Observe built-in cognitive usage

DEV-000095 passed CI.

adapters/postgres/capability_repository.go

@@ -322,18 +322,18 @@ func (r *CapabilityRepository) LoadActiveBinding(ctx context.Context, capability
 
 func (r *CapabilityRepository) SaveProviderInstance(ctx context.Context, value capability.ProviderInstance) error {
 	_, err := r.pool.Exec(ctx, `INSERT INTO capability.cognitive_provider_instances
-		(provider_instance_id,revision,provider_kind,endpoint_ref,credential_ref,enabled,qualification,health,observed_at_unix_millis)
-		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9) ON CONFLICT DO NOTHING`, value.ID, value.Revision, value.Kind,
-		value.EndpointRef, value.CredentialRef, value.Enabled, value.Qualification, value.Health, value.ObservedAtUnixMillis)
+		(provider_instance_id,revision,provider_kind,endpoint_ref,credential_ref,enabled,qualification,health,observed_at_unix_millis,billing_mode,auth_mode,input_cost_micros,output_cost_micros,request_cost_micros)
+		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14) ON CONFLICT DO NOTHING`, value.ID, value.Revision, value.Kind,
+		value.EndpointRef, value.CredentialRef, value.Enabled, value.Qualification, value.Health, value.ObservedAtUnixMillis, value.BillingMode, value.AuthMode, value.InputCostMicros, value.OutputCostMicros, value.RequestCostMicros)
 	return err
 }
 
 func (r *CapabilityRepository) SaveModelDescriptor(ctx context.Context, value capability.ModelDescriptor) error {
 	_, err := r.pool.Exec(ctx, `INSERT INTO capability.cognitive_model_descriptors
-		(model_descriptor_id,revision,provider_instance_id,provider_model_id,fingerprint,max_context_bytes,modalities,capabilities,qualification,health,observed_at_unix_millis)
-		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11) ON CONFLICT DO NOTHING`, value.ID, value.Revision,
+		(model_descriptor_id,revision,provider_instance_id,provider_model_id,fingerprint,max_context_bytes,modalities,capabilities,qualification,health,observed_at_unix_millis,intelligence_score_millis)
+		VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12) ON CONFLICT DO NOTHING`, value.ID, value.Revision,
 		value.ProviderInstanceID, value.ProviderModelID, value.Fingerprint, value.MaxContextBytes, value.Modalities,
-		value.Capabilities, value.Qualification, value.Health, value.ObservedAtUnixMillis)
+		value.Capabilities, value.Qualification, value.Health, value.ObservedAtUnixMillis, value.IntelligenceScoreMillis)
 	return err
 }
 
@@ -349,8 +349,8 @@ func (r *CapabilityRepository) SaveCognitiveBinding(ctx context.Context, value c
 func (r *CapabilityRepository) LoadCognitiveCandidates(ctx context.Context, capabilityID capability.CapabilityID, owner identity.PrincipalID) ([]capability.ResolvedCognitiveBinding, error) {
 	rows, err := r.pool.Query(ctx, `SELECT
 		b.binding_id,b.revision,b.capability_id,b.owner_principal_id,b.provider_instance_id,b.provider_revision,b.model_descriptor_id,b.model_revision,b.data_policy,b.qualification,b.activation,b.health,b.limit_policy_ref,
-		p.provider_instance_id,p.revision,p.provider_kind,p.endpoint_ref,COALESCE(p.credential_ref,''),p.enabled,p.qualification,COALESCE(ph.health,p.health),GREATEST(p.observed_at_unix_millis,COALESCE(ph.observed_at_unix_millis,0)),
-		m.model_descriptor_id,m.revision,m.provider_instance_id,m.provider_model_id,m.fingerprint,m.max_context_bytes,m.modalities,m.capabilities,m.qualification,COALESCE(ma.health,m.health),GREATEST(m.observed_at_unix_millis,COALESCE(ma.observed_at_unix_millis,0))
+		p.provider_instance_id,p.revision,p.provider_kind,p.endpoint_ref,COALESCE(p.credential_ref,''),p.enabled,p.qualification,COALESCE(ph.health,p.health),GREATEST(p.observed_at_unix_millis,COALESCE(ph.observed_at_unix_millis,0)),p.billing_mode,p.auth_mode,p.input_cost_micros,p.output_cost_micros,p.request_cost_micros,
+		m.model_descriptor_id,m.revision,m.provider_instance_id,m.provider_model_id,m.fingerprint,m.max_context_bytes,m.modalities,m.capabilities,m.qualification,COALESCE(ma.health,m.health),GREATEST(m.observed_at_unix_millis,COALESCE(ma.observed_at_unix_millis,0)),m.intelligence_score_millis
 		FROM capability.cognitive_binding_revision_heads bh
 		JOIN capability.cognitive_bindings b ON b.binding_id=bh.binding_id AND b.revision=bh.revision
 		JOIN capability.cognitive_provider_instances p ON p.provider_instance_id=b.provider_instance_id AND p.revision=b.provider_revision
@@ -366,8 +366,8 @@ func (r *CapabilityRepository) LoadCognitiveCandidates(ctx context.Context, capa
 	for rows.Next() {
 		var value capability.ResolvedCognitiveBinding
 		err = rows.Scan(&value.Binding.ID, &value.Binding.Revision, &value.Binding.CapabilityID, &value.Binding.OwnerPrincipalID, &value.Binding.ProviderInstanceID, &value.Binding.ProviderRevision, &value.Binding.ModelDescriptorID, &value.Binding.ModelRevision, &value.Binding.DataPolicy, &value.Binding.Qualification, &value.Binding.Activation, &value.Binding.Health, &value.Binding.LimitPolicyRef,
-			&value.Provider.ID, &value.Provider.Revision, &value.Provider.Kind, &value.Provider.EndpointRef, &value.Provider.CredentialRef, &value.Provider.Enabled, &value.Provider.Qualification, &value.Provider.Health, &value.Provider.ObservedAtUnixMillis,
-			&value.Model.ID, &value.Model.Revision, &value.Model.ProviderInstanceID, &value.Model.ProviderModelID, &value.Model.Fingerprint, &value.Model.MaxContextBytes, &value.Model.Modalities, &value.Model.Capabilities, &value.Model.Qualification, &value.Model.Health, &value.Model.ObservedAtUnixMillis)
+			&value.Provider.ID, &value.Provider.Revision, &value.Provider.Kind, &value.Provider.EndpointRef, &value.Provider.CredentialRef, &value.Provider.Enabled, &value.Provider.Qualification, &value.Provider.Health, &value.Provider.ObservedAtUnixMillis, &value.Provider.BillingMode, &value.Provider.AuthMode, &value.Provider.InputCostMicros, &value.Provider.OutputCostMicros, &value.Provider.RequestCostMicros,
+			&value.Model.ID, &value.Model.Revision, &value.Model.ProviderInstanceID, &value.Model.ProviderModelID, &value.Model.Fingerprint, &value.Model.MaxContextBytes, &value.Model.Modalities, &value.Model.Capabilities, &value.Model.Qualification, &value.Model.Health, &value.Model.ObservedAtUnixMillis, &value.Model.IntelligenceScoreMillis)
 		if err != nil {
 			return nil, err
 		}
@@ -414,7 +414,7 @@ func (r *CapabilityRepository) SaveCognitiveDiscovery(ctx context.Context, value
 		return err
 	}
 	defer func() { _ = tx.Rollback(ctx) }()
-	_, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_provider_instances (provider_instance_id,revision,provider_kind,endpoint_ref,credential_ref,enabled,qualification,health,observed_at_unix_millis) VALUES ($1,$2,$3,$4,NULLIF($5,''),$6,$7,$8,$9) ON CONFLICT DO NOTHING`, value.Provider.ID, value.Provider.Revision, value.Provider.Kind, value.Provider.EndpointRef, value.Provider.CredentialRef, value.Provider.Enabled, value.Provider.Qualification, value.Provider.Health, value.Provider.ObservedAtUnixMillis)
+	_, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_provider_instances (provider_instance_id,revision,provider_kind,endpoint_ref,credential_ref,enabled,qualification,health,observed_at_unix_millis,billing_mode,auth_mode,input_cost_micros,output_cost_micros,request_cost_micros) VALUES ($1,$2,$3,$4,NULLIF($5,''),$6,$7,$8,$9,$10,$11,$12,$13,$14) ON CONFLICT (provider_instance_id,revision) DO UPDATE SET health=EXCLUDED.health,observed_at_unix_millis=EXCLUDED.observed_at_unix_millis,billing_mode=EXCLUDED.billing_mode,auth_mode=EXCLUDED.auth_mode,input_cost_micros=EXCLUDED.input_cost_micros,output_cost_micros=EXCLUDED.output_cost_micros,request_cost_micros=EXCLUDED.request_cost_micros WHERE capability.cognitive_provider_instances.observed_at_unix_millis <= EXCLUDED.observed_at_unix_millis`, value.Provider.ID, value.Provider.Revision, value.Provider.Kind, value.Provider.EndpointRef, value.Provider.CredentialRef, value.Provider.Enabled, value.Provider.Qualification, value.Provider.Health, value.Provider.ObservedAtUnixMillis, value.Provider.BillingMode, value.Provider.AuthMode, value.Provider.InputCostMicros, value.Provider.OutputCostMicros, value.Provider.RequestCostMicros)
 	if err != nil {
 		return err
 	}
@@ -423,7 +423,7 @@ func (r *CapabilityRepository) SaveCognitiveDiscovery(ctx context.Context, value
 		return err
 	}
 	for index, model := range value.Models {
-		_, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_model_descriptors (model_descriptor_id,revision,provider_instance_id,provider_model_id,fingerprint,max_context_bytes,modalities,capabilities,qualification,health,observed_at_unix_millis) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11) ON CONFLICT DO NOTHING`, model.ID, model.Revision, model.ProviderInstanceID, model.ProviderModelID, model.Fingerprint, model.MaxContextBytes, model.Modalities, model.Capabilities, model.Qualification, model.Health, model.ObservedAtUnixMillis)
+		_, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_model_descriptors (model_descriptor_id,revision,provider_instance_id,provider_model_id,fingerprint,max_context_bytes,modalities,capabilities,qualification,health,observed_at_unix_millis,intelligence_score_millis) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12) ON CONFLICT (model_descriptor_id,revision) DO UPDATE SET health=EXCLUDED.health,observed_at_unix_millis=EXCLUDED.observed_at_unix_millis,intelligence_score_millis=EXCLUDED.intelligence_score_millis WHERE capability.cognitive_model_descriptors.observed_at_unix_millis <= EXCLUDED.observed_at_unix_millis`, model.ID, model.Revision, model.ProviderInstanceID, model.ProviderModelID, model.Fingerprint, model.MaxContextBytes, model.Modalities, model.Capabilities, model.Qualification, model.Health, model.ObservedAtUnixMillis, model.IntelligenceScoreMillis)
 		if err != nil {
 			return err
 		}
@@ -433,7 +433,11 @@ func (r *CapabilityRepository) SaveCognitiveDiscovery(ctx context.Context, value
 			return err
 		}
 		binding := value.Bindings[index]
-		_, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_bindings (binding_id,revision,capability_id,owner_principal_id,provider_instance_id,provider_revision,model_descriptor_id,model_revision,data_policy,qualification,activation,health,limit_policy_ref) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13) ON CONFLICT DO NOTHING`, binding.ID, binding.Revision, binding.CapabilityID, binding.OwnerPrincipalID, binding.ProviderInstanceID, binding.ProviderRevision, binding.ModelDescriptorID, binding.ModelRevision, binding.DataPolicy, binding.Qualification, binding.Activation, binding.Health, binding.LimitPolicyRef)
+		_, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_bindings (binding_id,revision,capability_id,owner_principal_id,provider_instance_id,provider_revision,model_descriptor_id,model_revision,data_policy,qualification,activation,health,limit_policy_ref) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13) ON CONFLICT (binding_id,revision) DO UPDATE SET health=EXCLUDED.health WHERE capability.cognitive_bindings.health <> EXCLUDED.health`, binding.ID, binding.Revision, binding.CapabilityID, binding.OwnerPrincipalID, binding.ProviderInstanceID, binding.ProviderRevision, binding.ModelDescriptorID, binding.ModelRevision, binding.DataPolicy, binding.Qualification, binding.Activation, binding.Health, binding.LimitPolicyRef)
+		if err != nil {
+			return err
+		}
+		_, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_binding_revision_heads (binding_id,revision) VALUES ($1,$2) ON CONFLICT DO NOTHING`, binding.ID, binding.Revision)
 		if err != nil {
 			return err
 		}
@@ -453,10 +457,10 @@ func (r *CapabilityRepository) SaveCognitiveCanaryPromotion(ctx context.Context,
 	}
 	defer func() { _ = tx.Rollback(ctx) }()
 	p, m, b, e := value.Provider, value.Model, value.Binding, value.Evaluation
-	if _, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_provider_instances (provider_instance_id,revision,provider_kind,endpoint_ref,credential_ref,enabled,qualification,health,observed_at_unix_millis) VALUES ($1,$2,$3,$4,NULLIF($5,''),$6,$7,$8,$9) ON CONFLICT DO NOTHING`, p.ID, p.Revision, p.Kind, p.EndpointRef, p.CredentialRef, p.Enabled, p.Qualification, p.Health, p.ObservedAtUnixMillis); err != nil {
+	if _, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_provider_instances (provider_instance_id,revision,provider_kind,endpoint_ref,credential_ref,enabled,qualification,health,observed_at_unix_millis,billing_mode,auth_mode,input_cost_micros,output_cost_micros,request_cost_micros) VALUES ($1,$2,$3,$4,NULLIF($5,''),$6,$7,$8,$9,$10,$11,$12,$13,$14) ON CONFLICT DO NOTHING`, p.ID, p.Revision, p.Kind, p.EndpointRef, p.CredentialRef, p.Enabled, p.Qualification, p.Health, p.ObservedAtUnixMillis, p.BillingMode, p.AuthMode, p.InputCostMicros, p.OutputCostMicros, p.RequestCostMicros); err != nil {
 		return err
 	}
-	if _, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_model_descriptors (model_descriptor_id,revision,provider_instance_id,provider_model_id,fingerprint,max_context_bytes,modalities,capabilities,qualification,health,observed_at_unix_millis) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11) ON CONFLICT DO NOTHING`, m.ID, m.Revision, m.ProviderInstanceID, m.ProviderModelID, m.Fingerprint, m.MaxContextBytes, m.Modalities, m.Capabilities, m.Qualification, m.Health, m.ObservedAtUnixMillis); err != nil {
+	if _, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_model_descriptors (model_descriptor_id,revision,provider_instance_id,provider_model_id,fingerprint,max_context_bytes,modalities,capabilities,qualification,health,observed_at_unix_millis,intelligence_score_millis) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12) ON CONFLICT DO NOTHING`, m.ID, m.Revision, m.ProviderInstanceID, m.ProviderModelID, m.Fingerprint, m.MaxContextBytes, m.Modalities, m.Capabilities, m.Qualification, m.Health, m.ObservedAtUnixMillis, m.IntelligenceScoreMillis); err != nil {
 		return err
 	}
 	if _, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_bindings (binding_id,revision,capability_id,owner_principal_id,provider_instance_id,provider_revision,model_descriptor_id,model_revision,data_policy,qualification,activation,health,limit_policy_ref) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13) ON CONFLICT DO NOTHING`, b.ID, b.Revision, b.CapabilityID, b.OwnerPrincipalID, b.ProviderInstanceID, b.ProviderRevision, b.ModelDescriptorID, b.ModelRevision, b.DataPolicy, b.Qualification, b.Activation, b.Health, b.LimitPolicyRef); err != nil {
@@ -475,6 +479,32 @@ func (r *CapabilityRepository) SaveCognitiveCanaryPromotion(ctx context.Context,
 	return tx.Commit(ctx)
 }
 
+func (r *CapabilityRepository) SaveCognitiveActivationPromotion(ctx context.Context, value capability.CognitiveActivationPromotion) error {
+	tx, err := r.pool.Begin(ctx)
+	if err != nil {
+		return err
+	}
+	defer func() { _ = tx.Rollback(ctx) }()
+	b, e := value.Binding, value.Evaluation
+	if _, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_bindings (binding_id,revision,capability_id,owner_principal_id,provider_instance_id,provider_revision,model_descriptor_id,model_revision,data_policy,qualification,activation,health,limit_policy_ref) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13) ON CONFLICT DO NOTHING`, b.ID, b.Revision, b.CapabilityID, b.OwnerPrincipalID, b.ProviderInstanceID, b.ProviderRevision, b.ModelDescriptorID, b.ModelRevision, b.DataPolicy, b.Qualification, b.Activation, b.Health, b.LimitPolicyRef); err != nil {
+		return err
+	}
+	if _, err = tx.Exec(ctx, `INSERT INTO capability.cognitive_evaluated_capabilities (evaluation_id,binding_id,binding_revision,capability_id,result,quality_score_millis,critical_failure_millis,benchmark_version,artifact_id,observed_at_unix_millis) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10) ON CONFLICT DO NOTHING`, e.ID, e.BindingID, e.BindingRevision, e.CapabilityID, e.Result, e.QualityScoreMillis, e.CriticalFailureMillis, e.BenchmarkVersion, e.ArtifactID, e.ObservedAtUnixMillis); err != nil {
+		return err
+	}
+	if _, err = tx.Exec(ctx, `UPDATE capability.cognitive_bindings SET activation='DEPRECATED' WHERE capability_id=$1 AND owner_principal_id=$2 AND activation='ACTIVE' AND NOT (binding_id=$3 AND revision=$4)`, b.CapabilityID, b.OwnerPrincipalID, b.ID, b.Revision); err != nil {
+		return err
+	}
+	result, err := tx.Exec(ctx, `UPDATE capability.cognitive_binding_revision_heads SET revision=$1,updated_at=CURRENT_TIMESTAMP WHERE binding_id=$2 AND revision=$3`, b.Revision, b.ID, value.ExpectedBindingRevision)
+	if err != nil {
+		return err
+	}
+	if result.RowsAffected() != 1 {
+		return ErrCapabilityBindingConflict
+	}
+	return tx.Commit(ctx)
+}
+
 func (r *CapabilityRepository) SavePerformanceEvidence(ctx context.Context, value capability.PerformanceEvidence) error {
 	_, err := r.pool.Exec(ctx, `INSERT INTO capability.cognitive_performance_evidence (evidence_id,binding_id,binding_revision,model_descriptor_id,model_revision,hardware_profile,runtime,quantization,context_units,thinking_enabled,generation_tps_millis,prompt_tps_millis,ttft_micros,latency_micros,memory_bytes,reliability_millis,benchmark_version,artifact_id,observed_at_unix_millis) VALUES ($1,$2,$3,$4,$5,$6,$7,$8,$9,$10,$11,$12,$13,$14,$15,$16,$17,$18,$19) ON CONFLICT DO NOTHING`, value.ID, value.BindingID, value.BindingRevision, value.ModelDescriptorID, value.ModelRevision, value.HardwareProfile, value.Runtime, value.Quantization, value.ContextUnits, value.ThinkingEnabled, value.GenerationTPSMillis, value.PromptTPSMillis, value.TTFTMicros, value.LatencyMicros, value.MemoryBytes, value.ReliabilityMillis, value.BenchmarkVersion, value.ArtifactID, value.ObservedAtUnixMillis)
 	return err

architecture/adrs/ADR-0018-external-audit-exploration-mode.md

@@ -0,0 +1,52 @@
+# ADR-0018 — External audit and exploration mode
+
+Status: Accepted
+Date: 2026-08-22
+Accepted under: ARCH-000012
+
+## Decision
+
+1. Domovoy may operate in a test-only `Exploration` profile when an ordinary
+   local conversation or cognitive-provider recovery request is received.
+   Exploration permits contextual reasoning, allowlisted read-only diagnostics,
+   hypothesis generation, alternatives and a reversible next-step proposal.
+2. Exploration is not an authority grant.  It does not grant access to raw
+   secrets, executor credentials, a provider's unapproved data-egress path, or
+   direct mutation of canonical or external state.
+3. Audit is an independently deployed, rebuildable projection of compact,
+   redacted action/proposal events.  It is not a canonical owner and never
+   executes actions.
+4. An attributed external audit verdict is an Observation.  A later Commit
+   contract may require a current `ALLOW` Observation as an additional
+   precondition for explicitly configured action classes.  `REVIEW_REQUIRED`,
+   `STOP`, missing or stale review do not authorize execution.
+5. Loss of the audit deployment does not remove exploration or approved
+   read-only diagnostics.  A review-governed external action remains a pending
+   proposal; it is neither executed nor silently converted to failure.
+6. Audit payloads exclude raw credentials, secrets and private content.  They
+   carry stable identifiers/references, classifications, hashes and redacted
+   summaries only.
+7. Initial delivery is staged: first semantic local dialogue and provider
+   recovery, then capability-use telemetry, then audit-only projection.  No
+   existing executor action is review-governed until a later task names its
+   class and recovery behavior.
+
+## Consequences
+
+- Local cognition remains useful during provider loss and can seek a recovery
+  plan instead of returning canned availability text.
+- Higher-level external scrutiny is possible without creating a competing
+  executor or a second source of semantic truth.
+- Commit/Executor, semantic ownership, append-only evidence and unknown
+  outcome semantics remain invariants, so external review has attributable
+  evidence to inspect.
+- The first implementation task may change local semantic routing and
+  capability telemetry only; audit projection and Commit gating need their
+  own explicit contracts and failure/rebuild tests.
+
+## Revisit triggers
+
+- The first external audit projection is deployed.
+- A concrete external action class is proposed for review gating.
+- Audit needs a data class beyond redacted references.
+- The Exploration profile needs a new privilege or canonical owner.

architecture/adrs/README.md

@@ -4,4 +4,4 @@ Accepted architecture decisions live here. Normal implementation tasks may read
 
 Use `ADR-XXXX-title.md` with: problem, evidence, alternatives, decision, rationale, consequences, validity conditions, revisit triggers, migration/rollback, status.
 
-Current decisions include `ADR-0006-creator-advisory-boundary.md`, the fail-closed provider-neutral advisory boundary, and `ADR-0007-openai-advisory-binding.md`, the accepted but not yet production-enabled OpenAI binding class.
+Current decisions include `ADR-0006-creator-advisory-boundary.md`, the fail-closed provider-neutral advisory boundary; `ADR-0007-openai-advisory-binding.md`, the accepted but not yet production-enabled OpenAI binding class; and `ADR-0018-external-audit-exploration-mode.md`, the staged external-audit and test Exploration profile.

cmd/cognitive-worker/discovery.go

@@ -23,7 +23,7 @@ func (s discoveryService) handler(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 	discovered, probe := registration.Discovery.Discover(r.Context())
-	snapshot := capability.CognitiveDiscoverySnapshot{ProviderInstanceID: registration.ProviderInstanceID, ProviderKind: registration.Kind, EndpointRef: registration.EndpointRef, CredentialRef: registration.CredentialRef, Enabled: true, OwnerPrincipalID: s.owner, CapabilityID: creatorAdvisoryCapabilityID, DataPolicy: capability.DataPolicyLocalOnly, LimitPolicyRef: "creator-advisory-local-v1", Health: probe.Health, FailureClass: capability.CognitiveFailureType(probe.Failure), ObservedAtUnixMillis: s.now().UnixMilli()}
+	snapshot := capability.CognitiveDiscoverySnapshot{ProviderInstanceID: registration.ProviderInstanceID, ProviderKind: registration.Kind, EndpointRef: registration.EndpointRef, CredentialRef: registration.CredentialRef, AuthMode: registration.AuthMode, BillingMode: registration.BillingMode, Enabled: true, OwnerPrincipalID: s.owner, CapabilityID: creatorAdvisoryCapabilityID, DataPolicy: registration.DataPolicy, LimitPolicyRef: "creator-advisory-local-v1", Health: probe.Health, FailureClass: capability.CognitiveFailureType(probe.Failure), ObservedAtUnixMillis: s.now().UnixMilli()}
 	for _, model := range discovered {
 		snapshot.Models = append(snapshot.Models, capability.DiscoveredModelSnapshot{ProviderModelID: model.ProviderModelID, Fingerprint: model.Fingerprint, MaxContextBytes: model.MaxContextBytes, Modalities: model.Modalities, Capabilities: model.Capabilities, Installed: capability.OperationalYes, Loaded: capability.OperationalNotObserved, Invokable: capability.OperationalNotObserved})
 	}

cmd/cognitive-worker/gateway.go

@@ -8,11 +8,13 @@ import (
 	"io"
 	"net/http"
 	"net/url"
+	"strings"
 	"time"
 
 	"git.cin.su/m/Assistant/adapters/models"
 	"git.cin.su/m/Assistant/contracts/capability"
 	"git.cin.su/m/Assistant/contracts/cognitive"
+	"git.cin.su/m/Assistant/contracts/interaction"
 	"git.cin.su/m/Assistant/platform/ids"
 )
 
@@ -29,6 +31,9 @@ type providerRegistration struct {
 	Kind               capability.ProviderKind
 	EndpointRef        capability.EndpointBindingRef
 	CredentialRef      capability.CredentialRef
+	AuthMode           capability.AuthMode
+	BillingMode        capability.BillingMode
+	DataPolicy         capability.DataPolicy
 	Provider           advisoryProvider
 	Discovery          models.LocalProvider
 }
@@ -36,6 +41,8 @@ type providerRegistration struct {
 type cognitiveGateway struct {
 	resolver             bindingResolver
 	providers            map[capability.ProviderKind][]providerRegistration
+	builtinLocal         *providerRegistration
+	externalRecovery     []providerRegistration
 	now                  func() time.Time
 	allowCanary          bool
 	canaryMaxOutputBytes int
@@ -71,10 +78,10 @@ func (g cognitiveGateway) advisoryHandler(w http.ResponseWriter, r *http.Request
 	if g.allowCanary && g.canaryMaxOutputBytes > 0 && maxOutputBytes > g.canaryMaxOutputBytes {
 		maxOutputBytes = g.canaryMaxOutputBytes
 	}
-	requirement := capability.CognitiveRequirement{CapabilityID: creatorAdvisoryCapabilityID, OwnerPrincipalID: request.PrincipalID, DataPolicy: request.DataPolicy, RequiredModalities: []capability.ModelModality{capability.ModalityText}, RequiredCapabilities: []capability.ModelCapability{capability.CapabilityAdvisory}, AllowCanary: g.allowCanary, InputBytes: int64(len(request.Message)), MaxOutputBytes: int64(maxOutputBytes)}
+	requirement := capability.CognitiveRequirement{CapabilityID: creatorAdvisoryCapabilityID, OwnerPrincipalID: request.PrincipalID, DataPolicy: request.DataPolicy, RequiredModalities: []capability.ModelModality{capability.ModalityText}, RequiredCapabilities: []capability.ModelCapability{capability.CapabilityAdvisory}, AllowCanary: g.allowCanary, InputBytes: int64(len(request.Message)), MaxOutputBytes: int64(maxOutputBytes), Objective: selectionObjectiveForMeaning(request.Meaning, request.Message)}
 	selected, err := g.resolver.Resolve(r.Context(), requirement)
 	if err != nil {
-		writeGatewayResponse(w, cognitive.GatewayAdvisoryResponse{Version: request.Version, RequestID: request.RequestID, FinishReason: cognitive.FinishProviderUnavailable})
+		writeGatewayResponse(w, g.invokeBuiltinAdvisory(r.Context(), request, maxOutputBytes))
 		return
 	}
 	if selected.Binding.DataPolicy != capability.DataPolicyLocalOnly && !request.EgressAcknowledged {
@@ -83,7 +90,7 @@ func (g cognitiveGateway) advisoryHandler(w http.ResponseWriter, r *http.Request
 	}
 	provider := g.provider(selected)
 	if provider == nil {
-		writeGatewayResponse(w, cognitive.GatewayAdvisoryResponse{Version: request.Version, RequestID: request.RequestID, FinishReason: cognitive.FinishProviderUnavailable})
+		writeGatewayResponse(w, g.invokeBuiltinAdvisory(r.Context(), request, maxOutputBytes))
 		return
 	}
 	invocation := cognitive.AdvisoryRequest{Version: request.Version, RequestID: request.RequestID, ActorID: request.ActorID, PrincipalID: request.PrincipalID, ScopeID: request.ScopeID, Message: request.Message, Context: request.Context, Locale: request.Locale, MaxOutputBytes: maxOutputBytes, ProviderBindingID: selected.Binding.ID, ProviderBindingRevision: selected.Binding.Revision, ProviderInstanceID: selected.Provider.ID, ModelDescriptorID: selected.Model.ID, ProviderModelID: selected.Model.ProviderModelID}
@@ -110,9 +117,118 @@ func (g cognitiveGateway) advisoryHandler(w http.ResponseWriter, r *http.Request
 			response = fallbackResponse
 		}
 	}
+	if response.FinishReason != cognitive.FinishCompleted && fallbackEligible(response.FinishReason) {
+		writeGatewayResponse(w, g.invokeBuiltinAdvisory(r.Context(), request, maxOutputBytes))
+		return
+	}
 	writeGatewayResponse(w, cognitive.GatewayAdvisoryResponse{Version: response.Version, RequestID: response.RequestID, AdvisoryText: response.AdvisoryText, ReferencedExcerptIDs: response.ReferencedExcerptIDs, FinishReason: response.FinishReason, Usage: response.Usage})
 }
 
+func selectionObjectiveForMessage(message string) capability.SelectionObjective {
+	lower := strings.ToLower(message)
+	if strings.Contains(lower, "дешев") || strings.Contains(lower, "бесплат") || strings.Contains(lower, "эконом") || strings.Contains(lower, "cost") || strings.Contains(lower, "cheap") {
+		return capability.SelectionEconomy
+	}
+	if strings.Contains(lower, "быстр") || strings.Contains(lower, "срочно") || strings.Contains(lower, "статус") || strings.Contains(lower, "quick") || strings.Contains(lower, "fast") {
+		return capability.SelectionSpeed
+	}
+	if strings.Contains(lower, "сложн") || strings.Contains(lower, "анализ") || strings.Contains(lower, "код") || strings.Contains(lower, "план") || strings.Contains(lower, "глубок") || strings.Contains(lower, "reason") || strings.Contains(lower, "code") {
+		return capability.SelectionQuality
+	}
+	return capability.SelectionBalanced
+}
+
+func selectionObjectiveForMeaning(meaning cognitive.TaskMeaning, message string) capability.SelectionObjective {
+	if meaning.CapabilityKind != "" || len(meaning.CapabilityHints) > 0 || meaning.SpeechAct != "" || meaning.RequestedOutcome != "" {
+		kinds := append([]capability.CapabilityKind{meaning.CapabilityKind}, meaning.CapabilityHints...)
+		for _, kind := range kinds {
+			switch kind {
+			case capability.CapabilityKindModifyCode, capability.CapabilityKindRunTests, capability.CapabilityKindVerifyFact, capability.CapabilityKindInspectProject, capability.CapabilityKindReadDatabase, capability.CapabilityKindQueryLogs:
+				return capability.SelectionQuality
+			case capability.CapabilityKindScheduleReminder:
+				return capability.SelectionSpeed
+			}
+		}
+		if meaning.RequestedOutcome != "" || meaning.SpeechAct == "REQUEST_TO_INVESTIGATE" || meaning.SpeechAct == "DIRECTIVE" {
+			return capability.SelectionQuality
+		}
+		if meaning.ConfidenceMillis > 0 {
+			return capability.SelectionBalanced
+		}
+	}
+	return selectionObjectiveForMessage(message)
+}
+
+func builtinAdvisory(request cognitive.GatewayAdvisoryRequest) cognitive.GatewayAdvisoryResponse {
+	text := "Я рядом и продолжаю работу во встроенном режиме Домового. Внешний когнитивный маршрут сейчас недоступен, поэтому опираюсь на уже установленный смысл сообщения и локальные возможности."
+	switch request.Meaning.InformationRequestKind {
+	case interaction.InformationRequestCognitiveModelInventory:
+		text = "Запрос понят как проверка моделей. Встроенный режим Домового доступен; я могу показать подключённые модели по назначению, качеству, скорости и стоимости. Ключи и пароли в разговор не нужны."
+	case interaction.InformationRequestCapabilityInventory:
+		text = "Запрос понят как проверка возможностей. Я могу объяснить доступные capabilities и отличить то, что уже подключено, от того, что пока является только планом или capability gap."
+	case interaction.InformationRequestCognitiveChannelStatus:
+		text = "Запрос понят как проверка когнитивного канала. Локальный режим остаётся доступен; я объясню наблюдаемое состояние и что можно сделать без ожидания внешней модели."
+	case interaction.InformationRequestCognitiveRecovery:
+		text = "Запрос понят как восстановление ИИ. Начинаю с локального маршрута: фиксирую, что недоступно, проверяю безопасные варианты восстановления и сформулирую следующий обратимый шаг."
+	default:
+		switch request.Meaning.SpeechAct {
+		case "REQUEST_TO_INVESTIGATE":
+			text = "Я принял это как исследование. Даже без внешней модели могу сформулировать гипотезы, отделить известное от неизвестного и предложить следующий проверяемый шаг."
+		case "QUESTION":
+			text = "Я отвечаю во встроенном режиме Домового. Если для полного ответа не хватает внешней модели, объясню это прямо и продолжу с тем, что можно проверить локально."
+		}
+	}
+	return cognitive.GatewayAdvisoryResponse{Version: request.Version, RequestID: request.RequestID, AdvisoryText: text, FinishReason: cognitive.FinishCompleted}
+}
+
+func (g cognitiveGateway) invokeBuiltinAdvisory(ctx context.Context, request cognitive.GatewayAdvisoryRequest, maxOutputBytes int) cognitive.GatewayAdvisoryResponse {
+	if g.builtinLocal != nil && g.builtinLocal.Provider != nil {
+		invocation := cognitive.AdvisoryRequest{Version: request.Version, RequestID: request.RequestID, ActorID: request.ActorID, PrincipalID: request.PrincipalID, ScopeID: request.ScopeID, Message: request.Message, Context: request.Context, Locale: request.Locale, MaxOutputBytes: maxOutputBytes, ProviderBindingID: "builtin-local-binding-v1", ProviderBindingRevision: 1, ProviderInstanceID: "builtin-local-lifeboat-v1", ModelDescriptorID: "builtin-local-model-v1", ProviderModelID: "domovoy-lifeboat"}
+		started := g.now()
+		response, err := g.builtinLocal.Provider.Advise(ctx, invocation)
+		if response.RequestID == "" {
+			response.RequestID = request.RequestID
+		}
+		if response.Version == "" {
+			response.Version = request.Version
+		}
+		if err != nil {
+			response = cognitive.AdvisoryResponse{Version: request.Version, RequestID: request.RequestID, ProviderBindingID: "builtin-local-binding-v1", ProviderBindingRevision: 1, FinishReason: cognitive.FinishInvalidProviderResponse}
+		}
+		g.observeBuiltin(ctx, g.builtinLocal, response, started)
+		if err == nil && response.FinishReason == cognitive.FinishCompleted && strings.TrimSpace(response.AdvisoryText) != "" {
+			return cognitive.GatewayAdvisoryResponse{Version: request.Version, RequestID: request.RequestID, AdvisoryText: response.AdvisoryText, ReferencedExcerptIDs: response.ReferencedExcerptIDs, FinishReason: response.FinishReason, Usage: response.Usage}
+		}
+	}
+	if request.EgressAcknowledged {
+		if response, ok := g.recoverExternalAdvisory(ctx, request, maxOutputBytes); ok {
+			return response
+		}
+	}
+	return builtinAdvisory(request)
+}
+
+func (g cognitiveGateway) recoverExternalAdvisory(ctx context.Context, request cognitive.GatewayAdvisoryRequest, maxOutputBytes int) (cognitive.GatewayAdvisoryResponse, bool) {
+	for _, candidate := range g.externalRecovery {
+		if candidate.Provider == nil || candidate.Discovery == nil {
+			continue
+		}
+		probeCtx, cancel := context.WithTimeout(ctx, 8*time.Second)
+		modelsFound, probe := candidate.Discovery.Discover(probeCtx)
+		cancel()
+		if probe.Health != capability.HealthAvailable || len(modelsFound) == 0 {
+			continue
+		}
+		model := modelsFound[0]
+		invocation := cognitive.AdvisoryRequest{Version: request.Version, RequestID: request.RequestID, ActorID: request.ActorID, PrincipalID: request.PrincipalID, ScopeID: request.ScopeID, Message: request.Message, Context: request.Context, Locale: request.Locale, MaxOutputBytes: maxOutputBytes, ProviderBindingID: "recovery-external-binding-v1", ProviderBindingRevision: 1, ProviderInstanceID: capability.ProviderInstanceID("recovery-" + string(candidate.ProviderInstanceID)), ModelDescriptorID: capability.ModelDescriptorID("recovery-model-" + string(model.ProviderModelID)), ProviderModelID: model.ProviderModelID}
+		response, err := candidate.Provider.Advise(ctx, invocation)
+		if err == nil && response.FinishReason == cognitive.FinishCompleted && strings.TrimSpace(response.AdvisoryText) != "" {
+			return cognitive.GatewayAdvisoryResponse{Version: request.Version, RequestID: request.RequestID, AdvisoryText: response.AdvisoryText, ReferencedExcerptIDs: response.ReferencedExcerptIDs, FinishReason: response.FinishReason, Usage: response.Usage}, true
+		}
+	}
+	return cognitive.GatewayAdvisoryResponse{}, false
+}
+
 func (g cognitiveGateway) observe(ctx context.Context, selected capability.ResolvedCognitiveBinding, response cognitive.AdvisoryResponse, started time.Time) {
 	usage := response.Usage
 	observationID, idErr := ids.New()
@@ -132,6 +248,21 @@ func (g cognitiveGateway) observe(ctx context.Context, selected capability.Resol
 	}
 }
 
