manifest.json

{
  "version": 2,
  "sizeBudgetLines": 600,
  "generatedPaths": [
    "gui/dist"
  ],
  "absentPaths": [
    {
      "path": "docs/",
      "reason": "the root docs/ folder is retired; ops/docs-and-release.md documents where its material went and that no docs/ tree is tracked"
    },
    {
      "path": "go/",
      "reason": "the Go native-runtime experiment is retired; ops/docs-and-release.md documents that no go/ tree is tracked"
    }
  ],
  "tiers": [
    {
      "id": 1,
      "name": "Foundation",
      "purpose": "What opencodex is, what it owns on disk, and the invariants nothing may break."
    },
    {
      "id": 2,
      "name": "Configuration and catalog",
      "purpose": "Persisted config, the Codex home it writes into, and the model catalog it publishes."
    },
    {
      "id": 3,
      "name": "Data planes and transports",
      "purpose": "The wire surfaces a client actually talks to."
    },
    {
      "id": 4,
      "name": "Providers and adapters",
      "purpose": "Per-vendor contracts and the adapter authority that constructs them."
    },
    {
      "id": 5,
      "name": "Surfaces and clients",
      "purpose": "The dashboard, the management API, and third-party client config ownership."
    },
    {
      "id": 6,
      "name": "Operations and process",
      "purpose": "Background service, docs, release, and design discipline."
    }
  ],
  "docs": [
    {
      "path": "overview.md",
      "tier": 1,
      "title": "Overview",
      "scope": "Product boundary, local state ownership, and the non-negotiable invariants index.",
      "documents": [
        "app/",
        "gui/",
        "src/companion/",
        "scripts/",
        "src/config.ts",
        "src/lib/"
      ]
    },
    {
      "path": "runtime.md",
      "tier": 1,
      "title": "Runtime",
      "scope": "Entrypoints, process lifecycle, CLI surface, and the Remote Hub, sideband, and request-compatibility contracts on that path.",
      "documents": [
        "bin/",
        "src/adapters/",
        "src/chat/",
        "src/claude/",
        "src/cli.ts",
        "src/cli/",
        "src/client/",
        "src/codex/",
        "src/combos/",
        "src/compatibility/",
        "src/config.ts",
        "src/config/",
        "src/generated/",
        "src/github/",
        "src/grok/",
        "src/images/",
        "src/index.ts",
        "src/lab/",
        "src/lib/",
        "src/oauth/",
        "src/providers/",
        "src/reasoning-effort.ts",
        "src/remote/",
        "src/responses/",
        "src/router.ts",
        "src/server/",
        "src/service.ts",
        "src/service/",
        "src/stall-timeout.ts",
        "src/storage/",
        "src/tray/",
        "src/types.ts",
        "src/update/",
        "src/usage/",
        "src/vision/",
        "src/web-search/",
        "src/config/persisted-mutation.ts"
      ]
    },
    {
      "path": "config.md",
      "tier": 2,
      "title": "Config Surface",
      "scope": "Persisted config schema, both injection forms, provider validation, and restore.",
      "documents": [
        "src/cli/",
        "src/codex/",
        "src/config.ts",
        "src/config/",
        "src/types.ts"
      ]
    },
    {
      "path": "codex-home.md",
      "tier": 2,
      "title": "Codex Home",
      "scope": "CODEX_HOME resolution, the files opencodex manages there, and Codex-home diagnostics.",
      "documents": [
        "src/codex/"
      ]
    },
    {
      "path": "codex-prompts.md",
      "tier": 2,
      "title": "Codex Prompts",
      "scope": "Prompt-layer repair, base import previews and bounded text-probe sources.",
      "documents": [
        "src/codex/",
        "src/server/"
      ]
    },
    {
      "path": "local-messaging.md",
      "tier": 3,
      "title": "Local Codex Messaging",
      "scope": "Command-local metadata discovery, Unix RPC queued submission, peer envelopes, receipts and owned lifecycle bounds.",
      "documents": [
        "src/messaging/",
        "src/cli/"
      ]
    },
    {
      "path": "catalog.md",
      "tier": 2,
      "title": "Model Catalog",
      "scope": "Shared Codex catalog assembly, account namespaces, pool rotation, and effort ladders.",
      "documents": [
        "src/codex/",
        "src/routing/",
        "src/server/"
      ]
    },
    {
