@@ -17,20 +17,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Memory and config failures no longer silently dropped**: stream-loop memory persists (assistant learnings, skills, conversation summaries, insights) and the self-improve lesson store log failures via slog, corrupt lesson stores are reported, and the config panel surfaces failed `provider` setting saves instead of ignoring them.
 
 ### Changed
-- **Renamed graycode back to hawk**: module `github.com/GrayCodeAI/hawk`, binary `hawk`, `HAWK_*` env vars, `~/.hawk` config, `cmd/hawk`, `internal/hawkerr`, and `npm/hawk*` packages, matching the `GrayCodeAI/hawk` repository name. The router dependency is `github.com/GrayCodeAI/eyrie` again (`Eyrie*` types, `eyrieengine`, `EYRIE_*` env vars, `~/.eyrie`). Hard break with no `~/.graycode` migration. `graycode-skills`, `graycode-platform`, `graycode-cloud` and the `graycode-cloud.graph/v1` schema keep their names.
 - **Makefile lint pin matches CI**: `make lint`/`lint-fix`/`setup` install `golangci-lint@v2.1.0` (was `@latest`), the same version CI enforces.
 - **Docs truth and housekeeping**: SECURITY.md/CONTRIBUTING.md now describe the actual Go toolchain (golangci-lint, go vet, govulncheck) instead of the polyglot template's ruff/mypy/pip-audit/pnpm-lock language, CONTRIBUTING documents `make setup`/`boundaries`/`test-10x`/`smoke`, and the planning docs (`SPEC_DRIVEN_PLAN.md`, `SPEC_DRIVEN_PHASE2_PLAN.md`, `internal/engine/REFACTOR_PLAN.md`) moved to `docs/plans/`.
 
 ## [0.2.0] — 2026-07-13
 
 ### Changed
-- **Graycode/GraycodeRouter production boundary completed**: Graycode owns the product face,
-  sessions, tools, permissions, and public schemas while GraycodeRouter v0.2.1 owns
+- **Hawk/Eyrie production boundary completed**: Hawk owns the product face,
+  sessions, tools, permissions, and public schemas while Eyrie v0.2.1 owns
   credentials, catalog resolution, provider transport, resilience, and usage
-  telemetry behind the stable `graycode-router/engine` facade.
+  telemetry behind the stable `eyrie/engine` facade.
 - **Provider routing and usage attribution hardened**: resolved route changes,
   continuation segments, and terminal usage are propagated without duplicate
-  accounting, and production GraycodeRouter calls use exactly one resilience layer.
+  accounting, and production Eyrie calls use exactly one resilience layer.
 - **Daemon conversations are durable**: JSON and SSE chat requests create or
   resume persisted sessions, expose stable session IDs, preserve metadata, and
   distinguish invalid, missing, and corrupt state.
@@ -41,18 +40,18 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - **Permission system unified into two independent axes**: the old `PermissionMode` (`default`/`acceptEdits`/`bypassPermissions`/`dontAsk`/`plan`) is removed. `/autonomy` now controls the 5-tier trust ladder (`Always Ask`/`Scout`/`Builder`/`Operator`/`Autonomous`, bare `/autonomy` opens a picker), and `/spec` controls an independent, orthogonal spec-driven workflow gate (`Specify → Plan → Tasks → ApproveImplementation`, bare `/spec` opens a picker) that blocks Write/Edit/Bash regardless of trust tier — including at Autonomous. Fixes a real bug where the old Plan Mode's write-block could be silently bypassed at high autonomy tiers, since tier and mode were checked independently with no ordering guarantee.
 - **Fixed `PermissionService.SetAutonomy`/`Autonomy()`**: previously wrote to/read from a shadow field the permission engine's `CheckTool` never consulted, meaning autonomy tier changes may not have reliably taken effect. Now both read/write the same `PermissionEngine.Autonomy` field the check logic uses.
 - **`--permission-mode` CLI flag removed**; `--dangerously-skip-permissions` unchanged (now maps to the Autonomous tier). New `--dry-run` flag added as an unconditional kill switch (deny every tool call, regardless of tier or spec stage) — replaces `dontAsk`'s hard-lockout role.
-- **Version re-baselined to `0.1.0`** across `cmd/graycode/main.go`, `cmd/daemon.go`,
-  `flake.nix`, `.github/workflows/release.yml`, and the `update`/daemon test suites, aligning graycode
-  with the rest of the GrayCodeAI ecosystem (`graycode-router`, `shrike`, `harrier`, `kestrel`, `merlin`).
-- **Architecture boundary hardening**: Graycode now owns runtime request/response DTOs, transport config/provider seams, and review/verification product-boundary contracts, with `graycode-router/client` usage restricted to internal adapters and guarded in CI.
-- **`shared/types` removed**: Graycode no longer ships the old shared type path, and local boundary checks now block any attempt to reintroduce it.
+- **Version re-baselined to `0.1.0`** across `cmd/hawk/main.go`, `cmd/daemon.go`,
+  `flake.nix`, `.github/workflows/release.yml`, and the `update`/daemon test suites, aligning hawk
+  with the rest of the GrayCodeAI ecosystem (`eyrie`, `shrike`, `harrier`, `kestrel`, `merlin`).
+- **Architecture boundary hardening**: Hawk now owns runtime request/response DTOs, transport config/provider seams, and review/verification product-boundary contracts, with `eyrie/client` usage restricted to internal adapters and guarded in CI.
+- **`shared/types` removed**: Hawk no longer ships the old shared type path, and local boundary checks now block any attempt to reintroduce it.
 
