verify

# Verifying wenlan — drive the real surfaces Launch: use the `run-wenlan` skill — build, isolated boot, stop, the port allocation (manual instance :17878, `smoke-cli.sh` :17881, `smoke-mcp.sh` :17882 — they are not interchangeable), and the daemon lifecycle checklist all live there. Never verify against the shared prod daemon on :7878. Drive by surface — these scripts ARE the drive recipes (read them for the flow, run them for a full round-trip): - Daemon HTTP: curl the changed route on the isolated port; recipe in `.claude/skills/prove/references/daemon.md`. - CLI: `bash scripts/smoke-cli.sh` (capture → memories → search, black-box). - MCP: `bash scripts/smoke-mcp.sh` (stdio JSON-RPC initialize → capture → recall). Gotchas (drive-time): - Ingest is async (batcher + embedding): poll search up to ~60s before calling a miss a failure. - Record evidence: prefix any check with `bash scripts/attest.sh`. It appends one JSON line to `.claude/attest.jsonl` — the ledger the weekly sweep audits — and passes the command's exit status through unchanged. If it cannot write the ledger it exits non-zero even when the command passed: an unrecorded run reads to the sweep as "the smoke never ran", so it must never be reported as a pass. (`~/.claude/bin/attest.sh` is a personal macOS helper; it is optional, and it does not exist on Windows or in a fresh checkout. Use the repo script.) - `WENLAN_NO_AUTOSTART=1` on every command that talks to a daemon. Without it a connect ...