site: show source installation and reviewed project setup

docs/TEST_INTEGRITY.md

@@ -1,5 +1,30 @@
 # Test Integrity Notes
 
+## 2026-10-01 — Visible source installation instructions
+
+```yaml
+test_integrity_note:
+  change_type: ["new_tests"]
+  scenarios:
+    - id: SCN-site-install
+      given: "A new visitor has no TORCH CLI and the product is experimental."
+      when: "They follow the landing page installation entry point."
+      then: "Visible prerequisites and rewrite-source commands install into an isolated prefix; review and startup remain separate."
+  observable_outcomes:
+    - "Installation section and working CLI bin mapping are present."
+    - "Source/candidate distinction, approval steps and manual pause are explicit."
+  determinism_controls:
+    - "Read repository HTML and package metadata; no model or network invocation."
+  anti_cheat_rationale:
+    prevents:
+      - "Assuming torch is already installed"
+      - "Linking only to a default-branch legacy guide"
+      - "Hidden automatic startup or global existing-launcher overwrite"
+  relaxation:
+    did_relax_any_assertion: false
+    if_true_explain_spec_basis: ""
+```
+
 ## 2026-09-30 — Bounded routine coordination
 
 ```yaml

site/index.html

@@ -18,7 +18,7 @@
       <a href="#system">How it works</a>
       <a href="/console.html?demo=1" target="_blank" rel="noopener">View dashboard demo</a>
       <a href="#evidence">Evidence</a>
-      <a href="#start">Get started</a>
+      <a href="#install">Install</a>
       <a href="/console">Fleet Console</a>
     </nav>
   </header>
@@ -31,7 +31,7 @@
         <p class="lede">TORCH studies your repository and goals, then proposes the sessions your work needs. Choose Codex, Claude, Pi, or another local runtime for each role—and keep the team coordinated as the project changes.</p>
         <p class="truth-note">Experimental alpha.3. The TORCH-on-TORCH self-host pilot is Codex-run. Built-in Codex, Claude, and Pi adapters exist; live mixed-provider swaps and production use remain unqualified.</p>
         <div class="hero-actions">
-          <a class="primary-action" href="#start">See how to start</a>
+          <a class="primary-action" href="#install">Install TORCH</a>
           <a class="text-action" href="https://github.com/PR0M3TH3AN/TORCH/blob/rewrite/portable-agent-fleet/README.md">Source and install guide</a>
         </div>
       </div>
@@ -96,7 +96,7 @@
     <section class="evidence-section" id="evidence">
       <div class="section-intro">
         <h2>Trust comes from evidence.</h2>
-        <p>The active pilot uses the accepted immutable 0.1.0-alpha.3 artifact from source 28c. Later canonical source at 0c2 is not installed automatically. The user-system schedule timer is installed and running; automatic AI wakes remain paused. Pipeline execution, isolated candidate-executor assurance, and production acceptance remain open.</p>
+        <p>The self-host pilot uses the accepted immutable 0.1.0-alpha.3 artifact from source 28c. Later canonical source at 0c2 is not installed automatically. The fleet and its installed user-system schedule timer are manually paused; automatic AI wakes remain paused. Pipeline execution, isolated candidate-executor assurance, and production acceptance remain open.</p>
       </div>
       <div class="ledger" role="table" aria-label="Current TORCH qualification ledger">
         <div class="ledger-row ledger-head" role="row"><span role="columnheader">Capability</span><span role="columnheader">Current evidence</span><span role="columnheader">State</span></div>
@@ -104,14 +104,33 @@
         <div class="ledger-row" role="row"><span data-label="Capability">Shared messages, status, and tasks</span><span data-label="Evidence">Durable local control plane</span><strong class="proven" data-label="State">Proven locally</strong></div>
         <div class="ledger-row" role="row"><span data-label="Capability">Exact-commit checks and serialized integration</span><span data-label="Evidence">Implemented coordination foundation</span><strong class="pending" data-label="State">Candidate executor and fence assurance open</strong></div>
         <div class="ledger-row" role="row"><span data-label="Capability">Codex, Claude, Pi, and local adapters</span><span data-label="Evidence">Built-in adapters; live mixed-provider swap unqualified</span><strong class="pending" data-label="State">Live provider gate open</strong></div>
