Replace tool-critic soft-publish with thin DeepSeek translation gates.

Whole-file translate is now raw Markdown in/out; Python fail-closed gates
block source-locale echo, split-backtick mangling, and missing includes.
Tool-using critic is removed from the production review path.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: sintjuri

REQUIREMENTS_RU.md

@@ -2,15 +2,15 @@
 
 Только подтверждённые решения. При конфликте побеждает `REQUIREMENTS_RU.md`.
 
-- `architecture.md` — режимы и инварианты
-- `translation-algorithm.md` — scope, перевод, TOC, critic/arbiter
+- `architecture.md` — режимы и инварианты (thin pipeline)
+- `translation-algorithm.md` — scope, thin translate, gates, arbiter
 - `model-api.md` — DeepSeek contracts
 - `testing.md` — TDD и witnesses
 - `delivery.md` — commits в `main`
 - `current-status.md` — что согласовано и где код
-- `debt-map.md` — срезы выравнивания кода под контракт
+- `debt-map.md` — исторические срезы выравнивания
 - `blobdepot-golden-plan.md` — P2 BlobDepot offline golden (done)
-- `tool-using-critic-plan.md` — rollout tool-using critic (P0 PASS; P1 offline green; P2 live next)
-- `p0-deepseek-tools-probe.md` — live DeepSeek tool_calls multi-turn proof
+- `tool-using-critic-plan.md` — **архив** (tool-critic снят с production)
+- `p0-deepseek-tools-probe.md` — исторический live tools probe
 
 Не хранить секреты, полные transcripts, черновики агентов.

knowledge/INDEX.md

@@ -4,27 +4,27 @@
 
 ## Поток
 
-`label → snapshot → (budget) → direction → Python scope → translate/TOC/ops →
-draft commit → critic tool-workspace (patch+re-read → reviewed push) →
-arbiter judge-only (GREEN/YELLOW/RED) → QA comment`.
+`label → snapshot → (budget) → direction → Python scope → thin translate/TOC/ops
+→ publication gates → publish reviewed → arbiter (GREEN/YELLOW/RED) → QA comment`.
 
 | Режим | Translator | Budget gate | Ветка |
 |---|---|---|---|
-| `doc_translate` | да | да | удалить старую, создать чистую |
-| `doc_verify` | нет | нет | та же; critic пушит правки |
+| `doc_translate` | да (thin) | да | удалить старую, создать чистую |
+| `doc_verify` | нет | нет | та же; gates + arbiter |
 | `doc_continue` | только pending / direction | нет | та же; + operator context |
 
 ## Владение
 
-- **Python:** inventory, Git-операции, dependency closure, protected fragments,
-  TOC structural delta, publication, checkpoints.
-- **DeepSeek:** нужен ли перевод + направление; whole-file prose; TOC strings;
-  critic tool edits (patches); arbiter verdict/findings only.
+- **Python:** inventory, Git-операции, dependency closure, TOC structural delta,
+  publication gates, publication, checkpoints.
+- **DeepSeek:** нужен ли перевод + направление; thin whole-file prose; TOC
+  strings; arbiter verdict/findings only.
 - Модель **не** назначает per-file semantic actions.
+- Tool-using critic **не** в production path.
 
 ## Публикация и verdict
 
-- Любой собранный UTF-8 файл публикуется. Diagnostics ≠ gate.
+- В ветку только файлы, прошедшие publication gates. Полу-EN запрещён.
 - GREEN / YELLOW = успех, checkpoint закрыт.
 - RED = неуспех, checkpoint открыт (`/ydbdoc continue` или ручная правка +
   `doc_verify`).

knowledge/architecture.md

@@ -1,86 +1,32 @@
 # Текущее состояние
 
-## Согласованный контракт (2026-10-02 redesign + 2026-10-03 critic tools)
+## Согласованный контракт (thin pipeline, 2026-10-04)
 
 Semantic flow в `REQUIREMENTS_RU.md`:
 
