chore: canon-HIGH flip integration — merge main (#68), sync vendors, banner stale docs

Merges origin/main (PR #68: op-canon literals flipped to canon-HIGH) —
clean merge, zero conflicts with this branch's 12 commits. Syncs the
vendor mirrors to the lockstep upstream state: lance-graph-contract @
post-#628 (7 modules changed; ClassidOrder::CanonHigh + compose/
decompose + mint-forward legacy reader live in ogar_codebook; C6
RouteBucketTyped diff re-applied cleanly — still absent upstream) and
ogar-vocab @ post-#147 (class‖APP composition flipped in app.rs; the
mistakenly-added reified person-profiling surface is REMOVED upstream
and now removed here — only upstream's slot-history comment remains
per RESERVE-DON'T-RECLAIM). ogar-class-view re-synced with the
recorded path deviation re-applied.

Full workspace green post-merge+sync (op-canon's gated flip now
compiles against the flipped vocab). Sweep: nexgen src literals all
canon-HIGH; the 2026-06-30 convergence handover carried PRE-FLIP
examples inline including a work-recipe — bannered as historical with
pointer to the flip doc so stale bit-math can't be copied.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PBTGaPCSnnt6u3pjXpbLwY

Author: claude

.claude/handovers/2026-06-30-1200-op-redmine-ogar-convergence-assessment.md

@@ -1,4 +1,12 @@
 # Handover — OP + Redmine → OGAR convergence (assessment + increment plan)
+> **⚠ HISTORICAL CLASSID ORDER.** Every u32 classid example in this document
+> uses the PRE-FLIP order (`APP prefix HIGH / canon LOW`, e.g.
+> `0x0001_0102`). As of 2026-07-02 the canonical order is **canon HIGH /
+> prefix LOW** (`0x0102_0001`) — see
+> `2026-07-02-classid-canon-high-flip.md` and
+> `lance_graph_contract::ogar_codebook::ClassidOrder::CanonHigh`. Flip any
+> literal you copy from here, including the §"next step" test expectations.
+
 
 > 2026-06-30. Captures a grounded 6-agent assessment (1.04M tokens) of
 > converging OpenProject + Redmine onto the OGAR transpile / ClassView

vendor/AdaWorldAPI-OGAR/crates/ogar-class-view/src/lib.rs

@@ -64,21 +64,74 @@ use lance_graph_contract::{
     ontology::{DisplayTemplate, FieldRef, ObjectView},
 };
 use ogar_vocab::{
+    Class,
+    accounting_account,
     // 0x0CXX — automation (HIRO MARS CMDB + DO-arm actuators)
-    action_applicability, Class,
-    accounting_account, action_handler, anatomical_structure, auth_ory_keto, auth_store,
-    auth_zanzibar, auth_zitadel, automation_trigger, billable_work_entry, billing_party, bone,
-    canonical_concept_id, commercial_document, commercial_line_item, currency_policy, diagnosis,
-    hr_department, hr_employee, hr_employment_contract, hr_job, joint, knowledge_item, lab_value,
-    mars_application, mars_machine, mars_node_template, mars_resource, mars_software, medication,
-    osint_person, osint_system, patient, payment_record, pricelist, pricelist_rule, priority,
-    product, project, project_actor,
-    project_attachment, project_changeset, project_comment, project_custom_field,
-    project_custom_value, project_enabled_module, project_forum, project_journal,
-    project_member_role, project_membership, project_message, project_news, project_query,
-    project_relation, project_repository, project_role, project_status, project_type,
-    project_version, project_watcher, project_wiki_page, project_work_item, skeleton, tax_policy,
-    treatment, unit_of_measure, visit, vital_sign,
+    action_applicability,
+    action_handler,
+    anatomical_structure,
+    auth_ory_keto,
+    auth_store,
+    auth_zanzibar,
+    auth_zitadel,
+    automation_trigger,
+    billable_work_entry,
+    billing_party,
+    bone,
+    canonical_concept_id,
+    commercial_document,
+    commercial_line_item,
+    currency_policy,
+    diagnosis,
+    hr_department,
+    hr_employee,
+    hr_employment_contract,
+    hr_job,
+    joint,
+    knowledge_item,
+    lab_value,
+    mars_application,
+    mars_machine,
+    mars_node_template,
+    mars_resource,
+    mars_software,
+    medication,
+    patient,
+    payment_record,
+    pricelist,
+    pricelist_rule,
+    priority,
+    product,
+    project,
+    project_actor,
+    project_attachment,
+    project_changeset,
+    project_comment,
+    project_custom_field,
+    project_custom_value,
+    project_enabled_module,
+    project_forum,
+    project_journal,
+    project_member_role,
+    project_membership,
+    project_message,
+    project_news,
+    project_query,
+    project_relation,
+    project_repository,
+    project_role,
+    project_status,
+    project_type,
+    project_version,
+    project_watcher,
+    project_wiki_page,
+    project_work_item,
+    skeleton,
+    tax_policy,
+    treatment,
+    unit_of_measure,
+    visit,
+    vital_sign,
 };
 
