Reset contribution scope: replace the open PR backlog with a bounded delivery plan

[wesm]

@salmonumbrella — thank you for the work and the detailed proposals. We need to reset how this work is scoped and delivered.

We have closed all 260 of your PRs that were open in this repository at the start of this review. None was merged. The seven existing PRs from other contributors remain open. The volume, overlapping implementations, and dependencies make this queue impractical to review and maintain. We will move forward with a smaller, coherent scope that the maintainers can implement and review in manageable increments.

This is a decision about scope and delivery, not a claim that every proposal is wrong. The closed PRs remain available as references. Please pause additional PRs for these workstreams, and do not rebase or resubmit this stack while we agree on the replacement scope here.

Review overview

The inventory covers the 260 PRs open at the start of this review. All target main. The source baseline is 7bf6a59b, which matched main when checked.

Area	PRs	What is in it	Disposition
Redacted productions (#432)	212	Review gates, privilege logs, rendering, numbering, retained packages, download tickets, CLI/MCP/web controls, reproduction, supplements, policy and approval APIs	Preserve requirements and useful implementation references; defer the broad production program
Native document workflow (#333)	33	Exact selected reports, native/load-file exports, archive downloads, CLI/MCP adapters, scoped sessions and operation catalogues	Use the local report/export requirements for the first bounded scope; defer broad access and parity infrastructure
Markdown discovery (#433)	15	Exact passages, section/context reading, remote targeting, scoped access, index repair, tag concepts, curated maps and refresh	Defer; exact historical citations can be a separate follow-up
Total	260

This is a highly overlapping queue, not 260 independent changes:

• 218 PRs change more than 100 files; 191 change more than 300. Complete file inventories contain 91,154 repeated file entries across 1,005 distinct paths. Those are overlap counts, not unique implementation size.
• Expose production supplements in embedded vaults #718 shows 130,636 additions and 14,677 deletions across 623 files and 201 commits. Its title describes one small embedded API addition; its PR diff also carries a large inherited stack.
• [RP 02/07] feat(report): freeze exact selected documents on current main #544 explicitly replaces still-open [RP 02/07] feat(report): freeze exact selections and source visibility #444. Both appear in the seven-step report sequence, producing eight open report PRs.
• [DF-01B] feat(access): keep document access inside current source grants #455 and [AG 02/05] feat(agent): enforce source-scoped operation policy #487 overlap in 44 changed paths. Their descriptions identify competing copies of the scoped-access layer. This requires one design decision, not two implementations.
• [WF 01/14] feat(workflow): qualify native PDF reports and exports #518, [WF 06/14] feat(workflow): publish native PDF reports and scoped access #552 and the later workflow aggregates carry earlier report, export and access proposals. Production Integrate production set workflow with policy and privilege agent APIs #705 joins previously diverged production branches. Accepting an aggregate would preserve the scope problem rather than solve it.

Complete inventories: 212 production proposals, 33 native-workflow proposals, and 15 discovery proposals. Every PR has a proposed increment, disposition, cumulative file count, and reviewed head. Review coverage: every PR description and complete changed-file inventory was catalogued; representative diffs, dependency relationships, and the current implementation were inspected. This is a scope and architecture review, not a line-by-line correctness audit or a claim that the proposed code passes tests.

Umbrella: finish the local document review-to-export workflow

Status: the cleanup in #721, sealed-snapshot load-file exports in #403, exact selected-document reports in #726, CLI native exports with explicit release in #740, local MCP native exports in #749, local MCP search reports in #753, and CLI report inspection/download recovery in #754 are merged. The next proposed slice is qualification of the existing report/export workflow with a small synthetic PDF corpus and physical backup/restore. Its scope and written specification remain to be reviewed; the complete acceptance assessment is still open.

The proposal inventory above records the original review. It is historical context, not a current merge checklist. The implemented report design supersedes this issue's original live-source-withdrawal rule: captured reports remain usable until their existing expiry, while a new run checks its selected sources again.

A local Docbank operator should be able to select a bounded set of documents, review the exact selected versions, produce a frozen keyword/date report with honest coverage, and download a verified archive of those same documents. The same bounded task should be usable from the web app, CLI, and local operator MCP.

Start with retained documents and already available renditions. A PDF without retained text can still be exported; the report must show the missing evidence rather than treating it as a zero-hit document. Creating a report or export must not start extraction, OCR, embeddings, or a hosted provider request.

Reuse the implementation already on main

• The daemon already registers workspace, rendition, export, report, package-import and Bates routes: server registrations.
• The report request now supports the whole vault, selected collections, or exact current document versions. Run search reports for selected document versions #726 extends the existing engine and preserves its packet format when no exact selection is supplied: request contract.
• Reports already freeze evidence through the shared reporting service: capture flow.
• The CLI already verifies a report ZIP and extracts its CSV. Use that single evidence artifact, without adding a second independently downloaded CSV protocol: existing CSV command.
• Export planning, jobs, archive verification and download tickets already exist. Add only the adapters needed for this workflow: current download path.

Required behavior

1. One explicit selection. Capture the chosen current vault/document/version identities and content hashes. Validate them when the operation begins; a stale selection must be rejected visibly, never redirected to a new document head. Only explicitly chosen documents and attachment occurrences belong in the result. Reuse the existing snapshot/selection contracts wherever they fit.

2. A frozen, explainable report. Preserve the selected membership, keyword results, date decisions and coverage in the existing evidence bundle. A later source replacement, trash operation, or pruning does not invalidate a captured report. Online handles and downloads retain their existing 30-minute lifetime and are lost on daemon restart. History retains bounded request/summary receipts, not artifact bytes or reviewed date choices. Rerunning a saved selection checks that its versions are still current and available. Downloaded packets remain independently verifiable.

3. A verified export. Export the selected original/native bytes with the existing manifest, hashes and receipt machinery. Downloads must verify what is received and publish a complete local file atomically. Keep originals and version history intact. Preserve the existing Bates workflow; adding production packaging or new exchange formats is outside this first scope.

4. Bounded client access. Finish only the web, CLI and local-operator MCP operations needed to select/inspect, create or inspect a report, create or inspect an export, and download its result. Use the daemon and existing shared services. MCP creation remains an explicit write opt-in. Do not require a catalogue of every route or a new session/authorization framework to deliver this task.

Acceptance evidence

Use one small synthetic corpus with known document contents, dates, attachments and expected counts, exercised through the real daemon:

1. Select a subset and prove that the report and archive contain exactly those versions and explicitly selected attachments. Excluded documents must not appear.
2. Change a selected document before admission and observe a stale-selection response. Change it after report creation and verify that the completed report retains its original evidence and counts.
3. Change or remove a source after report capture and verify that the captured counts and downloads remain unchanged until expiry. Preserve the historical request/summary after source loss and backup/restore. After restart, old live handles are unavailable; a new run of a stale selection must fail rather than substitute a newer version.
4. Include missing text and ambiguous dates. Verify that coverage and date uncertainty remain visible and that reporting/export performs no provider work.
5. Verify the evidence ZIP offline and derive CSV from it. Compare known counts and exported file hashes independently; reject a modified artifact and leave no partially published destination file.
6. Exercise the affected recovery boundary: retained source identities and reusable history survive supported backup/restore and maintenance, and a supported report/export can be run afterward. Downloaded evidence bundles remain independently verifiable. Temporary handles have explicit expiry/unavailability behavior. Do not promise restored report artifact bytes, exact historical report regeneration, transient jobs or download tickets.
7. Demonstrate the bounded workflow through web, CLI and MCP. Run the repository-required checks in both SQLite modes and on supported native platforms before claiming the implementation complete; include actual synthetic UI captures with UI PRs.