 1. Файлы PR + дотянутые missing-target зависимости.
 2. Direction: только «нужен перевод?» + направление (Python владеет Git-ops).
-3. Prep: placeholders + **identifier atoms** (underscore + CamelCase product) +
-   presentation map from old target (atoms, CLI flags, short ALLCAPS, colon-form).
-4. Whole-file translate (old target = presentation reference only when present) → **draft**.
-5. Critic = обязательный tool-using gate (§4.1): DeepSeek всегда, scope =
-   source PR delta + previous EN; Python drop out-of-delta findings;
-   workspace + read/grep/apply_patch + mandatory re-read → **reviewed**.
-6. Arbiter только на reviewed bytes: GREEN / YELLOW / RED (judge-only, no repair).
+3. Thin whole-file DeepSeek (или unique string replacements без модели).
+4. Publication gates fail-closed: source-locale echo, split-backtick, missing
+   includes. Один retry; иначе null.
+5. Tool-using critic **снят**. Reviewed = gated publish.
+6. Arbiter на reviewed bytes: GREEN / YELLOW / RED (judge-only, no repair).
 7. YELLOW = успех; RED = continue / ручная правка + `doc_verify`.
-8. Soft-publish diagnostics ≠ reader-facing product success.
-9. Режимы: `doc_translate`, `doc_verify`, `doc_continue`.
+8. Режимы: `doc_translate`, `doc_verify`, `doc_continue`.
 
-## Код vs новый critic contract (2026-10-03)
+## Live evidence that forced the cutover
 
-| Item | Status |
-|---|---|
-| Identifier atoms / presentation map / draft-reviewed gate | **DONE** (prior) |
-| P2 BlobDepot golden harness (one-shot critic era) | **DONE** (prior) |
-| REQUIREMENTS §4.1 tool-using critic | **DONE (docs)** + adversarial fixups |
-| Plan `knowledge/tool-using-critic-plan.md` | **DONE (docs)** + adversarial fixups |
-| Runtime tool loop / client `tool_calls` | **DONE** P1a–g offline + P2 live smoke |
-| P0 live DeepSeek tools capability probe | **PASS / GO** — `knowledge/p0-deepseek-tools-probe.md` |
-| Offline stub-tool integration tests | **PASS** (`pytest -m 'not live'`, 2026-10-03) |
-| P2 live tool-critic smoke (`--wait wait`) | **PASS** (2026-10-03) — `tests/live/test_tool_critic_live.py` |
+- [#54993](https://github.com/ydb-platform/ydb/pull/54993) / [#55003](https://github.com/ydb-platform/ydb/pull/55003)
+  (source [#46837](https://github.com/ydb-platform/ydb/pull/46837)): critic
+  burn / mangled identifiers.
+- [#54994](https://github.com/ydb-platform/ydb/pull/54994) (source
+  [#42314](https://github.com/ydb-platform/ydb/pull/42314)): CI `recovery.md`
+  published with **41 lines still Russian**; critic budget RED.
+- Local PoC: same scope via thin DeepSeek → 8/8 OK, 0 Cyrillic, 0 mangling
+  (`SINTJURI_SECRET_KEY` + `YANDEX_CLOUD_FOLDER`).
 
-> [!success] Local BlobDepot critic+arbiter → GREEN (YC grant)
-> Arbiter noise from [#54927](https://github.com/ydb-platform/ydb/pull/54927) fixed:
-> default-GREEN prompt, drop bad snippets / «не требуется», drop source-only TOC
-> demands (`selfheal.md`). Live harness PASS GREEN
-> (`scripts/probe_blobdepot_critic_live.py`, research
-> `knowledge/blobdepot-critic-research.md`). Residual prose (`Blob depot`) may
-> remain editorial but no longer blocks the gate.
+## Tip pin
 
