@akagilnc/pi-workflow-roles 0.1.2139 → 0.1.2148

package/dist/public-cli/main.js

@@ -136,6 +136,54 @@ var init_collector_output = __esm({
   }
 });
 
+// src/engine-labor-fallback.ts
+function buildEngineLaborFallbackField(input) {
+  return Object.freeze({
+    engineLaborFallback: Object.freeze({
+      engine: input.engine,
+      failure: input.failure,
+      laborBy: "seat"
+    })
+  });
+}
+function isSeatFallbackTaintedStatus(status) {
+  return status.endsWith(SEAT_FALLBACK_STATUS_SUFFIX);
+}
+function seatFallbackBaseStatus(status) {
+  return isSeatFallbackTaintedStatus(status) ? status.slice(0, -SEAT_FALLBACK_STATUS_SUFFIX.length) : status;
+}
+function seatFallbackStatusHasLawfulEvidence(status, source) {
+  if (!isSeatFallbackTaintedStatus(status)) return true;
+  return readEngineLaborFallbackFieldFrom(source) !== void 0;
+}
+function readEngineLaborFallbackFieldFrom(source) {
+  if (typeof source !== "object" || source === null || Array.isArray(source)) {
+    return void 0;
+  }
+  let raw;
+  try {
+    raw = source.engineLaborFallback;
+  } catch {
+    return void 0;
+  }
+  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
+  const rec = raw;
+  if (typeof rec.engine !== "string" || typeof rec.failure !== "string" || rec.laborBy !== "seat") {
+    return void 0;
+  }
+  return buildEngineLaborFallbackField({
+    engine: rec.engine,
+    failure: rec.failure
+  });
+}
+var SEAT_FALLBACK_STATUS_SUFFIX;
+var init_engine_labor_fallback = __esm({
+  "src/engine-labor-fallback.ts"() {
+    "use strict";
+    SEAT_FALLBACK_STATUS_SUFFIX = "-by-fallback";
+  }
+});
+
 // src/package-contracts/judge-output.ts
 function validateAcceptedJudgeDetails(verdict) {
   if (verdict === null || typeof verdict !== "object" || Array.isArray(verdict)) throw new Error("Judge verdict has no execution discriminator");
@@ -145,13 +193,20 @@ function validateAcceptedJudgeDetails(verdict) {
   } catch {
     throw new Error("Judge verdict has no execution discriminator");
   }
-  if (["converged", "continue", "escalate"].includes(String(judgeStatus))) return verdict;
+  if (typeof judgeStatus !== "string") {
+    throw new Error("Judge verdict has no execution discriminator");
+  }
+  const base = seatFallbackBaseStatus(judgeStatus);
+  if (["converged", "continue", "escalate"].includes(base) && seatFallbackStatusHasLawfulEvidence(judgeStatus, verdict)) {
+    return verdict;
+  }
   throw new Error("Judge verdict has no execution discriminator");
 }
 var JUDGE_OUTPUT_TOOL_NAME;
 var init_judge_output = __esm({
   "src/package-contracts/judge-output.ts"() {
     "use strict";
+    init_engine_labor_fallback();
     JUDGE_OUTPUT_TOOL_NAME = "ak_judge_output";
   }
 });
@@ -169,6 +224,10 @@ function read(value, key) {
   }
 }
 function validateRuntimeReviewerReceipt(output) {
+  const status = read(output, "status");
+  if (typeof status === "string" && !seatFallbackStatusHasLawfulEvidence(status, output)) {
+    throw new Error("Reviewer receipt has no recognized execution discriminator");
+  }
   const acceptedBatch = read(output, "acceptedBatch");
   const identities = read(output, "identities");
   const construction = read(identities, "construction");
@@ -199,11 +258,11 @@ function validateRuntimeReviewerReceipt(output) {