      "path": "catalog-vendor-context.md",
      "tier": 2,
      "title": "Custom-provider context estimates",
      "scope": "Bundled model-ID window fallback, ambiguity handling, and inferred-capacity provenance.",
      "documents": [
        "src/codex/catalog/vendor-context.ts",
        "src/codex/catalog/model-hints.ts",
        "src/codex/catalog/parsing.ts",
        "src/codex/catalog/routed-gather.ts",
        "src/codex/catalog/effort.ts"
      ]
    },
    {
      "path": "catalog-effort-clamp.md",
      "tier": 2,
      "title": "Effort-clamp observations",
      "scope": "Persisted effort-clamp observation identity and idempotent sync notices.",
      "documents": ["src/codex/runtime.ts", "src/codex/catalog/effort.ts"]
    },
    {
      "path": "subagents.md",
      "tier": 2,
      "title": "Subagents And Multi-Agent Surface",
      "scope": "Multi-agent surface mode and subagent roster ordering.",
      "documents": [
        "src/codex/",
        "src/providers/",
        "src/server/"
      ]
    },
    {
      "path": "advisor.md",
      "tier": 2,
      "title": "Advisor Sidecar",
      "scope": "The OpenCodex-owned expert consultation sidecar: synthetic advisor tool, preflight policy, loopback consultation through the routing authority, and the optional-subsystem seam.",
      "documents": [
        "src/advisor/",
        "src/server/responses/advisor-slot.ts",
        "src/server/responses/advisor-plan-slot.ts",
        "src/lib/advisor-activation.ts"
      ]
    },
    {
      "path": "transports/byte-accounting.md",
      "tier": 3,
      "title": "Byte Accounting",
      "scope": "Request-copy and stream-buffer byte accounting shared by parsing, SSE rewriting, the adapters, and the translator budget, plus durable spill admission.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/lib/",
        "src/server/",
        "src/responses/"
      ]
    },
    {
      "path": "transports/responses.md",
      "tier": 3,
      "title": "Responses Transport",
      "scope": "The Responses HTTP/SSE endpoint, dispatch, credential and upload boundaries, and core module ownership.",
      "documents": [
        "src/bridge.ts",
        "src/bridge/",
        "src/responses/",
        "src/server/"
      ]
    },
    {
      "path": "transports/responses-wire-shapes.md",
      "tier": 3,
      "title": "Responses Wire Shapes",
      "scope": "Mixed-wire model defaults, xAI agent-message continuation, declared-tool membership, and passthrough SSE stream shapes.",
      "documents": [
        "src/adapters/",
        "src/bridge/",
        "src/lib/",
        "src/responses/",
        "src/server/"
      ]
    },
    {
      "path": "transports/responses-failover.md",
      "tier": 3,
      "title": "Responses Failover And Replay",
      "scope": "Upstream reset retry, the ambiguous-resend gate, combo failover and commit boundaries, compaction routing, and output headroom.",
      "documents": [
        "src/lib/",
        "src/server/",
        "src/codex/"
      ]
    },
    {
        "path": "transports/policy-fallback.md",
        "tier": 3,
        "title": "Policy Candidate Fallback",
        "scope": "Original policy authorization, concrete candidate retries and physical destination deduplication.",
        "documents": [
          "src/server/"
        ]
      },
      {
        "path": "transports/responses-spend.md",
      "tier": 3,
      "title": "Responses Spend Reservations",
      "scope": "Credential-hop and durable spend reservations, and what a spent budget tells the client.",
      "documents": [
        "src/lib/"
      ]
    },
    {
      "path": "transports/streaming-health.md",
      "tier": 3,
      "title": "Streaming Health And WebSocket",
      "scope": "Heartbeat and stall deadlines, plus the opt-in WebSocket transport.",
      "documents": [
        "src/server/"
      ]
    },
    {
      "path": "transports/inventory.md",
      "tier": 3,
      "title": "Transport Inventory",
      "scope": "The per-provider transport table and diagnostic outbound safety.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/images/",
        "src/lib/",
        "src/oauth/",
        "src/providers/",
        "src/server/"
      ]
    },
    {
      "path": "data-planes/images.md",
      "tier": 3,
      "title": "Images Data Plane",
