[CLAUDE] Docs: S143 closeout — §L.a E-012/AS-16 + vá 4 drift H1 + harvest GATE-PASS-5

§L.a RCA:
- E-012 + AS-16 NEW "bằng-chứng-tự-huỷ-sau-squash": outward artifact cite sha
  chưa-push / stamp trước khi git status sạch. Root = tiêu-chí verify chọn theo
  cái MÌNH đo được, không theo cái NGƯỜI NHẬN sẽ đo (cùng lớp E-010).
  Đối chứng: wave trước cite commit đích -> sống hết.

§L.b:
- (c) memory-triple: do exit 0 · de-xuat A7 251/251 · kiem reviewer FAIL 1C/4M/4m/1nit
  · do-record TOTAL 47 + nhip-no 4-vế. sleep-check 4d < 7d -> không INFORM.
- (d)(f) harvest-curator GATE-PASS-5, 5-trục PASS, Fidelity on-behalf PASS STRONG
  0-fabrication, C5 dạng-1 đủ, orphan 0/40, Sàn-5 khớp. Spawn-record 5 sub.
- (g) tooling-auditor DRIFT-FOUND(4) -> vá hết: F-A doc "3-vế" vs script 4-vế
  (7 site prescriptive; giữ 15 file frozen) · F-B ghost-enum HIGH (mở enum 10->11
  mà quên chính vai dùng nó + 2 site số) · F-C lead-model pin chưa ghi sổ
  (thêm dòng Lead row S143; cell canonical để owner quyết) · F-D marketplace.
- (j) H24: class_repeat cập theo 2 vai · last_audit light/deep = 17 · history +S143
  (khai rõ force-fire SỚM 1 nhịp theo lệnh owner, KHÔNG tới-hạn tự-nhiên).
- (k) trio SKIP có vết (cần restart CLI) -> ghi CẢ session-log vì §6.4 reset WAL.

Sửa-một-phía bắt được 4 lần trong phiên (tool-grant · enum · sổ đếm garble · _note
counter) -> bài: đổi một con số thì grep con số đó repo-wide trước khi đóng.

#53: 5/5 sub garble, 0 mất dữ-liệu nhờ ghi-đĩa. Tally ×20 -> ×25, +path-4
lead-on-behalf khi resume không cứu được diary.

Test 528 kế-thừa (0 file src/fe/tests bị đụng, verify bằng diff). Bundle FROZEN.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

.claude/agent-memory/harvest-curator/MEMORY.md

@@ -50,3 +50,4 @@ H2 harvest-MD-integrity auditor **SOLUTION_ERP-self**. Read-only + **propose-onl
 > **S123→S125 (2 entry @start RE-REPORT) verbatim → `archive/2026-07.md`** — self-compact 2026-07-18 @S140-gate HOOK-directed (SELF 19.7KB>17.1 read-limit; block-md5 `cbcd17aba6461d57a5fbb34e9be0e301` 7427B moved-not-cut byte-identical, file-order verbatim, anchor 2×{L1=0·ARC=1}). Digest: S123 @start MOSTLY-CLEAN 0-orphan/26 (m#12 mẫu-số-25-vs-26 · dạng-3 dead-code · doc-stale-at-birth pe-neg-quote · reviewer-coverage-gap-5spawn · 2 H24-dir-no-seed + stray-S54 → ALL CLOSED @S132) · S125 @start FLAGS 0-orphan/27 (2 H24-firstrun-no-diary HIGH · stray-S54-still → CLOSED @S132). m#12/#13 preserved in Methods §⭐.
