@akagilnc/pi-workflow-roles 0.1.3685 → 0.1.3702

package/dist/public-cli/notary-run.js

@@ -1,18 +1,10 @@
-/**
- * Public Notary Role run: admit source-run locator → shared post-admission coordinator
- * → settle Terminal result (#448 / #517). Zero caller prompt/attachment. Lifecycle is
- * the shared post-admission seam; this module keeps only Notary adapters.
- * #637 / #747: same-parent (--source-run) re-summons resume the seat's previous run.
- */
-import { existsSync } from "node:fs";
-import { gateSubmissionCandidatePath } from "../auditor-dossier-tool.js";
 import { NotarySourceRunError, resolveNotarySourceRunLocator, } from "../notary-source-run.js";
 import { engineSessionMaterialFromOptions } from "../package-resources/engine-material.js";
 import { CliUsageError } from "./cli-errors.js";
 import { admitNotaryInvocation, buildNotaryTransportPrompt, } from "./invocation.js";
 import { tryResumeSameTicketSeatRun } from "./seat-ticket-binding.js";
-import { runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
-import { appendResumeMaterialReread, loadResumableNotaryRun, markRunAdmitted, } from "./run-lifecycle.js";
+import { prepareSummonsResumeMaterials, runPostAdmissionOneShot, runPostAdmissionSeatResume, resumeTurnRequestProjectionOptions, } from "./post-admission.js";
+import { loadResumableNotaryRun, markRunAdmitted, } from "./run-lifecycle.js";
 import { presentStructuralRejection, trySettleNotaryTerminalResult, } from "./settlement.js";
 import { projectRoleTurnRequest, } from "./turn-request.js";
 /** Project admitted invocation onto the host-neutral turn request. */
@@ -60,10 +52,16 @@ export async function runPublicNotary(argv, env, io, parseNotaryArgv) {
         throw error;
     }
     // #747: officer resume key is this parent source-run path (not ticket number).
+    // #753: gate re-ask and new-submission pointers share summons.instruction
+    // (reask wins when both present; no parallel stack).
     {
+        const resumeInstruction = env.reviewReask ?? env.gateReviewInstruction;
         const summons = {
             sourceRunPath: source.runDirectory,
             sourceRun: source,
+            ...(resumeInstruction === undefined
+                ? {}
+                : { instruction: resumeInstruction, instructionEmpty: false }),
         };
         const resumed = await tryResumeSameTicketSeatRun({
             home: env.home,
@@ -76,6 +74,13 @@ export async function runPublicNotary(argv, env, io, parseNotaryArgv) {
         });
         if (resumed !== undefined)
             return resumed;
+        // Reask without a prior same-parent run cannot deliver the plain-language ask
+        // on a fresh mint without inventing a second prompt path — fail loud (#753).
+        // gateReviewInstruction alone is resume-only materials; fresh mint ignores it.
+        if (env.reviewReask !== undefined) {
+            presentStructuralRejection(new CliUsageError("notary review reask requires a prior same-parent run to resume"), io);
+            return { exitCode: 2 };
+        }
     }
     let admitted;
     try {
@@ -161,16 +166,14 @@ export async function runPublicNotaryResume(request, env, io) {
             }
             return loaded;
         },
-        buildTurnRequest: (admitted, effective) => {
-            const projection = resumeTurnRequestProjectionOptions(admitted, effective, env);
-            const candidatePath = gateSubmissionCandidatePath(admitted.sourceRunPath);
-            const prompt = existsSync(candidatePath)
-                ? appendResumeMaterialReread(projection.continuation.prompt, candidatePath)
-                : projection.continuation.prompt;
-            return buildNotaryTurnRequest(admitted, {
-                ...projection,
-                continuation: { kind: "resume", prompt },
-            });
+        buildTurnRequest: async (admitted, effective) => {
+            // #755: review continuation is plain dialogue / resume envelope — no
+            //「重新读」candidate line, no engine handbook packaging.
+            // #753: non-three-state re-ask rides as summons.instruction (人话重问).
+            const summonsPrepared = effective.summons === undefined
+                ? undefined
+                : await prepareSummonsResumeMaterials(admitted.runDirectory, effective.summons);
+            return buildNotaryTurnRequest(admitted, resumeTurnRequestProjectionOptions(admitted, effective, env, summonsPrepared));
         },
         adapters: notaryAdapters(),
         ...(env.engine === undefined ? {} : { effectiveEngine: env.engine }),

