@akagilnc/pi-workflow-roles 0.1.2383 → 0.1.2397

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.2383",
+  "version": "0.1.2397",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/src/analyst-gate-cycles-read.ts

@@ -16,10 +16,9 @@
  * An accepted gate terminating receipt (isError:false pair on dispatch/officer
  * tool) whose required typed facts are unusable — status, dispatch officer, or
  * first/last span missing/unknown/unparseable/inverted — also fails loudly via
- * the same throw→ledger `auditor-roles` unreadable seam. Lawful Gatekeeper
- * typed `incomplete` is a recognizable terminal (omit from pairing, leg stays
- * readable) — only unknown/non-contract dispatch status stays loud. True
- * non-gate volumes (soul-audit noise, etc.) stay omitted from pairing.
+ * the same throw→ledger `auditor-roles` unreadable seam. Unknown/non-contract
+ * dispatch status stays loud (#475 abolished Gatekeeper incomplete special-case).
+ * True non-gate volumes (soul-audit noise, etc.) stay omitted from pairing.
  */
 import { readdir } from "node:fs/promises";
 import { join } from "node:path";
@@ -36,7 +35,7 @@ export type AnalystGateCycleRound = {
   readonly roundIndex: number;
   /** Current English officer face after historical alias fold. */
   readonly officer: "inspector" | "notary";
-  /** Typed officer terminal status (pass / bounce / incomplete / …). */
+  /** Typed officer terminal status (pass / bounce / …). */
   readonly status: string;
   /** Officer subsession first→last usable timestamp delta (ms). */
   readonly officerWallMs: number;
@@ -237,9 +236,7 @@ async function classifyAuditorVolume(
   const findingsCount = findings.length;
 
   if (DISPATCH_TOOLS.has(call.toolName)) {
-    // Gatekeeper contract terminals: dispatch | incomplete. Incomplete is a
-    // lawful zero-pair terminal (#434-436 / #458) — never wash the parent leg.
-    if (status === "incomplete") return undefined;
+    // Gatekeeper contract terminal is dispatch only (#475).
     if (status !== "dispatch") {
       throw new Error(
         `accepted dispatch receipt has non-dispatch status ${JSON.stringify(status)} in ${filePath}`,

package/src/audit-escalation.ts

@@ -1,7 +1,6 @@
 import type { Usage } from "@earendil-works/pi-ai";
 
 import type {
-  ComplianceAuditIncomplete,
   ComplianceDecision,
 } from "./compliance-transport.ts";
 
@@ -35,13 +34,6 @@ export type AuditEscalationToolResult = {
   usage?: Usage;
 };
 
-export type AuditIncompleteToolResult = {
-  content: [{ type: "text"; text: string }];
-  details: ComplianceAuditIncomplete;
-  terminate: true;
-  usage?: Usage;
-};
-
 /**
  * Build the escalation delivery face.
  * Role-delivered fields ride under the escalation discriminator (ADR 0055).
@@ -119,17 +111,6 @@ export function projectAuditEscalation(
   };
 }
 
-export function projectAuditIncomplete(
-  decision: ComplianceAuditIncomplete,
-): AuditIncompleteToolResult {
-  return {
-    content: [{ type: "text", text: "Compliance audit incomplete; no role receipt was formed." }],
-    details: decision,
-    terminate: true,
-    ...(decision.usage === undefined ? {} : { usage: decision.usage }),
-  };
-}
-
 /**
  * Discriminator-only recognition (ADR 0040). Shape of conflicts/options/gate
  * is not a reject gate — element types and cardinality are delivery content.
@@ -152,7 +133,6 @@ export type ComplianceDecisionHandlers<T> = {
   ) => T | PromiseLike<T>;
   revise: (violations: readonly unknown[]) => T | PromiseLike<T>;
   escalate: (result: AuditEscalationToolResult) => T | PromiseLike<T>;
-  auditIncomplete?: (result: AuditIncompleteToolResult) => T | PromiseLike<T>;
 };
 
 /**
@@ -183,10 +163,5 @@ export async function disposeComplianceDecision<T>(
       return await handlers.escalate(
         projectAuditEscalation(decision, deliveredOutput),
       );
-    case "audit-incomplete":
-      if (handlers.auditIncomplete === undefined) {
-        throw new Error("Compliance audit-incomplete handler is unavailable");
-      }
-      return await handlers.auditIncomplete(projectAuditIncomplete(decision));
   }
 }

