[Vibherpunk]

Why

main no longer installs the HardTruth that actually runs. GitHub's activity log shows main was force-pushed on 2026-09-25 from ec37706 to 30d9582:

	ec37706 (old main, kept as preserve-2026-10-11-hardtruth-fix-div-main)	30d9582 (current main)
Product	Python v2 hook + daemon + Tier 2 (merged PR #1, PR #2, tag v2.0.0)	Rust v0.2.0 hardtruthd / hardtruth-gate rewrite
install.sh, client/, daemon/app.py	present	deleted
License	MIT LICENSE (PR #1)	PolyForm LICENSE.md

After the force-push, the Python line kept going: 30f950c (snapshot of the deployed copy), f2f269d → d19a7e3, 33fb24a (preserve), then fix/tier2-go-offline-db (f4409e9, bf755c1, c59b744). That line is what's installed: ~/.hardtruth/lib/{hardtruth_hook,ast_checker,ledger,tier2_runner}.py match c59b744 byte-for-byte. Note that's c59b744, one commit past bf755c1. Claude Code hooks point at those files. So the Python v2 line is the canonical line for install.sh.

The Rust v0.2.0 line is a separate product. It isn't an older version of this one. It also runs on the install machine (~/.local/bin/hardtruthd, built 2026-09-25 from ~/dev/hardtruth on main, serving ~/dev/vibehard), so it has to be kept too.

What this PR does

Branch = fix/tier2-go-offline-db (c59b744) + a merge of origin/main, with no history rewrite:

1. Merge 30d9582 (98bba1b):
   • The Rust tree (Cargo.toml, Cargo.lock, src/**) comes in at the root unchanged. cargo check passes at the root and in hardtruth-gate/, which builds alongside it because there's no workspace.
   • The 30d9582 README is kept verbatim as docs/RUST_V0_2_0.md, with a provenance banner. README.md gains a short Repository Layout section.
   • The deletions of client/, daemon/app.py and install.sh are not taken. docker/docker-compose.yml keeps the live Python-daemon config. .gitignore = live entries + target/.
   • The only path main has that this branch lacks is LICENSE.md (see the decision below).
2. install.sh registers the Claude Code SessionStart hook (8f83c92). d19a7e3 added handle_session_start and the live settings have it, but install.sh never registered it.

Also carries f4409e9 (2026-10-11 blocked-edit hook fix), bf755c1 (Tier 2 Go offline module cache, throwaway Postgres on an internal docker network, Stop hook timeout 90→180) and c59b744 (TEST_DATABASE_URL detection in shared test-helper packages).

Verified

• Ran install.sh with a throwaway HOME. The installed ~/.hardtruth/lib/*.py are byte-identical to the live install, and the generated Claude Code SessionStart/PostToolUse/Stop entries equal the live ~/.claude/settings.json entries.
• Every file 30d9582 added is identical in this branch.

Licensing: MIT for everything

Decided as option (a). The decision was relayed from Adam by the VibeHard coordinator session, and Adam should confirm it here before merge. 14df40d applies it:

• The root MIT LICENSE covers the whole repo, Rust v0.2.0 included. PolyForm LICENSE.md is not restored.
• Cargo.toml (hardtruthd) and hardtruth-gate/Cargo.toml now declare license = "MIT".
• The docs/RUST_V0_2_0.md banner states the Rust code is MIT and the historical PolyForm text is superseded.

Tests

Full suite (python3 -m pytest tests/, 202 tests), run alternately on a detached c59b744 worktree (before) and this branch (after), two runs each. Load average was 11–21 during the runs.

Run	Result
before #1	3 failed, 191 passed, 8 skipped
after #1	4 failed, 192 passed, 6 skipped
before #2	5 failed, 189 passed, 8 skipped
after #2	4 failed, 189 passed, 9 skipped

No regressions. Apart from install.sh, this PR changes no Python code or tests relative to c59b744; the diff is docs, .gitignore, the Rust sources and install.sh. Every failure below also fails on c59b744.

Failed in every run, before and after:

• test_tier2_container_mount::TestMacosNativeGateMessage::test_macos_native_project_rejected_with_clear_message_when_not_authorized
• test_v21_hardening::TestV21Hardening::test_14_b6_integrity_check (canonical path hardcoded to ~/dev/hardtruth-fix)
• test_reachy_circuit_breaker::TestReachyCircuitBreaker::test_04_run_independent_verification_reachyd

Intermittent on both trees (load or live-daemon dependent):

• test_concurrency_load::...::test_concurrent_secret_isolation_and_no_data_leakage
• test_live::TestSystemOneSentinel::test_20_session_baseline_get_requires_api_token
• test_adversarial_evasion::test_3_workspace_traversal_safety: a <2s wall-clock assertion at line 177. It failed in after feat: ledger integrity and language-independent gating #2, and in isolated reruns it failed 1 of 6 on before and 2 of 6 on after.
• test_fail_closed_claim_verification (3 tests): these are the 3 in the known-failures list. They fail when run as a subset and passed in these full runs.

Rust: cargo check passes at the repo root (v0.2.0) and in hardtruth-gate/.

Follow-ups (not in this PR)

• hardtruth-daemon Docker image is stale. /app/tier2_runner.py in hardtruth-daemon:latest (built 2026-09-23) is the ec37706 version, 685 lines vs 1,288 now. Rebuild it from this branch after merge: docker build -t hardtruth-daemon -f docker/Dockerfile .
• Other installed copies are pre-fix. ~/.hardtruth/lib/hardtruth/{hardtruth_hook,tier2_runner}.py, used by the package import path and the pre-commit gate, and ~/.gemini/config/hardtruth_hook.py, used by Antigravity, are still the pre-2026-10-11 hook. Re-running install.sh from this branch syncs them. Not done here, by instruction.
• install.sh skips the Stop hook when an entry already exists, so the 90→180 timeout only applies to fresh installs.
• check_hook_integrity() hardcodes /Users/ai/dev/hardtruth-fix as canonical, which makes test_14_b6_integrity_check fail from any other checkout.
• Not merged here: preserve-2026-10-11-hardtruth (9e119f0, uncommitted Rust WIP from ~/dev/hardtruth). It's left untouched. (feat/ledger-integrity's tip 9713d18 predates PR feat: ledger integrity and language-independent gating #2's squash-merge 69b1197, so its work is already in this line.)

🤖 Generated with Claude Code

[Vibherpunk]

Coordinator: Adam confirmed option (a), MIT for everything, in his coordinator session (2026-10-11 ~22:05 PDT). Pre-merge checks at 14df40d: 8f83c92..14df40d touches only Cargo.toml x2 + docs/RUST_V0_2_0.md; client/, daemon/, tests/ identical to c59b744; installed ~/.hardtruth/lib/*.py byte-identical to the PR's files; full suite 192 passed / 6 skipped / 4 failed (the 3 known pre-existing + test_concurrency_load secret-isolation load flake). Merging with a merge commit (no history rewrite).