mios-dev · mios-dev · Oct 3, 2026 · Oct 3, 2026 · Oct 3, 2026 · Oct 3, 2026
diff --git a/.devloop/LEDGER.md b/.devloop/LEDGER.md
@@ -1759,3 +1759,14 @@ so long. Let a run finish.
 - next: sessions holding branches that touch the retired files must re-apply their record changes through mios-task on tasks.jsonl after rebasing.
 - blockers: -
 - unverified: -
+
+## 2026-10-03 19:55 · 779b0bb6 · claude/fervent-gates-jp5d5z: [pgvector] keys restored (mios-dev/MiOS#60)
+- objective: restore the [pgvector] keys that a lost table header (6ab11843) stranded under [offline], so every consumer's MIOS_* name is emitted again (Law 9), and close the gate hole that let it land.
+- done:
+  1. usr/share/mios/mios.toml: rls_enable, pool_enable/min/max, hnsw_iterative_scan, hnsw_max_scan_tuples, hnsw_scan_mem_multiplier, emb_model, emb_version, scratch_persist, backfill_batch, backup_enable/dir/keep and listen_loopback are back in [pgvector]. A parsed-TOML compare shows only those 15 paths moved, with equal values.
+  2. tools/drift-checks.py value-aliases: a registered name the resolver does not emit is now a violation that names it (the gate used to skip the row). value-aliases.tsv gains [pgvector].rls_enable -> MIOS_DB_RLS_ENABLE. tools/test_drift-checks.py TestValueAliasRegistry has 7 tests, one replaying the af6de6a layout hermetically.
+  3. Ledgers: var-closure drops MIOS_DB_RLS_ENABLE and MIOS_PG_POOL_* (ceiling 410 -> 406); value-dup-baseline is a pure rename and keeps its 405 ceiling.
+  4. Controls: the af6de6a layout fails check_value_aliases naming 27 variables, also after tools/sync-generated.sh; the old gate passes that plant; the fixed tree passes. The Python and Rust resolvers emit identical maps (2840 names).
+- next: the PR is a draft. Its CI is red only where main 26edb17f is red: the behavioural tier fails the same 5 suites with identical output, and main's smoke build fails at the in-image 98-drift-checks. Follow-ups queued for the operator: make the Quadlet render fail on placeholders the SSOT never emits (MIOS_PG_BIND_ADDR among them), and retire the dead offline.backup_* alias in both resolver twins together with the inert [offline] table.
+- blockers: -
+- unverified: the PR-head smoke test (its in-image violation set against main's 108); the Rust and drift-gate CI tiers, which never run on the PR or on main while the behavioural tier is red; the restored knobs on a booted host.
diff --git a/automation/lib/globals.ps1 b/automation/lib/globals.ps1
@@ -777,6 +777,7 @@ $script:MIOS_DATABASE_REPLICATION_SLOT_PREFIX = if ($env:MIOS_DATABASE_REPLICATI
