@@ -32,8 +32,8 @@ TNB is a tsgo-backed TypeScript fork: upstream `microsoft/TypeScript` and `micro
 
 - `npm run check:lib` / `check:enums` / `check:sourcefile-guard`
 - `npm run check:go-as-guards` — Go-side Type-cast guard: every `Type.As*()` chain deref and unguarded nil-family assignment in the tsgo patches/overlay is fixed or carries an inline `// asguard:exempt` reason (issues #69/#70 bug class)
-- Witnesses: 86 across wg0–wg6, all wired in CI (`.github/workflows/ci.yml`), single source of truth `tools/ci-witness-groups.mjs` — `node tools/ci-witness-groups.mjs all` validates dup/missing/orphan/local-only/baseline wiring and emits the matrix (`matrix` mode feeds the ci.yml prepare job).
-- Local-only — run on demand, not in the matrix (reasons in the matrix header comment): framework-checks, generation-retention, napi-fuzz, completion-latency, postedit-latency, perf-edit-rpc, perf-qi-rpc, typing-cpuprof.
+- Witnesses: 89 across wg0–wg6, all wired in CI (`.github/workflows/ci.yml`), single source of truth `tools/ci-witness-groups.mjs` — `node tools/ci-witness-groups.mjs all` validates dup/missing/orphan/local-only/baseline wiring and emits the matrix (`matrix` mode feeds the ci.yml prepare job).
+- Local-only — run on demand, not in the matrix (measurement, not pass/fail): completion-latency, postedit-latency, perf-edit-rpc, perf-qi-rpc, typing-cpuprof.
 - Locally hostable gates: `check:sim-nav` and `check:sourcefile-guard` need a volar checkout. ci.yml's recipe, which is the one to copy (`VOLAR_SHA` is the ci.yml env pin — set it in your shell, a shallow clone does not carry the tag):
   ```sh
   export VOLAR_SHA=<.github/workflows/ci.yml value>
@@ -69,9 +69,9 @@ TNB is a tsgo-backed TypeScript fork: upstream `microsoft/TypeScript` and `micro
   - `triage-cli-only-flags` — CLI-only options (`--strict`, `--target`, …) ride updateSnapshot to Go; diagnostics must move like stock
   - `triage-electron-abi` — issue #44: win32 bridge.node loads under Electron-as-node (wired out-of-matrix: ci.yml build job + nightly test-bridge-win32)
   - `triage-external-edits` — issue #49: disk rewrites reach tsgo across estree/tsserver/tsc-watch host classes (tsc-watch: the thin program registers a watcher per program file — it never passes files through getSourceFile, where stock creates them)
-  - `triage-generation-retention` (local-only) — 100 edit+F12 rounds hold a ≈0 heapUsed slope (no closure pins a generation island)
-  - `triage-framework-checks` (local-only) — svelte-check/astro-check/glint vs stock parity (fixtures under /tmp/tnb-fw-fixtures)
-  - `triage-napi-fuzz` (local-only) — NAPI payload fuzz probe
+  - `triage-generation-retention` — 100 edit+F12 rounds hold a ≈0 heapUsed slope (no closure pins a generation island)
+  - `triage-framework-checks` — svelte-check/astro-check/glint vs stock parity (pinned framework versions installed under /tmp/tnb-fw-fixtures against stock typescript, then relinked to TNB/stock per run)
+  - `triage-napi-fuzz` — NAPI payload fuzz: echo round-trips byte-identical on the string and binary paths
   - `triage-display-tokens` — issue #4: decoded RemoteNode display tokens (optionality token, template-head rawText)
   - `triage-computed-literal` — binder-literal computed property names print as-written
   - `triage-refs-exportspec` / `triage-quickinfo-emptyparity` — wg0 sweep pair: refs on re-exported classes + quickinfo empty-result parity (sweep-ls-throws regenerates /tmp/tnb-sweep-fixtures first)
 
@@ -28,11 +28,13 @@
 // 2026-09-26: triage-external-edits joined wg5 (~8s) once its estree fixture
 // self-provisions — local-only let plain `tsc -w` lose every source-file
 // watcher unnoticed.
