Obpis

---
id: OBPI-0.0.37-19-corpus-capture-tool-skill
parent: ADR-0.0.37-constitutional-invariant-composition
item: 19
lane: Heavy
sensitivity: security
status: Completed
# req_atomic: each REQ is a single indivisible labor unit — one behavior/support
# surface apiece (append, no-surface-edit, event, fail-closed, schema, skill, docs);
# none decomposes into parallel seq=02+ sub-tasks (ADR-0.0.64 task-envelope exemption).
req_atomic:
  - REQ-0.0.37-19-01
  - REQ-0.0.37-19-02
  - REQ-0.0.37-19-03
  - REQ-0.0.37-19-04
  - REQ-0.0.37-19-05
  - REQ-0.0.37-19-06
  - REQ-0.0.37-19-07
---

# OBPI-0.0.37-19-corpus-capture-tool-skill: Corpus Capture Tool Skill

## ADR Item

- **Source ADR:** `docs/design/adr/foundation/ADR-0.0.37-constitutional-invariant-composition/ADR-0.0.37-constitutional-invariant-composition.md`
<!-- gz-validate-skip: command-shape -->
- **Checklist Item:** #19 - "OBPI-0.0.37-19 — Corpus capture tool + skill (`gz content remember <surface> --section <id> [--tier]` tool appends an entry + `corpus_entry_appended` ledger event, never edits a rendered surface; wielding capture skill; replaces prior OBPI-12 renderer)"

**Status:** Completed

## Objective

<!-- gz-validate-skip: command-shape -->
Deliver the **corpus capture tool + wielding skill**: a `gz content remember <surface> --section <id> --text <text> [--tier invariant|compressible]` subcommand on the existing `gz content` group that appends an addressed, provenanced `CorpusEntry` (OBPI-18 model) to the append-only per-surface corpus store at `.gzkit/corpus/<surface>.jsonl`, emits a `corpus_entry_appended` ledger event, and **never edits a rendered surface** (AGENTS.md, CLAUDE.md, or any mirror). This is the write-path half of the ADR-0.0.37 § Decision Re-Alignment pipeline (`corpus → compress → rendition → playback`): capture appends to the source of truth; deterministic playback (OBPI-22) remains the sole writer of rendered surfaces. Replaces the prior OBPI-12 renderer path.

## Lane

**Heavy** - This OBPI changes a command/API/schema/runtime contract surface.

> Heavy is reserved for command/API/schema/runtime-contract changes. Process,
> documentation, and template-only work stays Lite unless it changes one of
> those external surfaces.

## Allowed Paths

- `src/gzkit/commands/content/remember.py` **CREATE** — the `remember` subcommand implementation (sibling to `import_.py`, `list.py`, `render.py`, `edit.py`, `show.py`)
- `src/gzkit/commands/content/__init__.py` — EDIT: register the `remember` subparser in `register_content_parsers`
- `src/gzkit/content/corpus_store.py` **CREATE** — append-only per-surface corpus persistence (load/append/save `.gzkit/corpus/<surface>.jsonl`); consumes the OBPI-18 `CorpusEntry`/`Corpus` model read-only
- `src/gzkit/events.py` — EDIT: add the typed `CorpusEntryAppendedEvent` read-path model (sibling to `ArtifactEditedEvent`, `ObpiCreatedEvent`) and register it in the `TypedLedgerEvent` discriminated union
- `src/gzkit/ledger_events.py` — EDIT: add the `corpus_entry_appended_event(...)` write-path factory (sibling to `composition_rendered_event`) — the named factory `Ledger.append()` consumes; ADDED 2026-06-05 (plan-ratified allowlist correction A, see Tracked Defects)
- `.gzkit/schemas/ledger_events.json` — EDIT: register the `corpus_entry_appended` event type with its required-fields schema
- `.gzkit/skills/gz-content-remember/SKILL.md` **CREATE** — the capture skill that wields the tool (canonical edit surface)
- `tests/commands/test_content_remember.py` **CREATE** — command-level BEHAVIOR tests (`@covers`)
- `tests/content/test_corpus_store.py` **CREATE** — store-level BEHAVIOR tests (`@covers`)
- `docs/user/manpages/content.md` — EDIT: the existing `gz content` group manpage; add a `### remember` subsection documenting the verb with a real EXAMPLES block (CORRECTED 2026-06-05 from the brief's original `gz-content.md` CREATE — the group manpage already exists as `content.md`; plan-ratified allowlist correction B, see Tracked Defects)
- `docs/user/runbook.md` — EDIT: operator runbook entry for the capture flow
- `features/content_remember.feature` **CREATE** — Heavy-lane BDD scenario tagged `@REQ-0.0.37-19-*`
- `docs/design/adr/foundation/ADR-0.0.37-constitutional-invariant-composition/obpis/OBPI-0.0.37-19-corpus-capture-tool-skill.md` — active brief and evidence record
- `docs/design/adr/foundation/ADR-0.0.37-constitutional-invariant-composition/ADR-0.0.37-constitutional-invariant-composition.md` — parent ADR (read-only, for intent and the 1:1 checklist sync)

