[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_1725":1726,"_1727":62,"_1728":18,"_1729":18,"_1730":18,"_1731":62,"_1732":18,"_1733":18,"_1734":18,"_1735":18,"_1736":-5,"_1737":1738},"routes/s.$postId",{"_9":10,"_11":12,"_13":-7,"_14":-7,"_15":16,"_17":18,"_19":18,"_20":-5,"_21":22},"kind","post_with_profile","postWithProfile",{"_23":24,"_25":26},"messagingRoomId","referrer","imagegenOgImagePolicy","current_wide","preferIntrinsicAspectRatioForOgImage",false,"enforceRenderedOgImg","ogImageVariantOverride","defaultOgDescription","ChatGPT helps you get answers, find inspiration, and be more productive.","post",{"_45":46,"_47":48,"_49":-5,"_50":-5,"_51":-5,"_52":-5,"_53":54,"_55":56,"_38":57,"_58":59,"_60":18},"profile",{"_27":28,"_29":28,"_30":31,"_32":-5,"_33":-5,"_34":35,"_36":18,"_37":-5,"_38":-5,"_39":-5,"_40":18,"_41":-5,"_42":-5,"_43":-5,"_44":18},"user_id","anonymous","username","profile_picture_url","https://cdn.openai.com/sora/images/profile_placeholder_v4.png","profile_picture_id","is_default_profile_picture","follower_count",0,"is_following","display_name","permalink","can_cameo","verified","character_count","owner_profile","social_context","follows_you","id","cd_6a72cb1b66a08191a2bfef77cf6afff5","posted_at",1785907995.401105,"text","og_title","og_description","og_image_variant","attachments",[68],"preview_image_url","https://ogimg.chatgpt.com/?postId=cd_6a72cb1b66a08191a2bfef77cf6afff5","https://chatgpt.com/s/cd_6a72cb1b66a08191a2bfef77cf6afff5","permissions",{"_61":62,"_63":18,"_64":18,"_65":62,"_66":67},"use_experimental_unfurl","can_read",true,"can_write","can_delete","can_remix","share_setting","public",{"_45":69,"_70":71,"_9":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":81,"_82":-5},"cd_6a72cb1b66a08191a2bfef77cf6afff5-attachment-0","tags",[],"codex","task",{"_45":1681,"_125":1682,"_384":1683,"_1684":62,"_85":86,"_1685":18,"_1686":1687,"_269":62,"_1688":1689,"_1690":-5,"_1691":1692},"current_user_turn",{"_99":314,"_45":91,"_103":314,"_315":1677,"_317":-5,"_318":319,"_137":89,"_125":320},"current_assistant_turn",{"_99":100,"_45":86,"_101":-5,"_102":-5,"_103":100,"_104":1642,"_106":1643,"_108":109,"_110":1644,"_112":-5,"_113":1645,"_115":1646,"_117":1647,"_119":120,"_121":-5,"_122":123,"_124":-5,"_125":126,"_127":-5,"_128":129,"_130":1648,"_132":133,"_134":-5,"_135":-5,"_136":-5,"_137":91,"_138":1649,"_140":-5,"_141":-5,"_142":18,"_143":144,"_145":-5},"current_diff_task_turn","turns",{"_83":84,"_85":86},"example_task_info","turn_mapping",{"_87":88,"_89":90,"_91":92,"_86":93},"current_turn_id","task_e_6a72cb1a337c83229069db75e25bba4c~assttrn_e_6a72ef33899083228f724643869d0429","task_e_6a72cb1a337c83229069db75e25bba4c~usertrn_e_6a72cb1b26348322b2cf9366f8d3e255",{"_45":87,"_94":1571,"_96":1572,"_98":-5},"task_e_6a72cb1a337c83229069db75e25bba4c~assttrn_e_6a72cb1b27388322962bb568272ea231",{"_45":89,"_94":327,"_96":328,"_98":87},"task_e_6a72cb1a337c83229069db75e25bba4c~usertrn_e_6a72ef32d9208322a3845dc0dca576ac",{"_45":91,"_94":312,"_96":313,"_98":89},{"_45":86,"_94":95,"_96":97,"_98":91},"turn",{"_99":100,"_45":86,"_101":-5,"_102":-5,"_103":100,"_104":105,"_106":107,"_108":109,"_110":111,"_112":-5,"_113":114,"_115":116,"_117":118,"_119":120,"_121":-5,"_122":123,"_124":-5,"_125":126,"_127":-5,"_128":129,"_130":131,"_132":133,"_134":-5,"_135":-5,"_136":-5,"_137":91,"_138":139,"_140":-5,"_141":-5,"_142":18,"_143":144,"_145":-5},"children",[],"parent","type","assistant","sibling_turn_ids","attempt_placement","role","output_items",[],"child_turns",[],"conversation_id","None","error",{"_308":309,"_310":311},"latest_event","worklog",{"_306":307},"app_server_events",{"_303":305},"thread_events",{"_303":304},"turn_status","failed","cancellation_requested_at","pull_request_status","not_created","pull_request_data","created_at",1785917235.537514,"internal_only_rollouts","environment_id","6a4f4a07a864819196abaa21176f9e31","environment",{"_45":129,"_176":177,"_178":179,"_180":18,"_181":182,"_183":184,"_185":186,"_187":-5,"_188":-5,"_189":18,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