Preserve released storage compatibility and existing public report/bundle contracts. Do not introduce new storage authority or a format version unless the selected behavior demonstrably needs it. Any unavoidable schema change must follow the repository's released-layout cutover rules.

Explicitly deferred

• The full redacted-production lifecycle, custom policies, approval administration, privilege logs, reproduction and supplements.
• Additional recipient-package formats and production packaging beyond the sealed-snapshot load-file exports merged in Export sealed snapshots as verified load-file packages #403. Existing native bundle volume support remains available.
• Remote document targets, third-party source grants, private read sessions, and exhaustive CLI/MCP route parity.
• New operation registries or capability matrices built for routes this workflow does not use.
• Passage identity/federation, related-passage discovery, concept vocabularies, curated maps and refresh, and general index repair.
• Automatic extraction/provider orchestration, additional file-format qualification, and the separate photo roadmaps.

These are deferred product decisions, not requirements that must be hidden inside the initial implementation.

A possible next scope: minimal PDF redaction

If redacted production is the next priority, define one separate outcome: select an ordinary native PDF from a fresh vault, prepare it through the real daemon, apply and review explicit page masks, preview the result, and retain/download one numbered redacted PDF with its sanitized text and provenance.

Reuse the existing PDF/redaction foundations and the generic policy, which does not require a custom approval or privilege-log workflow. Prove the source-preparation path first; a test fixture with preprepared production members is not an operator workflow. Scope the API and one operator interface before expanding to every surface. Before exposing delivery, verify redacted pixels and sanitized text together; retries and restart must preserve one number reservation, and backup/restore plus garbage collection must preserve retained bytes and provenance. Privilege administration, supplements, reproduction, and general package-format support remain separate decisions.

Delivery rules for the replacement work

The maintainers will implement from current main, reusing selected ideas or code only after review. Closing the queue does not nominate its final aggregate for wholesale import.

Selected reports (#726), CLI native exports with explicit release (#740), local MCP native exports (#749), local MCP search reports (#753), and CLI report inspection/download recovery (#754) are merged. These implement the bounded report/export adapters; history remains a receipt, not a promise that a live artifact is available.

The assessment at current main 2d100a274a548a9eb1e7f9aaef12eab478c78a1f found useful coverage in separate fixtures: selected text documents through MCP reports and native exports; report-history metadata round trips; retained supplied-text search after physical backup/restore; and CLI history/download behavior after restart. Seven focused tests covering these boundaries, CLI export release, and CLI backup/restore passed in both SQLite modes with the required fts5 tag. This evidence does not yet qualify one PDF selection through reporting, original-byte export, and a usable restored daemon.

The recommended next specification takes the narrow qualification outcomes from closed #518 and #530: use a small synthetic corpus, verify exact membership and known counts, preserve missing-text/date uncertainty, and demonstrate a new report/export after supported backup/restore. Distinguish restored sources and history from unavailable old report handles. Do not promise byte-identical regenerated reports or restored transient jobs and tickets. Use existing services and make any reproduced defect explicit before widening the implementation scope.

Additional catalog/text reads from #533 and retained-plan inspection from #583 remain optional follow-ups. Minimal PDF redaction remains a separate product scope after this acceptance boundary is understood.

Assess the complete local report/export workflow against the acceptance evidence above before selecting another product area. The production and discovery inventories remain deferred references. Keep one implementation PR active for the current outcome, merge only after maintainer review, and start the next against the merged result. Fold follow-up fixes into the active PR. If an outcome expands into a new subsystem, revise the scope before creating a new series.

The old roadmaps remain context; their complete delivery maps are not commitments to accept the closed stack. Detailed execution state belongs in the project issue ledger. This issue owns the public scope decision and links to the preserved proposal inventory.

[wesm]

Production proposals: 212 PRs

The production series describes several distinct products: a durable review/render pipeline, recipient package delivery, a web editor, privilege and approval administration, supplements, and reproduction of historical productions. Those should not all be prerequisites for the first usable redaction workflow.

Series	PRs	Main proposed outcome
P1	8	Persist review, privilege, gate and job authority
P2	38	Render and retain PDF/text; restart and recovery; recipient packages
P3	65	Deliver retained packages; lookup numbers; expose draft/job/preview operations through API, CLI and MCP
P4	18	Web review/editor and production job controls
P5	13	Reproduce historical artifacts without allocating new numbers
P6	10	Supplement lineage and atomic continuation numbering
P7	32	Policy, approval, privilege-log and package client workflows
Unnumbered #691–718	28	More client coverage and integration of the diverged branches

Concrete integration findings

• P5 branched from [P3 23/65] feat(production): expose number candidates to MCP #546, before the later P3 interfaces. Package downloads then appear in both branches: CLI [P3 52/65] feat(production): publish and download packages from the CLI #582/[P7 31/32] feat(production): download verified retained packages from the CLI #689 and MCP [P3 63/65] feat(production): verify and download packages through MCP #600/[P7 32/32] feat(production): download verified retained packages through MCP #690. Integrate production set workflow with policy and privilege agent APIs #705 joins [P3 65/65] test(production): prove large production selections through MCP #602 with Record explicit withheld selections through MCP #704. These are overlapping delivery paths, not four independent user needs.
• At the reviewed Expose production supplements in embedded vaults #718 head, package creation and publication remain separate orchestration routes: handler-owned package runtime and export-worker publication. A smaller rebuild should select one service and vocabulary.
• The web stack's source picker still copies a prepared member from another production set. A fresh-vault operator path needs ordinary PDF import and source preparation before more review controls.
• Main already contains redaction contracts, alignment, rendering and numbering foundations: alignment, rendering recipes, and Bates reservations. A declared operation catalogue does not establish a registered production API.

Recommendation: defer this broad program behind the initial local report/export scope. For a later production milestone, start with one native PDF, the generic policy, explicit masks and review, one retained numbered PDF/text result, and one daemon/CLI workflow. Prove actual source preparation, redaction pixels and text, retries/numbering, restart, backup/restore and garbage collection. Add other workflows only when separately selected.

The table describes each PR's proposed increment, not a verified runtime result. “Later reference” preserves ideas; “Fold if pursued” means tests/fixes should accompany their owning feature instead of becoming a separate backlog. Every PR is being closed under this reset, regardless of treatment. File counts are cumulative against each PR's base, including prerequisites; do not sum them as unique work.