       const expectedPrompt = read(read(legs[index], "prompt"), "text");
       const actualPrompt = read(read(outcome, "prompt"), "text");
       if (expectedPrompt !== actualPrompt) throw new Error("Reviewer outcome prompt disagrees with accepted leg");
-      const status = read(outcome, "status");
+      const status2 = read(outcome, "status");
       const report = read(reports, axis);
-      if (status === "successful" && report === void 0)
+      if (status2 === "successful" && report === void 0)
         throw new Error("Successful Reviewer outcome lacks report");
-      if (status === "failed" && report !== void 0) throw new Error("Failed Reviewer outcome cannot bind a report");
+      if (status2 === "failed" && report !== void 0) throw new Error("Failed Reviewer outcome cannot bind a report");
     }
     const specDisposition = read(output, "specDisposition");
     if (specDisposition === "launched") {
@@ -224,6 +283,7 @@ var REVIEWER_OUTPUT_TOOL_NAME;
 var init_reviewer_output = __esm({
   "src/package-contracts/reviewer-output.ts"() {
     "use strict";
+    init_engine_labor_fallback();
     REVIEWER_OUTPUT_TOOL_NAME = "ak_reviewer_output";
   }
 });
@@ -14086,12 +14146,18 @@ function read2(value, key) {
 }
 function validateDoctorSubmissionShape(value) {
   const status = read2(value, "status");
-  if (status !== "completed" && status !== "refused") throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+  const base = typeof status === "string" ? seatFallbackBaseStatus(status) : status;
+  if (base !== "completed" && base !== "refused") throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+  if (typeof status === "string" && !seatFallbackStatusHasLawfulEvidence(status, value)) {
+    throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+  }
   return value;
 }
 function validateRecordedDoctorOutput(value) {
   const output = validateDoctorSubmissionShape(value);
-  if (read2(output, "status") === "completed" && read2(output, "cost") === void 0) throw new Error("Completed Doctor receipt has no runtime-owned cost testimony");
+  const status = read2(output, "status");
+  const base = typeof status === "string" ? seatFallbackBaseStatus(status) : status;
+  if (base === "completed" && read2(output, "cost") === void 0) throw new Error("Completed Doctor receipt has no runtime-owned cost testimony");
   return output;
 }
 var DOCTOR_OUTPUT_TOOL_NAME, DOCTOR_TARGET_KINDS, nonblank, count, evidenceIds, guardrail, lastRealBite, assetKinds, findingBody, finding, caseIdentity, cost, doctorSubmissionVariants, doctorSubmissionSchema, doctorOutputSchema, doctorEvidenceReadSchema, DoctorSubmissionContractError;
@@ -14100,6 +14166,7 @@ var init_doctor_contracts = __esm({
     "use strict";
     init_build();
     init_canonical_json();
+    init_engine_labor_fallback();
     init_open_tool_schema();
     DOCTOR_OUTPUT_TOOL_NAME = "ak_doctor_output";
     DOCTOR_TARGET_KINDS = ["law", "gate", "template", "station", "seat"];
@@ -14243,8 +14310,13 @@ function validateMergerInput(value) {
 }
 function validateMergerOutput(value, expectedAttemptId) {
   if (!record(value) || expectedAttemptId !== void 0 && value.attemptId !== expectedAttemptId) throw new Error("Merger output attempt mismatch");
-  if (value.status === "completed" && isFullGitObjectId(value.mergeCommitId)) return structuredClone(value);
