-text re-read :test 'string=)
+                (let ((tangle-result
+                        (when (string-equal ext "org")
+                          (ignore-errors (org-tangle-file filepath)))))
+                  (list :status :success
+                        :summary (format nil "Replaced ~d chars in ~a"
+                                         (length old-text) filepath)
+                        :tangle tangle-result))
+                (list :status :error :reason "Verification failed"))))
+        (list :status :error :reason
+              (format nil "Text not found in ~a" filepath)))))
+
+(defun self-improve-balance-parens (code)
+  "Returns balanced code or nil if already balanced."
+  (handler-case
+      (progn
+        (let ((*read-eval* nil))
+          (with-input-from-string (s code)
+            (loop for form = (read s nil :eof) until (eq form :eof)))
+          (values))
+        nil)
+    (error ()
+      (let* ((opens (loop for ch across code count (char= ch #\()))
+             (closes (loop for ch across code count (char= ch #\))))
+             (missing (- opens closes)))
+        (when (plusp missing)
+          (concatenate 'string code
+                       (make-string missing :initial-element #\))))))))
+
+(defun self-improve-repair-syntax (skill-name)
+  "Find and fix unbalanced parens in a skill's Org source file."
+  (let* ((data-dir (uiop:ensure-directory-pathname
+                    (or (uiop:getenv "PASSEPARTOUT_DATA_DIR")
+                        (merge-pathnames ".local/share/passepartout/"
+                                         (user-homedir-pathname)))))
+         (org-path (merge-pathnames (format nil "org/~a.org" skill-name) data-dir)))
+    (unless (uiop:file-exists-p org-path)
+      (return-from self-improve-repair-syntax
+        (list :status :error :reason (format nil "Source not found: ~a" skill-name)
+              :repaired nil)))
+    (let* ((content (uiop:read-file-string org-path))
+           (blocks (org-extract-lisp-blocks content))
+           (fixed 0) (result content))
+      (dolist (block blocks)
+        (let ((balanced (self-improve-balance-parens block)))
+          (when (and balanced (not (string= block balanced)))
+            (let ((pos (search block result)))
+              (when pos
+                (setf result (concatenate 'string
+                              (subseq result 0 pos)
+                              balanced
+                              (subseq result (+ pos (length block))))
+                      fixed (1+ fixed)))))))
+      (if (> fixed 0)
+          (progn
+            (with-open-file (f org-path :direction :output :if-exists :supersede)
+              (write-sequence result f))
+            (let ((tangle-result (org-tangle-file org-path)))
+              (list :status :success
+                    :action (format nil "Fixed ~d block(s) in ~a" fixed skill-name)
+                    :repaired t :tangle tangle-result)))
+          (list :status :error
+                :reason (format nil "No unbalanced blocks in ~a" skill-name)
+                :repaired nil)))))
+
+(defun self-improve-fix (skill-name error-log)
+  "Diagnoses and attempts to repair a failing skill."
+  (when (or (null skill-name) (null error-log))
+    (return-from self-improve-fix
+      (list :status :error :reason "Missing arguments: skill-name and error-log required")))
+  (log-message "SELF-IMPROVE: Diagnosing ~a..." skill-name)
+  (let* ((log-str (if (stringp error-log) error-log (format nil "~a" error-log)))
+         (diagnosis nil)
+         (extracted-type nil))
+    (cond
+      ((search "Reader Error" log-str :test 'char-equal)
+       (setf extracted-type :syntax-error
+             diagnosis (list :type :syntax-error
+                            :detail "Reader Error (likely unbalanced parentheses)"
+                            :log log-str)))
+      ((search "Undefined" log-str :test 'char-equal)
+       (setf extracted-type :undefined-symbol
+             diagnosis (list :type :undefined-symbol
+                            :detail "Undefined symbol or missing dependency"
+                            :log log-str)))
+      ((search "PACKAGE" log-str :test 'char-equal)
+       (setf extracted-type :package-error
+             diagnosis (list :type :package-error
+                            :detail "Package resolution error"
+                            :log log-str)))
+      (t
+       (setf extracted-type :unknown
+             diagnosis (list :type :unknown
+                            :detail (format nil "Unrecognized error: ~a"
+                                            (subseq log-str 0 (min 200 (length log-str))))
+                            :log log-str))))
+    (log-message "SELF-IMPROVE: Diagnosed ~a as ~a" skill-name extracted-type)
+    (let ((repair-result
+            (when (eql extracted-type :syntax-error)
+              (self-improve-repair-syntax skill-name))))
+      (if (and repair-result (getf repair-result :repaired))
+          (progn
+            (log-message "SELF-IMPROVE: Successfully repaired ~a" skill-name)
+            repair-result)
+          (list :status :error
+                :reason (format nil "Diagnosis for ~a: ~a" skill-name
+                                (getf diagnosis :detail))
+                :diagnosis diagnosis
+                :repaired nil)))))
+
+(defskill :passepartout-system-self-improve
+  :priority 100
+  :trigger (lambda (ctx) (member (getf ctx :type) '(:LOG :EVENT)))
+  :deterministic (lambda (action ctx) (declare (ignore action ctx)) nil))

opencortex.asd

@@ -1,38 +0,0 @@
-(defsystem :opencortex
-  :name "opencortex"
-  :author "Amr Gharbeia"
-  :version "0.2.0"
-  :license "AGPLv3"
-  :description "The Probabilistic-Deterministic Lisp Machine"
-  :depends-on (:usocket :bordeaux-threads :dexador :uiop :cl-dotenv :cl-ppcre :hunchentoot :ironclad :str :cl-json :uuid)
-  :serial t
-  :components ((:file "harness/package")
-               (:file "harness/skills")
-               (:file "harness/communication")
-               (:file "harness/communication-validator")
-               (:file "harness/memory")
-               (:file "harness/context")
-               (:file "harness/perceive")
-               (:file "harness/reason")
-               (:file "harness/act")
-               (:file "harness/doctor")
-               (:file "harness/loop")))
-
-(defsystem :opencortex/tests
-  :depends-on (:opencortex :fiveam)
-  :components ((:file "tests/pipeline-act-tests")
-               (:file "tests/boot-sequence-tests")
-               (:file "tests/communication-tests")
-               (:file "tests/immune-system-tests")
-               (:file "tests/memory-tests")
-               (:file "tests/pipeline-perceive-tests")
-               (:file "tests/pipeline-reason-tests")
-               (:file "tests/peripheral-vision-tests")
-               (:file "tests/tui-tests")
-               (:file "tests/utils-org-tests")
-               (:file "tests/utils-lisp-tests")
-               (:file "tests/llm-gateway-tests")))
-
-(defsystem :opencortex/tui
-  :depends-on (:opencortex :croatoan :usocket :bordeaux-threads)
-  :components ((:file "harness/tui-client")))

org/core-communication.org

@@ -0,0 +1,267 @@
+#+TITLE: Communication Protocol (communication.lisp)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:protocol:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-communication.lisp
+
+* Overview: Architectural Intent
+
+The Communication Protocol defines how Passepartout speaks to the outside world. It sits between the metabolic loop and the network, providing framed, length-prefixed message transport over TCP.
+
+Every message is an S-expression (plist) prefixed with a 6-character hex length:
+
+  00002C(:TYPE :EVENT :PAYLOAD (:ACTION :handshake :VERSION "0.2.0"))
+
+This is a deliberate rejection of JSON, Protocol Buffers, or any other serialization format. The message format is Lisp-native because:
+
+1. The agent generates and consumes these messages inside the cognitive loop — no serialization layer needed
+2. The format is human-readable and trivially debuggable with a text editor
+3. The length prefix prevents framing attacks (no "read until newline" ambiguity)
+
+** Why Length-Prefixed Framing?
+
+A naive TCP protocol that reads until newline fails when:
+- A message contains a newline character (which Lisp plists can)
+- A message is split across TCP packets (read returns partial data)
+- A malicious client sends an infinite stream without newlines
+
+The length prefix solves all three problems. The reader reads exactly 6 characters (the hex length), then reads exactly that many additional characters. No ambiguous termination, no partial message handling, no newline worries.
+
+The 6-character hex length supports messages up to ~16MB (0xFFFFFF bytes). This is sufficient for any single message the agent would produce. Larger payloads should be split across multiple messages.
+
+* Implementation
+
+** Package Context
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** Protocol Accessor (proto-get)
+
+Case-insensitive property list accessor used throughout the pipeline.
+Returns the value associated with KEY in PLIST by interning a keyword.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun proto-get (plist key)
+  "Look up KEY in PLIST with case-insensitive keyword normalization."
+  (let ((key-upcase (string-upcase (string key))))
+    (loop for (k v) on plist by #'cddr
+          when (and (keywordp k)
+                    (string-equal (string k) key-upcase))
+            do (return v))))
+#+end_src
+
+** Actuator Registry
+
+The global registry mapping target keywords (~:cli~, ~:telegram~, ~:signal~, etc.) to their physical actuator functions. Extensible at runtime — skills can register new actuators via ~register-actuator~.
+
+#+begin_src lisp
+(defvar *actuator-registry* (make-hash-table :test 'equalp)
+  "Global registry mapping target keywords to their physical actuator functions.")
+
+(defun register-actuator (name fn) 
+  "Registers an actuator function. Actuators receive: (ACTION CONTEXT)."
+  (let ((key (if (keywordp name) name (intern (string-upcase (string name)) :keyword))))
+    (setf (gethash key *actuator-registry*) fn)))
+#+end_src
+
+** Message Framing
+
+Three functions handle the full message lifecycle: sanitize (strip non-serializable state), frame (serialize + prefix), and read (parse from stream).
+
+*** Sanitize Protocol Message
+
+Strips transient runtime state (~:reply-stream~, ~:socket~, ~:stream~) from a message plist before sending it over the network. These are Lisp stream objects that cannot be serialized and have no meaning to the remote end.
+
+#+begin_src lisp
+(defun protocol-message-sanitize (msg)
+  "Recursively strips non-serializable objects from a protocol plist."
+  (if (and msg (listp msg))
+      (let ((clean nil))
+        (loop for (k v) on msg by #'cddr
+              do (unless (member k '(:reply-stream :socket :stream))
+                   (push k clean)
+                   (push (if (listp v) (protocol-message-sanitize v) v) clean)))
+        (nreverse clean))
+      msg))
+#+end_src
+
+*** Frame Message
+
+Serializes a plist to a length-prefixed string: 6-character hex length followed by the ~prin1~ representation.
+
+#+begin_src lisp
+(defun frame-message (msg)
+  "Serializes a message plist and prefixes it with a 6-character hex length."
+  (let* ((sanitized (protocol-message-sanitize msg))
+         (payload (let ((*print-pretty* nil) (*read-eval* nil)) (format nil "~s" sanitized)))
+         (len (length payload)))
+    (format nil "~6,'0x~a" len payload)))
+#+end_src
+
+*** Read Framed Message
+
+Reads a complete framed message from a TCP stream. Handles leading whitespace between messages, partial reads, and malformed length headers gracefully. Returns the parsed S-expression, or ~:eof~ if the stream is closed, or ~:error~ if the message is malformed.
+
+#+begin_src lisp
+(defun read-framed-message (stream)
+  "Reads a hex-length prefixed S-expression from the stream securely."
+  (let ((length-buffer (make-string 6)))
+    (handler-case
+        (progn
+          (loop for char = (peek-char nil stream nil :eof)
+                while (and (not (eq char :eof)) (member char '(#\Space #\Newline #\Tab #\Return)))
+                do (read-char stream))
+          (let ((count (read-sequence length-buffer stream)))
+            (if (< count 6)
+                :eof
+                (let ((len (ignore-errors (parse-integer length-buffer :radix 16))))
+                  (if (not len)
+                      :error
+                      (let ((msg-buffer (make-string len)))
+                        (read-sequence msg-buffer stream)
+                        (let ((*read-eval* nil))
+                          (handler-case (read-from-string msg-buffer)
+                            (error () :error)))))))))
+      (error () :error))))
+#+end_src
+
+** Server Listener (daemon-start)
+
+The TCP server that accepts connections from CLI and TUI clients. Each connection gets a dedicated thread (~client-handle-connection~).
+
+The daemon sends a handshake message on connection, then enters a read loop, injecting each received message into the metabolic loop via ~stimulus-inject~. The ~:health-check~ message type is handled inline (not sent to the cognitive loop) so that health checks work even when the agent is busy.
+
+#+begin_src lisp
+(defvar *daemon-socket* nil)
+
+(defun client-handle-connection (socket)
+  "Handles a single TUI/CLI client connection in a dedicated thread."
+  (let ((stream (usocket:socket-stream socket)))
+    (handler-case
+        (progn
+          (format stream "~a" (frame-message (make-hello-message "0.2.0")))
+          (finish-output stream)
+          (loop
+            (let ((msg (read-framed-message stream)))
+              (cond
+                ((eq msg :eof) (return))
+                ((eq msg :error) (return))
+                ((eq (getf msg :type) :health-check)
+                 (let ((health-msg (list :type :health-response 
+                                         :status (or (and (boundp 'passepartout::*system-health*) 
+                                                         (symbol-value 'passepartout::*system-health*))
+                                                     :unknown)
+                                         :checked-p (or (and (boundp 'passepartout::*health-check-ran*)
+                                                             (symbol-value 'passepartout::*health-check-ran*))
+                                                     nil))))
+                   (format stream "~a" (frame-message health-msg))
+                   (finish-output stream)))
+                (t (stimulus-inject msg :stream stream))))))
+      (error (c) (log-message "CLIENT ERROR: ~a" c)))
+    (ignore-errors (usocket:socket-close socket))))
+
+(defun start-daemon (&key (port 9105))
+  "Starts the network listener for TUI/CLI clients."
+  (setf *daemon-socket* (usocket:socket-listen "127.0.0.1" port :reuse-address t))
+  (log-message "DAEMON: Listening on localhost:~a" port)
+  (bt:make-thread
+   (lambda ()
+     (loop
+       (let ((client-socket (usocket:socket-accept *daemon-socket*)))
+         (when client-socket
+           (bt:make-thread (lambda () (client-handle-connection client-socket))
+                          :name "passepartout-client-handler")))))
+   :name "passepartout-server-listener"))
+#+end_src
+
+** Handshake Logic
+
+The first message sent to every new connection. The client can use this to verify the protocol version and the daemon's capabilities.
+
+#+begin_src lisp
+(defun make-hello-message (version)
+  "Constructs the standard HELLO handshake message."
+  (list :TYPE :EVENT 
+        :PAYLOAD (list :ACTION :handshake 
+                       :VERSION version 
+                       :CAPABILITIES '(:AUTH :ORG-AST))))
+#+end_src
+
+** Structural Validation
+
+Validates that an incoming message has the minimum required structure: a plist with a valid ~:type~ field. Used by the protocol validator skill to reject malformed messages before they enter the cognitive loop.
+
+#+begin_src lisp :tangle ../lisp/core-communication.lisp
+(in-package :passepartout)
+
+(defun protocol-schema-validate (msg)
+  "Strict structural validation for incoming protocol messages."
+  (unless (listp msg) (error "Message must be a plist"))
+  (let ((type (proto-get msg :type)))
+    (unless (member type '(:REQUEST :EVENT :RESPONSE :LOG :STATUS))
+      (error "Invalid message type '~a'" type))
+    t))
+#+end_src
+
+** Backward-Compatibility Alias
+
+;; REPL-VERIFIED: 2026-05-03T14:00:00
+#+begin_src lisp
+(defun validate-communication-protocol-schema (msg)
+  "Backward-compatibility alias for protocol-schema-validate."
+  (protocol-schema-validate msg))
+#+end_src
+
+** Protocol Smoke Test (manual for REPL evaluation)
+
+Use this function to manually verify that the daemon is alive and the framing protocol works end-to-end. It connects to a running daemon, reads the HELLO handshake, sends a "hi" message, and reads the response.
+
+#+begin_src lisp :tangle no
+(defun test-daemon-protocol ()
+  (handler-case
+      (let* ((socket (usocket:socket-connect "127.0.0.1" 9105))
+             (stream (usocket:socket-stream socket)))
+        (format t "Connected.~%")
+        (let* ((len-buf (make-string 6))
+               (count (read-sequence len-buf stream)))
+          (when (= count 6)
+            (let* ((len (parse-integer len-buf :radix 16))
+                   (msg-buf (make-string len)))
+              (read-sequence msg-buf stream)
+              (format t "HELLO: ~a~%" msg-buf))))
+        (let* ((msg '(:TYPE :EVENT :META (:SOURCE :tui) :PAYLOAD (:SENSOR :user-input :TEXT "hi")))
+               (framed (frame-message msg)))
+          (format stream "~a" framed)
+          (finish-output stream)
+          (let* ((len-buf (make-string 6))
+                 (count (read-sequence len-buf stream)))
+            (when (= count 6)
+              (let* ((len (parse-integer len-buf :radix 16))
+                     (msg-buf (make-string len)))
+                (read-sequence msg-buf stream)
+                (format t "Response: ~a~%" msg-buf)))))
+        (usocket:socket-close socket))
+    (error (c) (format t "Error: ~a~%" c))))
+#+end_src
+
+* Test Suite
+Verifies that the framing protocol correctly serializes and deserializes messages.
+#+begin_src lisp :tangle ../lisp/core-communication.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-communication-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:communication-protocol-suite))
+(in-package :passepartout-communication-tests)
+
+(def-suite communication-protocol-suite :description "Communication Protocol Suite")
+(in-suite communication-protocol-suite)
+
+(test test-framing
+  (let* ((msg '(:type :EVENT :payload (:action :handshake)))
+         (framed (frame-message msg)))
+    (is (string= "00002C" (string-upcase (subseq framed 0 6))))))
+#+end_src

org/core-context.org

@@ -0,0 +1,322 @@
+#+TITLE: Context API (context.lisp)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:context:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-context.lisp
+
+* Overview: Architectural Intent
+
+The Context API implements the Foveal-Peripheral awareness model. When the agent thinks, it doesn't dump everything it knows into the LLM's context window — that would saturate the token budget immediately. Instead, it builds a skeletal outline of the entire Memex and only shows full detail for the current focus.
+
+This mirrors human attention: you are aware of your entire apartment (peripheral vision), but you only see the book in front of you in detail (foveal vision).
+
+** The Foveal-Peripheral Model
+
+Three factors determine how much detail an object gets:
+
+1. **Depth** — objects within 2 levels of the root get full outline (title + ID). Deeper objects are summarized or omitted.
+2. **Foveal focus** — the object the user is currently interacting with gets full content rendered.
+3. **Semantic similarity** — objects whose vector embedding is similar to the current foveal focus get promoted from peripheral to foveal detail.
+
+** Why Not Just Dump Everything?
+
+A naive implementation that serializes every ~org-object~ to text would produce hundreds of thousands of tokens for a typical knowledge base. The LLM would spend its attention budget on noise, not signal. The Foveal-Peripheral model preserves the signal (the current task and related information) while reducing noise (everything else).
+
+The semantic threshold is configurable via ~CONTEXT_SEMANTIC_THRESHOLD~ env var (default 0.75). Lower values include more peripherally related content; higher values restrict to tightly related content.
+
+* Implementation
+
+** Package Context
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** Memory Query (context-query)
+
+Filters the Memory store by tag, TODO state, or object type. This is the primary retrieval function used by skills to find relevant information.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-query (&key tag todo-state type scope)
+  "Filters the Memory based on tags, todo states, or types.
+Optional SCOPE restricts results to objects with that scope
+or :memex (global scope always visible)."
+  (let ((results nil))
+    (maphash (lambda (id obj)
+               (declare (ignore id))
+               (let* ((attrs (memory-object-attributes obj)) (state (getf attrs :TODO-STATE)) (match t))
+                 ;; Scope filter: if scope specified, only match :memex (global) or same scope
+                 (when (and scope (not (eq (memory-object-scope obj) :memex))
+                            (not (eq (memory-object-scope obj) scope)))
+                   (setf match nil))
+                 (when (and type (not (eq (memory-object-type obj) type))) (setf match nil))
+                 (when tag (unless (search tag (format nil "~a" (getf attrs :TAGS)) :test #'string-equal) (setf match nil)))
+                 (when (and todo-state (not (equal state todo-state))) (setf match nil))
+                 (when match (push obj results))))
+             *memory-store*)
+    results))
+#+end_src
+
+** Active Projects (context-active-projects)
+
+Returns headlines tagged as ~project~ that are not yet DONE. Used by the global awareness function to build the task overview.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-active-projects ()
+  "Returns headlines tagged as 'project' that are not yet marked DONE."
+  (remove-if (lambda (obj) (equal (getf (memory-object-attributes obj) :TODO-STATE) "DONE"))
+             (context-query :tag "project" :type :HEADLINE)))
+#+end_src
+
+** Completed Tasks (context-recent-tasks)
+
+Retrieves recently finished tasks from the store. Used by the Scribe and Gardener for journal summarization.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-recent-tasks () 
+  "Retrieves recently finished tasks from the store."
+  (context-query :todo-state "DONE" :type :HEADLINE))
+#+end_src
+
+** Capability Discovery (context-skill-list)
+
+Provides a sorted overview of currently loaded system capabilities. Each entry includes the skill name, priority, and dependencies.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-skill-list ()
+  "Provides a sorted overview of currently loaded system capabilities."
+  (let ((results nil))
+    (maphash (lambda (name skill)
+               (declare (ignore name))
+               (push (list :name (skill-name skill) :priority (skill-priority skill) :dependencies (skill-dependencies skill)) results))
+             *skill-registry*)
+    (sort results #'> :key (lambda (x) (getf x :priority)))))
+#+end_src
+
+** Skill Source Inspection (context-skill-source)
+
+Reads the raw literate source of a specific skill for inspection. Used when the agent needs to understand or modify its own code.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-skill-source (skill-name)
+  "Reads the raw literate source of a specific skill for inspection."
+  (let* ((filename (format nil "~a.org" skill-name))
+         (data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "PASSEPARTOUT_DATA_DIR") (namestring (merge-pathnames ".local/share/passepartout/" (user-homedir-pathname))))))
+         (org-dir (merge-pathnames "org/" data-dir))
+         (full-path (merge-pathnames filename org-dir)))
+     (if (uiop:file-exists-p full-path) (uiop:read-file-string full-path) nil)))
+#+end_src
+
+** Subtree Skill Source (context-skill-subtree)
+
+Returns a specific headline subtree from a skill's Org file. Delegates to
+=org-subtree-extract= in the =programming-org= skill for actual parsing.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-skill-subtree (skill-name heading-name)
+  "Reads a specific headline subtree from a skill's Org source file.
+Returns the content under HEADING-NAME (including children) as a string,
+or nil if the heading is not found."
+  (let ((full-source (context-skill-source skill-name)))
+    (unless full-source (return-from context-skill-subtree nil))
+    (if (fboundp 'org-subtree-extract)
+        (org-subtree-extract full-source heading-name)
+        ;; Fallback: no org-subtree-extract available, return full source
+        full-source)))
+#+end_src
+
+** Harness Logs (context-logs)
+
+Retrieves the most recent lines from the harness's internal log buffer. The log limit is configurable via ~CONTEXT_LOG_LIMIT~ env var (default 20).
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-logs (&optional limit)
+  "Retrieves the most recent lines from the harness's internal log."
+  (let ((log-limit (or limit (ignore-errors (parse-integer (uiop:getenv "CONTEXT_LOG_LIMIT"))) 20)))
+    (bt:with-lock-held (*log-lock*)
+      (let ((count (min log-limit (length *log-buffer*)))) 
+        (subseq *log-buffer* 0 count)))))
+#+end_src
+
+** Backward-Compatibility Alias (context-get-system-logs)
+
+;; REPL-VERIFIED: 2026-05-03T14:00:00
+#+begin_src lisp
+(defun context-get-system-logs (&optional limit)
+  "Backward-compatibility alias for context-logs."
+  (context-logs limit))
+#+end_src
+
+** AST to Org Rendering (context-object-render)
+
+Recursively renders an ~org-object~ and its children to an Org-mode string, applying the Foveal-Peripheral model:
+
+- Objects within depth 2 are always included (outline)
+- The foveal object (the one the user is looking at) is always included with full content
+- Objects with semantic similarity above the threshold are included with full content
+- All other objects are omitted silently
+
+This function is the heart of the context assembly. Its performance directly affects the agent's response time.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-object-render (obj &key (depth 1) (foveal-id nil) semantic-threshold (foveal-vector nil))
+  "Recursively renders an org-object and its children to an Org string using a Foveal-Peripheral Hybrid model."
+  (let* ((id (memory-object-id obj))
+         (is-foveal (equal id foveal-id))
+         (title (or (getf (memory-object-attributes obj) :TITLE) "Untitled"))
+         (content (memory-object-content obj))
+         (children (memory-object-children obj))
+         (stars (make-string depth :initial-element #\*))
+         (obj-vector (memory-object-vector obj))
+         (threshold (or semantic-threshold (ignore-errors (read-from-string (uiop:getenv "CONTEXT_SEMANTIC_THRESHOLD"))) 0.75))
+         (similarity (if (and foveal-vector obj-vector (not is-foveal))
+                          (vector-cosine-similarity foveal-vector obj-vector)
+                         0.0))
+         (is-semantically-relevant (>= similarity threshold))
+         (should-render (or (<= depth 2) is-foveal is-semantically-relevant))
+         (output ""))
+    
+    (when should-render
+      (setf output (format nil "~a ~a~%:PROPERTIES:~%:ID: ~a~%" stars title id))
+      (when is-semantically-relevant
+        (setf output (concatenate 'string output (format nil ":SEMANTIC_SCORE: ~,2f~%" similarity))))
+      (setf output (concatenate 'string output (format nil ":END:~%")))
+      
+      (when (and content (or is-foveal is-semantically-relevant))
+        (setf output (concatenate 'string output content (string #\Newline))))
+      
+      (dolist (child-id children)
+        (let ((child-obj (memory-object-get child-id)))
+          (when child-obj
+            (let ((next-foveal (if is-foveal child-id foveal-id)))
+              (setf output (concatenate 'string output 
+                                        (context-object-render child-obj 
+                                                               :depth (1+ depth) 
+                                                               :foveal-id next-foveal
+                                                               :semantic-threshold threshold
+                                                               :foveal-vector foveal-vector))))))))
+    output))
+#+end_src
+
+** Path Resolution (context-path-resolve)
+
+Expands environment variables in a path string and strips quotes. Used to resolve configurable paths from ~.env~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-path-resolve (path-string)
+  "Expands environment variables and strips literal quotes from a path string."
+  (let ((path (if (stringp path-string) 
+                  (string-trim '(#\" #\' #\Space) path-string)
+                  path-string)))
+    (if (and (stringp path) (search "$" path))
+        (let ((result path))
+          (ppcre:do-register-groups (var-name) ("\\$([A-Za-z0-9_]+)" path)
+            (let ((var-val (uiop:getenv var-name)))
+              (when var-val
+                (setf result (ppcre:regex-replace (format nil "\\$~a" var-name) result var-val)))))
+          result)
+        path)))
+#+end_src
+
+** Privacy Filter for Context Assembly
+
+Checks if an org-object has tags matching the Bouncer's ~bouncer-privacy-tags~. Objects with matching tags are excluded from the LLM's context window. This prevents private content tagged with ~@personal~ (or any user-configured privacy tag) from being included in prompts sent to external LLM providers.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-privacy-filtered-p (obj)
+  "Returns T if an org-object's :TAGS attribute matches bouncer-privacy-tags."
+  (let* ((attrs (memory-object-attributes obj))
+         (tags (getf attrs :TAGS))
+         (privacy-tags (and (find-package :passepartout.security-dispatcher)
+                            (symbol-value
+                             (find-symbol "BOUNCER-PRIVACY-TAGS"
+                                          :passepartout.security-dispatcher)))))
+    (when (and tags privacy-tags)
+      (let ((tag-list (if (listp tags) tags (list tags))))
+        (some (lambda (tag)
+                (some (lambda (private)
+                        (string-equal (string-trim '(#\:) tag)
+                                      (string-trim '(#\:) private)))
+                      privacy-tags))
+              tag-list)))))
+#+end_src
+
+** Global Awareness (context-awareness-assemble)
+
+Produces the high-level skeletal outline of the current Memory that is included in every LLM call. This is the "peripheral vision" of the agent — it knows what projects exist, their titles and IDs, but not their full content.
+
+Privacy-filtered projects (those with tags matching ~bouncer-privacy-tags~) are excluded from the output.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun context-awareness-assemble (&optional signal)
+  "Produces a high-level skeletal outline of the current Memory for the LLM.
+Privacy-filtered objects (matching bouncer-privacy-tags) are excluded."
+  (let* ((foveal-id (or (getf signal :foveal-focus) 
+                        (ignore-errors (getf (getf signal :payload) :target-id))))
+         (all-projects (context-active-projects))
+         (projects (remove-if #'context-privacy-filtered-p all-projects))
+         (output (format nil "GLOBAL MEMEX AWARENESS (Peripheral Vision):~%")))
+    (if projects
+        (dolist (project projects)
+          (setf output (concatenate 'string output
+                                    (context-object-render project :foveal-id foveal-id))))
+        (setf output (concatenate 'string output "No active projects found.~%")))
+    output))
+#+end_src
+
+** Backward-Compatibility Alias
+
+The global awareness function was renamed from ~context-assemble-global-awareness~
+to ~context-awareness-assemble~.
+
+;; REPL-VERIFIED: 2026-05-03T14:00:00
+#+begin_src lisp
+(defun context-assemble-global-awareness ()
+  (context-awareness-assemble))
+#+end_src
+
+* Test Suite
+Verifies that the Foveal-Peripheral rendering correctly distinguishes between foveal (detailed) and peripheral (outline) content, and that the awareness budget includes all active projects.
+#+begin_src lisp :tangle ../lisp/core-context.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-peripheral-vision-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:vision-suite))
+(in-package :passepartout-peripheral-vision-tests)
+
+(def-suite vision-suite :description "Verification of Foveal-Peripheral context model.")
+(in-suite vision-suite)
+
+(test test-foveal-rendering
+  (clrhash passepartout::*memory-store*)
+  (let* ((ast '(:type :HEADLINE :properties (:ID "proj-root" :TITLE "Project" :TAGS ("project"))
+                :contents ((:type :HEADLINE :properties (:ID "node-foveal" :TITLE "Foveal Node")
+                             :raw-content "FOVEAL CONTENT" :contents nil)
+                            (:type :HEADLINE :properties (:ID "node-peripheral" :TITLE "Peripheral Node")
+                             :raw-content "PERIPHERAL CONTENT" :contents nil)))))
+    (ingest-ast ast)
+    (let ((output (context-awareness-assemble (list :foveal-focus "node-foveal"))))
+      (is (search "FOVEAL CONTENT" output))
+      (is (search "* Peripheral Node" output))
+      (is (not (search "PERIPHERAL CONTENT" output))))))
+
+(test test-awareness-budget
+  (clrhash passepartout::*memory-store*)
+  (ingest-ast '(:type :HEADLINE :properties (:ID "p1" :TITLE "Project 1" :TAGS ("project")) :contents nil))
+  (ingest-ast '(:type :HEADLINE :properties (:ID "p2" :TITLE "Project 2" :TAGS ("project")) :contents nil))
+  (let ((output (context-awareness-assemble)))
+    (is (search "Project 1" output))
+    (is (search "Project 2" output))))
+#+end_src

org/core-defpackage.org

@@ -1,28 +1,29 @@
-#+TITLE: System Interface (package.lisp)
+#+TITLE: Core: Package Definition (core-defpackage.org)
 #+AUTHOR: Agent
-#+FILETAGS: :harness:interface:
+#+FILETAGS: :passepartout:core:defpackage:
 #+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle package.lisp
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-defpackage.lisp
 
-* Overview
-~package.lisp~ defines two things: the public API of the ~opencortex~ package (the export list, above), and the implementation of low-level utility functions and global state that don't belong in a specific pipeline stage or skill.
+* Overview: Architectural Intent
+
+~package.lisp~ defines two things: the public API of the ~passepartout~ package (the export list), and the implementation of low-level utility functions and global state that don't belong in a specific pipeline stage or skill.
 
