[CLAUDE] Docs: S115 presence-not-age adopt closeout (STATUS/HANDOFF/session-log/synthesis/WAL)

Session-end closeout for S115 (AI_INFRA presence-not-age selector guardrail + rec-3 hmw.js STOP-HARD, shipped 81b59f0, CI #385 PASS). STATUS + HANDOFF mega-line blurb, session-log, ensemble-synthesis (closes H10/HCV gate), WAL reset to clean template. No canonical-count change (Mig 65 / 89 tables / 486 tests / gotcha 81). Owner backfill target 210K + reviewer/cicd harvest already in 81b59f0. §5.0 squashed the trailing wal: flush. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-07-13 13:01:14 +07:00
parent 81b59f0389
commit 88bd8e666d
8 changed files with 89 additions and 16 deletions
--- a/.claude/WAL.md
+++ b/.claude/WAL.md
@ -1,6 +1,6 @@
 # WAL — auto-generated, không sửa tay
 updated: — | session: — | branch: —
-goal: (trống — không có mạch dở; S114 PE multi-NCC per hạng mục SHIP PROD d436af2 + closeout 16a199f done)
+goal: (trống — không có mạch dở; S115 presence-not-age adopt SHIP 81b59f0 + CI #385 PASS + closeout done)
 chain:
 (rỗng)
--- a/.claude/agent-memory/cicd-monitor/MEMORY.md
+++ b/.claude/agent-memory/cicd-monitor/MEMORY.md
@ -12,9 +12,9 @@ Read-only CI/CD + post-deploy verifier SOLUTION_ERP. Polls Gitea Actions API, ve
 ---
-## S114 (2026-07-12) deploy verify — em-main-solo (cicd garble #53)
+## ⚠️ cicd-lane return-garble tracker (#53)
-[on-behalf: cicd-lane garble return #53 → em-main-solo curl-verify] Commit `d436af2` PE multi-NCC per hạng mục. **PASS:** bundle rotate ×2 admin `acprMqfB`→`D51OYyGV` / user `Ck3BTDdA`→`BVdssm5S` · byte-verify `detailId`+`select-winner`+`hạng mục` PRESENT (1.65MB real-size) · smoke health/admin/eoffice 3/3 200 · POST /select-winner bogus 401-live · Mig 65 applied (API-healthy=migrations-ran-startup). cicd-lane garble = trả memory-curation "Compressing S112/S111" thay verdict (×5/6-tổng tái phạm dai — [[feedback_agent_return_garble_recover]] root-cause curate-at-return) → em-solo recover. [engine: cicd-spawn garble→em-solo · Opus-S114]
+cicd-spawn đôi khi trả memory-curation slice ("Compressing S112/S111") thay verdict (×5/6 qua S114; cumulative ×18 all-agents → [[feedback_agent_return_garble_recover]], root-cause = curate-at-return). Recover: em-main-solo curl-verify. **S115 (#385) cicd-lane CLEAN-return no-garble — verdict delivered OK.**
 ---
@ -26,9 +26,9 @@ Read-only CI/CD + post-deploy verifier SOLUTION_ERP. Polls Gitea Actions API, ve
 - **#25 IIS WebSocket** — `notification-hub/negotiate` 401/404 prod. Fix: WebSocket module enable `web.config` site api (skill `iis-deploy-runbook`).
 - **#48 SQLite tie-break** — `OrderByDescending(CreatedAt).First()` pick wrong khi 2+ `.Add()` cùng frozen-clock. Fix: discriminator filter BEFORE OrderBy.
 - **Bundle hash unchanged = ship FAIL** — push+action success nhưng prod không đổi. Verify via INDEX.HTML ref (`curl -s https://admin.solutions.com.vn/ | grep -oE '/assets/index-[A-Za-z0-9_-]+\.(js|css)'`), NOT by GETting a hash-named asset directly. ⚠️ verify MUST sau status=success (Run #242 false-positive: check khi "running" → stale hash).
-  - **🔴 #69 (S72 Run #312) — FE bundle hash NON-DETERMINISTIC per rebuild.** `deploy.yml` `Remove-Item fe-*\* -Exclude web.config` + `Copy-Item dist\*` runs UNCONDITIONALLY every run (path-filter gates whole-workflow trigger, NOT per-step). Identical FE source ⟹ DIFFERENT hash each deploy (Vite/rolldown non-reproducible chunk-id). PROVEN: governance-only `18fced6` (0 files in fe-*/src) rotated BOTH bundles. ⟹ "BE-only/governance ⟹ bundle frozen" is FALSE; rotation EXPECTED every deploy. **To detect REAL FE change, diff `fe-*/src` in commit/range, NOT hash delta.**
+  - **🔴 #69 (S72 #312) — FE bundle hash NON-DETERMINISTIC per rebuild.** `deploy.yml` `Remove-Item fe-*\* -Exclude web.config`+`Copy-Item dist\*` runs UNCONDITIONALLY every run (path-filter gates whole-workflow, NOT per-step). ⟹ "BE/governance ⟹ frozen" can be FALSE; rotation possible every deploy. **To detect REAL FE change, diff `fe-*/src` in commit/range, NOT hash-delta.**
  - **⚠️ SPA-fallback 200 trap (S72):** server rewrites `/*`→`/index.html` so GET `/assets/index-<ANYTHING>.js` returns **200** even for fake hash (control `ZZdoesnotexist0.js`→200, size~919b text/html). Old-hash-still-200 MEANINGLESS. RELIABLE signal = parse index.html `<script src>`, GET that exact path + check `size_download` LARGE (real ~1.6MB vs fake ~919b) + `Last-Modified` in deploy window + 2nd-fetch byte-stable (no mid-deploy transient).