 $script:MIOS_DATA_DISK_LETTER = if ($env:MIOS_DATA_DISK_LETTER) { $env:MIOS_DATA_DISK_LETTER } else { 'M' }
 $script:MIOS_DATA_DISK_MB = if ($env:MIOS_DATA_DISK_MB) { $env:MIOS_DATA_DISK_MB } else { 262656 }
 $script:MIOS_DB_BACKEND = if ($env:MIOS_DB_BACKEND) { $env:MIOS_DB_BACKEND } else { 'postgres' }
+$script:MIOS_DB_RLS_ENABLE = if ($env:MIOS_DB_RLS_ENABLE) { $env:MIOS_DB_RLS_ENABLE } else { 'false' }
 $script:MIOS_DCI_FLOW_ENABLED = if ($env:MIOS_DCI_FLOW_ENABLED) { $env:MIOS_DCI_FLOW_ENABLED } else { 'false' }
 $script:MIOS_DEFAULT_GROUPS = if ($env:MIOS_DEFAULT_GROUPS) { $env:MIOS_DEFAULT_GROUPS } else { 'wheel,libvirt,kvm,video,render,input,dialout,docker' }
 $script:MIOS_DEFAULT_HOST = if ($env:MIOS_DEFAULT_HOST) { $env:MIOS_DEFAULT_HOST } else { 'mios' }
@@ -1744,24 +1745,9 @@ $script:MIOS_OBSERVABILITY_OTEL_ENDPOINT = if ($env:MIOS_OBSERVABILITY_OTEL_ENDP
 $script:MIOS_OBSERVABILITY_RECORD_MODE = if ($env:MIOS_OBSERVABILITY_RECORD_MODE) { $env:MIOS_OBSERVABILITY_RECORD_MODE } else { 'false' }
 $script:MIOS_OBSERVABILITY_REPLAY_MODE = if ($env:MIOS_OBSERVABILITY_REPLAY_MODE) { $env:MIOS_OBSERVABILITY_REPLAY_MODE } else { 'false' }
 $script:MIOS_OBSERVABILITY_SURFACE_DEFAULT = if ($env:MIOS_OBSERVABILITY_SURFACE_DEFAULT) { $env:MIOS_OBSERVABILITY_SURFACE_DEFAULT } else { 'clean' }
-$script:MIOS_OFFLINE_BACKFILL_BATCH = if ($env:MIOS_OFFLINE_BACKFILL_BATCH) { $env:MIOS_OFFLINE_BACKFILL_BATCH } else { 50 }
-$script:MIOS_OFFLINE_BACKUP_DIR = if ($env:MIOS_OFFLINE_BACKUP_DIR) { $env:MIOS_OFFLINE_BACKUP_DIR } else { '/var/lib/mios/backups' }
-$script:MIOS_OFFLINE_BACKUP_ENABLE = if ($env:MIOS_OFFLINE_BACKUP_ENABLE) { $env:MIOS_OFFLINE_BACKUP_ENABLE } else { 'true' }
-$script:MIOS_OFFLINE_BACKUP_KEEP = if ($env:MIOS_OFFLINE_BACKUP_KEEP) { $env:MIOS_OFFLINE_BACKUP_KEEP } else { 7 }
-$script:MIOS_OFFLINE_EMB_MODEL = if ($env:MIOS_OFFLINE_EMB_MODEL) { $env:MIOS_OFFLINE_EMB_MODEL } else { 'nomic-embed-text' }
-$script:MIOS_OFFLINE_EMB_VERSION = if ($env:MIOS_OFFLINE_EMB_VERSION) { $env:MIOS_OFFLINE_EMB_VERSION } else { 'nomic-768-v1' }
 $script:MIOS_OFFLINE_ENABLE = if ($env:MIOS_OFFLINE_ENABLE) { $env:MIOS_OFFLINE_ENABLE } else { 'false' }
 $script:MIOS_OFFLINE_FALLBACK_TO_ONLINE = if ($env:MIOS_OFFLINE_FALLBACK_TO_ONLINE) { $env:MIOS_OFFLINE_FALLBACK_TO_ONLINE } else { 'true' }
-$script:MIOS_OFFLINE_HNSW_ITERATIVE_SCAN = if ($env:MIOS_OFFLINE_HNSW_ITERATIVE_SCAN) { $env:MIOS_OFFLINE_HNSW_ITERATIVE_SCAN } else { 'strict_order' }
-$script:MIOS_OFFLINE_HNSW_MAX_SCAN_TUPLES = if ($env:MIOS_OFFLINE_HNSW_MAX_SCAN_TUPLES) { $env:MIOS_OFFLINE_HNSW_MAX_SCAN_TUPLES } else { 20000 }
