Claude/resume repos migration 9 o2 u1 (#31)

<!-- SPDX-License-Identifier: PMPL-1.0-or-later -->
## Summary

<!-- Briefly describe what this PR does and why. Link to related issues
with "Closes #N". -->

## Changes

<!-- List the key changes introduced by this PR. -->

-

## RSR Quality Checklist

<!-- Check all that apply. PRs that fail required checks will not be
merged. -->

### Required

- [ ] Tests pass (`just test` or equivalent)
- [ ] Code is formatted (`just fmt` or equivalent)
- [ ] Linter is clean (no new warnings or errors)
- [ ] No banned language patterns (no TypeScript, no npm/bun, no
Go/Python)
- [ ] No `unsafe` blocks without `// SAFETY:` comments
- [ ] No banned functions (`believe_me`, `unsafeCoerce`, `Obj.magic`,
`Admitted`, `sorry`)
- [ ] SPDX license headers present on all new/modified source files
- [ ] No secrets, credentials, or `.env` files included

### As Applicable

- [ ] `.machine_readable/STATE.a2ml` updated (if project state changed)
- [ ] `.machine_readable/ECOSYSTEM.a2ml` updated (if integrations
changed)
- [ ] `.machine_readable/META.a2ml` updated (if architectural decisions
changed)
- [ ] Documentation updated for user-facing changes
- [ ] `TOPOLOGY.md` updated (if architecture changed)
- [ ] `CHANGELOG` or release notes updated
- [ ] New dependencies reviewed for license compatibility
(PMPL-1.0-or-later / MPL-2.0)
- [ ] ABI/FFI changes validated (`src/abi/` and `ffi/zig/` consistent)

## Testing

<!-- Describe how you tested these changes. -->

## Screenshots

<!-- If applicable, add screenshots or terminal output demonstrating the
change. -->

---------

Co-authored-by: Claude <noreply@anthropic.com>

Author: hyperpolymath

cartridges/local-coord-mcp/ffi/local_coord_ffi.zig

@@ -1746,6 +1746,11 @@ pub export fn coord_get_affinities(
 //
 // Suggestion kinds:
 //   - "overclaim": avg_confidence > 0.8 AND effective_affinity < 0.3
+//                  → routing FYI (op_kind=fyi, tier 1)
+//   - "drift":     same condition as overclaim, but framed as a self-
+//                  assessment monitoring flag (DD-9 layer D). Emitted
+//                  alongside overclaim with op_kind=warn, tier 2, and a
+//                  drift_pct field carrying the confidence-vs-affinity gap.
 //   - "promote":   effective_affinity >= 0.7 AND tag not in declared set
 //   - "remove":    effective_affinity <= 0.2 AND attempts >= 5
 //
@@ -1791,6 +1796,20 @@ fn enqueueServerSuggestion(
     return -1;
 }
 
+/// Internal kind→string for engine-side rendering. Mirrors the adapter's
+/// kindName but lives in FFI so server-origin envelopes can name peers
+/// correctly. Updated when ClientKind grows (Task #33 added openai/mistral).
+fn kindStr(k: u8) []const u8 {
+    return switch (k) {
+        0 => "claude",
+        1 => "gemini",
+        2 => "copilot",
+        4 => "openai",
+        5 => "mistral",
+        else => "custom",
+    };
+}
+
 fn affinityPct(attempts: u16, successes: u16) u32 {
     if (attempts == 0) return 0;
     return (@as(u32, successes) * 100) / @as(u32, attempts);
@@ -1874,21 +1893,29 @@ pub export fn coord_scan_suggestions(
         if (agg.attempts == 0) continue;
         const pct = affinityPct(agg.attempts, agg.successes);
         const tag_slice: []const u8 = agg.tag[0..agg.tag_len];
-        const kind_str = switch (agg.client_kind) {
-            0 => "claude",
-            1 => "gemini",
-            2 => "copilot",
-            else => "custom",
-        };
+        const kind_str = kindStr(agg.client_kind);
 
