feat: admission, reframe, the scribe and principles for the cold-reading ledger

.abcd/config/reading-presets.json

@@ -60,10 +60,10 @@
         "test"
       ],
       "window": {
-        "tokens_est": 1130000,
-        "measured_tokens_est": 1115292,
-        "measured_bytes": 4293878,
-        "measured_at": "8fd646fa043cd76a9d839b69ac797e1b3de3d5af"
+        "tokens_est": 1200000,
+        "measured_tokens_est": 1179078,
+        "measured_bytes": 4539453,
+        "measured_at": "dbf21939341e47a9cc7869c6a89c325bb81701a6"
       }
     },
     "entailment": {
@@ -133,9 +133,9 @@
       ],
       "window": {
         "tokens_est": 370000,
-        "measured_tokens_est": 357546,
-        "measured_bytes": 1376554,
-        "measured_at": "8fd646fa043cd76a9d839b69ac797e1b3de3d5af"
+        "measured_tokens_est": 363669,
+        "measured_bytes": 1400129,
+        "measured_at": "dbf21939341e47a9cc7869c6a89c325bb81701a6"
       }
     },
     "comparative": {
@@ -216,10 +216,10 @@
         "test"
       ],
       "window": {
-        "tokens_est": 1140000,
-        "measured_tokens_est": 1124328,
-        "measured_bytes": 4328666,
-        "measured_at": "8fd646fa043cd76a9d839b69ac797e1b3de3d5af"
+        "tokens_est": 1200000,
+        "measured_tokens_est": 1188114,
+        "measured_bytes": 4574241,
+        "measured_at": "dbf21939341e47a9cc7869c6a89c325bb81701a6"
       }
     }
   }

.abcd/development/brief/04-surfaces/02-disembark.md

@@ -159,7 +159,10 @@ present only when no transcript tier grounded the package, so an unmarked
 lifeboat marshals as it always has and embark can say which it is.
 
 The synthesis sub-verbs add the rest afterwards: the press release writes
-`press-release.{json,md}`, the principles write `principles.{json,md}`, the review
+`press-release.{json,md}`, the principles write `principles.{json,md}` (schema
+version 2: each principle carries `claim_type`, `reference` and `comparison`
+beside its evidence, a declined claim as `null`, per
+[adr-2609021016270132](../../decisions/adrs/2609021016270132-the-principles-family-is-a-declared-record-store-whose-entri.md)), the review
 writes the verdict artefact, and the graveyard validates and writes the lesson
 JSON. None of these exist at pack time.
 

.abcd/development/brief/04-surfaces/06-capture.md

@@ -24,14 +24,17 @@ binary.
 
 | Verb | Bucket | Status |
 |---|---|---|
+| `admit` | — | shipped |
 | `defer` | — | shipped |
 | `disposition` | — | shipped |
 | `link` | — | shipped |
 | `list` | — | shipped |
 | `mentions` | — | shipped |
 | `migrate` | — | shipped |
 | `promote` | — | shipped |
+| `reframe` | — | shipped |
 | `resolve` | — | shipped |
+| `surprise` | — | shipped |
 | `wontfix` | — | shipped |
 
 
@@ -165,6 +168,67 @@ naming the earlier items it recurs from; that is a recorded recognition, never a
 join a machine derived. Two hold-shaping flags are reserved and dormant, and a
 populated value is refused until activation is ruled.
 
