@akagilnc/pi-workflow-roles 0.1.3572 → 0.1.3621

package/dist/public-cli/main.js

@@ -15023,6 +15023,113 @@ var init_inspector_contracts = __esm({
   }
 });
 
+// src/package-contracts/auditor-output.ts
+function isRecord6(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function projectLawfulAuditorOutput(value) {
+  if (!isRecord6(value)) return void 0;
+  if (value.status === "pass") return { status: "pass" };
+  if (value.status === "revise") {
+    return {
+      status: "revise",
+      ...Object.hasOwn(value, "violations") ? { violations: value.violations } : {}
+    };
+  }
+  if (value.status === "escalate") {
+    return {
+      status: "escalate",
+      ...Object.hasOwn(value, "conflicts") ? { conflicts: value.conflicts } : {},
+      ...Object.hasOwn(value, "decisionGate") ? { decisionGate: value.decisionGate } : {}
+    };
+  }
+  return void 0;
+}
+function validateRecordedAuditorOutput(value) {
+  const projected = projectLawfulAuditorOutput(value);
+  if (projected === void 0) {
+    throw new Error("Auditor output has no recognized execution discriminator");
+  }
+  return projected;
+}
+function auditorDecisiveFacts(output) {
+  const facts = { status: output.status };
+  if (output.status === "revise" && output.violations !== void 0) {
+    facts.violations = output.violations;
+  }
+  if (output.status === "escalate") {
+    if (output.conflicts !== void 0) facts.conflicts = output.conflicts;
+    if (output.decisionGate !== void 0) facts.decisionGate = output.decisionGate;
+  }
+  return facts;
+}
+var AUDITOR_OUTPUT_TOOL_NAME, auditorOutputSchema;
+var init_auditor_output = __esm({
+  "src/package-contracts/auditor-output.ts"() {
+    "use strict";
+    init_build();
+    init_open_tool_schema();
+    init_terminating_infrastructure();
+    AUDITOR_OUTPUT_TOOL_NAME = "ak_auditor_output";
+    auditorOutputSchema = withInfrastructureFailureDeclaration(
+      openToolObject(
+        typebox_exports.Object({
+          status: typebox_exports.Unknown({
+            description: "pass | revise | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+          }),
+          violations: typebox_exports.Optional(typebox_exports.Unknown({
+            description: "status \u4E3A revise \u65F6\u7684\u8FDD\u89C4\u6761\u76EE"
+          })),
+          conflicts: typebox_exports.Optional(typebox_exports.Unknown({
+            description: "status \u4E3A escalate \u65F6\u7684\u51B2\u7A81"
+          })),
+          decisionGate: typebox_exports.Optional(typebox_exports.Unknown({
+            description: "status \u4E3A escalate \u65F6\u7684\u51B3\u7B56\u95F8"
+          }))
+        })
+      )
+    );
+  }
+});
+
+// src/package-contracts/evidence-child-output.ts
+function isRecord7(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function projectLawfulEvidenceChildOutput(value) {
+  if (!isRecord7(value)) return void 0;
+  return { report: Object.hasOwn(value, "report") ? value.report : value };
+}
+function validateRecordedEvidenceChildOutput(value) {
+  const projected = projectLawfulEvidenceChildOutput(value);
+  if (projected === void 0) {
+    throw new Error("Evidence-child output is not an object");
+  }
+  return projected;
+}
+function evidenceChildDecisiveFacts(output) {
+  return { report: output.report };
+}
+var EVIDENCE_CHILD_OUTPUT_TOOL_NAME, evidenceChildOutputSchema;
+var init_evidence_child_output = __esm({
+  "src/package-contracts/evidence-child-output.ts"() {
+    "use strict";
+    init_build();
+    init_open_tool_schema();
+    init_terminating_infrastructure();
+    EVIDENCE_CHILD_OUTPUT_TOOL_NAME = "ak_evidence_child_output";
+    evidenceChildOutputSchema = withInfrastructureFailureDeclaration(
+      openToolObject(
+        typebox_exports.Object({
+          report: typebox_exports.Unknown({
+            description: "\u53D6\u8BC1\u62A5\u544A\u6B63\u6587 \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8"
+          })
+        })
+      )
+    );
+  }
+});
+
 // src/diarist-contracts.ts
 function validateRecordedDiaristOutput(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
@@ -15066,7 +15173,7 @@ var init_diarist_contracts = __esm({
 function packagedRoleMetadata(role) {
   return PACKAGED_ROLE_REGISTRY.find((entry) => entry.role === role);
 }
-var NOTARY_SESSION_MATERIALS, INSPECTOR_SESSION_MATERIALS, PUBLIC_ROLE_RECORDS, PACKAGED_ROLE_REGISTRY;
+var NOTARY_SESSION_MATERIALS, INSPECTOR_SESSION_MATERIALS, AUDITOR_PUBLIC_SESSION_MATERIALS, EVIDENCE_CHILD_SESSION_MATERIALS, PUBLIC_ROLE_RECORDS, PACKAGED_ROLE_REGISTRY;
 var init_packaged_role_registry = __esm({
   "src/packaged-role-registry.ts"() {
     "use strict";
@@ -15082,6 +15189,8 @@ var init_packaged_role_registry = __esm({
     init_countersign_contracts();
     init_gleaner_left_contracts();
     init_inspector_contracts();
+    init_auditor_output();
+    init_evidence_child_output();
     init_diarist_contracts();
     NOTARY_SESSION_MATERIALS = [
       "CLAUDE.md",
@@ -15096,6 +15205,19 @@ var init_packaged_role_registry = __esm({
       "souls/quality-law.md",
       "souls/gate-output-guide.md"
     ];
+    AUDITOR_PUBLIC_SESSION_MATERIALS = [
+      "CLAUDE.md",
+      "souls/judge-auditor.md",
+      "souls/doctor-auditor.md",
+      "souls/audit-law.md",
+      "souls/quality-law.md"
+    ];
+    EVIDENCE_CHILD_SESSION_MATERIALS = [
+      "CLAUDE.md",
+      "souls/evidence-child.md",
+      "souls/audit-law.md",
+      "souls/quality-law.md"
+    ];
     PUBLIC_ROLE_RECORDS = [
       {
         role: "judge",
@@ -15249,6 +15371,25 @@ var init_packaged_role_registry = __esm({
         activationStage: "load-and-install",
         sessionMaterials: ["CLAUDE.md", "souls/navigator.md"]
       },
+      // #675: 审刑院 / evidence-child are roles like any other — public ak-role entries.
+      {
+        role: "auditor",
+        phases: [null],
+        outputTool: AUDITOR_OUTPUT_TOOL_NAME,
+        inputFlag: void 0,
+        phaseFlag: void 0,
+        activationStage: "load-and-install",
+        sessionMaterials: AUDITOR_PUBLIC_SESSION_MATERIALS
+      },
+      {
+        role: "evidence-child",
+        phases: [null],
+        outputTool: EVIDENCE_CHILD_OUTPUT_TOOL_NAME,
+        inputFlag: void 0,
+        phaseFlag: void 0,
+        activationStage: "load-and-install",
+        sessionMaterials: EVIDENCE_CHILD_SESSION_MATERIALS
+      },
       // #708 / ADR 0075 `diarist-is-role`: 起居郎 is a seat like any other. The
       // frozen source catalog rides the shared input-flag seam; it is absent for a
       // true-unbound summons (no ticket → no diary).
@@ -15369,13 +15510,16 @@ var init_registry2 = __esm({
       // #620: subordinate officers inherit gatekeeper; no package startup model.
       notary: [],
       // #453/#620/#639: gatekeeper callable but no package startup model — caller
-      // configures it or the institutional resolution applies on the province path.
+      // configures it or inherits on the province path.
       gatekeeper: [],
       inspector: [],
       navigator: [
         { provider: "openai-codex", model: "gpt-5.6-luna", thinking: "medium" },
         { provider: "xai", model: "grok-4.5", thinking: "high" }
       ],
+      // #675: auditor / evidence-child public seats — no package startup; caller configures.
+      auditor: [],
+      "evidence-child": [],
       // #708 `diarist-seat-default`: owner-set initial value; changed in the seat
       // table like any other seat. No engine axis, package-default host.
       diarist: [{ provider: "xai", model: "grok-4.5", thinking: "medium" }]
@@ -15385,17 +15529,6 @@ var init_registry2 = __esm({
 });
 
 // src/institutional-resolution.ts
-import { readFile, writeFile } from "node:fs/promises";
-import { join as join5 } from "node:path";
-function cleanSelection(model) {
-  if (model === void 0) return void 0;
-  if (typeof model.provider !== "string" || typeof model.model !== "string") return void 0;
-  return {
-    provider: model.provider,
-    model: model.model,
-    ...model.thinking === void 0 ? {} : { thinking: model.thinking }
-  };
-}
 function resolveConfiguredProvinceOfficer(config, officer) {
   const ownModel = seatModelOnly(config.seats[officer]);
   if (ownModel !== void 0) {
@@ -15410,37 +15543,10 @@ function resolveConfiguredProvinceOfficer(config, officer) {
   }
   return { source: "unconfigured" };
 }
-function resolveInstitutionalSeatSelections(config, parentEffectiveModel) {
-  const parentSelection = cleanSelection(parentEffectiveModel);
-  const gatekeeper = resolveConfiguredProvinceOfficer(config, "gatekeeper").selection ?? parentSelection;
-  const inspector = resolveConfiguredProvinceOfficer(config, "inspector").selection ?? parentSelection;
-  const notary = resolveConfiguredProvinceOfficer(config, "notary").selection ?? parentSelection;
-  const auditor = parentSelection;
-  const evidenceChild = parentSelection;
-  const navigator = cleanSelection(seatModelOnly(config.seats?.navigator));
-  return {
-    version: 1,
-    seats: {
-      ...gatekeeper === void 0 ? {} : { gatekeeper },
-      ...inspector === void 0 ? {} : { inspector },
-      ...notary === void 0 ? {} : { notary },
-      ...auditor === void 0 ? {} : { auditor },
-      ...evidenceChild === void 0 ? {} : { evidenceChild },
-      ...navigator === void 0 ? {} : { navigator }
-    }
-  };
-}
-async function writeInstitutionalResolutionPage(runDirectory, page) {
-  const filePath = join5(runDirectory, INSTITUTIONAL_RESOLUTION_FILE);
-  await writeFile(filePath, `${JSON.stringify(page, null, 2)}
-`, "utf8");
-}
-var INSTITUTIONAL_RESOLUTION_FILE;
 var init_institutional_resolution = __esm({
   "src/institutional-resolution.ts"() {
     "use strict";
     init_registry2();
-    INSTITUTIONAL_RESOLUTION_FILE = "institutional-resolution.json";
   }
 });
 
@@ -15487,8 +15593,8 @@ var init_host_descriptions = __esm({
 });
 
 // src/public-cli/config.ts
-import { mkdir, readFile as readFile2, writeFile as writeFile2 } from "node:fs/promises";
-import { dirname as dirname4, join as join6 } from "node:path";
+import { mkdir, readFile, writeFile } from "node:fs/promises";
+import { dirname as dirname4, join as join5 } from "node:path";
 function isGateOfficerSeat(value) {
   return GATE_OFFICER_SEATS.includes(value);
 }
@@ -15496,12 +15602,12 @@ function publicCliConfigPath(home) {
   if (typeof home !== "string" || home.trim() === "") {
     throw new Error("home must be explicitly provided");
   }
-  return join6(home, ".ak-roles", "public-cli.json");
+  return join5(home, ".ak-roles", "public-cli.json");
 }
 async function loadPublicCliConfig(home) {
   const path = publicCliConfigPath(home);
   try {
-    const raw = await readFile2(path, "utf8");
+    const raw = await readFile(path, "utf8");
     return parsePublicCliConfig(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -15514,7 +15620,7 @@ async function savePublicCliConfig(config, home) {
   const path = publicCliConfigPath(home);
   await mkdir(dirname4(path), { recursive: true });
   const normalized = parsePublicCliConfig(config);
-  await writeFile2(
+  await writeFile(
     path,
     `${JSON.stringify(serializePublicCliConfig(normalized), null, 2)}
 `,
@@ -15888,7 +15994,7 @@ function credentialProvidersFromAuthData(data) {
 }
 async function loadCredentialProviders(agentDir) {
   try {
-    const raw = await readFile2(join6(agentDir, "auth.json"), "utf8");
+    const raw = await readFile(join5(agentDir, "auth.json"), "utf8");
     return credentialProvidersFromAuthData(JSON.parse(raw));
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
@@ -15933,15 +16039,15 @@ var init_cli_errors = __esm({
 
 // src/public-cli/load-production-acp-host.ts
 import { existsSync as existsSync3 } from "node:fs";
-import { join as join7 } from "node:path";
+import { join as join6 } from "node:path";
 import { pathToFileURL } from "node:url";
 async function loadProductionAcpHostFactory(packageRoot2, host) {
   const description = lookupHostDescription(host);
   if (description === void 0) {
     throw new Error(`unregistered host: ${host}`);
   }
-  const built = join7(packageRoot2, "dist/acp-host/production-host.js");
-  const source = join7(packageRoot2, "src/acp-host/production-host.ts");
+  const built = join6(packageRoot2, "dist/acp-host/production-host.js");
+  const source = join6(packageRoot2, "src/acp-host/production-host.ts");
   const target = existsSync3(built) ? built : source;
   const href = pathToFileURL(target).href;
   const mod = await import(href);
@@ -15981,9 +16087,9 @@ var init_host_contracts = __esm({
 
 // src/engine-detour.ts
 import { spawn } from "node:child_process";
-import { mkdtemp, rm, writeFile as writeFile3 } from "node:fs/promises";
+import { mkdtemp, rm, writeFile as writeFile2 } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { join as join8 } from "node:path";
+import { join as join7 } from "node:path";
 function applyEngineChildEnv(childEnv, engine) {
   delete childEnv[AK_ROLE_ENGINE_ENV];
   if (engine !== void 0 && engine.trim() !== "") {
@@ -16078,12 +16184,12 @@ async function runEngineDetourOnce(input) {
   if (input.stagedPrompt === void 0) {
     return spawnEngineDetourOnce(input);
   }
-  const stagingDir = await mkdtemp(join8(tmpdir(), "ak-engine-detour-"));
-  const stagedPath = join8(stagingDir, "prompt.txt");
+  const stagingDir = await mkdtemp(join7(tmpdir(), "ak-engine-detour-"));
+  const stagedPath = join7(stagingDir, "prompt.txt");
   let result2;
   let runError;
   try {
-    await writeFile3(stagedPath, input.stagedPrompt, "utf8");
+    await writeFile2(stagedPath, input.stagedPrompt, "utf8");
     const argv = resolveArgvWithStagedPrompt(input.argv, stagedPath);
     result2 = await spawnEngineDetourOnce({
       argv,
@@ -16150,8 +16256,8 @@ import {
   unlinkSync,
   writeFileSync
 } from "node:fs";
-import { basename as basename3, dirname as dirname5, join as join9, resolve as resolve3 } from "node:path";
-function isRecord6(value) {
+import { basename as basename3, dirname as dirname5, join as join8, resolve as resolve3 } from "node:path";
+function isRecord8(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function errorCodeOf(error) {
@@ -16179,7 +16285,7 @@ function findIdentityPointer(recordFile, identity, kind, level) {
     if (!trimmed) continue;
     try {
       const parsed = JSON.parse(trimmed);
-      if (isRecord6(parsed) && parsed.identity === identity) {
+      if (isRecord8(parsed) && parsed.identity === identity) {
         return { identity, recordFile, kind, level };
       }
     } catch {
@@ -16289,7 +16395,7 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
   const category = resolveSitianVolumeCategory(input.kind);
   let sessionDir;
   if (input.sessionParent !== void 0 && input.sessionParent.length > 0 && physicallyContainedIn(ledgerHome, input.sessionParent)) {
-    sessionDir = join9(dirname5(input.sessionParent), category);
+    sessionDir = join8(dirname5(input.sessionParent), category);
   } else {
     const bookKey = safeBookKey(cwd);
     const bookDir = activationBookDirectory(ledgerHome, bookKey);
@@ -16303,12 +16409,12 @@ function resolveSitianRecordPathInLedger(input, ledgerHome) {
         subjectStr = JSON.stringify(input.subject);
       }
       const digest = createHash2("sha256").update(subjectStr).digest("hex").slice(0, 32);
-      sessionDir = join9(bookDir, category, digest);
+      sessionDir = join8(bookDir, category, digest);
     } else {
-      sessionDir = join9(bookDir, category);
+      sessionDir = join8(bookDir, category);
     }
   }
-  const recordFile = join9(sessionDir, "records.jsonl");
+  const recordFile = join8(sessionDir, "records.jsonl");
   return { sessionDir, recordFile, ledgerHome };
 }
 function resolveSitianRecordPath(input) {
@@ -16366,15 +16472,15 @@ var init_sitian_appender = __esm({
 
 // src/sitian-reader.ts
 import { existsSync as existsSync5 } from "node:fs";
-import { readFile as readFile3 } from "node:fs/promises";
-function isRecord7(value) {
+import { readFile as readFile2 } from "node:fs/promises";
+function isRecord9(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readSitianRecords(recordFile) {
   if (!existsSync5(recordFile)) {
     return { records: [], diagnostics: [] };
   }
-  const text = await readFile3(recordFile, "utf8");
+  const text = await readFile2(recordFile, "utf8");
   const lines = text.split("\n");
   const records2 = [];
   const diagnostics = [];
@@ -16383,7 +16489,7 @@ async function readSitianRecords(recordFile) {
     if (!line2.trim()) continue;
     try {
       const parsed = JSON.parse(line2);
-      if (isRecord7(parsed)) {
+      if (isRecord9(parsed)) {
         records2.push(parsed);
       } else {
         const typeDesc = parsed === null ? "null" : Array.isArray(parsed) ? "array" : typeof parsed;
@@ -16428,13 +16534,13 @@ var init_sitian_facade = __esm({
 // src/pi/role-turn-host.ts
 import { execFile, spawn as spawn2 } from "node:child_process";
 import { constants } from "node:fs";
-import { access, appendFile, readFile as readFile4, realpath } from "node:fs/promises";
-import { delimiter as delimiter2, isAbsolute as isAbsolute3, join as join10, resolve as resolve4 } from "node:path";
+import { access, appendFile, readFile as readFile3, realpath } from "node:fs/promises";
+import { delimiter as delimiter2, isAbsolute as isAbsolute3, join as join9, resolve as resolve4 } from "node:path";
 import { platform } from "node:process";
 import { promisify } from "node:util";
 import { randomUUID as randomUUID2 } from "node:crypto";
 function resolveInternalRoleEntrypoint(packageRoot2) {
-  return join10(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
+  return join9(packageRoot2, INTERNAL_ROLE_ENTRYPOINT_RELATIVE2);
 }
 function buildExplicitInternalActivationArgs(selectedRoleEntry, extraArgs = []) {
   return ["--no-extensions", "-e", selectedRoleEntry, ...extraArgs];
@@ -16518,6 +16624,10 @@ function buildActivationFlagArgs(activation) {
       return ["--ak-role", "gatekeeper"];
     case "navigator":
       return ["--ak-role", "navigator"];
+    case "auditor":
+      return ["--ak-role", "auditor"];
+    case "evidence-child":
+      return ["--ak-role", "evidence-child"];
     case "diarist":
       return [
         "--ak-role",
@@ -16620,9 +16730,15 @@ function createDefaultPiSpawnRunner(options) {
           child.kill("SIGTERM");
         }, spawnOptions.timeoutMs);
       };
+      const parentSignal = spawnOptions.signal;
+      const terminateForParentAbort = () => {
+        child.kill("SIGTERM");
+      };
+      parentSignal?.addEventListener("abort", terminateForParentAbort, { once: true });
       let identityRecorded = Promise.resolve();
       child.once("spawn", () => {
         hasSpawned = true;
+        if (parentSignal?.aborted === true) terminateForParentAbort();
         armTimeoutAfterChildReady();
         const runDirectory = spawnOptions.env.AK_ROLE_RUN_DIR;
         if (typeof runDirectory === "string" && runDirectory !== "" && options.recordLaunchedPiIdentity !== void 0) {
@@ -16638,11 +16754,13 @@ function createDefaultPiSpawnRunner(options) {
           return;
         }
         if (timer !== void 0) clearTimeout(timer);
+        parentSignal?.removeEventListener("abort", terminateForParentAbort);
         settled = true;
         reject(error);
       });
       child.on("close", (code) => {
         if (timer !== void 0) clearTimeout(timer);
+        parentSignal?.removeEventListener("abort", terminateForParentAbort);
         void identityRecorded.then(
           () => {
             if (settled) return;
@@ -16696,11 +16814,20 @@ ${paths.join("\n")}`
         ...process.env,
         HOME: request.home,
         PI_CODING_AGENT_DIR: request.agentDir,
-        AK_ROLE_RUN_DIR: request.runDirectory
+        AK_ROLE_RUN_DIR: request.runDirectory,
+        // Nested public summons resolve package root without import.meta under jiti (#675).
+        // Child-process scoped only — not written back onto the parent process.env.
+        AK_ROLE_PACKAGE_ROOT: config.packageRoot
       };
       if (request.courtAttemptId === void 0) delete env.AK_ROLE_COURT_ATTEMPT;
       else env.AK_ROLE_COURT_ATTEMPT = request.courtAttemptId;
       applyEngineChildEnv(env, request.engine);
+      if (typeof process.env.AK_ROLE_AUDITOR_SOURCE_RUN === "string" && process.env.AK_ROLE_AUDITOR_SOURCE_RUN.trim() !== "") {
+        env.AK_ROLE_AUDITOR_SOURCE_RUN = process.env.AK_ROLE_AUDITOR_SOURCE_RUN;
+      }
+      if (typeof process.env.AK_ROLE_AUDITOR_SUBJECT === "string" && process.env.AK_ROLE_AUDITOR_SUBJECT.trim() !== "") {
+        env.AK_ROLE_AUDITOR_SUBJECT = process.env.AK_ROLE_AUDITOR_SUBJECT;
+      }
       if (request.correlationId !== void 0 && request.correlationId.trim() !== "") {
         env.AK_CORRELATION_ID = request.correlationId;
       }
@@ -16714,14 +16841,15 @@ ${paths.join("\n")}`
       return await spawnRunner(args, {
         cwd: request.cwd,
         env,
-        ...timeoutMs === void 0 ? {} : { timeoutMs }
+        ...timeoutMs === void 0 ? {} : { timeoutMs },
+        ...request.signal === void 0 ? {} : { signal: request.signal }
       });
     }
   };
 }
 async function appendPiSessionCustomEntry(authority, principal, customType, data) {
   const { sessionFile } = authority.decode(principal);
-  const text = await readFile4(sessionFile, "utf8");
+  const text = await readFile3(sessionFile, "utf8");
   let parentId = null;
   for (const line2 of text.trim().split("\n").filter(Boolean)) {
     const entry = JSON.parse(line2);
@@ -16762,8 +16890,8 @@ var init_role_turn_host = __esm({
 });
 