 The export list is the contract between the harness and all skills. Every function exported here is accessible to every skill via ~use-package~. Adding a symbol here is an API commitment; removing one is a breaking change.
 
 The implementation section includes:
-- ~proto-get~ — robust plist accessor used everywhere
-- Logging state (~*system-logs*~, ~*logs-lock*~)
-- Skill registry (~*skills-registry*~, ~defskill~)
-- Cognitive tool registry (~*cognitive-tools*~, ~def-cognitive-tool~)
-- Configuration variables (~*privacy-filter-tags*~, ~*secret-protected-paths*~, ~*secret-exposure-patterns*~)
-- Debugger hook
+- ~plist-get~ — robust plist accessor used everywhere in the pipeline
+- Logging state (~*log-buffer*~, ~*log-lock*~) — bounded ring buffer for LLM context
+- Skill registry (~*skill-registry*~, ~defskill~) — all loaded skills live here
+- Cognitive tool registry (~*cognitive-tool-registry*~, ~def-cognitive-tool~, ~cognitive-tool-prompt~)
+- Telemetry tracking (~*telemetry-table*~, ~telemetry-track~) — performance metrics per skill
+- Debugger hook — replaces raw SBCL debugger with a friendly error message
 
 * Implementation
 
 ** Package Definition and Export List
 The package definition. All public symbols are exported here.
-#+begin_src lisp :tangle package.lisp
-(defpackage :opencortex
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(defpackage :passepartout
   (:use :cl)
   (:export
    #:frame-message
@@ -37,7 +38,7 @@ The package definition. All public symbols are exported here.
    #:validate-communication-protocol-schema
    #:start-daemon
    #:stop-daemon
-   #:harness-log
+   #:log-message
    #:main
    #:doctor-run-all
    #:doctor-main
@@ -50,23 +51,24 @@ The package definition. All public symbols are exported here.
    #:skill-gateway-link
    #:gateway-manager-main
    #:ingest-ast
-   #:lookup-object
+   #:memory-object-get
    #:list-objects-by-type
    #:org-id-new
-   #:*memory*
+   #:*memory-store*
    #:*history-store*
-   #:org-object
-   #:make-org-object
-   #:org-object-id
-   #:org-object-type
-   #:org-object-attributes
-   #:org-object-parent-id
-   #:org-object-children
-   #:org-object-version
-   #:org-object-last-sync
-   #:org-object-vector
-   #:org-object-content
-   #:org-object-hash
+   #:memory-object
+   #:make-memory-object
+   #:memory-object-id
+   #:memory-object-type
+   #:memory-object-attributes
+   #:memory-object-parent-id
+   #:memory-object-children
+   #:memory-object-version
+   #:memory-object-last-sync
+   #:memory-object-vector
+   #:memory-object-content
+   #:memory-object-hash
+   #:memory-object-scope
    #:snapshot-memory
    #:rollback-memory
    #:context-query-store
@@ -74,30 +76,46 @@ The package definition. All public symbols are exported here.
    #:context-get-recent-completed-tasks
    #:context-list-all-skills
    #:context-get-skill-source
-   #:context-get-system-logs
-   #:context-resolve-path
-   #:context-get-skill-telemetry
-   #:harness-track-telemetry
-   #:context-assemble-global-awareness
+    #:context-get-system-logs
+    #:context-resolve-path
+    #:context-get-skill-telemetry
+    #:telemetry-track
+    #:context-assemble-global-awareness
+    #:context-query
    #:process-signal
+   #:loop-process
    #:perceive-gate
    #:probabilistic-gate
    #:consensus-gate
    #:act-gate
    #:reason-gate
    #:dispatch-gate
-   #:inject-stimulus
-   #:initialize-actuators
+    #:register-pre-reason-handler
+    #:inject-stimulus
+    #:stimulus-inject
+    #:hitl-create
+    #:hitl-approve
+    #:hitl-deny
+    #:hitl-handle-message
+    #:actuator-initialize
    #:dispatch-action
    #:register-actuator
    #:load-skill-from-org
-   #:initialize-all-skills
-   #:load-skill-with-timeout
-   #:topological-sort-skills
-   #:validate-lisp-syntax
-   #:defskill
-   #:*skills-registry*
-   #:skill
+    #:skill-initialize-all
+    #:load-skill-with-timeout
+    #:topological-sort-skills
+    #:validate-lisp-syntax
+    #:defskill
+       #:*skill-registry*
+       #:*scope-resolver*
+       #:*embedding-backend*
+       #:*embedding-queue*
+       #:*embedding-provider*
+       #:embed-queue-object
+       #:embed-object
+       #:embed-all-pending
+       #:embeddings-compute
+     #:skill
    #:skill-name
    #:skill-priority
    #:skill-dependencies
@@ -105,7 +123,7 @@ The package definition. All public symbols are exported here.
    #:skill-probabilistic-prompt
    #:skill-deterministic-fn
    #:def-cognitive-tool
-   #:*cognitive-tools*
+   #:*cognitive-tool-registry*
    #:verify-git-clean-p
    #:engineering-standards-verify-lisp
    #:engineering-standards-format-lisp
@@ -158,7 +176,7 @@ The package definition. All public symbols are exported here.
    #:*provider-cascade*
    #:vault-get-secret
    #:vault-set-secret
-   #:list-objects-with-attribute
+   #:memory-objects-by-attribute
    #:deterministic-verify
    #:find-headline-missing-id))
 #+end_src
@@ -166,12 +184,12 @@ The package definition. All public symbols are exported here.
 ** Package Implementation
 The package implementation section defines the low-level utilities and global state that are shared across all harness components and skills.
 
-*** Robust plist access (proto-get)
+*** Robust plist access (plist-get)
 Retrieves a value from a plist, checking both upper and lowercase keyword variants. This is needed because different components use different keyword conventions.
-#+begin_src lisp :tangle package.lisp
-(in-package :opencortex)
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(in-package :passepartout)
 
-(defun proto-get (plist key)
+(defun plist-get (plist key)
   "Robust plist accessor — checks both :KEY and :key variants."
   (let* ((s (string key))
          (up (intern (string-upcase s) :keyword))
@@ -181,43 +199,43 @@ Retrieves a value from a plist, checking both upper and lowercase keyword varian
 
 *** Logging state
 The harness maintains a bounded ring buffer of log messages for inclusion in LLM context. Access is thread-safe via a lock.
-#+begin_src lisp :tangle package.lisp
-(defvar *system-logs* nil)
-(defvar *logs-lock* (bordeaux-threads:make-lock "harness-logs-lock"))
-(defvar *max-log-history* 100)
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(defvar *log-buffer* nil)
+(defvar *log-lock* (bordeaux-threads:make-lock "log-messages-lock"))
+(defvar *log-limit* 100)
 #+end_src
 
 *** Skill registry
 The global registry of all loaded skills. This is the authoritative list that the deterministic engine iterates.
-#+begin_src lisp :tangle package.lisp
-(defvar *skills-registry* (make-hash-table :test 'equal)
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(defvar *skill-registry* (make-hash-table :test 'equal)
   "Global registry of all loaded skills.")
 #+end_src
 
 *** Skill telemetry
 Tracks execution metrics per skill (count, duration, failures) for diagnostics and performance analysis.
-#+begin_src lisp :tangle package.lisp
-(defvar *skill-telemetry* (make-hash-table :test 'equal))
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(defvar *telemetry-table* (make-hash-table :test 'equal))
 (defvar *telemetry-lock* (bordeaux-threads:make-lock "harness-telemetry-lock"))
 
-(defun harness-track-telemetry (skill-name duration status)
+(defun telemetry-track (skill-name duration status)
   "Updates performance metrics for a skill. STATUS is :success or :rejected."
   (when skill-name
     (bordeaux-threads:with-lock-held (*telemetry-lock*)
-      (let ((entry (or (gethash skill-name *skill-telemetry*) (list :executions 0 :total-time 0 :failures 0))))
+      (let ((entry (or (gethash skill-name *telemetry-table*) (list :executions 0 :total-time 0 :failures 0))))
         (incf (getf entry :executions))
         (incf (getf entry :total-time) duration)
         (when (eq status :rejected) (incf (getf entry :failures)))
-        (setf (gethash skill-name *skill-telemetry*) entry)))))
+        (setf (gethash skill-name *telemetry-table*) entry)))))
 #+end_src
 
 *** Cognitive tool registry
-Tools that the LLM can invoke are registered here. Each tool has a name, description, parameters, optional guard, and implementation body. The ~def-cognitive-tool~ macro handles registration. ~generate-tool-belt-prompt~ serialises the registry into the LLM's system prompt.
-#+begin_src lisp :tangle package.lisp
-(defvar *cognitive-tools* (make-hash-table :test 'equal))
+Tools that the LLM can invoke are registered here. Each tool has a name, description, parameters, optional guard, and implementation body. The ~def-cognitive-tool~ macro handles registration. ~cognitive-tool-prompt~ serialises the registry into the LLM's system prompt.
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(defvar *cognitive-tool-registry* (make-hash-table :test 'equal))
 #+end_src
 
-#+begin_src lisp :tangle package.lisp
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
 (defstruct cognitive-tool
   name
   description
@@ -226,10 +244,10 @@ Tools that the LLM can invoke are registered here. Each tool has a name, descrip
   body)
 #+end_src
 
-#+begin_src lisp :tangle package.lisp
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
 (defmacro def-cognitive-tool (name description parameters &key guard body)
   "Registers a cognitive tool. PARAMETERS is a list of plists, one per parameter."
-  `(setf (gethash (string-downcase (string ',name)) *cognitive-tools*)
+  `(setf (gethash (string-downcase (string ',name)) *cognitive-tool-registry*)
          (make-cognitive-tool :name (string-downcase (string ',name))
                               :description ,description
                               :parameters ',parameters
@@ -237,8 +255,8 @@ Tools that the LLM can invoke are registered here. Each tool has a name, descrip
                               :body ,body)))
 #+end_src
 
-#+begin_src lisp :tangle package.lisp
-(defun generate-tool-belt-prompt ()
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(defun cognitive-tool-prompt ()
   "Serialises all registered tools into a prompt string for the LLM."
   (let ((descriptions nil))
     (maphash (lambda (k tool)
@@ -248,29 +266,33 @@ Tools that the LLM can invoke are registered here. Each tool has a name, descrip
                              (cognitive-tool-description tool)
                              (cognitive-tool-parameters tool))
                      descriptions))
-              *cognitive-tools*)
+              *cognitive-tool-registry*)
     (if descriptions
         (format nil "Available tools:~%~a" (apply #'concatenate 'string (sort descriptions #'string<)))
         "No tools registered.")))
+
+;; Alias: generate-tool-belt-prompt → cognitive-tool-prompt
+(defun generate-tool-belt-prompt ()
+  (cognitive-tool-prompt))
 #+end_src
 
-*** Centralized logging (harness-log)
-Thread-safe logging function that writes to both the ring buffer (for LLM context) and stdout (for the user). Bounded by ~*max-log-history*~.
-#+begin_src lisp :tangle package.lisp
-(defun harness-log (msg &rest args)
+*** Centralized logging (log-message)
+Thread-safe logging function that writes to both the ring buffer (for LLM context) and stdout (for the user). Bounded by ~*log-limit*~.
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
+(defun log-message (msg &rest args)
   "Centralized, thread-safe logging for the harness."
   (let ((formatted-msg (apply #'format nil msg args)))
-    (bordeaux-threads:with-lock-held (*logs-lock*)
-      (push formatted-msg *system-logs*)
-      (when (> (length *system-logs*) *max-log-history*)
-        (setq *system-logs* (subseq *system-logs* 0 *max-log-history*))))
+    (bordeaux-threads:with-lock-held (*log-lock*)
+      (push formatted-msg *log-buffer*)
+      (when (> (length *log-buffer*) *log-limit*)
+        (setq *log-buffer* (subseq *log-buffer* 0 *log-limit*))))
     (format t "~a~%" formatted-msg)
     (finish-output)))
 #+end_src
 
 *** Debugger hook
 Friendly error handler that replaces the raw SBCL debugger with a diagnostic message. This prevents the agent from entering the debugger on unhandled conditions.
-#+begin_src lisp :tangle package.lisp
+#+begin_src lisp :tangle ../lisp/core-defpackage.lisp
 (setf *debugger-hook* (lambda (condition hook)
   "Friendly error handler - shows diagnostic message instead of raw debugger."
   (declare (ignore hook))
@@ -278,11 +300,13 @@ Friendly error handler that replaces the raw SBCL debugger with a diagnostic mes
   (format t "┌─────────────────────────────────────────────┐~%")
   (format t "│  ERROR: ~A~%" (type-of condition))
   (format t "│~%")
-  (format t "│  Run: opencortex doctor~%")
+  (format t "│  Run: passepartout doctor~%")
   (format t "│  For system diagnostics~%")
   (format t "└─────────────────────────────────────────────┘~%")
   (format t "~%")
   (format t "Details: ~A~%" condition)
+  (format t "Backtrace:~%")
+  (sb-debug:print-backtrace :count 20 :stream *standard-output*)
   (finish-output)
   (uiop:quit 1)))
 #+end_src

org/core-loop-act.org

@@ -0,0 +1,297 @@
+#+TITLE: Stage 3: Act (act.lisp)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:act:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-loop-act.lisp
+
+* Overview: Architectural Intent
+
+The Act stage is where cognition meets reality. After the Probabilistic engine proposes an action and the Deterministic engine verifies it, Act executes it through the appropriate actuator.
+
+An actuator is a function that takes (action context) and performs a physical operation: send a message to the TUI, execute a shell command, call a Telegram API, write to a file. Actuators are registered in a global hash table (~*actuator-registry*~) and dispatched by name.
+
+The key architectural choice: **actuators are not privileged**. The same dispatch mechanism that routes to :shell or :file also routes to :telegram or :signal. There is no special handling for dangerous actuators — safety is enforced at the Reason stage by the deterministic engine, not by Act. This means:
+
+1. Adding a new actuator requires no changes to the core — just register it
+2. Safety is centralized in the deterministic gates, not scattered across actuator implementations
+3. Every actuator benefits from the same security checks (the Bouncer, the Policy)
+
+** Why Dispatch-Action Verifies Again?
+
+The Reason stage already ran every proposed action through the deterministic engine. So why does ~loop-gate-act~ call ~cognitive-verify~ again?
+
+Because a skill's deterministic gate runs during Reason, but between Reason and Act, the action might have been transformed by the pipeline (metadata added, format normalized). The last-mile verification catches any transformation that might have introduced an unsafe property. It's the same philosophy as "trust but verify" — the second check is cheap and catches a class of bugs that would otherwise be silent data corruption.
+
+* Implementation
+
+** Package Context
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** Actuator Configuration
+
+~*actuator-default*~ determines where actions go when no explicit target is specified. Defaults to ~:cli~.
+
+~*actuator-silent*~ lists actuator targets that don't generate tool-output feedback. For example, sending a message to the CLI or Emacs doesn't need to produce a tool-output event — the user can see the message directly. This prevents redundant feedback loops.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *actuator-default* :cli
+  "The actuator used when no explicit target is specified.")
+
+#+end_src
+** *actuator-silent*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *actuator-silent* '(:cli :system-message :emacs)
+  "List of actuators that don't generate tool-output feedback.")
+
+#+end_src
+** actuator-initialize
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun actuator-initialize ()
+  "Register core actuators and load configuration."
+  (let ((def (uiop:getenv "DEFAULT_ACTUATOR"))
+        (silent (uiop:getenv "SILENT_ACTUATORS")))
+    (when def
+      (setf *actuator-default* (intern (string-upcase def) :keyword)))
+    (when silent
+      (setf *actuator-silent*
+            (mapcar (lambda (s) (intern (string-upcase (string-trim '(#\Space) s)) :keyword))
+                    (uiop:split-string silent :separator '(#\,))))))
+
+  (register-actuator :system #'action-system-execute)
+  (register-actuator :tool #'action-tool-execute)
+
+  (register-actuator :tui (lambda (action context)
+                            (declare (ignore context))
+                            (let* ((meta (getf action :meta))
+                                   (stream (getf meta :reply-stream)))
+                              (when (and stream (open-stream-p stream))
+                                (format stream "~a" (frame-message action))
+                                (finish-output stream))))))
+#+end_src
+#+end_src
+
+** Action Dispatch (action-dispatch)
+
+Routes an approved action to its registered actuator. The target is resolved in priority order:
+
+1. The explicit ~:target~ field on the action
+2. The source of the original signal (reply to the sender)
+3. The default actuator (~:cli~)
+
+Heartbeats are silently dropped here — they should never generate an actuation.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun action-dispatch (action context)
+  "Route an approved action to its registered actuator."
+  (let ((payload (proto-get action :payload)))
+    (when (eq (proto-get payload :sensor) :heartbeat)
+      (return-from action-dispatch nil))
+
+    (when (and action (listp action))
+      (let* ((meta (proto-get context :meta))
+             (source (proto-get meta :source))
+             (raw-target (or (proto-get action :target) source *actuator-default*))
+             (target (intern (string-upcase (string raw-target)) :keyword))
+             ;; If target is :SYSTEM and we have a live reply-stream, route to :TUI instead
+             (actual-target (if (and (eq target :system)
+                                     (getf meta :reply-stream)
+                                     (ignore-errors (open-stream-p (getf meta :reply-stream))))
+                               :tui
+                               target))
+             (actuator-fn (gethash actual-target *actuator-registry*)))
+        (when (and meta (null (getf action :meta)))
+          (setf (getf action :meta) meta))
+        (if actuator-fn
+            (funcall actuator-fn action context)
+            (log-message "ACT ERROR: No actuator registered for '~s'" actual-target))))))
+#+end_src
+
+** System Actuator (action-system-execute)
+
+Handles internal harness commands: ~:eval~ (execute arbitrary Lisp) and ~:message~ (log to the harness log). This is how the deterministic engine communicates results back to the user.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun action-system-execute (action context)
+  "Execute internal harness commands."
+  (declare (ignore context))
+  (let* ((payload (getf action :payload))
+         (cmd (getf payload :action)))
+    (case cmd
+      (:eval
+       (eval (read-from-string (getf payload :code))))
+      (:message
+       (log-message "ACT [System]: ~a" (getf payload :text)))
+      (t
+       (log-message "ACT ERROR [System]: Unknown command '~s'" cmd)))))
+#+end_src
+
+** Tool Actuator (action-tool-execute)
+
+Executes a registered cognitive tool. Cognitive tools are registered via ~def-cognitive-tool~ in the package.lisp and are the primary way the LLM interacts with the outside world.
+
+The function handles:
+- Tool dispatch by name (case-insensitive lookup)
+- Argument normalization (if the arguments are nested in a list, they're flattened)
+- Result formatting (structured results are sent back to the source)
+- Error handling (tool errors produce ~:tool-error~ events, not crashes)
+
+The tool's return value is packed into a ~:tool-output~ event and fed back into the pipeline, where it becomes the next perception. This is how the agent "sees" the result of its actions.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun action-tool-execute (action context)
+  "Execute a registered cognitive tool."
+  (let* ((payload (getf action :payload))
+         (tool-name (getf payload :tool))
+         (tool-args (getf payload :args))
+         (depth (getf context :depth 0))
+         (meta (getf context :meta))
+         (source (getf meta :source))
+         (tool (gethash (string-downcase (string tool-name)) *cognitive-tool-registry*)))
+    (if tool
+        (handler-case
+            (let* ((clean-args (if (and (listp tool-args) (listp (car tool-args))) (car tool-args) tool-args))
+                   (result (funcall (cognitive-tool-body tool) clean-args)))
+              (when source
+                (action-dispatch (list :TYPE :REQUEST :TARGET source 
+                                       :PAYLOAD (list :ACTION :MESSAGE :TEXT (tool-result-format tool-name result)))
+                                context))
+              (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
+                    :PAYLOAD (list :SENSOR :tool-output :RESULT result :TOOL tool-name)))
+          (error (c)
+            (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
+                  :PAYLOAD (list :SENSOR :tool-error :TOOL tool-name :MESSAGE (format nil "~a" c)))))
+        (list :TYPE :EVENT :DEPTH (1+ depth) :META meta
+              :PAYLOAD (list :SENSOR :tool-error :MESSAGE (format nil "Tool '~a' not found" tool-name))))))
+#+end_src
+
+** Tool Result Formatting (tool-result-format)
+
+Converts a tool's return value into a human-readable string for display to the user. Handles structured results (plists with ~:status~, ~:content~, ~:message~) and plain values.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun tool-result-format (tool-name result)
+  "Format a tool result for display."
+  (if (listp result)
+      (let ((status (getf result :status))
+            (content (getf result :content))
+            (msg (getf result :message)))
+        (cond
+          ((and (eq status :success) content) (format nil "~a" content))
+          ((and (eq status :error) msg) (format nil "ERROR [~a]: ~a" tool-name msg))
+          (t (format nil "TOOL [~a] RESULT: ~s" tool-name result))))
+      (format nil "TOOL [~a] RESULT: ~a" tool-name result)))
+#+end_src
+
+** Act Gate (Stage 3)
+
+The final stage of the metabolic pipeline. It receives a signal that has been reasoned (has an ~:approved-action~) and dispatches it.
+
+The gate runs a last-mile deterministic check on the approved action before execution. This catches any issues introduced during pipeline processing (e.g., metadata added by Perceive that changes the action's format).
+
+After dispatch, the gate captures any feedback produced by the actuation (tool output, error events) and returns it to the loop for the next cognitive cycle.
+
+*** loop-gate-act
+
+The main act pipeline stage.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun loop-gate-act (signal)
+  "Final stage of the metabolic pipeline: Actuation.
+For approval-required actions, creates a Flight Plan instead of executing."
+  (let* ((approved (getf signal :approved-action))
+         (signal-status (getf signal :status))
+         (type (getf signal :type))
+         (meta (getf signal :meta))
+         (source (getf meta :source))
+         (feedback nil))
+    ;; HITL: if the approved action requires human approval,
+    ;; create a Flight Plan (Emacs) and HITL entry (all gateways).
+    (when (and approved
+               (eq (getf approved :level) :approval-required))
+      (let* ((payload (getf approved :payload))
+             (blocked-action (getf payload :action))
+             (hitl (hitl-create blocked-action)))
+        (log-message "ACT: Action requires approval — creating Flight Plan + HITL (~a)" (getf hitl :token))
+        (dispatcher-flight-plan-create blocked-action)
+        (setf (getf signal :status) :suspended)
+        (action-dispatch (list :target source
+                               :payload (list :text (getf hitl :message)))
+                         signal)
+        (setf approved nil)
+        (setf feedback nil)))
+    (when approved
+      (let* ((original-type (getf approved :type))
+             (verified (cognitive-verify approved signal)))
+        (if (and (listp verified) (member (getf verified :type) '(:LOG :EVENT))
+                 (not (eq (getf verified :level) :approval-required))
+                 (not (member original-type '(:LOG :EVENT))))
+            (progn
+              (log-message "ACT BLOCKED: Action failed last-mile deterministic check.")
+              (setf (getf signal :approved-action) nil)
+              (setf feedback verified))
+            (progn
+              (setf (getf signal :approved-action) verified)
+              (setf approved verified)))))
+
+    (case type
+      (:REQUEST (action-dispatch signal signal))
+      (:LOG (action-dispatch signal signal))
+      (:EVENT
+       (if approved
+           (let* ((target (getf approved :target))
+                  (result (action-dispatch approved signal)))
+             (cond
+               ((and (listp result) (member (getf result :type) '(:EVENT :LOG)))
+                (setf feedback result))
+               ((and result (not (member target *actuator-silent*)))
+                (setf feedback (list :type :EVENT :depth (1+ (getf signal :depth 0)) :meta meta
+                                    :payload (list :sensor :tool-output :result result :tool approved))))))
+           (when source (action-dispatch signal signal)))))
+    (setf (getf signal :status) :acted)
+    feedback))
+#+end_src
+
+*** act-gate (backward-compatibility alias)
+
+The pipeline gate was originally named ~act-gate~. Code that still
+uses the old name can call this alias. New code should call
+~loop-gate-act~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun act-gate (signal)
+  (loop-gate-act signal))
+#+end_src
+
+* Test Suite
+Verifies that the act gate correctly processes an approved action and sets the signal status to ~:acted~.
+#+begin_src lisp :tangle ../lisp/core-loop-act.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-pipeline-act-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:pipeline-act-suite))
+
+(in-package :passepartout-pipeline-act-tests)
+
+(def-suite pipeline-act-suite :description "Test suite for Act pipeline")
+(in-suite pipeline-act-suite)
+
+(test test-loop-gate-act-basic
+  (clrhash passepartout::*skill-registry*)
+  (let* ((signal (list :type :EVENT :status nil :depth 0 :approved-action '(:target :cli :payload (:text "Hello"))))
+          (result (loop-gate-act signal)))
+    (is (eq :acted (getf signal :status)))
+    (is (null result))))
+#+end_src