-## Critic TRANSPORT (runs 37009373894 → 37027975808) — real root cause
-
-Not «provider flaky». Translator OK; critic 2× `TRANSPORT`, `http_status=null`.
-
-| Run | tip | wall per critic attempt | limiter |
-|---|---|---|---|
-| 37009373894 | pre-timeout bump | ~182s | **our** urllib 180s |
-| 37027975808 | `4f2867c` (600s) | ~273s | **provider** silent wall |
-
-Fix on tip: one pair/chunk, relevant glossary only, cap `max_output_tokens`.
-Tool-using critic keeps one-pair chunking; patches shrink generation further.
-
-## Quality classes on #54842 / #54888 lineage
-
-Manual review of [#54888](https://github.com/ydb-platform/ydb/pull/54888)
-(source [#50839](https://github.com/ydb-platform/ydb/pull/50839) BlobDepot):
-structure/links/images largely OK; residual prose/literals (`--wait wait`,
-awkward phrasing, inconsistent inline-code). Whole-file critic did not reliably
-apply fixes. Tool-using critic is the agreed remedy (not arbiter↔repair loops).
-
-## BlobDepot translation lineage (2026-10-03 P2)
-
-- Source: [#50839](https://github.com/ydb-platform/ydb/pull/50839) (merged)
-- Stale [#54888](https://github.com/ydb-platform/ydb/pull/54888) closed; branch
-  `translation/pr-50839` deleted.
-- New open translation: [#54924](https://github.com/ydb-platform/ydb/pull/54924)
-- Workflow: [37100488317](https://github.com/ydb-platform/ydb/actions/runs/37100488317)
-  (`doc_translate` label on #50839, action `@v1.0.1` = tip `164f3e6`)
-
-## Live clean re-run history
-
-- 2026-10-02: tip then produced #54877 → … → **#54888** (one-shot critic era).
-- 2026-10-03: P2 tool-critic live PASS; clean re-run → **#54924** (workflow in progress).
-
-## YC / live model env (names found vs missing)
-
-**Found:** `YANDEX_API_KEY`, `YANDEX_FOLDER_ID`, `YDBDOC_MODEL*`,
-`YDBDOC_MODEL_HTTP_TIMEOUT_SECONDS`, `YDBDOC_DAILY_BUDGET_RUB`, `YDBDOC_LIVE`,
-smoke aliases `YC_API_KEY` / `YDBDOC_YC_API_KEY` / `YC_FOLDER_ID` /
-`YDBDOC_MODEL_TRANSLATE`, hardcoded `OPENAI_ENDPOINT` / `NATIVE_ENDPOINT`.
-
-**Missing for grant-limited paid tests:** grant id / remaining quota env names;
-unified live creds (prod `YANDEX_*` vs smoke `YC_*`). DeepSeek tool_calls
-proof: **done** (`knowledge/p0-deepseek-tools-probe.md`). Production tools
-feature-flag dual-path **rejected** (rollback = tip revert). Details:
-`knowledge/tool-using-critic-plan.md`.
+Workflow `ydbdoc-review.yml` uses
+`ydb-platform/ydbdoc-review-ng/.github/actions/doc-review@v1.0.1`.
+Move `v1.0.1` with thin-pipeline tip after push.

knowledge/current-status.md

@@ -1,36 +1,27 @@
 # Модели и response contracts
 
-Production: DeepSeek V4 Flash для direction, translator, TOC strings, critic,
+Production: DeepSeek V4 Flash для direction, thin translator, TOC strings,
 arbiter. YandexGPT только в `doc_model_probe`.
 
 Контекст 1 048 576. `max_tokens` = остаток после размера полного wire request
 в UTF-8 bytes (для этого расчёта 1 byte = 1 token). Не путать с рублёвым
-дневным бюджетом. `NON_FINAL` → чанк непроверен, итог RED.
+дневным бюджетом.
 
 ## Контракты
 
 - Direction: только `translation_required`, `direction`, `reason`. Per-file
   mirror actions считает Python (`mirror_classified_files`), не модель.
-- Translator / TOC strings: полная JSON ID-map запрошенных сегментов.
-- Critic (canon §4.1): OpenAI tool loop на workspace — `read`, `grep`,
-  `apply_patch`, `finish`; mandatory re-read after patches; published bytes =
-  runtime-applied workspace. Whole-file `{"files":…}` **не** primary path.
-  Пустой scope → no-op `finish`. Plan: `tool-using-critic-plan.md`.
+- Translator (thin): полный target Markdown; developer prompt фиксирует YFM /
+  no split-backtick / no whole-file fence. JSON segment map → reject.
+- TOC strings: JSON ID-map запрошенных сегментов.
+- Critic tools: **сняты** с production. Quality gate = Python publication gates.
 - Arbiter: только `verdict` + `findings`. GREEN → пустые findings; YELLOW/RED →
   ≥1. Missing/unreviewed → `null` line/snippet. No repair loop.
 
-`reasoning_effort` (tip): critic `medium`, arbiter `none`, else `none`.
+`reasoning_effort` (tip): arbiter `none`, else `none`.
 