-  - **🟢 #69-REFINE (S83 Run #333) — hash can stay IDENTICAL across deploy when fe-*/src 0-change.** #69 said "rotates EVERY deploy" — NOT absolute. Run #333 (BE+tests+governance, ZERO `fe-*/src` diff) shipped FE (Last-Modified 17:10:35/17:11:27 BOTH in run-window 17:06→17:11) but hash UNCHANGED (admin `CsJetgZH`/user `BVS0ApIm` = #330 baseline). ⟹ identical Vite source ⟹ byte-identical output ⟹ same content-hash. Rolldown chunk-id apparently MORE deterministic than #69 feared (or only rotates on real src delta). **MOST RELIABLE ship-proof = `Last-Modified` header on the real bundle file IN deploy-window, NOT hash-delta** (hash-delta has false-NEGATIVE when src unchanged + false-POSITIVE risk noted in #69). Cross-ref `git diff fe-*/src` scope: 0-FE-change ⟹ hash EITHER same (#333/#485-487) OR rotated (#312/#489 S107) — both benign; ship-proof = fresh LM-in-window + real-size.
+  - **🟢 #69-REFINE (S83 #333) — hash can stay IDENTICAL across deploy when fe-*/src 0-change.** #69 "rotates EVERY deploy" NOT absolute: identical Vite source ⟹ byte-identical output ⟹ same content-hash. **MOST RELIABLE ship-proof = `Last-Modified` on real bundle IN deploy-window + real-size, NOT hash-delta** (hash-delta false-NEG when src unchanged, false-POS risk per #69). 0-FE-change ⟹ hash EITHER same (#333/#485-487/#495/#385-S115) OR rotated (#312/#489) — both benign; ship-proof = fresh LM-in-window + real-size + marker.
 - **Migration drift prod vs repo** — compare `ls .../Persistence/Migrations/*.cs` vs `sqlcmd __EFMigrationsHistory`. Fix: check `Program.cs`/DbInitializer `app.MigrateDatabase()` + app pool recycle. Mig-applied proof = `__EFMigrationsHistory` top==repo-HEAD; stuck-old ⟹ pool didn't recycle ⟹ FAIL even if status=success+bundle-rotated.
 ---
@ -56,9 +56,9 @@ Read-only CI/CD + post-deploy verifier SOLUTION_ERP. Polls Gitea Actions API, ve
 - **Gitea:** `git.baocaogiaoduc.vn/vietreport-admin/solution-erp` · workflow `.gitea/workflows/deploy.yml` · paths-ignore 7-entry (D10 S111 #495): `['docs/**','**/*.md','.claude/skills/**','.claude/agent-memory/**','.claude/workflows/runs/**','.gitignore','scripts/**.md']`. Anon API works (public repo) when GITEA_TOKEN absent.
 - **Prod:** api/admin/eoffice `.solutions.com.vn` · SSH `ssh vietreport-vps` (Administrator, id_ed25519) · IIS phys paths: API `C:\inetpub\solution-erp\api` · admin `\fe-admin` · user `\fe-user`. DB `.\SQLEXPRESS`/`SolutionErp`/`vrapp` SQL-auth. **Conn key = `ConnectionStrings.Default` (NOT `DefaultConnection`)**. DB pw = `buKL3TGBkD0wDDbYVw65QeX9` (User Id=`vrapp`; ⚠️ Password field has NO `vrapp/` prefix — S89 login-failed when prefix included; read verbatim from prod `appsettings.Production.json` ConnectionStrings.Default when `$env:PROD_DB_PASSWORD` empty). ⚠️ skill-doc path `C:\inetpub\apps\SolutionErp\Api` STALE.
  - **SSH→PS quoting (S42):** nested bash→ssh→powershell mangles `$var`/`\"` → use `iconv UTF-16LE | base64` → `powershell -EncodedCommand $B64`; OR write ps1-file + `powershell -File $(cygpath -w)`. sqlcmd over SSH direct `-W -h -1` pw-inline. sys-catalog string-concat → `COLLATE DATABASE_DEFAULT` (collation conflict).
- **Tests baseline:** **486 PASS** (45 Domain + 441 Infra · 0 fail/skip; S114 Run #384 sha `d436af2` — 477→486 incl +9 PE multi-NCC [PeMultiWinnerTests/PeSelectWinnerClearTests/PeListWinnerNamesProjectionTests/CreateContractFromEvaluationMultiWinnerTests + 3 modified PeWorkItemBudget/PeCcmThresholdFinalize/PeSubmitGuardAndBypass]; prior 477 [S113 #383 45D+432I], 458, 440, 436, 434, 421). Phase 9 UAT skip per chunk OK. 🔑 **Anon log endpoint `https://git.baocaogiaoduc.vn/vietreport-admin/solution-erp/actions/runs/{run_number}/jobs/0/logs` (HTTP 200 ~18KB) EXPOSES per-project `Passed! - Failed: 0, Passed: N, Skipped: 0` — concrete test count now available, NOT just status=success (the `/api/v1/.../tasks/{id}/logs` variant 404s; use web-UI runs/{run_number}/jobs/0/logs).**
+- **Tests baseline:** **486 PASS** (45 Domain + 441 Infra · 0 fail/skip; S114 #384 `d436af2`; prior 477/458/440/436/434/421). Phase 9 UAT skip OK. 🔑 **Concrete count via anon log `.../actions/runs/{run_number}/jobs/0/logs` (~18KB) → per-project `Passed! - Failed: 0, Passed: N, Skipped: 0` (NOT just status=success; `/api/v1/.../tasks/{id}/logs` variant 404s — use web-UI runs path).**
- **Mig latest repo:** **Mig 65 `20260712142652_BackfillPeQuoteIsSelectedAndWinnerInvariant`** (S114 #384 `d436af2`; DATA-ONLY no-schema 2-dir backfill establishing INVARIANT `PurchaseEvaluationSupplier.IsWinner ⟺ Any(Quote.IsSelected)` — winner-truth đổi whole-supplier IsWinner → per-hạng-mục Quote.IsSelected; idempotent, Down=no-op, **NO ModelSnapshot change** [chỉ 2 mig-file `.cs`+`.Designer.cs` = ĐÚNG cho data-only], SQL-Server-only [SQLite tests EnsureCreated không replay]. VERIFIED-APPLIED-PROD history-top + invariant-violations=**0** [33 sup/23 winners] + sys.tables=89 unchanged). Prev **Mig 64 `AddSupplierPublishState`** (S113 #383 `5fa11b5`; AddColumn `IsPublic` bit + backfill 37/37 PUBLIC=1 + Code-filtered-unique, sys.tables 89, VERIFIED-APPLIED-PROD). Prev Mig 63/62/61 (Supplier import-fields / 9→27 expand / PE backfill — see migration table). Path `src/Backend/SolutionErp.Infrastructure/Persistence/Migrations/`. Prod check `sqlcmd __EFMigrationsHistory ORDER BY MigrationId DESC TOP 5`. ⚠️ **`sys.tables` (is_ms_shipped=0) = 89** (S104 LIVE-verified post-#488 — AddColumn/data-only migs don't change count → commit touches no new table ⟹ 89 correct don't FAIL. Cross-ref COMMIT scope vs ambient count). enum-additive (e.g. `ApprovalAttachment=5`) = int-stored NO-mig → history NOT-advance + empty `git diff -- '*Migrations*'`.