org/core-loop-perceive.org

@@ -0,0 +1,265 @@
+#+TITLE: Stage 1: Perceive (perceive.lisp)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:perceive:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-loop-perceive.lisp
+
+* Overview: Architectural Intent
+
+The Perceive stage is the sensory cortex of Passepartout. It receives raw stimuli from diverse sources — terminal input, Emacs buffers, Telegram messages, Signal chats, heartbeat clocks, shell command outputs — and normalizes them into a single Signal format that the rest of the pipeline can process.
+
+Each source has its own format and protocol. The CLI sends raw text. Emacs sends AST diffs. Telegram sends JSON. Without normalization, every downstream component (Reason, Act) would need to understand every input format. With normalization:
+
+1. The gateway layer (CLI, Emacs, Telegram, Signal) just sends raw messages
+2. Perceive transforms them into Signals regardless of origin
+3. Reason and Act work with a single, consistent plist format
+4. Adding a new gateway requires gateway code only — no changes to core
+
+This is the "thin harness, fat skills" principle applied to input processing. The harness does the minimal normalization needed to produce a uniform Signal; the actual interpretation is left to skills.
+
+** Why the Async/Sync Split?
+
+Perceive handles two kinds of stimuli:
+- **Synchronous** (user input, chat messages) — these must be processed in order, one at a time, because each depends on the state left by the previous one
+- **Asynchronous** (heartbeats, background sensor readings, delegation results) — these can be processed in parallel because they don't depend on user intent
+
+The `*loop-async-sensors*` list defines which sensor types are processed in dedicated threads. Everything else goes through the main synchronous pipeline.
+
+The depth limit prevents runaway recursive loops. A signal that generates another signal that generates another signal can infinite-loop. If depth exceeds a threshold (10), the signal is silently dropped rather than processed. This is the metabolic loop's circuit breaker.
+
+* Implementation
+
+** Package Context
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** Interrupt Flag
+
+A global interrupt flag that can be set by any signal. When set, the metabolic loop should stop processing and clean up. This is used for graceful shutdown: a SIGINT or /exit command sets the flag, and the loop exits at the next cycle boundary.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *loop-interrupt* nil)
+#+end_src
+
+** Scope Resolver
+
+A hook for the context-manager skill to register its ~current-scope~
+function. When set, the perceive gate passes the current context scope
+to ~ingest-ast~ so ingested objects are tagged and queryable by scope.
+Defaults to ~nil~ meaning all objects are ingested as ~:memex~.
+
+;; REPL-VERIFIED: 2026-05-03T14:00:00
+#+begin_src lisp
+(defvar *scope-resolver* nil
+  "If set, function returning current scope keyword. Used by perceive gate.")
+#+end_src
+
+** Sensor Configuration
+
+~*loop-async-sensors*~ lists the sensor types that should be processed in their own threads. Currently, ~:chat-message~, ~:delegation~, and ~:user-command~ are async because they don't block the main reasoning loop — the agent can process a Telegram message while waiting for the user's next input.
+
+~*loop-focus-id*~ tracks what the user is currently looking at in Emacs. When the user moves their cursor to a different Org headline, the buffer-update signal updates this ID. The Reason stage uses it to build the foveal-peripheral context model: the current headline gets full detail, everything else gets a skeletal outline.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *loop-async-sensors* '(:chat-message :delegation :user-command)
+  "Sensors that are processed in dedicated threads.")
+
+#+end_src
+** *loop-focus-id*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *loop-focus-id* nil
+  "The Org ID of the node the user is currently interacting with.")
+#+end_src
+
+** Pre-Reason Handler Registry
+
+Skills register handlers for custom sensors here. When a signal arrives
+with a registered sensor, the handler is called in the perceive gate,
+before the signal reaches the LLM. The handler receives the full signal
+and returns T if the signal was consumed (don't continue to reason)
+or nil if processing should proceed normally.
+
+*** Pre-Reason Handler Hash Table
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *pre-reason-handlers* (make-hash-table :test 'eq)
+  "Pre-reason handler registry: sensor keyword → handler function.")
+#+end_src
+
+*** register-pre-reason-handler
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun register-pre-reason-handler (sensor fn)
+  "Registers FN to handle signals with SENSOR in the perceive gate.
+FN receives (signal) and returns T if consumed, nil to continue."
+  (setf (gethash sensor *pre-reason-handlers*) fn))
+#+end_src
+
+** inject-stimulus backward-compatibility alias
+
+Skills and external code that still call ~inject-stimulus~ (the previous
+name for the pipeline injection function) can use this alias. New code
+should call ~stimulus-inject~ directly.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun inject-stimulus (raw-message &key stream (depth 0))
+  (stimulus-inject raw-message :stream stream :depth depth))
+#+end_src
+
+** Stimulus Injection (stimulus-inject)
+
+This is the entry point that gateways call to send a message into the cognitive pipeline. It sets metadata (source, session ID, reply stream), decides whether the stimulus should be processed synchronously or on a background thread, and wraps the whole thing in error recovery so that no single bad stimulus can crash the system.
+
+The error recovery uses Common Lisp's restart system. If any error occurs during processing, a `skip-event` restart is available. The handler displays the error, then invokes `skip-event` which drops the stimulus and continues. This is the "fail open" safety model — better to drop one message than to crash the entire agent.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun stimulus-inject (raw-message &key stream (depth 0))
+  "Inject a raw message into the signal processing pipeline."
+  (let* ((payload (getf raw-message :payload))
+         (sensor (getf payload :sensor))
+         (meta (getf raw-message :meta))
+         (async-p (or (getf payload :async-p)
+                     (member sensor *loop-async-sensors*))))
+
+    (unless meta
+      (setf meta (list :SOURCE :SYSTEM :SESSION-ID "internal")))
+
+    (when stream
+      (setf (getf meta :reply-stream) stream))
+
+    (setf (getf raw-message :meta) meta)
+    (setf (getf raw-message :depth) depth)
+
+    (if async-p
+        (bt:make-thread
+         (lambda ()
+           (restart-case (process-signal raw-message)
+             (skip-event () nil)))
+         :name "passepartout-async-task")
+        
+        (restart-case
+            (handler-bind ((error (lambda (c)
+                                    (log-message "SYSTEM ERROR: ~a" c)
+                                    (invoke-restart 'skip-event))))
+              (process-signal raw-message))
+          (skip-event ()
+            (log-message "SYSTEM RECOVERY: Stimulus dropped."))))))
+#+end_src
+
+** Perceive Gate (loop-gate-perceive)
+
+The perceive gate is the first stage of the metabolic pipeline. It receives a normalized signal and routes it based on the event type:
+
+- ~:EVENT~ with ~:buffer-update~ — an Emacs buffer changed (new Org headline created, text edited). The change is ingested into memory so the agent has the latest state.
+- ~:EVENT~ with ~:point-update~ — the user moved their cursor to a different headline. The foveal focus is updated, and the node at the cursor is ingested at higher priority.
+- ~:EVENT~ with ~:interrupt~ — the user requested an interrupt. The interrupt flag is set.
+- ~:RESPONSE~ — an action completed. The gate logs the result status.
+
+All signals get tagged with their processing stage (`:status :perceived`) and the current foveal focus before being passed to the Reason stage.
+
+*** loop-gate-perceive
+
+The main perceive pipeline stage.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun loop-gate-perceive (signal)
+  "Stage 1 of the metabolic pipeline: Normalize sensory input."
+  (let* ((payload (getf signal :payload))
+          (type (getf signal :type))
+          (meta (getf signal :meta))
+          (sensor (getf payload :sensor)))
+    ;; HITL: intercept approval/denial commands before LLM processing
+    (when (and (eq sensor :user-input)
+               (stringp (getf payload :text)))
+      (let ((text (getf payload :text)))
+        (when (ignore-errors (hitl-handle-message text (getf meta :source)))
+          (log-message "GATE [Perceive]: HITL command processed — ~a" text)
+          (return-from loop-gate-perceive signal))))
+    ;; Pre-reason handlers: dispatch custom sensors to registered skill handlers
+    (let ((handler (gethash sensor *pre-reason-handlers*)))
+      (when handler
+        (when (funcall handler signal)
+          (return-from loop-gate-perceive signal))))
+
+    (log-message "GATE [Perceive]: ~a (~a) [Source: ~s]"
+                 type (or sensor "no-sensor") (getf meta :source))
+
+    (cond ((eq type :EVENT)
+            (case sensor
+              (:buffer-update
+               (let ((ast (getf payload :ast)))
+                 (when ast
+                   (snapshot-memory)
+                   (ingest-ast ast :scope (if *scope-resolver* (funcall *scope-resolver*) :memex)))))
+              (:point-update
+               (let ((element (getf payload :element)))
+                 (when element
+                   (snapshot-memory)
+                   (setf *loop-focus-id* (getf element :id))
+                   (ingest-ast element :scope (if *scope-resolver* (funcall *scope-resolver*) :memex)))))
+              (:interrupt
+               (setf *loop-interrupt* t))
+              ;; HITL: re-injected approved action from dispatcher-approvals-process
+              (:approval-required
+               (when (getf payload :approved)
+                 (log-message "GATE [Perceive]: Approved Flight Plan re-injected")
+                  (setf (getf signal :approved) t)
+                 (setf (getf signal :approved-action) (getf payload :action))))
+              ;; Default sensor: pass through without requiring user-input processing
+              (otherwise
+               (log-message "GATE [Perceive]: Unknown sensor ~a, passing through" sensor))))
+          ((eq type :RESPONSE)
+           (log-message "GATE [Perceive]: Act Result -> ~a" (getf payload :status))))
+
+    (setf (getf signal :status) :perceived)
+    (setf (getf signal :foveal-focus) *loop-focus-id*)
+    signal))
+#+end_src
+
+*** perceive-gate (backward-compatibility alias)
+
+The pipeline gate was originally named ~perceive-gate~. Code that still
+uses the old name can call this alias. New code should call
+~loop-gate-perceive~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun perceive-gate (signal)
+  (loop-gate-perceive signal))
+#+end_src
+
+* Test Suite
+Verifies that the perceive gate correctly ingests AST nodes into memory and that the depth limiter prevents runaway recursive signals.
+#+begin_src lisp :tangle ../lisp/core-loop-perceive.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-pipeline-perceive-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:pipeline-perceive-suite))
+
+(in-package :passepartout-pipeline-perceive-tests)
+
+(def-suite pipeline-perceive-suite :description "Test suite for Perceive pipeline")
+(in-suite pipeline-perceive-suite)
+
+(test test-loop-gate-perceive
+  (clrhash passepartout::*memory-store*)
+  (let* ((signal (list :type :EVENT :payload (list :sensor :buffer-update :ast (list :type :HEADLINE :properties (list :ID "test-node" :TITLE "Test") :contents nil))))
+         (result (loop-gate-perceive signal)))
+    (is (eq :perceived (getf result :status)))
+    (is (not (null (gethash "test-node" passepartout::*memory-store*))))))
+
+(test test-depth-limiting
+  (let ((runaway-signal (list :type :EVENT :depth 11 :payload (list :sensor :heartbeat))))
+    (is (null (process-signal runaway-signal)))))
+#+end_src

org/core-loop-reason.org

@@ -0,0 +1,376 @@
+#+TITLE: Stage 2: Reason (reason.lisp)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:reason:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-loop-reason.lisp
+
+* Overview: Architectural Intent
+
+The Reason stage is the cognitive heart of Passepartout. It takes a normalized signal from Perceive and produces an approved action for Act. This is where the two engines — probabilistic (LLM) and deterministic (Lisp logic) — collaborate.
+
+The design is shaped by one non-negotiable constraint: **the LLM must never touch the actuators directly.** Every action the LLM proposes must pass through a deterministic verification gate that has the final say. This is what separates Passepartout from every other AI agent: the creative brain suggests, but the logical brain decides.
+
+** The Probabilistic-Deterministic Split
+
+An LLM is a statistical engine. Given enough context, it is remarkably good at translation, generation, and pattern matching. But it cannot be trusted with authority because hallucination is a *fundamental property* of probabilistic inference — the model generates the most likely continuation, not the correct one.
+
+The deterministic engine addresses this by being what the probabilistic engine is not: mathematically rigorous, formally verifiable, and incapable of hallucination by design. It operates on explicit symbolic representations — lists, property lists, knowledge graphs — not on floating-point activations. When it evaluates a path confinement check, it returns true or false, not a probability distribution.
+
+The division of labor is architectural:
+- The LLM handles the fuzzy interface between human language and structured representation
+- The deterministic engine receives those structured representations and evaluates them against formal invariants
+- The LLM never reads a file, never executes a command, never modifies memory — it generates proposals
+
+This separation is the source of Passepartout's safety guarantee. Other agents add "guardrails" as an afterthought — a layer of filtering around a dangerous core. Passepartout makes the division explicit.
+
+** Why Plists for Communication?
+
+Every message in the Reason pipeline is a property list (plist):
+
+  (TYPE :REQUEST TARGET :CLI PAYLOAD (ACTION :MESSAGE TEXT "Hello"))
+
+A plist is simultaneously:
+- Human-readable text
+- Machine-parseable data structure
+- Executable Lisp code
+
+This is not a cosmetic choice. It means the reasoning pipeline can generate, modify, and execute its own communication protocol without external parsing libraries. There is no JSON encoder, no schema validator, no serialization layer between the two engines. They speak the same language because they *are* the same language.
+
+* Implementation
+
+** Package Context
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** Probabilistic Backend Registry
+
+~*probabilistic-backends*~ is a hash table mapping provider keywords to
+their handler functions. Populated by ~register-probabilistic-backend~.
+Skills like system-model-provider register into this table at boot time.
+
+;; REPL-VERIFIED: 2026-05-03T14:00:00
+#+begin_src lisp
+(defvar *probabilistic-backends* (make-hash-table :test 'equal)
+  "Maps provider keyword → handler function (prompt system-prompt &key model).")
+
+(defun register-probabilistic-backend (name fn)
+  "Register FN as the handler for provider NAME."
+  (setf (gethash name *probabilistic-backends*) fn))
+#+end_src
+
+The probabilistic engine maintains four pieces of global state that control how LLM requests are dispatched:
+
+~*backend-registry*~ is a hash table mapping provider keywords (like ~:ollama~ or ~:openrouter~) to the actual function that calls that provider's API. ~*provider-cascade*~ is the ordered list of providers to try — if the first one fails, the cascade falls through to the next. ~*model-selector*~ is an optional function that examines the context and picks a model per request (useful for routing simple questions to a small fast model and complex reasoning to a large expensive one). ~*consensus-enabled*~ toggles multi-provider agreement, where multiple LLMs run the same prompt and the system waits for consensus.
+
+These variables are configurable at runtime. The cascade can be changed without restart: (setf *provider-cascade* (quote (:ollama :openrouter))).
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *backend-registry* (make-hash-table :test 'equal))
+#+end_src
+
+** Provider Cascade
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *provider-cascade* nil)
+#+end_src
+
+** Model Selector
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *model-selector* nil)
+#+end_src
+
+** Consensus Toggle
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *consensus-enabled* nil)
+#+end_src
+
+** Backend Registration (backend-register)
+
+Each LLM provider registers itself by calling this function. The backend function receives a prompt string, a system prompt string, and optional keyword arguments for model selection. It must return either a plist with ~:status :success~ and ~:content~, or ~:status :error~ with a message.
+
+Registration is typically done at boot time by the unified-llm-backend skill, but can also be done dynamically:
+  (backend-register :my-custom-provider #'my-fn)
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun backend-register (name fn)
+  (setf (gethash name *backend-registry*) fn))
+#+end_src
+
+** Cascade Dispatch (backend-cascade-call)
+
+Given a prompt, this function iterates through the provider cascade and calls each backend in order until one succeeds. A provider "succeeds" when it returns ~:status :success~ with content, or when it returns a plain string (the LLM's raw output).
+
+The function has a fallback for every failure mode:
+- If a backend returns ~:status :error~, the cascade moves to the next provider
+- If a backend throws an exception, it is caught and logged, and the cascade moves on
+- If ALL backends are exhausted, a structured LOG message is returned saying "Neural Cascade Failure"
+
+This is deliberately resilient. The system should never crash because an LLM provider is down. It should log the failure, try the next provider, and if all fail, return a diagnostic message that the deterministic engine can present to the user.
+
+;; REPL-VERIFIED: 2026-05-03T14:00:00
+#+begin_src lisp
+(defun backend-cascade-call (prompt &key
+                                (system-prompt "You are the Probabilistic engine.")
+                                (cascade nil)
+                                (context nil))
+  (let ((backends (or cascade *provider-cascade*))
+        (result nil))
+    (dolist (backend backends (or result
+                                   (list :type :LOG
+                                         :payload (list :text "Neural Cascade Failure: All providers exhausted."))))
+      (let ((backend-fn (or (gethash backend *backend-registry*)
+                            (gethash backend *probabilistic-backends*))))
+        (when backend-fn
+          (log-message "PROBABILISTIC: Attempting backend ~a..." backend)
+          (let* ((model (and *model-selector*
+                             (funcall *model-selector* backend context)))
+                 (skip (eq model :skip))
+                 (r (unless skip
+                      (if (and model (not skip))
+                          (funcall backend-fn prompt system-prompt :model model)
+                          (funcall backend-fn prompt system-prompt)))))
+            (when skip
+              (log-message "PROBABILISTIC: Skipping ~a (filtered)" backend))
+            (cond ((and (listp r) (eq (getf r :status) :success))
+                   (setf result (getf r :content))
+                   (return result))
+                  ((stringp r)
+                   (setf result r)
+                   (return result))
+                  (t
+                   (log-message "PROBABILISTIC: Backend ~a failed: ~a"
+                               backend (getf r :message))))))))))(defun markdown-strip (text)
+  (if (and text (stringp text))
+      (let ((cleaned text))
+        (setf cleaned (cl-ppcre:regex-replace-all "^```[a-z]*\\n" cleaned ""))
+        (setf cleaned (cl-ppcre:regex-replace-all "\\n```$" cleaned ""))
+        (setf cleaned (cl-ppcre:regex-replace-all "```" cleaned ""))
+        (string-trim '(#\Space #\Newline #\Tab) cleaned))
+      text))
+#+end_src
+
+** Normalize plist keywords
+
+Lisp keywords are case-sensitive. The LLM might produce ~:payload~ or ~:PAYLOAD~ or ~:Payload~ depending on the model. This function normalizes all keyword keys to uppercase to ensure the deterministic engine receives consistent input.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun plist-keywords-normalize (plist)
+  (when (listp plist)
+    (loop for (k v) on plist by #'cddr
+          collect (if (and (symbolp k) (not (keywordp k)))
+                       (intern (string k) :keyword)
+                       k)
+          collect v)))
+#+end_src
+
+** Think: assemble context and call the LLM
+
+This is the main entry point for the probabilistic engine. Every cognitive cycle goes through here.
+
+The function handles several cases:
+- If a triggered skill provides a probabilistic prompt generator, that replaces the raw user input
+- If the previous proposal was rejected, the rejection trace is injected into the LLM's context so it can self-correct
+- Skills can augment the system prompt with domain-specific mandates via the ~system-prompt-augment~ mechanism
+
+The system prompt assembly order — identity, tools, context, logs, mandates — is intentional: the most dynamic content (mandates from skills) comes last so it has the most influence on the LLM's output.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun think (context)
+  (let* ((active-skill (find-triggered-skill context))
+         (tool-belt (generate-tool-belt-prompt))
+         (global-context (context-assemble-global-awareness))
+         (system-logs (context-get-system-logs))
+         (assistant-name (or (uiop:getenv "MEMEX_ASSISTANT") "Agent"))
+         (rejection-trace (proto-get (proto-get context :payload) :rejection-trace))
+         (prompt-generator (when active-skill (skill-probabilistic-prompt active-skill)))
+         (raw-prompt (if prompt-generator
+                         (funcall prompt-generator context)
+                         (let ((p (proto-get (proto-get context :payload) :text)))
+                           (if (and p (stringp p)) p "Maintain metabolic stasis."))))
+         (reflection-feedback (if rejection-trace
+                                  (format nil "~%~%PREVIOUS PROPOSAL REJECTED: ~a" rejection-trace)
+                                  ""))
+         (skill-augments (let ((augments ""))
+                           (maphash (lambda (name skill)
+                                      (declare (ignore name))
+                                      (let ((aug-fn (skill-system-prompt-augment skill)))
+                                        (when aug-fn
+                                          (let ((aug-text (ignore-errors (funcall aug-fn context))))
+                                            (when (and aug-text (stringp aug-text) (> (length aug-text) 0))
+                                              (setf augments (concatenate 'string augments aug-text (string #\Newline))))))))
+                                    *skill-registry*)
+                           (when (> (length augments) 0) augments)))
+         (system-prompt (format nil "IDENTITY: ~a~a~%~%TOOLS:~%~a~%~%CONTEXT:~%~a~%~%LOGS:~%~a~%~a" 
+                                assistant-name reflection-feedback tool-belt global-context system-logs
+                                (or skill-augments ""))))
+    (let* ((thought (backend-cascade-call raw-prompt :system-prompt system-prompt :context context))
+           (cleaned (if (and (listp thought) (getf thought :type))
+                        (format nil "~a" (getf (getf thought :payload) :text))
+                        (markdown-strip thought))))
+       (if (and cleaned (stringp cleaned) (> (length cleaned) 0) (or (char= (char cleaned 0) #\() (char= (char cleaned 0) #\[)))
+           (handler-case
+                (let ((parsed (read-from-string cleaned)))
+                  (if (listp parsed)
+                      (let ((normalized (plist-keywords-normalize parsed)))
+                        ;; Ensure explanation is present in the payload for policy gate
+                        (let ((payload (proto-get normalized :payload)))
+                          (if (and payload (proto-get payload :explanation))
+                              normalized
+                              (let ((new-payload (list* :EXPLANATION "Generated by the Probabilistic engine."
+                                                        (if (listp payload) payload nil))))
+                                (list* :PAYLOAD new-payload
+                                       (loop for (k v) on normalized by #'cddr
+                                             unless (eq k :PAYLOAD)
+                                             collect k collect v))))))
+                      (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
+             (error () (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT cleaned :EXPLANATION "Generated by the Probabilistic engine."))))
+            (list :TYPE :REQUEST :PAYLOAD (list :ACTION :MESSAGE :TEXT (if (stringp cleaned) cleaned "No response") :EXPLANATION "Generated by the Probabilistic engine."))))))
+#+end_src
+
+** Deterministic Engine (cognitive-verify)
+
+The deterministic engine is the strict guard. It receives a proposed action from the probabilistic engine and runs it through every registered deterministic gate, sorted by priority.
+
+Skills register deterministic gates via ~defskill~ with the ~:deterministic~ keyword. Each gate is a function that receives (action context) and returns either:
+- A modified action (the gate approves or adjusts the proposal)
+- A LOG or EVENT plist (the gate rejects the proposal with a reason)
+
+Gates run in priority order, highest first. If any gate returns a LOG or EVENT, the proposal is rejected immediately and the rejection reason flows back to the probabilistic engine via the rejection trace. If all gates pass, the proposal is approved.
+
+This architecture makes safety compositional: each skill adds one constraint. The bouncer checks secrets. The policy checks explanations. The shell actuator checks destructive commands. No single skill needs to understand the full security model.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun cognitive-verify (proposed-action context)
+  "Runs all registered deterministic gates against the proposed action,
+sorted by priority (highest first). Returns a rejection plist or the action."
+  (let ((current-action (copy-tree proposed-action))
+        (approval-needed nil)
+        (approval-action nil)
+        (gates nil))
+    ;; Collect gates sorted by priority (highest first)
+    (maphash (lambda (name skill)
+               (declare (ignore name))
+               (when (skill-deterministic-fn skill)
+                 (push (cons (skill-priority skill) (skill-deterministic-fn skill)) gates)))
+             *skill-registry*)
+    (setf gates (sort gates #'> :key #'car))
+    (dolist (gate-pair gates)
+      (let ((result (funcall (cdr gate-pair) current-action context)))
+        (cond
+          ((eq (getf result :level) :approval-required)
+           (setf approval-needed t
+                 approval-action (getf (getf result :payload) :action)))
+          ((member (getf result :type) '(:LOG :EVENT))
+           (return-from cognitive-verify result))
+          ((and (listp result) result)
+           (setf current-action result)))))
+    (if approval-needed
+        (list :type :EVENT :level :approval-required
+              :payload (list :sensor :approval-required
+                             :action approval-action))
+        current-action)))
+#+end_src
+
+** Reason Gate (Stage 2)
+
+The reason gate is the pipeline stage that orchestrates Think + Determine. It receives a signal, checks if it requires reasoning (only ~:user-input~ and ~:chat-message~ events do), and runs through the cognitive + verification loop.
+
+The loop has retry logic: up to 3 attempts. If the deterministic engine rejects a proposal, the rejection reason is fed back into the next think call so the LLM can self-correct. This loop — propose, reject, correct, re-propose — is the core mechanism by which the agent improves its own output without human intervention.
+
+The retry limit prevents infinite loops. If the LLM cannot produce a passable proposal within 3 attempts, the last rejection reason is attached to the signal and the acted pipeline sees a failed reasoning cycle.
+
+*** loop-gate-reason
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun loop-gate-reason (signal)
+  (let* ((type (proto-get signal :type))
+         (payload (proto-get signal :payload))
+         (sensor (proto-get payload :sensor)))
+    (unless (and (eq type :EVENT) (member sensor '(:user-input :chat-message)))
+      (return-from loop-gate-reason signal))
+    (let ((retries 3)
+          (current-signal (copy-tree signal))
+          (last-rejection nil))
+      (loop
+        (when (<= retries 0)
+          (setf (getf signal :approved-action) last-rejection)
+          (setf (getf signal :status) :reasoned)
+          (return signal))
+        (when last-rejection
+          (setf (getf (getf current-signal :payload) :rejection-trace) last-rejection))
+        (let ((candidate (think current-signal)))
+           (if (and candidate (listp candidate))
+               (let ((verified (cognitive-verify candidate current-signal)))
+                 ;; Approval-required is not a rejection — pass to act for Flight Plan
+                 (if (eq (getf verified :level) :approval-required)
+                     (progn
+                       (setf (getf signal :approved-action) verified)
+                       (setf (getf signal :status) :requires-approval)
+                       (return signal))
+                     ;; Hard rejection: retry with feedback
+                     (if (member (getf verified :type) '(:LOG :EVENT))
+                         (progn (decf retries) (setf last-rejection verified))
+                         (progn
+                           (setf (getf signal :approved-action) verified)
+                           (setf (getf signal :status) :reasoned)
+                           (return signal)))))
+              (progn
+                (setf (getf signal :approved-action) nil)
+                (setf (getf signal :status) :reasoned)
+                (return signal))))))))
+#+end_src
+
+*** reason-gate (backward-compatibility alias)
+
+The pipeline gate was originally named ~reason-gate~. Code that still
+uses the old name can call this alias. New code should call
+~loop-gate-reason~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun reason-gate (signal)
+  (loop-gate-reason signal))
+#+end_src
+
+* Test Suite
+Verifies that the deterministic engine correctly rejects unsafe actions (like ~rm -rf /~) while allowing safe ones.
+#+begin_src lisp :tangle ../lisp/core-loop-reason.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-pipeline-reason-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:pipeline-reason-suite))
+
+(in-package :passepartout-pipeline-reason-tests)
+
+(def-suite pipeline-reason-suite :description "Test suite for Reason pipeline")
+(in-suite pipeline-reason-suite)
+
+(test test-decide-gate-safety
+  (clrhash passepartout::*skill-registry*)
+  (passepartout::defskill :mock-safety
+    :priority 50
+    :trigger (lambda (ctx) (declare (ignore ctx)) t)
+    :deterministic (lambda (action ctx)
+                    (declare (ignore ctx))
+                    (if (search "rm -rf" (format nil "~s" action))
+                        (list :type :LOG :payload (list :text "Rejected"))
+                        action)))
+  (let* ((candidate '(:type :REQUEST :payload (:action :shell :cmd "rm -rf /")))
+         (signal '(:type :EVENT :payload (:sensor :user-input)))
+         (result (cognitive-verify candidate signal)))
+    (is (eq :LOG (getf result :type)))))
+#+end_src

org/core-loop.org

@@ -0,0 +1,324 @@
+#+TITLE: The Metabolic Loop (loop.lisp)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:loop:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-loop.lisp
+
+* Overview: Architectural Intent
+
+The Metabolic Loop is the cranial nerve reflex of Passepartout. While skills provide specialized intelligence, the loop provides the fundamental rhythm of existence: the continuous processing of signals from perception through cognition to action.
+
+Every signal flows through three stages:
+1. **Perceive** — normalize raw input into a standard Signal format
+2. **Reason** — think (LLM) then verify (deterministic gates)
+3. **Act** — dispatch the approved action to the appropriate actuator
+
+If a stage produces a new signal (e.g., the Act stage produces a tool-output event), that signal feeds back into Perceive and the loop continues. This is how the agent has multi-step conversations: each LLM response produces an action, which produces a tool output, which feeds back as a new perception, which triggers the next reasoning cycle.
+
+** Why Separate Stages?
+
+A single function that called the LLM, checked safety, and executed the result would be simpler to write. But it would be impossible to:
+- Test each stage independently (a bug in the LLM call would block safety testing)
+- Insert new stages between P and R or R and A (adding consensus means adding a gate in the middle)
+- Recover from failures mid-pipeline (an LLM timeout shouldn't prevent safety checks on the next cycle)
+
+The stage separation is the functional equivalent of the "thin harness" principle: each stage is a pure function that transforms a signal. The loop is the composition of these functions.
+
+** Why the Depth Limit?
+
+A signal that generates another signal that generates another signal can infinite-loop. The depth limit (max 10) prevents this. If depth exceeds 10, the signal is silently dropped. This is the metabolic loop's circuit breaker.
+
+The three-tier error recovery model:
+1. **Transient errors** (tool failures, network timeouts) — recoverable, generate a :loop-error signal at higher depth for retry
+2. **Critical errors** (undefined functions, malformed data) — require memory rollback to the last snapshot
+3. **Recursive loops** (signals generating more signals indefinitely) — depth limit enforcement
+
+* Implementation
+
+** Package Context
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** Global Interrupt State
+
+Thread-safe interrupt flag. The ~*loop-interrupt-lock*~ mutex protects access so that the signal handler and the main loop don't race on shutdown.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *interrupt-flag* nil
+  "Atomic flag set by signal handlers to trigger graceful shutdown.")
+
+#+end_src
+** *loop-interrupt-lock*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *loop-interrupt-lock* (bt:make-lock "harness-interrupt-lock")
+  "Mutex protecting *interrupt-flag* access.")
+
+#+end_src
+** *heartbeat-thread*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *heartbeat-thread* nil
+  "Handle to the heartbeat thread.")
+#+end_src
+#+end_src
+
+** Core Engine (loop-process)
+
+The entry point to the metabolic pipeline. Each cycle runs Perceive → Reason → Act. If Act produces feedback (a new signal), the loop continues with that signal at the same depth.
+
+The function handles four failure modes:
+- **Depth exceeded**: signal dropped, nil returned
+- **Interrupt flag**: graceful shutdown, nil returned
+- **Handler error**: caught by handler-case, logged, and depending on the sensor type and depth:
+  - Normal errors at low depth → memory rollback + retry as :loop-error
+  - :loop-error and :tool-error at any depth → dropped (avoids infinite retry loops)
+  - High-depth errors (depth > 2) → dropped (avoids cascading failures)
+- **Unhandled error**: the handler-case catches everything, preventing any single bad signal from crashing the agent
+
+*** loop-process
+
+The main pipeline entry point.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun loop-process (signal)
+  "The entry point to the Metabolic Pipeline: Perceive -> Reason -> Act."
+  (let ((current-signal signal))
+    (loop while current-signal do
+      (let ((depth (getf current-signal :depth 0))
+            (meta (getf current-signal :meta)))
+        (when (> depth 10)
+          (log-message "METABOLISM ERROR: Max recursion depth reached.")
+          (return nil))
+
+        (when (bt:with-lock-held (*loop-interrupt-lock*) *interrupt-flag*)
+          (log-message "METABOLISM: Interrupted by shutdown signal.")
+          (return nil))
+
+        (handler-case
+             (progn
+               (setf current-signal (perceive-gate current-signal))
+               (setf current-signal (reason-gate current-signal))
+               (let ((feedback (act-gate current-signal)))
+                 (if feedback
+                     (progn
+                       (unless (getf feedback :meta) (setf (getf feedback :meta) meta))
+                       (setf current-signal feedback))
+                     (setf current-signal nil))))
+          (error (c)
+            (let ((sensor (ignore-errors (getf (getf current-signal :payload) :sensor))))
+              (log-message "METABOLISM CRASH [~a]: ~a" (or sensor :unknown) c)
+              (unless (member sensor '(:loop-error :tool-error :syntax-error))
+                (log-message "CRITICAL ERROR: Initiating Micro-Rollback.")
+                (rollback-memory 0))
+              (if (or (> depth 2) (member sensor '(:loop-error :tool-error)))
+                  (setf current-signal nil)
+                  (setf current-signal
+                        (list :type :EVENT :depth (1+ depth) :meta meta
+                              :payload (list :sensor :loop-error :message (format nil "~a" c) :depth depth)))))))))))
+#+end_src
+
+*** process-signal (backward-compatibility alias)
+
+The pipeline entry point was originally named ~process-signal~. Code
+that still uses the old name can call this alias. New code should call
+~loop-process~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun process-signal (signal)
+  (loop-process signal))
+#+end_src
+
+** Heartbeat Mechanism
+
+The heartbeat is a background thread that fires every N seconds (configurable via ~HEARTBEAT_INTERVAL~ env var, default 60). On each tick, it:
+
+1. Increments the save counter and saves memory to disk when the counter exceeds the auto-save interval (default 300s)
+2. Injects a ~:heartbeat~ signal into the pipeline
+
+The heartbeat signal is how background skills (Gardener, Scribe) get triggered without user input. These skills have triggers that match ~:sensor :heartbeat~ and run maintenance tasks during idle cycles.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *memory-auto-save-interval* 300)
+#+end_src
+** *heartbeat-save-counter*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *heartbeat-save-counter* 0)
+
+#+end_src
+** heartbeat-start
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun heartbeat-start ()
+  "Starts the background heartbeat thread."
+  (let ((interval (or (ignore-errors (parse-integer (uiop:getenv "HEARTBEAT_INTERVAL"))) 60))
+        (auto-save (or (ignore-errors (parse-integer (uiop:getenv "MEMORY_AUTO_SAVE_INTERVAL"))) *memory-auto-save-interval*)))
+    (setf *memory-auto-save-interval* auto-save)
+    (setf *heartbeat-save-counter* 0)
+
+    (setf *heartbeat-thread*
+          (bt:make-thread
+           (lambda ()
+             (loop
+               (sleep interval)
+               (incf *heartbeat-save-counter*)
+               (when (>= *heartbeat-save-counter* (/ *memory-auto-save-interval* interval))
+                 (setf *heartbeat-save-counter* 0)
+                 (save-memory-to-disk))
+               (stimulus-inject
+                  (list :type :EVENT :payload (list :sensor :heartbeat :unix-time (get-universal-time))))))
+           :name "passepartout-heartbeat"))))
+#+end_src
+#+end_src
+
+** Shutdown Save Flag
+
+Controls whether memory is saved on shutdown. Useful for testing when you want a clean state on next boot.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *shutdown-save-enabled* t)
+#+end_src
+
+** System Health Status
+
+Used by the health check protocol and the daemon's status endpoint. Set by ~diagnostics-startup-run~ during boot.
+
+- ~:healthy~ — all checks passed
+- ~:degraded~ — checks found issues but the daemon can still run
+- ~:unhealthy~ — checks failed, the daemon may not function correctly
+- ~:unknown~ — health check hasn't run yet
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *system-health* :unknown
+  "Current system health status: :healthy, :degraded, :unhealthy, or :unknown.")
+
+#+end_src
+** *health-check-ran*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *health-check-ran* nil
+  "Flag indicating if initial health check has completed.")
+#+end_src
+#+end_src
+
+** Proactive Doctor
+
+Runs the doctor diagnostics automatically at startup. If the doctor finds issues (missing dependencies, misconfigured providers), it prints a diagnostic message but does NOT block the daemon from starting. The user can see the issues and run ~passepartout doctor --fix~ to repair.
+
+This is the "fail open" principle applied to boot: the system should start even with problems, not refuse to start until everything is perfect.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun diagnostics-startup-run ()
+  "Runs the doctor diagnostics on startup. Returns health status."
+  (format t "~%")
+  (format t "==================================================~%")
+  (format t " DOCTOR: Running Startup Health Check~%")
+  (format t "==================================================~%")
+  (handler-case
+      (progn
+        (when (fboundp 'doctor-run-all)
+          (let ((result (doctor-run-all :auto-install nil)))
+            (setf *health-check-ran* t)
+            (if result
+                (progn
+                  (setf *system-health* :healthy)
+                  (format t "DAEMON: Health check passed. Starting services.~%"))
+                (progn
+                  (setf *system-health* :degraded)
+                  (format t "DAEMON: Health check found issues.~%")
+                  (format t "         Run 'passepartout doctor --fix' to repair.~%")))))
+        (setf *health-check-ran* t))
+    (error (c)
+      (format t "DOCTOR ERROR: ~a~%" c)
+      (setf *system-health* :unhealthy)
+      (setf *health-check-ran* t)))
+  (format t "==================================================~%~%"))
+#+end_src
+
+** Main Entry Point (main)
+
+The top-level entry point. Called by ~passepartout daemon~ and ~passepartout tui~.
+
+Boot sequence:
+1. Load environment variables from ~.config/passepartout/.env~
+2. Load persisted memory state from disk
+3. Register core actuators (:system, :tool, :tui)
+4. Initialize all skills (tangging .lisp or loading from XDG)
+5. Run the proactive health check
+6. Start the heartbeat thread (background maintenance)
+7. Start the TCP daemon (listens for CLI/TUI connections)
+8. Install the SIGINT handler (graceful shutdown on Ctrl+C)
+9. Enter the idle sleep loop (wakes on interrupt)
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun main ()
+  "Entry point for Passepartout. Initializes the system and enters idle loop."
+  (let* ((home (uiop:getenv "HOME"))
+         (env-file (uiop:merge-pathnames* ".config/passepartout/.env" (uiop:ensure-directory-pathname home))))
+    (when (uiop:file-exists-p env-file)
+      (cl-dotenv:load-env env-file)))
+
+  (load-memory-from-disk)
+  (actuator-initialize)
+  (skill-initialize-all)
+  
+  ;; Run proactive doctor before starting services
+  (diagnostics-startup-run)
+  
+  (heartbeat-start)
+  (start-daemon)
+
+  #+sbcl
+  (sb-sys:enable-interrupt sb-unix:sigint
+                            (lambda (sig code scp)
+                              (declare (ignore sig code scp))
+                              (log-message "SHUTDOWN: SIGINT received. Saving memory...")
+                              (when *shutdown-save-enabled* (save-memory-to-disk))
+                              (uiop:quit 0)))
+
+  (let ((sleep-interval (or (ignore-errors (parse-integer (uiop:getenv "DAEMON_SLEEP_INTERVAL"))) 3600)))
+    (loop
+      (when (bt:with-lock-held (*loop-interrupt-lock*) *interrupt-flag*)
+        (log-message "SHUTDOWN: Interrupt flag set. Saving memory...")
+        (when *shutdown-save-enabled* (save-memory-to-disk))
+        (return))
+      (sleep sleep-interval))))
+#+end_src
+
+* Test Suite
+Verifies that the immune system (error handling) correctly catches and reports errors from the cognitive pipeline.
+#+begin_src lisp :tangle ../lisp/core-loop.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-immune-system-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:immune-suite))
+
+(in-package :passepartout-immune-system-tests)
+
+(def-suite immune-suite :description "Verification of the Immune System (Core Error Hooks)")
+(in-suite immune-suite)
+
+(test loop-error-injection
+  "Verify that a crash in think/decide triggers a :loop-error stimulus."
+  (clrhash passepartout::*skills-registry*)
+  (passepartout:defskill :evil-skill
+    :priority 100
+    :trigger (lambda (ctx) (eq (getf (getf ctx :payload) :sensor) :user-input))
+    :probabilistic (lambda (ctx) (declare (ignore ctx)) (error "CRITICAL BRAIN FAILURE"))
+    :deterministic nil)
+  (passepartout:loop-process '(:type :EVENT :payload (:sensor :user-input)))
+  (let ((logs (passepartout:context-get-system-logs 20)))
+    (is (not (null (find-if (lambda (line) (search "CRITICAL BRAIN FAILURE" line)) logs))))))
+#+end_src

