the name: Bikoret — code, contracts, images

Headers X-Bikoret-Key / -Rebuke / -Verdict / -Bedikah; the `bikoret`
object and the "— bikoret …" fringe on a gate reply; environment
variables BIKORET_*; the image user and paths (/home/bikoret,
/tmp/bikoret, /var/lib/bikoret/manna, /etc/bikoret/secrets,
/opt/bikoret/spec); the tmp-bikoret pod volume; local databases
bikoret_dev/_test. Kubernetes resource names, the shorashim_app role and
the domain are unchanged (Tamid §1.1, "the names that still carry the
old word"). Doorpost c963c4fe…. Elixir 604/0, L3 10/0, korban 295,
Prolog bedikah 44/44. Gitea repo renamed heaviness510/bikoret (old URL
redirects).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

azazel_processor/src/azazel_processor/azazel.py

@@ -76,9 +76,9 @@ from azazel_processor.vidui import Vidui
 
 
 # Default in-flight directory. BUILD_AZAZEL.md §5 specifies
-# /tmp/shorashim/azazel/in_flight/ for property 5 (sukkot persistence).
+# /tmp/bikoret/azazel/in_flight/ for property 5 (sukkot persistence).
 # Configurable per call so tests don't share state.
-DEFAULT_IN_FLIGHT_DIR = pathlib.Path("/tmp/shorashim/azazel/in_flight")
+DEFAULT_IN_FLIGHT_DIR = pathlib.Path("/tmp/bikoret/azazel/in_flight")
 
 
 @dataclass(frozen=True)
@@ -190,7 +190,7 @@ def dispatch_for_disposal(
         authorized_by:   The kohen_gadol identifier authorizing the routing
                          decision (property 7).
         in_flight_dir:   Where to persist checkpoint state. Default
-                         /tmp/shorashim/azazel/in_flight/.
+                         /tmp/bikoret/azazel/in_flight/.
         acknowledger:    Callable invoked at ACKNOWLEDGED checkpoint
                          (commit 9 wires chatzotzrot here).
         recorder:        Callable invoked at RECORDED checkpoint (commit 7

azazel_processor/src/azazel_processor/goral.py

@@ -49,7 +49,7 @@ PARITY WITH the MISHKAN GORAL:
 
 The Mishkan goral has TWO outcomes — la'Shem (processing) or
 la'Azazel (disposal). Both routes are legitimate; the goral chooses
-which goat goes which way. In Shorashim, the goral applies to
+which goat goes which way. In Bikoret, the goral applies to
 borderline cases (Q1 in BUILD_AZAZEL.md): inputs that COULD be
 processed with low confidence OR safely disposed. The threshold
 above which inputs are routed deterministically (no goral) is a
@@ -71,7 +71,7 @@ from datetime import date, datetime, timezone
 from enum import Enum
 
 
-# The L1 integrity hash — Shorashim's cryptographic anchor. The
+# The L1 integrity hash — Bikoret's cryptographic anchor. The
 # value is mirrored from vav_pipeline/lib/vav_pipeline/l1_reader.ex
 # (@l1_expected_hash). Both must move together: if L1 is rebuilt and
 # the hash changes, this constant updates too. The shared value is

azazel_processor/src/azazel_processor/protocol.py

@@ -12,7 +12,7 @@ different routing authority. Inside the envelope it is the legitimate
 Azazel-path; outside, it is avodah zarah — the failure mode
 specs/eish_zarah_reading.md catalogs.
 
-In Shorashim software:
+In Bikoret software:
 
   - is_yom_kippur_protocol_active() — predicate: are we in the
     annual Yom Kippur window the operator has configured? The

azazel_processor/src/azazel_processor/shaliach.py

@@ -17,7 +17,7 @@ sacred processing. Contact with the disposal channel produces state
 that must be reset (tevilah) before the operator rejoins the
 trusted boundary.
 
-THE THREE ROLES IN SHORASHIM:
+THE THREE ROLES IN BIKORET:
 
   Owner       — submits the offering. Performed by the upstream
                 caller (e.g. external_offering.consult_external_model).