diff --git a/.local/issues.md b/.local/issues.md
deleted file mode 100644
index e228185..0000000
--- a/.local/issues.md
+++ /dev/null
@@ -1,118 +0,0 @@
-# Audit Hardening Plan
-
-Last updated: 2026-03-27
-Branch: `audit-hardening-20260327`
-Base: `main` at `95c7b4d7ca94993bcb0109de57fe81cedc8d711c`
-
-## Scope
-
-This document turns the validated audit findings into an executable implementation plan for the current repository state.
-
-Out of scope for this task:
-- PyPI/package-name distribution changes.
-- Release-gate restructuring for GPU/full-dataset publication blocking.
-- Architecture Decision Record authoring beyond incidental doc refreshes.
-
-## Current Source Facts
-
-- The repository already uses `tests/suites/{unit,integration,smoke}` with path-derived structural markers in `tests/conftest.py`.
-- `CONTRIBUTING.md` still references pre-relocation root test paths for the API boundary lane.
-- `.github/workflows/ci.yml` has no scheduled trigger.
-- `ser/transcript/backends/faster_whisper.py` still owns real runtime and I/O branches that need stronger unit coverage.
-- `ser/utils/common_utils.py` remains a tiny but uncovered utility dependency used by timeline rendering.
-
-## Objectives
-
-### 1. Weekly dependency-regression CI
-
-Add a weekly scheduled run to `.github/workflows/ci.yml` so upstream dependency or resolver regressions surface even without active pull requests.
-
-Acceptance criteria:
-- `ci.yml` includes a weekly `schedule` trigger.
-- Existing `changes` classification keeps scheduled runs on the full pipeline.
-- Contributor docs mention the scheduled lane accurately.
-
-### 2. Proper pytest marker governance
-
-Strengthen test-marker discipline without relying on blanket marker edits. The repository already derives structural markers (`unit`, `integration`, `smoke`, `topology_contract`) from suite paths; the missing piece is contract enforcement around that policy and around non-structural marker ownership.
-
-Implementation direction:
-- Add architecture/contract tests inspired by `strongclaw/tests` to keep `tests/conftest.py` lean and structural.
-- Assert that special-purpose markers such as `process_isolation` remain explicitly owned by the modules that require them.
-- Keep structural suite markers path-derived, not hand-copied into every module.
-
-Acceptance criteria:
-- New contract tests fail if root bootstrap starts assigning non-structural markers.
-- New contract tests fail if special-purpose markers move out of explicit module ownership.
-- Test layout remains under `tests/suites/...` with domain-oriented placement.
-
-### 3. Coverage uplift on runtime hotspots
-
-Increase confidence in the least-tested real runtime code by adding focused unit tests for `FasterWhisperAdapter` and `display_elapsed_time`.
-
-Implementation direction:
-- Add a dedicated backend-focused test module under `tests/suites/unit/transcription/backends/`.
-- Cover `setup_required`, `prepare_assets`, `load_model`, `transcribe`, and `_is_module_available` branches using fake modules and fake model objects.
-- Add utility tests for `display_elapsed_time` under `tests/suites/unit/utils/`.
-
-Acceptance criteria:
-- New tests exercise successful and failure/edge branches for the faster-whisper adapter.
-- Utility formatting behavior is covered for both long and short output styles.
-- Overall branch coverage stays above the configured threshold with additional headroom.
-
-### 4. Documentation refresh
-
-Update contributor-facing docs to match the current suite tree, marker model, and CI behavior.
-
-Acceptance criteria:
-- `CONTRIBUTING.md` references `tests/suites/...` paths, not removed flat-root paths.
-- CI topology text reflects scheduled CI and current suite/contract responsibilities.
-- Any changed workflow/test semantics are documented where contributors would look first.
-
-## Execution Checklist
-
-- [x] Add weekly scheduled CI trigger and any supporting doc updates.
-- [x] Add pytest bootstrap/marker contract tests under `tests/suites/integration/architecture/`.
-- [x] Add dedicated faster-whisper adapter tests under `tests/suites/unit/transcription/backends/`.
-- [x] Add `common_utils` coverage tests under `tests/suites/unit/utils/`.
-- [x] Update `CONTRIBUTING.md` and nearby CI docs affected by the implementation.
-- [x] Run focused validation while iterating.
-- [x] Run full repo validation and compare outcomes against this document.
-- [ ] Commit, push, open PR, merge once green, monitor workflows/branch freshness, then clean up worktree and local branches.
-
-## Validation Plan
-
-Focused checks during implementation:
-- `uv run --extra dev pytest -q tests/suites/integration/architecture`
-- `uv run --extra dev pytest -q tests/suites/unit/transcription/backends tests/suites/unit/utils/test_common_utils.py`
-- `uv run --extra dev pytest --cov=ser.transcript.backends.faster_whisper --cov=ser.utils.common_utils --cov-branch --cov-report term-missing tests/suites/unit/transcription/backends tests/suites/unit/utils/test_common_utils.py`
-
-Final required checks:
-- `make lint`
-- `make type`
-- `make import-lint`
-- `make test-cov`
-
-## Validation Results
-
-Focused validation completed:
-- `uv run --extra dev pytest -q tests/suites/integration/architecture/test_pytest_suite_bootstrap.py tests/suites/unit/transcription/backends/test_faster_whisper_adapter.py tests/suites/unit/utils/test_common_utils.py` -> `24 passed`
-- `uv run --extra dev pytest --cov=ser.transcript.backends.faster_whisper --cov=ser.utils.common_utils --cov-branch --cov-report term-missing tests/suites/unit/transcription/backends/test_faster_whisper_adapter.py tests/suites/unit/utils/test_common_utils.py` -> targeted coverage `80.81%`; `ser/transcript/backends/faster_whisper.py` reached `80.00%`
-
-Final validation completed:
-- `make lint` -> pass
-- `make type` -> pass (`mypy` clean, `pyright` 0 errors / 0 warnings / 0 informations)
-- `make import-lint` -> pass
-- `make test-cov` -> pass with `986 passed` and total branch coverage `80.08%`
-
-Outcome versus objectives:
-- Weekly scheduled CI trigger added.
-- Marker governance now has contract coverage around root bootstrap responsibilities and explicit special-marker ownership.
-- Faster-whisper hotspot coverage materially improved and `common_utils` now has direct tests.
-- Contributor docs now match the suite tree and current CI behavior.
-
-## Notes
-
-- Work only from the dedicated worktree at `/Users/juanpedrosugg/dev/github/ser-audit-hardening-20260327`.
-- Keep branch/commit/PR naming neutral and project-scoped.
-- If upstream `origin/main` changes during the task, re-check freshness before pushing and again before merging.
diff --git a/.local/public-api-surface-improvements.md b/.local/public-api-surface-improvements.md
deleted file mode 100644
index 68a06ad..0000000
--- a/.local/public-api-surface-improvements.md
+++ /dev/null
@@ -1,768 +0,0 @@
-# Public API surface — top-1% hardening plan
-
-| | |
-|---|---|
-| **Status** | ACTIVE |
-| **Created** | 2026-07-08 |
-| **Repo** | `~/dev/github/ser` (Python 3.12.8 pin, hatchling, unpublished — no PyPI release, no git tags) |
-| **Branch convention** | one branch per phase off `main`, e.g. `refactor/public-api-hardening-p0` |
-| **Tracking** | Task Ledger (§6) + Implementation Journal (§9) in this file |
-| **Predecessor** | `.local/api-surface-tightening.md` (shipped as PR #70, merged 2026-07-08) |
-
----
-
-## 1. Intent
-
-PR #70 gave the repo a disciplined boundary *mechanism*: `ser/_internal/`, thin
-`ser.api`/`ser.config` facades, `boundary_policy.toml` enforced by
-`tests/suites/integration/architecture/test_api_import_boundary.py`. This plan finishes
-the job so the public surface is **machine-verified, self-sufficient, versioned, and
-governed** — the four properties that separate top-1% Python API surfaces (trio,
-urllib3, attrs, structlog) from merely well-designed ones:
-
-1. **Machine-verified**: the exact public surface is a checked-in snapshot; any change
-   is an explicit, reviewable diff. Type completeness is scored and gated. Import cost
-   is a contract test, not a convention.
-2. **Self-sufficient**: every type appearing in a `ser.api` signature is importable
-   from `ser.api`. No consumer ever needs a non-facade import path.
-3. **Versioned**: `ser.__version__` exists; `py.typed` ships so downstream type
-   checkers actually see the carefully designed types.
-4. **Governed**: a written stability policy per tier, tested doc examples, and a
-   changelog discipline that starts before first publish.