 // src/run-ticket-number.ts
-import { readFile as readFile5 } from "node:fs/promises";
-import { join as join11 } from "node:path";
+import { readFile as readFile4 } from "node:fs/promises";
+import { join as join10 } from "node:path";
 function isEnoent(error) {
   return error instanceof Error && "code" in error && error.code === "ENOENT";
 }
@@ -16776,7 +16904,7 @@ function ticketFromRecord(record4) {
 }
 async function readPageTicketNumber(runDirectory, page) {
   try {
-    const raw = JSON.parse(await readFile5(join11(runDirectory, page), "utf8"));
+    const raw = JSON.parse(await readFile4(join10(runDirectory, page), "utf8"));
     if (raw === null || typeof raw !== "object" || Array.isArray(raw)) {
       return void 0;
     }
@@ -16869,12 +16997,15 @@ function validateAcceptedDetails(toolName, details) {
     [INSPECTOR_OUTPUT_TOOL_NAME]: ["pass", "bounce"],
     [GATEKEEPER_OUTPUT_TOOL_NAME]: ["dispatch", "pass"],
     [NAVIGATOR_OUTPUT_TOOL_NAME]: ["advice"],
+    [AUDITOR_OUTPUT_TOOL_NAME]: ["pass", "revise", "escalate"],
+    [EVIDENCE_CHILD_OUTPUT_TOOL_NAME]: [],
     [DIARIST_OUTPUT_TOOL_NAME]: ["completed"]
   };
   const collectorDiscriminator = toolName === COLLECTOR_OUTPUT_TOOL && Array.isArray(candidate?.groups);
+  const evidenceChildDiscriminator = toolName === EVIDENCE_CHILD_OUTPUT_TOOL_NAME && candidate !== null && typeof candidate === "object" && !Array.isArray(candidate);
   const baseDiscriminator = discriminator;
   const runtimeBindingMissing = toolName === DOCTOR_OUTPUT_TOOL_NAME && baseDiscriminator === "completed" && !(candidate?.cost !== null && typeof candidate?.cost === "object") || toolName === REVIEWER_OUTPUT_TOOL_NAME && candidate?.version !== 2;
-  if (runtimeBindingMissing || !collectorDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator))) {
+  if (runtimeBindingMissing || !collectorDiscriminator && !evidenceChildDiscriminator && (typeof discriminator !== "string" || !lawfulStatuses[toolName].includes(baseDiscriminator))) {
     throw new AcceptedDetailsContractError("terminating receipt has no recognized execution discriminator");
   }
   try {
@@ -16905,6 +17036,10 @@ function validateAcceptedDetails(toolName, details) {
         return validateRecordedGatekeeperOutput(details);
       case NAVIGATOR_OUTPUT_TOOL_NAME:
         return validateRecordedNavigatorOutput(details);
+      case AUDITOR_OUTPUT_TOOL_NAME:
+        return validateRecordedAuditorOutput(details);
+      case EVIDENCE_CHILD_OUTPUT_TOOL_NAME:
+        return validateRecordedEvidenceChildOutput(details);
       case DIARIST_OUTPUT_TOOL_NAME:
         return validateRecordedDiaristOutput(details);
     }
@@ -16924,6 +17059,10 @@ function acceptedFacts(toolName, details) {
     case INSPECTOR_OUTPUT_TOOL_NAME:
     case GATEKEEPER_OUTPUT_TOOL_NAME:
     case NAVIGATOR_OUTPUT_TOOL_NAME:
+    case AUDITOR_OUTPUT_TOOL_NAME:
+      return { status: details.status };
+    case EVIDENCE_CHILD_OUTPUT_TOOL_NAME:
+      return { status: "report" };
     case DIARIST_OUTPUT_TOOL_NAME:
       return { status: details.status };
     case JUDGE_OUTPUT_TOOL_NAME:
@@ -16951,6 +17090,8 @@ var init_terminating_tools = __esm({
     init_doctor_contracts();
     init_gatekeeper_output();
     init_navigator_output();
+    init_auditor_output();
+    init_evidence_child_output();
     init_merger_contracts();
     init_notary_contracts();
     init_countersign_contracts();
@@ -16972,6 +17113,8 @@ var init_terminating_tools = __esm({
       INSPECTOR_OUTPUT_TOOL_NAME,
       GATEKEEPER_OUTPUT_TOOL_NAME,
       NAVIGATOR_OUTPUT_TOOL_NAME,
+      AUDITOR_OUTPUT_TOOL_NAME,
+      EVIDENCE_CHILD_OUTPUT_TOOL_NAME,
       DIARIST_OUTPUT_TOOL_NAME
     ];
     AcceptedDetailsContractError = class extends CorrectableSubmissionError {
@@ -16985,7 +17128,7 @@ var init_terminating_tools = __esm({
 });
 
 // src/doctor-evidence.ts
-import { readdir, readFile as readFile6, realpath as realpath2, stat } from "node:fs/promises";
+import { readdir, readFile as readFile5, realpath as realpath2, stat } from "node:fs/promises";
 import { dirname as dirname6, relative as relative2, resolve as resolve5, sep as sep2 } from "node:path";
 function record2(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
@@ -17104,7 +17247,7 @@ async function loadDoctorCase(runsPath) {
   const turns = { count: 0, sources: [] }, calls = { count: 0, sources: [] }, tokens = { count: 0, sources: [] };
   for (const path of await discoverCaseFiles(root)) {
     const id = relative2(root, path).split(sep2).join("/");
-    const bytes = await readFile6(path);
+    const bytes = await readFile5(path);
     const content = bytes.toString("utf8");
     const kind = id.endsWith(".jsonl") ? "session" : "stderr";
     evidence.push({ id, kind, byteLength: bytes.byteLength, contentLength: content.length, sha256: sha256Hex(bytes), content });
@@ -17134,7 +17277,7 @@ var init_doctor_evidence = __esm({
 
 // src/collector-config.ts
 import { createHash as createHash3 } from "node:crypto";
-import { readFile as readFile7 } from "node:fs/promises";
+import { readFile as readFile6 } from "node:fs/promises";
 function fail3(message, cause) {
   throw new Error(message, cause === void 0 ? void 0 : { cause });
 }
@@ -17177,7 +17320,7 @@ function emptyCollectorManifest() {
 async function loadCollectorManifest(path) {
   let bytes;
   try {
-    bytes = await readFile7(path);
+    bytes = await readFile6(path);
   } catch (error) {
     fail3(`Collector request manifest is unreadable at ${path}`, error);
   }
@@ -17312,10 +17455,10 @@ var init_uuidv7 = __esm({
 });
 
 // src/typed-provider-http.ts
-import { readFile as readFile8, unlink, writeFile as writeFile4 } from "node:fs/promises";
-import { join as join12 } from "node:path";
+import { readFile as readFile7, unlink, writeFile as writeFile3 } from "node:fs/promises";
+import { join as join11 } from "node:path";
 function typedProviderHttpPath(runDirectory) {
-  return join12(runDirectory, TYPED_HTTP_FILE);
+  return join11(runDirectory, TYPED_HTTP_FILE);
 }
 async function clearTypedProviderHttpObservation(runDirectory) {
   try {
@@ -17330,7 +17473,7 @@ async function clearTypedProviderHttpObservation(runDirectory) {
 async function readLatestTypedProviderHttpObservation(runDirectory) {
   let text;
   try {
-    text = await readFile8(typedProviderHttpPath(runDirectory), "utf8");
+    text = await readFile7(typedProviderHttpPath(runDirectory), "utf8");
   } catch (error) {
     if (error instanceof Error && "code" in error && error.code === "ENOENT") {
       return void 0;
@@ -17359,8 +17502,8 @@ var init_typed_provider_http = __esm({
 });
 
 // src/public-cli/run-lifecycle.ts
-import { chmod, open, readdir as readdir2, readFile as readFile9, unlink as unlink2, writeFile as writeFile5 } from "node:fs/promises";
-import { join as join13 } from "node:path";
+import { chmod, open, readdir as readdir2, readFile as readFile8, unlink as unlink2, writeFile as writeFile4 } from "node:fs/promises";
+import { join as join12 } from "node:path";
 function selectResumeContinuationPrompt(message, engineMaterial) {
   const base = message !== void 0 ? message : RESUME_TRANSPORT_ENVELOPE;
   return appendEngineSessionMaterial([base], engineMaterial).join("\n");
@@ -17389,8 +17532,8 @@ function renderResumeCommand(runId) {
 }
 async function writeRoleRunState(runDirectory, record4) {
   const payload = { ...record4, runDirectory };
-  await writeFile5(
-    join13(runDirectory, RUN_STATE_FILE),
+  await writeFile4(
+    join12(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -17440,7 +17583,7 @@ function parseCurrentCourtState(raw) {
 async function readRoleRunStateDisk(runDirectory) {
   let raw;
   try {
-    raw = JSON.parse(await readFile9(join13(runDirectory, RUN_STATE_FILE), "utf8"));
+    raw = JSON.parse(await readFile8(join12(runDirectory, RUN_STATE_FILE), "utf8"));
   } catch {
     return void 0;
   }
@@ -17451,7 +17594,7 @@ async function readRoleRunStateDisk(runDirectory) {
   if (typeof record4.runId !== "string" || record4.runId.trim() === "") {
     return void 0;
   }
-  if (record4.role !== "judge" && record4.role !== "coder" && record4.role !== "fixer" && record4.role !== "collector" && record4.role !== "doctor" && record4.role !== "reviewer" && record4.role !== "merger" && record4.role !== "notary" && record4.role !== "countersign" && record4.role !== "gleaner-left" && record4.role !== "inspector" && record4.role !== "gatekeeper" && record4.role !== "navigator" && record4.role !== "diarist") {
+  if (record4.role !== "judge" && record4.role !== "coder" && record4.role !== "fixer" && record4.role !== "collector" && record4.role !== "doctor" && record4.role !== "reviewer" && record4.role !== "merger" && record4.role !== "notary" && record4.role !== "countersign" && record4.role !== "gleaner-left" && record4.role !== "inspector" && record4.role !== "gatekeeper" && record4.role !== "navigator" && record4.role !== "auditor" && record4.role !== "evidence-child" && record4.role !== "diarist") {
     return void 0;
   }
   if (record4.state !== "admitted" && record4.state !== "running" && record4.state !== "resumable" && record4.state !== "terminal") {
@@ -17506,8 +17649,8 @@ async function writeRoleRunStateDisk(runDirectory, disk) {
     ...disk.resumable === void 0 ? {} : { resumable: disk.resumable },
     ...disk.currentCourt === void 0 ? {} : { currentCourt: disk.currentCourt }
   };
-  await writeFile5(
-    join13(runDirectory, RUN_STATE_FILE),
+  await writeFile4(
+    join12(runDirectory, RUN_STATE_FILE),
     `${JSON.stringify(payload, null, 2)}
 `,
     "utf8"
@@ -17672,7 +17815,7 @@ function isProcessAlive(pid) {
 async function autopsyWriterLock(lockPath) {
   let content;
   try {
-    content = await readFile9(lockPath, "utf8");
+    content = await readFile8(lockPath, "utf8");
   } catch (error) {
     if (errorCodeOf2(error) === "ENOENT") return { verdict: "absent" };
     return { verdict: "absent", readFailure: error };
@@ -17751,15 +17894,15 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
   };
   const reportCleanupFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock cleanup failed (release is best-effort; residual lock left in place) at ${join13(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock cleanup failed (release is best-effort; residual lock left in place) at ${join12(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
   const reportReadFailure = (error) => {
     reportDiagnostic(
-      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join13(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
+      `writer lease lock read failed (holder liveness unverifiable; lock left in place) at ${join12(runDirectory, WRITER_LOCK_FILE)}: ${describeErrorIdentity(error)}`
     );
   };
-  const lockPath = join13(runDirectory, WRITER_LOCK_FILE);
+  const lockPath = join12(runDirectory, WRITER_LOCK_FILE);
   let lastAutopsy = { verdict: "absent" };
   let lastReclaimFailure;
   for (let reclaimsLeft = WRITER_LEASE_RECLAIM_ROUNDS; ; reclaimsLeft -= 1) {
@@ -17809,7 +17952,7 @@ async function acquireRunWriterLease(runDirectory, onCleanupFailure) {
 async function findRunDirectoryById(home, runId) {
   if (runId.trim() === "") return void 0;
   const ledgerHome = resolveActivationLedgerHome(home);
-  const booksRoot = join13(ledgerHome, "books");
+  const booksRoot = join12(ledgerHome, "books");
   let bookKeys;
   try {
     bookKeys = await readdir2(booksRoot);
@@ -17817,7 +17960,7 @@ async function findRunDirectoryById(home, runId) {
     return void 0;
   }
   for (const bookKey of bookKeys) {
-    const runsDir = join13(activationBookDirectory(ledgerHome, bookKey), "runs");
+    const runsDir = join12(activationBookDirectory(ledgerHome, bookKey), "runs");
     let entries;
     try {
       entries = await readdir2(runsDir);
@@ -17826,7 +17969,7 @@ async function findRunDirectoryById(home, runId) {
     }
     for (const entry of entries) {
       if (entry === `${runId}@judge` || entry.startsWith(`${runId}@`)) {
-        return join13(runsDir, entry);
+        return join12(runsDir, entry);
       }
     }
   }
@@ -17834,7 +17977,7 @@ async function findRunDirectoryById(home, runId) {
 }
 async function findLatestRunIdForSeatTicket(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
-  const runsDir = join13(
+  const runsDir = join12(
     activationBookDirectory(ledgerHome, input.bookKey),
     "runs"
   );
@@ -17851,7 +17994,7 @@ async function findLatestRunIdForSeatTicket(input) {
     if (!entry.endsWith(suffix)) continue;
     const runId = entry.slice(0, entry.length - suffix.length);
     if (runId.length === 0) continue;
-    const ticketNumber = await readRunTicketNumber(join13(runsDir, entry));
+    const ticketNumber = await readRunTicketNumber(join12(runsDir, entry));
     if (ticketNumber !== input.ticketNumber) continue;
     if (best === void 0 || runId > best) best = runId;
   }
@@ -17920,7 +18063,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let sourceRun;
   try {
     const raw = JSON.parse(
-      await readFile9(run.admittedRequestPath, "utf8")
+      await readFile8(run.admittedRequestPath, "utf8")
     );
     if (raw !== null && typeof raw === "object" && !Array.isArray(raw)) {
       const record4 = raw;
@@ -18033,7 +18176,7 @@ async function loadResumableRunRecord(home, runId, authority) {
   let model;
   try {
     const invocationRaw = JSON.parse(
-      await readFile9(join13(run.runDirectory, "invocation.json"), "utf8")
+      await readFile8(join12(run.runDirectory, "invocation.json"), "utf8")
     );
     if (invocationRaw !== null && typeof invocationRaw === "object" && !Array.isArray(invocationRaw)) {
       const rec = invocationRaw;
@@ -18235,7 +18378,7 @@ async function loadResumableCountersignRun(home, runId, authority) {
 }
 async function loadResumableInstructionSeatRun(home, runId, authority) {
   const loaded = await loadResumableRunRecord(home, runId, authority);
-  if (loaded.run.role !== "gatekeeper" && loaded.run.role !== "navigator") {
+  if (loaded.run.role !== "gatekeeper" && loaded.run.role !== "navigator" && loaded.run.role !== "auditor" && loaded.run.role !== "evidence-child") {
     throw new CliUsageError(
       `role run ${runId} belongs to ${loaded.run.role}, not an instruction seat`
     );
@@ -18438,7 +18581,13 @@ var init_run_lifecycle = __esm({
 });
 
