{
  "GENERATED_AT": "2026-09-25T05:17:43Z",
  "SOURCE": "V8.3.8 FROZEN 13 REL_13 product files",
  "TOTAL_MODULES": 13,
  "LEVEL_COUNTS": {
    "MIXED_MUST_SPLIT": 3,
    "PRIVATE_CORE": 8,
    "CLIENT_WORKER": 1,
    "SHARED_PROTOCOL": 1
  },
  "MODULES": [
    {
      "path": "runtime_v1/optimus_user_agent.py",
      "classification": "MIXED_MUST_SPLIT",
      "reason": "Monolithic orchestrator combining (A) local desktop/UI interaction execution, permission enforcement, pause/kill safety surface + (B) intent/routing bridge, objective state management, core pipeline calls. Must be split into a thin client-side worker stub (pause/kill/desktop-execute) vs private_core orchestration.",
      "client_required_symbols": [
        "PAUSE_GLOBAL",
        "KILL_SWITCH_GLOBAL",
        "SAFETY_FLAGS",
        "pause_requested",
        "kill_switch_requested",
        "trigger_pause_safely",
        "trigger_kill_switch_safely",
        "safe_desktop_execute",
        "local_permission_gate",
        "_Win32MouseBackend_ref",
        "DesktopObservation_ref"
      ],
      "private_symbols": [
        "UserAgentMain",
        "main_objective_loop",
        "run_objective_pipeline",
        "IntentUnderstanding_ref",
        "GeneralObjectiveEngine_ref",
        "LocalAnswerRouter_ref",
        "ModelRouter_ref",
        "V5Controller_ref",
        "ReasoningProvider_ref"
      ],
      "split_required": true
    },
    {
      "path": "runtime_v1/foundation/intent_understanding.py",
      "classification": "PRIVATE_CORE",
      "reason": "Contains IntentUnderstanding + semantic routing intelligence, proprietary classifier tables, intent/routing brain logic, provider-call selection heuristics — central reasoning per §2 private-by-default rule.",
      "client_required_symbols": [],
      "private_symbols": [
        "IntentUnderstanding",
        "IntentResult",
        "classify_user_intent",
        "INTENT_CLASSIFIERS",
        "SEMANTIC_ROUTING_TABLE"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/general_objective_engine.py",
      "classification": "PRIVATE_CORE",
      "reason": "GeneralObjectiveEngine, EvidenceGatherer, HypothesisEngine, PlanBuilder, ActionExecutor, Reconciliator, RecoveryEngine, HandoffManager — pure central reasoning, general objective reasoning, proprietary heuristics, mentor-orchestration-level logic. §2 private-by-default.",
      "client_required_symbols": [],
      "private_symbols": [
        "GeneralObjectiveEngine",
        "GoeEventLog",
        "EvidenceGatherer",
        "HypothesisEngine",
        "PlanBuilder",
        "ActionExecutor",
        "Reconciliator",
        "RecoveryEngine",
        "HandoffManager"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/desktop_control.py",
      "classification": "CLIENT_WORKER",
      "reason": "Desktop observation + action: win32 window enumeration, cursor/keyboard/click execution, local ScopedDesktopAuthorization, window-title PII screen, pause/kill safety surface. §2 client-side only (Windows desktop interaction, local permission enforcement, local evidence capture). Experience write captured client-side, experience _processing_ private_core if re-trained.",
      "client_required_symbols": [
        "BoundingBox",
        "UIElement",
        "ScopedDesktopAuthorization",
        "DesktopObservation",
        "DesktopAction",
        "ActionVerifyRun",
        "_Win32MouseBackend",
        "contains_protected_sensitive_superset",
        "_enum_windows_titles",
        "_enum_child_controls",
        "_read_control_text_via_handle",
        "_safety_policy_flags"
      ],
      "private_symbols": [
        "DesktopInteractionExperience",
        "EXPERIENCE_DIR_read"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/unified_input_router.py",
      "classification": "MIXED_MUST_SPLIT",
      "reason": "Header docstring strictly forbids reimplementing the brain; module validates/normalizes InputEvents, enforces permission/session levels (client-side) and adapter-interface routes to existing core pipeline (private-core). Permission constant table + session manager live client-side for local enforcement; routing/bridge to UserAgent/Core lives private_core.",
      "client_required_symbols": [
        "PERM_NONE",
        "PERM_READ",
        "PERM_WRITE",
        "PERM_DESKTOP",
        "PERM_OWNER",
        "CANONICAL_PERM_LEVELS",
        "RoutedInput",
        "UnifiedInputRouter.validate_event",
        "InputEvent_normalize",
        "F_PERMISSION_REQUIRED",
        "F_DEVICE_NOT_TRUSTED",
        "F_VERIFICATION_REQUIRED",
        "F_DENIED",
        "F_SESSION_EXPIRED"
      ],
      "private_symbols": [
        "UnifiedInputRouter.route_to_core_pipeline",
        "ROUTE_TO_USER_AGENT_ADAPTER",
        "CORE_PIPELINE_ADAPTER"
      ],
      "split_required": true
    },
    {
      "path": "runtime_v1/foundation/local_answer_router.py",
      "classification": "PRIVATE_CORE",
      "reason": "LocalAnswerRouter semantic cache, intent identity classifiers, ProviderCostGuard, SelfStateSnapshot reads brain_identity.json + creator_profile + checkpoint — routing intelligence + private memory access + provider cost policy = private-by-default §2.",
      "client_required_symbols": [],
      "private_symbols": [
        "SelfStateSnapshot",
        "SemanticCache",
        "ProviderCostGuard",
        "LocalAnswerRouter",
        "LocalRouteResult",
        "LocalMetrics",
        "ROUTER_CONFIDENCE_THRESHOLD",
