feat: 18 cartridges with real invoke handlers, feedback-o-tron (18th)

- Register all 18 cartridges in V adapter catalogue (was 4 stubs)
- Add real invoke handlers for all 18 — no more state-machine-only stubs
- Add feedback-mcp as 18th cartridge: full ABI (Idris2 state machine),
  FFI (Zig with 5 tests), adapter (V), and shared lib (.so)
- Add Feedback domain (=14) across all 3 layers (Idris2, Zig, V)
- Update Containerfile, Justfile, and contractiles for 18 cartridges
- Zola SSG builds tested end-to-end through ssg-mcp invoke

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: hyperpolymath

.machine_readable/contractiles/dust/Dustfile

@@ -19,7 +19,23 @@ recovery:
     - name: cartridge-abi-rollback
       path: "cartridges/*/abi/**/*.idr"
       rollback: "git checkout HEAD~1 -- cartridges/"
-      notes: "Rollback all cartridge ABIs. Requires re-typecheck."
+      notes: "Rollback all 18 cartridge ABIs. Requires re-typecheck."
+
+    - name: cartridge-ffi-rollback
+      path: "cartridges/*/ffi/**/*.zig"
+      rollback: "git checkout HEAD~1 -- cartridges/"
+      notes: "Rollback all 18 cartridge FFI layers. Requires zig build test."
+
+    - name: single-cartridge-rollback
+      event: "cartridge.{name}.failure"
+      undo: "git checkout HEAD~1 -- cartridges/{name}-mcp/ && cd cartridges/{name}-mcp/ffi && zig build"
+      notes: "Rollback a single cartridge (ABI+FFI) and rebuild its .so."
+
+  adapter:
+    - name: v-adapter-rollback
+      path: "adapter/v/src/main.v"
+      rollback: "git checkout HEAD~1 -- adapter/v/src/main.v"
+      notes: "Rollback V-lang adapter. Rebuild with just build-adapter."
 
   federation:
     - name: node-deregister
@@ -32,6 +48,11 @@ recovery:
       undo: "Reset gossip state to last known-good snapshot."
       notes: "If gossip data is corrupted, fall back to seed node registry."
 
+    - name: federation-transport-fallback
+      event: "umoja.quic.failure"
+      undo: "Fall back to UDP transport for gossip."
+      notes: "QUIC transport failure triggers automatic UDP fallback."
+
   menu:
     - name: menu-regenerate
       path: .machine_readable/servers/menu.a2ml
@@ -43,3 +64,8 @@ recovery:
       source: ffi/zig/
       transform: "just clean && just build && just test"
       notes: "Full FFI rebuild and test cycle after any Zig source change."
+
+    - name: shared-libs-rebuild
+      event: "cartridge.so.missing"
+      transform: "for c in cartridges/*/ffi; do (cd $c && zig build); done"
+      notes: "Rebuild all 18 cartridge .so files."

.machine_readable/contractiles/lust/Intentfile

@@ -4,35 +4,47 @@
 version: 1
 
 future:
-  matrix-fill:
-    - "Fill remaining MCP column: Cloud, Container, K8s, Git, Secrets, Queues, IaC, Observe, SSG, Proof."
-    - "Begin LSP column for key capability domains."
-    - "Evaluate DAP column where debugging adapters make sense."
+  grade-progression:
+    - "Grade D→C: Dogfood all 18 cartridges from PanLL + local workflows."
+    - "Grade C→B: External user testing, documentation, stable API contract."
+    - "Grade B→A: Production hardening, SLA, monitoring, community cartridge submissions."
 
   umoja-federation:
-    - "Implement gossip protocol for community node discovery (IPv6-only)."
-    - "Hash attestation for binary verification of community-hosted nodes."
+    - "QUIC-first transport: replace cleartext UDP with QUIC, UDP as fallback only."
     - "Deploy 4 family seed nodes across 4 continents (UK, Central Europe, Australia, Americas)."
     - "Load-aware routing: route orders to healthiest available node."
+    - "Multi-node federation testing on Verpex VPS."
 
-  v-lang-adapter:
-    - "Triple API adapter: REST (9000) + gRPC (9001) + GraphQL (9002)."
-    - "Read order-ticket.scm, mount selected cartridges, return endpoints."
-    - "Status endpoint returns live matrix state."
+  cartridge-dogfooding:
+    - "database-mcp: VeriSimDB queries from PanLL and local workflows."
+    - "ssg-mcp: Zola/ddraig builds through cartridge mount."
+    - "container-mcp: Stapeln integration for container lifecycle."
+    - "observe-mcp: feedback-o-tron integration for observability and feedback."
+    - "secrets-mcp: Credential management for community nodes."
+    - "proof-mcp: proven-server VAE and proof verification."
+    - "git-mcp: gitbot-fleet operations through cartridge dispatch."
+
+  coprocessor-support:
+    - "Axiom.jl-style coprocessor dispatch: GPU (CUDA/ROCm), TPU, FPGA offload."
+    - "Cartridge-level coprocessor declaration in ABI (which accelerators a cartridge can use)."
+    - "Resource-aware scheduling via Guardian module."
 