-  if (value.status === "escalate") return structuredClone(value);
+  const status = typeof value.status === "string" ? value.status : void 0;
+  const statusBase = status !== void 0 ? seatFallbackBaseStatus(status) : void 0;
+  if (status !== void 0 && !seatFallbackStatusHasLawfulEvidence(status, value)) {
+    throw new Error("Merger output has no recognized execution discriminator");
+  }
+  if (statusBase === "completed" && isFullGitObjectId(value.mergeCommitId)) return structuredClone(value);
+  if (statusBase === "escalate") return structuredClone(value);
   throw new Error("Merger output has no recognized execution discriminator");
 }
 var oidPattern, materialSchema, checkSchema, mergerInputSchema, mergerOutputVariants, mergerOutputSchema, MERGER_OUTPUT_TOOL_NAME, record, blank, MergerInputContractError;
@@ -14254,6 +14326,7 @@ var init_merger_contracts = __esm({
     init_build();
     init_git_object_id();
     init_exact_utf8();
+    init_engine_labor_fallback();
     init_sha256();
     init_open_tool_schema();
     oidPattern = "^(?:[0-9a-f]{40}|[0-9a-f]{64})$";
@@ -15190,8 +15263,10 @@ function validateAcceptedDetails(toolName, details) {
     [MERGER_OUTPUT_TOOL_NAME]: ["completed", "escalate"]
   };
   const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
-  const runtimeBindingMissing = toolName === DOCTOR_OUTPUT_TOOL_NAME && discriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object") || toolName === REVIEWER_OUTPUT_TOOL_NAME && candidate?.version !== 2;
-  if (runtimeBindingMissing || !collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(discriminator))) {
+  const baseDiscriminator = typeof discriminator === "string" ? seatFallbackBaseStatus(discriminator) : discriminator;
+  const taintedWithoutEvidence = typeof discriminator === "string" && !seatFallbackStatusHasLawfulEvidence(discriminator, details);
+  const runtimeBindingMissing = toolName === DOCTOR_OUTPUT_TOOL_NAME && baseDiscriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object") || toolName === REVIEWER_OUTPUT_TOOL_NAME && candidate?.version !== 2;
+  if (taintedWithoutEvidence || runtimeBindingMissing || !collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator))) {
     throw new AcceptedDetailsContractError("terminating receipt has no recognized execution discriminator");
   }
   try {
@@ -15227,7 +15302,8 @@ function acceptedFacts(toolName, details) {
       return { status: details.judgeStatus };
     case MERGER_OUTPUT_TOOL_NAME: {
       const output = details;
-      return { status: output.status, ...output.status === "completed" && typeof output.mergeCommitId === "string" ? { commit: output.mergeCommitId } : {} };
+      const status = output.status;
+      return { status, ...seatFallbackBaseStatus(status) === "completed" && typeof output.mergeCommitId === "string" ? { commit: output.mergeCommitId } : {} };
     }
     case COLLECTOR_OUTPUT_TOOL:
       return { status: "collected" };
@@ -15241,6 +15317,7 @@ var init_terminating_tools = __esm({
     init_judge_output();
     init_reviewer_output();
     init_audit_escalation();
+    init_engine_labor_fallback();
     init_doctor_contracts();
     init_merger_contracts();
     init_worker_output();
@@ -19266,42 +19343,6 @@ var init_auditor_dossier_tool = __esm({
   }
 });
 