      "scope": "Standalone image generation/edit relay and local hosted Responses image display.",
      "documents": [
        "src/server/"
      ]
    },
    {
      "path": "data-planes/search.md",
      "tier": 3,
      "title": "Search Data Plane",
      "scope": "Hosted search relay and exact account selectors.",
      "documents": []
    },
    {
      "path": "data-planes/inbound-compat.md",
      "tier": 3,
      "title": "Inbound Compatibility Surfaces",
      "scope": "Chat Completions inbound, Anthropic-shaped clients, and JSON-upstream streaming clients.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/server/"
      ]
    },
    {
      "path": "data-planes/protocol-paths.md",
      "tier": 3,
      "title": "Protocol Paths",
      "scope": "Shared protocol vocabulary, declared feature dispositions, the ingress-by-upstream baseline, plan/trace shapes, and protocol settings.",
      "documents": [
        "src/protocols/"
      ]
    },
    {
      "path": "providers/anthropic-account-thresholds.md",
      "tier": 4,
      "title": "Anthropic Account Thresholds",
      "scope": "Account-owned usage thresholds, inheritance, routing boundaries and durable policy changes.",
      "documents": ["src/oauth/"]
    },
    {
      "path": "providers-and-adapters.md",
      "tier": 4,
      "title": "Providers And Adapters",
      "scope": "Provider and adapter selection, the adapter inventory, live model discovery, and the hosted-search continuation bridge.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/combos/",
        "src/oauth/",
        "src/providers/",
        "src/responses/",
        "src/server/",
        "src/types/",
        "src/web-search/"
      ]
    },
    {
      "path": "providers/jev-decision.md",
      "tier": 4,
      "title": "JEV Decision Routing",
      "scope": "JEV Combo decision methods (TypeSafe, self-hosted System One rows, opencodex models), the decision request path, dashboard surfaces, and the content-free statistics projection.",
      "documents": [
        "src/combos/",
        "src/server/",
        "src/usage/"
      ]
    },
    {
      "path": "providers/anthropic-key-billing.md",
      "tier": 4,
      "title": "Anthropic API-key Billing Recovery",
      "scope": "Exact billing refusal evidence, immutable physical credential ownership, pacing provenance and bounded pre-output key recovery.",
      "documents": [
        "src/providers/anthropic-billing-refusal.ts",
        "src/providers/anthropic-billing-ownership.ts",
        "src/providers/anthropic-billing-recovery.ts",
        "src/providers/request-pacing.ts"
      ]
    },
    {
      "path": "providers/anthropic-account-pool.md",
      "tier": 4,
      "title": "Anthropic Account Pool",
      "scope": "Anthropic OAuth instances (primary and Pool 2), account pause, model routes, quota labels, and pool-bound helpers, quota, reset grants and management surfaces.",
      "documents": [
        "src/oauth/",
        "src/providers/",
        "src/providers/quota/anthropic-account-quota.ts",
        "src/server/management/anthropic-pool-settings.ts",
        "src/sidecar/anthropic-binding.ts"
      ]
    },
    {
      "path": "providers/openai-tiers.md",
      "tier": 4,
      "title": "OpenAI Provider Account Modes",
      "scope": "Pool/Direct account modes, API-key separation, and the public provider and quota contract.",
      "documents": [
        "src/codex/"
      ]
    },
    {
      "path": "providers/openai-accounts.md",
      "tier": 4,
      "title": "OpenAI Account Identity And Pool Operations",
      "scope": "Migration and restore, wire identity, store concurrency, pool ordering and exclusions, quota observations, and account-bound retention.",
      "documents": [
        "src/codex/",
        "src/config.ts"
      ]
    },
    {
      "path": "providers/cursor.md",
      "tier": 4,
      "title": "Cursor Provider",
      "scope": "Cursor native exec, parameterized models, checkpoints, and active-context usage.",
      "documents": [
        "src/adapters/"
      ]
    },
    {
      "path": "providers/google.md",
      "tier": 4,
      "title": "Google Provider",
      "scope": "Gemini thought-text, response parts, thought-signature replay, and adjacency repair.",
      "documents": []
    },
    {
      "path": "providers/kiro.md",
      "tier": 4,
      "title": "Kiro Provider",
