@@ -198,6 +198,11 @@ jobs:
           grep -q '^TRINITY_SMOKE_PORT=[0-9][0-9]*$' smoke.log
           # Slice 013: the renderer's NIF loaded and rendered in this binary (exit 3 otherwise).
           grep -q '^TRINITY_SMOKE_MARKDOWN=ok$' smoke.log
+          # Slice 032, AC7: a fake-vector search ran inside this binary through the vector
+          # store in force (exit 4 otherwise). The EXLA and SEMANTIC lines are recorded, not
+          # asserted: whether the XLA library loads in Burrito's ERTS is what they measure.
+          grep -q '^TRINITY_SMOKE_VEC=ok:' smoke.log
+          grep -E '^TRINITY_SMOKE_(EXLA|SEMANTIC)=' smoke.log
           echo "--- ours, before ---"; cat ps-before.txt
           echo "--- ours, after ----"; cat ps-after.txt
           diff ps-before.txt ps-after.txt
@@ -215,6 +220,11 @@ jobs:
           if (-not (Select-String -Path smoke.log -Pattern '^TRINITY_SMOKE_MARKDOWN=ok$')) {
             throw "the markdown renderer did not render in this binary (slice 013)"
           }
+          # Slice 032, AC7, as on the other two: the vector search binds, the other two lines are recorded.
+          if (-not (Select-String -Path smoke.log -Pattern '^TRINITY_SMOKE_VEC=ok:')) {
+            throw "the vector search did not run inside this binary (slice 032)"
+          }
+          Select-String -Path smoke.log -Pattern '^TRINITY_SMOKE_(EXLA|SEMANTIC)='
 
       # AC1's property on a runner, and AC6's per-OS cold start, which used to be skipped.
       # `bash` on every OS, Windows included: the job that never curled was the one gap in
 
@@ -177,6 +177,55 @@ defmodule Trinity.Memory.Semantic do
   @spec get(String.t()) :: Entry.t() | nil
   def get(id), do: Repo.get_by(Entry, id: id, tier: "semantic")
 
+  @doc """
+  The packaged binary's vector check (slice 032, AC7, `--smoke`): three rows of the fake
+  embedder's deterministic vectors on a throwaway persona, the nearest expected first through
+  the store in force, all rolled back. `{:ok, store}` or `{:error, reason}`.
+  """
+  @spec smoke() :: {:ok, module()} | {:error, term()}
+  def smoke do
+    alias Trinity.Memory.Embedders.Fake
+
+    Repo.transaction(fn ->
+      {:ok, persona} =
+        Trinity.Personas.create(%{name: "smoke-#{System.unique_integer([:positive])}"})
+
+      scope = AlwaysOn.persona_scope(persona.id)
+      texts = ["the cat sat", "quarterly tax filing", "a dog barked"]
+
+      ids =
+        for {t, i} <- Enum.with_index(texts) do
+          attrs = %{persona_id: persona.id, scope: scope, key: "k#{i}", body: t}
+          {:ok, e} = %Entry{} |> Entry.semantic_changeset(attrs) |> Repo.insert()
+          :ok = VectorStore.upsert(e.id, Fake.vector(t), Fake.model_id())
+          e.id
+        end
+
+      filter = %{persona_id: persona.id, scopes: [scope], model: Fake.model_id()}
+      hits = VectorStore.search(Fake.vector("a dog barked"), 3, filter)
+
+      expected = Enum.at(ids, 2)
+
+      result =
+        case hits do
+          [%{id: ^expected, score: score}, _, _] when score > 0.999 ->
+            {:ok, VectorStore.impl()}
+
+          _ ->
+            {:error, {:wrong_order, Enum.map(hits, &{&1.entry.body, Float.round(&1.score, 3)})}}
+        end
+
+      Repo.rollback(result)
+    end)
+    |> case do
+      {:error, {:ok, store}} -> {:ok, store}
+      {:error, {:error, reason}} -> {:error, reason}
+      other -> {:error, other}
+    end
+  rescue
+    e -> {:error, Exception.message(e)}
+  end
+
   defp vector_for(body, nil), do: Embedder.embed([body])
   defp vector_for(_body, vector) when is_list(vector), do: {:ok, [vector]}
 