package/dist/public-cli/post-admission.js

@@ -8,11 +8,10 @@
 import { randomUUID } from "node:crypto";
 import { readFile, writeFile } from "node:fs/promises";
 import { isAbsolute, join, resolve } from "node:path";
-import { buildResumeContinuationPrompt, instructResumeHandbookRead, } from "./run-lifecycle.js";
+import { buildResumeContinuationPrompt, RESUME_TRANSPORT_ENVELOPE, } from "./run-lifecycle.js";
 import { CliUsageError } from "./cli-errors.js";
 import { buildInstructionTransportPrompt, freezeAttachmentsIntoRun, } from "./invocation.js";
 import { pathContainedIn } from "../activation-ledger-topology.js";
-import { engineSessionMaterialFromOptions } from "../package-resources/engine-material.js";
 import { projectCaseDossierPointerSection } from "./case-dossier-delivery.js";
 /** Append one system section to a continuation prompt, keeping its kind. */
 function appendContinuationSection(continuation, section) {
@@ -259,36 +258,37 @@ export async function dispatchPostAdmissionTurn(input) {
     }
 }
 /**
- * Shared resume continuation projection (#471 / #600 / #633 / #637): seat-table
- * model/engine/timeout axes, restored correlation, and either
- * - manual resume: package envelope / optional caller message (unchanged), or
- * - same-ticket summons: this turn's instruction + frozen attachment paths.
- * Caller message and summons materials each keep their place: a resume message
- * keeps manual-resume prompt semantics while open-court frozen attachments still
- * ride; summons instruction is only the prompt base when no caller message.
+ * Shared resume continuation projection (#471 / #600 / #633 / #637 / #755):
+ * seat-table model/engine/timeout axes, restored correlation, and either
+ * - manual resume (no same-ticket summons): package envelope / optional caller
+ *   message, with engine-axis handbook via buildResumeContinuationPrompt, or
+ * - same-ticket summons (审核循环续话): caller/peer words + optional frozen
+ *   attachment paths only — no「重新读」、no engine handbook packaging
+ *   (#750/#755), whether or not attachments are present.
+ * Caller message wins as prompt base when supplied (bytes unchanged, including
+ * blank/whitespace); else summons instruction. Attachment projection must not
+ * re-interpret the caller message as instructionEmpty.
  * Seats add only their activation projection. Call prepareSummonsResumeMaterials
- * first when request.summons carries attachment paths.
+ * first when request.summons carries instruction or attachment paths.
  */
 export function resumeTurnRequestProjectionOptions(admitted, request, env, summonsPrepared) {
-    const engineMaterial = engineSessionMaterialFromOptions({
-        ...(env.engine === undefined ? {} : { engine: env.engine }),
-        packageRoot: env.packageRoot,
-    });
     let prompt;
     if (request.message !== undefined) {
-        // Manual resume caller-message semantics stay authoritative for the prompt:
-        // message present → base bytes unchanged (including blank/whitespace).
-        // Open-court frozen attachments still continue when present; attachment
-        // projection must not re-interpret the caller message as instructionEmpty.
-        if (summonsPrepared !== undefined &&
-            summonsPrepared.attachments.length > 0) {
-            prompt = instructResumeHandbookRead(buildInstructionTransportPrompt({
+        if (summonsPrepared !== undefined) {
+            // #755: same-ticket review / open-court — caller words + optional paths.
+            // Attachments are not a gate: message-only summons must stay plain too.
+            prompt = buildInstructionTransportPrompt({
                 instruction: request.message,
                 instructionEmpty: false,
                 attachments: summonsPrepared.attachments,
-            }, engineMaterial), engineMaterial);
+            });
+        }
+        else if (request.summons !== undefined) {
+            // #755: same-ticket summons without prepared materials — caller words only.
+            prompt = request.message;
         }
         else {
+            // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).
             prompt = buildResumeContinuationPrompt({
                 packageRoot: env.packageRoot,
                 ...(env.engine === undefined ? {} : { engine: env.engine }),
@@ -297,9 +297,16 @@ export function resumeTurnRequestProjectionOptions(admitted, request, env, summo
         }
     }
     else if (summonsPrepared !== undefined) {
-        prompt = instructResumeHandbookRead(buildInstructionTransportPrompt(summonsPrepared, engineMaterial), engineMaterial);
+        // #755: same-ticket review summons — instruction/attachments only.
+        prompt = buildInstructionTransportPrompt(summonsPrepared);
+    }
+    else if (request.summons !== undefined) {
+        // #755: same-ticket summons with no instruction/attachments (e.g. notary
+        // source-run pointer) — plain resume envelope, no handbook / 重新读.
+        prompt = RESUME_TRANSPORT_ENVELOPE;
     }
     else {
+        // Bare manual resume — outsourcing engine axis keeps handbook (#600/#736).
         prompt = buildResumeContinuationPrompt({
             packageRoot: env.packageRoot,
             ...(env.engine === undefined ? {} : { engine: env.engine }),

