drowse 6.0 parity and a slimmer release

.github/workflows/ci.yml

@@ -36,7 +36,7 @@ jobs:
       - run: pip install -e "./drowse[dev]"
       - run: pytest -q
 
-  webui-build:
+  webui:
     runs-on: ubuntu-latest
     env:
       DROWSE_STORAGE_BROWSERS: chromium
@@ -53,10 +53,9 @@ jobs:
           cache: npm
           cache-dependency-path: package-lock.json
       - name: Install the drowse submodule for Python artifact checks
-        run: pip install -e ./drowse
+        run: pip install -e ./drowse pyarrow
       - run: npm ci
-      - name: Install the pinned Playwright browsers
-        run: npx playwright install --with-deps chromium webkit firefox
+      - run: npx playwright install --with-deps chromium
         working-directory: webui
       - name: Allow the pinned Chrome sandbox to create user namespaces
         working-directory: webui
@@ -72,21 +71,16 @@ jobs:
           sudo apparmor_parser -r /etc/apparmor.d/drowse-webmcp-chrome
       - run: npm run check
         working-directory: webui
-      - name: Verify native WebMCP with pinned Chrome and Puppeteer
-        run: npm run test:webmcp:native
+      - run: npm run test:webmcp:native
         working-directory: webui
       - run: npm run check:hosted
         working-directory: webui
       - run: npm run test:hosted
         working-directory: webui
 
-  webui-browser:
+  e2e:
     runs-on: ubuntu-latest
-    timeout-minutes: 60
-    strategy:
-      fail-fast: false
-      matrix:
-        shard: [1, 2, 3, 4, 5, 6]
+    timeout-minutes: 30
     defaults:
       run:
         working-directory: webui
@@ -101,48 +95,16 @@ jobs:
           cache-dependency-path: package-lock.json
       - run: npm ci
         working-directory: .
-      - name: Install the pinned Playwright browsers
-        run: npx playwright install --with-deps chromium webkit firefox
-      - run: npm run test:e2e -- --shard=${{ matrix.shard }}/6 --workers=1
-      - name: Preserve browser failure diagnostics
+      - run: npx playwright install --with-deps chromium
+      - run: npm run test:e2e -- --workers=3
+      - name: Keep failure traces
         if: failure()
         uses: actions/upload-artifact@v7
         with:
-          name: browser-failures-${{ matrix.shard }}
+          name: e2e-failures
           path: /tmp/drowse-playwright-results
           retention-days: 3
 
-  webui:
-    runs-on: ubuntu-latest
-    needs: [webui-build, webui-browser]
-    if: always()
-    steps:
-      - name: Verify the hosted build and browser matrix succeeded
-        run: |
-          if [ "${{ needs.webui-build.result }}" != "success" ] || [ "${{ needs.webui-browser.result }}" != "success" ]; then
-            echo "webui-build=${{ needs.webui-build.result }}, webui-browser=${{ needs.webui-browser.result }}"
-            exit 1
-          fi
-
-  webkit-storage:
-    runs-on: macos-15
-    defaults:
-      run:
-        working-directory: webui
-    steps:
-      - uses: actions/checkout@v7
-        with:
-          submodules: true
-      - uses: actions/setup-node@v7
-        with:
-          node-version: "24"
-          cache: npm
-          cache-dependency-path: package-lock.json
-      - run: npm ci
-        working-directory: .
-      - run: npx playwright install chromium webkit
-      - run: node scripts/iphone-storage.test.mjs
-
   contact-worker:
     runs-on: ubuntu-latest
     defaults:
@@ -168,11 +130,7 @@ jobs:
       - run: npm run build
 
