Bound managed Jev decisions and preserve review evidence (#253)

Restrict managed requests to fixed bounded workflows, reject custom and route decisions before credentials, and retain a shared absolute deadline across HTTP 429 body and framing reads. Preserve #252 consent and local-planning behavior, bind offline evidence to the combined source checkpoint, and restore resolvable historical checksum metadata without changing its payload.

Qualification: all 30 current-head checks passed, the automated review completed with its checksum finding fixed and resolved, and focused pin/integrity regressions passed. Managed private-service availability and activation remain separate acceptance work.

Author: Coding-Dev-Tools

.claude-plugin/skill-assets.sha256

@@ -3,4 +3,4 @@ c5d0c26f28c9ee14092f9deaf24c98dd8bef49d971fef2b7a537ffb1ab9f2887  .claude-plugin
 aeee7a94671ceb306fe2d24c5acc9f2d96ad8a8e7410536566799eea6265f080  skills/engraphis-memory/SKILL.md
 055655db84af07561d002f0c69744313d8413c39f3e873f941f0fa0b1e76dc66  skills/engraphis-memory/references/CONVENTIONS.md
 9d090a03f5b3f36a34d91f66b72c3844591f6915755ac3a6c6ba5f1b16977de5  skills/engraphis-memory/references/SCOPING.md
-db1db0df676e4c05fd80b878a1bd1ffc9f2045c0b0e01c0486b69ce0a5541b73  skills/engraphis-memory/references/TOOLS.md
+4c612f734cc3f50e5566752c6956e43bd432b3c26177e16cde91e196ac9e9b5b  skills/engraphis-memory/references/TOOLS.md

.github/workflows/export-offline-evidence.yml

@@ -0,0 +1,64 @@
+name: Temporary offline evidence export
+on:
+  push:
+    branches:
+      - codex/jev-individual-access-20261004
+    paths:
+      - ".github/workflows/export-offline-evidence.yml"
+      - "engraphis/**"
+      - "eval/**"
+      - "scripts/export_offline_evidence.py"
+  pull_request:
+    types: [opened, synchronize, reopened]
+    paths:
+      - ".github/workflows/export-offline-evidence.yml"
+      - "engraphis/**"
+      - "eval/**"
+      - "scripts/export_offline_evidence.py"
+permissions:
+  contents: read
+jobs:
+  export:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7
+        with:
+          ref: ${{ github.event.pull_request.head.sha }}
+      - uses: actions/setup-python@5fda3b95a4ea91299a34e894583c3862153e4b97 # v7
+        with:
+          python-version: "3.11"
+      - run: python -m pip install numpy cairosvg
+      - run: python -m scripts.export_offline_evidence --output docs/benchmark-evidence/offline-fixtures-v152.json
+      - run: python scripts/render_benchmark_report.py --report docs/benchmark-evidence/offline-fixtures-v152.json --output /tmp/context-efficiency.svg --png-output /tmp/context-efficiency.png
+      - run: python -m scripts.render_benchmark_examples --report docs/benchmark-evidence/offline-fixtures-v152.json --output /tmp/evidence-backed-agent-examples.svg --png-output /tmp/evidence-backed-agent-examples.png
+      - name: Show generated public artifacts
+        run: |
+          echo "BEGIN_OFFLINE_FIXTURES_JSON"
+          cat docs/benchmark-evidence/offline-fixtures-v152.json
+          echo "END_OFFLINE_FIXTURES_JSON"
+          echo "BEGIN_OFFLINE_FIXTURES_SHA"
+          cat docs/benchmark-evidence/offline-fixtures-v152.json.sha256
+          echo "END_OFFLINE_FIXTURES_SHA"
+          echo "BEGIN_CONTEXT_EFFICIENCY_SVG"
+          cat /tmp/context-efficiency.svg
+          echo "END_CONTEXT_EFFICIENCY_SVG"
+          echo "BEGIN_EVIDENCE_BACKED_EXAMPLES_SVG"
+          cat /tmp/evidence-backed-agent-examples.svg
+          echo "END_EVIDENCE_BACKED_EXAMPLES_SVG"
+          echo "BEGIN_CONTEXT_EFFICIENCY_PNG_BASE64"
+          base64 -w 76 /tmp/context-efficiency.png
+          echo "END_CONTEXT_EFFICIENCY_PNG_BASE64"
+          echo "BEGIN_EVIDENCE_BACKED_EXAMPLES_PNG_BASE64"
+          base64 -w 76 /tmp/evidence-backed-agent-examples.png
+          echo "END_EVIDENCE_BACKED_EXAMPLES_PNG_BASE64"
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7
+        with:
+          name: offline-fixtures-v152
+          path: |
+            docs/benchmark-evidence/offline-fixtures-v152.json
+            docs/benchmark-evidence/offline-fixtures-v152.json.sha256
+            /tmp/context-efficiency.svg
+            /tmp/evidence-backed-agent-examples.svg
+            /tmp/context-efficiency.png
+            /tmp/evidence-backed-agent-examples.png
+          retention-days: 1

