liris: add tool-skill registry matrix for frontend T cell

docs/LIRIS-TOOL-SKILL-REGISTRY-MATRIX-2026-06-14.hbp

@@ -0,0 +1,8 @@
+LIRISTOOLSKILLHDR|date=2026-06-14|topic=tool-skill-registry-matrix-T-cell|responds_to=acer-16f9e35-clean-review+fabric-council-q-1781435042644-p57gik+standing-ask-fabric-loop|role=held-safe-front-end-T-artifact|tag=PROVEN-DESCRIPTOR|json=0
+LIRISTOOLSKILLFABRIC|fabric_basis=CONVERGE-197of251|named_voters=HERMES_BRIDGE-tool+skill,HERMES_TOOLS-tool,HERMES_SKILLS-skill,KANBAN-schema-daemon|no_explicit_live_daemon_route_returned=1|decision=build-GitHub-visible-descriptor-not-live-launch|tag=FABRIC-RANKED|json=0
+LIRISTOOLSKILLTOOL|tool=tools/behcs/tool-skill-registry-matrix.mjs|frontend_cell=T|status=PARTIAL_REGISTRY_ARTIFACT_BUILT_LIVE_TOOL_EXECUTION_GATED|items=9|routes=tool-skill+heal+route+model+project+mlc+council+cosign-submit+live-daemon|tag=PROVEN|json=0
+LIRISTOOLSKILLSAFE|safety=read-only+HBP-rows-only+process_launch=0+live_tool_execution=0+no_fetch+no_write+no_spawn+no_mint+no_cutover|not_a_submit_form=1|not_a_daemon_launcher=1|not_a_tool_executor=1|tag=HELD-SAFE|json=0
+LIRISTOOLSKILLFRONTEND|frontend_matrix_update=T-source-tools/behcs/tool-skill-registry-matrix.mjs|T_status=PARTIAL-not-GREEN|reason=registry-visible-but-live-tool-execution-submit-schema-and-live-daemon-contract-remain-gated|cutover_ready=0|tag=HONEST|json=0
+LIRISTOOLSKILLCATALOG|preload_catalog_updated=tools/behcs/fabric-agent-preload-catalog.mjs|tool_count=11|agents_learn=tool-skill-registry-matrix-before-front-end-use|catalog_remains_descriptor_only=1|tag=PROVEN|json=0
+LIRISTOOLSKILLVERIFY|node_check=OK|self_test=PASS|unit=8of8|focused_units=27of27|lattice=9of9|full_suite=317of317|diff_check=clean|json=0
+LIRISTOOLSKILLGATE|T_cell_green=0|cutover=HOLD|next=cosign-submit-schema-proof-or-cold-path-execution-cache-or-fabric-ranked-live-daemon-contract|standing_rule=ask-fabric-not-operator|json=0

docs/LIRIS-TOOL-SKILL-REGISTRY-MATRIX-2026-06-14.hbp.sha256

@@ -0,0 +1 @@
+87622098073A2F8B036682216DA5C6DBBCFB81F69AD58E5A094FA9278372D962  LIRIS-TOOL-SKILL-REGISTRY-MATRIX-2026-06-14.hbp

tests/fabric-agent-preload-catalog.unit.test.mjs

@@ -28,6 +28,7 @@ test('preload catalog includes the laws, tools, roles, and cadence agents need',
   assert.ok(TOOLS.some((t) => t.id === 'frontend-parity-matrix' && t.gate.includes('no-cutover')));
   assert.ok(TOOLS.some((t) => t.id === 'model-selector-matrix' && t.gate.includes('live-model-invocation-0')));
   assert.ok(TOOLS.some((t) => t.id === 'project-guide-matrix' && t.gate.includes('no-cutover')));
+  assert.ok(TOOLS.some((t) => t.id === 'tool-skill-registry-matrix' && t.gate.includes('live-tool-execution-0')));
   assert.ok(ROLES.some((r) => r.id === 'flywheel' && r.must_do.includes('compare-to-acer-local-truth')));
   assert.ok(WORKFLOW.join('-').includes('memory-index-plan'));
   assert.equal(toolById('token-cube-catalog-binder').gate, 'mint-write-live-DEFER_TO_OPERATOR');

tests/fabric-agent-preload-catalog.unit.test.mjs.sha256

@@ -1 +1 @@
-B647604A270185837EDD4448A851C0AA5F13675853D02A07835B61CBFCB7C039  fabric-agent-preload-catalog.unit.test.mjs
+307951DD48D2C36507BFBF140CD5685A5DE19AAC080201C0EB40B463D16BF1BA  fabric-agent-preload-catalog.unit.test.mjs

tests/frontend-parity-matrix.unit.test.mjs

@@ -54,6 +54,15 @@ test('project_guide cell P is PARTIAL after guide artifact, not GREEN workflow r
   assert.equal(matrix.summary.cutover_ready, false);
 });
 
