docs(v3.9.1): publish the Critical Isolation documentation set + v3.10 CKN drafts; make v3.9.1 the current version

The v3.9.1 set (docs/v3.9/, 18 pages) is authored fresh against what
shipped — grounded in the pgCK/cklib changelogs and the committed client
specs — with 'a verb, not a query surface' as its spine, reinforced across
affordances, grants, shapes, the-door, client, and critical-isolation.

- Foundations: introduction, critical-isolation (the three-ring architecture),
  verb-vs-query-surface (the load-bearing distinction).
- The kernel: concept-kernel, the-door (ckp.dispatch), seal-and-proof, shapes.
- Capability & governance: affordances (the closed verb table), governance
  (propose → vote → apply), grants, epochs.
- Naming & ontology, client (cklib), quickstart (hello-kernel), ecosystem,
  changelog (grounded, continuous v3.4 → v3.9.1 history).

v3.10 CKN drafts (docs/v3.10/, 4 pages), each marked IN DESIGN: the notation,
notation-in-construct-out, and the scoring loop.

Switch-over: nav + version switcher default to v3.9.1 (current) with v3.10
'in design'; Ontology nav leads with the v3.8 runtime core; llms.txt lists the
v3.9.1 set and the verb-vs-query-surface distinction; homepage refreshed to
current versions (pgCK v0.4.17, 33 releases; fleet 58).

Author: styk-tv

docs/.vitepress/config.mts

@@ -24,7 +24,9 @@ export default withMermaid(defineConfig({
       {
         text: 'Docs',
         items: [
-          { text: 'v3.7 (Current)', link: '/v3.7/introduction' },
+          { text: 'v3.9.1 (Current)', link: '/v3.9/introduction' },
+          { text: 'v3.10 (In design) — CKN', link: '/v3.10/' },
+          { text: 'v3.7', link: '/v3.7/introduction' },
           { text: 'v3.6 (Frozen)', link: '/v3.6/introduction' },
           { text: 'v3.5-alpha6', link: '/v3.5-alpha6/introduction' },
           { text: 'v3.5-alpha3', link: '/v3.5-alpha3/introduction' },
@@ -33,13 +35,13 @@ export default withMermaid(defineConfig({
       },
       {
         text: 'Ontology',
-        link: '/ontology/v3.7/',
+        link: '/ontology/v3.8/',
         items: [
           { text: 'Browse Ontology', link: '/browse/index.html' },
-          { text: 'v3.7 (TTL) — Current', link: '/ontology/v3.7/' },
+          { text: 'v3.8 core (TTL) — Runtime', link: '/ontology/v3.8/' },
+          { text: 'v3.7 (TTL)', link: '/ontology/v3.7/' },
           { text: 'v3.6 (TTL)', link: '/ontology/v3.6/' },
           { text: 'v3.5-alpha6 (TTL)', link: '/ontology/v3.5-alpha6/' },
-          { text: 'v3.5-alpha3 (TTL)', link: '/ontology/v3.5-alpha3/' },
           { text: 'v3.4 (TTL)', link: '/ontology/v3.4/' },
         ]
       },
@@ -53,6 +55,110 @@ export default withMermaid(defineConfig({
     ],
 