package/src/compliance-transport.ts

@@ -15,9 +15,30 @@ export type ComplianceAuditObservation =
   | { kind: "non-object-arguments"; type: ComplianceArgumentRootType }
   | { kind: "object-status-unreadable"; status: "missing" | "unknown" }
   | DossierObservation;
-export type ComplianceAuditIncomplete = { status: "audit-incomplete"; observation: ComplianceAuditObservation; candidate: unknown; usage?: Usage };
 export type ComplianceNoReceipt = NoReceiptLifecycleFacts & { status: "no-receipt"; usage?: Usage };
-export type ComplianceDecision = { status: "pass"; usage?: Usage } | { status: "revise"; violations: readonly unknown[]; usage?: Usage } | { status: "escalate"; conflicts?: unknown; decisionGate?: unknown; usage?: Usage } | ComplianceNoReceipt | ComplianceAuditIncomplete;
+export type ComplianceDecision = { status: "pass"; usage?: Usage } | { status: "revise"; violations: readonly unknown[]; usage?: Usage } | { status: "escalate"; conflicts?: unknown; decisionGate?: unknown; usage?: Usage } | ComplianceNoReceipt;
+
+/** Unreadable compliance candidate — infrastructure failure, not a judgment status (#475). */
+export class ComplianceCandidateUnreadableError extends Error {
+  readonly observation: ComplianceAuditObservation;
+  readonly candidate: unknown;
+  readonly usage?: Usage;
+  constructor(observation: ComplianceAuditObservation, candidate: unknown, usage?: Usage) {
+    const detail =
+      observation.kind === "non-object-arguments"
+        ? `${observation.kind}:${observation.type}`
+        : observation.kind === "object-status-unreadable"
+          ? `${observation.kind}:${observation.status}`
+          : observation.kind === "missing-subject"
+            ? `${observation.kind}:${observation.subject}`
+            : observation.kind;
+    super(`Compliance candidate unreadable: ${detail}`);
+    this.name = "ComplianceCandidateUnreadableError";
+    this.observation = observation;
+    this.candidate = candidate;
+    if (usage !== undefined) this.usage = usage;
+  }
+}
 export type ComplianceDispatch = { model: Model<Api>; auth: { apiKey?: string; headers?: Record<string, string | null>; env?: Record<string, string> } };
 
 /** Zero-projection kickoff — soul already carries dossier-fetch duty; no hand-delivered materials. */
@@ -25,8 +46,9 @@ export const AUDITOR_DOSSIER_PROMPT = "Audit the current run dossier." as const;
 
 const nonblank = Type.String({ minLength: 1, pattern: "\\S" });
 const decisionGateSchema = Type.Object({ question: nonblank, options: Type.Array(nonblank, { minItems: 1 }) }, { additionalProperties: false });
-// Transport must retain malformed candidates so they can settle as typed
-// audit-incomplete outcomes; status values are guidance, not a schema gate.
+// Transport retains malformed candidates on ComplianceCandidateUnreadableError so
+// the existing failure channel can publish observation + candidate (#475).
+// Status values are guidance, not a schema gate.
 export const complianceDecisionSchema = Type.Object({ status: Type.Unknown({ description: "Auditor decision status." }), violations: Type.Array(nonblank, { description: "Observed compliance violations." }), conflicts: Type.Array(nonblank, { description: "Unresolved authority or execution conflicts." }), decisionGate: Type.Union([decisionGateSchema, Type.Null()], { description: "Escalation question and available options." }) }, { additionalProperties: true, required: [] });
 
 export function createComplianceDecisionTool(name: string, description: string) {
@@ -93,12 +115,22 @@ function retainComplianceResponse(context: ExtensionContext, response: Assistant
 }
 function readListField(value: unknown): readonly unknown[] { return Array.isArray(value) ? value : value === undefined ? [] : [value]; }
 export function readComplianceCandidate(arguments_: unknown, usage?: Usage): ComplianceDecision {
-  if (typeof arguments_ !== "object" || arguments_ === null || Array.isArray(arguments_)) return { status: "audit-incomplete", observation: { kind: "non-object-arguments", type: arguments_ === null ? "null" : Array.isArray(arguments_) ? "array" : typeof arguments_ as ComplianceArgumentRootType }, candidate: arguments_, ...(usage === undefined ? {} : { usage }) };
+  if (typeof arguments_ !== "object" || arguments_ === null || Array.isArray(arguments_)) {
+    throw new ComplianceCandidateUnreadableError(
+      { kind: "non-object-arguments", type: arguments_ === null ? "null" : Array.isArray(arguments_) ? "array" : typeof arguments_ as ComplianceArgumentRootType },
+      arguments_,
+      usage,
+    );
+  }
   const args = arguments_ as Record<string, unknown>; const status = args.status;
   if (status === "pass") return { status, ...(usage === undefined ? {} : { usage }) };
   if (status === "revise") return { status, violations: readListField(args.violations), ...(usage === undefined ? {} : { usage }) };
   if (status === "escalate") return { status, ...(Object.hasOwn(args, "conflicts") ? { conflicts: args.conflicts } : {}), ...(Object.hasOwn(args, "decisionGate") ? { decisionGate: args.decisionGate } : {}), ...(usage === undefined ? {} : { usage }) };
-  return { status: "audit-incomplete", observation: { kind: "object-status-unreadable", status: status === undefined ? "missing" : "unknown" }, candidate: arguments_, ...(usage === undefined ? {} : { usage }) };
+  throw new ComplianceCandidateUnreadableError(
+    { kind: "object-status-unreadable", status: status === undefined ? "missing" : "unknown" },
+    arguments_,
+    usage,
+  );
 }
 