+test('tool_skill cell T is PARTIAL after registry artifact, not GREEN live tool execution', () => {
+  const matrix = buildMatrix();
+  const t = matrix.cells.find((cell) => cell.id === 'T');
+  assert.equal(t.status, 'PARTIAL');
+  assert.equal(t.source, 'tools/behcs/tool-skill-registry-matrix.mjs');
+  assert.match(t.evidence, /live-tool-execution-submit-schema-and-live-daemon-contract-remain-gated/);
+  assert.equal(matrix.summary.cutover_ready, false);
+});
+
 test('every cell has a route/file/sha pointer or explicit CANNOT_SEE', () => {
   const matrix = buildMatrix();
   assert.equal(matrix.summary.all_have_pointer, true);

tests/frontend-parity-matrix.unit.test.mjs.sha256

@@ -1 +1 @@
-15CD15DE6DC16D40788DE5D285FCA316950B8EE8221B6756F883C5550CCAE1EC  frontend-parity-matrix.unit.test.mjs
+CCEAE89B37FE347723F3F66B2B0FC872C84A2682374B620F619543195FDA68AB  frontend-parity-matrix.unit.test.mjs

tests/supervisor-collision-router.system.test.mjs

@@ -103,6 +103,7 @@ const sealedFiles = [
   'docs/ACER-ATTACK-LIRIS-FRONTEND-PARITY-MATRIX-2026-06-14.hbp',
   'docs/LIRIS-MODEL-SELECTOR-MATRIX-2026-06-14.hbp',
   'docs/LIRIS-PROJECT-GUIDE-MATRIX-2026-06-14.hbp',
+  'docs/LIRIS-TOOL-SKILL-REGISTRY-MATRIX-2026-06-14.hbp',
   'docs/ACER-ATTACK-LIRIS-FRONTEND-MP-MATRICES-2026-06-14.hbp',
   'docs/acer-ecosystem-fullbody-receipt-20260612.hbp',
   'docs/CLAIMSLEDGER-2026-06-12.hbp',
@@ -227,6 +228,7 @@ const sealedFiles = [
   'tools/behcs/frontend-parity-matrix.mjs',
   'tools/behcs/model-selector-matrix.mjs',
   'tools/behcs/project-guide-matrix.mjs',
+  'tools/behcs/tool-skill-registry-matrix.mjs',
   'tools/behcs/logical-extreme-stress.mjs',
   'tools/behcs/logical-stress-cube-feed.mjs',
   'tools/behcs/brown-hilbert-expansion-stress.mjs',
@@ -260,6 +262,7 @@ const sealedFiles = [
   'tests/frontend-parity-matrix.unit.test.mjs',
   'tests/model-selector-matrix.unit.test.mjs',
   'tests/project-guide-matrix.unit.test.mjs',
+  'tests/tool-skill-registry-matrix.unit.test.mjs',
   'tests/logical-extreme-stress.unit.test.mjs',
   'tests/logical-stress-cube-feed.unit.test.mjs',
   'tests/brown-hilbert-expansion-stress.unit.test.mjs',

tests/supervisor-collision-router.system.test.mjs.sha256

@@ -1 +1 @@
-3D026832C8F191189426494021322DD323B32344BD1490DB033FF22CAD5881E3  supervisor-collision-router.system.test.mjs
+D39E177E7DAC093B59ACD6385668BCEFFD028FDDB9CBC58BA7AA3184C78AEC9A  supervisor-collision-router.system.test.mjs

