docs: S221 handoff, DOCUMENTATION.md → S221, fix stale spec links

- Create S221 handoff (capability names, dep hygiene, stub evolution, coverage)
- Update DOCUMENTATION.md: S219→S221, test count 22,538→22,580, unsafe 49→46,
  add S220/S221 session summaries
- Fix broken links in specs/README.md and SOVEREIGN_COMPUTE_EVOLUTION.md:
  SOVEREIGN_COMPUTE_GAPS.md fossilized S166, wateringHole quick links updated
  to fossil record paths
- Clean 3 orphan showcase dirs (01-songbird, 02-beardog, 03-nestgate) —
  untracked build debris from renames, no git content lost

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: BiomeOS Developer

DOCUMENTATION.md

@@ -1,6 +1,6 @@
 # ToadStool Documentation Hub
 
-**Last Updated**: May 2026 — S219
+**Last Updated**: May 2026 — S221
 
 ---
 
@@ -30,11 +30,11 @@ These root documents were **fully resolved** and **fossilized** in wateringHole
 
 ---
 
-## Current State (S219 — May 2026)
+## Current State (S221 — May 2026)
 
 **Post-budding, dependency-sovereign, IPC-first, fully concurrent, capability-based.** barraCuda is a separate primal at `ecoPrimals/barraCuda/`. ToadStool is the hardware infrastructure layer — GPU/NPU/CPU discovery, capability probing, workload orchestration, and shader dispatch.
 
-- **22,538 tests** (7,842+ lib-only), 0 failures, 0 clippy warnings, 0 fmt diffs. Full workspace concurrent test suite.
+- **22,580 tests** (7,842+ lib-only), 0 failures, 0 clippy warnings, 0 fmt diffs. Full workspace concurrent test suite.
 - **65 JSON-RPC methods** (incl. `compute.execute` direct route S203f). Wire Standard L3 (partial): `cost_estimates`, `operation_dependencies`. IPC compliant (`health.liveness` → `{"status":"alive"}`, `health.readiness` → ready+version, `health.check` full envelope, `capabilities.list`, `identity.get`).
 - **Dual-socket IPC** — `compute.sock` (JSON-RPC primary, biomeOS routes here) + `compute-tarpc.sock` (tarpc hot-path). Override: `TOADSTOOL_SOCKET` / `TOADSTOOL_TARPC_SOCKET`. Family: `compute-{fid}.sock` / `compute-{fid}-tarpc.sock`.
 - **Pipeline dispatch** — `compute.dispatch.pipeline.submit` + `.status` for ordered multi-stage workloads (DAG, topological sort, result forwarding). Resolves neuralSpring PG-05.
@@ -44,7 +44,7 @@ These root documents were **fully resolved** and **fossilized** in wateringHole
 - **BTSP Phase 2 + JSON-line relay (S176)** — Handshake enforced on every UDS accept path; auto-detects plain-text clients (primalSpring) and degrades gracefully. JSON-line BTSP auto-detection on `0x7B` path routes `"protocol":"btsp"` to `relay_json_line_handshake()` (4-step BearDog IPC relay). Family seed loading via `load_family_seed_for_btsp()` (env→file cascade).
 - **async-trait DEPRECATED** (S203r) — fully removed and banned in `deny.toml`. All ~91 annotations evolved to manual `Pin<Box<dyn Future>>` (dyn-dispatched) or native AFIT (non-dyn), and subsequently enum dispatch + RPITIT (S203s). Zero runtime behavior change. Transitive only via axum/config/wiggle.
 - **`deny.toml` ring ban active** — ecoBin v3 compliant. `ring` absent from lockfile.
-- **49 unsafe blocks (all in hw-safe/GPU/VFIO/display/plugin containment crates)**; all SAFETY-documented (S204: ffi\_loader.rs gap closed). Workspace `unsafe_code = "deny"`, **41 crates `forbid`** + 5 hw crates with narrow `#[allow(unsafe_code, reason)]`. All lint attrs have `reason =` (S211+S213).
+- **46 unsafe blocks (all in hw-safe/GPU/VFIO/display/plugin containment crates)**; all SAFETY-documented (S204: ffi\_loader.rs gap closed, S221: count reconciled 49→46). Workspace `unsafe_code = "deny"`, **41 crates `forbid`** + 5 hw crates with narrow `#[allow(unsafe_code, reason)]`. All lint attrs have `reason =` (S211+S213).
 - **Encrypted compute dispatch (S205)** — payloads encrypted via Tower `crypto.encrypt` before dispatch, decrypted on result return. `DISCOVERY_SOCKET` wired as highest-precedence capability resolution tier.
 - **Dep hygiene (S206)** — `humantime-serde`, `rand`, `tokio-util`, `temp-env` unified to workspace. GPU `spirv`/`jit`/`testing` stale features removed. `test-mocks` removed from core default features.
 - **Coverage push (S212)** — ~100 new inline tests across 10 previously-untested files (server handlers, CLI collectors, platform monitoring, auto_config, distributed security). 1,004 new test lines.
@@ -55,6 +55,8 @@ These root documents were **fully resolved** and **fossilized** in wateringHole
 - **BTSP Phase 3 transport switch verified (S218)** — Closed primalSpring audit: negotiate→encrypted framing transition confirmed correct. 15 new E2E tests. BufReader pipelining hazard documented. NegotiateOutcome key redaction.
 - **Flaky test fix (S217+S218)** — `primal_sockets` convenience API tests isolated with `temp_env::with_vars` — zero env-var race conditions in parallel workspace runs. 6 additional discovery tests wrapped.
 - **Orphan module recovery (S217)** — 6 dead-code modules in `integration-primals` wired into module tree (error, client, orchestrator, services, manifest, types). 35+ new tests.
+- **primalSpring Phase 58 audit response (S220)** — Phase 3 encryption confirmed resolved. +22 tests (wasm metrics, stub runtime engine, os layer manager, container engine). OSLayerManager fallback evolved to `ToadStoolError::not_supported`.
+- **Capability names + dep hygiene (S221)** — All `barraCuda/coralReef` hardcoded primal refs evolved to capability-based language (`gpu.dispatch.opencl capability provider`). `reqwest` 0.12→0.13 removes `ring` from dep graph. `verify_migration_success` dead code fixed. Unsafe count reconciled (49→46). +20 tests (daemon routes, zero-config).
 - **Edge discovery evolved (S203m)** — USB via `/sys/bus/usb/devices/`, Bluetooth via sysfs adapter enumeration, IPv6 via `/proc/net/if_inet6`. All gracefully degrade on non-Linux.
 - **Scheduler queuing (S203m)** — `schedule_job` → `UniversalJobQueue::add_job` inserts into per-priority queues (was metadata-only). `schedule_local_job` logs post-enqueue telemetry.
 - **Hardcoding sweep (S203m–p)** — sysfs/procfs paths centralized to `platform_paths`; all `TOADSTOOL_*` env var literals interned to `socket_env` constants (~55 new in S203p). `env_overrides` subsystem fully converted.