-// src/engine-labor-fallback.ts
-function buildEngineLaborFallbackField(input) {
-  return Object.freeze({
-    engineLaborFallback: Object.freeze({
-      engine: input.engine,
-      failure: input.failure,
-      laborBy: "seat"
-    })
-  });
-}
-function readEngineLaborFallbackFieldFrom(source) {
-  if (typeof source !== "object" || source === null || Array.isArray(source)) {
-    return void 0;
-  }
-  let raw;
-  try {
-    raw = source.engineLaborFallback;
-  } catch {
-    return void 0;
-  }
-  if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return void 0;
-  const rec = raw;
-  if (typeof rec.engine !== "string" || typeof rec.failure !== "string" || rec.laborBy !== "seat") {
-    return void 0;
-  }
-  return buildEngineLaborFallbackField({
-    engine: rec.engine,
-    failure: rec.failure
-  });
-}
-var init_engine_labor_fallback = __esm({
-  "src/engine-labor-fallback.ts"() {
-    "use strict";
-  }
-});
-
 // src/engine-detour-tool.ts
 var engineDetourArgsSchema;
 var init_engine_detour_tool = __esm({
@@ -20403,7 +20444,8 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
     // #380: spread sole-built field; do not re-key here (S1).
     ...readEngineLaborFallbackFieldFrom(verdict)
   };
-  if (judgeStatus === "continue") {
+  const statusBase = seatFallbackBaseStatus(judgeStatus);
+  if (statusBase === "continue") {
     const fix = safelyRead(verdict, "fix");
     if (fix.readable && isRecord5(fix.value)) {
       const summary = safelyRead(fix.value, "summary");
@@ -20428,7 +20470,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
       }
     }
   }
-  if (judgeStatus === "escalate") {
+  if (statusBase === "escalate") {
     const gate = safelyRead(verdict, "decisionGate");
     if (gate.readable && isRecord5(gate.value)) {
       const question = safelyRead(gate.value, "question");
@@ -20452,10 +20494,11 @@ function coderDecisiveFacts(output) {
   const status = safelyRead(candidate, "status");
   const facts = {};
   if (status.readable && typeof status.value === "string") facts.coderStatus = status.value;
+  const statusBase = status.readable && typeof status.value === "string" ? seatFallbackBaseStatus(status.value) : void 0;
   const remainingScope = safelyRead(candidate, "remainingScope");
-  if (status.readable && status.value === "unfinished" && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
+  if (statusBase === "unfinished" && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
   const reason = safelyRead(candidate, "reason");
-  if (status.readable && status.value === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
+  if (statusBase === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
     facts.reason = reason.value;
   }
   const report = safelyRead(candidate, "report");
@@ -20467,14 +20510,15 @@ function fixerDecisiveFacts(output) {
   const status = safelyRead(candidate, "status");
   const facts = {};
   if (status.readable && typeof status.value === "string") facts.fixerStatus = status.value;
+  const statusBase = status.readable && typeof status.value === "string" ? seatFallbackBaseStatus(status.value) : void 0;
   const remainingScope = safelyRead(candidate, "remainingScope");
-  if (status.readable && (status.value === "unfinished" || status.value === "refused") && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
+  if ((statusBase === "unfinished" || statusBase === "refused") && remainingScope.readable && typeof remainingScope.value === "string") facts.remainingScope = remainingScope.value;
   const reason = safelyRead(candidate, "reason");
-  if (status.readable && status.value === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
+  if (statusBase === "unfinished" && reason.readable && typeof reason.value === "string" && reason.value.trim().length > 0) {
     facts.reason = reason.value;
   }
   const blockerRead = safelyRead(candidate, "blocker");
-  if (status.readable && status.value === "refused" && blockerRead.readable && isRecord5(blockerRead.value)) {
+  if (statusBase === "refused" && blockerRead.readable && isRecord5(blockerRead.value)) {
     const cause = safelyRead(blockerRead.value, "cause");
     if (cause.readable && typeof cause.value === "string") facts.blockerCause = cause.value;
     const prerequisiteId = safelyRead(blockerRead.value, "prerequisiteId");
@@ -20550,7 +20594,8 @@ function doctorDecisiveFacts(output) {
   const status = safelyRead(candidate, "status");
   const facts = { ...auditNoReceiptDecisiveFact(candidate) };
   if (status.readable && typeof status.value === "string") facts.doctorStatus = status.value;
-  if (status.readable && status.value === "refused") {
+  const statusBase = status.readable && typeof status.value === "string" ? seatFallbackBaseStatus(status.value) : void 0;