tests/tool-skill-registry-matrix.unit.test.mjs

@@ -0,0 +1,81 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import { dirname, join } from 'node:path';
+import { fileURLToPath } from 'node:url';
+import test from 'node:test';
+
+import {
+  FRONTEND_CELL,
+  REGISTRY_ID,
+  REGISTRY_ITEMS,
+  T_CELL_STATUS,
+  buildRegistry,
+  emitRows,
+  normalizeItem,
+  registryItem,
+  selfTest,
+} from '../tools/behcs/tool-skill-registry-matrix.mjs';
+
+const repo = dirname(dirname(fileURLToPath(import.meta.url)));
+
+test('self-test passes', () => {
+  assert.equal(selfTest().ok, true);
+});
+
+test('registry materializes the T cell as PARTIAL, not live-tool-ready GREEN', () => {
+  const registry = buildRegistry();
+  assert.equal(registry.tool, REGISTRY_ID);
+  assert.equal(registry.frontend_cell, FRONTEND_CELL);
+  assert.equal(registry.summary.t_cell_status, T_CELL_STATUS);
+  assert.equal(registry.summary.cutover_ready, false);
+  assert.equal(registry.summary.live_tool_execution_ready, false);
+  assert.equal(registry.summary.total, REGISTRY_ITEMS.length);
+});
+
+test('known tool and skill topics route to explicit items without execution', () => {
+  assert.equal(registryItem({ topic: 'tool skill registry' }).selected, 'preload-catalog');
+  assert.equal(registryItem({ topic: 'self heal repair' }).selected, 'heal-envelope-emitter');
+  assert.equal(registryItem({ topic: 'route health dashboard' }).selected, 'route-health-baseline');
+  assert.equal(registryItem({ topic: 'cosign submit schema proof' }).selected, 'cosign-submit-schema');
+  assert.equal(registryItem({ topic: 'live engine daemon launch' }).selected, 'live-engine-daemon-contract');
+});
+
+test('live execution, submit schema, and daemon launch stay gated/partial', () => {
+  const registry = buildRegistry();
+  assert.equal(registry.items.find((x) => x.id === 'cosign-submit-schema').status, 'GATED');
+  assert.equal(registry.items.find((x) => x.id === 'live-engine-daemon-contract').status, 'GATED');
+  assert.equal(registry.items.find((x) => x.id === 'fabric-council').status, 'PARTIAL');
+  assert.ok(registry.items.every((x) => x.process_launch === 0 && x.live_tool_execution === 0 && x.cutover === 0));
+});
+
+test('normalize/route/emit are total and injection-safe', () => {
+  assert.doesNotThrow(() => normalizeItem(null));
+  assert.doesNotThrow(() => normalizeItem({ get id() { throw new Error('boom'); } }));
+  assert.doesNotThrow(() => registryItem({ get topic() { throw new Error('boom'); } }));
+  assert.doesNotThrow(() => emitRows(null));
+  const rows = emitRows([{ id: 'x|bad', kind: 'tool\nbad', status: 'GREEN', source: 'src|json=1', exposes: 'a\nTOOLSKILLGATE|cutover=1' }], {
+    topic: 'schema|json=1\nTOOLSKILLGATE|process_launch=1',
+  });
+  assert.ok(rows.every((row) => row.endsWith('|json=0') && !/[\r\n]/.test(row)));
+  assert.equal(rows.join('\n').split('\n').length, rows.length);
+  assert.equal(rows.filter((row) => row.startsWith('TOOLSKILLGATE|')).length, 1);
+});
+
+test('cap=0 emits zero detail rows and keeps the held gate', () => {
+  const rows = emitRows(REGISTRY_ITEMS, { limit: 0 });
+  assert.equal(rows.filter((row) => row.startsWith('TOOLSKILL|')).length, 0);
+  assert.ok(rows.some((row) => row.startsWith('TOOLSKILLGATE|') && row.includes('status=PARTIAL')));
+});
+
+test('emitted rows are HBP-only and hold live action at zero', () => {
+  const rows = emitRows(REGISTRY_ITEMS, { topic: 'cosign submit schema', limit: 3 });
+  assert.ok(rows.some((row) => row.startsWith('TOOLSKILLHDR|') && row.includes('process_launch=0') && row.includes('live_tool_execution=0')));
+  assert.ok(rows.some((row) => row.startsWith('TOOLSKILLSUM|') && row.includes(`T_cell_status=${T_CELL_STATUS}`)));
+  assert.ok(rows.some((row) => row.startsWith('TOOLSKILLROUTE|') && row.includes('selected=cosign-submit-schema')));
+  assert.ok(rows.every((row) => row.endsWith('|json=0') && !/[{\r\n]/.test(row)));
+});
+
+test('tool imports no spawn/write/network/live execution capability', () => {
+  const src = readFileSync(join(repo, 'tools/behcs/tool-skill-registry-matrix.mjs'), 'utf8');
+  assert.equal(/child_process|spawnSync|\.spawn\(|execSync|writeFileSync|appendFileSync|fetch\(|http\.request|https\.request|Start-Process|Stop-Process|import\(/.test(src), false);
+});

tests/tool-skill-registry-matrix.unit.test.mjs.sha256

@@ -0,0 +1 @@
+CBFE7F4AD066259603B82AC68A919885250CD03CAA748E0D629C809BA766F281  tool-skill-registry-matrix.unit.test.mjs