         // Overclaim: high self-confidence + low real affinity.
+        // (Routing suggestion — op_kind=fyi, tier 1.)
         const avg_conf = windowedAvgConfidence(agg.client_kind, tag_slice);
         if (avg_conf != 256 and avg_conf >= OVERCLAIM_CONF_MIN and pct < OVERCLAIM_AFFINITY_MAX) {
             const msg = std.fmt.bufPrint(&msg_buf,
                 "{{\"kind\":\"overclaim\",\"client_kind\":\"{s}\",\"tag\":\"{s}\",\"attempts\":{d},\"successes\":{d},\"effective_affinity_pct\":{d},\"avg_confidence_pct\":{d},\"op_kind\":\"fyi\",\"rationale\":\"high self-confidence with low track-record success — reassignment suggested\"}}",
                 .{ kind_str, tag_slice, agg.attempts, agg.successes, pct, avg_conf },
             ) catch continue;
             if (enqueueServerSuggestion(-1, 1, msg) >= 0) emitted += 1;
+
+            // Drift detector (DD-9 layer D / TODO P1): same condition, but
+            // framed as a self-assessment monitoring flag for the master
+            // to act on at the peer-trust level (op_kind=warn, tier 2).
+            // Carries `drift_pct = avg_conf - effective_affinity` so the
+            // master sees the magnitude of the gap at a glance.
+            const drift_pct: u32 = avg_conf - pct;
+            const drift_msg = std.fmt.bufPrint(&msg_buf,
+                "{{\"kind\":\"drift\",\"client_kind\":\"{s}\",\"tag\":\"{s}\",\"attempts\":{d},\"successes\":{d},\"effective_affinity_pct\":{d},\"avg_confidence_pct\":{d},\"drift_pct\":{d},\"op_kind\":\"warn\",\"rationale\":\"self-assessment drift — confidence consistently outpaces track-record success\"}}",
+                .{ kind_str, tag_slice, agg.attempts, agg.successes, pct, avg_conf, drift_pct },
+            ) catch continue;
+            if (enqueueServerSuggestion(-1, 2, drift_msg) >= 0) emitted += 1;
         }
 
         // Promote: high effective affinity, but tag not in any same-kind peer's declared list.
@@ -3139,23 +3166,62 @@ test "scan flags overclaim: high confidence + low effective_affinity" {
     const n = coord_scan_suggestions(&tok, TOKEN_LEN);
     try std.testing.expect(n >= 1);
 
-    // The quarantine entry should be a server-origin envelope with
-    // "overclaim" in the body.
+    // The quarantine should contain server-origin envelopes for both
+    // overclaim (routing FYI, tier 1) and drift (monitoring warn, tier 2).
     var found_overclaim: bool = false;
     var found_remove: bool = false;
+    var found_drift: bool = false;
+    var drift_tier: u8 = 0;
     for (&quarantine) |*q| {
         if (!q.active) continue;
         try std.testing.expectEqual(SERVER_ORIGIN_SENTINEL, q.sender_idx);
-        if (std.mem.indexOf(u8, q.msg[0..q.msg_len], "overclaim") != null) found_overclaim = true;
-        if (std.mem.indexOf(u8, q.msg[0..q.msg_len], "remove") != null) found_remove = true;
+        if (std.mem.indexOf(u8, q.msg[0..q.msg_len], "\"kind\":\"overclaim\"") != null) found_overclaim = true;
+        if (std.mem.indexOf(u8, q.msg[0..q.msg_len], "\"kind\":\"remove\"") != null) found_remove = true;
+        if (std.mem.indexOf(u8, q.msg[0..q.msg_len], "\"kind\":\"drift\"") != null) {
+            found_drift = true;
+            drift_tier = q.risk_tier;
+            // Drift envelope must carry the gap magnitude.
+            try std.testing.expect(std.mem.indexOf(u8, q.msg[0..q.msg_len], "\"drift_pct\":") != null);
+            try std.testing.expect(std.mem.indexOf(u8, q.msg[0..q.msg_len], "\"op_kind\":\"warn\"") != null);
+        }
     }
     try std.testing.expect(found_overclaim);
+    try std.testing.expect(found_drift);
+    try std.testing.expectEqual(@as(u8, 2), drift_tier);
     // 5 attempts + 20% affinity also fires the remove rule.
     try std.testing.expect(found_remove);
 