Complete per-PR inventory

PR	Proposed increment	Treatment	Files	Reviewed head
#413	Privilege logs can be frozen against the exact document versions, people, and policy that were reviewed.	Later reference	20	b41fb8c29158
#415	Exports a frozen privilege log as XLSX or searchable PDF using the same approved public rows and column order as CSV and JSON.	Later reference	90	e6ae29422dcb
#420	Seals the exact documents, redactions, withholding decision, policy, and approval inputs before a production can reserve numbers.	Later reference	93	8e94a476a168
#421	Maps only redacted PDFs, text, and page images into the existing DAT/PDF, DAT/OPT, and DAT/LFP export profiles, including the stamped-PDF path.	Later reference	172	98e04d524ad6
#423	Binds each durable production job to the existing numbering ledger through its own idempotency identity.	Later reference	158	aa6724aadfb8
#428	Stores production sets as ordered, revisioned members and decisions tied to exact source versions.	Later reference	253	cd6acea90ce7
#429	Pins the policy facts for a production revision to exact stored source-metadata evidence.	Later reference	257	937bfd002c73
#431	Connects a finalized production revision and its stored gate evidence to a durable numbered job.	Later reference	266	e1a7cf858c8e
#435	Freezes the ordered page layouts and public endorsements against the job's existing number reservation before rendering starts.	Later reference	270	df04dcc3db17
#438	Renders each page from the job's sealed plan, burns the selected redactions into fresh pixels, adds the public endorsements, and stages only the final PNG.	Later reference	278	193126fa042f
#439	Tightens the verified page renderer: a missing or unreadable staged page now keeps the underlying error, so a retry can distinguish that failure from a changed plan.	Fold if pursued	278	9350bf6adcf4
#441	Persists one private receipt for each final production page after the worker has written its verified PNG.	Later reference	280	53aaa359db24
#442	Builds each fresh member PDF from the job's sealed, verified page receipts.	Later reference	287	de8d7deeb8e0
#443	Cleans up the new final-artifact test so it uses the repository's assertion style and separates the embedded test helper from its other fields.	Fold if pursued	287	dd7e2e46ee23
#445	Adds a redacted text companion for each produced document, built from the same sealed review result as its final PDF.	Later reference	287	dfc20581dc5f
#447	Keeps the production artifact test fixture lint-clean while preserving how it selects the verified PDF, page image, or redacted text bytes for each artifact role.	Fold if pursued	287	a9c82d9542a5
#448	The daemon can resume a stored production job and carry it from its sealed review result through numbering, page rendering, and verified final PDF and redacted-text publication.	Later reference	293	e31dae4db0f0
#450	A production job resumed after a restart now reuses an already-staged page only when it still matches the sealed render plan and its stored bytes verify.	Fold if pursued	294	959fc0de7e40
#452	A production job that cannot be rendered now records a durable failure instead of stopping the vault worker.	Fold if pursued	295	5f02e41a5ed0
#454	The daemon no longer starts the production renderer during ordinary startup.	Fold if pursued	296	642bbfed3afc
#457	Production sets, reviewed decisions, gate evidence, numbered jobs, render plans, and artifact receipts now have an ordered metadata export/import path.	Later reference	300	4838cb1c7062
#460	Final redacted PDFs and text files now stay rooted as production artifacts, so backup, garbage collection, and version pruning treat them as retained output rather than orphaned blobs.	Fold if pursued	302	a00ef4f8693d
#462	An interrupted production with two occurrences of the same source goes through a real vault backup and restore.	Fold if pursued	304	b83344606a14
#471	Brings the existing verified package exporter from #403 and the production-role adapter onto the same base as retained production jobs.	Later reference	320	5ab51ed213a5
#472	Keeps the production renderer dormant when the daemon starts, including on the stack that now has retained jobs and package-export prerequisites.	Fold if pursued	321	cd2a81c78d18
#473	Plans the recipient-facing contents of a production package from a published job, its reserved numbers, and verified redacted artifacts.	Later reference	323	6a4eb9e4dac3
#474	Builds an immutable recipient ZIP from the checked production plan.	Later reference	325	090ed4eca5c1
#477	Seals the finished recipient ZIP read-only and verifies its entries and whole-file digest from the same open file.	Later reference	327	d19033c49662
#478	Publishes a recipient-safe transmittal beside the verified production ZIP.	Later reference	329	2a161d12507d
#479	A production package retry returns the existing archive after checking its manifest and every retained output hash and size.	Fold if pursued	329	1c7bed692c5c
#480	On Unix hosts, published production archives and their QC, transmittal, and delivery receipts are readable only by the local owner.	Fold if pursued	329	c81ca078e640
#481	The public manifest declares each produced PDF, text file, and page image's SHA-256 and size.	Fold if pursued	329	9a5d81685774
#483	PDF production packages now carry an explicit import mapping and a separate document ID alongside the assigned begin and end labels.	Later reference	330	225813d01e9f
#486	A receiving vault can preflight and import a PDF production package with one DAT and page map in each volume.	Later reference	331	ed75c01743c8
#488	Redacted OPT and LFP image productions now import into a fresh vault with searchable supplied text, including two-page documents and packages split across volumes.	Later reference	331	c54b2073242f
#489	Recipient production packages now stop at 64 volumes, matching the existing import limit.	Fold if pursued	331	a60107bb5e8b
#491	A two-page synthetic production now carries an actual burned redaction through publication and into the recipient ZIP.	Fold if pursued	331	30b255273bb6
#493	Docbank now starts its verified production worker with the vault.	Later reference	331	4dd5ff97b7f7
#496	Published production jobs can supply their frozen occurrence order and number reservation to the recipient package planner, even after a source document gets a newer version.	Later reference	333	d45b52fc4c58
#498	A published production can now be assembled into a recipient ZIP from its stored job, numbers, occurrence order, and verified output blobs, even after a source document has a newer version.	Later reference	335	05ca66f47a62
#500	New tests against the real catalog and blob store cover a renderer failure after one staged page, a fenced worker takeover after restart, and cancellation during rendering.	Fold if pursued	336	b59777956abd
#501	Recipient package planning now applies Docbank's 50 GiB import limit to the whole package, across every volume.	Fold if pursued	336	15e2d9d1ae3a
#502	Recipient package verification now rejects bytes before the first ZIP entry, after the ZIP end record, and between ZIP records.	Fold if pursued	337	966ec3a30a9f
#505	Recipient package verification now accepts page PNGs in the production renderer's IHDR/IDAT/IEND form and rejects optional text chunks or bytes after the image.	Fold if pursued	338	177073853096
#506	Canceling a production package during final archive verification now stops before the ZIP is published.	Fold if pursued	338	0b14df3ae262
#508	Docbank can now keep a published production PDF as a versioned vault file with a receipt tying it to the exact source occurrence, page, and volume.	Later reference	342	9710c9135414
#509	A retained production file now has direct recovery proof: a synthetic job produces an artifact, the artifact is retained, the vault is backed up and restored, and real garbage collection runs on the restored vault.	Fold if pursued	342	0ba74c7507d0
#511	A retained production artifact now has direct recovery coverage for a lost response after each write: directory creation, exact ingest, produced tag creation, and tag assignment.	Fold if pursued	342	51b2bd10d5dc
#512	A production package that combines multiple documents now has a stable evidence receipt.	Later reference	344	03d879de21f8
#513	A canceled package request now stops the final ZIP readback before publishing its QC or transmittal sidecar.	Fold if pursued	344	bda1e345d17d