+// 2026-09-26: framework-checks joined wg3 (pinned framework versions, peer
+// tree resolved against stock typescript — it had silently stopped running
+// astro check), generation-retention (defaults to lib/tsserver.js +
+// STOCK_TSSERVER_PATH calibration) and napi-fuzz joined wg4; wg3/wg4 were
+// the ~23s groups.
 // Witnesses intentionally NOT in the matrix are local-only — the machine-
-// readable list lives in LOCAL_ONLY below (reasons: framework-checks needs
-// the /tmp/tnb-fw-fixtures framework installs (network, heavy);
-// generation-retention needs in-child GC marks + --stock-tsserver slope
-// calibration; napi-fuzz is a NAPI payload fuzz probe; the perf series is
+// readable list lives in LOCAL_ONLY below (reason: the perf series is
 // measurement, not pass/fail). triage-electron-abi / triage-sim-nav-shard
 // are wired outside the matrix — OWNED_ELSEWHERE below (electron-abi:
 // direct ci.yml build-job step + nightly test-bridge-win32; sim-nav-shard:
@@ -46,13 +48,10 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
-const TOTAL = 86;
+const TOTAL = 89;
 
 // Witnesses intentionally NOT in the matrix — run on demand (reasons above).
 const LOCAL_ONLY = [
-	'triage-framework-checks',
-	'triage-generation-retention',
-	'triage-napi-fuzz',
 	'triage-completion-latency',
 	'triage-postedit-latency',
 	'triage-perf-edit-rpc',
@@ -92,12 +91,15 @@ const groups = [
 		witnesses: [
 			'triage-f2r5-defcases', // ~67s
 			'triage-tostring-gtd-vue', // ~61s
+			'triage-framework-checks', // ~28s cold (npm installs), ~12s warm
 		],
 	},
 	{
 		witnesses: [
 			'triage-qi-delete-min', // ~65s
 			'triage-f2r6-xvue', // ~62s
+			'triage-generation-retention', // ~4s (stock calibration + 100 tnb rounds)
+			'triage-napi-fuzz', // <1s
 		],
 	},
 	{
 
@@ -35,7 +35,7 @@ const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..'
 // The package the estree fixture links as `typescript`: lib's realpath parent,
 // since an isolated tools copy (the CI witness job) has lib/ but no package.json.
 const tnbPackageRoot = path.dirname(fs.realpathSync(path.join(repoRoot, 'lib')));
-const cacheRoot = process.env.TNB_FW_CACHE ?? '/tmp/tnb-fw-fixtures';
+const cacheRoot = '/tmp/tnb-fw-fixtures';
 const stockDir = path.join(cacheRoot, 'stock-ts');
 const estreeDir = path.join(cacheRoot, 'estree');
 const scratchRoot = '/tmp/tnb-49-repro';
 
@@ -3,7 +3,7 @@
  * Framework checker compatibility witness: svelte-check / astro-check / glint
  * against the TNB fork vs stock typescript. Each case builds a minimal project
  * in a cache dir (deps installed once, then reused), runs the tool with TNB
- * and with stock typescript@6.0.3 (packed on demand), and asserts the
+ * and with stock typescript (STOCK_TSSERVER_PATH's package), and asserts the
  * invariants for the failure modes that were fixed:
  *   - glint: must NOT be fail-silent (virtual App.gts→App.ts via readFile
  *     override reaches tsgo; was: 0 errors where stock reports them)
@@ -16,21 +16,31 @@
  * Usage: node tools/triage-framework-checks.mjs [svelte|astro|astro7|glint...]
  * Exit: 0 = PASS, 1 = FAIL. Network required on first run (npm installs).
  *
+ * Installs resolve against stock typescript: the fork's prerelease version
+ * (6.0.3-bridge.N) satisfies no `^6` peer range, and --legacy-peer-deps
+ * would drop every other peer too (@astrojs/check lost @emnapi/runtime and
+ * astro check never ran). node_modules/typescript is relinked per run.
+ *
  * v5 classification: the glint/svelte invariants are diagnostic-SET
  * semantics (bridge-contract surface, stock-gated). The astro full-text
  * parity covers diagnostic content (codes/spans — contract) but would also
  * trip on engine-owned presentation (tsgo's own diagnostic text/code
  * choices, e.g. the TS6196 class); such a failure is a KNOWN registration
  * (pristine tsgo reference), not a revert-to-stock patch.