package/dist/public-cli/run-lifecycle.js

@@ -32,11 +32,10 @@ function resumeRereadInstruction(materialPath, handbook) {
         : `重新读 ${materialPath}`;
 }
 /**
- * Resume-only material lines (#736 ticket exemption to ADR 0073 §3).
- * Neutral `- <absolute path>` pointers already on the continuation
- * (handbook from appendEngineSessionMaterial; frozen attachments from
- * instruction-seat transport) become reread instructions.
- * Handbook keeps the argv suffix; other materials are path-only.
+ * Engine-axis resume-only material lines (#736 / ADR 0069·0071).
+ * #755 withdrew this rewrite from 审核循环续话; review same-ticket resume stays
+ * plain dialogue via resumeTurnRequestProjectionOptions. Outsourcing resume
+ * still rewrites neutral handbook/path pointers into 重新读 instructions.
  * First-round delivery is unchanged; never pastes material body.
  */
 export function instructResumeHandbookRead(prompt, engineMaterial) {
@@ -56,16 +55,9 @@ export function instructResumeHandbookRead(prompt, engineMaterial) {
     })
         .join("\n");
 }
-/** Append a live-path reread instruction when the pointer is not already on the continuation. */
-export function appendResumeMaterialReread(prompt, materialPath) {
-    const instruction = resumeRereadInstruction(materialPath, false);
-    const lines = prompt.split("\n");
-    if (lines.includes(instruction))
-        return prompt;
-    return prompt.length === 0 ? instruction : `${prompt}\n${instruction}`;
-}
 /**
- * Unique continuation-prompt selector for manual/auto resume (#471 / #600 / #736).
+ * Unique continuation-prompt selector for manual/auto engine-axis resume
+ * (#471 / #600 / #736). Not used for 审核循环 same-ticket summons (#755).
  * Message present → base bytes unchanged; absent → package transport envelope.
  * When engine material is present, append structured engine coordinates then
  * rewrite absolute material pointer lines into 重新读 instructions. Zero parse,

package/dist/public-role-summons.js

@@ -162,7 +162,11 @@ async function summonPublicRole(options) {
     // Host config passthrough only — same face as public CLI (#422 / #675).
     ...config.autoResumeLimit === void 0 ? {} : { autoResumeLimit: config.autoResumeLimit },
     // Parent cancellation reaches the nested activation's own turn dispatch.
-    ...options.signal === void 0 ? {} : { signal: options.signal }
+    ...options.signal === void 0 ? {} : { signal: options.signal },
+    // #753: reask rides the existing notary same-ticket resume summons.instruction.
+    ...options.reviewReask === void 0 ? {} : { reviewReask: options.reviewReask },
+    // #753/#750: new-submission pointers on same-parent resume (not conclusion re-ask).
+    ...options.gateReviewInstruction === void 0 ? {} : { gateReviewInstruction: options.gateReviewInstruction }
   };
   const captured = options.io === void 0 ? createCapturingIo() : void 0;
   const io = options.io ?? captured.io;
@@ -258,25 +262,48 @@ async function summonGateOfficer(options) {
     const { homeFromRunDirectory } = await import("./activation-ledger-topology.js");
     home = homeFromRunDirectory(options.sourceRunDirectory);
   }
+  let gateReviewInstruction;
+  if (options.reask === void 0) {
+    const { buildGateOfficerReviewInstruction } = await import("./auditor-dossier-tool.js");
+    gateReviewInstruction = buildGateOfficerReviewInstruction({
+      sourceRunDirectory: options.sourceRunDirectory,
+      ...options.submissionCandidatePath === void 0 ? {} : { submissionCandidatePath: options.submissionCandidatePath }
+    });
+  }
+  const common = {
+    cwd: options.cwd,
+    ...home === void 0 ? {} : { home },
+    ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
+    ...options.io === void 0 ? {} : { io: options.io },
+    ...options.signal === void 0 ? {} : { signal: options.signal },
+    ...options.reask === void 0 ? {} : { reviewReask: options.reask },
+    ...gateReviewInstruction === void 0 ? {} : { gateReviewInstruction }
+  };
   if (options.officer === "notary") {
     return summonPublicRole({
       role: "notary",
       argv: ["--source-run", options.sourceRunDirectory, "--project", options.cwd],
-      cwd: options.cwd,
-      ...home === void 0 ? {} : { home },
-      ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
-      ...options.io === void 0 ? {} : { io: options.io },
-      ...options.signal === void 0 ? {} : { signal: options.signal }
+      ...common
+    });
+  }
+  if (options.officer === "auditor") {
+    const { AUDITOR_DOSSIER_PROMPT } = await import("./compliance-transport.js");
+    return summonPublicRole({
+      role: "auditor",
+      argv: [
+        "--subject",
+        "judge",
+        "--source-run",
+        options.sourceRunDirectory,
+        AUDITOR_DOSSIER_PROMPT
+      ],
+      ...common
     });
   }
   return summonPublicRole({
     role: "inspector",
     argv: [`\u5377\u5B97\u6307\u9488\uFF1A${options.sourceRunDirectory}`],
-    cwd: options.cwd,
-    ...home === void 0 ? {} : { home },
-    ...options.packageRoot === void 0 ? {} : { packageRoot: options.packageRoot },
-    ...options.io === void 0 ? {} : { io: options.io },
-    ...options.signal === void 0 ? {} : { signal: options.signal }
+    ...common
   });
 }
 export {

