V48 Gate 3 (specification-implementation): pluralize routes (/deposits, /reads) + pipelines master-detail on both

Routes: /deposit -> /deposits and /read -> /reads across nav, footer,
public copy, docs, btd, route models, domain contracts
(OrganizationPolicyRoute), tests, and e2e specs; old paths remain as
permanentRedirect shims that preserve query strings (covers the
localStorage next-path auth flow).

Master-detail: both pages gain a 'Pipeline runs' master table
(surface="pipelines") — selecting a running row attaches its live SSE
telemetry stream, selecting a completed row resumes persisted results
from the run's output. Deposits adopts synthesis runs via a
selection-transition guard (no adopt/dispatch races); Reads derives the
telemetry mode from the run's own lens.

Correctness hardening from the adversarial review wave:
- usePipelineExecution resets all tail state on every runId change
  (kills cross-run event poisoning)
- terminal signals only honored when attributed to the attached run
  (execution-row id match), with persisted row status as the fallback
  for completed rows that never emit a completion event
- dispatch route guards client-minted runIds: colliding ids 409
  run_id_conflict before any write (no row hijack), then stamps the
  synthesis context at dispatch so running rows are lens-identifiable
- 'interrupted' is now a terminal status for the SSE tail; activity
  mapper falls back to context repositoryFullName + lens override for
  deposit-option-synthesis rows

Spec: BITCODE_SPEC_V48_NOTES.md routes-pluralize + master-detail
sections, incl. run-id guard, terminal-state attribution, and the known
read-gate gap (sandbox read runs don't persist lens-stamped rows yet).

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: geraldarthurdavis

BITCODE_SPEC_V48_NOTES.md

@@ -502,6 +502,47 @@ inventory/exclusions, setup obfuscation guidance — all invisible to their cons
 to the route's completion read); the Gate-3 correction re-homes cross-phase artifacts
 onto the shared execution and pins the producer/consumer store contract with tests.
 
+### Product routes pluralize + master-detail pipelines (Garrett, 2026-07-03)
+
+The lens routes RENAME to plural — `/deposit` → `/deposits`, `/read` → `/reads`
+(param-preserving redirect shims stay at the old paths for stale links and
+in-flight auth next-paths; `/api/*` route paths are unchanged). Both pages
+become MASTER-DETAIL:
+
+- **Master: a pipelines table** (the shared transactions-table stack,
+  lens-preset filters) over the account's executions rows; row selection is
+  the URL `transactionId` (runId alias), so selection survives reload.
+- **Detail: selection connects to the run.** Selecting a RUNNING synthesis
+  run reattaches its live stream (the history+stream tail attaches to any
+  runId); selecting a COMPLETED run resumes its persisted results from the
+  execution row output; failed/interrupted runs surface their terminal state
+  with the historical log attached. On /deposits the detail is the Telemetry
+  + Options review; /reads gains the same Telemetry stack (log, pills, run
+  clock, iteration marker, readiness verdict) for the selected pipeline run.
+- **Lens identity at dispatch:** the deposit dispatch route stamps the
+  synthesis context (source/workbench/route/pipelineCore/synthesisMode +
+  repository coordinates) onto the executions row AT DISPATCH (upsert), so
+  running rows are lens-identifiable in the tables instead of context-null
+  until completion. New rows stamp `route: '/deposits'`. Because the client
+  may supply the runId, the route guards the id BEFORE any write: an id
+  colliding with an existing row (any owner) is rejected 409
+  `run_id_conflict` — no hijack, no double-dispatch into one row.
+- **Terminal-state attribution:** the run tail resets on every runId change
+  and the detail only trusts terminal signals attributed to the attached run
+  (execution-row match), with the persisted row status as the terminal
+  fallback (completed rows without a completion event; interrupted rows via
+  the orphan sweeper — 'interrupted' is now a terminal status for the SSE
+  tail).
+- **Known read-gate gap:** read-lens pipeline runs dispatched through the
+  sandbox harness do not yet persist their own lens-stamped executions rows
+  (structured mode); the /reads table lists what exists and the telemetry
+  detail attaches to any asset-pack pipeline row, labeled by the RUN's lens.
+  Read dispatch persistence lands with the read gate.
+
+Checker posture: all gate checkers literal-matching the old routes are
+era-pinned (V43–V47) and do not run at the current pointer; frozen `.bitcode/`
+era artifacts and promoted spec families keep the historical route names.
+
 ### PTRR step output schemas — steps validate against STEP schemas (Garrett, 2026-07-03)
 
