@@ -15,32 +15,21 @@
       "description": "Allow Magic Context sessions launched from the exact canonical home directory. The home session uses its deterministic dir: identity so pre-gate memories reconnect. USER-LEVEL ONLY: project config is ignored. The home identity is excluded from registry seed exports, never resolves descendants by containment, and cannot join a workspace.",
       "type": "boolean"
     },
-    "experimental": {
+    "mural": {
       "default": {
-        "mural": {
-          "enabled": false
-        }
+        "enabled": false
       },
-      "description": "Experimental feature switches. User and project configuration are both accepted.",
+      "description": "Experimental mural: a single deterministically-rendered image of project memories that did not fit the context budget. Cues are compressed per-memory by the compress-cues dreamer task.",
       "type": "object",
       "properties": {
-        "mural": {
-          "default": {
-            "enabled": false
-          },
-          "description": "Experimental mural: a single deterministically-rendered image of project memories that did not fit the context budget. Cues are compressed per-memory by the compress-cues dreamer task.",
-          "type": "object",
-          "properties": {
-            "enabled": {
-              "default": false,
-              "type": "boolean"
-            },
-            "model": {
-              "description": "Model for the compress-cues task that compresses each memory into a mural cue. The mural image itself is rendered deterministically (no author model).",
-              "type": "string",
-              "minLength": 1
-            }
-          }
+        "enabled": {
+          "default": false,
+          "type": "boolean"
+        },
+        "model": {
+          "description": "Model for the compress-cues task that compresses each memory into a mural cue. The mural image itself is rendered deterministically (no author model).",
+          "type": "string",
+          "minLength": 1
         }
       }
     },
 
@@ -918,7 +918,7 @@ export async function runDoctor(
 
             // Relocate graduated feature flags out of the (retired) experimental.*
             // namespace to their new homes:
-            //   - temporal_awareness / caveman_text_compression → top-level keys
+            //   - temporal_awareness / caveman_text_compression / mural → top-level keys
             //   - auto_search / git_commit_indexing → memory.* (recall features)
             // We preserve the user's explicit values so opt-ins/opt-outs survive;
             // the destination wins when a user has already started graduating,
@@ -952,6 +952,7 @@ export async function runDoctor(
             if (experimental) {
                 relocateGraduated("temporal_awareness", mcConfig, "");
                 relocateGraduated("caveman_text_compression", mcConfig, "");
+                relocateGraduated("mural", mcConfig, "");
                 const memoryDest = (mcConfig.memory as Record<string, unknown> | undefined) ?? {};
                 relocateGraduated("auto_search", memoryDest, "memory.");
                 relocateGraduated("git_commit_indexing", memoryDest, "memory.");
 
@@ -92,6 +92,23 @@ const FIELD_DEFS: FieldDef[] = [
     description: "How long Magic Context TUI toasts stay visible.",
     section: "General",
   },
+  // Mural
+  {
+    key: "mural.enabled",
+    label: "Mural Enabled",
+    type: "boolean",
+    description:
+      "Render a deterministic image of project memories that did not fit the context budget.",
+    section: "Mural",
+  },
+  {
+    key: "mural.model",
+    label: "Cue Compressor Model",
+    type: "string",
+    description:
+      "Model used to compress each memory into a mural cue. The mural image itself is rendered deterministically.",
+    section: "Mural",
+  },
   // Thresholds
   // cache_ttl and execute_threshold_percentage are rendered as custom PerModelField components
   // Tags & cleanup
@@ -214,6 +231,7 @@ function readFallbackModels(formData: Record<string, unknown>, path: string): st
 
 const SECTION_ICONS: Record<string, string> = {
   General: "⚙️",
+  Mural: "🖼️",
   Thresholds: "⚡",
   "Tags & Cleanup": "🏷️",
   Historian: "📜",
@@ -386,9 +404,10 @@ function ConfigForm(props: {
   // Section order: Tags & Cleanup goes last (rendered after agent cards)
   const SECTION_ORDER: Record<string, number> = {
     General: 0,
-    Thresholds: 1,
-    Historian: 2,
-    Memory: 3,
+    Mural: 1,
+    Thresholds: 2,
+    Historian: 3,
+    Memory: 4,
     "Tags & Cleanup": 99,
   };
 