 // src/notary-source-run.ts
-import { dirname as dirname7, isAbsolute as isAbsolute4, join as join14, resolve as resolve6, basename as basename4 } from "node:path";
+var notary_source_run_exports = {};
+__export(notary_source_run_exports, {
+  NotarySourceRunError: () => NotarySourceRunError,
+  loadNotarySourceRunLocator: () => loadNotarySourceRunLocator,
+  resolveNotarySourceRunLocator: () => resolveNotarySourceRunLocator
+});
+import { dirname as dirname7, isAbsolute as isAbsolute4, join as join13, resolve as resolve6, basename as basename4 } from "node:path";
 import { lstat as lstat2, realpath as realpath3 } from "node:fs/promises";
 function parseRunDirectoryName(name) {
   const match = RUN_DIR_NAME.exec(name);
@@ -18484,11 +18633,11 @@ async function resolveNotarySourceRunLocator(options) {
   }
   const ledgerHome = resolveActivationLedgerHome(options.home);
   const bookKey = resolveBookKeyFromGit(options.projectRoot);
-  const bookRunsRoot = join14(activationBookDirectory(ledgerHome, bookKey), "runs");
+  const bookRunsRoot = join13(activationBookDirectory(ledgerHome, bookKey), "runs");
   let candidate;
   const bare = parseRunDirectoryName(raw);
   if (bare !== void 0 && !raw.includes("/") && !raw.includes("\\")) {
-    candidate = join14(bookRunsRoot, `${bare.runId}@${bare.role}`);
+    candidate = join13(bookRunsRoot, `${bare.runId}@${bare.role}`);
   } else {
     candidate = isAbsolute4(raw) ? raw : resolve6(options.projectRoot, raw);
   }
@@ -18528,6 +18677,31 @@ async function resolveNotarySourceRunLocator(options) {
     role: identity.role
   };
 }
+async function loadNotarySourceRunLocator(path) {
+  const real = await requireRunDirectory(path, path);
+  const identity = parseRunDirectoryName(basename4(real));
+  const runState = await readRoleRunIdentity(real);
+  if (runState === void 0) {
+    throw new NotarySourceRunError(
+      "notary source-run lacks retained run-state identity"
+    );
+  }
+  if (runState.runId !== identity.runId || runState.role !== identity.role) {
+    throw new NotarySourceRunError(
+      "notary source-run retained identity does not match directory name"
+    );
+  }
+  if (physicalPathIdentity(runState.runDirectory) !== physicalPathIdentity(real)) {
+    throw new NotarySourceRunError(
+      "notary source-run retained runDirectory does not match locator path"
+    );
+  }
+  return {
+    runDirectory: real,
+    runId: identity.runId,
+    role: identity.role
+  };
+}
 var RUN_DIR_NAME, NotarySourceRunError;
 var init_notary_source_run = __esm({
   "src/notary-source-run.ts"() {
@@ -18535,7 +18709,7 @@ var init_notary_source_run = __esm({
     init_activation_ledger_git();
     init_activation_ledger_topology();
     init_run_lifecycle();
-    RUN_DIR_NAME = /^([0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})@([A-Za-z][A-Za-z0-9_-]*)$/i;
+    RUN_DIR_NAME = /^([A-Za-z0-9][A-Za-z0-9._-]*)@([A-Za-z][A-Za-z0-9_-]*)$/;
     NotarySourceRunError = class extends Error {
       constructor(message, options) {
         super(message, options);
@@ -18795,7 +18969,7 @@ function renderHumanOwnerOptionLines(owner, locale2 = "en") {
   }
   return lines;
 }
-var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, JUDGE_OPTIONS, GLEANER_LEFT_OPTIONS, INSPECTOR_OPTIONS, GATEKEEPER_OPTIONS, NAVIGATOR_OPTIONS, COUNTERSIGN_OPTIONS, DIARIST_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, PUBLIC_OPTION_TABLE, PUBLIC_NAVIGATOR_HELP_NOTE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
+var ANALYST_REQUIRE_ANY_OF, ANALYST_DEFAULT_MODE, REJECTED_PUBLIC_SPELLINGS, GLOBAL_OPTIONS, SHARED_PROJECT_SEMANTICS, SHARED_ATTACH_SEMANTICS, JUDGE_OPTIONS, GLEANER_LEFT_OPTIONS, INSPECTOR_OPTIONS, GATEKEEPER_OPTIONS, NAVIGATOR_OPTIONS, AUDITOR_OPTIONS, EVIDENCE_CHILD_OPTIONS, COUNTERSIGN_OPTIONS, DIARIST_OPTIONS, CODER_OPTIONS, FIXER_OPTIONS, REVIEWER_OPTIONS, COLLECTOR_OPTIONS, DOCTOR_OPTIONS, NOTARY_OPTIONS, MERGER_OPTIONS, ANALYST_OPTIONS, PUBLIC_OPTION_TABLE, PUBLIC_NAVIGATOR_HELP_NOTE, TOP_LEVEL_HELP, ROLE_COMMAND_HELP, SUPPORT_COMMAND_HELP, PUBLIC_COMMAND_HELP;
 var init_option_definitions = __esm({
   "src/public-cli/option-definitions.ts"() {
     "use strict";
@@ -18968,6 +19142,42 @@ var init_option_definitions = __esm({
       bindOwner("navigator", SHARED_PROJECT_SEMANTICS),
       bindOwner("navigator", SHARED_ATTACH_SEMANTICS)
     ];
+    AUDITOR_OPTIONS = [
+      bindOwner("auditor", SHARED_PROJECT_SEMANTICS),
+      bindOwner("auditor", SHARED_ATTACH_SEMANTICS),
+      {
+        id: "subject",
+        owner: "auditor",
+        canonical: "--subject",
+        aliases: [],
+        valueMetavar: "judge|doctor",
+        required: true,
+        repeatable: false,
+        form: "option",
+        description: {
+          en: "Required audited subject: judge or doctor (selects judge-auditor.md / doctor-auditor.md).",
+          zh: "\u5FC5\u586B\u53D7\u5BA1\u5BF9\u8C61\uFF1Ajudge \u6216 doctor\uFF08\u88C5 judge-auditor.md / doctor-auditor.md\uFF09\u3002"
+        }
+      },
+      {
+        id: "source-run",
+        owner: "auditor",
+        canonical: "--source-run",
+        aliases: [],
+        valueMetavar: "runId@role|path",
+        required: true,
+        repeatable: false,
+        form: "option",
+        description: {
+          en: "Required source run locator of the audited subject volume (same input for direct and nested summons).",
+          zh: "\u5FC5\u586B\u53D7\u5BA1\u5377\u5B97 locator\uFF08\u76F4\u8C03\u4E0E\u4F20\u53EC\u540C\u4E00\u8F93\u5165\u9762\uFF09\u3002"
+        }
+      }
+    ];
+    EVIDENCE_CHILD_OPTIONS = [
+      bindOwner("evidence-child", SHARED_PROJECT_SEMANTICS),
+      bindOwner("evidence-child", SHARED_ATTACH_SEMANTICS)
+    ];
     COUNTERSIGN_OPTIONS = [
       bindOwner("countersign", SHARED_PROJECT_SEMANTICS),
       bindOwner("countersign", SHARED_ATTACH_SEMANTICS)
@@ -19321,6 +19531,8 @@ var init_option_definitions = __esm({
       inspector: INSPECTOR_OPTIONS,
       gatekeeper: GATEKEEPER_OPTIONS,
       navigator: NAVIGATOR_OPTIONS,
+      auditor: AUDITOR_OPTIONS,
+      "evidence-child": EVIDENCE_CHILD_OPTIONS,
       diarist: DIARIST_OPTIONS,
       analyst: ANALYST_OPTIONS
     };
@@ -19440,6 +19652,23 @@ var init_option_definitions = __esm({
           'ak-role navigator "\u521A\u5B8C\u6210 coder apply \u6536\u655B\uFF0C\u4E0B\u4E00\u6B65\uFF1F"'
         ]
       },
+      auditor: {
+        command: "auditor",
+        summary: "Direct Auditor (\u5BA1\u5211\u9662) compliance audit: pass, revise, or escalate.",
+        usage: ["ak-role auditor --subject <judge|doctor> --source-run <runId@role|path> [options] [instruction]"],
+        examples: [
+          'ak-role auditor --subject judge --source-run 01abc\u2026@judge --attach ./dossier "\u5BA1\uFF1A\u672C run \u662F\u5426\u5408\u89C4\u3002"',
+          'ak-role auditor --subject doctor --source-run 01abc\u2026@doctor "\u5BA1\uFF1A\u592A\u533B\u5019\u9009\u662F\u5426\u5408\u89C4\u3002"'
+        ]
+      },
+      "evidence-child": {
+        command: "evidence-child",
+        summary: "Direct evidence-child fact gathering; submit one report.",
+        usage: ["ak-role evidence-child [options] [instruction]"],
+        examples: [
+          'ak-role evidence-child "\u67E5\uFF1A\u672C\u5DE5\u4F5C\u6811 diff \u4E0E\u7968\u9762\u662F\u5426\u4E00\u81F4\u3002"'
+        ]
+      },
       diarist: {
         command: "diarist",
         summary: "Direct Diarist (\u8D77\u5C45\u90CE) pass: gather and organize this case's decision basis into its \u8D77\u5C45\u5F55.",
@@ -19541,15 +19770,15 @@ import { execFileSync as execFileSync2 } from "node:child_process";
 import {
   lstat as lstat3,
   mkdir as mkdir2,
-  readFile as readFile10,
+  readFile as readFile9,
   realpath as realpath4,
-  writeFile as writeFile6
+  writeFile as writeFile5
 } from "node:fs/promises";
-import { basename as basename5, isAbsolute as isAbsolute5, join as join15, resolve as resolve7, sep as sep3 } from "node:path";
+import { basename as basename5, isAbsolute as isAbsolute5, join as join14, resolve as resolve7, sep as sep3 } from "node:path";
 function issueAdmissionPlacement(authority, request) {
   const principal = authority.issue(request);
   const { sessionDirectory, sessionFile } = authority.decode(principal);
-  const runDirectory = join15(sessionDirectory, "..");
+  const runDirectory = join14(sessionDirectory, "..");
   const ledgerHome = resolveActivationLedgerHome(request.home);
   const bookKey = resolveBookKeyFromGit(request.cwd);
   return {
@@ -19568,7 +19797,7 @@ async function writeAdmittedRequestPersistence(admittedRequestPath, body, coordi
     sessionDirectory: coordinates.sessionDirectory,
     sessionFile: coordinates.sessionFile
   };
-  await writeFile6(
+  await writeFile5(
     admittedRequestPath,
     `${JSON.stringify(projection, null, 2)}
 `,
@@ -19596,20 +19825,16 @@ async function writeRoleInvocationLedger(source, role, effectiveModel) {
     ...source.ticketNumber === void 0 ? {} : { ticketNumber: source.ticketNumber },
     ...effectiveModelLedgerFields(effectiveModel)
   };
-  await writeFile6(
-    join15(source.runDirectory, "invocation.json"),
+  await writeFile5(
+    join14(source.runDirectory, "invocation.json"),
     `${JSON.stringify(identity, null, 2)}
 `,
     "utf8"
   );
-  const home = homeFromRunDirectory(source.runDirectory);
-  const config = await loadPublicCliConfig(home);
-  const institutionalPage = resolveInstitutionalSeatSelections(config, effectiveModel);
-  await writeInstitutionalResolutionPage(source.runDirectory, institutionalPage);
 }
 async function recordEffectiveInvocationModel(runDirectory, model, engine, host) {
-  const ledgerPath = join15(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile10(ledgerPath, "utf8"));
+  const ledgerPath = join14(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile9(ledgerPath, "utf8"));
   const next = { ...current };
   if (model !== void 0) {
     next.provider = model.provider;
@@ -19628,26 +19853,17 @@ async function recordEffectiveInvocationModel(runDirectory, model, engine, host)
   if (host !== void 0) {
     next.host = host;
   }
-  await writeFile6(
+  await writeFile5(
     ledgerPath,
     `${JSON.stringify(next, null, 2)}
 `,
     "utf8"
   );
-  const effectiveModel = typeof next.provider === "string" && typeof next.model === "string" ? {
-    provider: next.provider,
-    model: next.model,
-    ...typeof next.thinking === "string" ? { thinking: next.thinking } : {}
-  } : void 0;
-  const home = homeFromRunDirectory(runDirectory);
-  const config = await loadPublicCliConfig(home);
-  const institutionalPage = resolveInstitutionalSeatSelections(config, effectiveModel);
-  await writeInstitutionalResolutionPage(runDirectory, institutionalPage);
 }
 async function mergeInvocationIdentityPage(runDirectory, fields) {
-  const ledgerPath = join15(runDirectory, "invocation.json");
-  const current = JSON.parse(await readFile10(ledgerPath, "utf8"));
-  await writeFile6(
+  const ledgerPath = join14(runDirectory, "invocation.json");
+  const current = JSON.parse(await readFile9(ledgerPath, "utf8"));
+  await writeFile5(
     ledgerPath,
     `${JSON.stringify({
       ...current,
@@ -19675,8 +19891,8 @@ async function bindAdmittedTicketNumber(admitted, ticketNumber) {
   admitted.ticketNumber = ticketNumber;
   await mergeInvocationIdentityPage(admitted.runDirectory, { ticketNumber });
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile10(admittedPath, "utf8"));
-  await writeFile6(
+  const current = JSON.parse(await readFile9(admittedPath, "utf8"));
+  await writeFile5(
     admittedPath,
     `${JSON.stringify({ ...current, ticketNumber }, null, 2)}
 `,
@@ -19695,8 +19911,8 @@ async function recordTrueUnboundTicketResolution(admitted) {
     ticketResolution: "true-unbound"
   });
   const admittedPath = admitted.admittedRequestPath;
-  const current = JSON.parse(await readFile10(admittedPath, "utf8"));
-  await writeFile6(
+  const current = JSON.parse(await readFile9(admittedPath, "utf8"));
+  await writeFile5(
     admittedPath,
     `${JSON.stringify({ ...current, ticketResolution: "true-unbound" }, null, 2)}
 `,
@@ -19712,7 +19928,7 @@ async function recordLaunchedPiIdentity(runDirectory, identity) {
 async function observeLaunchedRolePackageIdentity(packageRoot2, selectedRoleEntry) {
   const rolePackageRoot = packageRoot2;
   const raw = JSON.parse(
-    await readFile10(join15(rolePackageRoot, "package.json"), "utf8")
+    await readFile9(join14(rolePackageRoot, "package.json"), "utf8")
   );
   if (typeof raw.version !== "string" || raw.version.trim() === "") {
     throw new Error(
@@ -19737,6 +19953,8 @@ async function recordLaunchedRolePackageIdentity(runDirectory, identity) {
 function parseInstructionArgv(args, owner) {
   const attachmentPaths = [];
   let project;
+  let subject;
+  let sourceRun;
   const positional = [];
   const tokens = [...args];
   const definitions = roleOptions(owner);
@@ -19757,6 +19975,24 @@ function parseInstructionArgv(args, owner) {
         project = requireOptionPath(taken.def.canonical, taken.value);
         continue;
       }
+      if (taken.def.id === "subject") {
+        const raw = typeof taken.value === "string" ? taken.value.trim() : "";
+        if (raw !== "judge" && raw !== "doctor") {
+          throw new CliUsageError(
+            `auditor --subject must be judge|doctor, got ${taken.value ?? "(missing)"}`
+          );
+        }
+        subject = raw;
+        continue;
+      }
+      if (taken.def.id === "source-run") {
+        const raw = typeof taken.value === "string" ? taken.value.trim() : "";
+        if (raw === "") {
+          throw new CliUsageError("auditor --source-run requires a run locator");
+        }
+        sourceRun = raw;
+        continue;
+      }
       throw new CliUsageError(`unknown ${owner} option: ${taken.def.canonical}`);
     }
     const token = tokens.shift();
@@ -19769,7 +20005,9 @@ function parseInstructionArgv(args, owner) {
   return {
     instruction: positional.join(" "),
     attachmentPaths,
-    ...project === void 0 ? {} : { project }
+    ...project === void 0 ? {} : { project },
+    ...subject === void 0 ? {} : { subject },
+    ...sourceRun === void 0 ? {} : { sourceRun }
   };
 }
 function requireOptionPath(flag, value) {
@@ -19827,6 +20065,12 @@ function parseGatekeeperArgv(args) {
 function parseNavigatorArgv(args) {
   return parseInstructionArgv(args, "navigator");
 }
+function parseAuditorArgv(args) {
+  return parseInstructionArgv(args, "auditor");
+}
+function parseEvidenceChildArgv(args) {
+  return parseInstructionArgv(args, "evidence-child");
+}
 function parseDiaristArgv(args) {
   return parseInstructionArgv(args, "diarist");
 }
@@ -19932,10 +20176,10 @@ async function freezeRegularFileAttachment(sourcePath, destinationDir, index) {
       `attachment must be a regular file (not a directory or symlink): ${sourcePath}`
     );
   }
-  const bytes = await readFile10(absolute);
+  const bytes = await readFile9(absolute);
   const name = `${String(index).padStart(2, "0")}-${basename5(absolute)}`;
-  const frozenPath = join15(destinationDir, name);
-  await writeFile6(frozenPath, bytes);
+  const frozenPath = join14(destinationDir, name);
+  await writeFile5(frozenPath, bytes);
   return {
     attachment: {
       provenancePath: absolute,
@@ -19962,7 +20206,7 @@ async function freezeAttachments(attachmentPaths, attachmentsDirectory) {
 async function freezeAttachmentsIntoRun(attachmentPaths, runDirectory, summonsKey = `s-${Date.now().toString(36)}`) {
   if (attachmentPaths.length === 0) return [];
   const ledgerHome = resolveActivationLedgerHome(homeFromRunDirectory(runDirectory));
-  const attachmentsDirectory = join15(runDirectory, "attachments", summonsKey);
+  const attachmentsDirectory = join14(runDirectory, "attachments", summonsKey);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   return freezeAttachments(attachmentPaths, attachmentsDirectory);
 }
@@ -19988,7 +20232,7 @@ async function admitStandardMaterialInvocation(role, options) {
     role,
     home: options.home
   });
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -20013,7 +20257,7 @@ async function admitStandardMaterialInvocation(role, options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20049,6 +20293,12 @@ async function admitGatekeeperInvocation(options) {
 async function admitNavigatorInvocation(options) {
   return admitStandardMaterialInvocation("navigator", options);
 }
+async function admitAuditorInvocation(options) {
+  return admitStandardMaterialInvocation("auditor", options);
+}
+async function admitEvidenceChildInvocation(options) {
+  return admitStandardMaterialInvocation("evidence-child", options);
+}
 async function admitDiaristInvocation(options) {
   return admitStandardMaterialInvocation("diarist", options);
 }
@@ -20088,7 +20338,7 @@ async function admitCountersignInvocation(options) {
     role: "countersign",
     home: options.home
   });
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -20112,7 +20362,7 @@ async function admitCountersignInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20136,7 +20386,7 @@ function buildCountersignTransportPrompt(admitted, engineMaterial) {
   return buildInstructionTransportPrompt(admitted, engineMaterial);
 }
 async function ensureRunArtifactsDir(runDirectory) {
-  const dir = join15(runDirectory, "artifacts");
+  const dir = join14(runDirectory, "artifacts");
   await mkdir2(dir, { recursive: true });
   return dir;
 }
@@ -20168,12 +20418,12 @@ async function admitCoderInvocation(options) {
     role: "coder",
     home: options.home
   });
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
-  const taskPath = join15(runDirectory, "task.md");
-  await writeFile6(taskPath, instruction, "utf8");
+  const taskPath = join14(runDirectory, "task.md");
+  await writeFile5(taskPath, instruction, "utf8");
   const admitted = {
     role: "coder",
     phase: options.phase,
@@ -20193,7 +20443,7 @@ async function admitCoderInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20243,7 +20493,7 @@ async function admitFixerInvocation(options) {
   if (options.prerequisitesPath !== void 0) {
     const absolutePrereq = isAbsolute5(options.prerequisitesPath) ? options.prerequisitesPath : resolve7(options.prerequisitesPath);
     try {
-      prerequisitesSource = await readFile10(absolutePrereq, "utf8");
+      prerequisitesSource = await readFile9(absolutePrereq, "utf8");
     } catch (error) {
       throw new CliUsageError(
         `fixer prerequisites path is unreadable: ${options.prerequisitesPath}`,
@@ -20274,22 +20524,22 @@ async function admitFixerInvocation(options) {
     role: "fixer",
     home: options.home
   });
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
   let prerequisitesPath;
   if (prerequisitesSource !== void 0) {
-    prerequisitesPath = join15(runDirectory, "prerequisites.json");
-    await writeFile6(
+    prerequisitesPath = join14(runDirectory, "prerequisites.json");
+    await writeFile5(
       prerequisitesPath,
       `${JSON.stringify(prerequisites, null, 2)}
 `,
       "utf8"
     );
   }
-  const packetPath = join15(runDirectory, "fix-packet.md");
-  await writeFile6(packetPath, instruction, "utf8");
+  const packetPath = join14(runDirectory, "fix-packet.md");
+  await writeFile5(packetPath, instruction, "utf8");
   const admitted = {
     role: "fixer",
     phase: options.phase,
@@ -20314,7 +20564,7 @@ async function admitFixerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20523,14 +20773,14 @@ async function admitCollectorInvocation(options) {
     role: "collector",
     home: options.home
   });
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths ?? [], attachmentsDirectory);
   let requestManifestPath;
   if (manifestCanonicalJson !== void 0) {
-    requestManifestPath = join15(runDirectory, "request-manifest.json");
-    await writeFile6(requestManifestPath, manifestCanonicalJson, "utf8");
+    requestManifestPath = join14(runDirectory, "request-manifest.json");
+    await writeFile5(requestManifestPath, manifestCanonicalJson, "utf8");
   }
   const instruction = options.instruction ?? "";
   const instructionEmpty = instruction.trim() === "";
@@ -20556,7 +20806,7 @@ async function admitCollectorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20653,7 +20903,7 @@ function parseDoctorArgv(args) {
 }
 async function resolveDoctorCaseRunsPath(options) {
   const ledgerHome = resolveActivationLedgerHome(options.home);
-  const defaultRuns = join15(
+  const defaultRuns = join14(
     activationBookDirectory(ledgerHome, options.bookKey),
     "issues",
     String(options.issueNumber),
@@ -20760,7 +21010,7 @@ async function admitDoctorInvocation(options) {
       { cause: error }
     );
   }
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths ?? [], attachmentsDirectory);
@@ -20786,7 +21036,7 @@ async function admitDoctorInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -20918,7 +21168,7 @@ async function admitNotaryInvocation(options) {
     ...ticketFields,
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21020,7 +21270,7 @@ async function admitGleanerLeftInvocation(options) {
     attachments: [],
     ...options.correlationId === void 0 ? {} : { correlationId: options.correlationId }
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21125,7 +21375,7 @@ async function admitReviewerInvocation(options) {
     role: "reviewer",
     home: options.home
   });
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -21150,7 +21400,7 @@ async function admitReviewerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21277,7 +21527,7 @@ async function admitMergerInvocation(options) {
     role: "merger",
     home: options.home
   });
-  const attachmentsDirectory = join15(runDirectory, "attachments");
+  const attachmentsDirectory = join14(runDirectory, "attachments");
   ensureRealDirectoryTree(ledgerHome, sessionDirectory);
   ensureRealDirectoryTree(ledgerHome, attachmentsDirectory);
   const attachments = await freezeAttachments(options.attachmentPaths, attachmentsDirectory);
@@ -21305,8 +21555,8 @@ async function admitMergerInvocation(options) {
     // Authorized checks remain available on the assignment; default none.
     authorizedChecks: []
   });
-  const mergerInputPath = join15(runDirectory, "merger-input.json");
-  await writeFile6(
+  const mergerInputPath = join14(runDirectory, "merger-input.json");
+  await writeFile5(
     mergerInputPath,
     `${JSON.stringify(mergerInput, null, 2)}
 `,
@@ -21337,7 +21587,7 @@ async function admitMergerInvocation(options) {
       mediaKind: a.mediaKind
     }))
   };
-  const admittedRequestPath = join15(runDirectory, "admitted-request.json");
+  const admittedRequestPath = join14(runDirectory, "admitted-request.json");
   await writeAdmittedRequestPersistence(admittedRequestPath, admitted, {
     sessionDirectory,
     sessionFile
@@ -21610,8 +21860,6 @@ var init_invocation = __esm({
     init_engine_material();
     init_cli_errors();
     init_option_definitions();
-    init_config2();
-    init_institutional_resolution();
     MergerEnvelopeDerivationError = class extends Error {
       code = "merger-envelope-derivation";
       /** Typed cause for #107 classifyPostAdmissionFailure (isTypedActivationError). */
@@ -21629,8 +21877,8 @@ var init_invocation = __esm({
 
 // src/package-resources/method-skill.ts
 import { createHash as createHash4 } from "node:crypto";
-import { readFile as readFile11, realpath as realpath5 } from "node:fs/promises";
-import { join as join16 } from "node:path";
+import { readFile as readFile10, realpath as realpath5 } from "node:fs/promises";
+import { join as join15 } from "node:path";
 function gitBlobOid(bytes) {
   const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
   const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
@@ -21647,16 +21895,16 @@ function packagedMethodSkillRelativeDirectory(name) {
   return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
 }
 function resolvePackagedMethodSkillRoot(packageRoot2, name) {
-  return join16(packageRoot2, packagedMethodSkillRelativeDirectory(name));
+  return join15(packageRoot2, packagedMethodSkillRelativeDirectory(name));
 }
 function resolvePackagedMethodSkillPath(packageRoot2, name) {
-  return join16(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
+  return join15(resolvePackagedMethodSkillRoot(packageRoot2, name), "SKILL.md");
 }
-function isRecord8(value) {
+function isRecord10(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function parseProvenance(raw, expectedName) {
-  if (!isRecord8(raw)) {
+  if (!isRecord10(raw)) {
     throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
   }
   if (raw.name !== expectedName) {
@@ -21670,7 +21918,7 @@ function parseProvenance(raw, expectedName) {
   if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
     throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
   }
-  if (!isRecord8(raw.upstream)) {
+  if (!isRecord10(raw.upstream)) {
     throw new Error(`Packaged method provenance upstream must be an object`);
   }
   const upstream = raw.upstream;
@@ -21697,12 +21945,12 @@ function parseProvenance(raw, expectedName) {
       `Packaged method provenance upstream must include nonblank tag or version`
     );
   }
-  if (!isRecord8(raw.files)) {
+  if (!isRecord10(raw.files)) {
     throw new Error(`Packaged method provenance files must be an object`);
   }
   const files = {};
   for (const [rel, entry] of Object.entries(raw.files)) {
-    if (!isRecord8(entry)) {
+    if (!isRecord10(entry)) {
       throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
     }
     if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
@@ -21744,11 +21992,11 @@ function parseProvenance(raw, expectedName) {
 }
 async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot2, name);
-  const skillPathConfigured = join16(rootDirectory, "SKILL.md");
-  const provenancePath = join16(rootDirectory, "provenance.json");
+  const skillPathConfigured = join15(rootDirectory, "SKILL.md");
+  const provenancePath = join15(rootDirectory, "provenance.json");
   let provenanceRaw;
   try {
-    provenanceRaw = await readFile11(provenancePath, "utf8");
+    provenanceRaw = await readFile10(provenancePath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, provenancePath, error);
   }
@@ -21762,10 +22010,10 @@ async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   }
   const provenance = parseProvenance(provenanceJson, name);
   for (const [rel, expected] of Object.entries(provenance.files)) {
-    const absolute = join16(rootDirectory, rel);
+    const absolute = join15(rootDirectory, rel);
     let bytes;
     try {
-      bytes = await readFile11(absolute);
+      bytes = await readFile10(absolute);
     } catch (error) {
       throw new PackagedMethodSkillUnavailableError(name, absolute, error);
     }
@@ -21781,7 +22029,7 @@ async function loadPackagedMethodSkillMaterial(packageRoot2, name) {
   let raw;
   try {
     skillPath = await realpath5(skillPathConfigured);
-    raw = await readFile11(skillPath, "utf8");
+    raw = await readFile10(skillPath, "utf8");
   } catch (error) {
     throw new PackagedMethodSkillUnavailableError(name, skillPathConfigured, error);
   }
@@ -21861,7 +22109,7 @@ var init_method_skill = __esm({
 
