Build Helm Channels revision workflow

AGENTS.md

@@ -16,4 +16,4 @@ Then submit the final file exactly once after local validation:
 scripts/helm-submit output.html --source "your-agent-name"
 ```
 
-Run the submission from the target Codex/project root. Helm records that workspace as the artifact's catalog project when the source manifest does not already declare `project`; if needed, pass `--project-id` and `--project-name` explicitly. The command only hands the artifact to the owner's inbox. It does not grant direct access to the browser library. On `409`, keep the prior artifact unchanged and choose a genuinely new stable identity for a new document; on `422`, correct the HDOC contract violation before resubmitting.
+Run the submission from the target Codex/project root. Helm records that workspace as the artifact's catalog project when the source manifest does not already declare `project`; if needed, pass `--project-id` and `--project-name` explicitly. The command only hands the artifact revision to the owner's inbox. It does not grant direct access to the browser library. Keep the same manifest ID when revising the same logical artifact; Helm preserves distinct bytes as immutable revisions and asks the owner before advancing the current version. Use a new ID for a different document or explicit fork. On `422`, correct the HDOC contract violation before resubmitting.

AI-GUIDE.md

@@ -25,4 +25,4 @@ The shipped templates are the default starting point. Use `research-dossier.html
 
 For a fresh local clone, run [`scripts/helm-agent-bootstrap`](scripts/helm-agent-bootstrap) once. Then write the final `.html` file first and submit that exact file once with [`scripts/helm-submit`](scripts/helm-submit). Run the command from the target project root so the Bridge can attach that workspace to legacy files that do not yet declare `manifest.project`; use `--project-id` and `--project-name` when the working directory is not the target project. Do not send partial drafts. A successful Bridge response means the artifact is ready in the owner's **Agent inbox** for explicit review and import; it does not mean the browser library was changed.
 
-Never expose the token in a generated artifact, repository, task log, or prompt. On `409 Conflict`, do not overwrite or silently alter the existing document ID. On `422`, fix the reported HDOC contract issue and resubmit the same intended artifact.
+Never expose the token in a generated artifact, repository, task log, or prompt. Reuse the manifest ID only for a revision of the same logical artifact; Helm appends distinct bytes as an immutable Revision and never overwrites the prior source. Use a new ID for a different document or explicit fork. On `422`, fix the reported HDOC contract issue and resubmit the same intended artifact.

README.md

@@ -18,6 +18,7 @@ Helm keeps finished HTML reports, briefs, dashboards, and research as durable pr
 - **Originals remain evidence.** Helm indexes, exports, backs up, and shares the exact HTML bytes; it never silently rewrites the source artifact.
 - **Agents have a contract.** `HDOC/1.0`, report templates, and the checked-in agent guide make artifacts portable across projects and agents.
 - **The owner keeps control.** Agent output arrives in a reviewable inbox. Browser storage, imports, and intranet publication remain deliberate human actions.
+- **Artifacts have history.** Immutable revisions, Draft / Reviewed / Published state, visual comparison, Fork lineage, and a stable Channel address keep change legible without rewriting evidence.
 
 ## Start in one minute
 
@@ -64,7 +65,7 @@ The final artifact appears in **Agent inbox** for review and explicit import. Re
 
 | Path | Purpose |
 | --- | --- |
-| [`index.html`](index.html), [`app.js`](app.js), [`styles.css`](styles.css) | Static browser library, local catalog, safe reader, and interface. |
+| [`index.html`](index.html), [`app.js`](app.js), [`channel-store.js`](channel-store.js), [`styles.css`](styles.css) | Static browser library, Artifact / Revision store, safe reader, and interface. |
 | [`validator.js`](validator.js) | Browser-side `HDOC/1.0` inspection and portability warnings. |
 | [`helm_bridge.py`](helm_bridge.py) | Loopback-only agent ingress and immutable inbox records. |
 | [`helm_share_server.py`](helm_share_server.py) | Static app plus owner-only publication of immutable read-only share links. |
@@ -99,6 +100,7 @@ Helm is intentionally a single-person, local-first archive. It does not provide
 - [`docs/AGENT-BRIDGE.md`](docs/AGENT-BRIDGE.md) — Bridge API, security model, and conflict semantics.
 - [`docs/LOCAL-ARCHIVE-LAYOUT.md`](docs/LOCAL-ARCHIVE-LAYOUT.md) — portable `HARC/1.0` archive format.
 - [`docs/INTRANET-SHARING.md`](docs/INTRANET-SHARING.md) — owner-controlled immutable sharing model.
+- [`docs/CHANNELS.md`](docs/CHANNELS.md) — Artifact, Revision, publication, comparison, and Fork semantics.
 
 ## Contributing and security