  */
-import { execFileSync, execSync } from 'node:child_process';
+import { execFileSync } from 'node:child_process';
 import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { fileURLToPath } from 'node:url';
 
 const repoRoot = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
-const cacheRoot = process.env.TNB_FW_CACHE ?? '/tmp/tnb-fw-fixtures';
-const stockDir = path.join(cacheRoot, 'stock-ts');
+// The CI witness job runs from an isolated tools copy whose lib/ symlinks
+// into the checkout; the package root is wherever lib/ really lives.
+const tnbPackageRoot = path.dirname(fs.realpathSync(path.join(repoRoot, 'lib')));
+const cacheRoot = '/tmp/tnb-fw-fixtures';
+if (!process.env.STOCK_TSSERVER_PATH) throw new Error('STOCK_TSSERVER_PATH is required (stock typescript package)');
+const stockPackage = path.resolve(path.dirname(process.env.STOCK_TSSERVER_PATH), '..');
+const stockVersion = JSON.parse(fs.readFileSync(path.join(stockPackage, 'package.json'), 'utf8')).version;
 const stripAnsi = (s) => s.replace(/\x1b\[[0-9;]*m/g, '');
 
 const TSCONFIG_BASE = {
@@ -40,13 +50,17 @@ const TSCONFIG_BASE = {
 	},
 };
 
+// The first astro invocation on a machine prints a one-time telemetry notice,
+// which would land on whichever of TNB/stock ran first.
+const astroEnv = { ...process.env, ASTRO_TELEMETRY_DISABLED: '1' };
+
 const CASES = {
 	glint: {
 		deps: {
-			'@glint/core': '^1.5.0',
-			'@glint/environment-ember-loose': '^1.5.0',
-			'@glint/environment-ember-template-imports': '^1.5.0',
-			'@glint/template': '^1.5.0',
+			'@glint/core': '1.5.2',
+			'@glint/environment-ember-loose': '1.5.2',
+			'@glint/environment-ember-template-imports': '1.5.2',
+			'@glint/template': '1.9.0',
 		},
 		files: {
 			'tsconfig.json': JSON.stringify({ ...TSCONFIG_BASE, include: ['src/**/*.ts', 'src/**/*.gts'], glint: { environment: ['ember-loose', 'ember-template-imports'] } }, null, 2),
@@ -70,7 +84,7 @@ export default class App extends Component<{ Args: Args }> {
 		},
 	},
 	svelte: {
-		deps: { svelte: '^5.0.0', 'svelte-check': '^4.0.0', tslib: '^2.6.0' },
+		deps: { svelte: '5.57.1', 'svelte-check': '4.7.6', tslib: '2.8.1' },
 		files: {
 			'tsconfig.json': JSON.stringify({ ...TSCONFIG_BASE, compilerOptions: { ...TSCONFIG_BASE.compilerOptions, allowJs: true, checkJs: true }, include: ['src/**/*.svelte', 'src/**/*.ts'] }, null, 2),
 			'src/util.ts': 'export function double(n: number): number { return n * 2; }\n',
@@ -118,7 +132,7 @@ export default class App extends Component<{ Args: Args }> {
 		},
 	},
 	astro: {
-		deps: { astro: '^5.0.0', '@astrojs/check': '^0.9.0' },
+		deps: { astro: '5.18.2', '@astrojs/check': '0.9.10' },
 		files: {
 			'tsconfig.json': JSON.stringify({ extends: 'astro/tsconfigs/strict', compilerOptions: { noEmit: true }, include: ['.astro/types.d.ts', 'src/**/*'] }, null, 2),
 			'src/util.ts': 'export function double(n: number): number { return n * 2; }\n',
@@ -131,13 +145,14 @@ const wrong: string = double(count);
 <p>{double(count)}</p>
 `,
 		},
-		run: (dir) => execFileSync('npx', ['astro', 'check'], { cwd: dir, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }),