package/dist/role-runtime.js

@@ -183,6 +183,8 @@ export { ACCEPTED_ACTIVATION_EVENT, ACCEPTED_ACTIVATION_FACT_KEYS, ActivationGit
 export { DISPATCH_STUB_EVENT, buildDispatchStubFact, reconcileInvocation, } from "./activation-reconciliation.js";
 export { TOOL_EXECUTION_UPDATE_HEARTBEAT, TOOL_EXECUTION_UPDATE_THROTTLE_MS, createToolExecutionObservationFace, isProducingToolUpdate, systemToolExecutionObservationMonoNow, toolExecutionObservationRecordSchema, validateToolExecutionObservationRecord, writeToolExecutionObservationRecord, } from "./tool-execution-observation.js";
 export { NOTARY_OUTPUT_TOOL, INSPECTOR_OUTPUT_TOOL, GatekeeperDecisionError, createGatekeeperOutputTool, runGatekeeper, } from "./gatekeeper-role.js";
+export { gateOfficerForSubject } from "./gatekeeper-role.js";
+import { ParentQueueReaskError } from "./submission-errors.js";
 export { DOCTOR_EVIDENCE_TOOL_NAME, DOCTOR_OUTPUT_TOOL_NAME, } from "./doctor-role.js";
 export { validateDoctorSubmissionShape, validateDoctorOutput, DoctorEvidenceStore } from "./doctor-contracts.js";
 export { loadDoctorCase } from "./doctor-evidence.js";
@@ -194,7 +196,7 @@ export { fixerOutputSchema, validateFixerOutput, validateFixerOutputForPacket }
 export { fixerPrerequisiteSchema, fixerPrerequisitesSchema, parseFixerPrerequisites, validateFixerPrerequisites } from "./package-contracts/fixer-packet.js";
 export { AUDIT_ESCALATION_KIND, buildAuditEscalationResult, disposeComplianceDecision, isAuditEscalationResult, projectAuditEscalation } from "./audit-escalation.js";
 export { AUDITOR_SOUL_ROLES, AK_ROLE_AUDITOR_SUBJECT_ENV, loadAuditorSoul, loadAuditorSoulFromSubjectInput, resolveAuditorSubject, } from "./auditor-soul.js";
-export { JUDGE_AUDIT_TOOL_NAME, SOUL_AUDIT_TOOL_NAME, createPiJudgeAuditor } from "./judge-auditor.js";
+export { JUDGE_AUDIT_TOOL_NAME, SOUL_AUDIT_TOOL_NAME } from "./judge-auditor.js";
 export { DOCTOR_AUDIT_TOOL_NAME, createPiDoctorAuditor } from "./doctor-auditor.js";
 export { COLLECTOR_OBSERVE_TOOL, COLLECTOR_OUTPUT_TOOL, COLLECTOR_READ_TOOL, COLLECTOR_REQUEST_TOOL, COLLECTOR_WAIT_TOOL, } from "./collector-role.js";
 export * from "./navigator-attendance.js";
@@ -630,11 +632,35 @@ function loadFrozenDiaristCatalog(getFlag) {
     }
     return loadDiaristSourceCatalog(raw);
 }
+/** Countersign status words the queue reads (#753). */
+const COUNTERSIGN_QUEUE_STATUSES = new Set(["converged", "continue", "escalate"]);
+/**
+ * Plain-language re-ask when countersignStatus is not a known queue word.
+ * Back to countersign itself — notary is not summoned (#753).
+ */
+const COUNTERSIGN_STATUS_REASK = "countersignStatus 不是 converged、continue、escalate 三态之一。请重新交卷，status 写明其一。";
 export function createCountersignRoleRuntime(roleHost, dependencies, hostActions) {
     // Notary inner gate difference only — lifecycle stays on the shared envelope.
     // Pointer-only summons: officer self-fetches from run dossier (#632 / ADR 0079).
+    // #753 queue: read countersignStatus only — escalate skips gate (thrown to caller);
+    // unreadable status returns to countersign; else notary inner gate.
     const beforeAccept = hostActions !== undefined && roleHost.requireGatekeeperPass !== undefined
-        ? async ({ toolCallId, signal, ctx }) => {
+        ? async ({ toolCallId, parameters, signal, ctx }) => {
+            const record = parameters !== null && typeof parameters === "object" && !Array.isArray(parameters)
+                ? parameters
+                : undefined;
+            const status = record !== undefined && typeof record.countersignStatus === "string"
+                ? record.countersignStatus
+                : undefined;
+            if (status === undefined || !COUNTERSIGN_QUEUE_STATUSES.has(status)) {
+                // Parent status unreadable → back to countersign itself; do not summon notary,
+                // do not forge an officer bounce face (#753).
+                throw new ParentQueueReaskError(COUNTERSIGN_STATUS_REASK);
+            }
+            if (status === "escalate") {
+                // Parent escalate → throw to caller as-is; notary does not attend (#753).
+                return undefined;
+            }
             await roleHost.requireGatekeeperPass({
                 context: ctx,
                 subject: { kind: "countersign_verdict" },
@@ -1000,7 +1026,6 @@ export function createRoleRuntimeExtension(dependencies) {
         };
         const judge = createJudgeRoleRuntime(roleHost, {
             loadSoul: dependencies.loadJudgeSoul,
-            auditSoulCompliance: dependencies.auditSoulCompliance,
         }, hostActions);
         const fixer = createFixerRoleRuntime(roleHost, {
             async loadSoul() {

