feat: BoJ gateway routing for Automation Router, per-invocation latency tracking, fullscreen mode

Route Automation Router through agent-mcp cartridge (5th panel with BoJ
routing). Add per-invocation latency tracking across all 17+ BoJ calls
via invokeCartridgeWithLatency with 100-entry ring buffer. Implement
ActionTogglePanelBar and ActionFullscreen keybinding actions — fullscreen
hides Provenance, Vexometer, FeedbackOTron, PanelSwitcher, StatusBar.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/STATE.scm

@@ -23,7 +23,7 @@
       (rust 63)
       (other 193))
     (panels 41)
-    (clades 39)
+    (clades 41)
     (tests 979)
     (rust-tests 28)
     (build-status "0 errors, 0 warnings"))
@@ -36,8 +36,8 @@
       (testing 85)
       (overall 74))
     (phase "development")
-    (current-focus "BoJ primary gateway routing (4 panels: LSP/database/DAP/BSP via cartridges), clade Tier 1-4 system, Panel Bus pub/sub, 979 Deno + 28 Rust tests")
-    (status-summary "98% frontend, 74% overall — 41 panels, 39 clades, 1007 total tests, BoJ gateway: 4 panels routed through cartridges, 3 JSON deserialisers wired, FeedbackOTron BoJ context, clade 4-tier metadata, Panel Bus event system, 0 errors 0 warnings")
+    (current-focus "BoJ primary gateway routing (5 panels: LSP/database/DAP/BSP/agent-mcp via cartridges), per-invocation latency tracking, fullscreen mode, 979 Deno + 28 Rust tests")
+    (status-summary "98% frontend, 75% overall — 41 panels, 41 clades, 1007 total tests, BoJ gateway: 5 panels routed through cartridges with latency tracking, fullscreen mode, 0 errors 0 warnings")
 
     (work-completed
       ("Custom TEA implementation with full Model-Update-View cycle")
@@ -86,12 +86,16 @@
       ("7-Tentacles agentic orchestration panel")
       ("Clade Browser with inheritance engine")
       ("BoJ panel with 14 cartridges")
-      ("BoJ primary gateway: 4 panels route through cartridges (lsp-mcp, database-mcp, dap-mcp, bsp-mcp) via bojRouting toggle")
+      ("BoJ primary gateway: 5 panels route through cartridges (lsp-mcp, database-mcp, dap-mcp, bsp-mcp, agent-mcp) via bojRouting toggle")
       ("BoJ JSON deserialisers: parseCartridges, parseTopology, parseUmojaStatus wired into Update.res")
       ("FeedbackOTron BoJ context snapshot: connection status, cartridge counts, last invoke, Umoja status")
       ("Panel Bus pub/sub: 10 event topics, event envelopes, subscriber registry (11 defaults), 100-event ring buffer")
       ("Clade 4-tier system: Tier 1 protocols/capabilities/deps/isolation, Tier 2 pub/sub bus, Tier 3 DX badges, Tier 4 signing/SBOM/sandbox")
-      ("ToggleDryRun: proper Live/DryRun toggle in workspace (was one-way)"))
+      ("ToggleDryRun: proper Live/DryRun toggle in workspace (was one-way)")
+      ("BoJ per-invocation latency tracking: all 17+ BoJ calls fire RecordBojLatency with (cartridge, tool, elapsed), 100-entry ring buffer on boj.latencyLog")
+      ("Automation Router BoJ routing: agent-mcp cartridge for ExecuteRule, LoadRules, SaveRules, LoadFromRepo")
+      ("ActionTogglePanelBar and ActionFullscreen keybinding actions fully implemented")
+      ("Fullscreen mode: hides Provenance, Vexometer, FeedbackOTron, PanelSwitcher, StatusBar; shows only panels + active overlay"))
 
     (work-in-progress
       ("TypeLL integration for remaining panels"
@@ -218,9 +222,9 @@
 
     (technical-debt
       ("44 TODO comments in Update.res — incomplete JSON parsing stubs for some panel handlers")
-      ("~50% of panels still use stub/local-only backend connections (BoJ gateway covers 4)")
-      ("Tauri backend needs proper error handling and validation logic for newer panels")
-      ("ActionTogglePanelBar and ActionFullscreen keybinding actions not yet implemented")))
+      ("~50% of panels still use stub/local-only backend connections (BoJ gateway covers 5)")
+      ("Tauri backend needs proper error handling and validation logic for newer panels")))
+
 
