@akagilnc/pi-workflow-roles 0.1.3685 → 0.1.3702

package/src/archivist-record-entry.ts

@@ -232,7 +232,7 @@ export const DIRECT_OFFICER_RUN_POINTER_KIND = "direct-officer-run-pointer" as c
 export type DirectOfficerRunPointer = {
   readonly version: 1;
   readonly kind: typeof DIRECT_OFFICER_RUN_POINTER_KIND;
-  readonly officer: "inspector" | "notary";
+  readonly officer: "inspector" | "notary" | "auditor";
   /** Absolute path to the officer session.jsonl 正本. */
   readonly sessionFile: string;
   /** Officer run directory when known. */
@@ -243,10 +243,14 @@ export type DirectOfficerRunPointer = {
  * Book a typed pointer under parent session/auditor-roles (same nest owner as
  * createRecordSession). Never fabricates user/assistant/toolResult rows (#675).
  * Directory placement stays with the archivist record entry (ADR 0018 / 0065).
+ *
+ * Stable leaf per officer under one parent (#753 gate-round accounting):
+ * same-parent re-summons upsert the same pointer instead of minting N files that
+ * each re-scan the full officer session and multiply terminal gate-round counts.
  */
 export function bookDirectOfficerRunPointer(options: {
   readonly parentSessionFile: string;
-  readonly officer: "inspector" | "notary";
+  readonly officer: "inspector" | "notary" | "auditor";
   readonly sessionFile: string;
   readonly runDirectory?: string;
 }): DirectOfficerRunPointer {
@@ -262,7 +266,7 @@ export function bookDirectOfficerRunPointer(options: {
       : {}),
   };
   writeFileSync(
-    join(nest, `${options.officer}-${Date.now().toString(36)}.pointer.json`),
+    join(nest, `${options.officer}.pointer.json`),
     `${JSON.stringify(pointer)}\n`,
     "utf8",
   );

package/src/auditor-dossier-tool.ts

@@ -62,6 +62,27 @@ export function gateSubmissionCandidatePath(runDirectory: string): string {
   return join(runDirectory, "artifacts", GATE_SUBMISSION_CANDIDATE_FILE);
 }
 
+/**
+ * Human-readable materials for gate-officer same-parent resume (#753 / #750).
+ * Pointers only — no body embed (ADR 0079/0081); no duty/handbook lines (#755).
+ * Three pairs share this face: countersign↔notary, judge↔auditor, worker↔inspector.
+ * Code delivers the pointers; it does not judge whether the officer read them.
+ */
+export function buildGateOfficerReviewInstruction(input: {
+  readonly sourceRunDirectory: string;
+  readonly submissionCandidatePath?: string;
+}): string {
+  const lines = [
+    "本轮父席交卷待审。",
+    `来源 run：${input.sourceRunDirectory}`,
+  ];
+  const candidate = input.submissionCandidatePath?.trim();
+  if (candidate !== undefined && candidate.length > 0) {
+    lines.push(`交卷候选（冻结快照）：${candidate}`);
+  }
+  return lines.join("\n");
+}
+
 /**
  * Persist the in-flight tool-call leaf as a run-directory artifact so pointer-only
  * officer summons resolve on hosts whose session.jsonl is header-only (#632 / DK-4).

package/src/dossier-resolution.ts

@@ -5,9 +5,6 @@
 import { existsSync, statSync } from "node:fs";
 import { resolve } from "node:path";
 
-import { JUDGE_OUTPUT_TOOL_NAME as JUDGE_OUTPUT_TOOL } from "./package-contracts/judge-output.ts";
-
-export const JUDGE_OUTPUT_TOOL_NAME = JUDGE_OUTPUT_TOOL;
 export const AUDIT_RUN_DIR_ENV = "AK_ROLE_RUN_DIR" as const;
 export const DOCTOR_CANDIDATE_ENTRY_TYPE = "ak_doctor_audit_candidate" as const;
 
@@ -65,44 +62,8 @@ function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
-/**
- * Judge subjects must already be on the parent session books before audit starts:
- * assignment (user message) + candidate verdict (sole judge output tool call).
- */
 type AuditSubjectContext = { sessionManager: { getEntries?(): Iterable<unknown> } };
 