-$script:MIOS_OFFLINE_HNSW_SCAN_MEM_MULTIPLIER = if ($env:MIOS_OFFLINE_HNSW_SCAN_MEM_MULTIPLIER) { $env:MIOS_OFFLINE_HNSW_SCAN_MEM_MULTIPLIER } else { 1 }
-$script:MIOS_OFFLINE_LISTEN_LOOPBACK = if ($env:MIOS_OFFLINE_LISTEN_LOOPBACK) { $env:MIOS_OFFLINE_LISTEN_LOOPBACK } else { 'true' }
-$script:MIOS_OFFLINE_POOL_ENABLE = if ($env:MIOS_OFFLINE_POOL_ENABLE) { $env:MIOS_OFFLINE_POOL_ENABLE } else { 'false' }
-$script:MIOS_OFFLINE_POOL_MAX = if ($env:MIOS_OFFLINE_POOL_MAX) { $env:MIOS_OFFLINE_POOL_MAX } else { 8 }
-$script:MIOS_OFFLINE_POOL_MIN = if ($env:MIOS_OFFLINE_POOL_MIN) { $env:MIOS_OFFLINE_POOL_MIN } else { 0 }
-$script:MIOS_OFFLINE_RLS_ENABLE = if ($env:MIOS_OFFLINE_RLS_ENABLE) { $env:MIOS_OFFLINE_RLS_ENABLE } else { 'false' }
 $script:MIOS_OFFLINE_RPM_MIRROR_DIR = if ($env:MIOS_OFFLINE_RPM_MIRROR_DIR) { $env:MIOS_OFFLINE_RPM_MIRROR_DIR } else { '/usr/share/mios/vendored/rpm-mirror' }
-$script:MIOS_OFFLINE_SCRATCH_PERSIST = if ($env:MIOS_OFFLINE_SCRATCH_PERSIST) { $env:MIOS_OFFLINE_SCRATCH_PERSIST } else { 'true' }
 $script:MIOS_OPENCODE_BIN = if ($env:MIOS_OPENCODE_BIN) { $env:MIOS_OPENCODE_BIN } else { '/usr/lib/mios/agents/opencode/bin/opencode' }
 $script:MIOS_OPENCODE_CONFIG = if ($env:MIOS_OPENCODE_CONFIG) { $env:MIOS_OPENCODE_CONFIG } else { '/etc/mios/opencode/opencode.json' }
 $script:MIOS_OPENCODE_GATEWAY_PORT = if ($env:MIOS_OPENCODE_GATEWAY_PORT) { $env:MIOS_OPENCODE_GATEWAY_PORT } else { 8780 }
@@ -1897,40 +1883,66 @@ $script:MIOS_PATHS_VAR_CACHE_DIR = if ($env:MIOS_PATHS_VAR_CACHE_DIR) { $env:MIO
 $script:MIOS_PATHS_VAR_DIR = if ($env:MIOS_PATHS_VAR_DIR) { $env:MIOS_PATHS_VAR_DIR } else { '/var/lib/mios' }
 $script:MIOS_PATHS_VAR_MCP_DIR = if ($env:MIOS_PATHS_VAR_MCP_DIR) { $env:MIOS_PATHS_VAR_MCP_DIR } else { "$($script:MIOS_VAR_DIR)/mcp" }
 $script:MIOS_PATHS_WSL_FIRSTBOOT_DONE = if ($env:MIOS_PATHS_WSL_FIRSTBOOT_DONE) { $env:MIOS_PATHS_WSL_FIRSTBOOT_DONE } else { '/var/lib/mios/.wsl-firstboot-done' }
+$script:MIOS_PGVECTOR_BACKFILL_BATCH = if ($env:MIOS_PGVECTOR_BACKFILL_BATCH) { $env:MIOS_PGVECTOR_BACKFILL_BATCH } else { 50 }
+$script:MIOS_PGVECTOR_BACKUP_DIR = if ($env:MIOS_PGVECTOR_BACKUP_DIR) { $env:MIOS_PGVECTOR_BACKUP_DIR } else { '/var/lib/mios/backups' }
+$script:MIOS_PGVECTOR_BACKUP_ENABLE = if ($env:MIOS_PGVECTOR_BACKUP_ENABLE) { $env:MIOS_PGVECTOR_BACKUP_ENABLE } else { 'true' }
+$script:MIOS_PGVECTOR_BACKUP_KEEP = if ($env:MIOS_PGVECTOR_BACKUP_KEEP) { $env:MIOS_PGVECTOR_BACKUP_KEEP } else { 7 }
 $script:MIOS_PGVECTOR_DATA_DIR = if ($env:MIOS_PGVECTOR_DATA_DIR) { $env:MIOS_PGVECTOR_DATA_DIR } else { '/var/lib/mios/pgvector' }