":-5,"_203":204,"_205":206,"_207":208,"_209":210,"_58":-5,"_125":211,"_212":213,"_214":215,"_216":217,"_218":18,"_219":18},"branch","codex/cloud-mcp-parity-20260804","base_commit_sha","branch_name","direct_push_pushed_commit_sha","previous_turn_id","logs",{"_138":146},"proxy_events","debug_metadata","discarded","model_version","gpt-5.5","languages",[147,148,149,150,151],{"_152":172,"_154":173},{"_152":168,"_154":169},{"_152":164,"_154":165},{"_152":160,"_154":161},{"_152":153,"_154":155},"key",{"_156":157,"_99":158,"_125":159},"value","file_00000000d920820d98e6729fb68e0b8f","name","userscript_1785917316","UserSetupScript","2026-08-05T08:08:36.268515",{"_156":162,"_99":158,"_125":163},"file_0000000084f4820ca17890cf979c629c","userscript_1785906797","2026-08-05T05:13:17.224044",{"_156":166,"_99":158,"_125":167},"file_0000000075d881f9a69454c3c4a8860e","warm_up_git_repo_1785917242","2026-08-05T08:07:22.960316",{"_156":170,"_99":158,"_125":171},"file_000000009cf081fbb33210641a7bd21e","setup_autodetect","2026-08-05T05:13:04.481455",{"_156":174,"_99":158,"_125":175},"file_00000000ddf081f7810cb454d36a521f","maintenance_scripts_1785917248","2026-08-05T08:07:28.566326","machine_id","wham-public/wham-universal","label","BigSimmo/Database","is_pinned","description","Node 24/npm 11 Database environment with locked dependencies, OCR and full browser tooling. External access uses approved GitHub/Supabase/Railway connectors or protected workflows; raw provider secrets are not exposed to the agent.","workspace_dir","/workspace","agent_network_access",{"_294":295,"_296":297,"_298":299,"_300":-5,"_301":-5,"_302":-5},"codex_github_direct","github_connector_id","enable_gitlab_webhooks","repos",[250],"setup",[293],"maintenance_setup",[292],"repo_map",{"_250":251},"env_vars",{"_224":225,"_226":227,"_228":229,"_230":231,"_232":233,"_234":235,"_236":237,"_238":239,"_240":241,"_242":243,"_244":245,"_246":247,"_248":247,"_249":245},"secrets",{},"secrets_with_domains","task_count",2465,"creator_id","user-meqzK8tcEkFfh4X5tXfIqXyp","share_settings","workspace","share_targets",[],1783581192.606357,"auto_setup_settings",{"_223":18},"cache_settings",{"_220":62,"_221":222},"etag","\"9201570d-0000-0200-0000-6a72e96a0000\"","enable_authtranslator","enable_docker_in_docker","post_setup_cache_enabled","cache_invalidation_key","1c58f9e06a214a9facc1c63e9de02867","use_auto_setup","CODEX_ENV_PYTHON_VERSION","3.12","CODEX_ENV_NODE_VERSION","20","CODEX_ENV_RUBY_VERSION","3.4.4","CODEX_ENV_RUST_VERSION","1.89.0","CODEX_ENV_GO_VERSION","1.24.3","CODEX_ENV_BUN_VERSION","1.2.14","CODEX_ENV_PHP_VERSION","8.4","CODEX_ENV_JAVA_VERSION","21","CODEX_ENV_SWIFT_VERSION","6.1","CODEX_CLOUD","1","RAG_PROVIDER_MODE","offline","NEXT_PUBLIC_DEMO_MODE","true","PLAYWRIGHT_OFFLINE_MODE","CODEX_CLOUD_ACCESS_PROFILE","github-1243497866",{"_45":252,"_156":253,"_254":255,"_256":179,"_257":258,"_259":260,"_261":262,"_263":264,"_265":266,"_267":268,"_269":18,"_270":62,"_271":62,"_272":18,"_273":62,"_274":62,"_275":-5,"_276":277,"_278":-5,"_58":279},"1243497866","Database","owner",{"_284":285,"_45":286,"_99":287,"_288":289,"_290":291},"repository_full_name","clone_url","https://github.com/BigSimmo/Database.git","default_branch","main","git_commits_url","https://api.github.com/repos/BigSimmo/Database/git/commits{/sha}","git_refs_url","https://api.github.com/repos/BigSimmo/Database/git/refs{/sha}","git_url","git://github.com/BigSimmo/Database.git","visibility","private","archived","allow_auto_merge","allow_merge_commit","allow_rebase_merge","allow_squash_merge","allow_update_branch","language","size",95279,"master_branch",{"_280":62,"_281":62,"_282":62,"_283":62},"admin","maintain","push","pull","login","BigSimmo",87357024,"User","avatar_url","https://avatars.githubusercontent.com/u/87357024?v=4","url","https://api.github.com/users/BigSimmo","set -Eeuo pipefail\nCODEX_CLOUD_ACCESS_PROFILE=offline RAG_PROVIDER_MODE=offline NEXT_PUBLIC_DEMO_MODE=true PLAYWRIGHT_OFFLINE_MODE=true NODE_USE_ENV_PROXY=1 bash scripts/maintain-codex-cloud.sh\nexport