 - **S126 (2026-07-16) session-end GATE [opus-worker, em-main VERIFY+APPEND]:** **PASS 5/5 trục** · orphan **0/29** run.md-folder (2 folder phiên này: S125→`spec-execution-synthesis.md` dạng-1 · S126→2 synthesis dạng-1) · Sàn-5 **0 lệch** (S126 born-in-session có `run=` marker session-log; S125 first-commit 13:29:43 = 77s PRE-session → ngoài scope birth-criterion) · corruption 0 (U+FFFD 0/4 + iconv VALID 4/4) · moved-not-cut 2 archive `@S126 hook-curate batch` VERIFIED khớp digest-pointer L1. Learned: grep `Ã|Æ°|â€` = **FALSE-POSITIVE generator trên VN UTF-8** (m#6 pattern MỚI — byte ư/ơ trùng-prefix + literal "mojibake" trong RCA-quote = m#9 self-quote); signal THẬT = U+FFFD-count + iconv round-trip. Coverage khi `wf_*` transcript KHÔNG git-tracked = **triangulation 3-nguồn** (session-log[wf+timing] ⋂ synthesis[cite-jsonl per-lane] ⋂ harvest-entry[name lane]). Surprise: Sàn-5 marker phải grep SESSION-LOG (`run=` prefix) KHÔNG phải WAL (path-form cite — 2 doc khác convention). Tag `[s126-end, gate-pass-5truc, 0orphan29, san5-0lech, m6-new-pattern-vn-utf8]`.
 - **S140 (2026-07-18) session-end GATE [opus-worker, self-write diary lượt-GATE — KHÁC lượt GATHER 0-ghi]:** **GATE PASS 5/5** · **8/8 invocation có vết** = reviewer 1-spawn/3-task (S140 fidelity-gate + S140b outward-gate; probe-5-nhãn 17s agentId `a56dcf6d` folded Vòng5 + cross-ref lead-view:15) · lead-view S140 1-FLAG-LOW `view-stale-status` · lead-omission S140 1-FLAG-MED `gap-owner-specifics`+2-INFORM+META (**S137-backfill CLOSED in-session** = GAP-3 tự-vá) · harvest ×5 GATHER → 5 gist committed `aa88d01` (5 file .gist.md verify-exist). **Coverage PASS** · Completeness 4-field đủ · **Placement PASS** (0 stray-S54 · 0 empty-dir m#13 · 0 role-thiếu-MEMORY · porcelain agent-memory 0 mồ-côi — S119-stray+2 H24-dir đã seed/rmdir từ S132, KHÔNG tái). **Corruption PASS** (FFFD 0/4 diary+archive · iconv VALID 3/3 · reviewer curate **moved-not-cut** S139+S134b verbatim `archive:81-82` + BATCH-marker`:79`; em-main +7/−0, tao verify 2-entry-verbatim). **Fidelity STRONG:** reviewer FIDELITY-FAIL inv-cb (2 recon-cluster `:28`/`:31` + AREA-2 anchor DROPPED, "Drop-thấp:0"=claim FALSIFIABLE-FALSE) → **re-distill LANDED verbatim** `## CỤM 11 [BỔ SUNG Fidelity-gate S140]` + honest-disclose "'0 drop' chỉ đúng từ bản này" ⇒ **FAIL→fix loop CLOSED traceable** (KHÁC propose-suông); lead-view/omission FLAG khớp `.session-counter.json _note` S140 EXACT. **Close-gate C5:** 0 run-folder SINH S140 (toàn Agent-tool mode-A ephemeral, latest=S138) ⇒ Sàn-5 0-marker-cần vacuous PASS · orphan-scan DUAL-ACCEPT **0/37**. GỘP 5-GATHER: đọc 5 verbatim→5 gist propose-only (≈183KB→69KB FROZEN), 4-PASS+1-FAIL(inv-cb)→re-distill +CUM11, 0-ghi by-design (prompt cấm cả diary). Chore: SELF 19.3KB>17.1 target → self-compact S123/S125/S126-block due (defer — no cut-mid-gate). Learned: FIDELITY-gate có RĂNG khi bắt "Drop-thấp:0" falsifiable + đòi re-distill verbatim đóng loop, KHÁC gate tick-nhị-phân; moved-not-cut chèn-TRƯỚC-stub same-source-string = byte-id by-construction. Surprise: cùng phiên FAIL→fix LANDED trọn (gist committed CÓ CỤM11 :28/:31) = harvest-integrity self-healing trong-phiên, hiếm. Tag `[s140-gate, gate-pass-5truc, 8of8-invocation, inv-cb-fidelity-fail-redistill-closed, s137-meta-backfill-closed, 0runfolder-modeA, orphan-0of37, moved-not-cut-verified]`