+**At the widening position the order is fixed: characterise first, admit
+second** (itd-2609020625400194, spc-2609020626040342). No disposition in any
+state, and no admission, is written for a widening item until a committed
+comparative run names the item's run; a comparative run committed with an empty
+item set, the position not exercised, satisfies this as a characterising run
+does. The refusal names the run it is waiting on. It is one gate in the one
+disposition writer every verb routes through, so the disposition verb, the
+admission verb and a scribe's ingest all refuse the same way. The other
+positions are answered with no comparative run anywhere.
+
+**Admitting** a widening proposal is one act that writes two records under the
+ledger lock: the item's `accepted` disposition and the admission record
+(`adm-N`, under `admissions/<run-id>/`) that joins it to its run's candidate
+set, both carrying the one ground the verb was given. Where an `accepted`
+disposition already stands, the admission is written alone, and only on the
+ground that disposition states. The ground is free text held to the same
+substance floor as every grounds primitive. Everything else is refused with
+nothing written: an item at any other position, an item already admitted, a
+standing disposition in any other state (named with its state), a contested or
+cyclic disposition set, a blank or degenerate ground, and any admission before
+characterisation. If the admission fails to write, the disposition this act
+wrote is removed.
+
+**Recording a surprise** writes one surprise entry (`srp-N`, under
+`surprises/`) as its own record, the surprise itself as its body and
+`occasioned_by` as its whole join. The occasion is a reading item, an admission
+or a disposition this ledger holds, and nothing else: prose, a record of any
+other family, and a handle naming nothing are refused before anything is
+minted. No disposition is written on this path. The record gate holds a
+hand-written surprise to the same closed form.
+
+**Recording a reframe** writes one reframe record (`rfm-N`, under
+`reframes/`) when a reading occasions a rewrite of the frame
+(spc-2609020626048705). The frame is three committed surfaces at fixed paths:
+the framing chapter's `Construal` section, the glossary terms (indexes and the
+scaffold excepted) and the scope chapter. The record carries the occasion (a
+reading item, a disposition or a surprise), the SHA-256 fingerprint of each
+surface before and after, which surfaces changed, and the ground, and no text of
+any surface. The verb reads the surfaces at `HEAD`, in the working tree and
+along their history, so the operator supplies no hash. Written after the
+rewrite's commit it is one write, against the previous distinct state along
+first parents, so a rewrite a merge brought in is recorded as a squash of the
+same branch would record it, whatever the commits' timestamps; written before
+it, a first half records the
+before fingerprints and a second write finishes it once the rewrite is
+committed, walking back across as many commits as the rewrite took, merges
+included. Every render names the half it wrote. The occasion
+is checked in one respect: the commit that added it precedes the rewrite.
+Refused with nothing written: an occasion outside the three families or naming
+no record, one not committed or committed after the rewrite, a degenerate
+ground, uncommitted surface changes outside a first half, a frame with no distinct
+prior state within its fingerprintable history (named with how far back that
+history reaches), a second open record, a completion in which nothing moved, and a
+before state the history no longer holds within 64 commits touching the frame. The
+readings keep the record out by its store's path, so record-lint's
+`cross_store_id_claim` refuses a reframe-shaped file (an `rfm-N` name, an
+`rfm-N` id, or `occasioned_by` beside a before fingerprint) anywhere else. A
+reframe's text copied out with all three signals stripped is plain prose to
+that check and reaches a reading like any other prose, a limit of detecting
+the record by its signals.
+
 **Resolving** marks an issue resolved and moves it to
 `resolved/`. Impact is required, and resolving without it is refused with
 nothing written; grounds are recorded when given, their absence parked by
@@ -361,6 +425,27 @@ for ad-hoc scribbles.
   unless it cites the standing one, empty grounds (or a hold with no exit
   condition) is refused, and a state the item's position does not make available
   is refused with the availability rule named.
+- **Given** a widening item with no admission and no disposition, and a
+  committed comparative run over its run, **when** the user admits it with a
+  ground above the floor, **then** an `accepted` disposition and one admission
+  record exist naming the item and the run; a second admission refuses, a
+  standing `declined` or `held` refuses naming the disposition, and before any
+  comparative run names the run both the admission and a disposition refuse
+  naming what they wait for.
+- **Given** a surprise whose occasion resolves to a reading item, an admission
+  or a disposition, **when** the user records it, **then** one surprise record
+  exists as its own file and no disposition was touched.
+- **Given** a reading item and any of the three frame surfaces rewritten and
+  committed, **when** the user records a reframe with the item as occasion and a
+  ground, **then** one reframe record exists carrying the occasion, the before
+  fingerprint of each surface's previously committed state, the after
+  fingerprint of each surface's current state, which surfaces changed and the
+  ground; a frame with no distinct prior state, or a before state the history
+  no longer holds, is refused naming the mismatch.
+- **Given** a run of widening items, **when** the bare board or `abcd lint`
+  runs, **then** it counts the run's admitted, declined and held proposals and
+  names each one carrying neither an admission nor a `declined` or `held`
+  disposition.
 - **Given** a reading item carrying no disposition, **when** the user tries to
   promote it, **then** the promote is refused and no draft is minted: acceptance
   is one record, and the action it licenses is a separate admission. The same
@@ -397,15 +482,24 @@ the only caller that writes them (see [`23-reading.md`](23-reading.md)). That
 sequencing is spc-58's own, and it is why the ingest primitive is exported
 rather than made a verb of this surface.
 
