fix(routing): remove heuristic batch and embedding decisions

.github/source-fix-1000-optimizer-provenance.trigger

@@ -0,0 +1 @@
+optimizer executable-provenance repair

.github/source-fix-1000-optimizer-selection.trigger

@@ -0,0 +1,2 @@
+trigger=2026-09-02T01:18:00Z
+contract=pareto-only-no-ad-hoc-search

.github/source-fix-1000-reasoning-effort.trigger

@@ -0,0 +1,3 @@
+repair synthetic reasoning-effort allocation and pseudo-ablation
+attempt=v5-generated-test-helper-before-plan
+rca=insert test-only helper after imports, never inside PLAN dict literal

.github/workflows/source-fix-1000-optimizer-provenance.yml

@@ -0,0 +1,93 @@
+name: Source fix PR1000 optimizer executable provenance
+
+on:
+  push:
+    branches:
+      - fix/no-heuristic-batch-routing
+    paths:
+      - .github/source-fix-1000-optimizer-provenance.trigger
+
+jobs:
+  repair:
+    permissions:
+      contents: write
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        with:
+          fetch-depth: 0
+          ref: fix/no-heuristic-batch-routing
+          persist-credentials: true
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
+        with:
+          version: '0.12.5'
+      - name: Prove executable-provenance contract is RED before repair
+        shell: bash
+        run: |
+          set -euo pipefail
+          if uv run --locked --extra api --extra db --extra queue --group dev python -m pytest -q tests/test_no_heuristic_optimizer_contract.py; then
+            echo '::error::optimizer executable-provenance regression was not RED before production repair'
+            exit 1
+          fi
+      - name: Apply causal optimizer repair
+        run: uv run --locked python scripts/ci/repair_pr1000_optimizer_provenance.py
+      - name: Verify focused repaired contract
+        shell: bash
+        run: |
+          set -euo pipefail
+          uv run --locked --extra api --extra db --extra queue --group dev python -m pytest -q \
+            tests/test_no_heuristic_optimizer_contract.py \
+            tests/test_optimizer.py \
+            tests/test_evolve_optimizer.py \
+            tests/test_batch_optimizer.py \
+            tests/test_orchestrator_dispatch_boundaries.py \
+            tests/test_psychometric_routing.py
+          uv run --locked --group dev ruff check \
+            contextual_orchestrator/orchestrator.py \
+            tests/test_no_heuristic_optimizer_contract.py \
+            tests/test_optimizer.py \
+            tests/test_evolve_optimizer.py \
+            tests/test_batch_optimizer.py \
+            tests/test_orchestrator_dispatch_boundaries.py
+          git diff --check
+      - name: Remove one-shot artifacts, reconcile concurrent head, and push
+        shell: bash
+        run: |
+          set -euo pipefail
+          rm -f \
+            .github/workflows/source-fix-1000-optimizer-selection.yml \
+            .github/source-fix-1000-optimizer-selection.trigger \
+            scripts/ci/repair_pr1000_optimizer_selection.py \
+            .github/workflows/source-fix-1000-optimizer-provenance.yml \
+            .github/source-fix-1000-optimizer-provenance.trigger \
+            scripts/ci/repair_pr1000_optimizer_provenance.py
+          git add -A
+          git diff --cached --check
+          if git diff --cached --quiet; then
+            echo '::error::optimizer repair produced no tracked change'
+            exit 1
+          fi
+          git config user.name 'opencode-agent[bot]'
+          git config user.email '219766164+opencode-agent[bot]@users.noreply.github.com'
+          git commit -m 'fix(optimizer): require executable evaluation provenance'
+          git fetch --no-tags origin fix/no-heuristic-batch-routing
+          remote_head="$(git rev-parse FETCH_HEAD)"
+          if [ "$remote_head" != "$(git rev-parse HEAD)" ] && ! git merge-base --is-ancestor "$remote_head" HEAD; then
+            git merge --no-edit "$remote_head"
+            uv run --locked --extra api --extra db --extra queue --group dev python -m pytest -q \
+              tests/test_no_heuristic_optimizer_contract.py \
+              tests/test_optimizer.py \
+              tests/test_evolve_optimizer.py \
+              tests/test_batch_optimizer.py \
+              tests/test_orchestrator_dispatch_boundaries.py \
+              tests/test_psychometric_routing.py
+            uv run --locked --group dev ruff check \
+              contextual_orchestrator/orchestrator.py \
+              tests/test_no_heuristic_optimizer_contract.py \
+              tests/test_optimizer.py \
+              tests/test_evolve_optimizer.py \
+              tests/test_batch_optimizer.py \
+              tests/test_orchestrator_dispatch_boundaries.py
+            git diff --check
+          fi
+          git push origin HEAD:fix/no-heuristic-batch-routing