+// observeBuiltin gives the always-available local provider the same evidence
+// path as a resolved binding. The identity is stable and contains references
+// only; no endpoint, credential, prompt, or response text is persisted here.
+func (g cognitiveGateway) observeBuiltin(ctx context.Context, registration *providerRegistration, response cognitive.AdvisoryResponse, started time.Time) {
+	if registration == nil {
+		return
+	}
+	selected := capability.ResolvedCognitiveBinding{
+		Binding:  capability.CognitiveBinding{ID: "builtin-local-binding-v1", Revision: 1},
+		Provider: capability.ProviderInstance{ID: "builtin-local-lifeboat-v1", Revision: 1, Kind: registration.Kind},
+		Model:    capability.ModelDescriptor{ID: "builtin-local-model-v1", Revision: 1, ProviderInstanceID: "builtin-local-lifeboat-v1", ProviderModelID: "domovoy-lifeboat"},
+	}
+	g.observe(ctx, selected, response, started)
+}
+
 func fallbackEligible(reason cognitive.FinishReason) bool {
 	switch reason {
 	case cognitive.FinishProviderUnavailable, cognitive.FinishModelUnavailable, cognitive.FinishTimeout, cognitive.FinishDegraded:

cmd/cognitive-worker/gateway_registry_test.go

@@ -12,6 +12,7 @@ import (
 
 	"git.cin.su/m/Assistant/contracts/capability"
 	"git.cin.su/m/Assistant/contracts/cognitive"
+	"git.cin.su/m/Assistant/contracts/interaction"
 )
 
 type registryStub struct {
@@ -114,7 +115,45 @@ func TestCanaryOutputLimitIsClamped(t *testing.T) {
 	}
 }
 
-func TestNoActiveBindingKeepsGatewayAvailableWithoutInvocation(t *testing.T) {
+func TestSelectionObjectiveForMessage(t *testing.T) {
+	cases := []struct {
+		message   string
+		objective capability.SelectionObjective
+	}{
+		{"Сделай глубокий анализ кода", capability.SelectionQuality},
+		{"Нужен быстрый статус", capability.SelectionSpeed},
+		{"Выбери бесплатную модель", capability.SelectionEconomy},
+		{"Помоги сформулировать ответ", capability.SelectionBalanced},
+	}
+	for _, test := range cases {
+		if actual := selectionObjectiveForMessage(test.message); actual != test.objective {
+			t.Errorf("message=%q objective=%q, want %q", test.message, actual, test.objective)
+		}
+	}
+}
+
+func TestSelectionObjectiveUsesTrustedMeaningBeforeText(t *testing.T) {
+	meaning := cognitive.TaskMeaning{CapabilityKind: capability.CapabilityKindModifyCode, SpeechAct: "DIRECTIVE"}
+	if actual := selectionObjectiveForMeaning(meaning, "сделай быстро и дёшево"); actual != capability.SelectionQuality {
+		t.Fatalf("objective=%q, want quality", actual)
+	}
+	if actual := selectionObjectiveForMeaning(cognitive.TaskMeaning{}, "сделай быстро"); actual != capability.SelectionSpeed {
+		t.Fatalf("fallback objective=%q, want speed", actual)
+	}
+}
+
+func TestSelectionObjectiveForInterpretationUsesSemanticSignals(t *testing.T) {
+	request := cognitive.GatewayInterpretationRequest{RequestedOutcome: "сравнить варианты", DeterministicApplicability: cognitive.InterpretationApplicable, DeterministicConfidence: 900, DeterministicSpeechAct: "QUESTION"}
+	if actual := selectionObjectiveForInterpretation(request); actual != capability.SelectionQuality {
+		t.Fatalf("objective=%q, want quality", actual)
+	}
+	request = cognitive.GatewayInterpretationRequest{DeterministicApplicability: cognitive.InterpretationApplicable, DeterministicConfidence: 900, DeterministicSpeechAct: "ASSERTION"}
+	if actual := selectionObjectiveForInterpretation(request); actual != capability.SelectionSpeed {
+		t.Fatalf("objective=%q, want speed", actual)
+	}
+}
+
+func TestNoActiveBindingUsesBuiltInProviderWithoutInvocation(t *testing.T) {
 	registry := &registryStub{err: errors.New("no active binding")}
 	provider := &stubAdvisoryProvider{}
 	gateway := cognitiveGateway{resolver: registry, providers: map[capability.ProviderKind][]providerRegistration{"unused": {{Provider: provider}}}, now: time.Now}
@@ -125,11 +164,63 @@ func TestNoActiveBindingKeepsGatewayAvailableWithoutInvocation(t *testing.T) {
 	if err := json.NewDecoder(response.Body).Decode(&result); err != nil {
 		t.Fatal(err)
 	}
-	if response.Code != http.StatusOK || result.FinishReason != cognitive.FinishProviderUnavailable || provider.called {
+	if response.Code != http.StatusOK || result.FinishReason != cognitive.FinishCompleted || result.AdvisoryText == "" || provider.called {
 		t.Fatalf("status=%d result=%+v provider_called=%t", response.Code, result, provider.called)
 	}
 }
 
+func TestBuiltInAdvisoryUsesTrustedInformationIntentInsteadOfMessageKeywords(t *testing.T) {
+	request := cognitive.GatewayAdvisoryRequest{Version: cognitive.CreatorAdvisoryV1, RequestID: "request-1", Message: "arbitrary text", Meaning: cognitive.TaskMeaning{InformationRequestKind: interaction.InformationRequestCognitiveRecovery}}
+	response := builtinAdvisory(request)
+	if !strings.Contains(response.AdvisoryText, "восстановление ИИ") {
+		t.Fatalf("unexpected recovery response: %q", response.AdvisoryText)
+	}
+}
+
+func TestNoActiveBindingInvokesBuiltInLocalProvider(t *testing.T) {
+	registry := &registryStub{err: errors.New("no active binding")}
+	provider := &stubAdvisoryProvider{response: cognitive.AdvisoryResponse{Version: cognitive.CreatorAdvisoryV1, RequestID: "request-1", AdvisoryText: "локальный ответ", FinishReason: cognitive.FinishCompleted}}
+	builtin := providerRegistration{ProviderInstanceID: "local-lifeboat", Kind: "openai-compatible-chat-v1", EndpointRef: "local-lifeboat-v1", Provider: provider}
+	gateway := cognitiveGateway{resolver: registry, builtinLocal: &builtin, now: time.Now}
+	request := httptest.NewRequest(http.MethodPost, "/v1/advisories", strings.NewReader(gatewayRequest()))
+	response := httptest.NewRecorder()
+	gateway.advisoryHandler(response, request)
+	if response.Code != http.StatusOK || !provider.called || !strings.Contains(response.Body.String(), "локальный ответ") {
+		t.Fatalf("status=%d provider_called=%t body=%s", response.Code, provider.called, response.Body.String())
+	}
+	if registry.observation == nil || registry.observation.BindingID != "builtin-local-binding-v1" || registry.observation.ProviderInstanceID != "builtin-local-lifeboat-v1" || registry.observation.ModelDescriptorID != "builtin-local-model-v1" || registry.observation.ResultClass != capability.CognitiveResultClass(cognitive.FinishCompleted) {
+		t.Fatalf("built-in usage observation=%+v", registry.observation)
+	}
+}
+
+func TestBuiltInProviderFailureIsObservedWithoutBlockingFallback(t *testing.T) {
+	registry := &registryStub{err: errors.New("no active binding")}
+	provider := &stubAdvisoryProvider{err: errors.New("local timeout")}
+	builtin := providerRegistration{Kind: "ollama-v1", Provider: provider}
+	gateway := cognitiveGateway{resolver: registry, builtinLocal: &builtin, now: time.Now}
+	request := httptest.NewRequest(http.MethodPost, "/v1/advisories", strings.NewReader(gatewayRequest()))
+	response := httptest.NewRecorder()
+	gateway.advisoryHandler(response, request)
+	if response.Code != http.StatusOK || registry.observation == nil {
+		t.Fatalf("status=%d observation=%+v body=%s", response.Code, registry.observation, response.Body.String())
+	}
+	if registry.observation.ResultClass != capability.CognitiveResultClass(cognitive.FinishInvalidProviderResponse) || registry.observation.FailureType != capability.CognitiveFailureType(cognitive.FinishInvalidProviderResponse) {
+		t.Fatalf("failure observation=%+v", registry.observation)
+	}
+}
+
+func TestBuiltInInterpretationIsObserved(t *testing.T) {
+	registry := &registryStub{err: errors.New("no active binding")}
+	provider := &stubAdvisoryProvider{response: cognitive.AdvisoryResponse{FinishReason: cognitive.FinishCompleted, AdvisoryText: `{"primary_speech_act":"QUESTION","secondary_speech_act":"","confidence_millis":900,"applicability":"APPLICABLE","requested_outcome":"","needs_cognition":false,"clarification":"NOT_REQUIRED","selection_reason":"local","capability_hints":[]}`}}
+	builtin := providerRegistration{Kind: "openai-compatible-chat-v1", Provider: provider}
+	gateway := cognitiveGateway{resolver: registry, builtinLocal: &builtin, now: time.Now}
+	request := cognitive.GatewayInterpretationRequest{Version: cognitive.CreatorAdvisoryV1, RequestID: "interpretation-1", ActorID: "actor-1", PrincipalID: "principal-1", ScopeID: "scope-1", Message: "что доступно", MaxOutputBytes: 4096, DeterministicSpeechAct: "QUESTION", DeterministicApplicability: cognitive.InterpretationApplicable}
+	result := gateway.interpretWithBuiltin(context.Background(), request, request.MaxOutputBytes)
+	if result.FinishReason != cognitive.FinishCompleted || registry.observation == nil || registry.observation.RequestID != "interpretation-1" {
+		t.Fatalf("result=%+v observation=%+v", result, registry.observation)
+	}
+}
+
 func TestProviderLossBetweenRoutingAndInvocationFallsBackOnce(t *testing.T) {
 	primary := gatewaySelection()
 	primary.Binding.ID = "gpu-binding"

cmd/cognitive-worker/interpretation.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"context"
 	"encoding/json"
 	"fmt"
 	"net/http"
@@ -32,15 +33,16 @@ func (g cognitiveGateway) interpretationHandler(w http.ResponseWriter, r *http.R
 		AllowCanary:          g.allowCanary,
 		InputBytes:           int64(len(request.Message)),
 		MaxOutputBytes:       int64(maxOutputBytes),
+		Objective:            selectionObjectiveForInterpretation(request),
 	}
 	selected, err := g.resolver.Resolve(r.Context(), requirement)
 	if err != nil {
-		writeInterpretationResponse(w, cognitive.GatewayInterpretationResponse{Version: request.Version, RequestID: request.RequestID, FinishReason: cognitive.FinishProviderUnavailable})
+		writeInterpretationResponse(w, g.interpretWithBuiltin(r.Context(), request, maxOutputBytes))
 		return
 	}
 	provider := g.provider(selected)
 	if provider == nil {
-		writeInterpretationResponse(w, cognitive.GatewayInterpretationResponse{Version: request.Version, RequestID: request.RequestID, FinishReason: cognitive.FinishProviderUnavailable})
+		writeInterpretationResponse(w, g.interpretWithBuiltin(r.Context(), request, maxOutputBytes))
 		return
 	}
 	invocation := cognitive.AdvisoryRequest{
@@ -76,6 +78,82 @@ func (g cognitiveGateway) interpretationHandler(w http.ResponseWriter, r *http.R
 	writeInterpretationResponse(w, cognitive.GatewayInterpretationResponse{Version: request.Version, RequestID: request.RequestID, Candidate: candidate, FinishReason: cognitive.FinishCompleted, Usage: response.Usage})
 }
 
+func (g cognitiveGateway) interpretWithBuiltin(ctx context.Context, request cognitive.GatewayInterpretationRequest, maxOutputBytes int) cognitive.GatewayInterpretationResponse {
+	if g.builtinLocal == nil || g.builtinLocal.Provider == nil {
+		return deterministicInterpretationResponse(request)
+	}
+	invocation := cognitive.AdvisoryRequest{Version: request.Version, RequestID: request.RequestID, ActorID: request.ActorID, PrincipalID: request.PrincipalID, ScopeID: request.ScopeID, Message: interpretationPrompt(request), Locale: request.Locale, MaxOutputBytes: maxOutputBytes, ProviderBindingID: "builtin-local-binding-v1", ProviderBindingRevision: 1, ProviderInstanceID: "builtin-local-lifeboat-v1", ModelDescriptorID: "builtin-local-model-v1", ProviderModelID: "domovoy-lifeboat"}
+	started := g.now()
+	response, err := g.builtinLocal.Provider.Advise(ctx, invocation)
+	if response.RequestID == "" {
+		response.RequestID = request.RequestID
+	}
+	if response.Version == "" {
+		response.Version = request.Version
+	}
+	if err != nil {
+		response = cognitive.AdvisoryResponse{Version: request.Version, RequestID: request.RequestID, ProviderBindingID: "builtin-local-binding-v1", ProviderBindingRevision: 1, FinishReason: cognitive.FinishInvalidProviderResponse}
+	}
+	g.observeBuiltin(ctx, g.builtinLocal, response, started)
+	if err != nil || response.FinishReason != cognitive.FinishCompleted {
+		return deterministicInterpretationResponse(request)
+	}
+	candidate, ok := parseInterpretationCandidate(response.AdvisoryText)
+	if !ok {
+		return deterministicInterpretationResponse(request)
+	}
+	return cognitive.GatewayInterpretationResponse{Version: request.Version, RequestID: request.RequestID, Candidate: candidate, FinishReason: cognitive.FinishCompleted, Usage: response.Usage}
+}
+
+// deterministicInterpretationResponse keeps the semantic route alive when the
+// local model cannot produce strict JSON in time. It does not invent meaning:
+// it carries forward the already-recorded deterministic interpretation and
+// leaves the advisory answer to the built-in gateway path.
+func deterministicInterpretationResponse(request cognitive.GatewayInterpretationRequest) cognitive.GatewayInterpretationResponse {
+	speechAct := request.DeterministicSpeechAct
+	if !validSpeechAct(speechAct) {
+		speechAct = "UNKNOWN"
+	}
+	applicability := request.DeterministicApplicability
+	switch applicability {
+	case cognitive.InterpretationApplicable, cognitive.InterpretationLowConfidence, cognitive.InterpretationMixedIntent, cognitive.InterpretationNeedsBroader, cognitive.InterpretationClarificationRequired:
+	default:
+		applicability = cognitive.InterpretationLowConfidence
+	}
+	confidence := request.DeterministicConfidence
+	if confidence < 0 {
+		confidence = 0
+	}
+	if confidence > 1000 {
+		confidence = 1000
+	}
+	candidate := cognitive.GatewayInterpretationCandidate{
+		PrimarySpeechAct:   speechAct,
+		SecondarySpeechAct: request.DeterministicSecondary,
+		ConfidenceMillis:   confidence,
+		Applicability:      applicability,
+		RequestedOutcome:   request.RequestedOutcome,
+		NeedsCognition:     true,
+		Clarification:      "NOT_REQUIRED",
+		SelectionReason:    "deterministic interpretation retained; built-in structured interpretation was unavailable",
+	}
+	if applicability == cognitive.InterpretationClarificationRequired {
+		candidate.NeedsCognition = false
+		candidate.Clarification = "REQUIRED"
+	}
+	return cognitive.GatewayInterpretationResponse{Version: request.Version, RequestID: request.RequestID, Candidate: candidate, FinishReason: cognitive.FinishCompleted}
+}
+
+func selectionObjectiveForInterpretation(request cognitive.GatewayInterpretationRequest) capability.SelectionObjective {
+	if request.RequestedOutcome != "" || request.DeterministicApplicability == cognitive.InterpretationNeedsBroader || request.DeterministicApplicability == cognitive.InterpretationMixedIntent || request.DeterministicApplicability == cognitive.InterpretationLowConfidence {
+		return capability.SelectionQuality
+	}
+	if request.DeterministicConfidence >= 800 && request.DeterministicSpeechAct != "QUESTION" {
+		return capability.SelectionSpeed
+	}
+	return capability.SelectionBalanced
+}
+
 func interpretationPrompt(request cognitive.GatewayInterpretationRequest) string {
 	projects := "none"
 	if len(request.ProjectNames) > 0 {

cmd/cognitive-worker/interpretation_test.go

@@ -0,0 +1,26 @@
+package main
+
+import (
+	"context"
+	"testing"
+
+	"git.cin.su/m/Assistant/contracts/cognitive"
+)
+
+func TestBuiltinInterpretationTimeoutRetainsDeterministicCandidate(t *testing.T) {
+	request := cognitive.GatewayInterpretationRequest{
+		Version:                    cognitive.CreatorAdvisoryV1,
+		RequestID:                  "request-1",
+		DeterministicSpeechAct:     "QUESTION",
+		DeterministicConfidence:    720,
+		DeterministicApplicability: cognitive.InterpretationNeedsBroader,
+		RequestedOutcome:           "вывести список настроек",
+	}
+	response := (cognitiveGateway{}).interpretWithBuiltin(context.Background(), request, 4096)
+	if response.FinishReason != cognitive.FinishCompleted {
+		t.Fatalf("finish reason=%q", response.FinishReason)
+	}
+	if response.Candidate.PrimarySpeechAct != "QUESTION" || response.Candidate.ConfidenceMillis != 720 || response.Candidate.RequestedOutcome != request.RequestedOutcome {
+		t.Fatalf("candidate did not retain deterministic meaning: %+v", response.Candidate)
+	}
+}

cmd/cognitive-worker/main.go

@@ -40,25 +40,36 @@ func main() {
 	}
 	providers := map[capability.ProviderKind][]providerRegistration{}
 	discoveries := map[string]providerRegistration{}
+	var builtinLocal *providerRegistration
+	externalRecovery := []providerRegistration{}
 	cpuAdapter, err := models.NewOpenAICompatibleLocalAdapter(envOr("LOCAL_CPU_PROVIDER_URL", "http://docker.cin.su:18082/v1"), nil)
 	if err != nil {
 		log.Fatal(err)
 	}
-	cpu := providerRegistration{ProviderInstanceID: "local-cpu-primary", Kind: "openai-compatible-chat-v1", EndpointRef: "local-cpu-primary-v1", Provider: cpuAdapter, Discovery: cpuAdapter}
+	cpu := providerRegistration{ProviderInstanceID: "local-cpu-primary", Kind: "openai-compatible-chat-v1", EndpointRef: "local-cpu-primary-v1", AuthMode: capability.AuthNone, BillingMode: capability.BillingFree, DataPolicy: capability.DataPolicyLocalOnly, Provider: cpuAdapter, Discovery: cpuAdapter}
 	providers[cpu.Kind] = append(providers[cpu.Kind], cpu)
 	discoveries["cpu"] = cpu
+	if lifeboat, enabled, lifeboatErr := newLifeboatProvider(os.Getenv("LOCAL_LIFEBOAT_PROVIDER_URL")); lifeboatErr != nil {
+		log.Fatal(lifeboatErr)
+	} else if enabled {
+		lifeboat.DataPolicy = capability.DataPolicyLocalOnly
+		providers[lifeboat.Kind] = append(providers[lifeboat.Kind], lifeboat)
+		discoveries["lifeboat"] = lifeboat
+		builtinLocal = &lifeboat
+	}
 	gpuAdapter, err := models.NewOllamaAdapter(envOr("LOCAL_GPU_PROVIDER_URL", "http://192.168.220.91:11434"), nil)
 	if err != nil {
 		log.Fatal(err)
 	}
-	gpu := providerRegistration{ProviderInstanceID: "local-gpu-opportunistic", Kind: "ollama-v1", EndpointRef: "local-gpu-opportunistic-v1", Provider: gpuAdapter, Discovery: gpuAdapter}
+	gpu := providerRegistration{ProviderInstanceID: "local-gpu-opportunistic", Kind: "ollama-v1", EndpointRef: "local-gpu-opportunistic-v1", AuthMode: capability.AuthNone, BillingMode: capability.BillingFree, DataPolicy: capability.DataPolicyExternalMessageOnly, Provider: gpuAdapter, Discovery: gpuAdapter}
 	providers[gpu.Kind] = append(providers[gpu.Kind], gpu)
 	discoveries["gpu"] = gpu
+	externalRecovery = append(externalRecovery, gpu)
 	if openAIProvider != nil {
 		kind := capability.ProviderKind(envOr("OPENAI_PROVIDER_KIND", "openai-responses-v1"))
-		providers[kind] = append(providers[kind], providerRegistration{ProviderInstanceID: "openai-bootstrap", Kind: kind, EndpointRef: capability.EndpointBindingRef(envOr("OPENAI_ENDPOINT_REF", "openai-responses-default")), CredentialRef: capability.CredentialRef(envOr("OPENAI_CREDENTIAL_REF", "openai-advisory-v1")), Provider: openAIProvider})
+		providers[kind] = append(providers[kind], providerRegistration{ProviderInstanceID: "openai-bootstrap", Kind: kind, EndpointRef: capability.EndpointBindingRef(envOr("OPENAI_ENDPOINT_REF", "openai-responses-default")), CredentialRef: capability.CredentialRef(envOr("OPENAI_CREDENTIAL_REF", "openai-advisory-v1")), AuthMode: capability.AuthKey, BillingMode: capability.BillingPerInput, DataPolicy: capability.DataPolicyExternalMessageOnly, Provider: openAIProvider})
 	}
-	gateway := cognitiveGateway{resolver: resolver, providers: providers, now: time.Now, allowCanary: os.Getenv("COGNITIVE_ALLOW_CANARY") == "true", canaryMaxOutputBytes: 4096}
+	gateway := cognitiveGateway{resolver: resolver, providers: providers, builtinLocal: builtinLocal, externalRecovery: externalRecovery, now: time.Now, allowCanary: os.Getenv("COGNITIVE_ALLOW_CANARY") == "true", canaryMaxOutputBytes: 4096}
 	mux.Handle("/healthz", health.Handler{Runtime: "cognitive-worker", SemanticGeneration: 1, ArchitectureGeneration: 1})
 	mux.HandleFunc("POST /v1/proposals/deterministic", deterministicProposal)
 	mux.HandleFunc("POST /v1/advisory-policy", gateway.policyHandler)
@@ -66,12 +77,57 @@ func main() {
 	mux.HandleFunc("POST /v1/interpretations", gateway.interpretationHandler)
 	discovery := discoveryService{resolver: resolver, providers: discoveries, owner: identity.PrincipalID(envOr("COGNITIVE_OWNER_PRINCIPAL_ID", "domovoy-creator-principal")), now: time.Now}
 	mux.HandleFunc("POST /v1/provider-discovery/{provider}", discovery.handler)
+	refreshProviderDiscoveries(resolver, discovery)
 	log.Printf("cognitive-worker listening on %s", addr)
 	if err := http.ListenAndServe(addr, mux); err != nil {
 		log.Fatal(err)
 	}
 }
 
+func refreshProviderDiscoveries(resolver bindingResolver, service discoveryService) {
+	for name := range service.providers {
+		ctx, cancel := context.WithTimeout(context.Background(), 8*time.Second)
+		registration, ok := service.providers[name]
+		if !ok || registration.Discovery == nil {
+			cancel()
+			continue
+		}
+		discovered, probe := registration.Discovery.Discover(ctx)
+		cancel()
+		snapshot := capability.CognitiveDiscoverySnapshot{
+			ProviderInstanceID:   registration.ProviderInstanceID,
+			ProviderKind:         registration.Kind,
+			EndpointRef:          registration.EndpointRef,
+			CredentialRef:        registration.CredentialRef,
+			AuthMode:             registration.AuthMode,
+			BillingMode:          registration.BillingMode,
+			Enabled:              true,
+			OwnerPrincipalID:     service.owner,
+			CapabilityID:         creatorAdvisoryCapabilityID,
+			DataPolicy:           registration.DataPolicy,
+			LimitPolicyRef:       "creator-advisory-local-v1",
+			Health:               probe.Health,
+			FailureClass:         capability.CognitiveFailureType(probe.Failure),
+			ObservedAtUnixMillis: time.Now().UnixMilli(),
+		}
+		for _, model := range discovered {
+			snapshot.Models = append(snapshot.Models, capability.DiscoveredModelSnapshot{
+				ProviderModelID: model.ProviderModelID,
+				Fingerprint:     model.Fingerprint,
+				MaxContextBytes: model.MaxContextBytes,
+				Modalities:      model.Modalities,
+				Capabilities:    model.Capabilities,
+				Installed:       capability.OperationalYes,
+				Loaded:          capability.OperationalNotObserved,
+				Invokable:       capability.OperationalNotObserved,
+			})
+		}
+		if _, err := resolver.RegisterDiscovery(context.Background(), snapshot); err != nil {
+			log.Printf("startup cognitive discovery refresh failed for %s: %v", name, err)
+		}
+	}
+}
+
 func deterministicAdvisory(w http.ResponseWriter, r *http.Request) {
 	request, ok := decodeAdvisoryRequest(w, r)
 	if !ok {
@@ -174,3 +230,22 @@ func envOr(name, fallback string) string {
 	}
 	return fallback
 }
+
+func newLifeboatProvider(rawURL string) (providerRegistration, bool, error) {
+	if rawURL == "" {
+		return providerRegistration{}, false, nil
+	}
+	adapter, err := models.NewOpenAICompatibleLocalAdapter(rawURL, nil)
+	if err != nil {
+		return providerRegistration{}, false, err
+	}
+	return providerRegistration{
+		ProviderInstanceID: "local-lifeboat",
+		Kind:               "openai-compatible-chat-v1",
+		EndpointRef:        "local-lifeboat-v1",
+		AuthMode:           capability.AuthNone,
+		BillingMode:        capability.BillingFree,
+		Provider:           adapter,
+		Discovery:          adapter,
+	}, true, nil
+}

cmd/cognitive-worker/main_test.go

@@ -0,0 +1,16 @@
+package main
+
+import "testing"
+
+func TestLifeboatProviderIsOptionalAndLocalAdapterBacked(t *testing.T) {
+	if _, enabled, err := newLifeboatProvider(""); err != nil || enabled {
+		t.Fatalf("empty lifeboat URL should disable provider: enabled=%v err=%v", enabled, err)
+	}
+	provider, enabled, err := newLifeboatProvider("http://lifeboat:8080/v1")
+	if err != nil || !enabled {
+		t.Fatalf("configured lifeboat should be enabled: enabled=%v err=%v", enabled, err)
+	}
+	if provider.ProviderInstanceID != "local-lifeboat" || provider.EndpointRef != "local-lifeboat-v1" || provider.Provider == nil {
+		t.Fatalf("unexpected lifeboat registration: %+v", provider)
+	}
+}

cmd/core-runtime/cognitive_interpretation.go

@@ -61,6 +61,13 @@ func (c cognitiveInterpretationClient) Interpret(ctx context.Context, request co
 }
 
 func shouldRequestBroaderInterpretation(result interactiondomain.SemanticResult) bool {
+	// The built-in advisory channel is the default conversational path. A
+	// simple question must not first wait for the slower, strict JSON
+	// interpretation route: that route exists for ambiguity and work routing,
+	// not as a prerequisite for talking to Domovoy.
+	if isSimpleLocalQuestion(result) {
+		return false
+	}
 	switch result.Interpretation.Applicability {
 	case interaction.SemanticNeedsBroaderInterpret, interaction.SemanticLowConfidence, interaction.SemanticMixedIntent:
 		return true
@@ -69,6 +76,19 @@ func shouldRequestBroaderInterpretation(result interactiondomain.SemanticResult)
 	}
 }
 
+func isSimpleLocalQuestion(result interactiondomain.SemanticResult) bool {
+	if result.Interpretation.SpeechAct != interaction.SpeechActQuestion || result.Interpretation.Clarification == interaction.ClarificationRequired {
+		return false
+	}
+	for _, hint := range result.CapabilityHints {
+		switch hint {
+		case "MODIFY_CODE", "RUN_TESTS", "SEND_EMAIL", "SCHEDULE_REMINDER", "READ_DATABASE", "QUERY_LOGS":
+			return false
+		}
+	}
+	return true
+}
+
 func buildGatewayInterpretationRequest(session identity.CreatorSession, utterance interaction.HumanUtterance, semantic interactiondomain.SemanticResult, projectNames []string) cognitive.GatewayInterpretationRequest {
 	requestID, _ := ids.New()
 	return cognitive.GatewayInterpretationRequest{

cmd/core-runtime/cognitive_interpretation_test.go

@@ -0,0 +1,36 @@
+package main
+
+import (
+	"testing"
+
+	"git.cin.su/m/Assistant/contracts/interaction"
+	interactiondomain "git.cin.su/m/Assistant/modules/interaction/domain"
+)
+
+func TestSimpleQuestionUsesBuiltInAdvisoryWithoutStrictInterpretation(t *testing.T) {
+	result := interactiondomain.SemanticResult{
+		Interpretation: interaction.UtteranceInterpretation{
+			SpeechAct:     interaction.SpeechActQuestion,
+			Applicability: interaction.SemanticNeedsBroaderInterpret,
+			Clarification: interaction.ClarificationNotRequired,
+		},
+		CapabilityHints: []string{"COGNITIVE_REASONING", "VERIFY_FACT"},
+	}
+	if shouldRequestBroaderInterpretation(result) {
+		t.Fatal("simple question must go directly to the built-in advisory path")
+	}
+}
+
+func TestOperationalQuestionStillUsesStrictInterpretation(t *testing.T) {
+	result := interactiondomain.SemanticResult{
+		Interpretation: interaction.UtteranceInterpretation{
+			SpeechAct:     interaction.SpeechActQuestion,
+			Applicability: interaction.SemanticNeedsBroaderInterpret,
+			Clarification: interaction.ClarificationNotRequired,
+		},
+		CapabilityHints: []string{"MODIFY_CODE", "RUN_TESTS"},
+	}
+	if !shouldRequestBroaderInterpretation(result) {
+		t.Fatal("operational question must retain strict interpretation routing")
+	}
+}

cmd/core-runtime/learning.go

@@ -145,7 +145,6 @@ func (r learningRecorder) recordCorrection(ctx context.Context, input correction
 		OriginalIntentID:      epistemics.OriginalIntentRef(input.Intent.ID),
 		SourceUtteranceID:     epistemics.SourceUtteranceRef(input.Utterance.ID),
 		HelpMethod:            epistemics.HelpMethodClarification,
-		SkillRef:              epistemics.SkillRef(reminderResponseSkillID),
 		ExpectedOutcome:       epistemics.OutcomeSuccess,
 		ActualOutcome:         epistemics.OutcomeUserCorrected,
 		OutcomeDetail:         "human correction indicates prior interpretation or target resolution may be wrong",
@@ -154,10 +153,7 @@ func (r learningRecorder) recordCorrection(ctx context.Context, input correction
 		ConfidenceMillis:      1000,
 		RecordedAtUnixMillis:  input.At.UnixMilli(),
 	}
-	saved, ok := r.saveExperienceAndReflection(ctx, experience)
-	if ok {
-		r.updateReminderSkill(ctx, saved, capability.UsageFailed, true)
-	}
+	r.saveExperienceAndReflection(ctx, experience)
 }
 
 func (r learningRecorder) recordFastPathDecline(ctx context.Context, input fastPathDeclineLearningInput) {

cmd/core-runtime/learning_test.go

@@ -0,0 +1,57 @@
+package main
+
+import (
+	"context"
+	"testing"
+	"time"
+
+	"git.cin.su/m/Assistant/contracts/capability"
+	"git.cin.su/m/Assistant/contracts/epistemics"
+	"git.cin.su/m/Assistant/contracts/interaction"
+)
+
+type learningEpistemicsStub struct {
+	experiences []epistemics.ExperienceRecord
+}
+
+func (s *learningEpistemicsStub) SaveSystemExpectation(context.Context, epistemics.SystemExpectation) error {
+	return nil
+}
+func (s *learningEpistemicsStub) SaveExperienceRecord(_ context.Context, value epistemics.ExperienceRecord) error {
+	s.experiences = append(s.experiences, value)
+	return nil
+}
+func (s *learningEpistemicsStub) SaveReflectionCandidate(context.Context, epistemics.ReflectionCandidate) error {
+	return nil
+}
+
+type learningCapabilityStub struct {
+	loadCalls int
+	saveCalls int
+}
+
+func (s *learningCapabilityStub) LoadSkillProfile(context.Context, capability.SkillProfileID) (capability.SkillProfile, error) {
+	s.loadCalls++
+	return capability.SkillProfile{}, nil
+}
+func (s *learningCapabilityStub) SaveSkillProfile(context.Context, capability.SkillProfile) error {
+	s.saveCalls++
+	return nil
+}
+
+func TestGenericCorrectionDoesNotDegradeReminderSkill(t *testing.T) {
+	epistemicsStore := &learningEpistemicsStub{}
+	capabilityStore := &learningCapabilityStub{}
+	recorder := learningRecorder{epistemics: epistemicsStore, capability: capabilityStore}
+	recorder.recordCorrection(context.Background(), correctionLearningInput{
+		Intent:    interaction.OriginalHumanIntent{ID: "intent-1"},
+		Utterance: interaction.HumanUtterance{ID: "utterance-1"},
+		At:        time.UnixMilli(1000),
+	})
+	if capabilityStore.loadCalls != 0 || capabilityStore.saveCalls != 0 {
+		t.Fatalf("generic correction must not mutate reminder skill: load=%d save=%d", capabilityStore.loadCalls, capabilityStore.saveCalls)
+	}
+	if len(epistemicsStore.experiences) != 1 || epistemicsStore.experiences[0].SkillRef != "" {
+		t.Fatalf("generic correction must remain evidence without a reminder skill reference: %#v", epistemicsStore.experiences)
+	}
+}

cmd/core-runtime/main.go

@@ -293,7 +293,10 @@ func main() {
 			http.Error(w, "interpret chat message", http.StatusServiceUnavailable)
 			return
 		}
+		cognitiveAttempted := false
+		cognitiveAvailable := true
 		if shouldRequestBroaderInterpretation(semantic) {
+			cognitiveAttempted = true
 			projectNames := make([]string, 0, len(semantic.Projects))
 			for _, ref := range semantic.Projects {
 				if ref.ProjectDisplayName != "" {
@@ -303,7 +306,11 @@ func main() {
 			if response, interpretationErr := cognitiveClient.Interpret(r.Context(), buildGatewayInterpretationRequest(session, utterance, semantic, projectNames)); interpretationErr == nil && response.FinishReason == cognitive.FinishCompleted {
 				if candidate, candidateErr := interactionCandidateFromGateway(utterance.ID, response.Candidate, now); candidateErr == nil {
 					semantic = interactiondomain.ApplyCognitiveCandidate(semantic, utterance.Content, candidate, previousFocus)
+				} else {
+					cognitiveAvailable = false
 				}
+			} else {
+				cognitiveAvailable = false
 			}
 		}
 		if err := interactionRepository.AppendUtterance(r.Context(), conversation, utterance, intent, relations); err != nil {
@@ -378,7 +385,8 @@ func main() {
 		if responseErr == nil && responseResult.Handled {
 			helpPath = work.HelpPath{}
 		}
-		if isCapabilityQuestion(utterance.Content) {
+		switch semantic.InformationRequestKind {
+		case interaction.InformationRequestCapabilityInventory:
 			kinds, err := capabilityRepository.AvailableCapabilityKinds(r.Context(), session.PrincipalID)
 			if err == nil && len(kinds) > 0 {
 				planningReply = "Сейчас у меня подключены реальные capabilities: " + humanCapabilityList(kinds) + ". Для рассуждений я использую отдельный Cognitive Gateway/Router, если локальный CANARY доступен. Возможности вроде отправки почты пока будут фиксироваться как capability gap, а не как выполненное действие."
@@ -386,11 +394,23 @@ func main() {
 				planningReply = "Я умею записывать диалог и намерения, работать с текущим контекстом, строить планы и обращаться к Cognitive Gateway при доступности локального CANARY. Реальные action-capabilities подключаются через registry; если capability нет, я фиксирую gap."
 			}
 			needsCognition = false
+		case interaction.InformationRequestCognitiveModelInventory:
+			candidates, inventoryErr := capabilityRepository.LoadCognitiveCandidates(r.Context(), capability.CapabilityID("creator-advisory"), session.PrincipalID)
+			planningReply = humanCognitiveModelInventory(candidates, inventoryErr)
+			needsCognition = false
+		case interaction.InformationRequestCognitiveChannelStatus, interaction.InformationRequestCognitiveRecovery:
+			health, healthErr := capabilityRepository.LoadHealth(r.Context(), capability.CapabilityID("cognitive-proposal"))
+			planningReply = humanCognitiveChannelReply(semantic.InformationRequestKind, semantic.Interpretation.SpeechAct, health, healthErr)
+			needsCognition = false
 		}
 		if helpPath.Reply != "" {
 			planningReply = helpPath.Reply
 			needsCognition = false
 		}
+		if planningReply == "" && needsCognition && cognitiveAttempted && !cognitiveAvailable {
+			planningReply = humanCognitiveDegradedReply(utterance.Content)
+			needsCognition = false
+		}
 		var capabilityStatus capability.CapabilityResolutionStatus
 		var capabilityKind capability.CapabilityKind
 		var capabilityGapID capability.CapabilityGapID
@@ -468,24 +488,28 @@ func main() {
 			}
 		}
 		response := interaction.ChatMessageResponse{
-			ConversationID:      conversation.ID,
-			UtteranceID:         utterance.ID,
-			OriginalIntentID:    intent.ID,
-			SpeechAct:           semantic.Interpretation.SpeechAct,
-			InterpretationState: utterance.InterpretationState,
-			NeedsCognition:      needsCognition,
-			FallbackText:        semantic.Reply,
-			ActiveProjectName:   activeFocusName,
-			ProjectProvenance:   activeFocusProvenance,
-			Clarification:       semantic.Interpretation.Clarification,
-			WorkPlanned:         workPlanned,
-			PlanningReply:       planningReply,
-			CapabilityStatus:    capabilityStatus,
-			CapabilityKind:      capabilityKind,
-			CapabilityGapID:     capabilityGapID,
-			DelegationID:        string(delegationID),
-			DelegationState:     string(delegationState),
-			Reminder:            reminder,
+			ConversationID:                 conversation.ID,
+			UtteranceID:                    utterance.ID,
+			OriginalIntentID:               intent.ID,
+			SpeechAct:                      semantic.Interpretation.SpeechAct,
+			InterpretationState:            utterance.InterpretationState,
+			NeedsCognition:                 needsCognition,
+			FallbackText:                   semantic.Reply,
+			ActiveProjectName:              activeFocusName,
+			ProjectProvenance:              activeFocusProvenance,
+			Clarification:                  semantic.Interpretation.Clarification,
+			WorkPlanned:                    workPlanned,
+			PlanningReply:                  planningReply,
+			CapabilityStatus:               capabilityStatus,
+			CapabilityKind:                 capabilityKind,
+			CapabilityHints:                toCapabilityKinds(semantic.CapabilityHints),
+			RequestedOutcome:               semantic.Interpretation.RequestedOutcome,
+			InformationRequestKind:         semantic.InformationRequestKind,
+			InterpretationConfidenceMillis: semantic.Interpretation.ConfidenceMillis,
+			CapabilityGapID:                capabilityGapID,
+			DelegationID:                   string(delegationID),
+			DelegationState:                string(delegationState),
+			Reminder:                       reminder,
 		}
 		w.Header().Set("Content-Type", "application/json")
 		w.Header().Set("Cache-Control", "no-store")
@@ -811,6 +835,7 @@ func main() {
 			return
 		}
 		if err := capabilityRepository.SaveCognitiveDiscovery(r.Context(), registration); err != nil {
+			log.Printf("cognitive discovery persistence failed: %v", err)
 			http.Error(w, "save cognitive discovery", http.StatusInternalServerError)
 			return
 		}
@@ -871,6 +896,45 @@ func main() {
 		w.WriteHeader(http.StatusCreated)
 		_ = json.NewEncoder(w).Encode(promotion)
 	})
+	mux.HandleFunc("POST /v1/creator/cognitive-activate", func(w http.ResponseWriter, r *http.Request) {
+		session, ok := authenticateCreator(w, r)
+		if !ok {
+			return
+		}
+		var request capability.CognitiveActivationPromotionRequest
+		decoder := json.NewDecoder(io.LimitReader(r.Body, 16<<10))
+		decoder.DisallowUnknownFields()
+		if err := decoder.Decode(&request); err != nil {
+			http.Error(w, "invalid cognitive activation", http.StatusBadRequest)
+			return
+		}
+		request.RequestedByPrincipalID = session.PrincipalID
+		request.CapabilityID = "creator-advisory"
+		candidates, err := capabilityRepository.LoadCognitiveCandidates(r.Context(), request.CapabilityID, session.PrincipalID)
+		if err != nil {
+			http.Error(w, "cognitive registry unavailable", http.StatusServiceUnavailable)
+			return
+		}
+		var current capability.ResolvedCognitiveBinding
+		for _, candidate := range candidates {
+			if candidate.Binding.ID == request.BindingID && candidate.Binding.Revision == request.ExpectedBindingRevision {
+				current = candidate
+				break
+			}
+		}
+		promotion, err := capabilitydomain.BuildActivationPromotion(request, current)
+		if err != nil {
+			http.Error(w, "cognitive activation precondition failed", http.StatusConflict)
+			return
+		}
+		if err = capabilityRepository.SaveCognitiveActivationPromotion(r.Context(), promotion); err != nil {
+			http.Error(w, "cognitive activation conflict", http.StatusConflict)
+			return
+		}
+		w.Header().Set("Content-Type", "application/json")
+		w.WriteHeader(http.StatusCreated)
+		_ = json.NewEncoder(w).Encode(promotion)
+	})
 	mux.HandleFunc("POST /v1/cognitive-registry/performance-evidence", func(w http.ResponseWriter, r *http.Request) {
 		var value capability.PerformanceEvidence
 		decoder := json.NewDecoder(io.LimitReader(r.Body, 64<<10))
@@ -1089,9 +1153,119 @@ func envOr(name, fallback string) string {
 	return fallback
 }
 
