ScientFactory · yaacovcorcos · Jul 18, 2026 · Jul 18, 2026
diff --git a/.github/workflows/gate-1-5-evidence.yml b/.github/workflows/gate-1-5-evidence.yml
@@ -1,4 +1,4 @@
-name: Gate 1.5 evidence
+name: Scient evidence
 
 on:
   pull_request:
@@ -13,9 +13,13 @@ jobs:
   evidence-manifest:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
-      - uses: actions/setup-node@v4
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
-          node-version: 22
+          node-version: 24
       - name: Verify committed Gate 1.5 evidence
         run: node lab/scripts/verify-gate-1-5-manifest.mjs
+      - name: Test owned-source evidence verifier
+        run: node --test lab/scripts/verify-owned-sources.test.mjs
+      - name: Verify current owned-source evidence
+        run: node lab/scripts/verify-owned-sources.mjs
diff --git a/docs/operations/upstream-intake.md b/docs/operations/upstream-intake.md
@@ -161,7 +161,8 @@ branch.
 5. Create a dated record from
    `lab/external/upstream-reviews/review-template.md`.
 6. Update the repo-local state to the exact reviewed tip and run
-   `--review-check`.
+   `--require-reviewed-tip`. The older `--review-check` spelling remains a
+   strict compatibility alias.
 7. Submit the source-state and parent-evidence changes through their own
    repository PRs. Cross-link dependencies; do not combine repositories into
    one Git commit.

diff --git a/docs/product/PRD.md b/docs/product/PRD.md
@@ -4,7 +4,7 @@ Status: Accepted
 Version: v1
 Owner: Yaacov
 Created: 2026-06-27
-Last updated: 2026-07-17
+Last updated: 2026-07-18
 Purpose: Defines Scient's product direction, core capabilities, user experience principles, and product constraints.
 Doc type: Product truth
 
@@ -18,7 +18,13 @@ identity; the native Scient agent remains planned.
 
 Implementation plans, package structure, task sequencing, and framework-specific code patterns do not belong in the PRD. Those belong in planning, architecture, development, or quality docs.
 
-Open-source adaptation strategy and implementation source choices live outside the PRD. Current source research belongs in `docs/research/source-evaluations/open-source-adaptation-map.md`; build sequencing and fork/adapter strategy belong in `docs/planning/open-source-adaptation-build-strategy.md` until promoted into architecture documents or ADRs.
+Open-source adaptation strategy and implementation source choices live outside
+the PRD. Current source research belongs in
+`docs/research/source-evaluations/open-source-adaptation-map.md`; build
+sequencing lives in
+`docs/planning/open-source-adaptation-build-strategy.md`; and the accepted
+standalone ownership and selective-upstream policy lives in
+`docs/architecture/decisions/ADR-0002-standalone-source-ownership-and-upstream-authority.md`.
 
 ### Update Policy
 
@@ -40,6 +46,13 @@ implemented-versus-planned boundary live in `scient-product-identity.md`; the
 completed migration and compatibility record lives in
 `../planning/papilab-to-scient-rename-execution-plan.md`.
 
+Repository names are technical ownership labels, not additional product
+brands: `ScientFactory/Scient` owns product truth and the scientific boundary,
+`ScientFactory/scient-desktop` owns the implemented desktop application, and
+`ScientFactory/scient-agent` is the maintained source foundation for the
+planned native Scient agent. The repository name does not imply that the
+native agent runtime is already implemented.
+
 ## Product Overview
 
 Scient is a local-first scientific workspace where researchers, collaborators, and AI agents run an entire research project together, from early project formation through publication-ready outputs. Each project brings research materials, sources, data, analysis work, writing, citations, decisions, memory, collaboration, and outputs into one durable workspace.

diff --git a/lab/external/README.md b/lab/external/README.md
@@ -30,6 +30,9 @@ notes, and lab evidence.
   maintained owned repositories.
 - `sources.lock.md` - current local source inventory with URL, branch, commit,
   role, and update strategy.
+- `owned-sources.json` - machine-readable cross-repository source heads and
+  review checkpoints verified by parent CI against each public source
+  repository.
 - `upstream-reviews/` - dated disposition evidence for official source changes;
   repo-local `upstream-state.json` files remain the machine checkpoints.
 
