[codex] 0.18 decontamination r2: remove domain role/carrier steering

.github/workflows/retrieval-engine-smoke.yml

@@ -43,10 +43,14 @@ on:
       - scripts/lint-retrieval-generalization.mjs
       - scripts/lib/retrieval-generalization-lint.mjs
       - scripts/tests/lint-retrieval-generalization.test.mjs
+      - scripts/check-packet-generalization-boundary.mjs
+      - scripts/lib/packet-generalization-boundary.mjs
+      - scripts/tests/check-packet-generalization-boundary.test.mjs
       - scripts/prepare-embedded-model.mjs
       - docs/contributors/testing-matrix.md
       - docs/ops/retrieval-engine.md
       - docs/testing/retrieval-architecture.md
+      - docs/architecture/packet-generalization.md
   # Base-branch runs seed caches that sibling PRs are allowed to restore.
   push:
     branches:
@@ -88,10 +92,14 @@ on:
       - scripts/lint-retrieval-generalization.mjs
       - scripts/lib/retrieval-generalization-lint.mjs
       - scripts/tests/lint-retrieval-generalization.test.mjs
+      - scripts/check-packet-generalization-boundary.mjs
+      - scripts/lib/packet-generalization-boundary.mjs
+      - scripts/tests/check-packet-generalization-boundary.test.mjs
       - scripts/prepare-embedded-model.mjs
       - docs/contributors/testing-matrix.md
       - docs/ops/retrieval-engine.md
       - docs/testing/retrieval-architecture.md
+      - docs/architecture/packet-generalization.md
   workflow_dispatch:
 
 permissions:
@@ -118,9 +126,15 @@ jobs:
       - name: Generalization lint (production paths)
         run: node scripts/lint-retrieval-generalization.mjs
 
+      - name: Packet generalization boundary
+        run: node scripts/check-packet-generalization-boundary.mjs
+
       - name: Generalization lint hostile matrix
         run: node --test scripts/tests/lint-retrieval-generalization.test.mjs
 
+      - name: Packet generalization boundary hostile matrix
+        run: node --test scripts/tests/check-packet-generalization-boundary.test.mjs
+
       - name: Release evidence gate contracts
         run: node --test scripts/tests/codestory-release-evidence-gate.test.mjs
 

.github/workflows/source-proof.yml

@@ -918,9 +918,15 @@ jobs:
       - name: Generalization lint (production paths)
         run: node scripts/lint-retrieval-generalization.mjs
 
+      - name: Packet generalization boundary
+        run: node scripts/check-packet-generalization-boundary.mjs
+
       - name: Generalization lint hostile matrix
         run: node --test scripts/tests/lint-retrieval-generalization.test.mjs
 
+      - name: Packet generalization boundary hostile matrix
+        run: node --test scripts/tests/check-packet-generalization-boundary.test.mjs
+
   windows-native-contracts:
     name: windows-native-contracts
     needs: resolve

crates/codestory-agent/src/eval_probes.rs

@@ -510,31 +510,9 @@ pub fn eval_indexing_storage_flow_template_claims(
         return Vec::new();
     }
 
-    let mut claims = Vec::new();
-    let source_group = citations.iter().find(|citation| {
-        packet_evidence_role(citation) == Some(PacketEvidenceRole::IndexInputConfiguration)
-    });
-    let indexing_work = citations.iter().find(|citation| {
-        packet_evidence_role(citation) == Some(PacketEvidenceRole::IndexingWorkQueue)
-    });
-    if let Some(source_group) = source_group
-        && let Some(indexing_work) = indexing_work
-    {
-        claims.push((
-            "Source-group configuration and indexing command evidence describe how repository configuration becomes indexing work.".to_string(),
-            vec![source_group.clone(), indexing_work.clone()],
-        ));
-    }
-
-    if let Some(persistence) = citations.iter().find(|citation| {
-        packet_evidence_role(citation) == Some(PacketEvidenceRole::PersistenceAndSearchProjection)
-    }) {
-        claims.push((
-            "Persistence/search-projection evidence describes how indexed data remains available to later application reads.".to_string(),
-            vec![persistence.clone()],
-        ));
-    }
-    claims
+    // Domain role-shaped eval claims removed with PacketEvidenceRole taxonomy.
+    let _ = citations;
+    Vec::new()
 }
 
 pub fn push_eval_architecture_flow_probe_terms(lower_prompt: &str, terms: &mut Vec<String>) {

crates/codestory-agent/src/lib.rs

@@ -99,6 +99,7 @@ pub mod packet_terms;
 pub mod pinned_reader;
 pub mod planning;
 pub mod profiles;
+pub mod repository_evidence_plan;
 pub mod text;
 pub mod trail;
 pub use pinned_reader::{ContinuationRefusal, PinnedReader, admit_continuation_probe};