 // src/collector-github.ts
 import { spawn as spawn3 } from "node:child_process";
-function isRecord9(value) {
+function isRecord11(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function requireString(value, label) {
@@ -21902,25 +22150,25 @@ function commentFailureCause(error) {
   };
 }
 function requireUserLogin(raw) {
-  if (!isRecord9(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord11(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function optionalUserLogin(raw) {
   if (raw === null) return null;
-  if (!isRecord9(raw) || typeof raw["login"] !== "string") {
+  if (!isRecord11(raw) || typeof raw["login"] !== "string") {
     throw new Error("GitHub payload missing user.login");
   }
   return raw["login"];
 }
 function machineIdentity(raw) {
   const user = raw["user"];
-  if (!isRecord9(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
+  if (!isRecord11(user) || typeof user["type"] !== "string" || typeof user["id"] !== "number") {
     return null;
   }
   const app = raw["performed_via_github_app"];
-  const appId = isRecord9(app) && typeof app["id"] === "number" ? app["id"] : void 0;
+  const appId = isRecord11(app) && typeof app["id"] === "number" ? app["id"] : void 0;
   return {
     userType: user["type"],
     userId: user["id"],
@@ -21928,9 +22176,9 @@ function machineIdentity(raw) {
   };
 }
 function normalizePullRequest(raw) {
-  if (!isRecord9(raw)) throw new Error("GitHub pull request payload must be an object");
+  if (!isRecord11(raw)) throw new Error("GitHub pull request payload must be an object");
   const head = raw["head"];
-  if (!isRecord9(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
+  if (!isRecord11(head) || typeof head["sha"] !== "string" || head["sha"].length === 0) {
     throw new Error("GitHub pull request payload missing head.sha");
   }
   const number = requireNumber(raw["number"], "number");
@@ -21946,7 +22194,7 @@ function normalizePullRequest(raw) {
   };
 }
 function normalizePullRequestReaction(raw) {
-  if (!isRecord9(raw)) throw new Error("GitHub reaction payload must be an object");
+  if (!isRecord11(raw)) throw new Error("GitHub reaction payload must be an object");
   return {
     id: requireNumber(raw["id"], "reaction.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -21957,7 +22205,7 @@ function normalizePullRequestReaction(raw) {
   };
 }
 function normalizeReview(raw) {
-  if (!isRecord9(raw)) throw new Error("GitHub review payload must be an object");
+  if (!isRecord11(raw)) throw new Error("GitHub review payload must be an object");
   return {
     id: requireNumber(raw["id"], "review.id"),
     ...typeof raw["node_id"] === "string" ? { nodeId: raw["node_id"] } : {},
@@ -21972,7 +22220,7 @@ function normalizeReview(raw) {
   };
 }
 function normalizeIssueComment(raw) {
-  if (!isRecord9(raw)) throw new Error("GitHub issue comment payload must be an object");
+  if (!isRecord11(raw)) throw new Error("GitHub issue comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "comment.id"),
     userLogin: optionalUserLogin(raw["user"]),
@@ -21985,7 +22233,7 @@ function normalizeIssueComment(raw) {
   };
 }
 function normalizeReviewComment(raw) {
-  if (!isRecord9(raw)) throw new Error("GitHub review comment payload must be an object");
+  if (!isRecord11(raw)) throw new Error("GitHub review comment payload must be an object");
   return {
     id: requireNumber(raw["id"], "review_comment.id"),
     pullRequestReviewId: typeof raw["pull_request_review_id"] === "number" ? raw["pull_request_review_id"] : null,
@@ -22294,11 +22542,11 @@ function createGhCollectorGitHubTransport(runner = createGhApiRunner()) {
         if (input.signal?.aborted) {
           throw error;
         }
-        if (isRecord9(error) && error["ambiguousGhFailure"] === true) {
+        if (isRecord11(error) && error["ambiguousGhFailure"] === true) {
           const cause = commentFailureCause(error);
           return { kind: "ambiguous_loss", diagnostics: cause.message, cause };
         }
-        if (isRecord9(error) && error["name"] === "AbortError") {
+        if (isRecord11(error) && error["name"] === "AbortError") {
           throw error;
         }
         throw error;
@@ -22316,10 +22564,10 @@ var init_collector_github = __esm({
 
 // src/diarist-ticket-resolution.ts
 import { existsSync as existsSync6, readFileSync as readFileSync2 } from "node:fs";
-import { join as join17 } from "node:path";
+import { join as join16 } from "node:path";
 import { fileURLToPath } from "node:url";
 function resolveDiaristResolveTicketMethodPath(packageRoot2 = fileURLToPath(new URL("..", import.meta.url))) {
-  return join17(packageRoot2, DIARIST_RESOLVE_TICKET_METHOD_RELATIVE);
+  return join16(packageRoot2, DIARIST_RESOLVE_TICKET_METHOD_RELATIVE);
 }
 function instructionContainsTicketNumber(instruction, ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) return false;
@@ -22542,7 +22790,7 @@ var init_adr_path_refs = __esm({
 // src/diarist-mechanical.ts
 import { createHash as createHash5 } from "node:crypto";
 import { existsSync as existsSync7, readdirSync as readdirSync2, readFileSync as readFileSync3, realpathSync as realpathSync3, statSync as statSync2 } from "node:fs";
-import { basename as basename6, join as join18, resolve as resolve8 } from "node:path";
+import { basename as basename6, join as join17, resolve as resolve8 } from "node:path";
 import { homedir } from "node:os";
 function extractCornerQuotes(text, minLength = DEFAULT_QUOTE_MIN) {
   const out = [];
@@ -22586,12 +22834,12 @@ function encodeClaudeProjectDir(cwd) {
   const abs = cwd.startsWith("/") ? cwd : `/${cwd}`;
   return abs.replace(/\//g, "-");
 }
-function isRecord10(value) {
+function isRecord12(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function messageText(message) {
   if (typeof message === "string") return message;
-  if (!isRecord10(message)) return "";
+  if (!isRecord12(message)) return "";
   const content = message.content;
   if (typeof content === "string") return content;
   if (!Array.isArray(content)) return "";
@@ -22601,7 +22849,7 @@ function messageText(message) {
       parts.push(part);
       continue;
     }
-    if (!isRecord10(part)) continue;
+    if (!isRecord12(part)) continue;
     if (typeof part.text === "string") parts.push(part.text);
     else if (typeof part.content === "string") parts.push(part.content);
   }
@@ -22622,16 +22870,16 @@ function isNotificationRow(type, text) {
   return false;
 }
 function readCcSessionBlocks(options) {
-  const root = options.projectsRoot ?? join18(homedir(), ".claude", "projects");
+  const root = options.projectsRoot ?? join17(homedir(), ".claude", "projects");
   if (!existsSync7(root)) return [];
   const blocks = [];
   const dirs = /* @__PURE__ */ new Set();
   for (const cwd of options.cwds) {
-    dirs.add(join18(root, encodeClaudeProjectDir(cwd)));
+    dirs.add(join17(root, encodeClaudeProjectDir(cwd)));
   }
   for (const cwd of options.cwds) {
     if (cwd.includes("projects")) continue;
-    const direct = join18(root, cwd);
+    const direct = join17(root, cwd);
     if (existsSync7(direct)) dirs.add(direct);
   }
   for (const dir of dirs) {
@@ -22660,7 +22908,7 @@ function readCcSessionBlocks(options) {
       );
     }
     for (const name of files) {
-      const sessionFile = join18(dir, name);
+      const sessionFile = join17(dir, name);
       let text;
       try {
         text = readFileSync3(sessionFile, "utf8");
@@ -22687,9 +22935,9 @@ function readCcSessionBlocks(options) {
             { cause: error }
           );
         }
-        if (!isRecord10(parsed)) continue;
+        if (!isRecord12(parsed)) continue;
         const type = typeof parsed.type === "string" ? parsed.type : "";
-        const queuedCommand = type === "attachment" && isRecord10(parsed.attachment) && parsed.attachment.type === "queued_command" && isRecord10(parsed.attachment.origin) && parsed.attachment.origin.kind === "human" && typeof parsed.attachment.prompt === "string" ? parsed.attachment.prompt : void 0;
+        const queuedCommand = type === "attachment" && isRecord12(parsed.attachment) && parsed.attachment.type === "queued_command" && isRecord12(parsed.attachment.origin) && parsed.attachment.origin.kind === "human" && typeof parsed.attachment.prompt === "string" ? parsed.attachment.prompt : void 0;
         if (type !== "user" && type !== "assistant" && queuedCommand === void 0) {
           continue;
         }
@@ -22913,11 +23161,11 @@ var init_reviewer_pinned_git = __esm({
 });
 
 // src/ticket-provenance-contracts.ts
-function isRecord11(value) {
+function isRecord13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function projectTicketProvenanceDiagnostic(value) {
-  if (!isRecord11(value)) return void 0;
+  if (!isRecord13(value)) return void 0;
   if (value.recordClass !== TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
     return void 0;
   }
@@ -22939,18 +23187,18 @@ function projectTicketProvenanceDiagnostic(value) {
   };
 }
 function projectTicketProvenanceEntry(value) {
-  if (!isRecord11(value)) return void 0;
+  if (!isRecord13(value)) return void 0;
   if (value.recordClass === TICKET_PROVENANCE_RECORD_CLASS_DIAGNOSTIC) {
     return void 0;
   }
-  if (!isRecord11(value.basis)) return void 0;
+  if (!isRecord13(value.basis)) return void 0;
   if (typeof value.basis.method !== "string" || !BASIS_METHODS.has(value.basis.method)) {
     return void 0;
   }
   if (typeof value.sourceKind !== "string" || !SOURCE_KINDS.has(value.sourceKind)) {
     return void 0;
   }
-  if (!isRecord11(value.sourceRef)) return void 0;
+  if (!isRecord13(value.sourceRef)) return void 0;
   if (typeof value.transcript !== "string" || value.transcript.length === 0) {
     return void 0;
   }
@@ -23006,7 +23254,7 @@ var init_ticket_provenance_contracts = __esm({
 // src/ticket-provenance.ts
 import { createHash as createHash6 } from "node:crypto";
 import { appendFileSync as appendFileSync2, existsSync as existsSync8, mkdirSync as mkdirSync3, readFileSync as readFileSync4, writeFileSync as writeFileSync2 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join18 } from "node:path";
 function ticketProvenanceSubject(ticketNumber) {
   if (!Number.isSafeInteger(ticketNumber) || ticketNumber < 1) {
     throw new Error(`ticket-provenance subject requires a positive ticket number, got ${String(ticketNumber)}`);
@@ -23040,8 +23288,8 @@ function resolveTicketProvenanceVolume(ticketNumber, cwd, home) {
   return {
     recordFile: path.recordFile,
     volumeDir: path.sessionDir,
-    humanViewFile: join19(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW),
-    offeredWatermarkFile: join19(path.sessionDir, TICKET_PROVENANCE_OFFERED_WATERMARK)
+    humanViewFile: join18(path.sessionDir, TICKET_PROVENANCE_HUMAN_VIEW),
+    offeredWatermarkFile: join18(path.sessionDir, TICKET_PROVENANCE_OFFERED_WATERMARK)
   };
 }
 function readOfferedIdentities(ticketNumber, cwd, home) {
@@ -23537,195 +23785,45 @@ var init_auditor_dossier_tool = __esm({
   }
 });
 
-// src/engine-detour-tool.ts
-var engineDetourArgsSchema;
-var init_engine_detour_tool = __esm({
-  "src/engine-detour-tool.ts"() {
-    "use strict";
-    init_build();
-    init_engine_detour();
-    engineDetourArgsSchema = typebox_exports.Object(
-      {
-        argv: typebox_exports.Array(typebox_exports.String({ minLength: 1 }), {
-          minItems: 1,
-          description: "\u9996\u9879\u4E3A PATH \u4E2D\u7684\u53EF\u6267\u884C\u6587\u4EF6\uFF0C\u5176\u4F59\u9879\u4E3A\u53C2\u6570\u3002"
-        })
-      },
-      { additionalProperties: false }
-    );
-  }
-});
-
-// src/session-opening-materials.ts
-import { existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname8, join as join20 } from "node:path";
-import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
-function resolvePackageRootDir(moduleUrl = import.meta.url) {
-  let dir = dirname8(fileURLToPath2(moduleUrl));
-  for (let i = 0; i < 8; i += 1) {
-    if (existsSync9(join20(dir, "package.json")) && existsSync9(join20(dir, "souls"))) {
-      return dir;
-    }
-    const parent = dirname8(dir);
-    if (parent === dir) break;
-    dir = parent;
-  }
-  return fileURLToPath2(new URL("..", moduleUrl));
+// src/shape-unreadable-failure.ts
+function stampShapeUnreadableDetails(candidate) {
+  return {
+    [SHAPE_UNREADABLE_KEY]: true,
+    candidate,
+    acceptedReceipt: false
+  };
 }
-var packageRootUrl, MAIN_ROLE_SESSION_MATERIALS, GATEKEEPER_SESSION_MATERIALS;
-var init_session_opening_materials = __esm({
-  "src/session-opening-materials.ts"() {
+var SHAPE_UNREADABLE_KEY;
+var init_shape_unreadable_failure = __esm({
+  "src/shape-unreadable-failure.ts"() {
     "use strict";
-    init_packaged_role_registry();
-    packageRootUrl = pathToFileURL2(resolvePackageRootDir() + "/").href;
-    MAIN_ROLE_SESSION_MATERIALS = {
-      ...Object.fromEntries(
-        PUBLIC_ROLE_RECORDS.map((record4) => [record4.role, record4.sessionMaterials])
-      )
-    };
-    GATEKEEPER_SESSION_MATERIALS = {
-      // #639: single authority — the public gatekeeper record owns the province list.
-      gatekeeper: PUBLIC_ROLE_RECORDS.find((entry) => entry.role === "gatekeeper").sessionMaterials,
-      inspector: INSPECTOR_SESSION_MATERIALS,
-      notary: NOTARY_SESSION_MATERIALS
-    };
+    SHAPE_UNREADABLE_KEY = "shapeUnreadable";
   }
 });
 
-// src/navigator-session-contracts.ts
-var navigatorProviderFailureSchema;
-var init_navigator_session_contracts = __esm({
-  "src/navigator-session-contracts.ts"() {
+// src/compliance-transport.ts
+var nonblank2, decisionGateSchema, complianceDecisionSchema, AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE, AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE;
+var init_compliance_transport = __esm({
+  "src/compliance-transport.ts"() {
     "use strict";
     init_build();
-    init_value2();
     init_auditor_dossier_tool();
-    init_institutional_resolution();
-    navigatorProviderFailureSchema = typebox_exports.Object({
-      source: typebox_exports.Union([
-        typebox_exports.Literal("context"),
-        typebox_exports.Literal("session"),
-        typebox_exports.Literal("model"),
-        typebox_exports.Literal("thinking"),
-        typebox_exports.Literal("auth"),
-        typebox_exports.Literal("quota"),
-        typebox_exports.Literal("transport"),
-        typebox_exports.Literal("unknown")
-      ]),
-      cause: typebox_exports.Union([
-        typebox_exports.Literal("context"),
-        typebox_exports.Literal("session"),
-        typebox_exports.Literal("model"),
-        typebox_exports.Literal("thinking"),
-        typebox_exports.Literal("auth"),
-        typebox_exports.Literal("quota"),
-        typebox_exports.Literal("transport"),
-        typebox_exports.Literal("unknown")
-      ])
-    }, { additionalProperties: false });
+    init_shape_unreadable_failure();
+    nonblank2 = typebox_exports.String({ minLength: 1, pattern: "\\S" });
+    decisionGateSchema = typebox_exports.Object({ question: nonblank2, options: typebox_exports.Array(nonblank2, { minItems: 1 }) }, { additionalProperties: false });
+    complianceDecisionSchema = typebox_exports.Object({ status: typebox_exports.Unknown({ description: "pass | revise | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), violations: typebox_exports.Array(nonblank2, { description: "\u89C2\u5BDF\u5230\u7684\u5408\u89C4\u8FDD\u89C4" }), conflicts: typebox_exports.Array(nonblank2, { description: "\u672A\u51B3\u6743\u5A01\u6216\u6267\u884C\u51B2\u7A81" }), decisionGate: typebox_exports.Union([decisionGateSchema, typebox_exports.Null()], { description: "\u5347\u7EA7\u95EE\u9898\u4E0E\u53EF\u9009\u9009\u9879" }) }, { additionalProperties: true, required: [] });
+    AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE = "ak_auditor_parent_attempt_binding";
+    AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE = "ak_auditor_compliance_failure";
   }
 });
 
-// src/receipt-delivery-policy.ts
-function isRecord12(value) {
-  return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function parseNoReceiptLifecycleFacts(input) {
-  if (!isRecord12(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord12(item) && typeof item.reason === "string")) {
-    throw new TypeError("malformed no-receipt lifecycle facts");
-  }
-  return {
-    terminalToolCalled: input.terminalToolCalled,
-    rejectedReceipts: input.rejectedReceipts.map((item) => ({
-      reason: item.reason,
-      diagnosticAvailable: item.reason.trim() !== ""
-    })),
-    deliveryTurns: RECEIPT_DELIVERY_TURN_LIMIT,
-    sessionCompletion: "settled-without-accepted-receipt",
-    runPointer: input.runPointer,
-    attemptPointer: input.attemptPointer,
-    acceptedReceipt: false
-  };
-}
-var RECEIPT_DELIVERY_TURN_LIMIT, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE;
-var init_receipt_delivery_policy = __esm({
-  "src/receipt-delivery-policy.ts"() {
-    "use strict";
-    RECEIPT_DELIVERY_TURN_LIMIT = 2;
-    NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
-  }
-});
-
-// src/upstream-error-testimony.ts
-function isNonSuccessHttpStatus(status) {
-  return typeof status === "number" && (status < 200 || status >= 300);
-}
-function hasUpstreamErrorTestimony(input) {
-  if (isNonSuccessHttpStatus(input.httpStatus)) return true;
-  return Array.isArray(input.diagnostics) && input.diagnostics.length > 0;
-}
-function projectConfirmedRemotePayload(input) {
-  return {
-    ...input.body === void 0 ? {} : { body: input.body },
-    ...input.code === void 0 ? {} : { code: input.code },
-    ...input.errno === void 0 ? {} : { errno: input.errno }
-  };
-}
-var init_upstream_error_testimony = __esm({
-  "src/upstream-error-testimony.ts"() {
-    "use strict";
-  }
-});
-
-// src/evidence-child-executor.ts
-var init_evidence_child_executor = __esm({
-  "src/evidence-child-executor.ts"() {
-    "use strict";
-    init_compliance_transport();
-    init_auditor_dossier_tool();
-    init_sitian_facade();
-    init_engine_detour_tool();
-    init_engine_detour();
-    init_engine_material();
-    init_session_opening_materials();
-    init_config2();
-    init_institutional_resolution();
-    init_navigator_session_contracts();
-    init_receipt_delivery_policy();
-    init_typed_provider_http();
-    init_upstream_error_testimony();
-  }
-});
-
-// src/compliance-transport.ts
-function createComplianceDecisionTool(name, description) {
-  return { name, description, parameters: complianceDecisionSchema, async execute(_id, params) {
-    return { content: [{ type: "text", text: "\u5BA1\u8BA1\u51B3\u8BAE\u5DF2\u6536" }], details: params, terminate: true };
-  } };
-}
-var nonblank2, decisionGateSchema, complianceDecisionSchema, AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE, AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE;
-var init_compliance_transport = __esm({
-  "src/compliance-transport.ts"() {
-    "use strict";
-    init_build();
-    init_evidence_child_executor();
-    init_auditor_dossier_tool();
-    init_sitian_facade();
-    nonblank2 = typebox_exports.String({ minLength: 1, pattern: "\\S" });
-    decisionGateSchema = typebox_exports.Object({ question: nonblank2, options: typebox_exports.Array(nonblank2, { minItems: 1 }) }, { additionalProperties: false });
-    complianceDecisionSchema = typebox_exports.Object({ status: typebox_exports.Unknown({ description: "pass | revise | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }), violations: typebox_exports.Array(nonblank2, { description: "\u89C2\u5BDF\u5230\u7684\u5408\u89C4\u8FDD\u89C4" }), conflicts: typebox_exports.Array(nonblank2, { description: "\u672A\u51B3\u6743\u5A01\u6216\u6267\u884C\u51B2\u7A81" }), decisionGate: typebox_exports.Union([decisionGateSchema, typebox_exports.Null()], { description: "\u5347\u7EA7\u95EE\u9898\u4E0E\u53EF\u9009\u9009\u9879" }) }, { additionalProperties: true, required: [] });
-    AUDITOR_PARENT_ATTEMPT_BINDING_ENTRY_TYPE = "ak_auditor_parent_attempt_binding";
-    AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE = "ak_auditor_compliance_failure";
-  }
-});
-
-// src/ledger-session-read.ts
-import { readFile as readFile12 } from "node:fs/promises";
-function isRecord13(value) {
+// src/ledger-session-read.ts
+import { readFile as readFile11 } from "node:fs/promises";
+function isRecord14(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readLedgerSessionJsonl(path) {
-  const text = await readFile12(path, "utf8");
+  const text = await readFile11(path, "utf8");
   const lines = text.split("\n");
   const rows = [];
   for (let index = 0; index < lines.length; index += 1) {
@@ -23745,7 +23843,7 @@ async function readLedgerSessionJsonl(path) {
       }
       break;
     }
-    if (!isRecord13(row)) {
+    if (!isRecord14(row)) {
       const kind = row === null ? "null" : Array.isArray(row) ? "array" : typeof row;
       throw new LedgerSessionJsonlError(
         `complete non-object JSONL record in ${path} at line ${index + 1}: expected object, got ${kind}`,
@@ -23782,7 +23880,7 @@ function extractSessionModelSequence(rows) {
     if (row.type === "model_change" && typeof row.modelId === "string") {
       push(row.modelId);
     }
-    const message = isRecord13(row.message) ? row.message : void 0;
+    const message = isRecord14(row.message) ? row.message : void 0;
     if (message?.role === "assistant" && typeof message.model === "string") {
       push(message.model);
     }
@@ -23798,11 +23896,11 @@ function extractSessionToolIntervals(rows) {
   const openById = /* @__PURE__ */ new Map();
   for (const row of rows) {
     const rowTimestamp = typeof row.timestamp === "string" ? row.timestamp : void 0;
-    const message = isRecord13(row.message) ? row.message : void 0;
+    const message = isRecord14(row.message) ? row.message : void 0;
     if (message?.role === "assistant" && Array.isArray(message.content)) {
       const callTimestamp = typeof message.timestamp === "string" && message.timestamp ? message.timestamp : rowTimestamp;
       for (const part of message.content) {
-        if (!isRecord13(part) || part.type !== "toolCall") continue;
+        if (!isRecord14(part) || part.type !== "toolCall") continue;
         if (typeof part.id !== "string" || part.id.length === 0) {
           throw new Error("toolCall frame missing string id");
         }
@@ -23815,7 +23913,7 @@ function extractSessionToolIntervals(rows) {
         if (openById.has(part.id)) {
           throw new Error(`duplicate toolCall id ${part.id}`);
         }
-        const args = isRecord13(part.arguments) ? part.arguments : void 0;
+        const args = isRecord14(part.arguments) ? part.arguments : void 0;
         const command = part.name === "bash" && args !== void 0 && typeof args.command === "string" ? bashCommandFirstLine(args.command) : void 0;
         const interval = {
           toolCallId: part.id,
@@ -23900,8 +23998,8 @@ var init_ledger_session_read = __esm({
 
