• Every model call now goes through one router with one provider-profile authority and leaves a receipt naming what it was for, who served it and what it cost; the operator surface lists them.
  • Local conversation is the pinned Qwen 3.5 9B on 16 GB and 24 GB Macs, with an explicit 4B fallback, resumable atomic downloads and recorded activation and rollback; an install on the earlier default is moved with its consent preserved.
  • A Console answer grounded in your notes is verified against the exact text it cites before it is shown, and the brief, close-out, citations and the connections the Oracle draws are traceable to the notes it read.
  • The morning brief and evening close-out fire from your own wake and sleep times, the check-in admits you once a day, and a schedule the Oracle slept through is re-derived for today rather than fired with a date that is gone.
  • A model process that dies mid-read pauses the note and resumes it, a held knowledge corpus retries itself, and a failed runtime install is durable, named and repaired once at the next start; these are the failure modes found on the cohort's own machines during the first unattended weeks.
  • Fourteen forward-only migrations take the schema from 64 to 78 after a full backup; the upgrade was rehearsed on a seeded schema-64 root and on a copy of a cohort Mac's own Oracle with no accumulated row lost, and the re-index that follows finishes in about an hour instead of stalling for hours.
  • The Oracle installs its own pinned ChatGPT runtime at start, and one ChatGPT sign-in on a Mac serves the personal Oracle and every inner and outer mind on it; the cloud API keys stay with the personal Oracle.
  • The morning reconcile refuses to draft a filing paradigm until a real category exists, never moves a note across the line between what you wrote and what you collected, keeps its own templates and check-ins in place, and carries a renamed note's vectors instead of re-reading the corpus.
  • When the independent verifier cannot be admitted, the Console shows the author's own answer labeled not independently verified instead of refusing it.
  • Settings names the model that is actually serving after the upgrade, a deferred nightly heartbeat retries the same day so emergent domains appear the first day they qualify, creating an inner mind returns to the page you started on, and the Library graph fills its frame without scrolling the page.