infra/wateringHole/handoffs/TOADSTOOL_S221_DEEP_DEBT_CAPABILITY_NAMES_DEP_HYGIENE_MAY04_2026.md

@@ -0,0 +1,80 @@
+# ToadStool S221 — Deep Debt: Capability Names + Dep Hygiene + Stub Evolution + Coverage
+
+**Date**: May 4, 2026
+**Session**: S221
+
+---
+
+## Summary
+
+Comprehensive deep-debt sweep targeting hardcoded primal names, dependency
+hygiene, production stub dead code, unsafe audit reconciliation, and test
+coverage expansion.
+
+---
+
+## Changes
+
+### 1. Hardcoded Primal Names → Capability-Based (10 files)
+
+All `barraCuda/coralReef` references in production error messages, deprecation
+attributes, and doc comments evolved to capability-based language
+(`gpu.dispatch.opencl capability provider via IPC`).
+
+Files: `gpu/compiler.rs`, `gpu/engine/init.rs`, `gpu/types.rs`,
+`gpu/unified_memory/manager.rs`, `gpu/unified_memory/types.rs`,
+`distributed/universal/types/specialized.rs`, `core/toadstool/workload/types.rs`,
+`auto_config/hardware/gpu.rs`, `cli/zero_config/types.rs`,
+`cli/utils/error_formatting.rs`.
+
+Self-references to `toadStool` remain correct (primal knows its own identity).
+
+### 2. Dependency Hygiene: reqwest 0.12 → 0.13
+
+`toadstool-runtime-edge` upgraded `reqwest` from 0.12 to 0.13. The 0.13 release
+defaults to `aws-lc-rs` instead of `ring` as the rustls crypto provider. `ring`
+is no longer in the resolved workspace dependency graph, aligning with the
+`deny.toml` ring ban.
+
+### 3. Production Stub Evolution: Migration Dead Code
+
+`verify_migration_success` was always returning `Ok(true)`, making the failure
+branch in `execute_live_migration` dead code. Evolved to return `Ok(false)` with
+a `tracing::warn` about unimplemented verification. The failure path is now live
+and honest.
+
+### 4. Unsafe Audit Reconciliation: 49 → 46
+
+Literal `unsafe {}` block count is **46** (not 49 as documented since S216).
+All are kernel FFI / mmap / ioctl / volatile MMIO / plugin loading. All
+SAFETY-documented. None replaceable with safe Rust without performance loss.
+Updated across DEBT.md, README.md, CONTEXT.md, NEXT_STEPS.md.
+
+### 5. Coverage Push: +20 Tests
+
+- `cli/daemon/routes.rs`: 11 new unit tests (identity.get, health aliases,
+  metrics, get/delete workload params, unknown method, invalid JSON-RPC version)
+- `cli/zero_config/configuration.rs`: 9 new tests with `temp_env::async_with_vars`
+  (biome CPU scaling, runtime docker/cuda, security/network/storage provider env gates)
+
+---
+
+## Quality Gates
+
+| Gate | Status |
+|------|--------|
+| `cargo test --workspace` | **22,580 tests, 0 failures** |
+| `cargo build --workspace` | Clean |
+| `cargo clippy --workspace` | 0 new warnings |
+| `cargo fmt --all --check` | 0 diffs |
+
+---
+
+## Files Modified (18)
+
+- 10 GPU/distributed/core/cli files: primal name → capability language
+- `crates/runtime/edge/Cargo.toml`: reqwest 0.12 → 0.13
+- `crates/cli/src/universal/operations/migration.rs`: dead code fix
+- `crates/cli/src/daemon/routes.rs`: +11 tests
+- `crates/cli/src/zero_config/configuration.rs`: +9 tests
+- Root docs: DEBT.md, README.md, CONTEXT.md, NEXT_STEPS.md