CODEX_CLOUD_ACCESS_PROFILE=offline\nexport RAG_PROVIDER_MODE=offline\nexport NEXT_PUBLIC_DEMO_MODE=true\nexport PLAYWRIGHT_OFFLINE_MODE=true\n. \"$HOME/.clinical-kb-codex-cloud.sh\"\nmkdir -p \"$HOME/.local/bin\"\nnode_bin=\"$(dirname \"$(nvm which \"$(tr -cd '0-9' < .node-version)\")\")\"\nfor command in node npm npx; do\n [[ -x \"$node_bin/$command\" ]]\n cat > \"$HOME/.local/bin/$command\" < \"$HOME/.local/bin/$command\" <","# This is NOT the Next.js you know","This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` before writing any code. Heed deprecation notices.","","","## Dependency shortcut","When the user types exactly `dependency` as the entire task message, after trimming surrounding whitespace, treat it as a shortcut for safe dependency maintenance. This is a Codex chat shortcut, not an app feature, script, automation, or CI workflow.","Goal:","Update direct project dependencies to the newest stable compatible versions, regenerate the existing lockfile, identify source/config/test code that relies on old dependency behavior, make the smallest safe compatibility changes, and verify the result. Do not rewrite the project, switch package managers, discard user work, commit, push, deploy, or run destructive cleanup without explicit confirmation.","Start with read-only inspection:","- Check branch, upstream, worktrees, recent relevant history, and `git status`.","- If on `main`, `master`, `develop`, `release/*`, or another protected/base branch, create/switch to `codex/dependency-maintenance` before editing, if safe.","- Inspect manifests, lockfiles, package-manager config, runtime/toolchain files, workspace layout, CI config, scripts, and documented checks.","- Detect repo-local install/dev/test/build/watch/server processes that could race dependency updates.","- Preserve all existing staged, unstaged, and untracked user work.","Package-manager rules:","- Use the package manager already used by the repo: npm, pnpm, yarn, bun, pip, poetry, uv, cargo, go, bundler, gradle, maven, dotnet, or equivalent.","- Do not switch package managers or create a new lockfile type.","- Respect engines, runtime versions, lockfiles, workspaces, wrappers, and repo conventions.","- In monorepos or polyglot repos, update each ecosystem through its native workspace-aware workflow.","Dependency update rules:","- Identify outdated direct production and development dependencies.","- Compare both manifest ranges and locked/installed versions against latest stable compatible releases.","- Treat “outdated packages found” exit codes as normal where applicable.","- Avoid prerelease, alpha, beta, canary, rc, next, nightly, and experimental versions unless the stable channel points there and explain why.","- Do not use force or legacy flags that bypass peer, engine, resolver, or lockfile integrity checks unless explicitly approved.","- Do not run forced audit fixes or broad destructive codemods.","- If latest is incompatible, use the newest compatible version and document why.","- Group risky updates coherently, such as framework plus plugins, test runner plus coverage, lint core plus plugins, or runtime plus adapter packages.","Compatibility audit:","- For every major update and every core framework/runtime/build/test/lint/UI/database update, inspect release notes, migration guides, peer ranges, engines, and changelogs when available.","- Search source, tests, scripts, config, and CI for imports, APIs, CLI flags, config keys, environment variables, plugin names, generated types, or file paths tied to changed dependencies.","- If old dependency behavior is used, make the smallest safe migration that preserves behavior.","- If migration is large, risky, architectural, or product-affecting, stop after discovery and provide a concrete fix plan with affected files, package versions, sequence, and verification commands.","- Add or adjust focused tests only when needed to prove migrated behavior.","Generated and sensitive files:","- Do not intentionally keep dependency directories, build outputs, caches, logs, local