 // src/analyst-gate-cycles-read.ts
 import { readdir as readdir3 } from "node:fs/promises";
-import { join as join21 } from "node:path";
-function isRecord14(value) {
+import { join as join19 } from "node:path";
+function isRecord15(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function isParentAttemptBindingRow(row) {
@@ -23932,7 +24030,7 @@ function isGateTerminatingToolName(toolName) {
 function acceptedGateReceiptIds(rows) {
   const accepted = /* @__PURE__ */ new Set();
   for (const row of rows) {
-    const message = isRecord14(row.message) ? row.message : void 0;
+    const message = isRecord15(row.message) ? row.message : void 0;
     if (message?.role !== "toolResult") continue;
     if (typeof message.toolCallId !== "string" || message.toolCallId.length === 0) continue;
     if (message.isError === false) accepted.add(message.toolCallId);
@@ -23971,7 +24069,7 @@ function nearestAttemptBindingBefore(rows, beforeIndex) {
   for (let i = beforeIndex - 1; i >= 0; i -= 1) {
     const row = rows[i];
     if (!isParentAttemptBindingRow(row)) continue;
-    if (!isRecord14(row.data) || !isRecord14(row.data.parent)) continue;
+    if (!isRecord15(row.data) || !isRecord15(row.data.parent)) continue;
     const id = row.data.parent.attemptEntryId;
     const sessionFile = row.data.parent.sessionFile;
     return {
@@ -23986,10 +24084,10 @@ function extractAllAcceptedGateToolCalls(rows) {
   const out = [];
   for (let rowIndex = 0; rowIndex < rows.length; rowIndex += 1) {
     const row = rows[rowIndex];
-    const message = isRecord14(row.message) ? row.message : void 0;
+    const message = isRecord15(row.message) ? row.message : void 0;
     if (message?.role !== "assistant" || !Array.isArray(message.content)) continue;
     for (const part of message.content) {
-      if (!isRecord14(part) || part.type !== "toolCall") continue;
+      if (!isRecord15(part) || part.type !== "toolCall") continue;
       if (typeof part.id !== "string" || part.id.length === 0) continue;
       if (typeof part.name !== "string" || part.name.length === 0) continue;
       if (!isGateTerminatingToolName(part.name)) continue;
@@ -23997,7 +24095,7 @@ function extractAllAcceptedGateToolCalls(rows) {
       const binding = nearestAttemptBindingBefore(rows, rowIndex);
       out.push({
         toolName: part.name,
-        args: isRecord14(part.arguments) ? part.arguments : void 0,
+        args: isRecord15(part.arguments) ? part.arguments : void 0,
         accepted: true,
         rowIndex,
         ...binding
@@ -24126,6 +24224,26 @@ function pairGateRounds(volumes) {
   }
   return rounds.sort((a, b) => a.officerStartedAt.localeCompare(b.officerStartedAt)).map((round, index) => ({ ...round, roundIndex: index + 1 }));
 }
+async function resolveOfficerSessionFromPointerFile(pointerPath) {
+  const { readFile: readFile21 } = await import("node:fs/promises");
+  let raw;
+  try {
+    raw = JSON.parse(await readFile21(pointerPath, "utf8"));
+  } catch (error) {
+    throw new Error(
+      `direct officer run pointer unreadable in ${pointerPath}: ${error instanceof Error ? error.message : String(error)}`,
+      { cause: error }
+    );
+  }
+  if (!isRecord15(raw) || raw.kind !== "direct-officer-run-pointer" || raw.version !== 1) {
+    throw new Error(`direct officer run pointer has unknown shape in ${pointerPath}`);
+  }
+  const sessionFile = raw.sessionFile;
+  if (typeof sessionFile !== "string" || sessionFile.trim() === "") {
+    throw new Error(`direct officer run pointer missing sessionFile in ${pointerPath}`);
+  }
+  return sessionFile;
+}
 async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, options = {}) {
   const directories = typeof auditorRolesDirectory === "string" ? [auditorRolesDirectory] : auditorRolesDirectory;
   const volumes = [];
@@ -24133,13 +24251,18 @@ async function readAnalystGateCyclesFromAuditorRoles(auditorRolesDirectory, opti
     let names;
     try {
       const entries = await readdir3(directory, { withFileTypes: true });
-      names = entries.filter((e) => e.isFile() && e.name.endsWith(".jsonl")).map((e) => e.name).sort();
+      names = entries.filter(
+        (e) => e.isFile() && (e.name.endsWith(".jsonl") || e.name.endsWith(".pointer.json"))
+      ).map((e) => e.name).sort();
     } catch (error) {
       if (isMissingDirectoryError(error)) continue;
       throw error;
     }
     for (const name of names) {
-      const classified = await classifyAuditorVolume(join21(directory, name));
+      const path = join19(directory, name);
+      const sessionPath = name.endsWith(".pointer.json") ? await resolveOfficerSessionFromPointerFile(path) : path;
+      if (sessionPath === void 0) continue;
+      const classified = await classifyAuditorVolume(sessionPath);
       for (const volume of classified) {
         if (options.parentSessionFile !== void 0 && volume.parentSessionFile !== void 0 && volume.parentSessionFile !== options.parentSessionFile) {
           continue;
@@ -24173,45 +24296,37 @@ var init_analyst_gate_cycles_read = __esm({
 });
 
 // src/gatekeeper-role.ts
-var officerDecisionSchema, MISSING_ARGUMENTS_SUBMISSION;
+var MISSING_ARGUMENTS_SUBMISSION;
 var init_gatekeeper_role = __esm({
   "src/gatekeeper-role.ts"() {
     "use strict";
-    init_build();
     init_auditor_dossier_tool();
-    init_evidence_child_executor();
-    init_open_tool_schema();
-    init_session_opening_materials();
     init_submission_errors();
     init_inspector_contracts();
     init_gatekeeper_output();
+    init_shape_unreadable_failure();
     init_submission_errors();
-    officerDecisionSchema = openToolObject(typebox_exports.Object({
-      status: typebox_exports.Unknown({ description: "pass | bounce | escalate \u2014 \u5F62\u72B6\u6307\u5F15\uFF0C\u975E schema \u95F8" }),
-      reason: typebox_exports.Optional(typebox_exports.Unknown({ description: "status \u4E3A escalate \u65F6\u7684\u7406\u7531" })),
-      findings: typebox_exports.Unknown({ description: "string[] findings\uFF0C\u968F pass\u3001bounce \u6216 escalate \u7559\u5B58" })
-    }));
     MISSING_ARGUMENTS_SUBMISSION = Object.freeze({ missing: "arguments" });
   }
 });
 
 // src/run-terminal-artifacts.ts
-import { readdir as readdir4, readFile as readFile13 } from "node:fs/promises";
-import { basename as basename7, dirname as dirname9, join as join22 } from "node:path";
+import { readdir as readdir4, readFile as readFile12 } from "node:fs/promises";
+import { basename as basename7, dirname as dirname8, join as join20 } from "node:path";
 function isMissingPathError2(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
 function errorText2(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isRecord15(value) {
+function isRecord16(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function readUsableTerminalArtifactBody(body) {
   if (body === null) {
     return { ok: false, reason: "terminal artifact JSON value is null" };
   }
-  if (!isRecord15(body)) {
+  if (!isRecord16(body)) {
     return {
       ok: false,
       reason: `terminal artifact JSON value is not a typed object (${Array.isArray(body) ? "array" : typeof body})`
@@ -24228,7 +24343,7 @@ function readUsableTerminalArtifactBody(body) {
 async function readTerminalArtifactAtPath(path, file) {
   let raw;
   try {
-    raw = await readFile13(path, "utf8");
+    raw = await readFile12(path, "utf8");
   } catch (error) {
     if (isMissingPathError2(error)) return void 0;
     return {
@@ -24272,7 +24387,7 @@ async function listUniqueErrorFallbackPaths(directories) {
     }
     for (const name of names.sort((a, b) => a.localeCompare(b))) {
       if (!UNIQUE_ERROR_FALLBACK_NAME.test(name)) continue;
-      found.push(join22(dir, name));
+      found.push(join20(dir, name));
     }
   }
   return found;
@@ -24288,14 +24403,14 @@ function presentUniqueFallbackBoundToRun(body, expectedRunId) {
   return typeof body.runId === "string" && body.runId === expectedRunId;
 }
 async function readRunTerminalArtifact(runDirectory) {
-  const artifactsDir = join22(runDirectory, "artifacts");
+  const artifactsDir = join20(runDirectory, "artifacts");
   for (const file of RUN_TERMINAL_ARTIFACT_FILES) {
-    const path = join22(artifactsDir, file);
+    const path = join20(artifactsDir, file);
     const read3 = await readTerminalArtifactAtPath(path, file);
     if (read3 !== void 0) return read3;
   }
   for (const relative3 of RUN_TERMINAL_ERROR_FALLBACK_RELATIVE_PATHS) {
-    const path = join22(runDirectory, relative3);
+    const path = join20(runDirectory, relative3);
     const read3 = await readTerminalArtifactAtPath(path, "error.json");
     if (read3 !== void 0) return read3;
   }
@@ -24304,7 +24419,7 @@ async function readRunTerminalArtifact(runDirectory) {
     if (read3 !== void 0) return read3;
   }
   const expectedRunId = runIdFromRunDirectory(runDirectory);
-  for (const path of await listUniqueErrorFallbackPaths([dirname9(runDirectory)])) {
+  for (const path of await listUniqueErrorFallbackPaths([dirname8(runDirectory)])) {
     const read3 = await readTerminalArtifactAtPath(path, "error.json");
     if (read3 === void 0) continue;
     if (read3.status === "present") {
@@ -24433,11 +24548,112 @@ var init_submission_ledger = __esm({
   }
 });
 
+// src/session-opening-materials.ts
+import { existsSync as existsSync9 } from "node:fs";
+import { readFile as readFile13 } from "node:fs/promises";
+import { dirname as dirname9, join as join21 } from "node:path";
+import { fileURLToPath as fileURLToPath2, pathToFileURL as pathToFileURL2 } from "node:url";
+function resolvePackageRootDir(moduleUrl = import.meta.url) {
+  let dir = dirname9(fileURLToPath2(moduleUrl));
+  for (let i = 0; i < 8; i += 1) {
+    if (existsSync9(join21(dir, "package.json")) && existsSync9(join21(dir, "souls"))) {
+      return dir;
+    }
+    const parent = dirname9(dir);
+    if (parent === dir) break;
+    dir = parent;
+  }
+  return fileURLToPath2(new URL("..", moduleUrl));
+}
+async function readPackageMaterial(relativePath) {
+  return readFile13(fileURLToPath2(new URL(relativePath, packageRootUrl)), "utf8");
+}
+async function joinPackageMaterials(relativePaths) {
+  const chunks = [];
+  for (const relativePath of relativePaths) {
+    chunks.push(await readPackageMaterial(relativePath));
+  }
+  return chunks.join("\n\n");
+}
+var packageRootUrl, MAIN_ROLE_SESSION_MATERIALS, GATEKEEPER_SESSION_MATERIALS;
+var init_session_opening_materials = __esm({
+  "src/session-opening-materials.ts"() {
+    "use strict";
+    init_packaged_role_registry();
+    packageRootUrl = pathToFileURL2(resolvePackageRootDir() + "/").href;
+    MAIN_ROLE_SESSION_MATERIALS = {
+      ...Object.fromEntries(
+        PUBLIC_ROLE_RECORDS.map((record4) => [record4.role, record4.sessionMaterials])
+      )
+    };
+    GATEKEEPER_SESSION_MATERIALS = {
+      // #639: single authority — the public gatekeeper record owns the province list.
+      gatekeeper: PUBLIC_ROLE_RECORDS.find((entry) => entry.role === "gatekeeper").sessionMaterials,
+      inspector: INSPECTOR_SESSION_MATERIALS,
+      notary: NOTARY_SESSION_MATERIALS
+    };
+  }
+});
+
 // src/auditor-soul.ts
+var auditor_soul_exports = {};
+__export(auditor_soul_exports, {
+  AK_ROLE_AUDITOR_SOURCE_RUN_ENV: () => AK_ROLE_AUDITOR_SOURCE_RUN_ENV,
+  AK_ROLE_AUDITOR_SUBJECT_ENV: () => AK_ROLE_AUDITOR_SUBJECT_ENV,
+  AUDITOR_SESSION_MATERIALS: () => AUDITOR_SESSION_MATERIALS,
+  AUDITOR_SOUL_ROLES: () => AUDITOR_SOUL_ROLES,
+  isAuditorSoulRole: () => isAuditorSoulRole,
+  loadAuditorSoul: () => loadAuditorSoul,
+  loadAuditorSoulFromSubjectInput: () => loadAuditorSoulFromSubjectInput,
+  resolveAuditorSubject: () => resolveAuditorSubject
+});
+function auditorSoulRelativePath(role) {
+  return `souls/${role}-auditor.md`;
+}
+function isAuditorSoulRole(value) {
+  return value === "judge" || value === "doctor";
+}
+function resolveAuditorSubject(raw) {
+  const value = typeof raw === "string" && raw.trim() !== "" ? raw.trim() : typeof process.env[AK_ROLE_AUDITOR_SUBJECT_ENV] === "string" ? process.env[AK_ROLE_AUDITOR_SUBJECT_ENV].trim() : "";
+  if (!isAuditorSoulRole(value)) {
+    throw new Error(
+      `auditor subject must be judge|doctor (input --subject / ${AK_ROLE_AUDITOR_SUBJECT_ENV}), got ${value === "" ? "(missing)" : value}`
+    );
+  }
+  return value;
+}
+async function loadAuditorSoul(role) {
+  const materials = AUDITOR_SESSION_MATERIALS[role];
+  const soulPath = auditorSoulRelativePath(role);
+  const soul = await readPackageMaterial(soulPath);
+  if (soul.trim().length === 0) {
+    throw new Error(`The ${role} auditor Soul is blank`);
+  }
+  return joinPackageMaterials(materials);
+}
+async function loadAuditorSoulFromSubjectInput(raw) {
+  return loadAuditorSoul(resolveAuditorSubject(raw));
+}
+var AUDITOR_SOUL_ROLES, AK_ROLE_AUDITOR_SUBJECT_ENV, AK_ROLE_AUDITOR_SOURCE_RUN_ENV, AUDITOR_SESSION_MATERIALS;
 var init_auditor_soul = __esm({
   "src/auditor-soul.ts"() {
     "use strict";
     init_session_opening_materials();
+    AUDITOR_SOUL_ROLES = [
+      "judge",
+      "doctor"
+    ];
+    AK_ROLE_AUDITOR_SUBJECT_ENV = "AK_ROLE_AUDITOR_SUBJECT";
+    AK_ROLE_AUDITOR_SOURCE_RUN_ENV = "AK_ROLE_AUDITOR_SOURCE_RUN";
+    AUDITOR_SESSION_MATERIALS = {
+      judge: [
+        "CLAUDE.md",
+        "souls/judge-auditor.md",
+        "souls/audit-law.md",
+        "souls/quality-law.md"
+      ],
+      doctor: ["CLAUDE.md", "souls/doctor-auditor.md"]
+    };
   }
 });
 
@@ -24450,36 +24666,43 @@ var init_dossier_resolution = __esm({
 });
 
 // src/doctor-auditor.ts
-var DOCTOR_AUDIT_TOOL_NAME, tool;
 var init_doctor_auditor = __esm({
   "src/doctor-auditor.ts"() {
     "use strict";
     init_auditor_dossier_tool();
-    init_auditor_soul();
     init_compliance_transport();
     init_dossier_resolution();
-    DOCTOR_AUDIT_TOOL_NAME = "ak_doctor_audit_decision";
-    tool = createComplianceDecisionTool(
-      DOCTOR_AUDIT_TOOL_NAME,
-      "\u63D0\u4EA4 typed pass/revise/escalate \u51B3\u8BAE\uFF08\u592A\u533B\u7F72\u5BA1\u5211\uFF09\u3002"
-    );
   }
 });
 
 // src/judge-auditor.ts
-var JUDGE_AUDIT_TOOL_NAME, auditDecisionTool;
 var init_judge_auditor = __esm({
   "src/judge-auditor.ts"() {
     "use strict";
     init_compliance_transport();
     init_auditor_dossier_tool();
-    init_auditor_soul();
     init_dossier_resolution();
-    JUDGE_AUDIT_TOOL_NAME = "ak_soul_audit_decision";
-    auditDecisionTool = createComplianceDecisionTool(
-      JUDGE_AUDIT_TOOL_NAME,
-      "\u63D0\u4EA4 typed pass/revise/escalate \u51B3\u8BAE\uFF08\u5927\u7406\u5BFA\u5BA1\u5211\uFF09\u3002"
-    );
+  }
+});
+
+// src/upstream-error-testimony.ts
+function isNonSuccessHttpStatus(status) {
+  return typeof status === "number" && (status < 200 || status >= 300);
+}
+function hasUpstreamErrorTestimony(input) {
+  if (isNonSuccessHttpStatus(input.httpStatus)) return true;
+  return Array.isArray(input.diagnostics) && input.diagnostics.length > 0;
+}
+function projectConfirmedRemotePayload(input) {
+  return {
+    ...input.body === void 0 ? {} : { body: input.body },
+    ...input.code === void 0 ? {} : { code: input.code },
+    ...input.errno === void 0 ? {} : { errno: input.errno }
+  };
+}
+var init_upstream_error_testimony = __esm({
+  "src/upstream-error-testimony.ts"() {
+    "use strict";
   }
 });
 
@@ -24582,12 +24805,12 @@ var init_reviewer_dispatch = __esm({
 
 // src/public-cli/reviewer-dispatch-rejection.ts
 import { readFile as readFile14, unlink as unlink3 } from "node:fs/promises";
-import { join as join23 } from "node:path";
+import { join as join22 } from "node:path";
 function isReviewerPreflightViolation(value) {
   return typeof value === "string" && REVIEWER_PREFLIGHT_VIOLATIONS.includes(value);
 }
 function reviewerDispatchRejectionPath(runDirectory) {
-  return join23(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
+  return join22(runDirectory, REVIEWER_DISPATCH_REJECTION_FILE);
 }
 async function clearReviewerDispatchRejection(runDirectory) {
   try {
@@ -24808,6 +25031,36 @@ var init_navigator_invocation_identity = __esm({
   }
 });
 