        "_rule_* identity/relationship rules"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/model_router.py",
      "classification": "PRIVATE_CORE",
      "reason": "ReasoningModelRouter + 18 task classification tiers (cheap/default/heavy) → gpt-5.6 luna/terra/sol model IDs. Provider/API orchestration = private-by-default §2. Never ship model selection logic with client.",
      "client_required_symbols": [],
      "private_symbols": [
        "ReasoningModelRouter",
        "ModelRouterConfig",
        "DEFAULT_MODEL_ID_CHEAP",
        "DEFAULT_MODEL_ID_BALANCED",
        "DEFAULT_MODEL_ID_HEAVY",
        "_ROUTING_TABLE",
        "TASK_CLASSIFICATION",
        "TASK_REASONING",
        "TASK_* table"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/unified_output_router.py",
      "classification": "MIXED_MUST_SPLIT",
      "reason": "Delivers OutputEvents to 8 destinations. Desktop/Notification/TextChat adapters = client-side (deliver locally to local user); Voice/Mobile/API adapters = server-side (provider orchestration / remote push notifications). Class table split across both.",
      "client_required_symbols": [
        "DEST_CHAT",
        "DEST_DESKTOP",
        "DEST_NOTIFICATION",
        "DEST_FILE",
        "TextChannelAdapter",
        "F_NOT_CONFIGURED",
        "F_CAPABILITY_NOT_ACTIVE",
        "F_ADAPTER_ERROR",
        "F_DENIED",
        "UnifiedOutputRouter.deliver_local_only",
        "DeliveryResult"
      ],
      "private_symbols": [
        "DEST_VOICE",
        "DEST_MOBILE",
        "DEST_API",
        "DEST_DEVICE",
        "VoiceChannelAdapter",
        "MobileChannelAdapter",
        "F_VOICE_OUTPUT_NOT_AVAILABLE",
        "UnifiedOutputRouter.deliver_server_orchestrated"
      ],
      "split_required": true
    },
    {
      "path": "runtime_v1/foundation/reasoning.py",
      "classification": "PRIVATE_CORE",
      "reason": "ReasoningProvider boundary + REASONING_WAIT constant. Module is the explicit policy interface for central reasoning provider; header docstring says NO component may fake reasoned response → this interface contract lives server-side (decision/policy logic).",
      "client_required_symbols": [
        "REASONING_WAIT"
      ],
      "private_symbols": [
        "ReasoningProvider",
        "ReasoningRequest",
        "requires_reasoning",
        "_init_real_reasoning_if_available",
        "REASONING_PROVIDER",
        "REASONING_AVAILABLE",
        "REASONING_STATE"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/v5_controller.py",
      "classification": "PRIVATE_CORE",
      "reason": "CapabilityLearningController, EvidenceStore, CheckpointStore — §2 mentor orchestration / SelfDev logic / private memory logic / proprietary heuristics / LEARNED→BUILT→TESTED→VERIFIED→PROMOTED promotion pipeline. Never distributed.",
      "client_required_symbols": [],
      "private_symbols": [
        "CapabilityLearningController",
        "EvidenceStore",
        "CheckpointStore",
        "EvidenceEvent",
        "LearningCheckpoint",
        "ControllerRunResult",
        "CANONICAL_STATUSES",
        "STATUS_*"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/v5_pipeline_stages.py",
      "classification": "PRIVATE_CORE",
      "reason": "SelfTestPipeline strict 7-stage, BenchmarkRunner 5 dimensions — §2 SelfDev/testing pipeline. Internal build/compile/safety/negative test harness = private-by-default.",
      "client_required_symbols": [],
      "private_symbols": [
        "SelfTestPipeline",
        "BenchmarkRunner",
        "StageResult",
        "BenchmarkResult",
        "SelfTestResult",
        "BENCHMARK_DIMENSIONS_5"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/v5_objective_resolver.py",
      "classification": "PRIVATE_CORE",
      "reason": "ObjectiveCapabilityResolver — universal tokenization, n-grams, action/object extraction = semantic routing intelligence / general objective reasoning per §2 = private-by-default.",
      "client_required_symbols": [],
      "private_symbols": [
        "ObjectiveCapabilityResolver",
        "ResolverResult",
        "ResolutionEvidence",
        "_STOPWORDS_ANY",
        "_stem_action",
        "_stem_object"
      ],
      "split_required": false
    },
    {
      "path": "runtime_v1/foundation/endpoint_protocol.py",
      "classification": "SHARED_PROTOCOL",
      "reason": "OptimusEndpoint, EndpointRegistry, ProtocolMessage, build_ping/pong, 12+ message types, optimus-interaction/1 version header — pure schema/protocol definition needed by both core server + client worker. Already describes CORE HOST ↔ Desktop Agent split (header docstring).",
      "client_required_symbols": [
        "ProtocolMessage",
        "build_ping",
        "build_pong",
        "OptimusEndpoint.type DESKTOP_AGENT / LAPTOP / UNKNOWN",
        "PROTOCOL_VERSION"
      ],
      "private_symbols": [
        "EndpointRegistry",
        "OptimusEndpoint.type CORE_HOST / SERVER / MOBILE"
      ],
      "split_required": false
    }
  ],
  "MIXED_NOTES": "MIXED_MUST_SPLIT modules (optimus_user_agent.py, unified_input_router.py, unified_output_router.py) are staged whole in private_core for Alpha (private_core runs full V8.3.8 brain frozen-derived); client_worker receives only explicit thin wrappers around approved action surface. A true code-level split of these monoliths is deferred to a future dedicated refactor task; architecture split is LOGICAL for Alpha (server vs client process boundary + message protocol)."
}