@@ -40,6 +43,8 @@ notes, and lab evidence.
 - Record the actual location of any temporary external reference checkout; do
   not infer a checkout merely because a pointer directory exists.
 - Record exact source commits in `sources.lock.md`.
+- Keep `owned-sources.json`, `sources.lock.md`, and each source repository's
+  `upstream-state.json` aligned after an owned source head changes.
 - Prefer one physical checkout per upstream repository.
 - Use pointer notes when one repository spans multiple roles.
 - Keep Scient-owned bridge code outside temporary upstream trees unless a fork

diff --git a/lab/external/owned-sources.json b/lab/external/owned-sources.json
@@ -0,0 +1,31 @@
+{
+  "schema": "scient.owned-sources/v1",
+  "sources": [
+    {
+      "ownedRepository": "ScientFactory/scient-desktop",
+      "sourceLockLabel": "Scient desktop",
+      "ownedDefaultBranch": "main",
+      "testedHead": "57e6b2cde09f64db367b894506f56db605fb91b4",
+      "officialRepository": "Emanuele-web04/synara",
+      "officialDefaultBranch": "main",
+      "reviewedThrough": "69304bc1d59d86da8afbac367118c75db8c9dbfe",
+      "reviewedAt": "2026-07-18",
+      "integrationBase": "9be46c3ce6a7521b64436b7334bc6fce16e3cac4",
+      "updateMode": "divergent-cherry-pick",
+      "reviewRecord": "lab/external/upstream-reviews/2026-07-18-scient-desktop.md"
+    },
+    {
+      "ownedRepository": "ScientFactory/scient-agent",
+      "sourceLockLabel": "Scient agent source",
+      "ownedDefaultBranch": "dev",
+      "testedHead": "f7d61d3583687ddc09919ca9e70d69d06b0861f8",
+      "officialRepository": "anomalyco/opencode",
+      "officialDefaultBranch": "dev",
+      "reviewedThrough": "fab213312927ea64cf968832c527206e8c944f9e",
+      "reviewedAt": "2026-07-18",
+      "integrationBase": "69a80663a2ed7d671d2b4d5dd6f2d605714675a5",
+      "updateMode": "adapter-maintained",
+      "reviewRecord": "lab/external/upstream-reviews/2026-07-18-scient-agent.md"
+    }
+  ]
+}
diff --git a/lab/external/sources.lock.md b/lab/external/sources.lock.md
@@ -26,9 +26,9 @@ siblings. A deferred source with no retained checkout says so explicitly.
 