org/core-manifest.org

@@ -0,0 +1,72 @@
+#+TITLE: System Manifest (manifest.org)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:manifest:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../passepartout.asd
+
+* Overview: Architectural Intent
+
+The Manifest is the ASDF system definition for Passepartout. It defines what files belong to the harness, which external libraries are required, and how the test infrastructure is organized.
+
+The ~passepartout.asd~ file tangled from this manifest is what ~ql:quickload :passepartout~ reads to load the system. The files are loaded in the order listed here — dependencies first, then each pipeline stage in order.
+
+* Implementation
+
+** Main System
+
+The core system. The combined ~:depends-on~ list pulls in every external library the agent needs: networking (usocket, dexador, hunchentoot), concurrency (bordeaux-threads), utilities (uiop, cl-ppcre, cl-json, str), security (ironclad), and configuration (cl-dotenv, uuid).
+
+Components are loaded in sequence (~:serial t~): package first (defines the public API), then skills (does the defskill macro), then communication (defines the protocol), then memory (defines org-object), then context (defines peripheral vision), then each pipeline stage in order (perceive, reason, act), then doctor (diagnostics), then loop (orchestration).
+
+#+begin_src lisp
+(defsystem :passepartout
+  :name "Passepartout"
+  :author "Amr Gharbeia"
+  :version "0.3.0"
+  :license "AGPLv3"
+  :description "The Probabilistic-Deterministic Lisp Machine"
+  :depends-on (:usocket :bordeaux-threads :dexador :uiop :cl-dotenv :cl-ppcre :hunchentoot :ironclad :str :cl-json :uuid)
+  :serial t
+  :components ((:file "lisp/core-defpackage")
+               (:file "lisp/core-skills")
+               (:file "lisp/core-communication")
+               (:file "lisp/core-memory")
+               (:file "lisp/core-context")
+               (:file "lisp/core-loop-perceive")
+               (:file "lisp/core-loop-reason")
+               (:file "lisp/core-loop-act")
+               (:file "lisp/core-loop")))
+#+end_src
+
+** Test System
+
+The test system loads on top of ~opencortex~ and adds FiveAM (the test framework). Each test file is tangled from a ~:tangle ../tests/...~ block in the parent org file.
+
+Note: not every harness or skill file has a corresponding test file. Tests exist only for the parts of the system where deterministic verification is most critical — the pipeline stages, the loader, the memory Merkle tree, and the peripheral vision model.
+
+#+begin_src lisp
+(defsystem :passepartout/tests
+  :depends-on (:passepartout :fiveam)
+  :components ((:file "tests/pipeline-act-tests")
+               (:file "tests/boot-sequence-tests")
+               (:file "tests/communication-tests")
+               (:file "tests/immune-system-tests")
+               (:file "tests/memory-tests")
+               (:file "tests/pipeline-perceive-tests")
+               (:file "tests/pipeline-reason-tests")
+               (:file "tests/peripheral-vision-tests")
+               (:file "tests/tui-tests")
+               (:file "tests/utils-org-tests")
+               (:file "tests/utils-lisp-tests")
+               (:file "tests/llm-gateway-tests")))
+#+end_src
+
+** TUI System
+
+The TUI is a standalone system that depends on Croatoan (ncurses bindings) in addition to the core opencortex system. It's loaded separately because Croatoan requires a terminal and is not needed for daemon-mode operation.
+
+#+begin_src lisp
+(defsystem :passepartout/tui
+  :depends-on (:passepartout :croatoan :usocket :bordeaux-threads)
+  :components ((:file "lisp/gateway-tui")))
+#+end_src

org/core-memory.org

@@ -0,0 +1,368 @@
+#+TITLE: The System Memory (memory.lisp)
+#+AUTHOR: Agent
+#+FILETAGS: :harness:memory:
+#+STARTUP: content
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-memory.lisp
+
+* Overview: Architectural Intent
+
+The Memory module is the cognitive bedrock of Passepartout. It is not a database; it is the agent's live, active brain state. Every perception, every action, every decision is recorded here.
+
+Traditional architectures rely on external databases (SQLite, vector DBs, JSON files) which introduce I/O latency, structural impedance, and serialization overhead. Passepartout chooses a different path: the **Single Address Space**. By treating the entire knowledge base as a graph of Lisp pointers in RAM, we achieve microsecond recollection and total structural transparency.
+
+The memory system has three layers:
+1. **Active memory** (~*memory-store*~) — a hash table mapping IDs to ~memory-object~ instances. This is what the agent queries during reasoning.
+2. **Immutable history** (~*memory-history*~) — an append-only hash table keyed by SHA-256 Merkle hash. Every version of every object that has ever existed is preserved here.
+3. **Snapshot stack** (~*memory-snapshots*~) — point-in-time copies of active memory for rollback recovery. Up to 20 snapshots are retained.
+
+** Why Merkle Hashes?
+
+Every ~memory-object~ carries a ~hash~ field computed from its ID, type, attributes, content, and children. This hash is deterministic: the same data always produces the same hash.
+
+The hash serves three purposes:
+1. **Integrity verification** — detect corruption or tampering
+2. **Deduplication** — if an object already exists in history, we reuse the existing entry
+3. **Change detection** — compare hashes to find what changed between snapshots
+
+** Why Snapshots Instead of Git?
+
+Git tracks changes to files. Passepartout tracks changes to live memory state. The snapshot system captures the entire active memory at a point in time, enabling full rollback to any previous state. This is necessary because:
+
+1. The agent modifies memory continuously (learning, noting, deciding) — there's no discrete "commit" boundary
+2. Memory corruption from a bad LLM output can affect multiple objects — snapshot rollback restores all of them atomically
+3. Git can't snapshot the running Lisp image's hash tables
+
+The tradeoff is memory usage: each snapshot is a deep copy of every object in active memory. 20 snapshots means 20x the active memory size. For a typical knowledge base of 10,000 objects, this is manageable (~100MB for 20 snapshots).
+
+* Implementation
+
+** Package Context
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** The Object Store
+
+~*memory-store*~ holds the agent's current state. ~*memory-history*~ holds every past version, keyed by Merkle hash.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *memory-store* (make-hash-table :test 'equal))
+#+end_src
+** *memory-history*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *memory-history* (make-hash-table :test 'equal)
+  "Immutable Merkle-Tree versioning store mapping hashes to objects.")
+#+end_src
+#+end_src
+
+** Object Lookup (memory-object-get)
+
+Retrieve a single object by its ID from active memory. Returns nil if the ID doesn't exist.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun memory-object-get (id)
+  "Retrieves an memory-object by ID from *memory-store*."
+  (gethash id *memory-store*))
+#+end_src
+
+** Object Search by Attribute (memory-objects-by-attribute)
+
+Scan the entire active memory for objects whose attributes plist contains a specific key-value pair. For example, finding all objects with ~:TODO "APPROVED"~ (used by the Bouncer to find approved flight plans).
+
+This is a full scan — O(n) over all objects. For the typical knowledge base size (< 10,000 objects), this is microsecond-fast. For larger datasets, a proper index would be needed.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun memory-objects-by-attribute (attr value)
+  "Returns all memory-objects whose :ATTRIBUTES plist has ATTR = VALUE."
+  (let ((results nil))
+    (maphash (lambda (id obj)
+               (declare (ignore id))
+               (when (equal (getf (memory-object-attributes obj) attr) value)
+                 (push obj results)))
+             *memory-store*)
+    (nreverse results)))
+#+end_src
+
+** ID Generation (memory-id-generate)
+
+Generates a unique identifier string for a new Org node. Uses the universal time encoded in base-36 for compactness and monotonic ordering (later IDs sort after earlier ones).
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun memory-id-generate ()
+  "Generates a UUIDv4 unique ID. Compatible with Agora Note UUIDs."
+  (concatenate 'string "id-" (string-downcase (format nil "~a" (uuid:make-v4-uuid)))))
+#+end_src
+
+** The Data Structure (memory-object)
+
+The universal data unit. Every stored entity — a note, a task, a project, a person, a decision — is an ~memory-object~. The struct has:
+
+- ~id~ — unique identifier (string)
+- ~type~ — keyword (e.g., ~:HEADLINE~, ~:PROPERTY_DRAWER~)
+- ~attributes~ — property list (e.g., ~(:TITLE "My Note" :TAGS ("project") :TODO "NEXT")~)
+- ~content~ — raw text content
+- ~vector~ — optional embedding vector for semantic search
+- ~parent-id~ — ID of the parent object (for tree structure)
+- ~children~ — list of child IDs
+- ~version~ — Unix timestamp of last modification
+- ~last-sync~ — Unix timestamp of last sync to disk
+- ~hash~ — SHA-256 Merkle hash for integrity verification
+- ~scope~ — scope keyword (:memex/:session/:project) for context-aware retrieval
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defstruct memory-object
+  id type attributes content vector parent-id children version last-sync hash scope)
+#+end_src
+
+** Serialization Support
+
+Required by the Lisp runtime for saving/loading objects across image restarts via ~make-load-form-saving-slots~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defmethod make-load-form ((obj memory-object) &optional env)
+  (make-load-form-saving-slots obj :environment env))
+#+end_src
+
+** Deep Copy
+
+Creates an independent copy of an ~memory-object~, including fresh lists for attributes and children. Used by the snapshot system to capture a consistent memory state.
+
+Without deep copy, a snapshot would share structure with the live memory — mutating the live memory would also mutate the snapshot, defeating the purpose of having a recovery point.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun deep-copy-memory-object (obj)
+  "Creates a full copy of an memory-object, including fresh lists for attributes and children."
+  (make-memory-object :id (memory-object-id obj)
+                  :type (memory-object-type obj)
+                  :attributes (copy-list (memory-object-attributes obj))
+                  :content (memory-object-content obj)
+                  :vector (memory-object-vector obj)
+                  :parent-id (memory-object-parent-id obj)
+                  :children (copy-list (memory-object-children obj))
+                  :version (memory-object-version obj)
+                  :last-sync (memory-object-last-sync obj)
+                  :hash (memory-object-hash obj)
+                  :scope (memory-object-scope obj)))
+#+end_src
+
+** Merkle Tree Integrity (memory-merkle-hash)
+
+Computes a deterministic SHA-256 hash from an object's identity and contents. The hash covers:
+- The object's ID and type
+- All attributes (sorted by key name for determinism)
+- The raw content text
+- The hashes of all children (making the hash a true Merkle tree — changing a descendant changes this hash)
+
+This is NOT a cryptographic signature — it's an integrity check. If any part of an object or its descendants changes, the hash changes.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun memory-merkle-hash (id type attributes content child-hashes)
+  (let* ((alist (loop for (k v) on attributes by #'cddr collect (cons k v)))
+         (sorted-alist (sort alist #'string< :key (lambda (x) (format nil "~a" (car x)))))
+         (attr-string (format nil "~s" sorted-alist))
+         (children-string (format nil "~{~a~}" child-hashes))
+         (data-string (format nil "ID:~a|TYPE:~s|ATTRS:~a|CONTENT:~a|CHILDREN:~a"
+                               id type attr-string (or content "") children-string))
+         (digester (ironclad:make-digest :sha256)))
+    (ironclad:update-digest digester (ironclad:ascii-string-to-byte-array data-string))
+    (ironclad:byte-array-to-hex-string (ironclad:produce-digest digester))))
+#+end_src
+
+** AST Ingestion (memory-ingest)
+
+The primary entry point for adding data to memory. Given an Org-mode AST (a tree of plists representing headlines and their contents), it recursively:
+
+1. Generates or assigns an ID to each node
+2. Computes the Merkle hash of each node
+3. Checks if the hash already exists in ~*memory-history*~ (deduplication)
+4. Stores the node in ~*memory-store*~ and ~*memory-history*~
+5. Links children to parents
+
+Returns the ID of the root node.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun ingest-ast (ast &key parent-id (scope :memex))
+  (let* ((type (getf ast :type))
+         (props (getf ast :properties))
+         (id (or (getf props :ID) (format nil "temp-~a" (get-universal-time))))
+         (contents (getf ast :contents))
+         (raw-content (when (eq type :HEADLINE)
+                        (format nil "~a~%~a" (getf props :TITLE) (or (getf ast :raw-content) ""))))
+         (child-ids nil) (child-hashes nil))
+    (dolist (child contents)
+      (when (listp child)
+        (let ((child-id (ingest-ast child :parent-id id :scope scope)))
+          (push child-id child-ids)
+          (let ((child-obj (gethash child-id *memory-store*)))
+            (when child-obj (push (memory-object-hash child-obj) child-hashes))))))
+    (setf child-ids (nreverse child-ids))
+    (setf child-hashes (nreverse child-hashes))
+    (let* ((hash (memory-merkle-hash id type props raw-content child-hashes))
+           (existing-obj (gethash hash *memory-history*))
+           (obj (or existing-obj
+                    (make-memory-object 
+                     :id id :type type :attributes props :content raw-content
+                     :parent-id parent-id :children child-ids
+                     :version (get-universal-time) :last-sync (get-universal-time)
+                     :hash hash :scope scope))))
+      (unless existing-obj (setf (gethash hash *memory-history*) obj))
+      (setf (gethash id *memory-store*) obj)
+      id)))
+#+end_src
+
+** Snapshot History (~*memory-snapshots*~)
+
+A stack of CoW (copy-on-write) snapshots for rollback. When a critical error occurs, the system can roll back to any of the last 20 snapshots. Newer snapshots are prepended (index 0 = most recent).
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *memory-snapshots* nil)
+#+end_src
+
+** Hash Table Copy Utility
+
+Creates a fully independent copy of a hash table. Used by the rollback system to restore saved memory state from a snapshot.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun memory-hash-table-copy (hash-table)
+  "Creates an independent copy of a hash table."
+  (let ((new-table (make-hash-table :test (hash-table-test hash-table) 
+                                     :size (hash-table-size hash-table))))
+    (maphash (lambda (k v) (setf (gethash k new-table) v)) hash-table)
+    new-table))
+#+end_src
+
+** Memory Snapshot (memory-snapshot)
+
+Captures a point-in-time copy of ~*memory-store*~. Each object is deep-copied so the snapshot is independent of ongoing mutations. The snapshot is prepended to the snapshot stack, and the stack is trimmed to 20 entries.
+
+Called automatically before significant memory mutations (buffer updates from Emacs, AST ingestion). Also callable manually.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun snapshot-memory ()
+  "Creates a CoW snapshot of *memory-store* for rollback recovery."
+  (let ((snapshot (make-hash-table :test 'equal :size (hash-table-size *memory-store*))))
+    (maphash (lambda (k v) (setf (gethash k snapshot) (deep-copy-memory-object v))) *memory-store*)
+    (push (list :timestamp (get-universal-time) :data snapshot) *memory-snapshots*)
+    (when (> (length *memory-snapshots*) 20)
+      (setf *memory-snapshots* (subseq *memory-snapshots* 0 20)))
+    (log-message "MEMORY - CoW Memory snapshot created.")))
+#+end_src
+
+** Memory Rollback (memory-rollback)
+
+Restores ~*memory-store*~ to a previous snapshot. By default restores the most recent snapshot (index 0). Can specify a specific index to roll back further.
+
+This is the immune system's last resort. When the metabolic loop catches an unhandled error, it calls ~(rollback-memory 0)~ to undo any memory mutations caused by the bad signal.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun rollback-memory (&optional (index 0))
+  "Restores *memory-store* from a snapshot. INDEX 0 = most recent."
+  (let ((snapshot (nth index *memory-snapshots*)))
+    (if snapshot
+        (progn (setf *memory-store* (memory-hash-table-copy (getf snapshot :data)))
+               (log-message "MEMORY - Memory rolled back to snapshot ~a" index))
+        (log-message "MEMORY ERROR - Snapshot ~a not found." index))))
+#+end_src
+
+** Persistence — Snapshot Path (~*memory-snapshot-path*~)
+
+Configurable path for serialized memory state. Falls back to ~memory.snap~ in the home directory. Can be overridden via ~MEMORY_SNAPSHOT_PATH~ env var.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *memory-snapshot-path* nil)
+
+#+end_src
+** memory-snapshot-path-ensure
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun memory-snapshot-path-ensure ()
+  "Returns the path to the memory snapshot file, resolving env or default."
+  (or *memory-snapshot-path*
+      (let ((env-path (uiop:getenv "MEMORY_SNAPSHOT_PATH")))
+        (setf *memory-snapshot-path*
+              (or env-path (namestring (uiop:merge-pathnames* "memory.snap" (user-homedir-pathname))))))))
+#+end_src
+#+end_src
+
+** Save to Disk (memory-save)
+
+Serialises both ~*memory-store*~ and ~*memory-history*~ to a Lisp-readable file. The format is a plist with ~:memory~ and ~:history-store~ keys, each containing an alist of (key . object) pairs.
+
+The serialization uses ~prin1~, which produces human-readable Lisp output. The file can be read with ~read~ on restart.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun save-memory-to-disk ()
+  "Writes the entire memory and history store to disk as a plist."
+  (let ((path (memory-snapshot-path-ensure)))
+    (with-open-file (stream path :direction :output :if-exists :supersede :if-does-not-exist :create)
+      (let ((memory-alist nil) (history-alist nil))
+        (maphash (lambda (k v) (push (cons k v) memory-alist)) *memory-store*)
+        (maphash (lambda (k v) (push (cons k v) history-alist)) *memory-history*)
+        (prin1 (list :memory memory-alist :history-store history-alist) stream)))
+    (log-message "MEMORY - Saved to ~a" path)))
+#+end_src
+
+** Load from Disk (memory-load)
+
+Restores memory state from a previously saved snapshot file. Called during boot (~main~ in ~loop.org~). If no snapshot file exists, the function returns silently and the agent starts with empty memory.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun load-memory-from-disk ()
+  "Reads memory state from disk and restores *memory-store* and *memory-history*."
+  (let ((path (memory-snapshot-path-ensure)))
+    (when (uiop:file-exists-p path)
+      (handler-case
+          (with-open-file (stream path :direction :input)
+            (let ((data (read stream nil)))
+              (when data
+                (let ((memory-alist (getf data :memory)) (history-alist (getf data :history-store)))
+                  (setf *memory-store* (make-hash-table :test 'equal :size (length memory-alist)))
+                  (dolist (kv memory-alist) (setf (gethash (car kv) *memory-store*) (cdr kv)))
+                  (setf *memory-history* (make-hash-table :test 'equal :size (length history-alist)))
+                  (dolist (kv history-alist) (setf (gethash (car kv) *memory-history*) (cdr kv)))
+                  (log-message "MEMORY - Loaded from ~a (~a objects)" path (hash-table-size *memory-store*))))))
+          (error (c) (log-message "MEMORY WARNING - Failed to load snapshot: ~a" c)))))
+  t)
+#+end_src
+
+* Test Suite
+Verifies that the Merkle hash is deterministic and consistent across independent AST ingestions.
+#+begin_src lisp :tangle ../lisp/core-memory.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ql:quickload :fiveam :silent t))
+
+(defpackage :passepartout-memory-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:memory-suite))
+
+(in-package :passepartout-memory-tests)
+
+(def-suite memory-suite :description "Tests for the Merkle-Tree Memory")
+(in-suite memory-suite)
+
+(test merkle-hash-consistency
+  (let* ((ast1 '(:type :HEADLINE :properties (:ID "test-1" :TITLE "Node 1") :contents nil)))
+    (clrhash passepartout::*memory-store*)
+    (let ((id1 (ingest-ast ast1)))
+      (let ((hash1 (memory-object-hash (memory-object-get id1))))
+        (clrhash passepartout::*memory-store*)
+        (let ((id2 (ingest-ast ast1)))
+          (is (equal hash1 (memory-object-hash (memory-object-get id2)))))))))
+#+end_src

org/core-skills.org

@@ -1,35 +1,47 @@
 #+TITLE: The Skill Engine (skills.lisp)
 #+AUTHOR: Agent
-#+FILETAGS: :harness:skills:
+#+FILETAGS: :org:skills:
 #+STARTUP: content
-#+PROPERTY: header-args:lisp :tangle skills.lisp
+#+PROPERTY: header-args:lisp :tangle ../lisp/core-skills.lisp
 
-* Overview
-The Skill Engine is the dynamic loading and lifecycle manager for all OpenCortex skills. It discovers skill files in the skills directory, resolves their dependency order, loads them into jailed packages, exports their public symbols into the ~opencortex~ package, and provides the ~defskill~ macro that skills use to register themselves.
+* Overview: Architectural Intent
 
-Key concepts:
-- ~defskill~ — macro that registers a skill with its trigger, deterministic gate, and optional probabilistic prompt
-- ~def-cognitive-tool~ — macro that registers a tool the LLM can invoke
-- ~load-skill-from-org~ / ~load-skill-from-lisp~ — load a skill from a literate Org file or a pre-tangled Lisp file
-- ~topological-sort-skills~ — orders skills by their ~#+DEPENDS_ON:~ declarations
-- ~find-triggered-skill~ — returns the highest-priority skill whose trigger matches the current context
+The Skill Engine is the dynamic loading and lifecycle manager for all Passepartout skills. It discovers skill files in the skills directory, resolves their dependency order, loads them into jailed packages, and exports their public symbols into the ~passepartout~ package.
 
-The engine supports **hot-reload** — skills can be replaced at runtime without restarting the daemon.
+** Late-Binding Intelligence
+
+Hardcoding logic into a compiled binary creates a brittle kernel. Every time you add a capability, you must recompile, restart, and re-deploy. Skills solve this by being:
+
+1. **Discovered at boot** — the engine scans a directory for skill files and loads whatever it finds. No registration step needed.
+2. **Dependency-ordered** — skills declare dependencies via ~#+DEPENDS_ON:~ headers. The topological sort ensures they load in the right order.
+3. **Hot-reloadable** — a skill can be replaced at runtime without restarting the daemon. The new version is compiled into a fresh jail package and swapped in.
+4. **Self-documenting** — each skill is a single Org file containing prose, code, metadata, and tests. The "Why" and the "How" are unified.
+
+** The Jailed Package Model
+
+Every skill loads into its own package (e.g., ~PASSEPARTOUT.SKILLS.ORG-SKILL-BOUNCER~). This prevents name conflicts between skills — two skills can define a function called ~process~ without collision, because each lives in its own namespace.
+
+After loading, the engine exports the skill's public symbols into the ~passepartout~ package, making them available to other skills and the org. The export filter uses the skill's short name as a prefix — for example, the BOUNCER skill exports only symbols starting with ~BOUNCER-~.
+
+This is how the "thin org, fat skills" principle works in practice: the org provides the loading infrastructure; the skills provide all the intelligence.
 
