@1aboveio/skills 1.0.18 → 1.0.20

package/skills/engineering/engineering-runtime/coherence/workflow.json

@@ -369,7 +369,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "65d5a8011e64fb3a49cb45bf8fdb066d21138faed67287421bcd17f10b0c7bc0",
+      "contentDigest": "46f0a76cadebab0a7de8dabf7a93eb194c7f41e0c872fa9c1a04dec86ee0fd88",
       "digestExcludes": []
     },
     {
@@ -382,7 +382,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "b554ced1c8af517ed49ad3a0c6c2d2f5b2f74bb6e1313b7e56e00177e30bae7c",
+      "contentDigest": "e1a794446b04b5b70d356ceb9bbbe2a3c518eac486286d5905da98a3d038de65",
       "digestExcludes": []
     },
     {
@@ -395,7 +395,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "8e35a14aea5d7e7b4830f7817438ce6a6eb7c5a6e9c31768aa76c4328e181115",
+      "contentDigest": "451349ddb0393831abe922cd66c77dd96ea6a4bdd6950c1546e507f5d056dc84",
       "digestExcludes": []
     },
     {
@@ -408,7 +408,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "38150518fe71cd567eeee1c76cec15bcd4b0cd5cde9ef6f90748e462807b8b9f",
+      "contentDigest": "b4c6ae8cb2e708e3695330e65567aab4a301b963d86a4b6706c324fd5e56a36e",
       "digestExcludes": []
     },
     {
@@ -421,7 +421,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "a53c1f2212fd38fc464ea2b86ce5ed37f61052fc884a4873308bd158b33ee174",
+      "contentDigest": "2dc4ffd9d459c1c61ff9472caf6b318bd45531995d8b8f142e775252c496b22b",
       "digestExcludes": []
     },
     {
@@ -434,7 +434,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "cc5d24bb0952a4c67bed48bc154fd3ef4115bd3162459411b0a71e48251fe342",
+      "contentDigest": "25ac49e98ce28203feccc17b4f85c67627db9c979511cca349df9dd1fe156d58",
       "digestExcludes": []
     },
     {
@@ -447,7 +447,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "3579deef1765207f521b231bd1d21795c791f773f44c634830b0a301c42998f9",
+      "contentDigest": "bde840d0e6ea6d333c48b47f2635c31c54e1e86a1beee21e26d5a9788c5f7977",
       "digestExcludes": []
     },
     {
@@ -460,7 +460,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "be5333b8c2dcd229e7caa395274a5e7695dc301a7ad855122d881d73cb99911d",
+      "contentDigest": "be04047cebb486d9f0b56c59705210038c13ce8f3f10c5ecf7acb361f3a56d0c",
       "digestExcludes": []
     },
     {
@@ -473,7 +473,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "36bd7b643df2a9217b297f5da084cfd9113f0d578a56721cb302b92f8b9f1aad",
+      "contentDigest": "d7c62210fdfdfa3504a056a8977aa3b67370b65f92d5d32e001fd394fabd44bd",
       "digestExcludes": []
     },
     {
@@ -486,7 +486,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "6fe762cf05a852f4c52007106e29f606e8c716a29510f7c1d4abc3ec59b96442",
+      "contentDigest": "f1acfff02ba2ddb0e0d4ffbcd9b5411a394b3b38e9a48ab2ab01ba46fb9bed1f",
       "digestExcludes": []
     },
     {
@@ -499,7 +499,7 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "f7286a2fe3a4f1c0d233f25fff89f5a46bb0e932d1b6f07b857b5b3e3a398d54",
+      "contentDigest": "cd858ed046f7c4ecb10817307e906a8057db5b8fb5a8c8e9334ef04aff34b9b2",
       "digestExcludes": []
     },
     {
@@ -512,13 +512,13 @@
         "repository": "1aboveio/ai",
         "revision": "main"
       },
-      "contentDigest": "35d54af1d31fb8e0bd0e80929e807be0f8d4a342882897ba1e9bdc396e4e0db6",
+      "contentDigest": "c3cbfef912ac7448710a7ed5a5014a76928d0350e2032c264c3e0a3212468b6d",
       "digestExcludes": [
         "coherence/workflow.json"
       ]
     }
   ],
-  "releaseIdentity": "ea12741260694df094ae6fda1597a15df1e8f31a6db2069e38b8bc1cf13083f2",
+  "releaseIdentity": "b2e273424d4ceb9a24d78ad163daeb516538defae3f7e6ebea4f59edb055df9a",
   "lifecycleAuthority": "native-skills-cli",
   "repairRecipe": {
     "id": "engineering-workflow-dependency-first",