 
@@ -74,18 +74,77 @@ defmodule Trinity.Smoke do
     end
   end
 
+  @doc """
+  The third line (slice 032): whether the EXLA NIF loaded in this binary and ran one
+  operation. Informative, not binding: a bundle whose XLA library does not load (Burrito's
+  musl ERTS against a glibc `.so`, NOTES finding 13's shape) still boots with the semantic
+  tier off, and AC7 asks that the failure be recorded by name. `ok` or `failed:<reason>`.
+  """
+  @spec exla_line() :: String.t()
+  def exla_line do
+    if Code.ensure_loaded?(EXLA) do
+      try do
+        t = Nx.tensor([1.0, 2.0], backend: EXLA.Backend)
+        [3.0] = Nx.to_flat_list(Nx.sum(t))
+        "TRINITY_SMOKE_EXLA=ok"
+      rescue
+        e -> "TRINITY_SMOKE_EXLA=failed:#{inspect(Exception.message(e) |> String.slice(0, 200))}"
+      catch
+        kind, reason ->
+          "TRINITY_SMOKE_EXLA=failed:#{inspect({kind, reason}) |> String.slice(0, 200)}"
+      end
+    else
+      "TRINITY_SMOKE_EXLA=failed:not_compiled"
+    end
+  end
+
+  @doc """
+  The fourth line (slice 032, AC7): a fake-vector search inside this binary through the
+  vector store in force, on the database the binary opened, rolled back. Three rows of the
+  suite's deterministic vectors, the nearest expected first; `ok:<store>` or
+  `failed:<reason>`. Binding: exit 4 when it fails. The tier's own status follows as the
+  fifth line, informative (`on`, or the reason it is off on this machine).
+  """
+  @spec vec_line() :: String.t()
+  def vec_line do
+    case Trinity.Memory.Semantic.smoke() do
+      {:ok, store} -> "TRINITY_SMOKE_VEC=ok:#{inspect(store)}"
+      {:error, reason} -> "TRINITY_SMOKE_VEC=failed:#{inspect(reason) |> String.slice(0, 200)}"
+    end
+  end
+
+  @doc "The fifth line: the semantic tier's status in this binary, informative."
+  @spec semantic_line() :: String.t()
+  def semantic_line do
+    case Trinity.Memory.Semantic.status() do
+      :on -> "TRINITY_SMOKE_SEMANTIC=on"
+      {:off, reason} -> "TRINITY_SMOKE_SEMANTIC=off:#{inspect(reason) |> String.slice(0, 200)}"
+    end
+  end
+
   @doc """
   Runs the smoke check: report the listening port, then stop the OS process.
 
   `say` and `halt` are injected so the whole path is exercisable from a test without ending
   the test runner's own OS process.
   """
-  @spec run(say_fun(), halt_fun(), String.t()) :: any()
-  def run(say \\ &IO.puts/1, halt \\ &System.halt/1, markdown \\ markdown_line()) do
+  @spec run(say_fun(), halt_fun(), String.t(), [String.t()]) :: any()
+  def run(say \\ &IO.puts/1, halt \\ &System.halt/1, markdown \\ markdown_line(), rest \\ nil) do
     {:ok, {_ip, port}} = TrinityWeb.Endpoint.server_info(:http)
     say.(port_line(port))
     say.(markdown)
-    halt.(if markdown == "TRINITY_SMOKE_MARKDOWN=ok", do: 0, else: 3)
+    [exla, vec, semantic] = rest || [exla_line(), vec_line(), semantic_line()]
+    say.(exla)
+    say.(vec)
+    say.(semantic)
+
+    halt.(
+      cond do
+        markdown != "TRINITY_SMOKE_MARKDOWN=ok" -> 3
+        not String.starts_with?(vec, "TRINITY_SMOKE_VEC=ok:") -> 4
+        true -> 0
+      end
+    )
   end
 