 | Source | Local path | Official upstream | Owned repository | Tested integrated upstream base | Maintained/tested commit | Role and update mode |
 |---|---|---|---|---|---|---|
-| Scient agent source (OpenCode-derived) | `../scient-agent/`; canonical workspace sibling on `dev` at `14003a01350c69dedf90c97f9f2b5db733f49951` | `https://github.com/anomalyco/opencode.git`, `dev` | `https://github.com/ScientFactory/scient-agent`, public standalone repository | `69a80663a2ed7d671d2b4d5dd6f2d605714675a5` | Current owned `dev` `14003a01350c69dedf90c97f9f2b5db733f49951`; exact rename and maintenance evidence below | Owned source foundation for the planned Scient agent; `adapter-maintained`; native Scient runtime identity is not yet implemented. |
+| Scient agent source (OpenCode-derived) | `../scient-agent/`; canonical workspace sibling on `dev` at `f7d61d3583687ddc09919ca9e70d69d06b0861f8` | `https://github.com/anomalyco/opencode.git`, `dev` | `https://github.com/ScientFactory/scient-agent`, public standalone repository | `69a80663a2ed7d671d2b4d5dd6f2d605714675a5` | Current owned `dev` `f7d61d3583687ddc09919ca9e70d69d06b0861f8`; exact rename and maintenance evidence below | Owned source foundation for the planned Scient agent; `adapter-maintained`; native Scient runtime identity is not yet implemented. |
 | Goose | No local checkout is retained. | `https://github.com/aaif-goose/goose.git`, `main` | None; owned repository deferred | Not tested in Gate 1.5 | Last inspected commit `3c1fdd692cc8aaa5f09b9175410c09a09d4dfe49` | Deferred broader-agent research input. Repository, build, ACP adapter, runtime, credentials, and adoption wait until after the first Scient gateway. |
-| Scient desktop (Synara-derived) | `../scient-desktop/`; canonical workspace sibling on `main` at `d78388a42bcc09dabc926c0885ec34a8de6427b0` | `https://github.com/Emanuele-web04/synara.git`, `main` | `https://github.com/ScientFactory/scient-desktop`, public standalone repository | `9be46c3ce6a7521b64436b7334bc6fce16e3cac4` | Current owned `main` `d78388a42bcc09dabc926c0885ec34a8de6427b0`; exact rename and maintenance evidence below | Accepted initial application foundation; `divergent-cherry-pick`; must not own scientific project truth. |
+| Scient desktop (Synara-derived) | `../scient-desktop/`; canonical workspace sibling on `main` at `57e6b2cde09f64db367b894506f56db605fb91b4` | `https://github.com/Emanuele-web04/synara.git`, `main` | `https://github.com/ScientFactory/scient-desktop`, public standalone repository | `9be46c3ce6a7521b64436b7334bc6fce16e3cac4` | Current owned `main` `57e6b2cde09f64db367b894506f56db605fb91b4`; exact rename and maintenance evidence below | Accepted initial application foundation; `divergent-cherry-pick`; must not own scientific project truth. |
 | T3 Code | No local checkout is retained. | `https://github.com/pingdotgg/t3code.git`, `main` | None | Not tested in Gate 1.5 | Last inspected commit `b9cc8d6ef17ca9f45bec621bef71ad3f706b9276` | Desktop/runtime/provider/process reference only. |
 
 ## Maintained Upstream Review State
@@ -40,8 +40,8 @@ review is accepted.
 
 | Source | Tested owned head | Reviewed through | Integration base | Update mode | Review evidence |
 |---|---|---|---|---|---|
-| Scient desktop | `d78388a42bcc09dabc926c0885ec34a8de6427b0` | `69304bc1d59d86da8afbac367118c75db8c9dbfe` on 2026-07-18 | `9be46c3ce6a7521b64436b7334bc6fce16e3cac4` | `divergent-cherry-pick` | [`2026-07-18-scient-desktop.md`](upstream-reviews/2026-07-18-scient-desktop.md); no code intake |
-| Scient agent source | `14003a01350c69dedf90c97f9f2b5db733f49951` | `fab213312927ea64cf968832c527206e8c944f9e` on 2026-07-18 | `69a80663a2ed7d671d2b4d5dd6f2d605714675a5` | `adapter-maintained` | [`2026-07-18-scient-agent.md`](upstream-reviews/2026-07-18-scient-agent.md); no code intake |
+| Scient desktop | `57e6b2cde09f64db367b894506f56db605fb91b4` | `69304bc1d59d86da8afbac367118c75db8c9dbfe` on 2026-07-18 | `9be46c3ce6a7521b64436b7334bc6fce16e3cac4` | `divergent-cherry-pick` | [`2026-07-18-scient-desktop.md`](upstream-reviews/2026-07-18-scient-desktop.md); no code intake |
+| Scient agent source | `f7d61d3583687ddc09919ca9e70d69d06b0861f8` | `fab213312927ea64cf968832c527206e8c944f9e` on 2026-07-18 | `69a80663a2ed7d671d2b4d5dd6f2d605714675a5` | `adapter-maintained` | [`2026-07-18-scient-agent.md`](upstream-reviews/2026-07-18-scient-agent.md); no code intake |
 