 export type RunComplianceAuditOptions = {

package/src/doctor-auditor.ts

@@ -10,8 +10,8 @@ import {
 } from "./compliance-transport.ts";
 import {
   readDoctorAuditSubjects,
+  requireAuditMaterials,
   resolveAuditDossier,
-  toAuditIncomplete,
 } from "./dossier-resolution.ts";
 
 export const DOCTOR_AUDIT_TOOL_NAME = "ak_doctor_audit_decision";
@@ -35,9 +35,9 @@ export function createPiDoctorAuditor(
 ): (options: DoctorAuditOptions) => Promise<ComplianceDecision> {
   return async (options) => {
     const dossier = resolveAuditDossier();
-    if (dossier.status === "incomplete") return toAuditIncomplete(dossier.observation);
+    requireAuditMaterials(dossier);
     const subjects = readDoctorAuditSubjects(options.context);
-    if (subjects.status === "incomplete") return toAuditIncomplete(subjects.observation);
+    requireAuditMaterials(subjects);
 
     return runComplianceAudit({
       tool,

package/src/doctor-role.ts

@@ -16,7 +16,7 @@ export function createDoctorRoleRuntime(pi: ExtensionAPI, dependencies: DoctorRo
   let activation: { soul: string; patient: DoctorCase; store: DoctorEvidenceStore } | undefined; let registered = false; pi.registerFlag(DOCTOR_CASE_FLAG.name, DOCTOR_CASE_FLAG.definition);
   return { async activate() { const path = pi.getFlag(DOCTOR_CASE_FLAG.name); if (typeof path !== "string" || !path.trim()) throw new Error("Doctor requires --ak-doctor-case"); const soul = (await dependencies.loadSoul()).trim(); if (!soul) throw new Error("Doctor soul is empty"); const patient = await dependencies.loadCase(path); activation = { soul, patient, store: new DoctorEvidenceStore(patient) };
     if (!registered) { registered = true; pi.registerTool({ name: DOCTOR_EVIDENCE_TOOL_NAME, label: "Doctor Evidence", description: "Read retained Pi session bytes with bounded pagination.", parameters: doctorEvidenceReadSchema, async execute(_id, params: { evidenceId: string; offset?: number; limit?: number }) { if (!activation) throw new Error("Doctor is not activated"); const details = activation.store.read(params.evidenceId, params.offset, params.limit); return { content: [{ type: "text" as const, text: JSON.stringify(details) }], details }; } });
-      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "Doctor Output", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id, params, signal, _update, ctx): Promise<AgentToolResult<unknown>> { if (!activation) throw new Error("Doctor is not activated"); singleton(id, ctx); const testimony = validateDoctorOutput(params, activation.patient, activation.store); try { appendActiveSessionCustomEntry(ctx, DOCTOR_CANDIDATE_ENTRY_TYPE, { version: 1, testimony, readRecord: activation.store.readRecord(), patientIdentity: activation.patient.identity }, { unavailable: "doctor candidate retention is unavailable", failed: "doctor candidate retention failed" }); } catch (error) { host.failInfrastructure(error, ctx, id); } let audit: ComplianceDecision; try { audit = await dependencies.auditCompliance(signal === undefined ? { context: ctx } : { context: ctx, signal }); } catch (error) { host.failInfrastructure(error, ctx, id); } const details = testimony.status === "completed" ? { ...testimony, cost: activation.patient.cost } : testimony; const acceptedDetails = withEngineLaborFallbackField(details, readActivationEngineLaborFallbackField()); return disposeComplianceDecision<AgentToolResult<unknown>>(audit, { pass: (usage) => ({ content: [{ type: "text" as const, text: "Doctor output accepted" }], details: acceptedDetails, terminate: true as const, ...(usage === undefined ? {} : { usage }) }), noReceipt: (auditNoReceipt, usageProjection) => ({ content: [{ type: "text" as const, text: "Doctor output accepted; compliance audit produced no receipt" }], details: { ...acceptedDetails, auditNoReceipt }, terminate: true as const, ...usageProjection }), revise: (violations) => { throw new Error(`Doctor output violates its soul: ${violations.join("; ")}`); }, escalate: (result) => result, auditIncomplete: (result) => result }, acceptedDetails); } });
+      pi.registerTool({ name: DOCTOR_OUTPUT_TOOL_NAME, label: "Doctor Output", description: DOCTOR_OUTPUT_TOOL_DESCRIPTION, parameters: doctorSubmissionSchema, async execute(id, params, signal, _update, ctx): Promise<AgentToolResult<unknown>> { if (!activation) throw new Error("Doctor is not activated"); singleton(id, ctx); const testimony = validateDoctorOutput(params, activation.patient, activation.store); try { appendActiveSessionCustomEntry(ctx, DOCTOR_CANDIDATE_ENTRY_TYPE, { version: 1, testimony, readRecord: activation.store.readRecord(), patientIdentity: activation.patient.identity }, { unavailable: "doctor candidate retention is unavailable", failed: "doctor candidate retention failed" }); } catch (error) { host.failInfrastructure(error, ctx, id); } let audit: ComplianceDecision; try { audit = await dependencies.auditCompliance(signal === undefined ? { context: ctx } : { context: ctx, signal }); } catch (error) { host.failInfrastructure(error, ctx, id); } const details = testimony.status === "completed" ? { ...testimony, cost: activation.patient.cost } : testimony; const acceptedDetails = withEngineLaborFallbackField(details, readActivationEngineLaborFallbackField()); return disposeComplianceDecision<AgentToolResult<unknown>>(audit, { pass: (usage) => ({ content: [{ type: "text" as const, text: "Doctor output accepted" }], details: acceptedDetails, terminate: true as const, ...(usage === undefined ? {} : { usage }) }), noReceipt: (auditNoReceipt, usageProjection) => ({ content: [{ type: "text" as const, text: "Doctor output accepted; compliance audit produced no receipt" }], details: { ...acceptedDetails, auditNoReceipt }, terminate: true as const, ...usageProjection }), revise: (violations) => { throw new Error(`Doctor output violates its soul: ${violations.join("; ")}`); }, escalate: (result) => result }, acceptedDetails); } });
       pi.on("before_agent_start", (event) => { if (!activation) throw new Error("Doctor is not activated"); const catalog = { version: activation.patient.version, identity: activation.patient.identity, admittedMetrics: { provenance: "runtime-derived from retained session bytes and sealed into the accepted receipt", cost: activation.patient.cost }, lawfulTargetKeys: ["case", ...activation.patient.cost.invocations.sources], evidence: activation.patient.evidence.map(({ id, kind, sha256, byteLength, contentLength }) => ({ id, kind, sha256, byteLength, contentLength })) }; return { systemPrompt: `${event.systemPrompt}\n\n<doctor_soul>\n${activation.soul}\n</doctor_soul>\n\n<doctor_case>\n${JSON.stringify(catalog)}\n</doctor_case>` }; }); }
     const required = [DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_NAME]; const names = pi.getAllTools().map((tool) => tool.name); for (const name of required) if (names.filter((item) => item === name).length !== 1) throw new Error(`Doctor required tool collision or missing: ${name}`); pi.setActiveTools(required); const active = pi.getActiveTools?.() ?? required; if (active.length !== 2 || !required.every((name) => active.includes(name))) throw new Error("Doctor active tool narrowing failed"); } };
 }