      "scope": "Kiro parallel-tool hints, Responses text controls, and reasoning round-trip.",
      "documents": [
        "src/responses/"
      ]
    },
    {
      "path": "providers/xai-grok.md",
      "tier": 4,
      "title": "xAI Grok Provider",
      "scope": "Grok Build contract parity and hardening.",
      "documents": [
        "src/oauth/",
        "src/providers/",
        "src/responses/",
        "src/server/"
      ]
    },
    {
      "path": "providers/chat-compat.md",
      "tier": 4,
      "title": "Chat Provider Compatibility",
      "scope": "Cross-vendor Chat Completions behavior: reasoning, tool results, structured output, parallel tools.",
      "documents": [
        "src/adapters/",
        "src/chat/",
        "src/responses/"
      ]
    },
    {
      "path": "adapters/registry.md",
      "tier": 4,
      "title": "Adapter Registry Authority",
      "scope": "The single adapter construction authority and contract inheritance.",
      "documents": [
        "src/adapters/",
        "src/server/"
      ]
    },
    {
      "path": "adapters/compatibility-contracts.md",
      "tier": 4,
      "title": "Compatibility Contracts",
      "scope": "Versioned provider compatibility claims and fixture-evidence boundaries.",
      "documents": [
        "src/compatibility/"
      ]
    },
    {
      "path": "adapters/compatibility-lab.md",
      "tier": 4,
      "title": "Compatibility Lab",
      "scope": "Optional Lab evidence, automation, and its core-runtime isolation boundary.",
      "documents": [
        "src/lab/",
        "src/server/index.ts"
      ]
    },
    {
      "path": "cli-management.md",
      "tier": 5,
      "title": "CLI management and discovery",
      "scope": "Terminal help and capability metadata, management-client output and the generated operating reference.",
      "documents": [
        "src/cli/",
        "scripts/generate-ocx-skill-surface.ts",
        "skills/ocx/"
      ]
    },
    {
      "path": "gui-and-management-api.md",
      "tier": 5,
      "title": "GUI And Management API",
      "scope": "Dashboard serving, authentication boundaries, /api/* ownership, and startup safety.",
      "documents": [
        "gui/",
        "src/companion/",
        "src/codex/",
        "src/lib/",
        "src/server/",
        "src/usage/",
        "src/usage/timeline.ts",
        "src/vision/"
      ]
    },
    {
      "path": "dashboard-and-usage.md",
      "tier": 5,
      "title": "Dashboard Surfaces And Usage",
      "scope": "Dashboard page contracts, usage accounting and request metrics, and per-surface management settings.",
      "documents": [
        "gui/",
        "src/codex/",
        "src/lib/",
        "src/quota/",
        "src/routing/history/",
        "src/server/",
        "src/usage/"
      ]
    },
    {
      "path": "clients/integrations.md",
      "tier": 5,
      "title": "Client Integrations",
      "scope": "Third-party client config ownership, snapshots, refresh, disable, and restore.",
      "documents": [
        "src/cli/",
        "src/clients/",
        "src/integrations/",
        "src/lib/"
      ]
    },
    {
      "path": "clients/codex-desktop.md",
      "tier": 5,
      "title": "Codex Desktop Compatibility",
      "scope": "Windows package activation, restart context, and protected compatibility authority persistence.",
      "documents": ["src/codex/", "src/cli/"]
    },
    {
      "path": "clients/chatgpt-desktop.md",
      "tier": 5,
      "title": "ChatGPT Desktop",
      "scope": "Experimental macOS app-server stdout shim, opt-in launch, restore and failure boundaries.",
      "documents": [
        "src/chatgpt/",
        "src/cli/",
        "src/codex/"
      ]
    },
    {
      "path": "clients/claude-desktop.md",
      "tier": 5,
      "title": "Claude Desktop Integration",
      "scope": "Claude Desktop profile ownership and config-library resolution.",
      "documents": [
        "src/claude/",
        "src/cli/",
        "src/client/",
        "src/server/"
      ]
    },
    {
      "path": "clients/claude-desktop-config-reads.md",
      "tier": 5,
      "title": "Claude Desktop Configuration Reads",
      "scope": "Verified regular-file reads of Claude Desktop config-library metadata, profiles and snapshots.",
      "documents": [
        "src/claude/"
      ]