 ## Standalone Ownership And Maintenance Rollout
 
@@ -64,6 +64,28 @@ source-repository pull requests:
   run `29640292072`, attempt 2, including the browser suite, and merged as
   `d78388a42bcc09dabc926c0885ec34a8de6427b0`. Final monitor run
   `29640770607` passed on that exact owned head without opening a review issue.
+- Desktop [PR #4](https://github.com/ScientFactory/scient-desktop/pull/4)
+  established the standalone Scient repository identity and merged as
+  `0b6f135c2d19e93b0d790b2427c56b6a368a2bca`.
+- Desktop [PR #5](https://github.com/ScientFactory/scient-desktop/pull/5)
+  aligned owned automation with the standalone repository and merged as
+  `91b38b1c45eb8bdef4da458bbc56d67419269588`.
+- Desktop [PR #12](https://github.com/ScientFactory/scient-desktop/pull/12)
+  established the maintained repository-governance baseline and merged as
+  `2bb8623f17c28c0dd4d50bf484ac8cf5065ce2eb`.
+- Desktop [PR #13](https://github.com/ScientFactory/scient-desktop/pull/13)
+  hardened immutable workflow and local-action verification; exact head
+  `4498b72d8edf96bc246088f0b9ca9ba3d516cc33` passed hosted CI run
+  `29644350698` and merged as
+  `57e6b2cde09f64db367b894506f56db605fb91b4`. A local arm64 DMG built from
+  that merge embedded commit `57e6b2cde09f`, had SHA-256
+  `41f9abc5a39cfdae470ad5580ea61c7da969023c445d10196db46b4e92df4424`,
+  and passed the disk-image checksum. A profile-overridden isolated test copy
+  launched and initialized `PROJECT.md`, `AGENTS.md`, and
+  `.scient/project.json` in a fresh folder. The artifact is ad-hoc rather than
+  distribution-signed and fails strict code-sign verification, so public
+  release remains blocked by
+  [issue #6](https://github.com/ScientFactory/scient-desktop/issues/6).
 - Agent [PR #1](https://github.com/ScientFactory/scient-agent/pull/1)
   established the operator card, review state, verifier modes, owned source
   quality workflow, and monitor; exact head
@@ -81,6 +103,20 @@ source-repository pull requests:
   source-quality run `29640340180` and merged as
   `14003a01350c69dedf90c97f9f2b5db733f49951`. Final monitor run
   `29640673934` passed on that exact owned head without opening a review issue.
+- Agent [PR #4](https://github.com/ScientFactory/scient-agent/pull/4)
+  established the standalone Scient repository identity and merged as
+  `b2fa83199171b4d9b1bec7287ed7121a9590c38b`.
+- Agent [PR #5](https://github.com/ScientFactory/scient-agent/pull/5)
+  hardened source-review enforcement and inherited workflow isolation; exact
+  head `3ff0b98634bece0e5b3c295b74d7b877629f48f7` passed hosted source-quality
+  run `29644353059` and merged as
+  `a4a9f25eebc5517e139bdd08da3693f389b896e9`.
+- Agent [PR #6](https://github.com/ScientFactory/scient-agent/pull/6)
+  refreshed the exact immutable `nixbuild/nix-quick-install-action` pin in the
+  retained, disabled Nix workflows; exact head
+  `012398b080696691864f985f310dfefaf9d9a749` passed hosted source-quality run
+  `29644889618` and merged as
+  `f7d61d3583687ddc09919ca9e70d69d06b0861f8`.
 
 No source code from the reviewed official ranges was integrated during this
 rollout. The PRs above establish ownership, review, monitoring, and verification
@@ -200,10 +236,12 @@ and
 [`scient-agent-fork-archive`](https://github.com/ScientFactory/scient-agent-fork-archive).
 Their official remotes were named `upstream`, retained their official fetch
 URLs, and used the literal disabled push URL `DISABLED`. The owned default
-branches remain protected against direct unreviewed changes, force-push, and
-deletion; the desktop repository requires its maintained quality and
-release-smoke checks, and the agent-source repository requires
-`Scient source quality`.
+branches block force-push and deletion and require maintained checks before a
+pull request can merge: desktop quality plus release smoke, and
+`Scient source quality` for the agent source. The current rules require zero
+approving reviews and do not enforce restrictions for administrators; this
+document does not overstate those settings as mandatory human approval or
+administrator enforcement.
 After standalone recreation, inherited OpenCode community-management,
 generated-commit, publication, deployment, scheduled-sync, and closing
 workflows were disabled; only reviewed Scient quality/read-only checks and the