enquire-mcp: Instructions file for Claude Code

Project goal — v4 MCPB Basic candidate + audit-driven hardening line

This file is read by Claude Code sessions on this repo. It defines the current sprint goal, scope, quality bar, and anti-patterns so any session (continuation or new) shares the same North Star.

Current state (as of 2026-10-04): tracked source is v4.0.0-rc.7. The reviewed starting main is ceb20d4 (PR #622). Three PRs landed on 2026-10-03: #623 carried the one unavoidable source-tree dependency exception (GHSA-86w9-cpqp-85rv, node-forge — no patched release exists; the only dependent is the dev-only @anthropic-ai/mcpb; tracker digitalbazaar/forge#1149) and made that waiver dev-only by construction after an independent review showed it was silently covering the production graph; #621 shipped the tooling phase's test-count cascade; #622 committed the mutation-helper census reproduction. The September line added final-response recall fallback, schema-v7 identifier parts in a separate chunk_parts table, shared erasure receipts, clear-feedback, and cursor-based resources/list. Its hosted CI, CodeQL and Pages completed successfully; those historical results do not substitute for CI on a new candidate. The bounded T-Search protocol remains retained without a server-side LLM: 47 tools · 19 prompts · 2367 tests · 11 languages. Distribution remains deferred pending distribution readiness and explicit resumption; rc.7 is untagged and unpublished. The last verified package channels were @latest v3.11.6 and @rc v4.0.0-rc.3; recheck the registry when publication resumes.

Active work (2026-10-04): a full-project static and live-repository audit at ceb20d4 has opened safety and correctness follow-ups; green historical CI is not proof that the newly identified scenarios are covered. The continuation order now prioritizes write/rollback preservation and exact persistence-target authority → generation-consistent hybrid retrieval and bounded embedding inputs → resource-pagination identity/cursor/work bounds → tooling/control truth (T, then AH-7) → bounded optional acquisition (AH-8) → Russian/PDF work. Each product slice needs a causal positive control, a negative control that fails on the old behavior, independent review, exact-candidate hosted CI, and an exact-main re-sweep. T1 implementation landed (#621), but its partial-drift check still needs a regression; T4 is a diagnostic, not a gate, with measured differences still unresolved. The earlier T-first queue is superseded by this risk-driven order. AH-4, AH-5 and AH-6 implementation remains landed, not flawless. Keep one product change active. Local package installation, build, lint, tests, coverage, OIA, smoke and benchmarks remain excluded; executable validation belongs to GitHub-hosted CI. Distribution remains parked. Use a current non-cloud-synced checkout, compare notes with GitHub, and retain historical release material in CHANGELOG.md and Git history. Do not publish private coordination notes or personal workspace/account details.

• v4.0.0-rc.7 full-audit safety closure plus AH-4 staged replacement; rc.6 remains tagged but unpublished: ambiguous and late-occupant rename rollback fails closed with append-only recovery; query/eval recognize shared FTS aliases by physical identity; tag/link evidence is complete but bounded; graph claims match the equal-RRF candidate in-degree tie-break; HNSW cleanup removes same-or-older invalidated DB authorities under the publisher lease, including no-receipt failures. Configuration-changing embedding builds now validate a complete private generation before atomic promotion and preserve the prior usable generation on pre-promotion failure. 2228 → 2367 source tests.
• v4.0.0-rc.6 A6 recovery, tagged but unpublished: version surfaces and public acquisition strings name 4.0.0-rc.6. Release handoff copies the body to release-notes.md instead of a same-file mv; the annotated tag exists, but OIDC publication failed with ENEEDAUTH, so npm @rc and GitHub Releases remain at rc.3. A7 remains HOLD on unpublished typescript-sdk#2574. 2228 → 2228 source tests.
• v4.0.0-rc.5 tagged but unpublished predecessor: squash-main 5438622; annotated tag exists; GitHub Release and npm @rc were not published. 2228 → 2228 source tests.
• v4.0.0-rc.4 unpublished full-audit source predecessor: read-only verification, three consequence-separated publication jobs, exact CI-built artifact handoff, reproducible Docker, and the audited runtime/persistence closures were staged but never tagged. 1807 → 2228 source tests.
• v4.0.0-rc.3 published predecessor — shipped the post-rc.2 hardening line through the tag-push-only protected controller; exact npm/GitHub release source 3edcba4c6b1de813686601c36c1c2b487e20e382. 1807 → 1807 source tests.
• v4.0.0-rc.2 published Basic MCPB predecessor — packages the bounded 13-tool read-only profile, adds exact-byte three-OS consumer evidence, transparency sidecars, and a fail-closed twelfth release context while preserving the full edition defaults. 1807 → 1807 source tests.
• v4.0.0-rc.1 shipped SDK-v2 foundation — exact v2 packages, dual-era transports, write-safe shutdown, official-client conformance, and packed-consumer matrices; exact tag/npm gitHead 4af28086d30ab08fefce49d94107c18c14eac18f. 1795 → 1807 source tests.