+- **S143 (2026-07-22) session-end GATE `[opus-worker · #53 GARBLE lượt-1 → resume; em-main VERIFY+APPEND on-behalf]`** — **VERDICT GATE-PASS-5.** Phiên `/tiep` nối S142, owner gật 2 lượt, 5 sub spawn. **5-trục:** Coverage PASS (5/5 invocation có vết — brief nói 3 lane, đĩa có thêm `sub-tooling-4` + của tao ⇒ **đếm từ ĐĨA, đừng đếm từ brief**) · Completeness PASS · Placement PASS (`porcelain agent-memory`=0, 0 empty-dir) · Corruption PASS (U+FFFD 0/3 · iconv 3/3 · **moved-not-cut 16/16 byte-identical**) · **Fidelity PASS STRONG 0-fabrication**. C5 DUAL-ACCEPT: dạng-1 phẳng `audit-synthesis.md` 6717B ⇒ ĐỦ; orphan repo-wide **0/40**. Sàn-5 độc-lập: WAL=0 · session-log=1 ⇒ **KHỚP** (marker sống ở SỔ CÁI, không ở WAL — đúng thiết-kế). 🔴 **Ca FIDELITY on-behalf lần đầu chấm sâu:** `lead-view-auditor` garble ×2 ⇒ diary do LEAD ghi thay; tao đối-chiếu **từng mệnh-đề** vs `sub-lead-view-1.md` ⇒ 7 KHỚP · 1 TƯƠNG-ĐƯƠNG(paraphrase) · 3 BEYOND-SOURCE **nhưng truy được về đĩa** (lane khác cùng run-folder / commit thật) + quy-thuộc minh-bạch ("reviewer bắt") + tự-khai on-behalf ở đầu entry ⇒ **KHÔNG bịa**. **Bài:** beyond-source ≠ fabrication — tiêu-chí là *truy được về đĩa nào* + *có khai nguồn không*. **3 FLAG propose:** F1 MED counter-claim-vs-đĩa (diary khai `class_repeat` đã đổi mà `.session-counter.json` chưa — lead vá trong closeout) · F2 LOW stray git-MÙ `broadcasts/.claude/...` rỗng untracked lọt 2 closeout (lớp S54, `porcelain --ignored` IM với dir rỗng) · F3 MED **index nâng ×23 mà topic-file vẫn ×20** = sửa-một-phía (lead vá → ×25). **2 method mới:** **m#14** — chính tao dính bẫy m#5: `grep -v "^[+-][+-]"` **nuốt** dòng `+- [Title](…)` ⇒ suýt kết "diff rỗng"; đúng = `grep "^[+-]" | grep -v "^+++\|^---"`. **m#15** — moved-not-cut phải tách **dòng-nội-dung** vs **stub-trỏ-archive**, không tách ⇒ dương-giả "cut-not-moved" 4/20. Tag `[s143, gate-pass-5, fidelity-on-behalf-strong, beyond-source-≠-fabrication, dem-tu-dia-khong-tu-brief, m14-diff-filter, m15-stub-vs-content, san5-so-cai]`

.claude/agent-memory/memory-budget.json

@@ -124,7 +124,7 @@
     "jump_on_class_repeat": 3
   },
   "lead_self_audit": {
-    "_note": "Harness-24 (S121, 2026-07-15, wave adap-6-broadcast W2) CLOSED enum of flag classes for the 2 monitor roles lead-view-auditor + lead-omission-auditor. CLOSED = a monitor may NOT invent a class; an unclassifiable finding is reported verbatim + escalated to the owner to extend this list. Rationale (spec v2 M4): v1 required 'class in a CLOSED enum' but never listed the enum nor named the config key, so the enum lived only in one lane's head -- workers never see it, invent their own classes, and the statistics dilute. That is exactly what H24 §2(1) forbids. 