feat(contract): D-ODOO-SAV-5b-v2 — canonical OGIT-URI codebook foundation + E-CODEBOOK-INHERITS-FROM-OGIT

Per the 2026-05-28 user-given doctrine (distilled across four messages):
"every data is now LE-byte contract SoA in each mailbox / bitpacked is
also only a desperation bucket / normally LE SoA should have codebook
for everything including semantic ontology graph / inherited from OGIT
because the SoA doesn't guess."

Adds the canonical identity layer that supersedes the bitpacked RoleKey
form shipped in feaa587:

**New: crates/lance-graph-contract/src/callcenter/ogit_uris.rs (8 tests)**
- SAVANT_OGIT_BASE = "https://ogit.adaworldapi.com/callcenter/savants#"
- SAVANT_OGIT_URIS: LazyLock<[String; 25]> — one URI per savant, roster order
- savant_ogit_uri(id) / savant_ogit_uri_by_name(name) — lookup helpers
- 8 unit tests: uris_match_savant_count, uris_use_canonical_namespace,
  id_1_resolves_to_fiscal_position_resolver, id_16_is_absent,
  id_26_resolves_to_backorder_judge, id_lookup_matches_name_lookup,
  nonexistent_name_returns_none, every_savant_in_roster_has_a_uri

Resolves through `lance-graph-ontology::registry::OntologyRegistry`
(infrastructure already shipped — PR #407/#408 hydrators, PR #412 DOLCE
classifier, PR #416 FIBU/FIBO alignment, the canonical lingua-franca path).
The OntologyRegistry resolves the URI to a stable u32 codebook code; the
LE-byte mailbox SoA columns store the code. The Baton (u16, CausalEdge64)
carries the code across mailbox boundaries.

**Updated: contract::callcenter::role_keys (doc-only update)**
Module-level documentation now explicitly flags the bitpacked RoleKey
slices as the desperation-bucket fallback per the new doctrine; canonical
savant identity is via the OGIT URI in ogit_uris. Code unchanged (still
compiled, 7 tests still pass) — usable for ephemeral in-mailbox Hamming
compare where codebook lookup is unavailable.

**Updated: contract::callcenter::mod.rs**
Re-exports the new ogit_uris module + adds the two-identity-layer rationale
in the module doc (canonical OGIT URI + desperation-bucket RoleKey).

**Prepended: .claude/board/EPIPHANIES.md — E-CODEBOOK-INHERITS-FROM-OGIT**
Captures the full doctrine across all four 2026-05-28 messages:
Vsa16kF32 deprecated, LE-byte SoA per mailbox, codebook for everything,
inheritance from OGIT, Kontenerkennung-style multi-dim rich codebook
(parent chain + NARS confidence per link + business × transaction × form
× regulation × law × entity × product), audit query layer (episodic +
AriGraph SPO-G + regulation-ontology + NARS confidence threshold).

**Queued (separate D-ids, captured in the EPIPHANIES entry):**
- (a) data/ontologies/ogit/callcenter/savants.ttl + OntologyRegistry
  hydration for the 25 savants
- (b) Kontenerkennung-style inheritance struct with NARS confidence per
  parent link
- (c) regulation-ontology codebook (HGB / GoB / AO / UStG / IFRS / GoBD)
- (d) audit-threshold dispatch in cognitive-shader-driver (NARS confidence
  vs audit_floor → CausalEdge64 emission or escalation Baton)

Tests: 15 callcenter tests total (8 new ogit_uris + 7 existing role_keys);
454 prior contract lib tests unaffected.