-export function readJudgeAuditSubjects(context: AuditSubjectContext): SubjectResolution {
-  const entries = context.sessionManager.getEntries?.() ?? [];
-  let hasAssignment = false;
-  let hasCandidate = false;
-  for (const entry of entries) {
-    if (!isRecord(entry) || entry.type !== "message" || !isRecord(entry.message)) continue;
-    const message = entry.message;
-    if (message.role === "user") {
-      const text = typeof message.content === "string"
-        ? message.content
-        : Array.isArray(message.content)
-          ? message.content.map((part) => (isRecord(part) && part.type === "text" && typeof part.text === "string" ? part.text : "")).join("")
-          : "";
-      if (text.trim().length > 0) hasAssignment = true;
-    }
-    if (message.role === "assistant" && Array.isArray(message.content)) {
-      for (const part of message.content) {
-        if (isRecord(part) && part.type === "toolCall" && part.name === JUDGE_OUTPUT_TOOL_NAME && isRecord(part.arguments)) {
-          hasCandidate = true;
-        }
-      }
-    }
-  }
-  if (!hasAssignment) {
-    return { status: "incomplete", observation: { kind: "missing-subject", subject: "assignment" } };
-  }
-  if (!hasCandidate) {
-    return { status: "incomplete", observation: { kind: "missing-subject", subject: "candidate-verdict" } };
-  }
-  return { status: "ok" };
-}
-
 /**
  * Doctor candidate testimony must be recorded before audit.
  */

package/src/gatekeeper-pass-envelope.ts

@@ -1,18 +1,28 @@
 /**
- * Shared submit-path envelope for 门下省 gates (ADR 0018 / #675).
- * Owns officer-pointer book + host abort/non-pass faces.
+ * Shared submit-path envelope for 门下省 gates (ADR 0018 / #675 / #753).
+ * Owns officer-pointer book + host abort/non-pass faces + review queue loop.
  * Role modules only project via projectGatekeeperRun / runGatekeeper — no book, no catch.
+ *
+ * Queue guarantee only (#753 / #756 / #750):
+ *   parent submit → summon officer → read conclusion field
+ *   pass → accept end
+ *   bounce | escalate → raw officer receipt as tool result back to parent
+ *   not three-state → resume officer with plain-language re-ask (no round cap)
+ *   transport / no_receipt → present honestly
+ * Three pairs: countersign↔notary, judge↔auditor, worker↔inspector.
+ * Code does not judge content, map next-step for parent, or label unreadable/unusable.
  */
 import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
 import { bookDirectOfficerRunPointer } from "./archivist-record-entry.ts";
 import type { HostContext } from "./host-contracts.ts";
 import {
   GatekeeperDecisionError,
-  GatekeeperEscalationError,
+  OFFICER_CONCLUSION_REASK,
   projectGatekeeperRun,
   type GatekeeperPassHostActions,
   type GatekeeperResult,
   type GatekeeperSubject,
+  type GateOfficer,
   type GateOfficerSummon,
 } from "./gatekeeper-role.ts";
 import type { PublicSummonResult } from "./public-role-summons.ts";
@@ -24,7 +34,7 @@ import { sessionFileFromPublicSummon } from "./session-assistant-usage.ts";
  */
 function bookDirectOfficerPointer(
   context: ExtensionContext | HostContext,
-  officer: "inspector" | "notary",
+  officer: GateOfficer,
   result: GatekeeperResult,
   summoned: PublicSummonResult,
 ): void {
@@ -32,7 +42,7 @@ function bookDirectOfficerPointer(
     result.status !== "pass"
     && result.status !== "bounce"
     && result.status !== "escalate"
-    && result.status !== "unreadable"
+    && result.status !== "needs_reask"
   ) {
     return;
   }
@@ -55,7 +65,7 @@ function bookDirectOfficerPointer(
 