 $script:MIOS_PGVECTOR_DB = if ($env:MIOS_PGVECTOR_DB) { $env:MIOS_PGVECTOR_DB } else { 'mios' }
 $script:MIOS_PGVECTOR_DB_BACKEND = if ($env:MIOS_PGVECTOR_DB_BACKEND) { $env:MIOS_PGVECTOR_DB_BACKEND } else { 'postgres' }
 $script:MIOS_PGVECTOR_EMBED_MODEL = if ($env:MIOS_PGVECTOR_EMBED_MODEL) { $env:MIOS_PGVECTOR_EMBED_MODEL } else { 'nomic-embed-text' }
+$script:MIOS_PGVECTOR_EMB_MODEL = if ($env:MIOS_PGVECTOR_EMB_MODEL) { $env:MIOS_PGVECTOR_EMB_MODEL } else { 'nomic-embed-text' }
+$script:MIOS_PGVECTOR_EMB_VERSION = if ($env:MIOS_PGVECTOR_EMB_VERSION) { $env:MIOS_PGVECTOR_EMB_VERSION } else { 'nomic-768-v1' }
 $script:MIOS_PGVECTOR_ENABLE = if ($env:MIOS_PGVECTOR_ENABLE) { $env:MIOS_PGVECTOR_ENABLE } else { 'true' }
 $script:MIOS_PGVECTOR_GID = if ($env:MIOS_PGVECTOR_GID) { $env:MIOS_PGVECTOR_GID } else { 826 }
+$script:MIOS_PGVECTOR_HNSW_ITERATIVE_SCAN = if ($env:MIOS_PGVECTOR_HNSW_ITERATIVE_SCAN) { $env:MIOS_PGVECTOR_HNSW_ITERATIVE_SCAN } else { 'strict_order' }
+$script:MIOS_PGVECTOR_HNSW_MAX_SCAN_TUPLES = if ($env:MIOS_PGVECTOR_HNSW_MAX_SCAN_TUPLES) { $env:MIOS_PGVECTOR_HNSW_MAX_SCAN_TUPLES } else { 20000 }
+$script:MIOS_PGVECTOR_HNSW_SCAN_MEM_MULTIPLIER = if ($env:MIOS_PGVECTOR_HNSW_SCAN_MEM_MULTIPLIER) { $env:MIOS_PGVECTOR_HNSW_SCAN_MEM_MULTIPLIER } else { 1 }
 $script:MIOS_PGVECTOR_HOST = if ($env:MIOS_PGVECTOR_HOST) { $env:MIOS_PGVECTOR_HOST } else { '127.0.0.1' }
 $script:MIOS_PGVECTOR_IMAGE = if ($env:MIOS_PGVECTOR_IMAGE) { $env:MIOS_PGVECTOR_IMAGE } else { 'docker.io/pgvector/pgvector:latest' }
+$script:MIOS_PGVECTOR_LISTEN_LOOPBACK = if ($env:MIOS_PGVECTOR_LISTEN_LOOPBACK) { $env:MIOS_PGVECTOR_LISTEN_LOOPBACK } else { 'true' }
 $script:MIOS_PGVECTOR_MEMGUARD_JUDGE_MODE = if ($env:MIOS_PGVECTOR_MEMGUARD_JUDGE_MODE) { $env:MIOS_PGVECTOR_MEMGUARD_JUDGE_MODE } else { 'model' }
 $script:MIOS_PGVECTOR_MEMORY_GUARD_MODE = if ($env:MIOS_PGVECTOR_MEMORY_GUARD_MODE) { $env:MIOS_PGVECTOR_MEMORY_GUARD_MODE } else { 'log' }
 $script:MIOS_PGVECTOR_MEMORY_PROVIDER = if ($env:MIOS_PGVECTOR_MEMORY_PROVIDER) { $env:MIOS_PGVECTOR_MEMORY_PROVIDER } else { 'pgvector' }
 $script:MIOS_PGVECTOR_PASS = if ($env:MIOS_PGVECTOR_PASS) { $env:MIOS_PGVECTOR_PASS } else { 'mios' }
+$script:MIOS_PGVECTOR_POOL_ENABLE = if ($env:MIOS_PGVECTOR_POOL_ENABLE) { $env:MIOS_PGVECTOR_POOL_ENABLE } else { 'false' }
+$script:MIOS_PGVECTOR_POOL_MAX = if ($env:MIOS_PGVECTOR_POOL_MAX) { $env:MIOS_PGVECTOR_POOL_MAX } else { 8 }
+$script:MIOS_PGVECTOR_POOL_MIN = if ($env:MIOS_PGVECTOR_POOL_MIN) { $env:MIOS_PGVECTOR_POOL_MIN } else { 0 }
 $script:MIOS_PGVECTOR_PORT = if ($env:MIOS_PGVECTOR_PORT) { $env:MIOS_PGVECTOR_PORT } else { 8600 }