@@ -427,6 +446,7 @@ function ConfigForm(props: {
       "sqlite",
       "system_prompt_injection",
       "caveman_text_compression",
+      "mural",
     ]) {
       if (typeof formData()[key] === "object" && formData()[key] != null) {
         merged[key] = {
 
@@ -21,6 +21,8 @@ export const RENDERED_PREFIXES: readonly string[] = [
   "enabled",
   "language",
   "toast_duration_ms",
+  // Mural
+  "mural",
   // Thresholds (custom PerModelField widgets)
   "cache_ttl",
   "execute_threshold_percentage",
@@ -87,6 +89,18 @@ export const OMITTED_BY_DESIGN: Readonly<Record<string, string>> = {
   shadow_embedding: "developer-only shadow embedding lane; raw JSONC and never a dashboard knob",
   transform_mode:
     "experimental project-wide Rust runtime cutover; requires user-level subc configuration and is not exposed in the dashboard yet",
+  allow_home_project:
+    "user-only home-directory identity setting; raw JSONC because it is ignored from project configs",
+  output_reserve:
+    "user-only output-token reservation; raw JSONC because project configs cannot change it",
+  "storage.enforce_private_permissions":
+    "user-only shared-storage permission policy; raw JSONC because project configs cannot change it",
+  fail_closed_blocking:
+    "user-only inoperability policy; raw JSONC because project configs cannot change it",
+  "compaction.enabled":
+    "user-only context-management ownership policy; raw JSONC because project configs cannot change it",
+  "pi.subagent_extensions":
+    "user-only Pi extension allowlist; raw JSONC because project configs cannot choose child extensions",
 };
 
 /**
 
@@ -19,7 +19,7 @@ The mural is a complement to the text `<project-memory>` block, not a replacemen
 
 Injection is gated on all of the following:
 
-1. **`experimental.mural.enabled`** is `true`.
+1. **`mural.enabled`** is `true`.
 2. The **outgoing model accepts images** (vision capability from provider metadata). Unknown capability fails closed: text-only baseline, no error.
 3. Enough memories have **current compressed cues** (coverage gate — see below).
 4. There is a non-empty **overflow set** after the normal memory text budget trim.
@@ -33,7 +33,7 @@ Each memory needs a short **cue** before it can appear on the mural. The dreamer
 - Runs per memory (not one giant prompt for the whole pool).
 - Compresses the full memory text into a mural-sized line.
 - **Caches by content hash** — unchanged memories are not re-compressed.
-- Uses **`experimental.mural.model`** when set, otherwise the dreamer model ladder.
+- Uses **`mural.model`** when set, otherwise the dreamer model ladder.
 
 Until a memory has a current cue, it is skipped for mural selection even if it overflowed the text budget.
 
@@ -50,20 +50,18 @@ The mural does not render from a half-empty cue pool. Rendering is skipped until
 
 ```jsonc
 {
-  "experimental": {
-    "mural": {
-      "enabled": true,
-      // Optional: model for compress-cues only. The PNG itself is deterministic.
-      "model": "anthropic/claude-haiku-4-5"
-    }
+  "mural": {
+    "enabled": true,
+    // Optional: model for compress-cues only. The PNG itself is deterministic.
+    "model": "anthropic/claude-haiku-4-5"
   }
 }
 ```
 
 | Key | Default | Meaning |
 |-----|---------|---------|
-| `experimental.mural.enabled` | `false` | Master switch for mural injection and compress-cues. |
-| `experimental.mural.model` | — | Model used by compress-cues. Falls back to the dreamer model when unset. |
+| `mural.enabled` | `false` | Master switch for mural injection and compress-cues. |
+| `mural.model` | — | Model used by compress-cues. Falls back to the dreamer model when unset. |
 
 ## Requirements and limits
 
 
@@ -40,6 +40,9 @@ Global on/off switches for the plugin and its agent-facing surface.
 | `todowrite` | object | — | Pi-only todowrite tool and overlay controls. Pi registers tools and widgets at extension boot, so changing this after /cd requires /reload or restart. |
 | `todowrite.enabled` | boolean | `true` | Pi only: register Magic Context's todowrite task-list tool. Disable if you use your own todo extension. OpenCode ships its own built-in todowrite; this setting has no effect there. |
 | `todowrite.overlay` | boolean | `true` | Pi only: show the persistent todo overlay above the editor while tasks are active. |
+| `mural` | object | — | Experimental mural: a single deterministically-rendered image of project memories that did not fit the context budget. Cues are compressed per-memory by the compress-cues dreamer task. |
+| `mural.enabled` | boolean | `false` |  |
+| `mural.model` | string | — | Model for the compress-cues task that compresses each memory into a mural cue. The mural image itself is rendered deterministically (no author model). |
 