5 view-* + 5 gap-* mirrors the 5+5 signals in H24 §2(1). S143 EXTENSION (2026-07-22, owner-approved): +1 class 'gap-incident-unrecorded' => now 5 view-* + 6 gap-*. Trigger that earned it: 3/3 subagents garbled (#53) in one session and the event left 0 trace on WAL/HANDOFF/STATUS/error-ledger while those surfaces were advertising '0-garble' (true, but about the PRIOR session); the running tally in .claude/auto-memory/feedback_agent_return_garble_recover.md had also been frozen at 'x20 through S118' for 8 session labels. lead-omission-auditor correctly REFUSED to invent the class and escalated verbatim per the CLOSED-enum rule above -- this entry is the owner extending the list, which is exactly the escape hatch that rule prescribes. Scope: an operational incident that happened and was verifiably not written to any durable ledger; NOT for a stale number (view-*) and NOT for a dropped carry (gap-carry-dropped).",
+    "_note": "Harness-24 (S121, 2026-07-15, wave adap-6-broadcast W2) CLOSED enum of flag classes for the 2 monitor roles lead-view-auditor + lead-omission-auditor. CLOSED = a monitor may NOT invent a class; an unclassifiable finding is reported verbatim + escalated to the owner to extend this list. Rationale (spec v2 M4): v1 required 'class in a CLOSED enum' but never listed the enum nor named the config key, so the enum lived only in one lane's head -- workers never see it, invent their own classes, and the statistics dilute. That is exactly what H24 §2(1) forbids. ORIGINAL SHAPE (S121): five view-* classes and five gap-* classes, mirroring the ten signals in H24 §2(1). S143 EXTENSION (2026-07-22, owner-approved): +1 class 'gap-incident-unrecorded' => now 5 view-* + 6 gap-*. Trigger that earned it: 3/3 subagents garbled (#53) in one session and the event left 0 trace on WAL/HANDOFF/STATUS/error-ledger while those surfaces were advertising '0-garble' (true, but about the PRIOR session); the running tally in .claude/auto-memory/feedback_agent_return_garble_recover.md had also been frozen at 'x20 through S118' for 8 session labels. lead-omission-auditor correctly REFUSED to invent the class and escalated verbatim per the CLOSED-enum rule above -- this entry is the owner extending the list, which is exactly the escape hatch that rule prescribes. Scope: an operational incident that happened and was verifiably not written to any durable ledger; NOT for a stale number (view-*) and NOT for a dropped carry (gap-carry-dropped).",
     "_vocab_guard": "'view' / 'omission' chosen DELIBERATELY to avoid collisions: scripts/governance-detectors.ps1:15 already owns 'derived-staleness' (so no class may be named *-stale-role or vai-STALE), and the bare word 'GAP' is overloaded elsewhere (session-end.md 'build-gap vs floor-rot'; scripts/memory-selfimprove-audit.ps1 'CRITERIA+GAP'). A colliding name would make two different detectors answer to the same word.",
     "flag_classes": [
       "view-stale-count",

.claude/agent-memory/tooling-auditor/MEMORY.md

@@ -49,4 +49,5 @@ H1 tooling-freshness auditor **SOLUTION_ERP-self**. Read-only + **propose-only**
 - **2026-07-15 (S123 @start) → `archive/2026-07.md` verbatim (compact S140, byte-verified +4329B):** ALL-4 PASS + 1 MED (G-015 overclaim 2-vai-H24, Bash residual) + 2 LOW; FP-census lane tôi 17/19 DƯƠNG-GIẢ · status6-stale-header 4th-recur (H24-1 mù) · measured{} 12/14 · perm-matrix silent-watch-loss. Lessons hoisted → user-memory `feedback_citation_trap_selfreference` + `feedback_goodhart_leave_measurement_set`.