     sidebar: {
+      '/v3.9/': [
+        {
+          text: 'Part I: Foundations',
+          items: [
+            { text: 'Introduction', link: '/v3.9/introduction' },
+            { text: 'Critical Isolation', link: '/v3.9/critical-isolation' },
+            { text: 'A Verb, Not a Query Surface', link: '/v3.9/verb-vs-query-surface' },
+          ]
+        },
+        {
+          text: 'Part II: The Kernel',
+          items: [
+            { text: 'What a Concept Kernel Is', link: '/v3.9/concept-kernel' },
+            { text: 'The One Door: ckp.dispatch', link: '/v3.9/the-door' },
+            { text: 'Seal, Ledger, Proof', link: '/v3.9/seal-and-proof' },
+            { text: 'Shapes (σ)', link: '/v3.9/shapes' },
+          ]
+        },
+        {
+          text: 'Part III: Capability & Governance',
+          items: [
+            { text: 'Affordances (α)', link: '/v3.9/affordances' },
+            { text: 'Governance', link: '/v3.9/governance' },
+            { text: 'Grants (γ)', link: '/v3.9/grants' },
+            { text: 'Epochs (ε)', link: '/v3.9/epochs' },
+          ]
+        },
+        {
+          text: 'Part IV: Naming & Ontology',
+          items: [
+            { text: 'Naming — the developer writes URN', link: '/v3.9/naming' },
+            { text: 'The Core Vocabulary', link: '/v3.9/ontology' },
+          ]
+        },
+        {
+          text: 'Part V: Build',
+          items: [
+            { text: 'The Client: cklib', link: '/v3.9/client' },
+            { text: 'Quickstart', link: '/v3.9/quickstart' },
+            { text: 'The Fleet', link: '/v3.9/ecosystem' },
+          ]
+        },
+        {
+          text: 'Reference',
+          collapsed: true,
+          items: [
+            { text: 'Changelog', link: '/v3.9/changelog' },
+          ]
+        },
+        {
+          text: 'Toward v3.10',
+          items: [
+            { text: 'CKN — the notation', link: '/v3.10/' },
+          ]
+        },
+        {
+          text: 'Ontology Files',
+          items: [
+            { text: 'Browse Ontology', link: '/browse/index.html' },
+            { text: 'v3.8 core (Turtle)', link: '/ontology/v3.8/' },
+          ]
+        },
+        {
+          text: 'Previous Versions',
+          collapsed: true,
+          items: [
+            { text: 'v3.7', link: '/v3.7/introduction' },
+            { text: 'v3.6 (Frozen)', link: '/v3.6/introduction' },
+            { text: 'v3.5-alpha6', link: '/v3.5-alpha6/introduction' },
+            { text: 'v3.4', link: '/v3.4/introduction' },
+          ]
+        },
+        {
+          text: 'Community',
+          items: [
+            { text: 'Discord', link: 'https://discord.gg/sTbfxV9xyU' },
+            { text: 'GitHub', link: 'https://github.com/ConceptKernel' },
+          ]
+        }
+      ],
+      '/v3.10/': [
+        {
+          text: 'CKN — Concept Kernel Notation',
+          items: [
+            { text: 'Overview (in design)', link: '/v3.10/' },
+            { text: 'Concept Kernel Notation', link: '/v3.10/concept-kernel-notation' },
+            { text: 'Notation In, Construct Out', link: '/v3.10/assembled-constructs' },
+            { text: 'The Scoring Loop', link: '/v3.10/scoring-loop' },
+          ]
+        },
+        {
+          text: 'Current runtime',
+          items: [
+            { text: '← v3.9.1 (shipped)', link: '/v3.9/introduction' },
+          ]
+        },
+        {
+          text: 'Community',
+          items: [
+            { text: 'Discord', link: 'https://discord.gg/sTbfxV9xyU' },
+            { text: 'GitHub', link: 'https://github.com/ConceptKernel' },
+          ]
+        }
+      ],
       '/v3.7/': [
         {
           text: 'Part I: Foundations',

docs/.vitepress/theme/VersionSwitcher.vue

@@ -5,7 +5,9 @@ import { useRoute } from 'vitepress'
 const route = useRoute()
 
 const versions = [
-  { label: 'v3.7', prefix: '/v3.7/', badge: 'latest', color: '#3b82f6' },
+  { label: 'v3.9.1', prefix: '/v3.9/', badge: 'current', color: '#E8A832' },
+  { label: 'v3.10', prefix: '/v3.10/', badge: 'in design', color: '#C07840', entry: '' },
+  { label: 'v3.7', prefix: '/v3.7/', badge: 'frozen', color: '#3b82f6' },
   { label: 'v3.6', prefix: '/v3.6/', badge: 'frozen', color: '#8b5cf6' },
   { label: 'v3.5-alpha6', prefix: '/v3.5-alpha6/', badge: 'stable', color: '#22c55e' },
   { label: 'v3.5-alpha3', prefix: '/v3.5-alpha3/', badge: 'alpha', color: '#eab308' },
@@ -26,7 +28,7 @@ function switchTo(version) {
   // Always navigate to the version's introduction page to avoid 404s.
   // Different versions have different page structures, so trying to map
   // the current page path into a different version causes SPA 404 errors.
-  window.location.href = version.prefix + 'introduction'
+  window.location.href = version.prefix + (version.entry ?? 'introduction')
 }
 