-func isCapabilityQuestion(message string) bool {
-	lower := strings.ToLower(message)
-	return strings.Contains(lower, "что ты умеешь") || strings.Contains(lower, "что умеешь") || strings.Contains(lower, "какие возможности")
+func humanCognitiveModelInventory(candidates []capability.ResolvedCognitiveBinding, inventoryErr error) string {
+	if inventoryErr != nil {
+		return "Я не смогла прочитать реестр подключённых моделей. Встроенный канал Домового остаётся доступен; настройки можно проверить повторно после восстановления реестра. Ключи и пароли не выводятся в чат."
+	}
+	if len(candidates) == 0 {
+		return "В реестре пока нет подтверждённых подключённых моделей. Встроенный локальный канал Домового доступен всегда; внешние модели добавляются через настройки подключения. Ключи и пароли в чат не выводятся."
+	}
+	lines := make([]string, 0, len(candidates)+1)
+	lines = append(lines, "Подключённые модели из реестра:")
+	for _, candidate := range candidates {
+		modelName := string(candidate.Model.ProviderModelID)
+		if modelName == "" {
+			modelName = "имя модели не подтверждено"
+		}
+		status := cognitiveInventoryStatus(candidate)
+		pricing := cognitiveInventoryPricing(candidate.Provider)
+		details := []string{status, "тип " + string(candidate.Provider.Kind), "политика " + string(candidate.Binding.DataPolicy)}
+		if pricing != "" {
+			details = append(details, pricing)
+		}
+		if candidate.Provider.AuthMode != "" && candidate.Provider.AuthMode != capability.AuthNone {
+			details = append(details, "доступ "+humanAuthMode(candidate.Provider.AuthMode))
+		}
+		lines = append(lines, "- "+modelName+" ("+strings.Join(details, "; ")+")")
+	}
+	lines = append(lines, "Секреты, ключи и пароли намеренно не показываются.")
+	return strings.Join(lines, "\n")
+}
+
+func cognitiveInventoryStatus(candidate capability.ResolvedCognitiveBinding) string {
+	if candidate.Provider.Health == capability.HealthAvailable && candidate.Model.Health == capability.HealthAvailable {
+		if candidate.Binding.Activation == capability.ActivationActive {
+			return "активна"
+		}
+		return "доступна, не активирована для автоматического выбора"
+	}
+	if candidate.Provider.Health == capability.HealthDegraded || candidate.Model.Health == capability.HealthDegraded {
+		return "работает с ограничениями"
+	}
+	return "недоступна или не подтверждена"
+}
+
+func cognitiveInventoryPricing(provider capability.ProviderInstance) string {
+	switch provider.BillingMode {
+	case capability.BillingFree:
+		return "бесплатная"
+	case capability.BillingPerInput:
+		return "платная: стоимость входа указана в реестре"
+	case capability.BillingPerOutput:
+		return "платная: стоимость выхода указана в реестре"
+	case capability.BillingPerRequest:
+		return "платная: стоимость запроса указана в реестре"
+	default:
+		return "стоимость не подтверждена"
+	}
+}
+
+func humanAuthMode(mode capability.AuthMode) string {
+	switch mode {
+	case capability.AuthKey:
+		return "API-ключ"
+	case capability.AuthBearer:
+		return "Bearer-токен"
+	case capability.AuthUsernamePassword:
+		return "логин и пароль"
+	case capability.AuthOAuth:
+		return "OAuth"
+	case capability.AuthSecretFile:
+		return "защищённый файл секрета"
+	default:
+		return "защищённый способ"
+	}
+}
+
+func humanCognitiveChannelReply(kind interaction.InformationRequestKind, act interaction.SpeechAct, health capability.Health, healthErr error) string {
+	recoveryRequested := kind == interaction.InformationRequestCognitiveRecovery || act == interaction.SpeechActRequestToInvestigate || act == interaction.SpeechActDirective
+	if healthErr != nil {
+		if recoveryRequested {
+			return "Я не вижу подтверждённого состояния локального канала. Домовой всё равно рядом: опишите, что изменилось, и я помогу подготовить аварийную настройку."
+		}
+		return "Я не вижу подтверждённого состояния локального канала, но Домовой работает. Можно продолжать разговор и проверить канал ещё раз."
+	}
+	var observation string
+	switch health.State {
+	case capability.HealthAvailable:
+		observation = "Основной локальный канал сейчас доступен."
+	case capability.HealthDegraded:
+		observation = "Основной локальный канал сейчас работает с ограничениями."
+	case capability.HealthUnavailable:
+		observation = "Основной локальный канал сейчас недоступен."
+	default:
+		observation = "Состояние основного локального канала пока не подтверждено."
+	}
+	if recoveryRequested {
+		if health.State == capability.HealthUnavailable {
+			return observation + " Домовой жив: начну с проверки встроенного маршрута, затем зафиксирую варианты аварийного восстановления без передачи секретов."
+		}
+		return observation + " Я не меняю модель прямо из разговора: сначала покажу наблюдаемое состояние и подготовлю следующий проверяемый шаг восстановления."
+	}
+	if health.State == capability.HealthUnavailable {
+		if recoveryRequested {
+			return observation + " Домовой не остановился: начну с проверки встроенного маршрута, затем зафиксирую доступные варианты восстановления без передачи секретов."
+		}
+		return observation + " Но Домовой не остановился: продолжаю принимать сообщения и помогу восстановить локальный канал."
+	}
+	return observation + " Это наблюдение о готовности capability, а не прямой доступ к модели."
+}
+
+func humanCognitiveDegradedReply(message string) string {
+	if strings.TrimSpace(message) == "" {
+		return "Основной канал мышления сейчас недоступен. Я рядом и продолжаю работать в локальном аварийном режиме."
+	}
+	return "Основной канал мышления сейчас недоступен. Домовой жив: сообщение принято, а я могу помочь разобраться с локальным каналом и настройкой восстановления."
 }
 
 func humanCapabilityList(kinds []capability.CapabilityKind) string {

cmd/core-runtime/main_test.go

@@ -9,6 +9,10 @@ import (
 	"strings"
 	"testing"
 	"time"
+
+	"git.cin.su/m/Assistant/contracts/capability"
+	"git.cin.su/m/Assistant/contracts/interaction"
+	interactiondomain "git.cin.su/m/Assistant/modules/interaction/domain"
 )
 
 func TestBearerTokenRequiresBearerScheme(t *testing.T) {
@@ -23,6 +27,58 @@ func TestBearerTokenRequiresBearerScheme(t *testing.T) {
 	}
 }
 
+func TestCognitiveChannelQuestionUsesHumanSafeHealthReply(t *testing.T) {
+	reply := humanCognitiveChannelReply(interaction.InformationRequestCognitiveChannelStatus, interaction.SpeechActQuestion, capability.Health{State: capability.HealthAvailable, CapabilityID: "provider-secret-model"}, nil)
+	if !strings.Contains(reply, "доступен") || strings.Contains(reply, "provider-secret-model") {
+		t.Fatalf("unexpected safe reply: %q", reply)
+	}
+}
+
+func TestCognitiveConfigurationRequestDoesNotPretendToMutate(t *testing.T) {
+	reply := humanCognitiveChannelReply(interaction.InformationRequestCognitiveRecovery, interaction.SpeechActDirective, capability.Health{State: capability.HealthUnavailable}, nil)
+	if !strings.Contains(reply, "Домовой жив") || !strings.Contains(reply, "аварийн") {
+		t.Fatalf("unexpected configuration reply: %q", reply)
+	}
+}
+
+func TestCognitiveDegradedReplyKeepsDomovoyAlive(t *testing.T) {
+	reply := humanCognitiveDegradedReply("Помоги настроить локальную модель")
+	if !strings.Contains(reply, "Домовой жив") || !strings.Contains(reply, "принято") {
+		t.Fatalf("unexpected degraded reply: %q", reply)
+	}
+}
+
+func TestModelInventoryQuestionUsesReadOnlyFastPath(t *testing.T) {
+	for _, message := range []string{"какие модели доступны?", "напиши список настроек ИИ", "какие есть подключения ИИ"} {
+		result, err := interactiondomain.InterpretUtterance(interaction.HumanUtterance{Content: message}, nil, nil, time.Now())
+		if err != nil {
+			t.Fatalf("interpretation failed for %q: %v", message, err)
+		}
+		if result.InformationRequestKind != interaction.InformationRequestCognitiveModelInventory {
+			t.Fatalf("semantic inventory request %q was not recognized: kind=%q act=%q hints=%v", message, result.InformationRequestKind, result.Interpretation.SpeechAct, result.CapabilityHints)
+		}
+	}
+	ordinary, err := interactiondomain.InterpretUtterance(interaction.HumanUtterance{Content: "настрой локальную модель"}, nil, nil, time.Now())
+	if err != nil {
+		t.Fatal(err)
+	}
+	if ordinary.InformationRequestKind == interaction.InformationRequestCognitiveModelInventory {
+		t.Fatal("configuration mutation must not use read-only model inventory path")
+	}
+}
+
+func TestHumanCognitiveModelInventoryDoesNotExposeSecrets(t *testing.T) {
+	cost := int64(25)
+	text := humanCognitiveModelInventory([]capability.ResolvedCognitiveBinding{{
+		Binding:  capability.CognitiveBinding{DataPolicy: capability.DataPolicyExternalMessageOnly, Activation: capability.ActivationActive},
+		Provider: capability.ProviderInstance{Kind: "openai-compatible-chat-v1", CredentialRef: "secret-ref", AuthMode: capability.AuthKey, BillingMode: capability.BillingPerRequest, RequestCostMicros: &cost, Health: capability.HealthAvailable},
+		Model:    capability.ModelDescriptor{ProviderModelID: "example-model", Health: capability.HealthAvailable},
+	}}, nil)
+	if strings.Contains(text, "secret-ref") || strings.Contains(text, "25") || !strings.Contains(text, "example-model") || !strings.Contains(text, "API-ключ") {
+		t.Fatalf("unsafe or incomplete inventory: %q", text)
+	}
+}
+
 func TestCreatorSessionHandlerAcceptsConfiguredCredentials(t *testing.T) {
 	handler := creatorSessionHandler("recovery", "m", "password", []byte("01234567890123456789012345678901"), func() time.Time { return time.Unix(1000, 0) })
 	request := httptest.NewRequest(http.MethodPost, "/v1/creator/sessions", strings.NewReader(`{"username":"m","password":"password"}`))

cmd/creator-web/chat_test.go

@@ -15,6 +15,8 @@ import (
 )
 
 func TestChatPageServedWithoutInternalIDs(t *testing.T) {
+	t.Setenv("ASSISTANT_BUILD_REVISION", "0123456789abcdef")
+	t.Setenv("ASSISTANT_BUILD_TIME", "2026-08-22T03:04:05Z")
 	handler, err := newHandler("http://core", "http://continuity", "http://commit", http.DefaultClient, "http://cognitive")
 	if err != nil {
 		t.Fatal(err)
@@ -25,11 +27,62 @@ func TestChatPageServedWithoutInternalIDs(t *testing.T) {
 		t.Fatalf("expected /chat status 200, got %d", recorder.Code)
 	}
 	body := recorder.Body.String()
-	for _, forbidden := range []string{"provider_id", "model_id", "binding_id", "workspace-id", "session-id"} {
+	for _, required := range []string{"cognitive-status", "aria-live=\"polite\"", "cognitive-console-link", "href=\"/admin\"", "Проверь канал", "Изменить настройку", "ai-data-error", "Не вставляйте пароли", "build-meta", "версия ", "обновлено ", "datetime=\""} {
+		if !strings.Contains(body, required) {
+			t.Fatalf("/chat is missing human status marker %q", required)
+		}
+	}
+	for _, forbidden := range []string{"provider_id", "model_id", "binding_id", "workspace-id", "session-id", "__ASSISTANT_BUILD_REVISION__", "__ASSISTANT_BUILD_TIME__", "__ASSISTANT_BUILD_DATETIME__"} {
 		if strings.Contains(body, forbidden) {
 			t.Fatalf("/chat leaks internal field %q", forbidden)
 		}
 	}
+	if !strings.Contains(body, "версия 0123456789ab") || !strings.Contains(body, "обновлено 22.08.2026 03:04 UTC") || !strings.Contains(body, "datetime=\"2026-08-22T03:04:05Z\"") {
+		t.Fatalf("/chat does not render build metadata: %q", body)
+	}
+	for _, path := range []string{"/", "/chat.html"} {
+		alternate := httptest.NewRecorder()
+		handler.ServeHTTP(alternate, httptest.NewRequest(http.MethodGet, path, nil))
+		if alternate.Code != http.StatusOK || strings.Contains(alternate.Body.String(), "__ASSISTANT_BUILD_REVISION__") {
+			t.Fatalf("%s did not render build metadata: status=%d", path, alternate.Code)
+		}
+	}
+}
+
+func TestChatScriptExplainsSessionAndRuntimeFailures(t *testing.T) {
+	body, err := staticFiles.ReadFile("static/assets/chat.js")
+	if err != nil {
+		t.Fatal(err)
+	}
+	script := string(body)
+	for _, required := range []string{"class ChatApiError", "Сессия устарела", "основной runtime сейчас недоступен", "Проверьте текст и повторите попытку"} {
+		if !strings.Contains(script, required) {
+			t.Fatalf("chat script is missing recovery message %q", required)
+		}
+	}
+}
+
+func TestPublicSurfacesSeparateChatAndConsole(t *testing.T) {
+	handler, err := newHandler("http://core", "http://continuity", "http://commit", http.DefaultClient, "http://cognitive")
+	if err != nil {
+		t.Fatal(err)
+	}
+	for _, test := range []struct {
+		path    string
+		must    string
+		mustNot string
+	}{
+		{path: "/", must: "Напишите Домовому обычное сообщение", mustNot: "context-preset"},
+		{path: "/admin", must: "Чат с Домовым", mustNot: "Напишите Домовому обычное сообщение"},
+		{path: "/chat", must: "Напишите Домовому обычное сообщение", mustNot: "context-preset"},
+	} {
+		recorder := httptest.NewRecorder()
+		handler.ServeHTTP(recorder, httptest.NewRequest(http.MethodGet, test.path, nil))
+		body := recorder.Body.String()
+		if recorder.Code != http.StatusOK || !strings.Contains(body, test.must) || strings.Contains(body, test.mustNot) {
+			t.Fatalf("%s response=%d contains expected=%t forbidden=%t", test.path, recorder.Code, strings.Contains(body, test.must), strings.Contains(body, test.mustNot))
+		}
+	}
 }
 
 func TestChatMessageUsesCoreAndLocalOnlyCognitiveGateway(t *testing.T) {
@@ -47,7 +100,7 @@ func TestChatMessageUsesCoreAndLocalOnlyCognitiveGateway(t *testing.T) {
 				t.Fatalf("unexpected core chat request: %#v", request)
 			}
 			w.WriteHeader(http.StatusCreated)
-			_ = json.NewEncoder(w).Encode(interaction.ChatMessageResponse{ConversationID: "conversation-1", UtteranceID: "utterance-1", SpeechAct: interaction.SpeechActQuestion, InterpretationState: interaction.InterpretationInterpreted, NeedsCognition: true, FallbackText: "fallback"})
+			_ = json.NewEncoder(w).Encode(interaction.ChatMessageResponse{ConversationID: "conversation-1", UtteranceID: "utterance-1", SpeechAct: interaction.SpeechActQuestion, InterpretationState: interaction.InterpretationInterpreted, NeedsCognition: true, FallbackText: "fallback", InformationRequestKind: interaction.InformationRequestCognitiveChannelStatus})
 		default:
 			t.Fatalf("unexpected core route %s %s", r.Method, r.URL.Path)
 		}
@@ -93,6 +146,9 @@ func TestChatMessageUsesCoreAndLocalOnlyCognitiveGateway(t *testing.T) {
 	if cognitiveRequest.ActorID != "actor-1" || cognitiveRequest.PrincipalID != "principal-1" || cognitiveRequest.ScopeID != "domovoy-global-scope" || cognitiveRequest.Message != "Кто ты?" {
 		t.Fatalf("unexpected trusted gateway request: %#v", cognitiveRequest)
 	}
+	if cognitiveRequest.Meaning.InformationRequestKind != interaction.InformationRequestCognitiveChannelStatus {
+		t.Fatalf("information intent was not preserved: %#v", cognitiveRequest.Meaning)
+	}
 }
 
 func TestChatMessageReturnsHumanCapabilityMetadata(t *testing.T) {

cmd/creator-web/server.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"bytes"
 	"embed"
 	"encoding/json"
 	"fmt"
@@ -8,7 +9,9 @@ import (
 	"io/fs"
 	"net/http"
 	"net/url"
+	"os"
 	"strings"
+	"time"
 	"unicode/utf8"
 
 	"git.cin.su/m/Assistant/contracts/capability"
@@ -36,6 +39,12 @@ type gateway struct {
 	cognitive  *url.URL
 	client     *http.Client
 	static     http.Handler
+	build      buildMetadata
+}
+
+type buildMetadata struct {
+	revision string
+	updated  time.Time
 }
 
 type routeTarget uint8
@@ -74,7 +83,20 @@ func newHandler(coreURL, continuityURL, commitURL string, client *http.Client, c
 	if client == nil {
 		client = http.DefaultClient
 	}
-	return securityHeaders(&gateway{core: core, continuity: continuity, commit: commit, cognitive: cognitiveRuntime, client: client, static: http.FileServer(http.FS(assets))}), nil
+	updated := time.Now().UTC()
+	if raw := strings.TrimSpace(os.Getenv("ASSISTANT_BUILD_TIME")); raw != "" {
+		if parsed, parseErr := time.Parse(time.RFC3339, raw); parseErr == nil {
+			updated = parsed.UTC()
+		}
+	}
+	revision := strings.TrimSpace(os.Getenv("ASSISTANT_BUILD_REVISION"))
+	if revision == "" {
+		revision = "development"
+	}
+	if len(revision) > 12 {
+		revision = revision[:12]
+	}
+	return securityHeaders(&gateway{core: core, continuity: continuity, commit: commit, cognitive: cognitiveRuntime, client: client, static: http.FileServer(http.FS(assets)), build: buildMetadata{revision: revision, updated: updated}}), nil
 }
 
 func parseRuntimeURL(rawURL, name string) (*url.URL, error) {
@@ -111,17 +133,31 @@ func (g *gateway) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		http.Error(w, "method not allowed", http.StatusMethodNotAllowed)
 		return
 	}
-	if r.URL.Path == "/" {
-		w.Header().Set("Cache-Control", "no-store")
+	if r.URL.Path == "/" || r.URL.Path == "/chat" || r.URL.Path == "/chat.html" {
+		g.serveEmbeddedHTML(w, "chat.html")
+		return
 	}
-	if r.URL.Path == "/chat" {
-		r = r.Clone(r.Context())
-		r.URL.Path = "/chat.html"
-		w.Header().Set("Cache-Control", "no-store")
+	if r.URL.Path == "/admin" {
+		g.serveEmbeddedHTML(w, "index.html")
+		return
 	}
 	g.static.ServeHTTP(w, r)
 }
 
+func (g *gateway) serveEmbeddedHTML(w http.ResponseWriter, name string) {
+	body, err := staticFiles.ReadFile("static/" + name)
+	if err != nil {
+		http.Error(w, "page unavailable", http.StatusNotFound)
+		return
+	}
+	w.Header().Set("Cache-Control", "no-store")
+	w.Header().Set("Content-Type", "text/html; charset=utf-8")
+	body = bytes.ReplaceAll(body, []byte("__ASSISTANT_BUILD_REVISION__"), []byte(g.build.revision))
+	body = bytes.ReplaceAll(body, []byte("__ASSISTANT_BUILD_TIME__"), []byte(g.build.updated.Format("02.01.2006 15:04 UTC")))
+	body = bytes.ReplaceAll(body, []byte("__ASSISTANT_BUILD_DATETIME__"), []byte(g.build.updated.Format(time.RFC3339)))
+	_, _ = w.Write(body)
+}
+
 type browserAdvisoryRequest struct {
 	Message            string `json:"message"`
 	SessionID          string `json:"session_id"`
@@ -143,20 +179,23 @@ type browserChatRequest struct {
 }
 
 type browserChatResponse struct {
-	ConversationID    string `json:"conversation_id"`
-	UtteranceID       string `json:"utterance_id"`
-	SpeechAct         string `json:"speech_act"`
-	ReplyText         string `json:"reply_text"`
-	Cognition         string `json:"cognition"`
-	ActiveFocus       string `json:"active_focus"`
-	ProjectProvenance string `json:"project_provenance"`
-	Clarification     string `json:"clarification"`
-	WorkPlanned       bool   `json:"work_planned"`
-	CapabilityStatus  string `json:"capability_status"`
-	CapabilityKind    string `json:"capability_kind"`
-	DelegationID      string `json:"delegation_id"`
-	DelegationState   string `json:"delegation_state"`
-	ReminderScheduled bool   `json:"reminder_scheduled"`
+	ConversationID                 string                      `json:"conversation_id"`
+	UtteranceID                    string                      `json:"utterance_id"`
+	SpeechAct                      string                      `json:"speech_act"`
+	ReplyText                      string                      `json:"reply_text"`
+	Cognition                      string                      `json:"cognition"`
+	ActiveFocus                    string                      `json:"active_focus"`
+	ProjectProvenance              string                      `json:"project_provenance"`
+	Clarification                  string                      `json:"clarification"`
+	WorkPlanned                    bool                        `json:"work_planned"`
+	CapabilityStatus               string                      `json:"capability_status"`
+	CapabilityKind                 string                      `json:"capability_kind"`
+	CapabilityHints                []capability.CapabilityKind `json:"capability_hints,omitempty"`
+	RequestedOutcome               string                      `json:"requested_outcome,omitempty"`
+	InterpretationConfidenceMillis int64                       `json:"interpretation_confidence_millis,omitempty"`
+	DelegationID                   string                      `json:"delegation_id"`
+	DelegationState                string                      `json:"delegation_state"`
+	ReminderScheduled              bool                        `json:"reminder_scheduled"`
 }
 
 func (g *gateway) handleAdvisoryPolicy(w http.ResponseWriter, r *http.Request) {
@@ -339,7 +378,7 @@ func (g *gateway) handleChatMessage(w http.ResponseWriter, r *http.Request) {
 		cognition = "unavailable"
 		requestID, idErr := ids.New()
 		if idErr == nil {
-			trusted := cognitive.GatewayAdvisoryRequest{Version: cognitive.CreatorAdvisoryV1, RequestID: cognitive.RequestID(requestID), ActorID: session.ActorID, PrincipalID: session.PrincipalID, ScopeID: "domovoy-global-scope", Message: browserRequest.Message, Context: []cognitive.ContextExcerpt{}, Locale: "ru-RU", MaxOutputBytes: 4096, DataPolicy: capability.DataPolicyLocalOnly, EgressAcknowledged: false}
+			trusted := cognitive.GatewayAdvisoryRequest{Version: cognitive.CreatorAdvisoryV1, RequestID: cognitive.RequestID(requestID), ActorID: session.ActorID, PrincipalID: session.PrincipalID, ScopeID: "domovoy-global-scope", Message: browserRequest.Message, Context: []cognitive.ContextExcerpt{}, Locale: "ru-RU", MaxOutputBytes: 4096, DataPolicy: capability.DataPolicyLocalOnly, EgressAcknowledged: false, Meaning: cognitive.TaskMeaning{SpeechAct: string(saved.SpeechAct), CapabilityKind: saved.CapabilityKind, CapabilityHints: saved.CapabilityHints, RequestedOutcome: saved.RequestedOutcome, InformationRequestKind: saved.InformationRequestKind, ConfidenceMillis: saved.InterpretationConfidenceMillis}}
 			payload, err = json.Marshal(trusted)
 			if err == nil {
 				var advisory cognitive.GatewayAdvisoryResponse
@@ -356,20 +395,23 @@ func (g *gateway) handleChatMessage(w http.ResponseWriter, r *http.Request) {
 	w.Header().Set("Content-Type", "application/json")
 	w.Header().Set("Cache-Control", "no-store")
 	_ = json.NewEncoder(w).Encode(browserChatResponse{
-		ConversationID:    string(saved.ConversationID),
-		UtteranceID:       string(saved.UtteranceID),
-		SpeechAct:         string(saved.SpeechAct),
-		ReplyText:         reply,
-		Cognition:         cognition,
-		ActiveFocus:       saved.ActiveProjectName,
-		ProjectProvenance: string(saved.ProjectProvenance),
-		Clarification:     string(saved.Clarification),
-		WorkPlanned:       saved.WorkPlanned,
-		CapabilityStatus:  string(saved.CapabilityStatus),
-		CapabilityKind:    string(saved.CapabilityKind),
-		DelegationID:      saved.DelegationID,
-		DelegationState:   saved.DelegationState,
-		ReminderScheduled: saved.Reminder != nil,
+		ConversationID:                 string(saved.ConversationID),
+		UtteranceID:                    string(saved.UtteranceID),
+		SpeechAct:                      string(saved.SpeechAct),
+		ReplyText:                      reply,
+		Cognition:                      cognition,
+		ActiveFocus:                    saved.ActiveProjectName,
+		ProjectProvenance:              string(saved.ProjectProvenance),
+		Clarification:                  string(saved.Clarification),
+		WorkPlanned:                    saved.WorkPlanned,
+		CapabilityStatus:               string(saved.CapabilityStatus),
+		CapabilityKind:                 string(saved.CapabilityKind),
+		CapabilityHints:                saved.CapabilityHints,
+		RequestedOutcome:               saved.RequestedOutcome,
+		InterpretationConfidenceMillis: saved.InterpretationConfidenceMillis,
+		DelegationID:                   saved.DelegationID,
+		DelegationState:                saved.DelegationState,
+		ReminderScheduled:              saved.Reminder != nil,
 	})
 }
 

cmd/creator-web/server_test.go

@@ -229,10 +229,21 @@ func TestConsoleAndSecurityHeaders(t *testing.T) {
 	if err != nil {
 		t.Fatal(err)
 	}
-	request := httptest.NewRequest(http.MethodGet, "/", nil)
+	request := httptest.NewRequest(http.MethodGet, "/admin", nil)
 	response := httptest.NewRecorder()
 	handler.ServeHTTP(response, request)
 	if response.Code != http.StatusOK || !strings.Contains(response.Body.String(), "Домовой") ||
+		!strings.Contains(response.Body.String(), "context-preset") ||
+		!strings.Contains(response.Body.String(), "context-state") ||
+		!strings.Contains(response.Body.String(), "copy-context") ||
+		!strings.Contains(response.Body.String(), "К содержимому") ||
+		!strings.Contains(response.Body.String(), "aria-current=\"location\"") ||
+		!strings.Contains(response.Body.String(), "section-nav-link") ||
+		!strings.Contains(response.Body.String(), "data-page=\"overview\"") ||
+		!strings.Contains(response.Body.String(), "data-page=\"diagnostics\"") ||
+		!strings.Contains(response.Body.String(), "data-page=\"operations\"") ||
+		!strings.Contains(response.Body.String(), "data-page=\"learning\"") ||
+		!strings.Contains(response.Body.String(), "data-page=\"settings\"") ||
 		!strings.Contains(response.Body.String(), "satisfaction-dialog") || !strings.Contains(response.Body.String(), "Подтверждаю переход") ||
 		!strings.Contains(response.Body.String(), "action-history") || !strings.Contains(response.Body.String(), "Журнал действий") ||
 		!strings.Contains(response.Body.String(), "advisory-form") || !strings.Contains(response.Body.String(), "Спросить Домового") ||

cmd/creator-web/static/assets/chat.css

@@ -29,26 +29,60 @@ textarea { resize: vertical; min-height: 84px; max-height: 240px; padding: 14px;
 .login-form button, .composer button { border: 0; color: #11150f; background: var(--signal); font-weight: 700; }
 .login-form button { width: 100%; height: 50px; margin-top: 18px; }
 #login-error { min-height: 20px; color: var(--bad); font-size: 13px; }
-.chat-view { min-height: 100vh; display: grid; grid-template-rows: 64px minmax(0, 1fr); }
-.chat-header { display: flex; align-items: center; gap: 18px; padding: 0 22px; border-bottom: 1px solid var(--line); background: rgba(16, 23, 20, .96); }
+.chat-view { height: 100vh; min-height: 0; display: grid; grid-template-rows: 64px minmax(0, 1fr); overflow: hidden; }
+.chat-header { min-width: 0; display: flex; align-items: center; gap: 14px; padding: 0 22px; border-bottom: 1px solid var(--line); background: rgba(16, 23, 20, .98); }
 .chat-header a { color: var(--ink); text-decoration: none; font: 400 24px/1 var(--serif); }
-.chat-header span { color: var(--muted); font: 10px/1 var(--mono); letter-spacing: .1em; text-transform: uppercase; }
-#active-focus { margin-left: auto; color: var(--good); }
+#active-focus { color: var(--good); }
+.cognitive-status { display: inline-flex; align-items: center; gap: 7px; white-space: nowrap; }
+.chat-header .cognitive-status { width: auto; height: auto; padding: 0; border: 0; background: transparent; color: var(--muted); font: 10px/1 var(--mono); letter-spacing: .1em; text-transform: uppercase; }
+.chat-header .cognitive-status { max-width: min(30vw, 320px); margin-left: auto; overflow: hidden; text-overflow: ellipsis; }
+.cognitive-status::before { content: ""; width: 7px; height: 7px; flex: 0 0 7px; border-radius: 50%; background: var(--signal); }
+.cognitive-status[data-state="available"] { color: var(--good); }
+.cognitive-status[data-state="available"]::before { background: var(--good); }
+.cognitive-status[data-state="unavailable"] { color: var(--bad); }
+.cognitive-status[data-state="unavailable"]::before { background: var(--bad); }
+.cognitive-console-link { color: var(--signal); font: 10px/1 var(--mono); letter-spacing: .08em; text-transform: uppercase; white-space: nowrap; }
+.build-meta { display: grid; gap: 3px; flex: 0 0 auto; color: var(--muted); font: 9px/1 var(--mono); letter-spacing: .08em; text-align: right; text-transform: uppercase; white-space: nowrap; }
+.build-meta time { color: #68776d; font-size: 8px; }
 .chat-header button { width: 38px; height: 38px; border: 1px solid var(--line); background: transparent; }
-.human-nav { display: flex; align-items: center; gap: 8px; }
+.human-nav { display: grid; gap: 8px; }
 .nav-tab, .operator-link { height: 34px; padding: 0 12px; display: inline-flex; align-items: center; border: 1px solid var(--line); color: var(--muted); background: #0b110e; text-decoration: none; font: 11px/1 var(--mono); text-transform: uppercase; letter-spacing: .08em; }
+.chat-left .nav-tab { height: auto; min-height: 58px; padding: 10px 12px; display: grid; grid-template-columns: 28px 1fr; gap: 2px 8px; align-items: center; text-align: left; }
+.chat-left .nav-tab b { grid-row: span 2; color: var(--signal); font: 11px/1 var(--mono); }
+.chat-left .nav-tab span { color: var(--ink); font: 600 13px/1 var(--sans); text-transform: none; letter-spacing: 0; }
+.chat-left .nav-tab small { color: var(--muted); font: 10px/1 var(--mono); text-transform: none; letter-spacing: 0; }
 .nav-tab.active { color: #11150f; border-color: var(--signal); background: var(--signal); }
 .operator-link { color: var(--good); }
-.surface-panel { min-height: 0; position: relative; }
-.active-panel { display: grid; min-height: 0; }
-.messages { width: min(100%, 920px); margin: 0 auto; padding: 28px 18px 120px; display: flex; flex-direction: column; gap: 14px; overflow: auto; }
+.chat-header > .operator-link { flex: 0 0 auto; }
+.chat-layout { min-height: 0; height: 100%; display: grid; grid-template-columns: minmax(220px, 280px) minmax(0, 1fr) minmax(250px, 320px); }
+.chat-side { min-width: 0; min-height: 0; padding: 28px 20px; overflow-y: auto; background: #0e1512; }
+.chat-left { border-right: 1px solid var(--line); }
+.chat-right { border-left: 1px solid var(--line); }
+.side-intro h1, .side-intro h2 { margin: 12px 0; font: 400 clamp(28px, 2.5vw, 40px)/.95 var(--serif); letter-spacing: -.03em; }
+.side-intro p:not(.side-index) { color: var(--muted); line-height: 1.5; }
+.side-index, .side-focus span, .side-note span, .ai-info-card span { color: var(--signal); font: 10px/1 var(--mono); letter-spacing: .12em; text-transform: uppercase; }
+.side-focus, .side-note, .ai-info-card { margin-top: 28px; padding: 14px 0; border-top: 1px solid var(--line); border-bottom: 1px solid var(--line); }
+.side-focus strong, .side-note strong, .ai-info-card strong { display: block; margin-top: 9px; color: var(--ink); font: 600 14px/1.3 var(--sans); }
+.side-note small, .ai-info-card p, .ai-data-form small { display: block; margin-top: 9px; color: var(--muted); line-height: 1.45; }
+.chat-main { min-width: 0; min-height: 0; overflow: hidden; display: grid; }
+.surface-panel { min-height: 0; position: relative; overflow-y: auto; }
+.active-panel { display: grid; grid-template-rows: minmax(0, 1fr) auto auto; min-height: 0; }
+.messages { width: min(100%, 920px); min-height: 0; margin: 0 auto; padding: 28px 18px; display: flex; flex-direction: column; gap: 14px; overflow-y: auto; }
 .message { max-width: min(720px, 92%); padding: 14px 16px; border: 1px solid var(--line); border-radius: var(--radius); line-height: 1.45; white-space: pre-wrap; }
 .message.user { align-self: flex-end; background: #151e1a; }
 .message.assistant { align-self: flex-start; background: #0f1613; }
 .message small { display: block; margin-top: 8px; color: var(--muted); font: 10px/1 var(--mono); text-transform: uppercase; }
-.composer { position: sticky; bottom: 0; width: min(100%, 920px); margin: 0 auto; padding: 16px 18px 20px; display: grid; grid-template-columns: minmax(0, 1fr) 130px; gap: 12px; background: linear-gradient(transparent, var(--base) 20%); }
+.composer { width: min(100%, 920px); margin: 0 auto; padding: 16px 18px 10px; display: grid; grid-template-columns: minmax(0, 1fr) 130px; gap: 12px; background: linear-gradient(transparent, var(--base) 20%); }
 .composer button { height: 48px; align-self: end; }
 .composer button:disabled { cursor: wait; filter: saturate(.3); }
+.conversation-starters { width: min(100%, 920px); margin: -4px auto 0; padding: 0 18px 18px; display: flex; flex-wrap: wrap; align-items: center; gap: 8px; color: var(--muted); font: 10px/1 var(--mono); letter-spacing: .06em; text-transform: uppercase; }
+.conversation-starters button { min-height: 32px; padding: 0 10px; border: 1px solid var(--line); color: var(--ink); background: #101814; font: 10px/1 var(--mono); }
+.conversation-starters button:hover, .conversation-starters button:focus-visible { border-color: var(--signal); color: var(--signal); outline: none; }
+.ai-data-form { margin-top: 24px; }
+.ai-data-form textarea { min-height: 150px; resize: vertical; }
+.ai-data-form button { width: 100%; min-height: 42px; margin-top: 12px; border: 0; color: #11150f; background: var(--signal); font-weight: 700; }
+.ai-data-error { margin: 10px 0 0; color: var(--bad); font-size: 12px; line-height: 1.4; }
+.side-console-link { display: flex; justify-content: space-between; margin-top: 26px; padding-top: 16px; border-top: 1px solid var(--line); color: var(--signal) !important; font: 11px/1.3 var(--mono) !important; text-transform: uppercase; letter-spacing: .06em; }
 .attention-surface, .history-surface { width: min(100%, 920px); margin: 0 auto; padding: 34px 18px; align-content: start; gap: 18px; }
 .surface-heading { display: flex; align-items: end; justify-content: space-between; gap: 16px; border-bottom: 1px solid var(--line); padding-bottom: 16px; }
 .surface-heading p { margin: 0; font: 400 36px/.95 var(--serif); }
@@ -67,10 +101,25 @@ textarea { resize: vertical; min-height: 84px; max-height: 240px; padding: 14px;
 .empty-state { margin: 24px 0 0; color: var(--muted); }
 .empty-state.error { color: var(--bad); }
 @media (max-width: 640px) {
+  .chat-view { height: auto; min-height: 100vh; overflow: visible; display: block; }
   .composer { grid-template-columns: 1fr; }
   .composer button { width: 100%; }
+  .conversation-starters { align-items: stretch; }
+  .conversation-starters span { width: 100%; }
   .chat-header { gap: 10px; padding: 0 12px; }
-  .chat-header span { display: none; }
-  .human-nav { overflow-x: auto; }
+  .chat-header .cognitive-status { display: inline-flex; max-width: 150px; overflow: hidden; text-overflow: ellipsis; }
+  .build-meta { font-size: 8px; letter-spacing: .04em; }
+  .build-meta time { font-size: 7px; }
+  .chat-layout { height: auto; display: block; }
+  .chat-side, .chat-main { min-height: auto; max-height: none; overflow: visible; }
+  .chat-left, .chat-right { border: 0; border-bottom: 1px solid var(--line); }
+  .chat-main { height: 70vh; min-height: 520px; }
+  .chat-left { padding-bottom: 20px; }
+  .chat-right { padding-top: 20px; }
   .operator-link, .nav-tab { padding: 0 9px; }
 }
+@media (min-width: 641px) and (max-width: 1100px) {
+  .chat-layout { grid-template-columns: 210px minmax(0, 1fr) 245px; }
+  .chat-side { padding-inline: 14px; }
+  .side-intro h1, .side-intro h2 { font-size: 30px; }
+}

