the name: Bikoret — code, contracts, images

Headers X-Bikoret-Key / -Rebuke / -Verdict / -Bedikah; the `bikoret`
object and the "— bikoret …" fringe on a gate reply; environment
variables BIKORET_*; the image user and paths (/home/bikoret,
/tmp/bikoret, /var/lib/bikoret/manna, /etc/bikoret/secrets,
/opt/bikoret/spec); the tmp-bikoret pod volume; local databases
bikoret_dev/_test. Kubernetes resource names, the shorashim_app role and
the domain are unchanged (Tamid §1.1, "the names that still carry the
old word"). Doorpost c963c4fe…. Elixir 604/0, L3 10/0, korban 295,
Prolog bedikah 44/44. Gitea repo renamed heaviness510/bikoret (old URL
redirects).

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

vav_pipeline/config/config.exs

@@ -3,7 +3,7 @@ import Config
 # L1 mount point — relative path for dev, absolute for production
 # Construction spec §4.4: l1_mount_point: "/mnt/torah"
 config :vav_pipeline,
-  # Dev: relative to project root (run from shorashim/)
+  # Dev: relative to project root (run from bikoret/)
   l1_mount_point: "l1",
   mesorah_mount_point: "mesorah",
   # Manna provision file
@@ -17,8 +17,8 @@ config :vav_pipeline,
   shoresh_engine_binary: "shoresh-engine",
   shoresh_engine_cwd: nil,
   # Talmudic Engine (Prolog) — Unix domain socket path
-  talmudic_socket_path: "/tmp/shorashim/talmudic.sock",
-  korban_socket_path: "/tmp/shorashim/korban.sock",
+  talmudic_socket_path: "/tmp/bikoret/talmudic.sock",
+  korban_socket_path: "/tmp/bikoret/korban.sock",
   # Courtyard / chatzer keys (BigdeiKodesh.Gate). nil → the gate is shut.
   # Construction §4.6: a file, never an environment variable.
   api_keys_file: nil,
@@ -38,7 +38,7 @@ config :vav_pipeline,
 config :vav_pipeline, ecto_repos: [VavPipeline.Repo]
 
 config :vav_pipeline, VavPipeline.Repo,
-  database: "shorashim_dev",
+  database: "bikoret_dev",
   hostname: "localhost",
   pool_size: 10
 

vav_pipeline/config/prod.exs

@@ -16,8 +16,8 @@ config :vav_pipeline,
   # SPEC_INTEGRITY_FAILED on every boot, and the chatzotzrot that fires
   # is a false alarm — which is worse than no witness at all.
   # Read at COMPILE time via Application.compile_env/3.
-  doorpost_repo_root: "/opt/shorashim/spec",
-  manna_provision_file: "/var/lib/shorashim/manna/today.json",
+  doorpost_repo_root: "/opt/bikoret/spec",
+  manna_provision_file: "/var/lib/bikoret/manna/today.json",
   cycle_boundary_check_interval_ms: 60_000,
   shema_context_cache_ttl_ms: 0,
   http_port: 4000

vav_pipeline/config/runtime.exs

@@ -26,13 +26,13 @@ if config_env() == :prod do
     l1_mount_point: System.get_env("L1_MOUNT_POINT") || "/mnt/torah",
     mesorah_mount_point: System.get_env("MESORAH_MOUNT_POINT") || "/mnt/mesorah",
     manna_provision_file:
-      System.get_env("MANNA_PROVISION_FILE") || "/var/lib/shorashim/manna/today.json",
+      System.get_env("MANNA_PROVISION_FILE") || "/var/lib/bikoret/manna/today.json",
     talmudic_socket_path:
-      System.get_env("TALMUDIC_SOCKET_PATH") || "/tmp/shorashim/talmudic.sock",
+      System.get_env("TALMUDIC_SOCKET_PATH") || "/tmp/bikoret/talmudic.sock",
     korban_socket_path:
-      System.get_env("KORBAN_SOCKET_PATH") || "/tmp/shorashim/korban.sock",
+      System.get_env("KORBAN_SOCKET_PATH") || "/tmp/bikoret/korban.sock",
     # The keys themselves are in the file (a mounted Secret), not in env.
-    api_keys_file: System.get_env("API_KEYS_FILE") || "/etc/shorashim/secrets/api_keys",
+    api_keys_file: System.get_env("API_KEYS_FILE") || "/etc/bikoret/secrets/api_keys",
     # The ingress controller's network: only from there is X-Real-IP the
     # caller's address (BigdeiKodesh.Mishmar.peer/1). Comma-separated CIDRs.
     trusted_proxies:

vav_pipeline/config/test.exs

@@ -20,17 +20,17 @@ config :vav_pipeline,
 
 # L3 test database — separate from dev, uses sandbox pool
 # Repo start disabled by default — L3 tests need PostgreSQL running locally
-# Enable: SHORASHIM_L3=1 mix test --include l3
+# Enable: BIKORET_L3=1 mix test --include l3
 #
 # Credentials come from the environment (tablet 44: without a password
 # the SCRAM handshake raised KeyError in every connection, the pool hit
 # its restart intensity, and the whole application went down silently
 # ~30 ms after test_helper — no L3 test ever ran).
 config :vav_pipeline, VavPipeline.Repo,
-  database: "shorashim_test#{System.get_env("MIX_TEST_PARTITION")}",
-  hostname: System.get_env("SHORASHIM_L3_HOST") || "localhost",
-  username: System.get_env("SHORASHIM_L3_USER") || "postgres",
-  password: System.get_env("SHORASHIM_L3_PASSWORD") || "postgres",
+  database: "bikoret_test#{System.get_env("MIX_TEST_PARTITION")}",
+  hostname: System.get_env("BIKORET_L3_HOST") || "localhost",
+  username: System.get_env("BIKORET_L3_USER") || "postgres",
+  password: System.get_env("BIKORET_L3_PASSWORD") || "postgres",
   pool: Ecto.Adapters.SQL.Sandbox,
   pool_size: System.schedulers_online() * 2,
-  start: System.get_env("SHORASHIM_L3") != nil
+  start: System.get_env("BIKORET_L3") != nil