# S1 LEDGER WRITE MANIFEST (Public RAM contribution from Multi-Corpus Retrieval Router)

**Phase:** 6 -- skill-creator-max
**Contributor:** S1 Multi-Corpus Retrieval Router
**Scope:** S1-side writer manifest against the (future) canonical `ram/references/shared-ram/SEARCH_LEDGER_WRITE_CONTRACT.md` authored by S3's build.
**Status:** WRITER-SCOPED fragment. This file does NOT replace the canonical multi-writer contract. It documents S1's specific writer obligations so downstream builds and the coordinator can cross-reference without re-reading S1's private references.

---

## 1. Role

S1 writes to the RAM Search Ledger. Ledger owner (S4 Epistemic Output Layer) holds render authority and schema authority. S1 neither renders nor controls schema.

## 2. Record Kinds S1 Is Authorized To Emit

- `every-query`
- `every-accepted`
- `every-rejected` with rejection_reason in the S1-authorized set: `{translation-fidelity-fail, care-gate-refused, dispatch-failure}`
- `every-skipped` with skip_reason in the S1-authorized set: `{architectural-limit, operator-override, care-gate-halt, runtime-budget, dispatch-failure}`

## 3. Record Kinds S1 Is NOT Authorized To Emit

- `every-rejected` with rejection_reason `retracted` / `fabricated-citation` / `ai-contaminated` / `pub-bias` -- S2 Source Integrity Screen authority.
- `every-rejected` with rejection_reason `fitness-below-threshold` / `disqualifier-hit` -- S7 Fitness Adjudicator authority.
- Any record claiming fitness or integrity verdict fields populated.

## 4. S1 Extensions Applied

Every S1 `every-query` carries:

- `s1_extensions.claim_type`
- `s1_extensions.monoculture_triggers` (list, subset of `[T1, T2, T3, T4]`)
- `s1_extensions.monoculture_decision_point` (`M1` | `M2` | `M3`)
- `s1_extensions.routing_decision_rationale`
- `s1_extensions.care_gate_status` and `care_gate_rationale` when target includes Indigenous-source content
- `s1_extensions.translation_provenance`

Every S1 `every-accepted` carries `s1_tags`:

- `corpus_surface`, `query_used`, `language_detected`, `openalex_language_mismatch`, `detection_conflict`, `fidelity_tag`, `human_review_flag`, `care_gate_status`, `monoculture_trigger_record`.

## 5. Reconciliation Invariant

Before handoff to S2:

```
count(every-query[writer==S1])
  - count(every-accepted[writer==S1])
  - count(every-rejected[writer==S1])
  == count(every-skipped[writer==S1, skip_reason==dispatch-failure])
```

Mismatch is a silent-filter defect. S1 halts handoff until reconciled.

## 6. Architectural-Limit Disclosure Contract

When S1 emits `every-skipped` with `skip_reason == architectural-limit`, the record MUST include `architectural_limit_disclosure` text. S4's render spec must surface this text visibly to the user. Silent substitution of proxy sources without the disclosure is a Tier-1 failure.

## 7. Cross-Reference

- Canonical multi-writer contract (future): `ram/references/shared-ram/SEARCH_LEDGER_WRITE_CONTRACT.md` (owner: S3 build per LIBRARY_ARCHITECTURE row 3.5).
- Ledger schema authority: S4's `RAM_SEARCH_LEDGER_RENDER_SPEC.md` (private to S4).
- S1 per-record template (private): `ram/skills/multi-corpus-retrieval-router/templates/RETRIEVAL_QUERY_RECORD.md`.

**End of manifest.**