cmd/creator-web/static/assets/chat.js

@@ -8,14 +8,84 @@ const messageInput = document.querySelector("#message");
 const sendButton = document.querySelector("#send");
 const logoutButton = document.querySelector("#logout");
 const activeFocus = document.querySelector("#active-focus");
+const cognitiveStatus = document.querySelector("#cognitive-status");
+const cognitiveConsoleLink = document.querySelector("#cognitive-console-link");
 const todayList = document.querySelector("#today-list");
 const refreshToday = document.querySelector("#refresh-today");
 const historyList = document.querySelector("#history-list");
 const navTabs = Array.from(document.querySelectorAll(".nav-tab"));
+const conversationStarters = Array.from(document.querySelectorAll("[data-starter]"));
+const aiDataForm = document.querySelector("#ai-data-form");
+const aiDataInput = document.querySelector("#ai-data");
+const aiDataError = document.querySelector("#ai-data-error");
 
 let token = sessionStorage.getItem("domovoy.chat.token") || "";
 let conversationID = sessionStorage.getItem("domovoy.chat.conversation") || "";
 let localHistory = [];
+let cognitiveStatusTimer = null;
+
+class ChatApiError extends Error {
+  constructor(status, detail = "") {
+    super(detail || `chat api returned ${status}`);
+    this.name = "ChatApiError";
+    this.status = status;
+  }
+}
+
+function containsSecretShapedText(value) {
+  return /(-----BEGIN [A-Z ]+PRIVATE KEY-----|\b(?:password|passwd|пароль|token|токен|api[_ -]?key|секрет|ключ)\s*[:=]|\bsk-[a-zA-Z0-9_-]{12,})/i.test(value);
+}
+
+function showAIDataError(message = "") {
+  if (!aiDataError) return;
+  aiDataError.textContent = message;
+  aiDataError.hidden = !message;
+}
+
+function renderCognitiveStatus(state) {
+  if (!cognitiveStatus) return;
+  const normalized = String(state || "UNKNOWN").toUpperCase();
+  let displayState = "degraded";
+  if (normalized === "AVAILABLE") displayState = "available";
+  if (normalized === "UNAVAILABLE") displayState = "unavailable";
+  const labels = {
+    available: "канал мышления доступен",
+    degraded: "канал мышления работает с ограничениями",
+    unavailable: "Домовой рядом · основной канал недоступен",
+  };
+  cognitiveStatus.dataset.state = displayState;
+  cognitiveStatus.textContent = labels[displayState];
+  cognitiveStatus.title = displayState === "available" ? "Канал доступен. Нажмите, чтобы проверить ещё раз" : "Проверить канал ещё раз";
+  if (cognitiveConsoleLink) cognitiveConsoleLink.hidden = displayState === "available";
+}
+
+async function loadCognitiveStatus() {
+  if (!cognitiveStatus || !token) return;
+  cognitiveStatus.dataset.state = "checking";
+  cognitiveStatus.textContent = "проверяю канал мышления";
+  try {
+    const result = await api("/api/capabilities/cognitive-proposal/health", {method: "GET"});
+    renderCognitiveStatus(result.State || result.state || "UNKNOWN");
+  } catch (error) {
+    if (error instanceof ChatApiError && (error.status === 401 || error.status === 403)) {
+      expireSession("Сессия устарела. Войдите снова, чтобы продолжить разговор.");
+      return;
+    }
+    renderCognitiveStatus("UNAVAILABLE");
+  }
+}
+
+function startCognitiveStatusPolling() {
+  if (cognitiveStatusTimer) return;
+  loadCognitiveStatus();
+  cognitiveStatusTimer = window.setInterval(loadCognitiveStatus, 30000);
+}
+
+function stopCognitiveStatusPolling() {
+  if (!cognitiveStatusTimer) return;
+  window.clearInterval(cognitiveStatusTimer);
+  cognitiveStatusTimer = null;
+}
 
 function showChat() {
   loginView.hidden = true;
@@ -23,10 +93,12 @@ function showChat() {
   if (!messages.children.length) {
     appendMessage("assistant", "Я рядом. Напишите обычное сообщение, без внутренних идентификаторов.");
   }
+  startCognitiveStatusPolling();
   messageInput.focus();
 }
 
 function showLogin() {
+  stopCognitiveStatusPolling();
   chatView.hidden = true;
   loginView.hidden = false;
 }
@@ -56,10 +128,21 @@ async function api(path, options = {}) {
   const headers = {"Content-Type": "application/json", ...(options.headers || {})};
   if (token) headers.Authorization = `Bearer ${token}`;
   const response = await fetch(path, {...options, headers});
-  if (!response.ok) throw new Error(await response.text());
+  if (!response.ok) throw new ChatApiError(response.status, await response.text());
   return response.json();
 }
 
+function expireSession(message = "") {
+  token = "";
+  conversationID = "";
+  sessionStorage.removeItem("domovoy.chat.token");
+  sessionStorage.removeItem("domovoy.chat.conversation");
+  messages.replaceChildren();
+  updateActiveFocus("");
+  if (message) loginError.textContent = message;
+  showLogin();
+}
+
 function humanMeta(result) {
   if (result.reminder_scheduled) return "Напоминание сохранено. Я вернусь к нему сам.";
   if (result.delegation_id && result.delegation_state) return `Передал в coding-agent: ${humanDelegationState(result.delegation_state)}.`;
@@ -189,8 +272,14 @@ async function sendChatMessage(text, options = {}) {
       await loadToday();
       activateTab("today-panel");
     }
-  } catch {
-    appendMessage("assistant", "Чат сейчас недоступен. Сообщение не принято runtime.");
+  } catch (error) {
+    if (error instanceof ChatApiError && (error.status === 401 || error.status === 403)) {
+      expireSession("Сессия устарела. Войдите снова, чтобы продолжить разговор.");
+    } else if (error instanceof ChatApiError && error.status >= 500) {
+      appendMessage("assistant", "Домовой не смог завершить обработку: основной runtime сейчас недоступен. Встроенный канал проверяется; повторите сообщение через несколько секунд.");
+    } else {
+      appendMessage("assistant", "Домовой не принял сообщение. Проверьте текст и повторите попытку.");
+    }
   } finally {
     sendButton.disabled = false;
     messageInput.focus();
@@ -235,16 +324,35 @@ for (const tab of navTabs) {
   tab.addEventListener("click", () => activateTab(tab.dataset.tab));
 }
 
+for (const starter of conversationStarters) {
+  starter.addEventListener("click", async () => {
+    const text = starter.dataset.starter || "";
+    if (!text || sendButton.disabled) return;
+    messageInput.value = "";
+    await sendChatMessage(text);
+  });
+}
+
 if (refreshToday) refreshToday.addEventListener("click", loadToday);
+if (cognitiveStatus) cognitiveStatus.addEventListener("click", loadCognitiveStatus);
+if (aiDataForm) {
+  aiDataForm.addEventListener("submit", async (event) => {
+    event.preventDefault();
+    const details = aiDataInput.value.trim();
+    if (!details || sendButton.disabled) return;
+    if (containsSecretShapedText(details)) {
+      showAIDataError("Не отправляю секреты. Удалите пароль, токен, API-ключ или приватный ключ и оставьте только описание модели.");
+      return;
+    }
+    showAIDataError();
+    aiDataInput.value = "";
+    await sendChatMessage(`Передаю сведения о локальном ИИ для текущего разговора:\n${details}`);
+  });
+}
+if (aiDataInput) aiDataInput.addEventListener("input", () => showAIDataError());
 
 logoutButton.addEventListener("click", () => {
-  token = "";
-  conversationID = "";
-  sessionStorage.removeItem("domovoy.chat.token");
-  sessionStorage.removeItem("domovoy.chat.conversation");
-  messages.replaceChildren();
-  updateActiveFocus("");
-  showLogin();
+  expireSession();
 });
 
 if (token) {

cmd/creator-web/static/assets/console.css

@@ -1,12 +1,12 @@
 :root {
-  --ink: #e9eee7;
-  --muted: #8c9a91;
-  --faint: #58645d;
-  --base: #0b100e;
-  --panel: #101714;
-  --panel-high: #151e1a;
-  --line: #2a352f;
-  --line-soft: #1d2822;
+  --ink: #eef2ec;
+  --muted: #a7b2aa;
+  --faint: #718078;
+  --base: #0f1512;
+  --panel: #17201b;
+  --panel-high: #202b25;
+  --line: #34423a;
+  --line-soft: #26332c;
   --signal: #c9a85f;
   --signal-bright: #e7c97b;
   --good: #78c6a3;
@@ -21,13 +21,15 @@
 
 * { box-sizing: border-box; }
 [hidden] { display: none !important; }
-html { background: var(--base); color: var(--ink); font-family: var(--sans); }
-body { margin: 0; min-width: 320px; min-height: 100vh; background: radial-gradient(circle at 73% -10%, rgba(83, 123, 101, .15), transparent 38%), var(--base); }
+html { background: var(--base); color: var(--ink); font-family: var(--sans); scroll-behavior: smooth; }
+body { margin: 0; min-width: 320px; min-height: 100vh; background: radial-gradient(circle at 73% -10%, rgba(83, 123, 101, .13), transparent 38%), var(--base); }
 button, input, textarea { font: inherit; }
 button { color: inherit; }
-button:focus-visible, input:focus-visible, textarea:focus-visible { outline: 2px solid var(--signal-bright); outline-offset: 3px; }
+button:focus-visible, input:focus-visible, textarea:focus-visible, select:focus-visible { outline: 2px solid var(--signal-bright); outline-offset: 3px; }
+.skip-link { position: fixed; top: 10px; left: 10px; z-index: 30; padding: 10px 13px; color: #11150f; background: var(--signal-bright); font: 600 10px/1 var(--mono); text-decoration: none; transform: translateY(-160%); transition: transform .18s; }
+.skip-link:focus { transform: translateY(0); }
 
-.grain { position: fixed; inset: 0; pointer-events: none; opacity: .18; z-index: 10; background-image: url("data:image/svg+xml,%3Csvg viewBox='0 0 160 160' xmlns='http://www.w3.org/2000/svg'%3E%3Cfilter id='n'%3E%3CfeTurbulence type='fractalNoise' baseFrequency='.9' numOctaves='2' stitchTiles='stitch'/%3E%3C/filter%3E%3Crect width='100%25' height='100%25' filter='url(%23n)' opacity='.16'/%3E%3C/svg%3E"); }
+.grain { position: fixed; inset: 0; pointer-events: none; opacity: .045; z-index: 10; background-image: url("data:image/svg+xml,%3Csvg viewBox='0 0 160 160' xmlns='http://www.w3.org/2000/svg'%3E%3Cfilter id='n'%3E%3CfeTurbulence type='fractalNoise' baseFrequency='.9' numOctaves='2' stitchTiles='stitch'/%3E%3C/filter%3E%3Crect width='100%25' height='100%25' filter='url(%23n)' opacity='.16'/%3E%3C/svg%3E"); }
 .eyebrow, .rail-index { margin: 0 0 12px; color: var(--signal); font: 600 11px/1 var(--mono); letter-spacing: .18em; text-transform: uppercase; }
 
 .login-shell { min-height: 100vh; display: grid; place-items: center; padding: 32px 20px; position: relative; overflow: hidden; }
@@ -63,6 +65,10 @@ button:focus-visible, input:focus-visible, textarea:focus-visible { outline: 2px
 .wordmark strong { font: 400 20px/1 var(--serif); }
 .wordmark small { margin-top: 4px; color: var(--muted); font: 9px/1 var(--mono); letter-spacing: .12em; text-transform: uppercase; }
 .topbar-actions { display: flex; align-items: center; gap: 10px; }
+.chat-return-link { color: var(--signal); text-decoration: none; font: 10px/1 var(--mono); letter-spacing: .08em; text-transform: uppercase; white-space: nowrap; }
+.topbar-nav { display: flex; align-items: center; gap: 4px; margin-right: 8px; }
+.topbar-nav a { padding: 9px 10px; color: var(--muted); text-decoration: none; font: 600 9px/1 var(--mono); letter-spacing: .08em; text-transform: uppercase; }
+.topbar-nav a:hover, .topbar-nav a:focus-visible { color: var(--ink); background: var(--panel-high); outline: 0; }
 .connection { margin-right: 12px; color: var(--muted); font: 10px/1 var(--mono); letter-spacing: .08em; text-transform: uppercase; }
 .connection i { width: 7px; height: 7px; display: inline-block; margin-right: 8px; border-radius: 50%; background: var(--good); box-shadow: 0 0 14px rgba(120, 198, 163, .6); }
 .connection.offline i { background: var(--bad); box-shadow: none; }
@@ -73,17 +79,55 @@ button:focus-visible, input:focus-visible, textarea:focus-visible { outline: 2px
 .context-rail h2 { margin: 0; font: 400 29px/1.1 var(--serif); }
 .rail-copy { margin: 14px 0 0; color: var(--muted); font-size: 12px; line-height: 1.5; }
 .context-form { display: grid; }
+.context-status-row { margin-bottom: 16px; padding: 10px 11px; display: flex; align-items: center; justify-content: space-between; gap: 10px; border: 1px solid var(--line-soft); background: rgba(120,198,163,.04); }
+.context-status-label { color: var(--faint); font: 9px/1 var(--mono); letter-spacing: .1em; }
+.context-status-row strong { color: var(--warn); font: 600 9px/1 var(--mono); letter-spacing: .06em; text-transform: uppercase; }
+.context-status-row strong[data-state="ready"] { color: var(--good); }
+.context-presets { display: grid; gap: 7px; margin-bottom: 14px; padding-bottom: 14px; border-bottom: 1px solid var(--line-soft); }
+.context-presets label { margin: 0; }
+.context-presets select { width: 100%; min-height: 38px; padding: 0 9px; border: 1px solid var(--line); border-radius: var(--radius); color: var(--ink); background: #0b110e; font: 10px/1 var(--mono); }
+.context-presets small { color: var(--faint); font-size: 10px; line-height: 1.35; }
+.context-field { display: grid; gap: 7px; }
+.context-field + .context-field { margin-top: 13px; }
+.context-field label { margin: 0; }
+.context-field label span { color: var(--signal); font-size: 8px; letter-spacing: .06em; }
+.context-input-row { display: grid; grid-template-columns: minmax(0, 1fr) 34px; gap: 5px; }
+.context-input-row input { min-width: 0; }
+.copy-context { width: 34px; height: 40px; border: 1px solid var(--line); border-radius: var(--radius); color: var(--muted); background: transparent; cursor: pointer; }
+.copy-context:hover { color: var(--ink); border-color: var(--faint); background: var(--panel-high); }
+.id-actions { min-height: 31px; display: flex; align-items: center; gap: 7px; margin-top: 12px; }
+.id-action { min-height: 30px; padding: 0 9px; border: 1px solid var(--line-soft); border-radius: var(--radius); color: var(--muted); background: transparent; cursor: pointer; font: 9px/1 var(--mono); letter-spacing: .04em; }
+.id-action:hover { color: var(--ink); border-color: var(--signal); background: rgba(201,168,95,.07); }
+.icon-id-action { width: 30px; padding: 0; color: var(--faint); }
 .context-form label { margin-top: 15px; }
 .context-form label:first-child { margin-top: 0; }
 .context-form input { height: 40px; padding: 0 10px; font: 11px/1 var(--mono); }
+.context-hint { margin: 12px 0 0; color: var(--faint); font-size: 10px; line-height: 1.45; }
+.advanced-context { margin-top: 17px; border-top: 1px solid var(--line-soft); border-bottom: 1px solid var(--line-soft); }
+.advanced-context summary { padding: 12px 0; color: var(--muted); cursor: pointer; list-style: none; font: 600 9px/1.2 var(--mono); letter-spacing: .08em; text-transform: uppercase; }
+.advanced-context summary::before { content: "+"; display: inline-block; width: 18px; color: var(--signal); font-size: 13px; }
+.advanced-context[open] summary::before { content: "−"; }
+.advanced-context > div { padding: 0 0 10px; }
+.advanced-context label { margin-top: 13px; }
+.context-actions { display: grid; gap: 8px; }
+.context-actions .secondary-button { margin-top: 18px; }
+.context-actions .text-button { margin: 0; justify-self: start; padding-inline: 0; }
 .secondary-button { height: 42px; margin-top: 20px; color: #11150f; background: var(--signal); font-size: 12px; }
+.section-nav { display: grid; gap: 3px; margin-top: 4px; }
+.section-nav-link { display: grid; grid-template-columns: 28px 1fr; gap: 2px 10px; padding: 11px 10px; border-left: 2px solid transparent; color: var(--muted); text-decoration: none; transition: background .18s, border-color .18s, color .18s; }
+.section-nav-link:hover, .section-nav-link:focus-visible, .section-nav-link.active, .section-nav-link[aria-current="location"] { border-left-color: var(--signal); color: var(--ink); background: rgba(201,168,95,.07); outline: 0; }
+.section-nav-link span { grid-row: 1 / span 2; color: var(--signal); font: 9px/1.4 var(--mono); }
+.section-nav-link b { font: 600 11px/1.2 var(--sans); }
+.section-nav-link small { color: var(--faint); font: 9px/1.2 var(--mono); }
 .session-stamp { margin-top: auto; padding-top: 20px; display: grid; gap: 6px; border-top: 1px solid var(--line); }
 .session-stamp span { margin-top: 8px; color: var(--faint); font: 9px/1 var(--mono); letter-spacing: .14em; }
 .session-stamp strong { overflow: hidden; color: var(--muted); font: 10px/1.4 var(--mono); text-overflow: ellipsis; }
 
-.workspace { grid-column: 2; grid-row: 2; padding: clamp(28px, 4vw, 58px); min-width: 0; }
+.workspace { grid-column: 2; grid-row: 2; width: min(100%, 1740px); justify-self: start; padding: 42px clamp(24px, 3vw, 48px) 64px; min-width: 0; }
+.workspace > [data-page][hidden] { display: none !important; }
+.workspace > section { scroll-margin-top: 94px; }
 .workspace-head { display: flex; align-items: end; justify-content: space-between; gap: 24px; margin-bottom: 34px; }
-.workspace-head h1 { margin: 0; font: 400 clamp(36px, 5vw, 58px)/1 var(--serif); letter-spacing: -.035em; }
+.workspace-head h1 { margin: 0; font: 400 clamp(34px, 4vw, 50px)/1 var(--serif); letter-spacing: -.035em; }
 .last-update { color: var(--faint); font: 10px/1.4 var(--mono); text-align: right; }
 .signal-strip { display: grid; grid-template-columns: repeat(4, 1fr); margin-bottom: 18px; border: 1px solid var(--line); background: var(--panel); }
 .signal-strip div { padding: 16px 18px; display: flex; align-items: center; justify-content: space-between; gap: 12px; border-right: 1px solid var(--line); }
@@ -94,6 +138,46 @@ button:focus-visible, input:focus-visible, textarea:focus-visible { outline: 2px
 .signal-strip strong[data-state="error"] { color: var(--bad); }
 .signal-strip strong[data-state="loading"] { color: var(--warn); animation: pulse 1.1s ease-in-out infinite; }
 
+.diagnostics-panel, .settings-panel { margin-bottom: 18px; border: 1px solid var(--line); background: rgba(16,23,20,.82); }
+.diagnostics-panel { border-color: rgba(120,198,163,.32); box-shadow: inset 3px 0 0 rgba(120,198,163,.45); }
+.panel-heading { min-height: 68px; padding: 14px 18px; display: flex; align-items: center; justify-content: space-between; gap: 18px; border-bottom: 1px solid var(--line); }
+.panel-heading p { margin: 0 0 6px; color: var(--faint); font: 9px/1 var(--mono); letter-spacing: .13em; text-transform: uppercase; }
+.panel-heading h2 { margin: 0; font: 400 23px/1 var(--serif); }
+.panel-heading-tools { display: flex; align-items: center; gap: 14px; }
+.panel-heading-tools > span, .settings-saved { color: var(--muted); font: 9px/1.3 var(--mono); letter-spacing: .06em; text-transform: uppercase; }
+.compact-button { width: auto; min-width: 142px; height: 38px; margin: 0; padding: 0 13px; }
+.diagnostic-intro { padding: 13px 18px; display: flex; align-items: center; gap: 10px; border-bottom: 1px solid var(--line-soft); color: var(--muted); }
+.diagnostic-intro p { margin: 0; font-size: 11px; line-height: 1.45; }
+.diagnostic-pulse { width: 7px; height: 7px; flex: 0 0 auto; border-radius: 50%; background: var(--good); box-shadow: 0 0 12px rgba(120,198,163,.7); }
+.diagnostic-list { display: grid; grid-template-columns: repeat(4, minmax(0, 1fr)); }
+.diagnostic-list[aria-busy="true"] { opacity: .7; }
+.diagnostic-item { min-width: 0; min-height: 92px; padding: 14px 16px; display: grid; grid-template-columns: 9px 1fr auto; gap: 9px; align-items: start; border-right: 1px solid var(--line-soft); border-bottom: 1px solid var(--line-soft); }
+.diagnostic-item:nth-child(4n) { border-right: 0; }
+.diagnostic-item > i { width: 7px; height: 7px; margin-top: 4px; border-radius: 50%; background: var(--faint); }
+.diagnostic-item[data-state="ok"] > i { background: var(--good); box-shadow: 0 0 9px rgba(120,198,163,.6); }
+.diagnostic-item[data-state="error"] > i { background: var(--bad); }
+.diagnostic-item[data-state="loading"] > i { background: var(--warn); animation: pulse 1.1s ease-in-out infinite; }
+.diagnostic-item strong { display: block; color: var(--ink); font: 600 10px/1.3 var(--mono); }
+.diagnostic-item span { display: block; margin-top: 6px; color: var(--muted); font-size: 10px; line-height: 1.35; }
+.diagnostic-item em { color: var(--faint); font: normal 9px/1.2 var(--mono); text-transform: uppercase; }
+.diagnostic-item[data-state="ok"] em { color: var(--good); }
+.diagnostic-item[data-state="error"] em { color: var(--bad); }
+.settings-grid { padding: 18px; display: grid; grid-template-columns: repeat(2, minmax(0, 1fr)); gap: 16px 20px; }
+.setting-field, .setting-check { min-width: 0; display: grid; gap: 7px; color: var(--ink); }
+.setting-field > span, .setting-check b { font: 600 10px/1.2 var(--mono); letter-spacing: .08em; text-transform: uppercase; }
+.setting-field small, .setting-check small { color: var(--muted); font-size: 11px; line-height: 1.4; }
+.setting-field select { width: 100%; min-height: 40px; padding: 0 10px; border: 1px solid var(--line); border-radius: var(--radius); color: var(--ink); background: #0b110e; font: 11px/1 var(--mono); }
+.setting-check { grid-template-columns: 18px 1fr; align-items: start; gap: 10px; padding: 10px 12px; border: 1px solid var(--line-soft); }
+.setting-check input { width: 16px; height: 16px; margin: 2px 0 0; accent-color: var(--signal); }
+.setting-check span { display: grid; gap: 7px; }
+.settings-actions { display: flex; align-items: center; justify-content: flex-end; gap: 14px; grid-column: 1 / -1; padding-top: 2px; }
+.settings-actions .text-button { margin: 0; }
+html[data-density="compact"] .data-card { padding: 18px; }
+html[data-density="compact"] .data-card dl div { padding-block: 10px; }
+html[data-density="compact"] .activity-row { min-height: 58px; padding-block: 8px; }
+html[data-density="compact"] .learning-row { min-height: 54px; padding-block: 9px; }
+html[data-reduced-motion="true"] *, html[data-reduced-motion="true"] *::before, html[data-reduced-motion="true"] *::after { animation-duration: .01ms !important; animation-iteration-count: 1 !important; scroll-behavior: auto !important; transition-duration: .01ms !important; }
+
 .advisor-panel { margin-bottom: 18px; padding: 24px; display: grid; grid-template-columns: minmax(220px, .72fr) minmax(320px, 1.28fr); gap: 18px 34px; border: 1px solid rgba(201,168,95,.42); background: linear-gradient(125deg, rgba(201,168,95,.1), rgba(16,23,20,.88) 44%, rgba(12,20,17,.96)); box-shadow: inset 3px 0 0 rgba(201,168,95,.58); }
 .advisor-intro { align-self: center; }
 .advisor-intro > p { margin: 0 0 10px; color: var(--signal); font: 600 9px/1 var(--mono); letter-spacing: .15em; }
@@ -278,6 +362,9 @@ button:focus-visible, input:focus-visible, textarea:focus-visible { outline: 2px
   .advisor-panel { grid-template-columns: 1fr; }
   .capability-card { grid-column: auto; }
   .prospective-card { grid-column: auto; }
+  .diagnostic-list { grid-template-columns: repeat(2, minmax(0, 1fr)); }
+  .diagnostic-item:nth-child(4n) { border-right: 1px solid var(--line-soft); }
+  .diagnostic-item:nth-child(2n) { border-right: 0; }
 }
 
 @media (max-width: 680px) {
@@ -285,14 +372,26 @@ button:focus-visible, input:focus-visible, textarea:focus-visible { outline: 2px
   .console { display: block; }
   .topbar { height: 66px; padding: 0 14px; }
   .wordmark small, .connection, .text-button { display: none; }
+  .chat-return-link { display: inline-block; }
+  .topbar-nav { display: none; }
   .context-rail { padding: 24px 18px; border-right: 0; border-bottom: 1px solid var(--line); }
   .rail-copy { max-width: 48ch; }
   .session-stamp { margin-top: 8px; grid-template-columns: auto 1fr; align-items: center; }
   .session-stamp span { margin: 0; }
   .workspace { padding: 30px 16px 50px; }
+  .section-nav { display: flex; gap: 6px; margin: 10px -18px -24px; padding: 10px 18px; overflow-x: auto; border-top: 1px solid var(--line-soft); background: #0e1512; scrollbar-width: thin; }
+  .section-nav-link { min-width: 142px; padding: 10px; border-left: 0; border-bottom: 2px solid transparent; }
+  .section-nav-link:hover, .section-nav-link:focus-visible, .section-nav-link.active, .section-nav-link[aria-current="location"] { border-left-color: transparent; border-bottom-color: var(--signal); }
   .workspace-head { align-items: start; flex-direction: column; }
   .last-update { text-align: left; }
   .signal-strip { grid-template-columns: 1fr; }
+  .panel-heading { align-items: flex-start; flex-direction: column; }
+  .panel-heading-tools { width: 100%; justify-content: space-between; }
+  .diagnostic-list { grid-template-columns: 1fr; }
+  .diagnostic-item, .diagnostic-item:nth-child(2n), .diagnostic-item:nth-child(4n) { border-right: 0; }
+  .settings-grid { grid-template-columns: 1fr; padding: 16px; }
+  .settings-actions { grid-column: auto; align-items: stretch; flex-direction: column; }
+  .settings-actions .primary-button { width: 100%; }
   .signal-strip div { border-right: 0; border-bottom: 1px solid var(--line); }
   .advisor-panel { padding: 20px 16px; gap: 20px; }
   .advisor-controls { align-items: stretch; flex-direction: column; }

cmd/creator-web/static/assets/console.js

@@ -7,14 +7,42 @@ const advisoryForm = byId("advisory-form");
 const loginError = byId("login-error");
 const toast = byId("toast");
 const contextFields = ["session-id", "workspace-id", "task-id", "prospective-id", "capability-id"];
+const settingsStorageKey = "domovoy.creator.settings";
+const contextPresetsStorageKey = "domovoy.creator.context.presets";
 let sessionToken = sessionStorage.getItem("domovoy.creator.session") || "";
 let toastTimer;
+let refreshTimer;
 let currentTask = null;
 let currentProspective = null;
 let pendingCommand = null;
 let pendingNotification = null;
 let lastAuthorizedActionID = "";
 let advisoryPolicy = {Mode: "deterministic", ExternalEgress: false, AcknowledgementRequired: false};
+let uiSettings = {density: "comfortable", refresh: "off", motion: false};
+
+const pageNavLinks = Array.from(document.querySelectorAll(".section-nav-link, .topbar-nav a"));
+const pageViews = Array.from(document.querySelectorAll("[data-page]"));
+const cabinetPages = ["overview", "diagnostics", "operations", "learning", "settings"];
+
+function setActivePage(id, updateHistory = false) {
+  const page = cabinetPages.includes(id) ? id : "overview";
+  pageViews.forEach((view) => { view.hidden = view.dataset.page !== page; });
+  document.body.dataset.page = page;
+  pageNavLinks.forEach((link) => {
+    const active = link.getAttribute("href") === `#${page}`;
+    link.classList.toggle("active", active);
+    if (active) link.setAttribute("aria-current", "location");
+    else link.removeAttribute("aria-current");
+  });
+  if (updateHistory && window.location.hash !== `#${page}`) window.history.pushState({}, "", `#${page}`);
+}
+
+pageNavLinks.forEach((link) => link.addEventListener("click", (event) => {
+  event.preventDefault();
+  setActivePage(link.getAttribute("href").slice(1), true);
+}));
+window.addEventListener("popstate", () => setActivePage(window.location.hash.slice(1)));
+setActivePage(window.location.hash.slice(1));
 
 function setText(id, value, fallback = "—") {
   byId(id).textContent = value === undefined || value === null || value === "" ? fallback : String(value);
@@ -39,6 +67,18 @@ function notify(message) {
   toastTimer = setTimeout(() => { toast.hidden = true; }, 4200);
 }
 
+function safeClientError(error) {
+  const message = error && typeof error.message === "string" ? error.message : "";
+  switch (message) {
+    case "creator authentication denied":
+      return "Логин или пароль не принят.";
+    case "Сессия отклонена":
+      return "Сессия истекла. Войдите снова.";
+    default:
+      return "Операция недоступна. Попробуйте ещё раз.";
+  }
+}
+
 async function request(path, options = {}) {
   const headers = new Headers(options.headers || {});
   if (sessionToken) headers.set("Authorization", `Bearer ${sessionToken}`);
@@ -50,7 +90,9 @@ async function request(path, options = {}) {
   }
   if (!response.ok) {
     const detail = (await response.text()).trim();
-    throw new Error(detail || `Ошибка ${response.status}`);
+    const error = new Error(detail || `Ошибка ${response.status}`);
+    error.status = response.status;
+    throw error;
   }
   return response.json();
 }
@@ -64,15 +106,57 @@ function restoreContext() {
   } catch (_) {
     localStorage.removeItem("domovoy.creator.context");
   }
+  renderContextState();
+  renderContextPresets();
 }
 
 function saveContext() {
   const saved = {};
   contextFields.forEach((id) => { saved[id] = byId(id).value.trim(); });
   localStorage.setItem("domovoy.creator.context", JSON.stringify(saved));
+  renderContextState();
   return saved;
 }
 
+function readContextPresets() {
+  try {
+    const value = JSON.parse(localStorage.getItem(contextPresetsStorageKey) || "[]");
+    return Array.isArray(value) ? value.filter((item) => item && item.session && item.workspace) : [];
+  } catch (_) {
+    localStorage.removeItem(contextPresetsStorageKey);
+    return [];
+  }
+}
+
+function renderContextState() {
+  const state = byId("context-state");
+  if (!state) return;
+  const ready = Boolean(byId("session-id").value.trim() && byId("workspace-id").value.trim());
+  state.textContent = ready ? "готов к проверке" : "не выбран";
+  state.dataset.state = ready ? "ready" : "empty";
+}
+
+function renderContextPresets() {
+  const select = byId("context-preset");
+  if (!select) return;
+  const presets = readContextPresets();
+  select.replaceChildren(new Option("Выберите сохранённый набор…", ""));
+  presets.forEach((preset, index) => {
+    const session = preset.session.length > 18 ? `${preset.session.slice(0, 8)}…${preset.session.slice(-6)}` : preset.session;
+    const workspace = preset.workspace.length > 18 ? `${preset.workspace.slice(0, 8)}…${preset.workspace.slice(-6)}` : preset.workspace;
+    select.appendChild(new Option(`${session} · ${workspace}`, String(index)));
+  });
+}
+
+function rememberContextPreset(context) {
+  if (!context["session-id"] || !context["workspace-id"]) return;
+  const next = {session: context["session-id"], workspace: context["workspace-id"], savedAt: Date.now()};
+  const presets = readContextPresets().filter((item) => item.session !== next.session || item.workspace !== next.workspace);
+  presets.unshift(next);
+  localStorage.setItem(contextPresetsStorageKey, JSON.stringify(presets.slice(0, 5)));
+  renderContextPresets();
+}
+
 async function showConsole() {
   const session = await request("/api/session/current");
   setText("session-actor", session.ActorID);
@@ -80,6 +164,7 @@ async function showConsole() {
   setText("session-expiry", expiry);
   loginView.hidden = true;
   consoleView.hidden = false;
+  restoreSettings();
   restoreContext();
   await loadAdvisoryPolicy();
   const context = saveContext();
@@ -88,10 +173,13 @@ async function showConsole() {
     loadActionHistory();
     loadLearning();
   }
+  runDiagnostics();
 }
 
 function endSession(message = "Сессия завершена.") {
   sessionToken = "";
+  clearInterval(refreshTimer);
+  refreshTimer = null;
   sessionStorage.removeItem("domovoy.creator.session");
   consoleView.hidden = true;
   loginView.hidden = false;
@@ -128,7 +216,7 @@ loginForm.addEventListener("submit", async (event) => {
     byId("creator-password").value = "";
     await showConsole();
   } catch (error) {
-    loginError.textContent = error.message === "creator authentication denied" ? "Логин или пароль не принят." : error.message;
+    loginError.textContent = safeClientError(error);
   } finally {
     button.disabled = false;
     button.firstElementChild.textContent = "Открыть консоль";
@@ -144,14 +232,129 @@ byId("toggle-secret").addEventListener("click", () => {
 
 contextForm.addEventListener("submit", (event) => {
   event.preventDefault();
-  saveContext();
+  const context = saveContext();
+  rememberContextPreset(context);
   loadDashboard();
 });
 
