Paint combinator statement pages before operand IPFS reads finish

.claude/hooks/block-protected-branch.sh

@@ -1,30 +1,28 @@
 #!/usr/bin/env bash
-# Claude Code PreToolUse hook (Bash): stop an agent from committing/pushing
-# directly on master or dev. This is the "graceful" layer — the .husky git
-# hooks are the real enforcement (and fire for any tool, not just Claude).
+# PreToolUse hook (Bash / Grok run_terminal_command): stop an agent from
+# committing/pushing/merging directly on master or dev. This is the "graceful"
+# layer — the .husky git hooks are the real enforcement (and fire for any tool).
 #
 # Exit 2 blocks the tool call and feeds stderr back to the model so it can
 # self-correct by starting a feature branch.
 
+set -euo pipefail
+
+HOOK_DIR=$(CDPATH= cd -- "$(dirname -- "$0")" && pwd)
+MATCHER="$HOOK_DIR/git-mutating-subcommand.py"
+
+if [ "${1:-}" = --self-test ]; then
+  exec python3 "$MATCHER" --self-test
+fi
+
 input=$(cat)
-cmd=$(printf '%s' "$input" | sed -n 's/.*"command"[[:space:]]*:[[:space:]]*"\(.*\)/\1/p')
 
-# Only care about git commit / push / merge as real subcommands.
-# Pattern: git, optional intermediate tokens (e.g. -C path), then commit|push|merge
-# as a whole token. The char after the subcommand must not be alnum/_/- so we do
-# NOT match false friends: merge-base, merge-file, merge-tree, commit-tree.
-# Example that must stay allowed: `git merge-base --is-ancestor origin/master origin/dev`
-if ! printf '%s' "$cmd" | grep -Eq \
-  '(^|[^[:alnum:]_/-])git[[:space:]]+(.+[[:space:]])?(commit|push|merge)([^[:alnum:]_-]|$)'; then
+# Honor the same escape hatch as the git hooks (also recognized inside the matcher).
+if ! printf '%s' "$input" | python3 "$MATCHER"; then
   exit 0
 fi
 
-# Honor the same escape hatch as the git hooks.
-case "$cmd" in
-  *ALLOW_PROTECTED_COMMIT=1*) exit 0 ;;
-esac
-
-branch=$(git -C "${CLAUDE_PROJECT_DIR:-.}" symbolic-ref --short HEAD 2>/dev/null)
+branch=$(git -C "${CLAUDE_PROJECT_DIR:-.}" symbolic-ref --short HEAD 2>/dev/null || true)
 case "$branch" in
   master|dev)
     echo "Blocked: '$branch' is a protected branch. Do not commit/push/merge directly onto it." >&2

.claude/hooks/git-mutating-subcommand.py

@@ -0,0 +1,128 @@
+#!/usr/bin/env python3
+"""Detect git commit/push/merge as real subcommands in a shell snippet.
+
+Used by block-protected-branch.sh. First non-option token after `git` must be
+exactly commit, push, or merge — not merge-base, and not the word "merge" in a
+log message or tool description.
+"""
+from __future__ import annotations
+
+import json
+import re
+import shlex
+import sys
+
+MUTATING = {"commit", "push", "merge"}
+
+
+def extract_command(raw: str) -> str:
+    raw = raw.strip()
+    if not raw:
+        return ""
+    try:
+        data = json.loads(raw)
+    except json.JSONDecodeError:
+        return raw
+    if not isinstance(data, dict):
+        return ""
+    cmd = data.get("command")
+    if isinstance(cmd, str) and cmd:
+        return cmd
+    tool_input = data.get("tool_input")
+    if isinstance(tool_input, dict):
+        inner = tool_input.get("command")
+        if isinstance(inner, str):
+            return inner
+    return ""
+
+
+def _statements(cmd: str) -> list[str]:
+    return re.split(r"[;\n]|\|\||&&|\|", cmd)
+
+
+def _first_git_subcommand(argv: list[str]) -> tuple[str | None, bool]:
+    i = 0
+    while i < len(argv) and re.match(r"^[A-Za-z_][A-Za-z0-9_]*=", argv[i]):
+        i += 1
+    if i >= len(argv):
+        return None, False
+    if not re.search(r"(^|/)git$", argv[i]):
+        return None, False
+    allow = any(re.match(r"ALLOW_PROTECTED_COMMIT=", a) for a in argv[: i + 1])
+    i += 1
+    while i < len(argv):
+        a = argv[i]
+        if a == "--":
+            i += 1
+            break
+        if a in ("-C", "-c"):
+            i += 2
+            continue
+        if a.startswith("-"):
+            i += 1
+            continue
+        return a, allow
+    if i < len(argv):
+        return argv[i], allow
+    return None, allow
+
+
+def is_mutating_git(cmd: str) -> bool:
+    for stmt in _statements(cmd):
+        stmt = stmt.strip()
+        if not stmt:
+            continue
+        try:
+            argv = shlex.split(stmt)
+        except ValueError:
+            argv = stmt.split()
+        sub, allow = _first_git_subcommand(argv)
+        if sub in MUTATING and not allow:
+            return True
+    return False
+
+
+def self_test() -> int:
+    samples = [
+        ("git log --oneline", False),
+        ("git merge-base --is-ancestor a b", False),
+        ("/usr/bin/git merge-base --is-ancestor a b", False),
+        ("git status", False),
+        ("git switch -c feature/x", False),
+        ("git merge other", True),
+        ("git commit -m msg", True),
+        ("git push origin HEAD", True),
+        ("git -C /tmp merge other", True),
+        ("git -C /tmp merge-base a b", False),
+        ('git log; echo "merge status"', False),
+        ("ALLOW_PROTECTED_COMMIT=1 git commit -m x", False),
+    ]
+    failed = 0
+    for sample, expect in samples:
+        got = is_mutating_git(sample)
+        if got != expect:
+            print(f"FAIL {sample!r}: got {got}, want {expect}", file=sys.stderr)
+            failed += 1
+    payload = json.dumps({
+        "command": "git log --oneline",
+        "description": "Inspect serialize branch history and merge status",
+    })
+    if is_mutating_git(extract_command(payload)):
+        print("FAIL json description containing 'merge' blocked git log", file=sys.stderr)
+        failed += 1
+    if failed:
+        return 1
+    print(f"{len(samples) + 1} checks passed")
+    return 0
+
+
+def main(argv: list[str]) -> int:
+    if argv[1:] == ["--self-test"]:
+        return self_test()
+    raw = sys.stdin.read()
+    cmd = extract_command(raw)
+    return 0 if is_mutating_git(cmd) else 1
+
+
+if __name__ == "__main__":
+    raise SystemExit(main(sys.argv))

