The ledger

Wave S — _audit.jsonl append-only change log. Every migration / folder mutation records one JSON line with {ts, action, ...} so operators can replay layout history without git scraping.

Wave S — canonical per-chat folder layout helpers. Every channel (TG/Discord/Matrix/A2A/browser/voice) writes inbox/outbox/voice/ browser/traces/dossiers/skills under ~/.openalice/data/{agent}/chat/{scope}/ via this module.

Wave S — folder layout migration runner. Snapshots the data dir (cp -al hardlink), creates canonical dirs for every detected chat scope, stamps schema.json: {version: s1}, audits each step. Idempotent + dry-run-able via OPENALICE_CHAT_FOLDERS_MIGRATION_DRY_RUN.

Wave U — `WaveSChatFoldersStep` adapter that exposes the Wave S migration as a `memory_migration::MigrationStep` so the generic framework can drive it alongside future wave migrations.

Wave S — schema.json version stamp at ~/.openalice/data/{agent}/chat/{scope}/schema.json. Migration runner reads this to decide whether to re-run; absent => pre-S layout.

Wave V — traces_dir() + tool_calls_jsonl() path helpers. Append-only tool-call memory log lives at ~/.openalice/data/{agent}/chat/{scope}/traces/tool-calls.jsonl. Per-chat scope, never crossed for privacy.

7-dimension budget tracker — tokens, cost, iterations, wall time, tool calls, bytes, requests. Thresholds + warn/block hooks plumbed into the event bus.

OPT-IN goal-preserving compaction (OPENALICE_GOAL_PRESERVE, 2026-07-02): when the context budget compacts, the ORIGINAL task (first user message) is re-pinned right after the system message so the goal survives. Closes the naive recency-drop gap where compaction silently discards the original request — the 4-team convergent `/goal` pattern. Default off → recency-only compaction byte-identical.

OPT-IN agent-authored smart-compaction (OPENALICE_SMART_COMPACT, 2026-07-02): sets the CompactionEngine's summarize_dropped mode so the messages about to be dropped are folded into an LLM summary (authored by the agents-loop via the Summarizer seam) instead of silently discarded. Default off → the engine keeps the plain recency notice (byte-identical). Fail-open: no summarizer / summary error → plain notice.

Embedding service for Memory Engine v2 — configurable provider (OpenAlice ML gateway BGE-M3 1024-dim or off); keyed by text hash to reuse rerank cache entries.

f32 HNSW index — O(log(n)·d) approximate nearest neighbour search backing memory preload, tool index, and the rerank cache.

Kernel — composes budget, config, events, identity, merkle audit, gate pipeline, and policy engine into the OpenAlice runtime core.

6-anchor gate pipeline with 2 plugin slots — pre-context, context, pre-plan, plan, pre-act, act phases with ordered gate execution and shared gate state.

Default-deny policy engine — pattern-based path + tool rules keyed on agent id with explicit effect (allow/deny).

Caps-migration Phase 2 — the unified-config ConfigHandle is installed into core at boot (it used to be dropped), and the zero-arg flag helpers (goal_preserve/smart_compact/stuck_fuzzy) read the live snapshot when installed: oa.yaml edits hot-reload these caps without a restart. Uninstalled processes (alice-cli, unit tests) keep the legacy direct-env reads — byte-identical.