+// src/receipt-delivery-policy.ts
+function isRecord17(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseNoReceiptLifecycleFacts(input) {
+  if (!isRecord17(input) || typeof input.terminalToolCalled !== "boolean" || input.deliveryTurns !== RECEIPT_DELIVERY_TURN_LIMIT || input.sessionCompletion !== "settled-without-accepted-receipt" || input.acceptedReceipt !== false || typeof input.runPointer !== "string" || input.runPointer.trim() === "" || typeof input.attemptPointer !== "string" || input.attemptPointer.trim() === "" || !Array.isArray(input.rejectedReceipts) || !input.rejectedReceipts.every((item) => isRecord17(item) && typeof item.reason === "string")) {
+    throw new TypeError("malformed no-receipt lifecycle facts");
+  }
+  return {
+    terminalToolCalled: input.terminalToolCalled,
+    rejectedReceipts: input.rejectedReceipts.map((item) => ({
+      reason: item.reason,
+      diagnosticAvailable: item.reason.trim() !== ""
+    })),
+    deliveryTurns: RECEIPT_DELIVERY_TURN_LIMIT,
+    sessionCompletion: "settled-without-accepted-receipt",
+    runPointer: input.runPointer,
+    attemptPointer: input.attemptPointer,
+    acceptedReceipt: false
+  };
+}
+var RECEIPT_DELIVERY_TURN_LIMIT, NO_RECEIPT_LIFECYCLE_ENTRY_TYPE;
+var init_receipt_delivery_policy = __esm({
+  "src/receipt-delivery-policy.ts"() {
+    "use strict";
+    RECEIPT_DELIVERY_TURN_LIMIT = 2;
+    NO_RECEIPT_LIFECYCLE_ENTRY_TYPE = "ak-no-receipt-lifecycle";
+  }
+});
+
 // src/public-command-renderer.ts
 function isPublicCallableRole2(role) {
   return PUBLIC_CALLABLE_ROLES3.has(role);
@@ -24968,8 +25221,8 @@ var init_terminal = __esm({
 
 // src/public-cli/settlement.ts
 import { randomUUID as randomUUID3 } from "node:crypto";
-import { appendFile as appendFile2, readFile as readFile15, readdir as readdir5, writeFile as writeFile7 } from "node:fs/promises";
-import { dirname as dirname10, join as join24 } from "node:path";
+import { appendFile as appendFile2, readFile as readFile15, readdir as readdir5, writeFile as writeFile6 } from "node:fs/promises";
+import { dirname as dirname10, join as join23 } from "node:path";
 function sealedLedgerHome(admitted) {
   return homeFromRunDirectory(admitted.runDirectory);
 }
@@ -25349,7 +25602,7 @@ async function readSitianRetainedAuditorProviderStop(sessionFile) {
     const { records: records2 } = await readSitianRecords(recordFile);
     for (let i = records2.length - 1; i >= 0; i -= 1) {
       const payload = records2[i]?.payload;
-      if (!isRecord16(payload) || !isRecord16(payload.response)) continue;
+      if (!isRecord18(payload) || !isRecord18(payload.response)) continue;
       if (typeof payload.type === "string") continue;
       const stop = sessionProviderStopFromAssistant(payload.response);
       if (stop !== void 0) return stop;
@@ -25370,7 +25623,7 @@ async function readSessionProviderStop(sessionFile) {
   }
 }
 async function readBoundEvidenceChildKnownFailure(sessionFile) {
-  const childDirectory = join24(dirname10(sessionFile), "evidence-children");
+  const childDirectory = join23(dirname10(sessionFile), "evidence-children");
   let names;
   try {
     names = await readdir5(childDirectory);
@@ -25381,12 +25634,12 @@ async function readBoundEvidenceChildKnownFailure(sessionFile) {
   for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
     let entries;
     try {
-      entries = await readBoundSessionEntries(join24(childDirectory, file));
+      entries = await readBoundSessionEntries(join23(childDirectory, file));
     } catch (error) {
       throw sessionReadFailure(error, "failed to read discovered evidence-child session");
     }
     const header = entries.find((entry) => entry.type === "session");
-    if (!isRecord16(header) || header.parentSession !== sessionFile) continue;
+    if (!isRecord18(header) || header.parentSession !== sessionFile) continue;
     const stop = extractSessionProviderStop(entries);
     if (stop === void 0) continue;
     const primary = knownFailureFromProviderStop(stop);
@@ -25418,12 +25671,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     return firstLine === RESUME_ENVELOPE;
   };
   const isResumeEnvelope = (msg) => {
-    if (!isRecord16(msg) || msg.role !== "user") return false;
+    if (!isRecord18(msg) || msg.role !== "user") return false;
     const text = typeof msg.text === "string" ? msg.text : typeof msg.content === "string" ? msg.content : void 0;
     if (isResumeEnvelopeBytes(text)) return true;
     const content = msg.content;
     if (Array.isArray(content)) {
-      return content.some((p) => isRecord16(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
+      return content.some((p) => isRecord18(p) && (isResumeEnvelopeBytes(p.text) || isResumeEnvelopeBytes(p.content)));
     }
     return false;
   };
@@ -25435,7 +25688,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
     latestParentUserIndex = i;
     break;
   }
-  const childDirectories = [join24(dirname10(sessionFile), "auditor-roles")];
+  const childDirectories = [join23(dirname10(sessionFile), "auditor-roles")];
   const valid = [];
   let sawAnyDirectory = false;
   for (const childDirectory of childDirectories) {
@@ -25450,12 +25703,12 @@ async function loadBoundAuditorVolumes(sessionFile) {
     for (const file of names.filter((name) => name.endsWith(".jsonl")).sort().reverse()) {
       let entries;
       try {
-        entries = await readBoundSessionEntries(join24(childDirectory, file));
+        entries = await readBoundSessionEntries(join23(childDirectory, file));
       } catch (error) {
         throw sessionReadFailure(error, "failed to read discovered auditor session");
       }
       const header = entries.find((entry) => entry.type === "session");
-      if (!isRecord16(header)) continue;
+      if (!isRecord18(header)) continue;
       const bindingIndexes = [];
       for (let i = 0; i < entries.length; i += 1) {
         const entry = entries[i];
@@ -25469,7 +25722,7 @@ async function loadBoundAuditorVolumes(sessionFile) {
         end: idx + 1 < bindingIndexes.length ? bindingIndexes[idx + 1] : entries.length
       })) : [{ entry: void 0, start: 0, end: entries.length }];
       for (const { entry: bindingEntry, start, end } of bindingPasses) {
-        const bindingParent = bindingEntry !== void 0 && isRecord16(bindingEntry.data) && isRecord16(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
+        const bindingParent = bindingEntry !== void 0 && isRecord18(bindingEntry.data) && isRecord18(bindingEntry.data.parent) ? bindingEntry.data.parent : void 0;
         const attemptEntryId = typeof bindingParent?.attemptEntryId === "string" ? bindingParent.attemptEntryId : void 0;
         const attemptEntryIndex = attemptEntryId === void 0 ? -1 : parentEntries.findIndex((entry) => entry.id === attemptEntryId);
         const boundSessionFile = typeof bindingParent?.sessionFile === "string" ? bindingParent.sessionFile : typeof header.parentSession === "string" ? header.parentSession : void 0;
@@ -25496,11 +25749,11 @@ function complianceFailureFromAuditorVolumes(volumes) {
     if (stop === void 0) continue;
     for (let i = entries.length - 1; i >= 0; i -= 1) {
       const entry = entries[i];
-      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord16(entry.data)) continue;
-      const parent = isRecord16(entry.data.parent) ? entry.data.parent : void 0;
-      const failure = isRecord16(entry.data.failure) ? entry.data.failure : void 0;
+      if (entry?.type !== "custom" || entry.customType !== AUDITOR_COMPLIANCE_FAILURE_ENTRY_TYPE || !isRecord18(entry.data)) continue;
+      const parent = isRecord18(entry.data.parent) ? entry.data.parent : void 0;
+      const failure = isRecord18(entry.data.failure) ? entry.data.failure : void 0;
       if (parent?.sessionId !== parentId || parent.sessionFile !== sessionFile || parent.attemptEntryId !== attemptEntryId || failure?.cause !== "provider" && failure?.cause !== "unrecognized") continue;
-      const identity = isRecord16(failure.identity) ? failure.identity : void 0;
+      const identity = isRecord18(failure.identity) ? failure.identity : void 0;
       return {
         cause: failure.cause === "provider" ? "provider" : "unrecognized",
         ...identity === void 0 ? {} : { identity: {
@@ -25508,7 +25761,7 @@ function complianceFailureFromAuditorVolumes(volumes) {
           ...typeof identity.code === "string" || typeof identity.code === "number" ? { code: identity.code } : {}
         } },
         ...typeof failure.diagnostic === "string" ? { diagnostic: failure.diagnostic } : {},
-        ...isRecord16(failure.details) ? { details: failure.details } : {}
+        ...isRecord18(failure.details) ? { details: failure.details } : {}
       };
     }
   }
@@ -25555,11 +25808,11 @@ function typedFailedTerminatingToolKnownFailure(entries) {
     if (classification.kind !== "infrastructure") continue;
     if (typeof message.toolCallId !== "string" || typeof message.toolName !== "string") continue;
     if (boundRoleToolCallForResult(attemptEntries, i, message, message.toolName) === void 0) continue;
-    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord16(part) && part.type === "text" && typeof part.text === "string") : void 0;
-    const diagnostic = isRecord16(textPart) ? textPart.text : void 0;
-    const details = isRecord16(message.details) ? message.details : classification.fact;
+    const textPart = Array.isArray(message.content) ? message.content.find((part) => isRecord18(part) && part.type === "text" && typeof part.text === "string") : void 0;
+    const diagnostic = isRecord18(textPart) ? textPart.text : void 0;
+    const details = isRecord18(message.details) ? message.details : classification.fact;
     return {
-      cause: "output",
+      cause: "activation",
       identity: { name: message.toolName, code: message.toolCallId },
       ...typeof diagnostic === "string" && diagnostic.trim() !== "" ? { diagnostic } : {},
       details
@@ -25715,7 +25968,7 @@ function controlledFailureInputFromResolution(resolution) {
     } : {}
   };
 }
-function isRecord16(value) {
+function isRecord18(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function safelyRead(object, key) {
@@ -25734,11 +25987,19 @@ function auditNoReceiptDecisiveFact(candidate) {
     return {};
   }
 }
+function auditUnreadableDecisiveFact(candidate) {
+  const projected = safelyRead(candidate, "auditUnreadable");
+  if (!projected.readable || projected.value === void 0) return {};
+  if (typeof projected.value !== "object" || projected.value === null || Array.isArray(projected.value)) {
+    return { auditUnreadable: projected.value };
+  }
+  return { auditUnreadable: projected.value };
+}
 function countersignDecisiveFacts(verdict, countersignStatus) {
   const facts = { countersignStatus };
   if (countersignStatus === "continue") {
     const fix = safelyRead(verdict, "fix");
-    if (fix.readable && isRecord16(fix.value)) {
+    if (fix.readable && isRecord18(fix.value)) {
       const summary = safelyRead(fix.value, "summary");
       if (summary.readable && typeof summary.value === "string") {
         facts.fixSummary = summary.value;
@@ -25747,7 +26008,7 @@ function countersignDecisiveFacts(verdict, countersignStatus) {
   }
   if (countersignStatus === "escalate") {
     const gate = safelyRead(verdict, "decisionGate");
-    if (gate.readable && isRecord16(gate.value)) {
+    if (gate.readable && isRecord18(gate.value)) {
       const question = safelyRead(gate.value, "question");
       const options = safelyRead(gate.value, "options");
       if (question.readable && typeof question.value === "string") {
@@ -25767,12 +26028,13 @@ function countersignDecisiveFacts(verdict, countersignStatus) {
 function judgeDecisiveFacts(verdict, judgeStatus) {
   const facts = {
     judgeStatus,
-    ...auditNoReceiptDecisiveFact(verdict)
+    ...auditNoReceiptDecisiveFact(verdict),
+    ...auditUnreadableDecisiveFact(verdict)
   };
   const statusBase = judgeStatus;
   if (statusBase === "continue") {
     const fix = safelyRead(verdict, "fix");
-    if (fix.readable && isRecord16(fix.value)) {
+    if (fix.readable && isRecord18(fix.value)) {
       const summary = safelyRead(fix.value, "summary");
       if (summary.readable && typeof summary.value === "string") {
         facts.fixSummary = summary.value;
@@ -25782,7 +26044,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
     if (classes.readable && Array.isArray(classes.value)) {
       try {
         facts.classes = classes.value.map((entry) => {
-          if (!isRecord16(entry)) throw new Error("unreadable Judge class");
+          if (!isRecord18(entry)) throw new Error("unreadable Judge class");
           return {
             name: entry.name,
             owner: entry.owner,
@@ -25797,7 +26059,7 @@ function judgeDecisiveFacts(verdict, judgeStatus) {
   }
   if (statusBase === "escalate") {
     const gate = safelyRead(verdict, "decisionGate");
-    if (gate.readable && isRecord16(gate.value)) {
+    if (gate.readable && isRecord18(gate.value)) {
       const question = safelyRead(gate.value, "question");
       const options = safelyRead(gate.value, "options");
       if (question.readable && typeof question.value === "string") {
@@ -25843,7 +26105,7 @@ function fixerDecisiveFacts(output) {
     facts.reason = reason.value;
   }
   const blockerRead = safelyRead(candidate, "blocker");
-  if (statusBase === "refused" && blockerRead.readable && isRecord16(blockerRead.value)) {
+  if (statusBase === "refused" && blockerRead.readable && isRecord18(blockerRead.value)) {
     const cause = safelyRead(blockerRead.value, "cause");
     if (cause.readable && typeof cause.value === "string") facts.blockerCause = cause.value;
     const prerequisiteId = safelyRead(blockerRead.value, "prerequisiteId");
@@ -25855,13 +26117,13 @@ function fixerDecisiveFacts(output) {
     const blockers = [];
     try {
       for (const entry of classResults.value) {
-        if (!isRecord16(entry)) throw new Error("unreadable class result");
+        if (!isRecord18(entry)) throw new Error("unreadable class result");
         const name = safelyRead(entry, "name");
         const disposition = safelyRead(entry, "disposition");
         if (!name.readable || !disposition.readable) throw new Error("unreadable class result");
         rows.push({ name: name.value, disposition: disposition.value });
         const blocker = safelyRead(entry, "blocker");
-        if (disposition.value === "refused" && blocker.readable && isRecord16(blocker.value)) blockers.push(blocker.value);
+        if (disposition.value === "refused" && blocker.readable && isRecord18(blocker.value)) blockers.push(blocker.value);
       }
       facts.classResultCount = rows.length;
       facts.classDispositions = rows;
@@ -25894,7 +26156,7 @@ function collectorDecisiveFacts(receipt) {
   if (groups.readable && Array.isArray(groups.value)) {
     try {
       facts.groups = groups.value.map((group) => {
-        if (!isRecord16(group)) throw new Error("unreadable Collector group");
+        if (!isRecord18(group)) throw new Error("unreadable Collector group");
         const identity = safelyRead(group, "identity");
         const attendance = safelyRead(group, "attendance");
         const materials = safelyRead(group, "materials");
@@ -25917,7 +26179,10 @@ function collectorDecisiveFacts(receipt) {
 function doctorDecisiveFacts(output) {
   const candidate = output;
   const status = safelyRead(candidate, "status");
-  const facts = { ...auditNoReceiptDecisiveFact(candidate) };
+  const facts = {
+    ...auditNoReceiptDecisiveFact(candidate),
+    ...auditUnreadableDecisiveFact(candidate)
+  };
   if (status.readable && typeof status.value === "string") facts.doctorStatus = status.value;
   const statusBase = status.readable && typeof status.value === "string" ? status.value : void 0;
   if (statusBase === "refused") {
@@ -25928,7 +26193,7 @@ function doctorDecisiveFacts(output) {
     return facts;
   }
   const caseValue = safelyRead(candidate, "case");
-  if (caseValue.readable && isRecord16(caseValue.value)) {
+  if (caseValue.readable && isRecord18(caseValue.value)) {
     const issueNumber = safelyRead(caseValue.value, "issueNumber");
     const runsPath = safelyRead(caseValue.value, "runsPath");
     if (issueNumber.readable && issueNumber.value !== void 0) facts.issueNumber = issueNumber.value;
@@ -25939,7 +26204,7 @@ function doctorDecisiveFacts(output) {
   return facts;
 }
 function reviewerAxes(value) {
-  if (!isRecord16(value)) return [];
+  if (!isRecord18(value)) return [];
   return ["standards", "spec"].filter((axis) => {
     const projected = safelyRead(value, axis);
     return projected.readable && projected.value !== void 0;
@@ -26073,7 +26338,7 @@ function boundRoleToolCallForResult(entries, resultIndex, message, outputToolNam
     const candidateMessage = entries[index]?.message;
     if (candidateMessage?.role === "assistant" && Array.isArray(candidateMessage.content)) {
       for (const part of candidateMessage.content) {
-        if (!isRecord16(part) || part.type !== "toolCall" || part.id !== callId) {
+        if (!isRecord18(part) || part.type !== "toolCall" || part.id !== callId) {
           continue;
         }
         if (part.name !== outputToolName) return void 0;
@@ -26145,7 +26410,7 @@ function parseNavigatorAttendanceDetails(details) {
   const advisoryDiagnostic = typeof details.routePlaybookReadFailure === "string" ? { advisoryDiagnostic: details.routePlaybookReadFailure } : {};
   if (disposition === "recommendation") {
     const next = details.next;
-    if (!isRecord16(next) || typeof next.role !== "string") {
+    if (!isRecord18(next) || typeof next.role !== "string") {
       return {
         disposition: "unavailable",
         source: "unknown",
@@ -26153,7 +26418,7 @@ function parseNavigatorAttendanceDetails(details) {
       };
     }
     const reason = typeof details.reason === "string" ? details.reason : "";
-    const route = Array.isArray(details.route) ? details.route.filter(isRecord16).map((target) => ({
+    const route = Array.isArray(details.route) ? details.route.filter(isRecord18).map((target) => ({
       role: String(target.role),
       phase: navigatorPhaseValue(target.phase)
     })) : void 0;
@@ -26216,8 +26481,8 @@ function projectTerminalGateFact(rounds) {
   };
 }
 async function extractGateFactFromSessionDirectory(sessionDirectory, options = {}) {
-  const directories = [join24(sessionDirectory, "auditor-roles")];
-  const parentSessionFile = options.parentSessionFile ?? join24(sessionDirectory, "session.jsonl");
+  const directories = [join23(sessionDirectory, "auditor-roles")];
+  const parentSessionFile = options.parentSessionFile ?? join23(sessionDirectory, "session.jsonl");
   const rounds = await readAnalystGateCyclesFromAuditorRoles(directories, {
     parentSessionFile
   });
@@ -26225,7 +26490,7 @@ async function extractGateFactFromSessionDirectory(sessionDirectory, options = {
 }
 async function withOptionalGateProjection(base, sessionDirectory, gateContext = {}) {
   const secondaryEvidence = base.roleOutcome.kind === "failure" ? base.roleOutcome.decisiveFacts.secondaryEvidence : void 0;
-  if (isRecord16(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
+  if (isRecord18(secondaryEvidence) && secondaryEvidence.kind === "role_infrastructure_failure" && (secondaryEvidence.stage === "gatekeeper" || secondaryEvidence.stage === "inspector" || secondaryEvidence.stage === "notary")) return base;
   const gate = await extractGateFactFromSessionDirectory(sessionDirectory, gateContext);
   return gate === void 0 ? base : { ...base, gate };
 }
@@ -26265,7 +26530,7 @@ function extractNavigatorFact(entries) {
     const entry = entries[i];
     if (entry?.type === "custom_message" && entry.customType === "ak-navigator-attendance") {
       const details = entry.message?.details ?? entry.details;
-      if (!isRecord16(details)) {
+      if (!isRecord18(details)) {
         return {
           disposition: "unavailable",
           source: "unknown",
@@ -26315,9 +26580,9 @@ async function extractNavigatorFactFromAdmittedSession(sessionFile) {
 async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
-  await writeFile7(
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
+  await writeFile6(
     reportPath,
     `${JSON.stringify(
       {
@@ -26331,7 +26596,7 @@ async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(
       {
@@ -26360,9 +26625,9 @@ async function publishJudgeArtifacts(admitted, roleOutcome, coordinates) {
 async function publishCoderArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
-  await writeFile7(
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
+  await writeFile6(
     reportPath,
     `${JSON.stringify(
       {
@@ -26378,7 +26643,7 @@ async function publishCoderArtifacts(admitted, roleOutcome, coordinates, options
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(
       {
@@ -26520,9 +26785,9 @@ function extractFixerMethodInvocations(entries, options) {
 async function publishFixerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
-  await writeFile7(
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
+  await writeFile6(
     reportPath,
     `${JSON.stringify(
       {
@@ -26538,7 +26803,7 @@ async function publishFixerArtifacts(admitted, roleOutcome, coordinates, options
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(
       {
@@ -26620,9 +26885,9 @@ async function settleLawfulFixerTerminalResult(admitted, authority, options) {
 async function publishCollectorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
-  await writeFile7(
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
+  await writeFile6(
     reportPath,
     `${JSON.stringify(
       {
@@ -26637,7 +26902,7 @@ async function publishCollectorArtifacts(admitted, roleOutcome, coordinates, opt
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(
       {
@@ -26680,7 +26945,7 @@ async function settleLawfulCollectorTerminalResult(admitted, authority) {
       const residual = boundErroredToolCandidate(entries, index, message, COLLECTOR_WAIT_TOOL);
       if (residual === void 0) continue;
       const candidate = residual.candidate;
-      const duration = isRecord16(candidate) ? candidate.durationMs : void 0;
+      const duration = isRecord18(candidate) ? candidate.durationMs : void 0;
       if (Number.isSafeInteger(duration) && duration >= 1 && duration <= 9e5) {
         continue;
       }
@@ -26728,9 +26993,9 @@ async function trySettleCollectorTerminalResult(admitted, authority) {
 async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, options = {}) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
-  await writeFile7(
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
+  await writeFile6(
     reportPath,
     `${JSON.stringify(
       {
@@ -26745,7 +27010,7 @@ async function publishDoctorArtifacts(admitted, roleOutcome, coordinates, option
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(
       {
@@ -26874,7 +27139,7 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
         return settleFailureTerminalResult(admitted, {
           cause: "output",
           diagnostic: residual.diagnostic,
-          details: { candidate: residual.candidate, acceptedReceipt: false }
+          details: stampShapeUnreadableDetails(residual.candidate)
         }, authority);
       }
       if (acceptedNonUsable === void 0 && message.toolName === spec.toolName && isAcceptedPackagedRoleTerminalResult(message)) {
@@ -26887,7 +27152,7 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
       return settleFailureTerminalResult(admitted, {
         cause: "output",
         diagnostic: spec.nonUsableDiagnostic,
-        details: { candidate: acceptedNonUsable, acceptedReceipt: false }
+        details: stampShapeUnreadableDetails(acceptedNonUsable)
       }, authority);
     }
     return void 0;
@@ -26898,7 +27163,7 @@ async function settleLawfulSeatAcceptedTerminalResult(admitted, authority, spec,
       {
         cause: "output",
         diagnostic: spec.nonUsableDiagnostic,
-        details: { candidate: roleOutcome.decisiveFacts, acceptedReceipt: false }
+        details: stampShapeUnreadableDetails(roleOutcome.decisiveFacts)
       },
       authority
     );
@@ -27072,6 +27337,53 @@ async function settleLawfulNavigatorTerminalResult(admitted, authority, scope) {
 async function trySettleNavigatorTerminalResult(admitted, authority, scope) {
   return settleLawfulNavigatorTerminalResult(admitted, authority, scope);
 }
+async function settleLawfulAuditorTerminalResult(admitted, authority, scope) {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
+    role: "auditor",
+    toolName: AUDITOR_OUTPUT_TOOL_NAME,
+    nonUsableDiagnostic: "\u5BA1\u5211\u9662\u56DE\u6267\u65E0\u663E\u5F0F pass/revise/escalate",
+    // Only pass/revise/escalate are lawful releases. Unreadable mystery status
+    // fails closed with candidate retained for parent ComplianceCandidateUnreadableError.
+    tryAcceptDetails: (details) => projectLawfulAuditorOutput(details) !== void 0,
+    projectAccepted: (sealed) => {
+      const lawful = projectLawfulAuditorOutput(sealed.decisiveFacts);
+      if (lawful === void 0) {
+        throw new Error("auditor projectAccepted requires lawful pass/revise/escalate");
+      }
+      const accepted = {
+        kind: "accepted",
+        role: "auditor",
+        status: lawful.status,
+        decisiveFacts: auditorDecisiveFacts(lawful)
+      };
+      return accepted;
+    }
+  }, scope);
+}
+async function trySettleAuditorTerminalResult(admitted, authority, scope) {
+  return settleLawfulAuditorTerminalResult(admitted, authority, scope);
+}
+async function settleLawfulEvidenceChildTerminalResult(admitted, authority, scope) {
+  return settleLawfulSeatAcceptedTerminalResult(admitted, authority, {
+    role: "evidence-child",
+    toolName: EVIDENCE_CHILD_OUTPUT_TOOL_NAME,
+    nonUsableDiagnostic: "\u53D6\u8BC1\u56DE\u6267\u65E0\u62A5\u544A\u6B63\u6587",
+    tryAcceptDetails: tryAcceptWithValidator(validateRecordedEvidenceChildOutput),
+    projectAccepted: (sealed) => {
+      const output = validateRecordedEvidenceChildOutput(sealed.decisiveFacts);
+      const accepted = {
+        kind: "accepted",
+        role: "evidence-child",
+        status: "report",
+        decisiveFacts: evidenceChildDecisiveFacts(output)
+      };
+      return accepted;
+    }
+  }, scope);
+}
+async function trySettleEvidenceChildTerminalResult(admitted, authority, scope) {
+  return settleLawfulEvidenceChildTerminalResult(admitted, authority, scope);
+}
 async function trySettleCoderTerminalResult(admitted, authority, options = {}) {
   return settleLawfulCoderTerminalResult(admitted, authority, options);
 }
@@ -27097,9 +27409,9 @@ function extractReviewerMethodInvocations(entries, options) {
 async function publishReviewerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
-  await writeFile7(
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
+  await writeFile6(
     reportPath,
     `${JSON.stringify(
       {
@@ -27114,7 +27426,7 @@ async function publishReviewerArtifacts(admitted, roleOutcome, coordinates, opti
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(
       {
@@ -27225,9 +27537,9 @@ function extractMergerMethodInvocations(entries, options) {
 async function publishMergerArtifacts(admitted, roleOutcome, coordinates, options) {
   await appendRunAttemptHistory({ role: admitted.role, runId: admitted.runId, sessionFile: coordinates.sessionFile }, roleOutcome);
   const artifactsDir = await ensureRunArtifactsDir(admitted.runDirectory);
-  const reportPath = join24(artifactsDir, "report.json");
-  const evidencePath = join24(artifactsDir, "evidence.json");
-  await writeFile7(
+  const reportPath = join23(artifactsDir, "report.json");
+  const evidencePath = join23(artifactsDir, "evidence.json");
+  await writeFile6(
     reportPath,
     `${JSON.stringify(
       {
@@ -27242,7 +27554,7 @@ async function publishMergerArtifacts(admitted, roleOutcome, coordinates, option
 `,
     "utf8"
   );
-  await writeFile7(
+  await writeFile6(
     evidencePath,
     `${JSON.stringify(
       {
@@ -27293,7 +27605,7 @@ async function settleLawfulMergerTerminalResult(admitted, authority, options) {
       if (message?.role !== "toolResult") continue;
       const residual = boundErroredToolCandidate(entries, index, message, MERGER_OUTPUT_TOOL_NAME);
       if (residual === void 0) continue;
-      const attemptId = isRecord16(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
+      const attemptId = isRecord18(residual.candidate) ? safelyRead(residual.candidate, "attemptId") : { readable: true, value: void 0 };
       if (!attemptId.readable || attemptId.value !== admitted.runId) continue;
       try {
         validateMergerOutput(residual.candidate, admitted.runId);
@@ -27375,7 +27687,7 @@ function uniqueFailureFallbackDirs(runDirectory, baseDir) {
   return dirs;
 }
 async function resolveFailureArtifactsBase(runDirectory) {
-  const artifactsDir = join24(runDirectory, "artifacts");
+  const artifactsDir = join23(runDirectory, "artifacts");
   try {
     await ensureRunArtifactsDir(runDirectory);
     return { baseDir: artifactsDir };
@@ -27391,13 +27703,13 @@ async function writeFailureJsonRetainingCause(preferredCandidates, uniqueFallbac
   const candidates = [
     ...preferredCandidates,
     // One unique name per fallback dir — collisions on fixed names cannot exhaust this.
-    ...uniqueFallbackDirs.map((dir) => join24(dir, `${stem}.${randomUUID3()}.json`))
+    ...uniqueFallbackDirs.map((dir) => join23(dir, `${stem}.${randomUUID3()}.json`))
   ];
   for (let i = 0; i < candidates.length; i += 1) {
     const path = candidates[i];
     const payload = issues.length === 0 ? basePayload : { ...basePayload, publicationIssues: issues };
     try {
-      await writeFile7(
+      await writeFile6(
         path,
         `${JSON.stringify(payload, null, 2)}
 `,
@@ -27436,26 +27748,26 @@ async function publishFailureArtifacts(admitted, failure, authority) {
   } catch (error) {
     priorIssues.push(publicationAttemptFromError(sessionFile, error));
   }
-  const underArtifacts = baseDir === join24(admitted.runDirectory, "artifacts");
+  const underArtifacts = baseDir === join23(admitted.runDirectory, "artifacts");
   const uniqueFallbackDirs = uniqueFailureFallbackDirs(
     admitted.runDirectory,
     baseDir
   );
   const errorCandidates = underArtifacts ? [
-    join24(baseDir, "error.json"),
-    join24(baseDir, "error.settlement.json"),
-    join24(admitted.runDirectory, "error.settlement.json")
+    join23(baseDir, "error.json"),
+    join23(baseDir, "error.settlement.json"),
+    join23(admitted.runDirectory, "error.settlement.json")
   ] : [
-    join24(baseDir, "error.settlement.json"),
-    join24(baseDir, "error.json")
+    join23(baseDir, "error.settlement.json"),
+    join23(baseDir, "error.json")
   ];
   const evidenceCandidates = underArtifacts ? [
-    join24(baseDir, "evidence.json"),
-    join24(baseDir, "evidence.settlement.json"),
-    join24(admitted.runDirectory, "evidence.settlement.json")
+    join23(baseDir, "evidence.json"),
+    join23(baseDir, "evidence.settlement.json"),
+    join23(admitted.runDirectory, "evidence.settlement.json")
   ] : [
-    join24(baseDir, "evidence.settlement.json"),
-    join24(baseDir, "evidence.json")
+    join23(baseDir, "evidence.settlement.json"),
+    join23(baseDir, "evidence.json")
   ];
   const errorPayloadBase = {
     kind: "error",
@@ -27651,6 +27963,7 @@ var init_settlement = __esm({
     init_auditor_soul();
     init_doctor_auditor();
     init_judge_auditor();
+    init_shape_unreadable_failure();
     init_known_failure();
     init_reviewer_dispatch_rejection();
     init_run_lifecycle();
@@ -27671,6 +27984,8 @@ var init_settlement = __esm({
     init_inspector_contracts();
     init_gatekeeper_output();
     init_navigator_output();
+    init_auditor_output();
+    init_evidence_child_output();
     init_method_skill();
     init_navigator_invocation_identity();
     init_receipt_delivery_policy();
@@ -27728,7 +28043,7 @@ var init_turn_request = __esm({
 