    },
    {
      "path": "clients/qoder.md",
      "tier": 5,
      "title": "Qoder Client Integration",
      "scope": "Qoder settings.json provider and custom-model ownership, export and loopback placeholder rules.",
      "documents": [
        "src/clients/",
        "src/integrations/"
      ]
    },
    {
      "path": "desktop-shell.md",
      "tier": 6,
      "title": "Desktop shell",
      "scope": "Tauri desktop shell, proxy attachment and sidecar lifecycle, tray controls, bootstrap navigation, and desktop companion presence.",
      "documents": [
        "desktop/",
        "src/server/management/companion-routes.ts"
      ]
    },
    {
      "path": "desktop-terminal-command.md",
      "tier": 6,
      "title": "Desktop-owned terminal command",
      "scope": "Desktop-owned ocx command on PATH: record and journal, POSIX shim and shell blocks, Windows user Path, private-path ACL policy, and the local Terminal command page.",
      "documents": [
        "desktop/src-tauri/src/cli_command.rs",
        "desktop/src-tauri/src/cli_command_record.rs",
        "desktop/src-tauri/src/cli_command_posix.rs",
        "desktop/src-tauri/src/cli_command_windows.rs",
        "desktop/ui/cli.html",
        "desktop/ui/cli.js"
      ]
    },
    {
      "path": "desktop-start-at-login.md",
      "tier": 6,
      "title": "Desktop Start at Login",
      "scope": "macOS tray Start at Login judgment shared with Startup safety, its parity fixture, click rules, and the guarded launch-origin migration.",
      "documents": [
        "desktop/src-tauri/src/first_run.rs",
        "desktop/src-tauri/src/login_registration.rs",
        "desktop/src-tauri/src/tray_login.rs",
        "src/service/desktop-startup.ts"
      ]
    },
    {
      "path": "ops/service-and-sidecars.md",
      "tier": 6,
      "title": "Background Service And Sidecars",
      "scope": "Service install/repair, platform launchers, tray, and sidecar processes.",
      "documents": [
        "src/lib/",
        "src/server/",
        "src/service-manager-probe.ts",
        "src/sidecar/",
        "src/update/"
      ]
    },
    {
      "path": "ops/service-logging.md",
      "tier": 6,
      "title": "Managed Service Logging",
      "scope": "Service-only console timestamps and bounded copy-truncate log retention.",
      "documents": ["src/service/logging.ts"]
    },
    {
      "path": "ops/service-health-recovery.md",
      "tier": 6,
      "title": "Service Health Recovery",
      "scope": "Opt-in sentinel that turns a hung but listening managed service proxy into an exit its manager restarts.",
      "documents": [
        "src/service/health-sentinel-launch.ts",
        "src/service/health-sentinel-main.ts",
        "src/service/health-sentinel-policy.ts",
        "src/service/health-sentinel-probe.ts",
        "src/service/health-sentinel-windows.ts"
      ]
    },
    {
      "path": "ops/update-supervised-recovery.md",
      "tier": 6,
      "title": "Update Supervised Recovery",
      "scope": "Manager-first recovery after a failed post-update service refresh, and the non-zero unsupervised fallback.",
      "documents": [
        "src/update/supervised-recovery.mjs",
        "src/update/job-supervised-restart.ts",
        "src/update/job.ts"
      ]
    },
    {
      "path": "ops/plugins.md",
      "tier": 6,
      "title": "Local Plugins",
      "scope": "Plugin loading from OPENCODEX_HOME/plugins and the upstream rewrite slot plugins attach to.",
      "documents": [
        "src/plugins/"
      ]
    },
    {
      "path": "ops/docs-and-release.md",
      "tier": 6,
      "title": "Docs And Release",
      "scope": "Docs site, workflow map, branch policy, release flow, and cross-platform CI.",
      "documents": [
        ".github/",
        "bin/",
        "docs-site/",
        "scripts/",
        "src/cli.ts",
        "src/cli/",
        "src/codex/",
        "src/lib/",
        "src/service.ts"
      ]
    },
    {
      "path": "design-methodology.md",
      "tier": 6,
      "title": "Design Methodology For New Surfaces",
      "scope": "Stage ordering for new GUI, CLI, and user-facing surfaces.",
      "documents": [
        "gui/"
      ]
    },
    {
      "path": "remote-workspace.md",
      "tier": 3,
      "title": "Remote Workspace",
      "scope": "Opt-in workspace identity, executor grants, runtime adapters, management and dashboard integration.",