package/src/dossier-resolution.ts

@@ -130,8 +130,29 @@ export function readDoctorAuditSubjects(context: ExtensionContext): SubjectResol
   return { status: "incomplete", observation: { kind: "missing-subject", subject: "candidate-testimony" } };
 }
 
-export function toAuditIncomplete<TObservation extends DossierObservation>(
-  observation: TObservation,
-): { status: "audit-incomplete"; observation: TObservation; candidate: undefined } {
-  return { status: "audit-incomplete", observation, candidate: undefined };
+/**
+ * Missing dossier/subject is infrastructure failure, not a judgment status (#475).
+ * Observation + empty candidate ride the existing failInfrastructure → error artifact path.
+ */
+export class AuditMaterialsUnavailableError extends Error {
+  readonly observation: DossierObservation;
+  readonly candidate: undefined;
+  constructor(observation: DossierObservation) {
+    const detail =
+      observation.kind === "missing-subject"
+        ? `${observation.kind}:${observation.subject}`
+        : observation.kind;
+    super(`Audit materials unavailable: ${detail}`);
+    this.name = "AuditMaterialsUnavailableError";
+    this.observation = observation;
+    this.candidate = undefined;
+  }
+}
+
+export function requireAuditMaterials(
+  resolution: DossierResolution | SubjectResolution,
+): asserts resolution is DossierOk | SubjectOk {
+  if (resolution.status === "incomplete") {
+    throw new AuditMaterialsUnavailableError(resolution.observation);
+  }
 }

package/src/evidence-child-executor.ts

@@ -927,7 +927,7 @@ export async function executeAuditorChild(
               decision = part.arguments;
               decisionCallId = part.id;
               // Pi can reject malformed root arguments before invoking execute;
-              // that remains the existing typed audit-incomplete candidate path.
+              // that remains the existing unreadable-candidate failure path.
               if (part.arguments === undefined) decisionSubmitted = true;
             }
           }