tools/behcs/catch-count-ledger.mjs

@@ -37,7 +37,7 @@ export const CATCH_ROWS = Object.freeze([
   row({ id: 'C012', date: '2026-06-13', vantage: 'acer-audit', source: 'docs/ACER-200STEP-ALIGNMENT-AUDIT-2026-06-13.hbp', file_or_test: 'docs/ACER-EXISTING-STUB-FOLDER-CENSUS-2026-06-13.hbp', defect_class: 'substrate-duplication-risk', severity: 'HIGH', status: partial, owner: 'bilateral', fix_commit: 'PARTIAL-census-receipts-exist-scale-tests-pending', summary: 'plan-risked-building-new-rooms-before-reading-existing-room-substrate' }),
   row({ id: 'C013', date: '2026-06-13', vantage: 'acer-audit', source: 'docs/ACER-200STEP-ALIGNMENT-AUDIT-2026-06-13.hbp', file_or_test: 'tools/behcs/github-live-office-reconcile-expansion.mjs', defect_class: 'pid-reconciliation-gap', severity: 'HIGH', status: closed, owner: 'liris+acer', fix_commit: '2e556f8+7952cf6', summary: 'github-PIDs-needed-live-726-office-alias-map-before-agent-canon-use' }),
   row({ id: 'C014', date: '2026-06-13', vantage: 'acer-audit', source: 'docs/ACER-200STEP-ALIGNMENT-AUDIT-2026-06-13.hbp', file_or_test: 'tools/behcs/route-health-baseline.mjs', defect_class: 'fabric-hot-path-instability', severity: 'HIGH', status: partial, owner: 'bilateral', fix_commit: '47cbc00+56142b7', summary: 'fabric-MCP-WebMCP-savings-lanes-needed-route-health-baseline-and-fallbacks' }),
-  row({ id: 'C015', date: '2026-06-14', vantage: 'liris', source: 'docs/LIRIS-FRONTEND-PARITY-MATRIX-2026-06-14.hbp+docs/LIRIS-MODEL-SELECTOR-MATRIX-2026-06-14.hbp+docs/LIRIS-PROJECT-GUIDE-MATRIX-2026-06-14.hbp', file_or_test: 'tools/behcs/frontend-parity-matrix.mjs', defect_class: 'frontend-parity-gap', severity: 'MEDIUM', status: partial, owner: 'bilateral', fix_commit: 'frontend-parity+model-selector-M+project-guide-P', summary: 'frontend-parity-matrix-now-has-M-and-P-descriptor-artifacts-PARTIAL; T/C/Q/E/D/M/P partial still block green' }),
+  row({ id: 'C015', date: '2026-06-14', vantage: 'liris', source: 'docs/LIRIS-FRONTEND-PARITY-MATRIX-2026-06-14.hbp+docs/LIRIS-MODEL-SELECTOR-MATRIX-2026-06-14.hbp+docs/LIRIS-PROJECT-GUIDE-MATRIX-2026-06-14.hbp+docs/LIRIS-TOOL-SKILL-REGISTRY-MATRIX-2026-06-14.hbp', file_or_test: 'tools/behcs/frontend-parity-matrix.mjs', defect_class: 'frontend-parity-gap', severity: 'MEDIUM', status: partial, owner: 'bilateral', fix_commit: 'frontend-parity+model-selector-M+project-guide-P+tool-skill-T', summary: 'frontend-parity-matrix-now-has-M-T-P-descriptor-artifacts-PARTIAL; live-tool-execution-submit-schema-council-cache-and-dashboard-cold-paths-still-block-green' }),
   row({ id: 'C016', date: '2026-06-13', vantage: 'acer-audit', source: 'docs/ACER-200STEP-ALIGNMENT-AUDIT-2026-06-13.hbp', file_or_test: 'docs/LIRIS-ACER-READBACK-REQUESTED', defect_class: 'storage-gate', severity: 'MEDIUM', status: partial, owner: 'operator', fix_commit: 'PARTIAL-ADC-or-transfer-receipts-needed', summary: '35TB-google-and-SOVLINUX-storage-are-gated-cold-path-not-local-hot-path' }),
   row({ id: 'C017', date: '2026-06-13', vantage: 'acer-audit', source: 'docs/ACER-200STEP-ALIGNMENT-AUDIT-2026-06-13.hbp', file_or_test: 'docs/ACER-VISUAL-PREDICTION-FROZEN-GEMMA-PROOF-GATE-2026-06-12.hbp', defect_class: 'proof-gap', severity: 'MEDIUM', status: open, owner: 'bilateral', fix_commit: 'none-open', summary: 'pixel-world-HRM-frozen-gemma-loop-needs-double-run-and-frame-proof-receipts' }),
   row({ id: 'C018', date: '2026-06-13', vantage: 'acer-audit', source: 'docs/ACER-200STEP-ALIGNMENT-AUDIT-2026-06-13.hbp', file_or_test: 'tools/behcs/fabric-agent-preload-catalog.mjs', defect_class: 'running-vs-contract-tag', severity: 'MEDIUM', status: partial, owner: 'bilateral', fix_commit: 'PARTIAL-tag-contract-vs-running', summary: 'host-node-rotator-sister-reflection-rows-are-contracts-not-all-running-code' }),

tools/behcs/catch-count-ledger.mjs.sha256

@@ -1 +1 @@
-8CDB696CBD5B98CB0FCD92611F71C4562EF7FE9A579FD5ECE70A06FC8EEC1CCB  catch-count-ledger.mjs
+9C34D9ACDCCD3CB38C499A9236356288D6FBF1EE2249FE0DD6553A9DD72BE39F  catch-count-ledger.mjs