 * Implementation
 
 ** Package Context
 #+begin_src lisp
-(in-package :opencortex)
+(in-package :passepartout)
 #+end_src
 
 ** Utility functions
+
 Helper functions used by the skill loader and other components.
 
 *** Cosine similarity
-Computes the cosine similarity between two numeric vectors. Used by the peripheral vision system for semantic relevance scoring.
+
+Computes the cosine similarity between two numeric vectors. Used by the peripheral vision system for semantic relevance scoring — if the agent's current focus has a vector embedding, objects with similar embeddings get promoted to foveal detail.
+
 #+begin_src lisp
-(defun COSINE-SIMILARITY (v1 v2)
+(defun vector-cosine-similarity (v1 v2)
   "Computes cosine similarity between two vectors."
   (let* ((len1 (length v1)) (len2 (length v2)))
     (if (or (zerop len1) (zerop len2))
@@ -42,20 +54,24 @@ Computes the cosine similarity between two numeric vectors. Used by the peripher
 #+end_src
 
 *** Secret masking
-Simple mask function and the vault memory hash table. Used by the Bouncer skill and credentials vault.
+
+Simple mask function and the vault memory hash table. Used by the Bouncer skill and credentials vault to prevent secrets from appearing in logs.
+
 #+begin_src lisp
 (defun VAULT-MASK-STRING (s) (declare (ignore s)) "[MASKED]")
 (defvar *VAULT-MEMORY* (make-hash-table :test 'equal))
 #+end_src
 
 ** Skill data structures
+
 The ~skill~ struct holds all metadata about a loaded skill: its name, priority, dependencies, trigger function, probabilistic prompt generator, deterministic gate, and system prompt augmentor. The ~skill-entry~ struct tracks the loading state of each discovered skill file.
+
 #+begin_src lisp
 (defstruct skill name priority dependencies trigger-fn probabilistic-prompt deterministic-fn system-prompt-augment)
 #+end_src
 
 #+begin_src lisp
-(defvar *skills-registry* (make-hash-table :test 'equal))
+(defvar *skill-registry* (make-hash-table :test 'equal))
 #+end_src
 
 #+begin_src lisp
@@ -67,10 +83,18 @@ The ~skill~ struct holds all metadata about a loaded skill: its name, priority,
 (defstruct skill-entry filename (status :discovered) error-log (load-time 0))
 #+end_src
 
-** Skill discovery (find-triggered-skill)
-Iterates the registry and returns the highest-priority skill whose trigger function matches the current context. Only skills with a probabilistic prompt are considered (skills that are purely deterministic don't need LLM intervention).
+** Skill discovery (skill-triggered-find)
+
+Iterates the registry and returns the highest-priority skill whose trigger function matches the current context. Only skills with a probabilistic prompt are considered (purely deterministic skills don't need LLM attention).
+
+This is how the system determines which skill "owns" the current user input. For example, if the REPL skill's trigger matches the input, the REPL skill provides the prompt template that shapes how the LLM responds.
+
 #+begin_src lisp
+;; Alias: find-triggered-skill → skill-triggered-find
 (defun find-triggered-skill (context)
+  (skill-triggered-find context))
+
+(defun skill-triggered-find (context)
   "Returns the highest priority skill whose trigger matches context."
   (let ((triggered nil))
     (maphash (lambda (name skill) 
@@ -78,16 +102,20 @@ Iterates the registry and returns the highest-priority skill whose trigger funct
                (when (and (skill-probabilistic-prompt skill)
                           (ignore-errors (funcall (skill-trigger-fn skill) context)))
                  (push skill triggered))) 
-              *skills-registry*)
+               *skill-registry*)
     (first (sort triggered #'> :key #'skill-priority))))
 #+end_src
 
 ** Skill registration macro (defskill)
-The primary API for skills. Each skill file calls this once to register itself. The macro creates a ~skill~ struct and stores it in ~*skills-registry*~ keyed by the skill's name.
+
+The primary API for skills. Each skill file calls this once to register itself. The macro creates a ~skill~ struct and stores it in ~*skill-registry*~ keyed by the skill's name.
+
+The ~:system-prompt-augment~ slot is optional. If provided, it's a function that receives the context and returns a string to append to the LLM's system prompt. This allows skills to inject domain-specific instructions into every reasoning cycle.
+
 #+begin_src lisp
 (defmacro defskill (name &key priority dependencies trigger probabilistic deterministic system-prompt-augment)
   "Registers a new skill. NAME is a keyword. TRIGGER is a function (context) → bool."
-  `(setf (gethash (string-downcase (string ,name)) *skills-registry*)
+  `(setf (gethash (string-downcase (string ,name)) *skill-registry*)
          (make-skill :name (string-downcase (string ,name)) 
                     :priority (or ,priority 10) 
                     :dependencies ',dependencies
@@ -97,16 +125,18 @@ The primary API for skills. Each skill file calls this once to register itself.
                     :system-prompt-augment ,system-prompt-augment)))
 #+end_src
 
-** Dependency resolution (resolve-skill-dependencies)
-Recursively resolves all transitive dependencies for a given skill, returning an ordered list. Uses a standard topological sort with cycle detection (a ~seen~ set prevents infinite recursion).
+** Dependency resolution (skill-dependencies-resolve)
+
+Recursively resolves all transitive dependencies for a given skill, returning an ordered list. Uses a standard graph traversal with a ~seen~ set to prevent infinite recursion from circular dependencies.
+
 #+begin_src lisp
-(defun resolve-skill-dependencies (skill-name)
+(defun skill-dependencies-resolve (skill-name)
   "Resolves transitive dependencies. Returns list of skill names in dependency order."
   (let ((resolved nil) (seen nil))
     (labels ((visit (name) 
                (unless (member name seen :test #'equal) 
                  (push name seen)
-                 (let ((skill (gethash (string-downcase (string name)) *skills-registry*)))
+                 (let ((skill (gethash (string-downcase (string name)) *skill-registry*)))
                    (when skill 
                      (dolist (dep (skill-dependencies skill)) (visit dep))))
                  (push name resolved))))
@@ -114,9 +144,12 @@ Recursively resolves all transitive dependencies for a given skill, returning an
       (nreverse resolved))))
 #+end_src
 
-** Skill File Analysis (parse-skill-metadata)
+** Skill File Analysis (skill-metadata-parse)
+
+Extracts the ~:ID~ and ~#+DEPENDS_ON:~ declarations from a skill's Org file. Used by the topological sorter to order skills correctly.
+
 #+begin_src lisp
-(defun parse-skill-metadata (filepath)
+(defun skill-metadata-parse (filepath)
   "Extracts ID and DEPENDS_ON tags from org file."
   (let ((dependencies nil) (id nil) (content (uiop:read-file-string filepath)))
     (let ((id-start (search ":ID:" content)))
@@ -134,13 +167,36 @@ Recursively resolves all transitive dependencies for a given skill, returning an
     (values id (reverse dependencies))))
 #+end_src
 
-** Dependency Resolution (topological-sort-skills)
+** Dependency Resolution (skill-topological-sort)
+
+Returns a list of skill filepaths sorted by dependency order. Uses Kahn's algorithm: collect all files, build an adjacency graph from ~#+DEPENDS_ON:~ declarations, and topologically sort them. Skills with no dependencies are sorted alphabetically.
+
+Both ~.org~ and ~.lisp~ files are included. For each skill, the ~.org~ file supplies the dependency metadata; if a ~.lisp~ file exists, it's loaded instead of tangling from the ~.org~ at load time.
+
 #+begin_src lisp
-(defun topological-sort-skills (skills-dir)
+(defun skill-topological-sort (skills-dir)
   "Returns a list of skill filepaths sorted by dependency."
-  (let* ((org-files (uiop:directory-files skills-dir "org-skill-*.org"))
-         (lisp-files (uiop:directory-files skills-dir "org-skill-*.lisp"))
-         (files (append org-files lisp-files))
+  (let* ((org-files (uiop:directory-files skills-dir "*.org"))
+         (lisp-files (uiop:directory-files skills-dir "*.lisp"))
+         (all-files (append org-files lisp-files))
+         (files (remove-if (lambda (f)
+                             (let ((n (pathname-name f)))
+                                (or (string= n "core-defpackage")
+                                    (string= n "core-skills")
+                                    (string= n "core-communication")
+                                    (string= n "core-memory")
+                                    (string= n "core-context")
+                                    (string= n "core-loop-perceive")
+                                    (string= n "core-loop-reason")
+                                    (string= n "core-loop-act")
+                                    (string= n "core-loop")
+                                    (string= n "core-manifest")
+                                    (string= n "security-dispatcher")
+                                    (string= n "system-model-router")
+                                    (string= n "system-model-embedding")
+                                    (string= n "system-model-explorer")
+                                    (string= n "gateway-tui"))))
+                           all-files))
         (adj (make-hash-table :test 'equal))
         (name-to-file (make-hash-table :test 'equal))
         (id-to-file (make-hash-table :test 'equal))
@@ -152,10 +208,9 @@ Recursively resolves all transitive dependencies for a given skill, returning an
         (if (uiop:string-suffix-p (namestring file) ".lisp")
             (progn
               (setf (gethash (string-downcase filename) name-to-file) file)
-              ;; Don't overwrite dependency info from .org files
               (unless (gethash (string-downcase filename) adj)
                 (setf (gethash (string-downcase filename) adj) nil)))
-            (multiple-value-bind (id deps) (parse-skill-metadata file)
+            (multiple-value-bind (id deps) (skill-metadata-parse file)
               (setf (gethash (string-downcase filename) name-to-file) file)
               (when id (setf (gethash (string-downcase id) id-to-file) file))
               (setf (gethash (string-downcase filename) adj) deps)))))
@@ -186,9 +241,20 @@ Recursively resolves all transitive dependencies for a given skill, returning an
       (nreverse result))))
 #+end_src
 
-** Jailed Loading (load-skill-from-org)
+** Jailed Loading (skill-load-from-org)
+
+The primary skill loader. Given a path to an ~.org~ file:
+
+1. Reads the Org file and collects all ~#+begin_src lisp~ blocks (excluding test blocks and blocks with ~:tangle no~)
+2. Validates the Lisp syntax before loading
+3. Creates a jailed package named after the skill (e.g., ~PASSEPARTOUT.SKILLS.ORG-SKILL-BOUNCER~) with ~:use :passepartout~
+4. Evaluates the collected Lisp forms in that package
+5. Scans the package for symbols matching the skill's name prefix and exports them to the ~passepartout~ package
+
+The validation step is critical: invalid Lisp in an org block would crash the loader. The validator uses ~read~ with ~*read-eval*~ bound to nil to safely detect syntax errors without evaluating.
+
 #+begin_src lisp
-(defun validate-lisp-syntax (code-string)
+(defun lisp-syntax-validate (code-string)
   "Checks if a string contains valid Common Lisp forms."
   (handler-case
       (let ((*read-eval* nil))
@@ -197,7 +263,7 @@ Recursively resolves all transitive dependencies for a given skill, returning an
         (values t nil))
     (error (c) (values nil (format nil "~a" c)))))
 
-(defun remove-in-package-forms (code-string)
+(defun skill-package-forms-strip (code-string)
   "Removes in-package forms so symbols get defined in skill package."
   (let ((lines (uiop:split-string code-string :separator '(#\Newline)))
         (result ""))
@@ -207,11 +273,11 @@ Recursively resolves all transitive dependencies for a given skill, returning an
           (setf result (concatenate 'string result line (string #\Newline))))))
     result))
 
-(defun extract-tangle-target (line)
+(defun tangle-target-extract (line)
   "Extracts the value of the :tangle header."
   (let ((pos (search ":tangle" line)))
     (when pos
-      (let ((rest (string-trim '(#\Space #\Tab) (subseq line (+ pos 7)))))
+      (let ((rest (string-tirm '(#\Space #\Tab) (subseq line (+ pos 7)))))
         (let ((end (position #\Space rest)))
           (if end (subseq rest 0 end) rest))))))
 
@@ -224,15 +290,13 @@ Recursively resolves all transitive dependencies for a given skill, returning an
         (let* ((content (uiop:read-file-string filepath))
                (lines (uiop:split-string content :separator '(#\Newline)))
                (in-lisp-block nil) (collect-this-block nil) (lisp-code "")
-               (pkg-name (intern (string-upcase (format nil "OPENCORTEX.SKILLS.~a" skill-base-name)) :keyword)))
+               (pkg-name (intern (string-upcase (format nil "PASSEPARTOUT.SKILLS.~a" skill-base-name)) :keyword)))
           (dolist (line lines)
             (let ((clean-line (string-trim '(#\Space #\Tab #\Return) line)))
               (cond
                 ((uiop:string-prefix-p "#+begin_src lisp" clean-line)
                  (setf in-lisp-block t)
-                 (let ((target (extract-tangle-target clean-line)))
-                   ;; Collect if there's no tangle target (inherits from file)
-                   ;; or if it's a lisp file and NOT a test.
+                 (let ((target (tangle-target-extract clean-line)))
                    (setf collect-this-block (or (null target)
                                                 (and (not (search "no" target))
                                                      (not (search "/tests" target)))))))
@@ -240,132 +304,135 @@ Recursively resolves all transitive dependencies for a given skill, returning an
                  (setf in-lisp-block nil) (setf collect-this-block nil))
                 ((and in-lisp-block collect-this-block)
                  (unless (or (uiop:string-prefix-p ":PROPERTIES:" (string-upcase clean-line))
-                             (uiop:string-prefix-p ":END:" (string-upcase clean-line))
-                             (uiop:string-prefix-p ":ID:" (string-upcase clean-line)))
+                              (uiop:string-prefix-p ":END:" (string-upcase clean-line))
+                              (uiop:string-prefix-p ":ID:" (string-upcase clean-line)))
                    (setf lisp-code (concatenate 'string lisp-code line (string #\Newline))))))))
           (if (= (length lisp-code) 0)
               (setf (skill-entry-status entry) :ready)
               (progn
-                (multiple-value-bind (valid-p err) (validate-lisp-syntax lisp-code)
+                (multiple-value-bind (valid-p err) (lisp-syntax-validate lisp-code)
                   (unless valid-p (error err)))
                 (unless (find-package pkg-name)
-                  (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :opencortex new-pkg)))
+                  (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :passepartout new-pkg)))
                 (let ((*read-eval* nil) (*package* (find-package pkg-name)))
-                  (harness-log "LOADER: Evaluating code for '~a' in package ~a" skill-base-name (package-name *package*))
+                  (log-message "LOADER: Evaluating code for '~a' in package ~a" skill-base-name (package-name *package*))
                   (eval (read-from-string (format nil "(progn ~a)" lisp-code))))
 
-                ;; Export symbols back to :OPENCORTEX for discoverability and testing
-                (let* ((target-pkg (find-package :opencortex))
-                       (raw-name (string-upcase skill-base-name))
-                       (short-name (if (uiop:string-prefix-p "ORG-SKILL-" raw-name)
-                                       (subseq raw-name 10)
-                                       raw-name)))
-                  (harness-log "LOADER: Scanning package ~a for symbols to export..." (package-name (find-package pkg-name)))
+                (let ((target-pkg (find-package :passepartout))
+                      (exported 0)
+                      (seen (make-hash-table :test 'equal)))
                   (do-symbols (sym (find-package pkg-name))
-                    (when (eq (symbol-package sym) (find-package pkg-name))
-                      (let ((sn (symbol-name sym)))
-                        (when (or (uiop:string-prefix-p raw-name sn)
-                                  (uiop:string-prefix-p short-name sn)
-                                  (string-equal sn "DOCTOR-MAIN")
-                                  (string-equal sn "RUN-SETUP-WIZARD"))
-                          (harness-log "LOADER: Exporting ~a to :OPENCORTEX" sn)
-                          ;; Resolve potential name conflicts by uninterning first
-                          (let ((existing (find-symbol sn target-pkg)))
-                            (when (and existing (not (eq existing sym)))
-                              (unintern existing target-pkg)))
-                          (import sym target-pkg)
-                          (export sym target-pkg))))))
+                    (when (and (eq (symbol-package sym) (find-package pkg-name))
+                               (or (fboundp sym) (boundp sym))
+                               (not (gethash (symbol-name sym) seen)))
+                      (setf (gethash (symbol-name sym) seen) t)
+                      (incf exported)
+                      (let ((existing (find-symbol (symbol-name sym) target-pkg)))
+                        (when existing (unintern existing target-pkg)))
+                      (import sym target-pkg)
+                      (export sym target-pkg)))
+                  (log-message "LOADER: Exported ~a symbols from ~a to :PASSEPARTOUT"
+                               exported (package-name (find-package pkg-name))))
 
                 (setf (skill-entry-status entry) :ready)))
           t)
       (error (c)
-        (harness-log "LOADER ERROR in skill '~a': ~a" skill-base-name c)
+        (log-message "LOADER ERROR in skill '~a': ~a" skill-base-name c)
         (setf (skill-entry-status entry) :failed) nil))))
+#+end_src
 
+** Loading from Pre-Tangled Lisp (skill-load-from-lisp)
+
+Loads a pre-tangled ~.lisp~ file directly, without parsing the Org source. This is faster than ~load-skill-from-org~ because it skips the block extraction and syntax validation (the Lisp was already validated when tangled).
+
+The same jailed package and symbol export process applies.
+
+#+begin_src lisp
 (defun load-skill-from-lisp (filepath)
   "Loads a .lisp skill file directly, filtering out in-package forms."
   (let* ((skill-base-name (pathname-name filepath))
          (entry (or (gethash skill-base-name *skill-catalog*) (setf (gethash skill-base-name *skill-catalog*) (make-skill-entry :filename skill-base-name)))))
     (setf (skill-entry-status entry) :loading)
     (handler-case
-        (let* ((content (remove-in-package-forms (uiop:read-file-string filepath)))
-               (pkg-name (intern (string-upcase (format nil "OPENCORTEX.SKILLS.~a" skill-base-name)) :keyword)))
-          (multiple-value-bind (valid-p err) (validate-lisp-syntax content)
+        (let* ((content (skill-package-forms-strip (uiop:read-file-string filepath)))
+               (pkg-name (intern (string-upcase (format nil "PASSEPARTOUT.SKILLS.~a" skill-base-name)) :keyword)))
+          (multiple-value-bind (valid-p err) (lisp-syntax-validate content)
             (unless valid-p (error err)))
           (unless (find-package pkg-name)
-            (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :opencortex new-pkg)))
+            (let ((new-pkg (make-package pkg-name :use '(:cl)))) (use-package :passepartout new-pkg)))
           (let ((*read-eval* nil) (*package* (find-package pkg-name)))
-            (harness-log "LOADER: Loading .lisp skill '~a' in package ~a" skill-base-name (package-name *package*))
-            ;; Evaluate forms individually so one bad form doesn't abort the entire skill
+            (log-message "LOADER: Loading .lisp skill '~a' in package ~a" skill-base-name (package-name *package*))
             (with-input-from-string (s content)
               (loop for form = (read s nil :eof) until (eq form :eof)
                     do (handler-case (eval form)
-                         (error (c) (harness-log "LOADER WARNING in '~a': ~a" skill-base-name c))))))
-          ;; Export symbols
-          (let* ((target-pkg (find-package :opencortex))
-                 (raw-name (string-upcase skill-base-name))
-                 (short-name (if (uiop:string-prefix-p "ORG-SKILL-" raw-name)
-                                 (subseq raw-name 10)
-                                 raw-name)))
-            (harness-log "LOADER: Scanning package ~a for symbols to export..." (package-name (find-package pkg-name)))
+                         (error (c) (log-message "LOADER WARNING in '~a': ~a" skill-base-name c))))))
+          (let ((target-pkg (find-package :passepartout))
+                (exported 0)
+                (seen (make-hash-table :test 'equal)))
             (do-symbols (sym (find-package pkg-name))
-              (when (eq (symbol-package sym) (find-package pkg-name))
-                (let ((sn (symbol-name sym)))
-                  (when (or (uiop:string-prefix-p raw-name sn)
-                            (uiop:string-prefix-p short-name sn)
-                            (string-equal sn "DOCTOR-MAIN")
-                            (string-equal sn "RUN-SETUP-WIZARD"))
-                    (harness-log "LOADER: Exporting ~a to :OPENCORTEX" sn)
-                    (let ((existing (find-symbol sn target-pkg)))
-                      (when (and existing (not (eq existing sym)))
-                        (unintern existing target-pkg)))
-                    (import sym target-pkg)
-                    (export sym target-pkg))))))
+              (when (and (eq (symbol-package sym) (find-package pkg-name))
+                         (or (fboundp sym) (boundp sym))
+                         (not (gethash (symbol-name sym) seen)))
+                (setf (gethash (symbol-name sym) seen) t)
+                (incf exported)
+                (let ((existing (find-symbol (symbol-name sym) target-pkg)))
+                  (when existing (unintern existing target-pkg)))
+                (import sym target-pkg)
+                (ignore-errors (export sym target-pkg))))
+            (log-message "LOADER: Exported ~a symbols from ~a to :PASSEPARTOUT"
+                         exported (package-name (find-package pkg-name))))
           (setf (skill-entry-status entry) :ready))
       (error (c)
-        (harness-log "LOADER ERROR in skill '~a': ~a" skill-base-name c)
+        (log-message "LOADER ERROR in skill '~a': ~a" skill-base-name c)
         (setf (skill-entry-status entry) :failed) nil))))
 #+end_src
 
-** Initialize (initialize-all-skills)
+** Initialize (skill-initialize-all)
+
+Boot-time entry point. Scans the skills directory, topologically sorts the files, and loads each one. Called from ~main~ in the metabolic loop and from the REPL for hot-reload.
+
+Skills are loaded from ~$PASSEPARTOUT_DATA_DIR/lisp/~ where both core and skill
+files live after tangling. The org source files live in ~org/~.
+
 #+begin_src lisp
-(defun initialize-all-skills ()
-  "Initializes all skills from the XDG skills directory."
-  (let* ((data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "OC_DATA_DIR") (namestring (merge-pathnames ".local/share/opencortex/" (user-homedir-pathname))))))
-         (skills-dir (merge-pathnames "skills/" data-dir)))
-    (unless (uiop:directory-exists-p skills-dir) (return-from initialize-all-skills nil))
-    (let ((sorted-files (topological-sort-skills skills-dir)))
-      (harness-log "LOADER: Initializing ~a skills..." (length sorted-files))
+(defun skill-initialize-all ()
+  "Initializes all skills from the XDG data directory."
+  (let* ((data-dir (uiop:ensure-directory-pathname (or (uiop:getenv "PASSEPARTOUT_DATA_DIR") (namestring (merge-pathnames ".local/share/passepartout/" (user-homedir-pathname))))))
+         (skills-dir (merge-pathnames "lisp/" (uiop:ensure-directory-pathname data-dir))))
+    (unless (uiop:directory-exists-p skills-dir) (return-from skill-initialize-all nil))
+    (let ((sorted-files (skill-topological-sort skills-dir)))
+      (log-message "LOADER: Initializing ~a skills..." (length sorted-files))
       (dolist (file sorted-files)
         (if (uiop:string-suffix-p (namestring file) ".lisp")
             (load-skill-from-lisp file)
             (load-skill-from-org file)))
-      (harness-log "LOADER: Boot Complete."))))
+      (log-message "LOADER: Boot Complete."))))
 #+end_src
 
 * Test Suite
+Verifies that the topological sorter correctly orders skills by their ~#+DEPENDS_ON:~ declarations.
 #+begin_src lisp :tangle ../tests/boot-sequence-tests.lisp
 (eval-when (:compile-toplevel :load-toplevel :execute)
   (ql:quickload :fiveam :silent t))
 
-(defpackage :opencortex-boot-tests
-  (:use :cl :fiveam :opencortex)
+(defpackage :passepartout-boot-tests
+  (:use :cl :fiveam :passepartout)
   (:export #:boot-suite))
 
-(in-package :opencortex-boot-tests)
+(in-package :passepartout-boot-tests)
 
 (def-suite boot-suite :description "Verification of the Skill Engine loader")
 (in-suite boot-suite)
 
 (test test-topological-sort-basic
-  (let ((tmp-dir "/tmp/opencortex-boot-test/"))
+  (let ((tmp-dir "/tmp/passepartout-boot-test/"))
     (uiop:ensure-all-directories-exist (list tmp-dir))
     (with-open-file (out (merge-pathnames "org-skill-a.org" tmp-dir) :direction :output :if-exists :supersede)
       (format out "#+DEPENDS_ON: skill-b-id~%"))
     (with-open-file (out (merge-pathnames "org-skill-b.org" tmp-dir) :direction :output :if-exists :supersede)
       (format out ":PROPERTIES:~%:ID: skill-b-id~%:END:~%"))
     (unwind-protect
-         (let ((sorted (opencortex::topological-sort-skills tmp-dir)))
+         (let ((sorted (passepartout::skill-topological-sort tmp-dir)))
            (let ((pos-a (position "org-skill-a" sorted :key #'pathname-name :test #'string-equal))
                  (pos-b (position "org-skill-b" sorted :key #'pathname-name :test #'string-equal)))
              (is (< pos-b pos-a))))

org/gateway-cli.org

@@ -1,16 +1,17 @@
 #+TITLE: SKILL: CLI Gateway (org-skill-cli-gateway.org)
 #+AUTHOR: Agent
 #+FILETAGS: :skill:gateway:cli:
-#+PROPERTY: header-args:lisp :tangle org-skill-cli-gateway.lisp
+#+PROPERTY: header-args:lisp :tangle ../lisp/gateway-cli.lisp
 
 * Overview
-The *CLI Gateway* provides a command-line interface for interacting with the OpenCortex daemon.
+The CLI Gateway is the simplest interface to Passepartout — raw stdin/stdout over TCP. It connects to the daemon's framed protocol and translates between terminal input/output and the plist-based communication format. No TUI, no ncurses, no dependencies beyond a TCP socket. Every other gateway (TUI, Emacs, Telegram) builds on this same protocol.
 
 * Implementation
 
 ** CLI Command Handling
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun cli-process-input (text)
+(defun gateway-cli-input (text)
   "Processes raw text from the command line."
   (inject-stimulus (list :type :EVENT 
                          :payload (list :sensor :user-input :text text) 
@@ -19,7 +20,7 @@ The *CLI Gateway* provides a command-line interface for interacting with the Ope
 
 ** Skill Registration
 #+begin_src lisp
-(defskill :skill-cli-gateway
+(defskill :passepartout-gateway-cli
   :priority 100
   :trigger (lambda (ctx) (eq (getf (getf ctx :meta) :source) :CLI))
   :deterministic (lambda (action ctx) (declare (ignore ctx)) action))

org/gateway-messaging.org

@@ -1,28 +1,36 @@
-#+TITLE: SKILL: Gateway Manager (org-skill-gateway-manager.org)
+#+TITLE: SKILL: Gateway Messaging (org-skill-gateway-messaging.org)
 #+AUTHOR: Agent
-#+FILETAGS: :skill:gateway:manager:
-#+PROPERTY: header-args:lisp :tangle org-skill-gateway-manager.lisp
+#+FILETAGS: :skill:gateway:messaging:
+#+PROPERTY: header-args:lisp :tangle ../lisp/gateway-messaging.lisp
 
-* Overview
-The *Gateway Manager* is a unified skill that handles all external communication platforms (Telegram, Signal, etc.). It provides a single consolidated handler for polling, injection, and actuation across any number of gateways.
+* Architectural Intent
+
+~gateway-messaging~ bridges Passepartout to external messaging platforms — Telegram, Signal, and any future service that speaks HTTP or has a CLI.
+
+Each gateway follows the same pattern:
+1. **Registration** — a poll function and a send function are registered in ~*gateway-registry*~ by name ("telegram", "signal")
+2. **Linking** — the user provides a token (Telegram bot token) or account name (Signal CLI); it's stored in the vault and a polling thread starts
+3. **Polling** — the background thread calls the poll function every N seconds; inbound messages are injected into the daemon as ~:EVENT~ signals via ~stimulus-inject~
+4. **Sending** — when ~telegram-send~ or ~signal-send~ is invoked as an actuator (registered via ~register-actuator~), it formats the message and pushes it through the platform's API
+
+The gateway management functions (~messaging-link~, ~messaging-unlink~, ~messaging-list~, ~messaging-list-print~) are what the CLI's =passepartout gateway= subcommand calls. The old ~gateway-manager~ skill had ~gateway-link~/~gateway-unlink~/~gateway-list~ printed with the same signatures; the rename to ~messaging-*~ aligns the public API with the skill name while keeping the internal engine functions (~gateway-start~, ~gateway-stop~) as-is since they're implementation details.
+
+This replaces the old ~gateway-manager~ skill. The Telegram/Signal platform code is unchanged; only the management entry points and the defskill name changed.
 
 * Implementation
 
-** Platform state — configs
-Storage for active gateway connections: tokens, polling threads, and intervals.
+** Data
 #+begin_src lisp
+(in-package :passepartout)
+
 (defvar *gateway-configs* (make-hash-table :test 'equal)
-  "Maps platform name → plist (:token :thread :interval :enabled)")
-#+end_src
+  "Maps platform name to plist (:token :thread :interval :enabled)")
 
-** Platform state — registry
-Registration of available gateway implementations: each platform registers its poll and send functions here.
-#+begin_src lisp
 (defvar *gateway-registry* (make-hash-table :test 'equal)
-  "Maps platform name → plist (:poll-fn :send-fn :default-interval)")
+  "Maps platform name to plist (:poll-fn :send-fn :default-interval)")
 #+end_src
 
-** Telegram Implementation
+** Telegram
 #+begin_src lisp
 (defun telegram-get-token ()
   (vault-get-secret :telegram))
@@ -46,12 +54,13 @@ Registration of available gateway implementations: each platform registers its p
                        (text (cdr (assoc :text message))))
                   (setf (getf (gethash "telegram" *gateway-configs*) :last-update-id) update-id)
                   (when (and text chat-id)
-                    (harness-log "TELEGRAM: Received message from ~a" chat-id)
-                    (inject-stimulus
-                     (list :type :EVENT
-                           :meta (list :source :telegram :chat-id (format nil "~a" chat-id))
-                           :payload (list :sensor :user-input :text text)))))))
-          (error (c) (harness-log "TELEGRAM POLL ERROR: ~a" c))))))
+                    (log-message "TELEGRAM: Received message from ~a" chat-id)
+                    (unless (ignore-errors (hitl-handle-message text :telegram))
+                      (stimulus-inject
+                       (list :type :EVENT
+                             :meta (list :source :telegram :chat-id (format nil "~a" chat-id))
+                             :payload (list :sensor :user-input :text text))))))))
+          (error (c) (log-message "TELEGRAM POLL ERROR: ~a" c)))))))
 
 (defun telegram-send (action context)
   "Sends a message via Telegram."
@@ -62,17 +71,16 @@ Registration of available gateway implementations: each platform registers its p
          (text (or (getf payload :text) (getf action :text)))
          (token (telegram-get-token)))
     (when (and token chat-id text)
-      (harness-log "TELEGRAM: Sending message to ~a..." chat-id)
       (handler-case
           (let ((url (format nil "https://api.telegram.org/bot~a/sendMessage" token)))
             (dex:post url
                       :headers '(("Content-Type" . "application/json"))
                       :content (cl-json:encode-json-to-string
                                 `((chat_id . ,chat-id) (text . ,text)))))
-        (error (c) (harness-log "TELEGRAM ERROR: ~a" c))))))
+        (error (c) (log-message "TELEGRAM ERROR: ~a" c))))))
 #+end_src
 
-** Signal Implementation
+** Signal
 #+begin_src lisp
 (defun signal-get-account ()
   (vault-get-secret :signal))
@@ -84,7 +92,7 @@ Registration of available gateway implementations: each platform registers its p
       (handler-case
           (let* ((output (uiop:run-program (list "signal-cli" "-u" account "receive" "--json")
                                             :output :string :error-output :string :ignore-error-status t))
-                 (lines (cl-ppcre:split "\\n" output)))
+                 (lines (cl-ppcre:split "\\\\n" output)))
             (dolist (line lines)
               (when (and line (> (length line) 0))
                 (let* ((json (ignore-errors (cl-json:decode-json-from-string line)))
@@ -93,12 +101,13 @@ Registration of available gateway implementations: each platform registers its p
                        (data-message (cdr (assoc :data-message envelope)))
                        (text (cdr (assoc :message data-message))))
                   (when (and source text)
-                    (harness-log "SIGNAL: Received message from ~a" source)
-                    (inject-stimulus
-                     (list :type :EVENT
-                           :meta (list :source :signal :chat-id source)
-                           :payload (list :sensor :user-input :text text))))))))
-        (error (c) (harness-log "SIGNAL POLL ERROR: ~a" c))))))
+                    (log-message "SIGNAL: Received message from ~a" source)
+                    (unless (ignore-errors (hitl-handle-message text :signal))
+                      (stimulus-inject
+                       (list :type :EVENT
+                             :meta (list :source :signal :chat-id source)
+                             :payload (list :sensor :user-input :text text)))))))))
+        (error (c) (log-message "SIGNAL POLL ERROR: ~a" c))))))
 
 (defun signal-send (action context)
   "Sends a message via Signal."
@@ -109,16 +118,15 @@ Registration of available gateway implementations: each platform registers its p
          (text (or (getf payload :text) (getf action :text)))
          (account (signal-get-account)))
     (when (and account chat-id text)
-      (harness-log "SIGNAL: Sending message to ~a..." chat-id)
       (handler-case
           (uiop:run-program (list "signal-cli" "-u" account "send" "-m" text chat-id)
                             :output :string :error-output :string)
-        (error (c) (harness-log "SIGNAL ERROR: ~a" c))))))
+        (error (c) (log-message "SIGNAL ERROR: ~a" c))))))
 #+end_src
 
-** Gateway Registry Initialization
+** Registry initialization
 #+begin_src lisp
-(defun initialize-gateway-registry ()
+(defun gateway-registry-initialize ()
   "Registers all built-in gateway handlers."
   (setf (gethash "telegram" *gateway-registry*)
         (list :poll-fn #'telegram-poll
@@ -128,22 +136,12 @@ Registration of available gateway implementations: each platform registers its p
         (list :poll-fn #'signal-poll
               :send-fn #'signal-send
               :default-interval 5)))
-#+end_src
 
-** Core gateway functions
-
-*** Configuration check (gateway-configured-p)
-Returns T if a platform has a stored token in ~*gateway-configs*~.
-#+begin_src lisp
 (defun gateway-configured-p (platform)
   "Returns T if a platform has a stored token."
   (let ((config (gethash platform *gateway-configs*)))
     (and config (getf config :token))))
-#+end_src
 