**Coupled surfaces (Stage-3 amendment, see § Tracked Defects for rationale):** mechanically forced by adding a CLI verb + ledger event + skill — `src/gzkit/schemas/ledger.json` (real event-schema registry), `src/gzkit/governance/trust_audits/events.py` (`_NO_GRAPH_IMPACT` waiver), `src/gzkit/governance/trust_audits/insights.py` (`_INSIGHTS_SHAPE_WAIVERS`), `tests/test_schemas.py` (`_EVENT_MODELS` map), `tests/content/test_tui_affordances.py` (subcommand fence), `config/doc-coverage.json` (command declaration), `docs/user/skills/gz-content-remember.md` CREATE + `docs/user/skills/index.md` (skill manpage + index), `.gzkit/skills/gz-context/SKILL.md` (router home), `data/distribution_baseline_manifest.json` (canonical-surface baseline regen).

**Sync-generated mirrors (written by `gz agent sync control-surfaces`, not hand-edited):** `src/gzkit/skills/gz-content-remember/SKILL.md`, `.claude/skills/gz-content-remember/SKILL.md`, `.github/skills/gz-content-remember/SKILL.md`, `.agents/skills/gz-content-remember/SKILL.md` — these are propagated from the canonical `.gzkit/skills/` source per `.gzkit/rules/skill-surface-sync.md`; the sync run is a ceremony step, not a manual edit.

## Denied Paths

- Paths not listed in Allowed Paths
- `AGENTS.md`, `CLAUDE.md`, `.github/copilot-instructions.md`, and every rendered/spliced control surface — capture MUST NOT write any rendered surface (the load-bearing invariant of this OBPI)
- `src/gzkit/content/models/corpus.py` — the OBPI-18 corpus MODEL is consumed, never modified here
- `src/gzkit/render/**`, `src/gzkit/sync_surfaces.py` — the render/playback path is OBPI-22 scope
- `.gzkit/ledger.jsonl` — never hand-edited; events are emitted via the CLI's ledger writer
- New runtime dependencies; CI files; lockfiles

## Requirements (FAIL-CLOSED)

1. REQUIREMENT [BEHAVIOR]: The `remember` subcommand of `gz content` (invoked as `content remember <surface> --section <id> --text <text> [--tier]`) MUST append exactly one `CorpusEntry` to `.gzkit/corpus/<surface>.jsonl` (creating the file/dir on first use) and exit 0, with the appended entry carrying populated `id`, `surface`, `section`, `tier`, `classification`, `text`, `origin`, and `ts` fields.
2. REQUIREMENT [BEHAVIOR]: The command MUST NOT modify any rendered surface — after a successful `remember`, `AGENTS.md`, `CLAUDE.md`, and all skill/rule mirrors are byte-unchanged; only `.gzkit/corpus/<surface>.jsonl` is written.
3. REQUIREMENT [BEHAVIOR]: A successful append MUST emit a `corpus_entry_appended` ledger event carrying at least `surface`, `section`, `entry_id`, and `tier`.
4. REQUIREMENT [BEHAVIOR]: The command MUST fail closed (non-zero exit, no append) when `<surface>` is unknown or `--section <id>` does not resolve to a real template-defined section of that surface's `AgentContract` — an unaddressable entry is never written.
5. REQUIREMENT [SUPPORT]: The `corpus_entry_appended` event type MUST be registered in `.gzkit/schemas/ledger_events.json` with its required-fields schema — proven by `uv run gz validate --ledger` plus the `corpus_entry_appended` ledger event emitted by the command.
6. REQUIREMENT [SUPPORT]: The capture skill MUST exist at `.gzkit/skills/gz-content-remember/SKILL.md` and propagate byte-equal to its mirrors — proven by `uv run gz validate --surfaces` plus the `artifact_edited` event accounting for the skill.
7. REQUIREMENT [SUPPORT]: The `remember` verb (on `gz content`) MUST be documented in `docs/user/manpages/gz-content.md` and `docs/user/runbook.md` — proven by `uv run gz validate --documents` plus the `artifact_edited` event accounting for the doc surfaces.
8. NEVER: Write to a rendered surface, the corpus MODEL (`corpus.py`), the ledger file directly, or any path outside Allowed Paths.
9. ALWAYS: Reconcile the brief with the parent ADR (`uv run gz validate --brief-reconcile`) before implementation begins.