+- **Mig latest repo: Mig 65 `BackfillPeQuoteIsSelectedAndWinnerInvariant`** (S114 `d436af2`; DATA-ONLY no-schema 2-dir backfill, INVARIANT `Supplier.IsWinner ⟺ Any(Quote.IsSelected)`; Down=no-op, NO ModelSnapshot change [2 mig-file = correct data-only], SQL-Server-only [SQLite EnsureCreated skips]; VERIFIED-APPLIED-PROD history-top + violations=0 + sys.tables=89). Prev Mig 64 `AddSupplierPublishState` / 63 / 62 `ExpandSupplierFields` (see docs/CLAUDE.md migration table). Path `src/Backend/SolutionErp.Infrastructure/Persistence/Migrations/`. Prod check `sqlcmd __EFMigrationsHistory ORDER BY MigrationId DESC`. ⚠️ **`sys.tables`(is_ms_shipped=0)=89** — AddColumn/data-only don't change count; commit touching no new table ⟹ 89 correct, don't FAIL. enum-additive = int NO-mig (history NOT-advance + empty `git diff -- '*Migrations*'`).
- **Bundle hash live (S114 #384 `d436af2` 2026-07-12 — REAL-FE-SHIP js-rotate ×2 / css-FROZEN):** admin js **`D51OYyGV`**/css **`CfunQHbd`** · user js **`BVdssm5S`**/css **`DGqqHQXS`** — BOTH js rotated (from #497 admin `acprMqfB`/user `Ck3BTDdA`); CSS FROZEN = expected (change `.tsx` logic/strings NOT styling — PeDetailTabs.tsx both apps) ⟹ 🔑 **js-rotate/css-frozen = fingerprint FE-logic-change-no-style**. Ship-proof: real-size admin 1,655,105b/user 1,561,453b (vs 919b SPA-trap) + `application/javascript` + LM 15:26:37/15:27:29 GMT (=22:26/22:27+07 in-window 22:22:40→22:27:57) + byte-verify `trúng thầu theo từng hạng mục`/`thắng hạng mục`/`trúng thầu cho hạng mục` BOTH bundles. ⚠️ id≠run_number head_sha-keyed. ⚠️ PER #69 TWO-MODE hash SNAPSHOT-per-run NOT baseline (rotate real-src OR 0-src, freeze 0-src) — ALWAYS re-snapshot LIVE; ship-proof = LM-in-window + real-size + marker-grep, NOT hash-delta.
+- **Bundle hash live:** current ship-baseline = S114/S115 (admin js `D51OYyGV`/css `CfunQHbd` · user js `BVdssm5S`/css `DGqqHQXS`; size 1,655,105/1,561,453b) — see S114/S115 recent-run entries for LM+markers. ⚠️ id≠run_number (head_sha-keyed). PER #69 TWO-MODE hash is SNAPSHOT-per-run NOT stable-baseline (rotate on real-src OR benign-0-src; freeze on 0-src) — ALWAYS re-snapshot LIVE post-success; ship-proof = LM-in-window + real-size (vs 919b SPA-trap) + marker-grep, NOT hash-delta. js-rotate/css-frozen = FE-logic-no-style fingerprint.
 - **Bearer:** admin `admin@solutions.com.vn/Admin@123456` (full) · UAT `nv.test@solutions.com.vn/TestUser@123456` (Drafter CCM, gotcha #44 check).
 ## 🔑 Critical config (flag commit nếu tái xuất)
@ -76,10 +76,9 @@ BE (test+build) ~90s · FE × 2 ~60s/app · deploy ~30s · **total ~3min code /
 ## 📅 Recent runs (compressed — verbatim → archive via `_INDEX.md`)
- **🟢 S114 #384 (rn 384, id 498) `d436af2` GO 5m17s (22:22:40→22:27:57+07 2026-07-12, owner anh Kiệt) — PE multi-NCC per hạng mục (winner-truth đổi whole-supplier `IsWinner` → per-hạng-mục `Quote.IsSelected`; endpoint `select-winner` body `{supplierIds}`→`{detailId,supplierIds}`; Mig 65 data-only 2-dir backfill; 18-file: 7 BE incl PurchaseEvaluationWorkflowService+DbInitializer-sync, 2 FE PeDetailTabs both apps, 7 PE test, Mig65 2-file no-ModelSnapshot):** status=success · **gate CONCRETE `runs/384/jobs/0/logs`: Domain 45 + Infra 441 = 486/0-fail/0-skip** (+9 vs #383 477) · **Mig 65 `BackfillPeQuoteIsSelectedAndWinnerInvariant` APPLIED-PROD** (history-top + **invariant-violations=0** [IsWinner⟺Any(IsSelected), 33 sup/23 winners] + sys.tables=89 frozen [data-only, 2 mig-file no-ModelSnapshot = correct]) · **FE REAL-SHIP js×2 css-FROZEN** admin js `acprMqfB`→`D51OYyGV` · user js `Ck3BTDdA`→`BVdssm5S` (CSS `CfunQHbd`/`DGqqHQXS` frozen — `.tsx`-only) ship-proof= real-size 1,655,105/1,561,453b + `application/javascript` + LM 15:26:37/15:27:29 GMT in-window + byte-verify `trúng thầu theo từng hạng mục`+`thắng hạng mục`+`trúng thầu cho hạng mục` present both vs SPA-trap 919b · **select-winner WIRED** POST bogus-bearer+body→401 vs bogus-route 404 (401≠blanket). smoke health/ready+live + admin/eoffice roots ALL 200. 🔑 js-rotate+css-frozen = FE-logic-no-style fingerprint.