 - **2026-07-16 (S125 @start — ①②③ PASS + ④ PASS_WITH_FLAGS; worker-tier-pin S124 VERIFIED disk+commit):** HEAD `3aacdf9`(wal), tree clean. **②ROSTER PASS** 14 persona; **14/14 `model:opus`@:5+`effort:max`@:6** on-disk+committed (`git show HEAD:tooling-auditor.md`✓); agents/ last-touch `23bbe97`(S124), 0-since. **①SKILL PASS** 6+23+18 identical S123; contract-wf/ef-core count-stale=monthly(08-01). **③PLUGIN PASS** 18/15/3 IDENTICAL; `claude-fable-5[1m]`:11 lead default UNCHANGED (pin=SUBS-only). **R6 ✓** project `settings.json:2` `autoMemoryDirectory`=`.claude/auto-memory`; my ctx-inject FROM that path ⇒ relocate WORKS; authority ③ user-global. **④ 5 RESIDUAL — worker-tier-pin doc-sync NOT finished:** HIGH `STATUS:25` row "all-inherit/TOÀN roster `model:inherit`" + stale "cả **12** lên top-tier"/"**10** product"(roster 14) · HIGH `agents/README:5` "TOÀN BỘ sub `model:inherit`" CONTRADICTS same-file :38 worker-tier-pin · MED `fable-real-runbook.md` **≥2 FALSE CITATION** `:227`/`:563` cite `investigator-codebase.md:5`/`reviewer.md:5`=`inherit` but disk=`opus` (fix NON-trivial: hmw.js alias-vs-frontmatter "chưa test") · MED `fable-real.md:37` · LOW `fable-clone.md:43`(corrected :57). 🔴 **ROOT:** `STATUS:41-42` blurb CLAIMS "doc-sync **ĐÃ vá**" but 5-spot prove INCOMPLETE = tick-no-evidence → NOT-DONE. Ack machine-fired: STATUS:6 header H24-3; harness-11:57 vocab-seed +worker-tier-pin(D7). **Method:** frontmatter tier-flip→grep MỌI doc citing agent `:5`=inherit. Model self **Opus 4.8**. ⚠️L1 carry S126. `[s125-start, worker-tier-pin-verified, doc-sync-incomplete-5spot, false-citation-runbook, da-va-but-incomplete, mem-gap-s124]`
 - **S126 (2026-07-16) session-end CHỐT [opus-worker, em-main VERIFY+APPEND]:** 3/4 PASS-clean (① SKILL 6-project 0-diff — task gọi "check-email/send-email skill" thực-ra = **COMMANDS** `.claude/commands/`, 6 skill thật 0-đổi · ② ROSTER 14/14 `opus`@:5 + `max`@:6 disk-verified; README:5 + STATUS:25 flip worker-tier-pin ⇒ **S125-HIGH "README:5 contradicts :38" RESOLVED** · ③ PLUGIN 18/15/3 + `fable-5[1m]`/xhigh IDENTICAL) + ④ DOCS PASS_WITH_FLAGS: 🎯 bắt **5 dòng "H23-precedence CHƯA test" SÓT ở 3 command-file** (`session-start.md:50/:52` canonical BƯỚC 0.6 đọc MỖI phiên · `fable-clone.md:63/:65` cross-ref "hmw.js:44-52 mang cùng ghi-chú" ĐẢO/GÃY sau khi hmw.js vá · `ultra-on.md:35`) trong khi 7 file khác đã "ĐO S126" — **same-class-miss ×2 trong CÙNG PHIÊN đang vá class đó**; em-main vá NGAY 5/5 + LOW STATUS:25 "10+2"→"10+4". Learned: fact-runtime chốt ⇒ grep MỌI file mang claim cũ GỒM lớp **command-doc** (sweep-synthesis liệt consumer thiếu lớp ⇒ miss tái-sinh; commands/*.md blind-spot khớp S57/S99 method-mine). Tag `[s126-end, 5spot-h23-stale-caught, commands-layer-blindspot, s125-high-resolved]`.