> STOP-on-BLOCKERS: if prerequisites are missing, print a BLOCKERS list and halt.

## Discovery Checklist

**Parent ADR (read first; order pinned — GHI #321):**

<!-- gz-validate-skip: command-shape -->
- [ ] **Parent ADR § Decision Re-Alignment item — quote the line this OBPI implements** verbatim into the brief's Implementation Summary. The contract: "Corpus capture tool + skill (`gz content remember <surface> --section <id> [--tier]` tool appends an entry + `corpus_entry_appended` ledger event, never edits a rendered surface; wielding capture skill; replaces prior OBPI-12 renderer)" (Checklist item #19; § Decision Re-Alignment 2026-06-03, point 1 "Append-only corpus").
- [ ] Parent ADR § Decision Re-Alignment point 1 (Append-only corpus) — the addressed-entry shape `id, surface, section, anchor?, tier (invariant|compressible), classification, witness?, text, origin, ts` and the "nothing is hand-edited at the rendered location" binding claim.
- [ ] Parent ADR file: `docs/design/adr/foundation/ADR-0.0.37-constitutional-invariant-composition/ADR-0.0.37-constitutional-invariant-composition.md`

> **STOP:** If you cannot quote the parent ADR § Decision item that this OBPI implements, STOP and re-read. Do not proceed to Allowed Paths, Prerequisites, or implementation until the Decision quote is in hand.

**Governance (read once, cache):**

- [ ] `.gzkit/rules/skill-surface-sync.md` — the canonical-edit-then-sync discipline for the new skill
- [ ] `AGENTS.md` § STDLIB-FIRST + § OBPI Acceptance Protocol — stdlib JSONL I/O; universal Gate 5

**Context:**

- [ ] OBPI-0.0.37-18 (append-only corpus model) — the `CorpusEntry`/`Corpus` API this tool consumes
- [ ] OBPI-0.0.37-20/21/22 briefs — the setpoint/composer/playback consumers that inherit the `.gzkit/corpus/<surface>.jsonl` store layout

**Prerequisites (check existence, STOP if missing):**

- [ ] `src/gzkit/content/models/corpus.py` exists with `CorpusEntry`, `Corpus`, `Corpus.append`, `Corpus.validate_against` (OBPI-18, attested-complete)
- [ ] `src/gzkit/commands/content/__init__.py` exists with `register_content_parsers` and a `content_command` subparsers action
- [ ] `src/gzkit/events.py` exists with `_EventBase` and the established event-factory pattern
- [ ] `.gzkit/schemas/ledger_events.json` exists with an `event_types` list

**Existing Code (understand current state):**

- [ ] `src/gzkit/commands/content/import_.py` + `edit.py` — local convention for a `gz content` subcommand (arg parsing, project-root resolution, exit codes)
- [ ] `src/gzkit/content/models/corpus.py` — `CorpusEntry` fields and `Corpus.append`/`dumps`/`loads`/`validate_against` signatures before writing the store
- [ ] `src/gzkit/events.py` `ArtifactEditedEvent` / `ObpiCreatedEvent` — the `_EventBase` subclass + `Literal["..."]` pattern to mirror for `CorpusEntryAppendedEvent`
- [ ] `.gzkit/schemas/ledger_events.json` `composition_rendered` entry — the `event_types` list shape (`id`, `name`, `schema.required`, `required_fields`) to mirror

## Quality Gates

### Gate 1: ADR

- [ ] Intent and scope recorded in this OBPI brief
- [ ] Parent ADR checklist item quoted

### Gate 2: TDD (Red-Green-Refactor)

- [ ] Tests derived from brief acceptance criteria, not from implementation
- [ ] Red-Green-Refactor cycle followed per behavior increment
- [ ] Tests pass: `uv run gz test`
- [ ] Validation commands recorded in evidence with real outputs