-        <div class="ledger-row" role="row"><span data-label="Capability">TORCH-on-TORCH self-host pilot</span><span data-label="Evidence">Codex-run; accepted alpha.3 artifact is source 28c; canonical source 0c2 is not auto-installed</span><strong class="pending" data-label="State">Pilot active; full qualification open</strong></div>
+        <div class="ledger-row" role="row"><span data-label="Capability">TORCH-on-TORCH self-host pilot</span><span data-label="Evidence">Codex-run; accepted alpha.3 artifact is source 28c; canonical source 0c2 is not auto-installed</span><strong class="pending" data-label="State">Pilot paused; full qualification open</strong></div>
         <div class="ledger-row" role="row"><span data-label="Capability">COMBATRIG import</span><span data-label="Evidence">Read-only inventory; ownership review needed</span><strong class="pending" data-label="State">Migration gated</strong></div>
       </div>
     </section>
 
+    <section class="start-section install-section" id="install" aria-labelledby="install-title">
+      <div>
+        <h2 id="install-title">Install TORCH.</h2>
+        <p>Experimental source install for developers. You need Git, Node.js 22 or later, and npm. Linux is the current self-host pilot environment; other platforms are not yet qualified.</p>
+        <p>Clone the rewrite branch, not the repository’s default branch. This installs the current development source, not the separately accepted pilot artifact. There is no stable release install promised here.</p>
+        <p>The isolated prefix below avoids overwriting an existing TORCH installation. The PATH change lasts for this terminal; add it to your shell configuration only if you want to keep using this source install.</p>
+      </div>
+      <div class="command-panel">
+        <pre><code id="install-command">git clone --branch rewrite/portable-agent-fleet \
+  https://github.com/PR0M3TH3AN/TORCH.git
+cd TORCH
+npm ci
+npm install --global --prefix "$HOME/.local/torch-source" .
+export PATH="$HOME/.local/torch-source/bin:$PATH"
+torch --help</code></pre>
+        <p class="install-note">Review source and dependencies before installing. These commands install the CLI only; they do not create or start a fleet. Already have TORCH? Use your existing installation’s reviewed update flow instead.</p>
+      </div>
+    </section>
+
     <section class="start-section" id="start">
       <div>
-        <h2>Start with the project you already have.</h2>
+        <h2>Then choose your project.</h2>
         <p>Point TORCH at a Git repository and, if useful, a product specification. It prepares an evidence brief for a fleet proposal; installing or starting the team waits for your review and approval.</p>
       </div>
       <div class="command-panel">
@@ -127,6 +146,28 @@
         <button class="copy-button" id="copy-command" type="button">Copy command</button>
       </div>
     </section>
+    <section class="start-section install-section" aria-labelledby="setup-title">
+      <div>
+        <h2 id="setup-title">Review the team before it runs.</h2>
+        <p>After installing the CLI, generate a baseline proposal from your project directory. Review domains, ownership, checks and unresolved gaps. In the proposal, set <code>review.status</code> to <code>approved</code> and record <code>review.reviewedBy</code> and <code>review.reviewedAt</code> only after your review.</p>
+        <p>The example selects Codex. Install and sign in to your chosen agent CLI separately; model access depends on your account. Each session’s runtime and model can be changed later.</p>
+        <p>Preview installation and worktree setup first. Setup creates configuration and worktrees but does not launch agents. Starting agents and installing host schedules are separate approvals.</p>
+        <p><a href="https://github.com/PR0M3TH3AN/TORCH/blob/rewrite/portable-agent-fleet/README.md">Read the full setup, runtime configuration and uninstall guide</a>.</p>
+      </div>
+      <div class="command-panel">
+        <pre><code>cd /path/to/project
+torch design --output fleet-proposal.json --json
+# Review and approve fleet-proposal.json before continuing.