-- **S140 (2026-07-18) session-end CHỐT [opus-worker] — governance-only (0 code/mig/FE); diff `0b0285c..HEAD`:** **①SKILL PASS** 6-proj+23-standalone 0-diff (skills git-diff rỗng) · **NOTE** "183KB/5-file un-gisted baseline" ở 3 command-file (`session-start.md:131`·`session-end.md:56`·`sleep-recovery-memory-l2.md:52`) NAY stale-as-live: sleep-compress `aa88d01` gist 5/5 archive 2026-07 ⇒ un-gisted=0 (5/5 GIST-EXISTS verified). Display đo LIVE `(Get-Item).Length` KHÔNG consume số ⇒ 0 wiring-bug, chỉ misread-risk. Rec: coi ví-dụ-lịch-sử (đã dated 17-07). **②ROSTER PASS 14=14=14=14** (disk · STATUS:450 `**14**` · agents/README:3 B1-pointer-0-số · hmw.js:22-36 VALID_ROLES) + 0 agents-diff. **③PLUGIN PASS** 18/15/3 IDENTICAL (disabled pr-review·code-mod·hookify); settings user-global 0-touch. **④DOCS PASS_WITH_FLAGS:** (a) `session-model-se-draft.md` NEW anchored auto-memory `project_session_model_direction:14`+WAL:12+email — NOT orphan; HANDOFF-carry PENDING @closeout (WATCH) · (b) adap `624c378d` Vòng-5 verified-pending→executed-runtime self-contained (§2+§5 consistent) + checklist row-8 phép-8 + _index +1 email-row; NO further sync (_index=email-layer, lead-view S140) · (c) HANDOFF stamp S138-S139: NEXT (5)DP-5-sleep+(6)force-fire-H24+(8)phép-8 ĐÃ actioned → closeout reconcile + refresh "183.054B chưa-gist". **NEW-ALLOC:** 5 gist = per-agent L2 own-dir (archive-flow auto-covers) ⇒ 0 alloc-action. Boundary: STATUS-header-stale = lead-view H24, KHÔNG double-touch. Model Opus 4.8. Tag `[s140-end, 3-mặt-pass-docs-flags, sleep-183kb-now-historical, draft-anchored-carry-pending, adap-vong5-executed-runtime, 5-gist-L2-autocover, L1-compact-s123]`
+- **S140 (2026-07-18) session-end CHỐT [opus-worker] — governance-only (0 code/mig/FE); diff `0b0285c..HEAD`:** **①SKILL PASS** 6-proj+23-standalone 0-diff (skills git-diff rỗng) · **NOTE** "183KB/5-file un-gisted baseline" ở 3 command-file (`session-start.md:131`·`session-end.md:56`·`sleep-recovery-memory-l2.md:52`) NAY stale-as-live: sleep-compress `aa88d01` gist 5/5 archive 2026-07 ⇒ un-gisted=0 (5/5 GIST-EXISTS verified). Display đo LIVE `(Get-Item).Length` KHÔNG consume số ⇒ 0 wiring-bug, chỉ misread-risk. Rec: coi ví-dụ-lịch-sử (đã dated 17-07). **②ROSTER PASS 14=14=14=14** (disk · STATUS:450 `**14**` · agents/README:3 B1-pointer-0-số · hmw.js:22-36 VALID_ROLES) + 0 agents-diff. **③PLUGIN PASS** 18/15/3 IDENTICAL (disabled pr-review·code-mod·hookify); settings user-global 0-touch. **④DOCS PASS_WITH_FLAGS:** (a) `session-model-se-draft.md` NEW anchored auto-memory `project_session_model_direction:14`+WAL:12+email — NOT orphan; HANDOFF-carry PENDING @closeout (WATCH) · (b) adap `624c378d` Vòng-5 verified-pending→executed-runtime self-contained (§2+§5 consistent) + checklist row-8 phép-8 + _index +1 email-row; NO further sync (_index=email-layer, lead-view