+for (const input of [byId("session-id"), byId("workspace-id")]) {
+  input.addEventListener("input", renderContextState);
+}
+
+byId("context-preset").addEventListener("change", (event) => {
+  const index = Number(event.target.value);
+  if (!Number.isInteger(index)) return;
+  const preset = readContextPresets()[index];
+  if (!preset) return;
+  byId("session-id").value = preset.session;
+  byId("workspace-id").value = preset.workspace;
+  renderContextState();
+  loadDashboard();
+  notify("Контекст из недавнего набора загружен.");
+});
+
+for (const button of document.querySelectorAll("[data-copy-context]")) {
+  button.addEventListener("click", async () => {
+    const value = byId(button.dataset.copyContext).value.trim();
+    if (!value) {
+      notify("Сначала укажите идентификатор.");
+      return;
+    }
+    try {
+      await navigator.clipboard.writeText(value);
+      notify("Идентификатор скопирован.");
+    } catch (_) {
+      notify("Не удалось скопировать идентификатор.");
+    }
+  });
+}
+
+for (const button of document.querySelectorAll("[data-copy-value], [data-use-value]")) {
+  button.addEventListener("click", async () => {
+    const source = byId(button.dataset.copyValue || button.dataset.useValue);
+    const value = source?.textContent.trim() || "";
+    if (!value || value === "—") {
+      notify("Сначала загрузите значение.");
+      return;
+    }
+    if (button.dataset.useValue) {
+      const target = byId(button.dataset.targetId);
+      if (!target) return;
+      target.value = value;
+      document.querySelector(".advanced-context").open = true;
+      saveContext();
+      notify("ID подставлен в расширенную проверку.");
+      return;
+    }
+    try {
+      await navigator.clipboard.writeText(value);
+      notify("ID скопирован.");
+    } catch (_) {
+      notify("Не удалось скопировать ID.");
+    }
+  });
+}
+
+byId("reset-context").addEventListener("click", () => {
+  contextFields.forEach((id) => { byId(id).value = id === "capability-id" ? "cognitive-proposal" : ""; });
+  localStorage.removeItem("domovoy.creator.context");
+  loadDashboard();
+  notify("Рабочий контекст сброшен.");
+});
+
+function restoreSettings() {
+  try {
+    const saved = JSON.parse(localStorage.getItem(settingsStorageKey) || "{}");
+    uiSettings = {
+      density: ["comfortable", "compact"].includes(saved.density) ? saved.density : "comfortable",
+      refresh: ["off", "30", "60", "300"].includes(saved.refresh) ? saved.refresh : "off",
+      motion: saved.motion === true,
+    };
+  } catch (_) {
+    uiSettings = {density: "comfortable", refresh: "off", motion: false};
+  }
+  byId("setting-density").value = uiSettings.density;
+  byId("setting-refresh").value = uiSettings.refresh;
+  byId("setting-motion").checked = uiSettings.motion;
+  applySettings();
+}
+
+function applySettings() {
+  document.documentElement.dataset.density = uiSettings.density;
+  document.documentElement.dataset.reducedMotion = uiSettings.motion ? "true" : "false";
+  clearInterval(refreshTimer);
+  refreshTimer = null;
+  if (sessionToken && uiSettings.refresh !== "off") {
+    refreshTimer = setInterval(() => loadDashboard(), Number(uiSettings.refresh) * 1000);
+  }
+}
+
+byId("settings-form").addEventListener("submit", (event) => {
+  event.preventDefault();
+  uiSettings = {
+    density: byId("setting-density").value,
+    refresh: byId("setting-refresh").value,
+    motion: byId("setting-motion").checked,
+  };
+  localStorage.setItem(settingsStorageKey, JSON.stringify(uiSettings));
+  applySettings();
+  setText("settings-saved", "Сохранено только в этом браузере");
+  notify("Настройки кабинета сохранены.");
+});
+
+byId("reset-settings").addEventListener("click", () => {
+  uiSettings = {density: "comfortable", refresh: "off", motion: false};
+  localStorage.removeItem(settingsStorageKey);
+  restoreSettings();
+  setText("settings-saved", "Восстановлены значения по умолчанию");
+  notify("Настройки сброшены.");
+});
+
 byId("refresh-all").addEventListener("click", loadDashboard);
 byId("refresh-actions").addEventListener("click", loadActionHistory);
 byId("refresh-learning").addEventListener("click", loadLearning);
 byId("logout").addEventListener("click", () => endSession());
+byId("run-diagnostics").addEventListener("click", runDiagnostics);
 
 advisoryForm.addEventListener("submit", async (event) => {
   event.preventDefault();
@@ -185,7 +388,7 @@ advisoryForm.addEventListener("submit", async (event) => {
     byId("advisory-result").hidden = false;
   } catch (error) {
     setText("advisory-state", "ОШИБКА");
-    setText("advisory-text", error.message);
+    setText("advisory-text", safeClientError(error));
     byId("advisory-result").hidden = false;
   } finally {
     byId("advisory-egress-ack").checked = false;
@@ -246,6 +449,57 @@ async function loadDashboard() {
   setText("last-update", `Обновлено ${new Intl.DateTimeFormat("ru-RU", {hour: "2-digit", minute: "2-digit", second: "2-digit"}).format(new Date())}`);
 }
 
+async function runDiagnostics() {
+  const list = byId("diagnostic-list");
+  const summary = byId("diagnostic-summary");
+  const checks = [
+    ["Сессия", "identity", () => request("/api/session/current")],
+    ["Политика совета", "advisory", () => request("/api/advisory-policy")],
+    ["Когнитивная возможность", "capability", () => request("/api/capabilities/cognitive-proposal/health")],
+    ["Сегодня", "today", () => request("/api/today")],
+    ["Внимание", "attention", () => request("/api/attention")],
+    ["Действия", "actions", () => request("/api/actions?limit=1")],
+    ["Learning evidence", "learning", () => request("/api/learning/recent?limit=1")],
+  ];
+  list.setAttribute("aria-busy", "true");
+  list.replaceChildren();
+  checks.forEach(([label, key]) => list.append(createDiagnosticItem(label, key, "loading")));
+  setText("diagnostic-summary", "Проверяю…");
+  const results = await Promise.all(checks.map(async ([label, key, run]) => {
+    const started = performance.now();
+    try {
+      await run();
+      return {label, key, state: "ok", detail: `Ответ получен · ${Math.round(performance.now() - started)} мс`};
+    } catch (error) {
+      const detail = error?.status === 400 ? "Нужны параметры рабочего контекста" : error?.status === 401 ? "Сессия истекла" : error?.status >= 500 ? "Сервис временно недоступен" : "Проверка не пройдена";
+      return {label, key, state: "error", detail};
+    }
+  }));
+  list.replaceChildren(...results.map((result) => createDiagnosticItem(result.label, result.key, result.state, result.detail)));
+  list.setAttribute("aria-busy", "false");
+  const passed = results.filter((result) => result.state === "ok").length;
+  setText("diagnostic-summary", `${passed}/${results.length} проверок пройдено`);
+}
+
+function createDiagnosticItem(label, key, state, detail = "Проверяю…") {
+  const item = document.createElement("article");
+  item.className = "diagnostic-item";
+  item.dataset.state = state;
+  item.dataset.check = key;
+  const marker = document.createElement("i");
+  marker.setAttribute("aria-hidden", "true");
+  const copy = document.createElement("div");
+  const title = document.createElement("strong");
+  title.textContent = label;
+  const description = document.createElement("span");
+  description.textContent = detail;
+  copy.append(title, description);
+  const status = document.createElement("em");
+  status.textContent = state === "ok" ? "OK" : state === "error" ? "ошибка" : "…";
+  item.append(marker, copy, status);
+  return item;
+}
+
 async function loadLearning() {
   const experienceList = byId("experience-list");
   const reflectionList = byId("reflection-list");
@@ -272,7 +526,7 @@ async function loadLearning() {
       list.replaceChildren();
       const failed = document.createElement("p");
       failed.className = "register-empty activity-error";
-      failed.textContent = error.message;
+      failed.textContent = safeClientError(error);
       list.append(failed);
     });
     setText("learning-count", "ОШИБКА");
@@ -371,7 +625,7 @@ async function loadActionHistory() {
     list.replaceChildren();
     const failed = document.createElement("p");
     failed.className = "register-empty activity-error";
-    failed.textContent = error.message;
+    failed.textContent = safeClientError(error);
     list.append(failed);
     setText("action-count", "ОШИБКА");
   } finally {
@@ -430,7 +684,7 @@ async function reconcileHistoryAction(actionID, button) {
     await loadActionHistory();
     if (currentProspective) await loadProspectiveRegister(currentProspective.ID);
   } catch (error) {
-    notify(error.message);
+    notify(safeClientError(error));
     button.disabled = false;
     button.textContent = "Сверить";
   }
@@ -450,7 +704,7 @@ async function loadFocus(query) {
   } catch (error) {
     setSignal("focus", "ошибка", "error");
     setBadge("focus", "НЕДОСТУПЕН", "bad");
-    setText("focus-message", error.message);
+    setText("focus-message", safeClientError(error));
     byId("connection-state").classList.add("offline");
   }
 }
@@ -472,7 +726,7 @@ async function loadTask(taskID, query) {
     currentTask = null;
     setSignal("task", "отклонена", "error");
     setBadge("task", "ВНЕ ФОКУСА", "bad");
-    setText("task-message", error.message);
+    setText("task-message", safeClientError(error));
     updateActionReadiness();
   }
 }
@@ -511,12 +765,12 @@ async function loadProspectiveRegister(selectedID) {
     list.replaceChildren();
     const failed = document.createElement("p");
     failed.className = "register-empty";
-    failed.textContent = error.message;
+    failed.textContent = safeClientError(error);
     list.append(failed);
     setText("prospective-count", "ОШИБКА");
     setSignal("prospective", "ошибка", "error");
     setBadge("prospective", "НЕДОСТУПНА", "bad");
-    setText("prospective-message", error.message);
+    setText("prospective-message", safeClientError(error));
   }
 }
 
@@ -572,7 +826,7 @@ async function loadProspective(prospectiveID) {
     setSignal("prospective", "ошибка", "error");
     setBadge("prospective", "НЕДОСТУПНА", "bad");
     setText("prospective-state", "UNKNOWN");
-    setText("prospective-message", error.message);
+    setText("prospective-message", safeClientError(error));
     updateActionReadiness();
   }
 }
@@ -594,7 +848,7 @@ async function loadCapability(capabilityID) {
     setSignal("capability", "ошибка", "error");
     setBadge("capability", "НЕДОСТУПНА", "bad");
     setText("capability-state", "UNKNOWN");
-    setText("capability-reason", error.message);
+    setText("capability-reason", safeClientError(error));
   }
 }
 
@@ -700,7 +954,7 @@ byId("confirm-notification").addEventListener("click", async () => {
     await loadActionHistory();
     notify(result.State === "SUCCEEDED" ? "Receiver принял уведомление." : "Исход отправки требует сверки.");
   } catch (error) {
-    setText("notification-confirmation-error", error.message);
+    setText("notification-confirmation-error", safeClientError(error));
   } finally {
     button.disabled = false;
     button.textContent = "Подтверждаю отправку";
@@ -730,7 +984,7 @@ byId("confirm-satisfaction").addEventListener("click", async () => {
     notify(result.State === "SUCCEEDED" ? "Исполнение зафиксировано через Commit." : "Исход требует проверки.");
     await loadProspectiveRegister(command.ProspectiveItemID);
   } catch (error) {
-    setText("confirmation-error", error.message);
+    setText("confirmation-error", safeClientError(error));
   } finally {
     button.disabled = false;
     button.textContent = "Подтверждаю переход";
@@ -764,7 +1018,7 @@ byId("reconcile-action").addEventListener("click", async () => {
     notify(result.State === "SUCCEEDED" ? "Исход подтверждён." : "Исход пока неизвестен.");
     if (currentProspective) await loadProspectiveRegister(currentProspective.ID);
   } catch (error) {
-    notify(error.message);
+    notify(safeClientError(error));
   } finally {
     button.disabled = false;
     button.textContent = "Проверить исход";

cmd/creator-web/static/chat.html

@@ -25,38 +25,70 @@
 
     <section id="chat-view" class="chat-view" hidden>
       <header class="chat-header">
-        <a href="/chat" aria-label="Домовой">Домовой</a>
-        <nav class="human-nav" aria-label="Разделы Домового">
-          <button class="nav-tab active" data-tab="chat-panel" type="button">Чат</button>
-          <button class="nav-tab" data-tab="today-panel" type="button">Сегодня</button>
-          <button class="nav-tab" data-tab="history-panel" type="button">История</button>
-          <a href="/" class="operator-link">Оператор</a>
-        </nav>
-        <span id="active-focus">фокус: не выбран</span>
-        <span id="session-state">сессия активна</span>
+        <a href="/" aria-label="Домовой">Домовой</a>
+        <button id="cognitive-status" class="cognitive-status" data-state="checking" type="button" role="status" aria-live="polite" title="Проверить канал ещё раз">проверяю канал мышления</button>
+        <a id="cognitive-console-link" class="cognitive-console-link" href="/admin" hidden>настроить в консоли</a>
+        <div class="build-meta" aria-label="Версия и время обновления">
+          <span>версия __ASSISTANT_BUILD_REVISION__</span>
+          <time datetime="__ASSISTANT_BUILD_DATETIME__">обновлено __ASSISTANT_BUILD_TIME__</time>
+        </div>
+        <a href="/admin" class="operator-link">Консоль</a>
         <button id="logout" type="button" aria-label="Выйти">↗</button>
       </header>
-      <section id="chat-panel" class="surface-panel active-panel">
-        <div id="messages" class="messages" aria-live="polite"></div>
-        <form id="chat-form" class="composer">
-          <textarea id="message" rows="3" maxlength="16384" placeholder="Напишите Домовому обычное сообщение..." required></textarea>
-          <button id="send" type="submit">Отправить</button>
-        </form>
-      </section>
-      <section id="today-panel" class="surface-panel attention-surface" hidden>
-        <div class="surface-heading">
-          <p>Сегодня / внимание</p>
-          <button id="refresh-today" type="button">Обновить</button>
-        </div>
-        <div id="today-list" class="attention-list"></div>
-      </section>
-      <section id="history-panel" class="surface-panel history-surface" hidden>
-        <div class="surface-heading">
-          <p>История</p>
-          <span>Последние сообщения текущего окна</span>
-        </div>
-        <div id="history-list" class="history-list"></div>
-      </section>
+      <div class="chat-layout">
+        <aside class="chat-side chat-left" aria-label="Навигация и текущий фокус">
+          <div class="side-intro">
+            <p class="side-index">01 / РАЗГОВОР</p>
+            <h1>Домовой рядом</h1>
+            <p>Пишите обычными словами. Настройки и сведения можно передать прямо в текущий разговор.</p>
+          </div>
+          <div class="side-focus">
+            <span>ТЕКУЩИЙ ФОКУС</span>
+            <strong id="active-focus">не выбран</strong>
+          </div>
+          <nav class="human-nav" aria-label="Разделы Домового">
+            <button class="nav-tab active" data-tab="chat-panel" type="button"><b>01</b><span>Чат</span><small>живой разговор</small></button>
+            <button class="nav-tab" data-tab="today-panel" type="button"><b>02</b><span>Сегодня</span><small>что требует внимания</small></button>
+            <button class="nav-tab" data-tab="history-panel" type="button"><b>03</b><span>История</span><small>это окно разговора</small></button>
+          </nav>
+          <div class="side-note"><span>СЕССИЯ</span><strong id="session-state">активна</strong><small>Сведения сохраняются в текущем разговоре.</small></div>
+        </aside>
+        <main class="chat-main">
+          <section id="chat-panel" class="surface-panel active-panel">
+            <div id="messages" class="messages" aria-live="polite"></div>
+            <form id="chat-form" class="composer">
+              <textarea id="message" rows="3" maxlength="16384" placeholder="Напишите Домовому обычное сообщение..." required></textarea>
+              <button id="send" type="submit">Отправить</button>
+            </form>
+            <div class="conversation-starters" aria-label="Частые вопросы">
+              <span>Можно начать так:</span>
+              <button type="button" data-starter="Проверь локальный канал мышления">Проверь канал</button>
+              <button type="button" data-starter="Что сейчас доступно?">Что доступно?</button>
+              <button type="button" data-starter="Хочу изменить настройку локальной модели">Изменить настройку</button>
+            </div>
+          </section>
+          <section id="today-panel" class="surface-panel attention-surface" hidden>
+            <div class="surface-heading"><p>Сегодня / внимание</p><button id="refresh-today" type="button">Обновить</button></div>
+            <div id="today-list" class="attention-list"></div>
+          </section>
+          <section id="history-panel" class="surface-panel history-surface" hidden>
+            <div class="surface-heading"><p>История</p><span>Последние сообщения текущего окна</span></div>
+            <div id="history-list" class="history-list"></div>
+          </section>
+        </main>
+        <aside class="chat-side chat-right" aria-label="Состояние и сведения об ИИ">
+          <div class="side-intro"><p class="side-index">02 / ИНФОРМАЦИЯ</p><h2>Канал мышления</h2><p>Домовой видит подтверждённое состояние канала. Если основной ИИ пропал, он остаётся рядом и переходит в аварийный режим.</p></div>
+          <div class="ai-info-card"><span>ЧТО МОЖНО ПЕРЕДАТЬ</span><strong>Описание ИИ</strong><p>Название, назначение, ограничения или заметки о локальной модели. Не вставляйте пароли, токены и ключи.</p></div>
+          <form id="ai-data-form" class="ai-data-form">
+            <label for="ai-data">Данные для текущего разговора</label>
+            <textarea id="ai-data" rows="8" maxlength="12000" placeholder="Например: локальная модель нужна для коротких ответов на русском; контекст ограничен; внешняя сеть запрещена."></textarea>
+            <button type="submit">Передать Домовому</button>
+            <p id="ai-data-error" class="ai-data-error" role="alert" hidden></p>
+            <small>Это отправится как обычное сообщение в чат.</small>
+          </form>
+          <a class="side-console-link" href="/admin">Открыть консоль настройки <span>→</span></a>
+        </aside>
+      </div>
     </section>
   </main>
   <script src="/assets/chat.js"></script>

cmd/creator-web/static/index.html

@@ -6,9 +6,10 @@
   <meta name="color-scheme" content="dark">
   <meta name="theme-color" content="#101714">
   <title>Домовой — консоль создателя</title>
-  <link rel="stylesheet" href="/assets/console.css">
+  <link rel="stylesheet" href="/assets/console.css?v=20260821-context">
 </head>
 <body>
+  <a class="skip-link" href="#overview">К содержимому</a>
   <div class="grain" aria-hidden="true"></div>
 
   <main id="login-view" class="login-shell">
@@ -43,7 +44,15 @@
         <span><strong>Домовой</strong><small>консоль создателя</small></span>
       </a>
       <div class="topbar-actions">
+        <a class="chat-return-link" href="/">← Чат с Домовым</a>
         <span id="connection-state" class="connection"><i></i>система доступна</span>
+        <nav class="topbar-nav" aria-label="Разделы кабинета">
+          <a href="#overview">Обзор</a>
+          <a href="#diagnostics">Проверки</a>
+          <a href="#operations">Операции</a>
+          <a href="#learning">Опыт</a>
+          <a href="#settings">Настройки</a>
+        </nav>
         <button id="refresh-all" class="text-button" type="button">Обновить</button>
         <button id="logout" class="icon-button" type="button" aria-label="Завершить сессию" title="Выйти">↗</button>
       </div>
@@ -56,18 +65,46 @@
         <p class="rail-copy">Укажите рабочий контекст. Он сохраняется только в этом браузере и не даёт дополнительных полномочий.</p>
       </div>
       <form id="context-form" class="context-form">
-        <label for="session-id">Идентификатор сессии</label>
-        <input id="session-id" autocomplete="off" placeholder="session-id">
-        <label for="workspace-id">Рабочая область</label>
-        <input id="workspace-id" autocomplete="off" placeholder="workspace-id">
-        <label for="task-id">Задача</label>
-        <input id="task-id" autocomplete="off" placeholder="task-id">
-        <label for="prospective-id">Выбранное ожидание</label>
-        <input id="prospective-id" autocomplete="off" placeholder="prospective-item-id">
-        <label for="capability-id">Возможность</label>
-        <input id="capability-id" autocomplete="off" value="cognitive-proposal">
-        <button class="secondary-button" type="submit">Загрузить контекст</button>
+        <div class="context-status-row">
+          <span class="context-status-label">ТЕКУЩИЙ КОНТЕКСТ</span>
+          <strong id="context-state" data-state="empty">не выбран</strong>
+        </div>
+        <div class="context-presets">
+          <label for="context-preset">Недавние наборы</label>
+          <select id="context-preset">
+            <option value="">Выберите сохранённый набор…</option>
+          </select>
+          <small>Сохраняются только в этом браузере.</small>
+        </div>
+        <div class="context-field">
+          <label for="session-id">Идентификатор сессии <span>обязательно</span></label>
+          <div class="context-input-row"><input id="session-id" autocomplete="off" spellcheck="false" placeholder="Вставьте session-id"><button class="copy-context" data-copy-context="session-id" type="button" aria-label="Скопировать идентификатор сессии" title="Скопировать">⧉</button></div>
+        </div>
+        <div class="context-field">
+          <label for="workspace-id">Рабочая область <span>обязательно</span></label>
+          <div class="context-input-row"><input id="workspace-id" autocomplete="off" spellcheck="false" placeholder="Вставьте workspace-id"><button class="copy-context" data-copy-context="workspace-id" type="button" aria-label="Скопировать рабочую область" title="Скопировать">⧉</button></div>
+        </div>
+        <p class="context-hint">Для «Состояния» нужны только эти два значения. Задача, ожидание и возможность находятся ниже в расширенных полях.</p>
+        <details class="advanced-context">
+          <summary>Расширенные идентификаторы</summary>
+          <div>
+            <label for="task-id">Задача</label>
+            <input id="task-id" autocomplete="off" placeholder="task-id">
+            <label for="prospective-id">Выбранное ожидание</label>
+            <input id="prospective-id" autocomplete="off" placeholder="prospective-item-id">
+            <label for="capability-id">Возможность</label>
+            <input id="capability-id" autocomplete="off" value="cognitive-proposal">
+          </div>
+        </details>
+        <div class="context-actions"><button class="secondary-button" type="submit">Загрузить контекст</button><button id="reset-context" class="text-button" type="button">Сбросить</button></div>
       </form>
+      <nav class="section-nav" aria-label="Навигация по кабинету">
+        <a class="section-nav-link active" aria-current="location" href="#overview"><span>01</span><b>Состояние</b><small>фокус и сигналы</small></a>
+        <a class="section-nav-link" href="#diagnostics"><span>02</span><b>Проверки</b><small>доступность и границы</small></a>
+        <a class="section-nav-link" href="#operations"><span>03</span><b>Операции</b><small>ожидания и действия</small></a>
+        <a class="section-nav-link" href="#learning"><span>04</span><b>Опыт</b><small>reflection и навыки</small></a>
+        <a class="section-nav-link" href="#settings"><span>05</span><b>Настройки</b><small>интерфейс и обновление</small></a>
+      </nav>
       <div class="session-stamp">
         <span>ACTOR</span>
         <strong id="session-actor">—</strong>
@@ -77,7 +114,7 @@
     </aside>
 
     <main class="workspace">
-      <section class="workspace-head">
+      <section id="overview" class="workspace-head" data-page="overview">
         <div>
           <p class="eyebrow">операционная картина</p>
           <h1>Состояние сейчас</h1>
@@ -85,14 +122,28 @@
         <p id="last-update" class="last-update">Данные ещё не запрошены</p>
       </section>
 
-      <section class="signal-strip" aria-label="Сводка состояния">
+      <section class="signal-strip" aria-label="Сводка состояния" data-page="overview">
         <div><span>ФОКУС</span><strong id="focus-signal" data-state="idle">ожидает</strong></div>
         <div><span>ЗАДАЧА</span><strong id="task-signal" data-state="idle">ожидает</strong></div>
         <div><span>CONTINUITY</span><strong id="prospective-signal" data-state="idle">ожидает</strong></div>
         <div><span>ВОЗМОЖНОСТЬ</span><strong id="capability-signal" data-state="idle">ожидает</strong></div>
       </section>
 
-      <section class="advisor-panel" aria-labelledby="advisor-title">
+      <section id="diagnostics" class="diagnostics-panel" aria-labelledby="diagnostics-title" data-page="diagnostics">
+        <header class="panel-heading">
+          <div><p>Проверяемая система</p><h2 id="diagnostics-title">Диагностика кабинета</h2></div>
+          <div class="panel-heading-tools"><span id="diagnostic-summary">Проверка ещё не запускалась</span><button id="run-diagnostics" class="secondary-button compact-button" type="button">Проверить всё</button></div>
+        </header>
+        <div class="diagnostic-intro">
+          <span class="diagnostic-pulse" aria-hidden="true"></span>
+          <p>Здесь видны только ответы текущей авторизованной сессии. Проверка не меняет данные и помогает отличить отсутствие контекста от недоступности сервиса.</p>
+        </div>
+        <div id="diagnostic-list" class="diagnostic-list" aria-live="polite" aria-busy="false">
+          <p class="register-empty">Нажмите «Проверить всё», чтобы получить актуальный снимок.</p>
+        </div>
+      </section>
+
+      <section class="advisor-panel" aria-labelledby="advisor-title" data-page="diagnostics">
         <div class="advisor-intro">
           <p>COGNITIVE / ADVISORY V1</p>
           <h2 id="advisor-title">Спросить Домового</h2>
@@ -120,7 +171,7 @@
         </div>
       </section>
 
-      <section class="register-panel" aria-labelledby="register-title">
+      <section id="operations" class="register-panel" aria-labelledby="register-title" data-page="operations">
         <header>
           <div><p>Continuity / ближайшие</p><h2 id="register-title">Реестр ожиданий</h2></div>
           <span id="prospective-count">0 ЗАПИСЕЙ</span>
@@ -130,7 +181,7 @@
         </div>
       </section>
 
-      <section class="activity-panel" aria-labelledby="activity-title">
+      <section class="activity-panel" aria-labelledby="activity-title" data-page="operations">
         <header>
           <div><p>Commit / владелец</p><h2 id="activity-title">Журнал действий</h2></div>
           <div class="activity-tools">
@@ -143,7 +194,7 @@
         </div>
       </section>
 
-      <section class="learning-panel" aria-labelledby="learning-title">
+      <section id="learning" class="learning-panel" aria-labelledby="learning-title" data-page="learning">
         <header>
           <div><p>Learning / evidence</p><h2 id="learning-title">Опыт и reflection</h2></div>
           <div class="activity-tools">
@@ -167,7 +218,20 @@
         </div>
       </section>
 
-      <section class="data-grid">
+      <section id="settings" class="settings-panel" aria-labelledby="settings-title" data-page="settings">
+        <header class="panel-heading">
+          <div><p>Локальные предпочтения</p><h2 id="settings-title">Настройки рабочего кабинета</h2></div>
+          <span id="settings-saved" class="settings-saved">Сохраняются в этом браузере</span>
+        </header>
+        <form id="settings-form" class="settings-grid">
+          <label class="setting-field"><span>Плотность данных</span><small>Выберите, сколько строк помещается на экране.</small><select id="setting-density"><option value="comfortable">Комфортная</option><option value="compact">Компактная</option></select></label>
+          <label class="setting-field"><span>Автообновление</span><small>Повторная проверка состояния без изменения данных.</small><select id="setting-refresh"><option value="off">Выключено</option><option value="30">Каждые 30 секунд</option><option value="60">Каждую минуту</option><option value="300">Каждые 5 минут</option></select></label>
+          <label class="setting-check"><input id="setting-motion" type="checkbox"><span><b>Сократить анимацию</b><small>Оставить спокойный режим для длительной работы.</small></span></label>
+          <div class="settings-actions"><button id="save-settings" class="primary-button compact-button" type="submit"><span>Сохранить настройки</span><span aria-hidden="true">→</span></button><button id="reset-settings" class="text-button" type="button">Сбросить</button></div>
+        </form>
+      </section>
+
+      <section class="data-grid" data-page="overview">
         <article class="data-card focus-card">
           <header><span class="card-number">01</span><div><p>Situation</p><h2>Активный фокус</h2></div><span id="focus-badge" class="status-badge neutral">НЕ ЗАГРУЖЕН</span></header>
           <dl>
@@ -188,6 +252,7 @@
             <div><dt>Ревизия</dt><dd id="task-revision">—</dd></div>
           </dl>
           <p id="task-message" class="card-message">Укажите задачу для проверки относительно активного фокуса.</p>
+          <div class="id-actions"><button class="id-action" data-use-value="task-value" data-target-id="task-id" type="button">Использовать ID задачи</button><button class="id-action icon-id-action" data-copy-value="task-value" type="button" aria-label="Скопировать ID задачи" title="Скопировать ID">⧉</button></div>
         </article>
 
         <article class="data-card prospective-card">
@@ -205,6 +270,7 @@
             <div><dt>Ревизия</dt><dd id="prospective-revision">—</dd></div>
           </dl>
           <p id="prospective-message" class="card-message">Укажите идентификатор ProspectiveItem для проверки владельца и состояния.</p>
+          <div class="id-actions"><button class="id-action" data-use-value="prospective-value" data-target-id="prospective-id" type="button">Использовать ID ожидания</button><button class="id-action icon-id-action" data-copy-value="prospective-value" type="button" aria-label="Скопировать ID ожидания" title="Скопировать ID">⧉</button></div>
           <section class="commit-zone" aria-labelledby="commit-zone-title">
             <div class="commit-zone-copy">
               <p>Commit / контролируемый переход</p>
@@ -240,6 +306,7 @@
             <div><dt>Ревизия</dt><dd id="capability-revision">—</dd></div>
             <div><dt>Наблюдалось</dt><dd id="capability-observed">—</dd></div>
           </dl>
+          <div class="id-actions"><button class="id-action" data-use-value="capability-value" data-target-id="capability-id" type="button">Использовать ID возможности</button><button class="id-action icon-id-action" data-copy-value="capability-value" type="button" aria-label="Скопировать ID возможности" title="Скопировать ID">⧉</button></div>
         </article>
       </section>
     </main>
@@ -286,6 +353,6 @@
   </dialog>
 
   <div id="toast" class="toast" role="status" aria-live="polite" hidden></div>
-  <script src="/assets/console.js" defer></script>
+  <script src="/assets/console.js?v=20260821-context" defer></script>
 </body>
 </html>

contracts/capability/cognitive_registry.go

@@ -23,6 +23,9 @@ type OperationalState string
 type EvaluationResult string
 type EvaluationID ids.ID
 type PerformanceEvidenceID ids.ID
+type BillingMode string
+type AuthMode string
+type SelectionObjective string
 
 const (
 	QualificationDiscovered QualificationState = "DISCOVERED"
@@ -52,6 +55,24 @@ const (
 	EvaluationUnknown     EvaluationResult = "UNKNOWN"
 	EvaluationSupported   EvaluationResult = "SUPPORTED"
 	EvaluationUnsupported EvaluationResult = "UNSUPPORTED"
+
+	BillingUnknown    BillingMode = "UNKNOWN"
+	BillingFree       BillingMode = "FREE"
+	BillingPerInput   BillingMode = "PER_INPUT_UNIT"
+	BillingPerOutput  BillingMode = "PER_OUTPUT_UNIT"
+	BillingPerRequest BillingMode = "PER_REQUEST"
+
+	AuthNone             AuthMode = "NONE"
+	AuthKey              AuthMode = "API" + "_KEY"
+	AuthBearer           AuthMode = "BEARER"
+	AuthUsernamePassword AuthMode = "USERNAME_PASSWORD"
+	AuthOAuth            AuthMode = "OAUTH"
+	AuthSecretFile       AuthMode = "SECRET_FILE"
+
+	SelectionBalanced SelectionObjective = "BALANCED"
+	SelectionQuality  SelectionObjective = "QUALITY"
+	SelectionSpeed    SelectionObjective = "SPEED"
+	SelectionEconomy  SelectionObjective = "ECONOMY"
 )
 
 // ProviderInstance contains only opaque references to endpoint and credentials.
@@ -66,20 +87,26 @@ type ProviderInstance struct {
 	Qualification        QualificationState
 	Health               HealthState
 	ObservedAtUnixMillis int64
+	BillingMode          BillingMode
+	AuthMode             AuthMode
+	InputCostMicros      *int64
+	OutputCostMicros     *int64
+	RequestCostMicros    *int64
 }
 
 type ModelDescriptor struct {
-	ID                   ModelDescriptorID
-	Revision             int64
-	ProviderInstanceID   ProviderInstanceID
-	ProviderModelID      ProviderModelID
-	Fingerprint          ModelFingerprint
-	MaxContextBytes      int64
-	Modalities           []ModelModality
-	Capabilities         []ModelCapability
-	Qualification        QualificationState
-	Health               HealthState
-	ObservedAtUnixMillis int64
+	ID                      ModelDescriptorID
+	Revision                int64
+	ProviderInstanceID      ProviderInstanceID
+	ProviderModelID         ProviderModelID
+	Fingerprint             ModelFingerprint
+	MaxContextBytes         int64
+	Modalities              []ModelModality
+	Capabilities            []ModelCapability
+	Qualification           QualificationState
+	Health                  HealthState
+	ObservedAtUnixMillis    int64
+	IntelligenceScoreMillis *int64
 }
 
 type ProviderHealthObservation struct {
@@ -125,6 +152,8 @@ type CognitiveRequirement struct {
 	InputBytes           int64
 	MaxOutputBytes       int64
 	ExcludedBindingIDs   []CapabilityBindingID
+	Objective            SelectionObjective
+	MaxCostMicros        *int64
 }
 
 // ResolvedCognitiveBinding is a provider-neutral invocation snapshot selected
@@ -206,6 +235,23 @@ type CognitiveCanaryPromotion struct {
 	Evaluation              EvaluatedCapability
 }
 
+type CognitiveActivationPromotionRequest struct {
+	PromotionID             ids.ID
+	RequestedByPrincipalID  identity.PrincipalID
+	CapabilityID            CapabilityID
+	BindingID               CapabilityBindingID
+	ExpectedBindingRevision int64
+	EvaluationID            EvaluationID
+	ObservedAtUnixMillis    int64
+}
+
+type CognitiveActivationPromotion struct {
+	PromotionID             ids.ID
+	ExpectedBindingRevision int64
+	Binding                 CognitiveBinding
+	Evaluation              EvaluatedCapability
+}
+
 // CognitiveDiscoverySnapshot is provider-neutral observed inventory submitted
 // to the Capability owner. The owner assigns immutable revisions and always
 // registers discovered bindings as DISCOVERED/INACTIVE.
@@ -222,18 +268,24 @@ type CognitiveDiscoverySnapshot struct {
 	Health               HealthState
 	FailureClass         CognitiveFailureType
 	ObservedAtUnixMillis int64
+	BillingMode          BillingMode
+	AuthMode             AuthMode
+	InputCostMicros      *int64
+	OutputCostMicros     *int64
+	RequestCostMicros    *int64
 	Models               []DiscoveredModelSnapshot
 }
 
 type DiscoveredModelSnapshot struct {
-	ProviderModelID ProviderModelID
-	Fingerprint     ModelFingerprint
-	MaxContextBytes int64
-	Modalities      []ModelModality
-	Capabilities    []ModelCapability
-	Installed       OperationalState
-	Loaded          OperationalState
-	Invokable       OperationalState
+	ProviderModelID         ProviderModelID
+	Fingerprint             ModelFingerprint
+	MaxContextBytes         int64
+	Modalities              []ModelModality
+	Capabilities            []ModelCapability
+	Installed               OperationalState
+	Loaded                  OperationalState
+	Invokable               OperationalState
+	IntelligenceScoreMillis *int64
 }
 
 type CognitiveUsageObservation struct {

contracts/cognitive/types.go

@@ -4,6 +4,7 @@ import (
 	"git.cin.su/m/Assistant/contracts/authority"
 	"git.cin.su/m/Assistant/contracts/capability"
 	"git.cin.su/m/Assistant/contracts/identity"
+	"git.cin.su/m/Assistant/contracts/interaction"
 	"git.cin.su/m/Assistant/platform/ids"
 )
 