Caps-migration Phase 3 (adoption-ladder rung 3) — the 7 original Phase 9a caps now read this SAME live-config bridge first, falling back to their legacy direct-env read when uninstalled: openalice_agents_image_gen::feature_flag_enabled (caps.image_gen.enabled), openalice_router (private codex::image_gen_feature_flag_enabled duplicate, kept in sync — caps.image_gen.enabled), openalice_agents_soul::goal_engine::autonomy_enabled (caps.goal_autonomy.enabled), openalice_agents_memory::skills::curator::curator_enabled (caps.skill_curator.enabled), openalice_alice_cli::agent::kanban::is_kanban_enabled (caps.agent_kanban.enabled), openalice_agents::agentic_resume::is_enabled (caps.durable_exec.enabled), openalice_coalesce (private config::strict_dedup, surfaced via pub is_strict_dedup_enabled — caps.coalesce.strict_dedup), openalice_agents_memory::memory_preload (private read_char_whitelist_floor — caps.memory.char_whitelist_size, u32→usize cast). Three scalar knobs were documented OUT of scope here and closed 2026-07-09 (tail-close wave): openalice_agents_memory::skills::curator::cadence_hours (caps.skill_curator.hours, u32→u64 cast, `< 1` floor preserved), openalice_agents::agentic_resume::ResumeBudget::new (caps.durable_exec.max_resumes, u32→u8 clamp), and coalesce's private config::strict_dedup window_ms (caps.coalesce.strict_dedup_window_ms, `0` ⇒ `None` ⇒ platform default, same as the pre-existing enabled/window_ms split).

Combined agent/task/calendar scheduler — tracks plans, plan progress, calendar events; the backbone for mission + hand orchestration.

Session management — TTL, absolute max lifetime, per-user limits, MFA-aware expiry for authenticated users.

Phase 8Y-T0 — single `validate_skill_name` shared by every skill-touching crate (agents-tools, agents-memory, modules-intelligence, alice-cli). Returns identical human-friendly errors with kebab-case suggestions so the LLM self-corrects the same way no matter which code path dispatched the tool.

TurnFeedback state machine + FeedbackRenderer trait — one seen→answered/failed ack registry connectors render (e.g. 👀 on inbound, cleared exactly once at the turn's terminal state). Pure + platform-less; per-connector renderers live in modules-connectors. Replaces ~7 scattered per-path bookkeeping sites that let mid-turn steers leak a stale 👀 forever.

Wave U — `MigrationCtx::dry_run` flag flips the framework into a planner that returns plans without touching disk; per-step env flags (e.g. OPENALICE_CHAT_FOLDERS_MIGRATION_DRY_RUN) still honoured for back-compat.

Wave U — generic memory migration framework. Versioned, idempotent, dry-run-able, rollback-able driver. Steps implement MigrationStep (detect/plan/apply/verify/rollback); the framework handles snapshot (cp -al), global audit (_migrations.jsonl), and re-run safety.

Wave U — every apply() appends one JSONL row to ~/.openalice/data/_migrations.jsonl (ts, step_id, namespace, from→to, items, errors, dry_run).

Wave U — `MigrationFramework::rollback_to(namespace, version)` walks steps in reverse and invokes `MigrationStep::rollback`. Default impl restores the cp -al snapshot dir wholesale.

Wave U — `MigrationStep` trait every memory-namespace migration implements (id/from_version/to_version/namespace + lifecycle hooks).

Wave R3 — sliding-window (N=3) per-scope tracker of the most recent speaker turns. In-memory only (no persistence). Backs the `<speaker>` prompt-tag renderer + the Wave R2 steering classifier + the Wave R4 multi-speaker turn-bundle builder.

Wave R3 — Prometheus counters `oa_speaker_resolved_total{source=dossier|platform_fallback|unknown}` and `oa_speaker_continuity_total{result=same|switch}`. Cardinality-bounded: three + two label values total.

Phase 8storage-B file-first storage compat-shim. Dormant in B-1 (no caller wires it yet) — mirrors `agents-refs` + `core::dossier` + `connector_history/` + `memory/relations/` reads against the new `identities/` + `sessions/` + `identities/_graph/` layout. Phase B-2 gates ~18 audited read-sites on `OPENALICE_STORAGE_LAYOUT=v2`.

Phase 8storage-B2-1 read-site wire-up. Routes memory_relations::{find_relations, find_connected_entities, count_relations, all_relations} and /v1/knowledge/graph edge enumeration through openalice_storage_v2::edges when OPENALICE_STORAGE_LAYOUT=v2. Status quo preserved when flag unset / != "v2".

Phase 8storage-B2-2 read-site wire-up. Routes RefsStore::{get, list_all, list_kind} + resolve_ref through openalice_storage_v2::identities when OPENALICE_STORAGE_LAYOUT=v2. Status quo preserved when flag unset / != "v2".