 function handleClickOutside(e) {

docs/public/index.html

@@ -398,7 +398,7 @@
 <nav id="site-nav">
   <a href="/" class="nav-brand">CONCEPT KERNEL</a>
   <div class="nav-links">
-    <a href="/v3.7/introduction" class="nav-link">Docs</a>
+    <a href="/v3.9/introduction" class="nav-link">Docs</a>
     <a href="#notation" class="nav-link">Notation</a>
     <a href="#epochs" class="nav-link">Epochs</a>
     <a href="/browse/index.html" class="nav-link">Browser</a>
@@ -652,7 +652,7 @@ <h2>The protocol measures<br>its own <em>becoming</em></h2>
       <div>
         <span class="ep-name"><em>Critical Isolation</em> — sovereignty on a proven engine</span>
         <p class="ep-what">The kernel takes root in <strong>pgRDF</strong> — RDF, SPARQL, SHACL and OWL-RL as a native PostgreSQL extension — adopting its proven discipline for storage and memory: an engine that ingested the <strong>8.2-billion-triple Wikidata</strong> dump into one instance, no sidecar store, no second service. On that engine the kernel raises a single typed door over NATS-WSS, and every landing runs validate → seal → HMAC-chained ledger → verifiable proof, in one transaction.</p>
-        <span class="ep-stats"><b>8.2B</b> triples proven · <b>1</b> door · <b>12</b> invariants · <b>31</b> attested releases, v0.1.0 → v0.4.15</span>
+        <span class="ep-stats"><b>8.2B</b> triples proven · <b>1</b> door · <b>12</b> invariants · <b>33</b> attested releases, v0.1.0 → v0.4.17</span>
       </div>
     </div>
     <div class="epoch">
@@ -677,9 +677,9 @@ <h2>The protocol measures<br>its own <em>becoming</em></h2>
     <div class="stat"><span class="stat-n">1</span><span class="stat-l">typed door<br>ckp.dispatch</span></div>
     <div class="stat"><span class="stat-n">17</span><span class="stat-l">verbs — the whole<br>client vocabulary</span></div>
     <div class="stat"><span class="stat-n">12</span><span class="stat-l">invariants<br>demonstrated</span></div>
-    <div class="stat"><span class="stat-n">56</span><span class="stat-l">versioned releases<br>across the fleet</span></div>
+    <div class="stat"><span class="stat-n">58</span><span class="stat-l">versioned releases<br>across the fleet</span></div>
   </div>
-  <p style="font-family:'JetBrains Mono',monospace;font-size:.62rem;color:var(--text3);text-align:center;letter-spacing:.08em">runtime v0.1.0→v0.4.15 (31) · client v1.0.0→v1.5.3 (25) · CI-built, SLSA-attested heads, verified before publication</p>
+  <p style="font-family:'JetBrains Mono',monospace;font-size:.62rem;color:var(--text3);text-align:center;letter-spacing:.08em">runtime v0.1.0→v0.4.17 (33) · client v1.0.0→v1.5.3 (25) · CI-built, SLSA-attested heads, verified before publication</p>
 </section>
 
 
@@ -740,7 +740,7 @@ <h2>The capability<br><em>shows itself</em></h2>
     <div class="choice">
       <span class="ch-key">the runtime</span>
       <span class="ch-title">pgCK — the kernel inside PostgreSQL</span>
-      <p class="ch-desc"><a href="https://github.com/styk-tv/pgCK">styk-tv/pgCK</a> · extension v0.4.15 · PostgreSQL 14–17, both architectures · every release provenance-attested and verified before publication.</p>
+      <p class="ch-desc"><a href="https://github.com/styk-tv/pgCK">styk-tv/pgCK</a> · extension v0.4.17 · PostgreSQL 14–17, both architectures · every release provenance-attested and verified before publication.</p>
     </div>
     <div class="choice">
       <span class="ch-key">the client</span>
@@ -783,7 +783,7 @@ <h2>The capability<br><em>shows itself</em></h2>
 <div class="cta-block">
   <span class="cta-quote">"<strong>Seal the gesture, derive the weight.</strong> The board is driven by the score, the score by sealed signal — and the rule that drives it evolves only by consensus."</span>
   <div class="cta-row">
-    <a href="https://conceptkernel.org/v3.7/introduction" class="btn-p">Read the Specification</a>
+    <a href="https://conceptkernel.org/v3.9/introduction" class="btn-p">Read the Specification</a>
     <a href="https://github.com/sporaxis-com/oci-germination/tree/main/examples/hello-kernel" class="btn-s">Run a Kernel</a>
     <a href="https://conceptkernel.org/browse/index.html" class="btn-s">Browse the Ontology</a>
     <a href="https://discord.gg/sTbfxV9xyU" class="btn-s">Join the Consensus</a>

docs/public/llms.txt

@@ -5,7 +5,35 @@
 An open protocol for sovereign, semantic, self-governing state. Every kernel is a Material Entity (BFO:0000040) whose types are ontology (RDF/OWL/SHACL), whose every change is shape-gated, sealed, and proof-chained (validate → seal → HMAC-chained ledger → verifiable proof, in one transaction), and whose only interface is a single typed verb: ckp.dispatch(verb, urn, payload, identity) over NATS-WSS. A kernel changes its own types by consensus (propose → vote → apply); each applied change advances its epoch ε.
 