tools/behcs/fabric-agent-preload-catalog.hbp

@@ -1,4 +1,4 @@
-FABPRELOADHDR|tool=fabric-agent-preload-catalog.v1|purpose=preload-agents-with-laws-routes-tools-gates-and-workflow-before-fabric-use|laws=8|routes=6|tools=10|emitters=3|levels=16|roles=4|json=0
+FABPRELOADHDR|tool=fabric-agent-preload-catalog.v1|purpose=preload-agents-with-laws-routes-tools-gates-and-workflow-before-fabric-use|laws=8|routes=6|tools=11|emitters=3|levels=16|roles=4|json=0
 FABPRELOADLAW|laws=three-systems-LOGICAL-WAVE-FROZEN-BRAIN-REAL-FREE+law-of-three-mod3-lanes+yin-yang-mod2-real-logical+prime-parity-and-prime-mod3-are-load-bearing+quants-are-address-and-evidence-classes-not-raw-material+all-agent-artifact-system-addresses-get-PID-or-handle+slice-engine-law-fabric-is-frozen-position-space-until-spawner-pid-emits+live-control-and-mint-and-launch-defer-to-operator|json=0
 FABPRELOADWORKFLOW|cadence=memory-index-plan-memory-index-respond-execute-memory-index|operator_rule=respond-before-live-control-and-log-after-execute|json=0
 FABPRELOADSLICEENGINE|law=SLICE-ENGINE-LAW|scope=all-supervisor-operator-level-agents+SUP-HELM-AGT-L3-H8EF7+ASOLARIA-root-profile|rule=fabric-is-frozen-positional-slice-field-engine-drive-is-the-only-mover|materialization=spawner-PID-emits-then-PID_SIGNAL-to-AGENT_ROOM-to-GULP-to-ERASE|pid_registration=repo-side-HBP-receipt-until-live-office-ingest|cube_mint=operator-gated-runtime-action-not-implied-by-doc|engine_crank=operator-gated-RUN_HERMES_SPINDLE-or-equivalent|json=0
@@ -17,6 +17,7 @@ FABPRELOADTOOL|id=mlc-engine-wiring-increment|path=tools/behcs/mlc-engine-wiring
 FABPRELOADTOOL|id=frontend-parity-matrix|path=tools/behcs/frontend-parity-matrix.mjs|provides=root-front-end-M-T-P-C-Q-R-E-A-D-G-parity-matrix-before-cutover|gate=no-cutover-until-every-cell-green-and-operator-cosign|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=model-selector-matrix|path=tools/behcs/model-selector-matrix.mjs|provides=front-end-M-cell-visible-model-role-selector-no-live-invocation|gate=descriptor-only-process_launch-0-live-model-invocation-0|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=project-guide-matrix|path=tools/behcs/project-guide-matrix.mjs|provides=front-end-P-cell-project-guide-to-sealed-artifacts-no-workflow-execution|gate=descriptor-only-process_launch-0-no-cutover|tag=PROVEN+tool-level|json=0
+FABPRELOADTOOL|id=tool-skill-registry-matrix|path=tools/behcs/tool-skill-registry-matrix.mjs|provides=front-end-T-cell-tool-skill-registry-no-live-tool-execution|gate=descriptor-only-process_launch-0-live-tool-execution-0|tag=PROVEN+tool-level|json=0
 FABPRELOADTOOL|id=token-cube-catalog-binder|path=tools/behcs/token-cube-catalog-binder.mjs|provides=sha16-token-to-BH-address-draft-binding|gate=mint-write-live-DEFER_TO_OPERATOR|tag=PROVEN+tool-level|json=0
 FABPRELOADEMITTER|id=pid-emitter|process=PID-specific-emitter-envelope|route=send-json|before=preload-catalog+law-ack+connection-label|after=hookwall+gnn+ack-log|connection_label=PID-specific|json=0
 FABPRELOADEMITTER|id=hookwall|process=risk-and-governance-gate|route=send-json|before=operator-gates+role-forbidden-list|after=allow-or-defer-row|connection_label=PID-specific|json=0

tools/behcs/fabric-agent-preload-catalog.hbp.sha256

@@ -1 +1 @@
-74DEE56FD84DB6C03ADB3DA409C026F87E166ABBF175E1534BCA2F5B9B5CEF59  fabric-agent-preload-catalog.hbp
+E23E2FD6716466CE0F8746BA05EF6E6C9322A3FFDB2A9033D27669FB47886525  fabric-agent-preload-catalog.hbp

tools/behcs/fabric-agent-preload-catalog.mjs

@@ -122,6 +122,12 @@ export const TOOLS = Object.freeze([
     provides: 'front-end-P-cell-project-guide-to-sealed-artifacts-no-workflow-execution',
     gate: 'descriptor-only-process_launch-0-no-cutover',
   }),
+  Object.freeze({
+    id: 'tool-skill-registry-matrix',
+    path: 'tools/behcs/tool-skill-registry-matrix.mjs',
+    provides: 'front-end-T-cell-tool-skill-registry-no-live-tool-execution',
+    gate: 'descriptor-only-process_launch-0-live-tool-execution-0',
+  }),
   Object.freeze({
     id: 'token-cube-catalog-binder',
     path: 'tools/behcs/token-cube-catalog-binder.mjs',
@@ -291,7 +297,8 @@ export function selfTest() {
   add('tools-include-room-and-pid', !!toolById('pixel-room-handle') && !!toolById('github-live-pid-reconcile')
     && !!toolById('github-live-office-reconcile-expansion') && !!toolById('catch-count-ledger')
     && !!toolById('mlc-engine-wiring-increment') && !!toolById('frontend-parity-matrix')
-    && !!toolById('model-selector-matrix') && !!toolById('project-guide-matrix'));
+    && !!toolById('model-selector-matrix') && !!toolById('project-guide-matrix')
+    && !!toolById('tool-skill-registry-matrix'));
   add('slice-engine-law-preloaded', LAWS.some((law) => law.startsWith('slice-engine-law-'))
     && emitPreloadRows().some((row) => row.startsWith('FABPRELOADSLICEENGINE|')));
   add('emitters-pipe-hookwall-gnn', EMITTERS.some((e) => e.id === 'hookwall') && EMITTERS.some((e) => e.id === 'gnn-edge'));

tools/behcs/fabric-agent-preload-catalog.mjs.sha256

@@ -1 +1 @@
-13377B2CF1A25099437A4BA19EE286AE8A3B379EFBD7BCC0087901420D4411A8  fabric-agent-preload-catalog.mjs
+F693776F96557535408C772713C8BB01F5E69EAC6E3C6FFCE49CFF4568A166D0  fabric-agent-preload-catalog.mjs