package/dist/submission-correctable-error.js

@@ -1,4 +1,4 @@
-import { GatekeeperDecisionError, WorkerCommitReminderError, WorkerPrefixReminderError, WorkerUnfinishedReasonReminderError, } from "./submission-errors.js";
+import { GatekeeperDecisionError, ParentQueueReaskError, WorkerCommitReminderError, WorkerPrefixReminderError, WorkerUnfinishedReasonReminderError, } from "./submission-errors.js";
 /** Shared, unforgeable identity for submission errors that the same session may correct. */
 const correctableSubmissionErrorBrand = Symbol("ak-roles.correctable-submission-error");
 export class CorrectableSubmissionError extends Error {
@@ -15,6 +15,7 @@ export function isCorrectableSubmissionError(error) {
 export function isCorrectableExecuteError(error) {
     return (isCorrectableSubmissionError(error)
         || error instanceof GatekeeperDecisionError
+        || error instanceof ParentQueueReaskError
         || error instanceof WorkerCommitReminderError
         || error instanceof WorkerPrefixReminderError
         || error instanceof WorkerUnfinishedReasonReminderError);

package/dist/submission-errors.js

@@ -1,21 +1,25 @@
-import { joinReadableGateItems } from "./readable-gate-item.js";
+import { readableGateItem } from "./readable-gate-item.js";
+/**
+ * Tool-result text the parent model sees (#753 / #750 evidence).
+ * bounce | escalate → officer receipt verbatim (JSON when structured).
+ * no_receipt → honest lifecycle fact. No findings rewrite, no「（无 findings）」.
+ * #775: structured field content via readableGateItem (DRY with other gate seams).
+ */
+function serializeReceipt(receipt) {
+    return readableGateItem(receipt);
+}
 function gatekeeperNonPassMessage(result) {
-    if (result.status === "bounce") {
-        const findings = result.findings.length === 0
-            ? "（无 findings）"
-            : joinReadableGateItems(result.findings);
-        return `门下省打回重写，findings：${findings}`;
-    }
-    if (result.status === "unreadable") {
-        return `门下省官回执形状不可读（${result.officer}）：${result.reason}`;
+    if (result.status === "bounce" || result.status === "escalate") {
+        return serializeReceipt(result.receipt);
     }
+    // no_receipt
     return `门下省 ${result.status}（${result.stage}）：${result.reason}`;
 }
 /** Structured non-pass; `.result` is session-projected via tool_result, message feeds the model. */
 export class GatekeeperDecisionError extends Error {
     result;
-    constructor(result) {
-        super(gatekeeperNonPassMessage(result));
+    constructor(result, message) {
+        super(message ?? gatekeeperNonPassMessage(result));
         this.name = "GatekeeperDecisionError";
         this.result = result;
     }
@@ -41,3 +45,14 @@ export class WorkerUnfinishedReasonReminderError extends Error {
         this.name = "WorkerUnfinishedReasonReminderError";
     }
 }
+/**
+ * Parent seat status unreadable for queueing (#753).
+ * Correctable back to the parent itself — not a gate officer bounce, no officer field.
+ */
+export class ParentQueueReaskError extends Error {
+    code = "parent_queue_reask";
+    constructor(message) {
+        super(message);
+        this.name = "ParentQueueReaskError";
+    }
+}