state, test artifacts, browser artifacts, `.env*`, secrets, keys, tokens, credentials, or machine-local config.","- Manifest and existing lockfile changes are allowed.","Verification:","- Run a cheap baseline first when useful to distinguish pre-existing failures.","- After updates, run install/dependency validation, then relevant lint, type check, tests, build, smoke/UI/a11y, codegen, integration checks, or equivalent.","- For frontend/browser-facing changes, run browser/UI verification when framework, bundler, router, styling, test runner, or browser automation changed.","- If a check fails, fix dependency-related breakage and rerun the smallest failing check before broader checks.","- Run non-mutating audit/vulnerability checks when available.","- Confirm no repo-owned dev server, watcher, or temporary process was left running unless requested.","Final response for `dependency` must include:","- Branch and worktree state.","- Package manager, runtime, manifests, and lockfiles detected.","- Outdated dependencies found.","- Dependencies updated, old version -> new version.","- Dependencies not updated and why.","- Files changed.","- Compatibility migrations and old APIs found/fixed.","- Checks run and results.","- Checks not run and why.","- Audit/vulnerability summary.","- Generated/untracked files left behind.","- Branch movement, external repo changes, or process cleanup observed.","- Risks or follow-up work.","- Confirmation that no commit or push was made unless explicitly requested.","After setup:","- Verify root `AGENTS.md` contains exactly one `## Dependency shortcut` section.","- Show the final diff for `AGENTS.md`.","- Summarize what changed.","- Confirm no dependency update, install, test, build, audit, commit, or push was performed.","","","## Bug-hunter shortcut","When the user types exactly `bug-hunter` as the entire task message, after trimming surrounding whitespace, treat it as a shortcut for targeted defect discovery.","Execution rules:","- Invoke the `bug-hunter` skill first.","- Prioritize reproducible defects over code style, naming, or formatting feedback.","- Trace realistic failure paths: invalid input, empty states, retries, race/concurrency issues, stale state/cache, network/auth failures, permissions, and boundary values.","- For each finding, include trigger, expected behavior, actual risk, and the smallest proof (or targeted test/check) that would catch it.","- If no high-confidence defect is found, explicitly state that and list the most likely residual risk area.","Scope and safety:","- Keep the hunt scoped to code touched by the user request unless the defect clearly crosses module boundaries.","- Do not make broad refactors while hunting; propose minimal fixes for confirmed issues.","- Run the smallest focused verification for each confirmed defect, then expand only if needed.","","","## Codex review throttling and routing","Do not review branches opportunistically. Review the current changed diff, PR, or branch only when the user explicitly asks for review/audit/hunter/cleanup/upload work, when CI/check failures are the task, or when the current change touches high-risk areas that require a targeted review before handoff.","Use `docs/codex-review-protocol.md` as the shared review protocol for every repo-local review skill, branch/PR review, audit, bug hunt, release-readiness check, and PR/CI review.","Before reviewing a branch or PR:","- Run `npm run ledger:lookup -- --scope \"\"`. It resolves the HEAD, matches the abbreviated SHAs older records used, and prints an explicit verdict. Do not read `docs/branch-review-ledger.md` by eye — live + archive rows are many, and eyeballing is how repeat reviews slipped through. `ledger:lookup` reads archives under `docs/archive/branch-review-ledger-*.md` too.","- On `ALREADY REVIEWED`, summarize the prior ledger outcome and skip the repeat review unless the user explicitly requests a fresh pass.","- On `NOT REVIEWED at this HEAD`, review only the changed scope and append a record after the review.","Before reviewing