specs(sprint-5-6): 10 worker specs from parallel sprint-5/sprint-6 batch (W1 + W8 still in flight)

Sonnet worker fleet (12 parallel) producing PR-ready specs for the
remaining sprint-5 follow-ons + sprint-6 Tier-2 wiring. This commit
captures 10 of 12 outputs that landed cleanly; W1 (LanceAuditSink)
and W8 (woa-rs extraction) are respawns still running.

Sprint-5 specs (substrate already shipped in PR #364):
* pr-d3b-jsonl-and-verify.md  (W2, 27 KB) — JsonlAuditSink + CompositeSink + verify CLI
* pr-d4-family-hydration.md   (W3, 16 KB) — TTL hydration of FAMILY_TO_SUPER_DOMAIN
* sprint-5-ci-matrix.md       (W4, 21 KB) — green-gate criteria + target matrix
* sprint-5-pr-graph.md        (W5, 16 KB) — retro of 4-PR landing + sprint-6 unblock map

Sprint-6 specs (Tier-2 composable wiring):
* pr-e1-medcare-super-domain.md   (W6, 26 KB) — MedCare finalisation, ~900 LOC
* pr-e2-smb-retrofit.md           (W7, 11 KB) — 5 bypass sites + audit emission
* pr-f1-thinking-engine-wire.md   (W9, 16 KB) — UnifiedBridge gate for cross-tenant ops
* pr-g1-manifest-modules.md       (W10, 27 KB) — build.rs codegen, no cycle
* pr-g2-ractor-supervisor.md      (W11, 25 KB) — per-G actor, one-for-one supervision
* sprint-6-conformance-test.md    (W12, 26 KB) — 10 contract assertions across consumers

Permissions: settings.json grants Write/Edit on .claude/board/sprint-log-5-6/**
to unblock workers writing into the per-agent scratchpad dir.

A2A scratchpads at .claude/board/sprint-log-5-6/agents/ (one per worker).
AGENT_ORCHESTRATION_LOG.md gets one-line per agent on completion.

W1 + W8 respawns + Opus meta review to follow in subsequent commits.