package/skills/engineering/ensure-coverage/SKILL.md

@@ -2,7 +2,7 @@
 name: ensure-coverage
 description: "Define or audit behavior-first test criteria — ACs, required test levels, mock/integration/E2E policy — across three axes: breadth (Coverage Ledger), depth (over-mocking), presentation (perceivability of browser surfaces). NOT judging whether a single test is any good (test-quality), authoring browser tests (e2e-test), reviewing a PR (better-review), or delivering issues (resolve-issues)."
 disable-model-invocation: true
-release-version: 0.49.0
+release-version: 0.50.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Ensure Coverage

package/skills/engineering/golden-path/SKILL.md

@@ -3,7 +3,7 @@ name: golden-path
 description: "Golden-path E2E: the short list of user journeys whose failure blocks a release, kept in a repo as one contract (golden-paths.json) with a generated GOLDEN_PATHS.md and a generated GitHub Actions workflow, and run against a local build or a deployed URL for an ALIVE/DEAD verdict. Use to set golden paths up in a repo ('init golden paths', 'add golden-path CI'), to migrate an older smoke.manifest.json or a hand-built smoke setup ('audit', 'migrate smoke'), to add, change, or remove a golden path, to ask 'is the build alive?' or run them before a PR or release, or when a change touches a flow listed in GOLDEN_PATHS.md. NOT for writing the Playwright specs themselves (e2e-test), deciding what a change must prove (ensure-coverage), or general workflow YAML (github-actions)."
 dependencies:
   - e2e-test
-release-version: 0.49.0
+release-version: 0.50.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Golden path

package/skills/engineering/harness-runtime/SKILL.md

@@ -3,7 +3,7 @@ name: harness-runtime
 description: Internal import-only library shared by first-party engineering packages. Not a workflow skill; never select or invoke it as a user capability.
 disable-model-invocation: true
 user-invocable: false
-release-version: 0.49.0
+release-version: 0.50.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Harness Runtime

package/skills/engineering/resolve-issues/SKILL.md

@@ -8,7 +8,7 @@ dependencies:
   - better-review
   - golden-path
   - harness-runtime
-release-version: 0.49.0
+release-version: 0.50.0
 ---
 **Updates:** Once/session run `node <skill-base-dir>/release-check.mjs`.
 # Resolve issues
@@ -63,8 +63,8 @@ preflight: ready label -> model fills -> plan draft
   -> when a unit's code is done, for that unit:
        rebase on its parent (stack, chain) or the target (wait)
        -> independent review, while CI runs -> review-verdict.mjs decides:
-          `pass`: review passes (P2 goes to the dropbox, never fixed
-          here; P3 is skipped); `fix`: only its fixBrief (P0/P1),
+          `pass`: review passes (route P2 by its contribution to delivery;
+          P3 is skipped); `fix`: its fixBrief (P0/P1) plus explicitly selected supporting P2,
           push, re-review; `review-again`: review again
        -> CI red: fix, push; after a passing review, carry it (no reviewer)
        -> review passed and CI green on one HEAD: mark ready
@@ -83,6 +83,7 @@ Read each procedure right before its stage; never substitute your own.
 | Implementation loop and opening each PR | [references/implementation.md](references/implementation.md) |
 | Read-only warehouse canary | [references/canary.md](references/canary.md) |
 | Owned workspaces: plan, prepare, cleanup, recover, inventory | [references/workspaces.md](references/workspaces.md) |
+| Daily resource retention: enrollment, age tiers, preview, registration, apply | [references/retention.md](references/retention.md) |
 | Independent review | [references/review.md](references/review.md) |
 | Routing small problems; posting them at the end | [references/dropbox.md](references/dropbox.md) |
 | CI, queue, and merge | [references/ci.md](references/ci.md) |
@@ -115,8 +116,10 @@ Read each procedure right before its stage; never substitute your own.
 - **The human.** Ask once, at the approval. Record every decision, correction, and scope change in
   `decisions` at once, and each standing instruction in `standingOrders`; re-read the standing orders on
   resume and before any push, enqueue, data write, or deletion. Default merge mode is `autonomous`.
-- **Proof.** Treat producer reports as claims until the reviewer or CI checks them. A check that exits 0 needs no
-  further evidence. A unit owes coding acceptance only: its criteria at its `proof.level` plus the required CI
+- **Proof.** Treat producer reports as claims until the reviewer or CI checks them. Tests and diagnostic probes
+  encode failure in their exit status under [Proof](references/implementation.md#proof); printing an exception
+  and returning 0 is not a passing check. Coordination CLIs keep their documented structured-verdict contracts.
+  A unit owes coding acceptance only: its criteria at its `proof.level` plus the required CI
   on its final HEAD. Integrated release acceptance (a device or system campaign the spec or repository assigns
   to a release or campaign gate) runs at that gate, never per unit; the handback links its owning issue. Produce
   no evidence documents; the plan, findings, and reviews are the only records.
@@ -143,7 +146,8 @@ Treat a missing or unreadable result as incomplete; resume a dead spawn once in
 
