the second scroll: the mesorah snapshot, pinned and read (bishe'arecha step 6)

Devarim 17:18 — the king writes his copy from before the priests, not from
memory. scripts/build_mesorah.py takes one open-licence version per work
per language from the Sefaria export (bucket sefaria-export, catalogue of
2026-10-02; Public Domain / CC0 / CC-BY / CC-BY-SA only, checked in every
file; no CC-BY-NC — the Bavli is Wikisource's) and lays it down beside
L1: mesorah/works/<slug>/{he,en}.json, index.json, integrity.sha256,
build_report.json. 128 works (Rashi, Onkelos, Ramban, Ibn Ezra, Sforno
on the Torah; all of Mishnah; 37 Bavli tractates; Bereshit and Shemot
Rabbah, Sifrei, Tanchuma), 256 files, 44.9 MiB, tree hash 7d5b3a6c…
computed as L1's (sorted relative path, then bytes; the two post-hash
files excluded). What is out, and why (licence), is in Terumah §E5.

Read, never fetched: korban_processor/mesorah.py finds citations as
written (Rashi on Devarim 6:5, Berakhot 2a, Mishnah Berakhot 1:1,
Bereshit Rabbah 1:1, Sifrei Devarim 32, Tanchuma Bereshit 1 …), resolves
each against the snapshot (complex works through their unnamed node,
Tanchuma by parashah), lists them as examination.mesorah_references, and
makes every passage found a given source for that examination — so a
claim about Rashi anchors in Rashi or does not. The Vav Pipeline couples
coupled(reference(R), mesorah(Work, [Address])) or not_in_mesorah; the
engine accepts mesorah/2 as a terminal and not_in_mesorah is Form 4.
VavPipeline.Mesorah pins the hash, re-reads the tree at startup and every
ten minutes, and /kodesh/health carries mesorah_hash. Mounted read-only at
/mnt/mesorah in the vav-pipeline and korban-processor images. L3
bedikot.mesorah (migration 20261013000002).

Also: the 1-in-12 Day6 serving failure of 2026-10-04 reproduced with seed
446116 — HaltMonitorTest left the system halted; it now resolves on exit
and the Day6 setup is defensive. Construction §3.11, Terumah §E5, Tamid
§1.1, bishearecha §IV, KOHEN, AGENTS. Doorpost 0638d4eb…. Elixir 604/0
(seeds 835592 and 446116), korban 294/1 skipped, Prolog bedikah 44/44,
L3 10/0.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

specs/shorashim_tamid.md

@@ -257,7 +257,8 @@ Response (200):
     "vital_content": "...", "propositions": [...], "references": [...],
     "roots": [...], "discarded": [...], "sources": [...], "claims": [...],
     "self_validation": [...], "self_promotion": [...], "excluded_adversarial": [...],
-    "frames": [{"form","sentence","matched"}, ...]
+    "frames": [{"form","sentence","matched"}, ...],
+    "mesorah_references": [{"as_written","ref","work","address","found","languages"}, ...]
   },
   "coupling_trace": ["coupled(claim(1), source(report_q3))",
                      "coupled(claim(2), not_in_sources)",
@@ -294,7 +295,8 @@ SHA-256 and length — never the output itself — the sources by id,
 SHA-256 and length — never their text — vital content, propositions,
 references, claims with their anchors, authority claims, actions, the
 sentences read for checks 4–6, the forms found for check 7, trace, violations, verdict,
-and at the gate `rebukes` — the ref of the examination this one answers.
+and at the gate `rebukes` — the ref of the examination this one answers;
+`mesorah` — the citations made, each found or not.
 ```
 
 **Every rule cites its verse** (`bishearecha.md` §X; Devarim 4:2).
@@ -363,6 +365,20 @@ Errors: as /courtyard/bedikah, with "side 'a': …" / "side 'b': …" in the
 message; a missing side is 422.
 ```
 
+**The second scroll** (`bishearecha.md` §IV; Construction §3.11). A
+citation the output makes to the mesorah — Rashi, Onkelos, Ramban, Ibn
+Ezra, Sforno on the Torah; the Mishnah; the Bavli; Bereshit and Shemot
+Rabbah, Sifrei, Tanchuma — is looked up in the snapshot baked into the
+images, never fetched. `examination.mesorah_references` lists each with
+`found`; the trace couples it to `mesorah(<work>, [<address>])` or
+`not_in_mesorah` (Form 4: a source that does not exist); the passage the
+snapshot has is a given source for that examination, so what the output
+says about it anchors in it or does not (the grounding check, as for any
+source). The snapshot is pinned (`VavPipeline.Mesorah`), hashed at
+startup and every ten minutes, and readiness carries `mesorah_hash`.
+Sefaria's export is the source; only open-licence versions are taken
+(Terumah §E5).
+
 **Hakhel — the scroll read again** (`bishearecha.md` §VIII; Devarim
 31:9–13, 26). The specimen corpus is read on a cycle — every seventh day,
 from the builder's machine where it lives — against the readings at the