+torch install --proposal fleet-proposal.json \
+  --runtime codex --dry-run --json
+torch install --proposal fleet-proposal.json \
+  --runtime codex --yes --json
+torch setup --dry-run --json
+torch setup --yes --json
+torch up --fresh --dry-run --json</code></pre>
+        <p class="install-note">The last command previews startup only. When you are ready to use your provider account, explicitly run <code>torch up --fresh --yes</code>. Check the plan and required gates first.</p>
+      </div>
+    </section>
   </main>
 
   <footer>

site/styles.css

@@ -131,6 +131,10 @@ h3 { font-size: 1.55rem; line-height: 1.15; }
 
 .start-section { display: grid; grid-template-columns: .8fr 1.2fr; gap: clamp(3rem, 8vw, 9rem); padding: clamp(5rem, 9vw, 9rem) clamp(1.25rem, 6vw, 7rem); }
 .start-section p { color: var(--muted); max-width: 600px; }
+.install-section { border-top: 1px solid var(--line); }
+.install-section .command-panel { align-self: start; min-width: 0; }
+.install-section pre { white-space: pre-wrap; overflow-wrap: anywhere; }
+.install-note { padding: 0 1.6rem 1.2rem; margin: 0; font-size: .95rem; }
 .command-panel { background: var(--deep); color: var(--ink); box-shadow: var(--shadow); }
 .command-tabs { display: flex; border-bottom: 1px solid var(--line); }
 .command-tabs button { border: 0; border-right: 1px solid var(--line); background: transparent; color: var(--muted); padding: .75rem 1rem; cursor: pointer; }

test/fleet/site-install.test.mjs

@@ -0,0 +1,28 @@
+import assert from 'node:assert/strict';
+import { readFileSync } from 'node:fs';
+import test from 'node:test';
+
+test('SCN-site-install: a visitor can install the development CLI before project setup without starting agents', () => {
+  const html = readFileSync(new URL('../../site/index.html', import.meta.url), 'utf8');
+  const pkg = JSON.parse(readFileSync(new URL('../../package.json', import.meta.url), 'utf8'));
+  assert.match(html, /href="#install">Install TORCH<\/a>/);
+  assert.match(html, /id="install" aria-labelledby="install-title"/);
+  assert.match(html, /Experimental source install/);
+  assert.match(html, /Git, Node\.js 22 or later, and npm/);
+  const install = html.match(/<code id="install-command">([\s\S]*?)<\/code>/)?.[1];
+  assert.ok(install, 'installation instructions are directly visible');
+  assert.match(install, /git clone --branch rewrite\/portable-agent-fleet/);
+  assert.match(install, /https:\/\/github\.com\/PR0M3TH3AN\/TORCH\.git/);
+  assert.match(install, /cd TORCH\nnpm ci\nnpm install --global --prefix "\$HOME\/\.local\/torch-source" \./);
+  assert.match(install, /export PATH="\$HOME\/\.local\/torch-source\/bin:\$PATH"\ntorch --help/);
+  assert.equal(pkg.bin.torch, './bin/torch.mjs');
+  assert.doesNotMatch(install, /torch up|--force|sudo|curl.*\|/);
+  assert.match(html, /do not create or start a fleet/);
+  assert.match(html, /not the separately accepted pilot artifact/);
+  assert.match(html, /review\.status[\s\S]*review\.reviewedBy[\s\S]*review\.reviewedAt/);
+  assert.match(html, /torch install --proposal fleet-proposal\.json[\s\S]*--runtime codex --dry-run --json/);
+  assert.match(html, /torch setup --dry-run --json[\s\S]*torch setup --yes --json/);
+  assert.match(html, /torch up --fresh --dry-run --json/);
+  assert.match(html, /Starting agents and installing host schedules are separate approvals/);
+  assert.match(html, /fleet and its installed user-system schedule timer are manually paused/);
+});