package/src/gatekeeper-role.ts

@@ -24,18 +24,18 @@ export type GatekeeperResult =
       readonly findings: readonly string[];
       readonly submission: unknown;
     }
+  | { readonly status: "no_receipt"; readonly stage: "gatekeeper" | "inspector" | "notary"; readonly reason: string; readonly facts: NoReceiptLifecycleFacts }
   | {
-      readonly status: "incomplete";
+      readonly status: "transport_failure";
       readonly stage: "gatekeeper" | "inspector" | "notary";
       readonly reason: string;
+      /** Original unusable submission retained for the failure channel. */
       readonly submission?: unknown;
-    }
-  | { readonly status: "no_receipt"; readonly stage: "gatekeeper" | "inspector" | "notary"; readonly reason: string; readonly facts: NoReceiptLifecycleFacts }
-  | { readonly status: "transport_failure"; readonly stage: "gatekeeper" | "inspector" | "notary"; readonly reason: string };
+    };
 
 export type GatekeeperNonPassResult = Extract<
   GatekeeperResult,
-  { status: "bounce" | "incomplete" | "no_receipt" }
+  { status: "bounce" | "no_receipt" }
 >;
 
 function nonPassMessage(result: GatekeeperNonPassResult): string {
@@ -74,15 +74,13 @@ export type GatekeeperPassHostActions = {
 // Unknown fields so wrong types/spellings still reach projection (ADR 0055/0057; 仓第 0 条).
 // Opening goes through the sole openToolObject owner — no parallel transport helper.
 const officerDecisionSchema = openToolObject(Type.Object({
-  status: Type.Unknown({ description: "pass | bounce | incomplete — guidance, not a schema gate." }),
+  status: Type.Unknown({ description: "pass | bounce — guidance, not a schema gate." }),
   findings: Type.Unknown({ description: "string[] findings retained with pass or bounce." }),
-  reason: Type.Unknown({ description: "Why the officer decision is incomplete." }),
 }));
 
 const gatekeeperDecisionSchema = openToolObject(Type.Object({
-  status: Type.Unknown({ description: "dispatch | incomplete — guidance, not a schema gate." }),
+  status: Type.Unknown({ description: "dispatch — guidance, not a schema gate." }),
   officer: Type.Unknown({ description: "inspector | notary when status is dispatch." }),
-  reason: Type.Unknown({ description: "Why Gatekeeper dispatch is incomplete." }),
 }));
 
 const INVOCATION_OVERLAY = "取证工具不受白名单限制；若取证产生临时副作用，取证结束后须自行恢复。";
@@ -104,7 +102,7 @@ function subjectTool(subject: GatekeeperSubject): AuditorDecisionTool {
 export function createOfficerDecisionTool(name: string): AuditorDecisionTool {
   return {
     name,
-    description: "Submit one typed pass, bounce, or incomplete decision.",
+    description: "Submit one typed pass or bounce decision.",
     parameters: officerDecisionSchema,
     async execute(_id, args) { return result(`accepted ${String((args as { status?: unknown })?.status)}`, args); },
   };
@@ -114,7 +112,7 @@ export function createOfficerDecisionTool(name: string): AuditorDecisionTool {
 export function createGatekeeperOutputTool(): AuditorDecisionTool {
   return {
     name: GATEKEEPER_OUTPUT_TOOL,
-    description: "Dispatch the admitted subject to one officer, or report incomplete.",
+    description: "Dispatch the admitted subject to one officer.",
     parameters: gatekeeperDecisionSchema,
     async execute(_id, args) { return result(`accepted ${String((args as { status?: unknown })?.status)}`, args); },
   };
@@ -143,15 +141,18 @@ function retainedSubmission(decision: unknown): unknown {
   return decision === undefined ? MISSING_ARGUMENTS_SUBMISSION : decision;
 }
 
-/** Neutral bookkeeping when no explicit release path is present — no format judgment. */
-function noExplicitReleaseIncomplete(
+/**
+ * No usable explicit release is infrastructure failure, not a judgment status.
+ * Original submission is retained for the failure channel (#475).
+ */
+function noUsableReleaseFailure(
   stage: "gatekeeper" | "inspector" | "notary",
   decision: unknown,
-): Extract<GatekeeperResult, { status: "incomplete" }> {
+): Extract<GatekeeperResult, { status: "transport_failure" }> {
   return {
-    status: "incomplete",
+    status: "transport_failure",
     stage,
-    reason: stage === "gatekeeper" ? "decision 无显式 dispatch" : "decision 无显式 pass",
+    reason: stage === "gatekeeper" ? "decision 无显式 dispatch" : "decision 无显式 pass/bounce",
     submission: retainedSubmission(decision),
   };
 }
@@ -163,19 +164,11 @@ function readRecord(value: unknown): Record<string, unknown> | undefined {
 
