Updated: 2026-10-11 09:30:00 EDT | Version 1.3.0 Created: 2026-06-29 00:00:00 EDT
Before writing or reviewing any ADR, read
../PRINCIPLES.md. An ADR that contradicts a principle is wrong, and the contradiction is the finding.
Each ADR records a decision the 3-way red-team forced, so it can't be quietly regressed.
| ADR | Decision | Kills |
|---|---|---|
| 0001 | Ship a verified zip bundle, not a single embedded .rvf (single-container = deferred spike) |
F9 "one magic file" fiction |
| 0002 | Quality gate of record = ground-truth-against-source + multi-vendor panel, not a captured LLM grader | F5/F8 asserted-not-proven |
| 0003 | Point deeper: KB resolves to exact file:line + neighbors + whole-doc; agent never chooses to dig |
F1 the 15-month skim-and-quit |
| 0004 | Effectiveness first; size is a later pass; f32/multi-vector over SQ8 for v1 | shallow-for-the-sake-of-small |
| 0005 | Retrieve-and-inject grounding (⚠ reconciled 2026-07-06 — hard-deny/Stop/SLO NOT shipped; see the ADR banner + ADR-0009) | F4 drift; enforcement theater |
| 0006 | Segment-per-repo + cross-segment normalization, not one merged HNSW | merge-confusion / false "cheap incremental" |
| 0007 | Tiered scope (T0–T3) by ingest depth; union selection rule | F7 unbounded-scope death |
| 0008 | Autonomous build loop: Ruflo decides · Claude Code acts · brain grounds; SPARC + score-to-≥98 + ADR-0005 hooks + one-command install | the "brain alone is the product" / drift-on-action |
| 0009 | Mirror Discipline: the brain passes its own bar — single version SoT, smoke-gated publish, eval flywheel, ADR-QA/DDD-QA/doc-currency as capabilities, ADR-0005/DDD reconciled to reality | self-drift; the "grounded product that lies about its own version" |
| 0010 | Security hardening (SEC-0010): Dragan's QE review — fail-closed fences, single version SoT, CVSS-9.8 dep cleared, injection-guard recall, unsigned-updater RCE vector closed (signing tracked), CI, secret-leak scrub — each finding's root cause + exact fix + verification | fence-fails-open; unsigned-RCE; CVSS-9.8; secret-leak; the drift class |
| 0088 | Operational evaluation integrity: source-supported retrieval, explicit abstention, immutable independent fixtures, raw receipts | false passes from path-only grading and keyword-only usefulness scores |
The table above calls out the decisions the red-team forced; every other ADR is listed here so
none goes unindexed (single-source-check.mjs B11). Title is the file's own H1 (or its frontmatter
title when the file has no H1); Status is read from frontmatter (or the body's **Status**:
line), first clause only — see each ADR for the full, dated status history.
| ADR | Title | Status |
|---|---|---|
| 0011 | The Verified Quality Program — gates that can fail, before scores that can be believed | Accepted |
| 0012 | Grounding gate on the write path — brain consultation is enforced, not advisory | Accepted |
| 0013 | The Onboarding Console | Accepted |
| 0014 | The One-Ruflo Reconciliation | Proposed |
| 0015 | Per-user self-optimizing model + reasoning-effort router profiles (development & production), configurator-driven | Superseded |
| 0016 | Model-catalog live-verification wall — model/version facts cannot ship from memory | Accepted |
| 0017 | Recursive per-user learning loop — capture how you work, share learnings across projects, isolate facts | Accepted |
| 0018 | Brain Activity panel — the harness, visible, inside the configure console | Implemented |
| 0019 | RuLake — downloaded and kept current, integration deferred (format mismatch + no current payoff) | Accepted |
| 0020 | Anti-fabrication gates — every user-facing number RE-DERIVES, no gate may string-match the thing it guards | Accepted |
| 0021 | One shared hook-input parser — a PreToolUse gate is a parser; write and test the parser ONCE | Accepted |
| 0022 | Architecture-review follow-ups — what was fixed now, and what is deliberately deferred (with reasons) | Accepted |
| 0023 | Intelligent Updating: the Stable Spine | Accepted |
| 0024 | Derived status, never asserted — faking is structurally impossible, enforced by a self-proving gate | Accepted |
| 0025 | Meeting-recall fix — unique-path chunking + transcript-scoped BM25 candidates (global hybrid reverted; scoped hybrid shipped) | Accepted |
| 0026 | Meta LLM Proxy passthrough trial — make MetaHarness genuinely automatic, per-session and reversible | Proposed |
| 0027 | The brain advocates, it does not wait — capability advocacy + the death of passive signals | Proposed |
| 0028 | What "proactive" means — the maturity ladder, and why a page you must visit is not proactivity | Proposed |
| 0029 | Cross-project lesson promotion — a lesson learned twice is a lesson that should be global | Proposed |
| 0030 | Latent knowledge is not knowledge — few gates, many lessons, retrieved at the decision point | Proposed |
| 0031 | The compounding brain — rUv's corpus + the user's working knowledge + accumulated experience, made operative | Proposed |
| 0032 | The capability surface — on, off, and the third answer we keep refusing to give: unknown | Proposed |
| 0033 | Where a lesson comes from — extracting corrections from what the user actually said, at high precision or not at all | Proposed |
| 0034 | A document's status is a claim about code — derive it, stamp it with something you cannot type from memory | Proposed |
| 0035 | Consent and legibility — the nudge is the product, the block is the exception, and the pieces must be nameable | Proposed |