-
-## 2. Goals
-
-- G1 — Ship `py.typed`; pyright `--verifytypes` score for `ser` ≥ 95% (ratchet from baseline).
-- G2 — `ser.api` exports every type in its own signatures; `__all__` complete.
-- G3 — Checked-in public-API snapshot + contract test that fails on any surface drift.
-- G4 — Import-cost contract test: `import ser` / `import ser.api` never imports `torch`.
-- G5 — Public tree contains only tier-1 modules and genuine facades; implementation
-  lives under `ser/_internal/`; `boundary_policy.toml` shrinks to facades only.
-- G6 — Written stability policy, tested README examples, bootstrapped changelog.
-
-## 3. Non-goals / out of scope
-
-- NG1 — No runtime behavior, dependency (runtime), or algorithm changes. Moves only.
-- NG2 — No version bump. Package is unpublished; stays `1.0.0`. No deprecation shims —
-  hard moves are the established convention here (see predecessor doc).
-- NG3 — No publishing, no triggering of publish workflows
-  (`.github/workflows/python-publish*.yml`), no edits to them.
-- NG4 — No mkdocs/documentation site (deferred until after first publish).
-- NG5 — No towncrier; a plain `CHANGELOG.md` is enough pre-publish.
-- NG6 — No CLI surface changes (`ser/__main__.py`, `ser/_internal/cli/*`).
-- NG7 — No changes to the platform-conditional torch/torchaudio dependency matrix
-  (versions, markers, or lock partitions) — see DD-13 for the full locked matrix and
-  the files that encode it.
-
-## 4. Current state (verified 2026-07-08)
-
-- Tier-1 facades: `ser/__init__.py` (3 domain NamedTuples only), `ser/api.py`
-  (14 functions + 4 re-exported types + `RuntimePipeline` Protocol), `ser/config.py`
-  (~25 re-exports from `ser._internal.config`), `ser/domain.py`, `ser/profiles.py`,
-  `ser/utils/` (lazy-import facade).
-- `ser/_internal/`: 76 files (api/, cli/, config/, runtime plumbing, models support).
-- Residual public implementation (~126 files): `ser/data` 39, `ser/models` 26,
-  `ser/runtime` 24, `ser/transcript` 19, `ser/utils` 10, `ser/diagnostics` 4,
-  `ser/features` 2, `ser/heads` 2, plus `ser/repr`.
-- `boundary_policy.toml`: 17 public→`_internal` exceptions; several are implementation
-  under public paths (`ser/runtime/*_inference.py`, `ser/models/training_entrypoints.py`,
-  `ser/transcript/*`), not facades.
-- **No `py.typed`** — the typed surface is invisible to downstream checkers.
-- **No `ser.__version__`**.
-- `ser.api` signature types `InferenceRequest`/`InferenceExecution`/`SubtitleFormat`/
-  `DiagnosticReport` are TYPE_CHECKING-only there and not in `__all__`.
-- `show_dataset_consents`/`configure_dataset_consents` return an anonymous
-  `tuple[tuple[str, ...], tuple[str, ...]]`.
-- `train()` has two escape hatches: `use_profile_pipeline: bool` + `pipeline_builder`.
-
-## 5. Design decisions
-
-| ID | Decision | Rationale |
-|----|----------|-----------|
-| DD-01 | Hard moves, no deprecation shims, version stays 1.0.0. | Package never published; no external consumers. Matches predecessor doc convention. |
-| DD-02 | Tier model: **tier-1** = `ser`, `ser.api`, `ser.config` (trimmed), `ser.domain`, `ser.profiles`, `ser.utils` (curated `__all__` only). **Facades** = the by-export `__init__.py`/named facade modules listed in `boundary_policy.toml`. Everything else internal. | Continues the tier-1 outcome PR #70 declared; removes the ambiguous "looks public" middle tier. |
-| DD-03 | `ser.api` re-exports its full signature vocabulary at runtime (not TYPE_CHECKING-only). | A facade that requires side-door imports for its own return types isn't a facade. |
-| DD-04 | Type distribution = `py.typed` + pyright `--verifytypes` ratchet gate (baseline first, target ≥ 95%). | "Has annotations" ≠ "ships a verified typed API". The ratchet prevents regression without blocking on legacy gaps day one. |
-| DD-05 | Public-API snapshot generated with **griffe** (new dev-only dependency), stored at `tests/suites/integration/architecture/public_api_snapshot.json`, asserted by a contract test. Fallback if griffe is rejected: hand-rolled `inspect`-based dumper in `scripts/`. | Industry-standard tool; the snapshot diff becomes the review artifact for any API change. Dev-dep addition is allowed; runtime deps are not (NG1). |
-| DD-06 | Import-cost test asserts **module absence** (`torch` not in `sys.modules` after `import ser, ser.api` in a subprocess), no wall-clock assertions. | Wall-clock is flaky on the slow WSL2 dev box and in CI. Module presence is deterministic. |
-| DD-07 | `DatasetConsents(NamedTuple)` with fields `policy_ids`, `license_ids` in `ser.domain`; consent functions return it. | NamedTuple is a tuple subtype — existing unpacking keeps working; new code gets names. |
-| DD-08 | `train()` drops `use_profile_pipeline`; `pipeline_builder=None` → profile pipeline, provided → custom. | One extension point. Hard removal is safe per DD-01. |
-| DD-09 | `ser.__version__` via `importlib.metadata.version("ser")` with a `PackageNotFoundError` fallback to `"0.0.0.dev0"`; `pyproject.toml` version stays the single static source. | No hatch dynamic-version machinery needed; one source of truth. |
-| DD-10 | Mirror the boundary at lint speed with ruff `flake8-tidy-imports` `TID251` banning `ser._internal` imports, allowlisted via `per-file-ignores` generated from `boundary_policy.toml` entries. | Violations fail in seconds at `make lint`, not only in the architecture test lane. The contract test remains authoritative. |
-| DD-11 | Module moves use `git mv`; imports updated mechanically; the boundary contract test may only be strengthened, never weakened. | Preserves history; preserves the guarantee. |
-| DD-12 | README examples are executed by a contract test (extract fenced `python` blocks, run in subprocess with a stub/sample where needed). No sybil/doctest framework added. | Smallest thing that makes advertised examples provably work. |
-| DD-13 | The platform-conditional torch/torchaudio dependency matrix is **authoritative and frozen** for this effort. Where it lives (stable anchors, not line numbers): the marker-conditional `torch`/`torchaudio` specifiers in `[project] dependencies` of `pyproject.toml` (find: `rg -n 'torch' pyproject.toml`); the `resolution-markers` block at the top of `uv.lock` (environment partitions); and the `[[package]]` entries for `torch` and `torchaudio` in `uv.lock` (find: `rg -n '^name = "torch(audio)?"' uv.lock`). Locked outcomes: Darwin x86_64 + py<3.13 → torch==2.2.2 (rule `>=2.2,<=2.2.2`); Darwin x86_64 + py3.13 → no torch marker matches, no direct locked torch; Linux/Windows/Darwin arm64 + py3.12 → torch==2.10.0 (rule `>=2.2,<3.0`); same platforms + py3.13 → torch==2.10.0 (rule `>=2.6,<3.0`). torchaudio mirrors the split (2.2.2 on old Intel py3.12; 2.10.x has no full runtime wheels there). CI lanes depend on it: Linux CI 3.12/3.13 → 2.10.0; Darwin Intel validation (macos-15-intel, py3.12) → 2.2.2; macOS MPS arm64 → 2.10.0; Linux self-hosted GPU → 2.10.0 + Linux x86_64 CUDA deps from torch wheel metadata. Any `uv lock` re-resolution (e.g. P1-01's griffe addition) must leave every torch/torchaudio locked version and marker partition byte-identical; verify with `git diff uv.lock` scoped to those sections before committing. | This matrix encodes hard platform compatibility (old Intel Mac wheel cutoff, MPS, CUDA) that a routine lock refresh could silently destroy; four CI lanes and the GPU runner assume it. |
-
-## 6. Task Ledger
-
-Statuses: `TODO` → `IN-PROGRESS` → `DONE` (or `BLOCKED` / `DROPPED` with journal entry).
-One task `IN-PROGRESS` at a time. Update this table **and** the journal on every transition.
-
-### Phase 0 — Ship the types you already wrote (additive, no moves)
-
-| ID | Task | Status | Depends on |
-|----|------|--------|------------|
-| P0-01 | `py.typed` marker shipped in the wheel | DONE | — |
-| P0-02 | `ser.__version__` | DONE | — |
-| P0-03 | `ser.api` self-sufficiency (re-export signature vocabulary) | DONE | — |
-| P0-04 | `DatasetConsents` NamedTuple | DONE | — |
-| P0-05 | `train()` single extension point | DONE | — |
-
-**P0-01** — Create empty `ser/py.typed`. Add it to the hatchling build include in
-`pyproject.toml` (next to the existing `ser/profile_defs.yaml` include).
