feat: preserve pre-heal output in NodeTrace for audit compliance

- NodeTrace gains pre_heal_output: Option<Value> — the original failing
  output before LLM healing, preserved for compliance audits
- Field is only set when healing actually occurred (nil otherwise)
- Aether Lens detail panel shows Pre-Heal Output in amber when present
- README: note custom namespace registries on roadmap, update count to 37 intents

Author: baiers

README.md

@@ -76,7 +76,7 @@ See [`docs/benchmark.md`](docs/benchmark.md) for the full token-cost comparison.
 - **5-tier safety model** — L0 (pure math) → L4 (system root). Nodes above your threshold are blocked before execution.
 - **Typed state ledger** — outputs are written to an immutable address space (`$0xADDR`) with type validation on every write.
 - **Parallel DAG execution** — independent nodes run concurrently via `tokio::spawn`; dependencies resolved with Kahn's topological sort.
-- **ASL registry** — 32 canonical intents (`std.io.*`, `std.proc.*`, `std.ml.*`, `std.sec.*`, etc.) with safety and language defaults.
+- **ASL registry** — 37 canonical intents (`std.io.*`, `std.proc.*`, `std.ml.*`, `std.sec.*`, etc.) with safety and language defaults. Unknown `std.*` intents are hard errors; custom namespaces (`myorg.etl.*`) are accepted. Custom namespace registries with org-defined safety rules are on the roadmap (`--registry myorg.json`).
 - **Self-healing RETRY** — `ASSERT expr OR RETRY(3)` sends failing code + assertion to Claude for repair. Requires your own `ANTHROPIC_API_KEY`.
 - **English Toggle** — `aether gen "description"` turns plain English into a `.ae` program via Claude. Requires your own `ANTHROPIC_API_KEY`.
 - **MCP server** — `aether-mcp` exposes validate/execute/inspect as tools for Claude Code and other MCP-compatible clients.

lens/index.html

@@ -683,6 +683,11 @@ <h3>Node Detail</h3>
     ? trace.heal_log.map(h => `<div class="heal-log-item">${esc(h)}</div>`).join('')
     : `<span style="color:var(--muted)">none</span>`;
 
+  // Pre-heal output (compliance audit field)
+  const preHealStr = trace.pre_heal_output
+    ? JSON.stringify(trace.pre_heal_output, null, 2)
+    : null;
+
   // Output
   const outputStr = JSON.stringify(trace.output, null, 2);
 
@@ -727,7 +732,12 @@ <h3>Node Detail</h3>
     <div class="detail-section">
       <div class="detail-label">Heal Log</div>
       ${healHtml}
-    </div>`;
+    </div>
+    ${preHealStr ? `
+    <div class="detail-section">
+      <div class="detail-label" style="color:var(--amber)">Pre-Heal Output</div>
+      <pre class="json-view" style="border-left:2px solid var(--amber);padding-left:6px">${esc(preHealStr.length > 500 ? preHealStr.slice(0, 500) + '\n…' : preHealStr)}</pre>
+    </div>` : ''}`;
 }
 
 // ── Utility ───────────────────────────────────────────────────────────────────

src/executor.rs

@@ -49,6 +49,10 @@ pub struct NodeTrace {
     /// Log of self-healing attempts (populated on RETRY)
     #[serde(skip_serializing_if = "Vec::is_empty")]
     pub heal_log: Vec<String>,
+    /// Output produced by the first (pre-heal) execution attempt, if healing occurred.
+    /// Preserved for audit compliance — the post-heal output is in `output`.
+    #[serde(skip_serializing_if = "Option::is_none")]
+    pub pre_heal_output: Option<serde_json::Value>,
 }
 
 #[derive(Debug, Serialize, Deserialize)]
@@ -932,6 +936,7 @@ async fn run_node_with_retry(
 
     let mut current_code = node.code.clone();
     let mut heal_log: Vec<String> = Vec::new();
+    let mut pre_heal_output: Option<serde_json::Value> = None;
 
     // Initial execution
     let mut last_result = execute_single_node(node, &current_code, ledger, config, registry).await;
@@ -970,6 +975,11 @@ async fn run_node_with_retry(
 
         let actual_output = failed_trace.output.clone();
 
+        // Capture the original pre-heal output on the first failure only
+        if attempt == 0 {
+            pre_heal_output = Some(actual_output.clone());
+        }
+
         heal_log.push(format!(
             "[attempt {}] validation failed on: {}",
             attempt + 1,
@@ -1002,14 +1012,16 @@ async fn run_node_with_retry(
         }
     }
 
-    // Attach heal_log to whichever trace we're returning
+    // Attach heal_log and pre_heal_output to whichever trace we're returning
     match last_result {
         Ok(mut t) => {
             t.heal_log = heal_log;
+            t.pre_heal_output = pre_heal_output;
             Ok(t)
         }
         Err(mut t) => {
             t.heal_log = heal_log;
+            t.pre_heal_output = pre_heal_output;
             Err(t)
         }
     }
@@ -1094,6 +1106,7 @@ async fn execute_single_node(
             asl_match,
             asl_warnings,
             heal_log: vec![],
+            pre_heal_output: None,
         });
     }
 
@@ -1112,6 +1125,7 @@ async fn execute_single_node(
             asl_match,
             asl_warnings,
             heal_log: vec![],
+            pre_heal_output: None,
         });
     }
 
@@ -1132,6 +1146,7 @@ async fn execute_single_node(
                     asl_match,
                     asl_warnings,
                     heal_log: vec![],
+                    pre_heal_output: None,
                 });
             }
             Err(e) => {
@@ -1148,6 +1163,7 @@ async fn execute_single_node(
                     asl_match,
                     asl_warnings,
                     heal_log: vec![],
+                    pre_heal_output: None,
                 });
             }
             _ => (),
@@ -1212,6 +1228,7 @@ async fn execute_single_node(
                             asl_match,
                             asl_warnings,
                             heal_log: vec![],
+                            pre_heal_output: None,
                         });
                     }
                 }
@@ -1273,6 +1290,7 @@ async fn execute_single_node(
                     asl_match,
                     asl_warnings,
                     heal_log: vec![],
+                    pre_heal_output: None,
                 })
             } else {
                 Ok(NodeTrace {
@@ -1287,6 +1305,7 @@ async fn execute_single_node(
                     asl_match,
                     asl_warnings,
                     heal_log: vec![],
+                    pre_heal_output: None,
                 })
             }
         }
@@ -1302,6 +1321,7 @@ async fn execute_single_node(
             asl_match,
             asl_warnings,
             heal_log: vec![],
+            pre_heal_output: None,
         }),
     }
 }