[tommy-ca]

Purpose

Reconcile user-facing harness and JEV design documentation with the current source at the audited 2026-10-20 trunk dea54d5 (canonical upstream 0.15.29). Source audit, not a claim of runtime or authenticated JEV verification.

Changes

• Add docs/architecture/harness-adapters-and-jev-2026-10-20.md: architecture/ownership, all 12 schema contracts, eight profile vs six built-in matrix, model/role resolver, package projector/driver/receipt planes, Jev neutral decision objects and present System One urllib transport versus proposed SDK.
• Name current unsupported/unproved claims and source-pinned gaps for privacy, advisory receipt admission and nonfinite response/billing controls.
• Update docs/guide/12-porting.md with a link to current snapshot and tag older five-host acceptance narrative historical; update README.md navigation.

Evidence / outstanding controls

• Verified by direct GitHub source reads: pstack.package.json, all eight profiles, schema/driver/core files, living JEV spec, relevant existing tests. No local pytest, native-host runtime, independent agent swarm or keyed JEV smoke has run in this docs-only PR. Do not count source inspection as live PASS.
• #657 epic, #661 docs leaf.
• Blockers for opt-in JEV production use: canonical mapping #663 (23 playbooks; 18 stale blobs), #658 egress/bypass; #659 evidence; #660 response/budget.
• Historical completion [Epic] Integrate optional Jev decision models into pstack with minimal semantic change #193, [Program] Harness-neutral pstack role/model contracts and pstack-claude parity #429, [Epic][Upstream 0.15.29] Reconcile canonical pstack delta without losing six-harness behavior #622 remains intact. Research-only extension research(jev-task-fit): assess fast-role/model-choice extension without promoting unproved decisions #517 stays open.

Requested review (Thermo / Swarm / Arena / Interrogate)

1. Swarm independent source + schema vs test crosscheck on exact branch HEAD; report run/model IDs, no fake fanout.
2. Arena baseline-only docs vs this additive snapshot vs refactoring historical guide into one canonical source; minimize duplication.
3. Interrogate evidence integrity, false supported labels, privacy/admission language, wrong upstream-version references, and potential broken links.
4. Run python3 scripts/project-package.py --check, docs tests, pytest targeted decision/adapters tests, then only operator-authorized native/paid runtime smoke. Record SHA and separate BLOCKED from PASS.

No code or configured routing behavior changed; keep as draft until docs verification and reviewers accept it.

Exact-head test reconciliation — 2026-10-20

• Head d6352cb5940b8f319d025caa54db1088266a7c0c, offline workflow run #39483367641: SUCCESS. Adds tests/test_architecture_documentation.py and offline JEV/advisory/rollback eval suite to .github/workflows/portability-offline.yml.
• Earlier expanded run #39482879748 failed a self-consistency test: the diff-scoped verifier still classified tests/test_shadow_routing.py as outside_gate even though it was newly included in CI. Test expectation changed to offline in the same PR; next run passed.
• Source-grounded protocol defect #664 remains not fixed: documented System One questions + answers objects do not match code's questions:[] and results:[] mocks. Other opt-in blockers remain [JEV][P0] Never transmit raw task queries or call provider on bypass routes #658/[JEV][P1] Gate advisory promotion on persisted pre-existing calibrated evidence #659/[JEV][P1] Reject nonfinite confidence, incomplete response identity and unbounded paid calls #660/[JEV][P1] Fail closed when decision-routing registry drifts from applied canonical pin #663. No native-host/real-provider proof and no independent agent reviews. Keep PR draft pending review.

[tommy-ca]

Thermo-Nuclear / Code Quality review — exact docs PR diff at d6352cb

Scope: Only the six added/modified files in PR #662. The JEV P0/P1 findings #658/#659/#660/#663/#664 concern pre-existing runtime files and are tracked separately; they are not introduced by this PR, consistent with the upstream Thermo-Nuclear review scope.

Correctness / security diff audit: README and porting-guide links point to the new source-pinned architecture document. The new document distinguishes eight descriptive profiles, six built-in host targets, candidate versus packaged states, four OMP scenario-pinned capabilities, model planning versus host-native execution, and JEV transport mock versus real provider proof. The document explicitly flags protocol mismatch #664, raw-query egress #658 and synthetic evidence #659. No runtime code, feature gate, provider key, or deployment behavior changes in this diff.

Code-quality / 'code judo': Adding one tiny source-derived docs contract suite is preferable to copying status tables/role registries or inventing a schema compiler. The added CI step reuses existing pytest and doesn't add dependencies, a scheduler, second router or provider SDK. No changed source file crosses the Thermos 1,000-line threshold. The new scope changes test_shadow_routing.py from outside-gate to offline; corresponding check-selection test was correctly reconciled.

Observed verification: Portable offline workflow #39483367641 passed at exact PR head d6352cb. Earlier run #39482879748 failed one test-tier expectation on the first CI expansion; fixed and re-run. This check proves hermetic tests, not authenticated JEV transport, live host execution, or independent model-family judging.

Acceptance / gate: Documentation-only diff has no observed new P0/P1 defect. Keep this as a draft until independent reviewer sign-off and the declared docs acceptance workflow is complete. Do not merge safety/runtime corrections under this docs PR. Swarm/Arena/Interrogate are requested future native runs, not claims made by this single-reviewer source audit. Parent #657 maintains those unresolved gates.

[tommy-ca]

Independent Verification Verdict:

Verified against head d6352cb5940b8f319d025caa54db1088266a7c0c by independent-verifier.

• Schema inventory: 12 schemas match.
• Host table: 8 profiles (6 builtin, 2 candidate) match.
• JEV caveats explicitly cite [JEV][P0] Never transmit raw task queries or call provider on bypass routes #658, [JEV][P1] Gate advisory promotion on persisted pre-existing calibrated evidence #659, [JEV][P1] Reject nonfinite confidence, incomplete response identity and unbounded paid calls #660, [JEV][P1] Fail closed when decision-routing registry drifts from applied canonical pin #663, [JEV][P1] Replace self-consistent mock wire with official System One questions/answers contract #664.
• CI: Portable offline contracts run #39483367641 passed.
• No runtime code modified.