-*Acceptance*: `uv build` succeeds and `unzip -l dist/ser-1.0.0-py3-none-any.whl | rg py.typed`
-shows the file; `make lint type` exit 0.
-
-**P0-02** — In `ser/__init__.py`, expose `__version__` per DD-09; add to `__all__`.
-*Acceptance*: `uv run --frozen --extra dev python -c "import ser; print(ser.__version__)"`
-prints `1.0.0`; import-cost invariant still holds (see P1-03 command, runnable ad hoc).
-
-**P0-03** — In `ser/api.py`: move `InferenceRequest`, `InferenceExecution`,
-`SubtitleFormat`, `DiagnosticReport`, `DiagnosticFinding`, `DiagnosticSeverity` out of
-the TYPE_CHECKING guard into runtime re-exports; add them plus `AppConfig` and
-`ProfileName` to `__all__`. **Contingency**: importing `ser.runtime.contracts` executes
-`ser/runtime/__init__.py` (which imports `pipeline`); if that pulls heavy deps, relocate
-the contract dataclasses to a leaf module (candidate: `ser/_internal/runtime/` leaf
-re-exported by `ser.runtime.contracts`) rather than accepting the import cost.
-*Acceptance*: `uv run --frozen --extra dev python -c "import sys; from ser.api import InferenceRequest, InferenceExecution, SubtitleFormat, DiagnosticReport, AppConfig, ProfileName; assert 'torch' not in sys.modules"`
-exits 0; `make check` exits 0.
-
-**P0-04** — Add `DatasetConsents(NamedTuple)` (`policy_ids: tuple[str, ...]`,
-`license_ids: tuple[str, ...]`) to `ser/domain.py`; return it from
-`show_dataset_consents`/`configure_dataset_consents` in `ser.api` and the internal
-owner; export from `ser.api` and `ser.domain`.
-*Acceptance*: existing consent tests pass unmodified (tuple compatibility proven);
-new assertion on field access added to the relevant test module; `make check` exits 0.
-
-**P0-05** — Remove `use_profile_pipeline` from `ser.api.train` and
-`ser._internal.api.runtime.train`; `pipeline_builder` becomes the sole override. Update
-all callers (CLI, tests).
-*Acceptance*: `rg -n "use_profile_pipeline" ser tests` returns nothing;
-`make check test-cov` exit 0.
-
-### Phase 1 — Machine-enforce the contract
-
-| ID | Task | Status | Depends on |
-|----|------|--------|------------|
-| P1-01 | Public-API snapshot + drift contract test | DONE | P0-03, P0-04, P0-05 |
-| P1-02 | pyright `--verifytypes` ratchet gate | DONE | P0-01 |
-| P1-03 | Import-cost contract test | DONE | P0-03 |
-| P1-04 | ruff TID251 boundary lint | DONE | — |
-| P1-05 | CI wiring for the new gates | DONE | P1-01..04 |
-
-**P1-01** — Add `griffe` to the dev extra (`uv lock` refresh; `make lock-check` must
-pass). Script `scripts/dump_public_api.py` dumps names + signatures + annotations for
-tier-1 modules (DD-02) to `tests/suites/integration/architecture/public_api_snapshot.json`
-(sorted keys, stable formatting). Contract test regenerates in-memory and diffs against
-the checked-in snapshot with a failure message saying how to intentionally update.
-*Acceptance*: test passes on clean tree; demonstrably fails when a symbol is added to
-`ser/api.py` `__all__` (show the failing run in the journal, then revert); `make check
-lock-check` exit 0; per DD-13, `git diff uv.lock` shows **no** change to any torch or
-torchaudio version, marker, or partition line — paste the (empty) scoped diff into the
-journal entry.
-
-**P1-02** — Make target `type-completeness`: `uv run --frozen --extra dev pyright
---verifytypes ser --ignoreexternal --outputjson` parsed against a threshold stored in
-`pyproject.toml` or the Makefile. Record the baseline score first; set the gate at
-baseline; file the ratchet-to-95% as follow-up work in the journal if baseline < 95%.
-*Acceptance*: `make type-completeness` exits 0 at baseline and the baseline number is
-recorded in the journal.
-
-**P1-03** — Contract test (architecture suite): subprocess runs
-`import ser, ser.api, ser.config, ser.domain, ser.profiles, ser.utils` then asserts
-`torch not in sys.modules` (DD-06).
-*Acceptance*: test passes; `make check` exits 0.
-
-**P1-04** — Configure ruff `TID251` to ban `ser._internal` imports tree-wide, with
-`per-file-ignores` exactly mirroring `boundary_policy.toml` paths. Add a comment in
-`pyproject.toml` pointing at the policy file as the source of truth.
-*Acceptance*: `make lint` exits 0 on clean tree; a synthetic violation (temporary
-`from ser._internal.config.schema import AppConfig` in a non-allowlisted module) fails
-`make lint` — demonstrate, journal it, revert.
-
-**P1-05** — Add snapshot test lane (it runs with the existing architecture suite —
-verify it is collected in CI), and `type-completeness` to the CI quality workflow.
-Never touch publish workflows (NG3).
-*Acceptance*: workflow YAML change passes `make workflow-lint ci-contracts`; the
-updated workflow is dispatched once via `gh workflow run` (validation workflows only)
-and observed green via `verifier-ci`.
-
-### Phase 2 — Finish the tier consolidation (moves only)
-
-| ID | Task | Status | Depends on |
-|----|------|--------|------------|
-| P2-01 | Inventory & classification appendix | DONE | P1-01 |
-| P2-02 | `ser/models` → internal (keep facades) | DONE | P2-01 |
-| P2-03 | `ser/runtime` → internal (keep contracts/pipeline/registry facades) | DONE | P2-01 |
-| P2-04 | `ser/data` → internal (keep `application.py` + curated `__init__`) | DONE | P2-01 |
-| P2-05 | `ser/transcript` → internal (keep policy-listed facades) | DONE | P2-01 |
-| P2-06 | `ser/features`, `ser/heads`, `ser/repr`, `ser/diagnostics` residue | DONE | P2-01 |
-| P2-07 | Shrink `boundary_policy.toml` to genuine facades; strengthen contract test | DONE | P2-02..06 |
-| P2-08 | `ser/utils` trim to curated `__all__` | DONE | P2-01 |
-
-**P2-01** — Generate the full classification: for every `.py` under public non-tier-1
-paths, record `keep-as-facade` (with reason) or `move-internal` (with destination).
-Append as Appendix A of this file. This is the review artifact for the phase; get it
-into the journal before any move.
-*Acceptance*: Appendix A exists, covers all ~126 files, no `unclassified` rows.
-
-**P2-02..P2-06** — Per subpackage, in dependency order within each task: `git mv`
-move-internal modules to `ser/_internal/<subpackage>/`, update imports (internal code
-imports internal paths directly; facades re-export), keep public `__init__.py` exports
-byte-compatible for symbols classified keep. One commit per subpackage.
-*Acceptance per task*: `make check test-cov import-lint` exit 0; P1-01 snapshot test
-passes **unchanged** (tier-1 surface must not move); coverage gate (fail_under=78) holds.
-
-**P2-07** — Remove policy entries whose paths moved internal; the remaining entries are
-genuine facades only. Strengthen the contract test if PR #70 didn't already: it must
-fail on new `_internal` imports without a policy entry and on tier-1 `__all__` growth.
-*Acceptance*: policy file ≤ 10 entries, each with a facade reason; contract test
-demonstrably fails on a synthetic unlisted `_internal` import (journal, revert).
-
-**P2-08** — `ser/utils/__init__.py` keeps only the curated lazy `__all__`; helper
-modules not re-exported move internal.
-*Acceptance*: same gate set as P2-02..06.
-
-### Phase 3 — Governance
-
-| ID | Task | Status | Depends on |
-|----|------|--------|------------|
-| P3-01 | `docs/api-stability.md` | DONE | P2-07 |
-| P3-02 | README Python API section refresh | DONE | P2-07 |
-| P3-03 | README examples executed by a contract test | DONE | P3-02 |
-| P3-04 | `CHANGELOG.md` bootstrap | DONE | — |
-
-**P3-01** — Document: tier-1 list (DD-02), the SemVer promise that activates at first
-publish, what `_internal` means, how the snapshot test governs API change, pointer to
-`boundary_policy.toml`.
-*Acceptance*: file exists, linked from README; `make lint` (docs lint if any) passes.