package/dist/submission-ledger.js

@@ -1,6 +1,5 @@
 import { resolveActivationLedgerHome, tryHomeFromAkRolesPath, } from "./activation-ledger-topology.js";
-import { isAuditEscalationProjection, projectAuditEscalation } from "./audit-escalation.js";
-import { GatekeeperEscalationError } from "./gatekeeper-role.js";
+import { isAuditEscalationProjection } from "./audit-escalation.js";
 import { acceptedFacts, isTerminatingToolName, } from "./package-contracts/terminating-tools.js";
 import { runIdFromRunDirectory } from "./run-terminal-artifacts.js";
 import { readSitianRecords, resolveSitianRecordPathInLedger, sitianReport } from "./sitian-facade.js";
@@ -293,14 +292,6 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                     // correctable-rejection path as execute-thrown rejections below. The
                     // candidate is booked first so the bounced attempt stays observable.
                     append({ type: "candidate", attemptId, toolCallId, toolName: tool.name, sequence: ++state.sequence });
-                    const projectOfficerEscalation = (officer, original, deliveredOutput = original) => projectAuditEscalation({
-                        ...original,
-                        status: "escalate",
-                        officer,
-                        reason: original.reason === undefined
-                            ? `门下省${officer}上呈（原卷未附 reason）`
-                            : original.reason,
-                    }, deliveredOutput);
                     let result;
                     try {
                         failOnInfrastructureFailureDeclaration(params, {
@@ -311,11 +302,9 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                         result = await tool.execute(toolCallId, params, signal, update, context);
                     }
                     catch (error) {
-                        if (error instanceof GatekeeperEscalationError) {
-                            const decision = error.gatekeeper;
-                            result = projectOfficerEscalation(error.gatekeeper.officer, decision, params);
-                        }
-                        else if (isCorrectableExecuteError(error)) {
+                        // #753: gate no longer throws GatekeeperEscalationError to select parent
+                        // next-step. Officer bounce|escalate returns as correctable with raw receipt.
+                        if (isCorrectableExecuteError(error)) {
                             append({
                                 type: "outcome",
                                 attemptId,
@@ -337,14 +326,9 @@ export function createSubmissionLedgerHost(host, outputTools, failInfrastructure
                             throw error;
                         }
                     }
-                    if ((role === "inspector" || role === "notary") &&
-                        typeof result.details === "object" &&
-                        result.details !== null &&
-                        !Array.isArray(result.details) &&
-                        result.details.status === "escalate") {
-                        const details = result.details;
-                        result = projectOfficerEscalation(role, details);
-                    }
+                    // #753 escalate-thrown-verbatim: officer escalate seals as accepted with the
+                    // raw receipt — no projectOfficerEscalation rewrite, no fabricated reason.
+                    // Compliance seats still return live audit_escalation projections below.
                     if (isAuditEscalationProjection(result.details)) {
                         const candidates = rounds.get(attemptId) ?? [];
                         candidates.push({

package/extensions/role-runtime.ts

@@ -35,7 +35,6 @@ import {
   createProductionMergerGitState,
   formatNavigatorRoleHelp,
 } from "../src/role-runtime.ts";
-import { createPiJudgeAuditor } from "../src/judge-auditor.ts";
 import { loadAuditorSoulFromSubjectInput } from "../src/auditor-soul.ts";
 import { loadGatekeeperSessionMaterials, loadMainRoleSessionMaterials } from "../src/session-opening-materials.ts";
 const extensionPath = fileURLToPath(import.meta.url);
@@ -175,7 +174,6 @@ export default function roleRuntime(pi: ExtensionAPI): void {
     },
     runReviewerDispatch: (dispatch, options) => reviewerAgent.run(dispatch, options),
     shutdownReviewerAgent: () => reviewerAgent.shutdown(),
-    auditSoulCompliance: (options) => createPiJudgeAuditor()(options),
   }, {
     transcriptFromContext,
     oauthKeepalive: { providers: oauthKeepaliveProviders },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@akagilnc/pi-workflow-roles",
-  "version": "0.1.3685",
+  "version": "0.1.3702",
   "description": "Soul-bound workflow roles for Pi",
   "type": "module",
   "license": "Apache-2.0",

package/souls/countersign.md

@@ -7,26 +7,26 @@
 
 **一、立法。** 先为本票立「适用法」，写进判词；后面每一步只对着它问，未立法不得往下走。适用法三部分：
 1 票面本文，含置顶冻结原话；起居录里决策过程
-2 第一法源立法（最高法）：该票起居录与陛下原话；
+2 第一法源立法（最高法）：该票起居录与陛下原话，全局宪法；
 3 第二发源立法：
-适用 ADR——由你自行检索，按票面触及的席位、接缝、术语在 docs/adr 与 CONTEXT.md 查全，票面引没引都算——并逐键列出其决策键；全局宪法、仓级 CLAUDE.md、质量法、审刑院法典；
+适用 ADR——由你自行检索，按票面触及的席位、接缝、术语在 docs/adr 与 CONTEXT.md 查全，票面引没引都算——并逐键列出其决策键；仓级 CLAUDE.md、质量法、审刑院法典；
 既有契约：CONTEXT.md 词表、被改动接缝的现行行为、相关票与在飞分支。
 