+  if (statusBase === "refused") {
     const reason = safelyRead(candidate, "reason");
     if (reason.readable && reason.value !== void 0) facts.reason = reason.value;
     const missing = safelyRead(candidate, "missingEvidence");
@@ -20597,7 +20642,8 @@ function reviewerDecisiveFacts(output) {
     facts.specDisposition = specDisposition.value;
   }
   const diagnostic = safelyRead(candidate, "diagnostic");
-  if (status.readable && status.value === "refused" && diagnostic.readable) {
+  const statusBase = status.readable && typeof status.value === "string" ? seatFallbackBaseStatus(status.value) : void 0;
+  if (statusBase === "refused" && diagnostic.readable) {
     facts.diagnosticPresent = typeof diagnostic.value === "string" && diagnostic.value.trim().length > 0;
   }
   return facts;
@@ -21038,9 +21084,11 @@ function extractJudgeRoleOutcome(entries) {
     if (isUnboundAuditEscalationFace(details)) continue;
     if (!isRecord5(details)) continue;
     const statusRead = safelyRead(details, "judgeStatus");
-    if (!statusRead.readable) continue;
+    if (!statusRead.readable || typeof statusRead.value !== "string") continue;
     const judgeStatus = statusRead.value;
-    if (judgeStatus !== "converged" && judgeStatus !== "continue" && judgeStatus !== "escalate") continue;
+    const statusBase = seatFallbackBaseStatus(judgeStatus);
+    if (statusBase !== "converged" && statusBase !== "continue" && statusBase !== "escalate") continue;
+    if (!seatFallbackStatusHasLawfulEvidence(judgeStatus, details)) continue;
     return {
       kind: "accepted",
       role: "judge",
@@ -21730,8 +21778,9 @@ async function settleLawfulDoctorTerminalResult(admitted) {
   if (entries === void 0) return void 0;
   const extracted = extractDoctorRoleOutcome(entries);
   if (extracted === void 0) return void 0;
-  if (extracted.output !== void 0 && extracted.output.status === "completed") {
-    if (extracted.output.case.issueNumber !== admitted.caseIdentity.issueNumber || extracted.output.case.runsPath !== admitted.caseIdentity.runsPath) {
+  if (extracted.output !== void 0 && seatFallbackBaseStatus(String(extracted.output.status)) === "completed") {
+    const completedCase = extracted.output.case;
+    if (completedCase.issueNumber !== admitted.caseIdentity.issueNumber || completedCase.runsPath !== admitted.caseIdentity.runsPath) {
       const error = new Error(
         "Doctor receipt case identity does not match admitted case identity"
       );
@@ -21945,7 +21994,8 @@ function mergerDecisiveFacts(output) {
   const attemptId = safelyRead(candidate, "attemptId");
   if (status.readable && typeof status.value === "string") facts.mergerStatus = status.value;
   if (attemptId.readable && attemptId.value !== void 0) facts.attemptId = attemptId.value;
-  const decisiveKey = status.readable && status.value === "completed" ? "mergeCommitId" : "diagnosis";
+  const statusBase = status.readable && typeof status.value === "string" ? seatFallbackBaseStatus(status.value) : void 0;
+  const decisiveKey = statusBase === "completed" ? "mergeCommitId" : "diagnosis";
   const decisive = safelyRead(candidate, decisiveKey);
   if (decisive.readable && decisive.value !== void 0) facts[decisiveKey] = decisive.value;
   return facts;
@@ -25881,8 +25931,9 @@ function mapTerminal(role, terminal) {
       noReceipt: false
     };
   }
+  const statusBase = seatFallbackBaseStatus(status);
   const acceptedSet = ACCEPTED_STATUS[role];
-  if (acceptedSet === void 0 || !acceptedSet.has(status)) {
+  if (acceptedSet === void 0 || !acceptedSet.has(statusBase)) {
     return {
       terminalLabel: status,
       accepted: false,
@@ -25891,9 +25942,9 @@ function mapTerminal(role, terminal) {
       noReceipt: false
     };
   }
-  const plannedDuty = WORKER_ROLES.has(role) && status === "planned";
+  const plannedDuty = WORKER_ROLES.has(role) && statusBase === "planned";
   const successSet = SUCCESS_STATUS[role] ?? /* @__PURE__ */ new Set();
-  const success = !plannedDuty && successSet.has(status);
+  const success = !plannedDuty && successSet.has(statusBase);
   const successEligible = !plannedDuty;
   return {
     terminalLabel: status,
@@ -26015,6 +26066,7 @@ var WORKER_ROLES, ACCEPTED_STATUS, SUCCESS_STATUS, acceptanceSuccessReworkFamily
 var init_acceptance_success_rework = __esm({
   "src/taishi-metric-families/acceptance-success-rework.ts"() {
     "use strict";
+    init_engine_labor_fallback();
     init_taishi_median();
     WORKER_ROLES = /* @__PURE__ */ new Set(["coder", "fixer"]);
     ACCEPTED_STATUS = {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.2139",
+  "version": "0.1.2148",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/resources/engines/grok-4.6.md