   @doc """
@@ -109,7 +168,11 @@ defmodule Trinity.Smoke do
   def children(args) do
     if requested?(args) do
       markdown = markdown_line()
-      [{Task, fn -> run(&IO.puts/1, &System.halt/1, markdown) end}]
+      # The 032 lines need the Repo and the memory supervisor, which have started by now;
+      # they are cheap (one tiny tensor, three rows rolled back) and computed here for the
+      # same race the markdown line lost once.
+      rest = [exla_line(), vec_line(), semantic_line()]
+      [{Task, fn -> run(&IO.puts/1, &System.halt/1, markdown, rest) end}]
     else
       []
     end
 
@@ -89,90 +89,104 @@ defmodule Trinity.MixProject do
   # Specifies your project dependencies.
   #
   # Type `mix help deps` for examples and options.
+  # Slice 032: EXLA is the local embedder's backend and has no Windows build (xla 0.10.0
+  # ships archives for Linux and macOS, x86_64 and aarch64, none for Windows, and building
+  # XLA from source needs Bazel), so a Windows host does not declare it: the tree compiles
+  # there, `Trinity.Memory.Embedders.Bumblebee.availability/0` answers
+  # `{:off, :no_local_backend}`, and the semantic tier is off until a Windows backend exists
+  # (NOTES decision 3). The lock file carries exla either way; `mix deps.get` leaves an
+  # undeclared lock entry alone.
+  defp exla_deps do
+    case :os.type() do
+      {:win32, _} -> []
+      _ -> [{:exla, "~> 0.13.1"}]
+    end
+  end
+
   defp deps do
-    [
-      {:phoenix, "~> 1.8.13"},
-      {:phoenix_ecto, "~> 4.5"},
-      {:ecto_sql, "~> 3.13"},
-      {:ecto_sqlite3, ">= 0.0.0"},
-      # Slice 010: the CI-tested alternative behind TRINITY_DB=postgres (docs/adr/0002).
-      # Optional so the standalone desktop build carries no Postgres driver; the CI matrix
-      # job compiles with the variable set and proves the migrations on both.
-      {:postgrex, ">= 0.0.0", optional: true},
-      # Slice 011: the provider layer behind Trinity.LLM (docs/adr/0003). What it brings into
-      # mix.lock is counted in the slice's NOTES.md, because the desktop binary carries it.
-      {:req_llm, "~> 1.22"},
-      # Slice 013: the chat's markdown renderer, behind TrinityWeb.Markdown. Chosen by the
-      # measurement in the slice's NOTES.md; it brings a Rust NIF (mdex_native), precompiled.
-      {:mdex, "~> 0.13"},
-      # Slice 020: JSON Schema validation of tool arguments (Trinity.Tools.Schema). Already in
-      # the lock through req_llm; direct because a module of ours calls it (ADR-0009).
-      {:jsv, "~> 0.23"},
-      # Slice 021: RFC 8785 canonical JSON under every approval fingerprint (docs/07). Chosen
-      # by the measurement in the slice's NOTES.md; the RFC's vector is a test in the tree.
-      {:jcs, "~> 0.2"},
-      # Slice 022: HTML to text for web_fetch (Trinity.Tools.Web.Fetch).
-      {:floki, "~> 0.38"},
-      # Slice 032: local embeddings (Trinity.Memory.Embedders.Bumblebee). The 0.13 line of nx
-      # and exla is what bumblebee 0.7.1 accepts (nx 1.0.0 shipped 2026-09-10 and bumblebee has
-      # no release for it at G1); measured for bundle size and latency in the slice's NOTES.md.
-      {:nx, "~> 0.13.1"},
-      {:exla, "~> 0.13.1"},
-      {:bumblebee, "~> 0.7.1"},
-      # Slice 032: vectors on the Postgres job (Trinity.Memory.VectorStores.Pgvector).
-      {:pgvector, "~> 0.4.1"},
-      # Slice 013 (owner decision, 2026-09-20): the linux package builds mdex's NIF from
-      # source for musl (MDEX_NATIVE_BUILD=1 and TRINITY_NIF_TARGET in config/config.exs),