https://claude.ai/code/session_017gZ6sPRXYPj5n7uJ7NBtRv

Author: claude

.claude/board/EPIPHANIES.md

@@ -1,3 +1,34 @@
+## 2026-05-28 — E-CODEBOOK-INHERITS-FROM-OGIT — every identity (entities, savants, atoms, ontology classes, regulation rules, accounts) lives as a codebook entry inherited from OGIT; LE-byte SoA per mailbox stores the codes; bitpacked u64 is a desperation-bucket fallback; the SoA doesn't guess
+
+**Status:** FINDING (architectural correction, supersedes the role-key-as-canonical interpretation of `I-VSA-IDENTITIES`; drives the v2-step codebook foundation in `contract::callcenter::ogit_uris`).
+
+**Click (the 2026-05-28 user-given doctrine, distilled across four messages):**
+
+1. **`Vsa16kF32` deprecated** as cross-boundary carrier (matches CLAUDE.md "The Click" 2026-05-26 baton-scoping update). Inter-mailbox state is the `(u16, CausalEdge64)` baton; ephemeral in-mailbox compute may still use `Vsa16kF32`.
+2. **Every data lives as LE-byte SoA per mailbox** (`E-MAILBOX-IS-BINDSPACE`). Row content = codes; never raw bits.
+3. **Codebook for everything — including the semantic ontology graph.** Entities, savants, atoms, ontology classes, regulation rules, accounts (Kontenrahmen positions) all get codebook entries.
+4. **Inherited from OGIT, because the SoA doesn't guess.** Identities are deterministic — `OntologyRegistry` resolves OGIT URI → stable row index. No hashing, no FNV-seeded random bits, no autogenerated IDs.
+5. **Bitpacked u64 (RoleKey slices in `Binary16K`) is a desperation-bucket fallback.** Useful only when codebook lookup is unavailable (ephemeral Hamming compare); not canonical identity.
+6. **The codebook is RICH, not flat** — Kontenerkennung is the canonical example: each entry carries a parent chain (SKR03 → SKR04 → custom) + NARS-truth confidence per link + multi-dimensional dispatch over `(business type × transaction type × form × regulation × law × entity × product)`.
+7. **The audit query is the load-bearing read**: *"how were similar transactions / entities handled before · what patterns are required by regulation · what currently exists · what needs audit vs what is confidently repeating existing patterns"* — answered by composing episodic memory + AriGraph SPO-G audit-witness chain + regulation-ontology codebook + NARS confidence threshold + Pearl 2³ on the emitted `CausalEdge64`. High confidence → repeat (no audit); below floor → escalate.
+
+**Mechanism (the codebook layer, full shape):**
+
+- **Identity:** OGIT URI under `https://ogit.adaworldapi.com/<domain>#<Name>` (e.g. `callcenter/savants#FiscalPositionResolver`). `OntologyRegistry::resolve(uri)` → stable row index (u32 codebook code).
+- **Inheritance:** typed parent chain per entry, NARS-truth-weighted per link (deduction down a chain, revision across siblings).
+- **Multi-dim applicability:** each entry carries selectors over (business × transaction × form × regulation × law × entity × product); dispatch resolves the cross-product match.
+- **Regulation as ontology:** legal/regulatory patterns (HGB, GoB, AO, UStG, IFRS, GoBD) are themselves OGIT URIs with inheritance + applicability; floor-of-compliance is a typed predicate over them.
+- **Audit threshold:** NARS confidence on a `CausalEdge64` emission < `audit_floor` → escalate (LLM resolves the <25% tail per CLAUDE.md "The Click"); ≥ floor → confident pattern repetition committed to AriGraph SPO-G as both the action and its audit witness.
+- **Storage:** LE-byte SoA columns per mailbox store the codebook codes (u32 row indices). No bitpacked planes. The `Baton` (`(u16, CausalEdge64)`) carries the code across mailbox boundaries.
+
+**Fix (what lands today + what's queued):**
+
+- **Today (this commit):** `contract::callcenter::ogit_uris` ships the canonical OGIT URI per savant + `savant_ogit_uri(id) → &'static str` lookups (8 tests). `contract::callcenter::role_keys` stays compiled as the documented desperation-bucket fallback (module doc updated). `D-ODOO-BP-1b` Wave 1 (L1–L5) already shipped 4008 lines of typed `OdooEntity` content (`e4c747a`); Wave 2 (L6–L10) running in parallel.
+- **Queued (separate D-ids):** (a) `savants.ttl` under `data/ontologies/ogit/callcenter/` + `OntologyRegistry::hydrate_from_*` wiring for the 25 savants; (b) Kontenerkennung-style inheritance + NARS confidence per link (`CodebookEntry { uri, parent: Option<u32>, link_truth: NarsTruth, applicability: ... }`); (c) regulation-ontology codebook (HGB / GoB / AO / UStG / IFRS / GoBD as OGIT URIs); (d) audit-threshold dispatch in `cognitive-shader-driver` (NARS confidence vs `audit_floor` → `CausalEdge64` Pearl 2³ + AriGraph SPO-G witness OR escalation Baton).
+
+**Lesson (generalizes):** "consult before guess" (CLAUDE.md §"Driving Seat") extends beyond grepping the codebase — it extends to **identity itself**. The SoA doesn't guess: every row's identity comes from a deterministic codebook lookup (OGIT → registry → row index). Inventing identities (FNV-seeded random bits in a slice, hash of a name) is the same anti-pattern as inventing types that already exist — both are 30-turn rediscovery taxes. The fix is the same: route every identity through `OntologyRegistry`.
+
+**Cross-ref:** `E-MAILBOX-IS-BINDSPACE` (LE-byte SoA per mailbox), `E-BATON-1` (`(u16, CausalEdge64)` cross-boundary state), `I-VSA-IDENTITIES` (Layer-2 catalogue doctrine — clarified: catalogue is OGIT-resolved, NOT bitpacked random bits), `E-SAVANT-COMPOSITION-1` (Reasoner trait surface was wrong — codebook foundation is the canonical identity layer the typed compositions reach for), CLAUDE.md "The Click" 2026-05-26 baton-scoping update (Vsa16kF32 deprecated as carrier), CLAUDE.md INTEGRATION_PLANS line 470 (Pillar 1: "OGIT as universal SPO-G lingua franca with `ontology_context_id: u32` per named graph"), `.claude/plans/odoo-savant-reasoners-v2.md` (v2 reshape — Group F per-savant compositions now compose over OGIT-codebook identities, not RoleKey slices), `.claude/plans/odoo-business-logic-blueprint-v1.md` (BP-1b content layer is OGIT-compatible via `model_name` → `classify_odoo`/`hydrate_odoo`).
 ## 2026-05-28 — E-SAVANT-COMPOSITION-1 — the `Reasoner` trait surface (D-ODOO-SAV-4, PR #420) is the wrong shape: savants are typed compositions over `CausalEdge64` + `Tactic` + `callcenter/role_keys`, not service impls
 