 Follow [preflight.md](references/preflight.md):
 
-0. **Ready label:** resume the spec's run if one exists; run `ready-check.mjs`;
+0. **Retention and ready label:** enroll this repository's daily resource cleanup
+   through the persistent installed skill; resume the spec's run if one exists; run `ready-check.mjs`;
    stop on an `unreadable` outcome; ask at step 6 on `unlabeled` or a `missing` compaction
    hook (`install-hooks.mjs --check`; shortcut: warn).
 1. **Model slots:** record the fast-path fills without asking; the models and
@@ -167,7 +171,8 @@ efforts are run metadata, never a question.
 ### 2. Implement and open the PR
 
 Give each unit a branch, its prepared workspace, and an implementer with its findings entry
-and parents' contracts; state outcome and validation, not method. Refill
+and parents' contracts; retain its [implementation owner](references/implementation.md#implementation-owner)
+through review/CI fixes, separately from its active worker slot. State outcome and validation, not method. Refill
 slots at once. At a unit's first coherent commit its PR opens as a draft, so CI
 starts and the work is safe; later work goes to the same PR (in a Mergify stack
 repository, amend the one commit); review starts when its code is done
@@ -176,13 +181,13 @@ the unit's own PR branch need no approval.
 
 ### 3. Review
 
-Spawn one `better-review` reviewer once the unit's code is done, unless a
+Spawn one fresh `better-review` reviewer once the unit's code is done, unless a
 trusted complete result for that HEAD is posted on the PR; it runs alongside
 CI. From round 2, carry a HEAD that follows a pass, else pick the tier: a
 carry or skip writes its record and spawns no reviewer ([review.md](references/review.md#tier-then-verdict)).
 Merge [GitHub reviews](references/review.md#github-reviews) into its result,
 run `review-verdict.mjs`, and follow the `verdict` it prints (exit 0; 2 only if it could not run): `pass`; `fix`, give the
-`fixBrief` (P0/P1 only) to a fix worker as its `action` says, then review
+`fixBrief` (P0/P1), its retained reproducers and any selected supporting P2 under [dropbox routing](references/dropbox.md#supporting-p2-work) to the implementation owner as its `action` says, then review
 again; `review-again`; `handback`, defer the PR with its open findings; `wait`,
 request the awaited re-review; `decide`, answer the `decide` file
 ([expire.md](references/expire.md#decide-before-you-defer)) and rerun with `--decision`.

package/skills/engineering/resolve-issues/references/ci.md

@@ -105,7 +105,9 @@ provider shows that PR merged.
 