+- **🟢 S115 #385 (rn 385, id 499) `81b59f0` GOVERNANCE/TOOLING-ONLY GO 5m23s (12:25:31→12:30:54+07 2026-07-13, harness adopt presence-not-age + hmw.js STOP-HARD; 20-file: 0 src/fe/mig/test — non-ignored trigger = `.claude/workflows/hmw.js` + `scripts/memory-archive-gate.ps1` [`.ps1`∉`scripts/**.md` ⟹ CI-run ĐÚNG #41; rest .md/.json under docs/agent-memory/workflows-runs/broadcasts IGNORED]):** status=success · **gate CONCRETE `runs/385/jobs/0/logs`: Domain 45 + Infra 441 = 486/0-fail/0-skip = S114 baseline EXACT** (0 src/tests diff → count frozen ✓) · **FE bundle FROZEN ×4** admin js `D51OYyGV`/css `CfunQHbd` · user js `BVdssm5S`/css `DGqqHQXS` = S114 verbatim (NO rotate) — deploy physically re-copied (LM 05:29:32/05:30:26 GMT = 12:29:32/12:30:26+07 IN-window) BUT byte-identical (size 1,655,105/1,561,453b = S114 EXACT) ⟹ #69-REFINE 0-fe-src=identical-Vite=same-hash+size+fresh-LM · SPA-trap ctrl fake-hash 919b text/html · Mig FROZEN 65 (0 migration-file diff; API health/ready 200=startup OK) · smoke 4/4 200 (api ready+live, admin, eoffice). 🔑 GOVERNANCE-ONLY PASS: non-.md-in-.claude (hmw.js/.ps1) STILL trigger CI (#41 LIVE post-#495 D10); FROZEN-hash+fresh-LM+identical-size = no-accidental-rotation proof. cicd-lane clean-return no-garble.
- **🟢 S113 #383 (rn 383, id 497) `5fa11b5` GO 5m14s** — Supplier import v2 + Mig 64 `AddSupplierPublishState` APPLIED-PROD (IsPublic backfill 37/37, sys.tables 89) · gate 477 (45D+432I) · FE real-ship js+css both apps admin `acprMqfB`/`CfunQHbd` · user `Ck3BTDdA`/`DGqqHQXS` (byte-verify `Tải file mẫu`/`Đã công bố`/`Nháp (ẩn)`) · endpoints `/suppliers/import/template`+`?published=true` WIRED 401 · smoke ALL 200 — verbatim → git `8304d08` + `_INDEX`.
+- **🟢 S114 #384 (rn 384, id 498) `d436af2` GO 5m17s — PE multi-NCC per hạng mục + Mig 65 `BackfillPeQuoteIsSelectedAndWinnerInvariant` APPLIED-PROD (data-only 2-dir backfill, invariant-violations=0 [IsWinner⟺Any(IsSelected)], sys.tables 89) · gate 486 (45D+441I) · FE js-ROTATE×2/css-frozen admin `acprMqfB`→`D51OYyGV`/user `Ck3BTDdA`→`BVdssm5S` (= CURRENT ship-baseline, size 1,655,105/1,561,453b) · byte-verify `trúng thầu theo từng hạng mục` · select-winner WIRED 401 · smoke ALL 200 · 🔑 js-rotate+css-frozen = FE-logic-no-style fingerprint — verbatim → `archive/2026-07.md` via `_INDEX`.**
- **🟢 S112 #496 `e100ef0` GO 5m25s** — PE workflow + Supplier Excel-import Phase B + Mig 63 `AddSupplierImportSourceFields` APPLIED-PROD (2 AddColumn, sys.tables 89) · gate 458 (45D+413I) · FE admin `Cixlt_MA`/user `BhBOG1dn` · 🔑 411-refine: bodyless-POST→411 ANY route → re-probe WITH body → 401/415 (matched) vs 404 (missing) — verbatim → `2026-07.md`/`_INDEX`.