 function projectProvinceDecision(decision: unknown): GatekeeperResult | { status: "dispatch"; officer: "inspector" | "notary" } {
   const record = readRecord(decision);
-  if (record === undefined) return noExplicitReleaseIncomplete("gatekeeper", decision);
-  if (record.status === "incomplete") {
-    const reason = record.reason;
-    if (typeof reason === "string" && reason.trim() !== "") {
-      // Role's own incomplete reason is kept as-is; machine does not rewrite it.
-      return { status: "incomplete", stage: "gatekeeper", reason, submission: retainedSubmission(decision) };
-    }
-    return noExplicitReleaseIncomplete("gatekeeper", decision);
-  }
+  if (record === undefined) return noUsableReleaseFailure("gatekeeper", decision);
   if (record.status === "dispatch" && (record.officer === "inspector" || record.officer === "notary")) {
     return { status: "dispatch", officer: record.officer };
   }
-  return noExplicitReleaseIncomplete("gatekeeper", decision);
+  return noUsableReleaseFailure("gatekeeper", decision);
 }
 
 function projectOfficerDecision(
@@ -183,15 +176,7 @@ function projectOfficerDecision(
   decision: unknown,
 ): GatekeeperResult {
   const record = readRecord(decision);
-  if (record === undefined) return noExplicitReleaseIncomplete(officer, decision);
-  if (record.status === "incomplete") {
-    const reason = record.reason;
-    if (typeof reason === "string" && reason.trim() !== "") {
-      // Role's own incomplete reason is kept as-is; machine does not rewrite it.
-      return { status: "incomplete", stage: officer, reason, submission: retainedSubmission(decision) };
-    }
-    return noExplicitReleaseIncomplete(officer, decision);
-  }
+  if (record === undefined) return noUsableReleaseFailure(officer, decision);
   if (record.status === "bounce") {
     return {
       status: "bounce",
@@ -208,7 +193,7 @@ function projectOfficerDecision(
       findings: asStringArray(record.findings),
     };
   }
-  return noExplicitReleaseIncomplete(officer, decision);
+  return noUsableReleaseFailure(officer, decision);
 }
 
 export async function runGatekeeper(options: RunGatekeeperOptions): Promise<GatekeeperResult> {
@@ -221,7 +206,7 @@ export async function runGatekeeper(options: RunGatekeeperOptions): Promise<Gate
       roleLabel: "Gatekeeper",
       menxiaSeat: "gatekeeper",
       systemPrompt: `${await loadSoul("gatekeeper")}\n\n${INVOCATION_OVERLAY}`,
-      prompt: "Read the admitted subject with ak_gatekeeper_subject, then dispatch it or submit typed incomplete.",
+      prompt: "Read the admitted subject with ak_gatekeeper_subject, then dispatch it to one officer.",
       tool: createGatekeeperOutputTool(),
       dossierTool: subjectTool(options.subject),
       ...(options.signal === undefined ? {} : { signal: options.signal }),
@@ -259,7 +244,7 @@ export async function runGatekeeper(options: RunGatekeeperOptions): Promise<Gate
   }
 }
 
-/** Project GatekeeperResult onto a submit path: transport→failInfrastructure; bounce/incomplete/no_receipt→typed throw; pass silent. */
+/** Project GatekeeperResult onto a submit path: transport→failInfrastructure; bounce/no_receipt→typed throw; pass silent. */
 export async function requireGatekeeperPass(options: {
   readonly context: ExtensionContext;
   readonly subject: GatekeeperSubject;
@@ -274,11 +259,16 @@ export async function requireGatekeeperPass(options: {
   });
   if (gatekeeper.status === "pass") return;
   if (gatekeeper.status === "transport_failure") {
-    options.hostActions.failInfrastructure(
-      new Error(`Gatekeeper transport failure at ${gatekeeper.stage}: ${gatekeeper.reason}`),
-      options.context,
-      options.toolCallId,
-    );
+    // Typed stage/reason/submission ride failInfrastructure → durable tool_result (#475).
+    const error = new Error(`Gatekeeper transport failure at ${gatekeeper.stage}: ${gatekeeper.reason}`) as Error & {
+      stage: typeof gatekeeper.stage;
+      reason: string;
+      submission?: unknown;
+    };
+    error.stage = gatekeeper.stage;
+    error.reason = gatekeeper.reason;
+    if (gatekeeper.submission !== undefined) error.submission = gatekeeper.submission;
+    options.hostActions.failInfrastructure(error, options.context, options.toolCallId);
   }
   // Envelope owns the execute→tool_result bridge; this module only projects + throws.
   options.hostActions.bindGatekeeperNonPass(options.toolCallId, gatekeeper);

package/src/judge-auditor.ts

@@ -10,8 +10,8 @@ import { auditorRunDirectory } from "./auditor-dossier-tool.ts";
 import { loadAuditorSoul } from "./auditor-soul.ts";
 import {
   readJudgeAuditSubjects,
+  requireAuditMaterials,
   resolveAuditDossier,
-  toAuditIncomplete,
 } from "./dossier-resolution.ts";
 