-Admission and surprise records (itd-189, spc-67) ship as **schemas only**,
-declared beside the reading families and wired to `record_schema` rather than to
-a verb. A declined proposal is no third record type: it is the disposition in
-its `declined` state. This surface has no sub-verb that writes either shape, so
-what is armed today is the committed-tree gate: a blank grounds, an absent
-proposal, an occasioned-by pointer naming no record, and either family filed in
-the other's store are each a blocker. The command-side write is a later
-iteration, and the sequencing is the reading families' own: no reading has run,
-so there is nothing to write yet.
+Admission and surprise records (itd-189, spc-67) have their schemas beside the
+reading families, wired to `record_schema`, and their writers in
+`internal/core/capture/admit.go` and `surprise.go` (spc-2609020626040342). A
+declined proposal is no third record type: it is the disposition in its
+`declined` state. The committed-tree gate stays armed for a record written by
+hand: a blank grounds, an absent proposal, an occasion outside the closed form
+or naming no record, and either family filed in the other's store are each a
+blocker. `abcd <adm-N>` and `abcd <srp-N>` describe the record and its joins;
+the reading families `rdi`, `dsp` and `rdg` have no record dispatch.
+
+The reframe record (itd-2609020625402518, spc-2609020626048705) has its schema
+beside them in `internal/core/issueschema`, wired to `record_schema`, and its
+writer, the three surface readers and the fingerprints in
+`internal/core/capture/reframe.go`. The gate refuses a hand-written reframe with
+a blank ground, a missing or mis-shaped fingerprint, a partial after half, a
+`changed` outside the three surface names, or an occasion outside the closed
+form. `abcd <rfm-N>` describes it. The family is warm: the cold-reading
+assembler's exclusion floor names it at every position.
 
 <!-- surface-appendix:begin — generated from the command tree by `go generate ./internal/surface/cli`; never edit by hand -->
 
@@ -415,7 +509,7 @@ _Generated from the command tree; a drift test fails `go test` when this appendi
 
 ### `abcd capture`
 
-Sub-verbs: `abcd capture defer`, `abcd capture disposition`, `abcd capture link`, `abcd capture list`, `abcd capture mentions`, `abcd capture migrate`, `abcd capture promote`, `abcd capture resolve`, `abcd capture wontfix`.
+Sub-verbs: `abcd capture admit`, `abcd capture defer`, `abcd capture disposition`, `abcd capture link`, `abcd capture list`, `abcd capture mentions`, `abcd capture migrate`, `abcd capture promote`, `abcd capture reframe`, `abcd capture resolve`, `abcd capture surprise`, `abcd capture wontfix`.
 
 | Flag | Type |
 |---|---|
@@ -429,6 +523,14 @@ Sub-verbs: `abcd capture defer`, `abcd capture disposition`, `abcd capture link`
 | `--slug` | string |
 | `--source` | string |
 
+### `abcd capture admit`
+
+Sub-verbs: none.
+
+| Flag | Type |
+|---|---|
+| `--grounds` | string |
+
 ### `abcd capture defer`
 
 Sub-verbs: none.
@@ -498,6 +600,17 @@ Sub-verbs: none.
 | `--intent` | string |
 | `--production-mode` | string |
 
+### `abcd capture reframe`
+
+Sub-verbs: none.
+
+| Flag | Type |
+|---|---|
+| `--complete` | string |
+| `--grounds` | string |
+| `--occasioned-by` | string |
+| `--open` | bool |
+
 ### `abcd capture resolve`
 
 Sub-verbs: none.
@@ -512,6 +625,14 @@ Sub-verbs: none.
 | `--shipped-in` | string |
 | `--spec` | string |
 
+### `abcd capture surprise`
+
+Sub-verbs: none.
+
+| Flag | Type |
+|---|---|
+| `--occasioned-by` | string |
+
 ### `abcd capture wontfix`
 
 Sub-verbs: none.

.abcd/development/brief/04-surfaces/08-abcd.md

@@ -41,8 +41,15 @@ and which of the `.abcd/` work tiers exist. The plugin command invokes its JSON
 form.
 