-4 第二法源合法性检查：根据起居录对话记录，判断第二法源 以及 输入的 prombt 是否有超出或不足，曲解陛下原话的。如有，直接封驳要求改正或陛下批准。
+4 第二法源合法性检查：第一法源，判断第二法源 以及 输入的 prombt 是否有超出或不足，曲解。如有，除非有陛下原话批准，否则直接封驳要求改正或陛下批准。
 
-**二、相抵。** 票面与适用法有无抵触：违宪、违 ADR 决策键、违既有契约、与在飞票冲突。
+**二、相抵。** 票面与法源有无抵触，有无与在飞票冲突。
 
-**三、缺失。** 适用法要求的，票面有没有漏：适用 ADR 未被引用即缺失，引用须写 `docs/adr/...md` 路径（御史台 Spec 轴只按路径取 ADR 字节）；ADR 每个决策键须有落点或明写「由 #x 承接」；验收面须覆盖票面每条主张；前置产物、决定、答复须在；承重主张的源头不存在、不支持、已过时，同为缺失。
+**三、缺失。** 法源要求的，票面有没有漏：适用 ADR 未被引用即缺失，引用须写 `docs/adr/...md` 路径；ADR 每个决策键须有落点或明写「由 #x 承接」；验收面须覆盖票面每条主张；前置产物、决定、答复须在；承重主张的源头不存在、不支持、已过时，同为缺失。
 
-**四、擅加。** 票面有没有超出法源的机制、约束、验收、术语：每条承重主张追到陛下原话为止；ADR 决策键只是索引，键的表述超出同行原话即加戏，追不到原话即加戏。
+**四、擅加。** 票面有没有超出法源的机制、约束、验收、术语。
 
-各步取证按《审法·取证边界》：读码、开卷、传召皆可；只读，探针只落 worktree 与临时目录，不得删改其外任何路径。
+各步取证按《审法·取证边界》：读码、开卷、传召皆可；探针只落 worktree 与临时目录，不得删改其外任何路径。交付时候清理回原样
 
 ## 审读五问
 
 四步是审读，五问是裁决口径，对应关系固定，不重做：
 1. 票面是否符合既定制度——由「相抵」答；
-2. 授权是否真实——由「立法②」答：以该票起居录为据（起居郎掌修；无录或关键条不在录中，记明后依证据裁决，不替起居郎补录），陛下原话与 decision key 可溯，不认转述与口头；
+2. 授权是否真实——由「立法②」答：不认转述与口头；
 3. 文书是否与原意一致——由「缺失」「擅加」答：无过度解释、无夹带、无缺口；
 4. 是否存在必须退回重议的问题；
 5. 是否已具备正式发布与执行资格。
@@ -35,12 +35,13 @@
 
 ## 判词
 
-事实与处方分开对宪：裁决落法度与事实，不落施工设计与实现细节过早堆上票面即为失职。
+事实与处方分开对宪：裁决落法度与事实；施工设计与实现细节过早堆上票面即为失职。
 
 - 署（converged）——四步无碍、五问皆有据可答，具备开工资格；
 - 封驳（continue）——存在必须退回重议的问题；写明退给谁、缺什么、属哪一步；
-- 上呈（escalate）——授权存疑、法源冲突或须陛下取舍。
+- 上呈（escalate）——授权存疑、法源冲突或须陛下取舍。**上呈原样抛给调用者。**
+
 
 主张必须附证据或法的具体条目。finding 提类别，同类一次说全（审刑院法典·审官纪律）。
 
-无法解决的上抛陛下。
+交卷后由符宝郎内闸核旨。无法解决的上抛陛下。

package/souls/notary.md

@@ -7,3 +7,8 @@
 **二、核旨**：以所读起居录为据，核受审之物——**票面与判词**——有没有加戏：每一条**重大决策／设计／改变实际行为的**机制／约束条款逐条追到陛下原话为止——ADR 决策键只是索引，键的表述超出同行原话即加戏（门槛见审刑院法典；2026-09-06 owner：#636/#637「每次独立 run」判例）；票面本身是不是陛下要的同样逐条追，**不因票面已签押、判词已引用而免核**。引 ADR 之名而无 key 绑定、引票面而票面无原话，同为加戏。核键的做法：把键值与所绑原话并排逐字比——原话没说的动作（删、改、加机制、定顺序）键值不得含；同题在起居录里有更早原话的，一并对撞，后话只覆盖它明说的部分，没说的部分仍以前话为准。键值已写进 ADR、票面已过庭、判词已引用，都不算原话，不豁免。判词与票面对不对得上不归你。任一病成立，点名该条驳回；拿不准陛下本意的，上呈。
 