 // src/host-transition-prior-native.ts
 import { access as access2, readdir as readdir6 } from "node:fs/promises";
-import { dirname as dirname11, join as join25 } from "node:path";
+import { dirname as dirname11, join as join24 } from "node:path";
 function isEnoent2(error) {
   return typeof error === "object" && error !== null && error.code === "ENOENT";
 }
@@ -27753,7 +28068,7 @@ async function listSitianRecordPaths(sessionParent) {
   const recordPaths = [];
   for (const entry of entries) {
     if (!entry.isDirectory()) continue;
-    const recordFile = join25(sessionRoot, entry.name, "records.jsonl");
+    const recordFile = join24(sessionRoot, entry.name, "records.jsonl");
     try {
       await access2(recordFile);
       recordPaths.push(recordFile);
@@ -27823,7 +28138,7 @@ var init_public_run_credentials = __esm({
 import { constants as fsConstants } from "node:fs";
 import { randomUUID as randomUUID4 } from "node:crypto";
 import { lstat as lstat5, mkdir as mkdir4, open as open2 } from "node:fs/promises";
-import { join as join26 } from "node:path";
+import { join as join25 } from "node:path";
 function presentTerminal(terminal, io) {
   if (terminal.roleOutcome.kind === "failure" || terminal.roleOutcome.kind === "no_receipt") {
     presentFailureTerminal(terminal, io);
@@ -27842,7 +28157,7 @@ async function finalizeExceptionRunBestEffort(runDirectory, io) {
   }
 }
 function runArtifactsDirectory(runDirectory) {
-  return join26(runDirectory, "artifacts");
+  return join25(runDirectory, "artifacts");
 }
 async function ensureRealArtifactsDirectory(runDirectory) {
   const runStat = await lstat5(runDirectory);
@@ -27925,7 +28240,7 @@ function jsonSafeReplacer() {
 }
 async function retainDispatchError(admitted, principalAuthority, sessionAppender, attempt, error) {
   const artifactsDir = await ensureRealArtifactsDirectory(admitted.runDirectory);
-  const filePath = join26(
+  const filePath = join25(
     artifactsDir,
     `dispatch-error-attempt-${attempt}-${randomUUID4()}.json`
   );
@@ -28173,11 +28488,11 @@ var init_auto_resume = __esm({
 
 // src/public-cli/post-admission.ts
 import { randomUUID as randomUUID5 } from "node:crypto";
-import { readFile as readFile16, writeFile as writeFile8 } from "node:fs/promises";
-import { isAbsolute as isAbsolute6, join as join27, resolve as resolve9 } from "node:path";
+import { readFile as readFile16, writeFile as writeFile7 } from "node:fs/promises";
+import { isAbsolute as isAbsolute6, join as join26, resolve as resolve9 } from "node:path";
 async function readInvocationHost(runDirectory) {
   try {
-    const raw = JSON.parse(await readFile16(join27(runDirectory, "invocation.json"), "utf8"));
+    const raw = JSON.parse(await readFile16(join26(runDirectory, "invocation.json"), "utf8"));
     return typeof raw.host === "string" && raw.host.trim() !== "" ? raw.host : void 0;
   } catch (error) {
     if (error.code === "ENOENT") return void 0;
@@ -28260,7 +28575,7 @@ async function dispatchPostAdmissionTurn(input) {
         liveHost,
         piSessionFile: principalCoordinates.sessionFile
       }) : void 0;
-      turnRequest = request;
+      turnRequest = env.signal === void 0 ? request : { ...request, signal: env.signal };
       if (hostTransition !== void 0) {
         turnRequest = { ...turnRequest, hostTransition };
       }
@@ -28316,8 +28631,8 @@ async function dispatchPostAdmissionTurn(input) {
       );
     }
     try {
-      await writeFile8(
-        join27(admitted.runDirectory, "stderr.log"),
+      await writeFile7(
+        join26(admitted.runDirectory, "stderr.log"),
         result2.stderr,
         "utf8"
       );
@@ -28429,7 +28744,7 @@ function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepa
 }
 function isAlreadyFrozenSummonsAttachment(runDirectory, attachmentPath) {
   const absolute = isAbsolute6(attachmentPath) ? attachmentPath : resolve9(attachmentPath);
-  return pathContainedIn(join27(runDirectory, "attachments"), absolute);
+  return pathContainedIn(join26(runDirectory, "attachments"), absolute);
 }
 async function prepareSummonsResumeMaterials(runDirectory, summons) {
   if (summons === void 0) return void 0;
@@ -28929,13 +29244,50 @@ function buildInstructionSeatTurnRequest(admitted, options) {
     options
   );
 }
-function instructionSeatAdapters() {
+function instructionSeatAdapters(options) {
   return {
-    trySettle: (admitted, authority, scope) => admitted.role === "gatekeeper" ? trySettleGatekeeperTerminalResult(admitted, authority, scope) : trySettleNavigatorTerminalResult(admitted, authority, scope),
+    trySettle: (admitted, authority, scope) => {
+      switch (admitted.role) {
+        case "gatekeeper":
+          return trySettleGatekeeperTerminalResult(admitted, authority, scope);
+        case "navigator":
+          return trySettleNavigatorTerminalResult(admitted, authority, scope);
+        case "auditor":
+          return trySettleAuditorTerminalResult(admitted, authority, scope);
+        case "evidence-child":
+          return trySettleEvidenceChildTerminalResult(admitted, authority, scope);
+      }
+    },
     // Accepted receipts and failure terminals both present via shared path.
-    shouldPresentSettled: () => true
+    shouldPresentSettled: () => true,
+    // #675 / #357 T2: failInfrastructure abort after engine-detour tool failure must not
+    // wash the durable toolResult diagnostic (same seam as reviewer-run / judge-run).
+    resolveRunnerKnownFailure: async ({
+      result: result2,
+      sessionFile
+    }) => {
+      const infrastructureFailure = await readEngineDetourInfrastructureFailure(sessionFile);
+      return infrastructureFailure === void 0 ? result2.knownFailure : {
+        cause: infrastructureFailure.cause,
+        diagnostic: infrastructureFailure.diagnostic,
+        ...infrastructureFailure.identity === void 0 ? {} : { identity: infrastructureFailure.identity }
+      };
+    },
+    ...options?.beforeDispatch === void 0 ? {} : { beforeDispatch: options.beforeDispatch }
   };
 }
+async function admitInstructionSeat(role, options) {
+  switch (role) {
+    case "gatekeeper":
+      return admitGatekeeperInvocation(options);
+    case "navigator":
+      return admitNavigatorInvocation(options);
+    case "auditor":
+      return admitAuditorInvocation(options);
+    case "evidence-child":
+      return admitEvidenceChildInvocation(options);
+  }
+}
 async function runPublicInstructionSeatResume(request, env, io) {
   return await runPostAdmissionSeatResume({
     request,
@@ -28946,19 +29298,136 @@ async function runPublicInstructionSeatResume(request, env, io) {
       effective.runId,
       env.principalAuthority
     ),
-    buildTurnRequest: (admitted, effective) => buildInstructionSeatTurnRequest(
-      admitted,
-      resumeTurnRequestProjectionOptions(admitted, effective, env)
-    ),
+    buildTurnRequest: async (admitted, effective) => {
+      const summonsPrepared = await prepareSummonsResumeMaterials(
+        admitted.runDirectory,
+        effective.summons
+      );
+      return buildInstructionSeatTurnRequest(
+        admitted,
+        resumeTurnRequestProjectionOptions(
+          admitted,
+          effective,
+          env,
+          summonsPrepared
+        )
+      );
+    },
     adapters: instructionSeatAdapters(),
     ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
   });
 }
+async function withAuditorSoulEnv(options) {
+  if (options.subject === void 0 && options.sourceRunDirectory === void 0) {
+    return options.run();
+  }
+  const { AK_ROLE_AUDITOR_SUBJECT_ENV: AK_ROLE_AUDITOR_SUBJECT_ENV2, AK_ROLE_AUDITOR_SOURCE_RUN_ENV: AK_ROLE_AUDITOR_SOURCE_RUN_ENV2 } = await Promise.resolve().then(() => (init_auditor_soul(), auditor_soul_exports));
+  const priorSubject = process.env[AK_ROLE_AUDITOR_SUBJECT_ENV2];
+  const priorSource = process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV2];
+  if (options.subject !== void 0) {
+    process.env[AK_ROLE_AUDITOR_SUBJECT_ENV2] = options.subject;
+  }
+  if (options.sourceRunDirectory !== void 0) {
+    process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV2] = options.sourceRunDirectory;
+  }
+  try {
+    return await options.run();
+  } finally {
+    if (options.subject !== void 0) {
+      if (priorSubject === void 0) delete process.env[AK_ROLE_AUDITOR_SUBJECT_ENV2];
+      else process.env[AK_ROLE_AUDITOR_SUBJECT_ENV2] = priorSubject;
+    }
+    if (options.sourceRunDirectory !== void 0) {
+      if (priorSource === void 0) delete process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV2];
+      else process.env[AK_ROLE_AUDITOR_SOURCE_RUN_ENV2] = priorSource;
+    }
+  }
+}
 async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
+  let parsed;
+  try {
+    parsed = parseArgv2(argv);
+  } catch (error) {
+    if (error instanceof CliUsageError) {
+      presentStructuralRejection(error, io);
+      return { exitCode: 2 };
+    }
+    throw error;
+  }
+  let auditorSubject;
+  let auditorSourceRun;
+  let auditorSourceTicket;
+  let ticketProbe;
+  const projectRoot = parsed.project ?? env.cwd;
+  if (role === "auditor") {
+    if (parsed.subject !== "judge" && parsed.subject !== "doctor") {
+      presentStructuralRejection(
+        new CliUsageError("auditor --subject requires judge|doctor"),
+        io
+      );
+      return { exitCode: 2 };
+    }
+    auditorSubject = parsed.subject;
+    const source = typeof parsed.sourceRun === "string" ? parsed.sourceRun.trim() : "";
+    if (source === "") {
+      presentStructuralRejection(
+        new CliUsageError("auditor --source-run requires a run locator"),
+        io
+      );
+      return { exitCode: 2 };
+    }
+    try {
+      const { resolveNotarySourceRunLocator: resolveNotarySourceRunLocator2 } = await Promise.resolve().then(() => (init_notary_source_run(), notary_source_run_exports));
+      const resolved = await resolveNotarySourceRunLocator2({
+        projectRoot,
+        sourceRun: source,
+        home: env.home
+      });
+      auditorSourceRun = resolved.runDirectory;
+      auditorSourceTicket = await readRunTicketNumber(resolved.runDirectory);
+    } catch (error) {
+      presentStructuralRejection(
+        new CliUsageError(error instanceof Error ? error.message : String(error)),
+        io
+      );
+      return { exitCode: 2 };
+    }
+  } else {
+    ticketProbe = await probeInstructionTicket(
+      parsed.instruction,
+      projectRoot,
+      env
+    );
+  }
+  const probedTicketNumber = auditorSourceTicket ?? (ticketProbe === void 0 ? void 0 : ticketNumberFromProbe(ticketProbe));
+  if (probedTicketNumber !== void 0) {
+    const summons = {
+      instruction: parsed.instruction,
+      instructionEmpty: parsed.instruction.trim() === "",
+      attachmentPaths: parsed.attachmentPaths
+    };
+    const resumed = await withAuditorSoulEnv({
+      ...auditorSubject === void 0 ? {} : { subject: auditorSubject },
+      ...auditorSourceRun === void 0 ? {} : { sourceRunDirectory: auditorSourceRun },
+      run: () => tryResumeSameTicketSeatRun({
+        home: env.home,
+        projectRoot,
+        role,
+        ticketNumber: probedTicketNumber,
+        freshSummons: env.freshSummons,
+        summons,
+        resume: (runId, materials) => runPublicInstructionSeatResume(
+          { runId, ...materials === void 0 ? {} : { summons: materials } },
+          env,
+          io
+        )
+      })
+    });
+    if (resumed !== void 0) return resumed;
+  }
   let admitted;
   try {
-    const parsed = parseArgv2(argv);
-    const options = {
+    admitted = await admitInstructionSeat(role, {
       home: env.home,
       principalAuthority: env.principalAuthority,
       cwd: env.cwd,
@@ -28968,8 +29437,7 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
       ...env.createRunId === void 0 ? {} : { createRunId: env.createRunId },
       ...env.model === void 0 ? {} : { model: env.model },
       ...env.correlationId === void 0 ? {} : { correlationId: env.correlationId }
-    };
-    admitted = role === "gatekeeper" ? await admitGatekeeperInvocation(options) : await admitNavigatorInvocation(options);
+    });
   } catch (error) {
     if (error instanceof CliUsageError) {
       presentStructuralRejection(error, io);
@@ -28977,43 +29445,59 @@ async function runPublicInstructionSeat(argv, env, io, role, parseArgv2) {
     }
     throw error;
   }
-  await markRunAdmitted(admitted, env.principalAuthority);
-  const turnRequest = buildInstructionSeatTurnRequest(admitted, {
-    packageRoot: env.packageRoot,
-    home: env.home,
-    agentDir: env.agentDir,
-    ...env.model === void 0 ? {} : { model: env.model },
-    ...env.engine === void 0 ? {} : { engine: env.engine },
-    ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
-    ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
-    continuation: {
-      kind: "initial",
-      prompt: buildInstructionTransportPrompt(
+  return await withAuditorSoulEnv({
+    ...auditorSubject === void 0 ? {} : { subject: auditorSubject },
+    ...auditorSourceRun === void 0 ? {} : { sourceRunDirectory: auditorSourceRun },
+    run: async () => {
+      await markRunAdmitted(admitted, env.principalAuthority);
+      const turnRequest = buildInstructionSeatTurnRequest(admitted, {
+        packageRoot: env.packageRoot,
+        home: env.home,
+        agentDir: env.agentDir,
+        ...env.model === void 0 ? {} : { model: env.model },
+        ...env.engine === void 0 ? {} : { engine: env.engine },
+        ...env.timeoutMs === void 0 ? {} : { timeoutMs: env.timeoutMs },
+        ...env.correlationId === void 0 || env.correlationId.trim() === "" ? {} : { correlationId: env.correlationId },
+        continuation: {
+          kind: "initial",
+          prompt: buildInstructionTransportPrompt(
+            admitted,
+            engineSessionMaterialFromOptions({
+              ...env.engine === void 0 ? {} : { engine: env.engine },
+              packageRoot: env.packageRoot
+            })
+          )
+        }
+      });
+      return await runPostAdmissionOneShot({
         admitted,
-        engineSessionMaterialFromOptions({
-          ...env.engine === void 0 ? {} : { engine: env.engine },
-          packageRoot: env.packageRoot
-        })
-      )
+        env,
+        io,
+        request: turnRequest,
+        adapters: instructionSeatAdapters({
+          beforeDispatch: async (admittedSeat) => {
+            if (auditorSourceTicket !== void 0) {
+              await bindAdmittedTicketNumber(admittedSeat, auditorSourceTicket);
+            } else if (ticketProbe !== void 0) {
+              await applyInstructionTicketProbe(admittedSeat, ticketProbe);
+            }
+          }
+        }),
+        ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
+      });
     }
   });
-  return await runPostAdmissionOneShot({
-    admitted,
-    env,
-    io,
-    request: turnRequest,
-    adapters: instructionSeatAdapters(),
-    ...env.engine === void 0 ? {} : { effectiveEngine: env.engine }
-  });
 }
 var init_instruction_seat_run = __esm({
   "src/public-cli/instruction-seat-run.ts"() {
     "use strict";
     init_engine_material();
+    init_run_ticket_number();
     init_cli_errors();
     init_invocation();
     init_post_admission();
     init_run_lifecycle();
+    init_seat_ticket_binding();
     init_settlement();
     init_turn_request();
   }
@@ -29290,8 +29774,8 @@ var init_countersign_run = __esm({
 
