Docs: scope claims that drifted from the code

CAPABILITIES.md

@@ -2,7 +2,7 @@
 
 OpenAdapt turns work that people or computer-use agents do in applications
 with no usable API (EMRs, payer portals, desktop and remote-desktop apps) into
-programs that make the same entry every time with no model calls, check that
+programs that make the same entry every time with no calls to a hosted AI model, check that
 the entry landed in the right record, and stop instead of guessing.
 
 This page indexes what OpenAdapt implements, with the status, the evidence and
@@ -69,7 +69,8 @@ monorepo and installable from source.
    Person-signed grants let named agents answer. Released.
 8. **Repairs itself, with a person approving.** Governed repair (propose,
    review, campaign, canary, rollback), agent-demonstrated fixes for a halted
-   run, and fleet drift patches shared with no patient data are released.
+   run, and fleet drift patches shared with no patient data (moved as files
+   or through a local reference hub) are released.
    Self-repair, where an agent proposes a fix and Flow probes it up to the save
    without saving, is on main, and so are fixes of up to three new steps.
 9. **Is a safety layer underneath any agent.** An agent's MCP calls, a task
@@ -80,8 +81,8 @@ monorepo and installable from source.
    the agent ([#1357](https://github.com/OpenAdaptAI/OpenAdapt/pull/1357)), `verify-run`
    to judge any executor's write from the system of record, and Agent Skills and
    a CLI for coding agents. Released except where a PR is named.
-10. **Runs locally and keeps data private.** Healthy runs make no model calls
-    and send nothing out. Personal and health data are redacted from text,
+10. **Runs locally and keeps data private.** Healthy runs make no calls to a
+    hosted AI model and send nothing out. Personal and health data are redacted from text,
     screenshots and structure (scrub-by-default for anything that leaves the
     machine is on main); a strict no-outbound mode, an unattended on-prem
     service, and signed, timestamped receipts are released.
@@ -106,7 +107,7 @@ monorepo and installable from source.
 | Has a written threat model for prompt injection against the agent that teaches or repairs a program, with tests. | [THREAT_MODEL.md](packages/flow/docs/THREAT_MODEL.md) |
 | Fills inputs from a referral PDF, fax image or email, and holds back anything unclear for a person. | `intake`, [INTAKE.md](packages/flow/docs/INTAKE.md) |
 | Ships as one monorepo with separately installable packages (flow, agent, types, capture, privacy, desktop and tray), each released from the monorepo. | [README](README.md) |
-| Makes no model calls on healthy runs. Model training (openadapt-ml) is separate research. | [README](README.md) |
+| Makes no calls to a hosted AI model on healthy runs. Model training (openadapt-ml) is separate research. | [README](README.md) |
 
 ## The full map
 
@@ -263,7 +264,7 @@ improvising or retrying when something is off.
 | Repair a relabeled save button: prove from the recorded identity hash that only the label changed (same control id, kind and form), re-qualify the fix on the new release, and have a person admit the certified copy afresh, since a save button's identity is part of the record check | On main | Real app (local OpenEMR, synthetic data): after the save button was relabeled, the stopped item re-ran and saved once after 8.3 operator minutes and 763 s of re-qualification; 896 s from stop to done ([#1513](https://github.com/OpenAdaptAI/OpenAdapt/pull/1513)) | `openadapt_flow/repair/relabel.py`, [SELF_REPAIR.md](packages/flow/docs/SELF_REPAIR.md#a-relabeled-control-proof-that-only-the-label-changed) |
 | A duplicate check that reads the app's match list (`no_duplicate_candidate`): stop only on a listed record with the item's last name or date of birth, fail closed on an unreadable or unloaded list | On main | Real app (local OpenEMR, synthetic data): false stops per 100 items 70.4 before, 16.4 after; 0 silent wrongs in 30 saves ([#1513](https://github.com/OpenAdaptAI/OpenAdapt/pull/1513)) | [DUPLICATE_CHECK.md](packages/flow/docs/DUPLICATE_CHECK.md) |
 | A switched-off `problems_only` gate asks a person before the save instead of stopping the item | On main | Synthetic; real app in [#1513](https://github.com/OpenAdaptAI/OpenAdapt/pull/1513) | [APPROVAL_MODES.md](packages/flow/docs/APPROVAL_MODES.md#when-the-mode-turns-itself-off) |
-| Fleet drift patches: a verified fix with no patient data, shared across sites under policy | Released, local reference hub | Simulator | `openadapt-flow fleet`, [FLEET_DRIFT_PATCHES.md](packages/flow/docs/FLEET_DRIFT_PATCHES.md) |
+| Fleet drift patches: a verified fix with no patient data, shared across sites under policy, moved as files or through a local reference hub | Released, local reference hub | Simulator | `openadapt-flow fleet`, [FLEET_DRIFT_PATCHES.md](packages/flow/docs/FLEET_DRIFT_PATCHES.md) |
 
 ## Computer-use agents
 

README.md

@@ -271,7 +271,7 @@ the right record is on screen, makes the entry, and reads the record back.
 
