Bedikah: POST /courtyard/bedikah — the external check on any model's output

Lo taaseh lekha §9.1: alignment that only the system can validate is not
alignment. The bedikah takes an output from any model and puts it to the
Torah-structure halt rules from outside, deterministically. Three checks:

  1. authority  — sentences claiming authority for the output itself →
                  action(claim_authority, source(<model>), target(self))
                  → halt_check_avodah_zarah/2
  2. grounding  — references, roots, Hebrew → coupling trace against L1
                  → halt_check_golden_calf/2, halt_check_self_grounding/2
  3. actions    — actions the output proposes → action terms
                  → halt_check_shfichut_damim/2, halt_check_gilui_arayot/2

Korban Processor: bedikah.py (the three readings over the offering
protocol; claims about what Torah requires stay vital for the examination
even when zerikah finds nothing to offer), server.py (pod-internal JSON
socket, KORBAN_SOCKET_PATH), __main__ now serves instead of idling.
Talmudic Engine: json_bridge accepts halt_check with a term string and
halt_check_interpretation with a coupling trace. Vav Pipeline:
KorbanProcessorSocket client, Bedikah, L1Index.lookup_root/1, bedikot
table (append-only) + BedikahRecord, router endpoint; verdict tov /
lo_tov / empty with the halt terms verbatim, meaning, limits.

Broken tablets found on the way, all fixed:
  41 socket_server.pl wrote multi-line JSON — every Elixir request to the
     Talmudic Engine since Step 14 had failed and fallen back to the stub
     (json_write_dict width(0))
  42 stale socket file survived a restart (exists_file is false for a
     socket; access_file exist)
  43 socket streams were not UTF-8 (set_stream encoding(utf8))
  44 SHORASHIM_L3=1 mix test: Repo config had no password, SCRAM raised
     KeyError in every connection, pool restart intensity took the whole
     app down ~30 ms after test_helper, silently — no L3 test had ever
     run. Credentials from env; azazel_log tests check out a sandbox
     connection; sanhedrin_halt_forwarding resolves its halt on exit.

Specs: Tamid §1.1 (endpoint contract), Architecture §3.5, Vayakhel §3.4
and new §3.9, KOHEN.md. Doorpost 3bc5dd6a… → 91d09d8d….
Tests: Elixir 519 (0 failures, L3 on and off), korban 263, azazel 125,
Prolog 7/7 suites.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

vav_pipeline/config/config.exs

@@ -16,7 +16,8 @@ config :vav_pipeline,
   shoresh_engine_binary: "shoresh-engine",
   shoresh_engine_cwd: nil,
   # Talmudic Engine (Prolog) — Unix domain socket path
-  talmudic_socket_path: "/tmp/shorashim/talmudic.sock"
+  talmudic_socket_path: "/tmp/shorashim/talmudic.sock",
+  korban_socket_path: "/tmp/shorashim/korban.sock"
 
 # L3 — Oral Tradition (PostgreSQL)
 # Architecture §3.7: Append-only. INSERT allowed. Never UPDATE. Never DELETE.

vav_pipeline/config/runtime.exs

@@ -28,6 +28,8 @@ if config_env() == :prod do
       System.get_env("MANNA_PROVISION_FILE") || "/var/lib/shorashim/manna/today.json",
     talmudic_socket_path:
       System.get_env("TALMUDIC_SOCKET_PATH") || "/tmp/shorashim/talmudic.sock",
+    korban_socket_path:
+      System.get_env("KORBAN_SOCKET_PATH") || "/tmp/shorashim/korban.sock",
     # Shoresh Engine binary — VavPipeline.ShoreshEnginePort opens an
     # Erlang Port with {:spawn_executable, binary}, which spawns a CHILD
     # PROCESS OF THIS CONTAINER. A Port cannot cross a container

vav_pipeline/config/test.exs

@@ -12,9 +12,16 @@ config :vav_pipeline,
 # L3 test database — separate from dev, uses sandbox pool
 # Repo start disabled by default — L3 tests need PostgreSQL running locally
 # Enable: SHORASHIM_L3=1 mix test --include l3
+#
+# Credentials come from the environment (tablet 44: without a password
+# the SCRAM handshake raised KeyError in every connection, the pool hit
+# its restart intensity, and the whole application went down silently
+# ~30 ms after test_helper — no L3 test ever ran).
 config :vav_pipeline, VavPipeline.Repo,
   database: "shorashim_test#{System.get_env("MIX_TEST_PARTITION")}",
-  hostname: "localhost",
+  hostname: System.get_env("SHORASHIM_L3_HOST") || "localhost",
+  username: System.get_env("SHORASHIM_L3_USER") || "postgres",
+  password: System.get_env("SHORASHIM_L3_PASSWORD") || "postgres",
   pool: Ecto.Adapters.SQL.Sandbox,
   pool_size: System.schedulers_online() * 2,
   start: System.get_env("SHORASHIM_L3") != nil