S140) · (c) HANDOFF stamp S138-S139: NEXT (5)DP-5-sleep+(6)force-fire-H24+(8)phép-8 ĐÃ actioned → closeout reconcile + refresh "183.054B chưa-gist". **NEW-ALLOC:** 5 gist = per-agent L2 own-dir (archive-flow auto-covers) ⇒ 0 alloc-action. Boundary: STATUS-header-stale = lead-view H24, KHÔNG double-touch. Model Opus 4.8. Tag `[s140-end, 3-mặt-pass-docs-flags, sleep-183kb-now-historical, draft-anchored-carry-pending, adap-vong5-executed-runtime, 5-gist-L2-autocover, L1-compact-s123]`
+- **S143 (2026-07-22) session-end CHỐT `[opus-worker · #53 GARBLE lượt-1 → resume; em-main VERIFY+APPEND on-behalf]`** — **VERDICT DRIFT-FOUND (4).** 4 mặt: ① skill PASS · ② roster PASS (17=17=17=17: đĩa · `STATUS:450` · `hmw.js` VALID_ROLES · 17 folder agent-memory) · ③ plugin PASS-nhưng-2-delta-config · ④ docs DRIFT-2. **F-A — script đi trước doc:** `nhip-no-probe.ps1` nâng **3-vế → 4-vế** (`pull-cach`) nhưng 7 site PRESCRIPTIVE còn khai "3-vế" (`pause` · `session-end` ×3 · `session-start` · `tiep` · `session-model-se-draft`). 🔴 **Cách tách đúng:** site **prescriptive** (mô-tả hành-vi SỐNG) = DRIFT phải vá · site **frozen-in-time** (run-folder · adap-report · session-log · Prev-block STATUS/HANDOFF) = **record lịch-sử, sửa = giả-mạo**. Lead vá 7 site prescriptive, giữ 15 file frozen. **F-B HIGH — ghost-enum, ca đắt nhất:** enum `flag_classes` mở 10→11 (+`gap-incident-unrecorded`) nhưng `36cefcc` **KHÔNG đụng `lead-omission-auditor.md`** — ĐÚNG cái vai phải DÙNG class đó: heading "5 class", bảng 5 row, class mới **0 hit toàn `.claude/agents/`**. Vai bị luật "CẤM tự chế class" ⇒ lần tới gặp ca sẽ **escalate lại đúng thứ vừa được duyệt**. 🔴 **Bảng-cục-bộ (có cột ngữ-nghĩa + nơi-soi) THẮNG con-trỏ canonical trong thực dụng** — vai đọc bảng, không đọc con-trỏ. Kèm 2 site số (`STATUS:450` "10 class = 5+5" · `hmw.js:33`). 🔴 **Và phải biết chỗ KHÔNG sửa:** `lead-view-auditor.md` "5 class" **VẪN ĐÚNG** (nhánh view-* không đổi) — sửa thành 11 là **sai**. **F-C MED** lead-model pin flip `settings.json` → `claude-opus-4-8[1m]` không ghi sổ: `STATUS:462` là row session **DUY NHẤT** thiếu dòng `Lead <model>`; `STATUS:450` còn "Fable 5"; `session-start.md:43` outage-recipe bảo đổi sang **đúng cái đang pin** ⇒ recipe hồi-phục thành **no-op**. Nhãn flip = quyền owner, không tự đoán. **F-D LOW** marketplace 35→37: tự soi — chính tao @S140 kết "PLUGIN PASS IDENTICAL" mà **chỉ đo lớp registered**; **marketplace-inventory là LỚP ĐO RIÊNG**, bỏ sót ≥5 ngày. **new-alloc:** 0 skill/plugin mới ⇒ 0 action; chỉ `security-guidance` đáng cân-nhắc (gán `reviewer`) nhưng nó mang **hook Stop + edit-time warning** đụng `settings.json` hooks ⇒ **owner quyết, không tự bật**. Tag `[s143, drift-found-4, prescriptive-vs-frozen, ghost-enum-bang-cuc-bo-thang-con-tro, biet-cho-khong-sua, layer-do-rieng-marketplace, model-pin-flip-unlogged]`