### Code Quality

- [ ] Lint clean: `uv run gz lint`
- [ ] Type check clean: `uv run gz typecheck`

### Gate 3: Docs (Heavy only)

- [ ] Docs build: `uv run mkdocs build --strict`
- [ ] `docs/user/manpages/gz-content.md` + `docs/user/runbook.md` updated

### Gate 4: BDD (Heavy only)

- [ ] Acceptance scenarios pass: `uv run -m behave --tags=@REQ-0.0.37-19-01,@REQ-0.0.37-19-02,@REQ-0.0.37-19-03,@REQ-0.0.37-19-04 features/`

### Gate 5: Human (Heavy only)

- [ ] Human attestation recorded

## Verification

```bash
uv run gz validate --brief-reconcile
uv run gz validate --documents
uv run gz validate --ledger
uv run gz validate --surfaces
uv run gz lint
uv run gz typecheck
uv run gz test

# Specific verification for this OBPI
test -f src/gzkit/commands/content/remember.py
test -f src/gzkit/content/corpus_store.py
test -f .gzkit/skills/gz-content-remember/SKILL.md
uv run -m unittest tests.commands.test_content_remember -v
uv run -m unittest tests.content.test_corpus_store -v
```

## Demo

<!-- gz-validate-skip: command-shape -->
```bash
# Forward-reference demo (gz content remember lands in this OBPI; verb not yet registered)
# Capture a compressible entry into the AGENTS.md corpus (never touches AGENTS.md itself)
uv run gz content remember AGENTS.md --section "Behavior Rules" --text "Prefer stdlib JSONL for append-only stores." --tier compressible

# The append landed in the corpus store, not the rendered surface
test -s .gzkit/corpus/AGENTS.md.jsonl

# The append is witnessed in the ledger
uv run gz ledger tail --event corpus_entry_appended
```

## Acceptance Criteria

- [ ] REQ-0.0.37-19-01 [BEHAVIOR]: Given a known surface and a template-resolvable section, when the `remember` subcommand of `gz content` runs (`content remember <surface> --section <id> --text <text> [--tier]`), then exactly one `CorpusEntry` is appended to `.gzkit/corpus/<surface>.jsonl` with all addressed/provenanced fields populated and the command exits 0.
- [ ] REQ-0.0.37-19-02 [BEHAVIOR]: Given any successful `remember`, when it completes, then no rendered surface (`AGENTS.md`, `CLAUDE.md`, mirrors) is modified — only the corpus store file changes.
- [ ] REQ-0.0.37-19-03 [BEHAVIOR]: Given a successful append, when it completes, then a `corpus_entry_appended` ledger event is emitted carrying `surface`, `section`, `entry_id`, and `tier`.
- [ ] REQ-0.0.37-19-04 [BEHAVIOR]: Given an unknown surface or a section that does not resolve to a real template-defined section, when `remember` runs, then it fails closed (non-zero exit) and writes no entry.
- [ ] REQ-0.0.37-19-05 [SUPPORT]: Given the ledger schema, when the OBPI is complete, then `corpus_entry_appended` is registered in `.gzkit/schemas/ledger_events.json` — proven by `uv run gz validate --ledger` plus the `corpus_entry_appended` event.
- [ ] REQ-0.0.37-19-06 [SUPPORT]: Given the skill surface, when the OBPI is complete, then `.gzkit/skills/gz-content-remember/SKILL.md` exists and mirrors are byte-equal — proven by `uv run gz validate --surfaces` plus the `artifact_edited` event for the skill.
- [ ] REQ-0.0.37-19-07 [SUPPORT]: Given the operator docs, when the OBPI is complete, then `docs/user/manpages/content.md` and `docs/user/runbook.md` document the verb — proven by `uv run gz validate --documents` plus the `artifact_edited` event for the docs.

## Completion Checklist

- [ ] **Gate 1 (ADR):** Intent recorded in brief
- [ ] **Gate 2 (TDD):** RGR cycle followed, tests derived from brief, coverage maintained
- [ ] **Code Quality:** Lint, format, type checks clean
- [ ] **Value Narrative:** Problem-before vs capability-now is documented
- [ ] **Key Proof:** One concrete usage example is included
- [ ] **OBPI Acceptance:** Evidence recorded below

> For ceremony steps and lane-inheritance attestation rules, see `AGENTS.md` section `OBPI Acceptance Protocol`.