@@ -37,6 +37,11 @@ grok --prompt-file /path/to/labor-prompt.md -m grok-4.6 --always-approve --outpu
   alias `--effort`; a low-tier run completed correctly). If the mandate names
   no tier, use the seat's ordered thinking tier; never omit the flag — the
   CLI default is not guaranteed to match the ordered tier.
+- **Labor prompt must be seat-authored**: write the complete task brief into a
+  temp file and pass it via `--prompt-file`. Attachments/receipt JSON are
+  evidence material, not the prompt body — feeding them directly is rejected
+  by the CLI as non-ACP JSON (`JSON object must have a type field`;
+  live-verified 2026-08-21).
 
 ## Failure handling
 

package/scripts/build-package.mjs

@@ -9,6 +9,8 @@ const entries = [
   "work-subject-identity",
   "navigator-invocation-identity",
   "navigator-attendance",
+  // Navigator package-graph dependency (seat-fallback base status / ADR 0071).
+  "engine-labor-fallback",
   "activation-ledger-git",
   "activation-ledger-topology",
   "activation-reconciliation",

package/src/doctor-contracts.ts

@@ -1,5 +1,10 @@
 import { Type } from "typebox";
 import { canonicalJson } from "./canonical-json.ts";
+import {
+  seatFallbackBaseStatus,
+  seatFallbackStatusHasLawfulEvidence,
+  type WithEngineLaborFallback,
+} from "./engine-labor-fallback.ts";
 import { openToolObjectFromUnion } from "./open-tool-schema.ts";
 
 export const DOCTOR_EVIDENCE_TOOL_NAME = "ak_doctor_evidence";
@@ -37,9 +42,13 @@ export type DoctorFinding =
 export type DoctorSubmission =
   | { status: "completed"; case: DoctorCaseIdentity; findings: DoctorFinding[] }
   | { status: "refused"; reason: string; missingEvidence: Array<{ need: string; targetKeys: string[] }> };
-export type DoctorOutput =
+type DoctorOutputClean =
   | { status: "completed"; case: DoctorCaseIdentity; findings: DoctorFinding[]; cost: DoctorCaseCost }
   | Extract<DoctorSubmission, { status: "refused" }>;
+/** Clean recorded shape or seat-fallback tainted accepted receipt (ADR 0071). */
+export type DoctorOutput =
+  | DoctorOutputClean
+  | WithEngineLaborFallback<DoctorOutputClean>;
 export type DoctorEvidenceEntry = { id: string; kind: "session" | "stderr"; byteLength: number; contentLength: number; sha256: string; content: string };
 export type DoctorCase = { version: 1; identity: DoctorCaseIdentity; evidence: DoctorEvidenceEntry[]; cost: DoctorCaseCost };
 
@@ -96,12 +105,19 @@ function isRecord(value: unknown): value is Record<string, unknown> { return typ
 function read(value: unknown, key: string): unknown { if (!isRecord(value)) return undefined; try { return value[key]; } catch { return undefined; } }
 export function validateDoctorSubmissionShape(value: unknown): DoctorSubmission {
   const status = read(value, "status");
-  if (status !== "completed" && status !== "refused") throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+  const base = typeof status === "string" ? seatFallbackBaseStatus(status) : status;
+  if (base !== "completed" && base !== "refused") throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+  // ADR 0071: tainted status requires latch-shaped engineLaborFallback evidence.
+  if (typeof status === "string" && !seatFallbackStatusHasLawfulEvidence(status, value)) {
+    throw new DoctorSubmissionContractError("Doctor submission has no recognized execution status");
+  }
   return value as DoctorSubmission;
 }
 export function validateRecordedDoctorOutput(value: unknown): DoctorOutput {
   const output = validateDoctorSubmissionShape(value);
-  if (read(output, "status") === "completed" && read(output, "cost") === undefined) throw new Error("Completed Doctor receipt has no runtime-owned cost testimony");
+  const status = read(output, "status");
+  const base = typeof status === "string" ? seatFallbackBaseStatus(status) : status;
+  if (base === "completed" && read(output, "cost") === undefined) throw new Error("Completed Doctor receipt has no runtime-owned cost testimony");
   return output as DoctorOutput;
 }
 

package/src/engine-labor-fallback.ts

@@ -32,6 +32,87 @@ export type EngineLaborFallbackField = ReturnType<
   typeof buildEngineLaborFallbackField
 >;
 