Author: claude

.claude/board/AGENT_ORCHESTRATION_LOG.md

@@ -1045,3 +1045,23 @@ Test coverage is strong on the new behavior with two known dead-effect spots: tr
 - Wave 1: 4 agents, average 1.7x (2.0x median). Two silent overshoots (cert-officer 2.3x, spo-promote 2.0x). META-NUDGE-3 fired post-hoc.
 - Wave 2: 4 agents, average 2.4x (2.0x median, 3.7x outlier on context-id). META-NUDGE-3 bypassed by doc-density rationalization. META-NUDGE-5/6 fired pre-Wave-3.
 - Wave 3: 4 agents, average 1.7x BUT three of four under 1.5x (object-view 1.12x, cascade-cols 1.41x, probes 1.39x); the 4th (mysql-transcode 3.0x) hit a structural floor and was main-thread arbitrated. cascade-cols self-corrected from 1.87x to 1.41x via the BLOCKER-and-resolve protocol. **The trend reversed in Wave 3.**
+2026-05-13 W10 sprint-log-5-6: wrote .claude/specs/pr-g1-manifest-modules.md (~10 KB) — Pattern E manifest-modules spec with YAML format justification, build.rs algorithm, dependency-cycle fix (inventory::submit!), 6 initial module manifests, 5 tests, DELTA table vs compile-time-consumer-binding-v1.md §2.1.
+2026-05-13 W5 sprint-log-5-6 DONE: wrote .claude/specs/sprint-5-pr-graph.md (16285 bytes) — sprint-5 PR dep graph (#364+MR#112+SO#31+ndarray#142), retrospective (compressed 4-PR vs planned 11-PR), and sprint-6 handover (E1/E2/E3/F1/G1/G2 unblocked; E4/E5 blocked on new repo creation).
+2026-05-13 W3 sprint-log-5-6: wrote .claude/specs/pr-d4-family-hydration.md (16145 bytes) — FAMILY_TO_SUPER_DOMAIN TTL hydration spec; plans cited: super-domain-rbac-tenancy-v1.md §3.4/§8/§9.1; delta: TTL-over-TOML, OnceLock<Arc<RwLock<FamilyTableInner>>>, hot-reload opt-in, try_resolve() shim
+2026-05-13 W2 sprint-log-5-6: pr-d3b-jsonl-and-verify.md filed (27 KB) — JsonlAuditSink + CompositeSink + verify-jsonl/verify-lance/cross-verify CLI; owl_identity=hex, u64=decimal-strings, exit-codes 0/1/2/3; extends td-sdr-audit-persist.md; OQ-4 (u64 JSONL format) open.
+
+## 2026-05-13 — sprint-log-5-6 W6 (PR-E1 MedCare super-domain spec)
+
+W6 delivered `.claude/specs/pr-e1-medcare-super-domain.md` (~10 KB). Gap analysis from §14 super-domain-rbac-tenancy-v1.md vs MedCare-rs#112 substrate: 6 finalisation items (E1-1 through E1-6), ~900 LOC total, 35 tests. Hard dependency on W3 `pr-d4-family-hydration.md` (FAMILY_TO_SUPER_DOMAIN all-Unknown blocks E1-2/E1-4). 4 open questions captured (TTL namespace shape, SGB V/BMV-Ä mapping, researcher DP epsilon, Role vs RoleGroup dual-type). Delta classification: 2 items extend §13.8 D-SDRs (E1-4/E1-5), 2 extend in widened scope (E1-1/E1-3), 2 are new (E1-2/E1-6).
+2026-05-13 W11 sprint-log-5-6 DONE: .claude/specs/pr-g2-ractor-supervisor.md (555 lines, ~25 KB) — CallcenterSupervisor ractor actor tree spec; one-for-one supervision, typed ConsumerEnvelope, bounded mailboxes, lifecycle audit via SuperDomain::System, ractor 0.14, I-2 via clippy disallowed-types, 820 LOC estimate, DELTA vs compile-time-consumer-binding-v1 Pattern F + pr-f-1 sprint-3 spec.
+W12 | S6-W10 | 2026-05-13 | COMPLETE | .claude/specs/sprint-6-conformance-test.md (26 KB): 10 assertions A1-A10, generic harness assert_consumer_conformance<B: NamespaceBridge>, separate crate lance-graph-consumer-conformance, E1/E2/E3 active+blocking/E4/E5 #[ignore], CI slot after callcenter+ontology in rust-test.yml, DELTA vs foundry-consumer-parity-v1.md in §8.
+W9 | sprint-log-5-6 | S6-W7 | 2026-05-13 | DONE | .claude/specs/pr-f1-thinking-engine-wire.md (~316 LOC estimate, day-scale, CognitiveBridgeGate trait + PassthroughGate + UnifiedBridgeGate, 3 cross-tenant op categories, 5 BindSpace columns governed, new P-auth phase vs jc-pillars P0-P6)
+
+## 2026-05-13 — W7 (sprint-log-5-6) — PR-E2 smb-office retrofit spec COMPLETE
+
+**Agent:** W7 (claude-sonnet-4-6) | **Sprint:** S6-W3 | **Deliverable:** `.claude/specs/pr-e2-smb-retrofit.md`
+**Outcome:** Spec written (~11 KB, 12 sections). 5 bypass sites mapped; 3-batch incremental plan; audit emission table; 10 acceptance criteria. Blockers: §8.1 (WorkOrderBilling+Networking discriminants unassigned), §8.2 (smb.ttl absent), §8.3 (pr-d4-family-hydration spec not yet written). Batches A+B unblocked immediately.
+
+## W4 — 2026-05-13 — sprint-5-ci-matrix spec complete
+
+**Worker:** W4 (S5-W11) | **Spec:** `.claude/specs/sprint-5-ci-matrix.md` (21 KB, 12 sections) | **Status:** DONE. Defines 6 blocking gates (GG-1 to GG-6), feature matrix FC-1 to FC-CC, hardware R-HW-1 to R-HW-4 (ndarray#142 VBMI SIGILL mitigation), coverage floors per crate, audit-sink integration job, consumer-conformance gate aligned with W12 (GG-6, `--test-threads=1`). Delta: `rust-test.yml` adds 2 jobs + coverage flag; `build.yml` adds beta toolchain advisory entry. No new workflow files.