 ## What it can do
 
-- **Learns from any successful run**, a person's demonstration or a computer-use agent's verified run, and compiles it into a program that runs with no model calls.
+- **Learns from any successful run**, a person's demonstration or a computer-use agent's verified run, and compiles it into a program that runs with no calls to a hosted AI model.
 - **Uses the most reliable layer the app allows**: page structure (DOM, UI Automation, Accessibility), direct API calls where one is bound, and pixels only for remote desktops.
 - **Builds branching programs** from several demonstrations, repeated halts and background runs, and routes each item to the right verified variant.
 - **Works across surfaces**: web, Windows, macOS, Linux and RDP backends, chained in one workflow.
@@ -280,7 +280,7 @@ the right record is on screen, makes the entry, and reads the record back.
 - **Binds each approval to exactly what will be saved**, with one-tap answers on a paired phone.
 - **Repairs itself when the app changes**, probing a fix up to the save and asking a person to approve it.
 - **Works as a safety layer under any agent**: MCP tools, a guarded save, Agent Skills and a CLI.
-- **Runs locally**: no model calls on healthy runs, patient data redacted, signed receipts.
+- **Runs locally**: no calls to a hosted AI model on healthy runs, patient data redacted, signed receipts.
 
 [CAPABILITIES.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/CAPABILITIES.md) has the evidence and code for each.
 

llms-full.txt

@@ -281,7 +281,7 @@ the right record is on screen, makes the entry, and reads the record back.
 
 ## What it can do
 
-- **Learns from any successful run**, a person's demonstration or a computer-use agent's verified run, and compiles it into a program that runs with no model calls.
+- **Learns from any successful run**, a person's demonstration or a computer-use agent's verified run, and compiles it into a program that runs with no calls to a hosted AI model.
 - **Uses the most reliable layer the app allows**: page structure (DOM, UI Automation, Accessibility), direct API calls where one is bound, and pixels only for remote desktops.
 - **Builds branching programs** from several demonstrations, repeated halts and background runs, and routes each item to the right verified variant.
 - **Works across surfaces**: web, Windows, macOS, Linux and RDP backends, chained in one workflow.
@@ -290,7 +290,7 @@ the right record is on screen, makes the entry, and reads the record back.
 - **Binds each approval to exactly what will be saved**, with one-tap answers on a paired phone.
 - **Repairs itself when the app changes**, probing a fix up to the save and asking a person to approve it.
 - **Works as a safety layer under any agent**: MCP tools, a guarded save, Agent Skills and a CLI.
-- **Runs locally**: no model calls on healthy runs, patient data redacted, signed receipts.
+- **Runs locally**: no calls to a hosted AI model on healthy runs, patient data redacted, signed receipts.
 
 [CAPABILITIES.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/CAPABILITIES.md) has the evidence and code for each.
 
@@ -399,7 +399,7 @@ Maintained by [OpenAdaptAI](https://github.com/OpenAdaptAI) under the
 
 OpenAdapt turns work that people or computer-use agents do in applications
 with no usable API (EMRs, payer portals, desktop and remote-desktop apps) into
-programs that make the same entry every time with no model calls, check that
+programs that make the same entry every time with no calls to a hosted AI model, check that
 the entry landed in the right record, and stop instead of guessing.
 