+- _(**S111 #495 `8aa3869` H22-WAL-adopt** [deploy.yml SELF-change +2 paths-ignore, run parsed+ran-full = workflow-self-change PASS; bundle FROZEN ×6-streak; 🔑 **AS-6 baseline-shift**: post-#495 memory-push (budget.json/agent-memory/run-trace) HẾT trigger CI, phân-loại giờ soi file ngoài 7-glob] **+ S112 #496 `e100ef0`** PE-workflow+Supplier-import-Phase-B+Mig63 `AddSupplierImportSourceFields` [gate 458, 🔑 411-refine: bodyless-POST→411 ANY-route → re-probe WITH-body → 401/415-matched vs 404-missing] **+ S113 #383 `5fa11b5`** Supplier-import-v2+Mig64 `AddSupplierPublishState`-APPLIED-PROD [IsPublic 37/37, gate 477] — all GO ~5m, FE real-ship, Mig-applied-prod, smoke ALL 200 · full verbatim → `archive/2026-07.md` via `_INDEX`)_
 - **🟢 S111 #495 (rn 381, id 495) `8aa3869` GO 5m11s (11:45:21→11:50:32+07 2026-07-12, iter6) — H22 WAL adopt 30-file +767 (0 src/BE/FE/mig; non-ignored: settings.json + wal-flush.ps1 + hmw.js + deploy.yml + governance-detectors.ps1 + .gitattributes → CI-run ĐÚNG thiết kế):** status=success (gate 440) · **deploy.yml TỰ-ĐỔI trong chính commit (D10 +2 paths-ignore `.claude/agent-memory/**` + `.claude/workflows/runs/**`) — run created+parse+chạy trọn 5m11s = YAML hợp lệ, workflow-self-change PASS** · Mig FROZEN 62 history-top `ExpandSupplierFields` + sys.tables=89 ✓ · smoke 3×200 (health/ready + 2 FE roots) · **bundle FROZEN ×6-streak** (admin `BVyH-FY7`/`Bbtesa6B` · user `EDsZebvn`/`BmuPz_Dy` = #490→#494) + LM-in-window 11:49:07/11:50:00+07 + size 1,644,931/1,551,280b byte-identical #494 vs fake-919b = ship-proof. 🔑 **AS-6 BASELINE SHIFT từ #495: paths-ignore 7-entry — memory-budget.json/agent-memory/run-trace push HẾT trigger (trigger-pattern #490/#492 DEAD); phân loại trigger giờ soi file ngoài 7-glob.**
 - _(**S107-closeout→S110-spot #490-#494** GOVERNANCE/MEMORY-push GO ×5 [`d74f67f`·`69957fd`·`f5a5c3e`·`6ee60cd`·`ac3f122` — trigger #41 non-.md-in-push: budget.json ×2 + hmw.js ×3, pattern DEAD từ D10 #495] — bundle FROZEN-streak ×5 sau ROTATE #489 [#69 TWO-MODE; LM-in-window + real-size 1,644,931/1,551,280b = signal duy nhất] · Mig 62 + sys.tables 89 frozen · gate 440 · smoke 3×200 ALL · 🔑 #494 spot-detection: LM-prod-newer-than-last-verified-window = missed-run detector · full verbatim → `archive/2026-07.md` via `_INDEX`)_
 - _(**S107 #489 `21387cd` GOVERNANCE-ONLY (+office-document 12th sub) GO 5m33s** — JS ROTATED-benign `ChSNAJBK`→`BVyH-FY7` / `Bn2w1znH`→`EDsZebvn` CSS-frozen, 🔑 #69 TWO-MODE CONFIRMED (0-fe-src ROTATE #312/#489 hoặc FROZEN #333/#485-487 — ship-proof = LM-in-window + real-size, hash-delta phụ) · **S104 #488 `778fc98` FULL-STACK Supplier 9→27 + Mig 62 `ExpandSupplierFields` APPLIED-PROD** — AddColumn×18-exact + sys.tables-89-invariant + un-cram 4-NCC Note=NULL/Pkg/Bank/LegalRep-populated-EXACT + DTO-18-new-keys-live + JS-rotate-real-src + 🔑 FULL-STACK-SCHEMA-ADD+DATA-UN-CRAM PASS-pattern — full verbatim → `archive/2026-07.md` via `_INDEX`)_
 - _(**S103 #487 + S100 #486 + S98 #485** GOVERNANCE/SCRIPTS-ONLY GO ×3 [.ps1/.json/.md-mix non-ignored → #41] — bundle FROZEN #69-REFINE ×4, GOVERNANCE-PASS stable [#476/#485-487] · 🔧 python `time.sleep` foreground-OK (chỉ bash-sleep-block) · full verbatim → `archive/2026-07.md` (+#485 git `c112be9`) via `_INDEX`)_
@ -93,5 +92,5 @@ BE (test+build) ~90s · FE × 2 ~60s/app · deploy ~30s · **total ~3min code /
 ## 🔄 Curate trigger
 - >~30KB → archive recent runs → L2 `archive/<period>.md` (byte-exact append) + `_INDEX.md` substring pointer. Dup failure patterns → merge. Stale >3mo → remove.
- **Last curate: 2026-07-12 S111 (self, PostToolUse 20.5→~17KB)**: #490-#494 verbatim → `archive/2026-07.md` + `_INDEX` +5 pointers → 1 merged stub; nén S89-stub + curate-log.
+- **Last curate: 2026-07-13 S115 (self, PostToolUse 21.6→<17KB)**: #384/#383/#496/#495 (S114/S113/S112/S111) verbatim → `archive/2026-07.md` + `_INDEX` +4 pointers → S114 compact-stub + S111-113 merged-stub; top S114 garble-block → 1-line tracker.
- **Prev: S107 07-10 self 20.4→16.9 (#489/#488→archive) · S104 07-06 self 20.5→17.9 · S98 07-02 em-main 19.9→17.06 (`2026-07.md` NEW) · S80 06-20 em-main 38.8→16 · S70 06-17 Harness-9 65.2→23.2 (_INDEX/gist gen:1) · earlier S66 · S40.**
+- **Prev: S111 07-12 self 20.5→17 (#490-#494→archive) · S107 07-10 self 20.4→16.9 (#489/#488→archive) · S104 07-06 self 20.5→17.9 · S98 07-02 em-main 19.9→17.06 (`2026-07.md` NEW) · S80 06-20 em-main 38.8→16 · S70 06-17 Harness-9 65.2→23.2 · earlier S66 · S40.**
--- a/.claude/agent-memory/cicd-monitor/archive/2026-07.md
+++ b/.claude/agent-memory/cicd-monitor/archive/2026-07.md
@ -18,3 +18,10 @@
 - **🟢 S109 #492 (rn 378, id 492) `f5a5c3e` GO 5m21s (17:21:34→17:26:55+07, found-completed 0-poll) — MEMORY-ONLY 10-file (9 .md ignored + `memory-budget.json` non-ignored → #41 CI-run, AS-6 prediction VERIFIED):** status=success (gate 440) · 0 fe/BE/mig src ⟹ Mig FROZEN 62 history-top `ExpandSupplierFields` + MIGCOUNT=62 + sys.tables=89 ✓ · smoke 3×200 (health/ready + 2 FE roots) · **bundle FROZEN ×3-streak** (admin `BVyH-FY7`/`Bbtesa6B` · user `EDsZebvn`/`BmuPz_Dy` = #489→#491) + LM-in-window 17:25:26/17:26:22+07 + real-size 1,644,931/1,551,280b vs fake-919b = ship-proof. 🔑 `memory-budget.json` trigger-pattern lặp #490 — single non-.md file trong memory-push đủ CI-run (#41 range-eval); frozen-streak ×3 củng cố #69-REFINE (0-fe-src ⟹ byte-identical output, LM+size = signal duy nhất).