   (critical-next-actions
     ((action 1)
@@ -294,7 +298,7 @@
        ("Rust cargo test integrated into CI pipeline")
        ("STATE.scm updated: BLOCK-1/BLOCK-2 notes, critical-next-actions refreshed")
        ("TOPOLOGY.md completion dashboard synced with current architecture")
-       ("AI manifest consistency fixes aligned with 41 panels / 39 clades")))
+       ("AI manifest consistency fixes aligned with 41 panels / 41 clades")))
 
     ((session-id "2026-03-08-opus-typell-crosswire")
      (date "2026-03-08")

.machine_readable/contractiles/dust/Dustfile

@@ -16,6 +16,12 @@ recovery:
       undo: "VeriSimDB temporal rollback to previous snapshot"
       notes: "VeriSimDB's versioned persistence allows point-in-time recovery."
 
+    - name: json-parse-failure
+      path: "Storage.load()"
+      reversible: true
+      handler: "Catch JSON.parseExn exceptions and return Model.init() defaults"
+      notes: "Malformed JSON in localStorage must never crash the app at startup."
+
   proof-sessions:
     - name: echidna-session-crash
       event: "echidna.session.error"
@@ -27,6 +33,22 @@ recovery:
       undo: "Pop last entry from proofScript and tacticsApplied arrays"
       notes: "Each tactic application is recorded; undo reverses the last step."
 
+    - name: typell-unavailable
+      event: "typell.connection.error"
+      handler: "All panels degrade gracefully; TypeLL errors never block panel workflows"
+      notes: "Cross-panel TypeLL checks return Error variant, panels display last-known-good result."
+
+  boj-gateway:
+    - name: boj-cartridge-failure
+      event: "boj.invoke.error"
+      handler: "Fall back to direct HTTP when bojRouting=true and cartridge fails"
+      notes: "Each panel with bojRouting can toggle back to direct mode without restart."
+
+    - name: boj-server-down
+      event: "boj.health.error"
+      handler: "All bojRouting toggles revert to direct HTTP mode"
+      notes: "BoJ is optional — all panels must work with direct connections as fallback."
+
   layout-presets:
     - name: layout-corruption
       path: "layouts/*.k9.ncl"
@@ -39,8 +61,40 @@ recovery:
       rollback: "git checkout HEAD~1 -- src/model/ src/Model.res"
       notes: "Domain modules are type-checked — regressions are caught at compile time."
 
-  dust-events:
+  governance:
     - name: anti-crash-halt-log
       source: "model.antiCrash.violations"
       transform: "Log violation chain for post-mortem analysis"
       notes: "Anti-Crash halt events are recorded in the model; halts are clearable by operator."
+
+    - name: contractiles-elasticity-overflow
+      event: "contractiles.elasticity.out-of-bounds"
+      handler: "Clamp elasticity to [0.0, 1.0] range via min/max"
+      notes: "If vexation accumulates unboundedly, clamping prevents invalid contractile state."
+
+    - name: orbital-divergence-nan
+      event: "orbital.divergence.nan"
+      handler: "Return 1.0 (maximum divergence) for NaN/Infinity results"
+      notes: "Jaccard distance computation guards against division-by-zero on empty token sets."
+
+  clade-system:
+    - name: clade-permission-reset
+      event: "clade.permission.corrupt"
+      handler: "Reset to defaultPermissionRules from CladeBrowserEngine"
+      notes: "Permission rules can be reset without losing clade definitions."
+
+    - name: missing-clade-definition
+      event: "clade.lookup.notfound"
+      handler: "CladeBrowserEngine returns default traits for unknown clades"
+      notes: "Missing clade directories don't crash the browser — engine returns fallback data."
+
+  deployment:
+    - name: tauri-build-failure
+      event: "build.tauri.error"
+      rollback: "cargo clean && cargo build --manifest-path src-tauri/Cargo.toml"
+      notes: "Tauri incremental build cache can become stale; clean build resolves most issues."
+
+    - name: rescript-cache-corruption
+      event: "build.rescript.error"
+      rollback: "rm -rf lib/bs .bsb.lock && deno task res:build"
+      notes: "ReScript build cache corruption fixed by clearing lib/bs directory."