.claude/board/sprint-log-5-6/agents/agent-W10.md

@@ -0,0 +1,22 @@
+# agent-W10 scratchpad — sprint-log-5-6 / PR-G1 manifest-modules spec
+
+**Worker:** W10 | **Sprint:** S6-W8 | **Started:** 2026-05-13
+
+## Mandatory reads completed
+
+1. ls .claude/plans/ — confirmed compile-time-consumer-binding-v1.md present
+2. compile-time-consumer-binding-v1.md — Pattern E canonical (D-MANIFEST-MODULES §2.1), 410 LOC estimate, 6 manifest schema, build.rs ~150 LOC
+3. LATEST_STATE.md — sprint-5 cross-repo shipped; UnifiedBridge end-to-end across MedCare + smb-office
+4. PR_ARC_INVENTORY.md — #364 merged 2026-05-13; OgitFamilyTable sparse HashMap<u16, FamilyEntry>
+5. foundry-consumer-parity-v1.md — consumer parity matrix
+6. pr-e-1-manifest-modules.md + CORRECTION section (2026-05-12): dependency-cycle fix via inventory crate + data-only phf::Map
+
+## Key decisions
+
+- YAML format (canonical ref uses YAML, existing medcare examples use YAML)
+- Build home: lance-graph-contract (follows §3 open-question 1 recommendation)
+- Registration: inventory crate self-registration (Option A from CORRECTION)
+- Codegen: TWO files — ogit_namespace.rs (consts) + manifest_metadata.rs (phf::Map, data-only)
+- No new runtime deps to contract (zero-dep invariant preserved)
+
+## Status: spec written to .claude/specs/pr-g1-manifest-modules.md

.claude/board/sprint-log-5-6/agents/agent-W11.md

@@ -0,0 +1,30 @@
+## 2026-05-13 — W11 start
+
+**Worker:** W11 — sprint-6 PR-G2 CallcenterSupervisor ractor port  
+**Deliverable:** `.claude/specs/pr-g2-ractor-supervisor.md`
+
+**Mandatory reads completed (in order):**
+1. `ls .claude/plans/ | head -40` — confirmed 32 plan files present
+2. `.claude/plans/compile-time-consumer-binding-v1.md` — read fully; Pattern F is D-RACTOR-SUPERVISOR; key sketch in §2.2; Open Q 6 (one-for-one vs all-for-one) deferred to this spec
+3. `.claude/plans/callcenter-membrane-v1.md` — read fully; 4-layer architecture; DrainTask/LanceMembrane stay unchanged; UnifiedBridge is per-bridge monomorph
+4. `.claude/board/LATEST_STATE.md` — PR #364 shipped D-SDR-3/4/5 + SuperDomain + UnifiedAuditEvent 26-byte; sprint-5-6 cross-repo landing confirmed
+5. `.claude/board/PR_ARC_INVENTORY.md` — #364 locked: `SuperDomain` type exists, `AuthOp` enum exists, `AuditChain` shipped
+6. `crates/lance-graph-callcenter/src/` — examined `unified_bridge.rs` (341 LOC, `UnifiedBridge<B>` with Mutex-guarded `AuditChain`, no supervisor), `lib.rs` (feature-gated modules, no supervisor mod), `Cargo.toml` (no ractor dep today)
+
+**Key findings:**
+- No supervisor exists today — `UnifiedBridge<B>` is per-consumer ad-hoc, no crash isolation
+- `ractor` not in any Cargo.toml — fresh dep addition required
+- `AuthOp` enum already shipped (Read/Write/Act); PR-G2 extends with ActorStart/ActorStop/ActorRestart
+- `SuperDomain::System` is a new variant (not in current `super_domain.rs`)
+- PR-F-1 (sprint-3 spec) used `Box<dyn ConsumerActorMsg>`; this spec upgrades to typed `ConsumerEnvelope` enum (eliminates ~40 ns box overhead, no expressivity loss since envelope arms are fixed)
+- One-for-one restart chosen over "restart-all" (plan's simplification) due to §73 SGB V MedCare audit chain isolation requirement
+
+**Spec produced:** `.claude/specs/pr-g2-ractor-supervisor.md` (555 lines, ~25 KB)
+- §2: Actor topology (per-G, one-for-one, inert-skip Option A from PR-F-1 CORRECTION)
+- §3: Message types (ConsumerEnvelope / ConsumerReply typed enums, not Box<dyn>)
+- §4: Backpressure (bounded 1024-msg default, per-manifest override, unbounded supervisor)
+- §5: Failure handling (one-for-one, exponential backoff 100ms→30s, escalation at crash_count>10)
+- §6: Lifecycle audit (AuthOp::ActorStart/Stop/Restart, SuperDomain::System, feature-gated)
+- §7: ractor 0.14 + `features = ["tokio-runtime"]`, I-2 via clippy disallowed-types
+- §8: File layout (14 files, ~820 LOC total)
+- §11: DELTA from both plan docs and pr-f-1 sprint-3 spec — all 5 differences cited