| 0036 | Knowing who uses this — counting installs and versions without becoming a tracker | Proposed |
| 0037 | The wiring gate cannot fail — fixing the predicate, not the allowlist | Proposed |
| 0038 | Corporate-safe posture — verification cannot be downgraded, and captured data cannot carry secrets | Accepted |
| 0039 | Scoped secret delivery — keep the SOPS single source, stop exporting 66 credentials into every process | Accepted |
| 0040 | What the advocacy dial actually governs — chokepoint, or honest per-channel controls | Accepted |
| 0041 | The ground-truth fixture machine — making recall and false-alarm rate falsifiable in-fence | Accepted |
| 0042 | 4.0 stays X.Y.Z-dev until it is verified — the version number is not a marketing lever | Superseded |
| 0043 | The continuation gate re-engages every stop, not once per session — the guard that killed "don't stop" | Proposed |
| 0044 | The Self-implementation benchmark is rUv's graded gate (evolve --bench), never a hand-rolled one | Proposed |
| 0045 | State-based advocacy — the explained offer, not the goal-matched guess | Rejected |
| 0046 | Every rendered claim carries its as-of, and every user action is one transaction | Rejected |
| 0047 | In-session dormancy voice — session-start delivery, a stable ceiling, and no offer without a verified undo | Rejected |
| 0048 | Measuring latency-to-surface, and claiming the right to speak | Accepted |
| 0049 | The console rebuild | Accepted |
| 0050 | The issue pipeline may never manufacture its own acknowledgment | Accepted |
| 0051 | Codex host wiring | Accepted |
| 0052 | 4.0 is the proactivity-you-control release — proven correct and user-dialed, not proven-better-by-field-outcomes | Accepted |
| 0053 | Experience-level QA | Accepted |
| 0054 | Brain on/off and per-part scope | Accepted |
| 0055 | Proactivity that meshes | Accepted |
| 0056 | Pay the debt, then wire the gate | Proposed |
| 0057 | 95 on both graders | Proposed |
| 0058 | The 95 contract | Proposed |
| 0059 | Bounding the cross-encoder pool | Superseded |
| 0060 | The two-stage cross-encoder cascade | Accepted |
| 0061 | Subscription-only dual-host deliberation | Superseded (in part by ADR-105) |
| 0062 | Remote-durable staged release transaction | Accepted |
| 0063 | The managed-memory boundary is enforceable, opt-in, and default-off | Accepted |
| 0064 | The corpus-QA round trip proves the machinery, not the ranking | Accepted |
| 0065 | The payload boundary is the shipping invariant, and it is now a gate | Accepted |
| 0066 | The lesson bridge | Accepted |
| 0067 | One decision, one reason | Accepted |
| 0068 | The Dream Machine runs this repo's nights | Accepted |
| 0069 | Source coverage is artifact-bound, complete, and release-blocking | Accepted |
| 0070 | One release generation across corpus, package, hosts, and retained state | Accepted |
| 0071 | Facts are generated, behaviours are tested | Proposed |
| 0072 | Whole-product integrity is one executable contract | Accepted |
| 0073 | AgentDB is the complete perennial project continuity record | Superseded (in part by ADR-105) |
| 0074 | RuvNet capability claims require live evidence | Accepted |
| 0075 | Knowledge-to-execution enforcement is a mandatory policy boundary | Accepted |
| 0076 | Memory full integration: session recall and decision ledger | Rejected |
| 0077 | Continuity gates: ADR-as-code automation and decision tracking | Rejected |
| 0078 | Release automation: one-command ship with tag-driven deploys | Rejected |
| 0079 | Testing gates and public CI: pre-commit enforcement and visible discipline | Rejected |
| 0080 | Hybrid Model Routing Strategy for 95/100 North Star Campaign (W2–W6) | Rejected |
| 0081 | ADR-as-Code Automation — Pre-Commit Enforcement of Architecture Decisions | Rejected |
| 0082 | North Star 95/100+ Unlock Path — Four ADRs | Rejected |
| 0083 | High-Assurance Model Routing for North Star 95/100 | Rejected |
| 0084 | The three user invariants | Proposed |
| 0085 | The nightly corpus release channel | Accepted |
| 0086 | The corpus-seed pipeline consolidation | Accepted |
| 0089 | Installed search identity health | Accepted |
| 0090 | Additive source-verified capability discovery | Accepted |
| 0092 | ADR-092 — Knowledge is data only — build each store once, ship only what changed, never through a code release | Proposed |
| 0093 | ADR-093 — The proactive package recommender — "what would rUv do" from package cards, behind a flag | Proposed |
| 0098 | The footprint and currency guarantee — one knowledge base, current, in use, nothing building up | Accepted |
| 0099 | Self-learning newcomer retrieval with rUv's own learning tools | Proposed |
| 0100 | Guaranteed AgentDB continuity — material events, durable outbox, come-up-to-speed brief, one writer | Superseded (in part by ADR-105) |
| 0101 | Canonical AgentDB recall before every nontrivial prompt | Superseded (in part by ADR-105) |
| 0102 | ADR-102 — Completion and the closure ledger | Superseded (in part by ADR-105) |
| 0103 | Routing architecture qualification requires a current finite source review | Accepted |
| 0104 | One installed-owner update coordinator | Accepted |
| 0105 | One AgentDB integration standard for Claude Code and Codex hooks | Accepted |
| 0106 | The hook standard — one registration per role, refuse only on a fact, AgentDB before and after decisions | Proposed |