Reconcile admin ingestion, native PDF extraction and grounded Answer

.gitleaksignore

@@ -170,6 +170,10 @@ a958fdce92f53571c02fa3ea2a03c61300122763:supabase/applied-migration-hashes.json:
 # migrations rewrote the snapshot (CRLF to LF), so the unchanged line rescans as new.
 dd709e6fcc6bf8940272537e8afada52396af1a4:supabase/schema.sql:generic-api-key:13492
 2323e43ae1484f18f6e245034867095af84c5360:supabase/schema.sql:generic-api-key:13492
+
+# Reviewed synthetic witness marker; retained exact original historical finding only.
+3a287997fab2fcd9b207d692d4af1b334801bbfb:tests/worker-original-witness-readback.test.ts:generic-api-key:302
+
 # Migration seal entry: the filename contains "keys" and the value is a sha256,
 # which the generic-api-key rule reads as a key. Not a secret.
 e270353c3f8a154971a11b9eabd2b0acef4476ec:supabase/applied-migration-hashes.json:generic-api-key:317

AGENTS.md

@@ -29,7 +29,7 @@ Before any repository write or publication, read and follow [the remaining proje
 
 <!-- BEGIN:nextjs-agent-rules -->
 
-# This is NOT the Next.js you know
+## This is NOT the Next.js you know
 
 This version has breaking changes — APIs, conventions, and file structure may all differ from your training data. Read the relevant guide in `node_modules/next/dist/docs/` (resolved from this file's directory; in monorepos the `next` package may not be visible from the repo root) before writing any code. Heed deprecation notices.
 

