BigSimmo · BigSimmo · Jul 30, 2026 · Jul 30, 2026 · Jul 30, 2026 · Jul 30, 2026
@@ -32,6 +32,10 @@ Use this protocol for every Codex review, audit, bug hunt, PR review, release-re
 - Ask before any OpenAI, Supabase, GitHub/GitLab, hosted CI, or provider-backed workflow.
 - After any completed branch/PR review, append to `docs/branch-review-ledger.md` with `npm run ledger:append -- --ref <x> --head <full-sha> --scope <s> --outcome <o> --checks <c>`. Record the full 40-character SHA; `see PR head` and abbreviations make the record unmatchable and cause the review to run again. The ledger is append-only: never edit or delete an existing record; append a correction or superseding record (`--supersede`) instead. This ledger append is allowed even during a pure review. Do not hand-write the markdown row — hand-written rows are what produced the mojibake, wrong-width, and duplicate records the 2026-07-28 hygiene pass had to repair. Do not push a tip whose sole delta is a babysit ledger append; after merging `origin/main` into a branch that touched the ledger, run `npm run ledger:dedupe` when exact twins appear.
 
+## Ledger Rotation
+
+At the start of each UTC calendar quarter, or earlier when the live table becomes unwieldy, run `npm run ledger:rotate -- --dry-run`. If the preview contains only the intended completed records, run `npm run ledger:rotate` and commit the live ledger and generated archive together. Lookup, sweep, and integrity checks read both locations. Never hand-move rows or delete unique review content; stop if the dry-run shows unexpected mass movement or an archive-path collision.
+
 ## Severity Guide
 
 - P0: Data loss, security breach, production outage, or clinical safety issue likely to harm users immediately.

@@ -124,10 +124,16 @@ failures.push(...collectPinFailures(process.cwd()));
 
 const ciWorkflowPath = path.join(workflowDir, "ci.yml");
 const ciWorkflow = readFileSync(ciWorkflowPath, "utf8");
+const ciPullRequestTrigger = yamlBlock(ciWorkflow, "pull_request:", 2);
 const migrationJob = yamlBlock(ciWorkflow, "db-reset-verify:", 2);
 const setupSupabaseStep = yamlBlock(migrationJob, "- name: Setup Supabase CLI", 6);
 const restoreSupabaseStep = yamlBlock(migrationJob, "- name: Restore Supabase Docker image cache", 6);
 const saveSupabaseStep = yamlBlock(migrationJob, "- name: Save Supabase Docker images", 6);
+if (!/^    types: \[opened, synchronize, reopened, ready_for_review\]$/m.test(ciPullRequestTrigger)) {
+  failures.push(
+    "ci.yml: pull_request events must retain opened/synchronize/reopened and include ready_for_review so undrafting starts required CI.",
+  );
+}
 if (!new RegExp(`^  SUPABASE_CLI_VERSION: ${expectedSupabaseCliVersionPattern}$`, "m").test(ciWorkflow)) {
   failures.push(`ci.yml: global SUPABASE_CLI_VERSION must remain pinned to ${expectedSupabaseCliVersion}.`);
 }

@@ -33,6 +33,7 @@ export const ISSUES_PATH = "docs/outstanding-issues.md";
 const OPEN_HEADING = "## Open items";
 const ARCHIVE_HEADING = "## Resolved / archive";
 const MARKER = /<!--\s*issues:next-id=(\d+)\s*-->/;
+const PRETTIER_IGNORE = "<!-- prettier-ignore -->";
 /**
  * An id cell's shape, e.g. `#042`. Used to READ the number, never to decide
  * whether a line is a row.
@@ -72,6 +73,10 @@ function cells(line) {
     .map((cell) => cell.trim());
 }
 
+function canonicalTableRow(line) {
+  return `| ${cells(line).join(" | ")} |`;
+}
+
 /**
  * The lines that make up one table's BODY, and the width its separator declares.
  *
@@ -224,9 +229,33 @@ export function parseIssues(markdown) {
   };
 }
 
-export function checkIssues(markdown) {
+export function checkIssues(markdown, { prettierIgnored = false } = {}) {
   const problems = [];
   const { openStart, archiveStart, nextId, markerCount, rows, orphans, bodyCount } = parseIssues(markdown);
+  const lines = markdown.split("\n");
+
+  // Prettier pads every Markdown table cell to the widest value in its column.
+  // In this long-lived ledger, changing one cell would then rewrite hundreds
+  // of unrelated rows and make concurrent merges needlessly conflict.
+  for (let index = 0; index < lines.length; index += 1) {
+    const line = lines[index];
+    if (/^\|.*\|\s*$/.test(line) && line !== canonicalTableRow(line)) {
+      problems.push(
+        `line ${index + 1} is not a compact canonical table row — use one space around each cell delimiter`,
+      );
+    }
+    if (
+      !prettierIgnored &&
+      /^\|/.test(line) &&
+      SEPARATOR.test(lines[index + 1] ?? "") &&
+      lines[index - 1]?.trim() !== PRETTIER_IGNORE
+    ) {
+      problems.push(
+        `line ${index + 1} starts a table without ${PRETTIER_IGNORE} immediately above it — ` +
+          "formatting would re-pad every row and amplify merge conflicts",
+      );
+    }
+  }
 
   if (openStart < 0) problems.push(`missing the "${OPEN_HEADING}" heading`);
   if (archiveStart < 0) problems.push(`missing the "${ARCHIVE_HEADING}" heading`);
@@ -338,6 +367,10 @@ export function checkIssues(markdown) {
   return problems;
 }
 