 - **🟢 S108 #491 (rn 377, id 491) `69957fd` GO 5m06s (14:35:12→14:40:18+07, iter7) — GOVERNANCE 9-file (`hmw.js` comment-fix non-ignored → #41 CI-run; archive-carry `f1af05c` 2-file .md-only → 0-run ✓ #41 2-chiều VERIFIED cùng-đợt):** status=success (gate 440) · 0 fe/BE/mig src ⟹ Mig FROZEN 62 history-top + sys.tables=89 ✓ · smoke 3×200 · **bundle FROZEN ×2** (admin `BVyH-FY7`/`Bbtesa6B` · user `EDsZebvn`/`BmuPz_Dy` = #489/#490) + LM-in-window 14:38:50/14:39:44+07 + real-size 1,644,931/1,551,280b vs fake-919b = ship-proof. 🔑 #69 FROZEN-streak ×2 (#490→#491) sau ROTATE #489 — cùng 0-fe-src 3-run liên-tiếp cho cả 2 mode; LM+size vẫn signal duy nhất.
 - **🟢 S107-closeout #490 (rn 376, id 490) `d74f67f` GO 5m32s (10:39:30→10:45:02+07, iter6) — GOVERNANCE-CLOSEOUT 7-file (6 .md + `memory-budget.json` non-ignored → #41 CI-run):** status=success (gate 440) · 0 BE/FE src ⟹ Mig FROZEN 62 history-top + sys.tables=89 ✓ · smoke 3×200 · **bundle FROZEN ×2** (admin `BVyH-FY7`/`Bbtesa6B` · user `EDsZebvn`/`BmuPz_Dy` = #489) + LM-in-window 10:43:38/10:44:36+07 + real-size 1.64/1.55MB app-js vs fake-919b = ship-proof. 🔑 #69 TWO-MODE back-to-back cùng-phiên: #489 ROTATE → #490 FROZEN trên cùng 0-fe-src — LM+size là signal duy nhất. Orphan-record OK (precedent #485).
 ## Archived 2026-07-13 S115 curate — runs #384/#383/#496/#495 verbatim (from L1 MEMORY.md)
 - **🟢 S114 #384 (rn 384, id 498) `d436af2` GO 5m17s (22:22:40→22:27:57+07 2026-07-12, owner anh Kiệt) — PE multi-NCC per hạng mục (winner-truth đổi whole-supplier `IsWinner` → per-hạng-mục `Quote.IsSelected`; endpoint `select-winner` body `{supplierIds}`→`{detailId,supplierIds}`; Mig 65 data-only 2-dir backfill; 18-file: 7 BE incl PurchaseEvaluationWorkflowService+DbInitializer-sync, 2 FE PeDetailTabs both apps, 7 PE test, Mig65 2-file no-ModelSnapshot):** status=success · **gate CONCRETE `runs/384/jobs/0/logs`: Domain 45 + Infra 441 = 486/0-fail/0-skip** (+9 vs #383 477) · **Mig 65 `BackfillPeQuoteIsSelectedAndWinnerInvariant` APPLIED-PROD** (history-top + **invariant-violations=0** [IsWinner⟺Any(IsSelected), 33 sup/23 winners] + sys.tables=89 frozen [data-only, 2 mig-file no-ModelSnapshot = correct]) · **FE REAL-SHIP js×2 css-FROZEN** admin js `acprMqfB`→`D51OYyGV` · user js `Ck3BTDdA`→`BVdssm5S` (CSS `CfunQHbd`/`DGqqHQXS` frozen — `.tsx`-only) ship-proof= real-size 1,655,105/1,561,453b + `application/javascript` + LM 15:26:37/15:27:29 GMT in-window + byte-verify `trúng thầu theo từng hạng mục`+`thắng hạng mục`+`trúng thầu cho hạng mục` present both vs SPA-trap 919b · **select-winner WIRED** POST bogus-bearer+body→401 vs bogus-route 404 (401≠blanket). smoke health/ready+live + admin/eoffice roots ALL 200. 🔑 js-rotate+css-frozen = FE-logic-no-style fingerprint.
 - **🟢 S113 #383 (rn 383, id 497) `5fa11b5` GO 5m14s** — Supplier import v2 + Mig 64 `AddSupplierPublishState` APPLIED-PROD (IsPublic backfill 37/37, sys.tables 89) · gate 477 (45D+432I) · FE real-ship js+css both apps admin `acprMqfB`/`CfunQHbd` · user `Ck3BTDdA`/`DGqqHQXS` (byte-verify `Tải file mẫu`/`Đã công bố`/`Nháp (ẩn)`) · endpoints `/suppliers/import/template`+`?published=true` WIRED 401 · smoke ALL 200 — verbatim → git `8304d08` + `_INDEX`.
 - **🟢 S112 #496 `e100ef0` GO 5m25s** — PE workflow + Supplier Excel-import Phase B + Mig 63 `AddSupplierImportSourceFields` APPLIED-PROD (2 AddColumn, sys.tables 89) · gate 458 (45D+413I) · FE admin `Cixlt_MA`/user `BhBOG1dn` · 🔑 411-refine: bodyless-POST→411 ANY route → re-probe WITH body → 401/415 (matched) vs 404 (missing) — verbatim → `2026-07.md`/`_INDEX`.