.claude/board/sprint-log-5-6/agents/agent-W12.md

@@ -0,0 +1,24 @@
+# agent-W12 — sprint-log-5-6 / S6-W10 conformance test spec
+
+> Worker: W12 | Sprint: Sprint-6 | Deliverable: .claude/specs/sprint-6-conformance-test.md
+> Started: 2026-05-13 | Model: claude-sonnet-4-6
+
+## Read order completed
+
+1. ls .claude/plans/ — 32 plan files indexed
+2. super-domain-rbac-tenancy-v1.md §14 — harvested §14.1-§14.5 (D-SDR-18..23), §13.3 AuditChain merkle, §3.4-§3.8 SuperDomain/OgitFamily/OwlIdentity
+3. foundry-consumer-parity-v1.md — §2 shared Foundry surface (DM-8/LF-12/LF-31/LF-90/LF-92)
+4. LATEST_STATE.md — D-SDR-5 shipped PR #364: UnifiedBridge<B>, AuditChain, 26-byte UnifiedAuditEvent, 3-byte OwlIdentity
+5. unified_bridge.rs — full trait surface + RecordingSink pattern
+6. orchestration.rs — OrchestrationBridge, StepDomain, DomainProfile
+7. td-super-domain-subcrates.md — CI gate shape from sprint-5 W4
+
+## Key decisions
+
+- Separate crate: crates/lance-graph-consumer-conformance/
+- Generic harness: assert_consumer_conformance<B: NamespaceBridge>()
+- 10 assertions A1-A10: audit shape, super_domain stamp, merkle chain, bridge-error short-circuit, canonical-vs-alias policy, SuperDomain != Unknown, family table coverage, TenantId isolation, actor_role_hash, g_lock non-zero
+- E1/E2/E3 active (blocking CI), E4/E5 scaffold #[ignore]
+- DELTA vs foundry-consumer-parity-v1.md documented in Section 8
+
+## Status: COMPLETE — .claude/specs/sprint-6-conformance-test.md written (26,467 bytes)