-
-**P3-02** — README "Python API" section shows `ser.api` as sole supported entry point,
-a minimal `infer` example, `__version__`, and links the stability doc.
-*Acceptance*: `rg` shows no README references to moved/removed symbols.
-
-**P3-03** — Contract test per DD-12 executes README `python` blocks.
-*Acceptance*: test passes; deliberately breaking an example fails it (journal, revert).
-
-**P3-04** — `CHANGELOG.md` in keep-a-changelog format with an `[Unreleased]` section
-summarizing this effort (no branding words — see §7).
-*Acceptance*: file exists; `make lint` passes.
-
-## 7. Operating instructions for the coding agent
-
-1. **Read this file top to bottom before any work.** Re-read §5 and §8 after context
-   compaction.
-2. **Environment**: Python pinned 3.12.8 via `.python-version`. Every dev-tool
-   invocation must be `uv run --frozen --extra dev ...` — bare `uv run` rebuilds the
-   venv without dev tools. Make targets already do this.
-3. **Gates** (the definition of "green"): `make lint`, `make type`, `make test-cov`
-   (coverage fail_under=78), `make import-lint`, `make lock-check`. Full local sweeps
-   are fine; `make quality-gate-full`, training, and accurate-profile inference belong
-   in CI only (slow WSL2 box).
-4. **Git discipline**: branch per phase off `main` (`refactor/public-api-hardening-pN`),
-   conventional commits, one logical commit per task (P2 allows one per subpackage).
-   **Never** use the words claude, anthropic, codex, or openai in branch names, commit
-   messages, PR titles/descriptions, or labels. Open a PR per phase; do not merge
-   without the user.
-5. **Workflow per task**: journal a *start* entry → set ledger `IN-PROGRESS` → implement
-   → run the task's acceptance commands + the gate set → journal a *done* entry citing
-   the actual command results → set ledger `DONE` → commit (code + this file together).
-6. **Verification honesty**: only claim what a command in this session demonstrated.
-   Where a task says "demonstrate failure, then revert", the failing output must appear
-   in the journal entry.
-7. **Delegation**: run gate sweeps via a `verifier-lite` subagent with the exact
-   commands; use `verifier-ci` for remote CI status. Never dispatch publish workflows.
-8. **ffmpeg** is a runtime prerequisite for inference only, not tests; do not attempt
-   to install it (needs sudo).
-
-## 8. Stop conditions — halt, journal, and report to the user when…
-
-- S1 — An acceptance or gate command fails for a reason **unrelated** to the current
-  task (pre-existing breakage, environment issue).
-- S2 — A task appears to require weakening the boundary contract test, the coverage
-  gate, or any existing check.
-- S3 — A change would touch publish workflows, trigger publishing, or bump the version.
-- S4 — A move requires a runtime behavior change to keep tests green (violates NG1).
-- S5 — Two consecutive failed attempts at the same acceptance criterion.
-- S6 — The P2-01 classification finds a module that cannot be cleanly classified
-  (genuinely ambiguous ownership).
-- S7 — A dependency addition beyond `griffe` (dev-only) seems needed.
-- S8 — The `/goal` turn budget in the companion goal file is reached with tasks open.
-- S9 — Any operation would alter the torch/torchaudio locked matrix (DD-13): a lock
-  refresh changes a torch/torchaudio version, marker, or partition, or a task seems to
-  require touching the torch/torchaudio specifiers in `pyproject.toml` or the
-  `torch`/`torchaudio` `[[package]]` entries or `resolution-markers` in `uv.lock`.
-
-## 9. Implementation Journal
-
-Protocol: newest entry **first**. One entry when a task starts (intent + approach),
-one when it finalizes (evidence: commands run and their results, deviations from spec,
-follow-ups). Entries also required for BLOCKED/DROPPED transitions and stop-condition
-hits. Keep entries terse but evidence-bearing.
-
-Template:
-
-```
-### YYYY-MM-DD HH:MM — <TASK-ID> <started|done|blocked>
-- What: …
-- Evidence: `<command>` → <result summary>
-- Deviations / follow-ups: …
-```
-
-### 2026-07-10 00:25 — P3-04 done
-- What: Added `CHANGELOG.md` in Keep a Changelog style with an `[Unreleased]` section covering the Phase 3 governance changes.
-- Evidence: initial `make lint` exposed a Black formatting miss in the new README example test; `uv run --frozen --extra dev black tests/suites/integration/architecture/test_readme_examples.py` reformatted it; rerun `make lint` → Ruff/import-lint/Black/isort passed; `rg -n "^# Changelog|^## \\[Unreleased\\]|Keep a Changelog|Semantic Versioning" CHANGELOG.md` → found the expected headings/format notes; changelog branding scan → `no branding strings in changelog`.
-- Deviations / follow-ups: none.
-
-### 2026-07-10 00:23 — P3-04 started
-- What: Bootstrap `CHANGELOG.md` in Keep a Changelog style with an `[Unreleased]` section.
-- Evidence: `CHANGELOG.md` is absent before this task.
-- Deviations / follow-ups: none.
-
-### 2026-07-10 00:22 — P3-03 done
-- What: Added a subprocess contract test that extracts README fenced `python` blocks and executes them with a lightweight `ser.api.infer` stub.
-- Evidence: verifier-lite `019f4a08-3dad-72c1-8e9b-0234161b08bb` ran `rtk uv run --frozen --extra dev pytest -q tests/suites/integration/architecture/test_readme_examples.py` → `1 passed`; parent run of the same command → `1 passed`; synthetic README break from `ser.api.infer` to `ser.api.infer_broken` made the test fail with `AttributeError: module 'ser.api' has no attribute 'infer_broken'`, then the edit was reverted and the same test → `1 passed`.
-- Deviations / follow-ups: none.
-
-### 2026-07-10 00:19 — P3-03 started
-- What: Add a README fenced-Python contract test that executes examples in subprocess isolation with a lightweight inference stub.
-- Evidence: P3-02 updated the example; no README example contract test exists yet.
-- Deviations / follow-ups: none.
-
-### 2026-07-10 00:18 — P3-02 done
-- What: Updated the README Python API section to make `ser.api` the sole supported workflow entry point, show `ser.__version__`, keep a minimal `infer` example, and link the stability policy.
-- Evidence: `rg -n "sole supported Python workflow entry point|__version__|docs/api-stability\\.md|first published" README.md` → found all required README statements; guarded README scan for moved/removed module references → `no moved or removed README references`.
-- Deviations / follow-ups: none.
-
-### 2026-07-10 00:17 — P3-02 started
-- What: Refresh the README Python API guidance around `ser.api`, `ser.__version__`, and the stability policy link.
-- Evidence: P3-01 added the policy document; README still needs explicit package-version usage and first-publish wording.
-- Deviations / follow-ups: none.
-
-### 2026-07-10 00:16 — P3-01 done
-- What: Added `docs/api-stability.md` with the tier-1 list, first-publish SemVer promise, `_internal` policy, snapshot governance, and a README link.
-- Evidence: `make lint` → Ruff/import-lint/Black/isort passed; `rg -n "docs/api-stability\\.md|SemVer|first published|ser\\.api|boundary_policy\\.toml" README.md docs/api-stability.md` → found the README link plus the required policy statements.
-- Deviations / follow-ups: none.
-
-### 2026-07-10 00:15 — P3-01 started
-- What: Add the tier-1 API stability policy and link it from README.
-- Evidence: P2 ledger is done; `docs/api-stability.md` is absent before this task.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 22:27 — P2-02..P2-08 done
-- What: Moved Phase 2 implementation modules under `ser/_internal/`, kept only classified public facades/contracts, rewired first-party imports/tests/scripts/docs, and trimmed `boundary_policy.toml` to 10 genuine facade entries.
-- Evidence: `rg --files ser/data ser/models ser/runtime ser/transcript ser/features ser/heads ser/repr | sort` → only Appendix-A keep-as-facade files remain public; `uv run --frozen --extra dev pytest -q tests/suites/integration/architecture/test_public_api_snapshot.py tests/suites/integration/architecture/test_public_import_cost.py` → `2 passed`; synthetic unlisted `from ser._internal.config.schema import AppConfig` in `ser/domain.py` made `uv run --frozen --extra dev pytest -q tests/suites/integration/architecture/test_api_import_boundary.py` fail in `test_public_to_internal_imports_match_explicit_allowlist`, then the synthetic edit was removed and the same boundary test → `13 passed`; `bash scripts/run_import_lint.sh` → `17 passed`; `make lint` → Ruff/import-lint/Black/isort passed; `make type` → mypy success and pyright `0 errors, 0 warnings`; `make test` → `1028 passed`; `make test-cov` → `1028 passed`, coverage gate held; `make lock-check` → lock verified.
