Release 3.0.0 (major) — outstanding work integrated; breaking bundle in progress

.filigree.conf

@@ -2,6 +2,6 @@
   "version": 1,
   "project_name": "filigree",
   "prefix": "filigree",
-  "db": ".filigree/filigree.db",
+  "db": ".weft/filigree/filigree.db",
   "mode": "ethereal"
 }

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,5 @@
 blank_issues_enabled: true
 contact_links:
   - name: Documentation
-    url: https://github.com/tachyon-beep/filigree#readme
+    url: https://github.com/foundryside-dev/filigree#readme
     about: Read the documentation before filing an issue

.github/workflows/ci.yml

@@ -10,8 +10,8 @@ on:
   workflow_call:
   workflow_dispatch:
     inputs:
-      require_live_clarion:
-        description: "Run live Clarion integration tests and fail if Clarion is unavailable"
+      require_live_loomweave:
+        description: "Run live Loomweave integration tests and fail if Loomweave is unavailable"
         required: false
         default: false
         type: boolean
@@ -80,8 +80,8 @@ jobs:
             .coverage
             coverage.json
 
-  clarion-contract:
-    name: Clarion Contract
+  loomweave-contract:
+    name: Loomweave Contract
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6
@@ -98,9 +98,9 @@ jobs:
           tests/api/test_loom_auth.py
           tests/federation/test_sei_conformance_oracle.py
 
-  live-clarion:
-    name: Live Clarion Integration
-    if: ${{ github.event_name == 'schedule' || (github.event_name == 'workflow_dispatch' && inputs.require_live_clarion) }}
+  live-loomweave:
+    name: Live Loomweave Integration
+    if: ${{ github.event_name == 'schedule' || (github.event_name == 'workflow_dispatch' && inputs.require_live_loomweave) }}
     runs-on: ubuntu-latest
     env:
       CLARION_STAGING_BASE_URL: ${{ secrets.CLARION_STAGING_BASE_URL }}
@@ -112,7 +112,7 @@ jobs:
           enable-cache: true
           python-version: "3.13"
       - run: uv sync --group dev
-      - name: Run live Clarion checks
+      - name: Run live Loomweave checks
         run: |
           if [ "${{ github.event_name }}" = "schedule" ]; then
             uv run pytest tests/integration/test_clarion_staging_smoke.py
@@ -126,7 +126,7 @@ jobs:
   docs:
     name: Docs (build + deploy)
     runs-on: ubuntu-latest
-    needs: [lint, typecheck, frontend, test, clarion-contract]
+    needs: [lint, typecheck, frontend, test, loomweave-contract]
     permissions:
       contents: write
     steps:

.github/workflows/release.yml

@@ -30,7 +30,7 @@ jobs:
             exit 1
           fi
 
-  live-clarion-release-check:
+  live-loomweave-release-check:
     needs: [ci, validate-tag]
     runs-on: ubuntu-latest
     permissions:
@@ -40,7 +40,7 @@ jobs:
       - uses: actions/checkout@v6
         with:
           fetch-depth: 0
-      - name: Check scheduled Live Clarion integration
+      - name: Check scheduled Live Loomweave integration
         env:
           GH_TOKEN: ${{ github.token }}
         run: |
@@ -63,7 +63,7 @@ jobs:
             -f status=success \
             -f per_page=20 \
             --jq '.workflow_runs[] | select(.conclusion == "success") | [.head_sha, .html_url] | @tsv'); then
-            echo "::warning title=Live Clarion release checklist::Could not inspect scheduled Live Clarion Integration lane history. Confirm it has passed since Clarion contract changes before publishing federation-sensitive changes."
+            echo "::warning title=Live Loomweave release checklist::Could not inspect scheduled Live Loomweave Integration lane history. Confirm it has passed since Loomweave contract changes before publishing federation-sensitive changes."
             exit 0
           fi
 
@@ -78,13 +78,13 @@ jobs:
           done <<< "$RUNS"
 
           if [ -z "$MATCHED_URL" ]; then
-            echo "::warning title=Live Clarion release checklist::No successful scheduled Live Clarion Integration lane was found at or after Clarion contract changes ($LAST_CONTRACT_SHA). Run CI manually with require_live_clarion=true or wait for the scheduled lane before publishing federation-sensitive changes."
+            echo "::warning title=Live Loomweave release checklist::No successful scheduled Live Loomweave Integration lane was found at or after Loomweave contract changes ($LAST_CONTRACT_SHA). Run CI manually with require_live_loomweave=true or wait for the scheduled lane before publishing federation-sensitive changes."
           else
-            echo "Scheduled Live Clarion Integration proof: $MATCHED_URL"
+            echo "Scheduled Live Loomweave Integration proof: $MATCHED_URL"
           fi
 
   build:
-    needs: [ci, validate-tag, live-clarion-release-check]
+    needs: [ci, validate-tag, live-loomweave-release-check]
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v6