BENCHMARKS.md

@@ -94,14 +94,14 @@ interpretation and do not count as additional benchmark-quality gains.
 ### Public numeric evidence registry
 
 Every exact public aggregate retained below comes from the checked-in, public-safe
-[`offline-fixtures-pr252-four-gap-guards-20261007.json`](docs/benchmark-evidence/offline-fixtures-pr252-four-gap-guards-20261007.json) artifact. Its
+[`offline-fixtures-pr253-four-gap-stack-20261008.json`](docs/benchmark-evidence/offline-fixtures-pr253-four-gap-stack-20261008.json) artifact. Its
 SHA-256 is
-`c53b82e4a847bf525c695c25a1813e8a591e86e39ca9e652e385e898ecd04010`, also recorded in the
+`e423e99ba683c1928984903aef715ad97440c9717cecb3bd3f6fe4f6746ea7d0`, also recorded in the
 adjacent `.sha256` file. The artifact contains no raw questions, answers, prompts, customer data,
 or per-record content fingerprints.
 
 The fixture-suite digest is
-`e137eacdd70bbea7539dec6ed5cd4b59c980352a8e641094b449e474522aa109`. The artifact defines
+`e1b7fcea31cb7bf8f8ec85b56e097a0cbfc7d496aef4aef51de73b849b2d17c6`. The artifact defines
 the digest algorithm and records the SHA-256 of every suite and dataset file. Each evidence ID
 also binds its exact command through `sha256(UTF-8 exact command)`:
 
@@ -126,13 +126,13 @@ grounded checks in separate panels; provider billing and MCP transport are not m
 the SVG and matching PNG with:
 
 ```bash
-python scripts/render_benchmark_report.py --report docs/benchmark-evidence/offline-fixtures-pr252-four-gap-guards-20261007.json --output docs/images/context-efficiency.svg --png-output docs/images/context-efficiency.png
+python scripts/render_benchmark_report.py --report docs/benchmark-evidence/offline-fixtures-pr253-four-gap-stack-20261008.json --output docs/images/context-efficiency.svg --png-output docs/images/context-efficiency.png
 ```
 
 The companion examples are also generated from that artifact with:
 
 ```bash
-python -m scripts.render_benchmark_examples --report docs/benchmark-evidence/offline-fixtures-pr252-four-gap-guards-20261007.json --output docs/images/evidence-backed-agent-examples.svg --png-output docs/images/evidence-backed-agent-examples.png
+python -m scripts.render_benchmark_examples --report docs/benchmark-evidence/offline-fixtures-pr253-four-gap-stack-20261008.json --output docs/images/evidence-backed-agent-examples.svg --png-output docs/images/evidence-backed-agent-examples.png
 ```
 The historical-to-executable mapping is in
 [`docs/BENCHMARK_CHANGE_COVERAGE.md`](docs/BENCHMARK_CHANGE_COVERAGE.md).

README.md

@@ -1,14 +1,14 @@
 # Engraphis
 
 [![PyPI version](https://img.shields.io/pypi/v/engraphis.svg)](https://pypi.org/project/engraphis/)
-[![License](https://img.shields.io/badge/license-Apache--2.0-green.svg)](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/LICENSE)
+[![License](https://img.shields.io/badge/license-Apache--2.0-green.svg)](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/LICENSE)
 
 **Persistent, local-first memory for AI agents.** Engraphis stores scoped project knowledge, retrieves relevant evidence across vector, lexical, graph, and code search, and returns bounded context with sources an agent can inspect.
 