 ## Current version
-CKP v3.9.1 (Critical Isolation) is the current protocol epoch, implemented and shipped: the pgCK runtime (PostgreSQL extension, https://github.com/styk-tv/pgCK, extension v0.4.15, attested) and the dispatch-only client cklib (https://github.com/ConceptKernel/CK.Lib.Js, v1.5.3). The v3.7 set below is the last fully published narrative specification on this site; the v3.9.1 documentation set is in progress (tracked at https://github.com/ConceptKernel/conceptkernel.github.io/milestone/1). CKN — Concept Kernel Notation, CK(K) ≜ ⟪ χ · ρ · σ · α · γ · π · δ · φ ⟫ε — is the v3.10 design direction: https://conceptkernel.org/#notation
+CKP v3.9.1 (Critical Isolation) is the current protocol epoch, implemented and shipped: the pgCK runtime (PostgreSQL extension, https://github.com/styk-tv/pgCK, extension v0.4.17, attested) and the dispatch-only client cklib (https://github.com/ConceptKernel/CK.Lib.Js, v1.5.3). The v3.9.1 documentation set is published (key pages below); the v3.7 set remains browseable as a previous epoch. CKN — Concept Kernel Notation, CK(K) ≜ ⟪ χ · ρ · σ · α · γ · π · δ · φ ⟫ε — is the v3.10 design direction (in design): https://conceptkernel.org/v3.10/
+
+## The distinction the protocol rests on
+A caller reaches a kernel through a VERB, not a query surface. A query surface (SQL/SPARQL/GraphQL/ORM) lets the caller author logic the engine runs — unbounded, unenumerable. A verb is a finite, named, pre-declared operation with a typed payload the engine knows before it runs. CKP ships a closed set of ~17 verbs and no query surface; even query-shaped verbs (instance.query, concept.match) bind typed parameters into logic sealed at germination. This is the precondition that makes grants enumerable and shapes unbypassable — the whole of Critical Isolation. https://conceptkernel.org/v3.9/verb-vs-query-surface
+
+## Key pages (v3.9.1 — current set)
+- Introduction: https://conceptkernel.org/v3.9/introduction
+- A Verb, Not a Query Surface: https://conceptkernel.org/v3.9/verb-vs-query-surface
+- Critical Isolation (the three-ring architecture): https://conceptkernel.org/v3.9/critical-isolation
+- What a Concept Kernel Is: https://conceptkernel.org/v3.9/concept-kernel
+- The One Door (ckp.dispatch): https://conceptkernel.org/v3.9/the-door
+- Seal, Ledger, Proof: https://conceptkernel.org/v3.9/seal-and-proof
+- Shapes (σ): https://conceptkernel.org/v3.9/shapes
+- Affordances — the closed verb vocabulary (α): https://conceptkernel.org/v3.9/affordances
+- Governance (propose → vote → apply): https://conceptkernel.org/v3.9/governance
+- Grants (γ): https://conceptkernel.org/v3.9/grants
+- Epochs (ε): https://conceptkernel.org/v3.9/epochs
+- Naming — the developer writes URN: https://conceptkernel.org/v3.9/naming
+- The Core Vocabulary: https://conceptkernel.org/v3.9/ontology
+- The Client (cklib): https://conceptkernel.org/v3.9/client
+- Quickstart — zero to sealed state: https://conceptkernel.org/v3.9/quickstart
+- The Fleet (ecosystem): https://conceptkernel.org/v3.9/ecosystem
+- Changelog: https://conceptkernel.org/v3.9/changelog
+
+## v3.10 — CKN (in design)
+- Overview: https://conceptkernel.org/v3.10/
+- Concept Kernel Notation: https://conceptkernel.org/v3.10/concept-kernel-notation
+- Notation In, Construct Out: https://conceptkernel.org/v3.10/assembled-constructs
+- The Scoring Loop: https://conceptkernel.org/v3.10/scoring-loop
 
 ## Runtime core vocabulary (stable namespace, enforced at every sealed write)
 - Namespace: https://conceptkernel.org/ontology/v3.8/core#
@@ -20,7 +48,7 @@ CKP v3.9.1 (Critical Isolation) is the current protocol epoch, implemented and s
 - v3.6 (2026 Q2): 119 classes, 37 pages — the full specification
 - v3.7 (2026 Q2): 120 classes, 9 shapes, 31 pages, 20 checks, 5 edge predicates — the refined canon
 - v3.8: the core vocabulary's permanent namespace (see above)
-- v3.9 (2026 Q2): Critical Isolation — the kernel moves into PostgreSQL; 1 door; 31 attested runtime releases in 34 days (v0.1.0 → v0.4.15)
+- v3.9 (2026 Q2): Critical Isolation — the kernel takes root in pgRDF (native PostgreSQL extension), proven at the 8.2B-triple Wikidata scale; 1 door; 33 attested runtime releases (v0.1.0 → v0.4.17)
 - v3.9.1 (2026 Q2): the client meets the server — 17 verbs, 0 query surfaces, urn:ckp: naming proven live
 - v3.10 (in design): CKN, the notation; the scoring loop (signal.cast, concept.score) — tracked in public issues