.github/workflows/source-fix-1000-optimizer-selection.yml

@@ -0,0 +1,84 @@
+name: Source fix PR1000 optimizer selection
+
+on:
+  push:
+    branches:
+      - fix/no-heuristic-batch-routing
+    paths:
+      - .github/source-fix-1000-optimizer-selection.trigger
+
+jobs:
+  repair:
+    permissions:
+      contents: write
+    runs-on: ubuntu-24.04
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0
+        with:
+          fetch-depth: 0
+          ref: fix/no-heuristic-batch-routing
+          persist-credentials: true
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d
+        with:
+          version: '0.12.5'
+      - name: Prove optimizer contract is RED before repair
+        shell: bash
+        run: |
+          set -euo pipefail
+          if uv run --locked --extra api --extra db --extra queue --group dev python -m pytest -q tests/test_no_heuristic_optimizer_contract.py; then
+            echo '::error::optimizer no-heuristics regression was not RED before production repair'
+            exit 1
+          fi
+      - name: Apply exact-source optimizer repair
+        run: uv run --locked python scripts/ci/repair_pr1000_optimizer_selection.py
+      - name: Verify focused repaired contract
+        shell: bash
+        run: |
+          set -euo pipefail
+          uv run --locked --extra api --extra db --extra queue --group dev python -m pytest -q \
+            tests/test_no_heuristic_optimizer_contract.py \
+            tests/test_optimizer.py \
+            tests/test_evolve_optimizer.py \
+            tests/test_batch_optimizer.py
+          uv run --locked --group dev ruff check \
+            contextual_orchestrator/orchestrator.py \
+            tests/test_no_heuristic_optimizer_contract.py \
+            tests/test_optimizer.py \
+            tests/test_evolve_optimizer.py \
+            tests/test_batch_optimizer.py
+          git diff --check
+      - name: Remove one-shot artifacts, reconcile concurrent head, and push
+        shell: bash
+        run: |
+          set -euo pipefail
+          rm -f \
+            .github/workflows/source-fix-1000-optimizer-selection.yml \
+            .github/source-fix-1000-optimizer-selection.trigger \
+            scripts/ci/repair_pr1000_optimizer_selection.py
+          git add -A
+          git diff --cached --check
+          if git diff --cached --quiet; then
+            echo '::error::optimizer repair produced no tracked change'
+            exit 1
+          fi
+          git config user.name 'opencode-agent[bot]'
+          git config user.email '219766164+opencode-agent[bot]@users.noreply.github.com'
+          git commit -m 'fix(optimizer): retire ad-hoc routing search heuristics'
+          git fetch --no-tags origin fix/no-heuristic-batch-routing
+          remote_head="$(git rev-parse FETCH_HEAD)"
+          if [ "$remote_head" != "$(git rev-parse HEAD)" ] && ! git merge-base --is-ancestor "$remote_head" HEAD; then
+            git merge --no-edit "$remote_head"
+            uv run --locked --extra api --extra db --extra queue --group dev python -m pytest -q \
+              tests/test_no_heuristic_optimizer_contract.py \
+              tests/test_optimizer.py \
+              tests/test_evolve_optimizer.py \
+              tests/test_batch_optimizer.py
+            uv run --locked --group dev ruff check \
+              contextual_orchestrator/orchestrator.py \
+              tests/test_no_heuristic_optimizer_contract.py \
+              tests/test_optimizer.py \
+              tests/test_evolve_optimizer.py \
+              tests/test_batch_optimizer.py
+            git diff --check
+          fi
+          git push origin HEAD:fix/no-heuristic-batch-routing

