hexdaemon · santyr · Feb 13, 2026 · Feb 13, 2026 · Feb 13, 2026 · Feb 13, 2026
diff --git a/.gitignore b/.gitignore
@@ -30,6 +30,9 @@ htmlcov/
 .idea/
 .DS_Store
 
+# Git worktrees
+.worktrees/
+
 # Local env files
 .env
 .env.*

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,42 @@
 
 All notable changes to cl-hive will be documented in this file.
 
+## [Unreleased]
+
+### Fixed
+- **Ban Enforcement**: Fixed ban enforcement race conditions and stigmergic marker thread safety (e94f63f)
+- **Coordinated Splicing**: Fixed 6 bugs across splice_manager, splice_coordinator, and PSBT exchange (e1660c7)
+- **Anticipatory Liquidity + NNLB**: Thread safety fixes, AttributeError on missing keys, key mismatch in pattern detection (4ecabac)
+- **Intent Lock + MCF**: Thread safety, TOCTOU race condition, TypeError and AttributeError fixes (6423375)
+- **HiveMap + Planner**: Feerate gate validation, freshness checks, defensive copies (f8f07f3)
+- **MCF Coordination**: TypeError crashes, missing permission checks, encapsulation violations (64c9c0d)
+- **Cooperative Rebalancing**: 10 bugs in crashes, thread safety, routing, MCF (656466e)
+- **Pheromone Fee Learning**: Repaired broken loop between cl-hive and cl-revenue-ops (fb9c471)
+- **State Manager**: Added capabilities field validation in state entries (d818771)
+- **MCF Assignments**: Replaced private _mcf_assignments access with public API (cf37109)
+
+## [2.2.8] - 2026-02-07
+
+### Added
+- vitality plugin v0.2.3 for automatic plugin health monitoring and restart
+- Thread safety locks in 7 coordination modules (AdaptiveFeeController, StigmergicCoordinator, MyceliumDefenseSystem, TimeBasedFeeAdjuster, FeeCoordinationManager, VPNTransportManager)
+- Cache bounds to prevent memory bloat (500-1000 entry limits on peer/route caches)
+- Docker image version 2.2.8
+
+### Fixed
+- **Thread Safety**: Fixed race conditions in concurrent modification of shared state
+- **Governance Bypass**: task_manager expansion now routes through governance engine (security)
+- **Outbox Retry**: Parse/serialization errors now fail permanently instead of infinite retry
+- **P0 Crashes**: Fixed AttributeError on _get_topology_snapshot() and None handling in task execution
+- **P1 Logic Errors**: Fixed analyzer references, field names, method calls across 12 modules
+- **P2 Edge Cases**: MCF solution validation, force_close counting, yield metric clamping
+
+### Removed
+- trustedcoin plugin (explorer-only Bitcoin backend no longer needed)
+
+### Changed
+- Updated .env.example documentation to reflect vitality instead of trustedcoin
+
 ## [1.9.0] - 2026-01-24
 
 ### Added

diff --git a/CLAUDE.md b/CLAUDE.md
@@ -41,7 +41,7 @@ Core Lightning
 - **cl-revenue-ops**: Executes fee policies and rebalancing (called via RPC)
 - **Core Lightning**: Underlying node operations and HSM-based crypto
 
-### Module Organization
+### Module Organization (41 modules)
 