-*** Active check (gateway-active-p)
-Returns T if a platform's polling thread is alive.
-#+begin_src lisp
 (defun gateway-active-p (platform)
   "Returns T if a platform's polling thread is alive."
   (let ((config (gethash platform *gateway-configs*)))
@@ -152,10 +150,9 @@ Returns T if a platform's polling thread is alive.
          (bt:thread-alive-p (getf config :thread)))))
 #+end_src
 
-*** Link a gateway (gateway-link)
-The main entry point for linking. Validates the registry entry, stores the token in the vault, starts the polling thread, and updates the config.
+** Gateway management (link/unlink)
 #+begin_src lisp
-(defun gateway-link (platform token)
+(defun messaging-link (platform token)
   "Links a platform with a token and starts polling."
   (let ((platform-lc (string-downcase platform)))
     (unless (gethash platform-lc *gateway-registry*)
@@ -163,7 +160,7 @@ The main entry point for linking. Validates the registry entry, stores the token
              platform (loop for k being the hash-keys of *gateway-registry* collect k)))
     (when (or (null token) (zerop (length token)))
       (error "Token cannot be empty"))
-    (harness-log "GATEWAY: Linking to ~a..." platform-lc)
+    (log-message "MESSAGING: Linking to ~a..." platform-lc)
     (gateway-unlink platform-lc)
     (let* ((registry-entry (gethash platform-lc *gateway-registry*))
            (interval (or (getf registry-entry :default-interval) 5)))
@@ -171,26 +168,21 @@ The main entry point for linking. Validates the registry entry, stores the token
             (list :token token :interval interval :enabled t))
       (vault-set-secret (intern (string-upcase platform-lc) :keyword) token)
       (gateway-start platform-lc)
-      (harness-log "GATEWAY: Successfully linked ~a" platform-lc)
+      (log-message "MESSAGING: Successfully linked ~a" platform-lc)
       (format t "Successfully linked ~a gateway. Token stored securely.~%" platform-lc)
       t)))
-#+end_src
 
-*** Unlink a gateway (gateway-unlink)
-Stops the polling thread and removes the config entry.
-#+begin_src lisp
-(defun gateway-unlink (platform)
+(defun messaging-unlink (platform)
   "Unlinks a platform and stops its polling thread."
   (let ((platform-lc (string-downcase platform)))
     (gateway-stop platform-lc)
     (remhash platform-lc *gateway-configs*)
-    (harness-log "GATEWAY: Unlinked ~a" platform-lc)
+    (log-message "MESSAGING: Unlinked ~a" platform-lc)
     (format t "Successfully unlinked ~a gateway.~%" platform-lc)
     t))
 #+end_src
 
-*** Start polling (gateway-start)
-Creates a background thread that calls the platform's poll function on an interval. The thread checks the ~:enabled~ flag on each cycle so it can be stopped cleanly via ~gateway-stop~.
+** Polling thread management
 #+begin_src lisp
 (defun gateway-start (platform)
   "Starts the polling thread for a linked gateway."
@@ -207,28 +199,23 @@ Creates a background thread that calls the platform's poll function on an interv
                          (when (getf (gethash platform-lc *gateway-configs*) :enabled)
                            (funcall poll-fn))
                          (sleep interval)))
-                     :name (format nil "opencortex-~a-gateway" platform-lc)))
-              (harness-log "GATEWAY: Started ~a polling (interval: ~as)" platform-lc interval)))))))))
-#+end_src
+                     :name (format nil "passepartout-~a-gateway" platform-lc)))
+              (log-message "MESSAGING: Started ~a polling (interval: ~as)" platform-lc interval))))))))
 
-*** Stop polling (gateway-stop)
-Destroys the polling thread and nulls the thread reference.
-#+begin_src lisp
 (defun gateway-stop (platform)
   "Stops the polling thread for a gateway."
   (let ((platform-lc (string-downcase platform)))
     (let ((config (gethash platform-lc *gateway-configs*)))
       (when (and config (getf config :thread))
         (when (bt:thread-alive-p (getf config :thread))
-          (harness-log "GATEWAY: Stopping ~a polling thread" platform-lc)
+          (log-message "MESSAGING: Stopping ~a polling thread" platform-lc)
           (bt:destroy-thread (getf config :thread))))
       (setf (getf config :thread) nil))))
 #+end_src
 
-*** List gateways (gateway-list)
-Returns a list of plists, one per registered platform, with :platform, :configured, and :active keys.
+** Listing
 #+begin_src lisp
-(defun gateway-list ()
+(defun messaging-list ()
   "Returns a list of all gateways with their status."
   (loop for platform being the hash-keys of *gateway-registry*
         collect (let ((configured (gateway-configured-p platform))
@@ -236,16 +223,12 @@ Returns a list of plists, one per registered platform, with :platform, :configur
                   (list :platform platform
                         :configured configured
                         :active active))))
-#+end_src
 
-*** Print gateways (gateway-list-print)
-Formats ~gateway-list~ for display in the CLI.
-#+begin_src lisp
-(defun gateway-list-print ()
+(defun messaging-list-print ()
   "Prints a formatted table of gateways."
   (format t "~%")
   (format t "  ~20@A ~12@A ~10@A~%" "PLATFORM" "CONFIGURED" "STATUS")
-  (dolist (gw (gateway-list))
+  (dolist (gw (messaging-list))
     (format t "  ~20@A ~12@A ~10@A~%"
             (getf gw :platform)
             (if (getf gw :configured) "yes" "no")
@@ -256,10 +239,9 @@ Formats ~gateway-list~ for display in the CLI.
   (format t "~%"))
 #+end_src
 
-*** Start all configured gateways (start-all-gateways)
-Called during boot to start all gateways that have tokens stored in their configs.
+** Boot
 #+begin_src lisp
-(defun start-all-gateways ()
+(defun gateway-start-all ()
   "Called at boot to start all configured gateways."
   (dolist (config (loop for platform being the hash-keys of *gateway-configs*
                        collect (list platform (gethash platform *gateway-configs*))))
@@ -268,23 +250,15 @@ Called during boot to start all gateways that have tokens stored in their config
         (gateway-start platform)))))
 #+end_src
 
-** Actuator Registration
-Register :telegram and :signal as actuators for outbound messages.
+** Registration and boot
 #+begin_src lisp
 (register-actuator :telegram #'telegram-send)
 (register-actuator :signal #'signal-send)
-#+end_src
 
-** Skill Registration
-#+begin_src lisp
-(defskill :skill-gateway-manager
+(defskill :passepartout-gateway-messaging
   :priority 150
   :trigger (lambda (ctx) (declare (ignore ctx)) nil))
-#+end_src
 
-** Initialization
-Initialize registry and start configured gateways on skill load.
-#+begin_src lisp
-(initialize-gateway-registry)
-(start-all-gateways)
-#+end_src
+(gateway-registry-initialize)
+(gateway-start-all)
+#+end_src

org/gateway-tui-main.org

@@ -0,0 +1,184 @@
+#+TITLE: Passepartout TUI — Controller
+#+PROPERTY: header-args:lisp :tangle ../lisp/gateway-tui-main.lisp
+
+* Controller
+
+Event handlers + daemon I/O + main loop.
+
+** Event Handlers
+#+begin_src lisp
+(in-package :passepartout.gateway-tui)
+
+(defun on-key (&rest args)
+  (let ((ch (car args)))
+    (cond
+      ;; Enter
+      ((or (eql ch 10) (eql ch 13) (eq ch :enter)
+           (eql ch #\Newline) (eql ch #\Return))
+       (let ((text (string-trim '(#\Space #\Tab) (input-string))))
+         (when (> (length text) 0)
+           (push text (st :input-history))
+           (setf (st :input-hpos) 0)
+           (setf (st :scroll-offset) 0)
+           (cond
+             ;; /eval command
+             ((and (>= (length text) 6)
+                   (string-equal (subseq text 0 6) "/eval "))
+              (handler-case
+                  (let* ((*read-eval* t)
+                         (*package* (find-package :passepartout.gateway-tui))
+                         (r (eval (read-from-string (subseq text 6)))))
+                    (add-msg :system (format nil "=> ~s" r)))
+                (error (c) (add-msg :system (format nil "=> ✗ ~a" c)))))
+             ;; Normal message
+             (t
+              (add-msg :user text)
+              (send-daemon (list :type :event
+                                :payload (list :sensor :user-input :text text)))))
+           (setf (st :input-buffer) nil)
+           (setf (st :dirty) (list t t t)))))
+      ;; Backspace
+      ((or (eql ch 127) (eql ch 8) (eq ch :backspace) (eql ch #\Backspace))
+       (when (st :input-buffer) (pop (st :input-buffer)))
+       (setf (st :dirty) (list nil nil t)))
+      ;; Up arrow
+      ((or (eq ch :up) (eql ch 259))
+       (let* ((h (st :input-history)) (p (st :input-hpos)))
+         (when (and h (< p (1- (length h))))
+           (incf (st :input-hpos))
+           (setf (st :input-buffer)
+                 (reverse (coerce (nth (st :input-hpos) h) 'list)))
+           (setf (st :dirty) (list nil nil t)))))
+      ;; Down arrow
+      ((or (eq ch :down) (eql ch 258))
+       (when (> (st :input-hpos) 0)
+         (decf (st :input-hpos))
+         (let ((h (st :input-history)))
+           (setf (st :input-buffer)
+                 (if (and h (< (st :input-hpos) (length h)))
+                     (reverse (coerce (nth (st :input-hpos) h) 'list))
+                     nil))
+           (setf (st :dirty) (list nil nil t)))))
+      ;; PageUp
+      ((or (eq ch :ppage) (eql ch 339))
+       (incf (st :scroll-offset) 5)
+       (setf (st :dirty) (list nil t nil)))
+      ;; PageDown
+      ((or (eq ch :npage) (eql ch 338))
+       (setf (st :scroll-offset) (max 0 (- (st :scroll-offset) 5)))
+       (setf (st :dirty) (list nil t nil)))
+      ;; Printable
+      (t
+       (let ((chr (typecase ch
+                    (character ch)
+                    (integer (code-char ch))
+                    (t nil))))
+         (when (and chr (graphic-char-p chr))
+           (push chr (st :input-buffer))
+           (setf (st :dirty) (list nil nil t))))))))
+
+(defun on-daemon-msg (msg)
+  (let* ((payload (getf msg :payload))
+         (text (getf payload :text))
+         (action (getf payload :action)))
+    (cond
+      (text (add-msg :agent text))
+      ((eq action :handshake)
+       (add-msg :system (format nil "Connected v~a" (getf payload :version))))
+      (t (add-msg :agent (format nil "~a" msg))))))
+#+end_src
+
+** Daemon Communication
+#+begin_src lisp
+(defun send-daemon (msg)
+  (let ((s (st :stream)))
+    (when (and s (open-stream-p s))
+      (handler-case
+          (progn
+            (format s "~a" (frame-message msg))
+            (finish-output s))
+        (error (c) (log-message "TUI-SEND: ~a" c))))))
+
+(defun recv-daemon (s)
+  (handler-case
+      (let* ((hdr (make-string 6)) (n 0))
+        (loop while (< n 6)
+              do (let ((ch (read-char s nil)))
+                   (unless ch (return-from recv-daemon nil))
+                   (setf (char hdr n) ch) (incf n)))
+        (let* ((len (parse-integer hdr :radix 16 :junk-allowed t))
+               (buf (make-string (or len 0))))
+          (when (and len (> len 0))
+            (loop for i from 0 below len
+                  do (let ((ch (read-char s nil)))
+                       (unless ch (return-from recv-daemon nil))
+                       (setf (char buf i) ch)))
+            (let ((*read-eval* nil))
+              (read-from-string buf)))))
+    (error (c) (log-message "TUI-RECV: ~a" c) nil)))
+
+(defun reader-loop (s)
+  (loop while (and (st :running) (open-stream-p s))
+        do (let ((msg (recv-daemon s)))
+             (when msg (queue-event (list :type :daemon :payload msg))))))
+#+end_src
+
+** Connection
+#+begin_src lisp
+(defun connect-daemon (&optional (host "127.0.0.1") (port 9105))
+  (handler-case
+      (let ((s (usocket:socket-connect host port :element-type 'character)))
+        (setf (st :stream) (usocket:socket-stream s) (st :connected) t)
+        (bt:make-thread (lambda () (reader-loop (st :stream))) :name "tui-reader")
+        (add-msg :system "* Connected *")
+        t)
+    (error (c)
+      (add-msg :system (format nil "* Connection failed: ~a *" c))
+      nil)))
+
+(defun disconnect-daemon ()
+  (when (st :stream)
+    (ignore-errors (close (st :stream)))
+    (setf (st :stream) nil (st :connected) nil)
+    (add-msg :system "* Disconnected *")))
+#+end_src
+
+** Main Loop
+#+begin_src lisp
+(defun tui-main ()
+  (init-state)
+  (with-screen (scr :input-blocking nil :input-echoing nil :cursor-visible nil)
+    (let* ((h (or (height scr) 24))
+           (w (or (width scr) 80))
+           (sw (make-instance 'window :height 3 :width (- w 2) :y 0 :x 1))
+           (ch (- h 5))
+           (cw (make-instance 'window :height ch :width (- w 2) :y 3 :x 1))
+           (iw (make-instance 'window :height 1 :width (- w 2) :y (- h 1) :x 1))
+           (swank-port (or (ignore-errors
+                             (parse-integer (uiop:getenv "TUI_SWANK_PORT")))
+                           4006)))
+      (setf (function-keys-enabled-p iw) t
+            (st :dirty) (list t t t))
+      (connect-daemon)
+      (when (> swank-port 0)
+        (handler-case
+            (progn
+              (ql:quickload :swank :silent t)
+              (funcall (find-symbol "CREATE-SERVER" "SWANK")
+                       :port swank-port :dont-close t)
+              (add-msg :system
+                       (format nil "* Swank ~d  M-x slime-connect *" swank-port)))
+          (error ()
+            (add-msg :system "* Swank unavailable *"))))
+      (loop while (st :running) do
+        (dolist (ev (drain-queue))
+          (when (eq (getf ev :type) :daemon)
+            (on-daemon-msg (getf ev :payload))))
+        (let ((ch (get-char iw)))
+          (when (and ch (not (equal ch -1)))
+            (on-key ch)))
+        (redraw sw cw ch iw)
+        (refresh scr)
+        (sleep 0.03))
+      (disconnect-daemon))))
+#+end_src

org/gateway-tui-model.org

@@ -0,0 +1,55 @@
+#+TITLE: Passepartout TUI — Model
+#+PROPERTY: header-args:lisp :tangle ../lisp/gateway-tui-model.lisp
+
+* Model
+
+The TUI state is a single plist accessed via ~st~ / ~(setf st)~.
+All state mutation flows through event handlers in the controller.
+
+** Package + State
+#+begin_src lisp
+(defpackage :passepartout.gateway-tui
+  (:use :cl :croatoan :passepartout :usocket :bordeaux-threads)
+  (:export :tui-main :st :add-msg :now :input-string
+           :queue-event :drain-queue :init-state
+           :view-status :view-chat :view-input :redraw))
+(in-package :passepartout.gateway-tui)
+
+(defvar *state* nil)
+(defvar *event-queue* nil)
+(defvar *event-lock* (bt:make-lock "tui-event-lock"))
+
+(defun st (key) (getf *state* key))
+(defun (setf st) (val key) (setf (getf *state* key) val))
+
+(defun init-state ()
+  (setf *state*
+        (list :running t :mode :chat :connected nil :stream nil
+              :input-buffer nil :input-history nil :input-hpos 0
+              :messages nil :scroll-offset 0 :dirty (list nil nil nil))))
+#+end_src
+
+** Helpers
+#+begin_src lisp
+(defun now ()
+  (multiple-value-bind (h m) (get-decoded-time)
+    (format nil "~2,'0d:~2,'0d" h m)))
+
+(defun input-string ()
+  (coerce (reverse (st :input-buffer)) 'string))
+
+(defun add-msg (role content)
+  (push (list :role role :content content :time (now)) (st :messages))
+  (setf (st :dirty) (list t t nil)))
+#+end_src
+
+** Event Queue
+#+begin_src lisp
+(defun queue-event (ev)
+  (bt:with-lock-held (*event-lock*) (push ev *event-queue*)))
+
+(defun drain-queue ()
+  (bt:with-lock-held (*event-lock*)
+    (let ((evs (nreverse *event-queue*)))
+      (setf *event-queue* nil) evs)))
+#+end_src

org/gateway-tui-view.org

@@ -0,0 +1,79 @@
+#+TITLE: Passepartout TUI — View
+#+PROPERTY: header-args:lisp :tangle ../lisp/gateway-tui-view.lisp
+
+* View
+
+Pure render functions. Each takes a Croatoan window and current state.
+State is read via ~(st :key)~ — no mutation here.
+
+** Status Bar
+#+begin_src lisp
+(in-package :passepartout.gateway-tui)
+
+(defun view-status (win)
+  (clear win)
+  (box win 0 0)
+  (add-string win
+   (format nil " Passepartout  ~a  [~a]  msgs:~a  scroll:~a"
+           (if (st :connected) "● Connected" "○ Disconnected")
+           (string-upcase (string (st :mode)))
+           (length (st :messages))
+           (if (> (st :scroll-offset) 0) (format nil "~a↑" (st :scroll-offset)) "0"))
+   :y 1 :x 1 :fgcolor (if (st :connected) :green :red))
+  (add-string win (format nil " ~a" (now)) :y 2 :x 1 :fgcolor :yellow)
+  (refresh win))
+#+end_src
+
+** Chat Area
+#+begin_src lisp
+(defun view-chat (win h)
+  (clear win)
+  (box win 0 0)
+  (let* ((w (or (width win) 78))
+         (msgs (reverse (st :messages)))
+         (max-lines (- h 2))
+         (total (length msgs))
+         (start (max 0 (- total max-lines (st :scroll-offset))))
+         (y 1))
+    (loop for i from start below total
+          while (< y (1- h))
+          do (let ((msg (nth i msgs)))
+               (let* ((role (getf msg :role))
+                      (content (getf msg :content))
+                      (time (or (getf msg :time) ""))
+                      (label (case role
+                               (:user (format nil "⬆ [~a] ~a" time content))
+                               (:agent (format nil "⬇ [~a] ~a" time content))
+                               (:system (format nil "   [~a] ~a" time content))
+                               (t (format nil "   [~a] ~a" time content))))
+                      (color (case role
+                               (:user :green)
+                               (:agent :white)
+                               (:system :yellow)
+                               (t :white))))
+                 (add-string win label :y y :x 1 :n (1- w) :fgcolor color)
+                 (incf y)))))
+  (refresh win))
+#+end_src
+
+** Input Line
+#+begin_src lisp
+(defun view-input (win)
+  (let* ((text (input-string))
+         (w (or (width win) 78))
+         (clip (min (length text) (1- w))))
+    (clear win)
+    (add-string win (format nil "~a " text) :y 0 :x 0 :n (1- w) :fgcolor :cyan)
+    (setf (cursor-position win) (list 0 clip)))
+  (refresh win))
+#+end_src
+
+** Redraw (dirty-flag dispatch)
+#+begin_src lisp
+(defun redraw (sw cw ch iw)
+  (destructuring-bind (sd cd id) (st :dirty)
+    (when sd (view-status sw))
+    (when cd (view-chat cw ch))
+    (when id (view-input iw))
+    (setf (st :dirty) (list nil nil nil))))
+#+end_src

org/programming-lisp.org

@@ -1,16 +1,26 @@
 #+TITLE: SKILL: Utils Lisp (org-skill-utils-lisp.org)
 #+AUTHOR: Agent
 #+FILETAGS: :skill:utils:lisp:validation:evaluation:
-#+PROPERTY: header-args:lisp :tangle org-skill-utils-lisp.lisp
+#+PROPERTY: header-args:lisp :tangle ../lisp/programming-lisp.lisp
 
-* Overview
-Structural manipulation tools for Lisp code. This skill provides the full toolkit used by the agent when self-editing: ~utils-lisp-validate~ (three-phase structural/syntactic/semantic gate), ~utils-lisp-eval~ (sandboxed evaluation in a jailed package), ~utils-lisp-structural-extract~ / ~inject~ / ~wrap~ / ~slurp~ (surgical code transformations), and ~utils-lisp-format~ (auto-indentation via Emacs batch). Every self-edit operation goes through these functions.
+* Architectural Intent: The Lisp Surgeon's Toolkit
+
+When the agent needs to modify its own code — fix a bug, add a feature, refactor a skill — it reaches for Utils Lisp. This skill provides every operation needed to read, validate, modify, and write Lisp code from within Lisp itself.
+
+This is possible only because Lisp is homoiconic: code is data. The agent can parse a function definition from a string, extract its body, wrap it in a new form, inject a new expression, and validate the result — all using the same data structures that the Lisp runtime uses to execute the code.
+
+The skill has four layers:
+1. **Validation** — three-phase gate: structural (paren balance) → syntactic (reader safety) → semantic (dangerous forms)
+2. **Evaluation** — sandboxed ~eval~ in a jailed package with ~*read-eval*~ nil
+3. **Structural surgery** — extract, inject, wrap, slurp — surgical code transformations without regex
+4. **Formatting** — auto-indentation via Emacs batch mode
 
 * Implementation
 
 ** Structural Validation
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-check-structural (code)
+(defun lisp-structural-check (code)
   "Checks if parentheses are balanced and the code is readable."
   (handler-case
       (let ((*read-eval* nil))
@@ -22,47 +32,51 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
 #+end_src
 
 ** Syntactic Validation
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-check-syntactic (code)
+(defun lisp-syntactic-check (code)
   "Checks for valid Lisp syntax beyond just balanced parentheses."
-  (utils-lisp-check-structural code))
+  (lisp-structural-check code))
 #+end_src
 
 ** Semantic Validation (Safety)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-check-semantic (code)
+(defun lisp-semantic-check (code)
   "Checks for potentially unsafe forms."
   (let ((unsafe-tokens '("eval" "load" "uiop:run-program" "sb-ext:run-program" "cl-user::eval")))
     (loop for token in unsafe-tokens
           when (search token (string-downcase code))
-          do (return-from utils-lisp-check-semantic (values nil (format nil "Unsafe form detected: ~a" token))))
+          do (return-from lisp-semantic-check (values nil (format nil "Unsafe form detected: ~a" token))))
     (values t nil)))
 #+end_src
 
 ** Unified Validation Gate
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-validate (code &key (strict t))
+(defun lisp-validate (code &key (strict t))
   "Unified validation gate for Lisp code."
-  (multiple-value-bind (struct-ok struct-err) (utils-lisp-check-structural code)
+  (multiple-value-bind (struct-ok struct-err) (lisp-structural-check code)
     (unless struct-ok
-      (return-from utils-lisp-validate (list :status :error :reason struct-err)))
+      (return-from lisp-validate (list :status :error :reason struct-err)))
     (when strict
-      (multiple-value-bind (sem-ok sem-err) (utils-lisp-check-semantic code)
+      (multiple-value-bind (sem-ok sem-err) (lisp-semantic-check code)
         (unless sem-ok
-          (return-from utils-lisp-validate (list :status :error :reason sem-err)))))
+          (return-from lisp-validate (list :status :error :reason sem-err)))))
     (list :status :success)))
 #+end_src
 
 ** Evaluation (REPL)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-eval (code-string &key (package :opencortex))
+(defun lisp-eval (code-string &key (package :passepartout))
   "Evaluates a Lisp string and captures its output/results."
   (let ((out (make-string-output-stream))
         (err (make-string-output-stream)))
     (handler-case
         (let* ((*standard-output* out)
                (*error-output* err)
-               (*package* (or (find-package package) (find-package :opencortex)))
+               (*package* (or (find-package package) (find-package :passepartout)))
                (result (with-input-from-string (s code-string)
                          (let ((last-val nil))
                            (loop for form = (read s nil :eof) until (eq form :eof)
@@ -80,8 +94,9 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
 #+end_src
 
 ** Formatting (Emacs Batch)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-format (code-string)
+(defun lisp-format (code-string)
   "Attempts to format Lisp code using Emacs batch mode if available."
   (handler-case
       (let ((tmp-file "/tmp/oc-format-temp.lisp"))
@@ -95,16 +110,17 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
           (if (= code 0)
               out
               (progn
-                (harness-log "FORMAT ERROR: ~a" err)
+                (log-message "FORMAT ERROR: ~a" err)
                 code-string))))
     (error (c)
-      (harness-log "FORMAT EXCEPTION: ~a" c)
+      (log-message "FORMAT EXCEPTION: ~a" c)
       code-string)))
 #+end_src
 
 ** Structural Extraction (AST)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-structural-extract (code function-name)
+(defun lisp-extract (code function-name)
   "Extracts the definition of a specific function from a code string."
   (let ((*read-eval* nil))
     (with-input-from-string (s code)
@@ -114,13 +130,14 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
                       (member (symbol-name (car form)) '("DEFUN" "DEFMACRO" "DEFMETHOD") :test #'string-equal)
                       (symbolp (second form))
                       (string-equal (symbol-name (second form)) function-name))
-            do (return-from utils-lisp-structural-extract (format nil "~s" form))))
+            do (return-from lisp-extract (format nil "~s" form))))
     nil))
 #+end_src
 
 ** Structural Wrapping (AST)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-structural-wrap (code target-name wrapper-symbol)
+(defun lisp-wrap (code target-name wrapper-symbol)
   "Wraps a specific form in a wrapper form (e.g., wrap in a let)."
   (let ((*read-eval* nil) (results nil))
     (with-input-from-string (s code)
@@ -134,8 +151,9 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
 #+end_src
 
 ** List Definitions
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-list-definitions (code)
+(defun lisp-list-definitions (code)
   "Returns a list of names for all top-level definitions (defun, defmacro, etc.)."
   (let ((*read-eval* nil) (names nil))
     (with-input-from-string (s code)
@@ -151,8 +169,9 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
 #+end_src
 
 ** Structural Injection (AST)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-structural-inject (code target-name new-form-string)
+(defun lisp-inject (code target-name new-form-string)
   "Injects a new form into the body of a targeted definition."
   (let ((*read-eval* nil)
         (new-form (read-from-string new-form-string))
@@ -170,8 +189,9 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
 #+end_src
 
 ** Structural Slurp (AST)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun utils-lisp-structural-slurp (code target-name form-to-slurp-string)
+(defun lisp-slurp (code target-name form-to-slurp-string)
   "Adds a form to the end of a named list or definition (Paredit slurp)."
   (let ((*read-eval* nil)
         (to-slurp (read-from-string form-to-slurp-string))
@@ -188,19 +208,19 @@ Structural manipulation tools for Lisp code. This skill provides the full toolki
 
 ** Skill Registration
 #+begin_src lisp
-(defskill :skill-utils-lisp
+(defskill :passepartout-programming-lisp
   :priority 400
   :trigger (lambda (ctx) (declare (ignore ctx)) nil))
 #+end_src
 
 * Test Suite
 Tests for the Lisp Validator structural, syntactic, and semantic gates.
-#+begin_src lisp :tangle ../tests/utils-lisp-tests.lisp
-(defpackage :opencortex-utils-lisp-tests
-  (:use :cl :fiveam :opencortex)
+#+begin_src lisp :tangle ../tests/programming-lisp-tests.lisp
+(defpackage :passepartout-utils-lisp-tests
+  (:use :cl :fiveam :passepartout)
   (:export #:utils-lisp-suite))
 
-(in-package :opencortex-utils-lisp-tests)
+(in-package :passepartout-utils-lisp-tests)
 
 (def-suite utils-lisp-suite
   :description "Tests for the Lisp Validator structural, syntactic, and semantic gates")
@@ -208,45 +228,45 @@ Tests for the Lisp Validator structural, syntactic, and semantic gates.
 (in-suite utils-lisp-suite)
 
 (test structural-balanced
-  (is (eq t (opencortex:utils-lisp-check-structural "(+ 1 2)"))))
+  (is (eq t (passepartout:lisp-structural-check "(+ 1 2)"))))
 
 (test structural-unbalanced-open
-  (multiple-value-bind (ok reason) (opencortex:utils-lisp-check-structural "(+ 1 2")
+  (multiple-value-bind (ok reason) (passepartout:lisp-structural-check "(+ 1 2")
     (is (null ok))
     (is (search "Reader Error" reason))))
 
 (test structural-unbalanced-close
-  (multiple-value-bind (ok reason) (opencortex:utils-lisp-check-structural "+ 1 2)")
+  (multiple-value-bind (ok reason) (passepartout:lisp-structural-check "+ 1 2)")
     (is (null ok))
     (is (search "Reader Error" reason))))
 
 (test syntactic-valid
-  (is (eq t (opencortex:utils-lisp-check-syntactic "(+ 1 2)"))))
+  (is (eq t (passepartout:lisp-syntactic-check "(+ 1 2)"))))
 
 (test semantic-safe
-  (is (eq t (opencortex:utils-lisp-check-semantic "(+ 1 2)"))))
+  (is (eq t (passepartout:lisp-semantic-check "(+ 1 2)"))))
 
 (test semantic-blocked-eval
-  (multiple-value-bind (ok reason) (opencortex:utils-lisp-check-semantic "(eval '(+ 1 2))")
+  (multiple-value-bind (ok reason) (passepartout:lisp-semantic-check "(eval '(+ 1 2))")
     (is (null ok))
     (is (search "Unsafe" reason))))
 
 (test unified-success
-  (let ((result (opencortex:utils-lisp-validate "(+ 1 2)" :strict t)))
+  (let ((result (passepartout:lisp-validate "(+ 1 2)" :strict t)))
     (is (eq (getf result :status) :success))))
 
 (test unified-failure
-  (let ((result (opencortex:utils-lisp-validate "(+ 1 2" :strict nil)))
+  (let ((result (passepartout:lisp-validate "(+ 1 2" :strict nil)))
     (is (eq (getf result :status) :error))))
 
 (test eval-basic
-  (let ((result (opencortex:utils-lisp-eval "(+ 1 2)")))
+  (let ((result (passepartout:lisp-eval "(+ 1 2)")))
     (is (eq (getf result :status) :success))
     (is (string= (getf result :result) "3"))))
 
 (test structural-extract
   (let* ((code "(defun hello () (print \"hi\")) (defun bye () (print \"bye\"))")
-         (extracted (opencortex:utils-lisp-structural-extract code "hello")))
+         (extracted (passepartout:lisp-extract code "hello")))
     (is (not (null extracted)))
     (let ((form (read-from-string extracted)))
       (is (eq (car form) 'DEFUN))
@@ -254,20 +274,20 @@ Tests for the Lisp Validator structural, syntactic, and semantic gates.
 