multiple branches:","- Build a short branch inventory first: branch, upstream, ahead/behind, last commit, and merged status.","- Skip branches already merged into `main`.","- Skip unchanged branches already recorded in `docs/branch-review-ledger.md`.","- Do not re-review every branch after ordinary coding tasks.","- If a repeated request targets unchanged reviewed branches, summarize the prior result and ask before doing another full pass.","Review routing:","- `diff-review`: Use for explicit review of the current diff, PR, or named branch. Findings first, ordered by severity, with file/line evidence.","- `bug-hunter`: Use only for the exact `bug-hunter` shortcut or an explicit defect-hunt request. Prioritize reproducible bugs and smallest proof.","- `repo-auditor`: Use for explicit repo-wide audit/refactor/dead-code/import/dependency-structure requests. Treat outputs as triage, not automatic delete lists.","- `release-readiness`: Use for explicit release, merge, PR readiness, or handoff confidence requests. Do not run provider-backed gates without confirmation.","- `branch-cleanup`: Use only when the prompt explicitly asks for branch cleanup/hygiene or branch deletion candidates. Apply `docs/branch-cleanup-guide.md` and the review ledger before inspecting branch diffs.","- `pr-ci-fix`: Confirmation-required for this repo. GitHub/GitLab API calls, PR comments, CI reruns, commits, and pushes require explicit user approval and must respect the upload/handoff rules. Exception: an explicit `Run PR` sweep carries this approval (see \"## Run PR shortcut\").","When a branch or PR review completes, record it with `npm run ledger:append -- --ref --head --scope --outcome --checks `. Never hand-write the markdown row: hand-written rows produced the mojibake, wrong-width, and duplicate records that the 2026-07-28 hygiene pass had to repair, and `see PR head` or abbreviated HEADs make a record unmatchable so the review runs again. The ledger is append-only: never edit or delete an existing record; append a correction or superseding record (`--supersede`) instead. Its `merge=ledger` driver preserves concurrent appends and drops exact duplicate rows; after a main sync without that driver installed, run `npm run ledger:dedupe`. `npm run check:branch-review-ledger` blocks conflict markers, duplicate records, mojibake, wrong-width or heading-style records, unresolvable HEADs, or loss of that merge protection.","Babysit / Run PR ledger policy: do not push a tip whose sole delta is a babysit ledger append (that marks every other open PR behind). One Run PR row per PR per sweep; on a later sweep of the same PR, pass `--supersede` rather than stacking another \"main sync\" row. After `git merge origin/main`, run `npm run ledger:dedupe` before committing when the ledger changed.","","","# Local server safety","- If the user says `run`, execute `npm run ensure` and return the printed URL.","- If the user asks for UI/frontend changes, browser QA, screenshots, mobile checks, or a local app link, run `npm run ensure` before opening or testing the app, even if the user did not say `run`.","- Never assume `localhost:3000`, `localhost:3001`, or `localhost:3002`.","- Never attach to a local server unless `/api/local-project-id` confirms it is this project.","- Do not kill or modify other projects' local servers. If the stable project port is busy, let `npm run ensure` choose the next safe project URL.","- Do not run a permanent watcher. Only start or verify the server when the current chat task needs the app or the user asks to run it.","","","# Codex Desktop worktree setup","- The Windows Codex Desktop environment setup command is `node scripts/setup-codex-worktree.mjs`."," It must work before `node_modules` exists, validate Node 24/npm 11, reuse only a complete"," byte-identical local installation, and otherwise run the locked npm install.","- Never configure Windows Desktop worktrees to run `bash scripts/setup-codex-cloud.sh`. That script"," is Linux/Cloud-only; Windows launches it through WSL outside the worktree