 - **🟢 S111 #495 (rn 381, id 495) `8aa3869` GO 5m11s (11:45:21→11:50:32+07 2026-07-12, iter6) — H22 WAL adopt 30-file +767 (0 src/BE/FE/mig; non-ignored: settings.json + wal-flush.ps1 + hmw.js + deploy.yml + governance-detectors.ps1 + .gitattributes → CI-run ĐÚNG thiết kế):** status=success (gate 440) · **deploy.yml TỰ-ĐỔI trong chính commit (D10 +2 paths-ignore `.claude/agent-memory/**` + `.claude/workflows/runs/**`) — run created+parse+chạy trọn 5m11s = YAML hợp lệ, workflow-self-change PASS** · Mig FROZEN 62 history-top `ExpandSupplierFields` + sys.tables=89 ✓ · smoke 3×200 (health/ready + 2 FE roots) · **bundle FROZEN ×6-streak** (admin `BVyH-FY7`/`Bbtesa6B` · user `EDsZebvn`/`BmuPz_Dy` = #490→#494) + LM-in-window 11:49:07/11:50:00+07 + size 1,644,931/1,551,280b byte-identical #494 vs fake-919b = ship-proof. 🔑 **AS-6 BASELINE SHIFT từ #495: paths-ignore 7-entry — memory-budget.json/agent-memory/run-trace push HẾT trigger (trigger-pattern #490/#492 DEAD); phân loại trigger giờ soi file ngoài 7-glob.**
--- a/.claude/agent-memory/cicd-monitor/archive/_INDEX.md
+++ b/.claude/agent-memory/cicd-monitor/archive/_INDEX.md
@ -123,3 +123,7 @@
 - 2026-07-10 · S109 #492 `f5a5c3e` MEMORY-ONLY budget.json GO — FROZEN x3, AS-6 verified · PASS · `2026-07.md` · substring:"S109 #492 (rn 378, id 492)"
 - 2026-07-11 · S110 #493 `6ee60cd` GOVERNANCE 3-commit H21+MTv3 GO — FROZEN x4, range-eval #41 · PASS · `2026-07.md` · substring:"S110 #493 (rn 379, id 493)"
 - 2026-07-11 · S110-spot #494 `ac3f122` GOVERNANCE mark-stamp GO — FROZEN x5 + LM-newer missed-run detector · PASS · `2026-07.md` · substring:"S110-spot #494 (rn 380, id 494)"
 - 2026-07-12 · S111 #495 `8aa3869` H22 WAL adopt GO — deploy.yml self-change +2 paths-ignore, bundle FROZEN x6, AS-6 baseline shift memory-push HET trigger · PASS · `2026-07.md` · substring:"S111 #495 (rn 381, id 495)"
 - 2026-07-12 · S112 #496 `e100ef0` PE workflow + Supplier import Phase B + Mig63 AddSupplierImportSourceFields GO — 411-refine, gate 458 · PASS · `2026-07.md` · substring:"S112 #496 `e100ef0`"
 - 2026-07-12 · S113 #383 `5fa11b5` Supplier import v2 + Mig64 AddSupplierPublishState APPLIED-PROD GO — IsPublic 37/37, gate 477 · PASS · `2026-07.md` · substring:"S113 #383 (rn 383, id 497)"
 - 2026-07-13 · S114 #384 `d436af2` PE multi-NCC per hang muc + Mig65 backfill invariant APPLIED-PROD GO — js-rotate x2/css-frozen D51OYyGV/BVdssm5S, gate 486 · PASS · `2026-07.md` · substring:"S114 #384 (rn 384, id 498)"
--- a/.claude/workflows/runs/2026-07-13-presence-not-age-adopt/ensemble-synthesis.md
+++ b/.claude/workflows/runs/2026-07-13-presence-not-age-adopt/ensemble-synthesis.md
@ -0,0 +1,25 @@
 # ensemble-synthesis — fable-clone reviewer 5-lane (H10 synthesis, S115)
 > Lead synthesis of the 5-lane `/fable-clone reviewer` ensemble (`wf_b621aac4-f0b`). The crystallized output = `spec-presence-not-age-adopt-13-07-2026.md` (H21 3-heading spec). This file satisfies the H10/HCV close-gate (`*-synthesis.md` present) + records the lane→verdict consolidation.
 ## Lane returns (5 reviewer lenses, same role)
 | Lane | Floor | Verdict | Necessity | Sub-file |
 |---|---|---|---|---|
 | 1 | (i) reinject-by-absence | COMPLIANT | docs | sub-reviewer-1.md |
 | 2 | (ii) archive value-gate vs FIFO [CRUX] | NEEDS-FIX | SHOULD | sub-reviewer-2.md |
 | 3 | (iii) self-check drop-date | RED-FLAG | SHOULD | sub-reviewer-3.md |
 | 4 | Part B hmw.js fail-soft→stop-hard | NEEDS-FIX | MUST | sub-reviewer-4.md (garbled return → recovered from disk) |
 | 5 | scope-discipline / anti-over-eng | COMPLIANT | — | sub-reviewer-5.md |
 ## Synthesized verdict (em-main P3/P4 refute+synthesize)
 Convergent: SE already presence-compliant on 2 of 3 floors (reinject + MFE age-band); the single genuine selector red-flag = the archive-gate's oldest-by-position base ordering (SHOULD-fix, D3); the single MUST code change = Part B hmw.js STOP-HARD (D2). Lane 5 kept lanes 2/3 from over-reaching (D3 stays a bounded reorder, no value-scoring; keep_floor/value_protect/mfe-age-band all preserved).
 ## Downstream
 Spec → `/fable-real reviewer` deep-pass (`spec-review-fable-real.md`, PASS-WITH-FIXES) which caught **M2** (contiguity-inversion bug in the D3 pseudocode that all 5 lanes missed) + M1 → both applied to the spec → HMW execute D1/D2/D3 → all acceptance gates GREEN → commit `81b59f0`.
 ## Harvest note
 Reviewer-role memory harvested into `agent-memory/reviewer/MEMORY.md` (S115 spec-review entry, stamped `[engine: fable-clone-ensemble + fable-real · S115]` in spirit; the fable-real self-write was verified-faithful + KEPT). #53 garble ×1 (lane-4) recovered from disk = 0 loss.