 This page indexes what OpenAdapt implements, with the status, the evidence and
@@ -466,7 +466,8 @@ monorepo and installable from source.
    Person-signed grants let named agents answer. Released.
 8. **Repairs itself, with a person approving.** Governed repair (propose,
    review, campaign, canary, rollback), agent-demonstrated fixes for a halted
-   run, and fleet drift patches shared with no patient data are released.
+   run, and fleet drift patches shared with no patient data (moved as files
+   or through a local reference hub) are released.
    Self-repair, where an agent proposes a fix and Flow probes it up to the save
    without saving, is on main, and so are fixes of up to three new steps.
 9. **Is a safety layer underneath any agent.** An agent's MCP calls, a task
@@ -477,8 +478,8 @@ monorepo and installable from source.
    the agent ([#1357](https://github.com/OpenAdaptAI/OpenAdapt/pull/1357)), `verify-run`
    to judge any executor's write from the system of record, and Agent Skills and
    a CLI for coding agents. Released except where a PR is named.
-10. **Runs locally and keeps data private.** Healthy runs make no model calls
-    and send nothing out. Personal and health data are redacted from text,
+10. **Runs locally and keeps data private.** Healthy runs make no calls to a
+    hosted AI model and send nothing out. Personal and health data are redacted from text,
     screenshots and structure (scrub-by-default for anything that leaves the
     machine is on main); a strict no-outbound mode, an unattended on-prem
     service, and signed, timestamped receipts are released.
@@ -503,7 +504,7 @@ monorepo and installable from source.
 | Has a written threat model for prompt injection against the agent that teaches or repairs a program, with tests. | [THREAT_MODEL.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/packages/flow/docs/THREAT_MODEL.md) |
 | Fills inputs from a referral PDF, fax image or email, and holds back anything unclear for a person. | `intake`, [INTAKE.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/packages/flow/docs/INTAKE.md) |
 | Ships as one monorepo with separately installable packages (flow, agent, types, capture, privacy, desktop and tray), each released from the monorepo. | [README](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/README.md) |
-| Makes no model calls on healthy runs. Model training (openadapt-ml) is separate research. | [README](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/README.md) |
+| Makes no calls to a hosted AI model on healthy runs. Model training (openadapt-ml) is separate research. | [README](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/README.md) |
 
 ## The full map
 
@@ -660,7 +661,7 @@ improvising or retrying when something is off.
 | Repair a relabeled save button: prove from the recorded identity hash that only the label changed (same control id, kind and form), re-qualify the fix on the new release, and have a person admit the certified copy afresh, since a save button's identity is part of the record check | On main | Real app (local OpenEMR, synthetic data): after the save button was relabeled, the stopped item re-ran and saved once after 8.3 operator minutes and 763 s of re-qualification; 896 s from stop to done ([#1513](https://github.com/OpenAdaptAI/OpenAdapt/pull/1513)) | `openadapt_flow/repair/relabel.py`, [SELF_REPAIR.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/packages/flow/docs/SELF_REPAIR.md#a-relabeled-control-proof-that-only-the-label-changed) |
 | A duplicate check that reads the app's match list (`no_duplicate_candidate`): stop only on a listed record with the item's last name or date of birth, fail closed on an unreadable or unloaded list | On main | Real app (local OpenEMR, synthetic data): false stops per 100 items 70.4 before, 16.4 after; 0 silent wrongs in 30 saves ([#1513](https://github.com/OpenAdaptAI/OpenAdapt/pull/1513)) | [DUPLICATE_CHECK.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/packages/flow/docs/DUPLICATE_CHECK.md) |
 | A switched-off `problems_only` gate asks a person before the save instead of stopping the item | On main | Synthetic; real app in [#1513](https://github.com/OpenAdaptAI/OpenAdapt/pull/1513) | [APPROVAL_MODES.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/packages/flow/docs/APPROVAL_MODES.md#when-the-mode-turns-itself-off) |
-| Fleet drift patches: a verified fix with no patient data, shared across sites under policy | Released, local reference hub | Simulator | `openadapt-flow fleet`, [FLEET_DRIFT_PATCHES.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/packages/flow/docs/FLEET_DRIFT_PATCHES.md) |
+| Fleet drift patches: a verified fix with no patient data, shared across sites under policy, moved as files or through a local reference hub | Released, local reference hub | Simulator | `openadapt-flow fleet`, [FLEET_DRIFT_PATCHES.md](https://github.com/OpenAdaptAI/OpenAdapt/blob/main/packages/flow/docs/FLEET_DRIFT_PATCHES.md) |
 
 ## Computer-use agents
 

llms.txt

@@ -51,16 +51,17 @@ monorepo and installable from source.
    Person-signed grants let named agents answer. Released.
 8. **Repairs itself, with a person approving.** Governed repair (propose,
    review, campaign, canary, rollback), agent-demonstrated fixes for a halted
-   run, and fleet drift patches shared with no patient data are released.
+   run, and fleet drift patches shared with no patient data (moved as files
+   or through a local reference hub) are released.
    Self-repair, where an agent proposes a fix and Flow probes it up to the save
    without saving, is on main.
 9. **Is a safety layer underneath any agent.** An agent's MCP calls, a guarded
    save around any agent's write
    ([#1258](https://github.com/OpenAdaptAI/OpenAdapt/pull/1258)), `verify-run`
    to judge any executor's write from the system of record, and Agent Skills and
    a CLI for coding agents. Released except where a PR is named.
-10. **Runs locally and keeps data private.** Healthy runs make no model calls
-    and send nothing out. Personal and health data are redacted from text,
+10. **Runs locally and keeps data private.** Healthy runs make no calls to a
+    hosted AI model and send nothing out. Personal and health data are redacted from text,
     screenshots and structure (scrub-by-default for anything that leaves the
     machine is on main); a strict no-outbound mode, an unattended on-prem
     service, and signed, timestamped receipts are released.