.machine_readable/contractiles/lust/Intentfile

@@ -4,6 +4,26 @@
 version: 1
 
 future:
+  boj-unification:
+    - "Complete BoJ gateway migration — all panels route through cartridges (17 total)."
+    - "Add bojRouting for Echidna (proof-mcp), TypeLL (nesy-mcp), Overlay (observe-mcp)."
+    - "Deprecate direct HTTP connections to :8080, :9000, :7800, :8103."
+    - "Single :7700 entry point for all PanLL operations."
+    - "Unified health check via boj_health() instead of per-server probes."
+
+  formal-verification:
+    - "Idris2 ABI proofs for Anti-Crash circuit breaker totality (src/abi/AntiCrash.idr)."
+    - "Contractiles elasticity bounded float invariant (Elasticity ∈ [0.0, 1.0])."
+    - "Orbital divergence Jaccard safety (no NaN/Infinity, result ∈ [0.0, 1.0])."
+    - "Storage JSON parse-on-load total parsing (never throws, always returns Result)."
+    - "TypeLL cross-panel request correlation (no stale/misrouted results)."
+    - "Zig FFI validators for bounded numerics and schema-validated JSON."
+
+  coprocessor-data-plane:
+    - "Phase 2: Zig FFI data plane for local GPU/CPU dispatch."
+    - "Phase 3: Smart routing — automatic local vs remote dispatch."
+    - "Axiom.jl integration through agent-mcp cartridge."
+
   proof-ux:
     - "Visual proof builder — CI/CD pipeline-style view for assembling proof chains."
     - "Switchable syntax linter — Coq, Lean, Isabelle, PanLL-Universal notation."
@@ -19,18 +39,18 @@ future:
     - "Phoenix Channels shared proof state — real-time co-editing via Elixir/OTP."
     - "Contextual chat — comments attached to proof goals, entities, protocol states."
     - "Ambient voice — Opus codec, push-to-talk, no ceremony."
-    - "Optional video — 720p, bandwidth-adaptive, never competes with proof engine."
 
-  discipline-layouts:
-    - "Global viewshift dropdown — instant layout switching."
-    - "Community layout contributions — K9 Yard-level .k9.ncl presets."
-    - "Project-scoped auto-switching — VeriSimDB project → Database Design layout."
-    - "Layout preview thumbnails in dropdown."
+  k9-integration:
+    - "K9 Kennel: Panel metadata as pure data configs (.k9.ncl)."
+    - "K9 Yard: Validated layout presets with Nickel contracts."
+    - "K9 Hunt: Signed deployment recipes for panel module updates."
+    - "A2ML clade definitions as K9 Kennel-level components."
 
   persistence:
     - "Migrate from localStorage to VeriSimDB-backed state persistence."
     - "Temporal versioning — roll back to any previous session state."
     - "Cross-device sync via Elixir collaboration server."
+    - "Storage schema versioning to prevent corrupt-data crashes."
 
   accessibility:
     - "WCAG 2.3 AA across all components."
@@ -42,5 +62,5 @@ future:
   infrastructure:
     - "Fuzzy search (Levenshtein/agrep) across proof libraries."
     - "IANA MIME type registration for A2ML and K9-SVC."
-    - "Formal verification of Anti-Crash soundness (Idris2 proofs)."
     - "Cross-pollination with ReScript Evangeliser progressive sophistication."
+    - "Panel coupling spectrum — switchable loose/tight coupling via event bus."