-- Deviations / follow-ups: `ser.runtime.schema`, `ser.transcript.backends.base`, `ser.utils.common_utils`, and `ser.utils.logger` remain public contract/helper leaves to preserve tier-1 snapshot targets and public annotation self-sufficiency; no runtime behavior changes, publish workflows, dependency additions, or torch/torchaudio lock/spec edits.
-
-### 2026-07-09 21:35 — P2-02..P2-08 started
-- What: Execute the classified moves in dependency order, keeping public facades thin and routing implementation imports to internal owners.
-- Evidence: P2-01 Appendix A classified all move targets before the first move.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 21:34 — P2-01 done
-- What: Classified every Python file under the public non-tier-1 Phase 2 package set as `keep-as-facade` or `move-internal`, including destinations for all moved modules.
-- Evidence: `python` classification generator covered 133 files; `rg -n '\| `[^`]+` \| unclassified' .local/public-api-surface-improvements.md` → no matches; Appendix A now contains no empty placeholder.
-- Deviations / follow-ups: `ser.diagnostics.domain` remains a public contract facade because the P1 tier-1 snapshot points `ser.api` diagnostic signature types at that module.
-
-### 2026-07-09 21:32 — P2-01 started
-- What: Build the Phase 2 inventory/review artifact before any moves, preserving P1 snapshot targets for tier-1 signatures.
-- Evidence: `rg --files ser/data ser/models ser/runtime ser/transcript ser/features ser/heads ser/repr ser/diagnostics ser/utils` listed the current public non-tier-1 candidates.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 21:00 — P1-05 done
-- What: Wired `make type-completeness` into CI code-quality, added
-  `workflow_dispatch` to CI so the validation workflow can be dispatched for this
-  phase, and extended CI contract tests to require the new gate and snapshot test
-  presence. Publish workflows were untouched.
-- Evidence: `make workflow-lint ci-contracts` → actionlint passed and CI contracts
-  `22 passed`; `make prepush-check` → Ruff, Black, isort, mypy, import-lint, and
-  pyright hooks passed; `gh workflow run ci.yml --ref refactor/public-api-hardening-p1`
-  → dispatched run `https://github.com/jsugg/ser/actions/runs/29058563279`; `gh run
-  view 29058563279 --json status,conclusion,jobs,url,headSha,displayTitle` →
-  `status=completed`, `conclusion=success`, `headSha=f89c63c...`; code-quality job
-  completed successfully including `Verify public API type completeness`; required-ci
-  completed successfully.
-- Deviations / follow-ups: CI initially had no `workflow_dispatch` trigger, so the
-  first `gh workflow run ci.yml --ref refactor/public-api-hardening-p1` returned
-  HTTP 422; added dispatch support to CI only, then reran successfully.
-
-### 2026-07-09 20:40 — P1-05 started
-- What: Wire the new public API gates into CI quality contracts without touching
-  publish workflows.
-- Evidence: P1-01 snapshot test is collected by full pytest; P1-02
-  `type-completeness` exists locally and now needs CI workflow coverage.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 20:40 — P1-04 done
-- What: Broadened Ruff TID251 to ban `ser._internal` for public source files,
-  changed the TID251 lane to scan public `ser` files only, and made per-file
-  ignores mirror `boundary_policy.toml` exactly.
-- Evidence: `bash scripts/run_import_lint.sh` → Ruff TID251 passed and boundary
-  contract tests `16 passed`; synthetic `from ser._internal.config.schema import
-  AppConfig` in non-allowlisted `ser/domain.py` made `make lint` fail with
-  `TID251 ser._internal is banned`, then the synthetic edit was reverted;
-  `uv run --frozen --extra dev black tests/suites/integration/architecture/test_import_lint_policy.py`
-  → reformatted policy test; `make lint` → Ruff/black/isort all pass.
-- Deviations / follow-ups: TID251 scans public source files only; tests and internal
-  implementation modules remain free to import internal helpers directly.
-
-### 2026-07-09 20:37 — P1-04 started
-- What: Broaden Ruff TID251 from API-owner imports to all public imports of
-  `ser._internal`, with exceptions generated from `boundary_policy.toml`.
-- Evidence: Existing `make lint` passes before broadening, but TID251 only bans
-  `ser._internal.api*`; synthetic whole-internal boundary coverage is not present yet.
-- Deviations / follow-ups: The TID251 lane will target public `ser` files only so
-  internal implementation modules and internal-focused tests can keep importing
-  `_internal` directly.
-
-### 2026-07-09 20:36 — P1-03 done
-- What: Added `tests/suites/integration/architecture/test_public_import_cost.py`
-  to assert tier-1 public imports leave `torch` absent from `sys.modules` in a
-  subprocess.
-- Evidence: `uv run --frozen --extra dev pytest -q tests/suites/integration/architecture/test_public_import_cost.py`
-  → `1 passed`; `make check` → lint/type/test all pass, `1027 passed in 70.27s`.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 20:32 — P1-03 started
-- What: Add an architecture subprocess test proving tier-1 public imports do not
-  import `torch`.
-- Evidence: P0 import-cost one-liner already passed before this task; adding a
-  collected contract test makes that invariant permanent.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 20:32 — P1-02 done
-- What: Added `make type-completeness`, backed by
-  `scripts/check_type_completeness.py`, with the baseline stored at
-  `[tool.ser.type_completeness].threshold`.
-- Evidence: `make type-completeness` → `pyright verifytypes completeness:
-  0.9788235294 (threshold 0.9788235294)`; `uv run --frozen --extra dev black
-  --check scripts/check_type_completeness.py` → unchanged.
-- Deviations / follow-ups: Baseline already exceeds 95%, so no ratchet-to-95%
-  follow-up needed.
-
-### 2026-07-09 20:30 — P1-02 started
-- What: Add a `make type-completeness` gate around pyright `--verifytypes ser` and
-  record the current completeness baseline as the threshold.
-- Evidence: `uv run --frozen --extra dev pyright --verifytypes ser --ignoreexternal
-  --outputjson` → completeness score `0.9788235294117648` with zero diagnostics
-  before adding the gate.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 20:29 — P1-01 done
-- What: Added `griffe` to the dev extra, `scripts/dump_public_api.py`, the tier-1
-  JSON snapshot, and a contract test that diffs current griffe output against the
-  checked-in snapshot.
-- Evidence: `uv run --frozen --extra dev python scripts/dump_public_api.py --write`
-  → generated `tests/suites/integration/architecture/public_api_snapshot.json`;
-  `uv run --frozen --extra dev pytest -q tests/suites/integration/architecture/test_public_api_snapshot.py`
-  → `1 passed`; synthetic `"SyntheticExport"` in `ser.api.__all__` made that test
-  fail with `ValueError: ser.api.__all__ exports missing member 'SyntheticExport'`,
-  then the synthetic edit was reverted; `make lock-check && make check` → lock
-  fresh, lint/type/test all pass, `1026 passed in 119.60s`; `uv run --frozen --extra
-  dev black --check scripts/dump_public_api.py` → unchanged; scoped
-  `git diff` searches for `torch`, `torchaudio`, and `resolution-markers` in
-  `uv.lock`/`pyproject.toml` → no matches.
-- Deviations / follow-ups: Baseline snapshot includes `ser.profiles` public
-  definitions because that tier-1 module has no `__all__`; explicit exports can be
-  added in a later public-surface cleanup if desired.
-
-### 2026-07-09 20:17 — P1-01 started
-- What: Add the griffe-backed tier-1 public API snapshot script, checked-in JSON
-  snapshot, and architecture drift contract test.
-- Evidence: Current branch rebuilt from `main` plus P0 commits; `git status` clean
-  before this task.
-- Deviations / follow-ups: none.
-
-### 2026-07-09 03:10 — P0-05 done
-- What: Removed `use_profile_pipeline` from `ser.api.train`, the internal train/
-  training-command chain, the CLI, and the restricted-backend gate plumbing;
-  `pipeline_builder` is the sole training override. Gate-side booleans renamed to
-  `profile_resolution_enabled`/`profile_routing_enabled` with identical value flow
-  (CLI still feeds `profile_pipeline_enabled(settings)`), so no behavior change.
-- Evidence: `rg -n "use_profile_pipeline" ser tests` → no matches (exit 1);
-  `uv run --frozen --extra dev python -c "import ser; print(ser.__version__)"` →
-  `1.0.0`; import-cost one-liner importing all P0-03/P0-04 symbols from `ser.api`
-  → exit 0 with `torch` absent; `uv build` → wheel built, `unzip -l` shows
-  `ser/py.typed`; verifier-lite gate sweep → `make lint` (all checks passed),
-  `make type` (mypy 0 issues / pyright 0 errors), `make test-cov`
-  (`1025 passed in 181.76s`, coverage gate held), `make import-lint`
-  (16 passed), `make lock-check` (lock verified) — all exit 0.