## Evidence

### Gate 1 (ADR)

- [ ] Intent and scope recorded

### Gate 2 (TDD — Red-Green-Refactor)

```text
# Paste test output here
```

### Code Quality

```text
# Paste lint/format/type check output here
```

### Gate 3 (Docs)

```text
# Paste docs-build output here when Gate 3 applies
```

### Gate 4 (BDD)

```text
# Paste behave output here when Gate 4 applies
```

### Gate 5 (Human)

```text
# Record attestation text here when required by parent lane
```

### Value Narrative

<!-- What problem existed before this OBPI, and what capability exists now? -->

### Key Proof


`uv run gz content remember AGENTS.md --section "Behavior Rules" --text "Prefer stdlib JSONL for append-only stores." --tier compressible` appends exactly one CorpusEntry to `.gzkit/corpus/AGENTS.md.jsonl`, leaves AGENTS.md byte-identical, and emits a `corpus_entry_appended` ledger event carrying surface/section/entry_id/tier. The byte-unchanged invariant is proven by tests/commands/test_content_remember.py::test_does_not_modify_the_rendered_surface (REQ-0.0.37-19-02) and end-to-end by features/content_remember.feature (4 scenarios). Receipts: arb-step-unittest-7c33c28a4efa49c399b746903b8aefec (5890/5890 unit), arb-step-behave-0f7c168075bd4a11a5fa1f5e4a26ee5b (4/4 scoped scenarios).

### Implementation Summary


- Files created: src/gzkit/commands/content/remember.py, src/gzkit/content/corpus_store.py, .gzkit/skills/gz-content-remember/SKILL.md (+4 synced mirrors), tests/commands/test_content_remember.py, tests/content/test_corpus_store.py, features/content_remember.feature (+steps), docs/user/skills/gz-content-remember.md
- Files modified: src/gzkit/events.py (typed model + union), src/gzkit/ledger_events.py (factory), src/gzkit/schemas/ledger.json (schema), src/gzkit/commands/content/__init__.py (parser); 9 coupled registries (trust_audits/events.py graph waiver, trust_audits/insights.py insight waiver, tests/test_schemas.py event-model map, tests/content/test_tui_affordances.py subcommand fence, config/doc-coverage.json, docs/user/skills/index.md, .gzkit/skills/gz-context/SKILL.md router, data/distribution_baseline_manifest.json); docs/user/manpages/content.md, docs/user/runbook.md
- Tests added: 11 unit (5 command BEHAVIOR REQ-01..04 + 6 store) + 4 BDD scenarios @REQ-0.0.37-19-01..04; 5890/5890 unit pass, 4/4 behave pass
- Date completed: 2026-06-05
- Attestation status: operator-attested (g0)
- Defects noted: 2 pre-existing reds tracked as insights (ledger chore_decommission disposition enum red on main; OBPI-0.0.37-26 task-envelope-coherence red on main) — neither introduced by nor fixable within OBPI-19

## Tracked Defects

Two brief↔reality allowlist defects surfaced at pre-flight plan audit (2026-06-05),
confirmed by reading the codebase, and ratified for correction by operator plan approval
(the attested `brief reconcile --apply` CLI verb is OBPI-06, unlanded — corrections landed
by editing this brief's Allowed Paths, which is itself in the allowlist):

- **Correction A — `src/gzkit/ledger_events.py` was omitted.** The ledger-event pattern is
  two-representation: a typed read-path model in `src/gzkit/events.py` (was in allowlist)
  AND a named write-path factory in `src/gzkit/ledger_events.py` (was NOT). Proof:
  `composition_rendered` has both `CompositionRenderedEvent` (events.py) and
  `composition_rendered_event(...)` (ledger_events.py); `Ledger.append()` consumes the
  generic `LedgerEvent` the factory returns, not the typed model. `gz validate
  --brief-reconcile` passed (exit 0) — a code-convention coupling below its dimension
  resolution. Added to Allowed Paths.

- **Correction B — wrong manpage path.** Brief declared `docs/user/manpages/gz-content.md`
  CREATE, but the `gz content` group manpage already exists as `docs/user/manpages/content.md`
  (documents import/list/show/render/edit). The `remember` verb is an EDIT to `content.md`;
  a new `gz-content.md` would orphan a duplicate and leave `gz cli audit`'s content-group
  resolution uncovered. Corrected to `content.md` EDIT.