+/**
+ * Seat-fallback status taint suffix.
+ * When engineLaborFallback is declared, typed status discriminators
+ * (judgeStatus / status) must not remain clean values like converged/completed.
+ * Mechanical form: `${base}-by-fallback` — readable on the status line alone.
+ */
+export const SEAT_FALLBACK_STATUS_SUFFIX = "-by-fallback" as const;
+
+export function isSeatFallbackTaintedStatus(status: string): boolean {
+  return status.endsWith(SEAT_FALLBACK_STATUS_SUFFIX);
+}
+
+/** Strip seat-fallback taint for semantic routing / acceptance matching. */
+export function seatFallbackBaseStatus(status: string): string {
+  return isSeatFallbackTaintedStatus(status)
+    ? status.slice(0, -SEAT_FALLBACK_STATUS_SUFFIX.length)
+    : status;
+}
+
+/**
+ * ADR 0071: `-by-fallback` is lawful only with a valid `engineLaborFallback`
+ * declaration (latch-shaped triple). Clean statuses do not need the field.
+ */
+export function seatFallbackStatusHasLawfulEvidence(
+  status: string,
+  source: unknown,
+): boolean {
+  if (!isSeatFallbackTaintedStatus(status)) return true;
+  return readEngineLaborFallbackFieldFrom(source) !== undefined;
+}
+
+/** Idempotent taint: clean → `${clean}-by-fallback`; already tainted stays. */
+export function taintStatusForSeatFallback(status: string): string {
+  if (status.length === 0 || isSeatFallbackTaintedStatus(status)) return status;
+  return `${status}${SEAT_FALLBACK_STATUS_SUFFIX}`;
+}
+
+/** Clean status literal or its seat-fallback tainted form. */
+export type SeatFallbackTaintedStatus<S extends string = string> =
+  | S
+  | `${S}${typeof SEAT_FALLBACK_STATUS_SUFFIX}`;
+
+type TaintDiscriminatorFields<T> = {
+  [K in keyof T]: K extends "status" | "judgeStatus"
+    ? T[K] extends string
+      ? SeatFallbackTaintedStatus<Extract<T[K], string>>
+      : T[K]
+    : T[K];
+};
+
+/** Receipt shape after sole-built field attach + status taint (runtime truth). */
+export type WithEngineLaborFallback<T extends object> = T extends unknown
+  ? TaintDiscriminatorFields<T> & EngineLaborFallbackField
+  : never;
+
+const STATUS_DISCRIMINATOR_KEYS = ["judgeStatus", "status"] as const;
+
+/** Rewrite known status discriminators on a receipt when seat fallback is declared. */
+function taintReceiptStatusDiscriminators<T extends object>(
+  receipt: T,
+): TaintDiscriminatorFields<T> {
+  let next: Record<string, unknown> | undefined;
+  for (const key of STATUS_DISCRIMINATOR_KEYS) {
+    if (!Object.prototype.hasOwnProperty.call(receipt, key)) continue;
+    let value: unknown;
+    try {
+      value = (receipt as Record<string, unknown>)[key];
+    } catch {
+      continue;
+    }
+    if (typeof value !== "string" || value.length === 0) continue;
+    const tainted = taintStatusForSeatFallback(value);
+    if (tainted === value) continue;
+    if (next === undefined) {
+      next = { ...(receipt as object as Record<string, unknown>) };
+    }
+    next[key] = tainted;
+  }
+  return (next === undefined ? receipt : next) as TaintDiscriminatorFields<T>;
+}
+
 export type EngineLaborFallbackLatch = {
   field: EngineLaborFallbackField | undefined;
 };
@@ -62,14 +143,31 @@ export function readEngineLaborFallbackField(
 /**
  * Merge sole-built field into typed receipt details.
  * Spread only — must not construct the field key again (S1).
+ * When the field is present, also taint typed status discriminators so a
+ * status-line-only reader cannot mistake seat labor for clean engine labor.
  * Without a mechanical latch, strip any model-injected reserved key (no forged declaration).
+ * Return type widens when field is attached: discriminators may carry `-by-fallback`
+ * and the sole-built field is present (callers must not assume clean-only unions).
  */
+export function withEngineLaborFallbackField<T extends object>(
+  receipt: T,
+  field: EngineLaborFallbackField,
+): WithEngineLaborFallback<T>;
+export function withEngineLaborFallbackField<T extends object>(
+  receipt: T,
+  field: undefined,
+): T;
+export function withEngineLaborFallbackField<T extends object>(
+  receipt: T,
+  field: EngineLaborFallbackField | undefined,
+): T | WithEngineLaborFallback<T>;
 export function withEngineLaborFallbackField<T extends object>(
   receipt: T,
   field: EngineLaborFallbackField | undefined,
-): T {
+): T | WithEngineLaborFallback<T> {
   if (field !== undefined) {
-    return { ...receipt, ...field };
+    const taintedReceipt = taintReceiptStatusDiscriminators(receipt);
+    return { ...taintedReceipt, ...field } as WithEngineLaborFallback<T>;
   }
   if (
     !Object.prototype.hasOwnProperty.call(receipt, "engineLaborFallback")

package/src/factory-board.ts

@@ -20,6 +20,7 @@ import { randomUUID } from "node:crypto";
 import { lstat, mkdir, realpath, rename, rm, writeFile } from "node:fs/promises";
 import { basename, dirname, join, relative, resolve, sep } from "node:path";
 