 export const JUDGE_AUDIT_TOOL_NAME = "ak_soul_audit_decision";
@@ -37,9 +37,9 @@ export function createPiJudgeAuditor(
 ): (options: JudgeAuditOptions) => Promise<ComplianceDecision> {
   return async (options) => {
     const dossier = resolveAuditDossier();
-    if (dossier.status === "incomplete") return toAuditIncomplete(dossier.observation);
+    requireAuditMaterials(dossier);
     const subjects = readJudgeAuditSubjects(options.context);
-    if (subjects.status === "incomplete") return toAuditIncomplete(subjects.observation);
+    requireAuditMaterials(subjects);
 
     return runComplianceAudit({
       tool: auditDecisionTool,

package/src/judge-role.ts

@@ -161,7 +161,6 @@ export function createJudgeRoleRuntime(
                   );
                 },
                 escalate: (result) => result,
-                auditIncomplete: (result) => result,
               },
               // #380: escalate deliveredOutput must carry the same mechanical projection.
               acceptedDetails,

package/src/navigator-invocation-identity.ts

@@ -15,7 +15,7 @@
  * One shared typed terminal classifier owns durable completion for lifecycle,
  * publicNavigatorSettlement, and every public CLI Receipt extractor:
  *   - accepted/human: isError exactly false and no infrastructure-failure fact
- *   - infrastructure: isError exactly true plus exact closed infrastructure fact
+ *   - infrastructure: isError exactly true plus base kind/source/reasonCode identity
  *   - retryable/missing/nonboolean/contradictory/malformed: nonterminal
  *
  * One truth table also owns marker↔terminal cardinality:
@@ -33,13 +33,25 @@ export const NAVIGATOR_INVOCATION_ENTRY = "ak-navigator-invocation" as const;
 /** Typed durable infrastructure-failure fact on a packaged role output toolResult. */
 export const NAVIGATOR_INFRASTRUCTURE_FAILURE_KIND = "role_infrastructure_failure" as const;
 
-/** Closed fact keys — extras/missing/wrong keys fail closed. */
+/** Required base identity keys for infrastructure-failure recognition. */
 const NAVIGATOR_INFRASTRUCTURE_FAILURE_KEYS = [
   "kind",
   "source",
   "reasonCode",
 ] as const;
 
+/**
+ * Known typed failure evidence keys projected onto durable infrastructure details (#475).
+ * Extraction whitelist only — classification does not reject unknown extras (ADR 0040).
+ */
+export const NAVIGATOR_INFRASTRUCTURE_FAILURE_EVIDENCE_KEYS = [
+  "observation",
+  "candidate",
+  "submission",
+  "stage",
+  "reason",
+] as const;
+
 export type NavigatorInfrastructureFailureFact = {
   kind: typeof NAVIGATOR_INFRASTRUCTURE_FAILURE_KIND;
   source: "shared-role-lifecycle";
@@ -55,16 +67,13 @@ export function buildNavigatorInfrastructureFailureFact(): NavigatorInfrastructu
 }
 
 /**
- * Exact closed infrastructure-failure fact.
- * Rejects extras, missing keys, wrong values/types, and non-objects.
+ * Base infrastructure-failure identity on durable details.
+ * Only kind/source/reasonCode discriminate; extra fields are allowed and retained
+ * (ADR 0040 — discriminators select the branch, they do not ban extras).
  */
-export function isNavigatorInfrastructureFailureFact(
-  value: unknown,
-): value is NavigatorInfrastructureFailureFact {
+export function hasNavigatorInfrastructureFailureBase(value: unknown): boolean {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
   const record = value as Record<string, unknown>;
-  const keys = Object.keys(record);
-  if (keys.length !== NAVIGATOR_INFRASTRUCTURE_FAILURE_KEYS.length) return false;
   for (const key of NAVIGATOR_INFRASTRUCTURE_FAILURE_KEYS) {
     if (!Object.hasOwn(record, key)) return false;
   }
@@ -75,6 +84,18 @@ export function isNavigatorInfrastructureFailureFact(
   );
 }
 
+/**
+ * Exact closed infrastructure-failure fact (no evidence extensions).
+ * Classifier uses {@link hasNavigatorInfrastructureFailureBase} so enriched
+ * durable details still complete as infrastructure (#475).
+ */
+export function isNavigatorInfrastructureFailureFact(
+  value: unknown,
+): value is NavigatorInfrastructureFailureFact {
+  if (!hasNavigatorInfrastructureFailureBase(value)) return false;
+  return Object.keys(value as object).length === NAVIGATOR_INFRASTRUCTURE_FAILURE_KEYS.length;
+}
+
 const PACKAGED_ROLE_OUTPUT_TOOLS: ReadonlyMap<string, string> = new Map(
   PACKAGED_ROLE_REGISTRY.map((entry) => [entry.outputTool, entry.role]),
 );
@@ -191,11 +212,11 @@ export function classifyPackagedRoleTerminalResult(
   if (typeof message.toolName !== "string") return { kind: "nonterminal" };
   if (!PACKAGED_ROLE_OUTPUT_TOOLS.has(message.toolName)) return { kind: "nonterminal" };
 