 (test list-definitions
   (let ((code "(defun foo () t) (defmacro bar () nil) (defparameter *baz* 10)"))
-    (let ((names (opencortex:utils-lisp-list-definitions code)))
+    (let ((names (passepartout:lisp-list-definitions code)))
       (is (member 'FOO names))
       (is (member 'BAR names))
       (is (member '*BAZ* names)))))
 
 (test structural-inject
   (let* ((code "(defun my-fun (x) (print x))")
-         (injected (opencortex:utils-lisp-structural-inject code "my-fun" "(finish-output)")))
+         (injected (passepartout:lisp-inject code "my-fun" "(finish-output)")))
     (let ((form (read-from-string injected)))
       (is (equal (last form) '((FINISH-OUTPUT)))))))
 
 (test structural-slurp
   (let* ((code "(defun work () (step-1))")
-         (slurped (opencortex:utils-lisp-structural-slurp code "work" "(step-2)")))
+         (slurped (passepartout:lisp-slurp code "work" "(step-2)")))
     (let ((form (read-from-string slurped)))
       (is (equal (last form) '((STEP-2)))))))
 #+end_src

org/programming-literate.org

@@ -0,0 +1,116 @@
+#+TITLE: SKILL: Literate Programming (org-skill-literate-programming.org)
+#+AUTHOR: Agent
+#+FILETAGS: :system:literate:tangle:
+#+PROPERTY: header-args:lisp :tangle ../lisp/programming-literate.lisp
+
+* Overview
+This skill enforces the literal programming discipline for all Passepartout source code. It defines the rules for one-function-per-block, prose-before-code, reflecting working code back from the REPL to Org, and the tangle mandate (never edit .lisp directly). Every Org file that contains Lisp code should follow the rules defined here.
+
+** Discipline Rules
+
+*** One Function, One Block
+Every ~#+begin_src lisp~ block contains exactly one function definition. Never bundle multiple definitions in a single block. This keeps the Org file granular, reviewable, and tanglable without side effects.
+
+*** Prose Before Code
+Every block must be preceded by an Org headline and explanatory prose that covers:
+- What the function does
+- Its arguments (including any &key, &optional)
+- Its return value
+- The rationale for its existence
+
+The prose is not a comment — it is the authoritative specification. The code implements what the prose describes.
+
+*** Reflect Back, Don't Write Directly
+Code is explored and verified in the REPL first (per Engineering Standards lifecycle). Once working, it is *reflected back* into the Org file. This means:
+- The REPL is the proving ground — iterate there
+- The Org file is the record — copy working code there
+- Never write code directly into an Org block without first evaluating it in the REPL
+
+*** Code and Prose Together
+Every ~#+begin_src lisp~ block flows from the prose above it. The reader (human or agent) should understand the function's contract from the prose before reading the code. If the code and prose disagree, the prose is wrong — update both.
+
+*** Tangle Mandate
+The `.lisp` file is derived, not authored. Never edit `.lisp` directly. All changes flow through Org: edit Org → tangle → `.lisp` updates. Violating this corrupts the skill loader and causes boot failure.
+
+* Implementation
+
+** Block Extraction
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun literate-extract-lisp-blocks (content)
+  "Extracts all #+begin_src lisp ... #+end_src blocks from Org CONTENT.
+Returns a list of block strings."
+  (let ((lines (uiop:split-string content :separator '(#\Newline)))
+        (blocks nil)
+        (in-block nil)
+        (current-block nil))
+    (dolist (line lines)
+      (let ((trimmed (string-trim '(#\Space) line)))
+        (cond
+          ((uiop:string-prefix-p "#+begin_src lisp" trimmed)
+           (setf in-block t current-block nil))
+          ((uiop:string-prefix-p "#+end_src" trimmed)
+           (when in-block
+             (push (format nil "~{~a~^~%~}" (nreverse current-block)) blocks)
+             (setf in-block nil current-block nil)))
+          (in-block
+           (push line current-block)))))
+    (nreverse blocks)))
+#+end_src
+
+** Synchronization Logic
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun literate-block-balance-check (org-file)
+  "Verifies that all Lisp source blocks in an Org file have balanced parentheses.
+Returns T if all blocks pass validation, or an error string listing failures."
+  (when (not (uiop:file-exists-p org-file))
+    (return-from literate-block-balance-check
+      (format nil "Org file not found: ~a" org-file)))
+  (let* ((content (uiop:read-file-string org-file))
+         (blocks (literate-extract-lisp-blocks content))
+         (failures nil))
+    (if (null blocks)
+        t
+        (progn
+          (loop for i from 0
+                for block in blocks
+                for (ok reason) = (multiple-value-list
+                                    (lisp-structural-check block))
+                unless ok
+                do (push (format nil "Block ~d: ~a" (1+ i) reason) failures))
+          (if failures
+              (format nil "Unbalanced blocks in ~a:~%~{~a~^~%~}" org-file failures)
+              t)))))
+
+#+end_src
+** literate-tangle-sync-check
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun literate-tangle-sync-check (org-file lisp-file)
+  "Verifies that the .lisp file matches the tangled output of the .org file.
+Compares the concatenation of all lisp blocks from the Org file against the
+contents of the Lisp file. Returns T if they match, or an error message."
+  (when (not (uiop:file-exists-p org-file))
+    (return-from literate-tangle-sync-check
+      (format nil "Org file not found: ~a" org-file)))
+  (when (not (uiop:file-exists-p lisp-file))
+    (return-from literate-tangle-sync-check
+      (format nil "Lisp file not found: ~a" lisp-file)))
+  (let* ((org-content (uiop:read-file-string org-file))
+         (org-blocks (literate-extract-lisp-blocks org-content))
+         (tangled (format nil "~{~a~^~%~%~}" org-blocks))
+         (lisp-content (uiop:read-file-string lisp-file)))
+    (if (string= (string-trim '(#\Space #\Newline) tangled)
+                 (string-trim '(#\Space #\Newline) lisp-content))
+        t
+        (format nil "Tangle sync mismatch: ~a does not match ~a" org-file lisp-file))))
+#+end_src
+#+end_src
+
+** Skill Registration
+#+begin_src lisp
+(defskill :passepartout-programming-literate
+  :priority 300
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))
+#+end_src

org/programming-org.org

@@ -0,0 +1,372 @@
+#+TITLE: SKILL: Utils Org (org-skill-utils-org.org)
+#+AUTHOR: Agent
+#+FILETAGS: :skill:utils:org:
+#+PROPERTY: header-args:lisp :tangle ../lisp/programming-org.lisp
+
+* Overview
+Structural manipulation tools for Org-mode files. This skill handles reading, writing, and modifying Org files at the AST level: finding headlines by ID or title, setting properties and TODO states, adding new headlines, generating UUIDs, and converting ASTs back to Org text. It also implements the privacy filter — when reading an Org file, it strips headlines tagged with ~@personal~ (or any tag in ~bouncer-privacy-tags~) and rejects files with matching ~#+FILETAGS:~.
+
+* Implementation
+
+** Reading Files (with Privacy Filter)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-filetags-extract (content)
+  "Extracts the list of tags from a #+FILETAGS: line."
+  (let ((lines (uiop:split-string content :separator '(#\Newline))))
+    (dolist (line lines)
+      (when (uiop:string-prefix-p "#+FILETAGS:" (string-trim '(#\Space) line))
+        (let ((tag-str (string-trim " :" (subseq (string-trim '(#\Space) line) 10))))
+          (return-from org-filetags-extract
+            (mapcar (lambda (tag) (format nil ":~a" (string-trim '(#\Space) tag)))
+                    (uiop:split-string tag-str :separator '(#\space #\tab))))))))
+  nil)
+
+#+end_src
+** org-privacy-tag-p
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-privacy-tag-p (tags-list)
+  "Returns T if any tag in TAGS-LIST matches bouncer-privacy-tags."
+  (let ((privacy-tags (symbol-value (find-symbol "BOUNCER-PRIVACY-TAGS" :passepartout))))
+    (when (and tags-list privacy-tags)
+      (some (lambda (tag)
+              (some (lambda (private-tag)
+                      (string-equal (string-trim '(#\: #\space) tag)
+                                    (string-trim '(#\: #\space) private-tag)))
+                    privacy-tags))
+            tags-list))))
+
+#+end_src
+** org-privacy-strip
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-privacy-strip (content)
+  "Removes Org headlines whose :TAGS: property contains a privacy-filtered tag.
+Returns the filtered content as a string."
+  (let* ((lines (uiop:split-string content :separator '(#\Newline)))
+         (result-lines nil)
+         (skip-depth nil)
+         (current-tags nil)
+         (in-properties nil))
+    (dolist (line lines)
+      (cond
+        (skip-depth
+         ;; We're inside a skipped subtree
+         (when (and (uiop:string-prefix-p "*" (string-trim '(#\Space) line))
+                    (<= (length (string-trim '(#\Space) line)) skip-depth))
+           (setf skip-depth nil)))
+        ((uiop:string-prefix-p ":PROPERTIES:" (string-trim '(#\Space) line))
+         (setf in-properties t)
+         (push line result-lines))
+        ((uiop:string-prefix-p ":END:" (string-trim '(#\Space) line))
+         (setf in-properties nil)
+         (when current-tags
+           (when (org-privacy-tag-p (reverse current-tags))
+             (setf skip-depth
+                   (length (car (last result-lines
+                                      (1+ (position-if
+                                           (lambda (l)
+                                             (uiop:string-prefix-p "*" (string-trim '(#\Space) l)))
+                                           (reverse result-lines))))))))
+           (setf current-tags nil))
+         (push line result-lines))
+        ((and in-properties (uiop:string-prefix-p ":TAGS:" (string-trim '(#\Space) line)))
+         (let ((tag-val (string-trim '(#\Space) (subseq (string-trim '(#\Space) line) 6))))
+           (setf current-tags (uiop:split-string tag-val :separator '(#\space #\tab))))
+         (push line result-lines))
+        (t
+         (push line result-lines))))
+    (format nil "~{~a~%~}" (nreverse result-lines))))
+
+#+end_src
+** org-read-file
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-read-file (filepath)
+  "Reads an Org file into a string, applying privacy filtering."
+  (let* ((raw (uiop:read-file-string filepath))
+         (filetags (org-filetags-extract raw)))
+    (if (org-privacy-tag-p filetags)
+        (progn
+          (log-message "UTILS-ORG: Blocked read of ~a — file-level privacy tag(s) ~a" filepath filetags)
+          nil)
+        (org-privacy-strip raw))))
+#+end_src
+#+end_src
+
+** Writing Files
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-write-file (filepath content)
+  "Writes content to an Org file."
+  (uiop:with-output-file (s filepath :if-exists :supersede)
+    (format s "~a" content)))
+#+end_src
+
+** ID Generation
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-id-generate ()
+  "Generates a new UUID for an Org node."
+  (string-downcase (format nil "~a" (uuid:make-v4-uuid))))
+#+end_src
+
+** ID Formatting
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-id-format (id)
+  "Ensures the ID has the 'id:' prefix."
+  (if (uiop:string-prefix-p "id:" id)
+      id
+      (format nil "id:~a" id)))
+#+end_src
+
+** Setting Properties (Recursive)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-property-set (ast target-id property value)
+  "Recursively sets a property on a headline with a matching ID in the AST."
+  (let ((type (getf ast :type))
+        (props (getf ast :properties))
+        (contents (getf ast :contents)))
+    (when (and (eq type :HEADLINE) (string= (getf props :ID) target-id))
+      (setf (getf (getf ast :properties) property) value)
+      (return-from org-property-set t))
+    (dolist (child contents)
+      (when (listp child)
+        (when (org-property-set child target-id property value)
+          (return-from org-property-set t)))))
+  nil)
+#+end_src
+
+** Setting TODO Status
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-todo-set (ast target-id status)
+  "Sets the TODO status of a headline in the AST."
+  (org-property-set ast target-id :TODO status))
+#+end_src
+
+** Adding Headlines
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-headline-add (ast parent-id title)
+  "Adds a new headline as a child of the parent-id in the AST."
+  (let* ((type (getf ast :type))
+         (props (getf ast :properties))
+         (id (getf props :ID))
+         (contents (getf ast :contents)))
+    (when (and (eq type :HEADLINE) (string= id parent-id))
+      (let ((new-node (list :type :HEADLINE
+                           :properties (list :ID (org-id-format (org-id-generate))
+                                            :TITLE title)
+                           :contents nil)))
+        (setf (getf ast :contents) (append contents (list new-node)))
+        (return-from org-headline-add t)))
+    (dolist (child contents)
+      (when (listp child)
+        (when (org-headline-add child parent-id title)
+          (return-from org-headline-add t)))))
+  nil)
+#+end_src
+
+** Searching Headlines (by ID)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-headline-find-by-id (ast id)
+  "Finds a headline by its ID in the AST."
+  (let ((props (getf ast :properties)))
+    (when (string= (getf props :ID) id)
+      (return-from org-headline-find-by-id ast))
+    (dolist (child (getf ast :contents))
+      (when (listp child)
+        (let ((found (org-headline-find-by-id child id)))
+          (when found (return-from org-headline-find-by-id found)))))
+    nil))
+#+end_src
+
+** Searching Headlines (by Title)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-headline-find-by-title (ast title)
+  "Finds a headline by its title in the AST."
+  (let ((props (getf ast :properties)))
+    (when (string-equal (getf props :TITLE) title)
+      (return-from org-headline-find-by-title ast))
+    (dolist (child (getf ast :contents))
+      (when (listp child)
+        (let ((found (org-headline-find-by-title child title)))
+          (when found (return-from org-headline-find-by-title found)))))
+     nil))
+#+end_src
+
+** Subtree Extraction (from Org text)
+
+Extracts a specific headline subtree from raw Org text by heading name.
+Used by =context-skill-subtree= for targeted skill source loading.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-subtree-extract (org-content heading-name)
+  "Extracts a subtree by heading name from Org text. Returns the subtree
+content as a string (headline + body + children), or nil if not found."
+  (let* ((lines (uiop:split-string org-content :separator '(#\Newline)))
+         (target-depth nil)
+         (in-target nil)
+         (result nil))
+    (loop for line in lines
+          for trimmed = (string-trim '(#\Space) line)
+          do (let ((depth (when (uiop:string-prefix-p "*" trimmed)
+                            (length (subseq trimmed 0
+                                            (position-if (lambda (c) (not (char= c #\*)))
+                                                         trimmed)))))
+                   (headline-title (when (uiop:string-prefix-p "*" trimmed)
+                                     (string-trim '(#\* #\Space) trimmed))))
+               (when depth
+                 (when (string-equal headline-title heading-name)
+                   (setf target-depth depth in-target t))
+                 (when (and in-target target-depth
+                            (<= depth target-depth)
+                            (not (string-equal headline-title heading-name)))
+                   (return-from org-subtree-extract
+                     (format nil "~{~a~^~%~}" (nreverse result)))))
+               (when in-target (push line result))))
+    (when result
+      (format nil "~{~a~^~%~}" (nreverse result)))))
+
+#+end_src
+** org-heading-list
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-heading-list (org-content)
+  "Returns a list of all top-level heading names in Org text."
+  (let* ((lines (uiop:split-string org-content :separator '(#\Newline)))
+         (headings nil))
+    (dolist (line lines)
+      (let ((trimmed (string-trim '(#\Space) line)))
+        (when (uiop:string-prefix-p "* " trimmed)
+          (let ((title (string-trim '(#\* #\Space) trimmed)))
+            (unless (find title headings :test #'string-equal)
+              (push title headings))))))
+    (nreverse headings)))
+#+end_src
+#+end_src
+
+** Text Modification in Org Files
+Replaces text in Org files with verification. Used by =system-self-improve= for
+surgical edits.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-modify (filepath old-text new-text)
+  "Replaces all occurrences of OLD-TEXT with NEW-TEXT in filepath.
+Returns T if OLD-TEXT was found and replaced, nil if not found."
+  (when (not (uiop:file-exists-p filepath))
+    (log-message "UTILS-ORG: org-modify: file not found: ~a" filepath)
+    (return-from org-modify nil))
+  (let* ((content (uiop:read-file-string filepath))
+         (pos (search old-text content :test #'string=)))
+    (unless pos
+      (log-message "UTILS-ORG: org-modify: text not found in ~a" filepath)
+      (return-from org-modify nil))
+    (let ((modified (cl-ppcre:regex-replace-all
+                      (cl-ppcre:quote-meta-chars old-text)
+                      content new-text)))
+      (org-write-file filepath modified)
+      (log-message "UTILS-ORG: Modified ~a (~d chars replaced)" filepath (length old-text))
+      t)))
+#+end_src
+
+** AST to Org text conversion
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-ast-render (ast &key (depth 1))
+  "Converts a plist AST node back to Org text.
+AST format: (:TYPE :HEADLINE :properties (:ID ... :TITLE ... :TAGS (...))
+              :contents (child-ast ...))"
+  (let* ((type (getf ast :TYPE))
+         (props (getf ast :properties))
+         (title (or (getf props :TITLE) "Untitled"))
+         (tags (getf props :TAGS))
+         (todo (getf props :TODO-STATE))
+         (children (getf ast :contents))
+         (raw-content (getf ast :raw-content))
+         (stars (make-string depth :initial-element #\*))
+         (output ""))
+    (unless (eq type :HEADLINE)
+      (return-from org-ast-render (or raw-content "")))
+    ;; Headline
+    (setf output (format nil "~a~@[ ~a~] ~a" stars todo title))
+    (when tags
+      (let ((tag-str (format nil "~{~a~^:~}" (mapcar (lambda (tag) (string-trim '(#\:) tag)) tags))))
+        (setf output (concatenate 'string output (format nil " :~a::~%" tag-str))))
+      (setf output (concatenate 'string output (string #\Newline))))
+    (unless tags
+      (setf output (concatenate 'string output (string #\Newline))))
+    ;; Property drawer
+    (setf output (concatenate 'string output ":PROPERTIES:" (string #\Newline)))
+    (loop for (k v) on props by #'cddr
+          do (unless (or (eq k :TITLE) (eq k :TAGS))
+               (setf output (concatenate 'string output
+                                         (format nil ":~a: ~a~%" k v)))))
+    (setf output (concatenate 'string output ":END:" (string #\Newline)))
+    ;; Content
+    (when raw-content
+      (setf output (concatenate 'string output raw-content (string #\Newline))))
+    ;; Children
+    (dolist (child children)
+      (when (listp child)
+        (setf output (concatenate 'string output
+                                  (org-ast-render child :depth (1+ depth))))))
+    output))
+#+end_src
+
+** Skill Registration
+#+begin_src lisp
+(defskill :passepartout-programming-org
+  :priority 100
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))
+#+end_src
+
+* Test Suite
+Verification of the structural manipulation for Org-mode files and their AST representation.
+#+begin_src lisp :tangle ../tests/programming-org-tests.lisp
+(eval-when (:compile-toplevel :load-toplevel :execute)
+  (ignore-errors (ql:quickload :fiveam :silent t)))
+
+(defpackage :passepartout-utils-org-tests
+  (:use :cl :fiveam :passepartout)
+  (:export #:utils-org-suite))
+
+(in-package :passepartout-utils-org-tests)
+
+(def-suite utils-org-suite
+  :description "Tests for Utils Org skill.")
+
+(in-suite utils-org-suite)
+
+(test id-generation
+  (let ((id1 (org-id-generate))
+        (id2 (org-id-generate)))
+    (is (plusp (length id1)))
+    (is (not (string= id1 id2)))))
+
+(test id-format
+  (let ((formatted (org-id-format "abc12345")))
+    (is (search "id:" formatted))))
+
+(test property-setter
+  (let ((ast (list :type :HEADLINE
+                  :properties (list :ID "id:test123" :TITLE "Test")
+                  :contents nil)))
+    (org-property-set ast "id:test123" :STATUS "ACTIVE")
+    (is (string= (getf (getf ast :properties) :STATUS) "ACTIVE"))))
+
+(test todo-setter
+  (let ((ast (list :type :HEADLINE
+                  :properties (list :ID "id:todo001" :TITLE "Task")
+                  :contents nil)))
+    (org-todo-set ast "id:todo001" "DONE")
+    (is (string= (getf (getf ast :properties) :TODO) "DONE"))))
+#+end_src

org/programming-repl.org

@@ -1,7 +1,7 @@
 #+TITLE: SKILL: REPL (org-skill-repl.org)
 #+AUTHOR: Agent
 #+FILETAGS: :system:repl:interactive:debug:
-#+PROPERTY: header-args:lisp :tangle org-skill-repl.lisp
+#+PROPERTY: header-args:lisp :tangle ../lisp/programming-repl.lisp
 
 * Overview
 The *REPL Skill* provides persistent Lisp evaluation, inspection, and debugging capabilities. This enables the agent to verify behavior at runtime rather than just at the text level.
@@ -34,20 +34,31 @@ The REPL skill fills this gap by:
 * Phase C: Implementation
 
 ** Global State
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(in-package :opencortex)
+(in-package :passepartout)
 
-(defvar *repl-package* :opencortex
+(defvar *repl-package* :passepartout
   "Default package for REPL evaluations.")
 
+#+end_src
+** *repl-history*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
 (defvar *repl-history* nil
   "History of evaluated forms for session continuity.")
 
+#+end_src
+** *repl-variables*
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
 (defvar *repl-variables* (make-hash-table :test #'eq)
   "Cache of bound variables for inspection.")
 #+end_src
+#+end_src
 
 ** Core Evaluation
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-eval (code-string &key (package *repl-package*))
   "Evaluate Lisp code and return (values result output error).
@@ -56,7 +67,7 @@ The REPL skill fills this gap by:
    - error: error message or nil on success"
   (let ((out (make-string-output-stream))
         (err (make-string-output-stream))
-        (pkg (or (find-package package) (find-package :opencortex))))
+        (pkg (or (find-package package) (find-package :passepartout))))
     (handler-case
         (let* ((*standard-output* out)
                (*error-output* err)
@@ -79,10 +90,11 @@ The REPL skill fills this gap by:
 #+end_src
 
 ** Variable Inspection
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-inspect (symbol-name &key (package *repl-package*))
   "Inspect a variable's value and structure."
-  (let* ((pkg (or (find-package package) (find-package :opencortex)))
+  (let* ((pkg (or (find-package package) (find-package :passepartout)))
          (sym (find-symbol (string-upcase symbol-name) pkg)))
     (cond
       ((null sym)
@@ -99,10 +111,11 @@ The REPL skill fills this gap by:
 #+end_src
 
 ** List Bound Variables
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-list-vars (&key (package *repl-package*))
   "List all bound variables in the package."
-  (let* ((pkg (or (find-package package) (find-package :opencortex)))
+  (let* ((pkg (or (find-package package) (find-package :passepartout)))
          (vars nil))
     (do-symbols (sym pkg)
       (when (boundp sym)
@@ -111,6 +124,7 @@ The REPL skill fills this gap by:
 #+end_src
 
 ** Load File into Image
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-load-file (filepath)
   "Load a Lisp file into the current image."
@@ -123,6 +137,7 @@ The REPL skill fills this gap by:
 #+end_src
 
 ** Package Switching
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-set-package (package-name)
   "Set the default package for REPL evaluations."
@@ -133,19 +148,20 @@ The REPL skill fills this gap by:
 #+end_src
 
 ** Help/Info
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-help ()
   "Return available REPL commands."
   (format nil "~%
 REPL Skill Commands:
 -------------------
-(repl-eval \"code\" :package :opencortex)
+(repl-eval \"code\" :package :passepartout)
   - Evaluate Lisp code, returns (values result output error)
 
-(repl-inspect \"symbol\" :package :opencortex)
+(repl-inspect \"symbol\" :package :passepartout)
   - Inspect a variable or function
 
-(repl-list-vars :package :opencortex)
+(repl-list-vars :package :passepartout)
   - List all bound variables
 
 (repl-load-file \"/path/to/file.lisp\")
@@ -166,7 +182,7 @@ REPL Skill Commands:
 (test test-repl-eval-simple
   "Test basic arithmetic evaluation."
   (multiple-value-bind (result output error)
-      (opencortex:repl-eval "(+ 1 2)")
+      (passepartout:repl-eval "(+ 1 2)")
     (is (string= result "3"))
     (is (null error))))
 #+end_src
@@ -176,15 +192,54 @@ REPL Skill Commands:
 (test test-repl-eval-error
   "Test that errors are caught and returned."
   (multiple-value-bind (result output error)
-      (opencortex:repl-eval "(+ 1 \"string\")")
+      (passepartout:repl-eval "(+ 1 \"string\")")
     (is (null result))
     (is (not (null error)))))
 #+end_src
 
+** REPL-EVAL Pre-Reason Handler
+
+Registers a handler for =:repl-eval= sensor signals. When the daemon
+receives a framed message with =:sensor :repl-eval=, this handler
+evaluates the Lisp code directly and writes the result back through
+the reply-stream, bypassing the LLM pipeline entirely.
+
+Since this handler is registered via =register-pre-reason-handler=,
+the perceive gate calls it before any LLM reasoning occurs. The
+handler returns T (consumed), so the signal never reaches Reason.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun repl-handle (signal)
+  "Pre-reason handler for :repl-eval sensor. Evaluates code and
+writes the result back through the reply-stream."
+  (let* ((payload (getf signal :payload))
+         (code (getf payload :code))
+         (stream (getf (getf signal :meta) :reply-stream))
+         (result (multiple-value-bind (val out err)
+                     (repl-eval code)
+                   (if err
+                       (list :status :error :message err)
+                       (list :status :success :value (or val ""))))))
+    (when stream
+      (handler-case
+          (progn
+            (write-sequence (frame-message result) stream)
+            (finish-output stream))
+        (error (c)
+          (log-message "REPL-EVAL: Failed to write response: ~a" c))))
+    ;; Return T to signal the message was consumed
+    t))
+
+;; Register the handler at load time
+(register-pre-reason-handler :repl-eval #'repl-handle)
+#+end_src
+
 * Phase E: Lifecycle
 The REPL skill loads at priority 200 (after diagnostics at 100, before utils-lisp at 400).
 
 ** System Prompt Augment (repl-mandate)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
 (defun repl-mandate (context)
   "Returns REPL-first engineering mandate when context involves code editing."
@@ -203,9 +258,9 @@ The REPL skill loads at priority 200 (after diagnostics at 100, before utils-lis
 
 ** Skill Registration
 #+begin_src lisp
-(defskill :skill-repl
+(defskill :passepartout-programming-repl
   :priority 200
   :trigger (lambda (ctx) (declare (ignore ctx)) nil)
   :deterministic (lambda (action ctx) (declare (ignore action ctx)) nil)
   :system-prompt-augment #'repl-mandate)
-#+end_src
+#+end_src

org/programming-standards.org

@@ -2,7 +2,7 @@
 #+AUTHOR: Agent
 #+FILETAGS: :system:engineering:chaos:
 #+DEPENDS_ON: org-skill-utils-lisp
-#+PROPERTY: header-args:lisp :tangle org-skill-engineering-standards.lisp
+#+PROPERTY: header-args:lisp :tangle ../lisp/programming-standards.lisp
 
 * Overview
 The *Engineering Standards Skill* defines the REPL-first engineering lifecycle and enforces technical invariants, including the **Commit-Before-Modify** rule and **Chaos-Driven Development**.
@@ -59,32 +59,69 @@ If a LOADER ERROR or reader-error occurs:
 
 Rationale: The two tracks prevent the two failure modes we have observed. Writing implementation code directly in Org (without REPL prototyping) produces syntax errors that require external tools to debug. Skipping Org-first test writing produces code without verified success criteria. The split is not bureaucratic — it is the mechanism by which both failures are prevented.
 