-      # because neither precompiled artifact loads in Burrito's musl ERTS (NOTES finding 13).
-      # rustler_precompiled needs Rustler present to run that build; build time only.
-      {:rustler, "~> 0.38", runtime: false},
-      {:phoenix_html, "~> 4.1"},
-      {:phoenix_live_reload, "~> 1.2", only: :dev},
-      {:phoenix_live_view, "~> 1.2.0"},
-      {:lazy_html, ">= 0.1.0", only: :test},
-      {:phoenix_live_dashboard, "~> 0.8.3"},
-      {:esbuild, "~> 0.10", runtime: Mix.env() == :dev},
-      {:tailwind, "~> 0.5", runtime: Mix.env() == :dev},
-      {:heroicons,
-       github: "tailwindlabs/heroicons",
-       tag: "v2.2.0",
-       sparse: "optimized",
-       app: false,
-       compile: false,
-       depth: 1},
-      {:daisyui,
-       github: "saadeghi/daisyui",
-       tag: "v5.5.20",
-       sparse: "packages/bundle",
-       app: false,
-       compile: false,
-       depth: 1},
-      {:telemetry_metrics, "~> 1.0"},
-      {:telemetry_poller, "~> 1.0"},
-      {:gettext, "~> 1.0"},
-      {:jason, "~> 1.2"},
-      {:dns_cluster, "~> 0.2.0"},
-      {:bandit, "~> 1.5"},
-      # Slice 000: the gate's own tooling. Nothing else yet.
-      {:boundary, "~> 0.10", runtime: false},
-      {:credo, "~> 1.7", only: [:dev, :test], runtime: false},
-      {:mox, "~> 1.2", only: :test},
-      {:mix_audit, "~> 2.1", only: [:dev, :test], runtime: false},
-      {:sobelow, "~> 0.15", only: [:dev, :test], runtime: false},
-      {:ex_doc, "~> 0.38", only: :dev, runtime: false},
-      {:nimble_options, "~> 1.1"},
-      # Slice 001 line 1, arm (a) recorded `only: :dev`. **Corrected at G4**, and the reason is
-      # the shell, not the tooling: `ExTauri.ShutdownManager` is the sidecar's heartbeat, the
-      # Rust window's only way to tell the BEAM it has closed, so it has to exist in the
-      # binary that ships, and a `:dev`-only dependency does not. `mix ex_tauri.install` adds
-      # that child unconditionally, which is why the generator's output could not start under
-      # MIX_ENV=test or MIX_ENV=prod. Recorded as deviation D7 in NOTES.md.
-      {:ex_tauri, "~> 0.2"},
-      # Slice 001 line 3. `ex_tauri` already depends on burrito, but only in :dev, and
-      # `&Burrito.wrap/1` is a release step that runs under MIX_ENV=prod. Declared directly so
-      # the module exists in the environment that calls it.
-      {:burrito, "~> 1.6"}
-    ] ++ posix_deps()
+    exla_deps() ++
+      [
+        {:phoenix, "~> 1.8.13"},
+        {:phoenix_ecto, "~> 4.5"},
+        {:ecto_sql, "~> 3.13"},
+        {:ecto_sqlite3, ">= 0.0.0"},
+        # Slice 010: the CI-tested alternative behind TRINITY_DB=postgres (docs/adr/0002).
+        # Optional so the standalone desktop build carries no Postgres driver; the CI matrix
+        # job compiles with the variable set and proves the migrations on both.
+        {:postgrex, ">= 0.0.0", optional: true},
+        # Slice 011: the provider layer behind Trinity.LLM (docs/adr/0003). What it brings into
+        # mix.lock is counted in the slice's NOTES.md, because the desktop binary carries it.
+        {:req_llm, "~> 1.22"},
+        # Slice 013: the chat's markdown renderer, behind TrinityWeb.Markdown. Chosen by the
+        # measurement in the slice's NOTES.md; it brings a Rust NIF (mdex_native), precompiled.
+        {:mdex, "~> 0.13"},
+        # Slice 020: JSON Schema validation of tool arguments (Trinity.Tools.Schema). Already in
+        # the lock through req_llm; direct because a module of ours calls it (ADR-0009).
+        {:jsv, "~> 0.23"},