#514	A verified recipient ZIP, its QC receipt, and its transmittal can now be retained as three versioned vault files under one production job and operation.	Later reference	345	256fd0d0d721
#515	Package retention is now checked for lost-response recovery after each directory, blob, and file ingest write.	Fold if pursued	346	4fd5b7078e29
#516	The daemon export worker can build a recipient ZIP with its QC and transmittal sidecars from a completed production job, then retain all three as versioned vault files under one operation ID.	Later reference	352	8f4136d075b4
#519	A retained production package can be reopened by its job and operation IDs.	Later reference	354	e28aabc41803
#520	A retained recipient ZIP and its external QC and transmittal sidecars can be independently checked together before delivery.	Later reference	356	5726fa492218
#521	A retained production package can be copied from its three vault version hashes into one private download staging directory.	Later reference	358	f3a290442b60
#523	Production package download preparation now checks the retained ZIP, QC receipt, and transmittal together after reading their exact vault versions.	Later reference	362	de8004e1cc4e
#524	An authenticated operator can request a one-use download for a completed, retained production package.	Later reference	368	1f58aab09eba
#526	An exact Bates number can now be resolved to its published production, frozen source version, occurrence and page, and the output PDF's artifact identity and volume.	Later reference	370	b4aab4c917d5
#529	Published production numbers can now be read in ledger order over a bounded range.	Later reference	370	12d470e80daa
#532	An authenticated client can now look up an exact published production number or page through a numeric range.	Later reference	374	e9202b98d507
#534	Agents can now resolve an exact published production number or page through a bounded numeric range with the read-only find_production_numbers tool.	Later reference	376	b9a1423a532f
#536	Production sets can now be created with a replay-safe operation ID, then read by exact revision with bounded member and decision pages.	Later reference	382	aca47b69a9d2
#537	Production instructions and change batches now go through authenticated daemon routes with an exact If-Match draft ETag and a replay-safe operation ID.	Later reference	384	cca4c0d1b0ce
#538	The daemon now lists the two qualified production recipes, their renderer settings, and canonical hashes.	Later reference	385	f3002a96a46e
#541	Production drafts can seal an exact membership count and hash, then record a review of an individual member against its retained binding.	Later reference	387	c96b682d4e5a
#543	A production revision can be forked into a new editable draft through authenticated HTTP, the generated Go client, and the embedded vault API.	Later reference	388	b73f0fbb585b
#545	Production number lookup can now suggest verified published outputs when a label is incomplete.	Later reference	388	5e59e778363f
#546	The read-only find_production_number_candidates MCP tool exposes the verified fallback search from #545.	Later reference	388	2050cbd60513
#547	Operators can page through retained production sets over authenticated HTTP, the generated Go client, and the embedded vault API.	Later reference	389	f39b4d8fe0bc
#548	Operators can read a retained member's aligned text map in bounded pages through authenticated HTTP, the generated Go client, or an embedded vault.	Later reference	391	d2d194eff061
#549	Operators can read a production job's current state through authenticated HTTP, the generated Go client, or an embedded vault.	Later reference	394	739a23a4b495
#550	Operators can cancel a queued, running, or failed production job through authenticated HTTP, the generated Go client, or an embedded vault.	Later reference	396	c0b7d4239ce5
#551	Finalized production revisions can now be submitted as queued jobs through the authenticated API.	Later reference	400	dcaeacefa1c8
#554	Decision pages now support up to 500 items and an optional uncertain=true|false filter.	Later reference	402	03dff2b567d0
#555	Production sets now have a dedicated member append command with a bounded batch, If-Match, and an operation ID for safe retries.	Later reference	404	f88f1884ef3d
#556	Production callers can preview one member's final redaction mask in bounded pages and get the exact binding needed for member review.	Later reference	408	c233a1c10b7d
#558	Exposes finalization through the daemon API, generated client, and embedded vault API.	Later reference	412	cdc0f099762f
#559	Adds an internal path to render one unnumbered production preview page from the selected draft occurrence.	Later reference	416	d80abf202238
#560	A draft preview can now stage a verified PNG and matching sanitized text from the exact catalog-selected PDF.	Later reference	419	8c132c165480
#562	Preview download tickets can now recheck a staged file's SHA-256 immediately before sending response headers.	Later reference	420	b0173e3a1f25
#563	The draft preview path now retains the exact set, revision, member, page, actor, and selected input digest under one operation ID.	Later reference	422	e56bdb43782e
#565	Adds draft production previews for one member and page through the authenticated API, generated Go client, and embedded vault API.	Later reference	425	ddf5f1f55a27
#566	Added a synthetic integration test that finalizes a reviewed production set through the real CLI daemon, restarts it, and checks retained state, exact replay, and rejection of the old runtime API key.	Fold if pursued	426	345ad9f7fc08
#567	Added a synthetic real-daemon proof for a published production package.	Fold if pursued	427	3afe271c62af
#568	Embedded Go applications can stream a retained production package from their own vault and receive the archive's version, hash, size, and package-evidence digest.	Later reference	428	101d03a9c9ed
#570	A completed production job can now publish a verified recipient ZIP through the daemon API, then download that retained package.	Later reference	430	c7823612d282
#571	An embedded Docbank application can now publish a recipient package from a successful production job and stream the verified ZIP from its own vault.	Later reference	431	3e9fb08a51e2
#572	The daemon's full production path now has a single synthetic proof: finalize a reviewed set, admit a job, render its real one-page PDF, publish an OPT image package, and download the verified ZIP.	Fold if pursued	432	b1ffb1e16a18
#573	An embedded Docbank vault now renders production jobs it admits.	Later reference	433	6917a1579646
#575	Added CLI commands to read qualified renderer recipes, create production sets, list sets in bounded pages, and inspect a set or exact draft revision.	Later reference	435	bcf72793ee5a
#576	Added bounded CLI pages for a draft's members and decisions, including an uncertainty filter for decisions.	Later reference	437	ba0a67756c43
#577	Updated production paging tests to accept up to 200 members and 500 decisions, then reject the next item beyond each limit.	Fold if pursued	437	2af4e298c0a7
#578	Added docbank production drafts changes to apply a bounded JSON change batch to an exact draft revision.	Later reference	439	dd4c63d5b17b
#579	Operators can fork an exact production draft from the CLI and continue editing the new revision.	Later reference	441	5ca1f9874cc5
#580	The CLI now has commands to seal a draft's exact membership, read a bounded page of its resolved mask, and declare review using the binding returned by that read.	Later reference	443	f981eb0a3039
#581	Operators can finalize a reviewed production draft and then submit, inspect, or cancel a production job from the CLI.	Later reference	446	9627feebe894
#582	Operators can publish a recipient package from a successful production job and download the retained archive from the CLI.	Later reference	448	d25a0283b188
#584	A synthetic, opt-in test now drives the actual Docbank CLI and daemon from a reviewed draft through finalization, job rendering, recipient package publication, and verified ZIP download.	Fold if pursued	449	338e17d9412b
#588	The CLI can append retained members to an editable production draft from a bounded JSON file or stdin.	Later reference	451	34d35978878c
#589	MCP clients can list bounded production set pages, inspect one set, and read an exact draft revision with its current ETag and authority hashes.	Later reference	454	49ace996c3f2
#591	MCP clients can page through production member and decision summaries for an exact revision, filter decisions by uncertainty, and read a production job's status.	Later reference	457	409c71c81879