packages/agent/README.md

@@ -9,7 +9,7 @@ Your AI agent decides what to enter. OpenAdapt enters it in the app and checks t
 
 Use it if your agent reads referrals, intake forms, or authorizations and works out what belongs in the record, but a person still types the result into an app with no usable API. Examples are an electronic medical record (EMR) and a payer portal. This package is the tool your agent calls to do that typing.
 
-- A person or your agent shows OpenAdapt the task in the real app. OpenAdapt replays those steps, and by default a run makes no AI model calls.
+- A person or your agent shows OpenAdapt the task in the real app. OpenAdapt replays those steps, and by default a run makes no calls to a hosted AI model.
 - Before it types, OpenAdapt checks that the right record is open. After it saves, it reads the record back.
 - Your agent gets one of four outcomes: done and checked, stopped before saving, check the record, or didn't run. When OpenAdapt can't confirm a save, it says so, and a person checks the record.
 - It runs on your customer's computer, one that can already open the app. Your agent, or a small program acting for it, has to run on that computer too, since it starts OpenAdapt and talks to it directly. If your agent runs in your own cloud, ask us about a hosted route.

packages/flow/CHANGELOG.md

@@ -115,7 +115,7 @@ A person's approval counts only when a registered approver key signed it, and th
 - Under `problems_only`, problems with an item's own input leave the switch on and send that item to a person; program and environment problems turn it off, and a person re-arms it with one signed tap ([#1517](https://github.com/OpenAdaptAI/OpenAdapt/pull/1517)).
 - Look-alike rows are counted on Windows, macOS, Linux and pixel-only surfaces, so a step that picks a row halts when it cannot tell the target from its twin ([#1504](https://github.com/OpenAdaptAI/OpenAdapt/pull/1504), [#1518](https://github.com/OpenAdaptAI/OpenAdapt/pull/1518), [#1557](https://github.com/OpenAdaptAI/OpenAdapt/pull/1557)).
 - `openadapt-agent serve --teach-browser` lets a coding agent turn a read-only browser task into a named tool it calls again with new values; `openadapt setup` registers it with Claude Code, Cursor, Codex and Gemini CLI ([#1502](https://github.com/OpenAdaptAI/OpenAdapt/pull/1502)).
-- `induce --held-out` scores each held-out item by running it and checking the record independently ([#1527](https://github.com/OpenAdaptAI/OpenAdapt/pull/1527)).
+- `openadapt_flow.validation.behavioral_generalization` scores each held-out item by running it and checking the record independently. `induce --held-out` prints structural trace coverage ([#1527](https://github.com/OpenAdaptAI/OpenAdapt/pull/1527)).
 
 ### Fixes
 

packages/flow/README.md

@@ -7,7 +7,7 @@
 
 A person or an agent shows openadapt-flow a task in a web or desktop app. It
 compiles the task into a program that runs on your own machine and repeats the
-same steps with new details. A healthy run makes no AI model calls. It's built
+same steps with new details. A healthy run makes no calls to a hosted AI model. It's built
 for data entry that repeats every week and has to be right, such as claims,
 referrals, eligibility checks, and invoice posting.
 
@@ -375,7 +375,7 @@ claude --mcp-config mcp.json        # then ask: Add an 18.75 expense for parking
 ## What runs where
 
 Recording, compiling, replaying, and production runs all happen on your
-machine. A healthy run makes no model calls, and model-assisted target finding
+machine. A healthy run makes no calls to a hosted AI model, and model-assisted target finding
 is off unless you turn it on in the CLI or deployment config. That isn't the
 same as no network: the app you drive and the record check still talk to
 their own services.
@@ -449,7 +449,8 @@ patients. The systems each result ran on, and the boundary of every claim:
 - [docs/BENCHMARKS.md](docs/BENCHMARKS.md): every benchmark, with method and
   caveats.
 - [Fleet drift patches](docs/FLEET_DRIFT_PATCHES.md): opted-in installs that
-  automate the same application share signed repairs for the same UI change.
+  automate the same application share signed repairs for the same UI change,
+  moved as files or through a local reference hub.
   Each tenant tests a patch on its own cases before it is used.
 - [docs/REWARD_WORKER.md](docs/REWARD_WORKER.md): `serve-reward` scores a
   model's training episode by reading the record after it ends.