 // src/public-cli/diarist-run.ts
 import { existsSync as existsSync10 } from "node:fs";
-import { writeFile as writeFile9 } from "node:fs/promises";
-import { join as join28 } from "node:path";
+import { writeFile as writeFile8 } from "node:fs/promises";
+import { join as join27 } from "node:path";
 function withDiaristCatalogPath(prompt, sourcesPath) {
   if (sourcesPath === void 0 || sourcesPath.trim() === "") return prompt;
   return `${prompt}
@@ -29317,7 +29801,7 @@ function buildDiaristTurnRequest(admitted, options, sourcesPath) {
 }
 async function freezeDiaristSourceCatalog(admitted, env) {
   if (admitted.ticketNumber === void 0) return void 0;
-  const path = join28(admitted.runDirectory, DIARIST_SOURCE_CATALOG_FILE);
+  const path = join27(admitted.runDirectory, DIARIST_SOURCE_CATALOG_FILE);
   if (existsSync10(path)) {
     const identity = await readRoleRunIdentity(admitted.runDirectory);
     if (identity !== void 0 && identity.state !== "terminal") return path;
@@ -29334,7 +29818,7 @@ async function freezeDiaristSourceCatalog(admitted, env) {
     issueFace,
     sessionCwds: [admitted.projectRoot, env.cwd]
   });
-  await writeFile9(path, serializeDiaristSourceCatalog(catalog), "utf8");
+  await writeFile8(path, serializeDiaristSourceCatalog(catalog), "utf8");
   return path;
 }
 function diaristAdapters(options) {
@@ -30299,8 +30783,8 @@ var init_judge_run = __esm({
 });
 
 // src/public-cli/merger-run.ts
-import { mkdir as mkdir5, writeFile as writeFile10 } from "node:fs/promises";
-import { join as join29, resolve as resolve10 } from "node:path";
+import { mkdir as mkdir5, writeFile as writeFile9 } from "node:fs/promises";
+import { join as join28, resolve as resolve10 } from "node:path";
 function mergerMethods(packageRoot2) {
   return [
     {
@@ -30366,9 +30850,9 @@ async function admitMergerShellForActivationFailure(options) {
     expectedConflictPaths: [],
     resolutionScope: []
   };
-  const admittedRequestPath = join29(runDirectory, "admitted-request.json");
-  const mergerInputPath = join29(runDirectory, "merger-input.json");
-  await writeFile10(
+  const admittedRequestPath = join28(runDirectory, "admitted-request.json");
+  const mergerInputPath = join28(runDirectory, "merger-input.json");
+  await writeFile9(
     admittedRequestPath,
     `${JSON.stringify(
       {
@@ -30806,13 +31290,13 @@ var init_analyst_book_key = __esm({
 
 // src/atomic-write.ts
 import { randomUUID as randomUUID6 } from "node:crypto";
-import { rename, rm as rm2, writeFile as writeFile11 } from "node:fs/promises";
-import { dirname as dirname12, join as join30 } from "node:path";
+import { rename, rm as rm2, writeFile as writeFile10 } from "node:fs/promises";
+import { dirname as dirname12, join as join29 } from "node:path";
 async function writeFileAtomically(destination, contents) {
   const parent = dirname12(destination);
-  const temporary = join30(parent, `.atomic-write-${randomUUID6()}.tmp`);
+  const temporary = join29(parent, `.atomic-write-${randomUUID6()}.tmp`);
   try {
-    await writeFile11(temporary, contents);
+    await writeFile10(temporary, contents);
     await rename(temporary, destination);
   } catch (error) {
     await rm2(temporary, { force: true }).catch(() => void 0);
@@ -30827,7 +31311,7 @@ var init_atomic_write = __esm({
 
 // src/analyst-index.ts
 import { open as open3, readFile as readFile17, unlink as unlink4 } from "node:fs/promises";
-import { dirname as dirname13, join as join31 } from "node:path";
+import { dirname as dirname13, join as join30 } from "node:path";
 function sleep(ms) {
   return new Promise((resolve12) => {
     setTimeout(resolve12, ms);
@@ -30836,7 +31320,7 @@ function sleep(ms) {
 async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   const indexPath = analystLibraryIndexPath(ledgerHome);
   ensureRealDirectoryTree(ledgerHome, dirname13(indexPath));
-  const lockPath = join31(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
+  const lockPath = join30(dirname13(indexPath), LIBRARY_INDEX_LOCK_NAME);
   assertLedgerFileInsideHome(lockPath, ledgerHome);
   const startedAt = Date.now();
   while (true) {
@@ -30863,7 +31347,7 @@ async function withAnalystLibraryIndexLock(ledgerHome, fn) {
   }
 }
 function analystLibraryIndexPath(ledgerHome) {
-  return join31(ledgerHome, "analyst", "library-index.json");
+  return join30(ledgerHome, "analyst", "library-index.json");
 }
 function rowFromIssueMetricsPage(page) {
   return {
@@ -31159,22 +31643,22 @@ var init_analyst_cohort = __esm({
 
 // src/analyst-ledger.ts
 import { readdir as readdir7, readFile as readFile18 } from "node:fs/promises";
-import { join as join32 } from "node:path";
+import { join as join31 } from "node:path";
 function isMissingPathError5(error) {
   return error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR");
 }
 function errorText3(error) {
   return error instanceof Error ? error.message : String(error);
 }
-function isRecord17(value) {
+function isRecord19(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 async function readExistingRunLifecycleState(runDirectory) {
   try {
     const raw = JSON.parse(
-      await readFile18(join32(runDirectory, "run-state.json"), "utf8")
+      await readFile18(join31(runDirectory, "run-state.json"), "utf8")
     );
-    if (!isRecord17(raw) || typeof raw.state !== "string") return void 0;
+    if (!isRecord19(raw) || typeof raw.state !== "string") return void 0;
     return raw.state;
   } catch {
     return void 0;
@@ -31204,13 +31688,13 @@ async function listLedgerBookNames(booksRoot) {
 async function readInvocationScopeFields(runDirectory) {
   let raw;
   try {
-    raw = await readFile18(join32(runDirectory, "invocation.json"), "utf8");
+    raw = await readFile18(join31(runDirectory, "invocation.json"), "utf8");
   } catch (error) {
     if (isMissingPathError5(error)) return void 0;
     throw error;
   }
   const parsed = JSON.parse(raw);
-  if (!isRecord17(parsed)) return void 0;
+  if (!isRecord19(parsed)) return void 0;
   if (typeof parsed.projectRoot !== "string" || parsed.projectRoot.trim() === "") {
     return void 0;
   }
@@ -31236,15 +31720,15 @@ function decideIssueScope(input) {
 }
 async function resolveSessionFile(runDirectory) {
   try {
-    const raw = await readFile18(join32(runDirectory, "invocation.json"), "utf8");
+    const raw = await readFile18(join31(runDirectory, "invocation.json"), "utf8");
     const parsed = JSON.parse(raw);
-    if (isRecord17(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
+    if (isRecord19(parsed) && typeof parsed.sessionFile === "string" && parsed.sessionFile.trim() !== "") {
       return parsed.sessionFile;
     }
   } catch (error) {
     if (!isMissingPathError5(error)) throw error;
   }
-  return join32(runDirectory, "session", "session.jsonl");
+  return join31(runDirectory, "session", "session.jsonl");
 }
 function attributeSessionRowsForRun(input) {
   if (pathContainedIn(input.runDirectory, input.sessionFile)) {
@@ -31416,9 +31900,9 @@ async function classifyScopedRun(input) {
   }
   let gateCycles;
   try {
-    const parentSessionFile = join32(input.runDirectory, "session", "session.jsonl");
+    const parentSessionFile = join31(input.runDirectory, "session", "session.jsonl");
     gateCycles = await readAnalystGateCyclesFromAuditorRoles(
-      join32(input.runDirectory, "session", "auditor-roles"),
+      join31(input.runDirectory, "session", "auditor-roles"),
       { parentSessionFile }
     );
   } catch (error) {
@@ -31451,7 +31935,7 @@ async function classifyScopedRun(input) {
 async function scanAnalystIssueRuns(input) {
   const ledgerHome = resolveActivationLedgerHome(input.home);
   const scopeTicketNumber = input.ticketNumber;
-  const booksRoot = join32(ledgerHome, "books");
+  const booksRoot = join31(ledgerHome, "books");
   let wholeBook = false;
   let scopeRootIdentity;
   let bookNames;
@@ -31483,7 +31967,7 @@ async function scanAnalystIssueRuns(input) {
   const unreadable = [];
   const scopeConflicts = [];
   for (const book of bookNames) {
-    const runsDir = join32(booksRoot, book, "runs");
+    const runsDir = join31(booksRoot, book, "runs");
     let runNames;
     try {
       const entries = await readdir7(runsDir, { withFileTypes: true });
@@ -31495,7 +31979,7 @@ async function scanAnalystIssueRuns(input) {
     for (const runName of runNames) {
       const parsed = parseRunDirectoryName2(runName);
       if (parsed === void 0) continue;
-      const runDirectory = join32(runsDir, runName);
+      const runDirectory = join31(runsDir, runName);
       let scopeFields;
       try {
         scopeFields = await readInvocationScopeFields(runDirectory);
@@ -31543,7 +32027,7 @@ var init_analyst_ledger = __esm({
 });
 
 // src/analyst-metric-families/acceptance-success-rework.ts
-function isRecord18(value) {
+function isRecord20(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function wallMsFromSpan(span) {
@@ -31552,21 +32036,21 @@ function wallMsFromSpan(span) {
 function findCollectorGroups(body) {
   if (Array.isArray(body.groups)) return body.groups;
   const receipt = body.receipt;
-  if (isRecord18(receipt) && Array.isArray(receipt.groups)) return receipt.groups;
+  if (isRecord20(receipt) && Array.isArray(receipt.groups)) return receipt.groups;
   const outcome = body.outcome;
-  if (isRecord18(outcome)) {
+  if (isRecord20(outcome)) {
     const facts = outcome.decisiveFacts;
-    if (isRecord18(facts) && Array.isArray(facts.groups)) return facts.groups;
+    if (isRecord20(facts) && Array.isArray(facts.groups)) return facts.groups;
   }
   return void 0;
 }
 function extractStatus(body) {
   const outcome = body.outcome;
-  if (isRecord18(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
+  if (isRecord20(outcome) && typeof outcome.status === "string" && outcome.status.trim() !== "") {
     return outcome.status;
   }
   const receipt = body.receipt;
-  if (isRecord18(receipt) && typeof receipt.status === "string" && receipt.status.trim() !== "") {
+  if (isRecord20(receipt) && typeof receipt.status === "string" && receipt.status.trim() !== "") {
     return receipt.status;
   }
   if (typeof body.status === "string" && body.status.trim() !== "") {
@@ -31923,18 +32407,18 @@ function closedTools(intervals) {
 function clipToolsToFrame(tools, frameStartMs, frameEndMs) {
   if (frameEndMs <= frameStartMs) return [];
   const out = [];
-  for (const tool2 of tools) {
-    const startMs = Math.max(tool2.startMs, frameStartMs);
-    const endMs = Math.min(tool2.endMs, frameEndMs);
+  for (const tool of tools) {
+    const startMs = Math.max(tool.startMs, frameStartMs);
+    const endMs = Math.min(tool.endMs, frameEndMs);
     if (endMs <= startMs) continue;
     out.push({
-      toolCallId: tool2.toolCallId,
-      toolName: tool2.toolName,
+      toolCallId: tool.toolCallId,
+      toolName: tool.toolName,
       startMs,
       endMs,
-      startedAt: startMs === tool2.startMs ? tool2.startedAt : toIso(startMs),
-      endedAt: endMs === tool2.endMs ? tool2.endedAt : toIso(endMs),
-      ...tool2.command !== void 0 ? { command: tool2.command } : {}
+      startedAt: startMs === tool.startMs ? tool.startedAt : toIso(startMs),
+      endedAt: endMs === tool.endMs ? tool.endedAt : toIso(endMs),
+      ...tool.command !== void 0 ? { command: tool.command } : {}
     });
   }
   return out;
@@ -31973,19 +32457,19 @@ function modelMaximalIntervals(frameStartMs, frameEndMs, toolUnion) {
   }
   return gaps;
 }
-function toolAction(tool2) {
+function toolAction(tool) {
   const action = {
     kind: "tool",
-    toolCallId: tool2.toolCallId,
-    toolName: tool2.toolName,
-    durationMs: tool2.endMs - tool2.startMs,
-    startedAt: tool2.startedAt,
-    endedAt: tool2.endedAt
+    toolCallId: tool.toolCallId,
+    toolName: tool.toolName,
+    durationMs: tool.endMs - tool.startMs,
+    startedAt: tool.startedAt,
+    endedAt: tool.endedAt
   };
-  if (tool2.toolName === "bash" && tool2.command !== void 0) {
+  if (tool.toolName === "bash" && tool.command !== void 0) {
     return {
       ...action,
-      commandSummary: tool2.command
+      commandSummary: tool.command
     };
   }
   return action;
@@ -32191,21 +32675,21 @@ var init_leg_wall_clock = __esm({
 });
 
 // src/analyst-metric-families/round-timeline.ts
-function isRecord19(value) {
+function isRecord21(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 function wallMsFromSpan2(startedAt, endedAt) {
   return Date.parse(endedAt) - Date.parse(startedAt);
 }
 function readOutcomeStatus(body) {
-  if (!isRecord19(body.outcome)) return void 0;
+  if (!isRecord21(body.outcome)) return void 0;
   const status = body.outcome.status;
   if (typeof status !== "string" || status.trim() === "") return void 0;
   return status;
 }
 function readClassCount(body) {
-  if (!isRecord19(body.outcome)) return void 0;
-  if (!isRecord19(body.outcome.decisiveFacts)) return void 0;
+  if (!isRecord21(body.outcome)) return void 0;
+  if (!isRecord21(body.outcome.decisiveFacts)) return void 0;
   const classCount = body.outcome.decisiveFacts.classCount;
   if (typeof classCount !== "number" || !Number.isFinite(classCount)) {
     return void 0;
@@ -32349,7 +32833,7 @@ var init_analyst_metric_family = __esm({
 
 // src/analyst-page.ts
 import { createHash as createHash7 } from "node:crypto";
-import { dirname as dirname14, join as join33 } from "node:path";
+import { dirname as dirname14, join as join32 } from "node:path";
 function analystIssuePageKey(address) {
   const parts = ["book", address.bookKey];
   if (address.issueNumber !== void 0) {
@@ -32360,7 +32844,7 @@ function analystIssuePageKey(address) {
   return createHash7("sha256").update(parts.join("\0")).digest("hex").slice(0, 32);
 }
 function analystIssuePagePath(ledgerHome, address) {
-  return join33(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
+  return join32(ledgerHome, "analyst", "issues", `${analystIssuePageKey(address)}.json`);
 }
 function analystIssuePageAddressFromPage(page) {
   return {
@@ -32893,7 +33377,7 @@ __export(cli_exports, {
   runAkRole: () => runAkRole
 });
 import { realpath as realpath6 } from "node:fs/promises";
-import { join as join34 } from "node:path";
+import { join as join33 } from "node:path";
 function takePublicGlobalFlag(argv, index, options) {
   const tokens = argv.slice(index);
   const taken = options.takeDashed(tokens);
@@ -33025,7 +33509,7 @@ function resolveHome(env) {
   return env.home ?? packageMachineHome();
 }
 function resolveAgentDir(env, home) {
-  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join34(home, ".pi", "agent");
+  return env.agentDir ?? process.env.PI_CODING_AGENT_DIR ?? join33(home, ".pi", "agent");
 }
 function parseThinking(value) {
   return value;
@@ -33845,7 +34329,7 @@ async function runAkRole(argv, env) {
         ...result2.terminal === void 0 ? {} : { terminal: result2.terminal }
       };
     }
-    if (parsed.command === "gatekeeper" || parsed.command === "navigator") {
+    if (parsed.command === "gatekeeper" || parsed.command === "navigator" || parsed.command === "auditor" || parsed.command === "evidence-child") {
       const agentDir = resolveAgentDir(env, home);
       const cwd = env.cwd ?? process.cwd();
       const config = await loadAndValidateConfig(home, env.packageRoot);
@@ -33861,7 +34345,7 @@ async function runAkRole(argv, env) {
         createRoleEnvironment(env, { role: parsed.command, home, agentDir, cwd, credentials, seat, config }),
         io,
         parsed.command,
-        parsed.command === "gatekeeper" ? PUBLIC_ROLE_ARGV.gatekeeper.parse : PUBLIC_ROLE_ARGV.navigator.parse
+        PUBLIC_ROLE_ARGV[parsed.command].parse
       );
       return {
         exitCode: result2.exitCode,
@@ -33946,6 +34430,8 @@ var init_cli = __esm({
       inspector: { seat: "inspector", run: runPublicInspectorResume },
       gatekeeper: { seat: "gatekeeper", run: runPublicInstructionSeatResume },
       navigator: { seat: "navigator", run: runPublicInstructionSeatResume },
+      auditor: { seat: "auditor", run: runPublicInstructionSeatResume },
+      "evidence-child": { seat: "evidence-child", run: runPublicInstructionSeatResume },
       diarist: { seat: "diarist", run: runPublicDiaristResume }
     };
     PUBLIC_ROLE_ARGV = {
@@ -33962,6 +34448,8 @@ var init_cli = __esm({
       reviewer: { parse: parseReviewerArgv, options: optionsForOwner("reviewer") },
       gatekeeper: { parse: parseGatekeeperArgv, options: optionsForOwner("gatekeeper") },
       navigator: { parse: parseNavigatorArgv, options: optionsForOwner("navigator") },
+      auditor: { parse: parseAuditorArgv, options: optionsForOwner("auditor") },
+      "evidence-child": { parse: parseEvidenceChildArgv, options: optionsForOwner("evidence-child") },
       diarist: { parse: parseDiaristArgv, options: optionsForOwner("diarist") },
       /** Deterministic analysis seat (#336) — argv parse only; no LLM admission. */
       analyst: { parse: parseAnalystArgv, options: optionsForOwner("analyst") }
@@ -33979,7 +34467,7 @@ var init_cli = __esm({
 
 // src/public-cli/main.ts
 import { existsSync as existsSync11 } from "node:fs";
-import { dirname as dirname15, join as join35 } from "node:path";
+import { dirname as dirname15, join as join34 } from "node:path";
 import { fileURLToPath as fileURLToPath3 } from "node:url";
 
 // src/public-cli/host-pi-runtime.ts
@@ -34068,8 +34556,8 @@ function linkPackage(packageRoot2, name, targetDir) {
 // src/public-cli/main.ts
 var here = dirname15(fileURLToPath3(import.meta.url));
 function resolvePackageRoot(binDir) {
-  const canonical = join35(binDir, "..", "..");
-  if (existsSync11(join35(canonical, "package.json"))) {
+  const canonical = join34(binDir, "..", "..");
+  if (existsSync11(join34(canonical, "package.json"))) {
     return canonical;
   }
   return binDir;