 ## Context management
 
@@ -259,9 +262,6 @@ Behavior tuning most installs never need to touch.
 
 | Key | Type | Default | Description |
 |---|---|---|---|
-| `experimental.mural` | object | — | Experimental mural: a single deterministically-rendered image of project memories that did not fit the context budget. Cues are compressed per-memory by the compress-cues dreamer task. |
-| `experimental.mural.enabled` | boolean | `false` |  |
-| `experimental.mural.model` | string | — | Model for the compress-cues task that compresses each memory into a mural cue. The mural image itself is rendered deterministically (no author model). |
 | `toast_duration_ms` | number (0–60000) | `5000` | TUI toast lifetime in milliseconds for Magic Context notifications. Set to 0 to disable Magic Context toasts entirely (min: 0, max: 60000, default: 5000) |
 | `subc.connection_file` | string | — | Path to the owner-only subc connection file. |
 | `fail_closed_blocking` | boolean | `true` | When Magic Context cannot operate (schema fence mismatch, storage open/migration failure), block the primary-session prompt with a loud recovery error instead of silently degrading to native compaction. Default true. Set false only to restore the old degrade-silently behavior (not recommended). USER-LEVEL ONLY — ignored in project config for security. Requires a restart. |
 
@@ -856,7 +856,7 @@ lookup. Pi does not warm that cache (see §14); when metadata is absent the gate
 never injects the mural image until vision metadata is available; OpenCode warms
 the cache from its SDK at startup.
 
-**Config:** both honor `experimental.mural.enabled` (and `experimental.mural.model`
+**Config:** both honor `mural.enabled` (and `mural.model`
 for the compress-cues dreamer task). No intentional per-provider image-part
 blacklist today — every Pi serializer path that accepts user image content takes
 raw base64 the same way.
 
@@ -957,7 +957,7 @@ export interface PiInjectionOptions {
 	injectDocs?: boolean;
 	injectionBudgetTokens: number;
 	temporalAwareness?: boolean;
-	/** experimental.mural.enabled — on-demand deterministic mural image on HARD folds. */
+	/** mural.enabled — when enabled, generate a deterministic image of memories that did not fit the context budget whenever the system performs a full (HARD) context fold. */
 	muralEnabled?: boolean;
 }
 
@@ -4034,7 +4034,7 @@ interface RunPipelineArgs {
 		 *  injection budget. Drives compartment tier demotion in renderM0Pi. */
 		historyBudgetTokens?: number;
 		temporalAwareness?: boolean;
-		/** experimental.mural.enabled — on-demand deterministic mural image on HARD folds. */
+		/** mural.enabled — when enabled, generate a deterministic image of memories that did not fit the context budget whenever the system performs a full (HARD) context fold. */
 		muralEnabled?: boolean;
 	};
 	/**
 
@@ -1004,7 +1004,7 @@ async function startPiMagicContextRuntime(
 			injectDocs: cfg.dreamer?.inject_docs !== false,
 			injectionBudgetTokens: cfg.memory.injection_budget_tokens,
 			temporalAwareness: cfg.temporal_awareness === true,
-			muralEnabled: cfg.experimental?.mural?.enabled === true,
+			muralEnabled: cfg.mural.enabled === true,
 		},
 		scheduler: {
 			executeThresholdPercentage: cfg.execute_threshold_percentage,
 
@@ -376,7 +376,7 @@ export interface PiM0M1State {
 	userProfileBudgetTokens?: number;
 	/** Provider-side cache-eviction signals for HARD-bust detection. */
 	hardSignals?: PiM0HardSignals;
-	/** Experimental mural feature switch (`experimental.mural.enabled`). When
+	/** Mural feature switch (`mural.enabled`). When
 	 *  true and the fold's model accepts images, HARD materialization resolves
 	 *  + renders the deterministic mural on demand and folds its image into the
 	 *  cached baseline. Defer passes replay the baked-in bytes without re-render. */