#592	MCP clients can read the qualified production recipe IDs and digests, then resolve one bounded page of a member's mask with the server-derived review binding.	Later reference	460	6a3b0ff97296
#593	Opted-in MCP clients can create a production set and fork an exact revision into a new editable draft.	Later reference	463	0aa66d1976b6
#594	Opted-in MCP clients can replace production instructions, seal an exact member count and digest, and record a member's complete review using the daemon-derived binding.	Later reference	466	cb1bfbe2554e
#595	Opted-in MCP clients can append members and apply decision or other draft changes through bounded JSON batches.	Later reference	469	d2aa2870acdb
#597	Opted-in MCP clients can finalize a reviewed production revision, admit a job with an explicit job ID, and cancel an exact job.	Later reference	472	11e5ebd1931b
#599	Opted-in MCP clients can publish a verified recipient package from a successful production job.	Later reference	475	b54152bd656c
#600	Opted-in MCP clients can download a retained production package to an absolute local path.	Later reference	478	27091b255ded
#601	Added an opt-in end-to-end proof that drives production tools through the real MCP stdio server and daemon over a synthetic PDF vault.	Fold if pursued	479	b4e5e637f997
#602	Extended the real-daemon MCP workflow proof to fork the completed synthetic production, append 199 members and matching decisions, and traverse all 201 members and decisions without gaps or duplicates.	Fold if pursued	479	767d5410dd70
#604	Added a Production sets drawer in the web app.	Defer	484	32d6fe4ebb63
#606	Opening a production set now shows its exact source versions and uncertain keep decisions.	Defer	486	78f5862da97c
#614	Added the coordinate conversion the production editor needs to pin a drawn selection to the exact retained page frame, independent of browser zoom.	Defer	488	0cf3999eebd6
#616	Reviewers can switch a draft member between Redact selected and Keep selected.	Defer	490	a72ccb03890c
#618	An API client can read the retained PDF for one exact production draft member.	Defer	500	5c9598fa221a
#619	A draft reviewer can open the retained PDF for a selected member and inspect it beside the exact draft.	Defer	511	bfb6c253c065
#620	Production review can select a whole PDF page or drag a rectangle over the verified original, then keep that region highlighted while reviewing it.	Defer	514	917c8679757e
#621	Added a read-only check for a proposed Keep or Redact decision against the exact current production draft.	Defer	518	59b2629fefa1
#622	The production PDF editor can now Keep or Redact a selected rectangle or whole page.	Defer	520	26a5a80c701f
#624	Reviewers can request an unnumbered production preview for a selected member and page in the current draft.	Defer	523	69d7c8e6b776
#625	The production drawer can look up an exact job ID for the selected set and show its retained state, revision, and revision digest.	Defer	528	8a5e054b3452
#626	Reviewers can now declare a member reviewed from the production drawer after inspecting its original PDF and decisions.	Defer	531	d34351abcad6
#627	The production drawer can now seal a draft's exact member list.	Defer	534	ff88d9483989
#629	A draft can add another occurrence of a source already prepared in a retained production set.	Defer	538	f2c91aeab630
#630	The production drawer can start a job from a finalized revision after an explicit confirmation.	Defer	542	7877c959998d
#631	The production drawer can create a Bates-numbered draft and finalize a reviewed, sealed revision with an existing Bates namespace.	Defer	547	8388bfbb9943
#632	A finalized production now offers Create new draft in the web drawer.	Defer	551	dcfbd48738f4
#635	Reviewers can now highlight a passage in the retained page transcript beside the original PDF, then Keep or Redact that precise text.	Defer	553	3dac4b3963b9
#636	Added a reproduction preflight that binds the request to the original production receipt, reserved numbers, frozen source versions, and complete retained artifact set.	Defer	390	29dffbfa80ca
#637	A reproduction request can now build a fresh recipient archive from its verified historical artifact selection, with QC checked against the actual archive.	Defer	391	a24dc74b0cc5
#638	Reproducing an earlier production now retains a separate immutable receipt alongside the newly packaged archive.	Defer	393	f91c60181bc3
#639	A reproduced package can now retain a separate delivery acknowledgment and its supporting proof.	Defer	394	eb2e39df2c02
#640	A delivery acknowledgment for a reproduced package now checks that the archive, QC, and transmittal match the exact package retained for that reproduction before it writes a sidecar.	Defer	394	a8b7bb7ec7fe
#641	A reproduction request now names the exact source versions from the original production, in the order of its frozen members.	Defer	394	dcba5a5bd78c
#642	A reproduction no longer fails intermittently when its receipt timestamp happens to end in a zero.	Fold if pursued	394	384734e1d033
#643	A synthetic reproduction test now stops after retaining the new package but before writing its reproduction receipt.	Fold if pursued	394	30c67adad68c
#644	The upgrade test now verifies that a vault from the v0.9 release keeps its logical records byte for byte when opened by the current schema.	Fold if pursued	394	3fae94275064
#645	The upgrade tests for v0.10 through v0.14 now verify that the current schema adds an empty production lifecycle section while preserving every released logical record byte for byte.	Fold if pursued	394	601679610187
#646	A synthetic lookup test now proves that a Bates number stays linked to its original produced artifact after the source file changes and a separate reproduction is recorded.	Fold if pursued	394	f5db6f152862
#647	Production roadmap changes can pass the repository's current precommit lint gate again.	Fold if pursued	396	46c5a6ed089f
#648	A published production number resolves to the right retained artifact even when two volumes contain PDFs with the same custom filename.	Fold if pursued	396	fcfe64755f71
#649	A Bates reservation can now share a database transaction with the production record that owns it.	Defer	396	007e550f5c29
#650	A supplement can use the production job's existing finalized-input checks before it asks the Bates ledger for continuation numbers.	Defer	396	e41ae385551e
#651	A supplement now has one exact identity to carry from request through replay: the published parent job and receipt, the newly prepared child job and gate, and the continuation allocation and range.	Defer	398	8b33ef0e7854
#652	The production service can now reserve Bates numbers for a new, separately prepared revision and retain its link to a published parent in one transaction.	Defer	400	dba142c680fa
#653	Two supplement jobs can request numbers at the same time and still receive distinct, nonoverlapping Bates ranges in their published parent's namespace.	Fold if pursued	401	f2c5f2457999
#654	A chain of three published productions can keep supplement lineage and Bates numbers continuous.	Fold if pursued	402	44ab21da7395
#655	A corrected file can replace the content on a node without rewriting the production that used its earlier version.	Fold if pursued	403	f7cbaf5f000b
#656	A supplement remains usable after a physical vault backup and restore.	Fold if pursued	404	95c89c416985
#657	A supplement now needs its own frozen numbering selection.	Fold if pursued	405	0c3fd29f4147
#658	A retained supplement link now resolves only when both the parent and child allocations still match their finalized production snapshots.	Fold if pursued	406	7111c37a0867
#659	Production policies can now be saved as immutable versions and read back through the authenticated daemon API or a separately rooted embedded vault.	Defer	409	c9385b62cc9e
#660	Saved production policy versions can now be discovered in bounded pages through the authenticated daemon API and a separately rooted embedded vault.	Defer	410	7265ff2f8d9f
#661	Operators can now create, list, and read immutable production policies from the CLI without opening a vault directly.	Defer	412	321e4647ff28
#662	MCP clients can now create, list, and read immutable production policy versions.	Defer	415	73f7fff35d42
#663	Production approval reads now show the public grant and lifecycle events through HTTP, the Go daemon client, and the embedded vault API.	Defer	418	f9998d274abe