   fitting-wasm:
-    strategy:
-      fail-fast: false
-      matrix:
-        os: [ubuntu-latest, macos-15]
-    runs-on: ${{ matrix.os }}
+    runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v7
         with:
@@ -181,20 +139,6 @@ jobs:
         run: |
           rustup component add rustfmt clippy
           rustup target add wasm32-unknown-unknown
-      - name: Check formatting
-        run: cargo fmt --manifest-path browser-runtime/fitting-wasm/Cargo.toml -- --check
-      - name: Run tests
-        run: cargo test --locked --manifest-path browser-runtime/fitting-wasm/Cargo.toml
-      - name: Run Clippy
-        run: cargo clippy --locked --manifest-path browser-runtime/fitting-wasm/Cargo.toml --all-targets -- -D warnings
-      - name: Build optimized WebAssembly module
-        run: cargo build --locked --release --target wasm32-unknown-unknown --manifest-path browser-runtime/fitting-wasm/Cargo.toml
-      - name: Install the pinned wasm-bindgen packager
-        if: runner.os == 'macOS'
-        run: cargo install wasm-bindgen-cli --version 0.2.127 --locked
-      # Compare on the same host architecture that produces the committed assets;
-      # Cargo's host-dependent metadata changes Wasm function ordering on Linux.
-      - name: Verify committed browser bindings are reproducible
-        if: runner.os == 'macOS'
-        run: npm run check:fitting-wasm
-        working-directory: webui
+      - run: cargo fmt --manifest-path browser-runtime/fitting-wasm/Cargo.toml -- --check
+      - run: cargo test --locked --manifest-path browser-runtime/fitting-wasm/Cargo.toml
+      - run: cargo clippy --locked --manifest-path browser-runtime/fitting-wasm/Cargo.toml --all-targets -- -D warnings

.gitignore

@@ -18,12 +18,7 @@ webui/dist-local/
 browser-runtime/.v3-compile.*/
 browser-runtime/.local-build/
 browser-runtime/vendor/*.tgz
-!browser-runtime/vendor/drowse-web-llm-0.2.84-drowse.34.tgz
-!browser-runtime/vendor/drowse-web-llm-0.2.84-drowse.36.tgz
-!browser-runtime/vendor/drowse-web-llm-0.2.84-drowse.37.tgz
-!browser-runtime/vendor/drowse-web-llm-0.2.84-drowse.38.tgz
-!browser-runtime/vendor/drowse-web-llm-0.2.84-drowse.39.tgz
-!browser-runtime/vendor/drowse-web-llm-0.2.84-drowse.40.tgz
+!browser-runtime/vendor/drowse-web-llm-0.2.84-drowse.49.tgz
 
 # Virtual environments
 .venv/
@@ -84,8 +79,8 @@ docs/superpowers/
 !/browser-runtime/evidence/README.md
 PROVENANCE.md
 provenance.json
-# Required authored-source manifest, not a run or audit record.
-!/browser-runtime/release-inputs/core-manifolds/welcoming.detached/provenance.json
+# Required authored-source manifests (the core concepts' provenance), not run or audit records.
+!/browser-runtime/release-inputs/core-manifolds/*/provenance.json
 
 # Local research, benchmark reports, and generated verification output.
 /DOMAIN_NAME_*.md

AGENTS.md

@@ -32,11 +32,11 @@ anything that crosses the runtime seam.
     browser implementations of the seams the shared app imports.
   - `vite.config.ts` — what ad-hoc Vite servers in `scripts/` load when they pass
     no config: the dashboard's own config from the submodule.
-  - `scripts/` — unit tests, release and catalog tooling, evidence recording.
+  - `scripts/` — unit tests, release and catalog tooling.
   - `e2e/` — Playwright specs against the hosted dev and preview servers.
   - `contact-worker/` — separate Cloudflare Worker with its own package.
 - `browser-runtime/` — WebLLM/MLC forks and compiler, the Rust/WASM fitting
-  kernel, runtime and distribution locks, release inputs, evidence schemas.
+  kernel, runtime and distribution locks, release inputs.
   `browser-runtime/README.md` is the reference for artifacts and release.
 - `tests/` — Python tests for the browser-runtime tools (`pytest`, with
   `pip install -e "./drowse[dev]"`).
@@ -59,25 +59,21 @@ Site tests that read shared files exist to check how the hosted shell uses them.
 ## Parity goldens
 
 `drowse/tests/fixtures/browser/*` are the Python reference outputs the browser
-runtime replays (`rank-one-hook-program`, `structured-hook-parity`, the Rust
+runtime replays (`browser-core-pack`, `structured-hook-parity`, the Rust
 topology tests, `verify-mlc-hook.py`). drowse's own tests pin them against the
 engine; regenerate them there, then bump the pin and update the runtime here.
 Browser-only fixtures stay in `browser-runtime/fixtures/`.
 