 Step outputs validate against STEP schemas, not the full agent schema — for all

BITCODE_V48_QA.md

@@ -7,7 +7,7 @@
 //      EXACT namespace:key pairs downstream consumers read (implementation reads
 //      discovery:*/setup:inputComprehension; validation reads implementation:options;
 //      the ReadyToFinish gate reads validation/implementation:issues; Finish reads
-//      implementation:options/assetPack/summary; the /deposit route reads
+//      implementation:options/assetPack/summary; the /deposits route reads
 //      implementation:options). This is the CROSS-PHASE STORE-VISIBILITY LAW:
 //      sequential() runs every phase on an ISOLATED seq-N sibling and findUp walks
 //      ANCESTORS only, so a producer storing on its own sibling subtree is invisible
@@ -263,7 +263,7 @@ describe('deposit agent context/store contract', () => {
       expect(result.summary).toBe('Synthesized 2 measured deposit AssetPack patch(es).');
       expect(result.assetPack).toEqual({ repository: REPOSITORY });
 
-      // implementation:options — the store the /deposit route's completion read
+      // implementation:options — the store the /deposits route's completion read
       // and the deposit validation agent consume; implementation:assetPacks — the
       // SAME array. Stored on the SHARED execution (cross-phase law): the route
       // holds the root, so its `execution.get('implementation','options')`
@@ -419,7 +419,7 @@ describe('deposit agent context/store contract', () => {
   });
 
   describe('Finish — runUploadAssetPacksForReviewAgent', () => {
-    it('deposit mode: uploads implementation:options read from the shared parent for /deposit admission review', async () => {
+    it('deposit mode: uploads implementation:options read from the shared parent for /deposits admission review', async () => {
       const shared = new Execution('pipeline-root');
       storeSynthesizeAssetPacksMode(shared, 'deposit');
       const options = [measuredPatchOption()];
@@ -435,7 +435,7 @@ describe('deposit agent context/store contract', () => {
       expect(result.success).toBe(true);
       expect(result.deliveryMechanism).toBe('bitcode-review-upload');
       expect(result.review).toEqual({
-        surface: '/deposit',
+        surface: '/deposits',
         reviewFor: 'deposit-admission',
         decision: 'pending-user-review',
       });
@@ -447,13 +447,13 @@ describe('deposit agent context/store contract', () => {
       // where postprocess and the run-level surfaces resolve them.
       expect(shared.get('finish', 'uploadForReview')).toMatchObject({
         deliveryMechanism: 'bitcode-review-upload',
-        review: { surface: '/deposit', reviewFor: 'deposit-admission' },
+        review: { surface: '/deposits', reviewFor: 'deposit-admission' },
         options,
       });
       expect(shared.get('finish', 'deliveryMechanism')).toBe('bitcode-review-upload');
     });
 
-    it('read mode: uploads the implementation synthesis artifacts for /read purchase review', async () => {
+    it('read mode: uploads the implementation synthesis artifacts for /reads purchase review', async () => {
       const shared = new Execution('pipeline-root');
       storeSynthesizeAssetPacksMode(shared, 'read');
       const artifacts = { summary: 'Read synthesis artifacts.', proofEvidence: ['evidence'] };
@@ -464,13 +464,13 @@ describe('deposit agent context/store contract', () => {
       const result = await runUploadAssetPacksForReviewAgent({}, finishChild);
 
       expect(result.review).toEqual({
-        surface: '/read',
+        surface: '/reads',
         reviewFor: 'purchase',
         decision: 'pending-user-review',
       });
       expect(result.artifacts).toBe(artifacts);
       expect(shared.get('finish', 'uploadForReview')).toMatchObject({
-        review: { surface: '/read', reviewFor: 'purchase' },
+        review: { surface: '/reads', reviewFor: 'purchase' },
         artifacts,
       });
     });

packages/pipelines/asset-pack/src/__tests__/deposit-agent-store-contract.test.ts

@@ -11,7 +11,7 @@ describe('deposit-asset-pack-option-admission', () => {
       repositoryFullName: 'engineeredsoftware/ENGI',
       sourceBranch: 'main',
       sourceCommit: '31bbc0c5227b6b3aed5d107fd8507d35ec22970a',
-      sourcePathHints: ['uapi/app/deposit/DepositPageClient.tsx'],
+      sourcePathHints: ['uapi/app/deposits/DepositPageClient.tsx'],
       depositoryDemandSignals: [{ id: 'depository-demand', weight: 0.8 }],
       readingDemandSignals: [{ id: 'reading-demand', weight: 0.86 }],
     });

packages/pipelines/asset-pack/src/__tests__/deposit-asset-pack-option-admission.test.ts