     coord_reset();
 }
 
+test "drift uses Task #33 kind names (openai)" {
+    coord_reset();
+    var tok: [TOKEN_LEN]u8 = undefined;
+    var suf: [4]u8 = undefined;
+    _ = coord_register(4, -1, &tok, &suf); // openai
+
+    const tag = "rust-codegen";
+    _ = coord_report_outcome(&tok, TOKEN_LEN, tag.ptr, @intCast(tag.len), 1, 100, 2, 90);
+    for (0..4) |_| {
+        _ = coord_report_outcome(&tok, TOKEN_LEN, tag.ptr, @intCast(tag.len), 0, 100, 2, 90);
+    }
+    _ = coord_scan_suggestions(&tok, TOKEN_LEN);
+
+    var found_openai_drift: bool = false;
+    for (&quarantine) |*q| {
+        if (!q.active) continue;
+        const body = q.msg[0..q.msg_len];
+        if (std.mem.indexOf(u8, body, "\"kind\":\"drift\"") != null and
+            std.mem.indexOf(u8, body, "\"client_kind\":\"openai\"") != null)
+        {
+            found_openai_drift = true;
+        }
+    }
+    try std.testing.expect(found_openai_drift);
+
+    coord_reset();
+}
+
 test "scan flags promote: high affinity on undeclared tag" {
     coord_reset();
     var tok: [TOKEN_LEN]u8 = undefined;

docs/handover/COORD-MCP-STATE.md

@@ -105,7 +105,11 @@ mission drift.
 - Layer A (static affinity, register-time) — **done** (DD-34 landed as Task #34 pending, but declared affinities already accepted).
 - Layer B (per-claim `confidence` + `reasoning`) — **done** (DD-9, Task #15).
 - Layer C (server-computed `effective_affinity` from track record) — **done** (DD-9, Task #13).
-- Layer D (drift detector: confidence ≫ track record → flag) — **pending P1**.
+- Layer D (drift detector: confidence ≫ track record → flag) — **done**.
+  Implemented in `coord_scan_suggestions` as a parallel `kind:"drift"`
+  envelope (op_kind=warn, tier 2, carries `drift_pct = avg_conf − eff_affinity`).
+  Co-emitted with `overclaim` so the master sees a routing FYI **and** a
+  self-assessment monitoring flag from the same condition.
 
 ## Architectural spine — decisions taken
 

docs/handover/COORD-MCP-TODO.md

@@ -27,8 +27,8 @@ Last updated: 2026-04-20.
 - **Warn-drift broadcast on auto-release** via Opus review. (DD-21.)
 - **Quarantine queue spill to VeriSimDB** when full; currently `MAX_QUARANTINE=32` hot cache only. (DD-17.)
 - **Audit-echo anchor** — preserve old chain head on peer crash/restart; new peer = fresh chain. (DD-29.)
-- **Drift detector** — flag `confidence > 0.8 AND effective_affinity < 0.3`. (DD-9 layer D.)
-- **`coord_health` metrics tool** — active peers, pending quarantine, reject rate, claim depth.
+- ~~**Drift detector** — flag `confidence > 0.8 AND effective_affinity < 0.3`. (DD-9 layer D.)~~ — **done**: `coord_scan_suggestions` now emits a parallel `kind:"drift"` envelope (op_kind=warn, tier 2, includes `drift_pct`) alongside the routing-focused `overclaim`.
+- ~~**`coord_health` metrics tool** — active peers, pending quarantine, reject rate, claim depth.~~ — **done**: `coord_health` returns peers (active/by_kind/by_role), quarantine, claims, track-record fill, and per-kind rejects + cooldown flags.
 - **Rejection rate limit hardening** — 5 rejects / 10 min per `client_kind` already lands cooldown; audit whether per-peer is better on heavy multi-session load.
 
 ### 007-mcp + 007-lang