memory: heid-code-review triaged+fixed (eb0767e); both heid gates complete

persistent-memory.md

@@ -70,8 +70,15 @@ Contract `docs/contracts/donut_voiced_interview.contract.md`. **NOT pushed** (op
   Mimir-session cleanup via `sessions.delete`+holder, `: keepalive` SSE frame before the KB consult, text-cap
   413 + 60s timeout). Refuted the 3-arm "memory_context unverifiable" alarm (tests + live SDK). Accepted (trust
   model): caller-supplied agent_id (LAN/no-auth debug tool). All 5 adversarial inputs live-smoked → 200/413/400.
-- **⏳ PENDING:** heid-code-review (thread `01KZ0324M02E90D3K2Q91JAH0J`) reply not yet landed — wake-listener
-  armed (pid tracked). Triage + fixup on arrival. HEAD now `56dce00`.
+- **✅ heid-code-review (thread `01KZ0324M02E90D3K2Q91JAH0J`) TRIAGED + FIXED (`eb0767e`, 545 green).**
+  3 arms (Kimi transport-stalled); reconciled against 56dce00 — 3 findings already closed by the bug-hunt
+  (the two firewalled lenses converged independently on the same 3 defects). Fixed: **F7 no-hit sentinel** (the
+  sharpest — Mimir emits NO_CORPUS_MATCH on no-hit → pin_kb_context drops it, so a "no results" answer is never
+  pinned as Donut's memory; live-proven grounding 5.6s / no-match 0.7s→[]) + contract precision (DEC-8 stale:
+  donut voice registered early, live gateway read INVERTED the 3-arm "revert to preset" remedy; FN url param,
+  gateway-enforced voice, browser-sent PAD) + 4 test-gaps (read_note-distinguishing, literal bound, route roster
+  +/api/tts+/messages, KB-seam-degrades-but-turn-survives). Accepted: caller-agent_id (trust model), no DEC-5
+  concurrency test (asyncio.Lock trivially correct). **BOTH HEID GATES NOW COMPLETE.** HEAD `eb0767e`.
 - **OWED (still):** P&P verification re-run to infra-ops on thread `01KYZX0JM1A1AF8ETMFV0AP7E9` (#382 fix deployed b166).
   Partial signal: Mimir DOES ground in DCC fiction wing now (bridge smoke), but the specific P&P-dismiss shape unrun.
   **Prior design detail → `persistent-memory.d/2026-08-01-donut-voiced-interview-build.md`.**