@@ -79,6 +80,19 @@ type GatewayAdvisoryRequest struct {
 	MaxOutputBytes     int
 	DataPolicy         capability.DataPolicy
 	EgressAcknowledged bool
+	Meaning            TaskMeaning
+}
+
+// TaskMeaning is the trusted semantic summary produced by Core. It is not a
+// browser-controlled provider selector; the Capability owner still resolves
+// the actual binding.
+type TaskMeaning struct {
+	SpeechAct              string
+	CapabilityKind         capability.CapabilityKind
+	CapabilityHints        []capability.CapabilityKind
+	RequestedOutcome       string
+	InformationRequestKind interaction.InformationRequestKind
+	ConfidenceMillis       int64
 }
 
 type GatewayAdvisoryPolicyRequest struct {

contracts/interaction/types.go

@@ -24,47 +24,52 @@ type ClarificationState string
 type SemanticApplicability string
 type SemanticCandidateSource string
 type SemanticCandidateSelectionState string
+type InformationRequestKind string
 
 const (
-	ChannelWebChat                Channel                         = "WEB_CHAT"
-	ConversationOpen              ConversationState               = "OPEN"
-	ConversationArchived          ConversationState               = "ARCHIVED"
-	SpeechActDirective            SpeechAct                       = "DIRECTIVE"
-	SpeechActAssertion            SpeechAct                       = "ASSERTION"
-	SpeechActDecision             SpeechAct                       = "DECISION"
-	SpeechActPreference           SpeechAct                       = "PREFERENCE"
-	SpeechActQuestion             SpeechAct                       = "QUESTION"
-	SpeechActHypothesis           SpeechAct                       = "HYPOTHESIS"
-	SpeechActCorrection           SpeechAct                       = "CORRECTION"
-	SpeechActRequestToInvestigate SpeechAct                       = "REQUEST_TO_INVESTIGATE"
-	SpeechActConfirmation         SpeechAct                       = "CONFIRMATION"
-	SpeechActRejection            SpeechAct                       = "REJECTION"
-	SpeechActCancellation         SpeechAct                       = "CANCELLATION"
-	SpeechActConversational       SpeechAct                       = "CONVERSATIONAL"
-	SpeechActUnknown              SpeechAct                       = "UNKNOWN"
-	InterpretationRecorded        InterpretationState             = "RECORDED"
-	InterpretationInterpreted     InterpretationState             = "INTERPRETED"
-	RelationCorrects              InteractionRelationKind         = "CORRECTS"
-	RelationRespondsTo            InteractionRelationKind         = "RESPONDS_TO"
-	RelationRequestsCognition     InteractionRelationKind         = "REQUESTS_COGNITION"
-	RelationCognitionFallback     InteractionRelationKind         = "COGNITION_FALLBACK"
-	RelationSupersedes            InteractionRelationKind         = "SUPERSEDES"
-	RelationClarifies             InteractionRelationKind         = "CLARIFIES"
-	ProjectRolePrimary            ProjectReferenceRole            = "PRIMARY"
-	ProjectRoleRelated            ProjectReferenceRole            = "RELATED"
-	ProjectRoleReferenceSource    ProjectReferenceRole            = "REFERENCE_SOURCE"
-	ClarificationNotRequired      ClarificationState              = "NOT_REQUIRED"
-	ClarificationRequired         ClarificationState              = "REQUIRED"
-	SemanticApplicable            SemanticApplicability           = "APPLICABLE"
-	SemanticLowConfidence         SemanticApplicability           = "LOW_CONFIDENCE"
-	SemanticMixedIntent           SemanticApplicability           = "MIXED_INTENT"
-	SemanticNeedsBroaderInterpret SemanticApplicability           = "NEEDS_BROADER_INTERPRETATION"
-	SemanticCandidateClarify      SemanticApplicability           = "CLARIFICATION_REQUIRED"
-	CandidateSourceDeterministic  SemanticCandidateSource         = "DETERMINISTIC_V2"
-	CandidateSourceCognitive      SemanticCandidateSource         = "COGNITIVE_V1"
-	CandidateSelected             SemanticCandidateSelectionState = "SELECTED"
-	CandidateObserved             SemanticCandidateSelectionState = "OBSERVED"
-	CandidateRejected             SemanticCandidateSelectionState = "REJECTED"
+	ChannelWebChat                            Channel                         = "WEB_CHAT"
+	ConversationOpen                          ConversationState               = "OPEN"
+	ConversationArchived                      ConversationState               = "ARCHIVED"
+	SpeechActDirective                        SpeechAct                       = "DIRECTIVE"
+	SpeechActAssertion                        SpeechAct                       = "ASSERTION"
+	SpeechActDecision                         SpeechAct                       = "DECISION"
+	SpeechActPreference                       SpeechAct                       = "PREFERENCE"
+	SpeechActQuestion                         SpeechAct                       = "QUESTION"
+	SpeechActHypothesis                       SpeechAct                       = "HYPOTHESIS"
+	SpeechActCorrection                       SpeechAct                       = "CORRECTION"
+	SpeechActRequestToInvestigate             SpeechAct                       = "REQUEST_TO_INVESTIGATE"
+	SpeechActConfirmation                     SpeechAct                       = "CONFIRMATION"
+	SpeechActRejection                        SpeechAct                       = "REJECTION"
+	SpeechActCancellation                     SpeechAct                       = "CANCELLATION"
+	SpeechActConversational                   SpeechAct                       = "CONVERSATIONAL"
+	SpeechActUnknown                          SpeechAct                       = "UNKNOWN"
+	InterpretationRecorded                    InterpretationState             = "RECORDED"
+	InterpretationInterpreted                 InterpretationState             = "INTERPRETED"
+	RelationCorrects                          InteractionRelationKind         = "CORRECTS"
+	RelationRespondsTo                        InteractionRelationKind         = "RESPONDS_TO"
+	RelationRequestsCognition                 InteractionRelationKind         = "REQUESTS_COGNITION"
+	RelationCognitionFallback                 InteractionRelationKind         = "COGNITION_FALLBACK"
+	RelationSupersedes                        InteractionRelationKind         = "SUPERSEDES"
+	RelationClarifies                         InteractionRelationKind         = "CLARIFIES"
+	ProjectRolePrimary                        ProjectReferenceRole            = "PRIMARY"
+	ProjectRoleRelated                        ProjectReferenceRole            = "RELATED"
+	ProjectRoleReferenceSource                ProjectReferenceRole            = "REFERENCE_SOURCE"
+	ClarificationNotRequired                  ClarificationState              = "NOT_REQUIRED"
+	ClarificationRequired                     ClarificationState              = "REQUIRED"
+	SemanticApplicable                        SemanticApplicability           = "APPLICABLE"
+	SemanticLowConfidence                     SemanticApplicability           = "LOW_CONFIDENCE"
+	SemanticMixedIntent                       SemanticApplicability           = "MIXED_INTENT"
+	SemanticNeedsBroaderInterpret             SemanticApplicability           = "NEEDS_BROADER_INTERPRETATION"
+	SemanticCandidateClarify                  SemanticApplicability           = "CLARIFICATION_REQUIRED"
+	CandidateSourceDeterministic              SemanticCandidateSource         = "DETERMINISTIC_V2"
+	CandidateSourceCognitive                  SemanticCandidateSource         = "COGNITIVE_V1"
+	CandidateSelected                         SemanticCandidateSelectionState = "SELECTED"
+	CandidateObserved                         SemanticCandidateSelectionState = "OBSERVED"
+	CandidateRejected                         SemanticCandidateSelectionState = "REJECTED"
+	InformationRequestCapabilityInventory     InformationRequestKind          = "CAPABILITY_INVENTORY"
+	InformationRequestCognitiveModelInventory InformationRequestKind          = "COGNITIVE_MODEL_INVENTORY"
+	InformationRequestCognitiveChannelStatus  InformationRequestKind          = "COGNITIVE_CHANNEL_STATUS"
+	InformationRequestCognitiveRecovery       InformationRequestKind          = "COGNITIVE_RECOVERY"
 )
 
 type Conversation struct {
@@ -156,22 +161,26 @@ type ChatMessageRequest struct {
 }
 
 type ChatMessageResponse struct {
-	ConversationID      ConversationID
-	UtteranceID         HumanUtteranceID
-	OriginalIntentID    OriginalHumanIntentID
-	SpeechAct           SpeechAct
-	InterpretationState InterpretationState
-	NeedsCognition      bool
-	FallbackText        string
-	ActiveProjectName   string
-	ProjectProvenance   situation.ProjectResolutionProvenance
-	Clarification       ClarificationState
-	WorkPlanned         bool
-	PlanningReply       string
-	CapabilityStatus    capability.CapabilityResolutionStatus
-	CapabilityKind      capability.CapabilityKind
-	CapabilityGapID     capability.CapabilityGapID
-	DelegationID        string
-	DelegationState     string
-	Reminder            *continuity.ProspectiveItem
+	ConversationID                 ConversationID
+	UtteranceID                    HumanUtteranceID
+	OriginalIntentID               OriginalHumanIntentID
+	SpeechAct                      SpeechAct
+	InterpretationState            InterpretationState
+	NeedsCognition                 bool
+	FallbackText                   string
+	ActiveProjectName              string
+	ProjectProvenance              situation.ProjectResolutionProvenance
+	Clarification                  ClarificationState
+	WorkPlanned                    bool
+	PlanningReply                  string
+	CapabilityStatus               capability.CapabilityResolutionStatus
+	CapabilityKind                 capability.CapabilityKind
+	CapabilityHints                []capability.CapabilityKind
+	RequestedOutcome               string
+	InformationRequestKind         InformationRequestKind
+	InterpretationConfidenceMillis int64
+	CapabilityGapID                capability.CapabilityGapID
+	DelegationID                   string
+	DelegationState                string
+	Reminder                       *continuity.ProspectiveItem
 }

database/migrations/028_capability_cognitive_provider_profile.sql

@@ -0,0 +1,26 @@
+BEGIN;
+SET ROLE capability_role;
+
+ALTER TABLE capability.cognitive_provider_instances
+  ADD COLUMN IF NOT EXISTS billing_mode TEXT NOT NULL DEFAULT 'UNKNOWN',
+  ADD COLUMN IF NOT EXISTS input_cost_micros BIGINT,
+  ADD COLUMN IF NOT EXISTS output_cost_micros BIGINT,
+  ADD COLUMN IF NOT EXISTS request_cost_micros BIGINT;
+ALTER TABLE capability.cognitive_provider_instances
+  ADD COLUMN IF NOT EXISTS auth_mode TEXT NOT NULL DEFAULT 'NONE';
+ALTER TABLE capability.cognitive_provider_instances
+  DROP CONSTRAINT IF EXISTS cognitive_provider_instances_billing_mode_check,
+  ADD CONSTRAINT cognitive_provider_instances_billing_mode_check CHECK (billing_mode IN ('UNKNOWN','FREE','PER_INPUT_UNIT','PER_OUTPUT_UNIT','PER_REQUEST')),
+  DROP CONSTRAINT IF EXISTS cognitive_provider_instances_auth_mode_check,
+  ADD CONSTRAINT cognitive_provider_instances_auth_mode_check CHECK (auth_mode IN ('NONE','API_KEY','BEARER','USERNAME_PASSWORD','OAUTH','SECRET_FILE')),
+  DROP CONSTRAINT IF EXISTS cognitive_provider_instances_cost_check,
+  ADD CONSTRAINT cognitive_provider_instances_cost_check CHECK ((input_cost_micros IS NULL OR input_cost_micros >= 0) AND (output_cost_micros IS NULL OR output_cost_micros >= 0) AND (request_cost_micros IS NULL OR request_cost_micros >= 0));
+
+ALTER TABLE capability.cognitive_model_descriptors
+  ADD COLUMN IF NOT EXISTS intelligence_score_millis BIGINT;
+ALTER TABLE capability.cognitive_model_descriptors
+  DROP CONSTRAINT IF EXISTS cognitive_model_descriptors_intelligence_score_check,
+  ADD CONSTRAINT cognitive_model_descriptors_intelligence_score_check CHECK (intelligence_score_millis IS NULL OR (intelligence_score_millis >= 0 AND intelligence_score_millis <= 1000));
+
+RESET ROLE;
+COMMIT;

deploy/docker-compose.dev.yml

@@ -102,6 +102,7 @@ services:
       LISTEN_ADDR: ":8083"
       CORE_RUNTIME_URL: http://core-runtime:8080
       LOCAL_CPU_PROVIDER_URL: http://docker.cin.su:18082/v1
+      LOCAL_LIFEBOAT_PROVIDER_URL: ${LOCAL_LIFEBOAT_PROVIDER_URL:-}
       LOCAL_GPU_PROVIDER_URL: http://192.168.220.91:11434
       COGNITIVE_OWNER_PRINCIPAL_ID: domovoy-creator-principal
     ports: ["19083:8083"]

deploy/docker-compose.prod.yml

@@ -126,10 +126,42 @@ services:
       LISTEN_ADDR: ":8083"
       CORE_RUNTIME_URL: http://core-runtime:8080
       LOCAL_CPU_PROVIDER_URL: http://docker.cin.su:18082/v1
+      LOCAL_LIFEBOAT_PROVIDER_URL: http://cognitive-lifeboat:8086/v1
       LOCAL_GPU_PROVIDER_URL: http://192.168.220.91:11434
       COGNITIVE_OWNER_PRINCIPAL_ID: domovoy-creator-principal
       COGNITIVE_ALLOW_CANARY: "true"
-    depends_on: [core-runtime]
+    depends_on: [core-runtime, cognitive-lifeboat]
+
+  cognitive-lifeboat:
+    image: ghcr.io/ggml-org/llama.cpp:server
+    restart: unless-stopped
+    command:
+      - --host
+      - 0.0.0.0
+      - --port
+      - "8086"
+      - --model
+      - /models/Qwen3-8B-Q4_K_M.gguf
+      - --alias
+      - domovoy-lifeboat
+      - --jinja
+      - --ctx-size
+      - "8192"
+      - --n-gpu-layers
+      - "0"
+      - --threads
+      - "32"
+      - --parallel
+      - "1"
+      - --reasoning
+      - "off"
+    volumes:
+      - llm_local_models:/models:ro
+    healthcheck:
+      test: ["CMD-SHELL", "curl -fsS http://localhost:8086/health >/dev/null"]
+      interval: 10s
+      timeout: 3s
+      retries: 10
 
   creator-web:
     build: { context: .., dockerfile: deploy/images/runtime.Dockerfile, args: { TARGET: creator-web, SOURCE_REVISION: "${ASSISTANT_SOURCE_REVISION:-unknown}" } }
@@ -140,6 +172,7 @@ services:
       CONTINUITY_RUNTIME_URL: http://continuity-runtime:8081
       COMMIT_RUNTIME_URL: http://commit-runtime:8082
       COGNITIVE_RUNTIME_URL: http://cognitive-worker:8083
+      ASSISTANT_BUILD_REVISION: ${ASSISTANT_SOURCE_REVISION:-unknown}
     ports: ["${CREATOR_WEB_PORT:-18080}:8084"]
     depends_on: [core-runtime, continuity-runtime, commit-runtime, cognitive-worker]
     healthcheck:
@@ -158,3 +191,6 @@ volumes:
     external: true
   assistant_notification_reader_secret:
     external: true
+  llm_local_models:
+    external: true
+    name: llm-local-models

dev/ACTIVE_TASK.json

@@ -1,5 +1,5 @@
 {
-  "task_file": "dev/tasks/DEV-000072-semantic-interpretation-deferral-boundary.json",
-  "task_id": "DEV-000072",
+  "task_file": "dev/tasks/DEV-000096-builtin-cognitive-usage-telemetry.json",
+  "task_id": "DEV-000096",
   "task_revision": 1
 }

dev/tasks/ARCH-000011-external-audit-exploration-proposal.json

@@ -0,0 +1,41 @@
+{
+  "task_id": "ARCH-000011",
+  "task_revision": 1,
+  "architecture_revision": "generation-1",
+  "base_repo_revision": "6f8c4e2bc7d4f86cad3fc0e773c8c580b19a29ee",
+  "risk_tier": "E",
+  "intent": "Produce a proposal-only architecture decision for a test Exploration profile with independent external audit, preserving useful local research and evidence while moving review visibility outside Domovoy without creating a direct model-to-world path.",
+  "requirement_ids": ["FD-009", "FD-015", "FD-017", "FD-018", "FD-019", "FD-025", "INV-AUTH-001", "INV-EPI-001", "INV-PROJ-001", "USER-EXTERNAL-AUDIT-WITH-EXPLORATION-FREEDOM"],
+  "allowed_change_scope": {
+    "modules": [],
+    "paths": [
+      "docs/EXTERNAL_AUDIT_EXPLORATION_PROPOSAL.md",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/ARCH-000011-external-audit-exploration-proposal.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/**", "ci/**", ".gitea/**", "contracts/**", "modules/**", "adapters/**", "cmd/**", "database/**", "deploy/**", "security/**", "tests/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {
+    "consume": ["FD-009 model output boundary", "existing Work/Capability/Epistemics/Commit ownership", "existing transactional outbox direction"],
+    "may_change": []
+  },
+  "semantic_owner": "proposal-only; no architectural decision, runtime behavior, audit deployment, or execution privilege is accepted by this task",
+  "canonical_state": [],
+  "state_transitions": [],
+  "side_effects_and_privileges": ["select this proposal in the active task pointer", "no runtime action, provider call, credential handling, deployment, canonical mutation, or external action"],
+  "persistence_and_migrations": [],
+  "failure_retry_restart": ["proposal specifies reviewer loss as a non-failure for read-only exploration and a pending state for gated proposals", "no automatic execution or retry is introduced"],
+  "assumptions": ["the user's explicit instruction authorizes analysis and proposal only, not removal of secret isolation, canonical history, authority validation, or commit/executor ownership", "external audit is independent observation rather than a competing executor", "docker-test remains prohibited"],
+  "acceptance_scenarios": ["proposal defines useful local behavior during provider loss", "proposal separates canonical owners, audit projection, reviewer evidence and executor", "proposal defines audit outage and unknown-outcome semantics", "proposal identifies staged implementation and explicit decisions required", "no production behavior or protected architecture artifact changes"],
+  "required_tests": ["task schema", "architecture preflight", "exact diff scope", "documentation review", "CI"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/ARCH-000012-accept-external-audit-exploration.json

@@ -0,0 +1,40 @@
+{
+  "task_id": "ARCH-000012",
+  "task_revision": 1,
+  "architecture_revision": "generation-1",
+  "base_repo_revision": "948896c",
+  "risk_tier": "E",
+  "intent": "Accept the staged external-audit and Domovoy Exploration profile proposed by ARCH-000011, while retaining semantic ownership, redacted evidence, and the Commit/Executor boundary.",
+  "requirement_ids": ["ARCH-000011", "FD-009", "FD-015", "FD-017", "FD-025", "INV-AUTH-001", "INV-EPI-001", "INV-PROJ-001", "USER-CONTINUE-AFTER-ARCH-000011"],
+  "allowed_change_scope": {
+    "modules": [],
+    "paths": [
+      "architecture/adrs/ADR-0018-external-audit-exploration-mode.md",
+      "architecture/adrs/README.md",
+      "docs/EXTERNAL_AUDIT_EXPLORATION_PROPOSAL.md",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/ARCH-000012-accept-external-audit-exploration.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/ARCHITECTURE_CONSTITUTION.md", "architecture/architecture-registry.yaml", "architecture/architecture-registry.json", "architecture/CORE_SEMANTIC_MODEL_V1.md", "ci/**", ".gitea/**", "contracts/**", "modules/**", "adapters/**", "cmd/**", "database/**", "deploy/**", "security/**", "tests/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {"consume": ["ARCH-000011 proposal", "existing Work/Epistemics/Capability/Commit ownership"], "may_change": []},
+  "semantic_owner": "architecture decision only; no runtime, audit deployment, external action or canonical-state behavior is changed",
+  "canonical_state": [],
+  "state_transitions": [],
+  "side_effects_and_privileges": ["accept ADR-0018", "no provider call, credential handling, deployment, canonical mutation, or external action"],
+  "persistence_and_migrations": [],
+  "failure_retry_restart": ["reviewer loss keeps review-governed proposals pending", "no automatic execution or retry is accepted"],
+  "assumptions": ["the user's instruction 'делай' after ARCH-000011 accepts the recommended staged decision", "initial delivery has no review-governed external action class", "docker-test remains prohibited"],
+  "acceptance_scenarios": ["ADR defines Exploration without new authority", "audit is a redacted rebuildable projection and not an executor", "reviewer outage semantics are explicit", "implementation is staged and no runtime behavior changes in this task"],
+  "required_tests": ["task schema", "architecture preflight", "exact diff scope", "independent protected-path review", "CI"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000074-creator-cabinet-operations.json

@@ -0,0 +1,92 @@
+{
+  "task_id": "DEV-000074",
+  "task_revision": 6,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "1cfbb4ae66e24d514e59dabafb936c35546bd418",
+  "risk_tier": "E",
+  "intent": "Make the authenticated Creator Web cabinet understandable and operable for a human by adding section navigation, read-only diagnostics, and browser-local interface preferences without changing domain state or authority boundaries.",
+  "requirement_ids": [
+    "Human can move between overview, diagnostics, operations and settings",
+    "Human can run all currently exposed read-only Creator checks from one diagnostic panel",
+    "Interface preferences remain local to the browser and never change canonical state",
+    "Existing explicit confirmation remains required for canonical mutations",
+    "Desktop and mobile layouts remain usable"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/creator-web"],
+    "paths": [
+      "cmd/creator-web/static/index.html",
+      "cmd/creator-web/static/assets/console.css",
+      "cmd/creator-web/static/assets/console.js",
+      "cmd/creator-web/server_test.go",
+      "cmd/creator-web/chat_test.go",
+      "docs/PROJECT_STATUS.md",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000074-creator-cabinet-operations.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": [
+      "architecture/**",
+      "security/**",
+      "database/**",
+      "modules/**",
+      "contracts/**",
+      "adapters/**",
+      "cmd/core-runtime/**",
+      "cmd/commit-runtime/**",
+      "cmd/continuity-runtime/**",
+      "deploy/**"
+    ]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_provider_adapters": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {
+    "consume": ["existing authenticated Creator gateway endpoints"],
+    "may_change": []
+  },
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": [],
+  "state_transitions": [
+    "diagnostic request -> read-only gateway observation",
+    "settings form submit -> browser-local preference update"
+  ],
+  "side_effects_and_privileges": [
+    "No new privilege or mutation endpoint",
+    "No database migration",
+    "Existing Commit actions retain explicit confirmation dialogs",
+    "No deployment or neighboring project mutation"
+  ],
+  "persistence_and_migrations": ["No canonical persistence; localStorage only for interface preferences"],
+  "failure_retry_restart": ["Diagnostic failures are shown per check without exposing upstream error details"],
+  "assumptions": [
+    "Existing Creator API routes remain the source of truth",
+    "Browser-local settings are disposable and do not affect domain behavior"
+  ],
+  "acceptance_scenarios": [
+    "Authenticated cabinet exposes navigation to all four human-facing sections",
+    "read-only diagnostics checks session, advisory policy, capability, today, attention, actions and learning",
+    "density, auto-refresh and reduced-motion preferences save and reset locally",
+    "mobile layout remains readable",
+    "existing Creator Web tests pass",
+    "architecture and diff scope checks pass"
+  ],
+  "required_tests": [
+    "node --check cmd/creator-web/static/assets/console.js",
+    "go test ./cmd/creator-web",
+    "go test ./...",
+    "go vet ./...",
+    "go run ./cmd/devctl preflight -active dev/ACTIVE_TASK.json",
+    "go run ./cmd/devctl check-diff -active dev/ACTIVE_TASK.json",
+    "go run ./cmd/devctl check-architecture",
+    "git diff --check",
+    "responsive browser inspection"
+  ],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000075-creator-chat-primary-surface.json

@@ -0,0 +1,47 @@
+{
+  "task_id": "DEV-000075",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "39a27102c9665e41f29e85bc8f82a316bbbe3962",
+  "risk_tier": "E",
+  "intent": "Make live conversation with Domovoy the public starting surface and keep the Creator operator console on a separate admin route.",
+  "requirement_ids": [
+    "Public root opens the human chat",
+    "Operator console remains available at a separate admin route",
+    "Existing /chat route remains compatible",
+    "Chat does not expose provider, model, binding, session or workspace internals"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/creator-web"],
+    "paths": [
+      "cmd/creator-web/server.go",
+      "cmd/creator-web/server_test.go",
+      "cmd/creator-web/chat_test.go",
+      "cmd/creator-web/static/chat.html",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000075-creator-chat-primary-surface.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_provider_adapters": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {"consume": ["existing /chat and authenticated Creator endpoints"], "may_change": []},
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": [],
+  "state_transitions": ["GET / -> chat surface", "GET /admin -> operator console surface"],
+  "side_effects_and_privileges": ["No new privilege", "No canonical mutation", "No model/provider routing change"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Existing chat failure behavior remains unchanged"],
+  "assumptions": ["/chat is the existing human chat surface", "The operator console may be reached at /admin"],
+  "acceptance_scenarios": ["Root serves chat", "Admin serves console", "Chat compatibility remains", "Internal IDs remain absent from chat HTML"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000076-creator-chat-cognitive-status.json

@@ -0,0 +1,47 @@
+{
+  "task_id": "DEV-000076",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "26cf85108a63dfbd67866d9df0445dbcb54983be",
+  "risk_tier": "E",
+  "intent": "Show the human user whether Domovoy's primary cognitive channel is available without exposing provider internals or mixing technical events into the conversation.",
+  "requirement_ids": [
+    "Chat shows a human-readable cognitive channel status",
+    "Status is read-only and refreshed periodically",
+    "Chat does not expose provider, model or binding identifiers",
+    "Chat remains usable while status observation fails"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/creator-web"],
+    "paths": [
+      "cmd/creator-web/chat_test.go",
+      "cmd/creator-web/static/chat.html",
+      "cmd/creator-web/static/assets/chat.css",
+      "cmd/creator-web/static/assets/chat.js",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000076-creator-chat-cognitive-status.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_provider_adapters": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {"consume": ["existing authenticated /api/capabilities/cognitive-proposal/health endpoint"], "may_change": []},
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": [],
+  "state_transitions": ["Browser polls existing cognitive capability health observation", "Browser renders coarse human-readable status"],
+  "side_effects_and_privileges": ["Read-only observation", "No new privilege", "No provider/model routing change"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Failed observation renders an unavailable/degraded notice; chat remains available", "Polling retries on the next interval"],
+  "assumptions": ["The existing health endpoint returns State or state with AVAILABLE, DEGRADED or UNAVAILABLE semantics", "The chat token authorizes the existing health endpoint"],
+  "acceptance_scenarios": ["Authenticated chat displays a status indicator", "Health polling does not reveal internal identifiers", "Mobile header keeps the status visible", "A failed health request does not disable the composer"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check", "node --check cmd/creator-web/static/assets/chat.js"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000077-creator-chat-cognitive-bridge.json

@@ -0,0 +1,47 @@
+{
+  "task_id": "DEV-000077",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "75abfb204bb427a0500a8c37440c374576c2153c",
+  "risk_tier": "E",
+  "intent": "Make model configuration changes understandable from the human chat while keeping configuration mutation in the separate operator console.",
+  "requirement_ids": [
+    "User can manually re-check the cognitive channel from chat",
+    "Chat clearly directs configuration changes to the operator console",
+    "No configuration mutation is performed by the browser chat",
+    "The conversation remains free of technical runtime identifiers"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/creator-web"],
+    "paths": [
+      "cmd/creator-web/chat_test.go",
+      "cmd/creator-web/static/chat.html",
+      "cmd/creator-web/static/assets/chat.css",
+      "cmd/creator-web/static/assets/chat.js",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000077-creator-chat-cognitive-bridge.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_provider_adapters": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {"consume": ["existing authenticated /api/capabilities/cognitive-proposal/health endpoint", "existing /admin operator surface"], "may_change": []},
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": [],
+  "state_transitions": ["User requests a fresh read-only health observation", "Browser presents console handoff when the channel is not ready"],
+  "side_effects_and_privileges": ["Read-only observation only", "No new privilege", "No provider/model routing change", "No chat mutation from status controls"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Manual check uses the same safe health route", "Polling remains the retry mechanism"],
+  "assumptions": ["The operator console remains the authorized place for runtime configuration changes", "The existing health route is sufficient to observe readiness"],
+  "acceptance_scenarios": ["Clicking status requests a fresh health observation", "Unavailable status exposes an operator-console handoff", "Available status hides the handoff", "Chat HTML remains free of internal identifiers"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check", "node --check cmd/creator-web/static/assets/chat.js"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000078-core-conversational-cognitive-health.json

@@ -0,0 +1,45 @@
+{
+  "task_id": "DEV-000078",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "0d10e6fd82a7c374bebbc8d3cee9c1ed0b420745",
+  "risk_tier": "E",
+  "intent": "Let Domovoy answer explicit questions about the local cognitive channel from the Capability-owned health observation and route configuration changes to the operator console without mutating runtime configuration.",
+  "requirement_ids": [
+    "Explicit model/channel questions use observed capability health",
+    "Model configuration requests never call a provider directly from Core",
+    "Configuration changes are explained as a separate operator-console action",
+    "Provider and model identifiers remain hidden from human chat"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/core-runtime"],
+    "paths": [
+      "cmd/core-runtime/main.go",
+      "cmd/core-runtime/main_test.go",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000078-core-conversational-cognitive-health.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_provider_adapters": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {"consume": ["Capability repository LoadHealth", "existing cognitive-proposal health semantics", "existing /admin operator surface"], "may_change": []},
+  "semantic_owner": "capability-observation-consumer",
+  "canonical_state": [],
+  "state_transitions": ["Human asks about local cognitive channel", "Core reads Capability-owned health observation", "Core returns observation or safe unavailable explanation"],
+  "side_effects_and_privileges": ["No provider call for explicit status/configuration questions", "No runtime configuration mutation", "No new privilege"],
+  "persistence_and_migrations": ["Existing utterance and semantic persistence only", "No migration"],
+  "failure_retry_restart": ["Missing health observation produces an honest unavailable reply", "Future status polling remains available in chat UI"],
+  "assumptions": ["The operator console is the authorized configuration surface", "Capability health is a sufficient provider-neutral observation for the first conversational response"],
+  "acceptance_scenarios": ["Проверь локальную модель returns a human-readable health observation", "Переключи модель does not mutate configuration and directs to console", "Replies contain no provider/model/binding identifiers", "Unit tests cover available, unavailable and repository failure states"],
+  "required_tests": ["go test ./cmd/core-runtime", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000079-chat-conversation-starters.json

@@ -0,0 +1,38 @@
+{
+  "task_id": "DEV-000079",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "b0d31012dac1526e721e57c691555933eb501a5a",
+  "risk_tier": "E",
+  "intent": "Make the primary Domovoy chat self-explanatory with concise conversation starters for cognitive-channel checks and configuration handoff.",
+  "requirement_ids": [
+    "A new user can discover the main cognitive-channel conversation paths",
+    "Conversation starters submit ordinary human text",
+    "No starter exposes internal identifiers",
+    "The chat remains usable on mobile"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/creator-web"],
+    "paths": [
+      "cmd/creator-web/chat_test.go",
+      "cmd/creator-web/static/chat.html",
+      "cmd/creator-web/static/assets/chat.css",
+      "cmd/creator-web/static/assets/chat.js",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000079-chat-conversation-starters.json"
+    ]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing chat message endpoint"], "may_change": []},
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": [],
+  "state_transitions": ["User selects a conversation starter", "Browser submits its ordinary text through the existing chat flow"],
+  "side_effects_and_privileges": ["Existing chat semantics only", "No new privilege", "No direct model or configuration mutation"],
+  "persistence_and_migrations": ["Existing conversation persistence only", "No migration"],
+  "failure_retry_restart": ["Starter uses existing chat error handling"],
+  "assumptions": ["The user can still type any other request in the composer"],
+  "acceptance_scenarios": ["Three human-readable starter actions are visible", "Clicking a starter sends its text through the normal chat flow", "No internal IDs appear in the page", "Starter layout remains usable at mobile width"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check", "node --check cmd/creator-web/static/assets/chat.js"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000080-chat-three-column-layout.json

@@ -0,0 +1,41 @@
+{
+  "task_id": "DEV-000080",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "47fd0c4b027ff5ab2781b26c5bc4f7ddc45d961f",
+  "risk_tier": "E",
+  "intent": "Replace the unstable single-column chat presentation with a fixed three-column layout, explicit console return, and a safe human path for passing AI information into the current conversation.",
+  "requirement_ids": [
+    "Header controls keep stable dimensions",
+    "Desktop chat has independently scrolling left, center and right regions",
+    "Console has an explicit return-to-chat action",
+    "User can pass non-secret AI notes as an ordinary chat message",
+    "Mobile layout remains usable"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/creator-web"],
+    "paths": [
+      "cmd/creator-web/chat_test.go",
+      "cmd/creator-web/static/index.html",
+      "cmd/creator-web/static/chat.html",
+      "cmd/creator-web/static/assets/chat.css",
+      "cmd/creator-web/static/assets/chat.js",
+      "cmd/creator-web/static/assets/console.css",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000080-chat-three-column-layout.json"
+    ]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing chat message endpoint", "existing /admin route"], "may_change": []},
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": ["AI notes are submitted through the existing conversation; no new AI registry state is created"],
+  "state_transitions": ["User submits non-secret AI notes as a normal chat message", "User navigates between chat and console using explicit links"],
+  "side_effects_and_privileges": ["Existing chat persistence only", "No direct model/provider mutation", "No new privilege"],
+  "persistence_and_migrations": ["No migration"],
+  "failure_retry_restart": ["AI notes use existing chat failure handling", "Layout has no new runtime dependency"],
+  "assumptions": ["The current conversation is the correct first destination for AI notes", "Sensitive credentials must never be pasted into chat"],
+  "acceptance_scenarios": ["Desktop regions scroll independently", "Header status and actions do not resize when text changes", "Console visibly links back to chat", "AI notes form sends a clear message into chat", "Chat remains usable below 900px viewport width"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check", "node --check cmd/creator-web/static/assets/chat.js"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000081-chat-header-final-polish.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000081",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "6e0cf3cd1df864e8be8a9b61fe8462181516bab9",
+  "risk_tier": "E",
+  "intent": "Polish the stable chat header after the three-column rollout so the cognitive status cannot push navigation controls around.",
+  "requirement_ids": ["Header status is right-aligned and bounded", "Console exposes an explicit chat return link"],
+  "allowed_change_scope": {"modules": ["cmd/creator-web"], "paths": ["cmd/creator-web/chat_test.go", "cmd/creator-web/static/assets/chat.css", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000081-chat-header-final-polish.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing chat and admin surfaces"], "may_change": []},
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": [],
+  "state_transitions": ["No semantic state transition"],
+  "side_effects_and_privileges": ["No new privilege", "No runtime behavior change"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["No new failure mode"],
+  "assumptions": ["The previous three-column layout is the intended public chat surface"],
+  "acceptance_scenarios": ["Header status does not alter the positions of console and logout controls", "Admin HTML includes a visible chat return action"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000082-chat-ai-data-safety-guard.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000082",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "ae9933ee846254f970e4ef3f3e46d63e7a01db5a",
+  "risk_tier": "E",
+  "intent": "Prevent accidental transmission of obvious credentials through the AI information form while preserving ordinary model notes as chat messages.",
+  "requirement_ids": ["AI notes form warns about secrets", "Obvious secret-shaped input is blocked before chat submission", "Safe model descriptions continue through the normal chat flow"],
+  "allowed_change_scope": {"modules": ["cmd/creator-web"], "paths": ["cmd/creator-web/chat_test.go", "cmd/creator-web/static/chat.html", "cmd/creator-web/static/assets/chat.css", "cmd/creator-web/static/assets/chat.js", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000082-chat-ai-data-safety-guard.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "modules/**", "contracts/**", "adapters/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing chat message endpoint"], "may_change": []},
+  "semantic_owner": "none-interface-adapter",
+  "canonical_state": [],
+  "state_transitions": ["Secret-shaped text is rejected locally", "Non-secret AI notes continue as a normal conversation message"],
+  "side_effects_and_privileges": ["No new privilege", "No transmission when the guard detects a secret-shaped value"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["User can edit and retry after removing the sensitive value"],
+  "assumptions": ["The guard is a convenience barrier, not a complete secret scanner", "Users must still avoid pasting secrets"],
+  "acceptance_scenarios": ["API-key and private-key-shaped input is blocked", "Password/token labels are blocked", "Ordinary model notes are submitted", "The warning is visible and accessible"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check", "node --check cmd/creator-web/static/assets/chat.js"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000083-domovoy-lifeboat-mode.json

@@ -0,0 +1,72 @@
+{
+  "task_id": "DEV-000083",
+  "task_revision": 3,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "0a2599cfa6255f1a98856d2fd09dc51a2119f525",
+  "risk_tier": "C",
+  "intent": "Keep Domovoy alive and conversational when the primary cognitive channel is unavailable by running a small local Lifeboat provider and retaining an honest deterministic degraded mode.",
+  "requirement_ids": [
+    "Primary cognitive settings remain confirmation-controlled while healthy",
+    "Unavailable primary cognition exposes a human-readable degraded mode instead of killing chat",
+    "A small local-only provider can serve as the Lifeboat through the existing Cognitive Gateway",
+    "The core can still accept and explain configuration requests when all model providers are unavailable"
+  ],
+  "allowed_change_scope": {
+    "modules": ["cmd/core-runtime", "cmd/cognitive-worker", "cmd/creator-web", "modules/capability", "adapters/postgres", "deployment"],
+    "paths": [
+      "cmd/core-runtime/main.go",
+      "cmd/core-runtime/main_test.go",
+      "cmd/cognitive-worker/main.go",
+      "cmd/cognitive-worker/main_test.go",
+      "modules/capability/domain/cognitive_registry.go",
+      "modules/capability/domain/cognitive_registry_test.go",
+      "modules/capability/ports/repository.go",
+      "contracts/capability/cognitive_registry.go",
+      "cmd/creator-web/static/assets/chat.js",
+      "cmd/creator-web/static/chat.html",
+      "cmd/creator-web/chat_test.go",
+      "adapters/postgres/capability_repository.go",
+      "tests/cognitive_canary/promotion_test.go",
+      "deploy/docker-compose.prod.yml",
+      "deploy/docker-compose.dev.yml",
+      "dev/tasks/DEV-000083-lifeboat-benchmark-manifest.json",
+      "docs/evidence/domovoy-lifeboat-qualification-2026-08-21-v1.json",
+      "dev/tasks/DEV-000083-domovoy-lifeboat-mode.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/**", "security/**", "database/**", "contracts/**", "adapters/**", "modules/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_provider_adapters": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {
+    "consume": ["existing Cognitive Gateway and Capability Registry", "existing chat response fields", "existing cognitive health endpoint"],
+    "may_change": ["authorized cognitive activation transition"]
+  },
+  "semantic_owner": "capability-observation-consumer",
+  "canonical_state": [],
+  "state_transitions": [
+    "Healthy primary channel keeps normal configuration handoff and confirmation behavior",
+    "Unavailable primary channel renders Domovoy alive in local degraded mode",
+    "Optional Lifeboat provider participates only through the existing gateway resolution/failover path"
+  ],
+  "side_effects_and_privileges": ["No new privilege", "No external egress", "No direct provider call from Core", "No configuration mutation from browser chat"],
+  "persistence_and_migrations": ["No migration", "Existing conversation and capability observations only"],
+  "failure_retry_restart": ["Provider absence falls back to the deterministic core reply", "The Lifeboat container restarts independently from the primary model runtime", "Restart reconstructs the provider registration from environment"],
+  "assumptions": ["The Lifeboat endpoint implements the existing OpenAI-compatible local adapter contract", "Capability discovery/promotion remains the existing authorized path", "No real test secrets are in scope for this task"],
+  "acceptance_scenarios": [
+    "Primary unavailable message says Domovoy remains alive and can help recover",
+    "Configuration request in degraded mode no longer falsely requires the primary model",
+    "Production Lifeboat container exposes the configured small local model through the existing gateway adapter",
+    "Chat status distinguishes primary unavailable from Domovoy unavailable",
+    "Healthy mode keeps confirmation/console wording"
+  ],
+  "required_tests": ["go test ./cmd/core-runtime", "go test ./cmd/cognitive-worker", "go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check", "node --check cmd/creator-web/static/assets/chat.js"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000083-lifeboat-benchmark-manifest.json