 The local engine uses SQLite and works offline. It keeps changes over time instead of silently replacing facts, and grounded recall cites retrieved memories or abstains when evidence is weak.
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/Coding-Dev-Tools/engraphis/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/images/knowledge-graph.png" alt="Engraphis local knowledge graph showing relationships between remembered entities" width="100%">
+  <img src="https://raw.githubusercontent.com/Coding-Dev-Tools/engraphis/522def372c45a26d46bc7a05829964ae0240f3a9/docs/images/knowledge-graph.png" alt="Engraphis local knowledge graph showing relationships between remembered entities" width="100%">
   <br>
   <sup>Explore memories and their relationships in the local dashboard.</sup>
 </p>
@@ -35,7 +35,7 @@ hit = memory.recall("Why did we change auth?", workspace="acme", repo="api")
 print(hit["context"])
 ```
 
-Connect a coding agent over MCP with the [agent setup guide](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/AGENT_CONNECT.md).
+Connect a coding agent over MCP with the [agent setup guide](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/AGENT_CONNECT.md).
 
 ## What it provides
 
@@ -49,7 +49,7 @@ Connect a coding agent over MCP with the [agent setup guide](https://github.com/
 The current registered artifact contains three deterministic offline fixture runs. It separates context size, retrieval quality, and grounded decision checks; these small fixtures do not establish general task performance.
 
 <p align="center">
-  <img src="https://raw.githubusercontent.com/Coding-Dev-Tools/engraphis/f964429b35877986bd0626b690469f59f41061de/docs/images/context-efficiency.svg" alt="Three registered offline fixtures: structure-aware chunking reduced mean retrieved context from 740.3 to 214.3 tokens per question (71.1%, 18 questions); the serialized JSON-shape proxy fell from 24,590 to 11,138 tokens across 26 payload samples and 260 recalls. Candidate and packed retrieval quality (Recall@5, Hit@5, and answer-token recall) are shown separately (each 1.000). Grounded checks show 5/5 answerable queries grounded and 6/6 abstention queries rejected, including a 1/1 quarantined-evidence probe; 11/11 decisions were correct. MCP transport and provider billing were not measured. Artifact SHA-256 prefix c53b82e4a847; see the benchmark guide for the full checksum." width="100%">
+  <img src="https://raw.githubusercontent.com/Coding-Dev-Tools/engraphis/522def372c45a26d46bc7a05829964ae0240f3a9/docs/images/context-efficiency.svg" alt="Three registered offline fixtures: structure-aware chunking reduced mean retrieved context from 740.3 to 214.3 tokens per question (71.1%, 18 questions); the serialized JSON-shape proxy fell from 24,590 to 11,138 tokens across 26 payload samples and 260 recalls. Candidate and packed retrieval quality (Recall@5, Hit@5, and answer-token recall) are shown separately (each 1.000). Grounded checks show 5/5 answerable queries grounded and 6/6 abstention queries rejected, including a 1/1 quarantined-evidence probe; 11/11 decisions were correct. MCP transport and provider billing were not measured. Artifact SHA-256 prefix e423e99ba683; see the benchmark guide for the full checksum." width="100%">
   <br>
   <sup>Three offline fixtures separate context reduction, candidate and packed retrieval quality, and grounded behavior. The chart shows the artifact checksum prefix; see the benchmark guide for the full checksum and reproduction steps.</sup>
 </p>
@@ -60,7 +60,7 @@ The current registered artifact contains three deterministic offline fixture run
 | Recall payload proxy | JSON-shape proxy: 24,590 → 11,138 tokens (54.71% lower, 26 samples; 260 timed recalls) | Candidate and packed Recall@5, Hit@5, and answer-token recall are each 1.000 |
 | Grounded decisions | 5/5 answerable queries grounded; 6/6 abstention queries rejected, including 1/1 quarantined-evidence check | 11/11 decisions correct |
 
-The payload figure is a serialized JSON-shape estimate, not an MCP transport measurement or provider billing total. See the [Benchmark methodology](https://github.com/Coding-Dev-Tools/engraphis/blob/f964429b35877986bd0626b690469f59f41061de/BENCHMARKS.md) for artifact identity, counting methods, reproduction commands, external-evaluation boundaries, and limitations.
+The payload figure is a serialized JSON-shape estimate, not an MCP transport measurement or provider billing total. See the [Benchmark methodology](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/BENCHMARKS.md) for artifact identity, counting methods, reproduction commands, external-evaluation boundaries, and limitations.
 
 ## Optional Jev assistance
 
@@ -87,22 +87,22 @@ The existing production fleet guard remains 100 questions per day across the ser
 That limit conflicts with these per-person rolling caps and may pause or reject requests
 earlier. Resolve capacity and the fleet guard before launch. The supported decisions are