.machine_readable/contractiles/must/Mustfile

@@ -16,37 +16,53 @@ parameters:
 
 checks:
   - name: rescript-builds-clean
-    description: "ReScript compiler must produce 0 errors and 0 warnings (excluding deprecation)."
-    run: "npx rescript-legacy 2>&1 | grep -c 'error' | grep -q '^0$'"
+    description: "ReScript compiler must produce 0 errors and 0 warnings."
+    run: "deno task res:build 2>&1 | tail -1 | rg -q 'Compiled'"
 
   - name: deno-tests-pass
-    description: "All 121+ Deno tests must pass."
-    run: "deno task test"
+    description: "All 979+ Deno tests must pass."
+    run: "deno test --no-check tests/"
 
   - name: rust-tests-pass
-    description: "All 19 Rust/Tauri backend tests must pass."
-    run: "cd src-tauri && cargo test"
+    description: "All 28 Rust/Tauri backend tests must pass."
+    run: "cargo test --manifest-path src-tauri/Cargo.toml"
+
+  - name: rust-compiles-clean
+    description: "Rust backend must compile without errors."
+    run: "cargo check --manifest-path src-tauri/Cargo.toml 2>&1 | rg -q 'Finished'"
 
   - name: layout-contracts-valid
     description: "All K9 layout presets must pass Nickel contract validation."
     run: "for f in layouts/*.k9.ncl; do nickel typecheck \"$f\" || exit 1; done"
 
   - name: model-composition-sound
-    description: "Model.res must include all 4 domain modules — no orphaned types."
-    run: "bash -uc 'rg \"include PaneModel\" src/Model.res && rg \"include EchidnaModel\" src/Model.res && rg \"include VeriSimModel\" src/Model.res && rg \"include GovernanceModel\" src/Model.res'"
+    description: "Model.res must include all domain modules — no orphaned types."
+    run: "bash -uc 'rg \"include PaneModel\" src/Model.res && rg \"include EchidnaModel\" src/Model.res && rg \"include VeriSimModel\" src/Model.res && rg \"include GovernanceModel\" src/Model.res && rg \"include VabModel\" src/Model.res'"
 
   - name: no-port-conflict
     description: "ECHIDNA endpoint must not conflict with dev server port."
     run: "bash -uc '! rg \"localhost:8000\" src/Model.res src-tauri/src/main.rs | rg -i echidna'"
 
+  - name: clade-directories-complete
+    description: "All registered panel clades must have corresponding clade directories with .a2ml definitions."
+    run: "bash -uc 'for d in panel-clades/clades/*/; do ls \"${d}\"*.a2ml >/dev/null 2>&1 || { echo \"Missing .a2ml in $d\"; exit 1; }; done'"
+
   - name: accessibility-baseline
     description: "No critical accessibility violations (WCAG 2.3 A)."
-    run: "npx pa11y-ci --config .pa11yci.json 2>/dev/null || echo 'pa11y not configured yet — skipping'"
+    run: "bash -uc 'rg -l \"aria-\" src/components/*.res | wc -l | xargs test 5 -le'"
 
   - name: spdx-headers-present
     description: "All ReScript source files must have SPDX license headers."
     run: "bash -uc 'for f in src/*.res src/**/*.res; do head -1 \"$f\" | rg -q SPDX || { echo \"Missing SPDX: $f\"; exit 1; }; done'"
 
+  - name: boj-cartridges-registered
+    description: "All BoJ cartridge Tauri commands must be registered in main.rs invoke_handler."
+    run: "bash -uc 'rg \"boj_\" src-tauri/src/main.rs | rg invoke_handler'"
+
   - name: trustfile-valid
     description: "Trustfile must be parseable A2ML."
     run: "a2ml validate .machine_readable/contractiles/trust/Trustfile.a2ml 2>/dev/null || echo 'a2ml CLI not installed — skipping'"
+
+  - name: no-banned-patterns
+    description: "No believe_me, sorry, Admitted, or unsafe without SAFETY comment in source."
+    run: "bash -uc '! rg -l \"believe_me|\\bsorry\\b|\\bAdmitted\\b\" src/ src-tauri/src/'"

0-AI-MANIFEST.a2ml

@@ -133,7 +133,7 @@
       (panel-N "Neural Stream — inference tokens, ECHIDNA advisor, agency monitor")
       (panel-W "World Barycentre — task canvas, security tools, VeriSimDB, event chain")
       (total-panels 41)
-      (total-clades 39))
+      (total-clades 41))
 
     (cognitive-governance
       (anti-crash     "Circuit breaker — validates all neural tokens against symbolic constraints")