data/repo-awareness-snapshot.json

@@ -1448,6 +1448,11 @@
         "file": "src/app/(search-app)/psychiatry/page.tsx",
         "area": "product"
       },
+      {
+        "path": "/admin/pilot",
+        "file": "src/app/admin/pilot/page.tsx",
+        "area": "product"
+      },
       {
         "path": "/on-call/first-night",
         "file": "src/app/(search-app)/on-call/first-night/page.tsx",
@@ -2494,6 +2499,11 @@
         "section": "superpowers",
         "catalogued": true
       },
+      {
+        "path": "docs/governance/openai-standard-agreement-evidence-2026-10-05.md",
+        "section": "governance",
+        "catalogued": false
+      },
       {
         "path": "docs/superpowers/plans/2026-07-24-webkit-rsc-prefetch-disposition.md",
         "section": "superpowers",
@@ -2719,6 +2729,11 @@
         "section": "root",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-16-original-section-delivery-scope.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/decisions/2026-10-16-keep-migration-history.md",
         "section": "decisions",
@@ -3294,6 +3309,11 @@
         "section": "superpowers",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-16-import-loops-fixed-in-3546.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/superpowers/rag-upgrade/cloud/plans/2026-08-20-rag-ingestion-reindex.md",
         "section": "superpowers",
@@ -3509,6 +3529,11 @@
         "section": "superpowers",
         "catalogued": true
       },
+      {
+        "path": "docs/governance/railway-dpa-completion-evidence-2026-10-05.md",
+        "section": "governance",
+        "catalogued": false
+      },
       {
         "path": "docs/ci-operations.md",
         "section": "root",
@@ -3684,6 +3709,11 @@
         "section": "on-call",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-16-indexing-repair-provider-calls-stay-off.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/care-plan/patient-facing-sheets/README.md",
         "section": "care-plan",
@@ -3719,6 +3749,11 @@
         "section": "audit",
         "catalogued": true
       },
+      {
+        "path": "docs/audit/ingestion-rag-2026-10-15/complete-record.md",
+        "section": "audit",
+        "catalogued": true
+      },
       {
         "path": "docs/decisions/2026-09-25-clinical-eval-battery-additions.md",
         "section": "decisions",
@@ -4189,6 +4224,11 @@
         "section": "root",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-16-provider-agreements-verified-for-first-release.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/decisions/2026-09-26-doppler-is-not-used.md",
         "section": "decisions",
@@ -4324,6 +4364,11 @@
         "section": "care-plan",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-16-admitted-upload-survives-client-cancel.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/design-system/sweep-2026-08-29-visual.md",
         "section": "design-system",
@@ -4754,6 +4799,11 @@
         "section": "root",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-16-deep-memory-preparation-is-protected.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/specifier-entry-worksheet-with-catatonia.md",
         "section": "root",
@@ -5039,6 +5089,11 @@
         "section": "decisions",
         "catalogued": true
       },
+      {
+        "path": "docs/decisions/2026-10-16-duplicate-sighting-receipt-merge.md",
+        "section": "decisions",
+        "catalogued": true
+      },
       {
         "path": "docs/brand/canvas/README.md",
         "section": "brand",
@@ -10254,6 +10309,14 @@
         "outcome": "Redundant: exact source HEAD was squash-merged by PR #469; eligible for deletion when unreferenced.",
         "checks": "GitHub merged-PR source HEAD matched exactly."
       },
+      {
+        "date": "2026-10-14",
+        "ref": "PR #3546 / codex/ingestion-rag-pilot-handover-20261014",
+        "head": "3a287997fab2fcd9b207d692d4af1b334801bbfb",
+        "scope": "PR3546 preserved-main conflict and source restoration",
+        "outcome": "Qualified source acceptance: SQL, RAG, extractor and neutral table restorations independently accepted; hosted preview remains failed.",
+        "checks": "Dirty pins: guard548b80f4; extract809a366c; chunkerbe5cf416; tablefacts43fd50df; indexunits8120dfef. Fresh guard positive/two refusals/rollback; SDK21; recordedAnswer13+3; provenance172; contracts342; native86/parent20; supplier/index63. No general clinical GO or merge authority."
+      },
       {
         "date": "2026-07-25",
         "ref": "cursor-indexing-ignore (PR #1171)",
@@ -19758,6 +19821,14 @@
         "outcome": "APPROVE. The remaining bottom band clipped live result content above the hidden dock because both phone application owners used viewport-sized fixed roots, a physical-iOS paint path that can disagree with correct DOM geometry. Both owners now share a bounded in-flow dynamic-viewport shell; hidden reserve remains zero, the last viewport pixel remains content-owned, and viewport resize preserves the reading offset. No P0-P3 finding remains. Highest residual risk is physical-device iOS compositing beyond desktop WebKit emulation.",
         "checks": "`verify:cheap` PASS (393 files; 3519 passed / 2 skipped); focused Therapy and dashboard production WebKit PASS; `verify:ui` PASS (314/314); `verify:pr-local` PASS including production build/client-secret scan and 36-case offline RAG fixtures; no live provider-backed checks."
       },
+      {
+        "date": "2026-10-15",
+        "ref": "codex/ingestion-rag-pilot-handover-20261014",
+        "head": "a90da76c2f29990ce54456a806b75394314405e3",
+        "scope": "Uncommitted native-PDF layout v5 producer 352d178978ef9086df1df708aa71266538076a2f5050a526b8ff3941af5ff984",
+        "outcome": "Independent technical P1/P2 closure and qualified representative-source acceptance; no hosted or general OCR claim",
+        "checks": "Final106page46artifact capture and all image/page identity comparisons accepted; actual source receipt24fcb7738f1590f77ce9823c6d0d840efd4201115572d483df491d46f3b4ba74; retained v3/v4 failures; no provider or deployment"
+      },
       {
         "date": "2026-10-10",
         "ref": "codescene-non-rag-current-20261010",
@@ -23294,6 +23365,14 @@
         "outcome": "FIXED. Resolved CONFLICTING merge vs main by keeping main soft-glass phone chrome, shared test-run-lock coordinator, tokenized document-nav mockups, and accessible-name Playwright contract; preserved PR forced-colors:border and literalShadowClasses 0 ratchet. Bugbot found no remaining P0-P2 on unique product delta. Removed 9 exact duplicate ledger rows introduced by merge=union.",
         "checks": "Focused design-system + knip + mobile-chrome-paint + test-runner-safety PASS; ledger guard PASS after dedupe; hosted Static PR re-run pending; no provider-backed checks."
       },
+      {
+        "date": "2026-10-15",
+        "ref": "codex/ingestion-rag-pilot-handover-20261014",
+        "head": "d22345dc7e34e3b0fc3de0c127285b34a047d72e",
+        "scope": "Uncommitted admin pilot shared announcement correction; file SHA256 0f76deaa4d8d9ad46139d0ba83a0973241669d582ce2517d1ede680ce2ddb5bb",
+        "outcome": "Independent frontend source review ACCEPT; visible message and polite singleton announcements preserved; no MFA, credential, network or baseline change",
+        "checks": "Scoped ESLint and source diff check passed. Design-system core contract passed at unchanged visibleLiveRegions17; wrapper gate tracked separately. No browser or real screen-reader execution claimed."
+      },
       {
         "date": "2026-07-13",
         "ref": "origin/copilot/fix-failing-ci",
@@ -25998,6 +26077,14 @@
         "outcome": "approved after merging #1457 without overlap; upload parity and repository guards remain green",
         "checks": "upload self-test pass; issues 141; ledger 141+1206; actions pin, format, diff pass"
       },
+      {
+        "date": "2026-10-15",
+        "ref": "PR #3546 / codex/ingestion-rag-pilot-handover-20261014",
+        "head": "f3773e9c2e666063c9169e14cbb163c65a9ce78a",
+        "scope": "bounded OCR detail source safety and independent whole-table fidelity",
+        "outcome": "ACCEPT by independent ingestion-worker and clinical-governance reviewers. Exact source SHA e7390bbe03e6b66ffc782f5d7bf4bb1ec5b19185564dc6f204955001f3acaeba retains default4M pixel budget and timeout. Whole page table text equals independently frozen expectation after whitespace normalization:56values,14orderedrows,4ratio-percent header pairs,2groups and weekly units. Crop-specific local textual-table acceptance only; no general scan, structured fact, clinical-use or hosted-runtime acceptance.",
+        "checks": "Fresh51 Python extractor regression tests PASS; actual extractor on frozen text-free high-detail raster PASS at default4M and explicit6M. InputSHA725604979441b1e132f312b1b90b7fcb736dbd75a02a4d2eb631d4cee2e4e17a; defaultresultSHAd3d928473477ae7db29dca4bffff0735bb8c50e8631431e9b7db285719315ecc; frozenSHA119422cdb8fa98821bec9bdec738685300213f24ef2264c5edea43346c32cfcf. Local WindowsTesseract5.4 only; no providers or deployment. Main merge independently clean; no SQL/schema/migration differences relativeto main0e04b21641d23a3bb5c04c45821458ec17fbdd6c."
+      },
       {
         "date": "2026-08-15",
         "ref": "codex/medication-list-spacing-20260814",