 /**
  * Shared envelope: project gate, book officer pointer, map onto host actions.
- * unreadable = parent stands (ADR 0055); never mechanical NonPass reject.
+ * Review loop has no round cap (#753 no-round-cap).
  */
 export async function requireGatekeeperPass(options: {
   readonly context: ExtensionContext | HostContext;
@@ -66,44 +76,50 @@ export async function requireGatekeeperPass(options: {
   /** Lowest seam: same as runGatekeeper options.summonOfficer — offline tracers only. */
   readonly summonOfficer?: GateOfficerSummon;
 }): Promise<void> {
-  const projected = await projectGatekeeperRun({
-    context: options.context,
-    subject: options.subject,
-    ...(options.signal === undefined ? {} : { signal: options.signal }),
-    ...(options.summonOfficer === undefined ? {} : { summonOfficer: options.summonOfficer }),
-  });
-  const gatekeeper = projected.result;
-  // Envelope-owned pointer book. Failure is host infrastructure — single face.
-  if (projected.summoned !== undefined) {
-    try {
-      bookDirectOfficerPointer(
-        options.context,
-        projected.officer,
-        gatekeeper,
-        projected.summoned,
-      );
-    } catch (error) {
+  let reask: string | undefined;
+  // No round cap — end only on pass, bounce/escalate-to-parent, or real failure.
+  for (;;) {
+    const projected = await projectGatekeeperRun({
+      context: options.context,
+      subject: options.subject,
+      ...(options.signal === undefined ? {} : { signal: options.signal }),
+      ...(options.summonOfficer === undefined ? {} : { summonOfficer: options.summonOfficer }),
+      ...(reask === undefined ? {} : { reask }),
+    });
+    const gatekeeper = projected.result;
+    // Envelope-owned pointer book. Failure is host infrastructure — single face.
+    if (projected.summoned !== undefined) {
+      try {
+        bookDirectOfficerPointer(
+          options.context,
+          projected.officer,
+          gatekeeper,
+          projected.summoned,
+        );
+      } catch (error) {
+        options.hostActions.failInfrastructure(error, options.context, options.toolCallId);
+      }
+    }
+    if (gatekeeper.status === "pass") return;
+    if (gatekeeper.status === "needs_reask") {
+      // Resume the speaker with plain-language re-ask — never bounce the parent (#753).
+      reask = OFFICER_CONCLUSION_REASK;
+      continue;
+    }
+    if (gatekeeper.status === "transport_failure") {
+      const error = new Error(`交卷闸 transport_failure（${gatekeeper.stage}）：${gatekeeper.reason}`) as Error & {
+        stage: typeof gatekeeper.stage;
+        reason: string;
+        submission?: unknown;
+      };
+      error.stage = gatekeeper.stage;
+      error.reason = gatekeeper.reason;
+      if (gatekeeper.submission !== undefined) error.submission = gatekeeper.submission;
       options.hostActions.failInfrastructure(error, options.context, options.toolCallId);
     }
+    // bounce | escalate | no_receipt: raw receipt (or lifecycle fact) back to parent.
+    // escalate is NOT thrown as parent next-step — parent reads the officer words (#753).
+    options.hostActions.bindSubmissionNonPass(options.toolCallId, gatekeeper);
+    throw new GatekeeperDecisionError(gatekeeper);
   }
-  if (gatekeeper.status === "pass") return;
-  // ADR 0055 / #675: shape-unreadable officer output must not mechanically reject parent.
-  if (gatekeeper.status === "unreadable") return;
-  if (gatekeeper.status === "transport_failure") {
-    const error = new Error(`交卷闸 transport_failure（${gatekeeper.stage}）：${gatekeeper.reason}`) as Error & {
-      stage: typeof gatekeeper.stage;
-      reason: string;
-      submission?: unknown;
-    };
-    error.stage = gatekeeper.stage;
-    error.reason = gatekeeper.reason;
-    if (gatekeeper.submission !== undefined) error.submission = gatekeeper.submission;
-    options.hostActions.failInfrastructure(error, options.context, options.toolCallId);
-  }
-  if (gatekeeper.status === "escalate") {
-    throw new GatekeeperEscalationError(gatekeeper);
-  }
-  // bounce / no_receipt: typed non-pass — envelope owns execute→tool_result bridge.
-  options.hostActions.bindSubmissionNonPass(options.toolCallId, gatekeeper);
-  throw new GatekeeperDecisionError(gatekeeper);
 }