+		run: (dir) => execFileSync('npx', ['astro', 'check'], { cwd: dir, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], env: astroEnv }),
 		check(out, outStock) {
 			const norm = (s) => stripAnsi(s)
 				.replace(/[^\n]*TNB ACTIVE[^\n]*\n?/g, '') // TNB banner line
 				.replace(/\d{2}:\d{2}:\d{2}/g, 'TT:TT:TT')
 				.replace(/\d+(?:\.\d+)?m?s\b/g, 'Xms');
 			const a = norm(out).trim(), b = norm(outStock).trim();
+			if (!/Result \(\d+ files?\)/.test(a)) return `astro check did not run:\n${a}`;
 			if (a !== b) return `output mismatch vs stock:\n--- tnb ---\n${a}\n--- stock ---\n${b}`;
 			return undefined;
 		},
@@ -167,7 +182,7 @@ const { title } = Astro.props;
 <div>{title}</div>
 `,
 		},
-		run: (dir) => execFileSync('npx', ['astro', 'check'], { cwd: dir, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'] }),
+		run: (dir) => execFileSync('npx', ['astro', 'check'], { cwd: dir, encoding: 'utf8', stdio: ['ignore', 'pipe', 'pipe'], env: astroEnv }),
 		check(out, outStock) {
 			const t = stripAnsi(out);
 			if (/ts\(2304\):\s*Cannot find name 'Fragment'/.test(t)) return "false positive: global Fragment unresolved (#38 — plugin ambient roots dropped on snapshot rebuild)";
@@ -177,34 +192,32 @@ const { title } = Astro.props;
 				.replace(/\d{2}:\d{2}:\d{2}/g, 'TT:TT:TT')
 				.replace(/\d+(?:\.\d+)?m?s\b/g, 'Xms');
 			const a = norm(out).trim(), b = norm(outStock).trim();
+			if (!/Result \(\d+ files?\)/.test(a)) return `astro check did not run:\n${a}`;
 			if (a !== b) return `output mismatch vs stock:\n--- tnb ---\n${a}\n--- stock ---\n${b}`;
 			return undefined;
 		},
 	},
 };
 
-function ensureStock() {
-	if (fs.existsSync(path.join(stockDir, 'package', 'lib', 'typescript.js'))) return;
-	fs.mkdirSync(stockDir, { recursive: true });
-	execSync('npm pack typescript@6.0.3 --silent', { cwd: stockDir, stdio: 'ignore' });
-	execSync('tar -xzf typescript-6.0.3.tgz', { cwd: stockDir, stdio: 'ignore' });
-}
-
 function ensureCase(name, def) {
 	const dir = path.join(cacheRoot, name);
 	fs.mkdirSync(path.join(dir, 'src'), { recursive: true });
 	for (const [rel, content] of Object.entries(def.files)) {
 		fs.mkdirSync(path.dirname(path.join(dir, rel)), { recursive: true });
 		fs.writeFileSync(path.join(dir, rel), content);
 	}
-	const pkg = {
+	const pkg = JSON.stringify({
 		name: `tnb-fw-${name}`, private: true, type: 'module',
-		dependencies: { ...def.deps, typescript: `file:${repoRoot}` },
-	};
-	fs.writeFileSync(path.join(dir, 'package.json'), JSON.stringify(pkg, null, 2));
-	if (!fs.existsSync(path.join(dir, 'node_modules'))) {
-		console.log(`[${name}] installing deps (first run)…`);
-		execFileSync('npm', ['install', '--no-audit', '--no-fund', '--legacy-peer-deps'], { cwd: dir, stdio: 'inherit' });
+		dependencies: { ...def.deps, typescript: stockVersion },
+	}, null, 2);
+	const pkgPath = path.join(dir, 'package.json');
+	const nodeModules = path.join(dir, 'node_modules');
+	if (!fs.existsSync(nodeModules) || !fs.existsSync(pkgPath) || fs.readFileSync(pkgPath, 'utf8') !== pkg) {
+		console.log(`[${name}] installing deps…`);
+		fs.rmSync(nodeModules, { recursive: true, force: true });
+		fs.rmSync(path.join(dir, 'package-lock.json'), { force: true });