 ### Added
-- **Spec-driven workflow (`/spec`)**: independent, orthogonal permission gate that walks the model through `Specify → Plan → Tasks`, writing real `spec.md`/`plan.md`/`tasks.md` files to `.graycode/specs/<slug>/`, and requires explicit `ApproveImplementation` approval (always prompts, at any trust tier) before Write/Edit/Bash unlock. The approval prompt shows the actual written content, not a blind yes/no.
+- **Spec-driven workflow (`/spec`)**: independent, orthogonal permission gate that walks the model through `Specify → Plan → Tasks`, writing real `spec.md`/`plan.md`/`tasks.md` files to `.hawk/specs/<slug>/`, and requires explicit `ApproveImplementation` approval (always prompts, at any trust tier) before Write/Edit/Bash unlock. The approval prompt shows the actual written content, not a blind yes/no.
 - **`/autonomy` and `/spec` picker overlays**: bare `/autonomy` or `/spec` opens an arrow-key-navigable, filterable picker (Esc/Enter) instead of requiring subcommand syntax; typed subcommands (`/autonomy tier scout`, `/spec status`, etc.) still work.
 - **Watch mode (`--watch`)**: file-watcher loop that acts on `AI!` (do-now) and `AI?` (answer) code comments. Off by default.
-- **GitHub Action** (`.github/actions/graycode`): interactive mode on `@graycode` mentions, automation mode on labeled issues/PRs, and skill dispatch for `/`-prefixed prompts.
-- **Messaging gateways**: opt-in Telegram, Discord, and Slack gateways on the daemon for chatting with graycode from messaging apps.
+- **GitHub Action** (`.github/actions/hawk`): interactive mode on `@hawk` mentions, automation mode on labeled issues/PRs, and skill dispatch for `/`-prefixed prompts.
+- **Messaging gateways**: opt-in Telegram, Discord, and Slack gateways on the daemon for chatting with hawk from messaging apps.
 - **AST repo-map** (`internal/context/repomap`): structural repository map for richer model context.
 - **Auto codebase analysis on first run** (`internal/autoinit`): opt-in seeding of project context.
 - **Auto-lint / auto-fix cycle**: runs the matching linter after edits and iterates on fixes with bounded retries (opt-in).
@@ -74,7 +73,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Added — Round 2 ecosystem improvements (2026-06-01)
 - **Cavecrew personas** (`internal/multiagent/agents`): three new
-  built-in personas built into GrayCode Graycode
+  built-in personas built into GrayCode Hawk
   (`cavecrew-investigator`, `cavecrew-builder`, `cavecrew-reviewer`).
   Each enforces a strict output format so downstream agents can parse
   outputs mechanically:
@@ -113,7 +112,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   and a command label. API: `Record`, `AggregateForSession`,
   `ListForSession`, `PruneForSession`. Scoped to a single session so
   callers can selectively compact their own history. Companion to
-  shrike's `internal/tracking.Tracker` (shrike tracks globally, graycode tracks
+  shrike's `internal/tracking.Tracker` (shrike tracks globally, hawk tracks
   per-session).
 
 ### Added — Production Hardening (top-50 OSS parity)
@@ -148,16 +147,16 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ## [0.4.0] — 2026-05-05
 