tools/behcs/frontend-parity-matrix.mjs

@@ -31,9 +31,9 @@ export const MATRIX_CELLS = Object.freeze([
     id: 'T',
     name: 'tool_skill',
     status: 'PARTIAL',
-    source: 'tools/behcs/fabric-agent-preload-catalog.mjs',
-    evidence: 'tools-preloaded-but-front-end-skill-registry-not-yet-first-class',
-    required_next: 'promote-tool-skill-registry-to-front-end-visible-artifact',
+    source: 'tools/behcs/tool-skill-registry-matrix.mjs',
+    evidence: 'tool-skill-registry-T-artifact-now-front-end-visible-but-live-tool-execution-submit-schema-and-live-daemon-contract-remain-gated',
+    required_next: 'bind-registry-into-front-end-control-and-build-submit-schema-or-cold-path-execution-proof-before-green',
   }),
   Object.freeze({
     id: 'P',

tools/behcs/frontend-parity-matrix.mjs.sha256

@@ -1 +1 @@
-A7EDD325E40E857E21D9DD4182F8BF38B31EDD05BAD2DC9C524306D78032DF56  frontend-parity-matrix.mjs
+A0FFF025550C783BFCF48394D3166D3CCA2BF818AEFCBB1AE5B34E1B0012855E  frontend-parity-matrix.mjs