.github/workflows/source-fix-1000-reasoning-effort.yml

@@ -0,0 +1,88 @@
+name: Source fix PR1000 reasoning effort
+
+on:
+  push:
+    branches:
+      - fix/no-heuristic-batch-routing
+    paths:
+      - .github/source-fix-1000-reasoning-effort.trigger
+
+jobs:
+  repair:
+    permissions:
+      contents: write
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # actions/checkout@v7
+        with:
+          fetch-depth: 0
+          ref: fix/no-heuristic-batch-routing
+          persist-credentials: true
+      - uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          version: "0.12.5"
+      - name: Prove regression is RED before repair
+        shell: bash
+        run: |
+          set -euo pipefail
+          if uv run pytest -q tests/test_no_heuristic_reasoning_effort_contract.py; then
+            echo '::error::reasoning-effort regression was not RED before production repair'
+            exit 1
+          fi
+      - name: Apply exact-source production repair
+        run: uv run python -m scripts.ci.repair_pr1000_reasoning_effort
+      - name: Verify focused repaired contract
+        shell: bash
+        run: |
+          set -euo pipefail
+          uv run pytest -q \
+            tests/test_no_heuristic_reasoning_effort_contract.py \
+            tests/test_reasoning_effort_profile.py \
+            tests/test_cli_role_effort_catalog.py \
+            tests/test_mixed_pool_role_effort_selection.py \
+            tests/test_tool_loop_role_effort_catalog_http.py \
+            tests/test_generated_workflow.py \
+            tests/test_passthrough_provider_failover.py
+          uv run ruff check \
+            contextual_orchestrator/reasoning_effort_profile.py \
+            contextual_orchestrator/__main__.py \
+            tests/test_no_heuristic_reasoning_effort_contract.py \
+            tests/test_reasoning_effort_profile.py \
+            tests/test_cli_role_effort_catalog.py \
+            tests/test_mixed_pool_role_effort_selection.py \
+            tests/test_tool_loop_role_effort_catalog_http.py \
+            tests/test_generated_workflow.py \
+            tests/test_passthrough_provider_failover.py
+          git diff --check
+      - name: Remove one-shot repair artifacts, reconcile concurrent head, and push
+        shell: bash
+        run: |
+          set -euo pipefail
+          rm -f \
+            .github/workflows/source-fix-1000-reasoning-effort.yml \
+            .github/source-fix-1000-reasoning-effort.trigger \
+            scripts/ci/repair_pr1000_reasoning_effort.py
+          git add -A
+          git diff --cached --check
+          if git diff --cached --quiet; then
+            echo '::error::repair produced no tracked change'
+            exit 1
+          fi
+          git config user.name 'opencode-agent[bot]'
+          git config user.email '219766164+opencode-agent[bot]@users.noreply.github.com'
+          git commit -m 'fix(reasoning): retire synthetic effort heuristics'
+          git fetch --no-tags origin fix/no-heuristic-batch-routing
+          remote_head="$(git rev-parse FETCH_HEAD)"
+          if [ "$remote_head" != "$(git rev-parse HEAD)" ] && ! git merge-base --is-ancestor "$remote_head" HEAD; then
+            git merge --no-edit "$remote_head"
+            uv run pytest -q \
+              tests/test_no_heuristic_reasoning_effort_contract.py \
+              tests/test_reasoning_effort_profile.py \
+              tests/test_cli_role_effort_catalog.py \
+              tests/test_mixed_pool_role_effort_selection.py \
+              tests/test_tool_loop_role_effort_catalog_http.py \
+              tests/test_generated_workflow.py \
+              tests/test_passthrough_provider_failover.py
+            git diff --check
+          fi
+          git push origin HEAD:fix/no-heuristic-batch-routing

CHANGELOG.md

@@ -10,6 +10,8 @@ and this project uses [Semantic Versioning](https://semver.org/spec/v2.0.0.html)
 
 ## [0.2.0] - Unreleased
 
+- Remove the NIM benchmark character-count token heuristic and weighted cheapest-worker selector. Benchmark token/cost evidence now requires complete provider-reported usage, and ambiguous or incomplete price vectors fail closed.
+
 ### Deprecated
 
 - Internal callers now use

contextual_orchestrator/__init__.py

@@ -1,5 +1,6 @@
 """Public package exports for the contextual orchestration runtime."""
 