#664	Operators and agents can now read a production approval's public grant and lifecycle events through docbank production approval show <id> or the read-only MCP get_production_approval tool.	Defer	423	ff2bbdb2fd45
#665	Applications that own an embedded Docbank vault can now record an immutable production approval after they authenticate the human reviewer.	Defer	424	6445b5834a94
#666	Operators can read a frozen privilege log by its exact log ID and revision, one page of public rows at a time.	Defer	428	2d47345fb91e
#667	Operators can page through the public rows of a frozen privilege log with docbank production privilege-log show <log-id> <revision> --limit 25 --json.	Defer	434	a80cac352be1
#668	Applications with an existing privilege-log draft can validate its stored rows through the authenticated daemon API or an embedded vault.	Defer	435	00093ce207f0
#669	Operators can validate an existing privilege-log draft from the CLI.	Defer	438	8535395965a3
#670	Frozen privilege logs can now be exported from an embedded Docbank vault as JSON, CSV, XLSX, or PDF.	Defer	444	c1845c579bb7
#671	A frozen privilege log can now be downloaded through the authenticated API as JSON, CSV, XLSX, or PDF.	Defer	445	9e5afd6ed04a
#672	Operators can now save a frozen privilege log as public JSON, CSV, XLSX, or PDF with docbank production privilege-log export.	Defer	445	95faaa78a0fa
#673	An MCP agent with production writes enabled can now save one frozen privilege log as a verified public JSON, CSV, XLSX, or PDF file.	Defer	447	d7d542f77050
#674	Privilege draft retries now bind to every private input used to create the draft.	Fold if pursued	447	5905be2d36e3
#675	Privilege drafts can now be created from a sealed production revision without asking an agent to supply the produced member list.	Defer	448	871d4e3753b8
#676	Agents can now submit private privilege-log rows for a sealed production revision through the authenticated HTTP API.	Defer	449	440904cd7fd1
#677	Agents can now replace a privilege draft's private rows through authenticated HTTP when they hold its current generation.	Defer	449	cb15b4e97e98
#678	Applications with their own embedded vault can now create privilege drafts from a sealed production revision and replace private rows at an exact generation.	Defer	449	63bdf8a54cee
#679	Operators can now replace a privilege draft's private rows from a local JSON file with docbank production privilege-log rows replace.	Defer	449	1d8f616d608e
#680	Docbank now has a Store path for recording a withheld selection against a sealed production revision.	Defer	450	a11e1f717d27
#681	Authenticated clients can record which members of a sealed production revision are withheld and receive the stored selection digest.	Defer	453	69a1962789ab
#682	Authenticated clients can save a versioned player snapshot with people, aliases, and evidence digests, then use its returned digest when drafting a privilege log.	Defer	457	366a89fd1471
#683	The CLI can create a private privilege-log draft from a sealed production revision and a stored player snapshot through the authenticated daemon.	Defer	457	ec73862ab1cc
#684	An opt-in MCP tool can replace private privilege-log rows at an exact draft generation through the authenticated daemon.	Defer	460	ef665641e2b5
#685	An opt-in MCP tool can create a private privilege-log draft from a sealed production revision and stored player snapshot through the authenticated daemon.	Defer	463	3484366ae100
#686	An authenticated client can now freeze a validated privilege log and receive an immutable receipt.	Defer	467	6983406ac3db
#687	A CLI user can now validate a privilege-log draft and freeze that exact validated generation through the daemon.	Defer	467	0b6e11553c72
#688	An opted-in MCP client can now validate and freeze a privilege-log draft through the daemon, then receive a compact receipt with the log identity, row count and digest.	Defer	470	61ef1a00416e
#689	A CLI user can now download an exact retained production archive by job and package operation ID.	Overlap / replacement	472	1f3a262a57e0
#690	An opted-in MCP client can now save an exact retained production archive to a local file.	Overlap / replacement	475	76f0406837bb
#691	An authenticated client can now create a supplement for a published production and read back its exact continuation record.	Defer	478	20b6d6eb340a
#692	CLI users can now create a supplement for a published production and read its exact continuation record.	Defer	480	2506804550cc
#693	MCP clients can now read an exact production supplement record by operation ID.	Defer	483	32685acafe93
#694	Clients can read one reproduction receipt by its original production job and operation ID.	Defer	486	f858c55a4bbc
#695	Agents can now request a new reproduction through the authenticated daemon API.	Defer	487	1923ceaeeb71
#696	The CLI can now create a reproduction from a published production job and read its exact receipt:.	Defer	489	e496902b9a08
#697	MCP agents can read an exact verified reproduction receipt with get_production_reproduction.	Defer	492	85fb0c35968a
#698	Agents can now build and retain a recipient package for a published production job through the authenticated daemon API, then read its exact package evidence by job and operation ID.	Overlap / replacement	495	9343e86cd4e2
#699	CLI users can now build a retained recipient package from a published production job and read its exact evidence later.	Overlap / replacement	497	d8a7f0623a51
#700	MCP clients can now create a retained recipient package from a published production and read its exact evidence later.	Overlap / replacement	500	ba06b8be129a
#701	CLI users can record an exact versioned player snapshot for a privilege log with docbank production players create <snapshot-id> <revision> --operation-id <uuid> --file players.json.	Defer	502	40194161a732
#702	An MCP client with processing tools enabled can now record a versioned player and alias snapshot from a private local JSON file.	Defer	505	da2aa6570584
#703	CLI users can now record an explicit withheld selection for a sealed production revision.	Defer	507	b824af542cb4
#704	An MCP client with processing tools enabled can now record an explicit withheld selection from a private local JSON file.	Defer	510	6266114e21f5
#705	Combines the core production workflow and later policy/privilege branch, retaining separate package-create and package-publish routes.	Later reference	601	af17b2ae9d9d
#706	Production drafts under a required approval policy are now covered at the actual finalization handoff.	Fold if pursued	602	19bf1f8eb3a7
#707	A production draft that requires a privilege log is now covered at the actual finalization handoff.	Fold if pursued	603	40d7da68463d
#708	Corrects the real-daemon CLI test to read the merged download receipt field named destination.	Fold if pursued	603	3c5744200760
#709	A production operator can now select an existing verified approval and frozen privilege-log receipt for a sealed revision through the daemon API or an embedded vault.	Defer	606	4d5befc72971
#710	An operator can now use docbank production drafts select-gates to bind a sealed revision to an existing authenticated approval and frozen privilege-log receipt through the daemon.	Defer	609	6e64eaea7125
#711	MCP agents can now select an existing verified approval and frozen privilege-log receipt for a sealed production revision.	Defer	613	82b78d0a2bbb
#712	A production operator can now exercise the frozen privilege gate end to end through either the CLI or MCP.	Fold if pursued	614	fd09d4b1ab46
#713	Reconciles the production operation catalog with the 43 served routes and actual MCP tools.	Defer	615	8023fe02a7a4
#714	Embedded Go applications can now freeze a validated production privilege log through the public vault API.	Defer	615	c279fa90d3be
#715	Embedded Go applications can now record versioned people and aliases for a privilege log, then record an explicit withheld selection against a sealed production revision.	Defer	617	411c0f0fc25f
#716	Embedded Go applications can resolve an exact published production number, page a numeric range, or search bounded candidates by exact, prefix and substring text.	Defer	619	a7ed8f852f1f
#717	The CLI can resolve an exact published production number, page a bounded numeric range, and search exact, prefix or substring candidates.	Defer	621	7a48c9550184
#718	Adds embedded supplement create/read methods, with the synthetic test deliberately delaying worker claim of its queued child.	Defer	623	6941c0d8da85