 Clean that unit's workspace and resources, then finish it, in every scheduler
 mode: `next-actions.mjs` prints `cleanup-workspace` until its cleanup settles.
-First record the intent through the [checkpoint mechanism](task-plan.md#checkpoints) (`lifecycle.cleanup`
+First [release any session retention still held](implementation.md#settle-session-retention)
+for it, even while other units remain active; a conversation launched without protection has
+nothing to release. Then record the intent through the [checkpoint mechanism](task-plan.md#checkpoints) (`lifecycle.cleanup`
 `{state: applying, headSha: <the unit's headSha>}`), then run:
 
 ```bash

package/skills/engineering/resolve-issues/references/delivery-progress.md

@@ -13,6 +13,12 @@ units keep their own checkpoints and continue in parallel within actual resource
   observation that would distinguish the remaining causes. Run the relevant host,
   integration or device check before another broad acceptance cycle. After a correction,
   run affected checks and the required delivery checks, not extra assurance work.
+- **Keep the repair's contract intact.** Reproduce the reported input/state and check
+  the observable result the existing criteria require. Reuse sufficient checks; an added
+  regression establishes the condition that reaches the failure. If that operation exposes
+  another failure of the same contract, continue the repair while preserving earlier
+  assertions. Return when affected criteria and required local checks pass, or an existing
+  stop/handback condition applies. This adds no fixed journey or test layer.
 - **Justify infrastructure before adding it.** State which existing criterion requires
   it, why the current path cannot provide that proof, and the smallest alternative.
   Record the choice in the existing decision/note, within current authorization. Routine
@@ -39,6 +45,13 @@ issue or automatic scheduler gate. They do not waive required validation.
 
 ## Every brief contains
 
+Use the full checklist for a fresh or replacement worker. For a retained conversation,
+send the new feedback, current checkpoint, latest failure/fix brief and local evidence,
+current standing orders and changed decisions, affected skill/proof pointers, and new
+result path. Re-read the saved source/criteria after context loss; do not resend the original
+role or whole assignment already in that session. This shorter continuation keeps the same
+acceptance bar, launch-authority rules and history; it is not a new setup or proof campaign.
+
 - the source and criteria, as a file already in the run directory
 - the plan's `standingOrders`, verbatim, and the decisions that answer this unit's questions
 - absolute run, workspace, and findings paths; for implementers, the unit's
@@ -51,6 +64,9 @@ issue or automatic scheduler gate. They do not waive required validation.
   test; retain the same checkpoint/history when changing workers
 - for a fix after a failed check or case, the last `failure` block (case, step, error,
   evidence path) verbatim, so the worker starts from the cause
+- for review fixes, the generated brief's `reproducers` with their original triggers,
+  source rounds/HEADs, command, workspace-relative cwd, expected result and retained evidence;
+  run them against the candidate, rather than replaying in the reviewer's old checkout
 - a concise worker-specific contract: business outcome and context, full acceptance,
   security and quality requirements, and principles relevant to the assigned work; a
   reviewer gets review.md's two rules instead. Do not forward coordinator scheduling

package/skills/engineering/resolve-issues/references/done.md

@@ -15,6 +15,13 @@ nothing is left to settle.
 
 ## Clean before handoff
 
+[Release any session retention still held](implementation.md#settle-session-retention) for each
+unit before normal workspace cleanup; this also applies at each merge while other units
+continue. A launch that asked for none has nothing to release, and an acknowledgement is
+recorded only where protection was actually held. Record any
+resource intentionally kept under the existing lifecycle; never claim it was cleaned
+because its worker exited.
+
 Clean every delivered unit's workspace and resources before the report, in every
 scheduler mode ([workspaces.md](workspaces.md#cleanup-after-delivery-before-finish)).
 Its `lifecycle.cleanup` is `complete`, or `retained` with the current `headSha`

package/skills/engineering/resolve-issues/references/dropbox.md

@@ -8,8 +8,9 @@ Workers report problems; you route them.
 
 ## Route every problem
 
-Ask these in order; the first yes decides. Never route by the stated P-number:
-labels miss in both directions.
+Skip P3: no repair, dropbox entry or follow-up issue. For the remaining problems,
+ask these in order; the first yes decides. A P2 label alone does not decide whether
+work supports this delivery.
 
 1. **Could it hurt someone now?** Security, auth, tenancy, money, data loss,
    a failure users see, a flake that knocks other PRs out of the queue, or a
@@ -19,15 +20,17 @@ labels miss in both directions.
    Example: a reviewer notes, as P2, that a provider webhook amount is parsed
    without a check, "unreachable today". The input is external: file it now.
 2. **Does it stop this unit from being finished or proven?** Small and in the
-   unit's files: fix it in the unit. A question: take its automatic answer
+   unit's files: fix it in the unit; for P2, first record the explicit selection
+   under [Supporting P2 work](#supporting-p2-work). A question: take its automatic answer
    ([preflight.md](preflight.md#never-block-on-the-human)); defer it only when it is human-only. Anything else outside the unit's files, code or
    environment: an [infrastructure failure](expire.md#infrastructure-failures).
    Example: the shared test helper the unit's tests need is broken on the
    target: an infrastructure failure.
 3. **Did this unit cause it?** Fix it in the unit, however small; it costs
    less now than as an issue. `dropbox.mjs check` decides (`inDiff` true inside the
-   unit's diff), and `add` refuses an implementer entry there. A reviewer's
-   P2 never starts a fix round: it stays in the dropbox marked `inDiff`.
+   unit's diff), and `add` refuses an implementer entry there. For a reviewer's P2,
+   `inDiff` records location, not repair authorization: apply the supporting-work
+   test below; otherwise keep it in the dropbox.
 4. **Would fixing it change nothing** for behavior or for a reader? A style
    nit, a smell no documented rule names, hardening the
    code shows cannot trigger (internal input only, and this unit adds no new
@@ -44,6 +47,28 @@ labels miss in both directions.
 Record a blocking relation with `--blocks <#n | owner/name#n | issue URL>`:
 the posted issue says `Blocks #n` so a later run takes it first.
 
+## Supporting P2 work
+
+Select a P2 for the current unit only when it directly enables an existing
+authorized outcome, agreed verification or delivery. For example, include the
+unit's new regression module in its existing CI test list. Nearby cleanup,
+optional hardening and unrelated performance work stay deferred, even inside the diff.
+
+Record the finding/dropbox id, existing criterion and concrete reason in the plan's
+`decisions`, and include that selection in the implementer or fix brief. Keep P2
+nonblocking: its severity alone changes no verdict, fix counter or acceptance bar.
+Use the existing implementation or fix work when available. When review already
+passed, return the unit to implementation for the selected repair while retaining
+its passed review. After the repair push, use the existing post-pass carry and final
+CI rules; it does not reopen the blocking review loop.
+
+After the selected work is verified, record its SHA and check result in the unit's
+existing result/note and mark the dropbox entry with `--drop "fixed on <sha>; <check
+and result>"` so it is not filed as unfinished work. Leave the original review
+unchanged. If the work is not completed, retain its pending entry and report it
+truthfully. Shared-environment changes and changes to required checks keep their
+existing authorization boundaries.
+
 ## Commands
 
