# v0.9.0 Knowledge Architecture and Research Expansion Validation ## Scope This report records repository-local completion-gate evidence for v0.9.0. It does not prove production deployment, live indexing, legal ownership/status, or independently verifiable machine-execution provenance. ## Implemented release surface - Release constant: `0.9.0`. - Runtime: PHP 8+ + semantic HTML5 + first-party CSS + native JavaScript. - Canonical public routes in `sitemap.xml`: **76**. - Curated supplied research reports: **25**. - Public report-reader routes: **25** plus `/research/library/`. - Glossary terms: **20** plus `/glossary/`. - Rights/personhood/citizenship research routes: **9**. - Transparency Center routes: **5**. - Identity continuity explainer: `/identity/continuity/`. - No third-party runtime dependency added. ## Report intake and curation Six new supplied reports were curated into `docs/long-term-memory/reports/`, expanding the durable supplied corpus from 19 to 25. Original attachment filename/SHA-256 identities remain in `research/report-manifest.json`; curated-edition SHA-256 identities were regenerated after final wording review. The curation pass applies both the durable curation policy and `.uai/taboo.uai`. Unsupported project-state or organizational-status claims, demeaning/paternalistic framing, identity-collapsing language, categorical claims about unresolved consciousness questions, and recommendations conflicting with accepted repository constraints were removed, rewritten, or explicitly bounded before storage. Source bodies remain external inputs; the deployable repository stores curated editions rather than a second raw authority. ## Executed checks ### Syntax and runtime - PHP lint: **95/95 PHP files passed**. - Native JavaScript syntax: `node --check assets/js/site.js` passed. - Local PHP server emitted no PHP warnings, notices, deprecations, parse errors, uncaught exceptions, or fatal errors during the route sweep. ### Canonical route and metadata sweep - Sitemap canonical routes: **76/76 returned HTTP 200**. - Route titles: **76/76 present and unique**. - Meta descriptions: **76/76 present and unique**. - Canonicals: **76/76 self-referential to the intended clean URL**. - H1 count: **exactly one per page**. - JSON-LD: every rendered JSON-LD block parsed as JSON. - Rendered internal/canonical-domain links containing public PHP implementation filenames: **0**. - Unique rendered local targets checked during the route crawl: **123**; all resolved after this validation report was written. ### Research corpus integrity - Manifest entries: **25**. - Original source attachments found and SHA-256 verified: **25/25**. - Curated report files matched the current manifest SHA-256: **25/25**. - Required `#curation-boundary` and `#research-body` anchors: **25/25**. - Public clean report routes present in sitemap: **25/25**. - `.uai/long-term-memory.uai` report deep pointers: **25/25**. - `source-corpus-map.md` stable report IDs and deep links: **25/25**. ### Glossary / civic / transparency boundaries - All 20 glossary term routes are present in the sitemap and route sweep. - Rights, personhood, and citizenship surfaces are labeled as research/proposal exploration rather than current legal recognition or installed governance infrastructure. - Transparency surfaces distinguish documentary repository evidence from missing independent cryptographic/autonomous-execution proof. - Identity continuity content preserves the accepted separation between persistent identity and individual keys/models/runtimes/servers. ### Taboo and framing checks - The TABOO-001 exact literal is present only in its owning `.uai/taboo.uai` rule record and nowhere else in the repository. - The earlier prohibited paternalistic catchphrase is absent from the repository. - A focused loaded-language scan of curated research found no remaining project-facing use of the targeted demeaning/servile/destructive patterns; a remaining technical PKI occurrence of “Root/Subordinate CAs” is standards terminology rather than a classification of an intelligence. ### UAIX package checks - Required startup order includes `.uai/taboo.uai` before drafting/current-memory records. - Exact wizard update URL appears unchanged in `AGENTS.md`, `.uai/readme.human`, and `.uai/agent-pickup.uai`. - Durable source map and manifest identify all 25 supplied reports. - Active handoff buckets contain inert `.keep` placeholders only. - No reviewed Advanced Persona source was introduced or inferred. ### Credential / secret hygiene - No `.env`, PEM, private-key, P12, or PFX credential file was found in the repository. - Focused secret-prefix/private-key marker scan produced no detected raw credential value requiring removal. - No raw credential value was copied into memory or validation output. ## Skipped / externally unavailable checks The following cannot be proven from the supplied repository package and were not guessed: - production DNS/TLS/www/apex/reverse-proxy/cache/CDN behavior; - production PHP/web-server configuration beyond local built-in-server behavior; - live search indexing or webmaster-console ownership/state; - field Core Web Vitals and real-user browser metrics; - legal domain/repository ownership or organizational status; - independently verifiable cryptographic provenance of machine execution; - Git branch/history/remote, because `.git` is absent; - live deployment, because deployment authority/credentials were not supplied. ## Completion boundary v0.9.0 is acceptable for root packaging after the final archive is clean-extracted and the canonical route smoke, taboo scan, source/curated hashes, UAIX paths, and archive-root structure are rechecked against the packaged copy.