and cannot provision the"," repository.","- `.codex/environments/environment.toml` is autogenerated and ignored. Change the Database"," environment through Codex settings, then verify the effective command with the generated file and"," `node scripts/setup-codex-worktree.mjs --dry-run`.","","","# Process hardening phases","- **Verification principle:** run the smallest check capable of detecting a plausible regression introduced by the current diff. Before starting a check, identify the failure class it covers, whether a successful check already covered that class, whether a cheaper focused check offers comparable detection, and whether the incremental confidence justifies the runtime, resource use, and repository-lock contention. If there is no plausible changed failure path, do not run the check.","| Tier | Use when | Default evidence |","| ----------------------- | ----------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------- |","| 0 — No test command | Explanation, planning, prompt writing, read-only inspection, or no repository change | No test, build, server, or baseline command |","| 1 — Static/focused | Documentation, comments, metadata, or narrow non-behavioural configuration | Relevant format, docs, syntax, generated-file, or diff check only |","| 2 — Focused behavioural | A localized helper, component, contract, or test change | Directly affected unit/DOM/contract test; add typecheck only when the edit can affect compilation or a type contract |","| 3 — Domain gate | Shared UI/routing, dependencies, security, privacy, RAG, clinical output, production configuration, or another cross-cutting domain | The smallest applicable repository/domain selector, focused journey, or contract gate |","| 4 — Broad handoff | The diff crosses multiple subsystems, cannot be bounded reliably, or the task explicitly requires PR/release confidence | One appropriate broad gate, selected rather than stacked by default |","- Do not run a broad baseline routinely before localized work, and do not select `verify:cheap` merely because a change is described as “non-trivial.” Use `npm run verify:cheap` once when cross-module risk warrants a broad offline gate. Use `npm run verify:pr-local` when a change is ready for PR handoff: it now classifies the changed paths, runs focused documentation/workflow contracts for recognised low-risk scopes, and fails closed to lint, typecheck, the full unit suite, RAG fixture validation, and relevant build/domain gates for executable or unknown scope. If the diff has not changed, do not run `verify:cheap` first merely to repeat the same coverage.","- Do not stack focused tests, full tests, typecheck, lint, build, and browser checks unless each catches a distinct plausible regression. Do not rerun an unchanged successful gate. A deliberately skipped low-yield broad gate is not automatically verification debt; report the skipped check and its risk-based reason concisely.","- Use dry-run selectors before expensive gates when scope is uncertain. `npm run verify:pr-local -- --dry-run --files ` inspects PR-local selection without running commands. The broader `--extended` plan is dry-run only unless explicit approval is reflected by `ALLOW_EXTENDED_PR_LOCAL=true`.","- CI uses the same fail-closed scope model: recognised docs and workflow/policy-only changes run focused contracts; executable product/test/config, dependency, database, container, RAG, security-sensitive, mixed, or unknown paths retain the applicable heavy jobs. Do not broaden a path trigger or restore an always-on heavy job without evidence that the focused route misses a realistic failure class. Scheduled drift/release checks and the always-reporting `PR required` aggregate remain safety backstops.","- Let the repository run coordinator control cross-worktree verification. It permits at most two focused Vitest/read-only typecheck leases from different worktrees; full Vitest, coverage, lint, build, Playwright, and live-provider tests remain exclusive. Do not install while a repository test, build, lint, typecheck, or