[wesm]

Native document, report, export and agent proposals: 33 PRs

These contain the best starting point for a smaller scope, but the useful local workflow is mixed with a separate delegated-access framework and full operation catalogue.

Group	PRs	Proposed outcome
LF	1	Load-file package interchange
RP	8	Exact selected reports and artifact access, including the #444/#544 replacement pair
EX	5	Native archive downloads and CLI/MCP adapters
AG	5	Operation catalogue, source grants and private sessions
WF	14	Aggregate report/export branches, client coverage and scoped reads

What to keep

Exact current-version selection; frozen keyword/date/coverage evidence; verified evidence ZIP; verified native bundle downloads; the thin web/CLI/local-MCP operations needed for this one task. Preserve explicit attachment selection and honest missing-text coverage.

What to simplify

• [RP 02/07] feat(report): freeze exact selected documents on current main #544 replaces [RP 02/07] feat(report): freeze exact selections and source visibility #444. EX [EX 02/05] feat(export): download verified archives from CLI #492 → [EX 03/05] feat(export): drive verified exports from CLI #494 → [EX 04/05] feat(export): drive verified exports from CLI and MCP #497 → [EX 05/05] feat(export): download verified archives through MCP #510 and RP [RP 05/07] feat(report): verify downloaded CSV against retained evidence #499 → [RP 06/07] feat(report): verify CLI and MCP CSV against evidence #503 → [RP 07/07] feat(report): create and review frozen reports through MCP #507 repeatedly carry earlier work. [WF 01/14] feat(workflow): qualify native PDF reports and exports #518 combines report/export work; [WF 06/14] feat(workflow): publish native PDF reports and scoped access #552 adds access work; [WF 07/14] feat(workflow): read retained reports and native exports from CLI and MCP #569 through [WF 14/14] feat(agent): read granted documents through private MCP sessions #617 repeatedly aggregate those same foundations. These are reference branches, not a merge checklist.
• Main already has search-export csv <report.zip>, which verifies the evidence bundle and extracts its CSV. [RP 04/07] feat(report): verify CSV against companion evidence bundle #485/[RP 05/07] feat(report): verify downloaded CSV against retained evidence #499/[RP 06/07] feat(report): verify CLI and MCP CSV against evidence #503 add proof for separately transported CSV. Downloading the one ZIP and deriving CSV avoids making that second protocol a requirement.
• Main already creates native export plans/jobs and verifies archives. Its ticket route accepts browser and nonbrowser owner calls. [EX 01/05] feat(api): expose verified native export archive reads #469 offers a dedicated byte-download path for client adapters; it does not introduce the export engine.
• Private-session [WF 14/14] feat(agent): read granted documents through private MCP sessions #617 restricts its tool list to eight read operations. It does not deliver private-session search/report/export parity. That is a separate access product, not a prerequisite for local-operator reporting.
• Report history stores request/summary rather than artifact bytes, and drops reviewed date choices. Do not promise indefinitely retained report artifacts or exact historical regeneration after restore without explicitly building that additional behavior.

Boundary: exact selection checks the current version at admission. A completed report remains frozen when that source later changes; this does not imply arbitrary historical versions can be newly reported. Reuse existing Bates output where a future selected task needs it; new DAT/OPT/LFP packages (#403) remain separate.

The table describes each proposal's increment, including cumulative aggregates. “Initial scope reference” means extract the useful requirement or adapter; it does not mean merge that PR. #458 is a maintenance proposal whose reported failure was not reproduced in this review.

