Merge branch 'ChesterRa:main' into main

Author: howold-lab

.gitignore

@@ -26,6 +26,7 @@ uv.lock
 /web/.vite/
 /web/dist/
 /src/cccc/ports/web/dist/
+/space
 
 # Local/editor/platform noise
 .DS_Store

docs/guide/best-practices.md

@@ -79,10 +79,10 @@ You can show different content to different roles using conditional markers:
 
 Agents access help content through MCP tools:
 
-1. **`cccc_bootstrap`** - Returns help as part of session initialization
+1. **`cccc_bootstrap`** - Returns the lean recovery packet (`session`, `recovery`, `inbox_preview`, `memory_recall_gate`, `next_calls`)
 2. **`cccc_help`** - Returns help content on demand
 
-The help is returned as:
+The on-demand help payload is returned as:
 ```json
 {
   "markdown": "<filtered content based on role/actor>",

docs/guide/capability-allowlist.md

@@ -31,8 +31,10 @@ Runtime mutation still happens only through explicit enable flows (`capability_e
 Release baseline policy:
 
 1. third-party sources are discoverable by default (`mounted`)
-2. runtime flow has no approval gate; enable path is one-step when `enable_supported=true`
-3. `blocked` is explicit deny state (policy/source/runtime blocklist), reserved for clear deny signals
+2. external capability sources default to usable path (`mounted`) in normal mode
+3. conservative users can switch external capability sources back to `indexed` through `external_capability_safety_mode`
+4. runtime flow has no approval gate; enable path is one-step when `enable_supported=true`
+5. `blocked` is explicit deny state (policy/source/runtime blocklist), reserved for clear deny signals
 
 Runtime blocklist model:
 
@@ -76,12 +78,22 @@ Web routes map to daemon ops:
 3. `PUT /api/v1/capabilities/allowlist`
 4. `DELETE /api/v1/capabilities/allowlist`
 
-## 6. Recommended Workflow
+## 6. External Capability Safety Mode
+
+`capability_allowlist_get` / `validate` / `update` expose `external_capability_safety_mode` as a thin semantic view over the default posture for external capability sources:
+
+1. `normal` => external capability sources default to `mounted`
+2. `conservative` => external capability sources default to `indexed`
+
+Built-in packs are unaffected. Per-source and per-capability overrides can still be stricter.
+
+## 7. Recommended Workflow
 
 1. call `capability_allowlist_get`
-2. prepare patch (or full replacement)
-3. call `capability_allowlist_validate`
-4. apply with `capability_allowlist_update(expected_revision=...)`
-5. if mismatch, refetch and retry
+2. inspect `external_capability_safety_mode` and current revision
+3. prepare patch (or full replacement)
+4. call `capability_allowlist_validate`
+5. apply with `capability_allowlist_update(expected_revision=...)`
+6. if mismatch, refetch and retry
 
 Use `capability_allowlist_reset` to drop overlay and return to packaged default.

docs/release/rc19_file_matrix.csv

@@ -170,7 +170,7 @@ tests/test_group_template_dirty_settings_tolerance.py,B,tests,standard-file,fixe
 tests/test_im_subscribers_tolerance.py,B,tests,standard-file,fixed,qa,guards IM subscriber loader tolerance for dirty bool/int fields
 tests/test_group_lifecycle_invariants.py,B,tests,standard-file,fixed,qa,guards group start/stop running+enabled invariants
 tests/test_group_automation_baseline.py,B,tests,standard-file,fixed,qa,guards default standup baseline seeding and intentional clear semantics
-tests/test_mcp_bootstrap_ledger_tail.py,B,tests,standard-file,reviewed,qa,mcp bootstrap ledger-tail visibility rules reviewed
+tests/test_mcp_bootstrap_inbox_preview.py,B,tests,standard-file,reviewed,qa,mcp bootstrap inbox-preview trimming and stable shape reviewed
 tests/test_daemon_ipc_docs_parity.py,B,tests,standard-file,fixed,qa,guards daemon IPC op coverage in standards doc
 tests/test_docs_blob_path_consistency.py,B,tests,standard-file,fixed,qa,guards architecture blob-path terminology consistency
 tests/test_docs_mcp_architecture_surface.py,B,tests,standard-file,fixed,qa,guards architecture MCP surface narrative against legacy drift