 **`abcd <record-id>`** takes a single positional matching `iss-N`, `itd-N`,
-`spc-N` or `adr-N` and reports, read-only, what that record is, where it lives,
-and the concrete next move for its lifecycle state. Bare answers *what can I
+`spc-N`, `adr-N`, `adm-N`, `srp-N` or `rfm-N` and reports, read-only, what that
+record is, where it lives, and the concrete next move for its lifecycle state.
+An admission and a surprise are the issue ledger's two folderless families
+(spc-2609020626040342): their status reads `admitted` and `recorded`, their links
+are the records they join to, and neither has a next move. A reframe record
+(`rfm-N`, spc-2609020626048705) reads `open` until its after half is written and
+`complete` after; its links are its occasion, the before fingerprints and, once
+complete, the after fingerprints and the surfaces that changed, and an open one's
+next move is its completion. The reading families have no record dispatch. Bare answers *what can I
 do*; the id form answers *what is this, and what is my next move* (spc-26,
 itd-121). A positional on the namespace root is not a `show` sub-verb, so the
 form stays inside the naming discipline. For an issue id it also names the

.abcd/development/brief/04-surfaces/11-history.md

@@ -30,6 +30,7 @@ ahoy's registry stays under `~/.abcd/history/` and holds no transcripts.
 | `list` | — | shipped |
 | `migrate` | — | shipped |
 | `reconstruct` | — | shipped |
+| `separation` | audit | shipped |
 | `show` | — | shipped |
 | `staged` | — | shipped |
 
@@ -63,6 +64,16 @@ ahoy's registry stays under `~/.abcd/history/` and holds no transcripts.
 - **Draining** redacts and stores every staged transcript, then deletes the raw
   copy. It exits non-zero when anything failed, and this verb runs the backlog to
   completion where the session-start hook drains a bounded number.
+- **The separation check** reports whether any retained transcript held both a
+  reading and the ledger of one run, which brief invariant 15 forbids. Every
+  reading bundle and every scribe context carries a per-run context stamp; capture
+  records the stamps a transcript carried as metadata, and the check reads that
+  metadata and never a body. It names a transcript carrying the reading stamp and
+  the scribe stamp of one run and exits non-zero; otherwise it says the property
+  held for the runs it saw, or that it is unobserved when no retained transcript
+  carries a stamp, and never that it is clean
+  ([adr-2609021016275803](../../decisions/adrs/2609021016275803-no-session-holds-both-a-reading-and-the-ledger-and-a-per-run.md)).
+  The listing's text render ends with the same one line.
 
 - **Ingesting** — redact and store transcripts that are already on disk, at the
   paths given, and were never captured. The **destination repository is an
@@ -326,7 +337,7 @@ _Generated from the command tree; a drift test fails `go test` when this appendi
 
 ### `abcd history`
 
-Sub-verbs: `abcd history capture`, `abcd history discard`, `abcd history drain`, `abcd history ingest`, `abcd history list`, `abcd history migrate`, `abcd history reconstruct`, `abcd history show`, `abcd history staged`.
+Sub-verbs: `abcd history capture`, `abcd history discard`, `abcd history drain`, `abcd history ingest`, `abcd history list`, `abcd history migrate`, `abcd history reconstruct`, `abcd history separation`, `abcd history show`, `abcd history staged`.
 
 Flags: none.
 
@@ -390,6 +401,12 @@ Sub-verbs: none.
 | `--mode` | string |
 | `--out` | string |
 
+### `abcd history separation`
+
+Sub-verbs: none.
+
+Flags: none.
+
 ### `abcd history show`
 
 Sub-verbs: none.

.abcd/development/brief/04-surfaces/23-reading.md

@@ -103,6 +103,21 @@ The table is Go data, rendered into the readings family's charter under a test
 holding the two to each other. The exclusion floor rides in every manifest, each
 entry with the signal by which a reader detects it.
 
+**The knowledge record travels as statements**
+([adr-2609021016270132](../../decisions/adrs/2609021016270132-the-principles-family-is-a-declared-record-store-whose-entri.md)).
+The principles family is admitted at the widening, entailment and detection
+positions and projected to one field: each principle's H1 title above its
+`**The rule.**` paragraph, with every inline or reference-style link unwrapped to
+its label. A `## The rule` heading is never read as the statement, and a principle
+with no such paragraph contributes no item. Its four claim keys and its citations
+stay behind, and the floor asserts both; an assembly whose principle item still
+carries a record handle, a bare URL or an autolink is refused rather than stamped,
+and record-lint's `principle_claims` judges a typed principle's title and
+paragraph by the same reading first. The
+table admits the family, and a committed entry naming the `principle` kind is what
+hands it to a run; the committed entries name no such kind, so no reading
+receives the knowledge record until one does.
+
 ## Two artefacts, and where they land
 
 Assembly writes the assembled input and the manifest as two separate files: the