 | Module | Purpose |
 |--------|---------|
@@ -51,17 +51,40 @@ Core Lightning
 | `gossip.py` | Threshold-based gossip (10% capacity change) with 5-min heartbeat |
 | `intent_manager.py` | Intent Lock protocol - Announce-Wait-Commit with lexicographic tie-breaker |
 | `bridge.py` | Circuit Breaker pattern for cl-revenue-ops integration |
-| `clboss_bridge.py` | Optional CLBoss integration for saturation control |
 | `membership.py` | Three-tier system: Admin → Member → Neophyte with vouch-based promotion |
 | `contribution.py` | Forwarding stats and anti-leech detection |
 | `planner.py` | Topology optimization - saturation analysis, expansion election, feerate gate |
 | `splice_manager.py` | Coordinated splice operations between hive members (Phase 11) |
+| `splice_coordinator.py` | High-level splice coordination and recommendation engine |
 | `mcf_solver.py` | Min-Cost Max-Flow solver for global fleet rebalance optimization |
 | `liquidity_coordinator.py` | Liquidity needs aggregation and rebalance assignment distribution |
 | `cost_reduction.py` | Fleet rebalance routing with MCF/BFS fallback |
-| `anticipatory_manager.py` | Kalman-filtered flow prediction, intra-day pattern detection |
+| `anticipatory_liquidity.py` | Kalman-filtered flow prediction, intra-day pattern detection |
+| `fee_coordination.py` | Pheromone-based fee coordination + stigmergic markers |
+| `fee_intelligence.py` | Fee intelligence aggregation and sharing across fleet |
+| `cooperative_expansion.py` | Fleet-wide expansion election protocol (Nominate→Elect→Open) |
+| `budget_manager.py` | Autonomous/failsafe mode budget tracking and enforcement |
+| `idempotency.py` | Message deduplication via event ID tracking |
+| `outbox.py` | Reliable message delivery with retry and exponential backoff |
+| `routing_intelligence.py` | Routing path intelligence sharing across fleet |
+| `routing_pool.py` | Routing pool management for fee distribution |
+| `settlement.py` | BOLT12 settlement system - proposal/vote/execute consensus |
+| `health_aggregator.py` | Fleet health scoring and NNLB status |
+| `network_metrics.py` | Network-level metrics collection |
+| `peer_reputation.py` | Peer reputation tracking and scoring |
+| `quality_scorer.py` | Peer quality scoring for membership decisions |
+| `relay.py` | Message relay logic for multi-hop fleet communication |
+| `rpc_commands.py` | RPC command handlers for all hive-* commands |
+| `channel_rationalization.py` | Channel optimization recommendations |
+| `strategic_positioning.py` | Strategic network positioning analysis |
+| `task_manager.py` | Background task coordination and scheduling |
+| `vpn_transport.py` | VPN transport layer (WireGuard integration) |
+| `yield_metrics.py` | Yield tracking and optimization metrics |
+| `governance.py` | Decision engine (advisor/failsafe mode routing) |
 | `config.py` | Hot-reloadable configuration with snapshot pattern |
-| `database.py` | SQLite with WAL mode, thread-local connections |
+| `did_credentials.py` | DID credential issuance, verification, reputation aggregation (Phase 16) |
+| `management_schemas.py` | 15 management schema categories, danger scoring, credential lifecycle (Phase 2) |
+| `database.py` | SQLite with WAL mode, thread-local connections, 50 tables |
 
 ### Key Patterns
 
@@ -87,14 +110,25 @@ Core Lightning
 - "Peek & Check" pattern in custommsg hook
 - JSON payload, max 65535 bytes per message
 
+**Idempotent Delivery**:
+- All protocol messages carry unique event IDs
+- `proto_events` table tracks processed events
+- `proto_outbox` table enables reliable retry with exponential backoff
+
+**Relay Protocol**:
+- Multi-hop message relay for peers not directly connected
+- Relay logic in `relay.py` with TTL-based loop prevention
+
 ### Governance Modes
 
 | Mode | Behavior |
 |------|----------|
 | `advisor` | **Primary mode** - Queue to pending_actions for AI/human approval via MCP server |
 | `failsafe` | Emergency mode - Auto-execute only critical safety actions (bans) within strict limits |
 