 advisory; current synthetic fixtures do not demonstrate Jev accuracy or cost savings.
-See [hosted plans and Jev details](https://github.com/Coding-Dev-Tools/engraphis/blob/94b8d244bfef890493ac7858faf03203f64547f1/docs/HOSTED_PLANS.md#included-system-1-decision-engine-jev).
+See [hosted plans and Jev details](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/HOSTED_PLANS.md#included-system-1-decision-engine-jev).
 
 ## Guides
 
-- [Configuration reference](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/CONFIGURATION.md)
-- [MCP tool reference](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/MCP_TOOLS.md)
-- [Agent and LLM provider setup](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/LLM_PROVIDERS.md)
-- [Architecture and query planning](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/ARCHITECTURE_V3.md#query-planning)
-- [Docker deployment](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/DOCKER.md)
-- [Document import](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/DOCUMENT_IMPORT.md)
-- [Cloud Sync](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/SYNC.md)
-- [Pi extension](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/integrations/pi/README.md)
-- [Memory write review](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/WRITE_REVIEW.md)
-- [Security policy](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/SECURITY.md)
-- [Hosted plans and licensing](https://github.com/Coding-Dev-Tools/engraphis/blob/e440bf6ba0ff600648fdac6eb53dd28d6d80df24/docs/HOSTED_PLANS.md)
+- [Configuration reference](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/CONFIGURATION.md)
+- [MCP tool reference](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/MCP_TOOLS.md)
+- [Agent and LLM provider setup](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/LLM_PROVIDERS.md)
+- [Architecture and query planning](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/ARCHITECTURE_V3.md#query-planning)
+- [Docker deployment](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/DOCKER.md)
+- [Document import](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/DOCUMENT_IMPORT.md)
+- [Cloud Sync](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/SYNC.md)
+- [Pi extension](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/integrations/pi/README.md)
+- [Memory write review](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/WRITE_REVIEW.md)
+- [Security policy](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/SECURITY.md)
+- [Hosted plans and licensing](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/HOSTED_PLANS.md)
 
 ## License
 
-Engraphis is licensed under Apache-2.0. The license does not grant trademark rights. See [LICENSE](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/LICENSE), [NOTICE](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/NOTICE), and the [licensing guide](https://github.com/Coding-Dev-Tools/engraphis/blob/fee9d0c150c250632d8e0c0ee86c1325c9e1ee78/docs/LICENSING.md). The hosted control plane and managed services are private services.
+Engraphis is licensed under Apache-2.0. The license does not grant trademark rights. See [LICENSE](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/LICENSE), [NOTICE](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/NOTICE), and the [licensing guide](https://github.com/Coding-Dev-Tools/engraphis/blob/522def372c45a26d46bc7a05829964ae0240f3a9/docs/LICENSING.md). The hosted control plane and managed services are private services.

docs/CONFIGURATION.md

@@ -84,6 +84,20 @@ service-enforced, not client configuration overrides. Selecting a backend does n
 enable the service or satisfy release, provider-terms, capacity, or quality gates. See
 [hosted plans](HOSTED_PLANS.md#included-system-1-decision-engine-jev).
 
+The four managed workflows require a command, a pair of facts, query/evidence, or
+goal/output context and their fixed question schemas. Arbitrary `custom` and
+`query_planning` payloads are rejected before credential refresh or network requests.
+Experimental recall route planning requires explicit BYOK; managed failure never
+silently selects a personal key. Remote consent and `public` or `internal`
+classification remain mandatory, and `offline_mode=true` prevents remote requests.
+Viewers can use direct Classic advisory decisions; generic Smart stateful execution
+still requires admin and the private Team tool catalog is unchanged.
+
+Managed transport callers can supply `request_key` for explicit retry deduplication. A
+duplicate admitted key returns 409 without an additional provider call or usage
+increment; there is no stored answer replay or automatic retry. Admitted errors remain
+counted. This parameter is not an environment setting or an MCP/dashboard field.
+
 The optional cross-encoder reranker is model- and hardware-dependent. Treat its quality and
 latency as deployment-specific until a versioned model identity, exact configuration, and
 reproducible evaluation artifact are available for the comparison being reported.