   security:
     - "Auto-SDP (Software Defined Perimeter) for community nodes."
     - "DoQ/DoH for encrypted DNS resolution on Umoja network."
     - "oDNS research: distributed Oblivious DNS as a network service."
     - "Container hash state monitoring via vordr integration."
+    - "Podman removable+secure instance for community node operators."
 
   panll-integration:
     - "BoJ panel in PanLL showing live capability matrix."
     - "Menu browser and order placement from PanLL."
     - "A2ML integration: PanLL reads BoJ menu.a2ml for capability discovery."
+    - "Route LSP/DAP/BSP/database/agent panels through bojRouting toggle."
 
   community:
     - "Community cartridge submission process (Ayo menu tier)."
     - "Hosting documentation for community node operators."
     - "IndieWeb integration: Webmention, self-hosted node discovery."
     - "PMPL license as network license for provenance chain verification."
+    - "feedback-o-tron cartridge (18th) — DONE: full ABI+FFI+Adapter+.so, sentiment tracking."

.machine_readable/contractiles/must/Mustfile

@@ -10,7 +10,7 @@ metadata:
   description: "Invariant checks for BoJ capability catalogue, cartridges, and formal proofs."
 
 parameters:
-  gateway_port: "9000"
+  gateway_port: "7700"
   abi_dir: "src/abi"
   ffi_dir: "ffi/zig"
 
@@ -31,29 +31,42 @@ checks:
     description: "Core FFI tests must pass."
     run: "cd ffi/zig && zig build test"
 
-  - name: cartridge-fleet-abi
-    description: "Fleet-MCP ABI must type-check."
-    run: "cd cartridges/fleet-mcp/abi && idris2 --check fleet-mcp.ipkg"
-
-  - name: cartridge-nesy-abi
-    description: "NeSy-MCP ABI must type-check."
-    run: "cd cartridges/nesy-mcp/abi && idris2 --check nesy-mcp.ipkg"
-
-  - name: cartridge-database-abi
-    description: "Database-MCP ABI must type-check."
-    run: "cd cartridges/database-mcp/abi && idris2 --check database-mcp.ipkg"
-
-  - name: cartridge-agent-abi
-    description: "Agent-MCP ABI must type-check."
-    run: "cd cartridges/agent-mcp/abi && idris2 --check agent-mcp.ipkg"
+  - name: cartridge-abi-all
+    description: "All 18 cartridge ABIs must type-check."
+    run: |
+      for cart in database fleet nesy agent cloud container k8s git secrets queues iac observe ssg proof lsp dap bsp feedback; do
+        dir="cartridges/${cart}-mcp/abi"
+        if [ -d "$dir" ]; then
+          echo "Checking ${cart}-mcp ABI..."
+          (cd "$dir" && idris2 --check ${cart}-mcp.ipkg) || exit 1
+        fi
+      done
 
   - name: cartridge-ffi-tests
-    description: "All cartridge FFI tests must pass."
+    description: "All 18 cartridge FFI tests must pass."
     run: |
-      cd cartridges/fleet-mcp/ffi && zig build test &&
-      cd ../../nesy-mcp/ffi && zig build test &&
-      cd ../../database-mcp/ffi && zig build test &&
-      cd ../../agent-mcp/ffi && zig build test
+      for cart in database fleet nesy agent cloud container k8s git secrets queues iac observe ssg proof lsp dap bsp feedback; do
+        dir="cartridges/${cart}-mcp/ffi"
+        if [ -d "$dir" ] && [ -f "$dir/build.zig" ]; then
+          echo "Testing ${cart}-mcp FFI..."
+          (cd "$dir" && zig build test) || exit 1
+        fi
+      done
+
+  - name: cartridge-shared-libs
+    description: "All 18 cartridge .so files must exist."
+    run: |
+      for cart in database fleet nesy agent cloud container k8s git secrets queues iac observe ssg proof lsp dap bsp feedback; do
+        so="cartridges/${cart}-mcp/ffi/zig-out/lib/lib${cart}_mcp.so"
+        if [ ! -f "$so" ]; then
+          echo "Missing: $so"
+          exit 1
+        fi
+      done
+
+  - name: adapter-builds
+    description: "V-lang triple adapter must compile."
+    run: "v -check adapter/v/src/main.v"
 
   - name: spdx-headers
     description: "All source files must have PMPL-1.0-or-later SPDX headers."

Justfile

@@ -267,6 +267,7 @@ build *args:
     cd cartridges/nesy-mcp/ffi && zig build {{args}}
     cd cartridges/database-mcp/ffi && zig build {{args}}
     cd cartridges/agent-mcp/ffi && zig build {{args}}
+    cd cartridges/feedback-mcp/ffi && zig build {{args}}
     @echo "Build complete"
 
 # Build in release mode with optimizations
@@ -305,6 +306,8 @@ test *args:
     cd cartridges/database-mcp/ffi && zig build test
     @echo "Running agent-mcp FFI tests..."
     cd cartridges/agent-mcp/ffi && zig build test
+    @echo "Running feedback-mcp FFI tests..."
+    cd cartridges/feedback-mcp/ffi && zig build test
     @echo "All tests passed!"
 