specs/README.md

@@ -164,7 +164,7 @@ gap closure, performance surface database. See `ALL_SILICON_PIPELINE.md`.
 | **[BARRACUDA_PRIMAL_BUDDING.md](./BARRACUDA_PRIMAL_BUDDING.md)** | barraCuda budding — fully untangled, zero cross-deps | **Mar 3** | ✅ Phase 5 Complete |
 | **[ARCHITECTURE_DEMARCATION.md](./ARCHITECTURE_DEMARCATION.md)** | 4-layer chain: barraCuda → coralReef → toadStool + songBird (wire) | **Mar 12** | 🔄 Active |
 
-**Tracker**: [`../SOVEREIGN_COMPUTE_GAPS.md`](../SOVEREIGN_COMPUTE_GAPS.md) — remaining work before proceeding
+**Tracker**: Fossilized as `ecoPrimals/infra/wateringHole/fossilRecord/toadstool/TOADSTOOL_SOVEREIGN_COMPUTE_GAPS_S166.md` — remaining gaps tracked in [`../DEBT.md`](../DEBT.md)
 
 ### Performance & Evolution
 
@@ -376,10 +376,10 @@ to complete implementations. External C dependencies evolve to pure Rust.
 
 - **Immediate work:** `../NEXT_STEPS.md`
 - **Debt register:** `../DEBT.md`
-- **Sovereign gaps:** `../SOVEREIGN_COMPUTE_GAPS.md`
+- **Sovereign gaps:** Fossilized — `ecoPrimals/infra/wateringHole/fossilRecord/toadstool/TOADSTOOL_SOVEREIGN_COMPUTE_GAPS_S166.md`
 - **Architecture docs:** `docs/architecture/`
 - **Hardware traits:** `crates/toadstool-core/src/` (NpuDispatch, NpuParameterController)
 - **GPU backends:** `crates/runtime/universal/src/backends/`
 - **Tests:** `cargo test --workspace`
-- **Leverage guide:** `wateringHole/TOADSTOOL_LEVERAGE_GUIDE.md`
-- **All-silicon plan:** `wateringHole/GPU_FIXED_FUNCTION_SCIENCE_REPURPOSING.md`
+- **Leverage guide:** Fossilized — `ecoPrimals/infra/wateringHole/fossilRecord/toadstool/TOADSTOOL_LEVERAGE_GUIDE_S166.md`
+- **All-silicon plan:** Fossilized — `ecoPrimals/infra/wateringHole/fossilRecord/toadstool/GPU_FIXED_FUNCTION_SCIENCE_REPURPOSING_S166.md`

specs/SOVEREIGN_COMPUTE_EVOLUTION.md

@@ -440,7 +440,7 @@ toadStool (interface)          coralReef (transport)
 
 ### Remaining Phase 5 Gaps (toadStool side)
 
-See `../SOVEREIGN_COMPUTE_GAPS.md` for full tracker.
+See `../DEBT.md` for active gap tracking (sovereign compute gaps fossilized as `ecoPrimals/infra/wateringHole/fossilRecord/toadstool/TOADSTOOL_SOVEREIGN_COMPUTE_GAPS_S166.md`).
 
 - Multi-arch register classification (AMD, Intel alongside NVIDIA)
 - Unified PCI discovery (single scanner for GPU + NPU)