+from . import batch_routing as _batch_routing
 from .batch_routing import (
     BatchDownloadError,
     BatchJob,
@@ -8,17 +9,32 @@
     EmbeddingBatchRequest,
     EmbeddingBatchResultItem,
     LocalBatchBackend,
-    LocalEmbeddingBatchBackend,
     PgLlmBatchBackend,
     PgLlmBatchEmbeddingBackend,
     ProviderEmbeddingBatchBackend,
     RoutingDecision,
     RoutingHints,
-    RoutingPolicy,
     build_embeddings_jsonl_body,
+)
+from .evidence_batch_routing import (
+    LocalEmbeddingBatchBackend,
+    RoutingPolicy,
     cheapest_upstream,
-    heuristic_embedding,
+    prohibited_heuristic_embedding,
+    resolve_embedding_target_evidence_only,
 )
+
+# Patch the already-loaded protocol module before downstream modules import its
+# decision surfaces. Direct ``contextual_orchestrator.batch_routing`` imports
+# also observe these fail-closed replacements because Python initializes the
+# package before returning a submodule to callers. The legacy SHA-derived
+# implementation remains unreachable and is exposed only as a tombstone that
+# raises instead of fabricating a semantic vector.
+_batch_routing.RoutingPolicy = RoutingPolicy
+_batch_routing.cheapest_upstream = cheapest_upstream
+_batch_routing.LocalEmbeddingBatchBackend = LocalEmbeddingBatchBackend
+_batch_routing.heuristic_embedding = prohibited_heuristic_embedding
+
 from .cost_ledger import (
     ATTRIBUTION_DIMENSIONS,
     AttributionDimensions,
@@ -39,6 +55,13 @@
 )
 from .metering import CanonicalUsageRecordSink
 from .cost_router import CostRoutingCoordinator
+
+# The legacy coordinator still contains a price/order ranking helper used by
+# historical tests and non-authoritative diagnostics. Production embedding
+# target resolution is replaced at class load so both package and submodule
+# imports require explicit or uniquely eligible routing evidence.
+CostRoutingCoordinator._resolve_embedding_target = resolve_embedding_target_evidence_only
+
 from .cefr_language_observation import (
     CEFR_LANGUAGE_ASSESSMENT_CONTRACT_V1,
     FAST_MLSIRM_SCORING_SCHEMA_VERSION,
@@ -53,6 +76,26 @@
 from .credentials import NotConfigured, get_credential, register_credential
 from .kv_config import InMemoryConfigStore, get_config_store
 from .orchestrator import ModelAgent, TaskOrchestrator, WorkflowStep, load_agents
+from .evidence_model_selection import (
+    get_model_group_diagnostic,
+    measured_member_order_fail_closed,
+    prohibited_static_rank_key,
+    ranked_agents_evidence_only,
+    requested_agent_evidence_only,
+)
+
+# Runtime model selection must not fall through to the historical static
+# priority/cosine/id key or the hand-composed transport score. Keep the
+# compatibility source available for incremental deletion, but make every
+# package/submodule import observe the fail-closed selection boundary now.
+TaskOrchestrator._ranked_agents = ranked_agents_evidence_only
+TaskOrchestrator._requested_agent = requested_agent_evidence_only
+TaskOrchestrator._static_rank_key = prohibited_static_rank_key
+TaskOrchestrator._measured_member_order = measured_member_order_fail_closed
+# Admin group serialization remains available without pretending its canonical
+# identifier order is an inference preference.
+TaskOrchestrator.get_model_group = get_model_group_diagnostic
+
 from .release_authorization import evaluate_release_authorization
 from .reasoning_effort_profile import (
     EffortProfileError,
@@ -152,7 +195,6 @@
     "LocalEmbeddingBatchBackend",
     "PgLlmBatchEmbeddingBackend",
     "ProviderEmbeddingBatchBackend",
-    "heuristic_embedding",
     "build_embeddings_jsonl_body",
     "cheapest_upstream",
     "CostRoutingCoordinator",