 $script:MIOS_PGVECTOR_RESTORE_SQL = if ($env:MIOS_PGVECTOR_RESTORE_SQL) { $env:MIOS_PGVECTOR_RESTORE_SQL } else { '/var/lib/mios/pgvector-restore.sql' }
+$script:MIOS_PGVECTOR_RLS_ENABLE = if ($env:MIOS_PGVECTOR_RLS_ENABLE) { $env:MIOS_PGVECTOR_RLS_ENABLE } else { 'false' }
 $script:MIOS_PGVECTOR_RLS_MODE = if ($env:MIOS_PGVECTOR_RLS_MODE) { $env:MIOS_PGVECTOR_RLS_MODE } else { 'off' }
 $script:MIOS_PGVECTOR_SCHEMA_INIT = if ($env:MIOS_PGVECTOR_SCHEMA_INIT) { $env:MIOS_PGVECTOR_SCHEMA_INIT } else { '/usr/share/mios/postgres/schema-init.sql' }
+$script:MIOS_PGVECTOR_SCRATCH_PERSIST = if ($env:MIOS_PGVECTOR_SCRATCH_PERSIST) { $env:MIOS_PGVECTOR_SCRATCH_PERSIST } else { 'true' }
 $script:MIOS_PGVECTOR_UID = if ($env:MIOS_PGVECTOR_UID) { $env:MIOS_PGVECTOR_UID } else { 826 }
 $script:MIOS_PGVECTOR_USER = if ($env:MIOS_PGVECTOR_USER) { $env:MIOS_PGVECTOR_USER } else { 'mios-pgvector' }
 $script:MIOS_PGVECTOR_VERSION = if ($env:MIOS_PGVECTOR_VERSION) { $env:MIOS_PGVECTOR_VERSION } else { 'latest' }
+$script:MIOS_PG_BACKFILL_BATCH = if ($env:MIOS_PG_BACKFILL_BATCH) { $env:MIOS_PG_BACKFILL_BATCH } else { 50 }
 $script:MIOS_PG_BACKUP_DIR = if ($env:MIOS_PG_BACKUP_DIR) { $env:MIOS_PG_BACKUP_DIR } else { '/var/lib/mios/backups' }
 $script:MIOS_PG_BACKUP_ENABLE = if ($env:MIOS_PG_BACKUP_ENABLE) { $env:MIOS_PG_BACKUP_ENABLE } else { 'true' }
 $script:MIOS_PG_BACKUP_KEEP = if ($env:MIOS_PG_BACKUP_KEEP) { $env:MIOS_PG_BACKUP_KEEP } else { 7 }
 $script:MIOS_PG_DATA_DIR = if ($env:MIOS_PG_DATA_DIR) { $env:MIOS_PG_DATA_DIR } else { '/var/lib/mios/pgvector' }
 $script:MIOS_PG_DB = if ($env:MIOS_PG_DB) { $env:MIOS_PG_DB } else { 'mios' }
 $script:MIOS_PG_EMBED_MODEL = if ($env:MIOS_PG_EMBED_MODEL) { $env:MIOS_PG_EMBED_MODEL } else { 'nomic-embed-text' }
+$script:MIOS_PG_EMB_MODEL = if ($env:MIOS_PG_EMB_MODEL) { $env:MIOS_PG_EMB_MODEL } else { 'nomic-embed-text' }
+$script:MIOS_PG_EMB_VERSION = if ($env:MIOS_PG_EMB_VERSION) { $env:MIOS_PG_EMB_VERSION } else { 'nomic-768-v1' }
 $script:MIOS_PG_ENABLE = if ($env:MIOS_PG_ENABLE) { $env:MIOS_PG_ENABLE } else { 'true' }
+$script:MIOS_PG_HNSW_ITERATIVE_SCAN = if ($env:MIOS_PG_HNSW_ITERATIVE_SCAN) { $env:MIOS_PG_HNSW_ITERATIVE_SCAN } else { 'strict_order' }
+$script:MIOS_PG_HNSW_MAX_SCAN_TUPLES = if ($env:MIOS_PG_HNSW_MAX_SCAN_TUPLES) { $env:MIOS_PG_HNSW_MAX_SCAN_TUPLES } else { 20000 }
+$script:MIOS_PG_HNSW_SCAN_MEM_MULTIPLIER = if ($env:MIOS_PG_HNSW_SCAN_MEM_MULTIPLIER) { $env:MIOS_PG_HNSW_SCAN_MEM_MULTIPLIER } else { 1 }
 $script:MIOS_PG_HOST = if ($env:MIOS_PG_HOST) { $env:MIOS_PG_HOST } else { '127.0.0.1' }