--- a/docs/HANDOFF.md
+++ b/docs/HANDOFF.md
--- a/docs/STATUS.md
+++ b/docs/STATUS.md
--- a/docs/changelog/sessions/2026-07-13-S115-presence-not-age-adopt.md
+++ b/docs/changelog/sessions/2026-07-13-S115-presence-not-age-adopt.md
@ -0,0 +1,38 @@
 # S115 (2026-07-13) — Adopt AI_INFRA presence-not-age selector guardrail + rec-3 hmw.js STOP-HARD
 > **Type:** governance/tooling adoption (0 product code — no `src/`, no `fe-*`, no `tests/`). **Lead:** Opus 4.8 (1M) Max (Fable outage). **HMW-mode:** ON. **Commit:** `81b59f0` (pushed) + closeout. **CI:** Run #385 PASS 5m23s, bundle FROZEN.
 ## What & why
 AI_INFRA published two items dated 2026-07-13: a directed approval (`6c32df89` — approves SE's H-22 + H-21/MTv3 reports at VERIFIED; SE = **first-in-fleet** full H-22) with rec-3, and a broadcast (`ab6c387e`, type=**update**) "presence-not-age selector guardrail" asking each project to re-verify **only the selector** of its memory refine-step against a 3-point function-floor. Owner directed the full rigorous pipeline.
 ## Pipeline (H21 engine-đắt, owner-directed)
 `/check-email AI_INFRA` (2 new pulled + hash-verified `6c32df89b60a`) → `/fable-clone reviewer` **5-lane ensemble** (`wf_b621aac4-f0b`) → lead verify+synthesize → **spec** (`runs/2026-07-13-presence-not-age-adopt/spec-…-13-07-2026.md`, H21 3-heading) → `/fable-real reviewer` **single deep-pass** (`spec-review-fable-real.md`) → **PASS-WITH-FIXES (0C/2M/5m)** → owner scope-decision **ALL-3** (AskUserQuestion) → HMW execute (**em-main solo**, governance single-writer D9) → adap-report + email → commit + push → CI verify.
 **🎯 fable-real earned its keep:** the 5-lane ensemble converged confidently, but all 5 missed **M2** — a real *contiguity-inversion bug* in em-main's D3 pseudocode (a naive "skip protected entry" on the archive-gate's contiguous top-prefix byte-cut would leave the entry ABOVE the cut → still archived while the code believed it excluded = silent inversion). The independent deep-pass caught it. Breadth (N lanes) vs depth (1 adversarial pass) — the deep-pass catches consensus-shared blind-spots. Also M1 (D2 acceptance grep too narrow).
 ## Deliverables (all verified)
 - **D2 (MUST) — `hmw.js` fail-soft → up-front STOP-HARD.** Unknown non-empty role (typo/rename-drift) → `throw` in an up-front validation pass BEFORE `parallel()` (a per-lane throw could be swallowed to `null` by `results.filter(Boolean)` = STOP-SILENT, worse). Preserves the legit `null`/`''`/omitted role-less inherit-lead path (H6.2). **Acceptance:** `node --check` exit 0 + stub 7/7 (typo→throw naming `#i`; null/''/omitted→no-throw; all-12-valid→no-throw). Doc-sync 5 live lines (`ultra-on:21/26`, `README:208`, `harness-11-engine:348`, `runbook:520`); `session-start` correctly untouched; 3 adap-reports + S56 parenthetical + the 🧊 saga note = frozen history.
 - **D3 (SHOULD) — `memory-archive-gate.ps1` value_protect advisory-flag → pre-selection HARD-SKIP.** Value-marked LOGICAL entries (heading-only spans, `---`-robust) partitioned OUT of the movable pool BEFORE the size-drain; **non-contiguous per-entry byte accumulation** (the M2 fix); value-floor WARN. **Acceptance (fault-injection):** protected-big-at-top NOT drained (`afterEst 986>850` vs old ~169); permutation-invariant (`1029==1029`); value-floor fires; DRY-RUN preserved; A7 untouched. Real regression: 12 subs render, A7 242/242, exit 0.
 - **D1 (MUST) — `reinject-ledger.md` re-verify stamp** + 3 honest-notes + BUILD-GAP disclosure. `governance-detectors` 0 new HIGH.
 ## Verdict (the broadcast's re-verify)
 - **(i) reinject-by-absence = COMPLIANT** (floor-rot = coverage-gap, not age; CG-1 = rate-limiter not age-rank).
 - **(iii) MFE age-band = COMPLIANT** (print-only flag, no consumer, STATUS-gated denominator).
 - **(ii)+(iii) archive-gate = RED-FLAG → HARDENED** (D3).
 - **Honest:** D3 = defense-in-depth codify, **NOT leak-closure** (9-token grep unchanged → spine/paraphrase leak remains; em-main value-scan stays the guarantee). Reinject per-item-L1-presence detection stays PARTIAL (BUILD-GAP).
 ## Other
 - **Owner-directed:** `crystallized_backfill.target` 0 → **210K** (budget.json); planner confirms `expected_backfill 210K` fits headroom 253.7K. Honest caveat recorded (file-floor headroom = upper bound; ~44K left for task-context worst-case).
 - **RAG-down at bootstrap** (§2.3): `list_projects` 0-chunks across all collections = gotcha #14 down-artifact (Qdrant off after reboot, corpus intact). **AI_INFRA restored it** (their domain, §I1); SE flags + defers. Recorded in `feedback_aiinfra_charter_v2` (don't run `rag-infra.ps1` — positional syntax note).
 - **#53 return-garble ×2** (fable-clone lane-4 Part B → recovered from `sub-reviewer-4.md`; cicd #385 → recovered em-main-solo curl + diary). 0 work lost. Cumulative ~×19.
 - **AS-10 residual:** `reviewer/MEMORY.md` self-written by the fable-real Agent-spawn → git-diff backstop caught → em-main verified faithful → KEPT (convention-not-mechanism).
 - **H22 dogfood:** the Stop-hook auto-committed run-trace + agent-memory as `wal:` flushes between turns; §5.0 `reset --soft` squashed this-session's trail into one `[CLAUDE]` commit (no pushed-history rewrite).
 ## State (unchanged — governance-only)
 **Mig 65 · 89 tables · 486 tests · gotcha 81 · menu 54 · bundle admin `D51OYyGV` / user `BVdssm5S` · prod 37 NCC / 17 user.** No new User-Mark (codify-only, applies existing `RC-…10-29-11`).