+export function prettierIgnoreCoversIssues(prettierIgnore) {
+  return prettierIgnore.split(/\r?\n/).some((line) => line.trim() === ISSUES_PATH);
+}
+
 /**
  * IDs that existed at the comparison base but disappeared from the current
  * ledger entirely. Moving a row from open to archive keeps its allocation and
@@ -396,17 +429,26 @@ function readIssuesAtRevision(ref) {
 function selfTest() {
   const good = [
     "<!-- issues:next-id=3 -->",
+    "## Recommended execution queue",
+    PRETTIER_IGNORE,
+    "| Rank | ID |",
+    "| --- | --- |",
+    "| 1 | #001 |",
     "## Open items",
+    PRETTIER_IGNORE,
     "| ID | Pri | Summary |",
     "| --- | --- | --- |",
     "| #001 | P2 | a |",
     "## Resolved / archive",
+    PRETTIER_IGNORE,
     "| ID | Summary |",
     "| --- | --- |",
     "| #002 | b |",
   ].join("\n");
   const cases = [
     ["a well-formed file", good, 0],
+    ["a table without a scoped prettier ignore", good.replace(`${PRETTIER_IGNORE}\n| Rank | ID |`, "| Rank | ID |"), 1],
+    ["a padded table row", good.replace("| #001 | P2 | a |", "| #001 | P2      | a |"), 1],
     ["a duplicated id", good.replace("| #002 | b |", "| #001 | b |"), 2], // duplicate + both-tables
     ["an id at the marker", good.replace("next-id=3", "next-id=2"), 1],
     ["a row with a stray pipe", good.replace("| #001 | P2 | a |", "| #001 | P2 | a | b |"), 1],
@@ -459,6 +501,19 @@ function selfTest() {
       for (const problem of problems) console.error(`  - ${problem}`);
     }
   }
+  const fileWideIgnoreProblems = checkIssues(good.replaceAll(`${PRETTIER_IGNORE}\n`, ""), {
+    prettierIgnored: true,
+  });
+  if (fileWideIgnoreProblems.length !== 0) {
+    failures += 1;
+    console.error(
+      `self-test FAILED: a file-wide prettier ignore replaces scoped table comments — expected 0 problems, got ${fileWideIgnoreProblems.length}`,
+    );
+  }
+  if (!prettierIgnoreCoversIssues(`# ledger files\n${ISSUES_PATH}\n`) || prettierIgnoreCoversIssues("docs/*.md\n")) {
+    failures += 1;
+    console.error("self-test FAILED: file-wide prettier-ignore detection must require the exact ledger path");
+  }
   if (failures > 0) process.exit(1);
 
   const deletionCases = [
@@ -526,7 +581,13 @@ function main() {
     return;
   }
   const markdown = readFileSync(ISSUES_PATH, "utf8");
-  const problems = checkIssues(markdown);
+  let prettierIgnored = false;
+  try {
+    prettierIgnored = prettierIgnoreCoversIssues(readFileSync(".prettierignore", "utf8"));
+  } catch {
+    // Without a file-wide ignore, each table must carry its own scoped comment.
+  }
+  const problems = checkIssues(markdown, { prettierIgnored });
   const base = issueBaseRevision();
   let checkedBase = null;
   if (base) {

@@ -542,6 +542,18 @@ function selfTest() {
     },
   );
 
+  assertScope("workflow-only-keeps-coverage", [".github/workflows/ci.yml"], {
+    coverage_changed: true,
+    workflow_changed: true,
+  });
+  assertScope("composite-action-only-keeps-coverage", [".github/actions/setup-ui-e2e/action.yml"], {
+    coverage_changed: true,
+    workflow_changed: true,
+  });
+  assertScope("runtime-config-keeps-coverage", ["lighthouse-budget.json"], {
+    coverage_changed: true,
+  });
+
   assertScope("unstaged-status", parseStatusPorcelain(" M scripts/ci-change-scope.mjs\0"), {
     source_changed: true,
     workflow_changed: true,

@@ -972,6 +972,17 @@ test.beforeEach(stubZeroTouchPoints);
 test.describe("Clinical KB UI smoke coverage", () => {
   test.describe.configure({ timeout: 60000 });
 
+  test("Supabase connection hints reach the document head without provider traffic", async ({ page }) => {
+    await page.goto("/", { waitUntil: "domcontentloaded" });
+
+    const preconnect = page.locator('head link[rel="preconnect"][href="http://127.0.0.1:1"]');
+    const dnsPrefetch = page.locator('head link[rel="dns-prefetch"][href="http://127.0.0.1:1"]');
+
+    await expect(preconnect).toHaveCount(1);
+    await expect(preconnect).toHaveAttribute("crossorigin", "anonymous");
+    await expect(dnsPrefetch).toHaveCount(1);
+  });
+
   for (const viewport of dashboardViewports) {
     test(`dashboard loads without page overflow at ${viewport.name}`, async ({ page }) => {
       await page.setViewportSize({ width: viewport.width, height: viewport.height });
@@ -3584,6 +3595,7 @@ test.describe("Clinical KB UI smoke coverage", () => {
     ).toBeVisible();
 
     const sourceSearch = page.getByLabel("Search within indexed source text").last();
+    await waitForReactEventHandler(sourceSearch, "onChange");
     await sourceSearch.fill("safety plan include");
     const desktopTextPanel = page.getByTestId("source-chunk-indexed-text-panel");
     await expect(desktopTextPanel.getByText("Hit 1 of 2").first()).toBeVisible();