 **Status:** FINDING (architectural correction, drives `odoo-savant-reasoners-v2`).

crates/lance-graph-contract/src/callcenter/mod.rs

@@ -6,13 +6,29 @@
 //! [`crate::savants::SAVANTS`] land here as the first set of
 //! callcenter-domain identities.
 //!
+//! ## Two identity layers (2026-05-28 codebook doctrine)
+//!
+//! 1. **[`ogit_uris`] — canonical**: OGIT URI per savant, resolved
+//!    through `lance-graph-ontology::registry::OntologyRegistry` to a
+//!    stable row index. LE-byte mailbox SoA columns store the row
+//!    index — the codebook is inherited from OGIT, the SoA doesn't
+//!    guess.
+//! 2. **[`role_keys`] — desperation-bucket fallback**: Binary16K u64
+//!    bitpacked role-key slices for compute contexts where the codebook
+//!    is unavailable. **Not the canonical identity** — useful only
+//!    for ephemeral in-mailbox Hamming compare.
+//!
 //! See `.claude/knowledge/vsa-switchboard-architecture.md` for the
 //! three-layer Layer-2 catalogue doctrine and
 //! `.claude/plans/odoo-savant-reasoners-v2.md` for the broader
 //! composition-over-substrate reshape this module participates in.
 
+pub mod ogit_uris;
 pub mod role_keys;
 
+pub use ogit_uris::{
+    savant_ogit_uri, savant_ogit_uri_by_name, SAVANT_OGIT_BASE, SAVANT_OGIT_URIS,
+};
 pub use role_keys::{
     savant_role_key, savant_role_key_by_name, SAVANT_ROLE_KEYS, SAVANT_SLICE_END,
     SAVANT_SLICE_START, SAVANT_SLICE_WIDTH,