Design clarifications adopted at the same approval (no allowlist impact, all within the new
command surface): `--classification` flag (default `Ambiguous`) because `CorpusEntry.classification`
is required with no model default; `--section` normalized via `_kebab()` so the human-title form
matches `Pillar.id`; ledger event emitted inline in the command (no new governance/content
events-helper module).

### Stage-3 coupled-surface expansion (mechanically forced; allowlist amended)

Adding a CLI verb + ledger event + skill tripped 12 project completeness gates. Per
coupled-surface coherence (AGENTS.md § DO IT RIGHT 1a), the following surfaces — none in the
original brief allowlist — were edited in the same change-set. They are mechanically forced (a
new verb/event/skill that does not register here ships a half-wired surface and fails CI), not
scope creep. Allowlist amended to include them:

- `src/gzkit/schemas/ledger.json` — the REAL schema registry `gz validate --ledger` /
  `audit_event_schemas` reads (the brief's `.gzkit/schemas/ledger_events.json` is consumed
  nowhere — a second brief misdirection). `corpus_entry_appended` schema entry added here.
- `src/gzkit/governance/trust_audits/events.py` — `_NO_GRAPH_IMPACT` waiver for
  `corpus_entry_appended` (Layer-2 capture witness, no artifact-graph edge).
- `src/gzkit/governance/trust_audits/insights.py` — `_INSIGHTS_SHAPE_WAIVERS` entry for a
  pre-existing malformed insight (line 164, another session, T2: waive not rewrite).
- `tests/test_schemas.py` — `_EVENT_MODELS` map entry (schema↔model alignment).
- `tests/content/test_tui_affordances.py` — OBPI-0.0.34-05 subcommand fence updated to admit
  `remember` (named, not silently relaxed).
- `config/doc-coverage.json` — `content remember` declared (manpage:false, matching the sibling
  content subcommands covered by the group `content.md`).
- `docs/user/skills/gz-content-remember.md` (CREATE) + `docs/user/skills/index.md` — skill manpage + index link.
- `.gzkit/skills/gz-context/SKILL.md` — routed `gz-content-remember` under the gz-context router
  (version 0.2.0→0.3.0); `gz-content-remember` skill `category` corrected to `agent-operations`.
- `data/distribution_baseline_manifest.json` — regenerated to include the new canonical skill (ADR-0.0.31).
- Brief frontmatter `req_atomic:` added (ADR-0.0.64 task-envelope exemption; the 7 REQs are atomic).

**Pre-existing reds surfaced (NOT introduced by OBPI-19, NOT in scope to fix here):**

- `gz validate --ledger` / default `gz validate`: 4+ `chore_decommission_processed` events carry
  out-of-enum `disposition` values (committed at HEAD; ADR-0.0.59-04 scope). Insight logged.
- `gz check` step 23/26 (Task envelope coherence): OBPI-0.0.37-26 (closed prior session) closed
  seq=01-only without `req_atomic`. Insight logged; owner/operator decision.

Both are tracked in `.gzkit/insights/agent-insights.jsonl` and cannot be fixed within OBPI-19
(ledger edits forbidden; both belong to other OBPIs' scope).

## Human Attestation

- Attestor: `g0`
- Attestation: attest completed — corpus-capture write path landed: `gz content remember` appends a provenanced CorpusEntry to `.gzkit/corpus/<surface>.jsonl` and emits `corpus_entry_appended`, with the rendered-surface-byte-unchanged invariant proven (test_does_not_modify_the_rendered_surface). 11 unit + 4 BDD green: receipts arb-step-unittest-7c33c28a4efa49c399b746903b8aefec (5890/5890) and arb-step-behave-0f7c168075bd4a11a5fa1f5e4a26ee5b (4/4). Lint/typecheck/mkdocs clean: arb-ruff-0cf5a206202d492e9674549e7f6582b7, arb-step-typecheck-68edd6c11dda4209b53f3228d2fd5c2d, arb-step-mkdocs-30000064183a4cc1b8100efe052d3547. 9 coupled registries wired. sensitivity:security declared (ledger_events.py overlap); security-floor overridden per GHI #462 (additive event factory, no ledger-integrity change), operator-approved. 2 pre-existing reds (ledger disposition enum, OBPI-26 task-envelope) tracked as insights, out of OBPI-19 scope.
- Date: 2026-06-05

---

**Date Completed:** 2026-06-05

**Evidence Hash:** -