-### Database Tables
+### Database Tables (50 tables)
+
+Key tables (see `database.py` for complete schema):
 
 | Table | Purpose |
 |-------|---------|
@@ -103,10 +137,29 @@ Core Lightning
 | `hive_state` | Key-value store for persistent state |
 | `contribution_ledger` | Forwarding contribution tracking |
 | `hive_bans` | Ban proposals and votes |
-| `promotion_requests` | Pending promotion requests |
+| `ban_proposals` / `ban_votes` | Distributed ban voting |
+| `promotion_requests` / `promotion_vouches` | Promotion workflow |
 | `hive_planner_log` | Planner decision audit log |
 | `pending_actions` | Actions awaiting approval (advisor mode) |
-| `splice_sessions` | Active and historical splice operations (Phase 11) |
+| `splice_sessions` | Active and historical splice operations |
+| `peer_fee_profiles` | Fee profiles shared by fleet members |
+| `fee_intelligence` | Aggregated fee intelligence data |
+| `fee_reports` | Fee earnings for settlement calculations |
+| `liquidity_needs` / `member_liquidity_state` | Liquidity coordination |
+| `pool_contributions` / `pool_revenue` / `pool_distributions` | Routing pool management |
+| `settlement_proposals` / `settlement_ready_votes` / `settlement_executions` | BOLT12 settlement |
+| `flow_samples` / `temporal_patterns` | Anticipatory liquidity data |
+| `peer_reputation` | Peer reputation scores |
+| `member_health` | Fleet member health tracking |
+| `budget_tracking` / `budget_holds` | Budget enforcement |
+| `proto_events` | Processed event IDs for idempotency |
+| `proto_outbox` | Reliable message delivery outbox |
+| `peer_presence` | Peer online/offline tracking |
+| `peer_capabilities` | Peer protocol capabilities |
+| `did_credentials` | DID reputation credentials (issued and received) |
+| `did_reputation_cache` | Cached aggregated reputation scores |
+| `management_credentials` | Management credentials (operator → agent permission) |
+| `management_receipts` | Signed receipts of management action executions |
 
 ## Safety Constraints
 
@@ -140,19 +193,6 @@ The Planner proposes topology changes but cannot open channels directly:
 
 ## Optional Integrations
 
-### CLBoss (Optional)
-CLBoss is **not required** for cl-hive to function. The hive provides its own:
-- **Channel opening**: Cooperative expansion with feerate gate
-- **Fee management**: Delegated to cl-revenue-ops
-- **Rebalancing**: Delegated to cl-revenue-ops + sling
-
-If CLBoss IS installed, cl-hive will:
-- Detect it automatically via plugin list
-- Use `clboss-unmanage` to prevent redundant channel opens to saturated targets
-- Coordinate via the "Gateway Pattern" to avoid conflicts
-
-To run without CLBoss: Simply don't install it. No configuration needed.
-
 ### Sling (Optional for cl-hive)
 Sling rebalancer is optional for cl-hive. cl-revenue-ops handles rebalancing coordination.
 Note: Sling IS required for cl-revenue-ops itself.
@@ -162,7 +202,7 @@ Note: Sling IS required for cl-revenue-ops itself.
 - Only external dependency: `pyln-client>=24.0`
 - All crypto done via CLN HSM (signmessage/checkmessage) - no crypto libs imported
 - Plugin options defined at top of `cl-hive.py` (30 configurable parameters)
-- Background loops: intent_monitor_loop, membership_loop, planner_loop, gossip_loop
+- Background loops (9): gossip_loop, membership_maintenance_loop, planner_loop, intent_monitor_loop, fee_intelligence_loop, settlement_loop, mcf_optimization_loop, outbox_retry_loop, did_maintenance_loop
 