-  const infraFact = isNavigatorInfrastructureFailureFact(message.details)
-    ? message.details
-    : undefined;
+  // Base identity is enough; durable details may carry typed failure evidence (#475).
+  const hasInfraBase = hasNavigatorInfrastructureFailureBase(message.details);
+  const infraFact = hasInfraBase ? buildNavigatorInfrastructureFailureFact() : undefined;
 
-  // Infrastructure completion: exact isError === true + exact closed infra fact.
+  // Infrastructure completion: exact isError === true + infra base identity.
   if (message.isError === true) {
     if (infraFact === undefined) return { kind: "nonterminal" };
     return { kind: "infrastructure", fact: infraFact };

package/src/notary-contracts.ts

@@ -1,7 +1,7 @@
 /**
  * Public Notary (符宝郎) terminating receipt contracts.
- * Lawful explicit releases: pass | bounce | incomplete(with non-empty reason).
- * Residual incomplete (no explicit release) is projected by public settlement, not here.
+ * Lawful explicit releases: pass | bounce.
+ * No usable result is infrastructure failure via public settlement, not a judgment status (#475).
  */
 import { Type } from "typebox";
 
@@ -31,14 +31,11 @@ export const NOTARY_FIXED_KICKOFF =
 export const notaryOutputSchema = openToolObject(
   Type.Object({
     status: Type.Unknown({
-      description: "pass | bounce | incomplete — guidance, not a schema gate.",
+      description: "pass | bounce — guidance, not a schema gate.",
     }),
     findings: Type.Unknown({
       description: "string[] findings retained with pass or bounce.",
     }),
-    reason: Type.Unknown({
-      description: "Why the notary decision is incomplete.",
-    }),
   }),
 );
 
@@ -54,8 +51,7 @@ type NotaryOutputClean =
       readonly status: "bounce";
       readonly disposition: "rewrite";
       readonly findings: readonly string[];
-    }
-  | { readonly status: "incomplete"; readonly reason: string };
+    };
 
 /** Clean submission or seat-fallback tainted accepted receipt (ADR 0071). */
 export type NotaryOutput =
@@ -73,7 +69,7 @@ function asStringArray(value: unknown): readonly string[] {
 
 /**
  * Project one explicit Notary release. Throws when there is no lawful explicit
- * pass / bounce / incomplete(reason) — callers map that to residual incomplete.
+ * pass / bounce — callers map that to the existing non-zero failure channel.
  */
 export function validateNotaryOutput(value: unknown): NotaryOutput {
   if (!isRecord(value)) {
@@ -84,13 +80,6 @@ export function validateNotaryOutput(value: unknown): NotaryOutput {
     throw new Error("Notary output has no recognized execution discriminator");
   }
   const status = seatFallbackBaseStatus(statusRaw);
-  if (status === "incomplete") {
-    const reason = value.reason;
-    if (typeof reason !== "string" || reason.trim() === "") {
-      throw new Error("Notary incomplete requires a non-empty reason");
-    }
-    return structuredClone(value) as NotaryOutput;
-  }
   if (status === "bounce") {
     const clone = structuredClone(value) as Record<string, unknown>;
     if (clone.disposition === undefined) clone.disposition = "rewrite";
@@ -127,8 +116,5 @@ export function notaryDecisiveFacts(output: NotaryOutput): Record<string, unknow
   if (status === "bounce") {
     facts.disposition = "rewrite";
   }
-  if (status === "incomplete") {
-    facts.reason = (output as { reason: string }).reason;
-  }
   return facts;
 }

package/src/notary-role.ts

@@ -86,7 +86,7 @@ export function createNotaryRoleRuntime(
           name: NOTARY_OUTPUT_TOOL_NAME,
           label: "Notary Output",
           description:
-            "Submit one typed pass, bounce, or incomplete decision on quote fidelity and ticket alignment.",
+            "Submit one typed pass or bounce decision on quote fidelity and ticket alignment.",
           promptSnippet: "Submit the Notary decision",
           promptGuidelines: [
             `Use ${NOTARY_OUTPUT_TOOL_NAME} as the sole final action.`,
@@ -109,7 +109,7 @@ export function createNotaryRoleRuntime(
               output = validateNotaryOutput(parameters);
             } catch (error) {
               // Non-explicit release stays a rejected terminating call so public
-              // settlement can project residual incomplete (layer ②).
+              // settlement can map it to the existing non-zero failure channel (#475).
               throw error instanceof Error
                 ? error
                 : new Error(String(error));