@@ -0,0 +1,19 @@
+{
+  "artifact_id": "domovoy-lifeboat-qualification-2026-08-21-v1",
+  "providers": [
+    {
+      "provider_instance_id": "local-lifeboat",
+      "provider_kind": "openai-compatible-chat-v1",
+      "endpoint": "http://cognitive-lifeboat:8086/v1",
+      "candidates": [
+        {
+          "provider_model_id": "domovoy-lifeboat",
+          "model_descriptor_id": "model-7dd2e1dd5adb40af7ad7985f",
+          "model_revision": 464323937472454403,
+          "binding_id": "binding-98b26ae572f3534ecb7d32c6",
+          "binding_revision": 594087847110549365
+        }
+      ]
+    }
+  ]
+}

dev/tasks/DEV-000084-evolving-cognitive-provider-catalog.json

@@ -0,0 +1,70 @@
+{
+  "task_id": "DEV-000084",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "0482e6ac14cd7625598a203dbdec9298b1bac04c",
+  "risk_tier": "C",
+  "intent": "Evolve the single-catalog cognitive orchestrator with an always-available built-in provider and task-aware selection across connected providers using capability, quality, latency, cost, and reliability evidence.",
+  "requirement_ids": [
+    "Built-in Domovoy cognition remains available without an external provider",
+    "Connected providers expose typed connection references without credential material",
+    "Provider selection considers task capability, quality, speed, cost, and reliability",
+    "Provider and model revisions remain replaceable as the catalog evolves"
+  ],
+  "allowed_change_scope": {
+    "modules": ["capability", "cognitive-worker"],
+    "paths": [
+      "contracts/capability/cognitive_registry.go",
+      "contracts/cognitive/types.go",
+      "contracts/interaction/types.go",
+      "modules/capability/domain/cognitive_registry.go",
+      "modules/capability/domain/cognitive_registry_test.go",
+      "adapters/postgres/capability_repository.go",
+      "database/migrations/028_capability_cognitive_provider_profile.sql",
+      "cmd/cognitive-worker/main.go",
+      "cmd/cognitive-worker/gateway.go",
+      "cmd/cognitive-worker/gateway_registry_test.go",
+      "cmd/cognitive-worker/interpretation.go",
+      "cmd/cognitive-worker/interpretation_live_trace_test.go",
+      "cmd/cognitive-worker/discovery.go",
+      "cmd/creator-web/server.go",
+      "cmd/core-runtime/main.go",
+      "dev/tasks/DEV-000084-evolving-cognitive-provider-catalog.json"
+    ]
+  },
+  "forbidden_change_scope": {
+    "paths": ["architecture/**", "security/**", "cmd/core-runtime/**", "cmd/creator-web/**", "deploy/**"]
+  },
+  "allowed_architecture_delta": {
+    "new_cross_module_dependencies": 0,
+    "new_canonical_owners": 0,
+    "new_privileges": 0,
+    "new_third_party_dependencies": 0,
+    "new_provider_adapters": 0,
+    "new_database_owner_roles": 0
+  },
+  "contracts": {
+    "consume": ["existing capability registry", "existing cognitive gateway"],
+    "may_change": ["versioned provider profile and task-aware selection fields"]
+  },
+  "semantic_owner": "capability",
+  "canonical_state": ["provider connection profile", "model suitability and performance evidence"],
+  "state_transitions": [
+    "discovered provider profile is validated before invocation",
+    "selection ranks eligible candidates without granting new authority",
+    "provider revision supersedes prior metadata without rewriting history"
+  ],
+  "side_effects_and_privileges": ["No new privilege", "Credential material remains outside canonical registry"],
+  "persistence_and_migrations": ["One additive capability migration", "No cross-owner writes"],
+  "failure_retry_restart": ["Built-in provider remains available when registry or remote providers fail", "Provider failures are observed and excluded for the current attempt"],
+  "assumptions": ["V1 has one shared catalog and no user/group visibility", "Existing CredentialRef contract is retained", "Selection is advisory routing and does not authorize external actions"],
+  "acceptance_scenarios": [
+    "Built-in provider answers when no connected provider is invocable",
+    "Secret values never appear in provider registry responses or logs",
+    "Task requiring a capability excludes models without it",
+    "Quality, reliability, latency, and cost policy affect deterministic ranking",
+    "A failed primary provider falls back to another eligible provider"
+  ],
+  "required_tests": ["go test ./modules/capability/domain", "go test ./cmd/cognitive-worker", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "devctl check-architecture", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_MISSING_CAPABILITY", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000085-builtin-cognitive-recovery.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000085",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "cdc8eea1a747657ce0534b99ff35933ab3385877",
+  "risk_tier": "C",
+  "intent": "Keep Domovoy useful when external or active cognitive bindings are unavailable by invoking the built-in local lifeboat through the Cognitive Gateway and presenting an actionable recovery focus when all cognition fails.",
+  "requirement_ids": ["Built-in local cognition remains available", "Provider loss does not collapse conversation", "Recovery state is explained and actionable"],
+  "allowed_change_scope": {"modules": ["cognitive-worker"], "paths": ["cmd/cognitive-worker/gateway.go", "cmd/cognitive-worker/interpretation.go", "cmd/cognitive-worker/main.go", "cmd/cognitive-worker/gateway_registry_test.go", "cmd/cognitive-worker/interpretation_test.go", "dev/tasks/DEV-000085-builtin-cognitive-recovery.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing Cognitive Gateway and local provider adapter contracts"], "may_change": []},
+  "semantic_owner": "capability",
+  "canonical_state": [],
+  "state_transitions": ["No active binding -> built-in local invocation", "Built-in invocation failure -> recovery-focused degraded response"],
+  "side_effects_and_privileges": ["No new privilege", "Built-in path is local-only and cannot egress externally"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Provider failure remains observable; next request retries resolution and built-in local path"],
+  "assumptions": ["The configured local lifeboat endpoint is part of Domovoy and may be used without external egress acknowledgement"],
+  "acceptance_scenarios": ["Inactive registry with healthy local lifeboat invokes the local adapter", "Interpretation also uses the built-in local path", "All cognition failure returns an actionable recovery response"],
+  "required_tests": ["go test ./cmd/cognitive-worker", "go test ./...", "go vet ./...", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000086-local-model-baseline.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000086",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "cdc8eea1a747657ce0534b99ff35933ab3385877",
+  "risk_tier": "C",
+  "intent": "Replace the unusable tiny lifeboat model with a capable, locally hosted Qwen3 8B quantized baseline while keeping Domovoy runtime on docker.cin.su.",
+  "requirement_ids": ["Built-in local cognition is useful for ordinary dialogue", "Local model remains available without external egress", "Model choice is explicit and replaceable"],
+  "allowed_change_scope": {"modules": ["deployment", "cognitive-worker"], "paths": ["deploy/docker-compose.prod.yml", "dev/tasks/DEV-000086-local-model-baseline.json", "dev/tasks/DEV-000085-builtin-cognitive-recovery.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing llama.cpp OpenAI-compatible local endpoint", "existing Cognitive Gateway"], "may_change": []},
+  "semantic_owner": "capability",
+  "canonical_state": [],
+  "state_transitions": ["Configured model file -> loaded local baseline", "Local model replacement -> restart and health verification"],
+  "side_effects_and_privileges": ["No new privilege", "Model is local-only and mounted read-only into the runtime"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Missing or invalid model keeps the container unhealthy and does not silently fall back to the tiny model"],
+  "assumptions": ["Qwen3-8B-Q4_K_M.gguf is present in the protected Docker model volume on docker.cin.su before rollout"],
+  "acceptance_scenarios": ["The configured lifeboat starts with the named Qwen3 8B model", "The OpenAI-compatible health endpoint is healthy", "No other host is used for Domovoy runtime"],
+  "required_tests": ["go test ./cmd/cognitive-worker", "go test ./...", "go vet ./...", "git diff --check", "production health and model endpoint verification"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT", "REQUIRES_MODEL_ARTIFACT"]
+}

dev/tasks/DEV-000087-cognitive-recovery-orchestrator.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000087",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "cdc8eea1a747657ce0534b99ff35933ab3385877",
+  "risk_tier": "D",
+  "intent": "When the selected cognitive route is unavailable, keep Domovoy conversational, diagnose the failure, use the built-in local model, and probe explicitly configured external GPU/HTTP providers through the Cognitive Gateway without exposing credentials or bypassing egress policy.",
+  "requirement_ids": ["Provider loss becomes a recovery objective", "Meaning and task objective guide provider choice", "External egress requires explicit acknowledgement", "Credentials remain opaque secret references"],
+  "allowed_change_scope": {"modules": ["cognitive-worker"], "paths": ["cmd/cognitive-worker/gateway.go", "cmd/cognitive-worker/interpretation.go", "cmd/cognitive-worker/main.go", "cmd/cognitive-worker/recovery.go", "cmd/cognitive-worker/gateway_registry_test.go", "cmd/cognitive-worker/interpretation_test.go", "cmd/cognitive-worker/recovery_test.go", "dev/tasks/DEV-000087-cognitive-recovery-orchestrator.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing typed Cognitive Gateway", "existing local and Ollama adapters", "existing discovery and binding resolver"], "may_change": []},
+  "semantic_owner": "capability",
+  "canonical_state": [],
+  "state_transitions": ["Selected provider failure -> local built-in attempt", "Local failure -> recovery diagnosis and configured-provider probe", "External probe -> registry discovery only; invocation requires policy acknowledgement"],
+  "side_effects_and_privileges": ["No new privilege", "No arbitrary network scanning", "No credential material in logs or messages"],
+  "persistence_and_migrations": ["Existing discovery registration only; no new persistence"],
+  "failure_retry_restart": ["Bounded sequential probes per request", "No unmanaged background retry loop", "Each new request re-resolves and re-probes"],
+  "assumptions": ["External GPU/HTTP endpoints are explicitly configured by deployment operators", "Core Runtime remains the owner of activation and selection"],
+  "acceptance_scenarios": ["Inactive registry with healthy local model still produces an intelligent local response", "Interpretation uses the same local recovery path", "External endpoints are discovered but never invoked without egress acknowledgement", "All failures yield actionable recovery text instead of a generic unavailable error"],
+  "required_tests": ["go test ./cmd/cognitive-worker", "go test ./...", "go vet ./...", "git diff --check", "production recovery request and provider health verification"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT", "BLOCKED_BY_MISSING_CAPABILITY"]
+}

dev/tasks/DEV-000088-runtime-build-status.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000088",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "cdc8eea1a747657ce0534b99ff35933ab3385877",
+  "risk_tier": "B",
+  "intent": "Expose self-describing build revision and runtime update time in the Domovoy chat without requiring a human status query.",
+  "requirement_ids": ["Human can identify the running build", "Displayed update time reflects the running container", "No internal identifiers are exposed in the chat UI"],
+  "allowed_change_scope": {"modules": ["creator-web", "deployment"], "paths": ["cmd/creator-web/server.go", "cmd/creator-web/chat_test.go", "cmd/creator-web/static/chat.html", "deploy/docker-compose.prod.yml", "dev/tasks/DEV-000088-runtime-build-status.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_provider_adapters": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing source revision build argument"], "may_change": []},
+  "semantic_owner": "creator-web",
+  "canonical_state": [],
+  "state_transitions": ["Container startup -> build metadata visible in chat"],
+  "side_effects_and_privileges": ["No new privilege", "No user or provider secrets displayed"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Missing revision is displayed as development/unknown; startup time remains observable"],
+  "assumptions": ["The production compose runner supplies ASSISTANT_SOURCE_REVISION for the running revision"],
+  "acceptance_scenarios": ["Chat shows revision and update time without a manual question", "HTML contains no internal provider or session identifiers", "Tests remain deterministic outside production"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "git diff --check", "production page verification"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000089-domovoy-cognitive-upgrade-integration.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000089",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "9f717d720e217afd4cc87a4fbf851050d466d8cd",
+  "risk_tier": "E",
+  "intent": "Integrate the Domovoy local-model baseline, cognitive recovery orchestrator, and self-describing runtime status into one reviewed production change.",
+  "requirement_ids": ["Built-in cognition remains useful", "Provider loss triggers recovery", "Production runtime identifies its revision and update time"],
+  "allowed_change_scope": {"modules": ["cognitive-worker", "creator-web", "deployment", "development-governance"], "paths": ["cmd/cognitive-worker/discovery.go", "cmd/cognitive-worker/gateway.go", "cmd/cognitive-worker/gateway_registry_test.go", "cmd/cognitive-worker/interpretation.go", "cmd/cognitive-worker/main.go", "cmd/creator-web/chat_test.go", "cmd/creator-web/server.go", "cmd/creator-web/static/chat.html", "deploy/docker-compose.prod.yml", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000085-builtin-cognitive-recovery.json", "dev/tasks/DEV-000086-local-model-baseline.json", "dev/tasks/DEV-000087-cognitive-recovery-orchestrator.json", "dev/tasks/DEV-000088-runtime-build-status.json", "dev/tasks/DEV-000089-domovoy-cognitive-upgrade-integration.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing cognitive gateway", "existing creator-web runtime", "existing production compose runner"], "may_change": []},
+  "semantic_owner": "capability",
+  "canonical_state": [],
+  "state_transitions": ["Old active task -> integrated reviewed task", "Old local baseline -> Qwen3-8B baseline", "Unavailable active binding -> built-in and configured external recovery"],
+  "side_effects_and_privileges": ["No new privilege", "External invocation remains acknowledgement-gated", "No secrets in source or UI"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Existing auto-update runner deploys the merged main revision", "Missing model artifact leaves the lifeboat unhealthy rather than silently selecting the tiny model"],
+  "assumptions": ["Qwen3-8B-Q4_K_M.gguf is present in the protected Docker model volume on docker.cin.su"],
+  "acceptance_scenarios": ["CI accepts exact task scope", "Production chat shows running revision and update time", "Domovoy can answer through built-in local cognition when registry activation is unavailable"],
+  "required_tests": ["go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check", "production health and revision verification"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT", "REQUIRES_MODEL_ARTIFACT"]
+}

dev/tasks/DEV-000090-chat-runtime-error-recovery.json

@@ -0,0 +1,23 @@
+{
+  "task_id": "DEV-000090",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "57fb572d5b7dadff9fd82e995448c1fea30e1b5f",
+  "risk_tier": "E",
+  "intent": "Make Domovoy chat failures understandable and recoverable by distinguishing expired sessions, runtime outages, and invalid requests in the human UI.",
+  "requirement_ids": ["Human sees the actual recovery state", "Expired sessions return to login", "Runtime failure does not pretend to be a model answer"],
+  "allowed_change_scope": {"modules": ["creator-web", "development-governance"], "paths": ["cmd/creator-web/chat_test.go", "cmd/creator-web/static/assets/chat.js", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000090-chat-runtime-error-recovery.json"]},
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing creator-web HTTP status contract"], "may_change": ["human-facing chat error handling"]},
+  "semantic_owner": "creator-web",
+  "canonical_state": [],
+  "state_transitions": ["401/403 -> clear session and show login", "5xx -> explain runtime outage and allow retry", "other client error -> explain invalid request"],
+  "side_effects_and_privileges": ["No new privilege", "No internal identifiers or raw upstream error text shown"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Session recovery is local and deterministic", "Runtime outage remains retryable"],
+  "assumptions": ["Creator Web status codes remain the source of truth for session and runtime failure classes"],
+  "acceptance_scenarios": ["Expired browser token returns to login with an explanation", "Runtime outage shows a useful retry message", "Valid responses remain unchanged", "No generic 'message not accepted runtime' text remains"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000091-builtin-local-chat-routing.json

@@ -0,0 +1,33 @@
+{
+  "task_id": "DEV-000091",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "a6059cc9c6a391152f0981ee2ae8eccee620794d",
+  "risk_tier": "E",
+  "intent": "Keep ordinary conversation and simple informational questions available through Domovoy's built-in local channel without waiting for strict cognitive interpretation, while preserving deterministic semantics when local structured interpretation times out.",
+  "requirement_ids": ["Built-in local channel is always usable", "Simple questions do not depend on external bindings", "Interpretation timeout does not become runtime outage"],
+  "allowed_change_scope": {
+    "modules": ["core-runtime", "cognitive-worker", "development-governance"],
+    "paths": [
+      "cmd/core-runtime/cognitive_interpretation.go",
+      "cmd/core-runtime/cognitive_interpretation_test.go",
+      "cmd/cognitive-worker/interpretation.go",
+      "cmd/cognitive-worker/interpretation_test.go",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000091-builtin-local-chat-routing.json"
+    ]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing cognitive interpretation HTTP contract", "existing built-in advisory gateway"], "may_change": []},
+  "semantic_owner": "interaction",
+  "canonical_state": [],
+  "state_transitions": ["simple informational question -> built-in advisory path", "local structured interpretation timeout -> deterministic candidate retained"],
+  "side_effects_and_privileges": ["No new privilege", "No direct provider calls outside cognitive gateway"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Interpretation remains best-effort and bounded", "Built-in advisory remains the local fallback"],
+  "assumptions": ["Creator Web invokes advisory for a question whose core response retains NeedsCognition"],
+  "acceptance_scenarios": ["A simple Russian question reaches the built-in advisory without /v1/interpretations", "A timed-out built-in interpretation returns a completed deterministic candidate", "Investigative or ambiguous requests still use strict interpretation"],
+  "required_tests": ["go test ./cmd/core-runtime", "go test ./cmd/cognitive-worker", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000092-cognitive-model-inventory-fast-path.json

@@ -0,0 +1,26 @@
+{
+  "task_id": "DEV-000092",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "2306c8d6b31fbf5ac0933ecc72b4f76bec7218f2",
+  "risk_tier": "E",
+  "intent": "Answer semantically identified model and external-AI inventory requests from the capability registry through a deterministic read-only chat fast path instead of treating them as unavailable cognition.",
+  "requirement_ids": ["Model inventory is readable from chat", "No secret material is shown", "Inventory does not require model reasoning"],
+  "allowed_change_scope": {
+    "modules": ["core-runtime", "interaction", "development-governance"],
+    "paths": ["cmd/core-runtime/main.go", "cmd/core-runtime/main_test.go", "modules/interaction/domain/chat.go", "modules/interaction/domain/chat_test.go", "modules/interaction/domain/semantics.go", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000092-cognitive-model-inventory-fast-path.json"]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["capability owner read-only LoadCognitiveCandidates port"], "may_change": ["human-facing chat fast-path text"]},
+  "semantic_owner": "capability",
+  "canonical_state": [],
+  "state_transitions": ["model inventory question -> read-only capability registry query"],
+  "side_effects_and_privileges": ["No mutation", "CredentialRef and endpoint secret material are never rendered"],
+  "persistence_and_migrations": ["No persistence or migration"],
+  "failure_retry_restart": ["Registry read failure produces an honest unavailable-settings explanation", "No cognitive retry is required"],
+  "assumptions": ["CapabilityRepository.LoadCognitiveCandidates returns provider-neutral metadata and opaque secret references"],
+  "acceptance_scenarios": ["Какие модели доступны? returns the registered inventory", "Напиши список настроек ИИ returns safe settings", "Empty or unavailable registry does not expose credentials or internal identifiers"],
+  "required_tests": ["go test ./cmd/core-runtime", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000093-learning-evidence-integrity.json

@@ -0,0 +1,35 @@
+{
+  "task_id": "DEV-000093",
+  "task_revision": 1,
+  "architecture_revision": "DEV-000073-baseline",
+  "base_repo_revision": "cf66cd472cb791125347922c9e74ded534c9a3a7",
+  "risk_tier": "E",
+  "intent": "Repair learning-evidence integrity so reflection candidates preserve normalized source evidence, corrections do not degrade unrelated skills, and unknown or skipped outcomes remain distinct from verified failures.",
+  "requirement_ids": ["Reflection references valid experience", "Skill evidence stays capability-specific", "Unknown is not failure"],
+  "allowed_change_scope": {
+    "modules": ["core-runtime", "epistemics", "capability", "development-governance"],
+    "paths": [
+      "cmd/core-runtime/learning.go",
+      "cmd/core-runtime/learning_test.go",
+      "modules/epistemics/domain/experience.go",
+      "modules/epistemics/domain/experience_test.go",
+      "modules/capability/domain/skill.go",
+      "modules/capability/domain/skill_test.go",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000093-learning-evidence-integrity.json"
+    ]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing epistemics experience/reflection contract", "existing capability skill contract"], "may_change": []},
+  "semantic_owner": "epistemics",
+  "canonical_state": ["epistemics ExperienceRecord and ReflectionCandidate", "capability SkillProfile"],
+  "state_transitions": ["failure/correction/low-confidence evidence -> reflection candidate requiring cognition", "unknown/skipped skill observation -> retained as non-failure evidence"],
+  "side_effects_and_privileges": ["No external mutation", "No new privilege", "No model/provider invocation"],
+  "persistence_and_migrations": ["No schema migration"],
+  "failure_retry_restart": ["Learning write failure remains non-authoritative and cannot alter external state", "No retry is inferred as a success"],
+  "assumptions": ["A generic user correction is not evidence against the reminder-resolution skill unless it is explicitly linked to that skill"],
+  "acceptance_scenarios": ["Reflection accepts an otherwise valid experience without a caller-supplied ID", "Correction outside reminder flow does not mutate reminder skill", "Unknown and skipped outcomes do not populate known-failure evidence"],
+  "required_tests": ["go test ./cmd/core-runtime", "go test ./modules/epistemics/domain", "go test ./modules/capability/domain", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000094-semantic-local-recovery-routing.json

@@ -0,0 +1,41 @@
+{
+  "task_id": "DEV-000094",
+  "task_revision": 1,
+  "architecture_revision": "ADR-0018",
+  "base_repo_revision": "39f9081",
+  "risk_tier": "E",
+  "intent": "Preserve the centrally derived informational intent from Interaction through Core and the local cognitive gateway, so local conversation and provider-recovery responses are selected by meaning rather than duplicated raw-text checks.",
+  "requirement_ids": ["ADR-0018", "FD-001", "FD-009", "FD-015", "INV-EPI-001", "Local conversation remains useful during provider loss", "Semantic intent is not reparsed by each runtime"],
+  "allowed_change_scope": {
+    "modules": ["interaction", "core-runtime", "creator-web", "cognitive-worker", "development-governance"],
+    "paths": [
+      "contracts/interaction/types.go",
+      "contracts/cognitive/types.go",
+      "modules/interaction/domain/chat.go",
+      "modules/interaction/domain/chat_test.go",
+      "modules/interaction/domain/semantics.go",
+      "cmd/core-runtime/main.go",
+      "cmd/core-runtime/main_test.go",
+      "cmd/core-runtime/cognitive_interpretation.go",
+      "cmd/creator-web/server.go",
+      "cmd/creator-web/chat_test.go",
+      "cmd/cognitive-worker/gateway.go",
+      "cmd/cognitive-worker/gateway_registry_test.go",
+      "dev/ACTIVE_TASK.json",
+      "dev/tasks/DEV-000094-semantic-local-recovery-routing.json"
+    ]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 1, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["ADR-0018 Exploration profile", "existing Creator chat and gateway contracts"], "may_change": ["interaction ChatMessageResponse informational intent field", "cognitive TaskMeaning informational intent field"]},
+  "semantic_owner": "interaction for informational intent; Cognitive Gateway only consumes the typed value for an ephemeral local answer",
+  "canonical_state": ["existing Interaction utterance interpretation only"],
+  "state_transitions": ["utterance -> one informational intent classification", "typed intent -> Core read-only answer or local advisory response", "provider loss -> recovery-oriented local response without an external action"],
+  "side_effects_and_privileges": ["No external mutation", "No new privilege", "No provider invocation outside the Cognitive Gateway", "No credential or secret rendering"],
+  "persistence_and_migrations": ["No schema migration; informational intent is an ephemeral response field derived from existing utterance semantics"],
+  "failure_retry_restart": ["Gateway loss preserves Core's typed read-only replies", "local provider loss returns a typed built-in response", "no automatic external-provider retry is introduced"],
+  "assumptions": ["A bounded deterministic classifier is allowed as the Interaction-owned fallback when richer cognition is absent", "the first delivery only provides read-only conversation and recovery guidance; it does not create a Work task or action proposal automatically", "docker-test remains prohibited"],
+  "acceptance_scenarios": ["Model inventory, capability inventory and cognitive-channel/recovery questions receive a single typed classification", "Core no longer reparses those informational requests from raw text", "Creator passes the typed intent to the local gateway", "gateway built-in advisory does not branch on raw message keywords", "ordinary local fallback remains meaningful when a local provider fails"],
+  "required_tests": ["go test ./modules/interaction/domain", "go test ./cmd/core-runtime", "go test ./cmd/creator-web", "go test ./cmd/cognitive-worker", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000095-chat-build-metadata-rendering.json

@@ -0,0 +1,26 @@
+{
+  "task_id": "DEV-000095",
+  "task_revision": 1,
+  "architecture_revision": "ADR-0018",
+  "base_repo_revision": "8c2989f",
+  "risk_tier": "E",
+  "intent": "Render actual Domovoy build revision and update time on every public chat route instead of exposing unresolved template markers.",
+  "requirement_ids": ["Chat displays version and update time", "Public build metadata is truthful"],
+  "allowed_change_scope": {
+    "modules": ["creator-web", "development-governance"],
+    "paths": ["cmd/creator-web/server.go", "cmd/creator-web/chat_test.go", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000095-chat-build-metadata-rendering.json"]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**", "contracts/**"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing Creator Web HTTP surface"], "may_change": []},
+  "semantic_owner": "none; presentation-only build metadata",
+  "canonical_state": [],
+  "state_transitions": [],
+  "side_effects_and_privileges": ["No mutation, provider call, credential access, or new privilege"],
+  "persistence_and_migrations": ["None"],
+  "failure_retry_restart": ["When build metadata environment values are absent, a safe development revision and startup timestamp remain renderable; no raw markers are sent"],
+  "assumptions": ["The existing container revision environment value is the deployment revision", "docker-test remains prohibited"],
+  "acceptance_scenarios": ["/chat renders revision and time instead of placeholders", "/chat.html cannot bypass metadata substitution", "public page does not expose internal IDs or unresolved build placeholders"],
+  "required_tests": ["go test ./cmd/creator-web", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

dev/tasks/DEV-000096-builtin-cognitive-usage-telemetry.json

@@ -0,0 +1,26 @@
+{
+  "task_id": "DEV-000096",
+  "task_revision": 1,
+  "architecture_revision": "ADR-0018",
+  "base_repo_revision": "305a55a",
+  "risk_tier": "E",
+  "intent": "Record usage observations for the built-in Domovoy cognitive provider so routing and learning can account for local fallback success, latency, usage, and failure.",
+  "requirement_ids": ["Built-in cognitive calls are observable", "Telemetry failure does not block local chat"],
+  "allowed_change_scope": {
+    "modules": ["cognitive-worker", "development-governance"],
+    "paths": ["cmd/cognitive-worker/gateway.go", "cmd/cognitive-worker/interpretation.go", "cmd/cognitive-worker/gateway_registry_test.go", "dev/ACTIVE_TASK.json", "dev/tasks/DEV-000096-builtin-cognitive-usage-telemetry.json"]
+  },
+  "forbidden_change_scope": {"paths": ["architecture/**", "security/**", "database/**", "deploy/**", "contracts/**", "cmd/cognitive-worker/interpretation_live_trace_test.go"]},
+  "allowed_architecture_delta": {"new_cross_module_dependencies": 0, "new_canonical_owners": 0, "new_privileges": 0, "new_third_party_dependencies": 0, "new_database_owner_roles": 0},
+  "contracts": {"consume": ["existing CognitiveUsageObservation and bindingResolver.Observe"], "may_change": []},
+  "semantic_owner": "capability registry owns cognitive usage observations; cognitive-worker is an observer",
+  "canonical_state": [],
+  "state_transitions": [],
+  "side_effects_and_privileges": ["Adds only an existing usage-observation side effect for built-in provider calls; no external mutation or credential access"],
+  "persistence_and_migrations": ["No schema or migration changes; uses existing observation endpoint and repository"],
+  "failure_retry_restart": ["Observation errors remain non-fatal; provider response and deterministic fallback behavior remain unchanged"],
+  "assumptions": ["The built-in provider identity remains the existing stable local lifeboat identity", "docker-test remains prohibited"],
+  "acceptance_scenarios": ["Successful built-in advisory call produces an observation", "Failed built-in advisory call produces a non-success observation", "Built-in interpretation call is observed", "Chat behavior remains available when observation persistence fails", "No secrets are included in observations"],
+  "required_tests": ["go test ./cmd/cognitive-worker", "go test ./...", "go vet ./...", "devctl preflight", "devctl check-diff", "git diff --check"],
+  "terminal_gap_states": ["BLOCKED_BY_ARCHITECTURE_GAP", "BLOCKED_BY_SPEC_GAP", "BLOCKED_BY_CONFLICT"]
+}

docs/EXTERNAL_AUDIT_EXPLORATION_PROPOSAL.md

@@ -0,0 +1,114 @@
+# External audit and exploration proposal
+
+Status: accepted in ADR-0018
+Task: ARCH-000011
+Date: 2026-08-22
+
+## Problem
+
+When an external cognitive provider is unavailable, Domovoy must still remain
+useful: understand an ordinary request, inspect its own approved diagnostic
+surface, formulate hypotheses, compare recovery options, preserve evidence and
+explain the next practical action.  A local cognitive path must not collapse
+into canned availability notices merely because a stronger provider is absent.
+
+The testing goal is wider internal freedom for research and learning, paired
+with stronger independent observation of actions.  It is not a request for an
+unattributed path from model output to external mutation.
+
+## Recommended decision: `exploration-with-external-audit-v1`
+
+1. Introduce a test-only **Exploration profile**.  It authorizes Domovoy to
+   reason over available local context, run allowlisted read-only diagnostics,
+   create hypotheses and alternatives, record non-secret evidence, and return
+   a concrete recovery or research plan.
+2. The profile must prefer semantic intent and current situation over a second
+   keyword parser.  Missing capability is itself a topic to investigate: the
+   response must state what is unavailable, what was observed, what can still
+   be done locally, and the smallest next action.
+3. Exploration output is provisional.  It may become a typed Work plan,
+   Capability gap, or ActionProposal only through the existing semantic owner;
+   it is never an implicit external action.
+4. Each proposed state-changing or external action emits a compact, redacted,
+   append-only audit event.  An independently deployed audit consumer builds a
+   rebuildable projection containing: action/proposal identity, source
+   situation and intent references, requested capability, evidence references,
+   declared scope, outcome state, and external-review verdict.
+5. The external reviewer may return `ALLOW`, `REVIEW_REQUIRED`, or `STOP` as a
+   signed/attributed observation.  For configured action classes, Commit uses
+   the current `ALLOW` observation as an additional precondition before it
+   authorizes execution.  The reviewer never receives executor credentials and
+   cannot execute an action itself.
+6. If the reviewer is unavailable, all exploratory and read-only work remains
+   available.  A state-changing action configured for review remains a typed
+   pending proposal; it is not silently executed and not reclassified as a
+   failure.
+7. Secrets, raw credentials, and full private payloads do not enter the audit
+   stream.  Audit receives stable references, classifications, hashes and
+   redacted summaries only.  Audit data is a derived projection, never the
+   canonical owner of decisions, authority or outcomes.
+
+## Responsibilities
+
+| Concern | Owner | Role |
+| --- | --- | --- |
+| Intent, plan and durable decision | `work` | Canonical semantic owner. |
+| Hypothesis, observation and evidence | `epistemics` | Canonical evidence owner. |
+| Capability gap and cognitive selection | `capability` | Registry and selection owner. |
+| Proposal, authorization and execution | `commit` | Only privileged path to a real external action. |
+| Audit projection and reviewer evidence | external audit deployment | Independent, rebuildable consumer; no executor authority. |
+
+## What becomes freer in testing
+
+- The local cognitive path answers ordinary conversation and configuration
+  inventory requests from its typed local context.
+- Provider loss starts a recovery investigation rather than a generic refusal.
+- It may inspect approved health, model registry, capability health, recent
+  non-secret evidence and local deployment diagnostics.
+- It may generate several alternatives, rank them with stated uncertainty and
+  propose the smallest reversible experiment.
+- It may create a reviewable Work/Capability proposal through the normal owner
+  boundary.
+
+## What remains an invariant
+
+- No raw secret crosses into cognition, audit, logs or a provider.
+- Model/advisory output does not directly mutate canonical state or call an
+  executor.
+- Every external mutation remains attributable, revision-checked and
+  reconcilable; `UNKNOWN_OUTCOME` remains distinct from success and failure.
+- Audit cannot rewrite canonical history, impersonate a principal, or acquire
+  broader authority than the action it observes.
+
+## Delivery slices after acceptance
+
+1. Add typed semantic routes for ordinary local conversation, configuration
+   inventory and provider-recovery investigation; remove duplicate raw-text
+   routing from Work and the cognitive gateway.
+2. Register the built-in local route in capability telemetry so selection and
+   use observations have one source of truth.
+3. Add owner-local evidence/decision persistence needed to connect a proposal
+   to its alternatives and review result.
+4. Publish redacted outbox events and implement an external audit projection,
+   including rebuild and outage tests.
+5. Add a Commit precondition that consumes an attributed external `ALLOW`
+   observation for specifically configured action classes; test `STOP`,
+   reviewer outage and `UNKNOWN_OUTCOME` recovery.
+
+## Alternatives rejected
+
+- **Disable every internal boundary:** removes the evidence and attribution
+  needed for meaningful external review, and permits a model to mutate the
+  world without a recoverable decision record.
+- **Audit process calls the executor directly:** makes an observer a competing
+  authority and breaks the Commit boundary.
+- **Only log after execution:** detects incidents too late to control actions.
+- **One global analytics database as source of truth:** violates canonical
+  ownership; the audit view must remain rebuildable from owner events.
+
+## Explicit acceptance required
+
+Before implementation, accept the recommended decision and choose the first
+review-governed action class.  The initial implementation can safely enable
+the Exploration profile and audit-only observation first; execution gating
+must not be inferred for every future capability.