.gitignore

@@ -1,32 +1,75 @@
+# Python
 __pycache__/
 *.py[cod]
 *.egg-info/
+.venv/
+
+# Build / distribution
 dist/
 build/
-.venv/
-*.db
-*.db-wal
-*.db-shm
+
+# Test / type / lint caches
 .mypy_cache/
 .ruff_cache/
 .pytest_cache/
 .coverage
 coverage.json
 htmlcov/
 
+# SQLite databases (and sidecar files)
+*.db
+*.db-wal
+*.db-shm
+*.db-journal
+
+# Secrets / local environment
+.env
+.env.*
+
 # MkDocs build output (deployed via `mkdocs gh-deploy`, never committed)
 site/
 
+# Node
+node_modules/
+
+# Filigree issue tracker (keep the directory marker, ignore its contents)
 .filigree/*
 !.filigree/.gitkeep
+.filigree.old/
+
+# Weft store (3.0 federation layout) — machine-owned local state; track only
+# the shareable scanner configs, mirroring the legacy .filigree/ convention.
+# The live DB is already covered by the global *.db / *.db-wal / *.db-shm rules.
+.weft/filigree/*
+!.weft/filigree/scanners/
+.weft/filigree/scanners/*
+!.weft/filigree/scanners/*.toml
+
+# Agent / tooling config (machine- or user-local)
 .claude/
-node_modules/
-.mcp.json
 .codex/
 .agents/
 .clarion/
 clarion.yaml
-.filigree.old/
+.mcp.json
+
+# Agent instruction files (untracked per-checkout)
+AGENTS.md
+CLAUDE.md
+.loomweave/instance_id
+loomweave.yaml
+wardline.yaml
+.loomweave/loomweave.lock
+.loomweave/ephemeral.port
 
 # Filigree issue tracker
 .filigree/
+
+# Filigree issue tracker
+.weft/
+
+# Legis — local working dir / config (regenerated/local; never commit)
+.weft/legis/
+
+# Internal codebase-audit scratch notes — agent working artifacts, never shipped
+READ_ONLY_CODEBASE_AUDIT_*.md

.loomweave/.gitignore

@@ -0,0 +1,26 @@
+# Loomweave .gitignore — ADR-005 tracked-vs-excluded list.
+# Tracked (committed): loomweave.db, config.json, .gitignore itself.
+# Excluded (ignored): WAL sidecars, shadow DB, per-run logs, tmp scratch.
+
+# SQLite write-ahead files never belong in the repo.
+*-wal
+*-shm
+*.db-wal
+*.db-shm
+
+# Shadow DB intermediate (ADR-011 --shadow-db).
+*.shadow.db
+*.db.new
+
+# Semantic-search embeddings sidecar (ADR-040): large + rebuildable, never
+# committed (keeps loomweave.db unbloated). WAL files are covered by *.db-wal/-shm.
+embeddings.db
+
+# Scratch / temp space.
+tmp/
+
+# Per-run log directories (see detailed-design §File layout). The run dir
+# metadata (config.yaml, stats.json, partial.json) is tracked; only the
+# raw LLM request/response log is excluded.
+logs/
+runs/*/log.jsonl

.loomweave/config.json

@@ -0,0 +1,4 @@
+{
+    "schema_version": 1,
+    "last_run_id": null
+}

.pre-commit-config.yaml

@@ -5,3 +5,12 @@ repos:
       - id: ruff-check
         args: [--fix]
       - id: ruff-format
+  - repo: local
+    hooks:
+      - id: wardline-scan
+        name: wardline scan
+        entry: wardline scan
+        language: system
+        types: [python]
+        pass_filenames: false
+

.weft/filigree/scanners/claude.toml

@@ -0,0 +1,8 @@
+# Generated by 'filigree scanner enable claude'.
+# Edit freely; 'filigree scanner disable claude' will require --force if this bundled-name config is modified.
+[scanner]
+name = "claude"
+description = "Per-file bug hunt using Claude CLI"
+command = "filigree-scanner-claude"
+args = ["--root", "{project_root}", "--file", "{file}", "--max-files", "1", "--api-url", "{api_url}", "--api-token-env", "WEFT_FEDERATION_TOKEN", "--scan-run-id", "{scan_run_id}", "--prompt", "{prompt}"]
+file_types = ["py"]

.weft/filigree/scanners/codex.toml

@@ -0,0 +1,8 @@
+# Generated by 'filigree scanner enable codex'.
+# Edit freely; 'filigree scanner disable codex' will require --force if this bundled-name config is modified.
+[scanner]
+name = "codex"
+description = "Per-file bug hunt using Codex CLI"
+command = "filigree-scanner-codex"
+args = ["--root", "{project_root}", "--file", "{file}", "--max-files", "1", "--api-url", "{api_url}", "--api-token-env", "WEFT_FEDERATION_TOKEN", "--scan-run-id", "{scan_run_id}", "--prompt", "{prompt}"]
+file_types = ["py"]