crates/lance-graph-contract/src/callcenter/ogit_uris.rs

@@ -0,0 +1,159 @@
+//! Canonical OGIT-URI codebook entries for the 25 Odoo savants — the
+//! deterministic identity layer per the 2026-05-28 doctrine: **"LE-byte
+//! SoA per mailbox carries codebook entries inherited from OGIT; the
+//! SoA doesn't guess."**
+//!
+//! ## Layered identity
+//!
+//! Per `I-VSA-IDENTITIES` + the 2026-05-28 codebook-canonical doctrine,
+//! a savant has three identity layers:
+//!
+//! 1. **Canonical (this module): OGIT URI** — namespaced under
+//!    `https://ogit.adaworldapi.com/callcenter/savants#<Name>`. Resolved
+//!    through [`lance-graph-ontology::registry::OntologyRegistry`] to a
+//!    stable row index (codebook code). LE-byte mailbox SoA columns
+//!    store the row index, **never** raw bits.
+//! 2. **Content (in [`crate::savants`]): `Savant` struct** — dispatch
+//!    tuple `(id, name, family, kind, inference, semiring, style, lane,
+//!    decides)`. Read-side metadata, not identity.
+//! 3. **Desperation-bucket fallback (in [`super::role_keys`]):
+//!    `RoleKey` slice** — Binary16K bitpacked u64 words in
+//!    `[14096..16346)`. Useful for compute contexts where codebook
+//!    lookup is unavailable (e.g. ephemeral in-mailbox Hamming
+//!    compare); **not the canonical identity**. The 2026-05-28
+//!    doctrine: "bitpacked is also only a desperation bucket."
+//!
+//! ## What this module ships (`D-ODOO-SAV-5b-v2` step 1)
+//!
+//! - [`SAVANT_OGIT_BASE`] — the namespace IRI all 25 URIs sit under.
+//! - [`SAVANT_OGIT_URIS`] — `LazyLock<[String; 25]>` with one URI per
+//!   savant in roster order (same order as [`crate::savants::SAVANTS`]).
+//! - [`savant_ogit_uri`] / [`savant_ogit_uri_by_name`] — lookup helpers
+//!   that round-trip with [`crate::savants::savant`] /
+//!   [`crate::savants::savant_by_name`].
+//!
+//! ## What lands next
+//!
+//! - **Step 2** (out of scope this commit): a `data/ontologies/ogit/
+//!   callcenter/savants.ttl` TTL declaring each savant as an
+//!   `ogit:Savant` with its dispatch tuple (kind, inference, semiring,
+//!   style, lane, decides) — hydrated through the existing
+//!   `OwlHydrator` + `OntologyRegistry::hydrate_from_*` path.
+//! - **Step 3:** `MappingProposal` registration so the per-tenant
+//!   `NamespaceBridge` projections resolve the savant URIs into the
+//!   appropriate tenant scope.
+//! - **Step 4:** Kontenerkennung-style inheritance + NARS-truth
+//!   confidence per inheritance link — the multi-dimensional dispatch
+//!   surface (business × transaction × form × regulation × law × entity
+//!   × product) the user named on 2026-05-28. Lands in a separate
+//!   module sitting next to the codebook resolver, with each savant's
+//!   `Savant::decides` becoming the leaf in a typed inheritance tree.
+
+use std::sync::LazyLock;
+
+use crate::savants::{savant, savant_by_name, SAVANTS};
+
+/// Base OGIT IRI for the callcenter-savants namespace.
+///
+/// One stable codebook namespace; every savant URI is
+/// `format!("{SAVANT_OGIT_BASE}{savant_name}")`.
+pub const SAVANT_OGIT_BASE: &str = "https://ogit.adaworldapi.com/callcenter/savants#";
+
+/// One canonical OGIT URI per savant, in roster order (same order as
+/// [`crate::savants::SAVANTS`]).
+///
+/// Indexing matches roster index `i` (NOT savant `id`; roster id 16 is
+/// intentionally absent per `SAVANTS.md`). Use the lookup helpers
+/// [`savant_ogit_uri`] / [`savant_ogit_uri_by_name`] rather than
+/// indexing this array directly.
+pub static SAVANT_OGIT_URIS: LazyLock<[String; 25]> = LazyLock::new(|| {
+    core::array::from_fn(|i| format!("{}{}", SAVANT_OGIT_BASE, SAVANTS[i].name))
+});
+
+/// Look up a savant's canonical OGIT URI by roster id.
+///
+/// Returns `None` if the id does not appear in [`SAVANTS`] (e.g. the
+/// intentionally-absent id 16).
+pub fn savant_ogit_uri(id: u8) -> Option<&'static str> {
+    let _ = savant(id)?;
+    SAVANTS
+        .iter()
+        .position(|s| s.id == id)
+        .map(|i| SAVANT_OGIT_URIS[i].as_str())
+}
+
+/// Look up a savant's canonical OGIT URI by name.
+///
+/// Returns `None` if the name does not match any savant in
+/// [`SAVANTS`].
+pub fn savant_ogit_uri_by_name(name: &str) -> Option<&'static str> {
+    let _ = savant_by_name(name)?;
+    SAVANTS
+        .iter()
+        .position(|s| s.name == name)
+        .map(|i| SAVANT_OGIT_URIS[i].as_str())
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn uris_match_savant_count() {
+        assert_eq!(SAVANT_OGIT_URIS.len(), 25);
+    }
+
+    #[test]
+    fn uris_use_canonical_namespace() {
+        for uri in SAVANT_OGIT_URIS.iter() {
+            assert!(
+                uri.starts_with(SAVANT_OGIT_BASE),
+                "uri must sit under canonical namespace: {uri}"
+            );
+        }
+    }
+
+    #[test]
+    fn id_1_resolves_to_fiscal_position_resolver() {
+        let uri = savant_ogit_uri(1).expect("id 1");
+        assert_eq!(
+            uri,
+            "https://ogit.adaworldapi.com/callcenter/savants#FiscalPositionResolver"
+        );
+    }
+
+    #[test]
+    fn id_16_is_absent() {
+        assert!(savant_ogit_uri(16).is_none(), "roster id 16 intentionally absent");
+    }
+
+    #[test]
+    fn id_26_resolves_to_backorder_judge() {
+        let uri = savant_ogit_uri(26).expect("id 26");
+        assert!(
+            uri.ends_with("BackorderJudge"),
+            "id 26 should be BackorderJudge: {uri}"
+        );
+    }
+
+    #[test]
+    fn id_lookup_matches_name_lookup() {
+        let by_id = savant_ogit_uri(1).expect("id 1");
+        let by_name =
+            savant_ogit_uri_by_name("FiscalPositionResolver").expect("name lookup");
+        assert_eq!(by_id, by_name);
+    }
+
+    #[test]
+    fn nonexistent_name_returns_none() {
+        assert!(savant_ogit_uri_by_name("DoesNotExist").is_none());
+    }
+
+    #[test]
+    fn every_savant_in_roster_has_a_uri() {
+        for s in SAVANTS.iter() {
+            let uri = savant_ogit_uri(s.id).expect("every roster savant has a uri");
+            assert!(uri.ends_with(s.name), "uri ends with savant name: {uri} vs {}", s.name);
+        }
+    }
+}