package/src/gatekeeper-role.ts

@@ -7,7 +7,6 @@ import {
 } from "./auditor-dossier-tool.ts";
 import type { NoReceiptLifecycleFacts } from "./receipt-delivery-policy.ts";
 import { GatekeeperDecisionError } from "./submission-errors.ts";
-import { readableGateItem } from "./readable-gate-item.ts";
 import { INSPECTOR_OUTPUT_TOOL_NAME } from "./inspector-contracts.ts";
 import {
   GATEKEEPER_OUTPUT_TOOL_NAME,
@@ -16,76 +15,80 @@ import {
 } from "./package-contracts/gatekeeper-output.ts";
 import type { PublicSummonResult } from "./public-role-summons.ts";
 import type { TerminalResult } from "./public-cli/terminal.ts";
-import { retainedShapeUnreadable } from "./shape-unreadable-failure.ts";
 export const INSPECTOR_OUTPUT_TOOL = INSPECTOR_OUTPUT_TOOL_NAME;
 export const NOTARY_OUTPUT_TOOL = "ak_notary_output";
 
+/** Gate review officers — 察院 / 符宝郎 / 审刑院 (#753 / #756). */
+export type GateOfficer = "inspector" | "notary" | "auditor";
+
 /** Officer routing only — content is self-fetched via the shared run-dossier tool (#632). */
 export type GatekeeperSubject =
   | { readonly kind: "worker_completion" }
   | { readonly kind: "judge_draft" }
+  | { readonly kind: "judge_compliance" }
   | { readonly kind: "countersign_verdict" };
 
+/**
+ * Gate projection for the review queue (#753 / #750).
+ * Code only reads the conclusion field for queueing. Officer words ride as
+ * `receipt` unchanged — no findings rewrite, no unreadable/unusable label,
+ * no next-step selection for the parent.
+ */
 export type GatekeeperResult =
-  /**
-   * Lawful direct-officer release.
-   */
-  | { readonly status: "pass"; readonly officer: "inspector" | "notary"; readonly findings: readonly string[] }
-  | {
-      readonly status: "bounce";
-      readonly officer: "inspector" | "notary";
-      readonly disposition: "rewrite";
-      readonly findings: readonly string[];
-      readonly submission: unknown;
-    }
+  | { readonly status: "pass"; readonly officer: GateOfficer; readonly receipt: unknown }
+  /** bounce | escalate: both return the officer receipt to the parent (#753 / #756). */
+  | { readonly status: "bounce"; readonly officer: GateOfficer; readonly receipt: unknown }
+  | { readonly status: "escalate"; readonly officer: GateOfficer; readonly receipt: unknown }
   | {
-      readonly status: "escalate";
-      readonly officer: "inspector" | "notary";
-      readonly reason?: unknown;
-      readonly findings: unknown;
-      readonly submission: unknown;
-    }
-  | { readonly status: "no_receipt"; readonly stage: "inspector" | "notary"; readonly reason: string; readonly facts: NoReceiptLifecycleFacts }
-  | {
-      /** Shape-unreadable officer output — typed fact, not a forged bounce (ADR 0055 / §0). */
-      readonly status: "unreadable";
-      readonly officer: "inspector" | "notary";
-      readonly reason: string;
-      readonly submission: unknown;
+      /**
+       * Accepted reply whose conclusion is not pass|bounce|escalate.
+       * Envelope resumes the officer with plain-language re-ask — never parent-stands,
+       * never forges bounce (#753 / unreadable-conclusion-resume-speaker).
+       */
+      readonly status: "needs_reask";
+      readonly officer: GateOfficer;
+      readonly receipt: unknown;
     }
+  | { readonly status: "no_receipt"; readonly stage: GateOfficer; readonly reason: string; readonly facts: NoReceiptLifecycleFacts }
   | {
       readonly status: "transport_failure";
-      readonly stage: "inspector" | "notary";
+      readonly stage: GateOfficer;
       readonly reason: string;
-      /** Original unusable submission retained for the failure channel. */
+      /** Original transport/process failure payload retained for the failure channel. */
       readonly submission?: unknown;
     };
 
+/** Non-pass faces that bounce the parent session (correctable). */
 export type GatekeeperNonPassResult = Extract<
   GatekeeperResult,
-  { status: "bounce" | "no_receipt" | "unreadable" }
+  { status: "bounce" | "escalate" | "no_receipt" }
 >;
 