server command is active. Avoid aggressive short-interval polling, and do not repeat an unchanged full gate after it passes.","- For UI, frontend, browser, routing, styling, reduced-motion, or forced-colors behaviour changes, run `npm run ensure` before browser work and prove the changed owner or journey first. Use `npm run verify:ui` when shared UI foundations changed or PR/handoff policy requires the complete Chromium gate, not as an automatic addition after focused proof. For phone-chrome changes, run `npm run verify:phone-chrome` first: it checks installed-lock parity, selects the affected browser/PWA owners and exact journeys, and adds `verify:ui` last only when shared chrome foundations make the broad gate necessary. Inspect uncertain scope with `-- --dry-run`. Chromium evidence does not close physical Safari or installed-PWA acceptance gaps.","- **Run `npm run format` and commit the result before every push.** Formatting is in neither `npm run test`, `npm run typecheck`, nor `npm run lint`, so the ordinary loop can report green while the changed-file CI check or exact-commit pre-push guard fails. Three CI failures on 2026-07-30 came from exactly this (two of them on `ci/circleci: verify`, since removed from the repo by PR #1412). Two traps beyond simply running it:"," - **Formatting without committing does nothing for the push.** A push sends commits, not your working tree, so formatting after committing leaves the unformatted blob on the branch. Amend or add a follow-up commit."," - **A per-file check is not the repository-wide check.** `prettier --check ` on the source file you edited passes while a doc or ledger edit in the same push fails; that was the missed file twice out of three."," `.githooks/pre-push` carries the guard, and since 2026-07-30 it checks the pushed commit where CI checks it: `guard-push.mjs` puts the pushed SHA in a temporary `git worktree` with an exact-lock `node_modules` linked in and runs Prettier there, so neither the working tree's contents nor its prettier config can vouch for the commit, and a dynamic `prettier.config.*` still loads. An isolated worktree without local dependencies may reuse Prettier only from a registered worktree with a byte-identical lockfile and matching installed Prettier version; if none exists, the guard blocks with the explicit `npm ci --include=dev` remediation instead of skipping formatting. A push that changes prettier policy (`.prettierrc*`, `.prettierignore`, `.editorconfig`, or a `package.json` carrying a `prettier` field) escalates to a whole-tree `prettier --check .`, because a policy change alters the verdict for files the push never touched. But `core.hooksPath` is set by this checkout's `npm install`, so an agent pushing from its own environment bypasses the hook entirely and only CI catches the break — which is why the rule above is still a rule.","- For explicit release confidence, use `npm run verify:release` once; this includes the full Playwright project set and retains all provider-approval requirements. Ordinary local completion or PR handoff does not by itself authorize or require this release gate.","- For clinical ingestion, answer generation, source governance, privacy, production-readiness, or environment changes, run the smallest relevant domain check plus `npm run check:production-readiness`.","- For pull requests that touch ingestion, answer generation, search/ranking, source rendering, document access, privacy, production env, or clinical output, complete the clinical governance preflight in `.github/pull_request_template.md`.","- Track known verification debts and staged process improvements in `docs/process-hardening.md` instead of relying on chat-only memory.","","","# Page and button wiring","Interactive controls and routes follow conventions the codebase already holds to. Before adding","or moving a button, link, or route, read `docs/wiring-conventions.md`. A control that advertises an","action must perform one; a page that ships must be reachable.","- **Buttons.** Every interactive `