+$script:MIOS_PG_LISTEN_LOOPBACK = if ($env:MIOS_PG_LISTEN_LOOPBACK) { $env:MIOS_PG_LISTEN_LOOPBACK } else { 'true' }
 $script:MIOS_PG_MEMGUARD_JUDGE_MODE = if ($env:MIOS_PG_MEMGUARD_JUDGE_MODE) { $env:MIOS_PG_MEMGUARD_JUDGE_MODE } else { 'model' }
 $script:MIOS_PG_MEMORY_GUARD_MODE = if ($env:MIOS_PG_MEMORY_GUARD_MODE) { $env:MIOS_PG_MEMORY_GUARD_MODE } else { 'log' }
 $script:MIOS_PG_MEMORY_PROVIDER = if ($env:MIOS_PG_MEMORY_PROVIDER) { $env:MIOS_PG_MEMORY_PROVIDER } else { 'pgvector' }
 $script:MIOS_PG_PASS = if ($env:MIOS_PG_PASS) { $env:MIOS_PG_PASS } else { 'mios' }
+$script:MIOS_PG_POOL_ENABLE = if ($env:MIOS_PG_POOL_ENABLE) { $env:MIOS_PG_POOL_ENABLE } else { 'false' }
+$script:MIOS_PG_POOL_MAX = if ($env:MIOS_PG_POOL_MAX) { $env:MIOS_PG_POOL_MAX } else { 8 }
+$script:MIOS_PG_POOL_MIN = if ($env:MIOS_PG_POOL_MIN) { $env:MIOS_PG_POOL_MIN } else { 0 }
 $script:MIOS_PG_RESTORE_SQL = if ($env:MIOS_PG_RESTORE_SQL) { $env:MIOS_PG_RESTORE_SQL } else { '/var/lib/mios/pgvector-restore.sql' }
 $script:MIOS_PG_RLS_MODE = if ($env:MIOS_PG_RLS_MODE) { $env:MIOS_PG_RLS_MODE } else { 'off' }
 $script:MIOS_PG_SCHEMA_INIT = if ($env:MIOS_PG_SCHEMA_INIT) { $env:MIOS_PG_SCHEMA_INIT } else { '/usr/share/mios/postgres/schema-init.sql' }
+$script:MIOS_PG_SCRATCH_PERSIST = if ($env:MIOS_PG_SCRATCH_PERSIST) { $env:MIOS_PG_SCRATCH_PERSIST } else { 'true' }
 $script:MIOS_PG_USER = if ($env:MIOS_PG_USER) { $env:MIOS_PG_USER } else { 'mios' }
 $script:MIOS_PIPELINE_BANDS = if ($env:MIOS_PIPELINE_BANDS) { $env:MIOS_PIPELINE_BANDS } else { '{ purpose = "git-overlay", range = [1, 1] },{ purpose = "build-context", range = [2, 2] },{ purpose = "repos/kernel", range = [5, 7] },{ purpose = "accounts", range = [10, 15] },{ purpose = "hardware-universal", range = [20, 27] },{ purpose = "services", range = [33, 54] },{ purpose = "themes", range = [56, 62] },{ purpose = "ai/desktop/boot/distribution", range = [65, 80] },{ purpose = "finalize/validators", range = [85, 99] }' }
 $script:MIOS_PIPELINE_CHECK_INDEX = if ($env:MIOS_PIPELINE_CHECK_INDEX) { $env:MIOS_PIPELINE_CHECK_INDEX } else { 'usr/share/mios/reference/drift-gate-index.tsv' }

diff --git a/automation/lib/globals.sh b/automation/lib/globals.sh
@@ -752,6 +752,7 @@ export MIOS_VERSION
 : "${MIOS_DATA_DISK_LETTER:=M}"
 : "${MIOS_DATA_DISK_MB:=262656}"
 : "${MIOS_DB_BACKEND:=postgres}"
+: "${MIOS_DB_RLS_ENABLE:=false}"
 : "${MIOS_DCI_FLOW_ENABLED:=false}"
 : "${MIOS_DEFAULT_GROUPS:=wheel,libvirt,kvm,video,render,input,dialout,docker}"
 : "${MIOS_DEFAULT_HOST:=mios}"
@@ -1719,24 +1720,9 @@ is *also* a local, self-hosted, agentic AI operating system.
