# Memory Compiler Implementation Tracker **Last reconciled:** 2026-07-13 **Authority:** This file is the granular program tracker. The work-order documents define the contract and acceptance criteria; neither test output nor a model claim may check an item without the named evidence. ## WO-01 — Exact outbound request - [x] Capture a JSON-wire-equivalent outbound request snapshot before shadow analysis. - [x] Fingerprint the complete request payload, not selected message fields. - [x] Account for messages, tools, memory prefix, output reserve, safety reserve, `numCtx`/`num_ctx`, and `maxTokens`/`max_tokens`. - [x] Persist/reuse a precompiled budget only after request-byte/hash match. - [x] Keep normal and brute request envelope fields in parity. - [x] Regression-test late prefix/schema/alias changes and snapshot isolation. - [ ] Extract all request construction into one side-effect-free intermediate model. - [ ] Add a backend tokenizer adapter and estimator provenance to accounting. - [ ] Include backend prompt-template normalization and think-mode reserve in the final compiler budget. - [x] Route active automatic compaction through the final request budget and shared pre-backend boundary; the legacy `/compact` path is available only under the explicit `OMNIUS_MEMORY_COMPILER_MODE=shadow` rollback mode. - [ ] Remove legacy post-assembly accounting after a parity replay proves it redundant. ## WO-02 — Typed memory fabric - [x] Define authority, task, claim, artifact, extract, action, tool result, mutation, verifier, outcome, semantic, procedural, and orientation records. - [x] Persist epoch, authority/trust class, provenance, revision/range, fidelity, content hash, validity interval, and metadata. - [x] Create append-only SQLite records, transactions, dependencies, and working-set snapshots. - [x] Add record and transaction idempotency/conflict protection. - [x] Reject non-user/non-system `trusted_instruction` records. - [x] Reject unsupported semantic facts. - [x] Store raw user intent and substantive progress independently of read and diagnostic noise. - [x] Model source supersession without deleting historical records. - [ ] Add a dual-read adapter for every older memory/event store. - [ ] Migrate historical evidence/run-event ingestion through the adapter. - [ ] Add a deterministic replay of a migrated real event stream. ## WO-03 — Dependency graph and working set - [x] Record action → tool call → result transactions from runner tool calls. - [x] Attach canonical file artifacts once; store a compact tool-result receipt. - [x] Attach mutations and shell verifier observations to the transaction. - [x] Close materialization over required graph dependencies. - [x] Close materialization over entire intersecting transactions. - [x] Preserve a transaction even when its presentation cap is lower than its atomic record count. - [x] Persist active-root snapshots and graph explanations in request audits. - [ ] Link todo/workboard state and every legacy evidence event into the graph. - [ ] Rank open requirement/current action/unresolved claim/verifier state, rather than only record kind and recency. - [x] Render a production model-visible request projection only from a validated v2 plan; the durable graph and transcript remain untouched. ## WO-04 — Inference memory compiler - [x] Send isolated compiler candidates as explicitly untrusted data. - [x] Validate full candidate classification, IDs, authority boundary, confidence, request fingerprint, graph cut, and transaction integrity. - [x] Cache unchanged decisions by exact final-request fingerprint. - [x] Make malformed/overlarge/incomplete analysis a `hold`, never deletion. - [x] Run the compiler in non-blocking shadow mode and audit its decision. - [x] Test prompt-like tool data, stale fingerprints, duplicate classifications, active evidence, partial transaction, and 40%-headroom holds. - [x] Add an exact-request compatibility projection from every mutable model-visible string body to a typed, provenance-bound ledger candidate. - [x] Bound and source-link model-visible orientation separately from audit payloads; audit receipts contain locators and justifications, never bodies. - [ ] Add an independent second opinion for ambiguous/high-risk shadow deltas. - [x] Apply accepted v2 plans atomically only after inference, graph/artifact, and exact post-materialization 45–52% budget validation pass. - [x] Disable every legacy heuristic/message-summary path while active; any failed, missing, or invalid inference plan holds the complete request. ## WO-05 — Artifact fidelity and materialization - [x] Keep normal/explicit full reads canonical and hash/range-addressable. - [x] Admit full reads using actual headroom rather than a fixed percentage. - [x] Preserve an admitted full body for its turn instead of generic output folding. - [x] Retain a completed extract as