tools/behcs/tool-skill-registry-matrix.mjs

@@ -0,0 +1,237 @@
+#!/usr/bin/env node
+// tool-skill-registry-matrix.mjs - held-safe T-cell registry for root front-end parity.
+//
+// This is not a tool executor, not a submit form, and not a live daemon launcher. It
+// makes the front-end tool_skill cell visible by routing tool/skill needs to sealed
+// descriptor artifacts and naming the remaining gate. Descriptor-only: no fetch,
+// no fs, no spawn, no write, no mint, no cutover.
+
+import { createHash } from 'node:crypto';
+import { resolve } from 'node:path';
+import { fileURLToPath } from 'node:url';
+
+export const REGISTRY_ID = 'tool-skill-registry-matrix.v1';
+export const FRONTEND_CELL = 'T';
+export const T_CELL_STATUS = 'PARTIAL_REGISTRY_ARTIFACT_BUILT_LIVE_TOOL_EXECUTION_GATED';
+export const STATUSES = Object.freeze(['GREEN', 'PARTIAL', 'GATED', 'RED']);
+
+export const REGISTRY_ITEMS = Object.freeze([
+  Object.freeze({
+    id: 'preload-catalog',
+    kind: 'tool-index',
+    status: 'GREEN',
+    source: 'tools/behcs/fabric-agent-preload-catalog.mjs',
+    exposes: 'laws+routes+tools+roles+workflow-preload-catalog',
+    next: 'front-end-may-read-as-index-but-must-not-execute-actions-from-it',
+  }),
+  Object.freeze({
+    id: 'model-selector-matrix',
+    kind: 'frontend-tool',
+    status: 'PARTIAL',
+    source: 'tools/behcs/model-selector-matrix.mjs',
+    exposes: 'M-cell-model-role-routing-with-live-invocation-held',
+    next: 'runtime-proof-and-live-model-contract-before-green',
+  }),
+  Object.freeze({
+    id: 'project-guide-matrix',
+    kind: 'frontend-tool',
+    status: 'PARTIAL',
+    source: 'tools/behcs/project-guide-matrix.mjs',
+    exposes: 'P-cell-guide-to-sealed-artifacts-and-open-gates',
+    next: 'workflow-binding-and-submit-schema-before-green',
+  }),
+  Object.freeze({
+    id: 'heal-envelope-emitter',
+    kind: 'tool',
+    status: 'GREEN',
+    source: 'tools/behcs/heal-envelope-emitter.mjs',
+    exposes: 'schema-valid-self-heal-proposal-envelopes-only',
+    next: 'advance-only-through-registrar-cosign-feeder-daemons-under-gate',
+  }),
+  Object.freeze({
+    id: 'route-health-baseline',
+    kind: 'tool',
+    status: 'GREEN',
+    source: 'tools/behcs/route-health-baseline.mjs+docs/ACER-BUS-HEALTH-CONTRACT-FIX-2026-06-13.hbp',
+    exposes: '4944-4947-4949-route-health-and-route-boundary-vs-down',
+    next: 'keep-vantage-relative-labels-visible',
+  }),
+  Object.freeze({
+    id: 'mlc-engine-wiring-increment',
+    kind: 'tool',
+    status: 'PARTIAL',
+    source: 'tools/behcs/mlc-engine-wiring-increment.mjs',
+    exposes: 'C036-MTP-HRM-GNN-Fischer-Mamba-AoT-descriptor-wiring',
+    next: 'fabric-ranked-daemon-contract-before-process-launch',
+  }),
+  Object.freeze({
+    id: 'fabric-council',
+    kind: 'skill',
+    status: 'PARTIAL',
+    source: 'mcp-asolaria-fabric-council-query+/api/council-verdicts',
+    exposes: 'ask-fabric-verdict-loop-when-available',
+    next: 'cold-path-verdict-cache-before-green',
+  }),
+  Object.freeze({
+    id: 'cosign-submit-schema',
+    kind: 'tool',
+    status: 'GATED',
+    source: 'docs/ACER-SLICE-ENGINE-COSIGN-MINT-2026-06-14.hbp',
+    exposes: 'single-writer-cosign-submit-route-known-but-submit-schema-not-front-end-proofed',
+    next: 'build-cosign-submit-schema-proof-before-exposing-submit-form',
+  }),
+  Object.freeze({
+    id: 'live-engine-daemon-contract',
+    kind: 'skill',
+    status: 'GATED',
+    source: 'docs/LIRIS-MLC-ENGINE-WIRING-INCREMENT-2026-06-14.hbp+docs/ACER-ATTACK-LIRIS-MLC-ENGINE-WIRING-2026-06-14.hbp',
+    exposes: 'C036-live-engine-launch-remains-contract-gated',
+    next: 'wait-for-fabric-ranked-daemon-route-and-schema-before-any-launch',
+  }),
+]);
+
+const sha16 = (text) => createHash('sha256').update(String(text), 'utf8').digest('hex').slice(0, 16);
+const isObj = (x) => x !== null && typeof x === 'object';
+const safe = (x) => { try { return String(x == null ? '' : x).replace(/[|\r\n]/g, '_'); } catch { return '_'; } };
+const prop = (obj, key, fallback = '') => {
+  try { return isObj(obj) ? obj[key] : fallback; } catch { return fallback; }
+};
+
+function normalizeStatus(value) {
+  const status = safe(value).toUpperCase();
+  return STATUSES.includes(status) ? status : 'RED';
+}
+
+export function normalizeItem(input) {
+  try {
+    const id = safe(prop(input, 'id', 'unknown')) || 'unknown';
+    const kind = safe(prop(input, 'kind', 'tool')) || 'tool';
+    const source = safe(prop(input, 'source', 'CANNOT_SEE')) || 'CANNOT_SEE';
+    const exposes = safe(prop(input, 'exposes', 'define-visible-capability'));
+    const status = normalizeStatus(prop(input, 'status', 'RED'));
+    return {
+      id,
+      kind,
+      status,
+      source,
+      exposes,
+      next: safe(prop(input, 'next', 'define-next-proof')),
+      process_launch: 0,
+      live_tool_execution: 0,
+      cutover: 0,
+      row_sha16: sha16([id, kind, status, source, exposes].join('|')),
+    };
+  } catch {
+    return {
+      id: 'invalid',
+      kind: 'invalid',
+      status: 'RED',
+      source: 'CANNOT_SEE',
+      exposes: 'normalize-threw',
+      next: 'fix-invalid-tool-skill-row',
+      process_launch: 0,
+      live_tool_execution: 0,
+      cutover: 0,
+      row_sha16: sha16('invalid'),
+    };
+  }
+}
+
+export function registryItem(input = {}) {
+  try {
+    const topic = safe(prop(input, 'topic', input)).toLowerCase();
+    const items = REGISTRY_ITEMS.map(normalizeItem);
+    const pick = (id, reason) => ({ topic: safe(topic || 'default'), selected: id, reason, item: items.find((x) => x.id === id) });
+    if (/submit|schema|chain|cosign/.test(topic)) return pick('cosign-submit-schema', 'submit-requests-remain-schema-gated');
+    if (/route|health|api|dashboard/.test(topic)) return pick('route-health-baseline', 'route-requests-use-health-baseline');
+    if (/\bheal\b|repair|\bself\b/.test(topic)) return pick('heal-envelope-emitter', 'heal-requests-use-proposal-emitter-only');