 /// All promoted canonical concepts: `(canonical_concept_name, Class)`.
@@ -128,9 +181,6 @@ fn all_canonical_classes() -> Vec<(&'static str, Class)> {
         ("pricelist", pricelist()),
         ("pricelist_rule", pricelist_rule()),
         ("unit_of_measure", unit_of_measure()),
-        // ── 0x07XX — OSINT (AIRO/AIwar dual-use intelligence) ──
-        ("osint_system", osint_system()),
-        ("osint_person", osint_person()),
         // ── 0x09XX — health (OGIT Healthcare) ──
         ("patient", patient()),
         ("diagnosis", diagnosis()),

vendor/AdaWorldAPI-OGAR/crates/ogar-vocab/src/app.rs

@@ -1,65 +1,76 @@
-//! **APP‖class composition** — the high-u16 render-prefix machinery
+//! **class‖APP composition** — the render-prefix machinery
 //! (`docs/APP-CLASS-CODEBOOK-LAYOUT.md` §0, §4).
 //!
-//! A full 32-bit `classid` is two orthogonal halves:
+//! A full 32-bit `classid` is two orthogonal halves. Since the 2026-07-02
+//! canon:custom half-order flip (lance-graph
+//! `classid-canon-custom-flip-v1.md` P1/P2 — the operator's `0x07:01::1000`
+//! ruling), the CANON concept sits HIGH and the APP/render prefix LOW:
 //!
 //! ```text
-//! classid : u32  =  [ hi u16 : APP / render prefix ]  [ lo u16 : concept ]
-//!                     0xAAAA (per-app ClassView lens)    0xDDCC (shared RBAC+ontology)
+//! classid : u32  =  [ hi u16 : CANON concept ]  [ lo u16 : APP / render prefix ]
+//!                     0xDDCC (shared RBAC+ontology)  0xAAAA (per-app ClassView lens)
 //! ```
 //!
 //! The per-port reserved prefix is [`PortSpec::APP_PREFIX`] (the §2 allocation
-//! table as typed data); this module composes and decomposes the full id so
-//! consumers re-export ONE source of the bit math instead of each
-//! re-implementing `(prefix << 16) | concept`. `0x0000` is the shared
-//! canonical core (every existing id is `0x0000_DDCC` — additive, invariant
-//! I-APP1).
+//! table as typed data; the prefix VALUES are order-invariant); this module
+//! composes and decomposes the full id so consumers re-export ONE source of
+//! the bit math instead of each re-implementing
+//! `((concept as u32) << 16) | prefix`. `0x0000` is the shared canonical core
+//! (every existing id renders under the core lens as `0xDDCC_0000` —
+//! additive, invariant I-APP1). Pre-flip stored ids (`0x0000_DDCC` /
+//! `0xAAAA_DDCC`) are the LEGACY order — readers of persisted data resolve
+//! them through concrete legacy-alias registry keys, never by
+//! reinterpreting the halves (mint-forward).
 //!
-//! Composing the high half is **reserving/stamping**, not minting a class_id
-//! (§2: "reserving costs nothing") — concept (low-u16) mints stay gated on the
-//! 5+3 codebook pass. The low half is the cross-app currency: concept/domain
-//! routing reads it alone (`lance_graph_contract::classid_concept_domain`
-//! does `… as u16`), so it is identical under every render prefix.
+//! Composing the prefix half is **reserving/stamping**, not minting a class_id
+//! (§2: "reserving costs nothing") — concept mints stay gated on the
+//! 5+3 codebook pass. The concept half is the cross-app currency:
+//! concept/domain routing reads it alone (`lance_graph_contract::
+//! classid_concept_domain` routes the canon half), so it is identical under
+//! every render prefix.
 
 use crate::ports::PortSpec;
 
-/// Compose a full render `classid` from an app `prefix` (high u16) and a
-/// canonical `concept` id (low u16): `(prefix << 16) | concept`.
+/// Compose a full render `classid` from an app `prefix` (CUSTOM half, low
+/// u16) and a canonical `concept` id (CANON half, high u16):
+/// `((concept as u32) << 16) | prefix`.
 ///
-/// `render_classid(0x0001, 0x0102)` → `0x0001_0102` (OpenProject's
+/// `render_classid(0x0001, 0x0102)` → `0x0102_0001` (OpenProject's
 /// `project_work_item`); the Redmine twin `render_classid(0x0007, 0x0102)` →
-/// `0x0007_0102` — same concept, different render lens.
+/// `0x0102_0007` — same concept, different render lens.
 #[must_use]
 pub const fn render_classid(prefix: u16, concept: u16) -> u32 {
-    ((prefix as u32) << 16) | (concept as u32)
+    ((concept as u32) << 16) | (prefix as u32)
 }
 
 /// Compose a render `classid` for a specific port, reading its reserved
 /// [`PortSpec::APP_PREFIX`]: `render_classid_for::<OpenProjectPort>(concept)`
-/// → `0x0001_DDCC`. This is the helper consumers call so the prefix and the
+/// → `0xDDCC_0001`. This is the helper consumers call so the prefix and the
 /// bit math both come from OGAR (one source of truth), not a local literal.
 #[must_use]
 pub fn render_classid_for<P: PortSpec>(concept: u16) -> u32 {
     render_classid(P::APP_PREFIX, concept)
 }
 