.env.example

@@ -14,6 +14,12 @@
 #
 # Local dev should use ./scripts/services.sh --start (not raw docker compose),
 # followed by ./scripts/data.sh --seed or ./scripts/data.sh --seed=demo.
+#
+# Temporary: local start publishes only the CauseStarter IPFS bundle.
+# Restore all eight legacy UIs + CauseStarter with:
+#   LOCAL_UI_DOMAINS=all ./scripts/services.sh --start
+# LOCAL_UI_DOMAINS=causestarter
+# LOCAL_UI_DOMAINS=all
 
 # =============================================================================
 # Generated private secrets (set in .env.secrets — never commit)
@@ -23,6 +29,7 @@
 # IMPLICATION_ATTESTER_PRIVATE_KEY=0x...
 # CONTENT_ATTESTER_PRIVATE_KEY=0x...
 # CAUSE_ASSIST_COHERENCE_ATTESTER_PRIVATE_KEY=0x...  # operator key for CauseStarter coherence badges
+# ALIGNMENT_TRUST_BOOTSTRAP_PRIVATE_KEY=0x...  # funded CauseStarter trust-writer hot wallet
 # VERIFIER_PRIVATE_KEY=0x...
 # IMPLICATION_GRAPH_NUDGER_PRIVATE_KEY=0x...
 # BRIDGE_CREATOR_PRIVATE_KEY=0x...
@@ -42,6 +49,7 @@
 # IMPLICATION_ATTESTER_ADDRESS=0x...
 # CONTENT_ATTESTER_ADDRESS=0x...
 # CAUSE_ASSIST_COHERENCE_ATTESTER_ADDRESS=0x...
+# ALIGNMENT_TRUST_BOOTSTRAP_ADDRESS=0x...
 # CHANNEL_VERIFIER_TRUSTED_SIGNER_ADDRESS=0x...
 # IMPLICATION_GRAPH_NUDGER_ADDRESS=0x...
 # BRIDGE_CREATOR_ADDRESS=0x...
@@ -50,6 +58,9 @@
 # IMPLICATION_ATTESTER_PAYMENT_ADDRESS=0x...
 # CONTENT_ATTESTER_PAYMENT_ADDRESS=0x...
 # VITE_DEFAULT_TRUSTED_ATTESTERS=0x...
+# CauseStarter's bootstrap alignment trust service. Must equal ALIGNMENT_TRUST_BOOTSTRAP_ADDRESS.
+# VITE_DEFAULT_ALIGNMENT_TRUST_ROOT=0x...
+# ALIGNMENT_TRUST_DENYLISTED_ADDRESS=0x...
 # VITE_DEFAULT_TRUSTED_CONTENT_ATTESTERS=0x...
 # VITE_NONINFLAMMATORY_TOPIC_CID=bafy...
 # VITE_DEFAULT_NUDGERS=[{"address":"0x...","name":"..."}]
@@ -59,7 +70,9 @@
 # External services (set in .env.secrets)
 # =============================================================================
 # OPENROUTER_API_KEY=sk-...
-# XAI_API_KEY=xai-...   # cause-assist (Grok)
+# OPENROUTER_MODEL=deepseek/deepseek-v4-flash-0731  # production services only
+# DEV_OPENROUTER_MODEL=deepseek/deepseek-v4-flash-0731  # laptop scripts (fake-data-generation); does not affect services
+# XAI_API_KEY=xai-...   # unused if OPENROUTER_API_KEY is set (cause-assist / worker fallback)
 # VITE_WALLETCONNECT_PROJECT_ID=...
 # PINATA_JWT=...
 BASE_SEPOLIA_RPC_URL=https://sepolia.base.org