@@ -11,7 +11,7 @@ function reviewableSynthesis() {
     sourceCommit: '31bbc0c5227b6b3aed5d107fd8507d35ec22970a',
     obfuscations: 'Prepare source-safe deposit AssetPack options for non-critical reusable proof infrastructure.',
     sourcePathHints: [
-      'uapi/app/deposit/DepositPageClient.tsx',
+      'uapi/app/deposits/DepositPageClient.tsx',
       'packages/pipelines/asset-pack/src/deposit-asset-pack-options.ts',
     ],
     depositoryDemandSignals: [{ id: 'depository-gap', label: 'Depository needs reviewable source supply', weight: 0.8 }],
@@ -39,7 +39,7 @@ describe('Deposit AssetPack option policy', () => {
 
     expect(report.schema).toBe('bitcode.deposit.asset-pack-option-policy-report');
     expect(report.policy).toBe('DepositAssetPackOptionPolicy');
-    expect(report.route).toBe('/deposit');
+    expect(report.route).toBe('/deposits');
     expect(report.optionCount).toBe(3);
     expect(report.reviewablePositiveRoiCount).toBeGreaterThan(0);
     expect(report.aggregatePolicy).toMatchObject({

packages/pipelines/asset-pack/src/__tests__/deposit-asset-pack-option-policy.test.ts

@@ -42,7 +42,7 @@ describe('Deposit AssetPack option synthesis', () => {
     expect(synthesis.schema).toBe('bitcode.deposit.asset-pack-option-synthesis');
     expect(synthesis.pipeline).toBe('DepositAssetPackOptionSynthesis');
     expect(synthesis.reviewBoundary).toMatchObject({
-      route: '/deposit',
+      route: '/deposits',
       defaultDecisionState: 'pending-depositor-review',
       approvedOptionsAdmittedBy: 'future-gate7-deposit-option-review',
       sourceCriticalityDemandRoiPolicyOwnedBy: 'future-gate6-policy',

packages/pipelines/asset-pack/src/__tests__/deposit-asset-pack-options.test.ts

@@ -12,7 +12,7 @@ function reviewablePolicyReport() {
     sourceCommit: '31bbc0c5227b6b3aed5d107fd8507d35ec22970a',
     obfuscations: 'Prepare source-safe options likely to satisfy unfit Reading demand.',
     sourcePathHints: [
-      'uapi/app/deposit/DepositPageClient.tsx',
+      'uapi/app/deposits/DepositPageClient.tsx',
       'packages/pipelines/asset-pack/src/depository-supply-index.ts',
     ],
     depositoryDemandSignals: [
@@ -57,7 +57,7 @@ describe('Depositor earning supply intelligence', () => {
 
     expect(intelligence.schema).toBe('bitcode.deposit.earning-supply-intelligence');
     expect(intelligence.intelligence).toBe('DepositorEarningSupplyIntelligence');
-    expect(intelligence.route).toBe('/deposit');
+    expect(intelligence.route).toBe('/deposits');
     expect(intelligence.likelyDemand.state).toBe('strong-demand-opportunity');
     expect(intelligence.unfitNeedOpportunities.opportunityCount).toBe(1);
     expect(intelligence.earningStatements).toHaveLength(3);

packages/pipelines/asset-pack/src/__tests__/depositor-earning-supply-intelligence.test.ts

@@ -21,7 +21,7 @@ const DEPOSIT_OPTIONS = [
 ];
 
 describe('upload-asset-packs-for-review Finish agent', () => {
-  it('deposit: uploads the synthesized options for /deposit admission review (no PR fields)', async () => {
+  it('deposit: uploads the synthesized options for /deposits admission review (no PR fields)', async () => {
     const root = new Execution('pipeline:finish-upload-deposit');
     storeSynthesizeAssetPacksMode(root, 'deposit');
     root.store('implementation', 'options', DEPOSIT_OPTIONS);
@@ -37,7 +37,7 @@ describe('upload-asset-packs-for-review Finish agent', () => {
       carried: 'from-validation', // input is spread through
       deliveryMechanism: 'bitcode-review-upload',
       review: {
-        surface: '/deposit',
+        surface: '/deposits',
         reviewFor: 'deposit-admission',
         decision: 'pending-user-review',
       },
@@ -61,7 +61,7 @@ describe('upload-asset-packs-for-review Finish agent', () => {
     expect(finishNode.findUp('finish', 'deliveryMechanism')).toBe('bitcode-review-upload');
   });
 