crates/lance-graph-contract/src/callcenter/role_keys.rs

@@ -1,11 +1,26 @@
-//! Savant role-key catalogue — 25 disjoint [`RoleKey`] slices, one
-//! identity per Odoo savant in [`crate::savants::SAVANTS`].
+//! Savant role-key catalogue — **desperation-bucket fallback** identity
+//! layer per the 2026-05-28 codebook doctrine (see
+//! `E-CODEBOOK-INHERITS-FROM-OGIT` in `EPIPHANIES.md`).
 //!
-//! Lands in the SMB headroom `[14096..16384)` that
-//! [`crate::grammar::role_keys`] reserves for future SMB keys (per the
-//! LF-2 16K resize). Each savant gets 90 dims of pseudo-random bipolar
-//! identity, FNV-64-seeded from the savant's name; disjoint by
-//! construction.
+//! ## Status: not the canonical identity
+//!
+//! The canonical savant identity is the OGIT URI in [`super::ogit_uris`],
+//! resolved through `lance-graph-ontology::registry::OntologyRegistry`
+//! to a stable codebook row index. LE-byte mailbox SoA columns store
+//! the row index — **never the bitpacked bits here**.
+//!
+//! This module exists as the documented fallback for compute contexts
+//! where codebook lookup is unavailable (e.g. ephemeral in-mailbox
+//! Hamming compare against a pre-bound `RoleKey`). Per the
+//! 2026-05-28 doctrine: *"bitpacked is also only a desperation
+//! bucket."*
+//!
+//! ## What this module ships
+//!
+//! 25 disjoint [`RoleKey`] slices, one per Odoo savant in
+//! [`crate::savants::SAVANTS`], landing in the SMB headroom
+//! `[14096..16346)` (FNV-64-seeded pseudo-random bipolar bits, 90 dims
+//! each, disjoint by construction).
 //!
 //! ## Layout
 //!
@@ -22,7 +37,9 @@
 //! headroom (`grammar::role_keys::VSA_DIMS = 16_384` minus STEUER_KEY's
 //! end at `14_096`).
 //!
-//! `D-ODOO-SAV-5b` of `odoo-savant-reasoners-v2`.
+//! `D-ODOO-SAV-5b` of `odoo-savant-reasoners-v2` (the desperation-bucket
+//! fallback; the canonical OGIT codebook foundation is `D-ODOO-SAV-5b-v2`
+//! in [`super::ogit_uris`]).
 
 use std::sync::LazyLock;