 : "${MIOS_OBSERVABILITY_RECORD_MODE:=false}"
 : "${MIOS_OBSERVABILITY_REPLAY_MODE:=false}"
 : "${MIOS_OBSERVABILITY_SURFACE_DEFAULT:=clean}"
-: "${MIOS_OFFLINE_BACKFILL_BATCH:=50}"
-: "${MIOS_OFFLINE_BACKUP_DIR:=/var/lib/mios/backups}"
-: "${MIOS_OFFLINE_BACKUP_ENABLE:=true}"
-: "${MIOS_OFFLINE_BACKUP_KEEP:=7}"
-: "${MIOS_OFFLINE_EMB_MODEL:=nomic-embed-text}"
-: "${MIOS_OFFLINE_EMB_VERSION:=nomic-768-v1}"
 : "${MIOS_OFFLINE_ENABLE:=false}"
 : "${MIOS_OFFLINE_FALLBACK_TO_ONLINE:=true}"
-: "${MIOS_OFFLINE_HNSW_ITERATIVE_SCAN:=strict_order}"
-: "${MIOS_OFFLINE_HNSW_MAX_SCAN_TUPLES:=20000}"
-: "${MIOS_OFFLINE_HNSW_SCAN_MEM_MULTIPLIER:=1}"
-: "${MIOS_OFFLINE_LISTEN_LOOPBACK:=true}"
-: "${MIOS_OFFLINE_POOL_ENABLE:=false}"
-: "${MIOS_OFFLINE_POOL_MAX:=8}"
-: "${MIOS_OFFLINE_POOL_MIN:=0}"
-: "${MIOS_OFFLINE_RLS_ENABLE:=false}"
 : "${MIOS_OFFLINE_RPM_MIRROR_DIR:=/usr/share/mios/vendored/rpm-mirror}"
-: "${MIOS_OFFLINE_SCRATCH_PERSIST:=true}"
 : "${MIOS_OPENCODE_BIN:=/usr/lib/mios/agents/opencode/bin/opencode}"
 : "${MIOS_OPENCODE_CONFIG:=/etc/mios/opencode/opencode.json}"
 : "${MIOS_OPENCODE_GATEWAY_PORT:=8780}"
@@ -1872,40 +1858,66 @@ to" / "let me know".
 : "${MIOS_PATHS_VAR_DIR:=/var/lib/mios}"
 [ -n "${MIOS_PATHS_VAR_MCP_DIR+x}" ] || MIOS_PATHS_VAR_MCP_DIR="${MIOS_VAR_DIR:-}"'/mcp'
 : "${MIOS_PATHS_WSL_FIRSTBOOT_DONE:=/var/lib/mios/.wsl-firstboot-done}"
+: "${MIOS_PGVECTOR_BACKFILL_BATCH:=50}"
+: "${MIOS_PGVECTOR_BACKUP_DIR:=/var/lib/mios/backups}"
+: "${MIOS_PGVECTOR_BACKUP_ENABLE:=true}"
+: "${MIOS_PGVECTOR_BACKUP_KEEP:=7}"
 : "${MIOS_PGVECTOR_DATA_DIR:=/var/lib/mios/pgvector}"
 : "${MIOS_PGVECTOR_DB:=mios}"
 : "${MIOS_PGVECTOR_DB_BACKEND:=postgres}"
 : "${MIOS_PGVECTOR_EMBED_MODEL:=nomic-embed-text}"
+: "${MIOS_PGVECTOR_EMB_MODEL:=nomic-embed-text}"
+: "${MIOS_PGVECTOR_EMB_VERSION:=nomic-768-v1}"
 : "${MIOS_PGVECTOR_ENABLE:=true}"
 : "${MIOS_PGVECTOR_GID:=826}"
+: "${MIOS_PGVECTOR_HNSW_ITERATIVE_SCAN:=strict_order}"
+: "${MIOS_PGVECTOR_HNSW_MAX_SCAN_TUPLES:=20000}"
+: "${MIOS_PGVECTOR_HNSW_SCAN_MEM_MULTIPLIER:=1}"
 : "${MIOS_PGVECTOR_HOST:=127.0.0.1}"
 : "${MIOS_PGVECTOR_IMAGE:=docker.io/pgvector/pgvector:latest}"
+: "${MIOS_PGVECTOR_LISTEN_LOOPBACK:=true}"
 : "${MIOS_PGVECTOR_MEMGUARD_JUDGE_MODE:=model}"
 : "${MIOS_PGVECTOR_MEMORY_GUARD_MODE:=log}"