 方法：按条封驳。取证按《审法·取证边界》：只读；探针只落 worktree 与临时目录，不得删改其外任何路径。无法解决的上抛陛下。
+
+## 结论
+
+结论以三态明示（不规定格式）：`pass`（过）／`bounce`（打回）／`escalate`（上呈）。
+**打回或上呈的话就是给对方看的原文**——给事中收到的就是你写的回执，不是代码改写的摘要。

package/src/acp-host/production-host.ts

@@ -14,7 +14,6 @@ import { createGhCollectorGitHubTransport, createGhIssueSoftFetcher } from "../c
 import { createPiDoctorAuditor } from "../doctor-auditor.ts";
 import { loadDoctorCase } from "../doctor-evidence.ts";
 import type { DurablePrincipalAuthority, RoleTurnHost } from "../host-contracts.ts";
-import { createPiJudgeAuditor } from "../judge-auditor.ts";
 import { createProductionMergerGitState } from "../merger-git-state.ts";
 import { createNativeNavigatorSessionFactory, createNavigatorAttendance } from "../navigator-attendance.ts";
 import { loadNavigatorWorkContext } from "../navigator-work-context.ts";
@@ -42,7 +41,6 @@ const navigatorRoutePlaybookPath = fileURLToPath(
 
 /** Host-neutral packaged role runtime deps for the ACP parent-process envelope. */
 export function createAcpRoleRuntimeDependencies(packageRoot: string): RoleRuntimeDependencies {
-  const judgeAuditor = createPiJudgeAuditor();
   const doctorAuditor = createPiDoctorAuditor();
   const reviewerAgent = createPerDispatchReviewerAgent({ packageRoot });
   const navigatorSessionFactory = createNativeNavigatorSessionFactory();
@@ -80,8 +78,7 @@ export function createAcpRoleRuntimeDependencies(packageRoot: string): RoleRunti
       }
       return loadHomeCanonicalSkillBinding(name);
     },
-    // #590: four sub-legs on the shared institutional child seam (host-neutral).
-    auditSoulCompliance: (options) => judgeAuditor(options),
+    // #590: doctor compliance still on disposeCompliance path; judge→auditor is gate queue (#756).
     auditDoctorCompliance: (options) => doctorAuditor(options),
     runReviewerDispatch: (dispatch, options) => reviewerAgent.run(dispatch, options),
     shutdownReviewerAgent: () => reviewerAgent.shutdown(),

package/src/acp-host/role-envelope.ts

@@ -298,7 +298,7 @@ export async function prepareAcpRoleEnvelope(options: {
     if (record.kind === "role_infrastructure_failure") return;
     const code = typeof record.code === "string" && record.code.length > 0
       ? record.code
-      : record.status === "bounce" || record.status === "no_receipt" || record.status === "unreadable"
+      : record.status === "bounce" || record.status === "escalate" || record.status === "no_receipt"
         ? record.status
         : undefined;
     if (code === undefined) return;

package/src/analyst-gate-cycles-read.ts

@@ -477,6 +477,10 @@ export async function readAnalystGateCyclesFromAuditorRoles(
     ? [auditorRolesDirectory]
     : auditorRolesDirectory;
   const volumes: ClassifiedVolume[] = [];
+  // Same officer session pointed at N times (historical multi-mint pointers, or
+  // one parent booking many leaves) must classify once — else each accepted
+  // seal is counted ×N in terminal gate-round (#753 acceptance A).
+  const classifiedOfficerSessions = new Set<string>();
   for (const directory of directories) {
     let names: string[];
     try {
@@ -495,10 +499,15 @@ export async function readAnalystGateCyclesFromAuditorRoles(
     }
     for (const name of names) {
       const path = join(directory, name);
-      const sessionPath = name.endsWith(".pointer.json")
+      const fromPointer = name.endsWith(".pointer.json");
+      const sessionPath = fromPointer
         ? await resolveOfficerSessionFromPointerFile(path)
         : path;
       if (sessionPath === undefined) continue;
+      if (fromPointer) {
+        if (classifiedOfficerSessions.has(sessionPath)) continue;
+        classifiedOfficerSessions.add(sessionPath);
+      }
       const classified = await classifyAuditorVolume(sessionPath);
       for (const volume of classified) {
         if (