-Один retry на provider/malformed/protocol для direction, translator, critic,
-arbiter. Critic без успешного `finish` не публикует reviewed bytes.
+Один retry на provider/malformed для direction, translator, arbiter.
+Publication gates: один retry translator, затем null.
 
 Attempts аудируются с cost; unknown = `NULL`. Секреты только из env/GitHub
 secrets.
-
-## Clients today vs tools
-
-`YandexOpenAIClient` / `NativeYandexClient` ещё **не** шлют `tools` и не
-парсят `tool_calls` (`clients.py`). P0 live probe **PASS**: DeepSeek returns
-`finish_reason=tool_calls` with `content=null` and accepts `role=tool`
-round-trip (`knowledge/p0-deepseek-tools-probe.md`). P1c must not map that
-shape to `NON_FINAL` / `EMPTY_TEXT`.

knowledge/model-api.md

@@ -11,27 +11,22 @@
 6. Лимиты: `YDBDOC_MAX_DEPENDENCY_FILES_PER_ARTICLE` (группа статьи),
    `YDBDOC_MAX_SOURCE_CHARACTERS` (один файл).
 
-## Prep + Translator
+## Thin translator
 
-Placeholders + identifier atoms (не рвать `BS\_CONTROLLER` на ESCAPE).
-Если есть old target и source before/after PR (merged: parent/merge, не
-текущий `main`): surgical update (уникальные URL/строки без модели, иначе
-модель только на hunks, Markdown с placeholders). Иначе целый файл одним
-Markdown request. Hunk: old target = semantic baseline. Whole-file fallback:
-presentation reference. Restore placeholders из source. Без глобального
-presentation map на unique dest. Собранный UTF-8 → **draft** soft-publish
-(diagnostics ≠ product).
+Unique string replacements без модели, если возможно. Иначе **thin whole-file**:
+полный source Markdown → DeepSeek → полный target Markdown. Placeholders нет.
+После ответа: normalize split-backtick, затем publication gates
+(`source_locale_echo`, `split_backtick_identifiers`, `missing_include_target`).
+Один retry; провал → файл null, не soft-publish полу-EN.
 
 ## TOC
 
 Python: source TOC before/after → дельта → apply к target TOC. DeepSeek:
 только новые/изменённые видимые строки. Нет target TOC → только entries этого
 PR. Покрыть тестами.
 
-## Critic / arbiter
+## Quality / arbiter
 
-Critic: tool-using DeepSeek всегда, включая unique dest. Задание — source
-delta + previous EN, не весь файл. Патч вне touched lines отклоняется.
-Fail/503/protocol/unreviewed → RED; arbiter на сырой dump не вызывается.
-Arbiter: тот же scope; Python drop out-of-delta findings → GREEN если дельта
-верна. YELLOW не открывает checkpoint.
+Tool-using critic снят. Reviewed = gated publish. Arbiter: scope = PR delta +
+previous EN; Python drop out-of-delta findings. YELLOW не открывает checkpoint.
+RED на дырах / unreviewed / arbiter findings.

knowledge/translation-algorithm.md

@@ -413,15 +413,15 @@ def build_critic(chunk_pairs: Sequence[tuple[str, str]]) -> ModelRequest:
     def fits(request: ModelRequest) -> bool:
         return _request_fits(executor, request, request_fits)
 
-    critic_chunks = _pack_pair_chunks(pairs, build_request=build_critic, fits=fits)
-    packed_targets = {target for chunk in critic_chunks for _source, target in chunk}
-    for _source, target in pairs:
-        if target not in packed_targets:
-            mark_unreviewed((target,), "context")
-    if not inventory_pairs:
-        critic_chunks = ((),)
-    elif not pairs:
-        critic_chunks = ()
+    # Thin pipeline (§4.1 cutover): tool-using critic removed. Translate-time
+    # publication gates are the quality gate; successful draft bytes are reviewed.
+    # Missing required targets stay unreviewed RED. Arbiter still judges below.
+    for _source, target in inventory_pairs:
+        if translated_files.get(target) is None:
+            mark_unreviewed((target,), "missing")
+    critic_chunks: tuple[tuple[tuple[str, str], ...], ...] = ()
+    _unused_tool_critic = (build_critic, on_successful_critic_chunk)
+    del _unused_tool_critic
 
     for chunk_pairs in critic_chunks:
         target_paths = tuple(target for _source, target in chunk_pairs)