 : "${MIOS_PGVECTOR_MEMORY_PROVIDER:=pgvector}"
 : "${MIOS_PGVECTOR_PASS:=mios}"
+: "${MIOS_PGVECTOR_POOL_ENABLE:=false}"
+: "${MIOS_PGVECTOR_POOL_MAX:=8}"
+: "${MIOS_PGVECTOR_POOL_MIN:=0}"
 : "${MIOS_PGVECTOR_PORT:=8600}"
 : "${MIOS_PGVECTOR_RESTORE_SQL:=/var/lib/mios/pgvector-restore.sql}"
+: "${MIOS_PGVECTOR_RLS_ENABLE:=false}"
 : "${MIOS_PGVECTOR_RLS_MODE:=off}"
 : "${MIOS_PGVECTOR_SCHEMA_INIT:=/usr/share/mios/postgres/schema-init.sql}"
+: "${MIOS_PGVECTOR_SCRATCH_PERSIST:=true}"
 : "${MIOS_PGVECTOR_UID:=826}"
 : "${MIOS_PGVECTOR_USER:=mios-pgvector}"
 : "${MIOS_PGVECTOR_VERSION:=latest}"
+: "${MIOS_PG_BACKFILL_BATCH:=50}"
 : "${MIOS_PG_BACKUP_DIR:=/var/lib/mios/backups}"
 : "${MIOS_PG_BACKUP_ENABLE:=true}"
 : "${MIOS_PG_BACKUP_KEEP:=7}"
 : "${MIOS_PG_DATA_DIR:=/var/lib/mios/pgvector}"
 : "${MIOS_PG_DB:=mios}"
 : "${MIOS_PG_EMBED_MODEL:=nomic-embed-text}"
+: "${MIOS_PG_EMB_MODEL:=nomic-embed-text}"
+: "${MIOS_PG_EMB_VERSION:=nomic-768-v1}"
 : "${MIOS_PG_ENABLE:=true}"
+: "${MIOS_PG_HNSW_ITERATIVE_SCAN:=strict_order}"
+: "${MIOS_PG_HNSW_MAX_SCAN_TUPLES:=20000}"
+: "${MIOS_PG_HNSW_SCAN_MEM_MULTIPLIER:=1}"
 : "${MIOS_PG_HOST:=127.0.0.1}"
+: "${MIOS_PG_LISTEN_LOOPBACK:=true}"
 : "${MIOS_PG_MEMGUARD_JUDGE_MODE:=model}"
 : "${MIOS_PG_MEMORY_GUARD_MODE:=log}"
 : "${MIOS_PG_MEMORY_PROVIDER:=pgvector}"
 : "${MIOS_PG_PASS:=mios}"
+: "${MIOS_PG_POOL_ENABLE:=false}"
+: "${MIOS_PG_POOL_MAX:=8}"
+: "${MIOS_PG_POOL_MIN:=0}"
 : "${MIOS_PG_RESTORE_SQL:=/var/lib/mios/pgvector-restore.sql}"
 : "${MIOS_PG_RLS_MODE:=off}"
 : "${MIOS_PG_SCHEMA_INIT:=/usr/share/mios/postgres/schema-init.sql}"
+: "${MIOS_PG_SCRATCH_PERSIST:=true}"
 : "${MIOS_PG_USER:=mios}"
 [ -n "${MIOS_PIPELINE_BANDS+x}" ] || MIOS_PIPELINE_BANDS='{ purpose = "git-overlay", range = [1, 1] },{ purpose = "build-context", range = [2, 2] },{ purpose = "repos/kernel", range = [5, 7] },{ purpose = "accounts", range = [10, 15] },{ purpose = "hardware-universal", range = [20, 27] },{ purpose = "services", range = [33, 54] },{ purpose = "themes", range = [56, 62] },{ purpose = "ai/desktop/boot/distribution", range = [65, 80] },{ purpose = "finalize/validators", range = [85, 99] }'
 : "${MIOS_PIPELINE_CHECK_INDEX:=usr/share/mios/reference/drift-gate-index.tsv}"

diff --git a/automation/manifest.json b/automation/manifest.json