 # Run tests with verbose output
@@ -314,6 +317,7 @@ test-verbose:
     cd cartridges/nesy-mcp/ffi && zig build test -- --verbose
     cd cartridges/database-mcp/ffi && zig build test -- --verbose
     cd cartridges/agent-mcp/ffi && zig build test -- --verbose
+    cd cartridges/feedback-mcp/ffi && zig build test -- --verbose
 
 # Smoke test — type-check core ABI + run one FFI test
 test-smoke:
@@ -377,6 +381,7 @@ typecheck:
     cd cartridges/nesy-mcp/abi && idris2 --check nesy-mcp.ipkg
     cd cartridges/database-mcp/abi && idris2 --check database-mcp.ipkg
     cd cartridges/agent-mcp/abi && idris2 --check agent-mcp.ipkg
+    cd cartridges/feedback-mcp/abi && idris2 --check feedback-mcp.ipkg
     @echo "All ABI files type-check!"
 
 # Verify zero believe_me in all Idris2 sources
@@ -423,20 +428,65 @@ matrix:
 # RUN & EXECUTE
 # ═══════════════════════════════════════════════════════════════════════════════
 
-# Run the BoJ server (Phase 3 — V-lang adapter required)
+# Run the BoJ server (V-lang triple adapter: REST 7700, gRPC 7701, GraphQL 7702)
 run *args: build
-    @echo "BoJ server requires V-lang adapter (Phase 3)"
-    @echo "Current status: ABI + FFI layers complete"
-    @echo "Run 'just matrix' to see cartridge status"
+    #!/usr/bin/env bash
+    set -euo pipefail
+    ADAPTER="adapter/v/boj-server"
+    if [ ! -f "$ADAPTER" ]; then
+        echo "Building V-lang adapter..."
+        v -cc gcc -cflags "-L$(pwd)/ffi/zig/zig-out/lib -Wl,--allow-multiple-definition" \
+            -o "$ADAPTER" adapter/v/src/main.v
+    fi
+    echo "Starting BoJ Server..."
+    exec "$ADAPTER" {{args}}
 
 # Run with verbose output
 run-verbose *args: build
-    just run {{args}}
+    BOJ_VERBOSE=1 just run {{args}}
+
+# Build V-lang adapter binary
+build-adapter: build
+    #!/usr/bin/env bash
+    set -euo pipefail
+    echo "Building V-lang adapter..."
+    v -cc gcc -cflags "-L$(pwd)/ffi/zig/zig-out/lib -Wl,--allow-multiple-definition" \
+        -o adapter/v/boj-server adapter/v/src/main.v
+    echo "Built: adapter/v/boj-server ($(du -h adapter/v/boj-server | cut -f1))"
 
 # Install to user path
-install: build-release
+install: build-adapter
     @echo "Installing boj-server..."
-    @echo "Phase 3 required for installable binary"
+    cp adapter/v/boj-server ~/.local/bin/boj-server
+    @echo "Installed to ~/.local/bin/boj-server"
+
+# Start Cloudflare quick tunnel (exposes BoJ at *.trycloudflare.com)
+tunnel:
+    @echo "Starting Cloudflare Quick Tunnel → *.trycloudflare.com"
+    @echo "Watch output for the assigned URL."
+    cloudflared tunnel --no-autoupdate --no-tls-verify --url http://localhost:7700
+
+# Run BoJ server + Cloudflare Tunnel together
+serve: build
+    #!/usr/bin/env bash
+    set -euo pipefail
+    ADAPTER="adapter/v/boj-server"
+    if [ ! -f "$ADAPTER" ]; then
+        echo "Building V-lang adapter..."
+        v -cc gcc -cflags "-L$(pwd)/ffi/zig/zig-out/lib -Wl,--allow-multiple-definition" \
+            -o "$ADAPTER" adapter/v/src/main.v
+    fi
+    echo "Starting BoJ Server..."
+    echo "  Local: http://localhost:7700/status"
+    LD_LIBRARY_PATH="$(pwd)/ffi/zig/zig-out/lib" "$ADAPTER" &
+    BOJ_PID=$!
+    trap "kill $BOJ_PID 2>/dev/null; kill $TUNNEL_PID 2>/dev/null; exit" INT TERM
+    sleep 2
+    echo ""
+    echo "Starting Cloudflare Tunnel (watch for public URL)..."
+    cloudflared tunnel --no-autoupdate --no-tls-verify --url http://localhost:7700 &
+    TUNNEL_PID=$!
+    wait $BOJ_PID $TUNNEL_PID
 
 # ═══════════════════════════════════════════════════════════════════════════════
 # DEPENDENCIES