fix(routing): world say/whisper silence adjacent prose in every mode

[antra-tess]

Incident

Mica's report af-world-say-prose-leak-20260901.md (SHA-256 9507f309…): in locus prose mode, a round of ordinary text + explicit Eidoverse say published twice — world seq 15146 = the say tool input, seq 15147 = the adjacent ordinary text, byte-for-byte (Cairn provider row 230). Not a same_round_think_text_policy bypass; no think() was called and provider-native thinking stayed private.

Root cause (confirmed)

src/framework.ts consulted HYBRID_PUBLICATION_TOOLS (say, whisper) only when agent.proseRouting === 'hybrid', at both silencing sites (live round + trailing scan). Introduced by c83fadb3 (2026-08-14, hybrid envelopes). Discord sends in SILENCING_TOOLS silenced in every mode; world verbs did not.

Fix

Fold the world verbs into one isSilencingTool(name) predicate used at both sites. An explicit world utterance now behaves exactly like a channel send in every mode: sticky silencing from that round on, suppression visible in the [delivered] receipt. No behavior change for Discord send/reply/DM, skip_reply, think() privacy, text-only turns, non-publishing tool rounds, explicit mode (silencing never applied there), or disabled mode.

Receipts (worktree off origin/main d9fb35b, node_modules shared)

• typecheck clean
• focused (present-while-acting, explicit-prose-routing, same-round-think-policy, prose-stream-router): 74/74
• full: 0 fail on both runs (629/633 and 656/660 — totals vary run to run under --test-force-exit; base d9fb35b was 631/635, also 0 fail)
• mutation control: removing WORLD_PUBLICATION_TOOLS from the predicate fails both new locus tests and the existing hybrid say test; the move negative control still passes

Nonblocking notes

• emote is also a world publication verb; left out of the set, matching the report's scope. Whether an emote should silence narration is a doctrine call.
• bareToolName strips the MCPL prefix, so any server exposing a bare say/whisper tool (e.g. tavern-mcpl) now silences too. Consistent with hybrid's existing behavior.
• Deploy is separate: Mac residents load AF via the forking-knowledge-miner symlink to the local checkout, so this lands only on pull + restart.

🤖 Generated with Claude Code

https://claude.ai/code/session_017op4YjCZABYS9vWBXxeRwH