 ```bash
@@ -56,7 +81,7 @@ node $D add --dropbox <run>/dropbox.json --unit <id> --source implementer \
   --summary "<one line: what is wrong>" [--pr <url>] [--blocks <issue>] \
   --git <workspace> --base <review base>
 # coordinator, after every review round, before the verdict: adds every P2 (P3 is skipped),
-# then route each new entry; questions 1, 4, 5 change it:
+# then route each new entry, including any explicitly selected supporting work:
 node $D from-review --dropbox <run>/dropbox.json --review <run>/reviews/<unit>-r<N>.json \
   --pr <url> --git <unit review clone> --base <review base>
 node $D post --dropbox <run>/dropbox.json --repo <owner/name> --ids D3   # 1: file now

package/skills/engineering/resolve-issues/references/expire.md

@@ -235,15 +235,18 @@ missing, or names a step without a reason.
 | Review: `review-verdict.mjs` verdict `fix` | Follow its `action` ([review.md](review.md#fix-loop)). |
 | Review: `review-verdict.mjs` verdict `handback` (`not-converging`) | Stop fixing; mark the unit `blocked` (`blockedReason: review-handback`) and defer the PR with its open findings on its issue. |
 | Review: `review-verdict.mjs` verdict `decide`, or a worker's `decisionNeeded` | [Decide before you defer](#decide-before-you-defer). |
-| CI: a fix cycle without progress | Treat the failing check as the failing test: the next fix worker runs on the escalation model with that check as its only target. 2 cycles in a row without progress: `blocked` (`blockedReason: retry-ci`), deferred on its issue. |
+| CI: a fix cycle without progress | Treat the failing check as the failing test: continue the implementation owner with the required escalation fill and that check as its only target, using the [continuation/replacement selection](task-plan.md#worker-selection-on-resume) rather than fabricating a pin. 2 cycles in a row without progress: `blocked` (`blockedReason: retry-ci`), deferred on its issue. |
 | Too big for one attempt | Resume in the kept workspace while each resume makes [progress](#retry-by-failure-mode); after 2 in a row without verified checkpoint/failure-count progress, draft a split in `<run>/splits/`, file it into the spec's tree, and run the slices the sync adds ([preflight.md](preflight.md#put-every-filed-issue-in-the-tree)). |
 | A required proof the unit has no environment for yet | The unit builds it; see [Proof stays with its unit](#proof-stays-with-its-unit). |
 | Dependency | Fix the edge; resume when runnable. |
 | A capability the unit needs is missing and no unit builds it (a shared driver, fixture, or hook) | Build it inside the first unit that needs it; units that need it later get `dependsOn` on that unit. Only when that puts the unit past the size check's line limit, file it as its own issue beside them, with `blocked_by` on the units that use it, never on their parent issue. Example: three proof units each need a device-state reader: the first builds it, the other two depend on the first. |
 | [Human-only](#human-only) blocker | Take its automatic answer ([preflight.md](preflight.md#never-block-on-the-human)); when that defers it, mark `blocked` (`blockedReason: human-decision`, its `humanItem` and `humanNeed`), keep the work, and record what is needed on its owning issue; never ship part of the unit. |
 