.env.secrets.example

@@ -15,6 +15,7 @@
 IMPLICATION_ATTESTER_PRIVATE_KEY=0x_your_implication_attester_wallet_private_key
 CONTENT_ATTESTER_PRIVATE_KEY=0x_your_content_attester_wallet_private_key
 CAUSE_ASSIST_COHERENCE_ATTESTER_PRIVATE_KEY=0x_your_causestarter_coherence_operator_key
+ALIGNMENT_TRUST_BOOTSTRAP_PRIVATE_KEY=0x_your_causestarter_alignment_trust_bootstrap_key
 BEAT_AGENT_PRIVATE_KEY=0x_your_beat_agent_wallet_private_key
 VERIFIER_PRIVATE_KEY=0x_your_channel_verifier_signer_private_key
 IMPLICATION_GRAPH_NUDGER_PRIVATE_KEY=0x_your_implication_graph_nudger_private_key

.gitignore

@@ -1,6 +1,7 @@
 .DS_Store
 .envrc
 node_modules
+**/dist/
 .env
 .env.secrets
 .env.render
@@ -9,10 +10,9 @@ services/implication-attester/.env
 ui/.env
 integration-tests/.env.local
 typechain-types/
-services/implication-attester/dist
-published-data-ipfs-mirror/dist/
 hardhat/deployments/
 deployments/localhost.env
+deployments/localhost.contracts-manifest.json
 deployments/operator-addresses.env
 /data
 sdk/src/generated/
@@ -34,10 +34,8 @@ tmp/
 
 
 # Local build outputs for new packages
-causestarter/dist/
 # Generated at container startup; local copies may contain environment-specific addresses.
 /causestarter/public/config.json
-cause-assist/dist/
 
 # pi subagent scratch artifacts
 .pi-subagents/

.husky/pre-commit

@@ -5,8 +5,7 @@ export FORCE_COLOR=1  # helps lazygit show color
 protected_branch_guard commit
 
 # Validate doc links whenever any prose doc changes (cheap, offline).
-# specs/chats is raw transcripts, not maintained prose — see check-docs-links.sh.
-if git diff --cached --name-only | grep -vE '^specs/chats/' | grep -qE '\.md$'; then
+if git diff --cached --name-only | grep -qE '\.md$'; then
   echo "Checking docs links..."
   npm run check:docs-links || exit 1
 fi