Complete per-PR inventory

PR	Proposed increment	Treatment	Files	Reviewed head
#403	Export sealed snapshots as verified DAT/PDF, DAT/image or CSV/native packages with crosswalks and optional existing Bates artifacts.	Defer	31	ea2dad5f8426
#444	Add exact selected-version report requests and live source visibility checks, including retained history after cache loss.	Overlap / replacement	30	82098f106e25
#456	Download retained report artifacts by ID through CLI or bounded MCP handles.	Initial scope reference	16	b554432036de
#458	Retry only the start of a busy email-receipt-release transaction, preserving single callback execution.	Fold if pursued	4	751171e97246
#467	Classify every daemon route and maintain a versioned agent operation/parity registry.	Defer	18	b51e5e48fb8c
#469	Add authenticated native export archive-byte reads checked against retained receipt and live source authority.	Initial scope reference	12	6d0865933326
#485	Verify a separately downloaded CSV against the hits.csv in its independently verified companion evidence ZIP.	Defer	3	6bc627fc9d7b
#487	Apply live source-grant policy to selected reads/search/processing/tags and reject remote-target fallback.	Defer	63	ab980e567d77
#492	Add atomic verified CLI native archive download over the authenticated byte API.	Initial scope reference	17	b54d71bd869e
#494	Expose the existing source/plan/preview/job/status/cancel export lifecycle through CLI.	Initial scope reference	20	c032a9bdf715
#497	Add local MCP export preview/status and separately enabled creation/cancellation tools to the cumulative CLI export branch.	Initial scope reference	30	6e685a3af2a3
#499	Wire companion ZIP proof into direct CLI CSV download.	Defer	20	dca150a2f9e4
#503	Wire companion ZIP proof into MCP CSV handles and retain cumulative CLI download work.	Defer	21	272990b46c80
#507	Add local MCP report summary/date reads and separately enabled create/revise tools.	Initial scope reference	57	da04a2c43657
#510	Add private bounded MCP archive spools and chunk handles with live authority checks.	Defer	37	411ee4f5bb8b
#518	Combine report and export stacks and qualify one selected PDF through evidence CSV/ZIP and original-byte export.	Initial scope reference	85	d3907db2302d
#527	Issue/revoke vault-bound short-lived read tokens for exact retained sources and attach them to an existing daemon.	Defer	70	0fb3717a63a2
#528	Persist bearer session credentials privately and reconnect CLI/MCP without daemon restart or master-key fallback.	Defer	81	4e9db679fd3b
#530	Extend the cumulative native workflow proof to source/history recovery and report/export recreation after backup restore.	Initial scope reference	85	edd79f766bd3
#533	Expose current document pagination, processing coverage and bounded rendition text through CLI.	Initial scope reference	7	a7f0e6171763
#535	Add exact-source-fenced document catalog reads through CLI agent sessions.	Defer	88	d46da353eb8b
#539	Expose bounded format capability inventory through MCP.	Defer	7	3e8511ee11dd
#542	Authorize the MCP format inventory through live read-session grants.	Defer	94	56cd287832f6
#544	Rebase the still-open selected-report/visibility work from 444 onto current main as a replacement.	Initial scope reference	30	4a8fb9695e5d
#552	Recombine native report/export/restore and scoped-session foundations into a single current-main aggregate.	Overlap / replacement	168	0c9a9a98e42a
#569	Add CLI report show/history and bounded MCP history, plus a combined CLI/MCP native workflow check.	Initial scope reference	170	285b55fe99ec
#574	Add MCP processing-profile inventory and reviewed native operation wire shapes/limits to the cumulative registry.	Defer	170	f735b79454cd
#583	Add CLI/MCP retained export-plan inspection and paginated unavailable-output details.	Initial scope reference	170	041d72f5f36d
#590	Add bounded MCP tag listing, including source-grant filtering when scoped.	Defer	171	3849c3eca3f9
#598	Publish the reviewed operation capability registry through daemon, CLI and MCP.	Defer	178	a1c60918be99
#603	Restrict private-session MCP catalog to its four callable metadata reads and avoid operator-only vault-info calls.	Defer	178	ea9f563b4d65
#605	Bind private MCP to daemon-provided live source grants and expose vault summary, document listing and rendition text.	Defer	180	a9b720b2438e
#617	Add exact get_document to private MCP with pre-read and pre-return grant checks.	Defer	183	83bc060e6ffe

[wesm]

Markdown discovery proposals: 15 PRs

These are useful ideas for later product decisions, but none is a prerequisite for the initial exact-document report/export workflow.

Existing reading support: main already exposes bounded text keyed by vault, node, version and rendition, returning checksum, offsets and EOF. It requires the active current version. Stable historical passage references are a real additional feature, not something this current read already promises.

A coherent later milestone: combine #414, #434, #504 and #553 into one outcome: create a citation from retained text, reopen exactly the same quote, read its complete section in bounded pages, and expose that through MCP. Keep source visibility and unavailable behavior explicit. Context packs and related passages can follow after that is useful.

Why the rest is separate

• [DF-04A] feat(passage): resolve exact retained document passages #414's passage foundation introduces document identities, aliases and adopted-reference authority. Ship focused Markdown discovery and agent-readable maps #433 explicitly says federation is not a prerequisite. Start a local citation design with the existing vault/node/version/rendition identity unless cross-vault adoption is separately required.
• [DF-12A] feat(maps): save structured maps with frozen snapshots #463/[DF-12B] feat(maps): propose and refresh content maps #525/[DF-12C] feat(maps): read curated maps and refresh changes in bounded views #531 introduce a curated-map product with definitions, pinned membership, snapshots and refresh deltas. [DF-11B] feat(tags): preserve stable tag concepts and exact passage assignments #468 adds concept aliases, hierarchy, passage assignments, merge/reversal and references into saved queries/maps. Those are substantial durability and curation commitments, not merely better reading.
• [DF-01A] feat(remote): connect explicit HTTPS document targets #416 remote targeting and [DF-01B] feat(access): keep document access inside current source grants #455 scoped processing/access are separate from local reading. [DF-01B] feat(access): keep document access inside current source grants #455 and [AG 02/05] feat(agent): enforce source-scoped operation policy #487 share 44 changed paths but differ in policy implementation. A future access feature needs one design and implementation.
• [DF-08B] feat(index): report freshness and repair stale projections #422 adds a general status/repair coordinator with lexical/vector support and disabled metadata/tag/map projections. Initial report/export should report its actual coverage; a general repair product is optional.
• The proposals contain competing development schema numbers: [DF-04A] feat(passage): resolve exact retained document passages #414 changes 24→25, [DF-12A] feat(maps): save structured maps with frozen snapshots #463 changes 24→26, [DF-11B] feat(tags): preserve stable tag concepts and exact passage assignments #468 changes 23→26, while current main is already schema 26. These need reconciliation against current main if selected. This observation is not a reproduced migration or data-loss defect, and it does not justify migration ladders for unshipped layouts.

The table gives every proposal's increment. “Later citation reference” is one optional future milestone; all other rows remain deferred or overlap work to reconcile. No runtime or security qualification is claimed.

Complete per-PR inventory

PR	Proposed increment	Treatment	Files	Reviewed head
#414	Resolve exact retained historical passages and verify source and quote hashes	Later citation reference	23	392434b7c7b4
#416	Connect explicit HTTPS targets with vault identity checks	Defer	10	d89d24f89e66
#417	Find bounded document and tag neighborhoods within exact current versions	Defer	10	1a89c5e651e4
#422	Report projection freshness and stage local index repairs	Defer	21	0c9404ceb198
#434	Read retained document outlines and complete sections in bounded pages	Later citation reference	35	acd408fae5c9
#455	Apply live source grants to reads, streams, and queued processing	Reconcile once; defer	74	84dc3081b61d
#463	Save ordered content maps and immutable snapshots	Defer	39	ed200b169d20
#468	Maintain tag concepts, aliases, hierarchy, passage assignments, merges, and reversal	Defer	66	5b3db0ba97d6
#504	Create exact references from retained Markdown byte selections	Later citation reference	32	4ffe59b59dcd
#517	Build bounded context packs with verifiable references and coverage	Defer	45	4aa546e4ab3c
#522	Suggest related passages with retained quotes and retrieval evidence	Defer	38	84a6a40d3977
#525	Propose maps from tags or queries and refresh immutable snapshots	Defer	42	feab66a60c64
#531	Read maps, snapshots, and refresh deltas through bounded Markdown/JSON/MCP	Defer	49	88f241f33b3c
#540	Expose scoped tag neighborhoods through MCP	Defer	16	b075ecc1f27a
#553	Resolve supplied exact passage references through MCP	Later citation reference	45	a3e899ec9de9