-- Deviations / follow-ups: none; NG6 respected (CLI flags untouched, only internal
-  call plumbing updated).
-
-### 2026-07-09 00:28 — P0-04 done
-- What: Added `DatasetConsents(NamedTuple)`, returned it from consent APIs, exported it
-  from `ser.domain` and `ser.api`, and added field-access regression assertions.
-- Evidence: import/tuple-compatibility check for `ser.api.DatasetConsents` → exit 0
-  with `torch` absent; targeted API/boundary/dataset-consent tests → `56 passed`; first
-  targeted run failed only on `ser.api.__all__` ordering and passed after reorder;
-  `rtk make check` → lint passed, mypy `Success: no issues found in 390 source files`,
-  pyright `0 errors, 0 warnings, 0 informations`, pytest `1025 passed`.
-- Deviations / follow-ups: verifier-lite unavailable due account usage limit; parent
-  ran checks directly per stop-free fallback.
-
-### 2026-07-09 00:34 — P0-05 started
-- What: Remove the `train()` profile-pipeline escape hatch and make
-  `pipeline_builder` the only training override.
-- Evidence: `rtk rg -n "use_profile_pipeline" ser tests` showed public API, CLI,
-  restricted-backend gate, command-wrapper, and tests still carrying the old flag.
-- Deviations / follow-ups: no runtime behavior change intended; restricted-backend
-  profile-routing flag is renamed, not semantically changed.
-
-### 2026-07-08 23:47 — P0-04 started
-- What: Add `DatasetConsents` tuple-compatible named return type and export it through
-  `ser.domain` and `ser.api`.
-- Evidence: consent APIs currently return anonymous `tuple[tuple[str, ...],
-  tuple[str, ...]]`; existing API test only proves unpacking, not field access.
-- Deviations / follow-ups: none.
-
-### 2026-07-08 23:31 — P0-03 done
-- What: Runtime-exported `InferenceRequest`, `InferenceExecution`, `SubtitleFormat`,
-  `DiagnosticReport`, `DiagnosticFinding`, `DiagnosticSeverity`, `AppConfig`, and
-  `ProfileName` from `ser.api`; updated API and tier-1 export snapshots.
-- Evidence: verifier-lite `019f44b6-e188-7bb0-97f6-1ced57ed2667` import-cost command
-  importing the P0-03 symbols from `ser.api` → exit 0 with `torch` absent; targeted API
-  + boundary tests → `52 passed`; `rtk make lint` → passed. Parent reran `rtk make
-  type` with a long window → mypy `Success: no issues found in 390 source files`;
-  pyright `0 errors, 0 warnings, 0 informations`.
-- Deviations / follow-ups: verifier-lite again used too-short `make type` wait; parent
-  long-window rerun completed successfully.
-
-### 2026-07-08 23:31 — P0-03 started
-- What: Make `ser.api` runtime-export every type used by its own public signatures.
-- Evidence: `ser.api` currently imports `InferenceRequest`, `InferenceExecution`,
-  `SubtitleFormat`, and `DiagnosticReport` only under `TYPE_CHECKING`; `AppConfig` and
-  `ProfileName` are imported but absent from `__all__`.
-- Deviations / follow-ups: `from ser.runtime.contracts ...` and diagnostics domain
-  imports kept `torch` absent in a subprocess, so no contract relocation needed.
-
-### 2026-07-08 23:13 — P0-02 done
-- What: Added `ser.__version__` via `importlib.metadata.version("ser")` with
-  `PackageNotFoundError` fallback, exported it from root package, and updated the
-  tier-1 export contract.
-- Evidence: verifier-lite `019f44a7-7f9c-7221-a2c9-45f943e29bf2` ran
-  `rtk uv run --frozen --extra dev python -c "import ser; print(ser.__version__)"` →
-  `1.0.0`; import-cost check → exit 0 with `torch` absent; boundary test →
-  `13 passed`; `rtk make lint` → passed. Parent reran `rtk make type` with a long
-  window → mypy `Success: no issues found in 390 source files`; pyright `0 errors, 0
-  warnings, 0 informations`.
-- Deviations / follow-ups: verifier-lite's first `make type` timeout was too short for
-  local pyright; parent rerun completed successfully.
-
-### 2026-07-08 23:13 — P0-02 started
-- What: Expose `ser.__version__` from package metadata without adding heavy imports.
-- Evidence: `ser/__init__.py` currently only re-exports domain NamedTuples; tier-1
-  export snapshot for `ser` contains no `__version__`.
-- Deviations / follow-ups: none.
-
-### 2026-07-08 22:07 — P0-01 done
-- What: Added empty `ser/py.typed` and included it in the hatchling wheel manifest.
-- Evidence: `rtk uv build` → built `dist/ser-1.0.0-py3-none-any.whl`;
-  `rtk unzip -l dist/ser-1.0.0-py3-none-any.whl | rtk rg py.typed` → `0 ...
-  ser/py.typed`; `rtk make lint` → passed; `rtk make type` → passed
-  (`Success: no issues found in 390 source files`; `0 errors, 0 warnings, 0
-  informations`) via verifier-lite `019f449e-1b52-7763-957e-2242f67db12b`.
-- Deviations / follow-ups: Cold pyright on this WSL2 box took ~20 minutes; no task
-  changes needed.
-
-### 2026-07-08 22:07 — P0-01 started
-- What: Ship the PEP 561 marker and include it in the wheel build manifest.
-- Evidence: `git status --short --branch` → clean `refactor/public-api-hardening-p0`
-  worktree before edits.
-- Deviations / follow-ups: Working in clean sibling worktree
-  `../ser-public-api-hardening-p0` to avoid unrelated dirty files in the original
-  checkout.
-
-### 2026-07-08 — Plan created
-- What: Document authored from a live audit of the surface (facade files, boundary
-  policy, packaging config, subpackage inventory) plus the PR #70 predecessor spec.
-  No implementation work has started; all tasks TODO.
-- Evidence: audit commands in the authoring session (file reads of `ser/api.py`,
-  `ser/config.py`, `boundary_policy.toml`, `pyproject.toml`; `find`/`rg` inventories).
-- Follow-ups: none.