-## Release provenance
+## Release
 
 Release builds record this repository's exact HEAD as the source revision
 (`drowse-source-url` points at `stdlogits/drowse.ai/tree/<sha>`); the gitlink at
-that commit pins the drowse source. Evidence closures may name files inside the
-submodule (`drowse/drowse/geometry/...`); the tracked-file checks resolve those in
-the submodule's own repository. A submodule bump is a change to executable
-source, so evidence recorded against the previous pin no longer qualifies.
-`./deploy.sh` builds the release from a clean, pushed HEAD, uploads `webui/dist-hosted` to the
-`drowse-web` Pages project with Wrangler and verifies the live site. It skips the runtime-lock and
-distribution gates unless given `--full`, which changes to the runtime, its locks or the pin need;
-`--dry-run` stops before the upload. The Cloudflare account is not a9's: deploying needs access
-granted by its owner. The gated process behind it is in
-`browser-runtime/README.md#cloudflare-pages-deployment`.
+that commit pins the drowse source. `./deploy.sh` builds the release from a clean HEAD pushed to
+`main` (`build:hosted:release`: the lock check, the signed catalog at the distribution lock's URL,
+the build and its output checks), uploads `webui/dist-hosted` to the `drowse-web` Pages project
+with Wrangler and verifies the live site; `--dry-run` stops before the upload. The Cloudflare
+account is not a9's: deploying needs access granted by its owner. Publishing models, packs and a
+catalog is `browser-runtime/README.md#release`.
 
 ## Commands
 

ARCHITECTURE.md

@@ -50,9 +50,11 @@ syntax, including projections, ablations, manifold positions, phase windows,
 probe gates, SAE selectors, and J-lens selectors. Python and TypeScript consume
 the same accept/reject fixture. Parsing does not imply execution support: each
 expression is reduced to an explicit hook-feature requirement set before GPU
-program compilation. The `standard-v3` library profile implements
-structured affine and curved programs, exact geometry reads, precomputed SAE
-steering/readout, and exact full-vocabulary J-lens steering/readout. The worker
+program compilation. The hook ABI v5 library profiles (`standard-v4` with unit
+sites, `standard-v4-residual` without) implement structured affine and curved
+programs, exact geometry reads, precomputed SAE steering/readout, and exact
+full-vocabulary J-lens steering/readout; `standard-v4` adds the neuron and head
+unit sites (`browser-runtime/HOOK_ABI.md`). The worker
 still validates the library feature manifest, runtime identity, model profile,
 and required instrument packs before every program is installed; unsupported
 or incompatible combinations fail before generation. Production downloads require

README.md

@@ -13,7 +13,7 @@ the browser.
 | --- | --- |
 | `drowse/` | Submodule pinned to [stdlogits/drowse](https://github.com/stdlogits/drowse): the shared dashboard source (`drowse/webui/src`), the Python reference implementation, and the parity goldens (`drowse/tests/fixtures/browser`) the browser runtime replays. |
 | `webui/` | The hosted shell (`hosted/`), site-only UI and runtime (`src/`), static assets (`public-hosted/`), build, release, and test scripts (`scripts/`), Playwright specs (`e2e/`), and the `/api/contact` Worker (`contact-worker/`). |
-| `browser-runtime/` | The WebGPU runtime: WebLLM/MLC forks and compiler, the Rust/WASM fitting kernel, runtime and distribution locks, release inputs, and evidence schemas. |
+| `browser-runtime/` | The WebGPU runtime: WebLLM/MLC forks and compiler, the Rust/WASM fitting kernel, runtime and distribution locks, and release inputs. |
 | `tests/` | Python tests for the browser-runtime build and validation tools. |
 
 The hosted Vite config swaps the dashboard's HTTP runtime for the browser one
@@ -56,9 +56,7 @@ git add drowse && git commit -m "bump drowse to <commit>"
 ```
 
 Dependabot proposes the bump weekly. To try an unmerged drowse branch, check it
-out inside `drowse/`; commit only pins that exist on drowse's `main`. A pin
-bump changes executable source, so release evidence recorded against the old
-pin has to be recorded again.
+out inside `drowse/`; commit only pins that exist on drowse's `main`.
 
 ## Browser edition status