TOPOLOGY.md

@@ -58,7 +58,7 @@
     │  │Proto-Squisher│ │ BoJ  │ │ 11× IDApTIK eNSAID panels            │    │
     │  └──────────────┘ └──────┘ └────────────────────────────────────────┘    │
     │  ┌──────────────┐                                                        │
-    │  │Clade Browser │  39 clades defined │ inheritance engine                │
+    │  │Clade Browser │  41 clades defined │ inheritance engine                │
     │  └──────────────┘                                                        │
     └─────────────────────────────────────┼─────────────────────────────────────┘
                                           │
@@ -117,7 +117,7 @@ INFRASTRUCTURE (5)
   Provisioner                       ██████████ 100%    Portfolios, config, tiers    D
   Code Provenance Map               ██████████ 100%    Trust surface, 4 palettes    D
   Filesystem Watcher                ██████████ 100%    Rust notify + ReScript cmds  D
-  Clade Browser                     ██████████ 100%    39 clades, inheritance engine D
+  Clade Browser                     ██████████ 100%    41 clades, inheritance engine D
 
 COGNITIVE GOVERNANCE (6)
   Vexometer                         ██████████ 100%    Friction monitoring           D
@@ -140,12 +140,12 @@ BACKEND CONNECTIONS
 ──────────────────────────────────────────────────────────────────────────────────────
 FRONTEND:         230 ReScript files │ 26,000+ lines │ 0 errors │ CRG D (Alpha)
 BACKEND:           63 Rust files     │  5,300+ lines │ 0 errors │ CRG D (Alpha)
-TOTAL:            293 source files   │ 31,300+ lines │ 41 panel entries │ 39 clades
+TOTAL:            293 source files   │ 31,300+ lines │ 41 panel entries │ 41 clades
 TESTS:            979 Deno + 28 Rust │ 0 warnings    │ 41 test suites
 ──────────────────────────────────────────────────────────────────────────────────────
 
 OVERALL PROGRESS
-  Frontend                          █████████░  98%    41 panels, 39 clades          D
+  Frontend                          █████████░  98%    41 panels, 41 clades          D
   Backend Connections                █████░░░░░  50%    BoJ gateway + coprocessor     D
   Testing                           ████████░░  85%    979+28 tests, 41 suites       D
   Documentation                     ██████░░░░  60%    TOPOLOGY, manifests, clades   D

panel-clades/clades/clade-browser/CladeBrowser.a2ml

@@ -0,0 +1,60 @@
+# SPDX-License-Identifier: PMPL-1.0-or-later
+#
+# Clade Definition: Clade Browser
+# Interactive browser for exploring and managing panel clades, traits, and permissions.
+
+[clade]
+id = "clade-browser"
+name = "Clade Browser"
+kind = "inspector"
+version = "1.0.0"
+
+[clade-description]
+summary = "Interactive browser for exploring clades, their traits, inheritance chains, protocols, capabilities, and permission rules"
+long = """
+The Clade Browser provides a 4-tab interface for exploring the PanLL clade taxonomy:
+Overview (stats grid, clade cards), By Kind (grouped by 11 clade kinds), Traits
+(matrix table with persistence/backend/work-items/real-time/ambient/isolation columns),
+and Panel Map (panel-to-clade assignments, inheritance chains, permission badges with
+click-to-toggle PermitAll/PermitOnly/PermitNone controls).
+
+The engine implements OR-merge inheritance semantics with cycle detection, 16 query
+functions, and a 4-tier metadata system (protocols, capabilities, dependencies,
+isolation/signing/SBOM/sandbox).
+"""
+
+[clade-traits]
+has-persistence = false
+has-backend = false
+has-work-items = false
+has-real-time = false
+is-ambient = false
+
+[clade-capabilities]
+capabilities = [
+  "CladeList",
+  "CladeLookup",
+  "TraitQuery",
+  "InheritanceChain",
+  "PermissionManagement",
+  "ProtocolBrowse",
+  "CapabilityBrowse",
+  "DependencyGraph",
+]
+
+[clade-connections]
+backend-type = "none"
+protocols = []
+
+[clade-taxonomy]
+inherits-from = "inspector"
+sibling-clades = ["panel-switcher", "workspace"]
+
+[clade-integrations]
+consumes = ["all-clades"]
+consumed-by = []
+
+[clade-accessibility]
+keyboard-navigable = true
+screen-reader-support = true
+aria-roles = ["tablist", "tab", "grid", "table", "button"]