.claude/board/sprint-log-5-6/agents/agent-W2.md

@@ -0,0 +1,27 @@
+# agent-W2 — sprint-log-5-6 scratchpad (append-only)
+
+## 2026-05-13 — W2 session
+
+**Role:** S5-W8 — JsonlAuditSink + CompositeSink + `verify` CLI spec
+**Output:** `.claude/specs/pr-d3b-jsonl-and-verify.md` (27,409 bytes)
+
+**Substrate read order:**
+1. `.claude/plans/` listing: 32 plan files confirmed
+2. LATEST_STATE.md: PR #364 merged 2026-05-13; D-SDR-4: 26-byte canonical_bytes, AuditMerkleRoot=FNV-1a u64, OwlIdentity 3-byte [family, slot_lo, slot_hi] locked
+3. PR_ARC_INVENTORY.md: OwlIdentity wire form = 3 bytes, no compat shim, OgitFamilyTable sparse
+4. td-sdr-audit-persist.md: sprint-4 W8 foundational sketch — the prior art this spec refines
+5. unified_audit.rs: canonical_bytes() -> [u8; 26], verify_chain(), AuditChain::advance(), GENESIS=0xa5a5_a5a5_a5a5_a5a5
+6. unified_bridge.rs: UnifiedAuditSink trait, emit() hot-path
+7. anatomy-realtime-v1.md §step-8: audit trail in proof-of-vision demo
+
+**Key finding:** td-sdr-audit-persist.md established the design. PR-D3B refines it:
+- owl_identity: lowercase 6-char hex (§1.5 of spec)
+- u64 JSON fields: decimal strings (OQ-4 documented as still open)
+- verify: three subcommands (verify-jsonl / verify-lance / cross-verify)
+- prev_merkle: sequential fallback + advance() change specified (§5.3)
+- exit codes: 0/1/2/3 (exit 3 for cross-verify set divergence)
+- backpressure: per-sink 4096-event buffer, BestEffort isolation
+
+**Plans cited:** td-sdr-audit-persist.md, super-domain-rbac-tenancy-v1.md, anatomy-realtime-v1.md
+**Open question:** OQ-4 — decimal vs hex for u64 JSONL fields; confirm with first consuming pipeline before D-SDR-4b on-disk lock-in
+**Orchestration log:** appended to AGENT_ORCHESTRATION_LOG.md

.claude/board/sprint-log-5-6/agents/agent-W3.md

@@ -0,0 +1,37 @@
+# agent-W3.md — sprint-log-5-6 W3 scratchpad
+
+**Sprint:** sprint-log-5-6 | **Worker:** W3 | **Date:** 2026-05-13
+**Deliverable:** .claude/specs/pr-d4-family-hydration.md
+
+## Read-order completed
+
+1. ls .claude/plans/ | head -40 — confirmed super-domain-rbac-tenancy-v1.md present
+2. .claude/board/LATEST_STATE.md — confirmed PR #364 merged; FAMILY_TO_SUPER_DOMAIN deferred
+3. .claude/board/PR_ARC_INVENTORY.md #364 entry — locked: table is vestigial fallback; hydration deferred
+4. super-domain-rbac-tenancy-v1.md §3.4 + §3.3 + §6 + §8 D-SDR-4 + §9.1 read
+5. crates/lance-graph-callcenter/src/super_domain.rs — confirmed static [Unknown; 256], never written
+6. crates/lance-graph-callcenter/src/family_table.rs — OgitFamilyTable: sparse HashMap<u16, FamilyEntry> (post P1)
+7. crates/lance-graph-ontology/src/registry.rs — hydrate_once_sync, OnceLock<LazyLock<NamespaceRegistry>>, RwLock pattern
+
+## Key findings
+
+- FAMILY_TO_SUPER_DOMAIN is a compile-time static [Unknown; 256], never mutated. super_domain_for_family() returns Unknown always.
+- AuditChain.super_domain() (the P2 fix) reads a struct field, not the table. Hot path is safe; fallback is broken.
+- OntologyRegistry uses RwLock<RegistryState> + OnceLock<LazyLock<NamespaceRegistry>> precedent.
+- parse_ttl_directory_with_provenance() exists and is battle-tested. Avoids TOML dependency.
+- td-sdr-family-hydration.md (sprint-4 stub) proposed TOML; this spec overrides with TTL reuse.
+- lance-graph-callcenter already depends on lance-graph-ontology (family_table.rs:51 re-export of SchemaKind).
+
+## Decisions made in spec
+
+- TTL not TOML for format (reuses existing ingest machinery, zero new deps)
+- OnceLock<Arc<RwLock<FamilyTableInner>>> storage (consistent snapshots, no unsafe)
+- Hot reload opt-in (None = restart-only default)
+- BestEffort vs RequireMinDomains policy distinction (backward compat for tests)
+- try_resolve() API added; old super_domain_for_family() becomes shim
+- OQ-1: parser extension boundary — recommend option (c) new thin entry point
+
+## Output
+
+.claude/specs/pr-d4-family-hydration.md: 16145 bytes
+