+    if (/model|selector|gemma|fischer/.test(topic)) return pick('model-selector-matrix', 'model-requests-use-M-selector-no-live-invocation');
+    if (/project|guide|frontier|queue|catch/.test(topic)) return pick('project-guide-matrix', 'project-requests-use-P-guide');
+    if (/live|daemon|launch/.test(topic)) return pick('live-engine-daemon-contract', 'live-daemon-requests-stay-contract-gated');
+    if (/mlc|engine|mtp|hrm|gnn|mamba|aot/.test(topic)) return pick('mlc-engine-wiring-increment', 'engine-requests-use-descriptor-no-launch');
+    if (/council|fabric|verdict|ask/.test(topic)) return pick('fabric-council', 'fabric-requests-use-council-loop-when-available');
+    return pick('preload-catalog', 'default-to-preload-catalog-index');
+  } catch {
+    return { topic: 'invalid', selected: 'preload-catalog', reason: 'registry-threw-default-held', item: normalizeItem(REGISTRY_ITEMS[0]) };
+  }
+}
+
+export function buildRegistry(input = REGISTRY_ITEMS) {
+  const items = (Array.isArray(input) ? input : REGISTRY_ITEMS).map(normalizeItem);
+  const count = (status) => items.filter((item) => item.status === status).length;
+  return {
+    tool: REGISTRY_ID,
+    frontend_cell: FRONTEND_CELL,
+    items,
+    summary: {
+      total: items.length,
+      green: count('GREEN'),
+      partial: count('PARTIAL'),
+      gated: count('GATED'),
+      red: count('RED'),
+      t_cell_status: T_CELL_STATUS,
+      live_tool_execution_ready: false,
+      cutover_ready: false,
+    },
+  };
+}
+
+export function emitRows(input = REGISTRY_ITEMS, opts = {}) {
+  try {
+    const built = buildRegistry(input);
+    const s = built.summary;
+    const limitRaw = Number.parseInt(safe(prop(opts, 'limit', built.items.length)), 10);
+    const limit = Math.max(0, Math.min(Number.isFinite(limitRaw) ? limitRaw : built.items.length, built.items.length));
+    const rows = [
+      `TOOLSKILLHDR|tool=${REGISTRY_ID}|frontend_cell=T|purpose=tool-skill-registry-before-any-live-tool-execution|items=${s.total}|read_only=1|process_launch=0|live_tool_execution=0|no_fetch=1|no_write=1|no_spawn=1|no_mint=1|no_cutover=1|json=0`,
+      `TOOLSKILLSUM|green=${s.green}|partial=${s.partial}|gated=${s.gated}|red=${s.red}|T_cell_status=${s.t_cell_status}|cutover_ready=0|json=0`,
+    ];
+    for (const item of built.items.slice(0, limit)) {
+      rows.push(`TOOLSKILL|id=${safe(item.id)}|kind=${safe(item.kind)}|status=${safe(item.status)}|source=${safe(item.source)}|exposes=${safe(item.exposes)}|next=${safe(item.next)}|row_sha16=${safe(item.row_sha16)}|process_launch=0|live_tool_execution=0|cutover=0|json=0`);
+    }
+    const topic = prop(opts, 'topic', '');
+    if (topic) {
+      const selected = registryItem({ topic });
+      rows.push(`TOOLSKILLROUTE|topic=${safe(selected.topic)}|selected=${safe(selected.selected)}|reason=${safe(selected.reason)}|selected_status=${safe(prop(selected.item, 'status', 'RED'))}|json=0`);
+    }
+    rows.push('TOOLSKILLGATE|front_end_cell=T|status=PARTIAL|reason=registry-artifact-built-but-live-tool-execution-submit-form-and-live-daemon-contract-remain-gated|process_launch=0|live_tool_execution=0|cutover=0|json=0');
+    return rows;
+  } catch {
+    return [
+      `TOOLSKILLHDR|tool=${REGISTRY_ID}|frontend_cell=T|purpose=tool-skill-registry-before-any-live-tool-execution|items=0|read_only=1|process_launch=0|live_tool_execution=0|no_cutover=1|json=0`,
+      'TOOLSKILLGATE|front_end_cell=T|status=RED|reason=emit-threw-held-invalid|process_launch=0|live_tool_execution=0|cutover=0|json=0',
+    ];
+  }
+}
+
+export function selfTest() {
+  const checks = [];
+  const add = (name, ok) => checks.push({ name, ok: Boolean(ok) });
+  const registry = buildRegistry();
+  add('all-items-present', registry.summary.total === 9 && registry.items.some((x) => x.id === 'cosign-submit-schema'));
+  add('t-cell-partial-not-green', registry.summary.t_cell_status === T_CELL_STATUS && registry.summary.cutover_ready === false);
+  add('no-live-tool-execution', registry.items.every((x) => x.process_launch === 0 && x.live_tool_execution === 0 && x.cutover === 0));
+  add('routes-cosign-schema', registryItem({ topic: 'cosign submit schema' }).selected === 'cosign-submit-schema');
+  add('routes-tool-skill-default', registryItem({ topic: 'tool skill registry' }).selected === 'preload-catalog');
+  add('routes-live-engine-gated', registryItem({ topic: 'live engine daemon launch' }).selected === 'live-engine-daemon-contract');
+  const hostile = emitRows([{ id: 'x|bad', kind: 'tool\nbad', status: 'GREEN', source: 's|json=1', exposes: 'e\nTOOLSKILLGATE|process_launch=1' }], { topic: 'schema|json=1\nTOOLSKILLGATE|process_launch=1' });
+  add('rows-hbp-only', hostile.every((row) => row.endsWith('|json=0') && !/[\r\n]/.test(row)));
+  add('total-never-throws', (() => { try { normalizeItem({ get id() { throw new Error('boom'); } }); registryItem({ get topic() { throw new Error('boom'); } }); emitRows(null); return true; } catch { return false; } })());
+  return { ok: checks.every((c) => c.ok), checks };
+}
+
+const isMain = process.argv[1] && fileURLToPath(import.meta.url) === resolve(process.argv[1]);
+if (isMain) {
+  if (process.argv[2] === '--self-test') {
+    const r = selfTest();
+    for (const c of r.checks) console.log(`${c.ok ? 'PASS' : 'FAIL'} ${c.name}`);
+    process.exit(r.ok ? 0 : 1);
+  }
+  const topicArg = process.argv.find((arg) => arg.startsWith('--topic='));
+  const limitArg = process.argv.find((arg) => arg.startsWith('--limit='));
+  const opts = {
+    topic: topicArg ? topicArg.slice('--topic='.length) : '',
+    limit: limitArg ? limitArg.slice('--limit='.length) : REGISTRY_ITEMS.length,
+  };
+  process.stdout.write(emitRows(REGISTRY_ITEMS, opts).join('\n') + '\n');
+}

tools/behcs/tool-skill-registry-matrix.mjs.sha256

@@ -0,0 +1 @@
+9386738C70BF32860305B7DFADCDE253407287E5D8E35B5683D227B9EEA3169A  tool-skill-registry-matrix.mjs