-function gateSeatLabel(stage: "inspector" | "notary"): string {
-  return stage === "inspector" ? "察院" : "符宝郎";
+function gateSeatLabel(stage: GateOfficer): string {
+  if (stage === "inspector") return "察院";
+  if (stage === "auditor") return "审刑院";
+  return "符宝郎";
 }
 
-export { GatekeeperDecisionError } from "./submission-errors.ts";
-
-export class GatekeeperEscalationError extends Error {
-  readonly gatekeeper: Extract<GatekeeperResult, { status: "escalate" }>;
-  constructor(gatekeeper: Extract<GatekeeperResult, { status: "escalate" }>) {
-    super(`门下省${gateSeatLabel(gatekeeper.officer)}上呈`);
-    this.name = "GatekeeperEscalationError";
-    this.gatekeeper = gatekeeper;
-  }
+/** Subject kind → review officer (#753 countersign/notary, #756 judge/auditor + worker/inspector). */
+export function gateOfficerForSubject(subject: GatekeeperSubject): GateOfficer {
+  if (subject.kind === "worker_completion") return "inspector";
+  if (subject.kind === "judge_compliance") return "auditor";
+  return "notary";
 }
 
+export { GatekeeperDecisionError } from "./submission-errors.ts";
+
 export type GateOfficerSummon = (
-  officer: "inspector" | "notary",
+  officer: GateOfficer,
   sourceRunDirectory: string,
   /** Parent cancellation forwarded to the nested activation (#675). */
   signal?: AbortSignal,
+  /**
+   * Plain-language re-ask when the prior officer reply was not a three-state
+   * conclusion (#753 / #756). Hosted as same-ticket resume instruction.
+   */
+  reask?: string,
 ) => Promise<PublicSummonResult>;
 
 export type RunGatekeeperOptions = {
@@ -94,6 +97,10 @@ export type RunGatekeeperOptions = {
   readonly signal?: AbortSignal;
   /** Run directory of the parent role (pointer-only summons, ADR 0079). */
   readonly runDirectory?: string;
+  /**
+   * Plain-language re-ask for this summon (resume speaker after non-three-state).
+   */
+  readonly reask?: string;
   /**
    * Test seam for public-role summons. Production calls the shared public
    * activation path (#675); inject only in offline tracers.
@@ -145,13 +152,6 @@ function failureReason(error: unknown): string {
   return error instanceof Error ? `${error.name}: ${error.message}` : String(error);
 }
 
-function asStringArray(value: unknown): readonly string[] {
-  if (!Array.isArray(value)) return [];
-  // Officer findings may be structured objects (category/law/evidence); the
-  // parent role must see them verbatim, not an empty list (#750 / #775).
-  return value.map(readableGateItem);
-}
-
 /** Serializable stand-in when the child tool call had no arguments object. */
 export const MISSING_ARGUMENTS_SUBMISSION = Object.freeze({ missing: "arguments" as const });
 
@@ -160,7 +160,7 @@ function isRecord(value: unknown): value is Record<string, unknown> {
 }
 
 /** Keep original decision bytes for the next reader; undefined becomes a serializable missing-args fact. */
-function retainedSubmission(decision: unknown): unknown {
+function retainedReceipt(decision: unknown): unknown {
   // undefined must not be stored: JSON drops it and the missing-args fact vanishes.
   // Through the real provider adapter an undefined root argument arrives as an
   // empty object after serialization; that must also project a missing-args fact.
@@ -169,66 +169,44 @@ function retainedSubmission(decision: unknown): unknown {
     : decision;
 }
 
-/**
- * Shape-unreadable officer decision — retain original candidate + typed reason.
- * Not a forged bounce, not transport abort (CLAUDE.md §0 / ADR 0055).
- * Real provider/engine/disk failures stay transport_failure elsewhere.
- */
-function shapeUnreadable(
-  officer: "inspector" | "notary",
-  decision: unknown,
-  reason = "decision 无显式 pass/bounce/escalate",
-): Extract<GatekeeperResult, { status: "unreadable" }> {
-  return {
-    status: "unreadable",
-    officer,
-    reason,
-    submission: retainedSubmission(decision),
-  };
-}
-
 function readRecord(value: unknown): Record<string, unknown> | undefined {
   if (typeof value !== "object" || value === null || Array.isArray(value)) return undefined;
   return value as Record<string, unknown>;
 }
 