.claude/board/sprint-log-5-6/agents/agent-W4.md

@@ -0,0 +1,23 @@
+# agent-W4 — sprint-log-5-6 scratchpad
+
+> **Worker:** W4 (S5-W11) | **Role:** CI matrix + green-gate spec
+> **Spec output:** `.claude/specs/sprint-5-ci-matrix.md`
+> **Started:** 2026-05-13
+
+## Read-order completed
+
+1. `.github/workflows/` — 6 files: build.yml, jc-proof.yml, release.yml, rust-publish.yml, rust-test.yml, style.yml
+2. `.claude/board/LATEST_STATE.md` — PR #364 details, ndarray#142 VBMI gate
+3. commit a3c753f — ndarray hpc-extras opt-in for blake3 (noted in #364 CI fix row)
+4. `.claude/specs/sprint-6-conformance-test.md` (W12 sibling) — A1-A10 assertions, `--features consumer-conformance` blocking step
+5. ndarray#142 P0 SIGILL on non-VBMI AVX-512 — VBMI gate for `permute_bytes`; Skylake-X / Cascade Lake / Ice Lake-SP unsafe
+
+## Key findings
+
+- Existing matrix: single-OS (ubuntu-24.04), single-toolchain (stable), no macOS/Windows
+- RUSTFLAGS: `-C target-cpu=x86-64-v3` — AVX-512 NOT enabled (safe re: SIGILL)
+- clippy lance-graph advisory; clippy contract gating
+- sprint-6 W10 conformance gate needs `--features consumer-conformance`
+- PR-D3a/b, PR-D4 are sprint-5 follow-ons; PR-E1/E2/E3/F1/G1/G2 are sprint-6 cascade
+
+## Status: DONE

.claude/board/sprint-log-5-6/agents/agent-W5.md

@@ -0,0 +1,28 @@
+## 2026-05-13 — W5 start
+
+**Worker:** W5 — sprint-5 PR dependency graph + sprint-6 handover  
+**Deliverable:** `.claude/specs/sprint-5-pr-graph.md`  
+**Reads completed (mandatory):**
+1. `.claude/plans/sprint-5-through-9-roadmap-v1.md` — 12-worker sprint-5 plan, W5 originally mapped to "PR-D1 slot u16 widen" but this sprint is sprint-log-5-6 where W5 = PR graph (same role as sprint-4 W12)
+2. `.claude/board/LATEST_STATE.md` — confirmed sprint-5 cross-repo landing: #364 + MedCare-rs#112 + smb-office-rs#31 + ndarray#142 all merged 2026-05-13
+3. `.claude/board/PR_ARC_INVENTORY.md` #364 entry — canonical record: D-SDR-3/4/5 + codex P1/P2 + CI fix, all in one compressed substrate PR
+4. `.claude/board/sprint-log-4/sprint-summary.md` — precedent format for this deliverable
+5. `.claude/board/EPIPHANIES.md` top 5 entries (2026-05-13 batch) — duplication-audit finding; substrate-compression vs spec-corpus tradeoff
+
+**Key observations:**
+- Sprint-5 was compressed into a single "substrate PR" (#364) rather than the planned 12-worker wave. The entire W2–W10 planned PRs (PR-A through PR-D5) shipped as one coordinated landing.
+- Adjacent landings: MedCare-rs#112 (PR-B) and smb-office-rs#31 (PR-C) merged same day; ndarray#142 (VBMI gate + Inf clamp) is the cross-repo fix.
+- The original sprint-5 12-worker roster (W1-W12 per roadmap) is THIS sprint's parallel spec-authoring wave (W1-W4 write execution specs; W5=me write PR graph).
+- Codex bot reviews acted as forcing function for surgical P1/P2 fixes pre-merge.
+
+**Proceeding to write deliverable.**
+
+## 2026-05-13 — W5 complete
+
+**Deliverable written:** `.claude/specs/sprint-5-pr-graph.md` (16285 bytes, 313 lines)  
+**Plans cited:** `sprint-5-through-9-roadmap-v1.md`, `sprint-4-pr-graph.md` (precedent format)  
+**Delta vs sprint-4 W12:** Retrospective mode (actual 4-PR landing vs prospective 16-PR plan);
+  added §7b Codex-bot-as-forcing-function; added §1 spec-corpus absorption map; no rollback
+  triggers (PRs already merged); wave table collapsed to 1 wave.  
+**Open question for human:** OQ-3 (hiro-rs/hubspot-rs repo creation) is the sprint-6 Day-0
+  blocker for PR-E4/E5 — decision needed before sprint-6 work begins.

