Cohesion: Python inventory + integration plan + Phase A verdict indexing

Three artifacts in one PR:

1. docs/PYTHON_INVENTORY.md — every .py file in the repo classified:
   Production (sidecar routers + 3 systemd services), Documented
   (kb_measure, kb_staffer_report), Manual (one-off tools), Dead
   (sidecar/sidecar/lab_ui.py + pipeline_lab.py are genuinely
   not imported anywhere).

2. docs/COHESION_INTEGRATION_PLAN.md — the "smarter DB" loop J
   called out as missing. Six phases A-F. Phase A ships here; B-F
   are named + sequenced for follow-up PRs. Each phase adds ONE
   wire of the loop; no single PR does them all.

3. Phase A wire (auditor verdicts → observer + KB):
   - auditor/audit.ts: after assembleVerdict, fire-and-forget POST
     to :3800/event with source="auditor" AND append to
     data/_kb/outcomes.jsonl with kind="audit". Errors log + drop
     — the verdict is still on disk at _auditor/verdicts/.
   - mcp-server/observer.ts: extend source union to include
     "auditor" | "bot" (was "mcp" | "scenario" only, which silently
     coerced my first auditor POST to source="scenario"). Accept
     body.ok OR body.success. Accept body.audit_duration_ms as a
     fallback for duration_ms. Uses body.one_liner as
     output_summary when set.

Live-verified after observer restart:
   re-audit PR #6 → verdict=request_changes, 4 findings (1 warn)
     observer: by_source={'auditor': 1}  (previously coerced to 'scenario')
     _kb/outcomes.jsonl tail: kind=audit sig=pr6-7fe47bab
       pr=6 overall=request_changes

The shape of the loop is now visible to downstream consumers. Phase
B (auditor's kb_query check reads these audit rows for history)
lands in a follow-up PR. Phase C-F similar.

NOT in this PR:
- Actually deleting lab_ui.py + pipeline_lab.py (operator decision,
  called out in the inventory doc)
- Cleaning up the 5 overlapping Python scripts (same)
- Phases B-F of the cohesion plan (separate PRs per wire)
- Integration test that asserts "smarter DB" across runs (Phase F)

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

mcp-server/observer.ts

@@ -37,7 +37,11 @@ interface ObservedOp {
   // Phase 24 — optional provenance so error analyzer and playbook
   // builder can differentiate MCP-layer ops from scenario-sourced
   // events. Scenarios set source="scenario" + staffer_id + sig_hash.
-  source?: "mcp" | "scenario";
+  // Phase A (cohesion plan 2026-04-22) — auditor verdicts also post
+  // to :3800/event with source="auditor"; stats endpoint counts them
+  // separately so KB readers can see audit cadence alongside
+  // scenario cadence.
+  source?: "mcp" | "scenario" | "auditor" | "bot";
   staffer_id?: string;
   sig_hash?: string;
   event_kind?: string;
@@ -253,15 +257,30 @@ function startHttpListener() {
       }
       if (req.method === "POST" && url.pathname === "/event") {
         return req.json().then((body: any) => {
+          // Accept caller-provided source when present and valid.
+          // Unrecognized sources fall back to "scenario" for
+          // backward-compat with older callers.
+          const allowedSource = ["mcp", "scenario", "auditor", "bot"] as const;
+          const bodySrc = typeof body.source === "string" ? body.source : "";
+          const source = (allowedSource as readonly string[]).includes(bodySrc)
+            ? (bodySrc as typeof allowedSource[number])
+            : "scenario";
+          // Phase A: auditor+bot POST with ok=true|false (not success)
+          // for symmetry with the kind_of of their domain. Accept either.
+          const success = typeof body.success === "boolean" ? body.success
+                        : typeof body.ok === "boolean" ? body.ok
+                        : false;
           const op: ObservedOp = {
             timestamp: body.timestamp ?? new Date().toISOString(),
-            endpoint: body.endpoint ?? "scenario:fill",
+            endpoint: body.endpoint ?? (source === "auditor" ? "auditor:verdict"
+                                       : source === "bot" ? "bot:cycle"
+                                       : "scenario:fill"),
             input_summary: body.input_summary ?? `${body.event_kind ?? "?"} ${body.role ?? "?"}×${body.count ?? "?"} in ${body.city ?? "?"}, ${body.state ?? "?"}`,
-            success: !!body.success,
-            duration_ms: Number(body.duration_ms ?? 0),
-            output_summary: body.output_summary ?? (body.success ? "filled" : (body.error ?? "failed")),
+            success,
+            duration_ms: Number(body.duration_ms ?? body.audit_duration_ms ?? 0),
+            output_summary: body.output_summary ?? body.one_liner ?? (success ? "ok" : (body.error ?? "failed")),
             error: body.error,
-            source: "scenario",
+            source,
             staffer_id: body.staffer_id,
             sig_hash: body.sig_hash,
             event_kind: body.event_kind,