CONTINUITY.md

@@ -1770,3 +1770,32 @@ which are worth checking first if this is repeated:
 - Each moved package's `eslint.config.js` imports the root `eslint.metrics.mjs`
   relatively and needed `../../`. `npm run lint-precommit` does **not** cover
   these packages, so only a full `npx turbo run lint` surfaces it.
+
+## 2026-08-18 — Local start publishes CauseStarter IPFS only
+
+Temporary, reversible: `./scripts/services.sh --start` and `./scripts/deploy-causestarter.sh` no longer build/publish the eight legacy `ui` domain SPAs by default. Default `LOCAL_UI_DOMAINS` is `causestarter`. Restore with `LOCAL_UI_DOMAINS=all`. Source of truth: `scripts/ui-domains.mjs` (`resolveLocalPublishDomains`). Docs: `workflow/local-development.md`, `.env.example`, `README.md`. CauseStarter on `:8090` is unchanged.
+
+## 2026-08-18 — Faster local seed
+
+`./scripts/data.sh --seed` now defaults to **tiny** (was small). `gen:small` and `gen:tiny` both pass `--skip-invariants`. Statement publish reuses one document store (or parallel PublishedData writes across Hardhat wallets, receipts awaited in a batch). Seed RPC clients poll every 50ms. See `fake-data-generation/generateStatements.ts`, `fake-data-generation/seedRpc.ts`, `scripts/data.sh`.
+
+## 2026-08-24 — Cause board is the organizer publication, not the project list
+
+Copy sweep of [cause-page-not-a-club.md](specs/product/cause-page-not-a-club.md):
+the Aligning/project list is now **fundable-projects board** in UI copy and
+end-user docs; **cause board** is the CauseStarter organizer publication
+(leftover “cause page” left in comments). Routes still `/portal/:cid` and
+`/cause/:owner/:slug`; identifiers `fundingportal*` lag.
+
+## 2026-08-20 — Anvil `--state` restart dump
+
+Local `hardhat-node` was coming back empty after `stack.restart-consistency` because Docker SIGTERM did not make Anvil dump `/data/state.json` (then a fresh deploy + trust wiring filled ~41 blocks with no seed). Fix: `scripts/anvil-docker-entrypoint.sh` maps SIGTERM→SIGINT, compose `--state-interval 15` and 60s grace, restart check records block height and SIGINTs Anvil before stop. Recreate `hardhat-node` to mount the wrapper.
+
+## 2026-08-27 — Statement generation process + exercise 1
+
+Process: [`fake-data-generation/statement-generation.md`](fake-data-generation/statement-generation.md). Fresh-instance handoff: [`continuity/2026-08-27-statement-generation.md`](continuity/2026-08-27-statement-generation.md).
+
+Exercise 1 (simple causes, no triples) gold set remains in `fake-data-generation/statement-generation-exercises/01-simple-causes.json`. Live copy: `fake-data-generation/seed-content/simple-causes.json`. Nested-place rollup is board inclusion, not implication (Ontario-wide planks are genuine wants; garden relevant areas + roster `within` Ontario). `loadSeedCollections` still does not read the exercises directory. Tiny seed still uses the explorer slogan for the garden project. Nested-place pairs are designed-no: `npm run gen:seed:simple-causes-implications`. Cause-assist `STATEMENT_QUALITY_GUIDANCE` includes: want the outcome (not “X is a public good”), do not plank payroll, earmark grain as a ladder (kind + place), do not emit geo implication parents. Rebuild Docker cause-assist to serve the new prompt.
+
+Do not train implication generation on Christianity × secular-conservatism. Next: curriculum exercise 2. The implication attester prompt now rejects nested-place geographic rollup (Grey County → Ontario is a worked reject, not an accept).
+

README.md

@@ -11,7 +11,8 @@ Commonality is a system for decentralized crowdfunding of public goods: people c
   - [High-level project status](./workflow/project-status.md) AKA what milestone are we currently heading for: never deployed to mainnet yet, just did first testnet deployment, see also [MVP](./specs/product/mvp.md)
   - Product boundaries between the eight sites: [product UI domains](./specs/product/ui-domains.md).
   - Technical domain composition and live route ownership: [technical UI domains](./specs/tech/ui-domains.md) and the actual domain manifests under [`ui/src/domains/`](./ui/src/domains/).
-  - **CauseStarter** ([`causestarter/`](./causestarter/), backlog [`causestarter/TODO.md`](./causestarter/TODO.md)): founder-first core domain (eventual primary entry; Tally / LazyGiving / etc. de-emphasized as tools). Included in `./scripts/services.sh --start` and `./scripts/deploy-causestarter.sh`. LLM helpers: [`cause-assist/`](./cause-assist/).
+  - **CauseStarter** (SPA in [`ui/src/causestarter/`](./ui/src/causestarter/), `VITE_DOMAIN=causestarter`; glue/backlog [`causestarter/`](./causestarter/), [`causestarter/TODO.md`](./causestarter/TODO.md)): founder-first core domain (eventual primary entry; Tally / LazyGiving / etc. de-emphasized as tools). Included in `./scripts/services.sh --start` and `./scripts/deploy-causestarter.sh`. Local start currently publishes **only** the CauseStarter IPFS bundle (`LOCAL_UI_DOMAINS`; restore all UIs with `LOCAL_UI_DOMAINS=all` — see [local development](./workflow/local-development.md)). LLM helpers: [`cause-assist/`](./cause-assist/).
+  - [Glossary](./specs/glossary.md) — the project's ubiquitous language. Read before naming anything; it also lists the known terminology drift.
   - [Architecture Decision Records](./specs/decisions/README.md) — immutable log of *why* consequential decisions were made (and what was rejected). Grep before reversing something that looks wrong.
   - [Role-based guidance](./workflow/roles/README.md) on what docs to read:
     - [founder](./workflow/roles/founder.md)
@@ -21,4 +22,4 @@ Commonality is a system for decentralized crowdfunding of public goods: people c
     - [end-user documentation writer](./specs/user-docs.md)
     - [end user](./workflow/roles/end-user.md)
   - [Reviews](./workflow/reviews/README.md)
-  - [Marketing](/specs/product/marketing.md)
+  - [Marketing](./specs/product/marketing.md)