      "documents": [
        "src/remote-control/"
      ]
    },
    {
      "path": "remote-link.md",
      "tier": 3,
      "title": "Remote Link",
      "scope": "SSH machine-link building blocks: OpenSSH argument policy, ssh_config candidates, tunnel lifecycle reducer, the private link store, and standalone pairing-grant delivery.",
      "documents": [
        "src/link/",
        "src/lib/gui-pair-intent.ts",
        "src/lib/windows-owner-acl.ts",
        "src/server/gui-pair-delivery.ts"
      ]
    },
    {
      "path": "companion.md",
      "tier": 5,
      "title": "Companion usage",
      "scope": "Shared timeline filtering, usage/quotas, native and web tray title, and WidgetKit display contracts.",
      "documents": [
        "src/companion/",
        "src/usage/",
        "gui/",
        "app/",
        "desktop/"
      ]
    },
    {
      "path": "config-proxy.md",
      "tier": 2,
      "title": "Proxy Configuration",
      "scope": "Global proxy activation, start flags, and credential-safe CLI output.",
      "documents": []
    },
    {
      "path": "codex-account-controls.md",
      "tier": 5,
      "title": "Codex Account Controls",
      "scope": "Account selection order, custom usage thresholds, and stable account-card editing.",
      "documents": []
    },
    {
      "path": "ops/cross-platform-ci.md",
      "tier": 6,
      "title": "Cross-platform CI",
      "scope": "Test lanes, platform coverage, aggregate gating, and release CI proof.",
      "documents": []
    },
    {
      "path": "ops/test-sandbox-cleanup.md",
      "tier": 6,
      "title": "Test Sandbox Cleanup",
      "scope": "Test-runner home and case-scoped lifecycle teardown ordering.",
      "documents": [
        "tests/"
      ]
    }
  ],
  "contracts": {
    "version": 1,
    "entries": [
      {
        "id": "paginated-history-writer",
        "owner": {
          "document": "codex-home.md",
          "anchor": "paginated-history-writer-boundary"
        },
        "dependents": [
          "catalog.md",
          "config.md",
          "dashboard-and-usage.md",
          "ops/docs-and-release.md",
          "providers/openai-accounts.md",
          "runtime.md",
          "subagents.md"
        ]
      },
      {
        "id": "request-copy-accounting",
        "owner": {
          "document": "transports/byte-accounting.md",
          "anchor": "request-copy-accounting"
        },
        "dependents": [
          "adapters/registry.md",
          "catalog.md",
          "clients/claude-desktop.md",
          "clients/integrations.md",
          "data-planes/images.md",
          "data-planes/inbound-compat.md",
          "ops/docs-and-release.md",
          "ops/service-and-sidecars.md",
          "overview.md",
          "providers/chat-compat.md",
          "providers/cursor.md",
          "providers/xai-grok.md",
          "runtime.md",
          "subagents.md",
          "transports/inventory.md",
          "transports/streaming-health.md"
        ]
      },
      {
        "id": "stream-buffer-accounting",
        "owner": {
          "document": "transports/byte-accounting.md",
          "anchor": "stream-buffer-accounting"
        },
        "dependents": [
          "adapters/registry.md",
          "catalog.md",
          "clients/claude-desktop.md",
          "clients/integrations.md",
          "data-planes/images.md",
          "data-planes/inbound-compat.md",
          "ops/docs-and-release.md",
          "ops/service-and-sidecars.md",
          "overview.md",
          "providers/chat-compat.md",
          "providers/cursor.md",
          "providers/xai-grok.md",
          "runtime.md",
          "subagents.md",
          "transports/inventory.md",
          "transports/streaming-health.md"
        ]
      }
    ]
  },
  "grace": {
    "undocumentedSourceAreas": [],
    "unboundInvariants": [
      {
        "id": "INV-HOME-01",
        "reason": "no test asserts CODEX_HOME precedence over ~/.codex directly; the closest coverage is WSL home discovery"
      },
      {
        "id": "INV-SLUG-01",
        "reason": "no test constrains routed slug shape; the ten files that mention provider/model consume slugs rather than enforcing the form"
      }
    ],
    "oversizeDocs": [],
    "staleRefs": []
  }
}