-  it('read: uploads the synthesis artifacts for /read purchase review', async () => {
+  it('read: uploads the synthesis artifacts for /reads purchase review', async () => {
     const root = new Execution('pipeline:finish-upload-read');
     storeSynthesizeAssetPacksMode(root, 'read');
     const artifacts = {
@@ -75,7 +75,7 @@ describe('upload-asset-packs-for-review Finish agent', () => {
     expect(result).toMatchObject({
       deliveryMechanism: 'bitcode-review-upload',
       review: {
-        surface: '/read',
+        surface: '/reads',
         reviewFor: 'purchase',
         decision: 'pending-user-review',
       },
@@ -89,7 +89,7 @@ describe('upload-asset-packs-for-review Finish agent', () => {
 
     const result = await runUploadAssetPacksForReviewAgent({}, root);
 
-    expect(result.review.surface).toBe('/read');
+    expect(result.review.surface).toBe('/reads');
     expect(result.review.reviewFor).toBe('purchase');
   });
 

packages/pipelines/asset-pack/src/__tests__/finish-upload-for-review.test.ts

@@ -15,7 +15,7 @@ describe('Interface disclosure boundary', () => {
     expect(boundary).toMatchObject({
       schema: 'bitcode.interface-disclosure-boundary',
       routeVocabulary: {
-        currentProductRoutes: ['/deposit', '/read', '/packs'],
+        currentProductRoutes: ['/deposits', '/reads', '/packs'],
         compatibilityRedirects: {
           '/exchange': '/packs',
         },
@@ -122,7 +122,7 @@ describe('Interface disclosure boundary', () => {
       rowCount: boundary.rowCount,
     });
     expect(execution.get('interfaces/disclosure', 'routeVocabulary')).toMatchObject({
-      currentProductRoutes: ['/deposit', '/read', '/packs'],
+      currentProductRoutes: ['/deposits', '/reads', '/packs'],
     });
     expect(execution.get('interfaces/disclosure', 'proofRoots')).toMatchObject({
       boundaryRoot: expect.stringMatching(/^sha256:/u),

packages/pipelines/asset-pack/src/__tests__/interface-disclosure-boundary.test.ts

@@ -6,7 +6,7 @@ import {
 describe('OrganizationPolicyWalletAuthority', () => {
   it('allows budgeted Reading BTC payment with role, grant, wallet authority, and approval', () => {
     const statement = buildOrganizationPolicyWalletAuthority({
-      route: '/read',
+      route: '/reads',
       actorId: 'user-1',
       organizationId: 'org-1',
       teamId: 'team-core',
@@ -32,7 +32,7 @@ describe('OrganizationPolicyWalletAuthority', () => {
     });
 
     expect(statement.schema).toBe('bitcode.organization.policy-wallet-authority');
-    expect(statement.route).toBe('/read');
+    expect(statement.route).toBe('/reads');
     expect(statement.budgetApproval.state).toBe('within-limit');
     expect(statement.walletAuthority.state).toBe('verified');
     expect(statement.actionStatements.find((entry) => entry.action === 'pay_btc_fee')).toMatchObject({
@@ -52,7 +52,7 @@ describe('OrganizationPolicyWalletAuthority', () => {
 
   it('fails Reading payment closed when wallet authority is missing', () => {
     const statement = buildOrganizationPolicyWalletAuthority({
-      route: '/read',
+      route: '/reads',
       actorId: 'user-1',
       organizationId: 'org-1',
       organizationRole: 'admin',
@@ -76,7 +76,7 @@ describe('OrganizationPolicyWalletAuthority', () => {
 
   it('allows deposit submission only after source criticality, deposit approval, wallet, and policy admit it', () => {
     const statement = buildOrganizationPolicyWalletAuthority({
-      route: '/deposit',
+      route: '/deposits',
       actorId: 'user-1',
       organizationId: 'org-1',
       teamId: 'team-supply',
@@ -106,7 +106,7 @@ describe('OrganizationPolicyWalletAuthority', () => {
 
   it('blocks critical source deposit approval without exposing source-bearing payloads', () => {
     const statement = buildOrganizationPolicyWalletAuthority({
-      route: '/deposit',
+      route: '/deposits',
       actorId: 'user-1',
       organizationId: 'org-1',
       organizationRole: 'admin',