-Continue in the kept workspace with the findings entry, never the old
-transcript. Record a queue stall with the
+Continue the retained owner in the kept workspace with the current checkpoint, findings
+and failure evidence. If its process state or required selection prevents continuation,
+use an explicit replacement under the [owner contract](implementation.md#implementation-owner),
+keeping its old session reference for settlement; replacement briefs use those local facts
+rather than an old transcript. Keep the response limits and history above. Record a queue stall with the
 provider pending as a wait and watch again. End the run only when
 `next-actions.mjs`, invoked with [live capacity](implementation.md#live-capacity), prints `finish`, and never claim the spec complete.
 

package/skills/engineering/resolve-issues/references/implementation.md

@@ -53,6 +53,55 @@ independent clone prepared before its first spawn; after that, never pass
 `git_clone_workspace:true` again, and use `sandbox:false` only when the caller
 accepts unrestricted writes.
 
+## Implementation owner
+
+Keep one implementation conversation per unit through local proof, independent review,
+review fixes and CI repairs. Its saved conversation outlives the active worker slot: launch
+each worker normally, single or batch as the assignment needs, and record the receipt as
+`implementationOwner` ([task-plan.md](task-plan.md#shape)). `retain_session` is optional
+protection from later cleanup, not a precondition for continuing: a completed conversation is
+resumed by its `runId` whether or not retention was requested, and the harness never asks for
+it on resume. Request it only when this caller needs the conversation protected through a long
+wait before cleanup, using the exact argument the launched tool advertises and never inventing
+one for a call that lacks it. A parked owner has no live process and reserves no slot. The
+coordinator still owns scheduling, plan writes, external CI, readiness and delivery;
+reviewers use separate conversations.
+
+`next-actions.mjs` supplies `continuation`, `workerKind`, and, for
+`owner-resume`, `owner`. Resume that completed attempt with
+`subagent_resume({id: owner.runId, prompt: <current brief>})`; record the new attempt ID
+without changing the conversation ID. Selection follows [continuation versus new launch](task-plan.md#worker-selection-on-resume): omit model/effort for ordinary continuation. Use only
+authorized, supported explicit overrides; when a required role-only fill cannot be expressed
+by the resume API, replace from that fill with the retained evidence instead of creating a
+pin from its resolved model ID. Clear `worker` when an attempt
+ends, but keep `implementationOwner` while review or CI is pending. Keep all counters and
+earlier results across attempts. `one-by-one` fixes findings sequentially in this owner.
+
+A missing history/workspace, an unusable saved owner, or an owner that cannot continue
+requires an explicit replacement reason and the retained checkpoint, failures and reproducer
+references in the replacement brief. Try the saved conversation first: a `retentionReleased`
+marker says only that optional protection lapsed, so it is not a replacement reason by itself
+and the conversation it names usually still resumes. Report lost continuity; never label a
+new conversation a resume. Existing recovery/stop rules still apply, and old plans without
+an owner use the fresh-worker path. Do not install or update the harness during a run merely
+to obtain continuation.
+
+### Settle session retention
+
+When this unit settles (merged, cancelled, deferred or handed back merge-ready), release any
+retention still held for its `implementationOwner`, `reviewSession` and `retiredSessions` with
+`subagent_release({id: <runId>})` before its normal workspace/resource cleanup. Only a
+conversation launched with `retain_session` has anything to release, so a normal launch skips
+this and a second release is not owed. Record the acknowledgement on that reference when it
+was actually held; an unavailable or refused release stays explicit rather than being
+recorded as done.
+
+Reopening is the ordinary case: resume the saved conversation even when its protection was
+released, because release stops protection and leaves the history in place. Start a fresh
+replacement only when continuation is genuinely unavailable, and carry the original
+checkpoint/findings/counters into it. The same rule covers a released unfinished review,
+keeping its round and existing full-review fallback.
+
 ## Brief
 