+        # Slice 021: RFC 8785 canonical JSON under every approval fingerprint (docs/07). Chosen
+        # by the measurement in the slice's NOTES.md; the RFC's vector is a test in the tree.
+        {:jcs, "~> 0.2"},
+        # Slice 022: HTML to text for web_fetch (Trinity.Tools.Web.Fetch).
+        {:floki, "~> 0.38"},
+        # Slice 032: local embeddings (Trinity.Memory.Embedders.Bumblebee). The 0.13 line of nx
+        # and exla is what bumblebee 0.7.1 accepts (nx 1.0.0 shipped 2026-09-10 and bumblebee has
+        # no release for it at G1); measured for bundle size and latency in the slice's NOTES.md.
+        {:nx, "~> 0.13.1"},
+        {:bumblebee, "~> 0.7.1"},
+        # Slice 032: vectors on the Postgres job (Trinity.Memory.VectorStores.Pgvector).
+        {:pgvector, "~> 0.4.1"},
+        # Slice 013 (owner decision, 2026-09-20): the linux package builds mdex's NIF from
+        # source for musl (MDEX_NATIVE_BUILD=1 and TRINITY_NIF_TARGET in config/config.exs),
+        # because neither precompiled artifact loads in Burrito's musl ERTS (NOTES finding 13).
+        # rustler_precompiled needs Rustler present to run that build; build time only.
+        {:rustler, "~> 0.38", runtime: false},
+        {:phoenix_html, "~> 4.1"},
+        {:phoenix_live_reload, "~> 1.2", only: :dev},
+        {:phoenix_live_view, "~> 1.2.0"},
+        {:lazy_html, ">= 0.1.0", only: :test},
+        {:phoenix_live_dashboard, "~> 0.8.3"},
+        {:esbuild, "~> 0.10", runtime: Mix.env() == :dev},
+        {:tailwind, "~> 0.5", runtime: Mix.env() == :dev},
+        {:heroicons,
+         github: "tailwindlabs/heroicons",
+         tag: "v2.2.0",
+         sparse: "optimized",
+         app: false,
+         compile: false,
+         depth: 1},
+        {:daisyui,
+         github: "saadeghi/daisyui",
+         tag: "v5.5.20",
+         sparse: "packages/bundle",
+         app: false,
+         compile: false,
+         depth: 1},
+        {:telemetry_metrics, "~> 1.0"},
+        {:telemetry_poller, "~> 1.0"},
+        {:gettext, "~> 1.0"},
+        {:jason, "~> 1.2"},
+        {:dns_cluster, "~> 0.2.0"},
+        {:bandit, "~> 1.5"},
+        # Slice 000: the gate's own tooling. Nothing else yet.
+        {:boundary, "~> 0.10", runtime: false},
+        {:credo, "~> 1.7", only: [:dev, :test], runtime: false},
+        {:mox, "~> 1.2", only: :test},
+        {:mix_audit, "~> 2.1", only: [:dev, :test], runtime: false},
+        {:sobelow, "~> 0.15", only: [:dev, :test], runtime: false},
+        {:ex_doc, "~> 0.38", only: :dev, runtime: false},
+        {:nimble_options, "~> 1.1"},
+        # Slice 001 line 1, arm (a) recorded `only: :dev`. **Corrected at G4**, and the reason is
+        # the shell, not the tooling: `ExTauri.ShutdownManager` is the sidecar's heartbeat, the
+        # Rust window's only way to tell the BEAM it has closed, so it has to exist in the
+        # binary that ships, and a `:dev`-only dependency does not. `mix ex_tauri.install` adds
+        # that child unconditionally, which is why the generator's output could not start under
+        # MIX_ENV=test or MIX_ENV=prod. Recorded as deviation D7 in NOTES.md.
+        {:ex_tauri, "~> 0.2"},
+        # Slice 001 line 3. `ex_tauri` already depends on burrito, but only in :dev, and
+        # `&Burrito.wrap/1` is a release step that runs under MIX_ENV=prod. Declared directly so
+        # the module exists in the environment that calls it.
+        {:burrito, "~> 1.6"}
+      ] ++ posix_deps()
   end
 
   # Slice 022: the shell tool's process wrapper is a C port built with elixir_make (fork,