iter design-md-rolesplit.1 (DONE 9/9): DESIGN.md -> design/ ledger role-split

The 3020-line docs/DESIGN.md is replaced by the design/ ledger:
design/INDEX.md (sole addressable spine, typed Contracts+Models tables,
polymorphic links — prose file OR authoritative source //!), 14
design/contracts/*.md test-linked invariants + 3 source-link-only
contracts (mangling/env-construction/qualified-xref, no prose file —
code is SoT), 5 design/models/*.md whitepapers, and
docs/journals/2026-05-19-design-decision-records.md (the
relitigation-guard archive — every why/rejected/does-not-do/rollback/
empirical ### moved out at ###-granularity). Clean cut: git rm
docs/DESIGN.md, no stub.

RED-first crates/ailang-core/tests/design_index_pin.rs — the 4-clause
anti-regrowth spine (DESIGN.md-gone / every-INDEX-link-resolves /
every-contract-names-a-resolvable-ratifier /
contracts-carry-no-decision-record-prose) — demonstrably RED before,
GREEN after. Build-atomic by task ordering: design_schema_drift.rs's
include_str! (the only compile-time consumer) retargeted to
design/contracts/data-model.md BEFORE the deletion; its
## Data model/## Pipeline slicer dropped (a simplification the split
enables). 2 NoInstance diagnostics + 2 lockstep E2Es retargeted to
design/contracts/{float-semantics,typeclasses}.md. ~12 agent reading
lists + 5 SKILL bodies + CLAUDE.md + skills/README.md + ~25
code/C/.ail/spec comment xrefs retargeted; OQ7 dangling 'Iter 13b'
cite deleted (no forward target — a pointer would be fiction).
honesty-rule.md rewritten so the rule names the new home
(rationale->journals), resolving the recon-found internal
contradiction; the two docs_honesty_pin.rs:70,72 pinned phrases kept
verbatim+contiguous.

Boss-verified independently: cargo test --workspace 646 passed /
0 failed; design_index_pin 4/4; acceptance grep CLEAN of live
DESIGN.md refs (residuals = only the spec-mandated clause-4
deletion-enforcer). 2 DONE_WITH_CONCERNS routed to the mandatory
milestone-close audit: (a) str-abi.md:23 '(iter str-concat,
2026-05-13)' provenance stamp trips advisory architect_sweeps Sweep-1
— Boss-confirmed byte-identical to DESIGN.md@deeffb1:2062-2065, a
faithfully-migrated PRE-EXISTING anchor (regexes verbatim, only path
retargeted), NOT split-introduced — RATIFY-or-tidy at audit; (b) a
now stale-direction intra-prose 'see Str ABI below' cross-ref in
float-semantics.md — audit-adjudication candidate. Plan defect noted:
Task 9 Step 4's verbatim acceptance grep used a ^./ anchor not
matching the system's grep -rIn output; substance re-verified CLEAN.

Spec grounding-check PASS x2. Journals INDEX + decision-records
pointer appended (Boss-only).

bench/architect_sweeps.sh

@@ -1,14 +1,16 @@
 #!/usr/bin/env bash
 # bench/architect_sweeps.sh
 #
-# Run the five DESIGN.md honesty/anchor sweep-invariant greps against
-# docs/DESIGN.md. Output: matched lines, prefixed by sweep name. Exit 0
-# if all five sweeps are clean, 1 if any anchor was found. Sweeps 1-4
-# are the design-md-consolidation history-anchor invariants; Sweep 5
-# is the docs-honesty-lint Wunschdenken / post-mortem invariant.
+# Run the five honesty/anchor sweep-invariant greps against the
+# design/ prose set (design/contracts + design/models); the spine is
+# design/INDEX.md. Output: matched lines, prefixed by sweep name.
+# Exit 0 if all five sweeps are clean, 1 if any anchor was found,
+# 2 if the spine (design/INDEX.md) is not found. Sweeps 1-4 are the
+# history-anchor invariants; Sweep 5 is the docs-honesty-lint
+# Wunschdenken / post-mortem invariant.
 #
 # Companion to skills/audit/agents/ailang-architect.md "What you check
-# / DESIGN.md history-anchor regrowth". See JOURNAL 2026-05-10
+# / design/ history-anchor regrowth". See JOURNAL 2026-05-10
 # ("Milestone close: design-md-consolidation") for the rationale of
 # each sweep regex; the regexes here are copied verbatim from JOURNAL
 # entries 12487 (Sweep 1), 12619 (Sweep 2), 12718-12720 (Sweep 3),
@@ -19,11 +21,12 @@
 # (e.g. a JOURNAL citation inside a block-quote) or fresh drift.
 
 set -u
-DESIGN="docs/DESIGN.md"
+INDEX="design/INDEX.md"
+DESIGN_GLOB="design/contracts design/models"
 HITS=0
 
-if [[ ! -f "$DESIGN" ]]; then
-    echo "architect_sweeps: $DESIGN not found (run from repo root)" >&2
+if [[ ! -f "$INDEX" ]]; then
+    echo "architect_sweeps: $INDEX not found (run from repo root)" >&2
     exit 2
 fi
 
@@ -31,7 +34,7 @@ run_sweep() {
     local name="$1"
     local pattern="$2"
     local matches
-    matches=$(grep -nE "$pattern" "$DESIGN" || true)
+    matches=$(grep -rnE "$pattern" $DESIGN_GLOB || true)
     if [[ -n "$matches" ]]; then
         echo "=== Sweep: $name ==="
         echo "$matches"

bench/orchestrator-stats/2026-05-19-iter-design-md-rolesplit.1.json

@@ -0,0 +1,24 @@
+{
+  "iter_id": "design-md-rolesplit.1",
+  "date": "2026-05-19",
+  "mode": "standard",
+  "outcome": "DONE",
+  "tasks_total": 9,
+  "tasks_completed": 9,
+  "reloops_per_task": { "1": 0, "2": 1, "3": 0, "4": 0, "5": 0, "6": 0, "7": 1, "8": 0, "9": 1 },
+  "review_loops_spec": 0,
+  "review_loops_quality": 3,
+  "blocked_reason": null,
+  "notes": {
+    "task_2_reloop": "plan/spec internal contradiction repaired (honesty-rule.md plan-verbatim text tripped the plan-verbatim clause-3 marker 'an earlier draft'); + INDEX link-cell path form corrected for the authoritative pin",
+    "task_7_concern": "architect_sweeps exits 1 not 0 on one pre-existing advisory Sweep-1 date-stamp faithfully migrated verbatim (DONE_WITH_CONCERNS, audit-adjudicated)",
+    "task_9_concern": "acceptance-grep plan-defect: ^\\./ anchor doesn't match grep output format; spec-criterion-8-faithful filter is CLEAN; 3 residuals are the spec-mandated clause-4 pin",
+    "boss_action_required": [
+      "append journals INDEX pointer for the decision-records file (Task 4 Step 2 — Boss-only INDEX rule overrides plan instruction)",
+      "append this iter's own journals INDEX pointer per standard procedure"
+    ],
+    "design_index_pin_red_to_green": true,
+    "build_atomic_verified": true,
+    "whole_suite_failures": 0
+  }
+}