-
-## Appendix A — Phase 2 classification (populated by P2-01)
-
-| Path | Classification | Destination | Reason |
-|---|---|---|---|
-| `ser/data/__init__.py` | keep-as-facade | — | Public data package facade; curated training data exports only. |
-| `ser/data/adapters/__init__.py` | move-internal | `ser/_internal/data/adapters/__init__.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/adapters/biic_podcast.py` | move-internal | `ser/_internal/data/adapters/biic_podcast.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/adapters/crema_d.py` | move-internal | `ser/_internal/data/adapters/crema_d.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/adapters/csv_manifest_builder.py` | move-internal | `ser/_internal/data/adapters/csv_manifest_builder.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/adapters/msp_podcast.py` | move-internal | `ser/_internal/data/adapters/msp_podcast.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/adapters/public_csv_datasets.py` | move-internal | `ser/_internal/data/adapters/public_csv_datasets.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/adapters/ravdess.py` | move-internal | `ser/_internal/data/adapters/ravdess.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/application.py` | keep-as-facade | — | Public data application facade over internal dataset workflows. |
-| `ser/data/archive_extraction.py` | move-internal | `ser/_internal/data/archive_extraction.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/catalog/__init__.py` | move-internal | `ser/_internal/data/catalog/__init__.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/catalog/public_datasets.py` | move-internal | `ser/_internal/data/catalog/public_datasets.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/cli.py` | move-internal | `ser/_internal/data/cli.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/data_loader.py` | move-internal | `ser/_internal/data/data_loader.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/dataset_capabilities.py` | move-internal | `ser/_internal/data/dataset_capabilities.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/dataset_consents.py` | move-internal | `ser/_internal/data/dataset_consents.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/dataset_prepare.py` | move-internal | `ser/_internal/data/dataset_prepare.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/dataset_registry.py` | move-internal | `ser/_internal/data/dataset_registry.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/embedding_cache.py` | move-internal | `ser/_internal/data/embedding_cache.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/jl_corpus_downloads.py` | move-internal | `ser/_internal/data/jl_corpus_downloads.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/label_ontology.py` | move-internal | `ser/_internal/data/label_ontology.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/manifest.py` | move-internal | `ser/_internal/data/manifest.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/manifest_jsonl.py` | move-internal | `ser/_internal/data/manifest_jsonl.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/mendeley_dataset_preparation.py` | move-internal | `ser/_internal/data/mendeley_dataset_preparation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/mendeley_downloads.py` | move-internal | `ser/_internal/data/mendeley_downloads.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/msp_podcast_mirror.py` | move-internal | `ser/_internal/data/msp_podcast_mirror.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/ontology.py` | move-internal | `ser/_internal/data/ontology.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/openslr_dataset_preparation.py` | move-internal | `ser/_internal/data/openslr_dataset_preparation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/openslr_downloads.py` | move-internal | `ser/_internal/data/openslr_downloads.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/openslr_resolution.py` | move-internal | `ser/_internal/data/openslr_resolution.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/provider_dataset_preparation.py` | move-internal | `ser/_internal/data/provider_dataset_preparation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/provider_downloads.py` | move-internal | `ser/_internal/data/provider_downloads.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/public_dataset_downloads.py` | move-internal | `ser/_internal/data/public_dataset_downloads.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/public_dataset_label_inference.py` | move-internal | `ser/_internal/data/public_dataset_label_inference.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/strategies/__init__.py` | move-internal | `ser/_internal/data/strategies/__init__.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/strategies/auto_csv.py` | move-internal | `ser/_internal/data/strategies/auto_csv.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/strategies/base.py` | move-internal | `ser/_internal/data/strategies/base.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/strategies/default.py` | move-internal | `ser/_internal/data/strategies/default.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/data/zenodo_downloads.py` | move-internal | `ser/_internal/data/zenodo_downloads.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/__init__.py` | keep-as-facade | — | Lazy package facade exposing intended model facade modules. |
-| `ser/models/accurate_feature_dataset.py` | move-internal | `ser/_internal/models/accurate_feature_dataset.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/accurate_training_execution.py` | move-internal | `ser/_internal/models/accurate_training_execution.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/accurate_training_preparation.py` | move-internal | `ser/_internal/models/accurate_training_preparation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/artifact_envelope.py` | move-internal | `ser/_internal/models/artifact_envelope.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/artifact_loading.py` | move-internal | `ser/_internal/models/artifact_loading.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/artifact_metadata.py` | move-internal | `ser/_internal/models/artifact_metadata.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/artifact_persistence.py` | move-internal | `ser/_internal/models/artifact_persistence.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/dataset_controls.py` | move-internal | `ser/_internal/models/dataset_controls.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/dataset_splitting.py` | move-internal | `ser/_internal/models/dataset_splitting.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/dataset_training_consents.py` | move-internal | `ser/_internal/models/dataset_training_consents.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/emotion_model.py` | keep-as-facade | — | Public model convenience facade over internal loading/training/prediction owners. |
-| `ser/models/fast_path.py` | move-internal | `ser/_internal/models/fast_path.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/fast_training.py` | move-internal | `ser/_internal/models/fast_training.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/feature_runtime_encoding.py` | move-internal | `ser/_internal/models/feature_runtime_encoding.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/medium_feature_dataset.py` | move-internal | `ser/_internal/models/medium_feature_dataset.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/medium_noise_controls.py` | move-internal | `ser/_internal/models/medium_noise_controls.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/medium_training_preparation.py` | move-internal | `ser/_internal/models/medium_training_preparation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/profile_runtime.py` | keep-as-facade | — | Public profile-runtime selector facade over internal backend resolution. |
-| `ser/models/profile_training_preparation.py` | move-internal | `ser/_internal/models/profile_training_preparation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/training_entrypoints.py` | keep-as-facade | — | Public training entrypoint facade over internal training workflow owners. |
-| `ser/models/training_execution.py` | move-internal | `ser/_internal/models/training_execution.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/training_preparation.py` | move-internal | `ser/_internal/models/training_preparation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/training_reporting.py` | move-internal | `ser/_internal/models/training_reporting.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/training_support.py` | move-internal | `ser/_internal/models/training_support.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/models/training_types.py` | move-internal | `ser/_internal/models/training_types.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/__init__.py` | keep-as-facade | — | Runtime package facade exporting public contracts, pipeline, and registry symbols. |
-| `ser/runtime/accurate_execution.py` | move-internal | `ser/_internal/runtime/accurate_execution.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/accurate_inference.py` | move-internal | `ser/_internal/runtime/accurate_inference.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/accurate_model_contract.py` | move-internal | `ser/_internal/runtime/accurate_model_contract.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/accurate_prediction.py` | move-internal | `ser/_internal/runtime/accurate_prediction.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/accurate_research_inference.py` | move-internal | `ser/_internal/runtime/accurate_research_inference.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/benchmarks.py` | move-internal | `ser/_internal/runtime/benchmarks.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/contracts.py` | keep-as-facade | — | Public runtime contract dataclasses used by tier-1 signatures. |
-| `ser/runtime/fast_inference.py` | move-internal | `ser/_internal/runtime/fast_inference.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/medium_execution.py` | move-internal | `ser/_internal/runtime/medium_execution.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/medium_inference.py` | move-internal | `ser/_internal/runtime/medium_inference.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/medium_prediction.py` | move-internal | `ser/_internal/runtime/medium_prediction.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/mps_oom.py` | move-internal | `ser/_internal/runtime/mps_oom.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/phase_contract.py` | move-internal | `ser/_internal/runtime/phase_contract.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/phase_timing.py` | move-internal | `ser/_internal/runtime/phase_timing.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/pipeline.py` | keep-as-facade | — | Public runtime pipeline factory facade over internal orchestration. |
-| `ser/runtime/postprocessing.py` | move-internal | `ser/_internal/runtime/postprocessing.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/profile_quality_gate.py` | move-internal | `ser/_internal/runtime/profile_quality_gate.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/quality_gate_cli.py` | move-internal | `ser/_internal/runtime/quality_gate_cli.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/quality_gate_evaluation.py` | move-internal | `ser/_internal/runtime/quality_gate_evaluation.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/quality_gate_policy.py` | move-internal | `ser/_internal/runtime/quality_gate_policy.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/quality_gate_reporting.py` | move-internal | `ser/_internal/runtime/quality_gate_reporting.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/runtime/registry.py` | keep-as-facade | — | Public runtime capability registry contract facade. |
-| `ser/runtime/schema.py` | keep-as-facade | — | Public runtime result schema contract referenced by runtime contracts and downstream tests. |
-| `ser/transcript/__init__.py` | keep-as-facade | — | Transcript package facade exporting supported transcript boundary APIs. |