+** GTD Conventions
+
+Every task headline in the project's ROADMAP.org and gtd.org follows these rules:
+
+1. **:ID:** — generated by ~memory-id-generate~ (UUIDv4 with ~id-~ prefix), never written manually. Use ~(memory-id-generate)~ in the REPL to produce one.
+2. **:CREATED:** — ISO-8601 timestamp: ~[2026-05-02 Sat 14:30]~. Set when the headline is first created, never changed.
+3. **:LOGBOOK:** — each state transition is logged: ~- State "DONE" from "TODO" [2026-05-02 Sat 15:00]~.
+4. **CLOSED:** — set when the task reaches DONE: ~CLOSED: [2026-05-02 Sat 15:00]~.
+5. **TODO keywords** follow the standard sequence: ~TODO~ → ~NEXT~ → ~IN-PROGRESS~ → ~DONE~ / ~BLOCKED~ / ~CANCELLED~.
+6. **The Agent** updates these automatically during Phase E of the lifecycle. The human never needs to write a UUID or timestamp manually — the agent generates and inserts them.
+
+Example:
+
+#+begin_src org
+*** DONE Event Orchestrator
+:PROPERTIES:
+:ID:       id-4a2b9c8f-3d7e-4f12-a9b0-1c2d3e4f5a6b
+:CREATED:  [2026-05-02 Sat]
+:END:
+:LOGBOOK:
+- State "DONE" from "TODO" [2026-05-02 Sat 18:00]
+:END:
+CLOSED: [2026-05-02 Sat 18:00]
+#+end_src
+
 * Implementation
 
 ** Standards Enforcement
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun verify-git-clean-p (dir)
+(in-package :passepartout)
+
+(defun standards-git-clean-p (dir)
   "Checks if a directory has uncommitted changes."
   (let ((status (uiop:run-program (list "git" "-C" (namestring dir) "status" "--porcelain")
                                  :output :string
                                  :ignore-error-status t)))
     (string= "" (string-trim '(#\Space #\Newline #\Tab) status))))
 
-(defun engineering-standards-verify-lisp (code)
+#+end_src
+** standards-lisp-verify
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun standards-lisp-verify (code)
   "Enforces Lisp structural and semantic standards using utils-lisp."
   (let ((result (utils-lisp-validate code :strict t)))
     (if (eq (getf result :status) :success)
         t
         (error (getf result :reason)))))
 
-(defun engineering-standards-format-lisp (code)
+#+end_src
+** standards-lisp-format
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun standards-lisp-format (code)
   "Ensures Lisp code adheres to formatting standards."
   (utils-lisp-format code))
 #+end_src
+#+end_src
 
 ** Skill Registration
 #+begin_src lisp
-(defskill :skill-engineering-standards
+(defskill :passepartout-programming-standards
   :priority 100
   :trigger (lambda (ctx) (declare (ignore ctx)) nil))
-#+end_src
+#+end_src

org/security-dispatcher.org

@@ -0,0 +1,589 @@
+#+TITLE: SKILL: Bouncer (org-skill-bouncer.org)
+#+AUTHOR: Agent
+#+FILETAGS: :system:bouncer:authorization:autonomy:
+#+PROPERTY: header-args:lisp :tangle ../lisp/security-dispatcher.lisp
+
+* Deep Reasoning: Beyond Permission
+
+The Bouncer is the physical security layer of Passepartout. While the Policy skill ensures an action is "legal" (e.g., "Yes, you are allowed to send a Telegram message"), the Bouncer ensures the action is "safe" by inspecting the payload content via Deep Packet Inspection.
+
+Every action that reaches the Bouncer has already been approved by the Reasoning pipeline. The LLM generated it, the deterministic gates verified it, and the Act stage is about to execute it. The Bouncer is the last gate before the action touches the physical world.
+
+The Bouncer inspects nine vectors:
+1. **REPL verification** — warns if a defun is written without REPL prototyping
+2. **Lisp syntax** — blocks writes with unbalanced parens
+3. **Secret paths** — blocks reads to ~.env~, SSH keys, PEM files, etc.
+4. **Content exposure** — scans for API keys, PGP blocks, tokens
+5. **Vault secrets** — matches against stored credentials
+6. **Privacy tags** — blocks ~@personal~ tagged content
+7. **Privacy text** — warns if text references privacy tag names
+8. **Shell safety** — blocks destructive commands and injection patterns
+9. **Network exfil** — blocks unwhitelisted outbound connections
+
+The Bouncer also handles the **Flight Plan** system: when a high-risk action is blocked, it creates a Flight Plan node in the Org files that the user can manually approve.
+
+* Implementation
+
+** Package Context
+
+#+begin_src lisp
+(in-package :passepartout)
+#+end_src
+
+** Security Configuration — network whitelist
+Domains that the Bouncer considers safe for outbound connections. Network calls to unlisted domains are blocked or queued for approval.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *dispatcher-network-whitelist*
+  '("api.telegram.org" "matrix.org" "googleapis.com" "openai.com" "anthropic.com")
+  "Domains the Bouncer considers safe for outbound connections.")
+#+end_src
+
+** Privacy filter tags (*dispatcher-privacy-tags*)
+List of tag strings that mark content as private. Content with these tags is filtered from the LLM context window. Configurable via ~PRIVACY_FILTER_TAGS~ env var.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *dispatcher-privacy-tags*
+  (let ((env (uiop:getenv "PRIVACY_FILTER_TAGS")))
+    (if env
+        (uiop:split-string env :separator '(#\,))
+        '("@personal")))
+  "Tags marking content as private. Set via PRIVACY_FILTER_TAGS.")
+#+end_src
+
+** Protected file paths (*dispatcher-protected-paths*)
+Path patterns (with * wildcards) that are blocked from file reads. Covers SSH keys, PEM/PGP files, credentials, tokens, env files, and cloud configs.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *dispatcher-protected-paths*
+  '(".env" ".env.example" ".env.local" ".env.production"
+    "*credentials*" "*cred*"
+    "*id_rsa*" "*id_dsa*" "*id_ecdsa*" "*id_ed25519*"
+    "*.pem" "*.key" "*.p12" "*.pfx" "*.asc" "*.gpg" "*.pgp"
+    "secring.*" "pubring.*" "private-keys-v1.d/*"
+    "token*" "*secret*" "*token*"
+    ".netrc" ".git-credentials" "auth.json"
+    ".aws/credentials" ".aws/config"
+    ".kube/config" "kubeconfig"
+    "*.cert" "*.crt" "*.csr"
+    "*password*" "*passwd*")
+  "Path patterns blocked from file reads.")
+#+end_src
+
+** Content exposure patterns (*dispatcher-exposure-patterns*)
+Named regex patterns for scanning content for secret exposure. Each entry is a (name regex) pair. Matches are reported by name so downstream code can act on specific categories.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *dispatcher-exposure-patterns*
+  '((:pem-key "-----BEGIN +(RSA|DSA|EC|OPENSSH|PGP) +PRIVATE +KEY *-----")
+    (:pgp-key "-----BEGIN +PGP +PRIVATE +KEY +BLOCK-----")
+    (:pgp-public "-----BEGIN +PGP +PUBLIC +KEY +BLOCK-----")
+    (:openai-key "sk-[A-Za-z0-9-]{20,}")
+    (:google-key "AIza[0-9A-Za-z_-]{35}")
+    (:github-token "gh[pousr]_[A-Za-z0-9]{36,}")
+    (:slack-token "xox[baprs]-[A-Za-z0-9-]{24,}")
+    (:env-assignment "[A-Z_]+=[A-Za-z0-9+/=_\\-]{20,}")
+    (:generic-secret "(api|secret|password|token)[ ]*[:=][ ]*[\"']?[A-Za-z0-9_\\-]{16,}"))
+  "Named regex patterns for secret exposure detection.")
+#+end_src
+
+** Shell safety — timeout
+Maximum seconds a shell command is allowed to run before being killed.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *dispatcher-shell-timeout* 30
+  "Maximum seconds for a shell command before timeout.")
+#+end_src
+
+** Shell safety — output limit
+Maximum characters of shell command output to capture. Prevents memory exhaustion from infinite output.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *dispatcher-shell-max-output* 100000
+  "Maximum characters of shell output to capture.")
+#+end_src
+
+** Shell safety — blocked patterns
+Destructive and injection patterns that are blocked in shell commands. Covers ~rm -rf /~, ~dd~, ~mkfs~, ~shred~, backtick injection, and ~$()~ subshell injection.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *dispatcher-shell-blocked*
+  '((:destructive-rm    "\\brm\\s+-rf\\s+/")
+    (:destructive-dd    "\\bdd\\s+if=")
+    (:destructive-mkfs  "\\bmkfs\\.")
+    (:destructive-format "\\bmformat\\b")
+    (:disk-wipe         "\\bshred\\s+/dev/")
+    (:disk-wipe-b       "\\bwipefs\\s+/dev/")
+    (:injection-backtick "`[^`]+`")
+    (:injection-subshell "\\$\\([^)]+\\)"))
+  "Destructive and injection patterns blocked in shell commands.")
+#+end_src
+
+** Secret Path Check (dispatcher-check-secret-path)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun wildcard-match (pattern path)
+  "Matches PATH against PATTERN where * matches any characters."
+  (let ((regex (cl-ppcre:regex-replace-all
+                "\\*" (cl-ppcre:quote-meta-chars pattern) ".*")))
+    (cl-ppcre:scan regex path)))
+
+#+end_src
+** dispatcher-check-secret-path
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check-secret-path (filepath)
+  "Returns the matching pattern if FILEPATH matches a protected path, nil otherwise."
+  (when (and filepath (stringp filepath))
+    (some (lambda (pattern)
+            (when (wildcard-match pattern filepath)
+              pattern))
+          *dispatcher-protected-paths*)))
+#+end_src
+#+end_src
+
+** Content Exposure Scanner (dispatcher-exposure-scan)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-exposure-scan (text)
+  "Scans TEXT for patterns matching known secret formats.
+Returns a list of matched category keywords."
+  (when (and text (stringp text) (> (length text) 0))
+    (let ((matches nil))
+      (dolist (entry *dispatcher-exposure-patterns*)
+        (let ((name (first entry))
+              (regex (second entry)))
+          (when (cl-ppcre:scan regex text)
+            (push name matches))))
+      matches)))
+#+end_src
+
+** Vault Secret Scanning (dispatcher-vault-scan)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-vault-scan (text)
+  "Scans TEXT for known secrets from the vault."
+  (when (and text (stringp text))
+    (let ((found-secret nil))
+      (maphash (lambda (key val)
+                 (when (and val (stringp val) (> (length val) 5))
+                   (when (search val text)
+                     (setf found-secret key))))
+               *vault-memory*)
+      found-secret)))
+#+end_src
+
+** Privacy Tag Check (dispatcher-check-privacy-tags)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check-privacy-tags (tags-list)
+  "Returns T if any tag in TAGS-LIST matches a privacy filter tag."
+  (when (and tags-list (listp tags-list))
+    (some (lambda (tag)
+            (some (lambda (private)
+                    (or (string-equal tag private)
+                        (search private tag :test #'string-equal)))
+                  *dispatcher-privacy-tags*))
+          tags-list)))
+
+#+end_src
+** dispatcher-check-text-for-privacy
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check-text-for-privacy (text)
+  "Scans TEXT for leaked privacy-tagged content."
+  (when (and text (stringp text))
+    (let ((lower (string-downcase text)))
+      (some (lambda (tag)
+              (search (string-downcase tag) lower))
+            *dispatcher-privacy-tags*))))
+#+end_src
+#+end_src
+
+** Lisp Validation Gate (dispatcher-check-lisp-valid)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-blocks-extract (content)
+  "Extracts concatenated Lisp code from #+begin_src lisp blocks in an Org string."
+  (when (and content (stringp content))
+    (let ((lines (uiop:split-string content :separator '(#\Newline)))
+          (in-block nil)
+          (code ""))
+      (dolist (line lines)
+        (let ((clean (string-trim '(#\Space #\Tab) line)))
+          (cond
+            ((search "#+begin_src lisp" clean)
+             (setf in-block t))
+            ((search "#+end_src" clean)
+             (setf in-block nil))
+            (in-block
+             (setf code (concatenate 'string code line (string #\Newline)))))))
+      (when (> (length code) 0) code))))
+
+#+end_src
+** dispatcher-check-lisp-valid
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check-lisp-valid (filepath content)
+  "Validates Lisp syntax when writing .lisp files or Org files with lisp blocks.
+Returns the validation result plist or nil if not applicable."
+  (when (and content (stringp content) (> (length content) 0))
+    (let ((to-validate
+           (cond
+             ((uiop:string-suffix-p filepath ".lisp") content)
+             ((uiop:string-suffix-p filepath ".org") (org-blocks-extract content))
+             (t nil))))
+      (when to-validate
+        (multiple-value-bind (valid-p err) (ignore-errors
+                                            (let ((*read-eval* nil))
+                                              (with-input-from-string (s (format nil "(progn ~a)" to-validate))
+                                                (loop for form = (read s nil :eof) until (eq form :eof)))
+                                              (values t nil)))
+          (unless valid-p
+            (list :status :error :reason err)))))))
+#+end_src
+#+end_src
+
+** REPL Verification Gate (dispatcher-check-repl-verified)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun org-has-defuns-p (content)
+  "Returns T if the Org content contains any #+begin_src lisp blocks with defuns."
+  (when (and content (stringp content))
+    (search "defun " content :test #'char-equal)))
+
+#+end_src
+** dispatcher-check-repl-verified
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check-repl-verified (action filepath content)
+  "Warns if writing a defun to an Org file without :repl-verified metadata."
+  (let ((repl-verified (getf action :repl-verified)))
+    (when (and filepath
+               (uiop:string-suffix-p filepath ".org")
+               (org-has-defuns-p content)
+               (not repl-verified))
+      (list :type :LOG
+            :payload (list :level :warn
+                           :text (format nil "Lint: Writing defun to ~a without :repl-verified flag. Did you prototype this in the REPL first?" filepath))))))
+#+end_src
+#+end_src
+
+** Shell Safety Check (dispatcher-check-shell-safety)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check-shell-safety (cmd)
+  "Checks a shell command for destructive patterns and injection vectors.
+Returns a list of matched pattern names or nil if safe."
+  (when (and cmd (stringp cmd) (> (length cmd) 0))
+    (let ((matches nil))
+      (dolist (entry *dispatcher-shell-blocked*)
+        (let ((name (first entry))
+              (regex (second entry)))
+          (when (cl-ppcre:scan regex cmd)
+            (push name matches))))
+      matches)))
+#+end_src
+
+** Network Check (dispatcher-check-network-exfil)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check-network-exfil (cmd)
+  "Detects if CMD attempts to contact an unwhitelisted external host."
+  (when (and cmd (stringp cmd))
+    (multiple-value-bind (match regs)
+        (cl-ppcre:scan-to-strings "(http|https|ftp)://([\\w\\.-]+)" cmd)
+      (declare (ignore match))
+      (when regs
+        (let ((domain (aref regs 1)))
+          (not (some (lambda (safe) (search safe domain))
+                    *dispatcher-network-whitelist*)))))))
+#+end_src
+
+** Main Security Gate (dispatcher-check)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-check (action context)
+  "Security gate for high-risk actions.
+Vectors: lisp validation, secret path, secret content, vault secrets,
+privacy tags, privacy text, shell safety, network exfil, high-impact approval."
+  (declare (ignore context))
+  (let* ((target (proto-get action :target))
+         (payload (proto-get action :payload))
+         (text (or (proto-get payload :text) (proto-get action :text)))
+         (filepath (or (proto-get payload :filepath)
+                       (when (equal (proto-get payload :tool) "read-file")
+                         (proto-get (proto-get payload :args) :filepath))
+                       (when (equal (proto-get payload :tool) "write-file")
+                         (proto-get (proto-get payload :args) :filepath))))
+         (content (when filepath (proto-get (proto-get payload :args) :content)))
+         (cmd (or (proto-get payload :cmd)
+                  (when (and (eq target :tool) (equal (proto-get payload :tool) "shell"))
+                    (proto-get (proto-get payload :args) :cmd))))
+         (approved (proto-get action :approved))
+         (tags (proto-get payload :tags))
+         (lisp-valid (when (and filepath content (not approved))
+                       (dispatcher-check-lisp-valid filepath content)))
+         (repl-lint (when (and filepath content (not approved))
+                     (dispatcher-check-repl-verified action filepath content))))
+    (cond
+      (approved action)
+
+       ;; Vector 0: REPL verification lint (warn, don't block)
+      (repl-lint
+       (log-message "BOUNCER: ~a" (proto-get repl-lint :text))
+       action)
+
+       ;; Vector 1: Lisp syntax validation (block bad lisp writes)
+      ((and lisp-valid (eq (getf lisp-valid :status) :error))
+       (log-message "LINT VIOLATION: Blocked write — lisp syntax error in ~a: ~a" filepath (getf lisp-valid :reason))
+       (list :type :LOG
+             :payload (list :level :error
+                            :text (format nil "Lisp syntax error in ~a: ~a. The write was blocked. Fix the parenthesis balance and retry." filepath (getf lisp-valid :reason)))))
+
+      ;; Vector 2: File read to a protected secret path
+      ((and filepath (dispatcher-check-secret-path filepath))
+       (let ((matched (dispatcher-check-secret-path filepath)))
+         (log-message "SECURITY VIOLATION: Blocked read of protected path '~a' (matched: ~a)" filepath matched)
+         (list :type :LOG
+               :payload (list :level :error
+                              :text (format nil "Action blocked: Attempted read of protected path '~a'" filepath)))))
+
+      ;; Vector 3: Content contains secret patterns
+      ((and text (dispatcher-exposure-scan text))
+       (let ((matched (dispatcher-exposure-scan text)))
+         (log-message "SECURITY VIOLATION: Content contains secret patterns: ~a" matched)
+         (list :type :LOG
+               :payload (list :level :error
+                              :text "Action blocked: Content contains potential secret exposure."))))
+
+      ;; Vector 4: Content contains vault secrets
+      ((and text (dispatcher-vault-scan text))
+       (let ((secret-name (dispatcher-vault-scan text)))
+         (log-message "SECURITY VIOLATION: Blocked potential leak of secret '~a'" secret-name)
+         (list :type :LOG
+               :payload (list :level :error
+                              :text (format nil "Action blocked: Potential exposure of '~a'" secret-name)))))
+
+      ;; Vector 5: Privacy-tagged content in action
+      ((and tags (dispatcher-check-privacy-tags tags))
+       (log-message "PRIVACY VIOLATION: Action contains privacy-tagged content")
+       (list :type :LOG
+             :payload (list :level :warn
+                            :text "Action blocked: Content tagged with privacy filter.")))
+
+      ;; Vector 6: Text leaks privacy tag names
+      ((and text (dispatcher-check-text-for-privacy text))
+       (log-message "PRIVACY WARNING: Text may contain leaked private content")
+       (list :type :LOG
+             :payload (list :level :warn
+                            :text "Action blocked: Text may reference private content.")))
+
+       ;; Vector 7: Shell destructive/injection patterns
+      ((and cmd (dispatcher-check-shell-safety cmd))
+       (let ((matched (dispatcher-check-shell-safety cmd)))
+         (log-message "SHELL VIOLATION: Destructive or injection pattern in command: ~a" matched)
+         (list :type :LOG
+               :payload (list :level :error
+                              :text (format nil "Shell command blocked: contains unsafe pattern ~a" matched)))))
+
+      ;; Vector 8: Network exfiltration
+      ((and (or (eq target :shell)
+                (and (eq target :tool) (equal (proto-get payload :tool) "shell")))
+            (dispatcher-check-network-exfil cmd))
+        (log-message "SECURITY WARNING: External network call detected. Queuing for approval.")
+        (list :type :EVENT :level :approval-required
+              :payload (list :sensor :approval-required :action action)))
+
+      ;; Vector 8: High-impact action approval
+      ((or (member target '(:shell))
+           (and (eq target :tool) (member (proto-get payload :tool) '("shell" "repair-file") :test #'string=))
+           (and (eq target :emacs) (eq (proto-get payload :action) :eval)))
+       (log-message "SECURITY: High-impact action requires approval: ~a" (or (proto-get payload :tool) target))
+       (list :type :EVENT :payload (list :sensor :approval-required :action action)))
+      (t action))))
+
+#+end_src
+
+** Approval Processing (dispatcher-approvals-process)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-approvals-process ()
+  "Scans for APPROVED flight plans and re-injects them."
+  (let ((approved-nodes (memory-objects-by-attribute :TODO "APPROVED"))
+        (found-any nil))
+    (dolist (node approved-nodes)
+      (let* ((attrs (memory-object-attributes node))
+             (tags (getf attrs :TAGS))
+             (action-str (getf attrs :ACTION)))
+        (when (and (member "FLIGHT_PLAN" tags :test #'string-equal) action-str)
+          (log-message "BOUNCER: Found approved flight plan '~a'. Re-injecting..." (memory-object-id node))
+          (let ((action (ignore-errors (read-from-string action-str))))
+            (when action
+              (setf (getf action :approved) t)
+              (stimulus-inject (list :type :EVENT
+                                     :payload (list :sensor :approval-required
+                                                    :action action
+                                                    :approved t)
+                                     :meta (list :source :system)))
+              (setf (getf (memory-object-attributes node) :TODO) "DONE")
+              (setq found-any t))))))
+    found-any))
+#+end_src
+
+** Flight Plan Creation (dispatcher-flight-plan-create)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-flight-plan-create (blocked-action)
+  "Creates a Flight Plan node for manual approval in Emacs."
+  (let ((id (remove #\- (princ-to-string (uuid:make-v4-uuid)))))
+    (log-message "BOUNCER: Creating flight plan node '~a'..." id)
+    (list :type :REQUEST :target :emacs
+          :payload (list :action :insert-node :id id
+                         :attributes (list :TITLE "Flight Plan: High-Risk Action"
+                                           :TODO "PLAN" :TAGS '("FLIGHT_PLAN")
+                                           :ACTION (format nil "~s" blocked-action))))))
+#+end_src
+
+** HITL In-Memory Store (Gateway-Agnostic Approval)
+
+For TUI, CLI, and Signal/Telegram users who don't have Emacs. Pending
+actions are stored in memory with a correlation token. The user replies
+with the token to approve or deny.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *hitl-pending* (make-hash-table :test 'equal)
+  "Maps correlation token → blocked-action plist for pending HITL approvals.")
+#+end_src
+
+*** hitl-create
+
+A new HITL entry is created whenever the deterministic engine returns an
+~:approval-required~ level action. A correlation token is generated and
+the blocked action is stored for later retrieval by ~hitl-approve~ or
+~hitl-deny~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun hitl-create (blocked-action)
+  "Saves a blocked action for HITL approval. Returns a plist with
+:token (the correlation ID) and :message (user-facing text)."
+  (let* ((token (format nil "HITL-~a" (subseq (remove #\- (princ-to-string (uuid:make-v4-uuid))) 0 8))))
+    (setf (gethash token *hitl-pending*) blocked-action)
+    (log-message "HITL: Created pending approval ~a" token)
+    (list :token token
+          :message (format nil "HITL: Action requires approval [~a]. Reply /approve ~a to approve." token token))))
+#+end_src
+
+*** hitl-approve
+
+When the user sends an approval command with a valid token, the blocked
+action is retrieved, stamped with ~:approved t~, and re-injected into the
+pipeline via ~stimulus-inject~. The perceive gate detects the
+~:approval-required~ sensor with ~:approved t~ and processes it.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun hitl-approve (token)
+  "Approves a pending HITL action by token. Re-injects with :approved t.
+Returns T if found and approved, nil if token is invalid."
+  (let ((action (gethash token *hitl-pending*)))
+    (if action
+        (progn
+          (remhash token *hitl-pending*)
+          (setf (getf action :approved) t)
+          (stimulus-inject (list :type :EVENT
+                                  :payload (list :sensor :approval-required
+                                                 :action action
+                                                 :approved t)
+                                  :meta (list :source :system)))
+          (log-message "HITL: Approved ~a — re-injected" token)
+          t)
+        (progn
+          (log-message "HITL: Token ~a not found in pending" token)
+          nil))))
+#+end_src
+
+*** hitl-deny
+
+Denial removes the pending action from the store without re-injecting it.
+The action is silently discarded and the token becomes invalid for future
+use.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun hitl-deny (token)
+  "Denies a pending HITL action by token. Removes it from the pending store.
+Returns T if found, nil if token is invalid."
+  (if (gethash token *hitl-pending*)
+      (progn
+        (remhash token *hitl-pending*)
+        (log-message "HITL: Denied ~a" token)
+        t)
+      (progn
+        (log-message "HITL: Token ~a not found in pending" token)
+        nil)))
+#+end_src
+
+*** hitl-handle-message
+
+The universal entry point for HITL commands arriving from any gateway.
+Parses the text for ~/approve~, ~/deny~, ~approve~, or ~deny~ followed
+by a token, dispatches to ~hitl-approve~ or ~hitl-deny~, and returns T
+if the message was a HITL command (so the gateway knows not to inject it
+into the main pipeline).
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun hitl-handle-message (text &optional source)
+  "Checks if TEXT is a HITL approval or denial command.
+If it matches, processes the command and returns T.
+Otherwise returns nil (text should be handled as normal input).
+Recognized formats:
+  /approve HITL-abc123
+  /deny HITL-abc123
+  approve HITL-abc123
+  deny HITL-abc123"
+  (let ((text (string-trim '(#\Space) (or text ""))))
+    (when (or (uiop:string-prefix-p (string-downcase "/approve") (string-downcase text))
+              (uiop:string-prefix-p (string-downcase "approve") (string-downcase text)))
+      (let* ((parts (uiop:split-string text :separator '(#\Space #\Tab)))
+             (token (when (> (length parts) 1) (second parts))))
+        (when (and token (hitl-approve token))
+          (log-message "HITL: Approved via ~a — ~a" (or source :unknown) token)
+          (return-from hitl-handle-message t))))
+    (when (or (uiop:string-prefix-p (string-downcase "/deny") (string-downcase text))
+              (uiop:string-prefix-p (string-downcase "deny") (string-downcase text)))
+      (let* ((parts (uiop:split-string text :separator '(#\Space #\Tab)))
+             (token (when (> (length parts) 1) (second parts))))
+        (when (and token (hitl-deny token))
+          (log-message "HITL: Denied via ~a — ~a" (or source :unknown) token)
+          (return-from hitl-handle-message t))))
+    nil))
+#+end_src
+
+** Gate Logic (dispatcher-gate)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun dispatcher-gate (action context)
+  "Main deterministic gate for the Bouncer skill."
+  (let* ((payload (getf context :payload))
+         (sensor (getf payload :sensor)))
+    (case sensor
+      (:approval-required
+       (dispatcher-flight-plan-create (getf payload :action)))
+      (:heartbeat
+       (dispatcher-approvals-process)
+       (if action (dispatcher-check action context) action))
+      (otherwise
+       (if action (dispatcher-check action context) action)))))
+#+end_src
+
+** Skill Registration
+#+begin_src lisp
+(defskill :passepartout-security-dispatcher
+  :priority 150
+  :trigger (lambda (ctx) (declare (ignore ctx)) t)
+  :deterministic #'dispatcher-gate)
+#+end_src

org/security-permissions.org

@@ -0,0 +1,44 @@
+#+TITLE: SKILL: Tool Permissions (org-skill-tool-permissions.org)
+#+AUTHOR: Agent
+#+FILETAGS: :skill:security:permissions:
+#+PROPERTY: header-args:lisp :tangle ../lisp/security-permissions.lisp
+
+* Overview: The Authorization Matrix
+
+Every cognitive tool (file read, file write, shell execute, etc.) has a permission level: ~:allow~ (executed without asking), ~:ask~ (user is prompted before execution), or ~:deny~ (blocked entirely). Tool Permissions maintains the registry of these levels and provides the ~permission-gate-check~ that the Bouncer calls before dispatching a tool action.
+
+The default for any unregistered tool is ~:ask~ — cautious by default, permissive by configuration. This prevents a hallucinated tool call from executing without at least giving the user a chance to review it.
+
+* Implementation
+
+** Permission store (tool level)
+Hash table mapping tool names to their permission level.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *permission-table* (make-hash-table :test 'equal))
+#+end_src
+
+** Set permission
+Sets the permission level for a specific cognitive tool.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun permission-set (tool-name level)
+  "Sets the permission level for a tool."
+  (setf (gethash (string-downcase (string tool-name)) *permission-table*) level))
+#+end_src
+
+** Get permission
+Retrieves the current permission level for a tool. Defaults to ~:ask~ if unset.
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun permission-get (tool-name)
+  "Retrieves the permission level for a tool. Defaults to :ask."
+  (gethash (string-downcase (string tool-name)) *permission-table* :ask))
+#+end_src
+
+** Skill Registration
+#+begin_src lisp
+(defskill :passepartout-security-permissions
+  :priority 600
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))
+#+end_src

org/security-policy.org

@@ -0,0 +1,39 @@
+#+TITLE: SKILL: Policy (org-skill-policy.org)
+#+AUTHOR: Agent
+#+FILETAGS: :system:policy:constitutional:
+#+PROPERTY: header-args:lisp :tangle ../lisp/security-policy.lisp
+
+* Architectural Intent: The Constitutional Layer
+
+The Policy skill encodes the non-negotiable values of Passepartout. Every action the agent proposes must pass through this gate. If the action lacks justification, it is blocked — not because it's dangerous, but because it's opaque.
+
+This is the "Radical Transparency" invariant in practice. The agent must explain *why* it wants to do something, not just *what* it wants to do. An action with ~:explanation "Because I said so"~ is rejected. An action with ~:explanation "The user asked me to read their TODO list and summarize it"~ passes.
+
+The Policy skill is intentionally simple. It has one job: ensure every action has a meaningful explanation. Other security concerns (secret scanning, path blocking, network exfiltration) are handled by the Bouncer. The Policy is about values, not threats.
+
+* Implementation
+
+** Policy Logic (policy-compliance-check)
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun policy-compliance-check (action context)
+  "Enforces constitutional invariants on proposed actions."
+  (declare (ignore context))
+  (let* ((payload (proto-get action :payload))
+         (explanation (proto-get payload :explanation)))
+    (if (and explanation (stringp explanation) (> (length explanation) 10))
+        action
+        (progn
+          (log-message "POLICY VIOLATION: Action lacks sufficient explanation.")
+          (list :type :LOG
+                :payload (list :level :warn
+                              :text "Action blocked: Missing or insufficient :explanation. Please justify your reasoning."))))))
+#+end_src
+
+** Skill Registration
+#+begin_src lisp
+(defskill :passepartout-security-policy
+  :priority 500
+  :trigger (lambda (ctx) (declare (ignore ctx)) t)
+  :deterministic #'policy-compliance-check)
+#+end_src

org/security-validator.org

@@ -1,29 +1,30 @@
 #+TITLE: SKILL: Protocol Validator (org-skill-protocol-validator.org)
 #+AUTHOR: Agent
 #+FILETAGS: :system:protocol:validation:
-#+PROPERTY: header-args:lisp :tangle org-skill-protocol-validator.lisp
+#+PROPERTY: header-args:lisp :tangle ../lisp/security-validator.lisp
 
 * Overview
-The *Protocol Validator* skill enforces strict schema compliance for all internal and external communication.
+The Protocol Validator enforces schema compliance on every message entering or leaving the cognitive pipeline. It checks that messages are valid plists, that they have the required ~:type~ and ~:payload~ fields, and that the type is one of the known types (~:REQUEST~, ~:EVENT~, ~:RESPONSE~, ~:LOG~, ~:STATUS~). This prevents malformed messages from crashing the pipeline and ensures backward compatibility when the protocol evolves.
 
 * Implementation
 
 ** Validation Logic
+;; REPL-VERIFIED: 2026-05-03T13:00:00
 #+begin_src lisp
-(defun protocol-validate (msg)
+(defun validator-protocol-check (msg)
   "Enforces structural schema compliance on protocol messages."
   (validate-communication-protocol-schema msg))
 #+end_src
 
 ** Skill Registration
 #+begin_src lisp
-(defskill :skill-protocol-validator
+(defskill :passepartout-security-validator
   :priority 95
   :trigger (lambda (ctx) (declare (ignore ctx)) t)
   :deterministic (lambda (action ctx)
                    (declare (ignore ctx))
                    (handler-case
-                       (progn (protocol-validate action) action)
+                       (progn (validator-protocol-check action) action)
                      (error (c)
                        (list :type :LOG :payload (list :level :error :text (format nil "Protocol Violation: ~a" c)))))))
 #+end_src

org/security-vault.org

@@ -0,0 +1,72 @@
+#+TITLE: SKILL: Credentials Vault (org-skill-credentials-vault.org)
+#+AUTHOR: Agent
+#+FILETAGS: :system:security:vault:
+#+PROPERTY: header-args:lisp :tangle ../lisp/security-vault.lisp
+
+* Overview
+The *Credentials Vault* provides secure in-memory storage for sensitive API keys and session tokens.
+
+* Implementation
+
+** Vault Storage
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defvar *vault-memory* (make-hash-table :test 'equal)
+  "In-memory cache of sensitive credentials.")
+#+end_src
+
+** Secret Management
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun vault-get (provider &key (type :api-key))
+  "Retrieves a credential from the vault or environment."
+  (let* ((key (format nil "~a-~a" provider type))
+         (val (gethash key *vault-memory*)))
+    (if val
+        val
+        (let ((env-var (case provider
+                          (:gemini "GEMINI_API_KEY")
+                          (:openai "OPENAI_API_KEY")
+                          (:anthropic "ANTHROPIC_API_KEY")
+                          (:openrouter "OPENROUTER_API_KEY")
+                          (otherwise nil))))
+          (when env-var (uiop:getenv env-var))))))
+
+#+end_src
+** vault-set
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun vault-set (provider secret &key (type :api-key))
+  "Stores a secret in the vault."
+  (let ((key (format nil "~a-~a" provider type)))
+    (setf (gethash key *vault-memory*) secret)))
+#+end_src
+#+end_src
+
+** Secret Wrappers (gateway-messaging)
+
+Thin wrappers that match the export names used by =gateway-messaging=.
+Delegates to the existing =vault-get=/=vault-set= with ~:type :secret~.
+
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun vault-get-secret (provider)
+  "Retrieves a stored secret or token for a gateway provider."
+  (vault-get provider :type :secret))
+
+#+end_src
+** vault-set-secret
+;; REPL-VERIFIED: 2026-05-03T13:00:00
+#+begin_src lisp
+(defun vault-set-secret (provider secret)
+  "Stores a secret or token for a gateway provider."
+  (vault-set provider secret :type :secret))
+#+end_src
+#+end_src
+
+** Skill Registration
+#+begin_src lisp
+(defskill :passepartout-security-vault
+  :priority 600
+  :trigger (lambda (ctx) (declare (ignore ctx)) nil))
+#+end_src