 ## Testing Conventions
 
@@ -176,29 +216,55 @@ Note: Sling IS required for cl-revenue-ops itself.
 ```
 cl-hive/
 ├── cl-hive.py              # Main plugin entry point
-├── modules/
+├── modules/                # 41 modules
 │   ├── protocol.py         # Message types and encoding
 │   ├── handshake.py        # PKI authentication
-│   ├── state_manager.py    # Distributed state
+│   ├── state_manager.py    # Distributed state (HiveMap)
 │   ├── gossip.py           # Gossip protocol
 │   ├── intent_manager.py   # Intent locks
-│   ├── bridge.py           # cl-revenue-ops bridge
-│   ├── clboss_bridge.py    # Optional CLBoss bridge
+│   ├── bridge.py           # cl-revenue-ops bridge (Circuit Breaker)
 │   ├── membership.py       # Member management
 │   ├── contribution.py     # Contribution tracking
 │   ├── planner.py          # Topology planner
+│   ├── cooperative_expansion.py  # Fleet expansion elections
 │   ├── splice_manager.py   # Coordinated splice operations
+│   ├── splice_coordinator.py    # Splice coordination engine
+│   ├── mcf_solver.py       # Min-Cost Max-Flow solver
+│   ├── liquidity_coordinator.py # Liquidity needs aggregation
+│   ├── cost_reduction.py   # Fleet rebalance routing
+│   ├── anticipatory_liquidity.py # Kalman-filtered flow prediction
+│   ├── fee_coordination.py # Pheromone-based fee coordination
+│   ├── fee_intelligence.py # Fee intelligence sharing
+│   ├── settlement.py       # BOLT12 settlement system
+│   ├── routing_intelligence.py  # Routing path intelligence
+│   ├── routing_pool.py     # Routing pool management
+│   ├── budget_manager.py   # Budget tracking and enforcement
+│   ├── idempotency.py      # Message deduplication
+│   ├── outbox.py           # Reliable message delivery
+│   ├── relay.py            # Message relay logic
+│   ├── health_aggregator.py    # Fleet health scoring
+│   ├── network_metrics.py  # Network metrics collection
+│   ├── peer_reputation.py  # Peer reputation tracking
+│   ├── quality_scorer.py   # Peer quality scoring
+│   ├── channel_rationalization.py # Channel optimization
+│   ├── strategic_positioning.py   # Network positioning
+│   ├── yield_metrics.py    # Yield tracking
+│   ├── task_manager.py     # Background task coordination
+│   ├── vpn_transport.py    # VPN transport layer
+│   ├── rpc_commands.py     # RPC command handlers
 │   ├── governance.py       # Decision engine (advisor/failsafe)
+│   ├── did_credentials.py  # DID credential issuance + reputation (Phase 16)
+│   ├── management_schemas.py # Management schemas + danger scoring (Phase 2)
 │   ├── config.py           # Configuration
-│   └── database.py         # Database layer
+│   └── database.py         # Database layer (50 tables)
 ├── tools/
 │   ├── mcp-hive-server.py  # MCP server for Claude Code integration
 │   ├── hive-monitor.py     # Real-time monitoring daemon
 │   └── ai_advisor.py       # AI advisor utility
 ├── config/
 │   ├── nodes.rest.example.json    # REST API config example
 │   └── nodes.docker.example.json  # Docker/Polar config example
-├── tests/                  # Test suite
+├── tests/                  # 1,918 tests across 48 files
 ├── docs/                   # Documentation
 │   ├── design/             # Design documents
 │   ├── planning/           # Implementation plans

diff --git a/MOLTY.md b/MOLTY.md
@@ -162,7 +162,7 @@ hive_reject_action        # Reject a pending action
 hive_set_fees            # Change channel fees
 revenue_set_fee          # Set fee with coordination
 revenue_rebalance        # Trigger rebalance
-revenue_policy           # Set peer policies
+revenue_policy           # Inspect peer policies; writes need allow_write=true
 ```
 
 ## Example Monitoring Session
@@ -231,5 +231,5 @@ See `CLAUDE.md` for detailed development guidance.
 ## Related Documentation
 
 - [MCP_SERVER.md](docs/MCP_SERVER.md) — Full tool reference
-- [ARCHITECTURE.md](docs/ARCHITECTURE.md) — Protocol specification
+- [hive-docs](https://github.com/lightning-goats/hive-docs) — Full documentation (architecture, specs, planning)
 - [CLAUDE.md](CLAUDE.md) — Development guidance