 ### Added
-- **Exec Subcommand**: `graycode exec "prompt"` — full engine non-interactive mode with `--output-format json`, `--auto` autonomy levels, `--worktree` isolation, `--agent` personas, `--session-id` resume, stdin piping
-- **Daemon Server**: `graycode daemon start/stop/status` — background HTTP server with JSON + SSE streaming on `/v1/chat`, `/v1/health`, `/v1/sessions`
-- **Mission Mode**: `graycode mission "prompt"` — multi-agent orchestration decomposing work into parallel features executed in isolated git worktrees. `--dry-run` for planning only
-- **Session Search**: `graycode search "query"` — full-text search across all saved sessions with `--json` output
-- **Custom Agents**: `graycode agent list/create/show/remove` — markdown persona definitions in `~/.graycode/agents/` with YAML frontmatter (name, description, model)
-- **Snapshot System**: Shadow git tracking of every file change. `graycode snapshot list/restore/diff` + `/snapshot` slash command. Auto-snapshots on every Write/Edit tool call
+- **Exec Subcommand**: `hawk exec "prompt"` — full engine non-interactive mode with `--output-format json`, `--auto` autonomy levels, `--worktree` isolation, `--agent` personas, `--session-id` resume, stdin piping
+- **Daemon Server**: `hawk daemon start/stop/status` — background HTTP server with JSON + SSE streaming on `/v1/chat`, `/v1/health`, `/v1/sessions`
+- **Mission Mode**: `hawk mission "prompt"` — multi-agent orchestration decomposing work into parallel features executed in isolated git worktrees. `--dry-run` for planning only
+- **Session Search**: `hawk search "query"` — full-text search across all saved sessions with `--json` output
+- **Custom Agents**: `hawk agent list/create/show/remove` — markdown persona definitions in `~/.hawk/agents/` with YAML frontmatter (name, description, model)
+- **Snapshot System**: Shadow git tracking of every file change. `hawk snapshot list/restore/diff` + `/snapshot` slash command. Auto-snapshots on every Write/Edit tool call
 - **Waza Workflows**: `/think` (plan before code), `/hunt` (root-cause diagnosis), `/check` (pre-ship review with auto-fix), `/design` (screenshot-driven UI iteration)
 - **Structured Compaction**: Summary template with Goal/Constraints/Progress/Files/Decisions/Errors/Instructions/Next sections for better intent preservation
 - **Doom Loop Detection**: Lowered threshold to 3 (from 4). Two-tier escalation: first detection injects redirect prompt, doom loop hard-stops with "ask user for help"
-- **Session Persistence for exec**: All exec runs saved to `~/.graycode/sessions/` and searchable via `graycode search`
+- **Session Persistence for exec**: All exec runs saved to `~/.hawk/sessions/` and searchable via `hawk search`
 
 ### Packages Added
 - `mission/` — Multi-agent orchestration with worktree-based parallel workers
@@ -232,5 +231,5 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 ### Added
 - Project scaffold with cobra CLI and Bubbletea TUI
 - Interactive chat REPL with textarea input, spinner, lipgloss styling
-- graycode-router wired as LLM provider dependency
+- eyrie wired as LLM provider dependency
 - GitHub Actions CI
@@ -79,8 +79,8 @@ hawk models refresh
 - legacy `~/.hawk/env` or `~/.hawk/.env` files should be migrated away
 - sensitive files like provider config and SSH paths should be blocked from agent reads
 
-Eyrie resolves provider state from `EYRIE_CONFIG_DIR` first, then
-`HAWK_CONFIG_DIR` for compatibility, then the platform user-config directory.
+Eyrie resolves provider state from `EYRIE_CONFIG_DIR` first, then the
+platform user-config directory.
 Hawk protects that resolved path even when it is customized or symlinked.
 
 If Hawk detects old plaintext secrets, run Hawk once and complete `/config`, or remove the secret fields manually after backing up the file.
 
@@ -152,7 +152,7 @@ setting; the unified key is rendered down to it.
 | `gateway.model_catalog.path_env`     | `EYRIE_MODEL_CATALOG_PATH`           |
 | `gateway.model_catalog.url_env`      | `EYRIE_MODEL_CATALOG_URL`            |
 | `gateway.model_catalog.refresh`      | `EYRIE_MODEL_CATALOG_REFRESH` / `HAWK_AUTO_REFRESH_CATALOG` / `HAWK_CATALOG_REFRESH_ALWAYS` |
-| `gateway` config dir                 | `HAWK_CONFIG_DIR` (default `~/.eyrie`) |
+| `gateway` config dir                 | `EYRIE_CONFIG_DIR` (default `<user config dir>/eyrie`) |
 
 ### harrier: memory
 
 
@@ -7,8 +7,8 @@ depend on.
 **Evidence base:** `docs/RESEARCH.md`, `docs/COMPETITIVE.md`, `docs/plans/competitive-gap-*.md`
 (top-20 OSS + top-20 arXiv papers, 2026-09-09), source audits of all 4 repos,
 and web research (2026-09-09). This document supersedes the stale
-`IMPLEMENTATION-ROADMAP.md` (which still references the retired `starling` /
-`hawk` / `eyrie` names and a 2026-07-05 baseline).
+`IMPLEMENTATION-ROADMAP.md` (which still references the retired `starling`
+name and a 2026-07-05 baseline).
 
 > **Execution status: Phases 0–5 DONE (2026-09-09).** Phase 0 (integrity),
 > Phase 1 (restore the 5 engines), Phase 2 (product honesty + verification
 
@@ -99,8 +99,7 @@ required for users, and neither provisioning path enables host execution.
 Eyrie owns the provider-state path. Resolution order is:
 
 1. `EYRIE_CONFIG_DIR/provider.json`
-2. `HAWK_CONFIG_DIR/provider.json` (compatibility fallback)
-3. the platform user-config directory under `hawk/provider.json`
+2. the platform user-config directory under `eyrie/provider.json`
 
 Hawk's Read/Edit/Write and Bash safety checks protect the resolved path,
 including a custom or symlinked `EYRIE_CONFIG_DIR`; protection is not limited