+/**
+ * Read only the conclusion field for queueing (#753).
+ * pass | bounce | escalate → queue signal + raw receipt.
+ * Anything else accepted → needs_reask (resume speaker), never unreadable/parent-stand.
+ * `fallbackStatus` is the terminal outcome.status when the receipt body has no status key
+ * (keeps missing-args sentinel intact as the receipt).
+ */
 function projectOfficerDecision(
-  officer: "inspector" | "notary",
+  officer: GateOfficer,
   decision: unknown,
+  fallbackStatus?: string,
 ): GatekeeperResult {
+  const receipt = retainedReceipt(decision);
   const record = readRecord(decision);
-  if (record === undefined) return shapeUnreadable(officer, decision);
-  if (record.status === "bounce") {
-    return {
-      status: "bounce",
-      officer,
-      disposition: "rewrite",
-      findings: asStringArray(record.findings),
-      submission: retainedSubmission(decision),
-    };
-  }
-  if (record.status === "pass") {
-    return {
-      status: "pass",
-      officer,
-      findings: asStringArray(record.findings),
-    };
+  const status =
+    (record !== undefined && typeof record.status === "string" ? record.status : undefined)
+    ?? fallbackStatus;
+  if (status === "pass") {
+    return { status: "pass", officer, receipt };
   }
-  if (record.status === "escalate") {
-    return {
-      status: "escalate",
-      officer,
-      ...(Object.hasOwn(record, "reason") ? { reason: record.reason } : {}),
-      findings: record.findings,
-      submission: retainedSubmission(decision),
-    };
+  if (status === "bounce" || status === "escalate") {
+    return { status, officer, receipt };
   }
-  return shapeUnreadable(officer, decision);
+  return { status: "needs_reask", officer, receipt };
 }
 
-/** Map a public-role terminal onto the gate officer result surface. */
+/**
+ * Project a public-role terminal onto the gate queue surface.
+ * Lifecycle facts (no_receipt / transport) stay loud; conclusion reads only
+ * the status field. No unusable/unreadable judgment (#753).
+ */
 function projectOfficerTerminal(
-  officer: "inspector" | "notary",
+  officer: GateOfficer,
   summoned: PublicSummonResult,
 ): GatekeeperResult {
   const terminal: TerminalResult | undefined = summoned.terminal;
@@ -253,11 +231,7 @@ function projectOfficerTerminal(
     };
   }
   if (outcome.kind === "failure") {
-    // Single settlement marker only (ADR 0055 / #675) — no cause=output re-derivation.
-    const shape = retainedShapeUnreadable(outcome.decisiveFacts);
-    if (shape !== undefined) {
-      return shapeUnreadable(officer, shape.candidate, outcome.diagnostic);
-    }
+    // Real provider/engine/disk failure — keep loud. Not a shape judgment.
     return {
       status: "transport_failure",
       stage: officer,
@@ -265,28 +239,47 @@ function projectOfficerTerminal(
       submission: outcome.decisiveFacts,
     };
   }
+  if (outcome.kind === "audit_escalation") {
+    // Residual/compliance escalate face: queue as escalate, receipt as written.
+    // Nested officer escalate itself seals accepted+status escalate (no rewrite).
+    return {
+      status: "escalate",
+      officer,
+      receipt: retainedReceipt(outcome.decisiveFacts),
+    };
+  }
   if (outcome.kind === "accepted") {
-    return projectOfficerDecision(officer, {
-      status: outcome.status,
-      ...outcome.decisiveFacts,
-    });
+    // Prefer the officer's own decisiveFacts as the receipt body. outcome.status is
+    // only a fallback when facts have no status key (missing-args sentinel stays intact).
+    const facts = outcome.decisiveFacts;
+    if (isRecord(facts) && Object.keys(facts).length > 0) {
+      return projectOfficerDecision(officer, facts, outcome.status);
+    }
+    return projectOfficerDecision(officer, { status: outcome.status });
   }
+  // Unknown terminal kind: still not a shape judgment — ask the speaker again.
   return {
-    status: "transport_failure",
-    stage: officer,
-    reason: `${gateSeatLabel(officer)} public summon returned unusable terminal kind`,
-    submission: outcome,
+    status: "needs_reask",
+    officer,
+    receipt: retainedReceipt(outcome),
   };
 }
 