+import { seatFallbackBaseStatus } from "./engine-labor-fallback.ts";
 import {
   formatDurationZh,
   formatLocalDateTime,
@@ -176,7 +177,8 @@ export function decideTicketCurrentState(input: {
   const latest = sortRunsByStart(input.runs).at(-1)!;
   if (!latest.hasResult) return unacceptedBand(latest.mtimeMs, input.now.getTime());
   // Escalate is an awaiting overlay: same placement and sort band, distinct state.
-  if (latest.resultStatus === "escalate") return "escalate-awaiting";
+  // Seat-fallback taint (`escalate-by-fallback`) keeps escalate base semantics.
+  if (seatFallbackBaseStatus(latest.resultStatus) === "escalate") return "escalate-awaiting";
   return "accepted-awaiting";
 }
 
@@ -843,7 +845,9 @@ function buildBreadcrumbSteps(runs: readonly TicketTrajectoryRun[]): BreadcrumbS
     const isReturn = seen.has(group.station);
     seen.add(group.station);
     const isRejected = group.runs.some(
-      (run) => run.hasResult && REJECTED_RESULT_STATUSES.has(run.resultStatus),
+      (run) =>
+        run.hasResult &&
+        REJECTED_RESULT_STATUSES.has(seatFallbackBaseStatus(run.resultStatus)),
     );
     steps.push({
       station: group.station,

package/src/merger-contracts.ts

@@ -1,6 +1,11 @@
 import { Type, type Static } from "typebox";
 import { isFullGitObjectId } from "./git-object-id.ts";
 import { exactUtf8 } from "./exact-utf8.ts";
+import {
+  seatFallbackBaseStatus,
+  seatFallbackStatusHasLawfulEvidence,
+  type WithEngineLaborFallback,
+} from "./engine-labor-fallback.ts";
 import { sha256Hex } from "./sha256.ts";
 import { openToolObjectFromUnion } from "./open-tool-schema.ts";
 
@@ -24,9 +29,13 @@ export const mergerOutputSchema = openToolObjectFromUnion(mergerOutputVariants);
 export type DeepReadonly<T> = T extends (...args: never[]) => unknown ? T : T extends readonly (infer U)[] ? readonly DeepReadonly<U>[] : T extends object ? { readonly [K in keyof T]: DeepReadonly<T[K]> } : T;
 export type MergerMaterial = DeepReadonly<Static<typeof materialSchema>>;
 export type MergerInput = DeepReadonly<Static<typeof mergerInputSchema>>;
-export type MergerOutput =
+type MergerOutputClean =
   | { status: "completed"; attemptId: string; report: string; mergeCommitId: string }
   | { status: "escalate"; attemptId: string; diagnosis: string; report: string };
+/** Clean submission shape or seat-fallback tainted accepted receipt (ADR 0071). */
+export type MergerOutput =
+  | MergerOutputClean
+  | WithEngineLaborFallback<MergerOutputClean>;
 export const MERGER_OUTPUT_TOOL_NAME = "ak_merger_output";
 export const MERGER_ACCEPTED_TEXT = "Merger output accepted";
 
@@ -65,7 +74,13 @@ export function validateMergerInput(value: unknown): MergerInput {
 
 export function validateMergerOutput(value: unknown, expectedAttemptId?: string): MergerOutput {
   if (!record(value) || (expectedAttemptId !== undefined && value.attemptId !== expectedAttemptId)) throw new Error("Merger output attempt mismatch");
-  if (value.status === "completed" && isFullGitObjectId(value.mergeCommitId)) return structuredClone(value) as MergerOutput;
-  if (value.status === "escalate") return structuredClone(value) as MergerOutput;
+  const status = typeof value.status === "string" ? value.status : undefined;
+  const statusBase = status !== undefined ? seatFallbackBaseStatus(status) : undefined;
+  // ADR 0071: tainted status requires latch-shaped engineLaborFallback evidence.
+  if (status !== undefined && !seatFallbackStatusHasLawfulEvidence(status, value)) {
+    throw new Error("Merger output has no recognized execution discriminator");
+  }
+  if (statusBase === "completed" && isFullGitObjectId(value.mergeCommitId)) return structuredClone(value) as MergerOutput;
+  if (statusBase === "escalate") return structuredClone(value) as MergerOutput;
   throw new Error("Merger output has no recognized execution discriminator");
 }