-| `ser/transcript/backends/__init__.py` | keep-as-facade | — | Backend package marker for the supported stable-whisper facade path. |
-| `ser/transcript/backends/base.py` | keep-as-facade | — | Public backend adapter contract leaf shared by transcript facade consumers. |
-| `ser/transcript/backends/factory.py` | move-internal | `ser/_internal/transcript/backends/factory.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/faster_whisper.py` | move-internal | `ser/_internal/transcript/backends/faster_whisper.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/stable_whisper.py` | keep-as-facade | — | Public stable-whisper adapter facade over internal transcript backend owners. |
-| `ser/transcript/backends/stable_whisper_admission_runtime.py` | move-internal | `ser/_internal/transcript/backends/stable_whisper_admission_runtime.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/stable_whisper_mps_compat.py` | move-internal | `ser/_internal/transcript/backends/stable_whisper_mps_compat.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/stable_whisper_torio_probe.py` | move-internal | `ser/_internal/transcript/backends/stable_whisper_torio_probe.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/stable_whisper_transcribe_admission.py` | move-internal | `ser/_internal/transcript/backends/stable_whisper_transcribe_admission.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/stable_whisper_transcribe_execution.py` | move-internal | `ser/_internal/transcript/backends/stable_whisper_transcribe_execution.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/stable_whisper_transcribe_kwargs.py` | move-internal | `ser/_internal/transcript/backends/stable_whisper_transcribe_kwargs.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/backends/stable_whisper_transcribe_runtime.py` | move-internal | `ser/_internal/transcript/backends/stable_whisper_transcribe_runtime.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/mps_admission.py` | move-internal | `ser/_internal/transcript/mps_admission.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/mps_admission_overrides.py` | move-internal | `ser/_internal/transcript/mps_admission_overrides.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/profiling.py` | keep-as-facade | — | Public transcription profiling facade over internal profiling/calibration workflows. |
-| `ser/transcript/runtime_failures.py` | move-internal | `ser/_internal/transcript/runtime_failures.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/runtime_policy.py` | move-internal | `ser/_internal/transcript/runtime_policy.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/transcript/transcript_extractor.py` | keep-as-facade | — | Public transcript extraction facade used by transcript package exports. |
-| `ser/features/__init__.py` | keep-as-facade | — | Feature package facade exposing curated extraction helpers. |
-| `ser/features/feature_extractor.py` | move-internal | `ser/_internal/features/feature_extractor.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/heads/__init__.py` | keep-as-facade | — | Classifier-head package facade exposing curated torch-head helpers. |
-| `ser/heads/torch_head.py` | move-internal | `ser/_internal/heads/torch_head.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/repr/__init__.py` | keep-as-facade | — | Representation package facade exposing curated backend contracts/classes. |
-| `ser/repr/backend.py` | move-internal | `ser/_internal/repr/backend.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/repr/emotion2vec.py` | move-internal | `ser/_internal/repr/emotion2vec.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/repr/handcrafted.py` | move-internal | `ser/_internal/repr/handcrafted.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/repr/hf_whisper.py` | move-internal | `ser/_internal/repr/hf_whisper.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/repr/hf_xlsr.py` | move-internal | `ser/_internal/repr/hf_xlsr.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/repr/runtime_policy.py` | move-internal | `ser/_internal/repr/runtime_policy.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/diagnostics/__init__.py` | keep-as-facade | — | Diagnostics package facade for diagnostic contracts only. |
-| `ser/diagnostics/command.py` | move-internal | `ser/_internal/diagnostics/command.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/diagnostics/domain.py` | keep-as-facade | — | Diagnostic domain contracts remain public because tier-1 `ser.api` signatures target this module. |
-| `ser/diagnostics/service.py` | move-internal | `ser/_internal/diagnostics/service.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/utils/__init__.py` | keep-as-facade | — | Tier-1 curated utility facade; helper modules move internal. |
-| `ser/utils/audio_utils.py` | move-internal | `ser/_internal/utils/audio_utils.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/utils/common_utils.py` | keep-as-facade | — | Public utility helper backing the tier-1 `display_elapsed_time` export target. |
-| `ser/utils/dsp.py` | move-internal | `ser/_internal/utils/dsp.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/utils/logger.py` | keep-as-facade | — | Public logger helper backing the tier-1 `get_logger` export target. |
-| `ser/utils/segment_canonicalization.py` | move-internal | `ser/_internal/utils/segment_canonicalization.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/utils/subtitles.py` | move-internal | `ser/_internal/utils/subtitles.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/utils/timeline_utils.py` | move-internal | `ser/_internal/utils/timeline_utils.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/utils/torch_inference.py` | move-internal | `ser/_internal/utils/torch_inference.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-| `ser/utils/transcription_compat.py` | move-internal | `ser/_internal/utils/transcription_compat.py` | Implementation/helper module; first-party callers will use the internal owner path. |
-
-### 2026-07-10 audit correction — authoritative final classification
-
-The preceding table preserves the original planning record. A fresh baseline-tree
-inventory found the seven omitted modules below and rejected the listed facade
-exceptions as public implementation residue. This addendum supersedes every
-conflicting earlier row; all non-tier-1 paths not retained here were removed from the
-public tree or moved to their internal owner.
-
-| Baseline path | Final classification | Destination / final state | Reason |
-|---|---|---|---|
-| `ser/license_check.py` | move-internal | `ser/_internal/license_check.py` | License enforcement implementation is not a supported workflow API. |
-| `ser/pool/__init__.py` | move-internal | `ser/_internal/pool/__init__.py` | Pool implementation package is internal. |
-| `ser/pool/stats_pool.py` | move-internal | `ser/_internal/pool/stats_pool.py` | Pool implementation is internal. |
-| `ser/pool/windowing.py` | move-internal | `ser/_internal/pool/windowing.py` | Pool implementation is internal. |
-| `ser/train/__init__.py` | move-internal | `ser/_internal/train/__init__.py` | Training implementation package is internal. |
-| `ser/train/eval.py` | move-internal | `ser/_internal/train/eval.py` | Training evaluation implementation is internal. |
-| `ser/train/metrics.py` | move-internal | `ser/_internal/train/metrics.py` | Training metrics implementation is internal. |
-| `ser/data/__init__.py` | remove-public | Removed | No genuine facade or annotation contract remained. |
-| `ser/data/application.py` | move-internal | `ser/_internal/data/application/consents.py` | Dataset consent workflow implementation is internal. |
-| `ser/models/__init__.py` | remove-public | Removed | Package facade advertised unsupported implementation paths. |
-| `ser/models/emotion_model.py` | remove-public | Internal model owners retained | Public convenience facade was not a supported workflow entry point. |
-| `ser/models/profile_runtime.py` | remove-public | Internal runtime owners retained | Public convenience facade was not a supported workflow entry point. |
-| `ser/models/training_entrypoints.py` | remove-public | Internal training owners retained | Public convenience facade was not a supported workflow entry point. |
-| `ser/runtime/__init__.py` | keep-package-marker | Docstring-only package marker | Required only to own the retained contract leaves. |
-| `ser/runtime/contracts.py` | keep-contract-leaf | Re-exported by `ser.api` | Lightweight annotation vocabulary, not a workflow entry point. |
-| `ser/runtime/pipeline.py` | remove-public | `ser/_internal/runtime/pipeline.py` | Pipeline orchestration is internal. |
-| `ser/runtime/registry.py` | move-internal | `ser/_internal/runtime/registry.py` | Runtime registry implementation is internal. |
-| `ser/runtime/schema.py` | keep-contract-leaf | Re-exported by `ser.api` | Lightweight annotation vocabulary, not a workflow entry point. |
-| `ser/transcript/__init__.py` | remove-public | Removed | Package facade advertised unsupported implementation paths. |
-| `ser/transcript/backends/__init__.py` | remove-public | Removed | Package facade advertised unsupported implementation paths. |
-| `ser/transcript/backends/base.py` | move-internal | `ser/_internal/transcript/backends/base.py` | Backend adapter contract is internal implementation detail. |
-| `ser/transcript/backends/stable_whisper.py` | remove-public | Internal backend owner retained | Backend implementation is not a supported workflow entry point. |
-| `ser/transcript/profiling.py` | remove-public | Internal profiling owner retained | Profiling implementation is not a supported workflow entry point. |
-| `ser/transcript/transcript_extractor.py` | remove-public | Internal transcript owner retained | Transcript implementation is not a supported workflow entry point. |
-| `ser/features/__init__.py` | remove-public | Removed | Facade exposed implementation-only feature helpers. |
-| `ser/heads/__init__.py` | remove-public | Removed | Facade exposed implementation-only torch helpers. |
-| `ser/repr/__init__.py` | remove-public | Removed | Facade exposed implementation-only representation helpers. |
-| `ser/diagnostics/__init__.py` | keep-package-marker | Docstring-only package marker | Required only to own the retained diagnostic contract leaf. |
-| `ser/diagnostics/domain.py` | keep-contract-leaf | Re-exported by `ser.api` | Lightweight annotation vocabulary, not a workflow entry point. |
-| `ser/utils/common_utils.py` | move-internal | `ser/_internal/utils/common_utils.py` | Tier-1 facade delegates directly to the internal helper. |
-| `ser/utils/logger.py` | move-internal | `ser/_internal/utils/logger.py` | Tier-1 facade delegates directly to the internal helper. |
-
-The final public tree is enforced by
-`tests/suites/integration/architecture/test_api_import_boundary.py`: six tier-1
-modules, `ser.__main__`, two docstring-only package markers, and the three contract
-leaves listed above. The four entries in `boundary_policy.toml` are the only public
-modules allowed to delegate into `ser._internal`.
diff --git a/CHANGELOG.md b/CHANGELOG.md
index bd81acc..6fa302b 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -18,4 +18,9 @@ after its first published distribution.
 
 - README Python API guidance now directs workflow users to `ser.api`.
 
+### Fixed
+
+- Import lint path collection now works on shells without `mapfile`, such as the
+  Bash 3.2 that ships with macOS.
+
 [Unreleased]: https://github.com/jsugg/ser/compare/HEAD...HEAD
diff --git a/scripts/run_import_lint.sh b/scripts/run_import_lint.sh
index d41a954..2bc376d 100755
--- a/scripts/run_import_lint.sh
+++ b/scripts/run_import_lint.sh
@@ -2,9 +2,10 @@
 set -euo pipefail
 
 # Import-layer contract lane for public API boundary enforcement.
-mapfile -t IMPORT_LINT_PATHS < <(
-  find ser -path 'ser/_internal' -prune -o -name '*.py' -print | sort
-)
+IMPORT_LINT_PATHS=()
+while IFS= read -r import_path; do
+  IMPORT_LINT_PATHS+=("${import_path}")
+done < <(find ser -path 'ser/_internal' -prune -o -name '*.py' -print | sort)
 
 uv run --frozen --extra dev ruff check --select TID251 "${IMPORT_LINT_PATHS[@]}"
 uv run --frozen --extra dev python scripts/check_public_internal_imports.py