-/// The APP / render prefix — the **high u16** of a full `classid`. `0x0000`
-/// ([the shared core]) is the abstract/default-`ClassView` anchor; a non-zero
-/// value selects an app's render lens. This is the §4 `resolve_codebook`
-/// routing key (`classid >> 16`).
+/// The APP / render prefix — the CUSTOM half (**low u16** since the flip) of
+/// a full `classid`. `0x0000` ([the shared core]) is the
+/// abstract/default-`ClassView` anchor; a non-zero value selects an app's
+/// render lens. This is the §4 `resolve_codebook` routing key
+/// (`classid as u16`).
 ///
 /// [the shared core]: PortSpec::APP_PREFIX
 #[must_use]
 pub const fn app_of(classid: u32) -> u16 {
-    (classid >> 16) as u16
+    classid as u16
 }
 
-/// The canonical concept id — the **low u16** of a full `classid`. The shared
-/// RBAC + ontology + cross-app identity key; concept/domain routing reads only
-/// this half, so it is identical for every render prefix.
+/// The canonical concept id — the CANON half (**high u16** since the flip) of
+/// a full `classid`. The shared RBAC + ontology + cross-app identity key;
+/// concept/domain routing reads only this half, so it is identical for every
+/// render prefix.
 #[must_use]
 pub const fn concept_of(classid: u32) -> u16 {
-    classid as u16
+    (classid >> 16) as u16
 }
 
 #[cfg(test)]
@@ -70,9 +81,10 @@ mod tests {
 
     #[test]
     fn render_classid_composes_the_two_halves() {
-        assert_eq!(render_classid(0x0001, 0x0102), 0x0001_0102);
-        assert_eq!(render_classid(0x0007, 0x0102), 0x0007_0102);
-        assert_eq!(render_classid(0x0002, 0x0202), 0x0002_0202);
+        // Canon-high order (2026-07-02 flip): concept HIGH, prefix LOW.
+        assert_eq!(render_classid(0x0001, 0x0102), 0x0102_0001);
+        assert_eq!(render_classid(0x0007, 0x0102), 0x0102_0007);
+        assert_eq!(render_classid(0x0002, 0x0202), 0x0202_0002);
     }
 
     #[test]
@@ -81,22 +93,22 @@ mod tests {
         // under different prefixes — "two renders, one concept" (§1).
         assert_eq!(
             render_classid_for::<OpenProjectPort>(class_ids::PROJECT_WORK_ITEM),
-            0x0001_0102,
+            0x0102_0001,
         );
         assert_eq!(
             render_classid_for::<RedminePort>(class_ids::PROJECT_WORK_ITEM),
-            0x0007_0102,
+            0x0102_0007,
         );
         assert_eq!(
             render_classid_for::<OdooPort>(class_ids::COMMERCIAL_DOCUMENT),
-            0x0002_0202,
+            0x0202_0002,
         );
     }
 
     #[test]
     fn app_of_and_concept_of_decompose() {
         let cid = render_classid(0x0005, class_ids::PATIENT); // Medcare patient
-        assert_eq!(cid, 0x0005_0901);
+        assert_eq!(cid, 0x0901_0005);
         assert_eq!(app_of(cid), 0x0005);
         assert_eq!(concept_of(cid), class_ids::PATIENT);
     }
@@ -119,18 +131,19 @@ mod tests {
 
     #[test]
     fn core_prefix_is_additive_and_bit_identical() {
-        // I-APP1/I-APP5: a core (hi=0x0000) classid equals the bare concept
-        // widened to u32 — no renumber, no version cost.
+        // I-APP1/I-APP5 (post-flip form): a core (prefix=0x0000) classid is
+        // the bare concept in the CANON (high) half — no renumber, no version
+        // cost; `concept_of` recovers it exactly.
         let core = render_classid(0x0000, class_ids::PROJECT_WORK_ITEM);
-        assert_eq!(core, 0x0000_0102);
-        assert_eq!(core, u32::from(class_ids::PROJECT_WORK_ITEM));
+        assert_eq!(core, 0x0102_0000);
+        assert_eq!(core, u32::from(class_ids::PROJECT_WORK_ITEM) << 16);
         assert_eq!(app_of(core), 0x0000);
         assert_eq!(concept_of(core), class_ids::PROJECT_WORK_ITEM);
     }
 
     #[test]
     fn render_prefix_never_changes_the_concept_half() {
-        // The high half is the render lens; it must not perturb the low-half
+        // The prefix half is the render lens; it must not perturb the CANON
         // concept that RBAC + ontology key on.
         let op = render_classid_for::<OpenProjectPort>(class_ids::BILLABLE_WORK_ENTRY);
         let rm = render_classid_for::<RedminePort>(class_ids::BILLABLE_WORK_ENTRY);