 /** Projection carrier for the shared submit envelope (ADR 0018). No lifecycle book here. */
 export type GatekeeperProjection = {
-  readonly officer: "inspector" | "notary";
+  readonly officer: GateOfficer;
   readonly result: GatekeeperResult;
   /** Present only when a public summon actually returned (not transport pre-summon failure). */
   readonly summoned?: PublicSummonResult;
 };
 
+/**
+ * Plain-language re-ask when the officer conclusion is not pass|bounce|escalate.
+ * Not a packaged engine handbook line (#755 exception for 读不出三态).
+ */
+export const OFFICER_CONCLUSION_REASK =
+  "上次交卷的结论不是 pass、bounce、escalate 三态之一。请重新输出，结论字段写明其一；打回或上呈的话就是给对方看的原文。" as const;
+
 /**
  * Summon + project only. Lifecycle book and host abort face live on the shared
  * submit envelope (`gatekeeper-pass-envelope.ts`, ADR 0018 / #675).
@@ -294,7 +287,7 @@ export type GatekeeperProjection = {
 export async function projectGatekeeperRun(
   options: RunGatekeeperOptions,
 ): Promise<GatekeeperProjection> {
-  const officer = options.subject.kind === "worker_completion" ? "inspector" : "notary";
+  const officer = gateOfficerForSubject(options.subject);
   const runDirectory = options.runDirectory ?? auditorRunDirectory(options.context);
   if (runDirectory === undefined) {
     return {
@@ -308,21 +301,29 @@ export async function projectGatekeeperRun(
   }
   // Pointer-only summons need a resolvable leaf: Grok session.jsonl is header-only
   // (#617 DK-4); write the in-memory tool-call candidate as a run artifact first (#632).
-  persistGateSubmissionCandidate(runDirectory, options.context);
+  // Candidate path also rides same-parent officer resume as 人读材料 (#753 / #750).
+  const submissionCandidatePath = persistGateSubmissionCandidate(
+    runDirectory,
+    options.context,
+  );
   let summoned: PublicSummonResult;
   try {
     const summon =
       options.summonOfficer
-      ?? (async (nextOfficer, sourceRunDirectory, officerSignal) => {
+      ?? (async (nextOfficer, sourceRunDirectory, officerSignal, reask) => {
         const { summonGateOfficer } = await import("./public-role-summons.ts");
         return summonGateOfficer({
           officer: nextOfficer,
           sourceRunDirectory,
           cwd: options.context.cwd ?? process.cwd(),
           ...(officerSignal === undefined ? {} : { signal: officerSignal }),
+          ...(reask === undefined ? {} : { reask }),
+          ...(submissionCandidatePath === undefined
+            ? {}
+            : { submissionCandidatePath }),
         });
       });
-    summoned = await summon(officer, runDirectory, options.signal);
+    summoned = await summon(officer, runDirectory, options.signal, options.reask);
   } catch (error) {
     return {
       officer,

package/src/host-contracts.ts

@@ -299,10 +299,10 @@ type HostEventHandler<K extends keyof HostEventMap> = (event: HostEventMap[K], c
 export type HostEventRegistration = { [K in keyof HostEventMap]: [event: K, handler: HostEventHandler<K>] }[keyof HostEventMap];
 
 type HostGatekeeperSubject = {
-  readonly kind: "worker_completion" | "judge_draft" | "countersign_verdict";
+  readonly kind: "worker_completion" | "judge_draft" | "judge_compliance" | "countersign_verdict";
 };
-/** Gatekeeper bounce/no_receipt plus other correct submission rejects share one projection map. */
-type HostGatekeeperNonPass = { readonly status: "bounce" | "no_receipt" | "unreadable" } & Record<string, unknown>;
+/** Gatekeeper bounce/escalate/no_receipt plus other correct submission rejects share one projection map. */
+type HostGatekeeperNonPass = { readonly status: "bounce" | "escalate" | "no_receipt" } & Record<string, unknown>;
 export type HostSubmissionNonPass =
   | HostGatekeeperNonPass
   | { readonly code: "coder_skill_expansion_evidence_missing" };