.claude/board/sprint-log-5-6/agents/agent-W6.md

@@ -0,0 +1,8 @@
+## 2026-05-13 — W6 start
+**Worker:** W6 — sprint-6 W2 — PR-E1 MedCare super-domain finalisation spec
+
+Mandatory reads: LATEST_STATE, PR_ARC, super-domain-rbac-tenancy-v1 §14, foundry-roadmap-unified-smb-medcare-v1, MedCare-rs git log.
+
+Key gaps: (1) smb_policy() placeholder in unified_bridge_wiring; (2) FAMILY_TO_SUPER_DOMAIN all Unknown; (3) MedCareStack empty; (4) Ueberweisung RLS blocked on DM-7; (5) OgitFamilyTable Healthcare basins not seeded; (6) AuditEntry MerkleRoot/ClamPath not wired; (7) hard-lock Healthcare<->OSINT not enforced; (8) researcher DP pending; (9) ontology Phase-1 stubs only; (10) BtM dual-control carry-forward.
+
+Status: DONE — spec written at .claude/specs/pr-e1-medcare-super-domain.md

.claude/board/sprint-log-5-6/agents/agent-W7.md

@@ -0,0 +1,25 @@
+## 2026-05-13 — W7 start + complete
+
+**Worker:** W7 — S6-W3 PR-E2 smb-office UnifiedBridge retrofit spec
+**Deliverable:** `.claude/specs/pr-e2-smb-retrofit.md` (~11 KB, 12 sections)
+
+**Reads completed (mandatory order):**
+1. `.claude/plans/` ls — confirmed plan inventory
+2. `.claude/board/LATEST_STATE.md` — sprint-5 cross-repo landing; smb-office-rs#31 = +111 LOC minimal hook
+3. `.claude/board/PR_ARC_INVENTORY.md` #364 — D-SDR-3/4/5 shipped; OwlIdentity 3-byte (u16 slot)
+4. `.claude/plans/super-domain-rbac-tenancy-v1.md` §14 — D-SDR-22 = "smb-office-rs retrofit, zero behavior change"
+5. `.claude/plans/callcenter-membrane-v1.md` — BBB semantics, AuditChain, ExternalMembrane
+6. smb-office-rs git log — 342f601 = PR-C commit
+7. smb-bridge/src tree: unified_bridge_wiring.rs + auth.rs + rls.rs + orchestration.rs + mongo.rs + lance.rs + lib.rs
+8. `.claude/specs/td-sdr-family-hydration.md` — W9 cross-flag; new_hydrated(); TOML seed
+9. `.claude/specs/td-super-domain-subcrates.md` — Phase 2 = smb-bridge retrofit; dependency chain
+
+**Key findings:**
+- PR-C constructor smb_unified_bridge() is never called in production — 1 error-path test only
+- 5 bypass sites identified: MongoConnector, LanceConnector, SmbOrchestrator::route, main.rs, login_flow.rs
+- No UnifiedAuditEvent emitted anywhere in smb-office-rs post-PR-C
+- Super-domain: WorkOrderBilling (Steuerberater) + Networking (WoA); Networking discriminant NOT yet in super_domain.rs (§8.1 blocker)
+- OwlIdentity slot is u16 per P1 fix (3-byte canonical)
+- Batches A+B have no blockers; Batch C blocked on §8.1 + pr-d4-family-hydration
+
+**Status:** COMPLETE — spec written at .claude/specs/pr-e2-smb-retrofit.md