 Add to SKILL.md's brief list: whole-spec context and neighboring unit
@@ -83,8 +132,8 @@ handback step. Never edit `findings.json`.
 
 ## Per-unit loop
 
-On `resume` (in flight, no worker, code not done), restart the unit's
-implementer in its kept workspace with the brief and its findings entry.
+On `resume` (in flight, no worker, code not done), continue the unit's
+[implementation owner](#implementation-owner) in its kept workspace with the current brief.
 
 1. **Implement:** change only the unit's scope; commit coherent progress.
 2. **Validate:** prove the criteria with the repository's checks: the
@@ -119,13 +168,25 @@ implementer in its kept workspace with the brief and its findings entry.
    not prohibit long local tests or builds needed for the assigned validation.
 
 After 2 fix cycles without progress, or a stuck or late worker, follow
-[expire.md](expire.md). Start the next worker in the same workspace with the
-findings entry, the failing command and its output, and `git diff <base>`,
-never the old
-transcript.
+[expire.md](expire.md). Apply the next response through the retained owner where its
+completed conversation and required launch controls permit continuation. A replacement
+uses the same workspace and the findings entry, failing command/output and `git diff <base>`;
+record why it replaces the owner and retain its session reference as above. Give replacement
+workers those local facts rather than copying the old transcript. Keep all progress counters.
 
 ## Proof
 
+- **Make diagnostic failures executable.** Reuse the existing test runner/assertions.
+  A standalone probe exits nonzero for an unexpected exception, failed assertion or
+  result outside the expected contract. A catch used to add context rethrows or sets
+  a nonzero exit; log capture and cleanup preserve that failure status. For shell
+  pipelines, preserve the tested command's failure, for example with `set -o pipefail`.
+  An expected-exception test passes only when it asserts the expected exception and
+  relevant contract details; no exception or the wrong exception fails. Assess the
+  process status under that contract, rather than having the model classify log text.
+  Coordination commands that exit 0 to return a structured verdict keep that protocol;
+  read their verdict as documented. Record the command, status and failing step in
+  the existing result/failure fields; no new harness or evidence document is needed.
 - Prove `browser` and `emulator` levels with the existing end-to-end suite;
   with none, the unit builds the journey its proof needs
   ([expire.md](expire.md#proof-stays-with-its-unit)).

package/skills/engineering/resolve-issues/references/preflight.md

@@ -3,7 +3,21 @@
 Run these steps in order, in every run, including a one-unit run. Ask nothing
 until step 6.
 
-## 0. Ready label
+## 0. Repository retention and ready label
+
+Enroll this repository's daily tiered retention through the installed skill copy:
+
+```bash
+node <skill-base-dir>/scripts/daily-cleanup.mjs install --repo <canonical-repo-root>
+```
+
+Repeat on each invocation to refresh the same job, never discover sibling projects.
+Use a persistent installed skill path, not a temporary worktree. Report an enrollment
+failure as "daily cleanup not enabled" and continue the issue workflow. The daily
+job cleans only explicitly registered disposable resources; it preserves run history.
+See [retention.md](retention.md) for age tiers, registration and uninstall. Register
+owned reconstructable resources when they are created and update their activity before
+reuse; never turn an inventory guess into deletion authority.
 
 **One run per spec.** Before anything else, find the spec's run:
 
@@ -52,8 +66,8 @@ The script exits 0 whenever it ran (2 if it could not); read `outcome` in its JS
   planned from an issue that cannot be read.
 - **Exit 2** (the script could not run): fix the issue reference and rerun.
 
-Skip this step for a local or pasted spec. Count only GitHub's native
-sub-issues, never a checklist.
+Skip only the ready-label check for a local or pasted spec; repository retention
+enrollment still runs. Count only GitHub's native sub-issues, never a checklist.
 
 ### Compaction hook