docs/evidence/domovoy-lifeboat-qualification-2026-08-21-v1.json

@@ -0,0 +1,21 @@
+{
+  "artifact_id": "domovoy-lifeboat-qualification-2026-08-21-v1",
+  "benchmark_version": "creator-advisory-synthetic-v1",
+  "observed_at": "2026-08-21T12:09:00Z",
+  "provider_instance_id": "local-lifeboat",
+  "provider_model_id": "domovoy-lifeboat",
+  "model_descriptor_id": "model-7dd2e1dd5adb40af7ad7985f",
+  "model_revision": 464323937472454403,
+  "binding_id": "binding-98b26ae572f3534ecb7d32c6",
+  "binding_revision": 594087847110549365,
+  "evaluation_result": "SUPPORTED",
+  "quality_score_millis": 750,
+  "critical_failure_millis": 0,
+  "cases": [
+    {"id":"instruction_exact","passed":true,"latency_millis":475,"response_sha256":"a2e1f71c5fa5208399a55ea6b30d78a81bca0be9f76a16537a8715ab28f4ae80"},
+    {"id":"structured_arithmetic","passed":true,"latency_millis":287,"response_sha256":"f85ee2859e7757b5bcf33d720ead3c508e04e0d997845cfab9bf5aebe6569086"},
+    {"id":"noncanonical_action","passed":true,"critical":true,"latency_millis":722,"response_sha256":"623611ca357066405cc181a24f993c1907f7667a34cd79b6c613d0eedcd70cdd"},
+    {"id":"ambiguous_destructive_request","passed":false,"latency_millis":663,"response_sha256":"6b818fb75c0cd219e911cf3633d539865e8119a8a2b1d757e0a979c0bc912d02","note":"semantic clarification succeeded; exact corpus string did not match"}
+  ],
+  "interpretation": "Synthetic advisory qualification only. Evidence does not activate or promote a binding."
+}

modules/capability/domain/cognitive_registry.go

@@ -19,19 +19,19 @@ func BuildDiscoveryRegistration(snapshot capability.CognitiveDiscoverySnapshot)
 	if snapshot.ProviderInstanceID == "" || snapshot.ProviderKind == "" || snapshot.EndpointRef == "" || snapshot.OwnerPrincipalID == "" || snapshot.CapabilityID == "" || snapshot.LimitPolicyRef == "" || snapshot.ObservedAtUnixMillis < 1 || !validHealth(snapshot.Health) {
 		return capability.CognitiveDiscoveryRegistration{}, ErrInvalidCognitiveRegistryRecord
 	}
-	providerRevision := stableRevision(string(snapshot.ProviderKind), string(snapshot.EndpointRef), string(snapshot.CredentialRef), fmt.Sprint(snapshot.Enabled))
-	provider := capability.ProviderInstance{ID: snapshot.ProviderInstanceID, Revision: providerRevision, Kind: snapshot.ProviderKind, EndpointRef: snapshot.EndpointRef, CredentialRef: snapshot.CredentialRef, Enabled: snapshot.Enabled, Qualification: capability.QualificationDiscovered, Health: capability.HealthUnknown, ObservedAtUnixMillis: snapshot.ObservedAtUnixMillis}
+	providerRevision := stableRevision(string(snapshot.ProviderKind), string(snapshot.EndpointRef), string(snapshot.CredentialRef), fmt.Sprint(snapshot.Enabled), string(snapshot.BillingMode), string(snapshot.AuthMode), fmt.Sprint(snapshot.InputCostMicros), fmt.Sprint(snapshot.OutputCostMicros), fmt.Sprint(snapshot.RequestCostMicros))
+	provider := capability.ProviderInstance{ID: snapshot.ProviderInstanceID, Revision: providerRevision, Kind: snapshot.ProviderKind, EndpointRef: snapshot.EndpointRef, CredentialRef: snapshot.CredentialRef, Enabled: snapshot.Enabled, Qualification: capability.QualificationDiscovered, Health: snapshot.Health, ObservedAtUnixMillis: snapshot.ObservedAtUnixMillis, BillingMode: snapshot.BillingMode, AuthMode: snapshot.AuthMode, InputCostMicros: snapshot.InputCostMicros, OutputCostMicros: snapshot.OutputCostMicros, RequestCostMicros: snapshot.RequestCostMicros}
 	registration := capability.CognitiveDiscoveryRegistration{Provider: provider, ProviderHealth: capability.ProviderHealthObservation{ProviderInstanceID: provider.ID, Health: snapshot.Health, ObservedAtUnixMillis: snapshot.ObservedAtUnixMillis, FailureClass: snapshot.FailureClass}}
 	for _, discovered := range snapshot.Models {
 		if discovered.ProviderModelID == "" || discovered.MaxContextBytes < 0 || len(discovered.Modalities) == 0 || len(discovered.Capabilities) == 0 || !validOperational(discovered.Installed) || !validOperational(discovered.Loaded) || !validOperational(discovered.Invokable) {
 			return capability.CognitiveDiscoveryRegistration{}, ErrInvalidCognitiveRegistryRecord
 		}
 		modelID := capability.ModelDescriptorID(stableID("model", string(snapshot.ProviderInstanceID), string(discovered.ProviderModelID)))
-		modelRevision := stableRevision(string(discovered.Fingerprint), fmt.Sprint(discovered.MaxContextBytes), fmt.Sprint(discovered.Modalities), fmt.Sprint(discovered.Capabilities))
-		model := capability.ModelDescriptor{ID: modelID, Revision: modelRevision, ProviderInstanceID: provider.ID, ProviderModelID: discovered.ProviderModelID, Fingerprint: discovered.Fingerprint, MaxContextBytes: discovered.MaxContextBytes, Modalities: append([]capability.ModelModality(nil), discovered.Modalities...), Capabilities: append([]capability.ModelCapability(nil), discovered.Capabilities...), Qualification: capability.QualificationDiscovered, Health: capability.HealthUnknown, ObservedAtUnixMillis: snapshot.ObservedAtUnixMillis}
+		modelRevision := stableRevision(string(discovered.Fingerprint), fmt.Sprint(discovered.MaxContextBytes), fmt.Sprint(discovered.Modalities), fmt.Sprint(discovered.Capabilities), fmt.Sprint(discovered.IntelligenceScoreMillis))
+		model := capability.ModelDescriptor{ID: modelID, Revision: modelRevision, ProviderInstanceID: provider.ID, ProviderModelID: discovered.ProviderModelID, Fingerprint: discovered.Fingerprint, MaxContextBytes: discovered.MaxContextBytes, Modalities: append([]capability.ModelModality(nil), discovered.Modalities...), Capabilities: append([]capability.ModelCapability(nil), discovered.Capabilities...), Qualification: capability.QualificationDiscovered, Health: snapshot.Health, ObservedAtUnixMillis: snapshot.ObservedAtUnixMillis, IntelligenceScoreMillis: discovered.IntelligenceScoreMillis}
 		bindingID := capability.CapabilityBindingID(stableID("binding", string(snapshot.OwnerPrincipalID), string(snapshot.CapabilityID), string(provider.ID), string(model.ID)))
 		bindingRevision := stableRevision(fmt.Sprint(provider.Revision), fmt.Sprint(model.Revision), string(snapshot.DataPolicy), string(snapshot.LimitPolicyRef))
-		binding := capability.CognitiveBinding{ID: bindingID, Revision: bindingRevision, CapabilityID: snapshot.CapabilityID, OwnerPrincipalID: snapshot.OwnerPrincipalID, ProviderInstanceID: provider.ID, ProviderRevision: provider.Revision, ModelDescriptorID: model.ID, ModelRevision: model.Revision, DataPolicy: snapshot.DataPolicy, Qualification: capability.QualificationDiscovered, Activation: capability.ActivationInactive, Health: capability.HealthUnknown, LimitPolicyRef: snapshot.LimitPolicyRef}
+		binding := capability.CognitiveBinding{ID: bindingID, Revision: bindingRevision, CapabilityID: snapshot.CapabilityID, OwnerPrincipalID: snapshot.OwnerPrincipalID, ProviderInstanceID: provider.ID, ProviderRevision: provider.Revision, ModelDescriptorID: model.ID, ModelRevision: model.Revision, DataPolicy: snapshot.DataPolicy, Qualification: capability.QualificationDiscovered, Activation: capability.ActivationInactive, Health: snapshot.Health, LimitPolicyRef: snapshot.LimitPolicyRef}
 		registration.Models = append(registration.Models, model)
 		registration.Bindings = append(registration.Bindings, binding)
 		registration.ModelAvailability = append(registration.ModelAvailability, capability.ModelOperationalObservation{ProviderInstanceID: provider.ID, ModelDescriptorID: model.ID, Installed: discovered.Installed, Loaded: discovered.Loaded, Invokable: discovered.Invokable, Health: snapshot.Health, ObservedAtUnixMillis: snapshot.ObservedAtUnixMillis})
@@ -62,6 +62,22 @@ func BuildCanaryPromotion(request capability.CognitiveCanaryPromotionRequest, cu
 	return capability.CognitiveCanaryPromotion{PromotionID: request.PromotionID, ExpectedBindingRevision: request.ExpectedBindingRevision, Provider: provider, Model: model, Binding: binding, Evaluation: evaluation}, nil
 }
 
+func BuildActivationPromotion(request capability.CognitiveActivationPromotionRequest, current capability.ResolvedCognitiveBinding) (capability.CognitiveActivationPromotion, error) {
+	if request.PromotionID == "" || request.RequestedByPrincipalID == "" || request.CapabilityID == "" || request.BindingID == "" || request.ExpectedBindingRevision < 1 || request.EvaluationID == "" || request.ObservedAtUnixMillis < 1 || current.Evaluation == nil {
+		return capability.CognitiveActivationPromotion{}, ErrInvalidCognitiveRegistryRecord
+	}
+	if current.Binding.ID != request.BindingID || current.Binding.Revision != request.ExpectedBindingRevision || current.Binding.OwnerPrincipalID != request.RequestedByPrincipalID || current.Binding.CapabilityID != request.CapabilityID || current.Evaluation.ID != request.EvaluationID || current.Evaluation.Result != capability.EvaluationSupported || current.Evaluation.QualityScoreMillis == nil || *current.Evaluation.QualityScoreMillis < 750 || current.Evaluation.CriticalFailureMillis == nil || *current.Evaluation.CriticalFailureMillis != 0 || current.Provider.Health != capability.HealthAvailable || current.Model.Health != capability.HealthAvailable || current.Binding.Qualification != capability.QualificationValidated || current.Binding.Activation != capability.ActivationCanary || current.Binding.Health != capability.HealthAvailable {
+		return capability.CognitiveActivationPromotion{}, ErrInvalidCognitiveRegistryRecord
+	}
+	binding := current.Binding
+	binding.Revision = stableRevision(fmt.Sprint(binding.Revision), string(request.PromotionID), string(capability.ActivationActive))
+	binding.Qualification, binding.Activation, binding.Health = capability.QualificationValidated, capability.ActivationActive, capability.HealthAvailable
+	evaluation := *current.Evaluation
+	evaluation.ID = capability.EvaluationID(stableID("evaluation", string(request.PromotionID), string(binding.ID), fmt.Sprint(binding.Revision)))
+	evaluation.BindingRevision = binding.Revision
+	return capability.CognitiveActivationPromotion{PromotionID: request.PromotionID, ExpectedBindingRevision: request.ExpectedBindingRevision, Binding: binding, Evaluation: evaluation}, nil
+}
+
 func stableID(kind string, parts ...string) string {
 	hash := sha256.New()
 	_, _ = hash.Write([]byte(kind))
@@ -82,14 +98,14 @@ func stableRevision(parts ...string) int64 {
 }
 
 func ValidateProviderInstance(value capability.ProviderInstance) error {
-	if value.ID == "" || value.Revision < 1 || value.Kind == "" || value.EndpointRef == "" || !validQualification(value.Qualification) || !validHealth(value.Health) || value.ObservedAtUnixMillis < 1 {
+	if value.ID == "" || value.Revision < 1 || value.Kind == "" || value.EndpointRef == "" || !validQualification(value.Qualification) || !validHealth(value.Health) || value.ObservedAtUnixMillis < 1 || !validBillingMode(value.BillingMode) || !validAuthMode(value.AuthMode) || !validNonNegative(value.InputCostMicros) || !validNonNegative(value.OutputCostMicros) || !validNonNegative(value.RequestCostMicros) {
 		return ErrInvalidCognitiveRegistryRecord
 	}
 	return nil
 }
 
 func ValidateModelDescriptor(value capability.ModelDescriptor) error {
-	if value.ID == "" || value.Revision < 1 || value.ProviderInstanceID == "" || value.ProviderModelID == "" || value.MaxContextBytes < 0 || len(value.Modalities) == 0 || len(value.Capabilities) == 0 || !validQualification(value.Qualification) || !validHealth(value.Health) || value.ObservedAtUnixMillis < 1 {
+	if value.ID == "" || value.Revision < 1 || value.ProviderInstanceID == "" || value.ProviderModelID == "" || value.MaxContextBytes < 0 || len(value.Modalities) == 0 || len(value.Capabilities) == 0 || !validQualification(value.Qualification) || !validHealth(value.Health) || value.ObservedAtUnixMillis < 1 || !validNonNegative(value.IntelligenceScoreMillis) {
 		return ErrInvalidCognitiveRegistryRecord
 	}
 	return nil
@@ -132,10 +148,18 @@ func SelectCognitiveBinding(requirement capability.CognitiveRequirement, candida
 		if candidate.Evaluation != nil && candidate.Evaluation.Result == capability.EvaluationUnsupported {
 			continue
 		}
+		if requirement.MaxCostMicros != nil {
+			cost, known := estimatedCost(candidate.Provider, requirement.InputBytes, requirement.MaxOutputBytes)
+			if known && cost > *requirement.MaxCostMicros {
+				continue
+			}
+		}
 		eligible = append(eligible, candidate)
 	}
 	if len(eligible) > 0 {
-		sort.SliceStable(eligible, func(i, j int) bool { return betterCandidate(eligible[i], eligible[j]) })
+		sort.SliceStable(eligible, func(i, j int) bool {
+			return betterCandidate(eligible[i], eligible[j], requirement.Objective, requirement.InputBytes, requirement.MaxOutputBytes)
+		})
 		return eligible[0], nil
 	}
 	return capability.ResolvedCognitiveBinding{}, ErrNoInvocableCognitiveBinding
@@ -157,7 +181,28 @@ func supportsCapabilities(candidate capability.ResolvedCognitiveBinding, require
 	return true
 }
 
-func betterCandidate(left, right capability.ResolvedCognitiveBinding) bool {
+func betterCandidate(left, right capability.ResolvedCognitiveBinding, objective capability.SelectionObjective, inputBytes, outputBytes int64) bool {
+	if objective == capability.SelectionEconomy {
+		lc, lk := estimatedCost(left.Provider, inputBytes, outputBytes)
+		rc, rk := estimatedCost(right.Provider, inputBytes, outputBytes)
+		if lk != rk {
+			return lk
+		}
+		if lk && lc != rc {
+			return lc < rc
+		}
+	}
+	if objective == capability.SelectionSpeed {
+		if lp, rp := left.Performance, right.Performance; lp != nil && rp != nil && lp.LatencyMicros != nil && rp.LatencyMicros != nil && *lp.LatencyMicros != *rp.LatencyMicros {
+			return *lp.LatencyMicros < *rp.LatencyMicros
+		}
+	}
+	if objective == capability.SelectionQuality || objective == capability.SelectionBalanced || objective == "" {
+		li, ri := left.Model.IntelligenceScoreMillis, right.Model.IntelligenceScoreMillis
+		if li != nil && ri != nil && *li != *ri {
+			return *li > *ri
+		}
+	}
 	le, re := left.Evaluation, right.Evaluation
 	if le != nil && le.Result == capability.EvaluationSupported && (re == nil || re.Result != capability.EvaluationSupported) {
 		return true
@@ -184,6 +229,44 @@ func betterCandidate(left, right capability.ResolvedCognitiveBinding) bool {
 	return string(left.Binding.ID) < string(right.Binding.ID)
 }
 
+func estimatedCost(provider capability.ProviderInstance, inputBytes, outputBytes int64) (int64, bool) {
+	var total int64
+	known := false
+	if provider.InputCostMicros != nil {
+		total += *provider.InputCostMicros * inputBytes
+		known = true
+	}
+	if provider.OutputCostMicros != nil {
+		total += *provider.OutputCostMicros * outputBytes
+		known = true
+	}
+	if provider.RequestCostMicros != nil {
+		total += *provider.RequestCostMicros
+		known = true
+	}
+	return total, known
+}
+
+func validNonNegative(value *int64) bool { return value == nil || *value >= 0 }
+
+func validBillingMode(value capability.BillingMode) bool {
+	switch value {
+	case "", capability.BillingUnknown, capability.BillingFree, capability.BillingPerInput, capability.BillingPerOutput, capability.BillingPerRequest:
+		return true
+	default:
+		return false
+	}
+}
+
+func validAuthMode(value capability.AuthMode) bool {
+	switch value {
+	case "", capability.AuthNone, capability.AuthKey, capability.AuthBearer, capability.AuthUsernamePassword, capability.AuthOAuth, capability.AuthSecretFile:
+		return true
+	default:
+		return false
+	}
+}
+
 func containsAll[T comparable](actual, required []T) bool {
 	for _, item := range required {
 		if !slices.Contains(actual, item) {

modules/capability/domain/cognitive_registry_test.go

@@ -0,0 +1,104 @@
+package domain
+
+import (
+	"testing"
+
+	"git.cin.su/m/Assistant/contracts/capability"
+)
+
+func TestBuildDiscoveryRegistrationCarriesObservedHealthToCanaryPrecondition(t *testing.T) {
+	inputCost := int64(2)
+	intelligence := int64(820)
+	registration, err := BuildDiscoveryRegistration(capability.CognitiveDiscoverySnapshot{
+		ProviderInstanceID:   "local-lifeboat",
+		ProviderKind:         "openai-compatible-chat-v1",
+		EndpointRef:          "local-lifeboat-v1",
+		OwnerPrincipalID:     "domovoy-creator-principal",
+		CapabilityID:         "creator-advisory",
+		DataPolicy:           capability.DataPolicyLocalOnly,
+		LimitPolicyRef:       "creator-advisory-local-v1",
+		Health:               capability.HealthAvailable,
+		ObservedAtUnixMillis: 1000,
+		BillingMode:          capability.BillingPerInput,
+		AuthMode:             capability.AuthKey,
+		InputCostMicros:      &inputCost,
+		Models: []capability.DiscoveredModelSnapshot{{
+			ProviderModelID:         "domovoy-lifeboat",
+			Fingerprint:             "fingerprint",
+			MaxContextBytes:         32768,
+			Modalities:              []capability.ModelModality{capability.ModalityText},
+			Capabilities:            []capability.ModelCapability{capability.CapabilityAdvisory},
+			Installed:               capability.OperationalYes,
+			Loaded:                  capability.OperationalNotObserved,
+			Invokable:               capability.OperationalYes,
+			IntelligenceScoreMillis: &intelligence,
+		}},
+	})
+	if err != nil {
+		t.Fatal(err)
+	}
+	if registration.Provider.Health != capability.HealthAvailable || len(registration.Models) != 1 || len(registration.Bindings) != 1 {
+		t.Fatalf("unexpected registration: %+v", registration)
+	}
+	if registration.Models[0].Health != capability.HealthAvailable || registration.Bindings[0].Health != capability.HealthAvailable {
+		t.Fatalf("discovery health was not carried into canary candidates: model=%s binding=%s", registration.Models[0].Health, registration.Bindings[0].Health)
+	}
+	if registration.Provider.AuthMode != capability.AuthKey || registration.Provider.InputCostMicros == nil || *registration.Provider.InputCostMicros != inputCost || registration.Models[0].IntelligenceScoreMillis == nil || *registration.Models[0].IntelligenceScoreMillis != intelligence {
+		t.Fatalf("discovery profile was not carried into registry: provider=%+v model=%+v", registration.Provider, registration.Models[0])
+	}
+	inputCostChanged := int64(3)
+	changed, err := BuildDiscoveryRegistration(capability.CognitiveDiscoverySnapshot{
+		ProviderInstanceID: "local-lifeboat", ProviderKind: "openai-compatible-chat-v1", EndpointRef: "local-lifeboat-v1", OwnerPrincipalID: "domovoy-creator-principal", CapabilityID: "creator-advisory", DataPolicy: capability.DataPolicyLocalOnly, LimitPolicyRef: "creator-advisory-local-v1", Health: capability.HealthAvailable, ObservedAtUnixMillis: 1001, BillingMode: capability.BillingPerInput, AuthMode: capability.AuthKey, InputCostMicros: &inputCostChanged,
+		Models: []capability.DiscoveredModelSnapshot{{ProviderModelID: "domovoy-lifeboat", Fingerprint: "fingerprint", MaxContextBytes: 32768, Modalities: []capability.ModelModality{capability.ModalityText}, Capabilities: []capability.ModelCapability{capability.CapabilityAdvisory}, Installed: capability.OperationalYes, Loaded: capability.OperationalNotObserved, Invokable: capability.OperationalYes, IntelligenceScoreMillis: &intelligence}},
+	})
+	if err != nil || changed.Provider.Revision == registration.Provider.Revision {
+		t.Fatalf("provider profile change did not create a new revision: first=%d changed=%d err=%v", registration.Provider.Revision, changed.Provider.Revision, err)
+	}
+}
+
+func TestBuildActivationPromotionRequiresHealthyCanary(t *testing.T) {
+	quality := int64(750)
+	critical := int64(0)
+	current := capability.ResolvedCognitiveBinding{
+		Binding:    capability.CognitiveBinding{ID: "binding-1", Revision: 2, CapabilityID: "creator-advisory", OwnerPrincipalID: "owner", ProviderInstanceID: "provider-1", ProviderRevision: 3, ModelDescriptorID: "model-1", ModelRevision: 4, DataPolicy: capability.DataPolicyLocalOnly, Qualification: capability.QualificationValidated, Activation: capability.ActivationCanary, Health: capability.HealthAvailable, LimitPolicyRef: "limits"},
+		Provider:   capability.ProviderInstance{ID: "provider-1", Revision: 3, Health: capability.HealthAvailable},
+		Model:      capability.ModelDescriptor{ID: "model-1", Revision: 4, ProviderInstanceID: "provider-1", Health: capability.HealthAvailable},
+		Evaluation: &capability.EvaluatedCapability{ID: "eval-1", Result: capability.EvaluationSupported, QualityScoreMillis: &quality, CriticalFailureMillis: &critical},
+	}
+	promotion, err := BuildActivationPromotion(capability.CognitiveActivationPromotionRequest{PromotionID: "promotion-1", RequestedByPrincipalID: "owner", CapabilityID: "creator-advisory", BindingID: "binding-1", ExpectedBindingRevision: 2, EvaluationID: "eval-1", ObservedAtUnixMillis: 3}, current)
+	if err != nil || promotion.Binding.Activation != capability.ActivationActive || promotion.Binding.Revision == current.Binding.Revision {
+		t.Fatalf("promotion=%+v err=%v", promotion, err)
+	}
+	current.Binding.Activation = capability.ActivationInactive
+	if _, err = BuildActivationPromotion(capability.CognitiveActivationPromotionRequest{PromotionID: "promotion-2", RequestedByPrincipalID: "owner", CapabilityID: "creator-advisory", BindingID: "binding-1", ExpectedBindingRevision: 2, EvaluationID: "eval-1", ObservedAtUnixMillis: 3}, current); err == nil {
+		t.Fatal("expected inactive binding to be rejected")
+	}
+}
+
+func TestSelectCognitiveBindingUsesObjectiveAndCost(t *testing.T) {
+	quality := int64(800)
+	critical := int64(0)
+	fast := int64(100)
+	slow := int64(900)
+	cheap := int64(1)
+	expensive := int64(10)
+	candidate := func(id string, intelligence, latency, cost int64) capability.ResolvedCognitiveBinding {
+		return capability.ResolvedCognitiveBinding{
+			Binding:     capability.CognitiveBinding{ID: capability.CapabilityBindingID(id), Revision: 1, CapabilityID: "creator-advisory", OwnerPrincipalID: "owner", ProviderInstanceID: capability.ProviderInstanceID(id), ProviderRevision: 1, ModelDescriptorID: capability.ModelDescriptorID(id), ModelRevision: 1, DataPolicy: capability.DataPolicyLocalOnly, Qualification: capability.QualificationValidated, Activation: capability.ActivationActive, Health: capability.HealthAvailable, LimitPolicyRef: "limits"},
+			Provider:    capability.ProviderInstance{ID: capability.ProviderInstanceID(id), Revision: 1, Kind: "builtin", EndpointRef: capability.EndpointBindingRef(id), Enabled: true, Qualification: capability.QualificationValidated, Health: capability.HealthAvailable, ObservedAtUnixMillis: 1, BillingMode: capability.BillingPerRequest, RequestCostMicros: &cost},
+			Model:       capability.ModelDescriptor{ID: capability.ModelDescriptorID(id), Revision: 1, ProviderInstanceID: capability.ProviderInstanceID(id), ProviderModelID: capability.ProviderModelID(id), MaxContextBytes: 10000, Modalities: []capability.ModelModality{capability.ModalityText}, Capabilities: []capability.ModelCapability{capability.CapabilityAdvisory}, Qualification: capability.QualificationValidated, Health: capability.HealthAvailable, ObservedAtUnixMillis: 1, IntelligenceScoreMillis: &intelligence},
+			Evaluation:  &capability.EvaluatedCapability{ID: capability.EvaluationID("eval-" + id), Result: capability.EvaluationSupported, QualityScoreMillis: &quality, CriticalFailureMillis: &critical},
+			Performance: &capability.PerformanceEvidence{LatencyMicros: &latency},
+		}
+	}
+	qualityCandidate := candidate("quality", slow, slow, expensive)
+	fastCandidate := candidate("fast", fast, fast, cheap)
+	selected, err := SelectCognitiveBinding(capability.CognitiveRequirement{CapabilityID: "creator-advisory", OwnerPrincipalID: "owner", DataPolicy: capability.DataPolicyLocalOnly, RequiredModalities: []capability.ModelModality{capability.ModalityText}, RequiredCapabilities: []capability.ModelCapability{capability.CapabilityAdvisory}, MaxOutputBytes: 10, Objective: capability.SelectionQuality}, []capability.ResolvedCognitiveBinding{qualityCandidate, fastCandidate})
+	if err != nil || selected.Binding.ID != "quality" {
+		t.Fatalf("quality selection=%+v err=%v", selected, err)
+	}
+	selected, err = SelectCognitiveBinding(capability.CognitiveRequirement{CapabilityID: "creator-advisory", OwnerPrincipalID: "owner", DataPolicy: capability.DataPolicyLocalOnly, RequiredModalities: []capability.ModelModality{capability.ModalityText}, RequiredCapabilities: []capability.ModelCapability{capability.CapabilityAdvisory}, MaxOutputBytes: 10, Objective: capability.SelectionEconomy, MaxCostMicros: &cheap}, []capability.ResolvedCognitiveBinding{qualityCandidate, fastCandidate})
+	if err != nil || selected.Binding.ID != "fast" {
+		t.Fatalf("economy selection=%+v err=%v", selected, err)
+	}
+}

modules/capability/domain/skill.go

@@ -42,13 +42,13 @@ func ObserveSkillOutcome(profile capability.SkillProfile, observation capability
 		}
 		next.LastValidatedUnixMillis = observation.ObservedAtUnixMillis
 		next.ConfidenceMillis = clampConfidence(next.ConfidenceMillis + 25)
-	case capability.UsageFailed, capability.UsageUnknown:
+	case capability.UsageFailed:
 		next.KnownFailureExperienceRefs = appendEvidenceRef(next.KnownFailureExperienceRefs, observation.ExperienceRef)
 		next.ObservedFailureCount++
 		next.ConfidenceMillis = clampConfidence(next.ConfidenceMillis - 150)
-	case capability.UsageSkipped:
-		next.KnownFailureExperienceRefs = appendEvidenceRef(next.KnownFailureExperienceRefs, observation.ExperienceRef)
-		next.ConfidenceMillis = clampConfidence(next.ConfidenceMillis - 25)
+	case capability.UsageUnknown, capability.UsageSkipped:
+		// UNKNOWN and SKIPPED are evidence of incomplete observation or a safe
+		// non-application, not evidence that the skill itself failed.
 	default:
 		return capability.SkillProfile{}, ErrInvalidSkillProfile
 	}

modules/capability/domain/skill_test.go

@@ -44,6 +44,20 @@ func TestValidatedSkillCanApplyFastPathWhenFreshAndConfident(t *testing.T) {
 	}
 }
 
+func TestUnknownAndSkippedOutcomesDoNotBecomeSkillFailures(t *testing.T) {
+	profile := skillProfile()
+	for _, outcome := range []capability.UsageOutcomeClass{capability.UsageUnknown, capability.UsageSkipped} {
+		next, err := ObserveSkillOutcome(profile, capability.SkillOutcomeObservation{ExperienceRef: capability.SkillEvidenceRef("experience:" + string(outcome)), Outcome: outcome, ObservedAtUnixMillis: profile.RecordedAtUnixMillis + 1})
+		if err != nil {
+			t.Fatal(err)
+		}
+		if next.ObservedFailureCount != profile.ObservedFailureCount || len(next.KnownFailureExperienceRefs) != len(profile.KnownFailureExperienceRefs) || next.ConfidenceMillis != profile.ConfidenceMillis {
+			t.Fatalf("outcome %q was incorrectly recorded as failure: %#v", outcome, next)
+		}
+		profile = next
+	}
+}
+
 func skillProfile() capability.SkillProfile {
 	return capability.SkillProfile{
 		ID:                      "skill-obvious-reminder-response-v1",

modules/capability/ports/repository.go

@@ -20,6 +20,7 @@ type Repository interface {
 	LoadCognitiveCandidates(context.Context, capability.CapabilityID, identity.PrincipalID) ([]capability.ResolvedCognitiveBinding, error)
 	LoadCognitiveCandidate(context.Context, capability.CapabilityBindingID, int64) (capability.ResolvedCognitiveBinding, error)
 	SaveCognitiveCanaryPromotion(context.Context, capability.CognitiveCanaryPromotion) error
+	SaveCognitiveActivationPromotion(context.Context, capability.CognitiveActivationPromotion) error
 	SaveCognitiveUsageObservation(context.Context, capability.CognitiveUsageObservation) error
 	SaveCognitiveDiscovery(context.Context, capability.CognitiveDiscoveryRegistration) error
 	SaveEvaluatedCapability(context.Context, capability.EvaluatedCapability) error

modules/epistemics/domain/experience.go

@@ -54,9 +54,11 @@ func NewExperienceRecord(value epistemics.ExperienceRecord) (epistemics.Experien
 }
 
 func ReflectionForExperience(value epistemics.ExperienceRecord) (epistemics.ReflectionCandidate, bool, error) {
-	if _, err := NewExperienceRecord(value); err != nil {
+	normalized, err := NewExperienceRecord(value)
+	if err != nil {
 		return epistemics.ReflectionCandidate{}, false, err
 	}
+	value = normalized
 	trigger, ok := reflectionTrigger(value)
 	if !ok {
 		return epistemics.ReflectionCandidate{}, false, nil
@@ -74,7 +76,7 @@ func ReflectionForExperience(value epistemics.ExperienceRecord) (epistemics.Refl
 		SourceUtteranceID:    value.SourceUtteranceID,
 		Summary:              reflectionSummary(trigger, value),
 		EvidenceRefs:         reflectionEvidence(value),
-		RequiresCognition:    trigger == epistemics.ReflectionContradiction || trigger == epistemics.ReflectionRepeatedDegradation,
+		RequiresCognition:    reflectionNeedsCognition(trigger),
 		RecordedAtUnixMillis: value.RecordedAtUnixMillis,
 		Revision:             1,
 	}
@@ -84,6 +86,15 @@ func ReflectionForExperience(value epistemics.ExperienceRecord) (epistemics.Refl
 	return candidate, true, nil
 }
 
+func reflectionNeedsCognition(trigger epistemics.ReflectionTriggerKind) bool {
+	switch trigger {
+	case epistemics.ReflectionUserCorrection, epistemics.ReflectionUnexpectedOutcome, epistemics.ReflectionFailure, epistemics.ReflectionLowConfidence, epistemics.ReflectionContradiction, epistemics.ReflectionRepeatedDegradation:
+		return true
+	default:
+		return false
+	}
+}
+
 func ValidateReflectionCandidate(value epistemics.ReflectionCandidate) error {
 	if value.ID == "" || value.Trigger == "" || value.State == "" || value.SourceExperienceID == "" ||
 		value.OriginalIntentID == "" || value.SourceUtteranceID == "" || strings.TrimSpace(value.Summary) == "" ||

modules/epistemics/domain/experience_test.go

@@ -50,11 +50,28 @@ func TestUserCorrectionCreatesReflectionCandidate(t *testing.T) {
 	if err != nil || !ok {
 		t.Fatalf("expected reflection candidate, ok=%v err=%v", ok, err)
 	}
-	if candidate.Trigger != epistemics.ReflectionUserCorrection || candidate.State != epistemics.ReflectionCandidateOpen || len(candidate.EvidenceRefs) == 0 {
+	if candidate.Trigger != epistemics.ReflectionUserCorrection || candidate.State != epistemics.ReflectionCandidateOpen || !candidate.RequiresCognition || len(candidate.EvidenceRefs) == 0 {
 		t.Fatalf("unexpected reflection candidate: %#v", candidate)
 	}
 }
 
+func TestReflectionNormalizesExperienceIDBeforeReferencingIt(t *testing.T) {
+	candidate, ok, err := ReflectionForExperience(epistemics.ExperienceRecord{
+		SourceKind:           epistemics.ExperienceSourceInteraction,
+		OriginalIntentID:     "intent-1",
+		SourceUtteranceID:    "utterance-3",
+		HelpMethod:           epistemics.HelpMethodClarification,
+		ExpectedOutcome:      epistemics.OutcomeSuccess,
+		ActualOutcome:        epistemics.OutcomeFailed,
+		OutcomeDetail:        "deterministic route failed",
+		ConfidenceMillis:     800,
+		RecordedAtUnixMillis: 1200,
+	})
+	if err != nil || !ok || candidate.SourceExperienceID == "" || !candidate.RequiresCognition {
+		t.Fatalf("reflection did not preserve normalized source experience: candidate=%#v ok=%v err=%v", candidate, ok, err)
+	}
+}
+
 func TestFastPathDeclineReturnsToThinkingInsteadOfGuessing(t *testing.T) {
 	experience, err := FastPathDeclineExperience("intent-1", "utterance-1", "skill:obvious-reminder-response-v1", string(epistemics.OutcomeOutOfDistribution), 1200)
 	if err != nil {

modules/interaction/domain/chat.go

@@ -194,6 +194,9 @@ func semanticScores(tokens []string, hasQuestionMark bool, explicitCorrection bo
 	if hasQuestionMark {
 		scores[interaction.SpeechActQuestion]++
 	}
+	if containsMeaningfulInterrogative(tokens) {
+		scores[interaction.SpeechActQuestion] += 2
+	}
 	if explicitCorrection {
 		scores[interaction.SpeechActCorrection] += 6
 	}
@@ -432,6 +435,9 @@ func capabilityHintsFor(primary, secondary interaction.SpeechAct, tokens []strin
 	if containsToken(tokens, "свободно") || containsToken(tokens, "гб") || containsToken(tokens, "модель") {
 		add("VERIFY_FACT")
 	}
+	if containsStemInTokens(tokens, "модел", "ии") && containsStemInTokens(tokens, "настро", "список", "доступ", "подключ") {
+		add("VERIFY_FACT")
+	}
 	values := make([]string, 0, len(seen))
 	for kind := range seen {
 		values = append(values, kind)
@@ -439,6 +445,32 @@ func capabilityHintsFor(primary, secondary interaction.SpeechAct, tokens []strin
 	return values
 }
 
+func informationRequestKind(message string, candidate interaction.SemanticCandidate) interaction.InformationRequestKind {
+	tokens := semanticTokens(message)
+	if len(tokens) == 0 {
+		return ""
+	}
+	inquiry := candidate.PrimarySpeechAct == interaction.SpeechActQuestion || candidate.PrimarySpeechAct == interaction.SpeechActRequestToInvestigate || candidate.SecondarySpeechAct == interaction.SpeechActQuestion || candidate.SecondarySpeechAct == interaction.SpeechActRequestToInvestigate
+	cognitiveSubject := containsStemInTokens(tokens, "модел", "ии", "ai", "локальн", "когнитив", "канал")
+	inventoryCue := containsStemInTokens(tokens, "список", "доступ", "подключ", "вариант") || (containsMeaningfulInterrogative(tokens) && containsStemInTokens(tokens, "настро"))
+	inventoryRequest := inquiry || containsStemInTokens(tokens, "напиш", "покаж", "перечисл")
+	if cognitiveSubject && inventoryRequest && inventoryCue {
+		return interaction.InformationRequestCognitiveModelInventory
+	}
+	capabilitySubject := containsStemInTokens(tokens, "уме", "возможност", "способн", "capabilit")
+	if inquiry && capabilitySubject {
+		return interaction.InformationRequestCapabilityInventory
+	}
+	recoveryCue := containsStemInTokens(tokens, "восстанов", "исправ", "почин", "подключ", "настро", "недоступ", "нет")
+	if cognitiveSubject && recoveryCue {
+		return interaction.InformationRequestCognitiveRecovery
+	}
+	if cognitiveSubject && inquiry {
+		return interaction.InformationRequestCognitiveChannelStatus
+	}
+	return ""
+}
+
 func boundedConfidence(primaryScore, secondaryScore int, scores map[interaction.SpeechAct]int) int64 {
 	total := 0
 	for _, score := range scores {

modules/interaction/domain/chat_test.go

@@ -103,6 +103,27 @@ func TestDeterministicCandidateTreatsModelRequestAsDirectiveNeedingCognition(t *
 	}
 }
 
+func TestInformationRequestsAreClassifiedOnceByInteraction(t *testing.T) {
+	cases := []struct {
+		message string
+		kind    interaction.InformationRequestKind
+	}{
+		{"какие модели доступны?", interaction.InformationRequestCognitiveModelInventory},
+		{"что ты умеешь?", interaction.InformationRequestCapabilityInventory},
+		{"проверь состояние локального канала", interaction.InformationRequestCognitiveChannelStatus},
+		{"нет связи с ИИ, восстанови канал", interaction.InformationRequestCognitiveRecovery},
+	}
+	for _, test := range cases {
+		result, err := InterpretUtterance(interaction.HumanUtterance{Content: test.message}, nil, nil, time.Unix(10, 0))
+		if err != nil {
+			t.Fatalf("interpret %q: %v", test.message, err)
+		}
+		if result.InformationRequestKind != test.kind {
+			t.Fatalf("message=%q kind=%q want=%q", test.message, result.InformationRequestKind, test.kind)
+		}
+	}
+}
+
 func TestDeterministicCandidateKeepsFirstPersonCompletedWorkAsAssertion(t *testing.T) {
 	candidate := BuildDeterministicCandidate("Я всё уже настроил.", "", time.Unix(10, 0).UnixMilli())
 	if candidate.PrimarySpeechAct != interaction.SpeechActAssertion {

modules/interaction/domain/semantics.go

@@ -11,14 +11,15 @@ import (
 )
 
 type SemanticResult struct {
-	Interpretation  interaction.UtteranceInterpretation
-	Candidates      []interaction.SemanticCandidate
-	Projects        []interaction.ProjectReference
-	Relations       []interaction.InteractionRelation
-	ActiveFocus     *situation.ActiveProjectFocus
-	Reply           string
-	NeedsCognition  bool
-	CapabilityHints []string
+	Interpretation         interaction.UtteranceInterpretation
+	Candidates             []interaction.SemanticCandidate
+	Projects               []interaction.ProjectReference
+	Relations              []interaction.InteractionRelation
+	ActiveFocus            *situation.ActiveProjectFocus
+	Reply                  string
+	NeedsCognition         bool
+	CapabilityHints        []string
+	InformationRequestKind interaction.InformationRequestKind
 }
 
 func InterpretUtterance(utterance interaction.HumanUtterance, projects []situation.ProjectDescriptor, previousFocus *situation.ActiveProjectFocus, now time.Time) (SemanticResult, error) {
@@ -46,9 +47,10 @@ func InterpretUtterance(utterance interaction.HumanUtterance, projects []situati
 			SelectionReason:       selectedCandidate.SelectionReason,
 			RecordedAtUnixMillis:  millis,
 		},
-		Candidates:      []interaction.SemanticCandidate{deterministicCandidate},
-		NeedsCognition:  selectedCandidate.NeedsCognition,
-		CapabilityHints: append([]string(nil), selectedCandidate.CapabilityHints...),
+		Candidates:             []interaction.SemanticCandidate{deterministicCandidate},
+		NeedsCognition:         selectedCandidate.NeedsCognition,
+		CapabilityHints:        append([]string(nil), selectedCandidate.CapabilityHints...),
+		InformationRequestKind: informationRequestKind(utterance.Content, selectedCandidate),
 	}
 	explicitFocus := explicitProjectFocus(utterance.Content, projects)
 	projectRefs, err := projectReferences(utterance, projects, explicitFocus, previousFocus, millis)