+		fs.writeFileSync(pkgPath, pkg);
+		execFileSync('npm', ['install', '--no-audit', '--no-fund'], { cwd: dir, stdio: 'inherit' });
 	}
 	return dir;
 }
@@ -213,13 +226,13 @@ function runCase(name, def) {
 	const dir = ensureCase(name, def);
 	const tsLink = path.join(dir, 'node_modules', 'typescript');
 	const linkTo = (target) => { fs.rmSync(tsLink, { force: true, recursive: true }); fs.symlinkSync(target, tsLink); };
-	linkTo(repoRoot);
+	linkTo(tnbPackageRoot);
 	let outTnb;
 	try { outTnb = def.run(dir); } catch (e) { outTnb = (e.stdout ?? '') + (e.stderr ?? ''); }
-	linkTo(path.join(stockDir, 'package'));
+	linkTo(stockPackage);
 	let outStock;
 	try { outStock = def.run(dir); } catch (e) { outStock = (e.stdout ?? '') + (e.stderr ?? ''); }
-	linkTo(repoRoot);
+	linkTo(tnbPackageRoot);
 	const problem = def.check(outTnb, outStock);
 	if (problem) {
 		console.error(`[${name}] FAIL: ${problem}`);
@@ -229,7 +242,6 @@ function runCase(name, def) {
 	return true;
 }
 
-ensureStock();
 const wanted = process.argv.slice(2);
 const names = wanted.length ? wanted : Object.keys(CASES);
 let ok = true;
 
@@ -18,10 +18,12 @@
  * flat on this protocol, so the absolute floor dominates in practice.
  *
  * Usage:
- *   node tools/triage-generation-retention.mjs --tsserver=<path>
+ *   node tools/triage-generation-retention.mjs [--tsserver=<path>]
  *       [--label=tnb] [--rounds=100] [--marks=2,25,50,75,100]
  *       [--max-slope-mb=0.05] [--stock-tsserver=<path>]
  *       [--keep-fixture=1] [--out=<json>]
+ * --tsserver defaults to this repo's lib/tsserver.js, --stock-tsserver to
+ * STOCK_TSSERVER_PATH (the witness-matrix shape: no arguments).
  *
  * Exit 0 = within threshold, 1 = regression, 2 = setup/usage error.
  */
@@ -40,9 +42,9 @@ function argVal(name, dflt) {
     return m ? m.split('=')[1] : dflt;
 }
 
-const TSSERVER = argVal('tsserver', '');
-const STOCK_TSSERVER = argVal('stock-tsserver', '');
-const LABEL = argVal('label', 'target');
+const TSSERVER = argVal('tsserver', path.join(repoRoot, 'lib', 'tsserver.js'));
+const STOCK_TSSERVER = argVal('stock-tsserver', process.env.STOCK_TSSERVER_PATH ?? '');
+const LABEL = argVal('label', 'tnb');
 const ROUNDS = Number(argVal('rounds', '100'));
 const MARKS = argVal('marks', '2,25,50,75,100').split(',').map(Number).filter(n => n > 0).sort((a, b) => a - b);
 const MAX_SLOPE_MB = Number(argVal('max-slope-mb', '0.05'));
@@ -51,11 +53,10 @@ const OUT = argVal('out', '');
 
 function usage(msg) {
     if (msg) console.error(msg);
-    console.error('usage: node tools/triage-generation-retention.mjs --tsserver=<path> [--rounds=100] [--marks=2,25,50,75,100] [--max-slope-mb=0.05] [--stock-tsserver=<path>]');
+    console.error('usage: node tools/triage-generation-retention.mjs [--tsserver=<path>] [--rounds=100] [--marks=2,25,50,75,100] [--max-slope-mb=0.05] [--stock-tsserver=<path>]');
     process.exit(2);
 }
 
-if (!TSSERVER) usage('missing --tsserver');
 if (!fs.existsSync(TSSERVER)) usage(`missing tsserver: ${TSSERVER}`);
 if (STOCK_TSSERVER && !fs.existsSync(STOCK_TSSERVER)) usage(`missing stock tsserver: ${STOCK_TSSERVER}`);
 if (!fs.existsSync(gcMarksPath)) usage(`missing helper: ${gcMarksPath}`);