derived evidence while canonical full source remains recoverable. - [x] Keep partial extracts from hiding full source or satisfying coverage. - [x] Honor declared requirement search terms and credit an overlapping exact source anchor to every requirement it independently proves. - [x] Treat output/line/capture-capped grep output as success with partial provenance and deterministic narrowing. - [x] Supersede changed canonical source revisions and permit a justified reread. - [x] Enforce a closed A100-class hardware preflight in the live 20-file harness. - [x] Capture a successful 20-file `robit/ornith:35b` A100 report: 20/20 complete two-requirement contracts, no unresolved coverage, 20 isolated requests, and a 6,080-character largest branch prompt. - [x] Persist an idempotent materialization record for every rendered full source body, naming the active action and canonical artifact revision. - [x] Record extractor kind/model/confidence/search-round provenance as typed metadata on every derived artifact record. - [x] Persist canonical model-visible tool artifacts in an immutable SHA-256 store and expose a range-safe `artifact_read` resolver for retained refs. ## WO-06 — Temporal hybrid retrieval - [x] Enforce epoch, typed task/action/claim roots, authority boundaries, and token/character limits. - [x] Implement exact path/revision/range filtering before lexical scoring. - [x] Add temporal `asOf` filtering and artifact supersession handling. - [x] Traverse active-work dependencies bidirectionally with six-hop/128-node bounds and truncation disclosure. - [x] Use deterministic ranking and one-materialized-body-per-source diversity. - [x] Surface active refutation and explicit missing/over-budget abstention. - [ ] Integrate a versioned vector/semantic index rather than host callback scoring only. - [ ] Join retrieval across legacy memory stores through the WO-02 adapter. - [ ] Measure next-action evidence recall/precision against redacted traces. ## WO-07 — Evaluation - [x] Create a versioned deterministic graph-memory replay report with stable scenario/reason/report fingerprints. - [x] Exercise active source, transaction, supersession, partial extract, `/nothink` tool data, stale fingerprint, duplicate, confidence, and headroom adversarial cases. - [x] Emit candidate/retention/archive/request/graph/transaction metrics. - [x] Add a closed-whitelist real-trace importer that emits text-free, salted-pseudonym behavioral fixtures and rejects raw/unknown fields. - [ ] Define a redacted real-trace ingestion schema and source-body redactor. - [ ] Import representative MyActuator and Omnius traces with consented, non-source-sensitive fixtures. - [ ] Run current/no-compaction/summary/selector/compiler baselines over the same trace corpus. - [ ] Measure stale use, duplicate reads, false-not-found, repeated action signatures, completion, latency, and cost. - [ ] Add a natural mid-action no-mutation steering replay with first-affected action assertion. - [x] Complete the live large-model 20-file run on approved A100 hardware. - [ ] Run approved small and medium model tiers with identical contracts. - [ ] Publish objective promotion thresholds from the comparison report. ## WO-08 — Rollout and removal - [x] Make strict v2 request compilation the default. `shadow` is an explicit rollback/diagnostic mode; active inference failure holds instead of reviving a heuristic deletion path. - [x] Emit exact request budget and shadow decision into request-dump audit. - [x] Emit body-free applied/hold/rejected plan receipts with classifications, artifact locators, rationale, and pre/post request fingerprints into dumps and expandable TUI compaction audit boxes. - [ ] Define explicit flags for ledger dual-write, graph materialization, shadow, active compiler, and second opinion. - [ ] Render the full lifecycle in TUI/session telemetry: budget → working set → delta → hold/apply → first affected action. - [ ] Define authority/fidelity/tool-freedom promotion thresholds. - [ ] Canary by session and model tier with one-click rollback to untouched history. - [ ] Exercise and document rollback. - [ ] Delete synthetic recap, silent rehydration, stale-controller, and heuristic fallback paths only after canary acceptance. - [ ] Remove obsolete flags/tests/docs in the same release. ## Promotion status - [x] Foundation code typechecks and focused regression suite passes. - [ ] Deterministic replay meets published comparison thresholds. - [x] Approved large-model live harness report is captured. - [ ] Approved small/medium/large comparative runs are captured. - [ ] Shadow telemetry is reviewed on real redacted traces. - [ ] Canary and rollback drill are accepted. - [ ] Legacy deletion is complete. Until every promotion item is checked, this program is **not deployable** and must not be represented as replacing the legacy compaction path.